]>
Commit | Line | Data |
---|---|---|
d02b48c6 | 1 | /* crypto/x509/x509name.c */ |
58964a49 | 2 | /* Copyright (C) 1995-1998 Eric Young (eay@cryptsoft.com) |
d02b48c6 RE |
3 | * All rights reserved. |
4 | * | |
5 | * This package is an SSL implementation written | |
6 | * by Eric Young (eay@cryptsoft.com). | |
7 | * The implementation was written so as to conform with Netscapes SSL. | |
8 | * | |
9 | * This library is free for commercial and non-commercial use as long as | |
10 | * the following conditions are aheared to. The following conditions | |
11 | * apply to all code found in this distribution, be it the RC4, RSA, | |
12 | * lhash, DES, etc., code; not just the SSL code. The SSL documentation | |
13 | * included with this distribution is covered by the same copyright terms | |
14 | * except that the holder is Tim Hudson (tjh@cryptsoft.com). | |
15 | * | |
16 | * Copyright remains Eric Young's, and as such any Copyright notices in | |
17 | * the code are not to be removed. | |
18 | * If this package is used in a product, Eric Young should be given attribution | |
19 | * as the author of the parts of the library used. | |
20 | * This can be in the form of a textual message at program startup or | |
21 | * in documentation (online or textual) provided with the package. | |
22 | * | |
23 | * Redistribution and use in source and binary forms, with or without | |
24 | * modification, are permitted provided that the following conditions | |
25 | * are met: | |
26 | * 1. Redistributions of source code must retain the copyright | |
27 | * notice, this list of conditions and the following disclaimer. | |
28 | * 2. Redistributions in binary form must reproduce the above copyright | |
29 | * notice, this list of conditions and the following disclaimer in the | |
30 | * documentation and/or other materials provided with the distribution. | |
31 | * 3. All advertising materials mentioning features or use of this software | |
32 | * must display the following acknowledgement: | |
33 | * "This product includes cryptographic software written by | |
34 | * Eric Young (eay@cryptsoft.com)" | |
35 | * The word 'cryptographic' can be left out if the rouines from the library | |
36 | * being used are not cryptographic related :-). | |
37 | * 4. If you include any Windows specific code (or a derivative thereof) from | |
38 | * the apps directory (application code) you must include an acknowledgement: | |
39 | * "This product includes software written by Tim Hudson (tjh@cryptsoft.com)" | |
40 | * | |
41 | * THIS SOFTWARE IS PROVIDED BY ERIC YOUNG ``AS IS'' AND | |
42 | * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE | |
43 | * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE | |
44 | * ARE DISCLAIMED. IN NO EVENT SHALL THE AUTHOR OR CONTRIBUTORS BE LIABLE | |
45 | * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL | |
46 | * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS | |
47 | * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) | |
