diff options
author | tb <> | 2021-12-24 02:41:35 +0000 |
---|---|---|
committer | tb <> | 2021-12-24 02:41:35 +0000 |
commit | ef7405266983f910fc9afc376bbebd84ec03e0b0 (patch) | |
tree | 6dfd4397f6a1ff3ec15de8cab3785f0234960c09 /src | |
parent | d4102e70d7c1c33b07301056c2fef3e3c8cc12fe (diff) | |
download | openbsd-ef7405266983f910fc9afc376bbebd84ec03e0b0.tar.gz openbsd-ef7405266983f910fc9afc376bbebd84ec03e0b0.tar.bz2 openbsd-ef7405266983f910fc9afc376bbebd84ec03e0b0.zip |
Fix some KNF issues in the RFC 3779 section that have bothered me for
way too long.
Diffstat (limited to 'src')
-rw-r--r-- | src/lib/libcrypto/x509/x509v3.h | 109 |
1 files changed, 55 insertions, 54 deletions
diff --git a/src/lib/libcrypto/x509/x509v3.h b/src/lib/libcrypto/x509/x509v3.h index 2d8ab6fc6e..0a6d439310 100644 --- a/src/lib/libcrypto/x509/x509v3.h +++ b/src/lib/libcrypto/x509/x509v3.h | |||
@@ -1,4 +1,4 @@ | |||
1 | /* $OpenBSD: x509v3.h,v 1.10 2021/11/01 08:14:36 tb Exp $ */ | 1 | /* $OpenBSD: x509v3.h,v 1.11 2021/12/24 02:41:35 tb Exp $ */ |
2 | /* Written by Dr Stephen N Henson (steve@openssl.org) for the OpenSSL | 2 | /* Written by Dr Stephen N Henson (steve@openssl.org) for the OpenSSL |
3 | * project 1999. | 3 | * project 1999. |
4 | */ | 4 | */ |
@@ -850,36 +850,38 @@ DECLARE_STACK_OF(X509_POLICY_NODE) | |||
850 | #if defined(LIBRESSL_INTERNAL) | 850 | #if defined(LIBRESSL_INTERNAL) |
851 | #ifndef OPENSSL_NO_RFC3779 | 851 | #ifndef OPENSSL_NO_RFC3779 |
852 | typedef struct ASRange_st { | 852 | typedef struct ASRange_st { |
853 | ASN1_INTEGER *min, *max; | 853 | ASN1_INTEGER *min; |
854 | ASN1_INTEGER *max; | ||
854 | } ASRange; | 855 | } ASRange; |
855 | 856 | ||
856 | # define ASIdOrRange_id 0 | 857 | #define ASIdOrRange_id 0 |
857 | # define ASIdOrRange_range 1 | 858 | #define ASIdOrRange_range 1 |
858 | 859 | ||
859 | typedef struct ASIdOrRange_st { | 860 | typedef struct ASIdOrRange_st { |
860 | int type; | 861 | int type; |
861 | union { | 862 | union { |
862 | ASN1_INTEGER *id; | 863 | ASN1_INTEGER *id; |
863 | ASRange *range; | 864 | ASRange *range; |
864 | } u; | 865 | } u; |
865 | } ASIdOrRange; | 866 | } ASIdOrRange; |
866 | 867 | ||
867 | typedef STACK_OF(ASIdOrRange) ASIdOrRanges; | 868 | typedef STACK_OF(ASIdOrRange) ASIdOrRanges; |
868 | DECLARE_STACK_OF(ASIdOrRange) | 869 | DECLARE_STACK_OF(ASIdOrRange) |
869 | 870 | ||
870 | # define ASIdentifierChoice_inherit 0 | 871 | #define ASIdentifierChoice_inherit 0 |
871 | # define ASIdentifierChoice_asIdsOrRanges 1 | 872 | #define ASIdentifierChoice_asIdsOrRanges 1 |
872 | 873 | ||
873 | typedef struct ASIdentifierChoice_st { | 874 | typedef struct ASIdentifierChoice_st { |
874 | int type; | 875 | int type; |
875 | union { | 876 | union { |
876 | ASN1_NULL *inherit; | 877 | ASN1_NULL *inherit; |
877 | ASIdOrRanges *asIdsOrRanges; | 878 | ASIdOrRanges *asIdsOrRanges; |
878 | } u; | 879 | } u; |
879 | } ASIdentifierChoice; | 880 | } ASIdentifierChoice; |
880 | 881 | ||
881 | typedef struct ASIdentifiers_st { | 882 | typedef struct ASIdentifiers_st { |
882 | ASIdentifierChoice *asnum, *rdi; | 883 | ASIdentifierChoice *asnum; |
884 | ASIdentifierChoice *rdi; | ||
883 | } ASIdentifiers; | 885 | } ASIdentifiers; |
884 | 886 | ||
