ssl/tsrc/topenssl/src/dhparam.c
changeset 0 e4d67989cc36
equal deleted inserted replaced
-1:000000000000 0:e4d67989cc36
       
     1 /* apps/dhparam.c */
       
     2 /* Copyright (C) 1995-1998 Eric Young (eay@cryptsoft.com)
       
     3  * All rights reserved.
       
     4  *
       
     5  * This package is an SSL implementation written
       
     6  * by Eric Young (eay@cryptsoft.com).
       
     7  * The implementation was written so as to conform with Netscapes SSL.
       
     8  * 
       
     9  * This library is free for commercial and non-commercial use as long as
       
    10  * the following conditions are aheared to.  The following conditions
       
    11  * apply to all code found in this distribution, be it the RC4, RSA,
       
    12  * lhash, DES, etc., code; not just the SSL code.  The SSL documentation
       
    13  * included with this distribution is covered by the same copyright terms
       
    14  * except that the holder is Tim Hudson (tjh@cryptsoft.com).
       
    15  * 
       
    16  * Copyright remains Eric Young's, and as such any Copyright notices in
       
    17  * the code are not to be removed.
       
    18  * If this package is used in a product, Eric Young should be given attribution
       
    19  * as the author of the parts of the library used.
       
    20  * This can be in the form of a textual message at program startup or
       
    21  * in documentation (online or textual) provided with the package.
       
    22  * 
       
    23  * Redistribution and use in source and binary forms, with or without
       
    24  * modification, are permitted provided that the following conditions
       
    25  * are met:
       
    26  * 1. Redistributions of source code must retain the copyright
       
    27  *    notice, this list of conditions and the following disclaimer.
       
    28  * 2. Redistributions in binary form must reproduce the above copyright
       
    29  *    notice, this list of conditions and the following disclaimer in the
       
    30  *    documentation and/or other materials provided with the distribution.
       
    31  * 3. All advertising materials mentioning features or use of this software
       
    32  *    must display the following acknowledgement:
       
    33  *    "This product includes cryptographic software written by
       
    34  *     Eric Young (eay@cryptsoft.com)"
       
    35  *    The word 'cryptographic' can be left out if the rouines from the library
       
    36  *    being used are not cryptographic related :-).
       
    37  * 4. If you include any Windows specific code (or a derivative thereof) from 
       
    38  *    the apps directory (application code) you must include an acknowledgement:
       
    39  *    "This product includes software written by Tim Hudson (tjh@cryptsoft.com)"
       
    40  * 
       
    41  * THIS SOFTWARE IS PROVIDED BY ERIC YOUNG ``AS IS'' AND
       
    42  * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
       
    43  * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
       
    44  * ARE DISCLAIMED.  IN NO EVENT SHALL THE AUTHOR OR CONTRIBUTORS BE LIABLE
       
    45  * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
       
    46  * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
       
    47  * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
       
    48  * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
       
    49  * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
       
    50  * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
       
    51  * SUCH DAMAGE.
       
    52  * 
       
    53  * The licence and distribution terms for any publically available version or
       
    54  * derivative of this code cannot be changed.  i.e. this code cannot simply be
       
    55  * copied and put under another distribution licence
       
    56  * [including the GNU Public Licence.]
       
    57  */
       
    58 /* ====================================================================
       
    59  * Copyright (c) 1998-2000 The OpenSSL Project.  All rights reserved.
       
    60  *
       
    61  * Redistribution and use in source and binary forms, with or without
       
    62  * modification, are permitted provided that the following conditions
       
    63  * are met:
       
    64  *
       
    65  * 1. Redistributions of source code must retain the above copyright
       
    66  *    notice, this list of conditions and the following disclaimer. 
       
    67  *
       
    68  * 2. Redistributions in binary form must reproduce the above copyright
       
    69  *    notice, this list of conditions and the following disclaimer in
       
    70  *    the documentation and/or other materials provided with the
       
    71  *    distribution.
       
    72  *
       
    73  * 3. All advertising materials mentioning features or use of this
       
    74  *    software must display the following acknowledgment:
       
    75  *    "This product includes software developed by the OpenSSL Project
       
    76  *    for use in the OpenSSL Toolkit. (http://www.openssl.org/)"
       
    77  *
       
    78  * 4. The names "OpenSSL Toolkit" and "OpenSSL Project" must not be used to
       
    79  *    endorse or promote products derived from this software without
       
    80  *    prior written permission. For written permission, please contact
       
    81  *    openssl-core@openssl.org.
       
