diff options
Diffstat (limited to 'src/lib/libcrypto/ocsp/ocsp_prn.c')
| -rw-r--r-- | src/lib/libcrypto/ocsp/ocsp_prn.c | 100 |
1 files changed, 51 insertions, 49 deletions
diff --git a/src/lib/libcrypto/ocsp/ocsp_prn.c b/src/lib/libcrypto/ocsp/ocsp_prn.c index 9e4b81f061..b5031cd091 100644 --- a/src/lib/libcrypto/ocsp/ocsp_prn.c +++ b/src/lib/libcrypto/ocsp/ocsp_prn.c | |||
| @@ -15,7 +15,7 @@ | |||
| 15 | * are met: | 15 | * are met: |
| 16 | * | 16 | * |
| 17 | * 1. Redistributions of source code must retain the above copyright | 17 | * 1. Redistributions of source code must retain the above copyright |
| 18 | * notice, this list of conditions and the following disclaimer. | 18 | * notice, this list of conditions and the following disclaimer. |
| 19 | * | 19 | * |
| 20 | * 2. Redistributions in binary form must reproduce the above copyright | 20 | * 2. Redistributions in binary form must reproduce the above copyright |
| 21 | * notice, this list of conditions and the following disclaimer in | 21 | * notice, this list of conditions and the following disclaimer in |
| @@ -93,7 +93,7 @@ table2string(long s, const OCSP_TBLSTR *ts, int len) | |||
| 93 | { | 93 | { |
| 94 | const OCSP_TBLSTR *p; | 94 | const OCSP_TBLSTR *p; |
| 95 | 95 | ||
| 96 | for (p=ts; p < ts + len; p++) | 96 | for (p = ts; p < ts + len; p++) |
| 97 | if (p->t == s) | 97 | if (p->t == s) |
| 98 | return p->m; | 98 | return p->m; |
| 99 | return "(UNKNOWN)"; | 99 | return "(UNKNOWN)"; |
| @@ -103,42 +103,42 @@ const char * | |||
| 103 | OCSP_response_status_str(long s) | 103 | OCSP_response_status_str(long s) |
| 104 | { | 104 | { |
| 105 | static const OCSP_TBLSTR rstat_tbl[] = { | 105 | static const OCSP_TBLSTR rstat_tbl[] = { |
| 106 | { OCSP_RESPONSE_STATUS_SUCCESSFUL, "successful" }, | 106 | { OCSP_RESPONSE_STATUS_SUCCESSFUL, "successful" }, |
| 107 | { OCSP_RESPONSE_STATUS_MALFORMEDREQUEST, "malformedrequest" }, | 107 | { OCSP_RESPONSE_STATUS_MALFORMEDREQUEST, "malformedrequest" }, |
| 108 | { OCSP_RESPONSE_STATUS_INTERNALERROR, "internalerror" }, | 108 | { OCSP_RESPONSE_STATUS_INTERNALERROR, "internalerror" }, |
| 109 | { OCSP_RESPONSE_STATUS_TRYLATER, "trylater" }, | 109 | { OCSP_RESPONSE_STATUS_TRYLATER, "trylater" }, |
| 110 | { OCSP_RESPONSE_STATUS_SIGREQUIRED, "sigrequired" }, | 110 | { OCSP_RESPONSE_STATUS_SIGREQUIRED, "sigrequired" }, |
| 111 | { OCSP_RESPONSE_STATUS_UNAUTHORIZED, "unauthorized" } | 111 | { OCSP_RESPONSE_STATUS_UNAUTHORIZED, "unauthorized" } |
| 112 | }; | 112 | }; |
| 113 | return table2string(s, rstat_tbl, 6); | 113 | return table2string(s, rstat_tbl, 6); |
| 114 | } | 114 | } |
| 115 | 115 | ||
| 116 | const char * | 116 | const char * |
| 117 | OCSP_cert_status_str(long s) | 117 | OCSP_cert_status_str(long s) |
| 118 | { | 118 | { |
