[thirdparty/openssl.git] / crypto / x509v3 / v3_ocsp.c

/* v3_ocsp.c */
/* Written by Dr Stephen N Henson (shenson@bigfoot.com) for the OpenSSL
 * project 1999.
 */
/* ====================================================================
 * Copyright (c) 1999 The OpenSSL Project.  All rights reserved.
 *
 * Redistribution and use in source and binary forms, with or without
 * modification, are permitted provided that the following conditions
 * are met:
 *
 * 1. Redistributions of source code must retain the above copyright
 *    notice, this list of conditions and the following disclaimer. 
 *
 * 2. Redistributions in binary form must reproduce the above copyright
 *    notice, this list of conditions and the following disclaimer in
 *    the documentation and/or other materials provided with the
 *    distribution.
 *
 * 3. All advertising materials mentioning features or use of this
 *    software must display the following acknowledgment:
 *    "This product includes software developed by the OpenSSL Project
 *    for use in the OpenSSL Toolkit. (http://www.OpenSSL.org/)"
 *
 * 4. The names "OpenSSL Toolkit" and "OpenSSL Project" must not be used to
 *    endorse or promote products derived from this software without
 *    prior written permission. For written permission, please contact
 *    licensing@OpenSSL.org.
 *
 * 5. Products derived from this software may not be called "OpenSSL"
 *    nor may "OpenSSL" appear in their names without prior written
 *    permission of the OpenSSL Project.
 *
 * 6. Redistributions of any form whatsoever must retain the following
 *    acknowledgment:
 *    "This product includes software developed by the OpenSSL Project
 *    for use in the OpenSSL Toolkit (http://www.OpenSSL.org/)"
 *
 * THIS SOFTWARE IS PROVIDED BY THE OpenSSL PROJECT ``AS IS'' AND ANY
 * EXPRESSED OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
 * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR
 * PURPOSE ARE DISCLAIMED.  IN NO EVENT SHALL THE OpenSSL PROJECT OR
 * ITS CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL,
 * SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT
 * NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES;
 * LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
 * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT,
 * STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE)
 * ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED
 * OF THE POSSIBILITY OF SUCH DAMAGE.
 * ====================================================================
 *
 * This product includes cryptographic software written by Eric Young
 * (eay@cryptsoft.com).  This product includes software written by Tim
 * Hudson (tjh@cryptsoft.com).
 *
 */

#ifndef OPENSSL_NO_OCSP

#include <stdio.h>
#include "cryptlib.h"
#include <openssl/conf.h>
#include <openssl/asn1.h>
#include <openssl/ocsp.h>
#include <openssl/x509v3.h>

/* OCSP extensions and a couple of CRL entry extensions
 */

static int i2r_ocsp_crlid(X509V3_EXT_METHOD *method, void *nonce, BIO *out, int indent);
static int i2r_ocsp_acutoff(X509V3_EXT_METHOD *method, void *nonce, BIO *out, int indent);
static int i2r_object(X509V3_EXT_METHOD *method, void *obj, BIO *out, int indent);

static void *ocsp_nonce_new(void);
static int i2d_ocsp_nonce(void *a, unsigned char **pp);
static void *d2i_ocsp_nonce(void *a, const unsigned char **pp, long length);
static void ocsp_nonce_free(void *a);
static int i2r_ocsp_nonce(X509V3_EXT_METHOD *method, void *nonce, BIO *out, int indent);

static int i2r_ocsp_nocheck(X509V3_EXT_METHOD *method, void *nocheck, BIO *out, int indent);
static void *s2i_ocsp_nocheck(X509V3_EXT_METHOD *method, X509V3_CTX *ctx, const char *str);
static int i2r_ocsp_serviceloc(X509V3_EXT_METHOD *method, void *in, BIO *bp, int ind);

const X509V3_EXT_METHOD v3_ocsp_crlid = {
	NID_id_pkix_OCSP_CrlID, 0, ASN1_ITEM_ref(OCSP_CRLID),
	0,0,0,0,
	0,0,
	0,0,
	i2r_ocsp_crlid,0,
	NULL
};

