diff options
Diffstat (limited to 'src/lib/libcrypto/x509v3/v3_lib.c')
| -rw-r--r-- | src/lib/libcrypto/x509v3/v3_lib.c | 179 |
1 files changed, 108 insertions, 71 deletions
diff --git a/src/lib/libcrypto/x509v3/v3_lib.c b/src/lib/libcrypto/x509v3/v3_lib.c index 8d5e6ee911..3f610cdaa3 100644 --- a/src/lib/libcrypto/x509v3/v3_lib.c +++ b/src/lib/libcrypto/x509v3/v3_lib.c | |||
| @@ -10,7 +10,7 @@ | |||
| 10 | * are met: | 10 | * are met: |
| 11 | * | 11 | * |
| 12 | * 1. Redistributions of source code must retain the above copyright | 12 | * 1. Redistributions of source code must retain the above copyright |
| 13 | * notice, this list of conditions and the following disclaimer. | 13 | * notice, this list of conditions and the following disclaimer. |
| 14 | * | 14 | * |
| 15 | * 2. Redistributions in binary form must reproduce the above copyright | 15 | * 2. Redistributions in binary form must reproduce the above copyright |
| 16 | * notice, this list of conditions and the following disclaimer in | 16 | * notice, this list of conditions and the following disclaimer in |
| @@ -67,74 +67,87 @@ | |||
| 67 | static STACK_OF(X509V3_EXT_METHOD) *ext_list = NULL; | 67 | static STACK_OF(X509V3_EXT_METHOD) *ext_list = NULL; |
| 68 | 68 | ||
| 69 | static int ext_cmp(const X509V3_EXT_METHOD * const *a, | 69 | static int ext_cmp(const X509V3_EXT_METHOD * const *a, |
| 70 | const X509V3_EXT_METHOD * const *b); | 70 | const X509V3_EXT_METHOD * const *b); |
| 71 | static void ext_list_free(X509V3_EXT_METHOD *ext); | 71 | static void ext_list_free(X509V3_EXT_METHOD *ext); |
| 72 | 72 | ||
| 73 | int X509V3_EXT_add(X509V3_EXT_METHOD *ext) | 73 | int |
| 74 | X509V3_EXT_add(X509V3_EXT_METHOD *ext) | ||
| 74 | { | 75 | { |
| 75 | if(!ext_list && !(ext_list = sk_X509V3_EXT_METHOD_new(ext_cmp))) { | 76 | if (!ext_list && !(ext_list = sk_X509V3_EXT_METHOD_new(ext_cmp))) { |
| 76 | X509V3err(X509V3_F_X509V3_EXT_ADD,ERR_R_MALLOC_FAILURE); | 77 | X509V3err(X509V3_F_X509V3_EXT_ADD, ERR_R_MALLOC_FAILURE); |
| 77 | return 0; | 78 | return 0; |
| 78 | } | 79 | } |
| 79 | if(!sk_X509V3_EXT_METHOD_push(ext_list, ext)) { | 80 | if (!sk_X509V3_EXT_METHOD_push(ext_list, ext)) { |
| 80 | X509V3err(X509V3_F_X509V3_EXT_ADD,ERR_R_MALLOC_FAILURE); | 81 | X509V3err(X509V3_F_X509V3_EXT_ADD, ERR_R_MALLOC_FAILURE); |
| 81 | return 0; | 82 | return 0; |
| 82 | } | 83 | } |
| 83 | return 1; | 84 | return 1; |
| 84 | } | 85 | } |
| 85 | 86 | ||
| 86 | static int ext_cmp(const X509V3_EXT_METHOD * const *a, | 87 | static int |
| 87 | const X509V3_EXT_METHOD * const *b) | 88 | ext_cmp(const X509V3_EXT_METHOD * const *a, const X509V3_EXT_METHOD * const *b) |