    82  *
       
    83  * 5. Products derived from this software may not be called "OpenSSL"
       
    84  *    nor may "OpenSSL" appear in their names without prior written
       
    85  *    permission of the OpenSSL Project.
       
    86  *
       
    87  * 6. Redistributions of any form whatsoever must retain the following
       
    88  *    acknowledgment:
       
    89  *    "This product includes software developed by the OpenSSL Project
       
    90  *    for use in the OpenSSL Toolkit (http://www.openssl.org/)"
       
    91  *
       
    92  * THIS SOFTWARE IS PROVIDED BY THE OpenSSL PROJECT ``AS IS'' AND ANY
       
    93  * EXPRESSED OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
       
    94  * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR
       
    95  * PURPOSE ARE DISCLAIMED.  IN NO EVENT SHALL THE OpenSSL PROJECT OR
       
    96  * ITS CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL,
       
    97  * SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT
       
    98  * NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES;
       
    99  * LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
       
   100  * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT,
       
   101  * STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE)
       
   102  * ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED
       
   103  * OF THE POSSIBILITY OF SUCH DAMAGE.
       
   104  * ====================================================================
       
   105  *
       
   106  * This product includes cryptographic software written by Eric Young
       
   107  * (eay@cryptsoft.com).  This product includes software written by Tim
       
   108  * Hudson (tjh@cryptsoft.com).
       
   109  *
       
   110  */
       
   111 
       
   112 #include <openssl/opensslconf.h>	/* for OPENSSL_NO_DH */
       
   113 #ifndef OPENSSL_NO_DH
       
   114 #include <stdio.h>
       
   115 #include <stdlib.h>
       
   116 #include <time.h>
       
   117 #include <string.h>
       
   118 #include "apps.h"
       
   119 #include <openssl/bio.h>
       
   120 #include <openssl/err.h>
       
   121 #include <openssl/bn.h>
       
   122 #include <openssl/dh.h>
       
   123 #include <openssl/x509.h>
       
   124 #include <openssl/pem.h>
       
   125 
       
   126 #ifndef OPENSSL_NO_DSA
       
   127 #include <openssl/dsa.h>
       
   128 #endif
       
   129 
       
   130 #undef PROG
       
   131 #define PROG	dhparam_main
       
   132 
       
   133 #define DEFBITS	512
       
   134 
       
   135 /* -inform arg	- input format - default PEM (DER or PEM)
       
   136  * -outform arg - output format - default PEM
       
   137  * -in arg	- input file - default stdin
       
   138  * -out arg	- output file - default stdout
       
   139  * -dsaparam  - read or generate DSA parameters, convert to DH
       
   140  * -check	- check the parameters are ok
       
   141  * -noout
       
   142  * -text
       
   143  * -C
       
   144  */
       
   145 
       
   146 static int MS_CALLBACK dh_cb(int p, int n, BN_GENCB *cb);
       
   147 
       
   148 int MAIN(int, char **);
       
   149 
       
   150 int MAIN(int argc, char **argv)
       
   151 	{
       
   152 #ifndef OPENSSL_NO_ENGINE
       
   153 	ENGINE *e = NULL;
       
   154 #endif
       
   155 	DH *dh=NULL;
       
   156 	int i,badops=0,text=0;
       
   157 #ifndef OPENSSL_NO_DSA
       
   158 	int dsaparam=0;
       
   159 #endif
       
   160 	BIO *in=NULL,*out=NULL;
       
   161 	int informat,outformat,check=0,noout=0,C=0,ret=1;
       
   162 	char *infile,*outfile,*prog;
       
   163 	char *inrand=NULL;
       
   164 #ifndef OPENSSL_NO_ENGINE
       
   165 	char *engine=NULL;
       
   166 #endif
       
   167 	int num = 0, g = 0;
       
   168 
       
   169 	apps_startup();
       
   170 
       
   171 	if (bio_err == NULL)
       
   172 		if ((bio_err=BIO_new(BIO_s_file())) != NULL)
       
