2 * Copyright 2007-2020 The OpenSSL Project Authors. All Rights Reserved.
3 * Copyright Nokia 2007-2019
4 * Copyright Siemens AG 2015-2019
6 * Licensed under the Apache License 2.0 (the "License"). You may not use
7 * this file except in compliance with the License. You can obtain a copy
8 * in the file LICENSE in the source distribution or at
9 * https://www.openssl.org/source/license.html
12 #include <openssl/asn1t.h>
14 #include "cmp_local.h"
16 /* explicit #includes not strictly needed since implied by the above: */
17 #include <openssl/cmp.h>
18 #include <openssl/crmf.h>
20 DEFINE_STACK_OF(OSSL_CMP_ITAV)
22 /* ASN.1 declarations from RFC4210 */
23 ASN1_SEQUENCE(OSSL_CMP_REVANNCONTENT) = {
24 /* OSSL_CMP_PKISTATUS is effectively ASN1_INTEGER so it is used directly */
25 ASN1_SIMPLE(OSSL_CMP_REVANNCONTENT, status, ASN1_INTEGER),
26 ASN1_SIMPLE(OSSL_CMP_REVANNCONTENT, certId, OSSL_CRMF_CERTID),
27 ASN1_SIMPLE(OSSL_CMP_REVANNCONTENT, willBeRevokedAt, ASN1_GENERALIZEDTIME),
28 ASN1_SIMPLE(OSSL_CMP_REVANNCONTENT, badSinceDate, ASN1_GENERALIZEDTIME),
29 ASN1_OPT(OSSL_CMP_REVANNCONTENT, crlDetails, X509_EXTENSIONS)
30 } ASN1_SEQUENCE_END(OSSL_CMP_REVANNCONTENT)
31 IMPLEMENT_ASN1_FUNCTIONS(OSSL_CMP_REVANNCONTENT)
34 ASN1_SEQUENCE(OSSL_CMP_CHALLENGE) = {
35 ASN1_OPT(OSSL_CMP_CHALLENGE, owf, X509_ALGOR),
36 ASN1_SIMPLE(OSSL_CMP_CHALLENGE, witness, ASN1_OCTET_STRING),
37 ASN1_SIMPLE(OSSL_CMP_CHALLENGE, challenge, ASN1_OCTET_STRING)
38 } ASN1_SEQUENCE_END(OSSL_CMP_CHALLENGE)
39 IMPLEMENT_ASN1_FUNCTIONS(OSSL_CMP_CHALLENGE)
42 ASN1_ITEM_TEMPLATE(OSSL_CMP_POPODECKEYCHALLCONTENT) =
43 ASN1_EX_TEMPLATE_TYPE(ASN1_TFLG_SEQUENCE_OF, 0,
44 OSSL_CMP_POPODECKEYCHALLCONTENT, OSSL_CMP_CHALLENGE)
45 ASN1_ITEM_TEMPLATE_END(OSSL_CMP_POPODECKEYCHALLCONTENT)
48 ASN1_ITEM_TEMPLATE(OSSL_CMP_POPODECKEYRESPCONTENT) =
49 ASN1_EX_TEMPLATE_TYPE(ASN1_TFLG_SEQUENCE_OF, 0,
50 OSSL_CMP_POPODECKEYRESPCONTENT, ASN1_INTEGER)
51 ASN1_ITEM_TEMPLATE_END(OSSL_CMP_POPODECKEYRESPCONTENT)
54 ASN1_SEQUENCE(OSSL_CMP_CAKEYUPDANNCONTENT) = {
55 /* OSSL_CMP_CMPCERTIFICATE is effectively X509 so it is used directly */
56 ASN1_SIMPLE(OSSL_CMP_CAKEYUPDANNCONTENT, oldWithNew, X509),
57 /* OSSL_CMP_CMPCERTIFICATE is effectively X509 so it is used directly */