48 | * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT | |
49 | * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY | |
50 | * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF | |
51 | * SUCH DAMAGE. | |
52 | * | |
53 | * The licence and distribution terms for any publically available version or | |
54 | * derivative of this code cannot be changed. i.e. this code cannot simply be | |
55 | * copied and put under another distribution licence | |
56 | * [including the GNU Public Licence.] | |
57 | */ | |
58 | ||
59 | #include <stdio.h> | |
ec577822 | 60 | #include <openssl/stack.h> |
d02b48c6 | 61 | #include "cryptlib.h" |
ec577822 BM |
62 | #include <openssl/asn1.h> |
63 | #include <openssl/objects.h> | |
64 | #include <openssl/evp.h> | |
65 | #include <openssl/x509.h> | |
d02b48c6 | 66 | |
6b691a5c | 67 | int X509_NAME_get_text_by_NID(X509_NAME *name, int nid, char *buf, int len) |
d02b48c6 RE |
68 | { |
69 | ASN1_OBJECT *obj; | |
70 | ||
71 | obj=OBJ_nid2obj(nid); | |
72 | if (obj == NULL) return(-1); | |
73 | return(X509_NAME_get_text_by_OBJ(name,obj,buf,len)); | |
74 | } | |
75 | ||
6b691a5c UM |
76 | int X509_NAME_get_text_by_OBJ(X509_NAME *name, ASN1_OBJECT *obj, char *buf, |
77 | int len) | |
d02b48c6 RE |
78 | { |
79 | int i; | |
80 | ASN1_STRING *data; | |
81 | ||
82 | i=X509_NAME_get_index_by_OBJ(name,obj,-1); | |
83 | if (i < 0) return(-1); | |
84 | data=X509_NAME_ENTRY_get_data(X509_NAME_get_entry(name,i)); | |
85 | i=(data->length > (len-1))?(len-1):data->length; | |
86 | if (buf == NULL) return(data->length); | |
87 | memcpy(buf,data->data,i); | |
88 | buf[i]='\0'; | |
89 | return(i); | |
90 | } | |
91 | ||
6b691a5c | 92 | int X509_NAME_entry_count(X509_NAME *name) |
d02b48c6 RE |
93 | { |
94 | if (name == NULL) return(0); | |
65d4927b | 95 | return(sk_X509_NAME_ENTRY_num(name->entries)); |
d02b48c6 RE |
96 | } |
97 | ||
6b691a5c | 98 | int X509_NAME_get_index_by_NID(X509_NAME *name, int nid, int lastpos) |
d02b48c6 RE |
99 | { |
100 | ASN1_OBJECT *obj; | |
101 | ||
102 | obj=OBJ_nid2obj(nid); | |
103 | if (obj == NULL) return(-2); | |
58964a49 | 104 | return(X509_NAME_get_index_by_OBJ(name,obj,lastpos)); |
d02b48c6 RE |
105 | } |
106 | ||
58964a49 | 107 | /* NOTE: you should be passsing -1, not 0 as lastpos */ |
6b691a5c UM |
108 | int X509_NAME_get_index_by_OBJ(X509_NAME *name, ASN1_OBJECT *obj, |
109 | int lastpos) | |
d02b48c6 RE |
110 | { |
111 | int n; | |
112 | X509_NAME_ENTRY *ne; | |
65d4927b | 113 | STACK_OF(X509_NAME_ENTRY) *sk; |
d02b48c6 RE |
114 | |
115 | if (name == NULL) return(-1); | |
58964a49 RE |
116 | if (lastpos < 0) |
117 | lastpos= -1; | |
d02b48c6 | 118 | sk=name->entries; |
65d4927b | 119 | n=sk_X509_NAME_ENTRY_num(sk); |
58964a49 | 120 | for (lastpos++; lastpos < n; lastpos++) |
d02b48c6 | 121 | { |
65d4927b | 122 | ne=sk_X509_NAME_ENTRY_value(sk,lastpos); |
d02b48c6 | 123 | if (OBJ_cmp(ne->object,obj) == 0) |
58964a49 | 124 | return(lastpos); |
d02b48c6 RE |
125 | } |
126 | return(-1); | |
127 | } | |
128 | ||
