diff options
author | beck <> | 2002-05-15 02:29:21 +0000 |
---|---|---|
committer | beck <> | 2002-05-15 02:29:21 +0000 |
commit | b64270d1e45fe7f3241e4c9b6ce60d5ac89bc2e9 (patch) | |
tree | fa27cf82a1250b64ed3bf5f4a18c7354d470bbcc /src/lib/libcrypto/x509v3/v3_cpols.c | |
parent | e471e1ea98d673597b182ea85f29e30c97cd08b5 (diff) | |
download | openbsd-b64270d1e45fe7f3241e4c9b6ce60d5ac89bc2e9.tar.gz openbsd-b64270d1e45fe7f3241e4c9b6ce60d5ac89bc2e9.tar.bz2 openbsd-b64270d1e45fe7f3241e4c9b6ce60d5ac89bc2e9.zip |
OpenSSL 0.9.7 stable 2002 05 08 merge
Diffstat (limited to 'src/lib/libcrypto/x509v3/v3_cpols.c')
-rw-r--r-- | src/lib/libcrypto/x509v3/v3_cpols.c | 328 |
1 files changed, 45 insertions, 283 deletions
diff --git a/src/lib/libcrypto/x509v3/v3_cpols.c b/src/lib/libcrypto/x509v3/v3_cpols.c index 8203ed7571..0d4ab1f680 100644 --- a/src/lib/libcrypto/x509v3/v3_cpols.c +++ b/src/lib/libcrypto/x509v3/v3_cpols.c | |||
@@ -60,7 +60,7 @@ | |||
60 | #include "cryptlib.h" | 60 | #include "cryptlib.h" |
61 | #include <openssl/conf.h> | 61 | #include <openssl/conf.h> |
62 | #include <openssl/asn1.h> | 62 | #include <openssl/asn1.h> |
63 | #include <openssl/asn1_mac.h> | 63 | #include <openssl/asn1t.h> |
64 | #include <openssl/x509v3.h> | 64 | #include <openssl/x509v3.h> |
65 | 65 | ||
66 | /* Certificate policies extension support: this one is a bit complex... */ | 66 | /* Certificate policies extension support: this one is a bit complex... */ |
@@ -76,18 +76,55 @@ static POLICYQUALINFO *notice_section(X509V3_CTX *ctx, | |||
76 | static STACK_OF(ASN1_INTEGER) *nref_nos(STACK_OF(CONF_VALUE) *nos); | 76 | static STACK_OF(ASN1_INTEGER) *nref_nos(STACK_OF(CONF_VALUE) *nos); |
77 | 77 | ||
78 | X509V3_EXT_METHOD v3_cpols = { | 78 | X509V3_EXT_METHOD v3_cpols = { |
79 | NID_certificate_policies, 0, | 79 | NID_certificate_policies, 0,ASN1_ITEM_ref(CERTIFICATEPOLICIES), |
80 | (X509V3_EXT_NEW)CERTIFICATEPOLICIES_new, | 80 | 0,0,0,0, |
81 | (X509V3_EXT_FREE)CERTIFICATEPOLICIES_free, | 81 | 0,0, |
82 | (X509V3_EXT_D2I)d2i_CERTIFICATEPOLICIES, | 82 | 0,0, |
83 | (X509V3_EXT_I2D)i2d_CERTIFICATEPOLICIES, | ||
84 | NULL, NULL, | ||
85 | NULL, NULL, | ||
86 | (X509V3_EXT_I2R)i2r_certpol, | 83 | (X509V3_EXT_I2R)i2r_certpol, |
87 | (X509V3_EXT_R2I)r2i_certpol, | 84 | (X509V3_EXT_R2I)r2i_certpol, |
88 | NULL | 85 | NULL |
89 | }; | 86 | }; |
90 | 87 | ||
