]>
Commit | Line | Data |
---|---|---|
d02b48c6 | 1 | /* crypto/asn1/t_x509.c */ |
58964a49 | 2 | /* Copyright (C) 1995-1998 Eric Young (eay@cryptsoft.com) |
d02b48c6 RE |
3 | * All rights reserved. |
4 | * | |
5 | * This package is an SSL implementation written | |
6 | * by Eric Young (eay@cryptsoft.com). | |
7 | * The implementation was written so as to conform with Netscapes SSL. | |
8 | * | |
9 | * This library is free for commercial and non-commercial use as long as | |
10 | * the following conditions are aheared to. The following conditions | |
11 | * apply to all code found in this distribution, be it the RC4, RSA, | |
12 | * lhash, DES, etc., code; not just the SSL code. The SSL documentation | |
13 | * included with this distribution is covered by the same copyright terms | |
14 | * except that the holder is Tim Hudson (tjh@cryptsoft.com). | |
15 | * | |
16 | * Copyright remains Eric Young's, and as such any Copyright notices in | |
17 | * the code are not to be removed. | |
18 | * If this package is used in a product, Eric Young should be given attribution | |
19 | * as the author of the parts of the library used. | |
20 | * This can be in the form of a textual message at program startup or | |
21 | * in documentation (online or textual) provided with the package. | |
22 | * | |
23 | * Redistribution and use in source and binary forms, with or without | |
24 | * modification, are permitted provided that the following conditions | |
25 | * are met: | |
26 | * 1. Redistributions of source code must retain the copyright | |
27 | * notice, this list of conditions and the following disclaimer. | |
28 | * 2. Redistributions in binary form must reproduce the above copyright | |
29 | * notice, this list of conditions and the following disclaimer in the | |
30 | * documentation and/or other materials provided with the distribution. | |
31 | * 3. All advertising materials mentioning features or use of this software | |
32 | * must display the following acknowledgement: | |
33 | * "This product includes cryptographic software written by | |
34 | * Eric Young (eay@cryptsoft.com)" | |
35 | * The word 'cryptographic' can be left out if the rouines from the library | |
36 | * being used are not cryptographic related :-). | |
37 | * 4. If you include any Windows specific code (or a derivative thereof) from | |
38 | * the apps directory (application code) you must include an acknowledgement: | |
39 | * "This product includes software written by Tim Hudson (tjh@cryptsoft.com)" | |
40 | * | |
41 | * THIS SOFTWARE IS PROVIDED BY ERIC YOUNG ``AS IS'' AND | |
42 | * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE | |
43 | * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE | |
44 | * ARE DISCLAIMED. IN NO EVENT SHALL THE AUTHOR OR CONTRIBUTORS BE LIABLE | |
45 | * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL | |
46 | * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS | |
