]>
Commit | Line | Data |
---|---|---|
a61b7f2f | 1 | /*- |
33388b44 | 2 | * Copyright 2007-2020 The OpenSSL Project Authors. All Rights Reserved. |
8869ad4a AK |
3 | * Copyright Nokia 2007-2019 |
4 | * Copyright Siemens AG 2015-2019 | |
a61b7f2f | 5 | * |
ce9b9964 | 6 | * Licensed under the Apache License 2.0 (the "License"). You may not use |
a61b7f2f DO |
7 | * this file except in compliance with the License. You can obtain a copy |
8 | * in the file LICENSE in the source distribution or at | |
9 | * https://www.openssl.org/source/license.html | |
10 | * | |
11 | * CRMF implementation by Martin Peylo, Miikka Viljanen, and David von Oheimb. | |
12 | */ | |
13 | ||
14 | #include <openssl/asn1t.h> | |
15 | ||
706457b7 | 16 | #include "crmf_local.h" |
a61b7f2f DO |
17 | |
18 | /* explicit #includes not strictly needed since implied by the above: */ | |
19 | #include <openssl/crmf.h> | |
20 | ||
21 | ASN1_SEQUENCE(OSSL_CRMF_PRIVATEKEYINFO) = { | |
22 | ASN1_SIMPLE(OSSL_CRMF_PRIVATEKEYINFO, version, ASN1_INTEGER), | |
23 | ASN1_SIMPLE(OSSL_CRMF_PRIVATEKEYINFO, privateKeyAlgorithm, X509_ALGOR), | |
24 | ASN1_SIMPLE(OSSL_CRMF_PRIVATEKEYINFO, privateKey, ASN1_OCTET_STRING), | |
25 | ASN1_IMP_SET_OF_OPT(OSSL_CRMF_PRIVATEKEYINFO, attributes, X509_ATTRIBUTE, 0) | |
26 | } ASN1_SEQUENCE_END(OSSL_CRMF_PRIVATEKEYINFO) | |
27 | IMPLEMENT_ASN1_FUNCTIONS(OSSL_CRMF_PRIVATEKEYINFO) | |
28 | ||
29 | ||
30 | ASN1_CHOICE(OSSL_CRMF_ENCKEYWITHID_IDENTIFIER) = { | |
31 | ASN1_SIMPLE(OSSL_CRMF_ENCKEYWITHID_IDENTIFIER, value.string, ASN1_UTF8STRING), | |
32 | ASN1_SIMPLE(OSSL_CRMF_ENCKEYWITHID_IDENTIFIER, value.generalName, GENERAL_NAME) | |
33 | } ASN1_CHOICE_END(OSSL_CRMF_ENCKEYWITHID_IDENTIFIER) | |
34 | IMPLEMENT_ASN1_FUNCTIONS(OSSL_CRMF_ENCKEYWITHID_IDENTIFIER) | |
35 | ||
36 | ||
37 | ASN1_SEQUENCE(OSSL_CRMF_ENCKEYWITHID) = { | |
38 | ASN1_SIMPLE(OSSL_CRMF_ENCKEYWITHID, privateKey, OSSL_CRMF_PRIVATEKEYINFO), | |
39 | ASN1_OPT(OSSL_CRMF_ENCKEYWITHID, identifier, | |
40 | OSSL_CRMF_ENCKEYWITHID_IDENTIFIER) | |
41 | } ASN1_SEQUENCE_END(OSSL_CRMF_ENCKEYWITHID) | |
42 | IMPLEMENT_ASN1_FUNCTIONS(OSSL_CRMF_ENCKEYWITHID) | |
43 | ||
44 | ||
45 | ASN1_SEQUENCE(OSSL_CRMF_CERTID) = { | |
46 | ASN1_SIMPLE(OSSL_CRMF_CERTID, issuer, GENERAL_NAME), | |
47 | ASN1_SIMPLE(OSSL_CRMF_CERTID, serialNumber, ASN1_INTEGER) | |
48 | } ASN1_SEQUENCE_END(OSSL_CRMF_CERTID) | |
49 | IMPLEMENT_ASN1_FUNCTIONS(OSSL_CRMF_CERTID) | |
