diff options
| author | tb <> | 2021-12-24 02:41:35 +0000 |
|---|---|---|
| committer | tb <> | 2021-12-24 02:41:35 +0000 |
| commit | ef7405266983f910fc9afc376bbebd84ec03e0b0 (patch) | |
| tree | 6dfd4397f6a1ff3ec15de8cab3785f0234960c09 /src | |
| parent | d4102e70d7c1c33b07301056c2fef3e3c8cc12fe (diff) | |
| download | openbsd-ef7405266983f910fc9afc376bbebd84ec03e0b0.tar.gz openbsd-ef7405266983f910fc9afc376bbebd84ec03e0b0.tar.bz2 openbsd-ef7405266983f910fc9afc376bbebd84ec03e0b0.zip | |
Fix some KNF issues in the RFC 3779 section that have bothered me for
way too long.
Diffstat (limited to 'src')
| -rw-r--r-- | src/lib/libcrypto/x509/x509v3.h | 109 |
1 files changed, 55 insertions, 54 deletions
diff --git a/src/lib/libcrypto/x509/x509v3.h b/src/lib/libcrypto/x509/x509v3.h index 2d8ab6fc6e..0a6d439310 100644 --- a/src/lib/libcrypto/x509/x509v3.h +++ b/src/lib/libcrypto/x509/x509v3.h | |||
| @@ -1,4 +1,4 @@ | |||
| 1 | /* $OpenBSD: x509v3.h,v 1.10 2021/11/01 08:14:36 tb Exp $ */ | 1 | /* $OpenBSD: x509v3.h,v 1.11 2021/12/24 02:41:35 tb Exp $ */ |
| 2 | /* Written by Dr Stephen N Henson (steve@openssl.org) for the OpenSSL | 2 | /* Written by Dr Stephen N Henson (steve@openssl.org) for the OpenSSL |
| 3 | * project 1999. | 3 | * project 1999. |
| 4 | */ | 4 | */ |
| @@ -850,36 +850,38 @@ DECLARE_STACK_OF(X509_POLICY_NODE) | |||
| 850 | #if defined(LIBRESSL_INTERNAL) | 850 | #if defined(LIBRESSL_INTERNAL) |
| 851 | #ifndef OPENSSL_NO_RFC3779 | 851 | #ifndef OPENSSL_NO_RFC3779 |
| 852 | typedef struct ASRange_st { | 852 | typedef struct ASRange_st { |
| 853 | ASN1_INTEGER *min, *max; | 853 | ASN1_INTEGER *min; |
| 854 | ASN1_INTEGER *max; | ||
| 854 | } ASRange; | 855 | } ASRange; |
| 855 | 856 | ||
| 856 | # define ASIdOrRange_id 0 | 857 | #define ASIdOrRange_id 0 |
| 857 | # define ASIdOrRange_range 1 | 858 | #define ASIdOrRange_range 1 |
| 858 | 859 | ||
| 859 | typedef struct ASIdOrRange_st { | 860 | typedef struct ASIdOrRange_st { |
| 860 | int type; | 861 | int type; |
| 861 | union { | 862 | union { |
| 862 | ASN1_INTEGER *id; | 863 | ASN1_INTEGER *id; |
| 863 | ASRange *range; | 864 | ASRange *range; |
| 864 | } u; | 865 | } u; |
| 865 | } ASIdOrRange; | 866 | } ASIdOrRange; |
| 866 | 867 | ||
| 867 | typedef STACK_OF(ASIdOrRange) ASIdOrRanges; | 868 | typedef STACK_OF(ASIdOrRange) ASIdOrRanges; |
| 868 | DECLARE_STACK_OF(ASIdOrRange) | 869 | DECLARE_STACK_OF(ASIdOrRange) |
| 869 | 870 | ||
| 870 | # define ASIdentifierChoice_inherit 0 | 871 | #define ASIdentifierChoice_inherit 0 |
| 871 | # define ASIdentifierChoice_asIdsOrRanges 1 | 872 | #define ASIdentifierChoice_asIdsOrRanges 1 |
| 872 | 873 | ||
| 873 | typedef struct ASIdentifierChoice_st { | 874 | typedef struct ASIdentifierChoice_st { |
| 874 | int type; | 875 | int type; |
| 875 | union { | 876 | union { |
| 876 | ASN1_NULL *inherit; | 877 | ASN1_NULL *inherit; |
| 877 | ASIdOrRanges *asIdsOrRanges; | 878 | ASIdOrRanges *asIdsOrRanges; |
| 878 | } u; | 879 | } u; |
| 879 | } ASIdentifierChoice; | 880 | } ASIdentifierChoice; |
| 880 | 881 | ||
| 881 | typedef struct ASIdentifiers_st { | 882 | typedef struct ASIdentifiers_st { |
| 882 | ASIdentifierChoice *asnum, *rdi; | 883 | ASIdentifierChoice *asnum; |
| 884 | ASIdentifierChoice *rdi; | ||
| 883 | } ASIdentifiers; | 885 | } ASIdentifiers; |
| 884 | 886 | ||
