1c9496f6bSchristos /*
2*4724848cSchristos * Copyright 2008-2016 The OpenSSL Project Authors. All Rights Reserved.
3*4724848cSchristos *
4*4724848cSchristos * Licensed under the OpenSSL license (the "License"). You may not use
5*4724848cSchristos * this file except in compliance with the License. You can obtain a copy
6*4724848cSchristos * in the file LICENSE in the source distribution or at
7*4724848cSchristos * https://www.openssl.org/source/license.html
8*4724848cSchristos */
9*4724848cSchristos
10*4724848cSchristos /*
11c9496f6bSchristos * S/MIME detached data encrypt example: rarely done but should the need
12c9496f6bSchristos * arise this is an example....
13c9496f6bSchristos */
14c9496f6bSchristos #include <openssl/pem.h>
15c9496f6bSchristos #include <openssl/cms.h>
16c9496f6bSchristos #include <openssl/err.h>
17c9496f6bSchristos
main(int argc,char ** argv)18c9496f6bSchristos int main(int argc, char **argv)
19c9496f6bSchristos {
20c9496f6bSchristos BIO *in = NULL, *out = NULL, *tbio = NULL, *dout = NULL;
21c9496f6bSchristos X509 *rcert = NULL;
22c9496f6bSchristos STACK_OF(X509) *recips = NULL;
23c9496f6bSchristos CMS_ContentInfo *cms = NULL;
24c9496f6bSchristos int ret = 1;
25c9496f6bSchristos
26c9496f6bSchristos int flags = CMS_STREAM | CMS_DETACHED;
27c9496f6bSchristos
28c9496f6bSchristos OpenSSL_add_all_algorithms();
29c9496f6bSchristos ERR_load_crypto_strings();
30c9496f6bSchristos
31c9496f6bSchristos /* Read in recipient certificate */
32c9496f6bSchristos tbio = BIO_new_file("signer.pem", "r");
33c9496f6bSchristos
34c9496f6bSchristos if (!tbio)
35c9496f6bSchristos goto err;
36c9496f6bSchristos
37c9496f6bSchristos rcert = PEM_read_bio_X509(tbio, NULL, 0, NULL);
38c9496f6bSchristos
39c9496f6bSchristos if (!rcert)
40c9496f6bSchristos goto err;
41c9496f6bSchristos
42c9496f6bSchristos /* Create recipient STACK and add recipient cert to it */
43c9496f6bSchristos recips = sk_X509_new_null();
44c9496f6bSchristos
45c9496f6bSchristos if (!recips || !sk_X509_push(recips, rcert))
46c9496f6bSchristos goto err;
47c9496f6bSchristos
48c9496f6bSchristos /*
49c9496f6bSchristos * sk_X509_pop_free will free up recipient STACK and its contents so set
50c9496f6bSchristos * rcert to NULL so it isn't freed up twice.
51c9496f6bSchristos */
52c9496f6bSchristos rcert = NULL;
53c9496f6bSchristos
54c9496f6bSchristos /* Open content being encrypted */
55c9496f6bSchristos
56c9496f6bSchristos in = BIO_new_file("encr.txt", "r");
57c9496f6bSchristos
58c9496f6bSchristos dout = BIO_new_file("smencr.out", "wb");
59c9496f6bSchristos
60c9496f6bSchristos if (!in)
61c9496f6bSchristos goto err;
62c9496f6bSchristos
63c9496f6bSchristos /* encrypt content */
64c9496f6bSchristos cms = CMS_encrypt(recips, in, EVP_des_ede3_cbc(), flags);
65c9496f6bSchristos
66c9496f6bSchristos if (!cms)
67c9496f6bSchristos goto err;
68c9496f6bSchristos
69c9496f6bSchristos out = BIO_new_file("smencr.pem", "w");
70c9496f6bSchristos if (!out)
71c9496f6bSchristos goto err;
72c9496f6bSchristos
73c9496f6bSchristos if (!CMS_final(cms, in, dout, flags))
74c9496f6bSchristos goto err;
75c9496f6bSchristos
76c9496f6bSchristos /* Write out CMS structure without content */
77c9496f6bSchristos if (!PEM_write_bio_CMS(out, cms))
78c9496f6bSchristos goto err;
79c9496f6bSchristos
80c9496f6bSchristos ret = 0;
81c9496f6bSchristos
82c9496f6bSchristos err:
83c9496f6bSchristos
84c9496f6bSchristos if (ret) {
85c9496f6bSchristos fprintf(stderr, "Error Encrypting Data\n");
86c9496f6bSchristos ERR_print_errors_fp(stderr);
87c9496f6bSchristos }
88c9496f6bSchristos
89c9496f6bSchristos CMS_ContentInfo_free(cms);
90c9496f6bSchristos X509_free(rcert);
91c9496f6bSchristos sk_X509_pop_free(recips, X509_free);
92c9496f6bSchristos BIO_free(in);
93c9496f6bSchristos BIO_free(out);
94c9496f6bSchristos BIO_free(dout);
95c9496f6bSchristos BIO_free(tbio);
96c9496f6bSchristos return ret;
97c9496f6bSchristos }
98