58 ASN1_SIMPLE(OSSL_CMP_CAKEYUPDANNCONTENT, newWithOld, X509),
59 /* OSSL_CMP_CMPCERTIFICATE is effectively X509 so it is used directly */
60 ASN1_SIMPLE(OSSL_CMP_CAKEYUPDANNCONTENT, newWithNew, X509)
61 } ASN1_SEQUENCE_END(OSSL_CMP_CAKEYUPDANNCONTENT)
62 IMPLEMENT_ASN1_FUNCTIONS(OSSL_CMP_CAKEYUPDANNCONTENT)
65 ASN1_SEQUENCE(OSSL_CMP_ERRORMSGCONTENT) = {
66 ASN1_SIMPLE(OSSL_CMP_ERRORMSGCONTENT, pKIStatusInfo, OSSL_CMP_PKISI),
67 ASN1_OPT(OSSL_CMP_ERRORMSGCONTENT, errorCode, ASN1_INTEGER),
69 * OSSL_CMP_PKIFREETEXT is effectively a sequence of ASN1_UTF8STRING
70 * so it is used directly
73 ASN1_SEQUENCE_OF_OPT(OSSL_CMP_ERRORMSGCONTENT, errorDetails, ASN1_UTF8STRING)
74 } ASN1_SEQUENCE_END(OSSL_CMP_ERRORMSGCONTENT)
75 IMPLEMENT_ASN1_FUNCTIONS(OSSL_CMP_ERRORMSGCONTENT)
77 ASN1_ADB_TEMPLATE(infotypeandvalue_default) = ASN1_OPT(OSSL_CMP_ITAV,
80 /* ITAV means InfoTypeAndValue */
81 ASN1_ADB(OSSL_CMP_ITAV) = {
82 /* OSSL_CMP_CMPCERTIFICATE is effectively X509 so it is used directly */
83 ADB_ENTRY(NID_id_it_caProtEncCert, ASN1_OPT(OSSL_CMP_ITAV,
84 infoValue.caProtEncCert, X509)),
85 ADB_ENTRY(NID_id_it_signKeyPairTypes,
86 ASN1_SEQUENCE_OF_OPT(OSSL_CMP_ITAV,
87 infoValue.signKeyPairTypes, X509_ALGOR)),
88 ADB_ENTRY(NID_id_it_encKeyPairTypes,
89 ASN1_SEQUENCE_OF_OPT(OSSL_CMP_ITAV,
90 infoValue.encKeyPairTypes, X509_ALGOR)),
91 ADB_ENTRY(NID_id_it_preferredSymmAlg,
92 ASN1_OPT(OSSL_CMP_ITAV, infoValue.preferredSymmAlg,
94 ADB_ENTRY(NID_id_it_caKeyUpdateInfo,
95 ASN1_OPT(OSSL_CMP_ITAV, infoValue.caKeyUpdateInfo,
96 OSSL_CMP_CAKEYUPDANNCONTENT)),
97 ADB_ENTRY(NID_id_it_currentCRL,
98 ASN1_OPT(OSSL_CMP_ITAV, infoValue.currentCRL, X509_CRL)),
99 ADB_ENTRY(NID_id_it_unsupportedOIDs,
100 ASN1_SEQUENCE_OF_OPT(OSSL_CMP_ITAV,
101 infoValue.unsupportedOIDs, ASN1_OBJECT)),
102 ADB_ENTRY(NID_id_it_keyPairParamReq,
103 ASN1_OPT(OSSL_CMP_ITAV, infoValue.keyPairParamReq,
105 ADB_ENTRY(NID_id_it_keyPairParamRep,
106 ASN1_OPT(OSSL_CMP_ITAV, infoValue.keyPairParamRep,
108 ADB_ENTRY(NID_id_it_revPassphrase,
109 ASN1_OPT(OSSL_CMP_ITAV, infoValue.revPassphrase,
110 OSSL_CRMF_ENCRYPTEDVALUE)),
111 ADB_ENTRY(NID_id_it_implicitConfirm,
112 ASN1_OPT(OSSL_CMP_ITAV, infoValue.implicitConfirm,
114 ADB_ENTRY(NID_id_it_confirmWaitTime,
