crypto/x509/v3_extku.c

   1 /*
   2  * Copyright 1999-2020 The OpenSSL Project Authors. All Rights Reserved.
   3  *
   4  * Licensed under the Apache License 2.0 (the "License").  You may not use
   5  * this file except in compliance with the License.  You can obtain a copy
   6  * in the file LICENSE in the source distribution or at
   7  * https://www.openssl.org/source/license.html
   8  */
   9
  10 #include <stdio.h>
  11 #include "internal/cryptlib.h"
  12 #include <openssl/asn1t.h>
  13 #include <openssl/conf.h>
  14 #include <openssl/x509v3.h>
  15 #include "ext_dat.h"
  16
  17 DEFINE_STACK_OF(ASN1_OBJECT)
  18 DEFINE_STACK_OF(CONF_VALUE)
  19
  20 static void *v2i_EXTENDED_KEY_USAGE(const X509V3_EXT_METHOD *method,
  21                                     X509V3_CTX *ctx,
  22                                     STACK_OF(CONF_VALUE) *nval);
  23 static STACK_OF(CONF_VALUE) *i2v_EXTENDED_KEY_USAGE(const X509V3_EXT_METHOD
  24                                                     *method, void *eku, STACK_OF(CONF_VALUE)
  25                                                     *extlist);
  26
  27 const X509V3_EXT_METHOD v3_ext_ku = {
  28     NID_ext_key_usage, 0,
  29     ASN1_ITEM_ref(EXTENDED_KEY_USAGE),
  30     0, 0, 0, 0,
  31     0, 0,
  32     i2v_EXTENDED_KEY_USAGE,
  33     v2i_EXTENDED_KEY_USAGE,
  34     0, 0,
  35     NULL
  36 };
  37
  38 /* NB OCSP acceptable responses also is a SEQUENCE OF OBJECT */
  39 const X509V3_EXT_METHOD v3_ocsp_accresp = {
  40     NID_id_pkix_OCSP_acceptableResponses, 0,
  41     ASN1_ITEM_ref(EXTENDED_KEY_USAGE),
  42     0, 0, 0, 0,
  43     0, 0,
  44     i2v_EXTENDED_KEY_USAGE,
  45     v2i_EXTENDED_KEY_USAGE,
  46     0, 0,
  47     NULL
  48 };
  49
  50 ASN1_ITEM_TEMPLATE(EXTENDED_KEY_USAGE) =
  51         ASN1_EX_TEMPLATE_TYPE(ASN1_TFLG_SEQUENCE_OF, 0, EXTENDED_KEY_USAGE, ASN1_OBJECT)
  52 ASN1_ITEM_TEMPLATE_END(EXTENDED_KEY_USAGE)
  53
  54 IMPLEMENT_ASN1_FUNCTIONS(EXTENDED_KEY_USAGE)
  55
  56 static STACK_OF(CONF_VALUE) *i2v_EXTENDED_KEY_USAGE(const X509V3_EXT_METHOD
  57                                                     *method, void *a, STACK_OF(CONF_VALUE)
  58                                                     *ext_list)
  59 {
  60     EXTENDED_KEY_USAGE *eku = a;
  61     int i;
  62     ASN1_OBJECT *obj;
  63     char obj_tmp[80];
  64     for (i = 0; i < sk_ASN1_OBJECT_num(eku); i++) {
  65         obj = sk_ASN1_OBJECT_value(eku, i);
  66         i2t_ASN1_OBJECT(obj_tmp, 80, obj);
  67         X509V3_add_value(NULL, obj_tmp, &ext_list);
  68     }
  69     return ext_list;
  70 }
  71
  72 static void *v2i_EXTENDED_KEY_USAGE(const X509V3_EXT_METHOD *method,
  73                                     X509V3_CTX *ctx,
  74                                     STACK_OF(CONF_VALUE) *nval)
  75 {
  76     EXTENDED_KEY_USAGE *extku;
  77     char *extval;
  78     ASN1_OBJECT *objtmp;
  79     CONF_VALUE *val;
  80     const int num = sk_CONF_VALUE_num(nval);
  81     int i;
  82
  83     extku = sk_ASN1_OBJECT_new_reserve(NULL, num);
  84     if (extku == NULL) {
  85         X509V3err(X509V3_F_V2I_EXTENDED_KEY_USAGE, ERR_R_MALLOC_FAILURE);
  86         sk_ASN1_OBJECT_free(extku);
  87         return NULL;
  88     }
  89
  90     for (i = 0; i < num; i++) {
  91         val = sk_CONF_VALUE_value(nval, i);
  92         if (val->value)
  93             extval = val->value;
  94         else
  95             extval = val->name;
  96         if ((objtmp = OBJ_txt2obj(extval, 0)) == NULL) {
  97             sk_ASN1_OBJECT_pop_free(extku, ASN1_OBJECT_free);
  98             X509V3err(X509V3_F_V2I_EXTENDED_KEY_USAGE,
  99                       X509V3_R_INVALID_OBJECT_IDENTIFIER);
 100             X509V3_conf_err(val);
 101             return NULL;
 102         }
 103         sk_ASN1_OBJECT_push(extku, objtmp);  /* no failure as it was reserved */
 104     }
 105     return extku;
 106 }