You can not select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
 
 
 
 
 
 

252 lines
7.4 KiB

  1. /* v3_genn.c */
  2. /*
  3. * Written by Dr Stephen N Henson (steve@openssl.org) for the OpenSSL project
  4. * 1999.
  5. */
  6. /* ====================================================================
  7. * Copyright (c) 1999-2008 The OpenSSL Project. All rights reserved.
  8. *
  9. * Redistribution and use in source and binary forms, with or without
  10. * modification, are permitted provided that the following conditions
  11. * are met:
  12. *
  13. * 1. Redistributions of source code must retain the above copyright
  14. * notice, this list of conditions and the following disclaimer.
  15. *
  16. * 2. Redistributions in binary form must reproduce the above copyright
  17. * notice, this list of conditions and the following disclaimer in
  18. * the documentation and/or other materials provided with the
  19. * distribution.
  20. *
  21. * 3. All advertising materials mentioning features or use of this
  22. * software must display the following acknowledgment:
  23. * "This product includes software developed by the OpenSSL Project
  24. * for use in the OpenSSL Toolkit. (http://www.OpenSSL.org/)"
  25. *
  26. * 4. The names "OpenSSL Toolkit" and "OpenSSL Project" must not be used to
  27. * endorse or promote products derived from this software without
  28. * prior written permission. For written permission, please contact
  29. * licensing@OpenSSL.org.
  30. *
  31. * 5. Products derived from this software may not be called "OpenSSL"
  32. * nor may "OpenSSL" appear in their names without prior written
  33. * permission of the OpenSSL Project.
  34. *
  35. * 6. Redistributions of any form whatsoever must retain the following
  36. * acknowledgment:
  37. * "This product includes software developed by the OpenSSL Project
  38. * for use in the OpenSSL Toolkit (http://www.OpenSSL.org/)"
  39. *
  40. * THIS SOFTWARE IS PROVIDED BY THE OpenSSL PROJECT ``AS IS'' AND ANY
  41. * EXPRESSED OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
  42. * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR
  43. * PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE OpenSSL PROJECT OR
  44. * ITS CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL,
  45. * SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT
  46. * NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES;
  47. * LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
  48. * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT,
  49. * STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE)
  50. * ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED
  51. * OF THE POSSIBILITY OF SUCH DAMAGE.
  52. * ====================================================================
  53. *
  54. * This product includes cryptographic software written by Eric Young
  55. * (eay@cryptsoft.com). This product includes software written by Tim
  56. * Hudson (tjh@cryptsoft.com). */
  57. #include <stdio.h>
  58. #include <openssl/asn1t.h>
  59. #include <openssl/conf.h>
  60. #include <openssl/obj.h>
  61. #include <openssl/x509v3.h>
  62. ASN1_SEQUENCE(OTHERNAME) = {
  63. ASN1_SIMPLE(OTHERNAME, type_id, ASN1_OBJECT),
  64. /* Maybe have a true ANY DEFINED BY later */
  65. ASN1_EXP(OTHERNAME, value, ASN1_ANY, 0)
  66. } ASN1_SEQUENCE_END(OTHERNAME)
  67. IMPLEMENT_ASN1_FUNCTIONS(OTHERNAME)
  68. ASN1_SEQUENCE(EDIPARTYNAME) = {
  69. ASN1_IMP_OPT(EDIPARTYNAME, nameAssigner, DIRECTORYSTRING, 0),
  70. ASN1_IMP_OPT(EDIPARTYNAME, partyName, DIRECTORYSTRING, 1)
  71. } ASN1_SEQUENCE_END(EDIPARTYNAME)
  72. IMPLEMENT_ASN1_FUNCTIONS(EDIPARTYNAME)
  73. ASN1_CHOICE(GENERAL_NAME) = {
  74. ASN1_IMP(GENERAL_NAME, d.otherName, OTHERNAME, GEN_OTHERNAME),
  75. ASN1_IMP(GENERAL_NAME, d.rfc822Name, ASN1_IA5STRING, GEN_EMAIL),
  76. ASN1_IMP(GENERAL_NAME, d.dNSName, ASN1_IA5STRING, GEN_DNS),
  77. /* Don't decode this */
  78. ASN1_IMP(GENERAL_NAME, d.x400Address, ASN1_SEQUENCE, GEN_X400),
