1 /*
2 * Copyright 2019-2025 The OpenSSL Project Authors. All Rights Reserved.
3 *
4 * Licensed under the Apache License 2.0 (the "License"). You may not use
5 * this file except in compliance with the License. You can obtain a copy
6 * in the file LICENSE in the source distribution or at
7 * https://www.openssl.org/source/license.html
8 */
9
10 #include <string.h>
11 #include <stdio.h>
12 #include <openssl/core.h>
13 #include <openssl/core_dispatch.h>
14 #include <openssl/core_names.h>
15 #include <openssl/err.h>
16 #include <openssl/params.h>
17 #include "prov/provider_ctx.h"
18 #include "prov/implementations.h"
19 #include "prov/names.h"
20 #include "prov/providercommon.h"
21
22 /*
23 * Forward declarations to ensure that interface functions are correctly
24 * defined.
25 */
26 static OSSL_FUNC_provider_gettable_params_fn legacy_gettable_params;
27 static OSSL_FUNC_provider_get_params_fn legacy_get_params;
28 static OSSL_FUNC_provider_query_operation_fn legacy_query;
29
30 #define ALG(NAMES, FUNC) { NAMES, "provider=legacy", FUNC }
31
32 #ifdef STATIC_LEGACY
33 OSSL_provider_init_fn ossl_legacy_provider_init;
34 # define OSSL_provider_init ossl_legacy_provider_init
35 #endif
36
37 #ifndef STATIC_LEGACY
38 /*
39 * Should these function pointers be stored in the provider side provctx?
40 * Could they ever be different from one init to the next? We assume not for
41 * now.
42 */
43
44 /* Functions provided by the core */
45 static OSSL_FUNC_core_new_error_fn *c_new_error;
46 static OSSL_FUNC_core_set_error_debug_fn *c_set_error_debug;
47 static OSSL_FUNC_core_vset_error_fn *c_vset_error;
48 static OSSL_FUNC_core_set_error_mark_fn *c_set_error_mark;
49 static OSSL_FUNC_core_clear_last_error_mark_fn *c_clear_last_error_mark;
50 static OSSL_FUNC_core_pop_error_to_mark_fn *c_pop_error_to_mark;
51 static OSSL_FUNC_core_count_to_mark_fn *c_count_to_mark;
52 #endif
53
54 /* Parameters we provide to the core */
55 static const OSSL_PARAM legacy_param_types[] = {
56 OSSL_PARAM_DEFN(OSSL_PROV_PARAM_NAME, OSSL_PARAM_UTF8_PTR, NULL, 0),
57 OSSL_PARAM_DEFN(OSSL_PROV_PARAM_VERSION, OSSL_PARAM_UTF8_PTR, NULL, 0),
58 OSSL_PARAM_DEFN(OSSL_PROV_PARAM_BUILDINFO, OSSL_PARAM_UTF8_PTR, NULL, 0),
59 OSSL_PARAM_DEFN(OSSL_PROV_PARAM_STATUS, OSSL_PARAM_INTEGER, NULL, 0),
60 OSSL_PARAM_END
61 };
62
legacy_gettable_params(void * provctx)63 static const OSSL_PARAM *legacy_gettable_params(void *provctx)
64 {
65 return legacy_param_types;
66 }
67
legacy_get_params(void * provctx,OSSL_PARAM params[])68 static int legacy_get_params(void *provctx, OSSL_PARAM params[])
69 {
70 OSSL_PARAM *p;
71
72 p = OSSL_PARAM_locate(params, OSSL_PROV_PARAM_NAME);
73 if (p != NULL && !OSSL_PARAM_set_utf8_ptr(p, "OpenSSL Legacy Provider"))
74 return 0;
75 p = OSSL_PARAM_locate(params, OSSL_PROV_PARAM_VERSION);