   173 			BIO_set_fp(bio_err,stderr,BIO_NOCLOSE|BIO_FP_TEXT);
       
   174 
       
   175 
       
   176 	if (!load_config(bio_err, NULL))
       
   177 		goto end;
       
   178 
       
   179 	infile=NULL;
       
   180 	outfile=NULL;
       
   181 	informat=FORMAT_PEM;
       
   182 	outformat=FORMAT_PEM;
       
   183 
       
   184 	prog=argv[0];
       
   185 	argc--;
       
   186 	argv++;
       
   187 	while (argc >= 1)
       
   188 		{
       
   189 		if 	(strcmp(*argv,"-inform") == 0)
       
   190 			{
       
   191 			if (--argc < 1) goto bad;
       
   192 			informat=str2fmt(*(++argv));
       
   193 			}
       
   194 		else if (strcmp(*argv,"-outform") == 0)
       
   195 			{
       
   196 			if (--argc < 1) goto bad;
       
   197 			outformat=str2fmt(*(++argv));
       
   198 			}
       
   199 		else if (strcmp(*argv,"-in") == 0)
       
   200 			{
       
   201 			if (--argc < 1) goto bad;
       
   202 			infile= *(++argv);
       
   203 			}
       
   204 		else if (strcmp(*argv,"-out") == 0)
       
   205 			{
       
   206 			if (--argc < 1) goto bad;
       
   207 			outfile= *(++argv);
       
   208 			}
       
   209 #ifndef OPENSSL_NO_ENGINE
       
   210 		else if (strcmp(*argv,"-engine") == 0)
       
   211 			{
       
   212 			if (--argc < 1) goto bad;
       
   213 			engine= *(++argv);
       
   214 			}
       
   215 #endif
       
   216 		else if (strcmp(*argv,"-check") == 0)
       
   217 			check=1;
       
   218 		else if (strcmp(*argv,"-text") == 0)
       
   219 			text=1;
       
   220 #ifndef OPENSSL_NO_DSA
       
   221 		else if (strcmp(*argv,"-dsaparam") == 0)
       
   222 			dsaparam=1;
       
   223 #endif
       
   224 		else if (strcmp(*argv,"-C") == 0)
       
   225 			C=1;
       
   226 		else if (strcmp(*argv,"-noout") == 0)
       
   227 			noout=1;
       
   228 		else if (strcmp(*argv,"-2") == 0)
       
   229 			g=2;
       
   230 		else if (strcmp(*argv,"-5") == 0)
       
   231 			g=5;
       
   232 		else if (strcmp(*argv,"-rand") == 0)
       
   233 			{
       
   234 			if (--argc < 1) goto bad;
       
   235 			inrand= *(++argv);
       
   236 			}
       
   237 		else if (((sscanf(*argv,"%d",&num) == 0) || (num <= 0)))
       
   238 			goto bad;
       
   239 		argv++;
       
   240 		argc--;
       
   241 		}
       
   242 
       
   243 	if (badops)
       
   244 		{
       
   245 bad:
       