50 | IMPLEMENT_ASN1_DUP_FUNCTION(OSSL_CRMF_CERTID) | |
51 | ||
52 | ||
53 | ASN1_SEQUENCE(OSSL_CRMF_ENCRYPTEDVALUE) = { | |
54 | ASN1_IMP_OPT(OSSL_CRMF_ENCRYPTEDVALUE, intendedAlg, X509_ALGOR, 0), | |
55 | ASN1_IMP_OPT(OSSL_CRMF_ENCRYPTEDVALUE, symmAlg, X509_ALGOR, 1), | |
56 | ASN1_IMP_OPT(OSSL_CRMF_ENCRYPTEDVALUE, encSymmKey, ASN1_BIT_STRING, 2), | |
57 | ASN1_IMP_OPT(OSSL_CRMF_ENCRYPTEDVALUE, keyAlg, X509_ALGOR, 3), | |
58 | ASN1_IMP_OPT(OSSL_CRMF_ENCRYPTEDVALUE, valueHint, ASN1_OCTET_STRING, 4), | |
59 | ASN1_SIMPLE(OSSL_CRMF_ENCRYPTEDVALUE, encValue, ASN1_BIT_STRING) | |
60 | } ASN1_SEQUENCE_END(OSSL_CRMF_ENCRYPTEDVALUE) | |
61 | IMPLEMENT_ASN1_FUNCTIONS(OSSL_CRMF_ENCRYPTEDVALUE) | |
62 | ||
63 | ASN1_SEQUENCE(OSSL_CRMF_SINGLEPUBINFO) = { | |
64 | ASN1_SIMPLE(OSSL_CRMF_SINGLEPUBINFO, pubMethod, ASN1_INTEGER), | |
65 | ASN1_SIMPLE(OSSL_CRMF_SINGLEPUBINFO, pubLocation, GENERAL_NAME) | |
66 | } ASN1_SEQUENCE_END(OSSL_CRMF_SINGLEPUBINFO) | |
67 | IMPLEMENT_ASN1_FUNCTIONS(OSSL_CRMF_SINGLEPUBINFO) | |
68 | ||
69 | ||
70 | ASN1_SEQUENCE(OSSL_CRMF_PKIPUBLICATIONINFO) = { | |
71 | ASN1_SIMPLE(OSSL_CRMF_PKIPUBLICATIONINFO, action, ASN1_INTEGER), | |
72 | ASN1_SEQUENCE_OF_OPT(OSSL_CRMF_PKIPUBLICATIONINFO, pubInfos, | |
73 | OSSL_CRMF_SINGLEPUBINFO) | |
74 | } ASN1_SEQUENCE_END(OSSL_CRMF_PKIPUBLICATIONINFO) | |
75 | IMPLEMENT_ASN1_FUNCTIONS(OSSL_CRMF_PKIPUBLICATIONINFO) | |
76 | IMPLEMENT_ASN1_DUP_FUNCTION(OSSL_CRMF_PKIPUBLICATIONINFO) | |
77 | ||
78 | ||
79 | ASN1_SEQUENCE(OSSL_CRMF_PKMACVALUE) = { | |
80 | ASN1_SIMPLE(OSSL_CRMF_PKMACVALUE, algId, X509_ALGOR), | |
81 | ASN1_SIMPLE(OSSL_CRMF_PKMACVALUE, value, ASN1_BIT_STRING) | |
82 | } ASN1_SEQUENCE_END(OSSL_CRMF_PKMACVALUE) | |
83 | IMPLEMENT_ASN1_FUNCTIONS(OSSL_CRMF_PKMACVALUE) | |
84 | ||
85 | ||
86 | ASN1_CHOICE(OSSL_CRMF_POPOPRIVKEY) = { | |
87 | ASN1_IMP(OSSL_CRMF_POPOPRIVKEY, value.thisMessage, ASN1_BIT_STRING, 0), | |
88 | ASN1_IMP(OSSL_CRMF_POPOPRIVKEY, value.subsequentMessage, ASN1_INTEGER, 1), | |
89 | ASN1_IMP(OSSL_CRMF_POPOPRIVKEY, value.dhMAC, ASN1_BIT_STRING, 2), | |
90 | ASN1_IMP(OSSL_CRMF_POPOPRIVKEY, value.agreeMAC, OSSL_CRMF_PKMACVALUE, 3), | |
91 | /* | |
92 | * TODO: This is not ASN1_NULL but CMS_ENVELOPEDDATA which should be somehow | |
93 | * taken from crypto/cms which exists now - this is not used anywhere so far | |
94 | */ | |
95 | ASN1_IMP(OSSL_CRMF_POPOPRIVKEY, value.encryptedKey, ASN1_NULL, 4), | |
