e8f8ebd76cf6313a566aceb9ae6e2df7e5958482
[openssl.git] / crypto / asn1 / x_crl.c
1 /* crypto/asn1/x_crl.c */
2 /* Copyright (C) 1995-1998 Eric Young (eay@cryptsoft.com)
3  * All rights reserved.
4  *
5  * This package is an SSL implementation written
6  * by Eric Young (eay@cryptsoft.com).
7  * The implementation was written so as to conform with Netscapes SSL.
8  * 
9  * This library is free for commercial and non-commercial use as long as
10  * the following conditions are aheared to.  The following conditions
11  * apply to all code found in this distribution, be it the RC4, RSA,
12  * lhash, DES, etc., code; not just the SSL code.  The SSL documentation
13  * included with this distribution is covered by the same copyright terms
14  * except that the holder is Tim Hudson (tjh@cryptsoft.com).
15  * 
16  * Copyright remains Eric Young's, and as such any Copyright notices in
17  * the code are not to be removed.
18  * If this package is used in a product, Eric Young should be given attribution
19  * as the author of the parts of the library used.
20  * This can be in the form of a textual message at program startup or
21  * in documentation (online or textual) provided with the package.
22  * 
23  * Redistribution and use in source and binary forms, with or without
24  * modification, are permitted provided that the following conditions
25  * are met:
26  * 1. Redistributions of source code must retain the copyright
27  *    notice, this list of conditions and the following disclaimer.
28  * 2. Redistributions in binary form must reproduce the above copyright
29  *    notice, this list of conditions and the following disclaimer in the
30  *    documentation and/or other materials provided with the distribution.
31  * 3. All advertising materials mentioning features or use of this software
32  *    must display the following acknowledgement:
33  *    "This product includes cryptographic software written by
34  *     Eric Young (eay@cryptsoft.com)"
35  *    The word 'cryptographic' can be left out if the rouines from the library
36  *    being used are not cryptographic related :-).
37  * 4. If you include any Windows specific code (or a derivative thereof) from 
38  *    the apps directory (application code) you must include an acknowledgement:
39  *    "This product includes software written by Tim Hudson (tjh@cryptsoft.com)"
40  * 
41  * THIS SOFTWARE IS PROVIDED BY ERIC YOUNG ``AS IS'' AND
42  * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
43  * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
44  * ARE DISCLAIMED.  IN NO EVENT SHALL THE AUTHOR OR CONTRIBUTORS BE LIABLE
45  * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
46  * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
47  * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
48  * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
49  * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
50  * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
51  * SUCH DAMAGE.
52  * 
53  * The licence and distribution terms for any publically available version or
54  * derivative of this code cannot be changed.  i.e. this code cannot simply be
55  * copied and put under another distribution licence
56  * [including the GNU Public Licence.]
57  */
58
59 #include <stdio.h>
60 #include "cryptlib.h"
61 #include "asn1_mac.h"
62 #include "x509.h"
63
64 /*
65  * ASN1err(ASN1_F_D2I_X509_CRL,ERR_R_ASN1_LENGTH_MISMATCH);
66  * ASN1err(ASN1_F_D2I_X509_CRL_INFO,ERR_R_EXPECTING_AN_ASN1_SEQUENCE);
