summaryrefslogtreecommitdiff
path: root/src
diff options
context:
space:
mode:
authortb <>2021-12-24 02:41:35 +0000
committertb <>2021-12-24 02:41:35 +0000
commitef7405266983f910fc9afc376bbebd84ec03e0b0 (patch)
tree6dfd4397f6a1ff3ec15de8cab3785f0234960c09 /src
parentd4102e70d7c1c33b07301056c2fef3e3c8cc12fe (diff)
downloadopenbsd-ef7405266983f910fc9afc376bbebd84ec03e0b0.tar.gz
openbsd-ef7405266983f910fc9afc376bbebd84ec03e0b0.tar.bz2
openbsd-ef7405266983f910fc9afc376bbebd84ec03e0b0.zip
Fix some KNF issues in the RFC 3779 section that have bothered me for
way too long.
Diffstat (limited to 'src')
-rw-r--r--src/lib/libcrypto/x509/x509v3.h109
1 files changed, 55 insertions, 54 deletions
diff --git a/src/lib/libcrypto/x509/x509v3.h b/src/lib/libcrypto/x509/x509v3.h
index 2d8ab6fc6e..0a6d439310 100644
--- a/src/lib/libcrypto/x509/x509v3.h
+++ b/src/lib/libcrypto/x509/x509v3.h
@@ -1,4 +1,4 @@
1/* $OpenBSD: x509v3.h,v 1.10 2021/11/01 08:14:36 tb Exp $ */ 1/* $OpenBSD: x509v3.h,v 1.11 2021/12/24 02:41:35 tb Exp $ */
2/* Written by Dr Stephen N Henson (steve@openssl.org) for the OpenSSL 2/* Written by Dr Stephen N Henson (steve@openssl.org) for the OpenSSL
3 * project 1999. 3 * project 1999.
4 */ 4 */
@@ -850,36 +850,38 @@ DECLARE_STACK_OF(X509_POLICY_NODE)
850#if defined(LIBRESSL_INTERNAL) 850#if defined(LIBRESSL_INTERNAL)
851#ifndef OPENSSL_NO_RFC3779 851#ifndef OPENSSL_NO_RFC3779
852typedef struct ASRange_st { 852typedef struct ASRange_st {
853 ASN1_INTEGER *min, *max; 853 ASN1_INTEGER *min;
854 ASN1_INTEGER *max;
854} ASRange; 855} ASRange;
855 856
856# define ASIdOrRange_id 0 857#define ASIdOrRange_id 0
857# define ASIdOrRange_range 1 858#define ASIdOrRange_range 1
858 859
859typedef struct ASIdOrRange_st { 860typedef struct ASIdOrRange_st {
860 int type; 861 int type;
861 union { 862 union {
862 ASN1_INTEGER *id; 863 ASN1_INTEGER *id;
863 ASRange *range; 864 ASRange *range;
864 } u; 865 } u;
865} ASIdOrRange; 866} ASIdOrRange;
866 867
867typedef STACK_OF(ASIdOrRange) ASIdOrRanges; 868typedef STACK_OF(ASIdOrRange) ASIdOrRanges;
868DECLARE_STACK_OF(ASIdOrRange) 869DECLARE_STACK_OF(ASIdOrRange)
869 870
870# define ASIdentifierChoice_inherit 0 871#define ASIdentifierChoice_inherit 0
871# define ASIdentifierChoice_asIdsOrRanges 1 872#define ASIdentifierChoice_asIdsOrRanges 1
872 873
873typedef struct ASIdentifierChoice_st { 874typedef struct ASIdentifierChoice_st {
874 int type; 875 int type;
875 union { 876 union {
876 ASN1_NULL *inherit; 877 ASN1_NULL *inherit;
877 ASIdOrRanges *asIdsOrRanges; 878 ASIdOrRanges *asIdsOrRanges;
878 } u; 879 } u;
879} ASIdentifierChoice; 880} ASIdentifierChoice;
880 881
881typedef struct ASIdentifiers_st { 882typedef struct ASIdentifiers_st {
882 ASIdentifierChoice *asnum, *rdi; 883 ASIdentifierChoice *asnum;
884 ASIdentifierChoice *rdi;
