2 * Copyright 1995-2020 The OpenSSL Project Authors. All Rights Reserved.
4 * Licensed under the Apache License 2.0 (the "License"). You may not use
5 * this file except in compliance with the License. You can obtain a copy
6 * in the file LICENSE in the source distribution or at
7 * https://www.openssl.org/source/license.html
11 #include "internal/cryptlib.h"
12 #include <openssl/safestack.h>
13 #include <openssl/asn1.h>
14 #include <openssl/objects.h>
15 #include <openssl/evp.h>
16 #include <openssl/x509.h>
17 #include "crypto/x509.h"
19 int X509_NAME_get_text_by_NID(const X509_NAME
*name
, int nid
,
24 obj
= OBJ_nid2obj(nid
);
27 return X509_NAME_get_text_by_OBJ(name
, obj
, buf
, len
);
30 int X509_NAME_get_text_by_OBJ(const X509_NAME
*name
, const ASN1_OBJECT
*obj
,
34 const ASN1_STRING
*data
;
36 i
= X509_NAME_get_index_by_OBJ(name
, obj
, -1);
39 data
= X509_NAME_ENTRY_get_data(X509_NAME_get_entry(name
, i
));
44 i
= (data
->length
> (len
- 1)) ? (len
- 1) : data
->length
;
45 memcpy(buf
, data
->data
, i
);
50 int X509_NAME_entry_count(const X509_NAME
*name
)
54 return sk_X509_NAME_ENTRY_num(name
->entries
);
57 int X509_NAME_get_index_by_NID(const X509_NAME
*name
, int nid
, int lastpos
)
61 obj
= OBJ_nid2obj(nid
);
64 return X509_NAME_get_index_by_OBJ(name
, obj
, lastpos
);
67 /* NOTE: you should be passing -1, not 0 as lastpos */
68 int X509_NAME_get_index_by_OBJ(const X509_NAME
*name
, const ASN1_OBJECT
*obj
,
73 STACK_OF(X509_NAME_ENTRY
) *sk
;
80 n
= sk_X509_NAME_ENTRY_num(sk
);
81 for (lastpos
++; lastpos
< n
; lastpos
++) {
82 ne
= sk_X509_NAME_ENTRY_value(sk
, lastpos
);
83 if (OBJ_cmp(ne
->object
, obj
) == 0)
89 X509_NAME_ENTRY
*X509_NAME_get_entry(const X509_NAME
*name
, int loc
)
91 if (name
== NULL
|| sk_X509_NAME_ENTRY_num(name
->entries
) <= loc
95 return sk_X509_NAME_ENTRY_value(name
->entries
, loc
);
98 X509_NAME_ENTRY
*X509_NAME_delete_entry(X509_NAME
*name
, int loc
)
100 X509_NAME_ENTRY
*ret
;
101 int i
, n
, set_prev
, set_next
;
102 STACK_OF(X509_NAME_ENTRY
) *sk
;
104 if (name
== NULL
|| sk_X509_NAME_ENTRY_num(name
->entries
) <= loc
109 ret
= sk_X509_NAME_ENTRY_delete(sk
, loc
);
110 n
= sk_X509_NAME_ENTRY_num(sk
);
115 /* else we need to fixup the set field */
117 set_prev
= (sk_X509_NAME_ENTRY_value(sk
, loc
- 1))->set
;
119 set_prev
= ret
->set
- 1;
120 set_next
= sk_X509_NAME_ENTRY_value(sk
, loc
)->set
;
123 * set_prev is the previous set
124 * set is the current set
125 * set_next is the following
126 * prev 1 1 1 1 1 1 1 1
128 * next 1 1 2 2 2 2 3 2
129 * so basically only if prev and next differ by 2, then
130 * re-number down by 1
132 if (set_prev
+ 1 < set_next
)
133 for (i
= loc
; i
< n
; i
++)
134 sk_X509_NAME_ENTRY_value(sk
, i
)->set
--;
138 int X509_NAME_add_entry_by_OBJ(X509_NAME
*name
, const ASN1_OBJECT
*obj
, int type
,
139 const unsigned char *bytes
, int len
, int loc
,
145 ne
= X509_NAME_ENTRY_create_by_OBJ(NULL
, obj
, type
, bytes
, len
);
148 ret
= X509_NAME_add_entry(name
, ne
, loc
, set
);
149 X509_NAME_ENTRY_free(ne
);
153 int X509_NAME_add_entry_by_NID(X509_NAME
*name
, int nid
, int type
,
154 const unsigned char *bytes
, int len
, int loc
,
159 ne
= X509_NAME_ENTRY_create_by_NID(NULL
, nid
, type
, bytes
, len
);
162 ret
= X509_NAME_add_entry(name
, ne
, loc
, set
);
163 X509_NAME_ENTRY_free(ne
);
167 int X509_NAME_add_entry_by_txt(X509_NAME
*name
, const char *field
, int type
,
168 const unsigned char *bytes
, int len
, int loc
,
173 ne
= X509_NAME_ENTRY_create_by_txt(NULL
, field
, type
, bytes
, len
);
176 ret
= X509_NAME_add_entry(name
, ne
, loc
, set
);
177 X509_NAME_ENTRY_free(ne
);
182 * if set is -1, append to previous set, 0 'a new one', and 1, prepend to the
183 * guy we are about to stomp on.
