crypto/x509/v3_info.c

   1 /*
   2  * Copyright 1999-2021 The OpenSSL Project Authors. All Rights Reserved.
   3  *
   4  * Licensed under the Apache License 2.0 (the "License").  You may not use
   5  * this file except in compliance with the License.  You can obtain a copy
   6  * in the file LICENSE in the source distribution or at
   7  * https://www.openssl.org/source/license.html
   8  */
   9
  10 #include <stdio.h>
  11 #include "internal/cryptlib.h"
  12 #include <openssl/conf.h>
  13 #include <openssl/asn1.h>
  14 #include <openssl/asn1t.h>
  15 #include <openssl/x509v3.h>
  16 #include "ext_dat.h"
  17
  18 static STACK_OF(CONF_VALUE) *i2v_AUTHORITY_INFO_ACCESS(X509V3_EXT_METHOD
  19                                                        *method, AUTHORITY_INFO_ACCESS
  20                                                        *ainfo, STACK_OF(CONF_VALUE)
  21                                                        *ret);
  22 static AUTHORITY_INFO_ACCESS *v2i_AUTHORITY_INFO_ACCESS(X509V3_EXT_METHOD
  23                                                         *method,
  24                                                         X509V3_CTX *ctx,
  25                                                         STACK_OF(CONF_VALUE)
  26                                                         *nval);
  27
  28 const X509V3_EXT_METHOD ossl_v3_info = { NID_info_access, X509V3_EXT_MULTILINE,
  29     ASN1_ITEM_ref(AUTHORITY_INFO_ACCESS),
  30     0, 0, 0, 0,
  31     0, 0,
  32     (X509V3_EXT_I2V) i2v_AUTHORITY_INFO_ACCESS,
  33     (X509V3_EXT_V2I)v2i_AUTHORITY_INFO_ACCESS,
  34     0, 0,
  35     NULL
  36 };
  37
  38 const X509V3_EXT_METHOD ossl_v3_sinfo = { NID_sinfo_access, X509V3_EXT_MULTILINE,
  39     ASN1_ITEM_ref(AUTHORITY_INFO_ACCESS),
  40     0, 0, 0, 0,
  41     0, 0,
  42     (X509V3_EXT_I2V) i2v_AUTHORITY_INFO_ACCESS,
  43     (X509V3_EXT_V2I)v2i_AUTHORITY_INFO_ACCESS,
  44     0, 0,
  45     NULL
  46 };
  47
  48 ASN1_SEQUENCE(ACCESS_DESCRIPTION) = {
  49         ASN1_SIMPLE(ACCESS_DESCRIPTION, method, ASN1_OBJECT),
  50         ASN1_SIMPLE(ACCESS_DESCRIPTION, location, GENERAL_NAME)
  51 } ASN1_SEQUENCE_END(ACCESS_DESCRIPTION)
  52
  53 IMPLEMENT_ASN1_FUNCTIONS(ACCESS_DESCRIPTION)
  54
  55 ASN1_ITEM_TEMPLATE(AUTHORITY_INFO_ACCESS) =
  56         ASN1_EX_TEMPLATE_TYPE(ASN1_TFLG_SEQUENCE_OF, 0, GeneralNames, ACCESS_DESCRIPTION)
  57 ASN1_ITEM_TEMPLATE_END(AUTHORITY_INFO_ACCESS)
  58
  59 IMPLEMENT_ASN1_FUNCTIONS(AUTHORITY_INFO_ACCESS)
  60
  61 static STACK_OF(CONF_VALUE) *i2v_AUTHORITY_INFO_ACCESS(
  62     X509V3_EXT_METHOD *method, AUTHORITY_INFO_ACCESS *ainfo,
  63     STACK_OF(CONF_VALUE) *ret)
  64 {
  65     ACCESS_DESCRIPTION *desc;
  66     int i, nlen;
  67     char objtmp[80], *ntmp;
  68     CONF_VALUE *vtmp;
  69     STACK_OF(CONF_VALUE) *tret = ret;
  70
  71     for (i = 0; i < sk_ACCESS_DESCRIPTION_num(ainfo); i++) {
  72         STACK_OF(CONF_VALUE) *tmp;
  73
  74         desc = sk_ACCESS_DESCRIPTION_value(ainfo, i);
  75         tmp = i2v_GENERAL_NAME(method, desc->location, tret);