const X509V3_EXT_METHOD v3_ocsp_acutoff = {
	NID_id_pkix_OCSP_archiveCutoff, 0, ASN1_ITEM_ref(ASN1_GENERALIZEDTIME),
	0,0,0,0,
	0,0,
	0,0,
	i2r_ocsp_acutoff,0,
	NULL
};

const X509V3_EXT_METHOD v3_crl_invdate = {
	NID_invalidity_date, 0, ASN1_ITEM_ref(ASN1_GENERALIZEDTIME),
	0,0,0,0,
	0,0,
	0,0,
	i2r_ocsp_acutoff,0,
	NULL
};

const X509V3_EXT_METHOD v3_crl_hold = {
	NID_hold_instruction_code, 0, ASN1_ITEM_ref(ASN1_OBJECT),
	0,0,0,0,
	0,0,
	0,0,
	i2r_object,0,
	NULL
};

const X509V3_EXT_METHOD v3_ocsp_nonce = {
	NID_id_pkix_OCSP_Nonce, 0, NULL,
	ocsp_nonce_new,
	ocsp_nonce_free,
	d2i_ocsp_nonce,
	i2d_ocsp_nonce,
	0,0,
	0,0,
	i2r_ocsp_nonce,0,
	NULL
};

const X509V3_EXT_METHOD v3_ocsp_nocheck = {
	NID_id_pkix_OCSP_noCheck, 0, ASN1_ITEM_ref(ASN1_NULL),
	0,0,0,0,
	0,s2i_ocsp_nocheck,
	0,0,
	i2r_ocsp_nocheck,0,
	NULL
};

const X509V3_EXT_METHOD v3_ocsp_serviceloc = {
	NID_id_pkix_OCSP_serviceLocator, 0, ASN1_ITEM_ref(OCSP_SERVICELOC),
	0,0,0,0,
	0,0,
	0,0,
	i2r_ocsp_serviceloc,0,
	NULL
};

static int i2r_ocsp_crlid(X509V3_EXT_METHOD *method, void *in, BIO *bp, int ind)
{
	OCSP_CRLID *a = in;
	if (a->crlUrl)
	        {
		if (!BIO_printf(bp, "%*scrlUrl: ", ind, "")) goto err;
		if (!ASN1_STRING_print(bp, (ASN1_STRING*)a->crlUrl)) goto err;
		if (!BIO_write(bp, "\n", 1)) goto err;
		}
	if (a->crlNum)
	        {
		if (!BIO_printf(bp, "%*scrlNum: ", ind, "")) goto err;
		if (!i2a_ASN1_INTEGER(bp, a->crlNum)) goto err;
		if (!BIO_write(bp, "\n", 1)) goto err;
		}
	if (a->crlTime)
	        {
		if (!BIO_printf(bp, "%*scrlTime: ", ind, "")) goto err;
		if (!ASN1_GENERALIZEDTIME_print(bp, a->crlTime)) goto err;
		if (!BIO_write(bp, "\n", 1)) goto err;
		}
	return 1;
	err:
	return 0;
}

static int i2r_ocsp_acutoff(X509V3_EXT_METHOD *method, void *cutoff, BIO *bp, int ind)
{
	if (!BIO_printf(bp, "%*s", ind, "")) return 0;
	if(!ASN1_GENERALIZEDTIME_print(bp, cutoff)) return 0;
	return 1;
}


static int i2r_object(X509V3_EXT_METHOD *method, void *oid, BIO *bp, int ind)
{
	if (!BIO_printf(bp, "%*s", ind, "")) return 0;
	if(!i2a_ASN1_OBJECT(bp, oid)) return 0;
	return 1;
}