| 885 | ASRange *ASRange_new(void); | 887 | ASRange *ASRange_new(void); |
| @@ -910,37 +912,38 @@ int i2d_ASIdentifiers(ASIdentifiers *a, unsigned char **out); | |||
| 910 | extern const ASN1_ITEM ASIdentifiers_it; | 912 | extern const ASN1_ITEM ASIdentifiers_it; |
| 911 | 913 | ||
| 912 | typedef struct IPAddressRange_st { | 914 | typedef struct IPAddressRange_st { |
| 913 | ASN1_BIT_STRING *min, *max; | 915 | ASN1_BIT_STRING *min; |
| 916 | ASN1_BIT_STRING *max; | ||
| 914 | } IPAddressRange; | 917 | } IPAddressRange; |
| 915 | 918 | ||
| 916 | # define IPAddressOrRange_addressPrefix 0 | 919 | #define IPAddressOrRange_addressPrefix 0 |
| 917 | # define IPAddressOrRange_addressRange 1 | 920 | #define IPAddressOrRange_addressRange 1 |
| 918 | 921 | ||
| 919 | typedef struct IPAddressOrRange_st { | 922 | typedef struct IPAddressOrRange_st { |
| 920 | int type; | 923 | int type; |
| 921 | union { | 924 | union { |
| 922 | ASN1_BIT_STRING *addressPrefix; | 925 | ASN1_BIT_STRING *addressPrefix; |
| 923 | IPAddressRange *addressRange; | 926 | IPAddressRange *addressRange; |
| 924 | } u; | 927 | } u; |
| 925 | } IPAddressOrRange; | 928 | } IPAddressOrRange; |
| 926 | 929 | ||
| 927 | typedef STACK_OF(IPAddressOrRange) IPAddressOrRanges; | 930 | typedef STACK_OF(IPAddressOrRange) IPAddressOrRanges; |
| 928 | DECLARE_STACK_OF(IPAddressOrRange) | 931 | DECLARE_STACK_OF(IPAddressOrRange) |
| 929 | 932 | ||
| 930 | # define IPAddressChoice_inherit 0 | 933 | #define IPAddressChoice_inherit 0 |
| 931 | # define IPAddressChoice_addressesOrRanges 1 | 934 | #define IPAddressChoice_addressesOrRanges 1 |
| 932 | 935 | ||
| 933 | typedef struct IPAddressChoice_st { | 936 | typedef struct IPAddressChoice_st { |
| 934 | int type; | 937 | int type; |
| 935 | union { | 938 | union { |
| 936 | ASN1_NULL *inherit; | 939 | ASN1_NULL *inherit; |
| 937 | IPAddressOrRanges *addressesOrRanges; | 940 | IPAddressOrRanges *addressesOrRanges; |
| 938 | } u; | 941 | } u; |
| 939 | } IPAddressChoice; | 942 | } IPAddressChoice; |
| 940 | 943 | ||
| 941 | typedef struct IPAddressFamily_st { | 944 | typedef struct IPAddressFamily_st { |
| 942 | ASN1_OCTET_STRING *addressFamily; | 945 | ASN1_OCTET_STRING *addressFamily; |
| 943 | IPAddressChoice *ipAddressChoice; | 946 | IPAddressChoice *ipAddressChoice; |
| 944 | } IPAddressFamily; | 947 | } IPAddressFamily; |
| 945 | 948 | ||
| 946 | typedef STACK_OF(IPAddressFamily) IPAddrBlocks; | 949 | typedef STACK_OF(IPAddressFamily) IPAddrBlocks; |
| @@ -977,8 +980,8 @@ extern const ASN1_ITEM IPAddressFamily_it; | |||
| 977 | /* | 980 | /* |
| 978 | * API tag for elements of the ASIdentifer SEQUENCE. | 981 | * API tag for elements of the ASIdentifer SEQUENCE. |
| 979 | */ | 982 | */ |
| 980 | # define V3_ASID_ASNUM 0 | 983 | #define V3_ASID_ASNUM 0 |
| 981 | # define V3_ASID_RDI 1 | 984 | #define V3_ASID_RDI 1 |
| 982 | 985 | ||
| 983 | /* | 986 | /* |
| 984 | * AFI values, assigned by IANA. It'd be nice to make the AFI | 987 | * AFI values, assigned by IANA. It'd be nice to make the AFI |
| @@ -986,8 +989,9 @@ extern const ASN1_ITEM IPAddressFamily_it; | |||
| 986 | * that would need to be defined for other address families for it to | 989 | * that would need to be defined for other address families for it to |
| 987 | * be worth the trouble. | 990 | * be worth the trouble. |
| 988 | */ | 991 | */ |