  76         if (tmp == NULL) {
  77             ERR_raise(ERR_LIB_X509V3, ERR_R_ASN1_LIB);
  78             goto err;
  79         }
  80         tret = tmp;
  81         vtmp = sk_CONF_VALUE_value(tret, i);
  82         i2t_ASN1_OBJECT(objtmp, sizeof(objtmp), desc->method);
  83         nlen = strlen(objtmp) + 3 + strlen(vtmp->name) + 1;
  84         ntmp = OPENSSL_malloc(nlen);
  85         if (ntmp == NULL)
  86             goto err;
  87         BIO_snprintf(ntmp, nlen, "%s - %s", objtmp, vtmp->name);
  88         OPENSSL_free(vtmp->name);
  89         vtmp->name = ntmp;
  90     }
  91     if (ret == NULL && tret == NULL)
  92         return sk_CONF_VALUE_new_null();
  93
  94     return tret;
  95  err:
  96     if (ret == NULL && tret != NULL)
  97         sk_CONF_VALUE_pop_free(tret, X509V3_conf_free);
  98     return NULL;
  99 }
 100
 101 static AUTHORITY_INFO_ACCESS *v2i_AUTHORITY_INFO_ACCESS(X509V3_EXT_METHOD
 102                                                         *method,
 103                                                         X509V3_CTX *ctx,
 104                                                         STACK_OF(CONF_VALUE)
 105                                                         *nval)
 106 {
 107     AUTHORITY_INFO_ACCESS *ainfo = NULL;
 108     CONF_VALUE *cnf, ctmp;
 109     ACCESS_DESCRIPTION *acc;
 110     int i;
 111     const int num = sk_CONF_VALUE_num(nval);
 112     char *objtmp, *ptmp;
 113
 114     if ((ainfo = sk_ACCESS_DESCRIPTION_new_reserve(NULL, num)) == NULL) {
 115         ERR_raise(ERR_LIB_X509V3, ERR_R_CRYPTO_LIB);
 116         return NULL;
 117     }
 118     for (i = 0; i < num; i++) {
 119         cnf = sk_CONF_VALUE_value(nval, i);
 120         if ((acc = ACCESS_DESCRIPTION_new()) == NULL) {
 121             ERR_raise(ERR_LIB_X509V3, ERR_R_ASN1_LIB);
 122             goto err;
 123         }
 124         sk_ACCESS_DESCRIPTION_push(ainfo, acc); /* Cannot fail due to reserve */
 125         ptmp = strchr(cnf->name, ';');
 126         if (ptmp == NULL) {
 127             ERR_raise(ERR_LIB_X509V3, X509V3_R_INVALID_SYNTAX);
 128             goto err;
 129         }
 130         ctmp.name = ptmp + 1;
 131         ctmp.value = cnf->value;
 132         if (!v2i_GENERAL_NAME_ex(acc->location, method, ctx, &ctmp, 0))
 133             goto err;
 134         if ((objtmp = OPENSSL_strndup(cnf->name, ptmp - cnf->name)) == NULL)
 135             goto err;
 136         acc->method = OBJ_txt2obj(objtmp, 0);
 137         if (!acc->method) {
 138             ERR_raise_data(ERR_LIB_X509V3, X509V3_R_BAD_OBJECT,
 139                            "value=%s", objtmp);
 140             OPENSSL_free(objtmp);
 141             goto err;
 142         }
 143         OPENSSL_free(objtmp);
 144     }
 145     return ainfo;
 146  err:
 147     sk_ACCESS_DESCRIPTION_pop_free(ainfo, ACCESS_DESCRIPTION_free);
 148     return NULL;
 149 }
 150
 151 int i2a_ACCESS_DESCRIPTION(BIO *bp, const ACCESS_DESCRIPTION *a)
 152 {
 153     i2a_ASN1_OBJECT(bp, a->method);
 154     return 2;
 155 }