diff options
author | tb <> | 2023-04-28 16:21:57 +0000 |
---|---|---|
committer | tb <> | 2023-04-28 16:21:57 +0000 |
commit | 0f7876e466fed4dad77a738f0bdb63846092d5ef (patch) | |
tree | ab7bf11dbba9e8b630f9ced2d33ff8be0eb6049a /src/lib/libcrypto/x509/pcy_data.c | |
parent | 1059b2a4a3d9eb72ad6073bbadee2edc0fd7f990 (diff) | |
download | openbsd-0f7876e466fed4dad77a738f0bdb63846092d5ef.tar.gz openbsd-0f7876e466fed4dad77a738f0bdb63846092d5ef.tar.bz2 openbsd-0f7876e466fed4dad77a738f0bdb63846092d5ef.zip |
Take the old policy code behind the barn
It can go play in the fields with all the other exponential time policy
"code".
discussed with jsing
ok & commit message beck
Diffstat (limited to 'src/lib/libcrypto/x509/pcy_data.c')
-rw-r--r-- | src/lib/libcrypto/x509/pcy_data.c | 133 |
1 files changed, 0 insertions, 133 deletions
diff --git a/src/lib/libcrypto/x509/pcy_data.c b/src/lib/libcrypto/x509/pcy_data.c deleted file mode 100644 index f0fdfe18ef..0000000000 --- a/src/lib/libcrypto/x509/pcy_data.c +++ /dev/null | |||
@@ -1,133 +0,0 @@ | |||
1 | /* $OpenBSD: pcy_data.c,v 1.2 2023/04/26 19:11:32 beck Exp $ */ | ||
2 | /* Written by Dr Stephen N Henson (steve@openssl.org) for the OpenSSL | ||
3 | * project 2004. | ||
4 | */ | ||
5 | /* ==================================================================== | ||
6 | * Copyright (c) 2004 The OpenSSL Project. All rights reserved. | ||
7 | * | ||
8 | * Redistribution and use in source and binary forms, with or without | ||
9 | * modification, are permitted provided that the following conditions | ||
10 | * are met: | ||
11 | * | ||
12 | * 1. Redistributions of source code must retain the above copyright | ||
13 | * notice, this list of conditions and the following disclaimer. | ||
14 | * | ||
15 | * 2. Redistributions in binary form must reproduce the above copyright | ||
16 | * notice, this list of conditions and the following disclaimer in | ||
17 | * the documentation and/or other materials provided with the | ||
18 | * distribution. | ||
19 | * | ||
20 | * 3. All advertising materials mentioning features or use of this | ||
21 | * software must display the following acknowledgment: | ||
22 | * "This product includes software developed by the OpenSSL Project | ||
23 | * for use in the OpenSSL Toolkit. (http://www.OpenSSL.org/)" | ||
24 | * | ||
25 | * 4. The names "OpenSSL Toolkit" and "OpenSSL Project" must not be used to | ||
26 | * endorse or promote products derived from this software without | ||
27 | * prior written permission. For written permission, please contact | ||
28 | * licensing@OpenSSL.org. | ||
29 | * | ||
30 | * 5. Products derived from this software may not be called "OpenSSL" | ||
31 | * nor may "OpenSSL" appear in their names without prior written | ||
32 | * permission of the OpenSSL Project. | ||
33 | * | ||
34 | * 6. Redistributions of any form whatsoever must retain the following | ||
35 | * acknowledgment: | ||
36 | * "This product includes software developed by the OpenSSL Project | ||
37 | * for use in the OpenSSL Toolkit (http://www.OpenSSL.org/)" | ||
38 | * | ||
39 | * THIS SOFTWARE IS PROVIDED BY THE OpenSSL PROJECT ``AS IS'' AND ANY | ||
40 | * EXPRESSED OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE | ||
41 | * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR | ||