| 989 | # define IANA_AFI_IPV4 1 | 992 | #define IANA_AFI_IPV4 1 |
| 990 | # define IANA_AFI_IPV6 2 | 993 | #define IANA_AFI_IPV6 2 |
| 994 | |||
| 991 | /* | 995 | /* |
| 992 | * Utilities to construct and extract values from RFC3779 extensions, | 996 | * Utilities to construct and extract values from RFC3779 extensions, |
| 993 | * since some of the encodings (particularly for IP address prefixes | 997 | * since some of the encodings (particularly for IP address prefixes |
| @@ -995,19 +999,17 @@ extern const ASN1_ITEM IPAddressFamily_it; | |||
| 995 | */ | 999 | */ |
| 996 | int X509v3_asid_add_inherit(ASIdentifiers *asid, int which); | 1000 | int X509v3_asid_add_inherit(ASIdentifiers *asid, int which); |
| 997 | int X509v3_asid_add_id_or_range(ASIdentifiers *asid, int which, | 1001 | int X509v3_asid_add_id_or_range(ASIdentifiers *asid, int which, |
| 998 | ASN1_INTEGER *min, ASN1_INTEGER *max); | 1002 | ASN1_INTEGER *min, ASN1_INTEGER *max); |
| 999 | int X509v3_addr_add_inherit(IPAddrBlocks *addr, | 1003 | int X509v3_addr_add_inherit(IPAddrBlocks *addr, const unsigned afi, |
| 1000 | const unsigned afi, const unsigned *safi); | 1004 | const unsigned *safi); |
| 1001 | int X509v3_addr_add_prefix(IPAddrBlocks *addr, | 1005 | int X509v3_addr_add_prefix(IPAddrBlocks *addr, const unsigned afi, |
| 1002 | const unsigned afi, const unsigned *safi, | 1006 | const unsigned *safi, unsigned char *a, const int prefixlen); |
| 1003 | unsigned char *a, const int prefixlen); | 1007 | int X509v3_addr_add_range(IPAddrBlocks *addr, const unsigned afi, |
| 1004 | int X509v3_addr_add_range(IPAddrBlocks *addr, | 1008 | const unsigned *safi, unsigned char *min, unsigned char *max); |
| 1005 | const unsigned afi, const unsigned *safi, | ||
| 1006 | unsigned char *min, unsigned char *max); | ||
| 1007 | unsigned X509v3_addr_get_afi(const IPAddressFamily *f); | 1009 | unsigned X509v3_addr_get_afi(const IPAddressFamily *f); |
| 1008 | int X509v3_addr_get_range(IPAddressOrRange *aor, const unsigned afi, | 1010 | int X509v3_addr_get_range(IPAddressOrRange *aor, const unsigned afi, |
| 1009 | unsigned char *min, unsigned char *max, | 1011 | unsigned char *min, unsigned char *max, const int length); |
| 1010 | const int length); | 1012 | |
| 1011 | /* | 1013 | /* |
| 1012 | * Canonical forms. | 1014 | * Canonical forms. |
| 1013 | */ | 1015 | */ |
| @@ -1029,11 +1031,10 @@ int X509v3_addr_subset(IPAddrBlocks *a, IPAddrBlocks *b); | |||
| 1029 | */ | 1031 | */ |
| 1030 | int X509v3_asid_validate_path(X509_STORE_CTX *); | 1032 | int X509v3_asid_validate_path(X509_STORE_CTX *); |
| 1031 | int X509v3_addr_validate_path(X509_STORE_CTX *); | 1033 | int X509v3_addr_validate_path(X509_STORE_CTX *); |
| 1032 | int X509v3_asid_validate_resource_set(STACK_OF(X509) *chain, | 1034 | int X509v3_asid_validate_resource_set(STACK_OF(X509) *chain, ASIdentifiers *ext, |
| 1033 | ASIdentifiers *ext, | 1035 | int allow_inheritance); |
| 1034 | int allow_inheritance); | 1036 | int X509v3_addr_validate_resource_set(STACK_OF(X509) *chain, IPAddrBlocks *ext, |
| 1035 | int X509v3_addr_validate_resource_set(STACK_OF(X509) *chain, | 1037 | int allow_inheritance); |
| 1036 | IPAddrBlocks *ext, int allow_inheritance); | ||
| 1037 | 1038 | ||
| 1038 | #endif /* OPENSSL_NO_RFC3779 */ | 1039 | #endif /* OPENSSL_NO_RFC3779 */ |
| 1039 | #endif | 1040 | #endif |