115 ASN1_OPT(OSSL_CMP_ITAV, infoValue.confirmWaitTime,
116 ASN1_GENERALIZEDTIME)),
117 ADB_ENTRY(NID_id_it_origPKIMessage,
118 ASN1_OPT(OSSL_CMP_ITAV, infoValue.origPKIMessage,
120 ADB_ENTRY(NID_id_it_suppLangTags,
121 ASN1_SEQUENCE_OF_OPT(OSSL_CMP_ITAV, infoValue.suppLangTagsValue,
123 } ASN1_ADB_END(OSSL_CMP_ITAV, 0, infoType, 0,
124 &infotypeandvalue_default_tt, NULL);
127 ASN1_SEQUENCE(OSSL_CMP_ITAV) = {
128 ASN1_SIMPLE(OSSL_CMP_ITAV, infoType, ASN1_OBJECT),
129 ASN1_ADB_OBJECT(OSSL_CMP_ITAV)
130 } ASN1_SEQUENCE_END(OSSL_CMP_ITAV)
131 IMPLEMENT_ASN1_FUNCTIONS(OSSL_CMP_ITAV)
132 IMPLEMENT_ASN1_DUP_FUNCTION(OSSL_CMP_ITAV)
134 OSSL_CMP_ITAV *OSSL_CMP_ITAV_create(ASN1_OBJECT *type, ASN1_TYPE *value)
138 if (type == NULL || (itav = OSSL_CMP_ITAV_new()) == NULL)
140 OSSL_CMP_ITAV_set0(itav, type, value);
144 void OSSL_CMP_ITAV_set0(OSSL_CMP_ITAV *itav, ASN1_OBJECT *type,
147 itav->infoType = type;
148 itav->infoValue.other = value;
151 ASN1_OBJECT *OSSL_CMP_ITAV_get0_type(const OSSL_CMP_ITAV *itav)
155 return itav->infoType;
158 ASN1_TYPE *OSSL_CMP_ITAV_get0_value(const OSSL_CMP_ITAV *itav)
162 return itav->infoValue.other;
165 int OSSL_CMP_ITAV_push0_stack_item(STACK_OF(OSSL_CMP_ITAV) **itav_sk_p,
170 if (itav_sk_p == NULL || itav == NULL) {
171 CMPerr(0, CMP_R_NULL_ARGUMENT);
175 if (*itav_sk_p == NULL) {
176 if ((*itav_sk_p = sk_OSSL_CMP_ITAV_new_null()) == NULL)
180 if (!sk_OSSL_CMP_ITAV_push(*itav_sk_p, itav))
186 sk_OSSL_CMP_ITAV_free(*itav_sk_p);
192 /* get ASN.1 encoded integer, return -1 on error */
193 int ossl_cmp_asn1_get_int(const ASN1_INTEGER *a)
197 if (!ASN1_INTEGER_get_int64(&res, a)) {
198 CMPerr(0, ASN1_R_INVALID_NUMBER);
202 CMPerr(0, ASN1_R_TOO_SMALL);
206 CMPerr(0, ASN1_R_TOO_LARGE);
212 ASN1_CHOICE(OSSL_CMP_CERTORENCCERT) = {
213 /* OSSL_CMP_CMPCERTIFICATE is effectively X509 so it is used directly */
214 ASN1_EXP(OSSL_CMP_CERTORENCCERT, value.certificate, X509, 0),
215 ASN1_EXP(OSSL_CMP_CERTORENCCERT, value.encryptedCert,
216 OSSL_CRMF_ENCRYPTEDVALUE, 1),
217 } ASN1_CHOICE_END(OSSL_CMP_CERTORENCCERT)
218 IMPLEMENT_ASN1_FUNCTIONS(OSSL_CMP_CERTORENCCERT)
221 ASN1_SEQUENCE(OSSL_CMP_CERTIFIEDKEYPAIR) = {
222 ASN1_SIMPLE(OSSL_CMP_CERTIFIEDKEYPAIR, certOrEncCert,
223 OSSL_CMP_CERTORENCCERT),
