crypto/x509v3/v3_info.c

   1 /*
   2  * Copyright 1999-2016 The OpenSSL Project Authors. All Rights Reserved.
   3  *
   4  * Licensed under the OpenSSL license (the "License").  You may not use
   5  * this file except in compliance with the License.  You can obtain a copy
   6  * in the file LICENSE in the source distribution or at
   7  * https://www.openssl.org/source/license.html
   8  */
   9
  10 #include <stdio.h>
  11 #include "internal/cryptlib.h"
  12 #include <openssl/conf.h>
  13 #include <openssl/asn1.h>
  14 #include <openssl/asn1t.h>
  15 #include <openssl/x509v3.h>
  16 #include "ext_dat.h"
  17
  18 static STACK_OF(CONF_VALUE) *i2v_AUTHORITY_INFO_ACCESS(X509V3_EXT_METHOD
  19                                                        *method, AUTHORITY_INFO_ACCESS
  20                                                        *ainfo, STACK_OF(CONF_VALUE)
  21                                                        *ret);
  22 static AUTHORITY_INFO_ACCESS *v2i_AUTHORITY_INFO_ACCESS(X509V3_EXT_METHOD
  23                                                         *method,
  24                                                         X509V3_CTX *ctx,
  25                                                         STACK_OF(CONF_VALUE)
  26                                                         *nval);
  27
  28 const X509V3_EXT_METHOD v3_info = { NID_info_access, X509V3_EXT_MULTILINE,
  29     ASN1_ITEM_ref(AUTHORITY_INFO_ACCESS),
  30     0, 0, 0, 0,
  31     0, 0,
  32     (X509V3_EXT_I2V) i2v_AUTHORITY_INFO_ACCESS,
  33     (X509V3_EXT_V2I)v2i_AUTHORITY_INFO_ACCESS,
  34     0, 0,
  35     NULL
  36 };
  37
  38 const X509V3_EXT_METHOD v3_sinfo = { NID_sinfo_access, X509V3_EXT_MULTILINE,
  39     ASN1_ITEM_ref(AUTHORITY_INFO_ACCESS),
  40     0, 0, 0, 0,
  41     0, 0,
  42     (X509V3_EXT_I2V) i2v_AUTHORITY_INFO_ACCESS,
  43     (X509V3_EXT_V2I)v2i_AUTHORITY_INFO_ACCESS,
  44     0, 0,
  45     NULL
  46 };
  47
  48 ASN1_SEQUENCE(ACCESS_DESCRIPTION) = {
  49         ASN1_SIMPLE(ACCESS_DESCRIPTION, method, ASN1_OBJECT),
  50         ASN1_SIMPLE(ACCESS_DESCRIPTION, location, GENERAL_NAME)
  51 } ASN1_SEQUENCE_END(ACCESS_DESCRIPTION)
  52
  53 IMPLEMENT_ASN1_FUNCTIONS(ACCESS_DESCRIPTION)
  54
  55 ASN1_ITEM_TEMPLATE(AUTHORITY_INFO_ACCESS) =
  56         ASN1_EX_TEMPLATE_TYPE(ASN1_TFLG_SEQUENCE_OF, 0, GeneralNames, ACCESS_DESCRIPTION)
  57 ASN1_ITEM_TEMPLATE_END(AUTHORITY_INFO_ACCESS)
  58
  59 IMPLEMENT_ASN1_FUNCTIONS(AUTHORITY_INFO_ACCESS)
  60
  61 static STACK_OF(CONF_VALUE) *i2v_AUTHORITY_INFO_ACCESS(
  62     X509V3_EXT_METHOD *method, AUTHORITY_INFO_ACCESS *ainfo,
  63     STACK_OF(CONF_VALUE) *ret)
  64 {
  65     ACCESS_DESCRIPTION *desc;
  66     int i, nlen;
  67     char objtmp[80], *ntmp;
  68     CONF_VALUE *vtmp;
  69     STACK_OF(CONF_VALUE) *tret = ret;
  70
  71     for (i = 0; i < sk_ACCESS_DESCRIPTION_num(ainfo); i++) {
  72         STACK_OF(CONF_VALUE) *tmp;
  73
  74         desc = sk_ACCESS_DESCRIPTION_value(ainfo, i);
  75         tmp = i2v_GENERAL_NAME(method, desc->location, tret);
  76         if (tmp == NULL)
  77             goto err;
  78         tret = tmp;
  79         vtmp = sk_CONF_VALUE_value(tret, i);
  80         i2t_ASN1_OBJECT(objtmp, sizeof objtmp, desc->method);
