#!/usr/bin/perl
# Copyright (C) 2003 Andrew Loree
# $Id: key2crt.pl,v 1.2 2003/10/07 12:34:41 andy Exp $
############################################################################
#
# key2crt.pl - Converts IIS 4 format SSL files to x509 DER public keys (.crt)
#              and RSA private keys (.pem) REQUIRES OPENSSL to be installed
#              and within the PATH on Windows machines
#
############################################################################
#
#  This program is free software; you can redistribute it and/or
#  modify it under the terms of the GNU General Public License
#  as published by the Free Software Foundation; either version 2
#  of the License, or (at your option) any later version.
#
#  This program is distributed in the hope that it will be useful,
#  but WITHOUT ANY WARRANTY; without even the implied warranty of
#  MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
#  GNU General Public License for more details.
#
#  You should have received a copy of the GNU General Public License
#  along with this program; if not, write to the Free Software
#  Foundation, Inc., 59 Temple Place - Suite 330, Boston, MA  02111-1307, USA.
#
#############################################################################
# Version History:
#   1.0  - Initial Release
#   1.1  - Added Private key extraction...you will be prompted for a phase
#          if necessary.
#############################################################################
use File::Basename qw(basename);
use File::stat;        # for tell

my $program = basename($0);
my $version = "1.0";

use strict;
use FileHandle;
use File::stat;
use File::Spec;


my $argc = @ARGV;
my $i;
my $filename;
my $in;
my $out;
my $buffer;

if($argc == 0){
	usage();
}
for($i = 0; $i < $argc; $i++){
	# Get previous last_modified date/time
	$filename = $ARGV[$i];

	print "$filename...";
	$in = new FileHandle;
	if ($in->open("< " . $filename)){
		binmode $in;
		read $in, $buffer,1000000;	# Read in all of the file
		my $size = length $buffer;
		$in->close;
		
		if ($buffer =~ /(\x30\x82.{3,8}certificate0.*)/s) {
			my $public_buffer = $1;
			$out = new FileHandle;
			$out->open("> " . $filename . ".tmp");
			binmode $out;
			syswrite $out, $public_buffer, length $public_buffer;
			$out->close;

			print "openssl...";

			my $newfilename = $filename;
			$newfilename =~ s/\.key/\.crt/i;

			my $ret = system("openssl x509 -inform NET -in " . $filename
							. ".tmp -out "  . $newfilename);
			if ($ret != 0) {
				print "ERROR DURING CONVERSION\n";
			}
			else{
				print "Complete\n";
				# remove temp file
				unlink $filename . ".tmp";
			}
		}
		else{
			print "PUBLIC CERTIFICATE NOT FOUND\n";
		}


		if ($buffer =~ /(\x30\x82.{3,8}private-key0.*)/s) {
			my $private_buffer = $1;
			$out = new FileHandle;
			$out->open("> " . $filename . ".tmp");
			binmode $out;
			syswrite $out, $private_buffer, length $private_buffer;
			$out->close;

			print "openssl...";

			my $newfilename = $filename;
			$newfilename =~ s/\.key/\.pem/i;

			my $ret = system("openssl rsa -inform NET -in " . $filename
							. ".tmp -out "  . $newfilename);
			if ($ret != 0) {
				print "ERROR DURING CONVERSION\n";
			}
			else{
				print "Complete\n";
				# remove temp file
				unlink $filename . ".tmp";
			}
		}
		else{
			print "PRIVATE CERTIFICATE NOT FOUND\n";
		}
	}
	else{
		print "ERROR OPENING THE FILE\n";
	}
}


sub usage {

    print STDERR <<END_OF_USAGE;

NAME
     $program -- Converts IIS 4 format SSL files to x509 DER public keys
                 and RSA private keys REQUIRES OPENSSL to be installed
                 and within the PATH on Windows machines

USAGE
     $program file1 file2 ...

DESCRIPTION
     file   IIS 4 SSL files to convert

VERSION
    $version

END_OF_USAGE

    exit 0;
}