185 int X509_NAME_add_entry(X509_NAME
*name
, const X509_NAME_ENTRY
*ne
, int loc
,
188 X509_NAME_ENTRY
*new_name
= NULL
;
190 STACK_OF(X509_NAME_ENTRY
) *sk
;
195 n
= sk_X509_NAME_ENTRY_num(sk
);
208 set
= sk_X509_NAME_ENTRY_value(sk
, loc
- 1)->set
;
210 } else { /* if (set >= 0) */
214 set
= sk_X509_NAME_ENTRY_value(sk
, loc
- 1)->set
+ 1;
218 set
= sk_X509_NAME_ENTRY_value(sk
, loc
)->set
;
221 if ((new_name
= X509_NAME_ENTRY_dup(ne
)) == NULL
)
224 if (!sk_X509_NAME_ENTRY_insert(sk
, new_name
, loc
)) {
225 ERR_raise(ERR_LIB_X509
, ERR_R_MALLOC_FAILURE
);
229 n
= sk_X509_NAME_ENTRY_num(sk
);
230 for (i
= loc
+ 1; i
< n
; i
++)
231 sk_X509_NAME_ENTRY_value(sk
, i
)->set
+= 1;
235 X509_NAME_ENTRY_free(new_name
);
239 X509_NAME_ENTRY
*X509_NAME_ENTRY_create_by_txt(X509_NAME_ENTRY
**ne
,
240 const char *field
, int type
,
241 const unsigned char *bytes
,
245 X509_NAME_ENTRY
*nentry
;
247 obj
= OBJ_txt2obj(field
, 0);
249 ERR_raise(ERR_LIB_X509
,
250 X509_R_INVALID_FIELD_NAME
);
251 ERR_add_error_data(2, "name=", field
);
254 nentry
= X509_NAME_ENTRY_create_by_OBJ(ne
, obj
, type
, bytes
, len
);
255 ASN1_OBJECT_free(obj
);
259 X509_NAME_ENTRY
*X509_NAME_ENTRY_create_by_NID(X509_NAME_ENTRY
**ne
, int nid
,
261 const unsigned char *bytes
,
265 X509_NAME_ENTRY
*nentry
;
267 obj
= OBJ_nid2obj(nid
);
269 ERR_raise(ERR_LIB_X509
, X509_R_UNKNOWN_NID
);
272 nentry
= X509_NAME_ENTRY_create_by_OBJ(ne
, obj
, type
, bytes
, len
);
273 ASN1_OBJECT_free(obj
);
277 X509_NAME_ENTRY
*X509_NAME_ENTRY_create_by_OBJ(X509_NAME_ENTRY
**ne
,
278 const ASN1_OBJECT
*obj
, int type
,
279 const unsigned char *bytes
,
282 X509_NAME_ENTRY
*ret
;
284 if ((ne
== NULL
) || (*ne
== NULL
)) {
285 if ((ret
= X509_NAME_ENTRY_new()) == NULL
)
290 if (!X509_NAME_ENTRY_set_object(ret
, obj
))
292 if (!X509_NAME_ENTRY_set_data(ret
, type
, bytes
, len
))
295 if ((ne
!= NULL
) && (*ne
== NULL
))
299 if ((ne
== NULL
) || (ret
!= *ne
))
300 X509_NAME_ENTRY_free(ret
);
304 int X509_NAME_ENTRY_set_object(X509_NAME_ENTRY
*ne
, const ASN1_OBJECT
*obj
)
306 if ((ne
== NULL
) || (obj
== NULL
)) {
307 ERR_raise(ERR_LIB_X509
, ERR_R_PASSED_NULL_PARAMETER
);
310 ASN1_OBJECT_free(ne
->object
);
311 ne
->object
= OBJ_dup(obj
);
312 return ((ne
->object
== NULL
) ? 0 : 1);
315 int X509_NAME_ENTRY_set_data(X509_NAME_ENTRY
*ne
, int type
,
316 const unsigned char *bytes
, int len
)
320 if ((ne
== NULL
) || ((bytes
== NULL
) && (len
!= 0)))
322 if ((type
> 0) && (type
& MBSTRING_FLAG
))
323 return ASN1_STRING_set_by_NID(&ne
->value
, bytes
,
325 OBJ_obj2nid(ne
->object
)) ? 1 : 0;
327 len
= strlen((const char *)bytes
);
328 i
= ASN1_STRING_set(ne
->value
, bytes
, len
);
331 if (type
!= V_ASN1_UNDEF
) {
332 if (type
== V_ASN1_APP_CHOOSE
)
333 ne
->value
->type
= ASN1_PRINTABLE_type(bytes
, len
);
335 ne
->value
->type
= type
;
340 ASN1_OBJECT
*X509_NAME_ENTRY_get_object(const X509_NAME_ENTRY
*ne
)
347 ASN1_STRING
*X509_NAME_ENTRY_get_data(const X509_NAME_ENTRY
*ne
)
354 int X509_NAME_ENTRY_set(const X509_NAME_ENTRY
*ne
)