76 if (p != NULL && !OSSL_PARAM_set_utf8_ptr(p, OPENSSL_VERSION_STR))
77 return 0;
78 p = OSSL_PARAM_locate(params, OSSL_PROV_PARAM_BUILDINFO);
79 if (p != NULL && !OSSL_PARAM_set_utf8_ptr(p, OPENSSL_FULL_VERSION_STR))
80 return 0;
81 p = OSSL_PARAM_locate(params, OSSL_PROV_PARAM_STATUS);
82 if (p != NULL && !OSSL_PARAM_set_int(p, ossl_prov_is_running()))
83 return 0;
84 return 1;
85 }
86
87 static const OSSL_ALGORITHM legacy_digests[] = {
88 #ifndef OPENSSL_NO_MD2
89 ALG(PROV_NAMES_MD2, ossl_md2_functions),
90 #endif
91 #ifndef OPENSSL_NO_MD4
92 ALG(PROV_NAMES_MD4, ossl_md4_functions),
93 #endif
94 #ifndef OPENSSL_NO_MDC2
95 ALG(PROV_NAMES_MDC2, ossl_mdc2_functions),
96 #endif /* OPENSSL_NO_MDC2 */
97 #ifndef OPENSSL_NO_WHIRLPOOL
98 ALG(PROV_NAMES_WHIRLPOOL, ossl_wp_functions),
99 #endif /* OPENSSL_NO_WHIRLPOOL */
100 #ifndef OPENSSL_NO_RMD160
101 ALG(PROV_NAMES_RIPEMD_160, ossl_ripemd160_functions),
102 #endif /* OPENSSL_NO_RMD160 */
103 { NULL, NULL, NULL }
104 };
105
106 static const OSSL_ALGORITHM legacy_ciphers[] = {
107 #ifndef OPENSSL_NO_CAST
108 ALG(PROV_NAMES_CAST5_ECB, ossl_cast5128ecb_functions),
109 ALG(PROV_NAMES_CAST5_CBC, ossl_cast5128cbc_functions),
110 ALG(PROV_NAMES_CAST5_OFB, ossl_cast5128ofb64_functions),
111 ALG(PROV_NAMES_CAST5_CFB, ossl_cast5128cfb64_functions),
112 #endif /* OPENSSL_NO_CAST */
113 #ifndef OPENSSL_NO_BF
114 ALG(PROV_NAMES_BF_ECB, ossl_blowfish128ecb_functions),
115 ALG(PROV_NAMES_BF_CBC, ossl_blowfish128cbc_functions),
116 ALG(PROV_NAMES_BF_OFB, ossl_blowfish128ofb64_functions),
117 ALG(PROV_NAMES_BF_CFB, ossl_blowfish128cfb64_functions),
118 #endif /* OPENSSL_NO_BF */
119 #ifndef OPENSSL_NO_IDEA
120 ALG(PROV_NAMES_IDEA_ECB, ossl_idea128ecb_functions),
121 ALG(PROV_NAMES_IDEA_CBC, ossl_idea128cbc_functions),
122 ALG(PROV_NAMES_IDEA_OFB, ossl_idea128ofb64_functions),
123 ALG(PROV_NAMES_IDEA_CFB, ossl_idea128cfb64_functions),
124 #endif /* OPENSSL_NO_IDEA */
125 #ifndef OPENSSL_NO_SEED
126 ALG(PROV_NAMES_SEED_ECB, ossl_seed128ecb_functions),
127 ALG(PROV_NAMES_SEED_CBC, ossl_seed128cbc_functions),
128 ALG(PROV_NAMES_SEED_OFB, ossl_seed128ofb128_functions),
129 ALG(PROV_NAMES_SEED_CFB, ossl_seed128cfb128_functions),
130 #endif /* OPENSSL_NO_SEED */
131 #ifndef OPENSSL_NO_RC2
132 ALG(PROV_NAMES_RC2_ECB, ossl_rc2128ecb_functions),
133 ALG(PROV_NAMES_RC2_CBC, ossl_rc2128cbc_functions),
134 ALG(PROV_NAMES_RC2_40_CBC, ossl_rc240cbc_functions),
135 ALG(PROV_NAMES_RC2_64_CBC, ossl_rc264cbc_functions),
136 ALG(PROV_NAMES_RC2_CFB, ossl_rc2128cfb128_functions),
137 ALG(PROV_NAMES_RC2_OFB, ossl_rc2128ofb128_functions),
138 #endif /* OPENSSL_NO_RC2 */
139 #ifndef OPENSSL_NO_RC4
140 ALG(PROV_NAMES_RC4, ossl_rc4128_functions),
141 ALG(PROV_NAMES_RC4_40, ossl_rc440_functions),
