25'ten fazla konu seçemezsiniz Konular bir harf veya rakamla başlamalı, kısa çizgiler ('-') içerebilir ve en fazla 35 karakter uzunluğunda olabilir.
 
 
 
 
 
 

253 satır
6.8 KiB

  1. /* v3_genn.c */
  2. /* Written by Dr Stephen N Henson (steve@openssl.org) for the OpenSSL
  3. * project 1999.
  4. */
  5. /* ====================================================================
  6. * Copyright (c) 1999-2008 The OpenSSL Project. All rights reserved.
  7. *
  8. * Redistribution and use in source and binary forms, with or without
  9. * modification, are permitted provided that the following conditions
  10. * are met:
  11. *
  12. * 1. Redistributions of source code must retain the above copyright
  13. * notice, this list of conditions and the following disclaimer.
  14. *
  15. * 2. Redistributions in binary form must reproduce the above copyright
  16. * notice, this list of conditions and the following disclaimer in
  17. * the documentation and/or other materials provided with the
  18. * distribution.
  19. *
  20. * 3. All advertising materials mentioning features or use of this
  21. * software must display the following acknowledgment:
  22. * "This product includes software developed by the OpenSSL Project
  23. * for use in the OpenSSL Toolkit. (http://www.OpenSSL.org/)"
  24. *
  25. * 4. The names "OpenSSL Toolkit" and "OpenSSL Project" must not be used to
  26. * endorse or promote products derived from this software without
  27. * prior written permission. For written permission, please contact
  28. * licensing@OpenSSL.org.
  29. *
  30. * 5. Products derived from this software may not be called "OpenSSL"
  31. * nor may "OpenSSL" appear in their names without prior written
  32. * permission of the OpenSSL Project.
  33. *
  34. * 6. Redistributions of any form whatsoever must retain the following
  35. * acknowledgment:
  36. * "This product includes software developed by the OpenSSL Project
  37. * for use in the OpenSSL Toolkit (http://www.OpenSSL.org/)"
  38. *
  39. * THIS SOFTWARE IS PROVIDED BY THE OpenSSL PROJECT ``AS IS'' AND ANY
  40. * EXPRESSED OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
  41. * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR
  42. * PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE OpenSSL PROJECT OR
  43. * ITS CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL,
  44. * SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT
  45. * NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES;
  46. * LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
  47. * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT,
  48. * STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE)
  49. * ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED
  50. * OF THE POSSIBILITY OF SUCH DAMAGE.
  51. * ====================================================================
  52. *
  53. * This product includes cryptographic software written by Eric Young
  54. * (eay@cryptsoft.com). This product includes software written by Tim
  55. * Hudson (tjh@cryptsoft.com). */
  56. #include <stdio.h>
  57. #include <openssl/asn1t.h>
  58. #include <openssl/conf.h>
  59. #include <openssl/obj.h>
  60. #include <openssl/x509v3.h>
  61. ASN1_SEQUENCE(OTHERNAME) = {
  62. ASN1_SIMPLE(OTHERNAME, type_id, ASN1_OBJECT),
  63. /* Maybe have a true ANY DEFINED BY later */
  64. ASN1_EXP(OTHERNAME, value, ASN1_ANY, 0)
  65. } ASN1_SEQUENCE_END(OTHERNAME)
  66. IMPLEMENT_ASN1_FUNCTIONS(OTHERNAME)
  67. ASN1_SEQUENCE(EDIPARTYNAME) = {
  68. ASN1_IMP_OPT(EDIPARTYNAME, nameAssigner, DIRECTORYSTRING, 0),
  69. ASN1_IMP_OPT(EDIPARTYNAME, partyName, DIRECTORYSTRING, 1)
  70. } ASN1_SEQUENCE_END(EDIPARTYNAME)
  71. IMPLEMENT_ASN1_FUNCTIONS(EDIPARTYNAME)
  72. ASN1_CHOICE(GENERAL_NAME) = {
  73. ASN1_IMP(GENERAL_NAME, d.otherName, OTHERNAME, GEN_OTHERNAME),
  74. ASN1_IMP(GENERAL_NAME, d.rfc822Name, ASN1_IA5STRING, GEN_EMAIL),
  75. ASN1_IMP(GENERAL_NAME, d.dNSName, ASN1_IA5STRING, GEN_DNS),
  76. /* Don't decode this */
  77. ASN1_IMP(GENERAL_NAME, d.x400Address, ASN1_SEQUENCE, GEN_X400),