67  * ASN1err(ASN1_F_D2I_X509_REVOKED,ERR_R_ASN1_LENGTH_MISMATCH);
68  * ASN1err(ASN1_F_X509_CRL_NEW,ERR_R_ASN1_LENGTH_MISMATCH);
69  * ASN1err(ASN1_F_X509_CRL_INFO_NEW,ERR_R_EXPECTING_AN_ASN1_SEQUENCE);
70  * ASN1err(ASN1_F_X509_REVOKED_NEW,ERR_R_ASN1_LENGTH_MISMATCH);
71  */
72
73 #ifndef NOPROTO
74 static int X509_REVOKED_cmp(X509_REVOKED **a,X509_REVOKED **b);
75 static int X509_REVOKED_seq_cmp(X509_REVOKED **a,X509_REVOKED **b);
76 #else
77 static int X509_REVOKED_cmp();
78 static int X509_REVOKED_seq_cmp();
79 #endif
80
81 int i2d_X509_REVOKED(X509_REVOKED *a, unsigned char **pp)
82         {
83         M_ASN1_I2D_vars(a);
84
85         M_ASN1_I2D_len(a->serialNumber,i2d_ASN1_INTEGER);
86         M_ASN1_I2D_len(a->revocationDate,i2d_ASN1_TIME);
87         M_ASN1_I2D_len_SEQUENCE_opt(a->extensions,i2d_X509_EXTENSION);
88
89         M_ASN1_I2D_seq_total();
90
91         M_ASN1_I2D_put(a->serialNumber,i2d_ASN1_INTEGER);
92         M_ASN1_I2D_put(a->revocationDate,i2d_ASN1_TIME);
93         M_ASN1_I2D_put_SEQUENCE_opt(a->extensions,i2d_X509_EXTENSION);
94
95         M_ASN1_I2D_finish();
96         }
97
98 X509_REVOKED *d2i_X509_REVOKED(X509_REVOKED **a, unsigned char **pp,
99              long length)
100         {
101         M_ASN1_D2I_vars(a,X509_REVOKED *,X509_REVOKED_new);
102
103         M_ASN1_D2I_Init();
104         M_ASN1_D2I_start_sequence();
105         M_ASN1_D2I_get(ret->serialNumber,d2i_ASN1_INTEGER);
106         M_ASN1_D2I_get(ret->revocationDate,d2i_ASN1_TIME);
107         M_ASN1_D2I_get_seq_opt(ret->extensions,d2i_X509_EXTENSION,
108                 X509_EXTENSION_free);
109         M_ASN1_D2I_Finish(a,X509_REVOKED_free,ASN1_F_D2I_X509_REVOKED);
110         }
111
112 int i2d_X509_CRL_INFO(X509_CRL_INFO *a, unsigned char **pp)
113         {
114         int v1=0;
115         long l=0;
116         M_ASN1_I2D_vars(a);
117
118         if (sk_num(a->revoked) != 0)
119                 qsort((char *)a->revoked->data,sk_num(a->revoked),
120                         sizeof(X509_REVOKED *),(int (*)(P_CC_CC))X509_REVOKED_seq_cmp);
121         if ((a->version != NULL) && ((l=ASN1_INTEGER_get(a->version)) != 0))
122                 {
123                 M_ASN1_I2D_len(a->version,i2d_ASN1_INTEGER);
124                 }
125         M_ASN1_I2D_len(a->sig_alg,i2d_X509_ALGOR);
126         M_ASN1_I2D_len(a->issuer,i2d_X509_NAME);
127         M_ASN1_I2D_len(a->lastUpdate,i2d_ASN1_TIME);
128         if (a->nextUpdate != NULL)
129                 { M_ASN1_I2D_len(a->nextUpdate,i2d_ASN1_TIME); }
130         M_ASN1_I2D_len_SEQUENCE_opt(a->revoked,i2d_X509_REVOKED);
131         M_ASN1_I2D_len_EXP_SEQUENCE_opt(a->extensions,i2d_X509_EXTENSION,0,
132                 V_ASN1_SEQUENCE,v1);
133
134         M_ASN1_I2D_seq_total();
135
136         if ((a->version != NULL) && (l != 0))
137                 {
138                 M_ASN1_I2D_put(a->version,i2d_ASN1_INTEGER);
139                 }
140         M_ASN1_I2D_put(a->sig_alg,i2d_X509_ALGOR);
141         M_ASN1_I2D_put(a->issuer,i2d_X509_NAME);
142         M_ASN1_I2D_put(a->lastUpdate,i2d_ASN1_UTCTIME);
143         if (a->nextUpdate != NULL)
144                 { M_ASN1_I2D_put(a->nextUpdate,i2d_ASN1_UTCTIME); }
145         M_ASN1_I2D_put_SEQUENCE_opt(a->revoked,i2d_X509_REVOKED);
146         M_ASN1_I2D_put_EXP_SEQUENCE_opt(a->extensions,i2d_X509_EXTENSION,0,
147                 V_ASN1_SEQUENCE,v1);
148
149         M_ASN1_I2D_finish();
150         }
151
152 X509_CRL_INFO *d2i_X509_CRL_INFO(X509_CRL_INFO **a, unsigned char **pp,