142 # ifndef OPENSSL_NO_MD5
143 ALG(PROV_NAMES_RC4_HMAC_MD5, ossl_rc4_hmac_ossl_md5_functions),
144 # endif /* OPENSSL_NO_MD5 */
145 #endif /* OPENSSL_NO_RC4 */
146 #ifndef OPENSSL_NO_RC5
147 ALG(PROV_NAMES_RC5_ECB, ossl_rc5128ecb_functions),
148 ALG(PROV_NAMES_RC5_CBC, ossl_rc5128cbc_functions),
149 ALG(PROV_NAMES_RC5_OFB, ossl_rc5128ofb64_functions),
150 ALG(PROV_NAMES_RC5_CFB, ossl_rc5128cfb64_functions),
151 #endif /* OPENSSL_NO_RC5 */
152 #ifndef OPENSSL_NO_DES
153 ALG(PROV_NAMES_DESX_CBC, ossl_tdes_desx_cbc_functions),
154 ALG(PROV_NAMES_DES_ECB, ossl_des_ecb_functions),
155 ALG(PROV_NAMES_DES_CBC, ossl_des_cbc_functions),
156 ALG(PROV_NAMES_DES_OFB, ossl_des_ofb64_functions),
157 ALG(PROV_NAMES_DES_CFB, ossl_des_cfb64_functions),
158 ALG(PROV_NAMES_DES_CFB1, ossl_des_cfb1_functions),
159 ALG(PROV_NAMES_DES_CFB8, ossl_des_cfb8_functions),
160 #endif /* OPENSSL_NO_DES */
161 { NULL, NULL, NULL }
162 };
163
164 static const OSSL_ALGORITHM legacy_kdfs[] = {
165 ALG(PROV_NAMES_PBKDF1, ossl_kdf_pbkdf1_functions),
166 ALG(PROV_NAMES_PVKKDF, ossl_kdf_pvk_functions),
167 { NULL, NULL, NULL }
168 };
169
legacy_query(void * provctx,int operation_id,int * no_cache)170 static const OSSL_ALGORITHM *legacy_query(void *provctx, int operation_id,
171 int *no_cache)
172 {
173 *no_cache = 0;
174 switch (operation_id) {
175 case OSSL_OP_DIGEST:
176 return legacy_digests;
177 case OSSL_OP_CIPHER:
178 return legacy_ciphers;
179 case OSSL_OP_KDF:
180 return legacy_kdfs;
181 }
182 return NULL;
183 }
184
legacy_teardown(void * provctx)185 static void legacy_teardown(void *provctx)
186 {
187 OSSL_LIB_CTX_free(PROV_LIBCTX_OF(provctx));
188 ossl_prov_ctx_free(provctx);
189 }
190
191 /* Functions we provide to the core */
192 static const OSSL_DISPATCH legacy_dispatch_table[] = {
193 { OSSL_FUNC_PROVIDER_TEARDOWN, (void (*)(void))legacy_teardown },
194 { OSSL_FUNC_PROVIDER_GETTABLE_PARAMS, (void (*)(void))legacy_gettable_params },
195 { OSSL_FUNC_PROVIDER_GET_PARAMS, (void (*)(void))legacy_get_params },
196 { OSSL_FUNC_PROVIDER_QUERY_OPERATION, (void (*)(void))legacy_query },
197 OSSL_DISPATCH_END
198 };
199
OSSL_provider_init(const OSSL_CORE_HANDLE * handle,const OSSL_DISPATCH * in,const OSSL_DISPATCH ** out,void ** provctx)200 int OSSL_provider_init(const OSSL_CORE_HANDLE *handle,
201 const OSSL_DISPATCH *in,
202 const OSSL_DISPATCH **out,
203 void **provctx)
204 {
205 OSSL_LIB_CTX *libctx = NULL;
206 #ifndef STATIC_LEGACY
207 const OSSL_DISPATCH *tmp;
208 #endif
209
210 #ifndef STATIC_LEGACY
211 for (tmp = in; tmp->function_id != 0; tmp++) {
212 /*
213 * We do not support the scenario of an application linked against
214 * multiple versions of libcrypto (e.g. one static and one dynamic),
215 * but sharing a single legacy.so. We do a simple sanity check here.