47 | * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) | |
48 | * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT | |
49 | * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY | |
50 | * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF | |
51 | * SUCH DAMAGE. | |
52 | * | |
53 | * The licence and distribution terms for any publically available version or | |
54 | * derivative of this code cannot be changed. i.e. this code cannot simply be | |
55 | * copied and put under another distribution licence | |
56 | * [including the GNU Public Licence.] | |
57 | */ | |
58 | ||
59 | #include <stdio.h> | |
60 | #include "cryptlib.h" | |
ec577822 BM |
61 | #include <openssl/buffer.h> |
62 | #include <openssl/bn.h> | |
d02b48c6 | 63 | #ifndef NO_RSA |
ec577822 | 64 | #include <openssl/rsa.h> |
d02b48c6 RE |
65 | #endif |
66 | #ifndef NO_DSA | |
ec577822 | 67 | #include <openssl/dsa.h> |
d02b48c6 | 68 | #endif |
ec577822 BM |
69 | #include <openssl/objects.h> |
70 | #include <openssl/x509.h> | |
71 | #include <openssl/x509v3.h> | |
d02b48c6 | 72 | |
58964a49 | 73 | #ifndef NO_FP_API |
6b691a5c | 74 | int X509_print_fp(FILE *fp, X509 *x) |
d02b48c6 RE |
75 | { |
76 | BIO *b; | |
77 | int ret; | |
78 | ||
79 | if ((b=BIO_new(BIO_s_file())) == NULL) | |
80 | { | |
81 | X509err(X509_F_X509_PRINT_FP,ERR_R_BUF_LIB); | |
82 | return(0); | |
83 | } | |
84 | BIO_set_fp(b,fp,BIO_NOCLOSE); | |
85 | ret=X509_print(b, x); | |
86 | BIO_free(b); | |
87 | return(ret); | |
88 | } | |
89 | #endif | |
90 | ||
6b691a5c | 91 | int X509_print(BIO *bp, X509 *x) |
d02b48c6 RE |
92 | { |
93 | long l; | |
94 | int ret=0,i,j,n; | |
95 | char *m=NULL,*s; | |
96 | X509_CINF *ci; | |
97 | ASN1_INTEGER *bs; | |
98 | EVP_PKEY *pkey=NULL; | |
e778802f | 99 | const char *neg; |
d02b48c6 RE |
100 | X509_EXTENSION *ex; |
101 | ASN1_STRING *str=NULL; | |
102 | ||
103 | ci=x->cert_info; | |
104 | if (BIO_write(bp,"Certificate:\n",13) <= 0) goto err; | |
105 | if (BIO_write(bp," Data:\n",10) <= 0) goto err; | |
106 | l=X509_get_version(x); | |
107 | if (BIO_printf(bp,"%8sVersion: %lu (0x%lx)\n","",l+1,l) <= 0) goto err; | |
108 | if (BIO_write(bp," Serial Number:",22) <= 0) goto err; | |
109 | ||
110 | bs=X509_get_serialNumber(x); | |
111 | if (bs->length <= 4) | |
112 | { | |
113 | l=ASN1_INTEGER_get(bs); | |
114 | if (l < 0) | |
115 | { | |
116 | l= -l; | |
117 | neg="-"; | |
118 | } | |
119 | else | |
120 | neg=""; | |
121 | if (BIO_printf(bp," %s%lu (%s0x%lx)\n",neg,l,neg,l) <= 0) | |
122 | goto err; | |
123 | } | |
124 | else | |
125 | { | |
126 | neg=(bs->type == V_ASN1_NEG_INTEGER)?" (Negative)":""; | |
127 | if (BIO_printf(bp,"\n%12s%s","",neg) <= 0) goto err; | |
128 | ||
129 | for (i=0; i<bs->length; i++) | |
130 | { | |
131 | if (BIO_printf(bp,"%02x%c",bs->data[i], | |
132 | ((i+1 == bs->length)?'\n':':')) <= 0) | |
133 | goto err; | |
134 | } | |
135 | } | |
136 | ||