/* OCSP nonce. This is needs special treatment because it doesn't have
 * an ASN1 encoding at all: it just contains arbitrary data.
 */

static void *ocsp_nonce_new(void)
{
	return ASN1_OCTET_STRING_new();
}

static int i2d_ocsp_nonce(void *a, unsigned char **pp)
{
	ASN1_OCTET_STRING *os = a;
	if(pp) {
		memcpy(*pp, os->data, os->length);
		*pp += os->length;
	}
	return os->length;
}

static void *d2i_ocsp_nonce(void *a, const unsigned char **pp, long length)
{
	ASN1_OCTET_STRING *os, **pos;
	pos = a;
	if(!pos || !*pos) os = ASN1_OCTET_STRING_new();
	else os = *pos;
	if(!ASN1_OCTET_STRING_set(os, *pp, length)) goto err;

	*pp += length;

	if(pos) *pos = os;
	return os;

	err:
	if(os && (!pos || (*pos != os))) M_ASN1_OCTET_STRING_free(os);
	OCSPerr(OCSP_F_D2I_OCSP_NONCE, ERR_R_MALLOC_FAILURE);
	return NULL;
}

static void ocsp_nonce_free(void *a)
{
	M_ASN1_OCTET_STRING_free(a);
}

static int i2r_ocsp_nonce(X509V3_EXT_METHOD *method, void *nonce, BIO *out, int indent)
{
	if(BIO_printf(out, "%*s", indent, "") <= 0) return 0;
	if(i2a_ASN1_STRING(out, nonce, V_ASN1_OCTET_STRING) <= 0) return 0;
	return 1;
}

/* Nocheck is just a single NULL. Don't print anything and always set it */

static int i2r_ocsp_nocheck(X509V3_EXT_METHOD *method, void *nocheck, BIO *out, int indent)
{
	return 1;
}

static void *s2i_ocsp_nocheck(X509V3_EXT_METHOD *method, X509V3_CTX *ctx, const char *str)
{
	return ASN1_NULL_new();
}

static int i2r_ocsp_serviceloc(X509V3_EXT_METHOD *method, void *in, BIO *bp, int ind)
        {
	int i;
	OCSP_SERVICELOC *a = in;
	ACCESS_DESCRIPTION *ad;