885 | ASRange *ASRange_new(void); | 887 | ASRange *ASRange_new(void); |
@@ -910,37 +912,38 @@ int i2d_ASIdentifiers(ASIdentifiers *a, unsigned char **out); | |||
910 | extern const ASN1_ITEM ASIdentifiers_it; | 912 | extern const ASN1_ITEM ASIdentifiers_it; |
911 | 913 | ||
912 | typedef struct IPAddressRange_st { | 914 | typedef struct IPAddressRange_st { |
913 | ASN1_BIT_STRING *min, *max; | 915 | ASN1_BIT_STRING *min; |
916 | ASN1_BIT_STRING *max; | ||
914 | } IPAddressRange; | 917 | } IPAddressRange; |
915 | 918 | ||
916 | # define IPAddressOrRange_addressPrefix 0 | 919 | #define IPAddressOrRange_addressPrefix 0 |
917 | # define IPAddressOrRange_addressRange 1 | 920 | #define IPAddressOrRange_addressRange 1 |
918 | 921 | ||
919 | typedef struct IPAddressOrRange_st { | 922 | typedef struct IPAddressOrRange_st { |
920 | int type; | 923 | int type; |
921 | union { | 924 | union { |
922 | ASN1_BIT_STRING *addressPrefix; | 925 | ASN1_BIT_STRING *addressPrefix; |
923 | IPAddressRange *addressRange; | 926 | IPAddressRange *addressRange; |
924 | } u; | 927 | } u; |
925 | } IPAddressOrRange; | 928 | } IPAddressOrRange; |
926 | 929 | ||
927 | typedef STACK_OF(IPAddressOrRange) IPAddressOrRanges; | 930 | typedef STACK_OF(IPAddressOrRange) IPAddressOrRanges; |
928 | DECLARE_STACK_OF(IPAddressOrRange) | 931 | DECLARE_STACK_OF(IPAddressOrRange) |
929 | 932 | ||
930 | # define IPAddressChoice_inherit 0 | 933 | #define IPAddressChoice_inherit 0 |
931 | # define IPAddressChoice_addressesOrRanges 1 | 934 | #define IPAddressChoice_addressesOrRanges 1 |
932 | 935 | ||
933 | typedef struct IPAddressChoice_st { | 936 | typedef struct IPAddressChoice_st { |
934 | int type; | 937 | int type; |
935 | union { | 938 | union { |
936 | ASN1_NULL *inherit; | 939 | ASN1_NULL *inherit; |
937 | IPAddressOrRanges *addressesOrRanges; | 940 | IPAddressOrRanges *addressesOrRanges; |
938 | } u; | 941 | } u; |
939 | } IPAddressChoice; | 942 | } IPAddressChoice; |
940 | 943 | ||
941 | typedef struct IPAddressFamily_st { | 944 | typedef struct IPAddressFamily_st { |
942 | ASN1_OCTET_STRING *addressFamily; | 945 | ASN1_OCTET_STRING *addressFamily; |
943 | IPAddressChoice *ipAddressChoice; | 946 | IPAddressChoice *ipAddressChoice; |
944 | } IPAddressFamily; | 947 | } IPAddressFamily; |
945 | 948 | ||
946 | typedef STACK_OF(IPAddressFamily) IPAddrBlocks; | 949 | typedef STACK_OF(IPAddressFamily) IPAddrBlocks; |
@@ -977,8 +980,8 @@ extern const ASN1_ITEM IPAddressFamily_it; | |||
977 | /* | 980 | /* |
978 | * API tag for elements of the ASIdentifer SEQUENCE. | 981 | * API tag for elements of the ASIdentifer SEQUENCE. |
979 | */ | 982 | */ |
980 | # define V3_ASID_ASNUM 0 | 983 | #define V3_ASID_ASNUM 0 |
981 | # define V3_ASID_RDI 1 | 984 | #define V3_ASID_RDI 1 |
982 | 985 | ||
983 | /* | 986 | /* |
984 | * AFI values, assigned by IANA. It'd be nice to make the AFI | 987 | * AFI values, assigned by IANA. It'd be nice to make the AFI |
@@ -986,8 +989,9 @@ extern const ASN1_ITEM IPAddressFamily_it; | |||
986 | * that would need to be defined for other address families for it to | 989 | * that would need to be defined for other address families for it to |
987 | * be worth the trouble. | 990 | * be worth the trouble. |
988 | */ | 991 | */ |