96 | } ASN1_CHOICE_END(OSSL_CRMF_POPOPRIVKEY) | |
97 | IMPLEMENT_ASN1_FUNCTIONS(OSSL_CRMF_POPOPRIVKEY) | |
98 | ||
99 | ||
100 | ASN1_SEQUENCE(OSSL_CRMF_PBMPARAMETER) = { | |
101 | ASN1_SIMPLE(OSSL_CRMF_PBMPARAMETER, salt, ASN1_OCTET_STRING), | |
102 | ASN1_SIMPLE(OSSL_CRMF_PBMPARAMETER, owf, X509_ALGOR), | |
103 | ASN1_SIMPLE(OSSL_CRMF_PBMPARAMETER, iterationCount, ASN1_INTEGER), | |
104 | ASN1_SIMPLE(OSSL_CRMF_PBMPARAMETER, mac, X509_ALGOR) | |
105 | } ASN1_SEQUENCE_END(OSSL_CRMF_PBMPARAMETER) | |
106 | IMPLEMENT_ASN1_FUNCTIONS(OSSL_CRMF_PBMPARAMETER) | |
107 | ||
108 | ||
109 | ASN1_CHOICE(OSSL_CRMF_POPOSIGNINGKEYINPUT_AUTHINFO) = { | |
110 | ASN1_EXP(OSSL_CRMF_POPOSIGNINGKEYINPUT_AUTHINFO, value.sender, | |
111 | GENERAL_NAME, 0), | |
112 | ASN1_SIMPLE(OSSL_CRMF_POPOSIGNINGKEYINPUT_AUTHINFO, value.publicKeyMAC, | |
113 | OSSL_CRMF_PKMACVALUE) | |
114 | } ASN1_CHOICE_END(OSSL_CRMF_POPOSIGNINGKEYINPUT_AUTHINFO) | |
115 | IMPLEMENT_ASN1_FUNCTIONS(OSSL_CRMF_POPOSIGNINGKEYINPUT_AUTHINFO) | |
116 | ||
117 | ||
118 | ASN1_SEQUENCE(OSSL_CRMF_POPOSIGNINGKEYINPUT) = { | |
119 | ASN1_SIMPLE(OSSL_CRMF_POPOSIGNINGKEYINPUT, authInfo, | |
120 | OSSL_CRMF_POPOSIGNINGKEYINPUT_AUTHINFO), | |
121 | ASN1_SIMPLE(OSSL_CRMF_POPOSIGNINGKEYINPUT, publicKey, X509_PUBKEY) | |
122 | } ASN1_SEQUENCE_END(OSSL_CRMF_POPOSIGNINGKEYINPUT) | |
123 | IMPLEMENT_ASN1_FUNCTIONS(OSSL_CRMF_POPOSIGNINGKEYINPUT) | |
124 | ||
125 | ||
126 | ASN1_SEQUENCE(OSSL_CRMF_POPOSIGNINGKEY) = { | |
127 | ASN1_IMP_OPT(OSSL_CRMF_POPOSIGNINGKEY, poposkInput, | |
128 | OSSL_CRMF_POPOSIGNINGKEYINPUT, 0), | |
129 | ASN1_SIMPLE(OSSL_CRMF_POPOSIGNINGKEY, algorithmIdentifier, X509_ALGOR), | |
130 | ASN1_SIMPLE(OSSL_CRMF_POPOSIGNINGKEY, signature, ASN1_BIT_STRING) | |
131 | } ASN1_SEQUENCE_END(OSSL_CRMF_POPOSIGNINGKEY) | |
132 | IMPLEMENT_ASN1_FUNCTIONS(OSSL_CRMF_POPOSIGNINGKEY) | |
133 | ||
134 | ||
135 | ASN1_CHOICE(OSSL_CRMF_POPO) = { | |
136 | ASN1_IMP(OSSL_CRMF_POPO, value.raVerified, ASN1_NULL, 0), | |
137 | ASN1_IMP(OSSL_CRMF_POPO, value.signature, OSSL_CRMF_POPOSIGNINGKEY, 1), | |
138 | ASN1_EXP(OSSL_CRMF_POPO, value.keyEncipherment, OSSL_CRMF_POPOPRIVKEY, 2), | |
139 | ASN1_EXP(OSSL_CRMF_POPO, value.keyAgreement, OSSL_CRMF_POPOPRIVKEY, 3) | |
140 | } ASN1_CHOICE_END(OSSL_CRMF_POPO) | |
141 | IMPLEMENT_ASN1_FUNCTIONS(OSSL_CRMF_POPO) | |
142 | ||
143 | ||
235595c4 DDO |
144 | ASN1_ADB_TEMPLATE(attributetypeandvalue_default) = |