  79. /* X509_NAME is a CHOICE type so use EXPLICIT */
  80. ASN1_EXP(GENERAL_NAME, d.directoryName, X509_NAME, GEN_DIRNAME),
  81. ASN1_IMP(GENERAL_NAME, d.ediPartyName, EDIPARTYNAME, GEN_EDIPARTY),
  82. ASN1_IMP(GENERAL_NAME, d.uniformResourceIdentifier, ASN1_IA5STRING, GEN_URI),
  83. ASN1_IMP(GENERAL_NAME, d.iPAddress, ASN1_OCTET_STRING, GEN_IPADD),
  84. ASN1_IMP(GENERAL_NAME, d.registeredID, ASN1_OBJECT, GEN_RID)
  85. } ASN1_CHOICE_END(GENERAL_NAME)
  86. IMPLEMENT_ASN1_FUNCTIONS(GENERAL_NAME)
  87. ASN1_ITEM_TEMPLATE(GENERAL_NAMES) =
  88. ASN1_EX_TEMPLATE_TYPE(ASN1_TFLG_SEQUENCE_OF, 0, GeneralNames, GENERAL_NAME)
  89. ASN1_ITEM_TEMPLATE_END(GENERAL_NAMES)
  90. IMPLEMENT_ASN1_FUNCTIONS(GENERAL_NAMES)
  91. GENERAL_NAME *GENERAL_NAME_dup(GENERAL_NAME *a)
  92. {
  93. return (GENERAL_NAME *)ASN1_dup((i2d_of_void *)i2d_GENERAL_NAME,
  94. (d2i_of_void *)d2i_GENERAL_NAME,
  95. (char *)a);
  96. }
  97. /* Returns 0 if they are equal, != 0 otherwise. */
  98. int GENERAL_NAME_cmp(GENERAL_NAME *a, GENERAL_NAME *b)
  99. {
  100. int result = -1;
  101. if (!a || !b || a->type != b->type)
  102. return -1;
  103. switch (a->type) {
  104. case GEN_X400:
  105. case GEN_EDIPARTY:
  106. result = ASN1_TYPE_cmp(a->d.other, b->d.other);
  107. break;
  108. case GEN_OTHERNAME:
  109. result = OTHERNAME_cmp(a->d.otherName, b->d.otherName);
  110. break;
  111. case GEN_EMAIL:
  112. case GEN_DNS:
  113. case GEN_URI:
  114. result = ASN1_STRING_cmp(a->d.ia5, b->d.ia5);
  115. break;
  116. case GEN_DIRNAME:
  117. result = X509_NAME_cmp(a->d.dirn, b->d.dirn);
  118. break;
  119. case GEN_IPADD:
  120. result = ASN1_OCTET_STRING_cmp(a->d.ip, b->d.ip);
  121. break;
  122. case GEN_RID:
  123. result = OBJ_cmp(a->d.rid, b->d.rid);
  124. break;
  125. }
  126. return result;
  127. }
  128. /* Returns 0 if they are equal, != 0 otherwise. */
  129. int OTHERNAME_cmp(OTHERNAME *a, OTHERNAME *b)
  130. {
  131. int result = -1;
  132. if (!a || !b)
  133. return -1;
  134. /* Check their type first. */
  135. if ((result = OBJ_cmp(a->type_id, b->type_id)) != 0)
  136. return result;
  137. /* Check the value. */
  138. result = ASN1_TYPE_cmp(a->value, b->value);
  139. return result;
  140. }
  141. void GENERAL_NAME_set0_value(GENERAL_NAME *a, int type, void *value)
  142. {
  143. switch (type) {
  144. case GEN_X400:
  145. case GEN_EDIPARTY:
  146. a->d.other = value;
  147. break;
  148. case GEN_OTHERNAME:
  149. a->d.otherName = value;
  150. break;
  151. case GEN_EMAIL:
  152. case GEN_DNS:
  153. case GEN_URI:
  154. a->d.ia5 = value;
  155. break;
  156. case GEN_DIRNAME:
  157. a->d.dirn = value;
  158. break;
  159. case GEN_IPADD:
  160. a->d.ip = value;
  161. break;
  162. case GEN_RID:
  163. a->d.rid = value;
  164. break;
  165. }
  166. a->type = type;
  167. }
  168. void *GENERAL_NAME_get0_value(GENERAL_NAME *a, int *ptype)
  169. {
  170. if (ptype)
  171. *ptype = a->type;
  172. switch (a->type) {
  173. case GEN_X400:
  174. case GEN_EDIPARTY:
  175. return a->d.other;
  176. case GEN_OTHERNAME:
  177. return a->d.otherName;
  178. case GEN_EMAIL:
  179. case GEN_DNS:
  180. case GEN_URI:
  181. return a->d.ia5;
  182. case GEN_DIRNAME:
  183. return a->d.dirn;
  184. case GEN_IPADD:
  185. return a->d.ip;
  186. case GEN_RID:
  187. return a->d.rid;
  188. default:
  189. return NULL;
  190. }
  191. }
  192. int GENERAL_NAME_set0_othername(GENERAL_NAME *gen,
  193. ASN1_OBJECT *oid, ASN1_TYPE *value)
  194. {
  195. OTHERNAME *oth;
  196. oth = OTHERNAME_new();
  197. if (!oth)
  198. return 0;
  199. ASN1_TYPE_free(oth->value);
  200. oth->type_id = oid;
  201. oth->value = value;
  202. GENERAL_NAME_set0_value(gen, GEN_OTHERNAME, oth);
  203. return 1;
  204. }
  205. int GENERAL_NAME_get0_otherName(GENERAL_NAME *gen,
  206. ASN1_OBJECT **poid, ASN1_TYPE **pvalue)
  207. {
  208. if (gen->type != GEN_OTHERNAME)
  209. return 0;
  210. if (poid)
  211. *poid = gen->d.otherName->type_id;
  212. if (pvalue)
  213. *pvalue = gen->d.otherName->value;
  214. return 1;
  215. }