  78. /* X509_NAME is a CHOICE type so use EXPLICIT */
  79. ASN1_EXP(GENERAL_NAME, d.directoryName, X509_NAME, GEN_DIRNAME),
  80. ASN1_IMP(GENERAL_NAME, d.ediPartyName, EDIPARTYNAME, GEN_EDIPARTY),
  81. ASN1_IMP(GENERAL_NAME, d.uniformResourceIdentifier, ASN1_IA5STRING, GEN_URI),
  82. ASN1_IMP(GENERAL_NAME, d.iPAddress, ASN1_OCTET_STRING, GEN_IPADD),
  83. ASN1_IMP(GENERAL_NAME, d.registeredID, ASN1_OBJECT, GEN_RID)
  84. } ASN1_CHOICE_END(GENERAL_NAME)
  85. IMPLEMENT_ASN1_FUNCTIONS(GENERAL_NAME)
  86. ASN1_ITEM_TEMPLATE(GENERAL_NAMES) =
  87. ASN1_EX_TEMPLATE_TYPE(ASN1_TFLG_SEQUENCE_OF, 0, GeneralNames, GENERAL_NAME)
  88. ASN1_ITEM_TEMPLATE_END(GENERAL_NAMES)
  89. IMPLEMENT_ASN1_FUNCTIONS(GENERAL_NAMES)
  90. GENERAL_NAME *GENERAL_NAME_dup(GENERAL_NAME *a)
  91. {
  92. return (GENERAL_NAME *) ASN1_dup((i2d_of_void *) i2d_GENERAL_NAME,
  93. (d2i_of_void *) d2i_GENERAL_NAME,
  94. (char *) a);
  95. }
  96. /* Returns 0 if they are equal, != 0 otherwise. */
  97. int GENERAL_NAME_cmp(GENERAL_NAME *a, GENERAL_NAME *b)
  98. {
  99. int result = -1;
  100. if (!a || !b || a->type != b->type) return -1;
  101. switch(a->type)
  102. {
  103. case GEN_X400:
  104. case GEN_EDIPARTY:
  105. result = ASN1_TYPE_cmp(a->d.other, b->d.other);
  106. break;
  107. case GEN_OTHERNAME:
  108. result = OTHERNAME_cmp(a->d.otherName, b->d.otherName);
  109. break;
  110. case GEN_EMAIL:
  111. case GEN_DNS:
  112. case GEN_URI:
  113. result = ASN1_STRING_cmp(a->d.ia5, b->d.ia5);
  114. break;
  115. case GEN_DIRNAME:
  116. result = X509_NAME_cmp(a->d.dirn, b->d.dirn);
  117. break;
  118. case GEN_IPADD:
  119. result = ASN1_OCTET_STRING_cmp(a->d.ip, b->d.ip);
  120. break;
  121. case GEN_RID:
  122. result = OBJ_cmp(a->d.rid, b->d.rid);
  123. break;
  124. }
  125. return result;
  126. }
  127. /* Returns 0 if they are equal, != 0 otherwise. */
  128. int OTHERNAME_cmp(OTHERNAME *a, OTHERNAME *b)
  129. {
  130. int result = -1;
  131. if (!a || !b) return -1;
  132. /* Check their type first. */
  133. if ((result = OBJ_cmp(a->type_id, b->type_id)) != 0)
  134. return result;
  135. /* Check the value. */
  136. result = ASN1_TYPE_cmp(a->value, b->value);
  137. return result;
  138. }
  139. void GENERAL_NAME_set0_value(GENERAL_NAME *a, int type, void *value)
  140. {
  141. switch(type)
  142. {
  143. case GEN_X400:
  144. case GEN_EDIPARTY:
  145. a->d.other = value;
  146. break;
  147. case GEN_OTHERNAME:
  148. a->d.otherName = value;
  149. break;
  150. case GEN_EMAIL:
  151. case GEN_DNS:
  152. case GEN_URI:
  153. a->d.ia5 = value;
  154. break;
  155. case GEN_DIRNAME:
  156. a->d.dirn = value;
  157. break;
  158. case GEN_IPADD:
  159. a->d.ip = value;
  160. break;
  161. case GEN_RID:
  162. a->d.rid = value;
  163. break;
  164. }
  165. a->type = type;
  166. }
  167. void *GENERAL_NAME_get0_value(GENERAL_NAME *a, int *ptype)
  168. {
  169. if (ptype)
  170. *ptype = a->type;
  171. switch(a->type)
  172. {
  173. case GEN_X400:
  174. case GEN_EDIPARTY:
  175. return a->d.other;
  176. case GEN_OTHERNAME:
  177. return a->d.otherName;
  178. case GEN_EMAIL:
  179. case GEN_DNS:
  180. case GEN_URI:
  181. return a->d.ia5;
  182. case GEN_DIRNAME:
  183. return a->d.dirn;
  184. case GEN_IPADD:
  185. return a->d.ip;
  186. case GEN_RID:
  187. return a->d.rid;
  188. default:
  189. return NULL;
  190. }
  191. }
  192. int GENERAL_NAME_set0_othername(GENERAL_NAME *gen,
  193. ASN1_OBJECT *oid, ASN1_TYPE *value)
  194. {
  195. OTHERNAME *oth;
  196. oth = OTHERNAME_new();
  197. if (!oth)
  198. return 0;
  199. oth->type_id = oid;
  200. oth->value = value;
  201. GENERAL_NAME_set0_value(gen, GEN_OTHERNAME, oth);
  202. return 1;
  203. }
  204. int GENERAL_NAME_get0_otherName(GENERAL_NAME *gen,
  205. ASN1_OBJECT **poid, ASN1_TYPE **pvalue)
  206. {
  207. if (gen->type != GEN_OTHERNAME)
  208. return 0;
  209. if (poid)
  210. *poid = gen->d.otherName->type_id;
  211. if (pvalue)
  212. *pvalue = gen->d.otherName->value;
  213. return 1;
  214. }