153              long length)
154         {
155         int i,ver=0;
156         M_ASN1_D2I_vars(a,X509_CRL_INFO *,X509_CRL_INFO_new);
157
158
159         M_ASN1_D2I_Init();
160         M_ASN1_D2I_start_sequence();
161         M_ASN1_D2I_get_opt(ret->version,d2i_ASN1_INTEGER,V_ASN1_INTEGER);
162         if (ret->version != NULL)
163                 ver=ret->version->data[0];
164         
165         if ((ver == 0) && (ret->version != NULL))
166                 {
167                 ASN1_INTEGER_free(ret->version);
168                 ret->version=NULL;
169                 }
170         M_ASN1_D2I_get(ret->sig_alg,d2i_X509_ALGOR);
171         M_ASN1_D2I_get(ret->issuer,d2i_X509_NAME);
172         M_ASN1_D2I_get(ret->lastUpdate,d2i_ASN1_TIME);
173         /* Manually handle the OPTIONAL ASN1_TIME stuff */
174         if(c.slen != 0
175            && ( (M_ASN1_next & ~V_ASN1_CONSTRUCTED) ==
176                     (V_ASN1_UNIVERSAL|V_ASN1_UTCTIME)
177                 || (M_ASN1_next & ~V_ASN1_CONSTRUCTED) ==
178                     (V_ASN1_UNIVERSAL|V_ASN1_GENERALIZEDTIME) ) ) {
179                 M_ASN1_D2I_get(ret->nextUpdate,d2i_ASN1_TIME);
180         }
181         if(!ret->nextUpdate) 
182                 M_ASN1_D2I_get_opt(ret->nextUpdate,d2i_ASN1_GENERALIZEDTIME,
183                                                         V_ASN1_GENERALIZEDTIME);
184         if (ret->revoked != NULL)
185                 {
186                 while (sk_num(ret->revoked))
187                         X509_REVOKED_free((X509_REVOKED *)sk_pop(ret->revoked));
188                 }
189         M_ASN1_D2I_get_seq_opt(ret->revoked,d2i_X509_REVOKED,X509_REVOKED_free);
190
191         if (ret->revoked != NULL)
192                 {
193                 for (i=0; i<sk_num(ret->revoked); i++)
194                         {
195                         ((X509_REVOKED *)sk_value(ret->revoked,i))->sequence=i;
196                         }
197                 }
198
199         if (ver >= 1)
200                 {
201                 if (ret->extensions != NULL)
202                         {
203                         while (sk_num(ret->extensions))
204                                 X509_EXTENSION_free((X509_EXTENSION *)
205                                 sk_pop(ret->extensions));
206                         }
207                         
208                 M_ASN1_D2I_get_EXP_set_opt(ret->extensions,d2i_X509_EXTENSION,
209                         X509_EXTENSION_free,0,V_ASN1_SEQUENCE);
210                 }
211
212         M_ASN1_D2I_Finish(a,X509_CRL_INFO_free,ASN1_F_D2I_X509_CRL_INFO);
213         }
214
215 int i2d_X509_CRL(X509_CRL *a, unsigned char **pp)
216         {
217         M_ASN1_I2D_vars(a);
218
219         M_ASN1_I2D_len(a->crl,i2d_X509_CRL_INFO);
220         M_ASN1_I2D_len(a->sig_alg,i2d_X509_ALGOR);
221         M_ASN1_I2D_len(a->signature,i2d_ASN1_BIT_STRING);
222
223         M_ASN1_I2D_seq_total();
224
225         M_ASN1_I2D_put(a->crl,i2d_X509_CRL_INFO);
226         M_ASN1_I2D_put(a->sig_alg,i2d_X509_ALGOR);
227         M_ASN1_I2D_put(a->signature,i2d_ASN1_BIT_STRING);
228
229         M_ASN1_I2D_finish();
230         }
231
232 X509_CRL *d2i_X509_CRL(X509_CRL **a, unsigned char **pp, long length)
233         {
234         M_ASN1_D2I_vars(a,X509_CRL *,X509_CRL_new);
235
236         M_ASN1_D2I_Init();
237         M_ASN1_D2I_start_sequence();
238         M_ASN1_D2I_get(ret->crl,d2i_X509_CRL_INFO);
239         M_ASN1_D2I_get(ret->sig_alg,d2i_X509_ALGOR);