88 | ASN1_ITEM_TEMPLATE(CERTIFICATEPOLICIES) = | ||
89 | ASN1_EX_TEMPLATE_TYPE(ASN1_TFLG_SEQUENCE_OF, 0, CERTIFICATEPOLICIES, POLICYINFO) | ||
90 | ASN1_ITEM_TEMPLATE_END(CERTIFICATEPOLICIES) | ||
91 | |||
92 | IMPLEMENT_ASN1_FUNCTIONS(CERTIFICATEPOLICIES) | ||
93 | |||
94 | ASN1_SEQUENCE(POLICYINFO) = { | ||
95 | ASN1_SIMPLE(POLICYINFO, policyid, ASN1_OBJECT), | ||
96 | ASN1_SEQUENCE_OF_OPT(POLICYINFO, qualifiers, POLICYQUALINFO) | ||
97 | } ASN1_SEQUENCE_END(POLICYINFO) | ||
98 | |||
99 | IMPLEMENT_ASN1_FUNCTIONS(POLICYINFO) | ||
100 | |||
101 | ASN1_ADB_TEMPLATE(policydefault) = ASN1_SIMPLE(POLICYQUALINFO, d.other, ASN1_ANY); | ||
102 | |||
103 | ASN1_ADB(POLICYQUALINFO) = { | ||
104 | ADB_ENTRY(NID_id_qt_cps, ASN1_SIMPLE(POLICYQUALINFO, d.cpsuri, ASN1_IA5STRING)), | ||
105 | ADB_ENTRY(NID_id_qt_unotice, ASN1_SIMPLE(POLICYQUALINFO, d.usernotice, USERNOTICE)) | ||
106 | } ASN1_ADB_END(POLICYQUALINFO, 0, pqualid, 0, &policydefault_tt, NULL); | ||
107 | |||
108 | ASN1_SEQUENCE(POLICYQUALINFO) = { | ||
109 | ASN1_SIMPLE(POLICYQUALINFO, pqualid, ASN1_OBJECT), | ||
110 | ASN1_ADB_OBJECT(POLICYQUALINFO) | ||
111 | } ASN1_SEQUENCE_END(POLICYQUALINFO) | ||
112 | |||
113 | IMPLEMENT_ASN1_FUNCTIONS(POLICYQUALINFO) | ||
114 | |||
115 | ASN1_SEQUENCE(USERNOTICE) = { | ||
116 | ASN1_OPT(USERNOTICE, noticeref, NOTICEREF), | ||
117 | ASN1_OPT(USERNOTICE, exptext, DISPLAYTEXT) | ||
118 | } ASN1_SEQUENCE_END(USERNOTICE) | ||
119 | |||
120 | IMPLEMENT_ASN1_FUNCTIONS(USERNOTICE) | ||
121 | |||
122 | ASN1_SEQUENCE(NOTICEREF) = { | ||
123 | ASN1_SIMPLE(NOTICEREF, organization, DISPLAYTEXT), | ||
124 | ASN1_SEQUENCE_OF(NOTICEREF, noticenos, ASN1_INTEGER) | ||
125 | } ASN1_SEQUENCE_END(NOTICEREF) | ||
126 | |||
127 | IMPLEMENT_ASN1_FUNCTIONS(NOTICEREF) | ||
91 | 128 | ||
92 | static STACK_OF(POLICYINFO) *r2i_certpol(X509V3_EXT_METHOD *method, | 129 | static STACK_OF(POLICYINFO) *r2i_certpol(X509V3_EXT_METHOD *method, |
93 | X509V3_CTX *ctx, char *value) | 130 | X509V3_CTX *ctx, char *value) |
@@ -327,83 +364,6 @@ static int i2r_certpol(X509V3_EXT_METHOD *method, STACK_OF(POLICYINFO) *pol, | |||
327 | return 1; | 364 | return 1; |
328 | } | 365 | } |
329 | 366 | ||
330 | |||
331 | int i2d_CERTIFICATEPOLICIES(STACK_OF(POLICYINFO) *a, unsigned char **pp) | ||
332 | { | ||
333 | |||
334 | return i2d_ASN1_SET_OF_POLICYINFO(a, pp, i2d_POLICYINFO, V_ASN1_SEQUENCE, | ||