137 | i=OBJ_obj2nid(ci->signature->algorithm); | |
138 | if (BIO_printf(bp,"%8sSignature Algorithm: %s\n","", | |
139 | (i == NID_undef)?"UNKNOWN":OBJ_nid2ln(i)) <= 0) | |
140 | goto err; | |
141 | ||
142 | if (BIO_write(bp," Issuer: ",16) <= 0) goto err; | |
143 | if (!X509_NAME_print(bp,X509_get_issuer_name(x),16)) goto err; | |
144 | if (BIO_write(bp,"\n Validity\n",18) <= 0) goto err; | |
145 | if (BIO_write(bp," Not Before: ",24) <= 0) goto err; | |
9b5cc156 | 146 | if (!ASN1_TIME_print(bp,X509_get_notBefore(x))) goto err; |
d02b48c6 | 147 | if (BIO_write(bp,"\n Not After : ",25) <= 0) goto err; |
9b5cc156 | 148 | if (!ASN1_TIME_print(bp,X509_get_notAfter(x))) goto err; |
d02b48c6 RE |
149 | if (BIO_write(bp,"\n Subject: ",18) <= 0) goto err; |
150 | if (!X509_NAME_print(bp,X509_get_subject_name(x),16)) goto err; | |
151 | if (BIO_write(bp,"\n Subject Public Key Info:\n",34) <= 0) | |
152 | goto err; | |
153 | i=OBJ_obj2nid(ci->key->algor->algorithm); | |
154 | if (BIO_printf(bp,"%12sPublic Key Algorithm: %s\n","", | |
155 | (i == NID_undef)?"UNKNOWN":OBJ_nid2ln(i)) <= 0) goto err; | |
156 | ||
157 | pkey=X509_get_pubkey(x); | |
dfeab068 RE |
158 | if (pkey == NULL) |
159 | { | |
160 | BIO_printf(bp,"%12sUnable to load Public Key\n",""); | |
ab8f6b41 | 161 | ERR_print_errors(bp); |
dfeab068 RE |
162 | } |
163 | else | |
d02b48c6 RE |
164 | #ifndef NO_RSA |
165 | if (pkey->type == EVP_PKEY_RSA) | |
166 | { | |
167 | BIO_printf(bp,"%12sRSA Public Key: (%d bit)\n","", | |
168 | BN_num_bits(pkey->pkey.rsa->n)); | |
169 | RSA_print(bp,pkey->pkey.rsa,16); | |
170 | } | |
171 | else | |
172 | #endif | |
173 | #ifndef NO_DSA | |
174 | if (pkey->type == EVP_PKEY_DSA) | |
175 | { | |
176 | BIO_printf(bp,"%12sDSA Public Key:\n",""); | |
177 | DSA_print(bp,pkey->pkey.dsa,16); | |
178 | } | |
179 | else | |
180 | #endif | |
dfeab068 | 181 | BIO_printf(bp,"%12sUnknown Public Key:\n",""); |
d02b48c6 | 182 | |
cfcf6453 DSH |
183 | EVP_PKEY_free(pkey); |
184 | ||
d02b48c6 RE |
185 | n=X509_get_ext_count(x); |
186 | if (n > 0) | |
187 | { | |
188 | BIO_printf(bp,"%8sX509v3 extensions:\n",""); | |
189 | for (i=0; i<n; i++) | |
190 | { | |
d02b48c6 | 191 | ASN1_OBJECT *obj; |
d02b48c6 RE |
192 | ex=X509_get_ext(x,i); |
193 | if (BIO_printf(bp,"%12s","") <= 0) goto err; | |
194 | obj=X509_EXTENSION_get_object(ex); | |
195 | i2a_ASN1_OBJECT(bp,obj); | |
196 | j=X509_EXTENSION_get_critical(ex); | |
785cdf20 | 197 | if (BIO_printf(bp,": %s\n",j?"critical":"","") <= 0) |
d02b48c6 | 198 | goto err; |
785cdf20 | 199 | if(!X509V3_EXT_print(bp, ex, 0, 16)) |
d02b48c6 | 200 | { |
785cdf20 | 201 | BIO_printf(bp, "%16s", ""); |
08e9c1af | 202 | M_ASN1_OCTET_STRING_print(bp,ex->value); |
d02b48c6 RE |
203 | } |
204 | if (BIO_write(bp,"\n",1) <= 0) goto err; | |
205 | } | |
206 | } | |
207 | ||
208 | i=OBJ_obj2nid(x->sig_alg->algorithm); | |
209 | if (BIO_printf(bp,"%4sSignature Algorithm: %s","", | |