   246 		BIO_printf(bio_err,"%s [options] [numbits]\n",prog);
       
   247 		BIO_printf(bio_err,"where options are\n");
       
   248 		BIO_printf(bio_err," -inform arg   input format - one of DER PEM\n");
       
   249 		BIO_printf(bio_err," -outform arg  output format - one of DER PEM\n");
       
   250 		BIO_printf(bio_err," -in arg       input file\n");
       
   251 		BIO_printf(bio_err," -out arg      output file\n");
       
   252 #ifndef OPENSSL_NO_DSA
       
   253 		BIO_printf(bio_err," -dsaparam     read or generate DSA parameters, convert to DH\n");
       
   254 #endif
       
   255 		BIO_printf(bio_err," -check        check the DH parameters\n");
       
   256 		BIO_printf(bio_err," -text         print a text form of the DH parameters\n");
       
   257 		BIO_printf(bio_err," -C            Output C code\n");
       
   258 		BIO_printf(bio_err," -2            generate parameters using  2 as the generator value\n");
       
   259 		BIO_printf(bio_err," -5            generate parameters using  5 as the generator value\n");
       
   260 		BIO_printf(bio_err," numbits       number of bits in to generate (default 512)\n");
       
   261 #ifndef OPENSSL_NO_ENGINE
       
   262 		BIO_printf(bio_err," -engine e     use engine e, possibly a hardware device.\n");
       
   263 #endif
       
   264 		BIO_printf(bio_err," -rand file%cfile%c...\n", LIST_SEPARATOR_CHAR, LIST_SEPARATOR_CHAR);
       
   265 		BIO_printf(bio_err,"               - load the file (or the files in the directory) into\n");
       
   266 		BIO_printf(bio_err,"               the random number generator\n");
       
   267 		BIO_printf(bio_err," -noout        no output\n");
       
   268 		goto end;
       
   269 		}
       
   270 
       
   271 	ERR_load_crypto_strings();
       
   272 
       
   273 #ifndef OPENSSL_NO_ENGINE
       
   274         e = setup_engine(bio_err, engine, 0);
       
   275 #endif
       
   276 
       
   277 	if (g && !num)
       
   278 		num = DEFBITS;
       
   279 
       
   280 #ifndef OPENSSL_NO_DSA
       
   281 	if (dsaparam)
       
   282 		{
       
   283 		if (g)
       
   284 			{
       
   285 			BIO_printf(bio_err, "generator may not be chosen for DSA parameters\n");
       
   286 			goto end;
       
   287 			}
       
   288 		}
       
   289 	else
       
   290 #endif
       
   291 		{
       
   292 		/* DH parameters */
       
   293 		if (num && !g)
       
   294 			g = 2;
       
   295 		}
       
   296 
       
   297 	if(num) {
       
   298 
       
   299 		BN_GENCB cb;
       
   300 		BN_GENCB_set(&cb, dh_cb, bio_err);
       
   301 		if (!app_RAND_load_file(NULL, bio_err, 1) && inrand == NULL)
       
   302 			{
       
   303 			BIO_printf(bio_err,"warning, not much extra random data, consider using the -rand option\n");
       
   304 			}
       
   305 		if (inrand != NULL)
       
   306 			BIO_printf(bio_err,"%ld semi-random bytes loaded\n",
       
   307 				app_RAND_load_files(inrand));
       
   308 
       
   309 #ifndef OPENSSL_NO_DSA
       
   310 		if (dsaparam)
       
   311 			{
       
   312 			DSA *dsa = DSA_new();
       
   313 			
       
   314 			BIO_printf(bio_err,"Generating DSA parameters, %d bit long prime\n",num);
       
   315 			if(!dsa || !DSA_generate_parameters_ex(dsa, num,
       
   316 						NULL, 0, NULL, NULL, &cb))
       
   317 				{
       
   318 				if(dsa) DSA_free(dsa);
       
   319 				ERR_print_errors(bio_err);
       
   320 				goto end;
       
   321 				}
       
   322 
       
   323 			dh = DSA_dup_DH(dsa);
       
   324 			DSA_free(dsa);
       
   325 			if (dh == NULL)
       
   326 				{
       
   327 				ERR_print_errors(bio_err);
       
   328 				goto end;
       
   329 				}
       
   330 			}
       
   331 		else
       
   332 #endif
       
   333 			{
       
   334 			dh = DH_new();
       
   335 			BIO_printf(bio_err,"Generating DH parameters, %d bit long safe prime, generator %d\n",num,g);
       
   336 			BIO_printf(bio_err,"This is going to take a long time\n");
       
   337 			if(!dh || !DH_generate_parameters_ex(dh, num, g, &cb))
       
   338 				{
       
   339 				if(dh) DH_free(dh);
       
   340 				ERR_print_errors(bio_err);
       
   341 				goto end;
       
   342 				}
       
   343 			}
       
   344 
       
   345 		app_RAND_write_file(NULL, bio_err);
       
   346 	} else {
       
   347 
       
   348 		in=BIO_new(BIO_s_file());
       
   349 		if (in == NULL)
       
   350 			{
       
   351 			ERR_print_errors(bio_err);
       
   352 			goto end;
       
   353 			}
       
   354 		if (infile == NULL)
       
   355 			BIO_set_fp(in,stdin,BIO_NOCLOSE);
       
   356 			
       
   357 		else
       
   358 			{
       
   359 			if (BIO_read_filename(in,infile) <= 0)
       