883} ASIdentifiers; 885} ASIdentifiers;
884 886
885ASRange *ASRange_new(void); 887ASRange *ASRange_new(void);
@@ -910,37 +912,38 @@ int i2d_ASIdentifiers(ASIdentifiers *a, unsigned char **out);
910extern const ASN1_ITEM ASIdentifiers_it; 912extern const ASN1_ITEM ASIdentifiers_it;
911 913
912typedef struct IPAddressRange_st { 914typedef struct IPAddressRange_st {
913 ASN1_BIT_STRING *min, *max; 915 ASN1_BIT_STRING *min;
916 ASN1_BIT_STRING *max;
914} IPAddressRange; 917} IPAddressRange;
915 918
916# define IPAddressOrRange_addressPrefix 0 919#define IPAddressOrRange_addressPrefix 0
917# define IPAddressOrRange_addressRange 1 920#define IPAddressOrRange_addressRange 1
918 921
919typedef struct IPAddressOrRange_st { 922typedef struct IPAddressOrRange_st {
920 int type; 923 int type;
921 union { 924 union {
922 ASN1_BIT_STRING *addressPrefix; 925 ASN1_BIT_STRING *addressPrefix;
923 IPAddressRange *addressRange; 926 IPAddressRange *addressRange;
924 } u; 927 } u;
925} IPAddressOrRange; 928} IPAddressOrRange;
926 929
927typedef STACK_OF(IPAddressOrRange) IPAddressOrRanges; 930typedef STACK_OF(IPAddressOrRange) IPAddressOrRanges;
928DECLARE_STACK_OF(IPAddressOrRange) 931DECLARE_STACK_OF(IPAddressOrRange)
929 932
930# define IPAddressChoice_inherit 0 933#define IPAddressChoice_inherit 0
931# define IPAddressChoice_addressesOrRanges 1 934#define IPAddressChoice_addressesOrRanges 1
932 935
933typedef struct IPAddressChoice_st { 936typedef struct IPAddressChoice_st {
934 int type; 937 int type;
935 union { 938 union {
936 ASN1_NULL *inherit; 939 ASN1_NULL *inherit;
937 IPAddressOrRanges *addressesOrRanges; 940 IPAddressOrRanges *addressesOrRanges;
938 } u; 941 } u;
939} IPAddressChoice; 942} IPAddressChoice;
940 943
941typedef struct IPAddressFamily_st { 944typedef struct IPAddressFamily_st {
942 ASN1_OCTET_STRING *addressFamily; 945 ASN1_OCTET_STRING *addressFamily;
943 IPAddressChoice *ipAddressChoice; 946 IPAddressChoice *ipAddressChoice;
944} IPAddressFamily; 947} IPAddressFamily;
945 948
946typedef STACK_OF(IPAddressFamily) IPAddrBlocks; 949typedef STACK_OF(IPAddressFamily) IPAddrBlocks;
@@ -977,8 +980,8 @@ extern const ASN1_ITEM IPAddressFamily_it;
977/* 980/*
978 * API tag for elements of the ASIdentifer SEQUENCE. 981 * API tag for elements of the ASIdentifer SEQUENCE.
979 */ 982 */
980# define V3_ASID_ASNUM 0 983#define V3_ASID_ASNUM 0
981# define V3_ASID_RDI 1 984#define V3_ASID_RDI 1
982 985
983/* 986/*
984 * AFI values, assigned by IANA. It'd be nice to make the AFI 987 * AFI values, assigned by IANA. It'd be nice to make the AFI
@@ -986,8 +989,9 @@ extern const ASN1_ITEM IPAddressFamily_it;
986 * that would need to be defined for other address families for it to 989 * that would need to be defined for other address families for it to
987 * be worth the trouble. 990 * be worth the trouble.