216 */
217 #define set_func(c, f) if (c == NULL) c = f; else if (c != f) return 0;
218 switch (tmp->function_id) {
219 case OSSL_FUNC_CORE_NEW_ERROR:
220 set_func(c_new_error, OSSL_FUNC_core_new_error(tmp));
221 break;
222 case OSSL_FUNC_CORE_SET_ERROR_DEBUG:
223 set_func(c_set_error_debug, OSSL_FUNC_core_set_error_debug(tmp));
224 break;
225 case OSSL_FUNC_CORE_VSET_ERROR:
226 set_func(c_vset_error, OSSL_FUNC_core_vset_error(tmp));
227 break;
228 case OSSL_FUNC_CORE_SET_ERROR_MARK:
229 set_func(c_set_error_mark, OSSL_FUNC_core_set_error_mark(tmp));
230 break;
231 case OSSL_FUNC_CORE_CLEAR_LAST_ERROR_MARK:
232 set_func(c_clear_last_error_mark,
233 OSSL_FUNC_core_clear_last_error_mark(tmp));
234 break;
235 case OSSL_FUNC_CORE_POP_ERROR_TO_MARK:
236 set_func(c_pop_error_to_mark, OSSL_FUNC_core_pop_error_to_mark(tmp));
237 break;
238 case OSSL_FUNC_CORE_COUNT_TO_MARK:
239 set_func(c_count_to_mark, OSSL_FUNC_core_count_to_mark(in));
240 break;
241 }
242 }
243 #endif
244
245 if ((*provctx = ossl_prov_ctx_new()) == NULL
246 || (libctx = OSSL_LIB_CTX_new_child(handle, in)) == NULL) {
247 OSSL_LIB_CTX_free(libctx);
248 legacy_teardown(*provctx);
249 *provctx = NULL;
250 return 0;
251 }
252 ossl_prov_ctx_set0_libctx(*provctx, libctx);
253 ossl_prov_ctx_set0_handle(*provctx, handle);
254
255 *out = legacy_dispatch_table;
256
257 return 1;
258 }
259
260 #ifndef STATIC_LEGACY
261 /*
262 * Provider specific implementation of libcrypto functions in terms of
263 * upcalls.
264 */
265
266 /*
267 * For ERR functions, we pass a NULL context. This is valid to do as long
268 * as only error codes that the calling libcrypto supports are used.
269 */
ERR_new(void)270 void ERR_new(void)
271 {
272 c_new_error(NULL);
273 }
274
ERR_set_debug(const char * file,int line,const char * func)275 void ERR_set_debug(const char *file, int line, const char *func)
276 {
277 c_set_error_debug(NULL, file, line, func);
278 }
279
ERR_set_error(int lib,int reason,const char * fmt,...)280 void ERR_set_error(int lib, int reason, const char *fmt, ...)
281 {
282 va_list args;
283
284 va_start(args, fmt);
285 c_vset_error(NULL, ERR_PACK(lib, 0, reason), fmt, args);
286 va_end(args);
287 }
288
ERR_vset_error(int lib,int reason,const char * fmt,va_list args)289 void ERR_vset_error(int lib, int reason, const char *fmt, va_list args)
290 {
291 c_vset_error(NULL, ERR_PACK(lib, 0, reason), fmt, args);
292 }
293
ERR_set_mark(void)294 int ERR_set_mark(void)
295 {
296 return c_set_error_mark(NULL);
297 }
298
ERR_clear_last_mark(void)299 int ERR_clear_last_mark(void)
300 {
301 return c_clear_last_error_mark(NULL);
302 }
303
ERR_pop_to_mark(void)304 int ERR_pop_to_mark(void)
305 {
306 return c_pop_error_to_mark(NULL);
307 }
308
ERR_count_to_mark(void)309 int ERR_count_to_mark(void)
310 {
311 return c_count_to_mark != NULL ? c_count_to_mark(NULL) : 0;
312 }
313 #endif
314