989 | # define IANA_AFI_IPV4 1 | 992 | #define IANA_AFI_IPV4 1 |
990 | # define IANA_AFI_IPV6 2 | 993 | #define IANA_AFI_IPV6 2 |
994 | |||
991 | /* | 995 | /* |
992 | * Utilities to construct and extract values from RFC3779 extensions, | 996 | * Utilities to construct and extract values from RFC3779 extensions, |
993 | * since some of the encodings (particularly for IP address prefixes | 997 | * since some of the encodings (particularly for IP address prefixes |
@@ -995,19 +999,17 @@ extern const ASN1_ITEM IPAddressFamily_it; | |||
995 | */ | 999 | */ |
996 | int X509v3_asid_add_inherit(ASIdentifiers *asid, int which); | 1000 | int X509v3_asid_add_inherit(ASIdentifiers *asid, int which); |
997 | int X509v3_asid_add_id_or_range(ASIdentifiers *asid, int which, | 1001 | int X509v3_asid_add_id_or_range(ASIdentifiers *asid, int which, |
998 | ASN1_INTEGER *min, ASN1_INTEGER *max); | 1002 | ASN1_INTEGER *min, ASN1_INTEGER *max); |
999 | int X509v3_addr_add_inherit(IPAddrBlocks *addr, | 1003 | int X509v3_addr_add_inherit(IPAddrBlocks *addr, const unsigned afi, |
1000 | const unsigned afi, const unsigned *safi); | 1004 | const unsigned *safi); |
1001 | int X509v3_addr_add_prefix(IPAddrBlocks *addr, | 1005 | int X509v3_addr_add_prefix(IPAddrBlocks *addr, const unsigned afi, |
1002 | const unsigned afi, const unsigned *safi, | 1006 | const unsigned *safi, unsigned char *a, const int prefixlen); |
1003 | unsigned char *a, const int prefixlen); | 1007 | int X509v3_addr_add_range(IPAddrBlocks *addr, const unsigned afi, |
1004 | int X509v3_addr_add_range(IPAddrBlocks *addr, | 1008 | const unsigned *safi, unsigned char *min, unsigned char *max); |
1005 | const unsigned afi, const unsigned *safi, | ||
1006 | unsigned char *min, unsigned char *max); | ||
1007 | unsigned X509v3_addr_get_afi(const IPAddressFamily *f); | 1009 | unsigned X509v3_addr_get_afi(const IPAddressFamily *f); |
1008 | int X509v3_addr_get_range(IPAddressOrRange *aor, const unsigned afi, | 1010 | int X509v3_addr_get_range(IPAddressOrRange *aor, const unsigned afi, |
1009 | unsigned char *min, unsigned char *max, | 1011 | unsigned char *min, unsigned char *max, const int length); |
1010 | const int length); | 1012 | |
1011 | /* | 1013 | /* |
1012 | * Canonical forms. | 1014 | * Canonical forms. |
1013 | */ | 1015 | */ |
@@ -1029,11 +1031,10 @@ int X509v3_addr_subset(IPAddrBlocks *a, IPAddrBlocks *b); | |||
1029 | */ | 1031 | */ |
1030 | int X509v3_asid_validate_path(X509_STORE_CTX *); | 1032 | int X509v3_asid_validate_path(X509_STORE_CTX *); |
1031 | int X509v3_addr_validate_path(X509_STORE_CTX *); | 1033 | int X509v3_addr_validate_path(X509_STORE_CTX *); |
1032 | int X509v3_asid_validate_resource_set(STACK_OF(X509) *chain, | 1034 | int X509v3_asid_validate_resource_set(STACK_OF(X509) *chain, ASIdentifiers *ext, |
1033 | ASIdentifiers *ext, | 1035 | int allow_inheritance); |
1034 | int allow_inheritance); | 1036 | int X509v3_addr_validate_resource_set(STACK_OF(X509) *chain, IPAddrBlocks *ext, |
1035 | int X509v3_addr_validate_resource_set(STACK_OF(X509) *chain, | 1037 | int allow_inheritance); |
1036 | IPAddrBlocks *ext, int allow_inheritance); | ||
1037 | 1038 | ||
1038 | #endif /* OPENSSL_NO_RFC3779 */ | 1039 | #endif /* OPENSSL_NO_RFC3779 */ |
1039 | #endif | 1040 | #endif |