| 88 | { | 89 | { |
| 89 | return ((*a)->ext_nid - (*b)->ext_nid); | 90 | return ((*a)->ext_nid - (*b)->ext_nid); |
| 90 | } | 91 | } |
| 91 | 92 | ||
| 92 | DECLARE_OBJ_BSEARCH_CMP_FN(const X509V3_EXT_METHOD *, const X509V3_EXT_METHOD *, | 93 | DECLARE_OBJ_BSEARCH_CMP_FN(const X509V3_EXT_METHOD *, |
| 93 | ext); | 94 | const X509V3_EXT_METHOD *, ext); |
| 94 | IMPLEMENT_OBJ_BSEARCH_CMP_FN(const X509V3_EXT_METHOD *, | 95 | IMPLEMENT_OBJ_BSEARCH_CMP_FN(const X509V3_EXT_METHOD *, |
| 95 | const X509V3_EXT_METHOD *, ext); | 96 | const X509V3_EXT_METHOD *, ext); |
| 96 | 97 | ||
| 97 | const X509V3_EXT_METHOD *X509V3_EXT_get_nid(int nid) | 98 | const X509V3_EXT_METHOD * |
| 99 | X509V3_EXT_get_nid(int nid) | ||
| 98 | { | 100 | { |
| 99 | X509V3_EXT_METHOD tmp; | 101 | X509V3_EXT_METHOD tmp; |
| 100 | const X509V3_EXT_METHOD *t = &tmp, * const *ret; | 102 | const X509V3_EXT_METHOD *t = &tmp, * const *ret; |
| 101 | int idx; | 103 | int idx; |
| 102 | if(nid < 0) return NULL; | 104 | |
| 105 | if (nid < 0) | ||
| 106 | return NULL; | ||
| 103 | tmp.ext_nid = nid; | 107 | tmp.ext_nid = nid; |
| 104 | ret = OBJ_bsearch_ext(&t, standard_exts, STANDARD_EXTENSION_COUNT); | 108 | ret = OBJ_bsearch_ext(&t, standard_exts, STANDARD_EXTENSION_COUNT); |
| 105 | if(ret) return *ret; | 109 | if (ret) |
| 106 | if(!ext_list) return NULL; | 110 | return *ret; |
| 111 | if (!ext_list) | ||
| 112 | return NULL; | ||
| 107 | idx = sk_X509V3_EXT_METHOD_find(ext_list, &tmp); | 113 | idx = sk_X509V3_EXT_METHOD_find(ext_list, &tmp); |
| 108 | if(idx == -1) return NULL; | 114 | if (idx == -1) |
| 115 | return NULL; | ||
| 109 | return sk_X509V3_EXT_METHOD_value(ext_list, idx); | 116 | return sk_X509V3_EXT_METHOD_value(ext_list, idx); |
| 110 | } | 117 | } |
| 111 | 118 | ||
| 112 | const X509V3_EXT_METHOD *X509V3_EXT_get(X509_EXTENSION *ext) | 119 | const X509V3_EXT_METHOD * |
| 120 | X509V3_EXT_get(X509_EXTENSION *ext) | ||
| 113 | { | 121 | { |
| 114 | int nid; | 122 | int nid; |
| 115 | if((nid = OBJ_obj2nid(ext->object)) == NID_undef) return NULL; | 123 | |
| 124 | if ((nid = OBJ_obj2nid(ext->object)) == NID_undef) | ||
| 125 | return NULL; | ||
| 116 | return X509V3_EXT_get_nid(nid); | 126 | return X509V3_EXT_get_nid(nid); |
| 117 | } | 127 | } |
| 118 | 128 | ||
| 119 | 129 | int | |
| 120 | int X509V3_EXT_add_list(X509V3_EXT_METHOD *extlist) | 130 | X509V3_EXT_add_list(X509V3_EXT_METHOD *extlist) |
| 121 | { | 131 | { |
| 122 | for(;extlist->ext_nid!=-1;extlist++) | 132 | for (; extlist->ext_nid!=-1; extlist++) |
| 123 | if(!X509V3_EXT_add(extlist)) return 0; | 133 | if (!X509V3_EXT_add(extlist)) |
| 134 | return 0; | ||