240         M_ASN1_D2I_get(ret->signature,d2i_ASN1_BIT_STRING);
241
242         M_ASN1_D2I_Finish(a,X509_CRL_free,ASN1_F_D2I_X509_CRL);
243         }
244
245
246 X509_REVOKED *X509_REVOKED_new(void)
247         {
248         X509_REVOKED *ret=NULL;
249         ASN1_CTX c;
250
251         M_ASN1_New_Malloc(ret,X509_REVOKED);
252         M_ASN1_New(ret->serialNumber,ASN1_INTEGER_new);
253         M_ASN1_New(ret->revocationDate,ASN1_UTCTIME_new);
254         ret->extensions=NULL;
255         return(ret);
256         M_ASN1_New_Error(ASN1_F_X509_REVOKED_NEW);
257         }
258
259 X509_CRL_INFO *X509_CRL_INFO_new(void)
260         {
261         X509_CRL_INFO *ret=NULL;
262         ASN1_CTX c;
263
264         M_ASN1_New_Malloc(ret,X509_CRL_INFO);
265         ret->version=NULL;
266         M_ASN1_New(ret->sig_alg,X509_ALGOR_new);
267         M_ASN1_New(ret->issuer,X509_NAME_new);
268         M_ASN1_New(ret->lastUpdate,ASN1_UTCTIME_new);
269         ret->nextUpdate=NULL;
270         M_ASN1_New(ret->revoked,sk_new_null);
271         M_ASN1_New(ret->extensions,sk_new_null);
272         ret->revoked->comp=(int (*)())X509_REVOKED_cmp;
273         return(ret);
274         M_ASN1_New_Error(ASN1_F_X509_CRL_INFO_NEW);
275         }
276
277 X509_CRL *X509_CRL_new(void)
278         {
279         X509_CRL *ret=NULL;
280         ASN1_CTX c;
281
282         M_ASN1_New_Malloc(ret,X509_CRL);
283         ret->references=1;
284         M_ASN1_New(ret->crl,X509_CRL_INFO_new);
285         M_ASN1_New(ret->sig_alg,X509_ALGOR_new);
286         M_ASN1_New(ret->signature,ASN1_BIT_STRING_new);
287         return(ret);
288         M_ASN1_New_Error(ASN1_F_X509_CRL_NEW);
289         }
290
291 void X509_REVOKED_free(X509_REVOKED *a)
292         {
293         if (a == NULL) return;
294         ASN1_INTEGER_free(a->serialNumber);
295         ASN1_UTCTIME_free(a->revocationDate);
296         sk_pop_free(a->extensions,X509_EXTENSION_free);
297         Free((char *)a);
298         }
299
300 void X509_CRL_INFO_free(X509_CRL_INFO *a)
301         {
302         if (a == NULL) return;
303         ASN1_INTEGER_free(a->version);
304         X509_ALGOR_free(a->sig_alg);
305         X509_NAME_free(a->issuer);
306         ASN1_UTCTIME_free(a->lastUpdate);
307         if (a->nextUpdate)
308                 ASN1_UTCTIME_free(a->nextUpdate);
309         sk_pop_free(a->revoked,X509_REVOKED_free);
310         sk_pop_free(a->extensions,X509_EXTENSION_free);
311         Free((char *)a);
312         }
313
314 void X509_CRL_free(X509_CRL *a)
315         {
316         int i;
317
318         if (a == NULL) return;
319
320         i=CRYPTO_add(&a->references,-1,CRYPTO_LOCK_X509_CRL);
321 #ifdef REF_PRINT
322         REF_PRINT("X509_CRL",a);
323 #endif
324         if (i > 0) return;
325 #ifdef REF_CHECK
326         if (i < 0)
327                 {
328                 fprintf(stderr,"X509_CRL_free, bad reference count\n");
329                 abort();
330                 }
331 #endif
332
333         X509_CRL_INFO_free(a->crl);
334         X509_ALGOR_free(a->sig_alg);
335         ASN1_BIT_STRING_free(a->signature);
336         Free((char *)a);
337         }
338
339 static int X509_REVOKED_cmp(X509_REVOKED **a, X509_REVOKED **b)
340         {
341         return(ASN1_STRING_cmp(
342                 (ASN1_STRING *)(*a)->serialNumber,
343                 (ASN1_STRING *)(*b)->serialNumber));
344         }
345
346 static int X509_REVOKED_seq_cmp(X509_REVOKED **a, X509_REVOKED **b)
347         {
348         return((*a)->sequence-(*b)->sequence);
349         }