crypto/x509/v3_bcons.c

   1 /*
   2  * Copyright 1999-2020 The OpenSSL Project Authors. All Rights Reserved.
   3  *
   4  * Licensed under the Apache License 2.0 (the "License").  You may not use
   5  * this file except in compliance with the License.  You can obtain a copy
   6  * in the file LICENSE in the source distribution or at
   7  * https://www.openssl.org/source/license.html
   8  */
   9
  10 #include <stdio.h>
  11 #include "internal/cryptlib.h"
  12 #include <openssl/asn1.h>
  13 #include <openssl/asn1t.h>
  14 #include <openssl/conf.h>
  15 #include <openssl/x509v3.h>
  16 #include "ext_dat.h"
  17 #include "x509_local.h"
  18
  19 DEFINE_STACK_OF(CONF_VALUE)
  20
  21 static STACK_OF(CONF_VALUE) *i2v_BASIC_CONSTRAINTS(X509V3_EXT_METHOD *method,
  22                                                    BASIC_CONSTRAINTS *bcons,
  23                                                    STACK_OF(CONF_VALUE)
  24                                                    *extlist);
  25 static BASIC_CONSTRAINTS *v2i_BASIC_CONSTRAINTS(X509V3_EXT_METHOD *method,
  26                                                 X509V3_CTX *ctx,
  27                                                 STACK_OF(CONF_VALUE) *values);
  28
  29 const X509V3_EXT_METHOD v3_bcons = {
  30     NID_basic_constraints, 0,
  31     ASN1_ITEM_ref(BASIC_CONSTRAINTS),
  32     0, 0, 0, 0,
  33     0, 0,
  34     (X509V3_EXT_I2V) i2v_BASIC_CONSTRAINTS,
  35     (X509V3_EXT_V2I)v2i_BASIC_CONSTRAINTS,
  36     NULL, NULL,
  37     NULL
  38 };
  39
  40 ASN1_SEQUENCE(BASIC_CONSTRAINTS) = {
  41         ASN1_OPT(BASIC_CONSTRAINTS, ca, ASN1_FBOOLEAN),
  42         ASN1_OPT(BASIC_CONSTRAINTS, pathlen, ASN1_INTEGER)
  43 } ASN1_SEQUENCE_END(BASIC_CONSTRAINTS)
  44
  45 IMPLEMENT_ASN1_FUNCTIONS(BASIC_CONSTRAINTS)
  46
  47 static STACK_OF(CONF_VALUE) *i2v_BASIC_CONSTRAINTS(X509V3_EXT_METHOD *method,
  48                                                    BASIC_CONSTRAINTS *bcons,
  49                                                    STACK_OF(CONF_VALUE)
  50                                                    *extlist)
  51 {
  52     X509V3_add_value_bool("CA", bcons->ca, &extlist);
  53     X509V3_add_value_int("pathlen", bcons->pathlen, &extlist);
  54     return extlist;
  55 }
  56
  57 static BASIC_CONSTRAINTS *v2i_BASIC_CONSTRAINTS(X509V3_EXT_METHOD *method,
  58                                                 X509V3_CTX *ctx,
  59                                                 STACK_OF(CONF_VALUE) *values)
  60 {
  61     BASIC_CONSTRAINTS *bcons = NULL;
  62     CONF_VALUE *val;
  63     int i;
  64
  65     if ((bcons = BASIC_CONSTRAINTS_new()) == NULL) {
  66         X509V3err(X509V3_F_V2I_BASIC_CONSTRAINTS, ERR_R_MALLOC_FAILURE);
  67         return NULL;
  68     }
  69     for (i = 0; i < sk_CONF_VALUE_num(values); i++) {
  70         val = sk_CONF_VALUE_value(values, i);
  71         if (strcmp(val->name, "CA") == 0) {
  72             if (!X509V3_get_value_bool(val, &bcons->ca))
  73                 goto err;
  74         } else if (strcmp(val->name, "pathlen") == 0) {
  75             if (!X509V3_get_value_int(val, &bcons->pathlen))
  76                 goto err;
  77             /* TODO add sanity check on int value - at least, must be >= 0 */
  78         } else {
  79             X509V3err(X509V3_F_V2I_BASIC_CONSTRAINTS, X509V3_R_INVALID_NAME);
  80             X509V3_conf_add_error_name_value(val);
  81             goto err;
  82         }
  83     }
  84     return bcons;
  85  err:
  86     BASIC_CONSTRAINTS_free(bcons);
  87     return NULL;
  88 }