| 124 | return 1; | 135 | return 1; |
| 125 | } | 136 | } |
| 126 | 137 | ||
| 127 | int X509V3_EXT_add_alias(int nid_to, int nid_from) | 138 | int |
| 139 | X509V3_EXT_add_alias(int nid_to, int nid_from) | ||
| 128 | { | 140 | { |
| 129 | const X509V3_EXT_METHOD *ext; | 141 | const X509V3_EXT_METHOD *ext; |
| 130 | X509V3_EXT_METHOD *tmpext; | 142 | X509V3_EXT_METHOD *tmpext; |
| 131 | 143 | ||
| 132 | if(!(ext = X509V3_EXT_get_nid(nid_from))) { | 144 | if (!(ext = X509V3_EXT_get_nid(nid_from))) { |
| 133 | X509V3err(X509V3_F_X509V3_EXT_ADD_ALIAS,X509V3_R_EXTENSION_NOT_FOUND); | 145 | X509V3err(X509V3_F_X509V3_EXT_ADD_ALIAS, |
| 146 | X509V3_R_EXTENSION_NOT_FOUND); | ||
| 134 | return 0; | 147 | return 0; |
| 135 | } | 148 | } |
| 136 | if(!(tmpext = malloc(sizeof(X509V3_EXT_METHOD)))) { | 149 | if (!(tmpext = malloc(sizeof(X509V3_EXT_METHOD)))) { |
| 137 | X509V3err(X509V3_F_X509V3_EXT_ADD_ALIAS,ERR_R_MALLOC_FAILURE); | 150 | X509V3err(X509V3_F_X509V3_EXT_ADD_ALIAS, ERR_R_MALLOC_FAILURE); |
| 138 | return 0; | 151 | return 0; |
| 139 | } | 152 | } |
| 140 | *tmpext = *ext; | 153 | *tmpext = *ext; |
| @@ -143,36 +156,44 @@ int X509V3_EXT_add_alias(int nid_to, int nid_from) | |||
| 143 | return X509V3_EXT_add(tmpext); | 156 | return X509V3_EXT_add(tmpext); |
| 144 | } | 157 | } |
| 145 | 158 | ||
| 146 | void X509V3_EXT_cleanup(void) | 159 | void |
| 160 | X509V3_EXT_cleanup(void) | ||
| 147 | { | 161 | { |
| 148 | sk_X509V3_EXT_METHOD_pop_free(ext_list, ext_list_free); | 162 | sk_X509V3_EXT_METHOD_pop_free(ext_list, ext_list_free); |
| 149 | ext_list = NULL; | 163 | ext_list = NULL; |
| 150 | } | 164 | } |
| 151 | 165 | ||
| 152 | static void ext_list_free(X509V3_EXT_METHOD *ext) | 166 | static void |
| 167 | ext_list_free(X509V3_EXT_METHOD *ext) | ||
| 153 | { | 168 | { |
| 154 | if(ext->ext_flags & X509V3_EXT_DYNAMIC) free(ext); | 169 | if (ext->ext_flags & X509V3_EXT_DYNAMIC) |
| 170 | free(ext); | ||
| 155 | } | 171 | } |
| 156 | 172 | ||
| 157 | /* Legacy function: we don't need to add standard extensions | 173 | /* Legacy function: we don't need to add standard extensions |
| 158 | * any more because they are now kept in ext_dat.h. | 174 | * any more because they are now kept in ext_dat.h. |
| 159 | */ | 175 | */ |
| 160 | 176 | ||
| 161 | int X509V3_add_standard_extensions(void) | 177 | int |
| 178 | X509V3_add_standard_extensions(void) | ||
| 162 | { | 179 | { |
| 163 | return 1; | 180 | return 1; |
| 164 | } | 181 | } |
| 165 | 182 | ||
| 166 | /* Return an extension internal structure */ | 183 | /* Return an extension internal structure */ |
| 167 | 184 | ||
| 168 | void *X509V3_EXT_d2i(X509_EXTENSION *ext) | 185 | void * |
