crypto/asn1/t_crl.c

   1 /* t_crl.c */
   2 /* Written by Dr Stephen N Henson (shenson@bigfoot.com) for the OpenSSL
   3  * project 1999.
   4  */
   5 /* ====================================================================
   6  * Copyright (c) 1999 The OpenSSL Project.  All rights reserved.
   7  *
   8  * Redistribution and use in source and binary forms, with or without
   9  * modification, are permitted provided that the following conditions
  10  * are met:
  11  *
  12  * 1. Redistributions of source code must retain the above copyright
  13  *    notice, this list of conditions and the following disclaimer.
  14  *
  15  * 2. Redistributions in binary form must reproduce the above copyright
  16  *    notice, this list of conditions and the following disclaimer in
  17  *    the documentation and/or other materials provided with the
  18  *    distribution.
  19  *
  20  * 3. All advertising materials mentioning features or use of this
  21  *    software must display the following acknowledgment:
  22  *    "This product includes software developed by the OpenSSL Project
  23  *    for use in the OpenSSL Toolkit. (http://www.OpenSSL.org/)"
  24  *
  25  * 4. The names "OpenSSL Toolkit" and "OpenSSL Project" must not be used to
  26  *    endorse or promote products derived from this software without
  27  *    prior written permission. For written permission, please contact
  28  *    licensing@OpenSSL.org.
  29  *
  30  * 5. Products derived from this software may not be called "OpenSSL"
  31  *    nor may "OpenSSL" appear in their names without prior written
  32  *    permission of the OpenSSL Project.
  33  *
  34  * 6. Redistributions of any form whatsoever must retain the following
  35  *    acknowledgment:
  36  *    "This product includes software developed by the OpenSSL Project
  37  *    for use in the OpenSSL Toolkit (http://www.OpenSSL.org/)"
  38  *
  39  * THIS SOFTWARE IS PROVIDED BY THE OpenSSL PROJECT ``AS IS'' AND ANY
  40  * EXPRESSED OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
  41  * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR
  42  * PURPOSE ARE DISCLAIMED.  IN NO EVENT SHALL THE OpenSSL PROJECT OR
  43  * ITS CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL,
  44  * SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT
  45  * NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES;
  46  * LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
  47  * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT,
  48  * STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE)
  49  * ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED
  50  * OF THE POSSIBILITY OF SUCH DAMAGE.
  51  * ====================================================================
  52  *
  53  * This product includes cryptographic software written by Eric Young
  54  * (eay@cryptsoft.com).  This product includes software written by Tim
  55  * Hudson (tjh@cryptsoft.com).
  56  *
  57  */
  58
  59 #include <stdio.h>
  60 #include "cryptlib.h"
  61 #include <openssl/buffer.h>
  62 #include <openssl/bn.h>
  63 #include <openssl/objects.h>
  64 #include <openssl/x509.h>
  65 #include <openssl/x509v3.h>
  66
  67 static void ext_print(BIO *out, X509_EXTENSION *ex);
  68 #ifndef NO_FP_API
  69 int X509_CRL_print_fp(FILE *fp, X509_CRL *x)
  70         {
  71         BIO *b;
  72         int ret;
  73
  74         if ((b=BIO_new(BIO_s_file())) == NULL)
  75                 {
  76                 X509err(X509_F_X509_PRINT_FP,ERR_R_BUF_LIB);
  77                 return(0);
  78                 }
  79         BIO_set_fp(b,fp,BIO_NOCLOSE);
  80         ret=X509_CRL_print(b, x);
  81         BIO_free(b);
  82         return(ret);
  83         }
  84 #endif
  85
  86 int X509_CRL_print(BIO *out, X509_CRL *x)
  87 {
  88         char buf[256];
  89         unsigned char *s;
  90         STACK *rev;
  91         X509_REVOKED *r;
  92         long l;
  93         int i, j, n;
  94
  95         BIO_printf(out, "Certificate Revocation List (CRL):\n");
  96         l = X509_CRL_get_version(x);
  97         BIO_printf(out, "%8sVersion %lu (0x%lx)\n", "", l+1, l);
  98         i = OBJ_obj2nid(x->sig_alg->algorithm);
  99         BIO_printf(out, "%8sSignature Algorithm: %s\n", "",
 100                                  (i == NID_undef) ? "NONE" : OBJ_nid2ln(i));
 101         X509_NAME_oneline(X509_CRL_get_issuer(x),buf,256);
 102         BIO_printf(out,"%8sIssuer: %s\n","",buf);
 103         BIO_printf(out,"%8sLast Update: ","");
 104         ASN1_TIME_print(out,X509_CRL_get_lastUpdate(x));
 105         BIO_printf(out,"\n%8sNext Update: ","");
 106         if (X509_CRL_get_nextUpdate(x))
 107                  ASN1_TIME_print(out,X509_CRL_get_nextUpdate(x));
 108         else BIO_printf(out,"NONE");
 109         BIO_printf(out,"\n");
 110
 111         n=X509_CRL_get_ext_count(x);
 112         if (n > 0) {
 113                 BIO_printf(out,"%8sCRL extensions:\n","");
 114                 for (i=0; i<n; i++) ext_print(out, X509_CRL_get_ext(x, i));
 115         }
 116
 117
 118         rev = X509_CRL_get_REVOKED(x);
 119
 120         if(sk_num(rev)) BIO_printf(out, "Revoked Certificates:\n");
 121         else BIO_printf(out, "No Revoked Certificates.\n");
 122
 123         for(i = 0; i < sk_num(rev); i++) {
 124                 r = (X509_REVOKED *) sk_value(rev, i);
 125                 BIO_printf(out,"    Serial Number: ");
 126                 i2a_ASN1_INTEGER(out,r->serialNumber);
 127                 BIO_printf(out,"\n        Revocation Date: ","");
 128                 ASN1_TIME_print(out,r->revocationDate);
 129                 BIO_printf(out,"\n");
 130                 for(j = 0; j < X509_REVOKED_get_ext_count(r); j++)
 131                                 ext_print(out, X509_REVOKED_get_ext(r, j));
 132         }
 133
 134         i=OBJ_obj2nid(x->sig_alg->algorithm);
 135         BIO_printf(out,"    Signature Algorithm: %s",
 136                                 (i == NID_undef)?"UNKNOWN":OBJ_nid2ln(i));
 137
 138         s = x->signature->data;
 139         n = x->signature->length;
 140         for (i=0; i<n; i++, s++)
 141         {
 142                 if ((i%18) == 0) BIO_write(out,"\n        ",9);
 143                 BIO_printf(out,"%02x%s",*s, ((i+1) == n)?"":":");
 144         }
 145         BIO_write(out,"\n",1);
 146
 147         return 1;
 148
 149 }
 150
 151 static void ext_print(BIO *out, X509_EXTENSION *ex)
 152 {
 153         ASN1_OBJECT *obj;
 154         int j;
 155         BIO_printf(out,"%12s","");
 156         obj=X509_EXTENSION_get_object(ex);
 157         i2a_ASN1_OBJECT(out,obj);
 158         j=X509_EXTENSION_get_critical(ex);
 159         BIO_printf(out, ": %s\n", j ? "critical":"","");
 160         if(!X509V3_EXT_print(out, ex, 0, 16)) {
 161                 BIO_printf(out, "%16s", "");
 162                 ASN1_OCTET_STRING_print(out,ex->value);
 163         }
 164         BIO_write(out,"\n",1);
 165 }