224 ASN1_EXP_OPT(OSSL_CMP_CERTIFIEDKEYPAIR, privateKey,
225 OSSL_CRMF_ENCRYPTEDVALUE, 0),
226 ASN1_EXP_OPT(OSSL_CMP_CERTIFIEDKEYPAIR, publicationInfo,
227 OSSL_CRMF_PKIPUBLICATIONINFO, 1)
228 } ASN1_SEQUENCE_END(OSSL_CMP_CERTIFIEDKEYPAIR)
229 IMPLEMENT_ASN1_FUNCTIONS(OSSL_CMP_CERTIFIEDKEYPAIR)
232 ASN1_SEQUENCE(OSSL_CMP_REVDETAILS) = {
233 ASN1_SIMPLE(OSSL_CMP_REVDETAILS, certDetails, OSSL_CRMF_CERTTEMPLATE),
234 ASN1_OPT(OSSL_CMP_REVDETAILS, crlEntryDetails, X509_EXTENSIONS)
235 } ASN1_SEQUENCE_END(OSSL_CMP_REVDETAILS)
236 IMPLEMENT_ASN1_FUNCTIONS(OSSL_CMP_REVDETAILS)
239 ASN1_ITEM_TEMPLATE(OSSL_CMP_REVREQCONTENT) =
240 ASN1_EX_TEMPLATE_TYPE(ASN1_TFLG_SEQUENCE_OF, 0, OSSL_CMP_REVREQCONTENT,
242 ASN1_ITEM_TEMPLATE_END(OSSL_CMP_REVREQCONTENT)
245 ASN1_SEQUENCE(OSSL_CMP_REVREPCONTENT) = {
246 ASN1_SEQUENCE_OF(OSSL_CMP_REVREPCONTENT, status, OSSL_CMP_PKISI),
247 ASN1_EXP_SEQUENCE_OF_OPT(OSSL_CMP_REVREPCONTENT, revCerts, OSSL_CRMF_CERTID,
249 ASN1_EXP_SEQUENCE_OF_OPT(OSSL_CMP_REVREPCONTENT, crls, X509_CRL, 1)
250 } ASN1_SEQUENCE_END(OSSL_CMP_REVREPCONTENT)
251 IMPLEMENT_ASN1_FUNCTIONS(OSSL_CMP_REVREPCONTENT)
254 ASN1_SEQUENCE(OSSL_CMP_KEYRECREPCONTENT) = {
255 ASN1_SIMPLE(OSSL_CMP_KEYRECREPCONTENT, status, OSSL_CMP_PKISI),
256 ASN1_EXP_OPT(OSSL_CMP_KEYRECREPCONTENT, newSigCert, X509, 0),
257 ASN1_EXP_SEQUENCE_OF_OPT(OSSL_CMP_KEYRECREPCONTENT, caCerts, X509, 1),
258 ASN1_EXP_SEQUENCE_OF_OPT(OSSL_CMP_KEYRECREPCONTENT, keyPairHist,
259 OSSL_CMP_CERTIFIEDKEYPAIR, 2)
260 } ASN1_SEQUENCE_END(OSSL_CMP_KEYRECREPCONTENT)
261 IMPLEMENT_ASN1_FUNCTIONS(OSSL_CMP_KEYRECREPCONTENT)
264 ASN1_ITEM_TEMPLATE(OSSL_CMP_PKISTATUS) =
265 ASN1_EX_TEMPLATE_TYPE(ASN1_TFLG_UNIVERSAL, 0, status, ASN1_INTEGER)
266 ASN1_ITEM_TEMPLATE_END(OSSL_CMP_PKISTATUS)
268 ASN1_SEQUENCE(OSSL_CMP_PKISI) = {
269 ASN1_SIMPLE(OSSL_CMP_PKISI, status, OSSL_CMP_PKISTATUS),
271 * CMP_PKIFREETEXT is effectively a sequence of ASN1_UTF8STRING
272 * so it is used directly
274 ASN1_SEQUENCE_OF_OPT(OSSL_CMP_PKISI, statusString, ASN1_UTF8STRING),
276 * OSSL_CMP_PKIFAILUREINFO is effectively ASN1_BIT_STRING so used directly
278 ASN1_OPT(OSSL_CMP_PKISI, failInfo, ASN1_BIT_STRING)
279 } ASN1_SEQUENCE_END(OSSL_CMP_PKISI)
280 IMPLEMENT_ASN1_FUNCTIONS(OSSL_CMP_PKISI)