| 186 | X509V3_EXT_d2i(X509_EXTENSION *ext) | ||
| 169 | { | 187 | { |
| 170 | const X509V3_EXT_METHOD *method; | 188 | const X509V3_EXT_METHOD *method; |
| 171 | const unsigned char *p; | 189 | const unsigned char *p; |
| 172 | 190 | ||
| 173 | if(!(method = X509V3_EXT_get(ext))) return NULL; | 191 | if (!(method = X509V3_EXT_get(ext))) |
| 192 | return NULL; | ||
| 174 | p = ext->value->data; | 193 | p = ext->value->data; |
| 175 | if(method->it) return ASN1_item_d2i(NULL, &p, ext->value->length, ASN1_ITEM_ptr(method->it)); | 194 | if (method->it) |
| 195 | return ASN1_item_d2i(NULL, &p, ext->value->length, | ||
| 196 | ASN1_ITEM_ptr(method->it)); | ||
| 176 | return method->d2i(NULL, &p, ext->value->length); | 197 | return method->d2i(NULL, &p, ext->value->length); |
| 177 | } | 198 | } |
| 178 | 199 | ||
| @@ -191,43 +212,53 @@ void *X509V3_EXT_d2i(X509_EXTENSION *ext) | |||
| 191 | * -2 extension occurs more than once. | 212 | * -2 extension occurs more than once. |
| 192 | */ | 213 | */ |
| 193 | 214 | ||
| 194 | void *X509V3_get_d2i(STACK_OF(X509_EXTENSION) *x, int nid, int *crit, int *idx) | 215 | void * |
| 216 | X509V3_get_d2i(STACK_OF(X509_EXTENSION) *x, int nid, int *crit, int *idx) | ||
| 195 | { | 217 | { |
| 196 | int lastpos, i; | 218 | int lastpos, i; |
| 197 | X509_EXTENSION *ex, *found_ex = NULL; | 219 | X509_EXTENSION *ex, *found_ex = NULL; |
| 198 | if(!x) { | 220 | |
| 199 | if(idx) *idx = -1; | 221 | if (!x) { |
| 200 | if(crit) *crit = -1; | 222 | if (idx) |
| 223 | *idx = -1; | ||
| 224 | if (crit) | ||
| 225 | *crit = -1; | ||
| 201 | return NULL; | 226 | return NULL; |
| 202 | } | 227 | } |
| 203 | if(idx) lastpos = *idx + 1; | 228 | if (idx) |
| 204 | else lastpos = 0; | 229 | lastpos = *idx + 1; |
| 205 | if(lastpos < 0) lastpos = 0; | 230 | else |
| 206 | for(i = lastpos; i < sk_X509_EXTENSION_num(x); i++) | 231 | lastpos = 0; |
| 207 | { | 232 | if (lastpos < 0) |
| 233 | lastpos = 0; | ||
| 234 | for (i = lastpos; i < sk_X509_EXTENSION_num(x); i++) { | ||
| 208 | ex = sk_X509_EXTENSION_value(x, i); | 235 | ex = sk_X509_EXTENSION_value(x, i); |
| 209 | if(OBJ_obj2nid(ex->object) == nid) { | 236 | if (OBJ_obj2nid(ex->object) == nid) { |
| 210 | if(idx) { | 237 | if (idx) { |
| 211 | *idx = i; | 238 | *idx = i; |
| 212 | found_ex = ex; | 239 | found_ex = ex; |
| 213 | break; | 240 | break; |
| 214 | } else if(found_ex) { | 241 | } else if (found_ex) { |
| 215 | /* Found more than one */ | 242 | /* Found more than one */ |
| 216 | if(crit) *crit = -2; | 243 | if (crit) |
| 244 | *crit = -2; | ||
| 217 | return NULL; | 245 | return NULL; |
| 218 | } | 246 | } |