        if (BIO_printf(bp, "%*sIssuer: ", ind, "") <= 0) goto err;
        if (X509_NAME_print_ex(bp, a->issuer, 0, XN_FLAG_ONELINE) <= 0) goto err;
	for (i = 0; i < sk_ACCESS_DESCRIPTION_num(a->locator); i++)
	        {
				ad = sk_ACCESS_DESCRIPTION_value(a->locator,i);
				if (BIO_printf(bp, "\n%*s", (2*ind), "") <= 0) 
					goto err;
				if(i2a_ASN1_OBJECT(bp, ad->method) <= 0) goto err;
				if(BIO_puts(bp, " - ") <= 0) goto err;
				if(GENERAL_NAME_print(bp, ad->location) <= 0) goto err;
		}
	return 1;
err:
	return 0;
	}
#endif
Commit	Line	Data
c08523d8	1	/* v3_ocsp.c */
2fc0d1f1 DSH	2	/* Written by Dr Stephen N Henson (shenson@bigfoot.com) for the OpenSSL
	3	* project 1999.
	4	*/
	5	/* ====================================================================
	6	* Copyright (c) 1999 The OpenSSL Project. All rights reserved.
	7	*
	8	* Redistribution and use in source and binary forms, with or without
	9	* modification, are permitted provided that the following conditions
	10	* are met:
	11	*
	12	* 1. Redistributions of source code must retain the above copyright
	13	* notice, this list of conditions and the following disclaimer.
	14	*
	15	* 2. Redistributions in binary form must reproduce the above copyright
	16	* notice, this list of conditions and the following disclaimer in
	17	* the documentation and/or other materials provided with the
	18	* distribution.
	19	*
	20	* 3. All advertising materials mentioning features or use of this
	21	* software must display the following acknowledgment:
	22	* "This product includes software developed by the OpenSSL Project
	23	* for use in the OpenSSL Toolkit. (http://www.OpenSSL.org/)"
	24	*
	25	* 4. The names "OpenSSL Toolkit" and "OpenSSL Project" must not be used to
	26	* endorse or promote products derived from this software without
	27	* prior written permission. For written permission, please contact
	28	* licensing@OpenSSL.org.
	29	*
	30	* 5. Products derived from this software may not be called "OpenSSL"
	31	* nor may "OpenSSL" appear in their names without prior written
	32	* permission of the OpenSSL Project.
	33	*
	34	* 6. Redistributions of any form whatsoever must retain the following
	35	* acknowledgment:
	36	* "This product includes software developed by the OpenSSL Project
	37	* for use in the OpenSSL Toolkit (http://www.OpenSSL.org/)"
	38	*
	39	* THIS SOFTWARE IS PROVIDED BY THE OpenSSL PROJECT ``AS IS'' AND ANY
	40	* EXPRESSED OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
	41	* IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR
	42	* PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE OpenSSL PROJECT OR
	43	* ITS CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL,
	44	* SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT
	45	* NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES;
	46	* LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
	47	* HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT,
	48	* STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE)
	49	* ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED
	50	* OF THE POSSIBILITY OF SUCH DAMAGE.
	51	* ====================================================================
	52	*
	53	* This product includes cryptographic software written by Eric Young
	54	* (eay@cryptsoft.com). This product includes software written by Tim
	55	* Hudson (tjh@cryptsoft.com).
	56	*
