crypto/x509/v3_extku.c

   1 /*
   2  * Copyright 1999-2020 The OpenSSL Project Authors. All Rights Reserved.
   3  *
   4  * Licensed under the Apache License 2.0 (the "License").  You may not use
   5  * this file except in compliance with the License.  You can obtain a copy
   6  * in the file LICENSE in the source distribution or at
   7  * https://www.openssl.org/source/license.html
   8  */
   9
  10 #include <stdio.h>
  11 #include "internal/cryptlib.h"
  12 #include <openssl/asn1t.h>
  13 #include <openssl/conf.h>
  14 #include <openssl/x509v3.h>
  15 #include "ext_dat.h"
  16
  17 DEFINE_STACK_OF(CONF_VALUE)
  18
  19 static void *v2i_EXTENDED_KEY_USAGE(const X509V3_EXT_METHOD *method,
  20                                     X509V3_CTX *ctx,
  21                                     STACK_OF(CONF_VALUE) *nval);
  22 static STACK_OF(CONF_VALUE) *i2v_EXTENDED_KEY_USAGE(const X509V3_EXT_METHOD
  23                                                     *method, void *eku, STACK_OF(CONF_VALUE)
  24                                                     *extlist);
  25
  26 const X509V3_EXT_METHOD v3_ext_ku = {
  27     NID_ext_key_usage, 0,
  28     ASN1_ITEM_ref(EXTENDED_KEY_USAGE),
  29     0, 0, 0, 0,
  30     0, 0,
  31     i2v_EXTENDED_KEY_USAGE,
  32     v2i_EXTENDED_KEY_USAGE,
  33     0, 0,
  34     NULL
  35 };
  36
  37 /* NB OCSP acceptable responses also is a SEQUENCE OF OBJECT */
  38 const X509V3_EXT_METHOD v3_ocsp_accresp = {
  39     NID_id_pkix_OCSP_acceptableResponses, 0,
  40     ASN1_ITEM_ref(EXTENDED_KEY_USAGE),
  41     0, 0, 0, 0,
  42     0, 0,
  43     i2v_EXTENDED_KEY_USAGE,
  44     v2i_EXTENDED_KEY_USAGE,
  45     0, 0,
  46     NULL
  47 };
  48
  49 ASN1_ITEM_TEMPLATE(EXTENDED_KEY_USAGE) =
  50         ASN1_EX_TEMPLATE_TYPE(ASN1_TFLG_SEQUENCE_OF, 0, EXTENDED_KEY_USAGE, ASN1_OBJECT)
  51 ASN1_ITEM_TEMPLATE_END(EXTENDED_KEY_USAGE)
  52
  53 IMPLEMENT_ASN1_FUNCTIONS(EXTENDED_KEY_USAGE)
  54
  55 static STACK_OF(CONF_VALUE) *i2v_EXTENDED_KEY_USAGE(const X509V3_EXT_METHOD
  56                                                     *method, void *a, STACK_OF(CONF_VALUE)
  57                                                     *ext_list)
  58 {
  59     EXTENDED_KEY_USAGE *eku = a;
  60     int i;
  61     ASN1_OBJECT *obj;
  62     char obj_tmp[80];
  63     for (i = 0; i < sk_ASN1_OBJECT_num(eku); i++) {
  64         obj = sk_ASN1_OBJECT_value(eku, i);
  65         i2t_ASN1_OBJECT(obj_tmp, 80, obj);
  66         X509V3_add_value(NULL, obj_tmp, &ext_list);
  67     }
  68     return ext_list;
  69 }
  70
  71 static void *v2i_EXTENDED_KEY_USAGE(const X509V3_EXT_METHOD *method,
  72                                     X509V3_CTX *ctx,
  73                                     STACK_OF(CONF_VALUE) *nval)
  74 {
  75     EXTENDED_KEY_USAGE *extku;
  76     char *extval;
  77     ASN1_OBJECT *objtmp;
  78     CONF_VALUE *val;
  79     const int num = sk_CONF_VALUE_num(nval);
  80     int i;
  81
  82     extku = sk_ASN1_OBJECT_new_reserve(NULL, num);
  83     if (extku == NULL) {
  84         X509V3err(X509V3_F_V2I_EXTENDED_KEY_USAGE, ERR_R_MALLOC_FAILURE);
  85         sk_ASN1_OBJECT_free(extku);
  86         return NULL;
  87     }
  88
  89     for (i = 0; i < num; i++) {
  90         val = sk_CONF_VALUE_value(nval, i);
  91         if (val->value)
  92             extval = val->value;
  93         else
  94             extval = val->name;
  95         if ((objtmp = OBJ_txt2obj(extval, 0)) == NULL) {
  96             sk_ASN1_OBJECT_pop_free(extku, ASN1_OBJECT_free);
  97             X509V3err(X509V3_F_V2I_EXTENDED_KEY_USAGE,
  98                       X509V3_R_INVALID_OBJECT_IDENTIFIER);
  99             ERR_add_error_data(1, extval);
 100             return NULL;
 101         }
 102         sk_ASN1_OBJECT_push(extku, objtmp);  /* no failure as it was reserved */
 103     }
 104     return extku;
 105 }