   360 				{
       
   361 				perror(infile);
       
   362 				goto end;
       
   363 				}
       
   364 			}
       
   365 
       
   366 		if	(informat != FORMAT_ASN1 && informat != FORMAT_PEM)
       
   367 			{
       
   368 			BIO_printf(bio_err,"bad input format specified\n");
       
   369 			goto end;
       
   370 			}
       
   371 
       
   372 #ifndef OPENSSL_NO_DSA
       
   373 		if (dsaparam)
       
   374 			{
       
   375 			DSA *dsa;
       
   376 			
       
   377 			if (informat == FORMAT_ASN1)
       
   378 				dsa=d2i_DSAparams_bio(in,NULL);
       
   379 			else /* informat == FORMAT_PEM */
       
   380 				dsa=PEM_read_bio_DSAparams(in,NULL,NULL,NULL);
       
   381 			
       
   382 			if (dsa == NULL)
       
   383 				{
       
   384 				BIO_printf(bio_err,"unable to load DSA parameters\n");
       
   385 				ERR_print_errors(bio_err);
       
   386 				goto end;
       
   387 				}
       
   388 			
       
   389 			dh = DSA_dup_DH(dsa);
       
   390 			DSA_free(dsa);
       
   391 			if (dh == NULL)
       
   392 				{
       
   393 				ERR_print_errors(bio_err);
       
   394 				goto end;
       
   395 				}
       
   396 			}
       
   397 		else
       
   398 #endif
       
   399 			{
       
   400 			if (informat == FORMAT_ASN1)
       
   401 				dh=d2i_DHparams_bio(in,NULL);
       
   402 			else /* informat == FORMAT_PEM */
       
   403 				dh=PEM_read_bio_DHparams(in,NULL,NULL,NULL);
       
   404 			
       
   405 			if (dh == NULL)
       
   406 				{
       
   407 				BIO_printf(bio_err,"unable to load DH parameters\n");
       
   408 				ERR_print_errors(bio_err);
       
   409 				goto end;
       
   410 				}
       
   411 			}
       
   412 		
       
   413 		/* dh != NULL */
       
   414 	}
       
   415 	
       
   416 	out=BIO_new(BIO_s_file());
       
   417 	if (out == NULL)
       
   418 		{
       
   419 		ERR_print_errors(bio_err);
       
   420 		goto end;
       
   421 		}
       
   422 	if (outfile == NULL)
       
   423 		{
       
   424 		BIO_set_fp(out,stdout,BIO_NOCLOSE);
       
   425 #ifdef OPENSSL_SYS_VMS
       
   426 		{
       
   427 		BIO *tmpbio = BIO_new(BIO_f_linebuffer());
       
   428 		out = BIO_push(tmpbio, out);
       
   429 		}
       
   430 #endif
       
   431 		}
       
   432 	else
       
   433 		{
       
   434 		if (BIO_write_filename(out,outfile) <= 0)
       
   435 			{
       
   436 			perror(outfile);
       
   437 			goto end;
       
   438 			}
       
   439 		}
       
   440 
       
   441 
       
   442 	if (text)
       
   443 		{
       
   444 		DHparams_print(out,dh);
       
   445 		}
       
   446 	
       
   447 	if (check)
       
   448 		{
       
   449 		if (!DH_check(dh,&i))
       
   450 			{
       
   451 			ERR_print_errors(bio_err);
       
   452 			goto end;
       
   453 			}
       
   454 
       
   455 		if (i & DH_CHECK_P_NOT_PRIME)
       
   456 			printf("p value is not prime\n");
       
   457 		if (i & DH_CHECK_P_NOT_SAFE_PRIME)
       
   458 			printf("p value is not a safe prime\n");
       
   459 		if (i & DH_UNABLE_TO_CHECK_GENERATOR)
       
   460 			printf("unable to check the generator value\n");
       
   461 		if (i & DH_NOT_SUITABLE_GENERATOR)
       
   462 			printf("the g value is not a generator\n");
       
   463 		if (i == 0)
       
   464 			printf("DH parameters appear to be ok.\n");
       
   465 
       
   466 		}
       
   467 	if (C)
       
   468 		{
       
   469 		unsigned char *data;
       
   470 		int len,l,bits;
       