281 IMPLEMENT_ASN1_DUP_FUNCTION(OSSL_CMP_PKISI)
283 ASN1_SEQUENCE(OSSL_CMP_CERTSTATUS) = {
284 ASN1_SIMPLE(OSSL_CMP_CERTSTATUS, certHash, ASN1_OCTET_STRING),
285 ASN1_SIMPLE(OSSL_CMP_CERTSTATUS, certReqId, ASN1_INTEGER),
286 ASN1_OPT(OSSL_CMP_CERTSTATUS, statusInfo, OSSL_CMP_PKISI)
287 } ASN1_SEQUENCE_END(OSSL_CMP_CERTSTATUS)
288 IMPLEMENT_ASN1_FUNCTIONS(OSSL_CMP_CERTSTATUS)
290 ASN1_ITEM_TEMPLATE(OSSL_CMP_CERTCONFIRMCONTENT) =
291 ASN1_EX_TEMPLATE_TYPE(ASN1_TFLG_SEQUENCE_OF, 0, OSSL_CMP_CERTCONFIRMCONTENT,
293 ASN1_ITEM_TEMPLATE_END(OSSL_CMP_CERTCONFIRMCONTENT)
295 ASN1_SEQUENCE(OSSL_CMP_CERTRESPONSE) = {
296 ASN1_SIMPLE(OSSL_CMP_CERTRESPONSE, certReqId, ASN1_INTEGER),
297 ASN1_SIMPLE(OSSL_CMP_CERTRESPONSE, status, OSSL_CMP_PKISI),
298 ASN1_OPT(OSSL_CMP_CERTRESPONSE, certifiedKeyPair,
299 OSSL_CMP_CERTIFIEDKEYPAIR),
300 ASN1_OPT(OSSL_CMP_CERTRESPONSE, rspInfo, ASN1_OCTET_STRING)
301 } ASN1_SEQUENCE_END(OSSL_CMP_CERTRESPONSE)
302 IMPLEMENT_ASN1_FUNCTIONS(OSSL_CMP_CERTRESPONSE)
304 ASN1_SEQUENCE(OSSL_CMP_POLLREQ) = {
305 ASN1_SIMPLE(OSSL_CMP_POLLREQ, certReqId, ASN1_INTEGER)
306 } ASN1_SEQUENCE_END(OSSL_CMP_POLLREQ)
307 IMPLEMENT_ASN1_FUNCTIONS(OSSL_CMP_POLLREQ)
309 ASN1_ITEM_TEMPLATE(OSSL_CMP_POLLREQCONTENT) =
310 ASN1_EX_TEMPLATE_TYPE(ASN1_TFLG_SEQUENCE_OF, 0, OSSL_CMP_POLLREQCONTENT,
312 ASN1_ITEM_TEMPLATE_END(OSSL_CMP_POLLREQCONTENT)
314 ASN1_SEQUENCE(OSSL_CMP_POLLREP) = {
315 ASN1_SIMPLE(OSSL_CMP_POLLREP, certReqId, ASN1_INTEGER),
316 ASN1_SIMPLE(OSSL_CMP_POLLREP, checkAfter, ASN1_INTEGER),
317 ASN1_SEQUENCE_OF_OPT(OSSL_CMP_POLLREP, reason, ASN1_UTF8STRING),
318 } ASN1_SEQUENCE_END(OSSL_CMP_POLLREP)
319 IMPLEMENT_ASN1_FUNCTIONS(OSSL_CMP_POLLREP)
321 ASN1_ITEM_TEMPLATE(OSSL_CMP_POLLREPCONTENT) =
322 ASN1_EX_TEMPLATE_TYPE(ASN1_TFLG_SEQUENCE_OF, 0,
323 OSSL_CMP_POLLREPCONTENT,
325 ASN1_ITEM_TEMPLATE_END(OSSL_CMP_POLLREPCONTENT)
327 ASN1_SEQUENCE(OSSL_CMP_CERTREPMESSAGE) = {
328 /* OSSL_CMP_CMPCERTIFICATE is effectively X509 so it is used directly */
329 ASN1_EXP_SEQUENCE_OF_OPT(OSSL_CMP_CERTREPMESSAGE, caPubs, X509, 1),
330 ASN1_SEQUENCE_OF(OSSL_CMP_CERTREPMESSAGE, response, OSSL_CMP_CERTRESPONSE)
331 } ASN1_SEQUENCE_END(OSSL_CMP_CERTREPMESSAGE)
332 IMPLEMENT_ASN1_FUNCTIONS(OSSL_CMP_CERTREPMESSAGE)