145 | ASN1_OPT(OSSL_CRMF_ATTRIBUTETYPEANDVALUE, value.other, ASN1_ANY); | |
a61b7f2f DO |
146 | ASN1_ADB(OSSL_CRMF_ATTRIBUTETYPEANDVALUE) = { |
147 | ADB_ENTRY(NID_id_regCtrl_regToken, | |
148 | ASN1_SIMPLE(OSSL_CRMF_ATTRIBUTETYPEANDVALUE, | |
149 | value.regToken, ASN1_UTF8STRING)), | |
150 | ADB_ENTRY(NID_id_regCtrl_authenticator, | |
151 | ASN1_SIMPLE(OSSL_CRMF_ATTRIBUTETYPEANDVALUE, | |
152 | value.authenticator, ASN1_UTF8STRING)), | |
153 | ADB_ENTRY(NID_id_regCtrl_pkiPublicationInfo, | |
154 | ASN1_SIMPLE(OSSL_CRMF_ATTRIBUTETYPEANDVALUE, | |
155 | value.pkiPublicationInfo, | |
156 | OSSL_CRMF_PKIPUBLICATIONINFO)), | |
157 | ADB_ENTRY(NID_id_regCtrl_oldCertID, | |
158 | ASN1_SIMPLE(OSSL_CRMF_ATTRIBUTETYPEANDVALUE, | |
159 | value.oldCertID, OSSL_CRMF_CERTID)), | |
160 | ADB_ENTRY(NID_id_regCtrl_protocolEncrKey, | |
161 | ASN1_SIMPLE(OSSL_CRMF_ATTRIBUTETYPEANDVALUE, | |
162 | value.protocolEncrKey, X509_PUBKEY)), | |
163 | ADB_ENTRY(NID_id_regInfo_utf8Pairs, | |
164 | ASN1_SIMPLE(OSSL_CRMF_ATTRIBUTETYPEANDVALUE, | |
165 | value.utf8Pairs, ASN1_UTF8STRING)), | |
166 | ADB_ENTRY(NID_id_regInfo_certReq, | |
167 | ASN1_SIMPLE(OSSL_CRMF_ATTRIBUTETYPEANDVALUE, | |
168 | value.certReq, OSSL_CRMF_CERTREQUEST)), | |
169 | } ASN1_ADB_END(OSSL_CRMF_ATTRIBUTETYPEANDVALUE, 0, type, 0, | |
170 | &attributetypeandvalue_default_tt, NULL); | |
171 | ||
172 | ||
173 | ASN1_SEQUENCE(OSSL_CRMF_ATTRIBUTETYPEANDVALUE) = { | |
174 | ASN1_SIMPLE(OSSL_CRMF_ATTRIBUTETYPEANDVALUE, type, ASN1_OBJECT), | |
175 | ASN1_ADB_OBJECT(OSSL_CRMF_ATTRIBUTETYPEANDVALUE) | |
176 | } ASN1_SEQUENCE_END(OSSL_CRMF_ATTRIBUTETYPEANDVALUE) | |
177 | ||
178 | IMPLEMENT_ASN1_FUNCTIONS(OSSL_CRMF_ATTRIBUTETYPEANDVALUE) | |
179 | IMPLEMENT_ASN1_DUP_FUNCTION(OSSL_CRMF_ATTRIBUTETYPEANDVALUE) | |
180 | ||
181 | ||
182 | ASN1_SEQUENCE(OSSL_CRMF_OPTIONALVALIDITY) = { | |
183 | ASN1_EXP_OPT(OSSL_CRMF_OPTIONALVALIDITY, notBefore, ASN1_TIME, 0), | |
184 | ASN1_EXP_OPT(OSSL_CRMF_OPTIONALVALIDITY, notAfter, ASN1_TIME, 1) | |
185 | } ASN1_SEQUENCE_END(OSSL_CRMF_OPTIONALVALIDITY) | |
186 | IMPLEMENT_ASN1_FUNCTIONS(OSSL_CRMF_OPTIONALVALIDITY) | |
187 | ||
188 | ||
189 | ASN1_SEQUENCE(OSSL_CRMF_CERTTEMPLATE) = { | |
235595c4 | 190 | ASN1_IMP_OPT(OSSL_CRMF_CERTTEMPLATE, version, ASN1_INTEGER, 0), |
a61b7f2f DO |
191 | /* |
192 | * serialNumber MUST be omitted. This field is assigned by the CA | |
193 | * during certificate creation. | |