	57	*/
	58
85d686e7 RL	59	#ifndef OPENSSL_NO_OCSP
85d686e7 RL	60
2fc0d1f1 DSH	61	#include <stdio.h>
	62	#include "cryptlib.h"
	63	#include <openssl/conf.h>
	64	#include <openssl/asn1.h>
	65	#include <openssl/ocsp.h>
	66	#include <openssl/x509v3.h>
	67
a6b7ffdd	68	/* OCSP extensions and a couple of CRL entry extensions
2fc0d1f1 DSH	69	*/
2fc0d1f1 DSH	70
c08523d8 DSH	71	static int i2r_ocsp_crlid(X509V3_EXT_METHOD method, void nonce, BIO *out, int indent);
c08523d8 DSH	72	static int i2r_ocsp_acutoff(X509V3_EXT_METHOD method, void nonce, BIO *out, int indent);
a6b7ffdd	73	static int i2r_object(X509V3_EXT_METHOD method, void obj, BIO *out, int indent);
c08523d8	74
2fc0d1f1 DSH	75	static void *ocsp_nonce_new(void);
2fc0d1f1 DSH	76	static int i2d_ocsp_nonce(void a, unsigned char *pp);
875a644a	77	static void d2i_ocsp_nonce(void a, const unsigned char **pp, long length);
2fc0d1f1 DSH	78	static void ocsp_nonce_free(void *a);
	79	static int i2r_ocsp_nonce(X509V3_EXT_METHOD method, void nonce, BIO *out, int indent);
	80
f1a6a0d4	81	static int i2r_ocsp_nocheck(X509V3_EXT_METHOD method, void nocheck, BIO *out, int indent);
875a644a	82	static void s2i_ocsp_nocheck(X509V3_EXT_METHOD method, X509V3_CTX ctx, const char str);
6546fdfa	83	static int i2r_ocsp_serviceloc(X509V3_EXT_METHOD method, void in, BIO *bp, int ind);
f1a6a0d4	84
560b79cb	85	const X509V3_EXT_METHOD v3_ocsp_crlid = {
bb5ea36b	86	NID_id_pkix_OCSP_CrlID, 0, ASN1_ITEM_ref(OCSP_CRLID),
c08523d8 DSH	87	0,0,0,0,
	88	0,0,
	89	0,0,
	90	i2r_ocsp_crlid,0,
	91	NULL
	92	};
	93
560b79cb	94	const X509V3_EXT_METHOD v3_ocsp_acutoff = {
bb5ea36b	95	NID_id_pkix_OCSP_archiveCutoff, 0, ASN1_ITEM_ref(ASN1_GENERALIZEDTIME),
c08523d8 DSH	96	0,0,0,0,
	97	0,0,
	98	0,0,
	99	i2r_ocsp_acutoff,0,
	100	NULL
	101	};
	102
560b79cb	103	const X509V3_EXT_METHOD v3_crl_invdate = {
bb5ea36b	104	NID_invalidity_date, 0, ASN1_ITEM_ref(ASN1_GENERALIZEDTIME),
a6b7ffdd DSH	105	0,0,0,0,
	106	0,0,
	107	0,0,
	108	i2r_ocsp_acutoff,0,
	109	NULL
	110	};
	111
560b79cb	112	const X509V3_EXT_METHOD v3_crl_hold = {
bb5ea36b	113	NID_hold_instruction_code, 0, ASN1_ITEM_ref(ASN1_OBJECT),
a6b7ffdd DSH	114	0,0,0,0,
	115	0,0,
	116	0,0,
	117	i2r_object,0,
	118	NULL
	119	};
	120
560b79cb	121	const X509V3_EXT_METHOD v3_ocsp_nonce = {
2fc0d1f1 DSH	122	NID_id_pkix_OCSP_Nonce, 0, NULL,
	123	ocsp_nonce_new,
	124	ocsp_nonce_free,
	125	d2i_ocsp_nonce,
	126	i2d_ocsp_nonce,
	127	0,0,
	128	0,0,
	129	i2r_ocsp_nonce,0,
	130	NULL
	131	};
	132
560b79cb	133	const X509V3_EXT_METHOD v3_ocsp_nocheck = {
bb5ea36b	134	NID_id_pkix_OCSP_noCheck, 0, ASN1_ITEM_ref(ASN1_NULL),
f1a6a0d4 DSH	135	0,0,0,0,
	136	0,s2i_ocsp_nocheck,
	137	0,0,
	138	i2r_ocsp_nocheck,0,
	139	NULL
	140	};
	141
560b79cb	142	const X509V3_EXT_METHOD v3_ocsp_serviceloc = {
bb5ea36b	143	NID_id_pkix_OCSP_serviceLocator, 0, ASN1_ITEM_ref(OCSP_SERVICELOC),
6546fdfa DSH	144	0,0,0,0,
	145	0,0,
	146	0,0,
	147	i2r_ocsp_serviceloc,0,
	148	NULL
	149	};
	150
c08523d8 DSH	151	static int i2r_ocsp_crlid(X509V3_EXT_METHOD method, void in, BIO *bp, int ind)
	152	{
	153	OCSP_CRLID *a = in;
	154	if (a->crlUrl)
	155	{
	156	if (!BIO_printf(bp, "%*scrlUrl: ", ind, "")) goto err;
	157	if (!ASN1_STRING_print(bp, (ASN1_STRING*)a->crlUrl)) goto err;
	158	if (!BIO_write(bp, "\n", 1)) goto err;
	159	}
	160	if (a->crlNum)
	161	{
	162	if (!BIO_printf(bp, "%*scrlNum: ", ind, "")) goto err;
