WolfSSL
/
wolfssl-examples
mirror of https://github.com/wolfSSL/wolfssl-examples.git
1
0
Fork 0
Code Issues Releases Wiki Activity

PKCS7-verify example for PKCS7 DER and PEM.

pull/441/head
aidan garske 2024-07-02 11:30:23 -07:00
parent ec737760ba
commit 2e8642ddd3
2 changed files with 31 additions and 10 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

41
pkcs7/pkcs7-verify.c
View File

@ -26,11 +26,16 @@
#ifdef HAVE_PKCS7 #ifdef HAVE_PKCS7
static const char* pkcs7SignedDer = "signed.p7b"; /* DER */
static const char* pkcs7SignedPem = "signed.p7s"; /* PEM */
int main(int argc, char** argv) int main(int argc, char** argv)
{ {
int rc = 0; int rc = 0;
PKCS7 pkcs7; PKCS7 pkcs7;
XFILE derFile; XFILE derFile;
byte* fileBuf = NULL;
word32 fileSz = 0;
byte* derBuf = NULL; byte* derBuf = NULL;
word32 derSz = 0; word32 derSz = 0;
@ -41,35 +46,50 @@ int main(int argc, char** argv)
wolfSSL_Debugging_ON(); wolfSSL_Debugging_ON();
#endif #endif
/* load DER PKCS7 */ /* load PKCS7 */
derFile = fopen("signed.p7s", "rb"); derFile = fopen(pkcs7SignedPem, "rb");
if (derFile) { if (derFile) {
fseek(derFile, 0, SEEK_END); fseek(derFile, 0, SEEK_END);
derSz = (int)ftell(derFile); fileSz = (int)ftell(derFile);
rewind(derFile); rewind(derFile);
derBuf = (byte*)XMALLOC(derSz, NULL, DYNAMIC_TYPE_TMP_BUFFER); fileBuf = (byte*)XMALLOC(fileSz, NULL, DYNAMIC_TYPE_TMP_BUFFER);
if (derBuf == NULL) { derBuf = (byte*)XMALLOC(fileSz, NULL, DYNAMIC_TYPE_TMP_BUFFER);
if (fileBuf == NULL || derBuf == NULL) {
rc = MEMORY_E; goto exit; rc = MEMORY_E; goto exit;
} }
derSz = fileSz;
rc = (int)fread(derBuf, 1, derSz, derFile); rc = (int)fread(fileBuf, 1, fileSz, derFile);
fclose(derFile); fclose(derFile);
if (rc != derSz) { if (rc != fileSz) {
printf("Failed to read der file!\n"); printf("Failed to read der file!\n");
return -1; return -1;
} }
} }
printf("Der %d\n", derSz); /* PKCS_Init captures/saves this, so make sure
WOLFSSL_BUFFER(derBuf, derSz); * isDynamic = 0 since it is on the stack */
pkcs7.isDynamic = 0;
/* Test verify */ /* Test verify */
rc = wc_PKCS7_Init(&pkcs7, NULL, INVALID_DEVID); rc = wc_PKCS7_Init(&pkcs7, NULL, INVALID_DEVID);
if (rc != 0) goto exit; if (rc != 0) goto exit;
rc = wc_PKCS7_InitWithCert(&pkcs7, NULL, 0); rc = wc_PKCS7_InitWithCert(&pkcs7, NULL, 0);
if (rc != 0) goto exit; if (rc != 0) goto exit;
/* convert PEM to DER */
rc = wc_CertPemToDer(fileBuf, fileSz, derBuf, derSz, PKCS7_TYPE);
if (rc < 0) {
goto exit;
}
derSz = rc;
rc = 0;
printf("Der %d\n", derSz);
WOLFSSL_BUFFER(derBuf, derSz);
rc = wc_PKCS7_VerifySignedData(&pkcs7, derBuf, derSz); rc = wc_PKCS7_VerifySignedData(&pkcs7, derBuf, derSz);
if (rc != 0) goto exit; if (rc != 0) goto exit;
@ -82,6 +102,7 @@ exit:
wc_PKCS7_Free(&pkcs7); wc_PKCS7_Free(&pkcs7);
XFREE(derBuf, NULL, DYNAMIC_TYPE_TMP_BUFFER); XFREE(derBuf, NULL, DYNAMIC_TYPE_TMP_BUFFER);
XFREE(fileBuf, NULL, DYNAMIC_TYPE_TMP_BUFFER);
return rc; return rc;
} }
@ -94,4 +115,4 @@ int main(int argc, char** argv)
return 0; return 0;
} }
#endif #endif

BIN
pkcs7/signed.p7s
View File

Binary file not shown.