6b691a5c | 129 | X509_NAME_ENTRY *X509_NAME_get_entry(X509_NAME *name, int loc) |
d02b48c6 | 130 | { |
65d4927b BL |
131 | if(name == NULL || sk_X509_NAME_ENTRY_num(name->entries) <= loc |
132 | || loc < 0) | |
d02b48c6 RE |
133 | return(NULL); |
134 | else | |
65d4927b | 135 | return(sk_X509_NAME_ENTRY_value(name->entries,loc)); |
d02b48c6 RE |
136 | } |
137 | ||
6b691a5c | 138 | X509_NAME_ENTRY *X509_NAME_delete_entry(X509_NAME *name, int loc) |
d02b48c6 RE |
139 | { |
140 | X509_NAME_ENTRY *ret; | |
0491b709 | 141 | int i,n,set_prev,set_next; |
65d4927b | 142 | STACK_OF(X509_NAME_ENTRY) *sk; |
d02b48c6 | 143 | |
65d4927b BL |
144 | if (name == NULL || sk_X509_NAME_ENTRY_num(name->entries) <= loc |
145 | || loc < 0) | |
d02b48c6 RE |
146 | return(NULL); |
147 | sk=name->entries; | |
65d4927b BL |
148 | ret=sk_X509_NAME_ENTRY_delete(sk,loc); |
149 | n=sk_X509_NAME_ENTRY_num(sk); | |
d02b48c6 RE |
150 | name->modified=1; |
151 | if (loc == n) return(ret); | |
152 | ||
153 | /* else we need to fixup the set field */ | |
154 | if (loc != 0) | |
65d4927b | 155 | set_prev=(sk_X509_NAME_ENTRY_value(sk,loc-1))->set; |
d02b48c6 RE |
156 | else |
157 | set_prev=ret->set-1; | |
65d4927b | 158 | set_next=sk_X509_NAME_ENTRY_value(sk,loc)->set; |
d02b48c6 RE |
159 | |
160 | /* set_prev is the previous set | |
161 | * set is the current set | |
162 | * set_next is the following | |
163 | * prev 1 1 1 1 1 1 1 1 | |
164 | * set 1 1 2 2 | |
165 | * next 1 1 2 2 2 2 3 2 | |
166 | * so basically only if prev and next differ by 2, then | |
167 | * re-number down by 1 */ | |
168 | if (set_prev+1 < set_next) | |
d02b48c6 | 169 | for (i=loc; i<n; i++) |
65d4927b | 170 | sk_X509_NAME_ENTRY_value(sk,i)->set--; |
d02b48c6 RE |
171 | return(ret); |
172 | } | |
173 | ||
74400f73 DSH |
174 | int X509_NAME_add_entry_by_OBJ(X509_NAME *name, ASN1_OBJECT *obj, int type, |
175 | unsigned char *bytes, int len, int loc, int set) | |
176 | { | |
177 | X509_NAME_ENTRY *ne; | |
a0ad17bb | 178 | int ret; |
74400f73 DSH |
179 | ne = X509_NAME_ENTRY_create_by_OBJ(NULL, obj, type, bytes, len); |
180 | if(!ne) return 0; | |
a0ad17bb DSH |
181 | ret = X509_NAME_add_entry(name, ne, loc, set); |
182 | X509_NAME_ENTRY_free(ne); | |
183 | return ret; | |
74400f73 DSH |
184 | } |
185 | ||
186 | int X509_NAME_add_entry_by_NID(X509_NAME *name, int nid, int type, | |
187 | unsigned char *bytes, int len, int loc, int set) | |
188 | { | |
189 | X509_NAME_ENTRY *ne; | |
a0ad17bb | 190 | int ret; |
74400f73 DSH |
191 | ne = X509_NAME_ENTRY_create_by_NID(NULL, nid, type, bytes, len); |
192 | if(!ne) return 0; | |
a0ad17bb DSH |
193 | ret = X509_NAME_add_entry(name, ne, loc, set); |
194 | X509_NAME_ENTRY_free(ne); | |
195 | return ret; | |
74400f73 DSH |
196 | } |
197 | ||
0821bcd4 BL |
198 | int X509_NAME_add_entry_by_txt(X509_NAME *name, const char *field, int type, |
199 | const unsigned char *bytes, int len, int loc, int set) | |
74400f73 DSH |
200 | { |
201 | X509_NAME_ENTRY *ne; | |
a0ad17bb | 202 | int ret; |
74400f73 DSH |