| 119 | static const OCSP_TBLSTR cstat_tbl[] = { | 119 | static const OCSP_TBLSTR cstat_tbl[] = { |
| 120 | { V_OCSP_CERTSTATUS_GOOD, "good" }, | 120 | { V_OCSP_CERTSTATUS_GOOD, "good" }, |
| 121 | { V_OCSP_CERTSTATUS_REVOKED, "revoked" }, | 121 | { V_OCSP_CERTSTATUS_REVOKED, "revoked" }, |
| 122 | { V_OCSP_CERTSTATUS_UNKNOWN, "unknown" } | 122 | { V_OCSP_CERTSTATUS_UNKNOWN, "unknown" } |
| 123 | }; | 123 | }; |
| 124 | return table2string(s, cstat_tbl, 3); | 124 | return table2string(s, cstat_tbl, 3); |
| 125 | } | 125 | } |
| 126 | 126 | ||
| 127 | const char * | 127 | const char * |
| 128 | OCSP_crl_reason_str(long s) | 128 | OCSP_crl_reason_str(long s) |
| 129 | { | 129 | { |
| 130 | static const OCSP_TBLSTR reason_tbl[] = { | 130 | static const OCSP_TBLSTR reason_tbl[] = { |
| 131 | { OCSP_REVOKED_STATUS_UNSPECIFIED, "unspecified" }, | 131 | { OCSP_REVOKED_STATUS_UNSPECIFIED, "unspecified" }, |
| 132 | { OCSP_REVOKED_STATUS_KEYCOMPROMISE, "keyCompromise" }, | 132 | { OCSP_REVOKED_STATUS_KEYCOMPROMISE, "keyCompromise" }, |
| 133 | { OCSP_REVOKED_STATUS_CACOMPROMISE, "cACompromise" }, | 133 | { OCSP_REVOKED_STATUS_CACOMPROMISE, "cACompromise" }, |
| 134 | { OCSP_REVOKED_STATUS_AFFILIATIONCHANGED, "affiliationChanged" }, | 134 | { OCSP_REVOKED_STATUS_AFFILIATIONCHANGED, "affiliationChanged" }, |
| 135 | { OCSP_REVOKED_STATUS_SUPERSEDED, "superseded" }, | 135 | { OCSP_REVOKED_STATUS_SUPERSEDED, "superseded" }, |
| 136 | { OCSP_REVOKED_STATUS_CESSATIONOFOPERATION, "cessationOfOperation" }, | 136 | { OCSP_REVOKED_STATUS_CESSATIONOFOPERATION, "cessationOfOperation" }, |
| 137 | { OCSP_REVOKED_STATUS_CERTIFICATEHOLD, "certificateHold" }, | 137 | { OCSP_REVOKED_STATUS_CERTIFICATEHOLD, "certificateHold" }, |
| 138 | { OCSP_REVOKED_STATUS_REMOVEFROMCRL, "removeFromCRL" } | 138 | { OCSP_REVOKED_STATUS_REMOVEFROMCRL, "removeFromCRL" } |
| 139 | }; | 139 | }; |
| 140 | return table2string(s, reason_tbl, 8); | 140 | return table2string(s, reason_tbl, 8); |
| 141 | } | 141 | } |
| 142 | 142 | ||
| 143 | int | 143 | int |
| 144 | OCSP_REQUEST_print(BIO *bp, OCSP_REQUEST* o, unsigned long flags) | 144 | OCSP_REQUEST_print(BIO *bp, OCSP_REQUEST* o, unsigned long flags) |
| @@ -150,17 +150,17 @@ OCSP_REQUEST_print(BIO *bp, OCSP_REQUEST* o, unsigned long flags) | |||
| 150 | OCSP_REQINFO *inf = o->tbsRequest; | 150 | OCSP_REQINFO *inf = o->tbsRequest; |
| 151 | OCSP_SIGNATURE *sig = o->optionalSignature; | 151 | OCSP_SIGNATURE *sig = o->optionalSignature; |
| 152 | 152 | ||
| 153 | if (BIO_write(bp,"OCSP Request Data:\n",19) <= 0) | 153 | if (BIO_write(bp, "OCSP Request Data:\n", 19) <= 0) |
| 154 | goto err; | 154 | goto err; |
| 155 | l = ASN1_INTEGER_get(inf->version); | 155 | l = ASN1_INTEGER_get(inf->version); |
| 156 | if (BIO_printf(bp," Version: %lu (0x%lx)",l+1,l) <= 0) | 156 | if (BIO_printf(bp, " Version: %lu (0x%lx)", l+1, l) <= 0) |