194 | */ | |
195 | ASN1_IMP_OPT(OSSL_CRMF_CERTTEMPLATE, serialNumber, ASN1_INTEGER, 1), | |
196 | /* | |
197 | * signingAlg MUST be omitted. This field is assigned by the CA | |
198 | * during certificate creation. | |
199 | */ | |
235595c4 DDO |
200 | ASN1_IMP_OPT(OSSL_CRMF_CERTTEMPLATE, signingAlg, X509_ALGOR, 2), |
201 | ASN1_EXP_OPT(OSSL_CRMF_CERTTEMPLATE, issuer, X509_NAME, 3), | |
a61b7f2f DO |
202 | ASN1_IMP_OPT(OSSL_CRMF_CERTTEMPLATE, validity, |
203 | OSSL_CRMF_OPTIONALVALIDITY, 4), | |
235595c4 DDO |
204 | ASN1_EXP_OPT(OSSL_CRMF_CERTTEMPLATE, subject, X509_NAME, 5), |
205 | ASN1_IMP_OPT(OSSL_CRMF_CERTTEMPLATE, publicKey, X509_PUBKEY, 6), | |
a61b7f2f | 206 | /* issuerUID is deprecated in version 2 */ |
235595c4 | 207 | ASN1_IMP_OPT(OSSL_CRMF_CERTTEMPLATE, issuerUID, ASN1_BIT_STRING, 7), |
a61b7f2f | 208 | /* subjectUID is deprecated in version 2 */ |
235595c4 | 209 | ASN1_IMP_OPT(OSSL_CRMF_CERTTEMPLATE, subjectUID, ASN1_BIT_STRING, 8), |
a61b7f2f DO |
210 | ASN1_IMP_SEQUENCE_OF_OPT(OSSL_CRMF_CERTTEMPLATE, extensions, |
211 | X509_EXTENSION, 9), | |
212 | } ASN1_SEQUENCE_END(OSSL_CRMF_CERTTEMPLATE) | |
213 | IMPLEMENT_ASN1_FUNCTIONS(OSSL_CRMF_CERTTEMPLATE) | |
214 | ||
215 | ||
216 | ASN1_SEQUENCE(OSSL_CRMF_CERTREQUEST) = { | |
217 | ASN1_SIMPLE(OSSL_CRMF_CERTREQUEST, certReqId, ASN1_INTEGER), | |
218 | ASN1_SIMPLE(OSSL_CRMF_CERTREQUEST, certTemplate, OSSL_CRMF_CERTTEMPLATE), | |
219 | ASN1_SEQUENCE_OF_OPT(OSSL_CRMF_CERTREQUEST, controls, | |
220 | OSSL_CRMF_ATTRIBUTETYPEANDVALUE) | |
221 | } ASN1_SEQUENCE_END(OSSL_CRMF_CERTREQUEST) | |
222 | IMPLEMENT_ASN1_FUNCTIONS(OSSL_CRMF_CERTREQUEST) | |
223 | IMPLEMENT_ASN1_DUP_FUNCTION(OSSL_CRMF_CERTREQUEST) | |
224 | ||
225 | ||
226 | ASN1_SEQUENCE(OSSL_CRMF_MSG) = { | |
227 | ASN1_SIMPLE(OSSL_CRMF_MSG, certReq, OSSL_CRMF_CERTREQUEST), | |
228 | ASN1_OPT(OSSL_CRMF_MSG, popo, OSSL_CRMF_POPO), | |
229 | ASN1_SEQUENCE_OF_OPT(OSSL_CRMF_MSG, regInfo, | |
230 | OSSL_CRMF_ATTRIBUTETYPEANDVALUE) | |
231 | } ASN1_SEQUENCE_END(OSSL_CRMF_MSG) | |
232 | IMPLEMENT_ASN1_FUNCTIONS(OSSL_CRMF_MSG) | |
299e0f1e | 233 | IMPLEMENT_ASN1_DUP_FUNCTION(OSSL_CRMF_MSG) |
a61b7f2f DO |
234 | |
235 | ASN1_ITEM_TEMPLATE(OSSL_CRMF_MSGS) = | |
236 | ASN1_EX_TEMPLATE_TYPE(ASN1_TFLG_SEQUENCE_OF, 0, | |
237 | OSSL_CRMF_MSGS, OSSL_CRMF_MSG) | |
3dbc5156 | 238 | ASN1_ITEM_TEMPLATE_END(OSSL_CRMF_MSGS) |
a61b7f2f | 239 | IMPLEMENT_ASN1_FUNCTIONS(OSSL_CRMF_MSGS) |