abc/GmSSL
1
0
Fork 0
mirror of https://github.com/guanzhi/GmSSL.git synced 2026-08-06 11:53:39 +08:00
Code Issues Packages Projects Releases Wiki Activity

Update CLI -pass option

Browse Source
This commit is contained in:
Zhi Guan
2026-06-26 14:23:08 +08:00
parent d804ea4e9b
commit e43f9e306d
36 changed files with 602 additions and 115 deletions
Download Patch File Download Diff File Expand all files Collapse all files

13
tools/sm9sign.c
View File

@@ -14,15 +14,16 @@
#include <gmssl/mem.h>
#include <gmssl/sm9.h>
#include <gmssl/error.h>
#include "passwd.h"
static const char *usage = "-key pem -pass str [-in file] [-out file]";
static const char *usage = "-key pem [-pass str] [-in file] [-out file]";
static const char *options =
"Options\n"
"\n"
" -key pem Signing private key file in PEM format\n"
" -pass str Password to open the private key\n"
" -pass str Password to open the private key, prompt if not given\n"
" -in file | stdin To be signed file or data\n"
" -out file | stdout Output signature in binary DER encoding\n"
"\n"
@@ -42,6 +43,7 @@ int sm9sign_main(int argc, char **argv)
char *infile = NULL;
char *keyfile = NULL;
char *pass = NULL;
char passbuf[GMSSL_PASSWORD_MAX_SIZE] = {0};
char *outfile = NULL;
FILE *infp = stdin;
FILE *keyfp = NULL;
@@ -100,10 +102,14 @@ bad:
argv++;
}
if (!keyfile || !pass) {
if (!keyfile) {
error_print();
goto end;
}
if (gmssl_tool_get_password(prog, "Password to open private key", keyfile, &pass,
passbuf, sizeof(passbuf)) != 1) {
goto end;
}
if (sm9_sign_key_info_decrypt_from_pem(&key, pass, keyfp) != 1) {
error_print();
@@ -142,6 +148,7 @@ end:
gmssl_secure_clear(&key, sizeof(key));
gmssl_secure_clear(&ctx, sizeof(ctx));
gmssl_secure_clear(buf, sizeof(buf));
gmssl_secure_clear(passbuf, sizeof(passbuf));
if (infile && infp) fclose(infp);
if (outfile && outfp) fclose(outfp);
return ret;