1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
|
#' Export key or certificate
#'
#' The `write_pem` functions exports a key or certificate to the standard
#' base64 PEM format. For private keys it is possible to set a password.
#'
#' The pkcs1 format is the old legacy format used by OpenSSH. PKCS1 does not
#' support the new ed25519 keys, for which you need `write_openssh_pem`.
#' For non-ssh clients, we recommend to simply use `write_pem` to export keys
#' and certs into the recommended formats.
#'
#' @export
#' @param x a public/private key or certificate object
#' @param password string or callback function to set password (only applicable for
#' private keys).
#' @param path file to write to. If `NULL` it returns the output as a string.
#' @rdname write_pem
write_pem <- function(x, path = NULL, password = NULL){
str <- pem_export(x, password)
if(is.null(path)) return(str)
writeLines(str, path)
invisible(path)
}
#' @export
#' @rdname write_pem
write_der <- function(x, path = NULL){
bin <- der_export(x)
if(is.null(path)) return(bin)
writeBin(unclass(bin), path)
invisible(path)
}
#' @export
#' @rdname write_pem
#' @useDynLib openssl R_pem_write_pkcs1_privkey R_pem_write_pkcs1_pubkey
write_pkcs1 <- function(x, path = NULL, password = NULL){
if(!inherits(x, c("rsa", "key")))
stop("PKCS1 pubkey format only supports RSA keys")
str <- if(inherits(x, "key"))
.Call(R_pem_write_pkcs1_privkey, x, password)
else
.Call(R_pem_write_pkcs1_pubkey, x)
if(is.null(path)) return(str)
writeLines(str, path)
invisible(path)
}
pem_export <- function(x, ...){
UseMethod("pem_export")
}
der_export <- function(x, ...){
UseMethod("der_export")
}
#' @useDynLib openssl R_pem_write_key
pem_export.key <- function(x, password, ...){
if(is.function(password))
password <- password("Enter new passphrase (or hit ENTER for no password): ")
stopifnot(is.character(password) || is.null(password))
.Call(R_pem_write_key, x, password)
}
#' @useDynLib openssl R_pem_write_pubkey
pem_export.pubkey <- function(x, ...){
.Call(R_pem_write_pubkey, x)
}
#' @useDynLib openssl R_pem_write_cert
pem_export.cert <- function(x, ...){
.Call(R_pem_write_cert, x)
}
der_export.key <- function(x, ...){
unclass(x)
}
der_export.pubkey <- function(x, ...){
unclass(x)
}
der_export.cert <- function(x, ...){
unclass(x)
}
|