	163	if (!i2a_ASN1_INTEGER(bp, a->crlNum)) goto err;
	164	if (!BIO_write(bp, "\n", 1)) goto err;
	165	}
	166	if (a->crlTime)
	167	{
	168	if (!BIO_printf(bp, "%*scrlTime: ", ind, "")) goto err;
	169	if (!ASN1_GENERALIZEDTIME_print(bp, a->crlTime)) goto err;
	170	if (!BIO_write(bp, "\n", 1)) goto err;
	171	}
	172	return 1;
	173	err:
	174	return 0;
	175	}
	176
	177	static int i2r_ocsp_acutoff(X509V3_EXT_METHOD method, void cutoff, BIO *bp, int ind)
	178	{
	179	if (!BIO_printf(bp, "%*s", ind, "")) return 0;
	180	if(!ASN1_GENERALIZEDTIME_print(bp, cutoff)) return 0;
	181	return 1;
	182	}
	183
	184
a6b7ffdd DSH	185	static int i2r_object(X509V3_EXT_METHOD method, void oid, BIO *bp, int ind)
	186	{
	187	if (!BIO_printf(bp, "%*s", ind, "")) return 0;
	188	if(!i2a_ASN1_OBJECT(bp, oid)) return 0;
	189	return 1;
	190	}
	191
c08523d8 DSH	192	/* OCSP nonce. This is needs special treatment because it doesn't have
	193	* an ASN1 encoding at all: it just contains arbitrary data.
	194	*/
	195
2fc0d1f1 DSH	196	static void *ocsp_nonce_new(void)
	197	{
	198	return ASN1_OCTET_STRING_new();
	199	}
	200
	201	static int i2d_ocsp_nonce(void a, unsigned char *pp)
	202	{
	203	ASN1_OCTET_STRING *os = a;
a8312c0e	204	if(pp) {
2fc0d1f1 DSH	205	memcpy(*pp, os->data, os->length);
	206	*pp += os->length;
	207	}
	208	return os->length;
	209	}
	210
875a644a	211	static void d2i_ocsp_nonce(void a, const unsigned char **pp, long length)
2fc0d1f1 DSH	212	{
	213	ASN1_OCTET_STRING os, *pos;
	214	pos = a;
	215	if(!pos \|\| !*pos) os = ASN1_OCTET_STRING_new();
	216	else os = *pos;
	217	if(!ASN1_OCTET_STRING_set(os, *pp, length)) goto err;
	218
	219	*pp += length;
	220
	221	if(pos) *pos = os;
	222	return os;
	223
	224	err:
	225	if(os && (!pos \|\| (*pos != os))) M_ASN1_OCTET_STRING_free(os);
	226	OCSPerr(OCSP_F_D2I_OCSP_NONCE, ERR_R_MALLOC_FAILURE);
	227	return NULL;
	228	}
	229
	230	static void ocsp_nonce_free(void *a)
	231	{
	232	M_ASN1_OCTET_STRING_free(a);
	233	}
	234
	235	static int i2r_ocsp_nonce(X509V3_EXT_METHOD method, void nonce, BIO *out, int indent)
	236	{
	237	if(BIO_printf(out, "%*s", indent, "") <= 0) return 0;
	238	if(i2a_ASN1_STRING(out, nonce, V_ASN1_OCTET_STRING) <= 0) return 0;
	239	return 1;
	240	}
c08523d8	241
f1a6a0d4	242	/* Nocheck is just a single NULL. Don't print anything and always set it */
c08523d8	243
f1a6a0d4 DSH	244	static int i2r_ocsp_nocheck(X509V3_EXT_METHOD method, void nocheck, BIO *out, int indent)
	245	{
	246	return 1;
	247	}
	248
875a644a	249	static void s2i_ocsp_nocheck(X509V3_EXT_METHOD method, X509V3_CTX ctx, const char str)
f1a6a0d4 DSH	250	{
	251	return ASN1_NULL_new();
	252	}
6546fdfa DSH	253
	254	static int i2r_ocsp_serviceloc(X509V3_EXT_METHOD method, void in, BIO *bp, int ind)
	255	{
	256	int i;
	257	OCSP_SERVICELOC *a = in;
	258	ACCESS_DESCRIPTION *ad;
	259
5755cab4	260	if (BIO_printf(bp, "%*sIssuer: ", ind, "") <= 0) goto err;
6546fdfa DSH	261	if (X509_NAME_print_ex(bp, a->issuer, 0, XN_FLAG_ONELINE) <= 0) goto err;
	262	for (i = 0; i < sk_ACCESS_DESCRIPTION_num(a->locator); i++)
	263	{
	264	ad = sk_ACCESS_DESCRIPTION_value(a->locator,i);
	265	if (BIO_printf(bp, "\n%s", (2ind), "") <= 0)
	266	goto err;
	267	if(i2a_ASN1_OBJECT(bp, ad->method) <= 0) goto err;
	268	if(BIO_puts(bp, " - ") <= 0) goto err;
	269	if(GENERAL_NAME_print(bp, ad->location) <= 0) goto err;
	270	}
	271	return 1;
	272	err:
	273	return 0;
	274	}
85d686e7	275	#endif