| 157 | goto err; | 157 | goto err; |
| 158 | if (inf->requestorName != NULL) { | 158 | if (inf->requestorName != NULL) { |
| 159 | if (BIO_write(bp,"\n Requestor Name: ",21) <= 0) | 159 | if (BIO_write(bp, "\n Requestor Name: ", 21) <= 0) |
| 160 | goto err; | 160 | goto err; |
| 161 | GENERAL_NAME_print(bp, inf->requestorName); | 161 | GENERAL_NAME_print(bp, inf->requestorName); |
| 162 | } | 162 | } |
| 163 | if (BIO_write(bp,"\n Requestor List:\n",21) <= 0) | 163 | if (BIO_write(bp, "\n Requestor List:\n", 21) <= 0) |
| 164 | goto err; | 164 | goto err; |
| 165 | for (i = 0; i < sk_OCSP_ONEREQ_num(inf->requestList); i++) { | 165 | for (i = 0; i < sk_OCSP_ONEREQ_num(inf->requestList); i++) { |
| 166 | one = sk_OCSP_ONEREQ_value(inf->requestList, i); | 166 | one = sk_OCSP_ONEREQ_value(inf->requestList, i); |
| @@ -176,12 +176,13 @@ OCSP_REQUEST_print(BIO *bp, OCSP_REQUEST* o, unsigned long flags) | |||
| 176 | if (sig) { | 176 | if (sig) { |
| 177 | X509_signature_print(bp, sig->signatureAlgorithm, | 177 | X509_signature_print(bp, sig->signatureAlgorithm, |
| 178 | sig->signature); | 178 | sig->signature); |
| 179 | for (i=0; i<sk_X509_num(sig->certs); i++) { | 179 | for (i = 0; i < sk_X509_num(sig->certs); i++) { |
| 180 | X509_print(bp, sk_X509_value(sig->certs,i)); | 180 | X509_print(bp, sk_X509_value(sig->certs, i)); |
| 181 | PEM_write_bio_X509(bp,sk_X509_value(sig->certs,i)); | 181 | PEM_write_bio_X509(bp, sk_X509_value(sig->certs, i)); |
| 182 | } | 182 | } |
| 183 | } | 183 | } |
| 184 | return 1; | 184 | return 1; |
| 185 | |||
| 185 | err: | 186 | err: |
| 186 | return 0; | 187 | return 0; |
| 187 | } | 188 | } |
| @@ -200,20 +201,20 @@ OCSP_RESPONSE_print(BIO *bp, OCSP_RESPONSE* o, unsigned long flags) | |||
| 200 | OCSP_SINGLERESP *single = NULL; | 201 | OCSP_SINGLERESP *single = NULL; |
| 201 | OCSP_RESPBYTES *rb = o->responseBytes; | 202 | OCSP_RESPBYTES *rb = o->responseBytes; |
| 202 | 203 | ||
| 203 | if (BIO_puts(bp,"OCSP Response Data:\n") <= 0) | 204 | if (BIO_puts(bp, "OCSP Response Data:\n") <= 0) |
| 204 | goto err; | 205 | goto err; |
| 205 | l = ASN1_ENUMERATED_get(o->responseStatus); | 206 | l = ASN1_ENUMERATED_get(o->responseStatus); |
| 206 | if (BIO_printf(bp," OCSP Response Status: %s (0x%lx)\n", | 207 | if (BIO_printf(bp, " OCSP Response Status: %s (0x%lx)\n", |
| 207 | OCSP_response_status_str(l), l) <= 0) | 208 | OCSP_response_status_str(l), l) <= 0) |
| 208 | goto err; | 209 | goto err; |
| 209 | if (rb == NULL) | 210 | if (rb == NULL) |
| 210 | return 1; | 211 | return 1; |
| 211 | if (BIO_puts(bp," Response Type: ") <= 0) | 212 | if (BIO_puts(bp, " Response Type: ") <= 0) |
| 212 | goto err; | 213 | goto err; |
| 213 | if(i2a_ASN1_OBJECT(bp, rb->responseType) <= 0) | 214 | if (i2a_ASN1_OBJECT(bp, rb->responseType) <= 0) |
| 214 | goto err; | 215 | goto err; |