210 | (i == NID_undef)?"UNKNOWN":OBJ_nid2ln(i)) <= 0) goto err; | |
211 | ||
212 | n=x->signature->length; | |
213 | s=(char *)x->signature->data; | |
214 | for (i=0; i<n; i++) | |
215 | { | |
216 | if ((i%18) == 0) | |
217 | if (BIO_write(bp,"\n ",9) <= 0) goto err; | |
218 | if (BIO_printf(bp,"%02x%s",(unsigned char)s[i], | |
219 | ((i+1) == n)?"":":") <= 0) goto err; | |
220 | } | |
221 | if (BIO_write(bp,"\n",1) != 1) goto err; | |
ce1b4fe1 | 222 | if (!X509_CERT_AUX_print(bp, x->aux, 0)) goto err; |
d02b48c6 RE |
223 | ret=1; |
224 | err: | |
225 | if (str != NULL) ASN1_STRING_free(str); | |
26a3a48d | 226 | if (m != NULL) OPENSSL_free(m); |
d02b48c6 RE |
227 | return(ret); |
228 | } | |
229 | ||
6b691a5c | 230 | int ASN1_STRING_print(BIO *bp, ASN1_STRING *v) |
d02b48c6 RE |
231 | { |
232 | int i,n; | |
233 | char buf[80],*p;; | |
234 | ||
235 | if (v == NULL) return(0); | |
236 | n=0; | |
237 | p=(char *)v->data; | |
238 | for (i=0; i<v->length; i++) | |
239 | { | |
240 | if ((p[i] > '~') || ((p[i] < ' ') && | |
241 | (p[i] != '\n') && (p[i] != '\r'))) | |
242 | buf[n]='.'; | |
243 | else | |
244 | buf[n]=p[i]; | |
245 | n++; | |
246 | if (n >= 80) | |
247 | { | |
248 | if (BIO_write(bp,buf,n) <= 0) | |
249 | return(0); | |
250 | n=0; | |
251 | } | |
252 | } | |
253 | if (n > 0) | |
254 | if (BIO_write(bp,buf,n) <= 0) | |
255 | return(0); | |
256 | return(1); | |
257 | } | |
258 | ||
6b691a5c | 259 | int ASN1_TIME_print(BIO *bp, ASN1_TIME *tm) |
f6aed2cd DSH |
260 | { |
261 | if(tm->type == V_ASN1_UTCTIME) return ASN1_UTCTIME_print(bp, tm); | |
262 | if(tm->type == V_ASN1_GENERALIZEDTIME) | |
263 | return ASN1_GENERALIZEDTIME_print(bp, tm); | |
264 | BIO_write(bp,"Bad time value",14); | |
265 | return(0); | |
266 | } | |
267 | ||
e778802f BL |
268 | static const char *mon[12]= |
269 | { | |
270 | "Jan","Feb","Mar","Apr","May","Jun", | |
271 | "Jul","Aug","Sep","Oct","Nov","Dec" | |
272 | }; | |
f6aed2cd | 273 | |
6b691a5c | 274 | int ASN1_GENERALIZEDTIME_print(BIO *bp, ASN1_GENERALIZEDTIME *tm) |
f6aed2cd DSH |
275 | { |
276 | char *v; | |
277 | int gmt=0; | |
f6aed2cd DSH |
278 | int i; |
279 | int y=0,M=0,d=0,h=0,m=0,s=0; | |
280 | ||
281 | i=tm->length; | |
282 | v=(char *)tm->data; | |
283 | ||
284 | if (i < 12) goto err; | |
285 | if (v[i-1] == 'Z') gmt=1; | |
286 | for (i=0; i<12; i++) | |
287 | if ((v[i] > '9') || (v[i] < '0')) goto err; | |
288 | y= (v[0]-'0')*1000+(v[1]-'0')*100 + (v[2]-'0')*10+(v[3]-'0'); | |
289 | M= (v[4]-'0')*10+(v[5]-'0'); | |
290 | if ((M > 12) || (M < 1)) goto err; | |
291 | d= (v[6]-'0')*10+(v[7]-'0'); | |
292 | h= (v[8]-'0')*10+(v[9]-'0'); | |
293 | m= (v[10]-'0')*10+(v[11]-'0'); | |
294 | if ( (v[12] >= '0') && (v[12] <= '9') && | |
295 | (v[13] >= '0') && (v[13] <= '9')) | |
296 | s= (v[12]-'0')*10+(v[13]-'0'); | |
297 | ||
298 | if (BIO_printf(bp,"%s %2d %02d:%02d:%02d %d%s", | |
299 | mon[M-1],d,h,m,s,y,(gmt)?" GMT":"") <= 0) | |