334 ASN1_ITEM_TEMPLATE(OSSL_CMP_GENMSGCONTENT) =
335 ASN1_EX_TEMPLATE_TYPE(ASN1_TFLG_SEQUENCE_OF, 0, OSSL_CMP_GENMSGCONTENT,
337 ASN1_ITEM_TEMPLATE_END(OSSL_CMP_GENMSGCONTENT)
339 ASN1_ITEM_TEMPLATE(OSSL_CMP_GENREPCONTENT) =
340 ASN1_EX_TEMPLATE_TYPE(ASN1_TFLG_SEQUENCE_OF, 0, OSSL_CMP_GENREPCONTENT,
342 ASN1_ITEM_TEMPLATE_END(OSSL_CMP_GENREPCONTENT)
344 ASN1_ITEM_TEMPLATE(OSSL_CMP_CRLANNCONTENT) =
345 ASN1_EX_TEMPLATE_TYPE(ASN1_TFLG_SEQUENCE_OF, 0,
346 OSSL_CMP_CRLANNCONTENT, X509_CRL)
347 ASN1_ITEM_TEMPLATE_END(OSSL_CMP_CRLANNCONTENT)
349 ASN1_CHOICE(OSSL_CMP_PKIBODY) = {
350 ASN1_EXP(OSSL_CMP_PKIBODY, value.ir, OSSL_CRMF_MSGS, 0),
351 ASN1_EXP(OSSL_CMP_PKIBODY, value.ip, OSSL_CMP_CERTREPMESSAGE, 1),
352 ASN1_EXP(OSSL_CMP_PKIBODY, value.cr, OSSL_CRMF_MSGS, 2),
353 ASN1_EXP(OSSL_CMP_PKIBODY, value.cp, OSSL_CMP_CERTREPMESSAGE, 3),
354 ASN1_EXP(OSSL_CMP_PKIBODY, value.p10cr, X509_REQ, 4),
355 ASN1_EXP(OSSL_CMP_PKIBODY, value.popdecc, OSSL_CMP_POPODECKEYCHALLCONTENT, 5),
356 ASN1_EXP(OSSL_CMP_PKIBODY, value.popdecr, OSSL_CMP_POPODECKEYRESPCONTENT, 6),
357 ASN1_EXP(OSSL_CMP_PKIBODY, value.kur, OSSL_CRMF_MSGS, 7),
358 ASN1_EXP(OSSL_CMP_PKIBODY, value.kup, OSSL_CMP_CERTREPMESSAGE, 8),
359 ASN1_EXP(OSSL_CMP_PKIBODY, value.krr, OSSL_CRMF_MSGS, 9),
360 ASN1_EXP(OSSL_CMP_PKIBODY, value.krp, OSSL_CMP_KEYRECREPCONTENT, 10),
361 ASN1_EXP(OSSL_CMP_PKIBODY, value.rr, OSSL_CMP_REVREQCONTENT, 11),
362 ASN1_EXP(OSSL_CMP_PKIBODY, value.rp, OSSL_CMP_REVREPCONTENT, 12),
363 ASN1_EXP(OSSL_CMP_PKIBODY, value.ccr, OSSL_CRMF_MSGS, 13),
364 ASN1_EXP(OSSL_CMP_PKIBODY, value.ccp, OSSL_CMP_CERTREPMESSAGE, 14),
365 ASN1_EXP(OSSL_CMP_PKIBODY, value.ckuann, OSSL_CMP_CAKEYUPDANNCONTENT, 15),
366 ASN1_EXP(OSSL_CMP_PKIBODY, value.cann, X509, 16),
367 ASN1_EXP(OSSL_CMP_PKIBODY, value.rann, OSSL_CMP_REVANNCONTENT, 17),
368 ASN1_EXP(OSSL_CMP_PKIBODY, value.crlann, OSSL_CMP_CRLANNCONTENT, 18),
369 ASN1_EXP(OSSL_CMP_PKIBODY, value.pkiconf, ASN1_ANY, 19),
370 ASN1_EXP(OSSL_CMP_PKIBODY, value.nested, OSSL_CMP_MSGS, 20),
371 ASN1_EXP(OSSL_CMP_PKIBODY, value.genm, OSSL_CMP_GENMSGCONTENT, 21),
372 ASN1_EXP(OSSL_CMP_PKIBODY, value.genp, OSSL_CMP_GENREPCONTENT, 22),
373 ASN1_EXP(OSSL_CMP_PKIBODY, value.error, OSSL_CMP_ERRORMSGCONTENT, 23),