335 | V_ASN1_UNIVERSAL, IS_SEQUENCE);} | ||
336 | |||
337 | STACK_OF(POLICYINFO) *CERTIFICATEPOLICIES_new(void) | ||
338 | { | ||
339 | return sk_POLICYINFO_new_null(); | ||
340 | } | ||
341 | |||
342 | void CERTIFICATEPOLICIES_free(STACK_OF(POLICYINFO) *a) | ||
343 | { | ||
344 | sk_POLICYINFO_pop_free(a, POLICYINFO_free); | ||
345 | } | ||
346 | |||
347 | STACK_OF(POLICYINFO) *d2i_CERTIFICATEPOLICIES(STACK_OF(POLICYINFO) **a, | ||
348 | unsigned char **pp,long length) | ||
349 | { | ||
350 | return d2i_ASN1_SET_OF_POLICYINFO(a, pp, length, d2i_POLICYINFO, | ||
351 | POLICYINFO_free, V_ASN1_SEQUENCE, V_ASN1_UNIVERSAL); | ||
352 | |||
353 | } | ||
354 | |||
355 | IMPLEMENT_STACK_OF(POLICYINFO) | ||
356 | IMPLEMENT_ASN1_SET_OF(POLICYINFO) | ||
357 | |||
358 | int i2d_POLICYINFO(POLICYINFO *a, unsigned char **pp) | ||
359 | { | ||
360 | M_ASN1_I2D_vars(a); | ||
361 | |||
362 | M_ASN1_I2D_len (a->policyid, i2d_ASN1_OBJECT); | ||
363 | M_ASN1_I2D_len_SEQUENCE_type(POLICYQUALINFO, a->qualifiers, | ||
364 | i2d_POLICYQUALINFO); | ||
365 | |||
366 | M_ASN1_I2D_seq_total(); | ||
367 | |||
368 | M_ASN1_I2D_put (a->policyid, i2d_ASN1_OBJECT); | ||
369 | M_ASN1_I2D_put_SEQUENCE_type(POLICYQUALINFO, a->qualifiers, | ||
370 | i2d_POLICYQUALINFO); | ||
371 | |||
372 | M_ASN1_I2D_finish(); | ||
373 | } | ||
374 | |||
375 | POLICYINFO *POLICYINFO_new(void) | ||
376 | { | ||
377 | POLICYINFO *ret=NULL; | ||
378 | ASN1_CTX c; | ||
379 | M_ASN1_New_Malloc(ret, POLICYINFO); | ||
380 | ret->policyid = NULL; | ||
381 | ret->qualifiers = NULL; | ||
382 | return (ret); | ||
383 | M_ASN1_New_Error(ASN1_F_POLICYINFO_NEW); | ||
384 | } | ||
385 | |||
386 | POLICYINFO *d2i_POLICYINFO(POLICYINFO **a, unsigned char **pp,long length) | ||
387 | { | ||
388 | M_ASN1_D2I_vars(a,POLICYINFO *,POLICYINFO_new); | ||
389 | M_ASN1_D2I_Init(); | ||
390 | M_ASN1_D2I_start_sequence(); | ||
391 | M_ASN1_D2I_get(ret->policyid, d2i_ASN1_OBJECT); | ||
392 | if(!M_ASN1_D2I_end_sequence()) { | ||
393 | M_ASN1_D2I_get_seq_type (POLICYQUALINFO, ret->qualifiers, | ||
394 | d2i_POLICYQUALINFO, POLICYQUALINFO_free); | ||
395 | } | ||
396 | M_ASN1_D2I_Finish(a, POLICYINFO_free, ASN1_F_D2I_POLICYINFO); | ||
397 | } | ||
398 | |||
399 | void POLICYINFO_free(POLICYINFO *a) | ||
400 | { | ||
401 | if (a == NULL) return; | ||
402 | ASN1_OBJECT_free(a->policyid); | ||