203 | ne = X509_NAME_ENTRY_create_by_txt(NULL, field, type, bytes, len); |
204 | if(!ne) return 0; | |
a0ad17bb DSH |
205 | ret = X509_NAME_add_entry(name, ne, loc, set); |
206 | X509_NAME_ENTRY_free(ne); | |
207 | return ret; | |
74400f73 DSH |
208 | } |
209 | ||
d02b48c6 RE |
210 | /* if set is -1, append to previous set, 0 'a new one', and 1, |
211 | * prepend to the guy we are about to stomp on. */ | |
6b691a5c UM |
212 | int X509_NAME_add_entry(X509_NAME *name, X509_NAME_ENTRY *ne, int loc, |
213 | int set) | |
d02b48c6 RE |
214 | { |
215 | X509_NAME_ENTRY *new_name=NULL; | |
216 | int n,i,inc; | |
65d4927b | 217 | STACK_OF(X509_NAME_ENTRY) *sk; |
d02b48c6 RE |
218 | |
219 | if (name == NULL) return(0); | |
220 | sk=name->entries; | |
65d4927b | 221 | n=sk_X509_NAME_ENTRY_num(sk); |
d02b48c6 RE |
222 | if (loc > n) loc=n; |
223 | else if (loc < 0) loc=n; | |
224 | ||
225 | name->modified=1; | |
226 | ||
227 | if (set == -1) | |
228 | { | |
229 | if (loc == 0) | |
230 | { | |
231 | set=0; | |
232 | inc=1; | |
233 | } | |
234 | else | |
235 | { | |
65d4927b | 236 | set=sk_X509_NAME_ENTRY_value(sk,loc-1)->set; |
d02b48c6 RE |
237 | inc=0; |
238 | } | |
239 | } | |
240 | else /* if (set >= 0) */ | |
241 | { | |
242 | if (loc >= n) | |
243 | { | |
244 | if (loc != 0) | |
65d4927b | 245 | set=sk_X509_NAME_ENTRY_value(sk,loc-1)->set+1; |
d02b48c6 RE |
246 | else |
247 | set=0; | |
248 | } | |
249 | else | |
65d4927b | 250 | set=sk_X509_NAME_ENTRY_value(sk,loc)->set; |
d02b48c6 RE |
251 | inc=(set == 0)?1:0; |
252 | } | |
253 | ||
254 | if ((new_name=X509_NAME_ENTRY_dup(ne)) == NULL) | |
255 | goto err; | |
256 | new_name->set=set; | |
65d4927b | 257 | if (!sk_X509_NAME_ENTRY_insert(sk,new_name,loc)) |
d02b48c6 RE |
258 | { |
259 | X509err(X509_F_X509_NAME_ADD_ENTRY,ERR_R_MALLOC_FAILURE); | |
260 | goto err; | |
261 | } | |
262 | if (inc) | |
263 | { | |
65d4927b | 264 | n=sk_X509_NAME_ENTRY_num(sk); |
d02b48c6 | 265 | for (i=loc+1; i<n; i++) |
65d4927b | 266 | sk_X509_NAME_ENTRY_value(sk,i-1)->set+=1; |
d02b48c6 RE |
267 | } |
268 | return(1); | |
269 | err: | |
270 | if (new_name != NULL) | |
e416ad97 | 271 | X509_NAME_ENTRY_free(new_name); |
d02b48c6 RE |
272 | return(0); |
273 | } | |
274 | ||
74400f73 | 275 | X509_NAME_ENTRY *X509_NAME_ENTRY_create_by_txt(X509_NAME_ENTRY **ne, |
0821bcd4 | 276 | const char *field, int type, const unsigned char *bytes, int len) |
74400f73 DSH |
277 | { |
278 | ASN1_OBJECT *obj; | |
a0ad17bb | 279 | X509_NAME_ENTRY *nentry; |
74400f73 DSH |
280 | |
281 | obj=OBJ_txt2obj(field, 0); | |
282 | if (obj == NULL) | |
283 | { | |
284 | X509err(X509_F_X509_NAME_ENTRY_CREATE_BY_TXT, | |
285 | X509_R_INVALID_FIELD_NAME); | |
6e6bc352 | 286 | ERR_add_error_data(2, "name=", field); |
74400f73 DSH |
287 | return(NULL); |
288 | } | |
a0ad17bb DSH |
289 | nentry = X509_NAME_ENTRY_create_by_OBJ(ne,obj,type,bytes,len); |
290 | ASN1_OBJECT_free(obj); | |
291 | return nentry; | |
74400f73 DSH |
292 | } |
293 | ||
6b691a5c UM |
294 | X509_NAME_ENTRY *X509_NAME_ENTRY_create_by_NID(X509_NAME_ENTRY **ne, int nid, |
