1c7da899bSchristos /*
2c7da899bSchristos * Copyright 2008-2016 The OpenSSL Project Authors. All Rights Reserved.
3c7da899bSchristos *
4*b0d17251Schristos * Licensed under the Apache License 2.0 (the "License"). You may not use
5c7da899bSchristos * this file except in compliance with the License. You can obtain a copy
6c7da899bSchristos * in the file LICENSE in the source distribution or at
7c7da899bSchristos * https://www.openssl.org/source/license.html
8c7da899bSchristos */
9c7da899bSchristos
10a89c9211Schristos /* Simple S/MIME encrypt example */
11a89c9211Schristos #include <openssl/pem.h>
12a89c9211Schristos #include <openssl/cms.h>
13a89c9211Schristos #include <openssl/err.h>
14a89c9211Schristos
main(int argc,char ** argv)15a89c9211Schristos int main(int argc, char **argv)
16a89c9211Schristos {
17a89c9211Schristos BIO *in = NULL, *out = NULL, *tbio = NULL;
18a89c9211Schristos X509 *rcert = NULL;
19a89c9211Schristos STACK_OF(X509) *recips = NULL;
20a89c9211Schristos CMS_ContentInfo *cms = NULL;
21a89c9211Schristos int ret = 1;
22a89c9211Schristos
23a89c9211Schristos /*
244e3dcb23Sspz * On OpenSSL 1.0.0 and later only:
25a89c9211Schristos * for streaming set CMS_STREAM
26a89c9211Schristos */
27a89c9211Schristos int flags = CMS_STREAM;
28a89c9211Schristos
29a89c9211Schristos OpenSSL_add_all_algorithms();
30a89c9211Schristos ERR_load_crypto_strings();
31a89c9211Schristos
32a89c9211Schristos /* Read in recipient certificate */
33a89c9211Schristos tbio = BIO_new_file("signer.pem", "r");
34a89c9211Schristos
35a89c9211Schristos if (!tbio)
36a89c9211Schristos goto err;
37a89c9211Schristos
38a89c9211Schristos rcert = PEM_read_bio_X509(tbio, NULL, 0, NULL);
39a89c9211Schristos
40a89c9211Schristos if (!rcert)
41a89c9211Schristos goto err;
42a89c9211Schristos
43a89c9211Schristos /* Create recipient STACK and add recipient cert to it */
44a89c9211Schristos recips = sk_X509_new_null();
45a89c9211Schristos
46a89c9211Schristos if (!recips || !sk_X509_push(recips, rcert))
47a89c9211Schristos goto err;
48a89c9211Schristos
49635165faSspz /*
50635165faSspz * sk_X509_pop_free will free up recipient STACK and its contents so set
51635165faSspz * rcert to NULL so it isn't freed up twice.
52a89c9211Schristos */
53a89c9211Schristos rcert = NULL;
54a89c9211Schristos
55a89c9211Schristos /* Open content being encrypted */
56a89c9211Schristos
57a89c9211Schristos in = BIO_new_file("encr.txt", "r");
58a89c9211Schristos
59a89c9211Schristos if (!in)
60a89c9211Schristos goto err;
61a89c9211Schristos
62a89c9211Schristos /* encrypt content */
63a89c9211Schristos cms = CMS_encrypt(recips, in, EVP_des_ede3_cbc(), flags);
64a89c9211Schristos
65a89c9211Schristos if (!cms)
66a89c9211Schristos goto err;
67a89c9211Schristos
68a89c9211Schristos out = BIO_new_file("smencr.txt", "w");
69a89c9211Schristos if (!out)
70a89c9211Schristos goto err;
71a89c9211Schristos
72a89c9211Schristos /* Write out S/MIME message */
73a89c9211Schristos if (!SMIME_write_CMS(out, cms, in, flags))
74a89c9211Schristos goto err;
75a89c9211Schristos
76a89c9211Schristos ret = 0;
77a89c9211Schristos
78a89c9211Schristos err:
79a89c9211Schristos
80635165faSspz if (ret) {
81a89c9211Schristos fprintf(stderr, "Error Encrypting Data\n");
82a89c9211Schristos ERR_print_errors_fp(stderr);
83a89c9211Schristos }
84a89c9211Schristos
85a89c9211Schristos CMS_ContentInfo_free(cms);
86a89c9211Schristos X509_free(rcert);
87a89c9211Schristos sk_X509_pop_free(recips, X509_free);
88a89c9211Schristos BIO_free(in);
89a89c9211Schristos BIO_free(out);
90a89c9211Schristos BIO_free(tbio);
91a89c9211Schristos return ret;
92a89c9211Schristos }
93