| 219 | found_ex = ex; | 247 | found_ex = ex; |
| 220 | } | 248 | } |
| 221 | } | 249 | } |
| 222 | if(found_ex) { | 250 | if (found_ex) { |
| 223 | /* Found it */ | 251 | /* Found it */ |
| 224 | if(crit) *crit = X509_EXTENSION_get_critical(found_ex); | 252 | if (crit) |
| 253 | *crit = X509_EXTENSION_get_critical(found_ex); | ||
| 225 | return X509V3_EXT_d2i(found_ex); | 254 | return X509V3_EXT_d2i(found_ex); |
| 226 | } | 255 | } |
| 227 | 256 | ||
| 228 | /* Extension not found */ | 257 | /* Extension not found */ |
| 229 | if(idx) *idx = -1; | 258 | if (idx) |
| 230 | if(crit) *crit = -1; | 259 | *idx = -1; |
| 260 | if (crit) | ||
| 261 | *crit = -1; | ||
| 231 | return NULL; | 262 | return NULL; |
| 232 | } | 263 | } |
| 233 | 264 | ||
| @@ -236,8 +267,9 @@ void *X509V3_get_d2i(STACK_OF(X509_EXTENSION) *x, int nid, int *crit, int *idx) | |||
| 236 | * 'value' arguments (if relevant) are the extensions internal structure. | 267 | * 'value' arguments (if relevant) are the extensions internal structure. |
| 237 | */ | 268 | */ |
| 238 | 269 | ||
| 239 | int X509V3_add1_i2d(STACK_OF(X509_EXTENSION) **x, int nid, void *value, | 270 | int |
| 240 | int crit, unsigned long flags) | 271 | X509V3_add1_i2d(STACK_OF(X509_EXTENSION) **x, int nid, void *value, |
| 272 | int crit, unsigned long flags) | ||
| 241 | { | 273 | { |
| 242 | int extidx = -1; | 274 | int extidx = -1; |
| 243 | int errcode; | 275 | int errcode; |
| @@ -247,30 +279,31 @@ int X509V3_add1_i2d(STACK_OF(X509_EXTENSION) **x, int nid, void *value, | |||
| 247 | /* If appending we don't care if it exists, otherwise | 279 | /* If appending we don't care if it exists, otherwise |
| 248 | * look for existing extension. | 280 | * look for existing extension. |
| 249 | */ | 281 | */ |
| 250 | if(ext_op != X509V3_ADD_APPEND) | 282 | if (ext_op != X509V3_ADD_APPEND) |
| 251 | extidx = X509v3_get_ext_by_NID(*x, nid, -1); | 283 | extidx = X509v3_get_ext_by_NID(*x, nid, -1); |
| 252 | 284 | ||
| 253 | /* See if extension exists */ | 285 | /* See if extension exists */ |
| 254 | if(extidx >= 0) { | 286 | if (extidx >= 0) { |
| 255 | /* If keep existing, nothing to do */ | 287 | /* If keep existing, nothing to do */ |
| 256 | if(ext_op == X509V3_ADD_KEEP_EXISTING) | 288 | if (ext_op == X509V3_ADD_KEEP_EXISTING) |
| 257 | return 1; | 289 | return 1; |
| 258 | /* If default then its an error */ | 290 | /* If default then its an error */ |
| 259 | if(ext_op == X509V3_ADD_DEFAULT) { | 291 | if (ext_op == X509V3_ADD_DEFAULT) { |
| 260 | errcode = X509V3_R_EXTENSION_EXISTS; | 292 | errcode = X509V3_R_EXTENSION_EXISTS; |
| 261 | goto err; | 293 | goto err; |
| 262 | } | 294 | } |