295 | int type, unsigned char *bytes, int len) | |
d02b48c6 RE |
296 | { |
297 | ASN1_OBJECT *obj; | |
a0ad17bb | 298 | X509_NAME_ENTRY *nentry; |
d02b48c6 RE |
299 | |
300 | obj=OBJ_nid2obj(nid); | |
301 | if (obj == NULL) | |
302 | { | |
303 | X509err(X509_F_X509_NAME_ENTRY_CREATE_BY_NID,X509_R_UNKNOWN_NID); | |
304 | return(NULL); | |
305 | } | |
a0ad17bb DSH |
306 | nentry = X509_NAME_ENTRY_create_by_OBJ(ne,obj,type,bytes,len); |
307 | ASN1_OBJECT_free(obj); | |
308 | return nentry; | |
d02b48c6 RE |
309 | } |
310 | ||
6b691a5c | 311 | X509_NAME_ENTRY *X509_NAME_ENTRY_create_by_OBJ(X509_NAME_ENTRY **ne, |
0821bcd4 | 312 | ASN1_OBJECT *obj, int type, const unsigned char *bytes, int len) |
d02b48c6 RE |
313 | { |
314 | X509_NAME_ENTRY *ret; | |
315 | ||
316 | if ((ne == NULL) || (*ne == NULL)) | |
317 | { | |
318 | if ((ret=X509_NAME_ENTRY_new()) == NULL) | |
319 | return(NULL); | |
320 | } | |
321 | else | |
322 | ret= *ne; | |
323 | ||
324 | if (!X509_NAME_ENTRY_set_object(ret,obj)) | |
325 | goto err; | |
326 | if (!X509_NAME_ENTRY_set_data(ret,type,bytes,len)) | |
327 | goto err; | |
f769ce3e | 328 | |
d02b48c6 RE |
329 | if ((ne != NULL) && (*ne == NULL)) *ne=ret; |
330 | return(ret); | |
331 | err: | |
332 | if ((ne == NULL) || (ret != *ne)) | |
333 | X509_NAME_ENTRY_free(ret); | |
334 | return(NULL); | |
335 | } | |
336 | ||
6b691a5c | 337 | int X509_NAME_ENTRY_set_object(X509_NAME_ENTRY *ne, ASN1_OBJECT *obj) |
d02b48c6 RE |
338 | { |
339 | if ((ne == NULL) || (obj == NULL)) | |
340 | { | |
341 | X509err(X509_F_X509_NAME_ENTRY_SET_OBJECT,ERR_R_PASSED_NULL_PARAMETER); | |
342 | return(0); | |
343 | } | |
344 | ASN1_OBJECT_free(ne->object); | |
345 | ne->object=OBJ_dup(obj); | |
346 | return((ne->object == NULL)?0:1); | |
347 | } | |
348 | ||
6b691a5c | 349 | int X509_NAME_ENTRY_set_data(X509_NAME_ENTRY *ne, int type, |
0821bcd4 | 350 | const unsigned char *bytes, int len) |
d02b48c6 RE |
351 | { |
352 | int i; | |
353 | ||
354 | if ((ne == NULL) || ((bytes == NULL) && (len != 0))) return(0); | |
80870566 | 355 | if((type > 0) && (type & MBSTRING_FLAG)) |
f769ce3e DSH |
356 | return ASN1_STRING_set_by_NID(&ne->value, bytes, |
357 | len, type, | |
358 | OBJ_obj2nid(ne->object)) ? 1 : 0; | |
d02b48c6 RE |
359 | if (len < 0) len=strlen((char *)bytes); |
360 | i=ASN1_STRING_set(ne->value,bytes,len); | |
361 | if (!i) return(0); | |
362 | if (type != V_ASN1_UNDEF) | |
363 | { | |
364 | if (type == V_ASN1_APP_CHOOSE) | |
365 | ne->value->type=ASN1_PRINTABLE_type(bytes,len); | |
366 | else | |
367 | ne->value->type=type; | |
368 | } | |
369 | return(1); | |
370 | } | |
371 | ||
6b691a5c | 372 | ASN1_OBJECT *X509_NAME_ENTRY_get_object(X509_NAME_ENTRY *ne) |
d02b48c6 RE |
373 | { |
374 | if (ne == NULL) return(NULL); | |
375 | return(ne->object); | |
376 | } | |
377 | ||
6b691a5c | 378 | ASN1_STRING *X509_NAME_ENTRY_get_data(X509_NAME_ENTRY *ne) |
d02b48c6 RE |
379 | { |
380 | if (ne == NULL) return(NULL); | |
381 | return(ne->value); | |
382 | } | |
383 |