  81         nlen = strlen(objtmp) + strlen(vtmp->name) + 5;
  82         ntmp = OPENSSL_malloc(nlen);
  83         if (ntmp == NULL)
  84             goto err;
  85         OPENSSL_strlcpy(ntmp, objtmp, nlen);
  86         OPENSSL_strlcat(ntmp, " - ", nlen);
  87         OPENSSL_strlcat(ntmp, vtmp->name, nlen);
  88         OPENSSL_free(vtmp->name);
  89         vtmp->name = ntmp;
  90
  91     }
  92     if (ret == NULL && tret == NULL)
  93         return sk_CONF_VALUE_new_null();
  94
  95     return tret;
  96  err:
  97     X509V3err(X509V3_F_I2V_AUTHORITY_INFO_ACCESS, ERR_R_MALLOC_FAILURE);
  98     if (ret == NULL && tret != NULL)
  99         sk_CONF_VALUE_pop_free(tret, X509V3_conf_free);
 100     return NULL;
 101 }
 102
 103 static AUTHORITY_INFO_ACCESS *v2i_AUTHORITY_INFO_ACCESS(X509V3_EXT_METHOD
 104                                                         *method,
 105                                                         X509V3_CTX *ctx,
 106                                                         STACK_OF(CONF_VALUE)
 107                                                         *nval)
 108 {
 109     AUTHORITY_INFO_ACCESS *ainfo = NULL;
 110     CONF_VALUE *cnf, ctmp;
 111     ACCESS_DESCRIPTION *acc;
 112     int i, objlen;
 113     char *objtmp, *ptmp;
 114
 115     if ((ainfo = sk_ACCESS_DESCRIPTION_new_null()) == NULL) {
 116         X509V3err(X509V3_F_V2I_AUTHORITY_INFO_ACCESS, ERR_R_MALLOC_FAILURE);
 117         return NULL;
 118     }
 119     for (i = 0; i < sk_CONF_VALUE_num(nval); i++) {
 120         cnf = sk_CONF_VALUE_value(nval, i);
 121         if ((acc = ACCESS_DESCRIPTION_new()) == NULL
 122             || !sk_ACCESS_DESCRIPTION_push(ainfo, acc)) {
 123             X509V3err(X509V3_F_V2I_AUTHORITY_INFO_ACCESS,
 124                       ERR_R_MALLOC_FAILURE);
 125             goto err;
 126         }
 127         ptmp = strchr(cnf->name, ';');
 128         if (!ptmp) {
 129             X509V3err(X509V3_F_V2I_AUTHORITY_INFO_ACCESS,
 130                       X509V3_R_INVALID_SYNTAX);
 131             goto err;
 132         }
 133         objlen = ptmp - cnf->name;
 134         ctmp.name = ptmp + 1;
 135         ctmp.value = cnf->value;
 136         if (!v2i_GENERAL_NAME_ex(acc->location, method, ctx, &ctmp, 0))
 137             goto err;
 138         if ((objtmp = OPENSSL_strndup(cnf->name, objlen)) == NULL) {
 139             X509V3err(X509V3_F_V2I_AUTHORITY_INFO_ACCESS,
 140                       ERR_R_MALLOC_FAILURE);
 141             goto err;
 142         }
 143         acc->method = OBJ_txt2obj(objtmp, 0);
 144         if (!acc->method) {
 145             X509V3err(X509V3_F_V2I_AUTHORITY_INFO_ACCESS,
 146                       X509V3_R_BAD_OBJECT);
 147             ERR_add_error_data(2, "value=", objtmp);
 148             OPENSSL_free(objtmp);
 149             goto err;
 150         }
 151         OPENSSL_free(objtmp);
 152
 153     }
 154     return ainfo;
 155  err:
 156     sk_ACCESS_DESCRIPTION_pop_free(ainfo, ACCESS_DESCRIPTION_free);
 157     return NULL;
 158 }
 159
 160 int i2a_ACCESS_DESCRIPTION(BIO *bp, const ACCESS_DESCRIPTION *a)
 161 {
 162     i2a_ASN1_OBJECT(bp, a->method);
 163     return 2;
 164 }