403 | sk_POLICYQUALINFO_pop_free(a->qualifiers, POLICYQUALINFO_free); | ||
404 | OPENSSL_free (a); | ||
405 | } | ||
406 | |||
407 | static void print_qualifiers(BIO *out, STACK_OF(POLICYQUALINFO) *quals, | 367 | static void print_qualifiers(BIO *out, STACK_OF(POLICYQUALINFO) *quals, |
408 | int indent) | 368 | int indent) |
409 | { | 369 | { |
@@ -459,202 +419,4 @@ static void print_notice(BIO *out, USERNOTICE *notice, int indent) | |||
459 | BIO_printf(out, "%*sExplicit Text: %s\n", indent, "", | 419 | BIO_printf(out, "%*sExplicit Text: %s\n", indent, "", |
460 | notice->exptext->data); | 420 | notice->exptext->data); |
461 | } | 421 | } |
462 | |||
463 | |||
464 | |||
465 | int i2d_POLICYQUALINFO(POLICYQUALINFO *a, unsigned char **pp) | ||
466 | { | ||
467 | M_ASN1_I2D_vars(a); | ||
468 | |||
469 | M_ASN1_I2D_len (a->pqualid, i2d_ASN1_OBJECT); | ||
470 | switch(OBJ_obj2nid(a->pqualid)) { | ||
471 | case NID_id_qt_cps: | ||
472 | M_ASN1_I2D_len(a->d.cpsuri, i2d_ASN1_IA5STRING); | ||
473 | break; | ||
474 | |||
475 | case NID_id_qt_unotice: | ||
476 | M_ASN1_I2D_len(a->d.usernotice, i2d_USERNOTICE); | ||
477 | break; | ||
478 | |||
479 | default: | ||
480 | M_ASN1_I2D_len(a->d.other, i2d_ASN1_TYPE); | ||
481 | break; | ||
482 | } | ||
483 | |||
484 | M_ASN1_I2D_seq_total(); | ||
485 | |||
486 | M_ASN1_I2D_put (a->pqualid, i2d_ASN1_OBJECT); | ||
487 | switch(OBJ_obj2nid(a->pqualid)) { | ||
488 | case NID_id_qt_cps: | ||
489 | M_ASN1_I2D_put(a->d.cpsuri, i2d_ASN1_IA5STRING); | ||
490 | break; | ||
491 | |||
492 | case NID_id_qt_unotice: | ||
493 | M_ASN1_I2D_put(a->d.usernotice, i2d_USERNOTICE); | ||
494 | break; | ||
495 | |||
496 | default: | ||
497 | M_ASN1_I2D_put(a->d.other, i2d_ASN1_TYPE); | ||
498 | break; | ||
499 | } | ||
500 | |||
501 | M_ASN1_I2D_finish(); | ||
502 | } | ||
503 | |||
504 | POLICYQUALINFO *POLICYQUALINFO_new(void) | ||
505 | { | ||
506 | POLICYQUALINFO *ret=NULL; | ||
507 | ASN1_CTX c; | ||
508 | M_ASN1_New_Malloc(ret, POLICYQUALINFO); | ||
509 | ret->pqualid = NULL; | ||
510 | ret->d.other = NULL; | ||
511 | return (ret); | ||
512 | M_ASN1_New_Error(ASN1_F_POLICYQUALINFO_NEW); | ||
513 | } | ||
514 | |||
515 | POLICYQUALINFO *d2i_POLICYQUALINFO(POLICYQUALINFO **a, unsigned char **pp, | ||
516 | long length) | ||
517 | { | ||
518 | M_ASN1_D2I_vars(a,POLICYQUALINFO *,POLICYQUALINFO_new); | ||