374 ASN1_EXP(OSSL_CMP_PKIBODY, value.certConf, OSSL_CMP_CERTCONFIRMCONTENT, 24),
375 ASN1_EXP(OSSL_CMP_PKIBODY, value.pollReq, OSSL_CMP_POLLREQCONTENT, 25),
376 ASN1_EXP(OSSL_CMP_PKIBODY, value.pollRep, OSSL_CMP_POLLREPCONTENT, 26),
377 } ASN1_CHOICE_END(OSSL_CMP_PKIBODY)
378 IMPLEMENT_ASN1_FUNCTIONS(OSSL_CMP_PKIBODY)
380 ASN1_SEQUENCE(OSSL_CMP_PKIHEADER) = {
381 ASN1_SIMPLE(OSSL_CMP_PKIHEADER, pvno, ASN1_INTEGER),
382 ASN1_SIMPLE(OSSL_CMP_PKIHEADER, sender, GENERAL_NAME),
383 ASN1_SIMPLE(OSSL_CMP_PKIHEADER, recipient, GENERAL_NAME),
384 ASN1_EXP_OPT(OSSL_CMP_PKIHEADER, messageTime, ASN1_GENERALIZEDTIME, 0),
385 ASN1_EXP_OPT(OSSL_CMP_PKIHEADER, protectionAlg, X509_ALGOR, 1),
386 ASN1_EXP_OPT(OSSL_CMP_PKIHEADER, senderKID, ASN1_OCTET_STRING, 2),
387 ASN1_EXP_OPT(OSSL_CMP_PKIHEADER, recipKID, ASN1_OCTET_STRING, 3),
388 ASN1_EXP_OPT(OSSL_CMP_PKIHEADER, transactionID, ASN1_OCTET_STRING, 4),
389 ASN1_EXP_OPT(OSSL_CMP_PKIHEADER, senderNonce, ASN1_OCTET_STRING, 5),
390 ASN1_EXP_OPT(OSSL_CMP_PKIHEADER, recipNonce, ASN1_OCTET_STRING, 6),
392 * OSSL_CMP_PKIFREETEXT is effectively a sequence of ASN1_UTF8STRING
393 * so it is used directly
395 ASN1_EXP_SEQUENCE_OF_OPT(OSSL_CMP_PKIHEADER, freeText, ASN1_UTF8STRING, 7),
396 ASN1_EXP_SEQUENCE_OF_OPT(OSSL_CMP_PKIHEADER, generalInfo,
398 } ASN1_SEQUENCE_END(OSSL_CMP_PKIHEADER)
399 IMPLEMENT_ASN1_FUNCTIONS(OSSL_CMP_PKIHEADER)
401 ASN1_SEQUENCE(OSSL_CMP_PROTECTEDPART) = {
402 ASN1_SIMPLE(OSSL_CMP_MSG, header, OSSL_CMP_PKIHEADER),
403 ASN1_SIMPLE(OSSL_CMP_MSG, body, OSSL_CMP_PKIBODY)
404 } ASN1_SEQUENCE_END(OSSL_CMP_PROTECTEDPART)
405 IMPLEMENT_ASN1_FUNCTIONS(OSSL_CMP_PROTECTEDPART)
407 ASN1_SEQUENCE(OSSL_CMP_MSG) = {
408 ASN1_SIMPLE(OSSL_CMP_MSG, header, OSSL_CMP_PKIHEADER),
409 ASN1_SIMPLE(OSSL_CMP_MSG, body, OSSL_CMP_PKIBODY),
410 ASN1_EXP_OPT(OSSL_CMP_MSG, protection, ASN1_BIT_STRING, 0),
411 /* OSSL_CMP_CMPCERTIFICATE is effectively X509 so it is used directly */
412 ASN1_EXP_SEQUENCE_OF_OPT(OSSL_CMP_MSG, extraCerts, X509, 1)
413 } ASN1_SEQUENCE_END(OSSL_CMP_MSG)
414 IMPLEMENT_ASN1_FUNCTIONS(OSSL_CMP_MSG)
415 IMPLEMENT_ASN1_DUP_FUNCTION(OSSL_CMP_MSG)
417 ASN1_ITEM_TEMPLATE(OSSL_CMP_MSGS) =
418 ASN1_EX_TEMPLATE_TYPE(ASN1_TFLG_SEQUENCE_OF, 0, OSSL_CMP_MSGS,
420 ASN1_ITEM_TEMPLATE_END(OSSL_CMP_MSGS)