diff options
| author | Joel Sing <jsing@cvs.openbsd.org> | 2016-12-30 17:25:49 +0000 |
|---|---|---|
| committer | Joel Sing <jsing@cvs.openbsd.org> | 2016-12-30 17:25:49 +0000 |
| commit | 53cc872c21459d4646764f35782afaa6528fb448 (patch) | |
| tree | 1d787bf30a8c34b738f0ff5c2fca09ef5b11a077 /usr.bin/openssl/s_cb.c | |
| parent | 8073943807935d58f6879367892101a33353de42 (diff) | |
Display details of the server ephemeral key, based on OpenSSL.
ok doug@
Diffstat (limited to 'usr.bin/openssl/s_cb.c')
| -rw-r--r-- | usr.bin/openssl/s_cb.c | 39 |
1 files changed, 38 insertions, 1 deletions
diff --git a/usr.bin/openssl/s_cb.c b/usr.bin/openssl/s_cb.c index ac3a0076bd1..d8ab83fb010 100644 --- a/usr.bin/openssl/s_cb.c +++ b/usr.bin/openssl/s_cb.c @@ -1,4 +1,4 @@ -/* $OpenBSD: s_cb.c,v 1.6 2015/09/10 19:08:46 jsing Exp $ */ +/* $OpenBSD: s_cb.c,v 1.7 2016/12/30 17:25:48 jsing Exp $ */ /* Copyright (C) 1995-1998 Eric Young (eay@cryptsoft.com) * All rights reserved. * @@ -285,6 +285,43 @@ set_cert_key_stuff(SSL_CTX * ctx, X509 * cert, EVP_PKEY * key) return 1; } +int +ssl_print_tmp_key(BIO *out, SSL *s) +{ + const char *cname; + EVP_PKEY *pkey; + EC_KEY *ec; + int nid; + + if (!SSL_get_server_tmp_key(s, &pkey)) + return 0; + + BIO_puts(out, "Server Temp Key: "); + switch (EVP_PKEY_id(pkey)) { + case EVP_PKEY_DH: + BIO_printf(out, "DH, %d bits\n", EVP_PKEY_bits(pkey)); + break; + + case EVP_PKEY_EC: + ec = EVP_PKEY_get1_EC_KEY(pkey); + nid = EC_GROUP_get_curve_name(EC_KEY_get0_group(ec)); + EC_KEY_free(ec); + + if ((cname = EC_curve_nid2nist(nid)) == NULL) + cname = OBJ_nid2sn(nid); + + BIO_printf(out, "ECDH, %s, %d bits\n", cname, EVP_PKEY_bits(pkey)); + break; + + default: + BIO_printf(out, "%s, %d bits\n", OBJ_nid2sn(EVP_PKEY_id(pkey)), + EVP_PKEY_bits(pkey)); + } + + EVP_PKEY_free(pkey); + return 1; +} + long bio_dump_callback(BIO * bio, int cmd, const char *argp, int argi, long argl, long ret) |