300 | return(0); | |
301 | else | |
302 | return(1); | |
303 | err: | |
304 | BIO_write(bp,"Bad time value",14); | |
305 | return(0); | |
306 | } | |
307 | ||
6b691a5c | 308 | int ASN1_UTCTIME_print(BIO *bp, ASN1_UTCTIME *tm) |
d02b48c6 RE |
309 | { |
310 | char *v; | |
311 | int gmt=0; | |
d02b48c6 RE |
312 | int i; |
313 | int y=0,M=0,d=0,h=0,m=0,s=0; | |
314 | ||
315 | i=tm->length; | |
316 | v=(char *)tm->data; | |
317 | ||
318 | if (i < 10) goto err; | |
319 | if (v[i-1] == 'Z') gmt=1; | |
320 | for (i=0; i<10; i++) | |
321 | if ((v[i] > '9') || (v[i] < '0')) goto err; | |
322 | y= (v[0]-'0')*10+(v[1]-'0'); | |
58964a49 | 323 | if (y < 50) y+=100; |
d02b48c6 RE |
324 | M= (v[2]-'0')*10+(v[3]-'0'); |
325 | if ((M > 12) || (M < 1)) goto err; | |
326 | d= (v[4]-'0')*10+(v[5]-'0'); | |
327 | h= (v[6]-'0')*10+(v[7]-'0'); | |
328 | m= (v[8]-'0')*10+(v[9]-'0'); | |
329 | if ( (v[10] >= '0') && (v[10] <= '9') && | |
330 | (v[11] >= '0') && (v[11] <= '9')) | |
331 | s= (v[10]-'0')*10+(v[11]-'0'); | |
332 | ||
333 | if (BIO_printf(bp,"%s %2d %02d:%02d:%02d %d%s", | |
334 | mon[M-1],d,h,m,s,y+1900,(gmt)?" GMT":"") <= 0) | |
335 | return(0); | |
336 | else | |
337 | return(1); | |
338 | err: | |
339 | BIO_write(bp,"Bad time value",14); | |
340 | return(0); | |
341 | } | |
342 | ||
6b691a5c | 343 | int X509_NAME_print(BIO *bp, X509_NAME *name, int obase) |
d02b48c6 RE |
344 | { |
345 | char *s,*c; | |
346 | int ret=0,l,ll,i,first=1; | |
347 | char buf[256]; | |
348 | ||
349 | ll=80-2-obase; | |
350 | ||
351 | s=X509_NAME_oneline(name,buf,256); | |
352 | s++; /* skip the first slash */ | |
353 | ||
354 | l=ll; | |
355 | c=s; | |
356 | for (;;) | |
357 | { | |
a53955d8 | 358 | #ifndef CHARSET_EBCDIC |
d02b48c6 RE |
359 | if ( ((*s == '/') && |
360 | ((s[1] >= 'A') && (s[1] <= 'Z') && ( | |
361 | (s[2] == '=') || | |
362 | ((s[2] >= 'A') && (s[2] <= 'Z') && | |
363 | (s[3] == '=')) | |
364 | ))) || | |
365 | (*s == '\0')) | |
a53955d8 UM |
366 | #else |
367 | if ( ((*s == '/') && | |
368 | (isupper(s[1]) && ( | |
369 | (s[2] == '=') || | |
370 | (isupper(s[2]) && | |
371 | (s[3] == '=')) | |
372 | ))) || | |
373 | (*s == '\0')) | |
374 | #endif | |
d02b48c6 RE |
375 | { |
376 | if ((l <= 0) && !first) | |
377 | { | |
378 | first=0; | |
379 | if (BIO_write(bp,"\n",1) != 1) goto err; | |
380 | for (i=0; i<obase; i++) | |
381 | { | |
382 | if (BIO_write(bp," ",1) != 1) goto err; | |
383 | } | |
384 | l=ll; | |
385 | } | |
386 | i=s-c; | |
387 | if (BIO_write(bp,c,i) != i) goto err; | |
388 | c+=i; | |
389 | c++; | |
390 | if (*s != '\0') | |
391 | { | |
392 | if (BIO_write(bp,", ",2) != 2) goto err; | |
393 | } | |
394 | l--; | |
395 | } | |
396 | if (*s == '\0') break; | |
397 | s++; | |
398 | l--; | |
399 | } | |
400 | ||
401 | ret=1; | |
402 | if (0) | |
403 | { | |
404 | err: | |
405 | X509err(X509_F_X509_NAME_PRINT,ERR_R_BUF_LIB); | |
406 | } | |
407 | return(ret); | |
408 | } | |
409 |