diff options
| author | Dr. Stephen Henson <steve@openssl.org> | 2016-01-27 23:45:15 +0000 |
|---|---|---|
| committer | Dr. Stephen Henson <steve@openssl.org> | 2016-02-01 15:11:18 +0000 |
| commit | 167548061dd00cc1f2ea36b6c3113165f1b643a4 (patch) | |
| tree | b90413d7a07f0f1442370cff9bfcb5ae190c12eb /apps/ec.c | |
| parent | f6de4eb77f667e14fa6fb4024107ccd094fdc9b1 (diff) | |
add option to exclude public key from EC keys
Reviewed-by: Rich Salz <rsalz@openssl.org>
Diffstat (limited to 'apps/ec.c')
| -rw-r--r-- | apps/ec.c | 11 |
1 files changed, 10 insertions, 1 deletions
@@ -83,7 +83,8 @@ typedef enum OPTION_choice { OPT_ERR = -1, OPT_EOF = 0, OPT_HELP, OPT_INFORM, OPT_OUTFORM, OPT_ENGINE, OPT_IN, OPT_OUT, OPT_NOOUT, OPT_TEXT, OPT_PARAM_OUT, OPT_PUBIN, OPT_PUBOUT, - OPT_PASSIN, OPT_PASSOUT, OPT_PARAM_ENC, OPT_CONV_FORM, OPT_CIPHER + OPT_PASSIN, OPT_PASSOUT, OPT_PARAM_ENC, OPT_CONV_FORM, OPT_CIPHER, + OPT_NO_PUBLIC } OPTION_CHOICE; OPTIONS ec_options[] = { @@ -97,6 +98,7 @@ OPTIONS ec_options[] = { {"param_out", OPT_PARAM_OUT, '-', "Print the elliptic curve parameters"}, {"pubin", OPT_PUBIN, '-'}, {"pubout", OPT_PUBOUT, '-'}, + {"no_public", OPT_NO_PUBLIC, '-', "exclude public key from private key"}, {"passin", OPT_PASSIN, 's', "Input file pass phrase source"}, {"passout", OPT_PASSOUT, 's', "Output file pass phrase source"}, {"param_enc", OPT_PARAM_ENC, 's', @@ -122,6 +124,7 @@ int ec_main(int argc, char **argv) int asn1_flag = OPENSSL_EC_NAMED_CURVE, new_form = 0, new_asn1_flag = 0; int informat = FORMAT_PEM, outformat = FORMAT_PEM, text = 0, noout = 0; int pubin = 0, pubout = 0, param_out = 0, i, ret = 1, private = 0; + int no_public = 0; prog = opt_init(argc, argv, ec_options); while ((o = opt_next()) != OPT_EOF) { @@ -189,6 +192,9 @@ int ec_main(int argc, char **argv) new_asn1_flag = 1; asn1_flag = i; break; + case OPT_NO_PUBLIC: + no_public = 1; + break; } } argc = opt_num_rest(); @@ -236,6 +242,9 @@ int ec_main(int argc, char **argv) if (new_asn1_flag) EC_KEY_set_asn1_flag(eckey, asn1_flag); + if (no_public) + EC_KEY_set_enc_flags(eckey, EC_PKEY_NO_PUBKEY); + if (text) { assert(pubin || private); if (!EC_KEY_print(out, eckey, 0)) { |