1 /*
2 * Copyright 1995-2021 The OpenSSL Project Authors. All Rights Reserved.
3 *
4 * Licensed under the Apache License 2.0 (the "License"). You may not use
5 * this file except in compliance with the License. You can obtain a copy
6 * in the file LICENSE in the source distribution or at
7 * https://www.openssl.org/source/license.html
8 */
9
10 #include "apps.h"
11 #include <openssl/bio.h>
12 #include <openssl/err.h>
13 #include <openssl/rand.h>
14 #include <openssl/conf.h>
15
16 static char *save_rand_file;
STACK_OF(OPENSSL_STRING)17 static STACK_OF(OPENSSL_STRING) *randfiles;
18
19 void app_RAND_load_conf(CONF *c, const char *section)
20 {
21 const char *randfile = NCONF_get_string(c, section, "RANDFILE");
22
23 if (randfile == NULL) {
24 ERR_clear_error();
25 return;
26 }
27 if (RAND_load_file(randfile, -1) < 0) {
28 BIO_printf(bio_err, "Can't load %s into RNG\n", randfile);
29 ERR_print_errors(bio_err);
30 }
31 if (save_rand_file == NULL) {
32 save_rand_file = OPENSSL_strdup(randfile);
33 /* If some internal memory errors have occurred */
34 if (save_rand_file == NULL) {
35 BIO_printf(bio_err, "Can't duplicate %s\n", randfile);
36 ERR_print_errors(bio_err);
37 }
38 }
39 }
40
loadfiles(char * name)41 static int loadfiles(char *name)
42 {
43 char *p;
44 int last, ret = 1;
45
46 for ( ; ; ) {
47 last = 0;
48 for (p = name; *p != '\0' && *p != LIST_SEPARATOR_CHAR; p++)
49 continue;
50 if (*p == '\0')
51 last = 1;
52 *p = '\0';
53 if (RAND_load_file(name, -1) < 0) {
54 BIO_printf(bio_err, "Can't load %s into RNG\n", name);
55 ERR_print_errors(bio_err);
56 ret = 0;
57 }
58 if (last)
59 break;
60 name = p + 1;
61 if (*name == '\0')
62 break;
63 }
64 return ret;
65 }
66
app_RAND_load(void)67 int app_RAND_load(void)
68 {
69 char *p;
70 int i, ret = 1;
71
72 for (i = 0; i < sk_OPENSSL_STRING_num(randfiles); i++) {
73 p = sk_OPENSSL_STRING_value(randfiles, i);
74 if (!loadfiles(p))
75 ret = 0;
76 }
77 sk_OPENSSL_STRING_free(randfiles);
78 return ret;
79 }
80
app_RAND_write(void)81 int app_RAND_write(void)
82 {
83 int ret = 1;
84
85 if (save_rand_file == NULL)
86 return 1;
87 if (RAND_write_file(save_rand_file) == -1) {
88 BIO_printf(bio_err, "Cannot write random bytes:\n");
89 ERR_print_errors(bio_err);
90 ret = 0;
91 }
92 OPENSSL_free(save_rand_file);
93 save_rand_file = NULL;
94 return ret;
95 }
96
97
98 /*
99 * See comments in opt_verify for explanation of this.
100 */
101 enum r_range { OPT_R_ENUM };
102
opt_rand(int opt)103 int opt_rand(int opt)
104 {
105 switch ((enum r_range)opt) {
106 case OPT_R__FIRST:
107 case OPT_R__LAST:
108 break;
109 case OPT_R_RAND:
110 if (randfiles == NULL
111 && (randfiles = sk_OPENSSL_STRING_new_null()) == NULL)
112 return 0;
113 if (!sk_OPENSSL_STRING_push(randfiles, opt_arg()))
114 return 0;
115 break;
116 case OPT_R_WRITERAND:
117 OPENSSL_free(save_rand_file);
118 save_rand_file = OPENSSL_strdup(opt_arg());
119 if (save_rand_file == NULL)
120 return 0;
121 break;
122 }
123 return 1;
124 }
125