519 | M_ASN1_D2I_Init(); | ||
520 | M_ASN1_D2I_start_sequence(); | ||
521 | M_ASN1_D2I_get (ret->pqualid, d2i_ASN1_OBJECT); | ||
522 | switch(OBJ_obj2nid(ret->pqualid)) { | ||
523 | case NID_id_qt_cps: | ||
524 | M_ASN1_D2I_get(ret->d.cpsuri, d2i_ASN1_IA5STRING); | ||
525 | break; | ||
526 | |||
527 | case NID_id_qt_unotice: | ||
528 | M_ASN1_D2I_get(ret->d.usernotice, d2i_USERNOTICE); | ||
529 | break; | ||
530 | |||
531 | default: | ||
532 | M_ASN1_D2I_get(ret->d.other, d2i_ASN1_TYPE); | ||
533 | break; | ||
534 | } | ||
535 | M_ASN1_D2I_Finish(a, POLICYQUALINFO_free, ASN1_F_D2I_POLICYQUALINFO); | ||
536 | } | ||
537 | |||
538 | void POLICYQUALINFO_free(POLICYQUALINFO *a) | ||
539 | { | ||
540 | if (a == NULL) return; | ||
541 | switch(OBJ_obj2nid(a->pqualid)) { | ||
542 | case NID_id_qt_cps: | ||
543 | M_ASN1_IA5STRING_free(a->d.cpsuri); | ||
544 | break; | ||
545 | |||
546 | case NID_id_qt_unotice: | ||
547 | USERNOTICE_free(a->d.usernotice); | ||
548 | break; | ||
549 | |||
550 | default: | ||
551 | ASN1_TYPE_free(a->d.other); | ||
552 | break; | ||
553 | } | ||
554 | |||
555 | ASN1_OBJECT_free(a->pqualid); | ||
556 | OPENSSL_free (a); | ||
557 | } | ||
558 | |||
559 | int i2d_USERNOTICE(USERNOTICE *a, unsigned char **pp) | ||
560 | { | ||
561 | M_ASN1_I2D_vars(a); | ||
562 | |||
563 | M_ASN1_I2D_len (a->noticeref, i2d_NOTICEREF); | ||
564 | M_ASN1_I2D_len (a->exptext, i2d_DISPLAYTEXT); | ||
565 | |||
566 | M_ASN1_I2D_seq_total(); | ||
567 | |||
568 | M_ASN1_I2D_put (a->noticeref, i2d_NOTICEREF); | ||
569 | M_ASN1_I2D_put (a->exptext, i2d_DISPLAYTEXT); | ||
570 | |||
571 | M_ASN1_I2D_finish(); | ||
572 | } | ||
573 | |||
574 | USERNOTICE *USERNOTICE_new(void) | ||
575 | { | ||
576 | USERNOTICE *ret=NULL; | ||
577 | ASN1_CTX c; | ||
578 | M_ASN1_New_Malloc(ret, USERNOTICE); | ||
579 | ret->noticeref = NULL; | ||
580 | ret->exptext = NULL; | ||
581 | return (ret); | ||
582 | M_ASN1_New_Error(ASN1_F_USERNOTICE_NEW); | ||
583 | } | ||
584 | |||
585 | USERNOTICE *d2i_USERNOTICE(USERNOTICE **a, unsigned char **pp,long length) | ||
586 | { | ||
587 | M_ASN1_D2I_vars(a,USERNOTICE *,USERNOTICE_new); | ||
588 | M_ASN1_D2I_Init(); | ||
589 | M_ASN1_D2I_start_sequence(); | ||
590 | M_ASN1_D2I_get_opt(ret->noticeref, d2i_NOTICEREF, V_ASN1_SEQUENCE); | ||
591 | if (!M_ASN1_D2I_end_sequence()) { | ||
592 | M_ASN1_D2I_get(ret->exptext, d2i_DISPLAYTEXT); | ||