42 | * PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE OpenSSL PROJECT OR | ||
43 | * ITS CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, | ||
44 | * SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT | ||
45 | * NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; | ||
46 | * LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) | ||
47 | * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, | ||
48 | * STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) | ||
49 | * ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED | ||
50 | * OF THE POSSIBILITY OF SUCH DAMAGE. | ||
51 | * ==================================================================== | ||
52 | * | ||
53 | * This product includes cryptographic software written by Eric Young | ||
54 | * (eay@cryptsoft.com). This product includes software written by Tim | ||
55 | * Hudson (tjh@cryptsoft.com). | ||
56 | * | ||
57 | */ | ||
58 | |||
59 | #include <openssl/x509.h> | ||
60 | #include <openssl/x509v3.h> | ||
61 | |||
62 | #ifndef LIBRESSL_HAS_POLICY_DAG | ||
63 | |||
64 | #include "pcy_int.h" | ||
65 | |||
66 | /* Policy Node routines */ | ||
67 | |||
68 | void | ||
69 | policy_data_free(X509_POLICY_DATA *data) | ||
70 | { | ||
71 | ASN1_OBJECT_free(data->valid_policy); | ||
72 | /* Don't free qualifiers if shared */ | ||
73 | if (!(data->flags & POLICY_DATA_FLAG_SHARED_QUALIFIERS)) | ||
74 | sk_POLICYQUALINFO_pop_free(data->qualifier_set, | ||
75 | POLICYQUALINFO_free); | ||
76 | sk_ASN1_OBJECT_pop_free(data->expected_policy_set, ASN1_OBJECT_free); | ||
77 | free(data); | ||
78 | } | ||
79 | |||
80 | /* Create a data based on an existing policy. If 'id' is NULL use the | ||
81 | * oid in the policy, otherwise use 'id'. This behaviour covers the two | ||
82 | * types of data in RFC3280: data with from a CertificatePolcies extension | ||
83 | * and additional data with just the qualifiers of anyPolicy and ID from | ||
84 | * another source. | ||
85 | */ | ||
86 | |||
87 | X509_POLICY_DATA * | ||
88 | policy_data_new(POLICYINFO *policy, const ASN1_OBJECT *cid, int crit) | ||
89 | { | ||
90 | X509_POLICY_DATA *ret = NULL; | ||
91 | ASN1_OBJECT *id = NULL; | ||
92 | |||
93 | if (policy == NULL && cid == NULL) | ||
94 | return NULL; | ||
95 | if (cid != NULL) { | ||
96 | id = OBJ_dup(cid); | ||
97 | if (id == NULL) | ||
98 | return NULL; | ||
99 | } | ||
100 | ret = malloc(sizeof(X509_POLICY_DATA)); | ||
101 | if (ret == NULL) | ||
102 | goto err; | ||
103 | ret->expected_policy_set = sk_ASN1_OBJECT_new_null(); | ||
104 | if (ret->expected_policy_set == NULL) | ||
105 | goto err; | ||
106 | |||
107 | if (crit) | ||
108 | ret->flags = POLICY_DATA_FLAG_CRITICAL; | ||
109 | else | ||
110 | ret->flags = 0; | ||
111 | |||
112 | if (id != NULL) | ||
113 | ret->valid_policy = id; | ||
114 | else { | ||
115 | ret->valid_policy = policy->policyid; | ||
116 | policy->policyid = NULL; | ||
117 | } | ||
118 | |||
119 | if (policy != NULL) { | ||
120 | ret->qualifier_set = policy->qualifiers; | ||
121 | policy->qualifiers = NULL; | ||
122 | } else | ||
123 | ret->qualifier_set = NULL; | ||
124 | |||
125 | return ret; | ||
126 | |||
127 | err: | ||
128 | free(ret); | ||
129 | ASN1_OBJECT_free(id); | ||
130 | return NULL; | ||
131 | } | ||
132 | |||
133 | #endif /* LIBRESSL_HAS_POLICY_DAG */ | ||