| 215 | if (OBJ_obj2nid(rb->responseType) != NID_id_pkix_OCSP_basic) { | 216 | if (OBJ_obj2nid(rb->responseType) != NID_id_pkix_OCSP_basic) { |
| 216 | BIO_puts(bp," (unknown response type)\n"); | 217 | BIO_puts(bp, " (unknown response type)\n"); |
| 217 | return 1; | 218 | return 1; |
| 218 | } | 219 | } |
| 219 | 220 | ||
| @@ -222,12 +223,12 @@ OCSP_RESPONSE_print(BIO *bp, OCSP_RESPONSE* o, unsigned long flags) | |||
| 222 | goto err; | 223 | goto err; |
| 223 | rd = br->tbsResponseData; | 224 | rd = br->tbsResponseData; |
| 224 | l = ASN1_INTEGER_get(rd->version); | 225 | l = ASN1_INTEGER_get(rd->version); |
| 225 | if (BIO_printf(bp,"\n Version: %lu (0x%lx)\n", l+1,l) <= 0) | 226 | if (BIO_printf(bp, "\n Version: %lu (0x%lx)\n", l+1, l) <= 0) |
| 226 | goto err; | 227 | goto err; |
| 227 | if (BIO_puts(bp," Responder Id: ") <= 0) | 228 | if (BIO_puts(bp, " Responder Id: ") <= 0) |
| 228 | goto err; | 229 | goto err; |
| 229 | 230 | ||
| 230 | rid = rd->responderId; | 231 | rid = rd->responderId; |
| 231 | switch (rid->type) { | 232 | switch (rid->type) { |
| 232 | case V_OCSP_RESPID_NAME: | 233 | case V_OCSP_RESPID_NAME: |
| 233 | X509_NAME_print_ex(bp, rid->value.byName, 0, XN_FLAG_ONELINE); | 234 | X509_NAME_print_ex(bp, rid->value.byName, 0, XN_FLAG_ONELINE); |
| @@ -237,11 +238,11 @@ OCSP_RESPONSE_print(BIO *bp, OCSP_RESPONSE* o, unsigned long flags) | |||
| 237 | break; | 238 | break; |
| 238 | } | 239 | } |
| 239 | 240 | ||
| 240 | if (BIO_printf(bp,"\n Produced At: ")<=0) | 241 | if (BIO_printf(bp, "\n Produced At: ")<=0) |
| 241 | goto err; | 242 | goto err; |
| 242 | if (!ASN1_GENERALIZEDTIME_print(bp, rd->producedAt)) | 243 | if (!ASN1_GENERALIZEDTIME_print(bp, rd->producedAt)) |
| 243 | goto err; | 244 | goto err; |
| 244 | if (BIO_printf(bp,"\n Responses:\n") <= 0) | 245 | if (BIO_printf(bp, "\n Responses:\n") <= 0) |
| 245 | goto err; | 246 | goto err; |
| 246 | for (i = 0; i < sk_OCSP_SINGLERESP_num(rd->responses); i++) { | 247 | for (i = 0; i < sk_OCSP_SINGLERESP_num(rd->responses); i++) { |
| 247 | if (! sk_OCSP_SINGLERESP_value(rd->responses, i)) | 248 | if (! sk_OCSP_SINGLERESP_value(rd->responses, i)) |
| @@ -251,15 +252,15 @@ OCSP_RESPONSE_print(BIO *bp, OCSP_RESPONSE* o, unsigned long flags) | |||
| 251 | if (ocsp_certid_print(bp, cid, 4) <= 0) | 252 | if (ocsp_certid_print(bp, cid, 4) <= 0) |
| 252 | goto err; | 253 | goto err; |
| 253 | cst = single->certStatus; | 254 | cst = single->certStatus; |
| 254 | if (BIO_printf(bp," Cert Status: %s", | 255 | if (BIO_printf(bp, " Cert Status: %s", |
| 255 | OCSP_cert_status_str(cst->type)) <= 0) | 256 | OCSP_cert_status_str(cst->type)) <= 0) |
| 256 | goto err; | 257 | goto err; |
| 257 | if (cst->type == V_OCSP_CERTSTATUS_REVOKED) { | 258 | if (cst->type == V_OCSP_CERTSTATUS_REVOKED) { |
