2 * Copyright 1999-2020 The OpenSSL Project Authors. All Rights Reserved.
4 * Licensed under the Apache License 2.0 (the "License"). You may not use
5 * this file except in compliance with the License. You can obtain a copy
6 * in the file LICENSE in the source distribution or at
7 * https://www.openssl.org/source/license.html
11 #include "internal/cryptlib.h"
12 #include <openssl/pkcs12.h>
14 /* Cheap and nasty Unicode stuff */
16 unsigned char *OPENSSL_asc2uni(const char *asc, int asclen,
17 unsigned char **uni, int *unilen)
20 unsigned char *unitmp;
26 ulen = asclen * 2 + 2;
27 if ((unitmp = OPENSSL_malloc(ulen)) == NULL) {
28 ERR_raise(ERR_LIB_PKCS12, ERR_R_MALLOC_FAILURE);
31 for (i = 0; i < ulen - 2; i += 2) {
33 unitmp[i + 1] = asc[i >> 1];
35 /* Make result double null terminated */
45 char *OPENSSL_uni2asc(const unsigned char *uni, int unilen)
50 /* string must contain an even number of bytes */
56 /* If no terminating zero allow for one */
57 if (!unilen || uni[unilen - 1])
60 if ((asctmp = OPENSSL_malloc(asclen)) == NULL) {
61 ERR_raise(ERR_LIB_PKCS12, ERR_R_MALLOC_FAILURE);
64 for (i = 0; i < unilen; i += 2)
65 asctmp[i >> 1] = uni[i];
66 asctmp[asclen - 1] = 0;
71 * OPENSSL_{utf82uni|uni2utf8} perform conversion between UTF-8 and
72 * PKCS#12 BMPString format, which is specified as big-endian UTF-16.
73 * One should keep in mind that even though BMPString is passed as
74 * unsigned char *, it's not the kind of string you can exercise e.g.
75 * strlen on. Caller also has to keep in mind that its length is
76 * expressed not in number of UTF-16 characters, but in number of
77 * bytes the string occupies, and treat it, the length, accordingly.
79 unsigned char *OPENSSL_utf82uni(const char *asc, int asclen,
80 unsigned char **uni, int *unilen)
83 unsigned char *unitmp, *ret;
84 unsigned long utf32chr = 0;
89 for (ulen = 0, i = 0; i < asclen; i += j) {
90 j = UTF8_getc((const unsigned char *)asc+i, asclen-i, &utf32chr);
93 * Following condition is somewhat opportunistic is sense that
94 * decoding failure is used as *indirect* indication that input
95 * string might in fact be extended ASCII/ANSI/ISO-8859-X. The
96 * fallback is taken in hope that it would allow to process
97 * files created with previous OpenSSL version, which used the
98 * naive OPENSSL_asc2uni all along. It might be worth noting
99 * that probability of false positive depends on language. In
100 * cases covered by ISO Latin 1 probability is very low, because
101 * any printable non-ASCII alphabet letter followed by another
102 * or any ASCII character will trigger failure and fallback.
103 * In other cases situation can be intensified by the fact that
104 * English letters are not part of alternative keyboard layout,
105 * but even then there should be plenty of pairs that trigger
106 * decoding failure...
109 return OPENSSL_asc2uni(asc, asclen, uni, unilen);
111 if (utf32chr > 0x10FFFF) /* UTF-16 cap */
114 if (utf32chr >= 0x10000) /* pair of UTF-16 characters */
116 else /* or just one */
120 ulen += 2; /* for trailing UTF16 zero */
122 if ((ret = OPENSSL_malloc(ulen)) == NULL) {
123 ERR_raise(ERR_LIB_PKCS12, ERR_R_MALLOC_FAILURE);
126 /* re-run the loop writing down UTF-16 characters in big-endian order */
127 for (unitmp = ret, i = 0; i < asclen; i += j) {
128 j = UTF8_getc((const unsigned char *)asc+i, asclen-i, &utf32chr);
129 if (utf32chr >= 0x10000) { /* pair if UTF-16 characters */
133 hi = 0xD800 + (utf32chr>>10);
134 lo = 0xDC00 + (utf32chr&0x3ff);
135 *unitmp++ = (unsigned char)(hi>>8);
136 *unitmp++ = (unsigned char)(hi);
137 *unitmp++ = (unsigned char)(lo>>8);
138 *unitmp++ = (unsigned char)(lo);
139 } else { /* or just one */
140 *unitmp++ = (unsigned char)(utf32chr>>8);
141 *unitmp++ = (unsigned char)(utf32chr);
144 /* Make result double null terminated */
154 static int bmp_to_utf8(char *str, const unsigned char *utf16, int len)
156 unsigned long utf32chr;
158 if (len == 0) return 0;
160 if (len < 2) return -1;
162 /* pull UTF-16 character in big-endian order */
163 utf32chr = (utf16[0]<<8) | utf16[1];
165 if (utf32chr >= 0xD800 && utf32chr < 0xE000) { /* two chars */
168 if (len < 4) return -1;
172 lo = (utf16[2]<<8) | utf16[3];
173 if (lo < 0xDC00 || lo >= 0xE000) return -1;
174 utf32chr |= lo-0xDC00;
178 return UTF8_putc((unsigned char *)str, len > 4 ? 4 : len, utf32chr);
181 char *OPENSSL_uni2utf8(const unsigned char *uni, int unilen)
186 /* string must contain an even number of bytes */
190 for (asclen = 0, i = 0; i < unilen; ) {
191 j = bmp_to_utf8(NULL, uni+i, unilen-i);
193 * falling back to OPENSSL_uni2asc makes lesser sense [than
194 * falling back to OPENSSL_asc2uni in OPENSSL_utf82uni above],
195 * it's done rather to maintain symmetry...
197 if (j < 0) return OPENSSL_uni2asc(uni, unilen);
203 /* If no terminating zero allow for one */
204 if (!unilen || (uni[unilen-2]||uni[unilen - 1]))
207 if ((asctmp = OPENSSL_malloc(asclen)) == NULL) {
208 ERR_raise(ERR_LIB_PKCS12, ERR_R_MALLOC_FAILURE);
212 /* re-run the loop emitting UTF-8 string */
213 for (asclen = 0, i = 0; i < unilen; ) {
214 j = bmp_to_utf8(asctmp+asclen, uni+i, unilen-i);
220 /* If no terminating zero write one */
221 if (!unilen || (uni[unilen-2]||uni[unilen - 1]))
222 asctmp[asclen] = '\0';
227 int i2d_PKCS12_bio(BIO *bp, const PKCS12 *p12)
229 return ASN1_item_i2d_bio(ASN1_ITEM_rptr(PKCS12), bp, p12);
232 #ifndef OPENSSL_NO_STDIO
233 int i2d_PKCS12_fp(FILE *fp, const PKCS12 *p12)
235 return ASN1_item_i2d_fp(ASN1_ITEM_rptr(PKCS12), fp, p12);
239 PKCS12 *d2i_PKCS12_bio(BIO *bp, PKCS12 **p12)
241 return ASN1_item_d2i_bio(ASN1_ITEM_rptr(PKCS12), bp, p12);
244 #ifndef OPENSSL_NO_STDIO
245 PKCS12 *d2i_PKCS12_fp(FILE *fp, PKCS12 **p12)
247 return ASN1_item_d2i_fp(ASN1_ITEM_rptr(PKCS12), fp, p12);