988 */ 991 */
989# define IANA_AFI_IPV4 1 992#define IANA_AFI_IPV4 1
990# define IANA_AFI_IPV6 2 993#define IANA_AFI_IPV6 2
994
991/* 995/*
992 * Utilities to construct and extract values from RFC3779 extensions, 996 * Utilities to construct and extract values from RFC3779 extensions,
993 * since some of the encodings (particularly for IP address prefixes 997 * since some of the encodings (particularly for IP address prefixes
@@ -995,19 +999,17 @@ extern const ASN1_ITEM IPAddressFamily_it;
995 */ 999 */
996int X509v3_asid_add_inherit(ASIdentifiers *asid, int which); 1000int X509v3_asid_add_inherit(ASIdentifiers *asid, int which);
997int X509v3_asid_add_id_or_range(ASIdentifiers *asid, int which, 1001int X509v3_asid_add_id_or_range(ASIdentifiers *asid, int which,
998 ASN1_INTEGER *min, ASN1_INTEGER *max); 1002 ASN1_INTEGER *min, ASN1_INTEGER *max);
999int X509v3_addr_add_inherit(IPAddrBlocks *addr, 1003int X509v3_addr_add_inherit(IPAddrBlocks *addr, const unsigned afi,
1000 const unsigned afi, const unsigned *safi); 1004 const unsigned *safi);
1001int X509v3_addr_add_prefix(IPAddrBlocks *addr, 1005int X509v3_addr_add_prefix(IPAddrBlocks *addr, const unsigned afi,
1002 const unsigned afi, const unsigned *safi, 1006 const unsigned *safi, unsigned char *a, const int prefixlen);
1003 unsigned char *a, const int prefixlen); 1007int X509v3_addr_add_range(IPAddrBlocks *addr, const unsigned afi,
1004int X509v3_addr_add_range(IPAddrBlocks *addr, 1008 const unsigned *safi, unsigned char *min, unsigned char *max);
1005 const unsigned afi, const unsigned *safi,
1006 unsigned char *min, unsigned char *max);
1007unsigned X509v3_addr_get_afi(const IPAddressFamily *f); 1009unsigned X509v3_addr_get_afi(const IPAddressFamily *f);
1008int X509v3_addr_get_range(IPAddressOrRange *aor, const unsigned afi, 1010int X509v3_addr_get_range(IPAddressOrRange *aor, const unsigned afi,
1009 unsigned char *min, unsigned char *max, 1011 unsigned char *min, unsigned char *max, const int length);
1010 const int length); 1012
1011/* 1013/*
1012 * Canonical forms. 1014 * Canonical forms.
1013 */ 1015 */
@@ -1029,11 +1031,10 @@ int X509v3_addr_subset(IPAddrBlocks *a, IPAddrBlocks *b);
1029 */ 1031 */
1030int X509v3_asid_validate_path(X509_STORE_CTX *); 1032int X509v3_asid_validate_path(X509_STORE_CTX *);
1031int X509v3_addr_validate_path(X509_STORE_CTX *); 1033int X509v3_addr_validate_path(X509_STORE_CTX *);
1032int X509v3_asid_validate_resource_set(STACK_OF(X509) *chain, 1034int X509v3_asid_validate_resource_set(STACK_OF(X509) *chain, ASIdentifiers *ext,
1033 ASIdentifiers *ext, 1035 int allow_inheritance);
1034 int allow_inheritance); 1036int X509v3_addr_validate_resource_set(STACK_OF(X509) *chain, IPAddrBlocks *ext,
1035int X509v3_addr_validate_resource_set(STACK_OF(X509) *chain, 1037 int allow_inheritance);
1036 IPAddrBlocks *ext, int allow_inheritance);
1037 1038
1038#endif /* OPENSSL_NO_RFC3779 */ 1039#endif /* OPENSSL_NO_RFC3779 */
1039#endif 1040#endif