| 258 | rev = cst->value.revoked; | 259 | rev = cst->value.revoked; |
| 259 | if (BIO_printf(bp, "\n Revocation Time: ") <= 0) | 260 | if (BIO_printf(bp, "\n Revocation Time: ") <= 0) |
| 260 | goto err; | 261 | goto err; |
| 261 | if (!ASN1_GENERALIZEDTIME_print(bp, | 262 | if (!ASN1_GENERALIZEDTIME_print(bp, |
| 262 | rev->revocationTime)) | 263 | rev->revocationTime)) |
| 263 | goto err; | 264 | goto err; |
| 264 | if (rev->revocationReason) { | 265 | if (rev->revocationReason) { |
| 265 | l = ASN1_ENUMERATED_get(rev->revocationReason); | 266 | l = ASN1_ENUMERATED_get(rev->revocationReason); |
| @@ -269,22 +270,22 @@ OCSP_RESPONSE_print(BIO *bp, OCSP_RESPONSE* o, unsigned long flags) | |||
| 269 | goto err; | 270 | goto err; |
| 270 | } | 271 | } |
| 271 | } | 272 | } |
| 272 | if (BIO_printf(bp,"\n This Update: ") <= 0) | 273 | if (BIO_printf(bp, "\n This Update: ") <= 0) |
| 273 | goto err; | 274 | goto err; |
| 274 | if (!ASN1_GENERALIZEDTIME_print(bp, single->thisUpdate)) | 275 | if (!ASN1_GENERALIZEDTIME_print(bp, single->thisUpdate)) |
| 275 | goto err; | 276 | goto err; |
| 276 | if (single->nextUpdate) { | 277 | if (single->nextUpdate) { |
| 277 | if (BIO_printf(bp,"\n Next Update: ") <= 0) | 278 | if (BIO_printf(bp, "\n Next Update: ") <= 0) |
| 278 | goto err; | 279 | goto err; |
| 279 | if (!ASN1_GENERALIZEDTIME_print(bp,single->nextUpdate)) | 280 | if (!ASN1_GENERALIZEDTIME_print(bp, single->nextUpdate)) |
| 280 | goto err; | 281 | goto err; |
| 281 | } | 282 | } |
| 282 | if (BIO_write(bp,"\n",1) <= 0) | 283 | if (BIO_write(bp, "\n", 1) <= 0) |
| 283 | goto err; | 284 | goto err; |
| 284 | if (!X509V3_extensions_print(bp, "Response Single Extensions", | 285 | if (!X509V3_extensions_print(bp, "Response Single Extensions", |
| 285 | single->singleExtensions, flags, 8)) | 286 | single->singleExtensions, flags, 8)) |
| 286 | goto err; | 287 | goto err; |
| 287 | if (BIO_write(bp,"\n",1) <= 0) | 288 | if (BIO_write(bp, "\n", 1) <= 0) |
| 288 | goto err; | 289 | goto err; |
| 289 | } | 290 | } |
| 290 | if (!X509V3_extensions_print(bp, "Response Extensions", | 291 | if (!X509V3_extensions_print(bp, "Response Extensions", |
| @@ -296,10 +297,11 @@ OCSP_RESPONSE_print(BIO *bp, OCSP_RESPONSE* o, unsigned long flags) | |||
| 296 | 297 | ||
| 297 | for (i = 0; i < sk_X509_num(br->certs); i++) { | 298 | for (i = 0; i < sk_X509_num(br->certs); i++) { |
| 298 | X509_print(bp, sk_X509_value(br->certs, i)); | 299 | X509_print(bp, sk_X509_value(br->certs, i)); |
| 299 | PEM_write_bio_X509(bp,sk_X509_value(br->certs, i)); | 300 | PEM_write_bio_X509(bp, sk_X509_value(br->certs, i)); |
| 300 | } | 301 | } |
| 301 | 302 | ||
| 302 | ret = 1; | 303 | ret = 1; |
| 304 | |||
| 303 | err: | 305 | err: |
| 304 | OCSP_BASICRESP_free(br); | 306 | OCSP_BASICRESP_free(br); |
| 305 | return ret; | 307 | return ret; |