   471 
       
   472 		len=BN_num_bytes(dh->p);
       
   473 		bits=BN_num_bits(dh->p);
       
   474 		data=(unsigned char *)OPENSSL_malloc(len);
       
   475 		if (data == NULL)
       
   476 			{
       
   477 			perror("OPENSSL_malloc");
       
   478 			goto end;
       
   479 			}
       
   480 		printf("#ifndef HEADER_DH_H\n"
       
   481 		       "#include <openssl/dh.h>\n"
       
   482 		       "#endif\n");
       
   483 		printf("DH *get_dh%d()\n\t{\n",bits);
       
   484 
       
   485 		l=BN_bn2bin(dh->p,data);
       
   486 		printf("\tstatic unsigned char dh%d_p[]={",bits);
       
   487 		for (i=0; i<l; i++)
       
   488 			{
       
   489 			if ((i%12) == 0) printf("\n\t\t");
       
   490 			printf("0x%02X,",data[i]);
       
   491 			}
       
   492 		printf("\n\t\t};\n");
       
   493 
       
   494 		l=BN_bn2bin(dh->g,data);
       
   495 		printf("\tstatic unsigned char dh%d_g[]={",bits);
       
   496 		for (i=0; i<l; i++)
       
   497 			{
       
   498 			if ((i%12) == 0) printf("\n\t\t");
       
   499 			printf("0x%02X,",data[i]);
       
   500 			}
       
   501 		printf("\n\t\t};\n");
       
   502 
       
   503 		printf("\tDH *dh;\n\n");
       
   504 		printf("\tif ((dh=DH_new()) == NULL) return(NULL);\n");
       
   505 		printf("\tdh->p=BN_bin2bn(dh%d_p,sizeof(dh%d_p),NULL);\n",
       
   506 			bits,bits);
       
   507 		printf("\tdh->g=BN_bin2bn(dh%d_g,sizeof(dh%d_g),NULL);\n",
       
   508 			bits,bits);
       
   509 		printf("\tif ((dh->p == NULL) || (dh->g == NULL))\n");
       
   510 		printf("\t\t{ DH_free(dh); return(NULL); }\n");
       
   511 		if (dh->length)
       
   512 			printf("\tdh->length = %ld;\n", dh->length);
       
   513 		printf("\treturn(dh);\n\t}\n");
       
   514 
       
   515 		OPENSSL_free(data);
       
   516 		}
       
   517 
       
   518 
       
   519 	if (!noout)
       
   520 		{
       
   521 		if 	(outformat == FORMAT_ASN1)
       
   522 			i=i2d_DHparams_bio(out,dh);
       
   523 		else if (outformat == FORMAT_PEM)
       
   524 			i=PEM_write_bio_DHparams(out,dh);
       
   525 		else	{
       
   526 			BIO_printf(bio_err,"bad output format specified for outfile\n");
       
   527 			goto end;
       
   528 			}
       
   529 		if (!i)
       
   530 			{
       
   531 			BIO_printf(bio_err,"unable to write DH parameters\n");
       
   532 			ERR_print_errors(bio_err);
       
   533 			goto end;
       
   534 			}
       
   535 		}
       
   536 	ret=0;
       
   537 end:
       
   538 	if (in != NULL) BIO_free(in);
       
   539 	if (out != NULL) BIO_free_all(out);
       
   540 	if (dh != NULL) DH_free(dh);
       
   541 	apps_shutdown();
       
   542 	OPENSSL_EXIT(ret);
       
   543 	}
       
   544 
       
   545 /* dh_cb is identical to dsa_cb in apps/dsaparam.c */
       
   546 static int MS_CALLBACK dh_cb(int p, int n, BN_GENCB *cb)
       
   547 	{
       
   548 	char c='*';
       
   549 
       
   550 	if (p == 0) c='.';
       
   551 	if (p == 1) c='+';
       
   552 	if (p == 2) c='*';
       
   553 	if (p == 3) c='\n';
       
   554 	BIO_write(cb->arg,&c,1);
       
   555 	(void)BIO_flush(cb->arg);
       
   556 #ifdef LINT
       
   557 	p=n;
       
   558 #endif
       
   559 	return 1;
       
   560 	}
       
   561 
       
   562 #endif