| 263 | /* If delete, just delete it */ | 295 | /* If delete, just delete it */ |
| 264 | if(ext_op == X509V3_ADD_DELETE) { | 296 | if (ext_op == X509V3_ADD_DELETE) { |
| 265 | if(!sk_X509_EXTENSION_delete(*x, extidx)) return -1; | 297 | if (!sk_X509_EXTENSION_delete(*x, extidx)) |
| 298 | return -1; | ||
| 266 | return 1; | 299 | return 1; |
| 267 | } | 300 | } |
| 268 | } else { | 301 | } else { |
| 269 | /* If replace existing or delete, error since | 302 | /* If replace existing or delete, error since |
| 270 | * extension must exist | 303 | * extension must exist |
| 271 | */ | 304 | */ |
| 272 | if((ext_op == X509V3_ADD_REPLACE_EXISTING) || | 305 | if ((ext_op == X509V3_ADD_REPLACE_EXISTING) || |
| 273 | (ext_op == X509V3_ADD_DELETE)) { | 306 | (ext_op == X509V3_ADD_DELETE)) { |
| 274 | errcode = X509V3_R_EXTENSION_NOT_FOUND; | 307 | errcode = X509V3_R_EXTENSION_NOT_FOUND; |
| 275 | goto err; | 308 | goto err; |
| 276 | } | 309 | } |
| @@ -282,26 +315,30 @@ int X509V3_add1_i2d(STACK_OF(X509_EXTENSION) **x, int nid, void *value, | |||
| 282 | 315 | ||
| 283 | ext = X509V3_EXT_i2d(nid, crit, value); | 316 | ext = X509V3_EXT_i2d(nid, crit, value); |
| 284 | 317 | ||
| 285 | if(!ext) { | 318 | if (!ext) { |
| 286 | X509V3err(X509V3_F_X509V3_ADD1_I2D, X509V3_R_ERROR_CREATING_EXTENSION); | 319 | X509V3err(X509V3_F_X509V3_ADD1_I2D, |
| 320 | X509V3_R_ERROR_CREATING_EXTENSION); | ||
| 287 | return 0; | 321 | return 0; |
| 288 | } | 322 | } |
| 289 | 323 | ||
| 290 | /* If extension exists replace it.. */ | 324 | /* If extension exists replace it.. */ |
| 291 | if(extidx >= 0) { | 325 | if (extidx >= 0) { |
| 292 | extmp = sk_X509_EXTENSION_value(*x, extidx); | 326 | extmp = sk_X509_EXTENSION_value(*x, extidx); |
| 293 | X509_EXTENSION_free(extmp); | 327 | X509_EXTENSION_free(extmp); |
| 294 | if(!sk_X509_EXTENSION_set(*x, extidx, ext)) return -1; | 328 | if (!sk_X509_EXTENSION_set(*x, extidx, ext)) |
| 329 | return -1; | ||
| 295 | return 1; | 330 | return 1; |
| 296 | } | 331 | } |
| 297 | 332 | ||
| 298 | if(!*x && !(*x = sk_X509_EXTENSION_new_null())) return -1; | 333 | if (!*x && !(*x = sk_X509_EXTENSION_new_null())) |
| 299 | if(!sk_X509_EXTENSION_push(*x, ext)) return -1; | 334 | return -1; |
| 335 | if (!sk_X509_EXTENSION_push(*x, ext)) | ||
| 336 | return -1; | ||
| 300 | 337 | ||
| 301 | return 1; | 338 | return 1; |
| 302 | 339 | ||
| 303 | err: | 340 | err: |
| 304 | if(!(flags & X509V3_ADD_SILENT)) | 341 | if (!(flags & X509V3_ADD_SILENT)) |
| 305 | X509V3err(X509V3_F_X509V3_ADD1_I2D, errcode); | 342 | X509V3err(X509V3_F_X509V3_ADD1_I2D, errcode); |
| 306 | return 0; | 343 | return 0; |
| 307 | } | 344 | } |
