--- name: "libressl-UI_new" section: "3" platform: "linux" package: "libressl" version: "4.4.0-1" release: "Arch Linux 2026-11-01" platforms: ["linux"] url: "https://new.carta.tech/libressl-UI_new" --- # libressl-UI\_new(3) New User Interface ## NAME **UI\_new**, **UI\_new\_method**, **UI\_free**, **UI\_add\_input\_string**, **UI\_dup\_input\_string**, **UI\_add\_verify\_string**, **UI\_dup\_verify\_string**, **UI\_add\_input\_boolean**, **UI\_dup\_input\_boolean**, **UI\_add\_info\_string**, **UI\_dup\_info\_string**, **UI\_add\_error\_string**, **UI\_dup\_error\_string**, **UI\_construct\_prompt**, **UI\_add\_user\_data**, **UI\_get0\_user\_data**, **UI\_get0\_result**, **UI\_process**, **UI\_ctrl**, **UI\_set\_default\_method**, **UI\_get\_default\_method**, **UI\_get\_method**, **UI\_set\_method**, **UI\_OpenSSL**, **UI\_null** – New User Interface ## SYNOPSIS Crypto Library (libcrypto, -lcrypto) **#include \** *UI* *\**\ **UI\_new**(*void*); *UI* *\**\ **UI\_new\_method**(*const UI\_METHOD \*method*); *void*\ **UI\_free**(*UI \*ui*); *int*\ **UI\_add\_input\_string**(*UI \*ui*, *const char \*prompt*, *int flags*, *char \*result\_buf*, *int minsize*, *int maxsize*); *int*\ **UI\_dup\_input\_string**(*UI \*ui*, *const char \*prompt*, *int flags*, *char \*result\_buf*, *int minsize*, *int maxsize*); *int*\ **UI\_add\_verify\_string**(*UI \*ui*, *const char \*prompt*, *int flags*, *char \*result\_buf*, *int minsize*, *int maxsize*, *const char \*test\_buf*); *int*\ **UI\_dup\_verify\_string**(*UI \*ui*, *const char \*prompt*, *int flags*, *char \*result\_buf*, *int minsize*, *int maxsize*, *const char \*test\_buf*); *int*\ **UI\_add\_input\_boolean**(*UI \*ui*, *const char \*prompt*, *const char \*action\_desc*, *const char \*ok\_chars*, *const char \*cancel\_chars*, *int flags*, *char \*result\_buf*); *int*\ **UI\_dup\_input\_boolean**(*UI \*ui*, *const char \*prompt*, *const char \*action\_desc*, *const char \*ok\_chars*, *const char \*cancel\_chars*, *int flags*, *char \*result\_buf*); *int*\ **UI\_add\_info\_string**(*UI \*ui*, *const char \*text*); *int*\ **UI\_dup\_info\_string**(*UI \*ui*, *const char \*text*); *int*\ **UI\_add\_error\_string**(*UI \*ui*, *const char \*text*); *int*\ **UI\_dup\_error\_string**(*UI \*ui*, *const char \*text*); **/\* These are the possible flags. They can be OR'ed together. \*/** **#define UI\_INPUT\_FLAG\_ECHO 0x01** **#define UI\_INPUT\_FLAG\_DEFAULT\_PWD 0x02** *char* *\**\ **UI\_construct\_prompt**(*UI \*ui\_method*, *const char \*object\_desc*, *const char \*object\_name*); *void* *\**\ **UI\_add\_user\_data**(*UI \*ui*, *void \*user\_data*); *void* *\**\ **UI\_get0\_user\_data**(*UI \*ui*); *const* *char* *\**\ **UI\_get0\_result**(*UI \*ui*, *int i*); *int*\ **UI\_process**(*UI \*ui*); *int*\ **UI\_ctrl**(*UI \*ui*, *int cmd*, *long i*, *void \*p*, *void (\*f)()*); **#define UI\_CTRL\_PRINT\_ERRORS 1** **#define UI\_CTRL\_IS\_REDOABLE 2** *void*\ **UI\_set\_default\_method**(*const UI\_METHOD \*meth*); *const* *UI\_METHOD* *\**\ **UI\_get\_default\_method**(*void*); *const* *UI\_METHOD* *\**\ **UI\_get\_method**(*UI \*ui*); *const* *UI\_METHOD* *\**\ **UI\_set\_method**(*UI \*ui*, *const UI\_METHOD \*meth*); *const* *UI\_METHOD* *\**\ **UI\_OpenSSL**(*void*); *const* *UI\_METHOD* *\**\ **UI\_null**(*void*); ## DESCRIPTION UI stands for User Interface, and is a general purpose set of routines to prompt the user for text-based information. Through user-written methods (see UI\_create\_method(3)), prompting can be done in any way imaginable, be it plain text prompting, through dialog boxes or from a cell phone. All the functions work through a context of the type *UI*. This context contains all the information needed to