593 | } | ||
594 | M_ASN1_D2I_Finish(a, USERNOTICE_free, ASN1_F_D2I_USERNOTICE); | ||
595 | } | ||
596 | |||
597 | void USERNOTICE_free(USERNOTICE *a) | ||
598 | { | ||
599 | if (a == NULL) return; | ||
600 | NOTICEREF_free(a->noticeref); | ||
601 | M_DISPLAYTEXT_free(a->exptext); | ||
602 | OPENSSL_free (a); | ||
603 | } | ||
604 | |||
605 | int i2d_NOTICEREF(NOTICEREF *a, unsigned char **pp) | ||
606 | { | ||
607 | M_ASN1_I2D_vars(a); | ||
608 | |||
609 | M_ASN1_I2D_len (a->organization, i2d_DISPLAYTEXT); | ||
610 | M_ASN1_I2D_len_SEQUENCE_type(ASN1_INTEGER, a->noticenos, | ||
611 | i2d_ASN1_INTEGER); | ||
612 | |||
613 | M_ASN1_I2D_seq_total(); | ||
614 | |||
615 | M_ASN1_I2D_put (a->organization, i2d_DISPLAYTEXT); | ||
616 | M_ASN1_I2D_put_SEQUENCE_type(ASN1_INTEGER, a->noticenos, | ||
617 | i2d_ASN1_INTEGER); | ||
618 | |||
619 | M_ASN1_I2D_finish(); | ||
620 | } | ||
621 | |||
622 | NOTICEREF *NOTICEREF_new(void) | ||
623 | { | ||
624 | NOTICEREF *ret=NULL; | ||
625 | ASN1_CTX c; | ||
626 | M_ASN1_New_Malloc(ret, NOTICEREF); | ||
627 | ret->organization = NULL; | ||
628 | ret->noticenos = NULL; | ||
629 | return (ret); | ||
630 | M_ASN1_New_Error(ASN1_F_NOTICEREF_NEW); | ||
631 | } | ||
632 | |||
633 | NOTICEREF *d2i_NOTICEREF(NOTICEREF **a, unsigned char **pp,long length) | ||
634 | { | ||
635 | M_ASN1_D2I_vars(a,NOTICEREF *,NOTICEREF_new); | ||
636 | M_ASN1_D2I_Init(); | ||
637 | M_ASN1_D2I_start_sequence(); | ||
638 | /* This is to cope with some broken encodings that use IA5STRING for | ||
639 | * the organization field | ||
640 | */ | ||
641 | M_ASN1_D2I_get_opt(ret->organization, d2i_ASN1_IA5STRING, | ||
642 | V_ASN1_IA5STRING); | ||
643 | if(!ret->organization) { | ||
644 | M_ASN1_D2I_get(ret->organization, d2i_DISPLAYTEXT); | ||
645 | } | ||
646 | M_ASN1_D2I_get_seq_type(ASN1_INTEGER, ret->noticenos, d2i_ASN1_INTEGER, | ||
647 | ASN1_STRING_free); | ||
648 | M_ASN1_D2I_Finish(a, NOTICEREF_free, ASN1_F_D2I_NOTICEREF); | ||
649 | } | ||
650 | |||
651 | void NOTICEREF_free(NOTICEREF *a) | ||
652 | { | ||
653 | if (a == NULL) return; | ||
654 | M_DISPLAYTEXT_free(a->organization); | ||
655 | sk_ASN1_INTEGER_pop_free(a->noticenos, ASN1_STRING_free); | ||
656 | OPENSSL_free (a); | ||
657 | } | ||
658 | 422 | ||
659 | IMPLEMENT_STACK_OF(POLICYQUALINFO) | ||
660 | IMPLEMENT_ASN1_SET_OF(POLICYQUALINFO) | ||