abc/GmSSL
1
0
Fork 0
mirror of https://github.com/guanzhi/GmSSL.git synced 2026-05-06 16:36:16 +08:00
Code Issues Packages Projects Releases Wiki Activity

update

Browse Source
This commit is contained in:
Zhi Guan
2021-09-10 11:29:16 +08:00
parent ae001fbf15
commit bcad2eb8dd
175 changed files with 5701 additions and 8583 deletions
Download Patch File Download Diff File Expand all files Collapse all files

163
tools/sm2verify.c
View File

@@ -1,49 +1,17 @@
/*
* Copyright (c) 2021 - 2021 The GmSSL Project. All rights reserved.
/*
* Copyright 2014-2021 The GmSSL Project Authors. All Rights Reserved.
*
* Redistribution and use in source and binary forms, with or without
* modification, are permitted provided that the following conditions
* are met:
* Licensed under the Apache License, Version 2.0 (the "License");
* you may not use this file except in compliance with the License.
* You may obtain a copy of the License at
*
* 1. Redistributions of source code must retain the above copyright
* notice, this list of conditions and the following disclaimer.
* http://www.apache.org/licenses/LICENSE-2.0
*
* 2. Redistributions in binary form must reproduce the above copyright
* notice, this list of conditions and the following disclaimer in
* the documentation and/or other materials provided with the
* distribution.
*
* 3. All advertising materials mentioning features or use of this
* software must display the following acknowledgment:
* "This product includes software developed by the GmSSL Project.
* (http://gmssl.org/)"
*
* 4. The name "GmSSL Project" must not be used to endorse or promote
* products derived from this software without prior written
* permission. For written permission, please contact
* guanzhi1980@gmail.com.
*
* 5. Products derived from this software may not be called "GmSSL"
* nor may "GmSSL" appear in their names without prior written
* permission of the GmSSL Project.
*
* 6. Redistributions of any form whatsoever must retain the following
* acknowledgment:
* "This product includes software developed by the GmSSL Project
* (http://gmssl.org/)"
*
* THIS SOFTWARE IS PROVIDED BY THE GmSSL PROJECT ``AS IS'' AND ANY
* EXPRESSED OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
* IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR
* PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE GmSSL PROJECT OR
* ITS CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL,
* SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT
* NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES;
* LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
* HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT,
* STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE)
* ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED
* OF THE POSSIBILITY OF SUCH DAMAGE.
* Unless required by applicable law or agreed to in writing, software
* distributed under the License is distributed on an "AS IS" BASIS,
* WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
* See the License for the specific language governing permissions and
* limitations under the License.
*/
#include <stdio.h>
@@ -58,83 +26,78 @@
#include <gmssl/error.h>
// sm2verify [-in file] {-pubkey pem | -cert pem} [-id str] -sig file
int main(int argc, char **argv)
{
int ret;
char *prog = argv[0];
const char *sig_hex = NULL;
const char *id = SM2_DEFAULT_ID;
const char *keyfile = NULL;
const char *certfile = NULL;
FILE *keyfp = NULL;
char *id = SM2_DEFAULT_ID;
char *pubkeyfile = NULL;
char *certfile = NULL;
char *infile = NULL;
char *sigfile = NULL;
FILE *pubkeyfp = NULL;
FILE *certfp = NULL;
X509_CERTIFICATE cert;
FILE *infp = stdin;
FILE *sigfp = NULL;
SM2_KEY key;
X509_CERTIFICATE cert;
SM2_SIGN_CTX verify_ctx;
uint8_t buf[4096];
ssize_t len;
uint8_t sig[SM2_MAX_SIGNATURE_SIZE];
size_t siglen;
if (argc < 2) {
bad:
fprintf(stderr, "%s : error options\n", prog);
help:
fprintf(stderr, "usage:\n");
fprintf(stderr, " %s -sig hex -pubkey key.pem [-id str] < file\n", prog);
fprintf(stderr, " %s -sig hex -cert cert.pem [-id str] < file\n", prog);
fprintf(stderr, "\n");
return 1;
}
argc--;
argv++;
while (argc > 1) {
if (!strcmp(*argv, "-help")) {
goto help;
} else if (!strcmp(*argv, "-id")) {
if (--argc < 1) goto bad;
id = *(++argv);
help:
fprintf(stderr, "usage: %s {-pubkey pem | -cert pem} [-id str] [-in file] -sig file\n", prog);
return -1;
} else if (!strcmp(*argv, "-pubkey")) {
if (--argc < 1) goto bad;
keyfile = *(++argv);
} else if (!strcmp(*argv, "-sig")) {
if (--argc < 1) goto bad;
sig_hex = *(++argv);
pubkeyfile = *(++argv);
} else if (!strcmp(*argv, "-cert")) {
if (--argc < 1) goto bad;
certfile = *(++argv);
} else if (!strcmp(*argv, "-id")) {
if (--argc < 1) goto bad;
id = *(++argv);
} else if (!strcmp(*argv, "-in")) {
if (--argc < 1) goto bad;
infile = *(++argv);
} else if (!strcmp(*argv, "-sig")) {
if (--argc < 1) goto bad;
sigfile = *(++argv);
} else {
goto help;
}
argc--;
argv++;
}
if (!sig_hex || (!keyfile && !certfile) || (keyfile && certfile)) {
error_print();
return -1;
}
if (strlen(sig_hex) > SM2_MAX_SIGNATURE_SIZE * 2 || strlen(sig_hex) % 2) {
error_print();
return -1;
}
if (hex2bin(sig_hex, strlen(sig_hex), sig) != 1) {
error_print();
return -1;
}
siglen = strlen(sig_hex)/2;
if (keyfile) {
if (!(keyfp = fopen(keyfile, "r"))) {
if (pubkeyfile) {
if (!(pubkeyfp = fopen(pubkeyfile, "r"))) {
error_print();
return -1;
}
if (sm2_public_key_info_from_pem(&key, keyfp) != 1) {
if (sm2_public_key_info_from_pem(&key, pubkeyfp) != 1) {
error_print();
return -1;
}
} else {
} else if (certfile) {
if (!(certfp = fopen(certfile, "r"))) {
error_print();
return -1;
@@ -147,18 +110,46 @@ help:
error_print();
return -1;
}
} else {
fprintf(stderr, "%s: '-pubkey' or '-cert' option required\n", prog);
goto help;
}
if (infile) {
if (!(infp = fopen(infile, "r"))) {
error_print();
return -1;
}
}
if (!sigfile) {
error_print();
goto help;
}
if (!(sigfp = fopen(sigfile, "rb"))) {
error_print();
return -1;
}
if ((siglen = fread(sig, 1, sizeof(sig), sigfp)) <= 0) {
error_print();
return -1;
}
sm2_verify_init(&verify_ctx, &key, id);
while ((len = read(STDIN_FILENO, buf, sizeof(buf))) > 0) {
while ((len = fread(buf, 1, sizeof(buf), infp)) > 0) {
sm2_verify_update(&verify_ctx, buf, len);
}
if ((ret = sm2_verify_finish(&verify_ctx, sig, siglen)) < 0) {
error_print();
return -1;
}
fprintf(stdout, "verify : %s\n", ret == 1 ? "success" : "failure");
return ret == 1 ? 0 : -1;
return 1;
bad:
fprintf(stderr, "%s: '%s' option value required\n", prog, *argv);
return -1;
}