prompt correctly as well as a reference to a *UI\_METHOD*, which is an ordered vector of functions that carry out the actual prompting. The first thing to do is to create a *UI* with **UI\_new**() or **UI\_new\_method**(), then add information to it with the **UI\_add\_\***() or **UI\_dup\_\***() functions. Also, user-defined random data can be passed down to the underlying method through calls to **UI\_add\_user\_data**(). The default UI method doesn't care about these data, but other methods might. Finally, use **UI\_process**() to actually perform the prompting and **UI\_get0\_result**() to find the result to the prompt. A *UI* can contain more than one prompt, which are performed in the given sequence. Each prompt gets an index number which is returned by the **UI\_add\_\***() and **UI\_dup\_\***() functions, and has to be used to get the corresponding result with **UI\_get0\_result**(). The functions are as follows: **UI\_new**() creates a new *UI* using the default UI method. When done with this UI, it should be freed using **UI\_free**(). **UI\_new\_method**() creates a new *UI* using the given UI method. When done with this UI, it should be freed using **UI\_free**(). **UI\_OpenSSL**() returns the built-in UI method (note: not necessarily the default one, since the default can be changed. See further on). This method is the most machine/OS dependent part of OpenSSL and normally generates the most problems when porting. **UI\_null**() returns a UI method that does nothing. Its use is to avoid getting internal defaults for passed *UI\_METHOD* pointers. **UI\_free**() removes *ui* from memory, along with all other pieces of memory that are connected to it, like duplicated input strings, results and others. If *ui* is a NULL pointer, no action occurs. **UI\_add\_input\_string**() and **UI\_add\_verify\_string**() add a prompt to *ui*, as well as flags and a result buffer and the desired minimum and maximum sizes of the result, not counting the final NUL character. The given information is used to prompt for information, for example a password, and to verify a password (i.e. having the user enter it twice and check that the same string was entered twice). **UI\_add\_verify\_string**() takes an extra argument that should be a pointer to the result buffer of the input string that it's supposed to verify, or verification will fail. **UI\_add\_input\_boolean**() adds a prompt to *ui* that's supposed to be answered in a boolean way, with a single character for yes and a different character for no. A set of characters that can be used to cancel the prompt is given as well. The prompt itself is really divided in two, one part being the descriptive text (given through the *prompt* argument) and one describing the possible answers (given through the *action\_desc* argument). **UI\_add\_info\_string**() and **UI\_add\_error\_string**() add strings that are shown at the same time as the prompt for extra information or to show an error string. The difference between the two is only conceptual. With the builtin method, there's no technical difference between them. Other methods may make a difference between them, however. The flags currently supported are UI\_INPUT\_FLAG\_ECHO, which is relevant for **UI\_add\_input\_string**() and will have the users response be echoed (when prompting for a password, this flag should obviously not be used), and UI\_INPUT\_FLAG\_DEFAULT\_PWD, which means that a default password of some sort will be used (completely depending on the application and the UI method). **UI\_dup\_input\_string**(), **UI\_dup\_verify\_string**(), **UI\_dup\_input\_boolean**(), **UI\_dup\_info\_string**(), and **UI\_dup\_error\_string**() are basically the same as their **UI\_add\_\***() counterparts, except that they make their own copies of all strings. **UI\_construct\_prompt**() is a helper function that can be used to create a prompt from two pieces of information: a description and a name. The default constructor (if there is none provided by the method used) creates a string "Enter *description* for *name*:". With the description "pass phrase" and the file name "foo.key", that becomes "Enter pass phrase for foo.key:". Other methods may create whatever string and may include encodings that will be processed by the other method functions. **UI\_add\_user\_data**() adds a user data pointer for the method to use at any time. The builtin UI method doesn't care about this info. Note that several calls to this function doesn't add data - the previous blob is replaced with the one given as argument. **UI\_get0\_user\_data**() retrieves the data that has last been given to the *ui* with **UI\_add\_user\_data**(). **UI\_get0\_result**() returns a pointer to the result buffer associated with the information indexed by *i*. **UI\_process**() goes through the information given so far, does all the printing and prompting and returns the final status, which is -2 on out-of-band events (Interrupt, Cancel, ...), -1 on error, or 0 on success. **UI\_ctrl**() adds extra control for the application author. For now, it understands two commands: UI\_CTRL\_PRINT\_ERRORS, which makes **UI\_process**() print the OpenSSL error stack as part of processing the *ui*, and UI\_CTRL\_IS\_REDOABLE, which returns a flag saying if the used *ui* can be used again or not. **UI\_set\_default\_method**() changes the default UI method to the one given. This function is not thread-safe and should not be called at the same time as other OpenSSL functions. **UI\_get\_default\_method**() returns a pointer to the current default UI method. **UI\_get\_method**() returns the UI method associated with a given *ui*. **UI\_set\_method**() changes the UI method associated with a given *ui*. ## RETURN VALUES **UI\_new**() and **UI\_new\_method**() return a valid *UI* structure or NULL if an error occurred. **UI\_add\_input\_string**(), **UI\_dup\_input\_string**(), **UI\_add\_verify\_string**(), **UI\_dup\_verify\_string**(), **UI\_add\_input\_boolean**(), **UI\_dup\_input\_boolean**(), **UI\_add\_info\_string**(), **UI\_dup\_info\_string**(), **UI\_add\_error\_string**(), and **UI\_dup\_error\_string**() return a positive number on success or a number less than or equal to zero otherwise. **UI\_construct\_prompt**() and **UI\_get0\_result**() return a string or NULL if an error occurred. **UI\_add\_user\_data**() and **UI\_get0\_user\_data**() return a pointer to the user data that was contained in *ui* before the call. In particular, NULL is a valid return value. **UI\_process**() returns 0 on success or a negative value on error. **UI\_ctrl**() returns a mask on success or -1 on error. **UI\_get\_default\_method**(), **UI\_OpenSSL**() and **UI\_null**() always return a pointer to a valid *UI\_METHOD* structure. **UI\_get\_method**() and **UI\_set\_method**() return a pointer to the *UI\_METHOD* structure that is installed in *ui* after the call. The OpenSSL documentation says that they can fail and return NULL, but currently, this can only happen when and after **UI\_set\_method**() is called with an explicit NULL argument. ## SEE ALSO [crypto(3)](/crypto/3.md), UI\_create\_method(3), UI\_get\_string\_type(3) ## HISTORY These functions first appeared in OpenSSL 0.9.7 and have been available since OpenBSD 3.2. **UI\_null**() first appeared in OpenSSL 1.1.1 and has been available since OpenBSD 7.3. ## AUTHORS Richard Levitte ⟨*richard@levitte.org*⟩ for the OpenSSL project.