[thirdparty/openssl.git] / crypto / x509v3 / v3_ocsp.c

/* v3_ocsp.c */
/* Written by Dr Stephen N Henson (shenson@bigfoot.com) for the OpenSSL
 * project 1999.
 */
/* ====================================================================
 * Copyright (c) 1999 The OpenSSL Project.  All rights reserved.
 *
 * Redistribution and use in source and binary forms, with or without
 * modification, are permitted provided that the following conditions
 * are met:
 *
 * 1. Redistributions of source code must retain the above copyright
 *    notice, this list of conditions and the following disclaimer. 
 *
 * 2. Redistributions in binary form must reproduce the above copyright
 *    notice, this list of conditions and the following disclaimer in
 *    the documentation and/or other materials provided with the
 *    distribution.
 *
 * 3. All advertising materials mentioning features or use of this
 *    software must display the following acknowledgment:
 *    "This product includes software developed by the OpenSSL Project
 *    for use in the OpenSSL Toolkit. (http://www.OpenSSL.org/)"
 *
 * 4. The names "OpenSSL Toolkit" and "OpenSSL Project" must not be used to
 *    endorse or promote products derived from this software without
 *    prior written permission. For written permission, please contact
 *    licensing@OpenSSL.org.
 *
 * 5. Products derived from this software may not be called "OpenSSL"
 *    nor may "OpenSSL" appear in their names without prior written
 *    permission of the OpenSSL Project.
 *
 * 6. Redistributions of any form whatsoever must retain the following
 *    acknowledgment:
 *    "This product includes software developed by the OpenSSL Project
 *    for use in the OpenSSL Toolkit (http://www.OpenSSL.org/)"
 *
 * THIS SOFTWARE IS PROVIDED BY THE OpenSSL PROJECT ``AS IS'' AND ANY
 * EXPRESSED OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
 * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR
 * PURPOSE ARE DISCLAIMED.  IN NO EVENT SHALL THE OpenSSL PROJECT OR
 * ITS CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL,
 * SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT
 * NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES;
 * LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
 * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT,
 * STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE)
 * ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED
 * OF THE POSSIBILITY OF SUCH DAMAGE.
 * ====================================================================
 *
 * This product includes cryptographic software written by Eric Young
 * (eay@cryptsoft.com).  This product includes software written by Tim
 * Hudson (tjh@cryptsoft.com).
 *
 */

#include <stdio.h>
#include "cryptlib.h"
#include <openssl/conf.h>
#include <openssl/asn1.h>
#include <openssl/ocsp.h>
#include <openssl/x509v3.h>

/* OCSP extensions.
 */

static int i2r_ocsp_crlid(X509V3_EXT_METHOD *method, void *nonce, BIO *out, int indent);
static int i2r_ocsp_acutoff(X509V3_EXT_METHOD *method, void *nonce, BIO *out, int indent);

static void *ocsp_nonce_new(void);
static int i2d_ocsp_nonce(void *a, unsigned char **pp);
static void *d2i_ocsp_nonce(void *a, unsigned char **pp, long length);
static void ocsp_nonce_free(void *a);
static int i2r_ocsp_nonce(X509V3_EXT_METHOD *method, void *nonce, BIO *out, int indent);

X509V3_EXT_METHOD v3_ocsp_crlid = {
	NID_id_pkix_OCSP_CrlID, 0, &OCSP_CRLID_it,
	0,0,0,0,
	0,0,
	0,0,
	i2r_ocsp_crlid,0,
	NULL
};

X509V3_EXT_METHOD v3_ocsp_acutoff = {
	NID_id_pkix_OCSP_archiveCutoff, 0, &ASN1_GENERALIZEDTIME_it,
	0,0,0,0,
	0,0,
	0,0,
	i2r_ocsp_acutoff,0,
	NULL
};

X509V3_EXT_METHOD v3_ocsp_nonce = {
	NID_id_pkix_OCSP_Nonce, 0, NULL,
	ocsp_nonce_new,
	ocsp_nonce_free,
	d2i_ocsp_nonce,
	i2d_ocsp_nonce,
	0,0,
	0,0,
	i2r_ocsp_nonce,0,
	NULL
};

static int i2r_ocsp_crlid(X509V3_EXT_METHOD *method, void *in, BIO *bp, int ind)
{
	OCSP_CRLID *a = in;
	if (a->crlUrl)
	        {
		if (!BIO_printf(bp, "%*scrlUrl: ", ind, "")) goto err;
		if (!ASN1_STRING_print(bp, (ASN1_STRING*)a->crlUrl)) goto err;
		if (!BIO_write(bp, "\n", 1)) goto err;
		}
	if (a->crlNum)
	        {
		if (!BIO_printf(bp, "%*scrlNum: ", ind, "")) goto err;
		if (!i2a_ASN1_INTEGER(bp, a->crlNum)) goto err;
		if (!BIO_write(bp, "\n", 1)) goto err;
		}
	if (a->crlTime)
	        {
		if (!BIO_printf(bp, "%*scrlTime: ", ind, "")) goto err;
		if (!ASN1_GENERALIZEDTIME_print(bp, a->crlTime)) goto err;
		if (!BIO_write(bp, "\n", 1)) goto err;
		}
	return 1;
	err:
	return 0;
}

static int i2r_ocsp_acutoff(X509V3_EXT_METHOD *method, void *cutoff, BIO *bp, int ind)
{
	if (!BIO_printf(bp, "%*s", ind, "")) return 0;
	if(!ASN1_GENERALIZEDTIME_print(bp, cutoff)) return 0;
	return 1;
}


/* OCSP nonce. This is needs special treatment because it doesn't have
 * an ASN1 encoding at all: it just contains arbitrary data.
 */

static void *ocsp_nonce_new(void)
{
	return ASN1_OCTET_STRING_new();
}

static int i2d_ocsp_nonce(void *a, unsigned char **pp)
{
	ASN1_OCTET_STRING *os = a;
	if(*pp) {
		memcpy(*pp, os->data, os->length);
		*pp += os->length;
	}
	return os->length;
}

static void *d2i_ocsp_nonce(void *a, unsigned char **pp, long length)
{
	ASN1_OCTET_STRING *os, **pos;
	pos = a;
	if(!pos || !*pos) os = ASN1_OCTET_STRING_new();
	else os = *pos;
	if(!ASN1_OCTET_STRING_set(os, *pp, length)) goto err;

	*pp += length;

	if(pos) *pos = os;
	return os;

	err:
	if(os && (!pos || (*pos != os))) M_ASN1_OCTET_STRING_free(os);
	OCSPerr(OCSP_F_D2I_OCSP_NONCE, ERR_R_MALLOC_FAILURE);
	return NULL;
}

static void ocsp_nonce_free(void *a)
{
	M_ASN1_OCTET_STRING_free(a);
}

static int i2r_ocsp_nonce(X509V3_EXT_METHOD *method, void *nonce, BIO *out, int indent)
{
	if(BIO_printf(out, "%*s", indent, "") <= 0) return 0;
	if(i2a_ASN1_STRING(out, nonce, V_ASN1_OCTET_STRING) <= 0) return 0;
	return 1;
}
Commit	Line	Data
c08523d8	1	/* v3_ocsp.c */
2fc0d1f1 DSH	2	/* Written by Dr Stephen N Henson (shenson@bigfoot.com) for the OpenSSL
	3	* project 1999.
	4	*/
	5	/* ====================================================================
	6	* Copyright (c) 1999 The OpenSSL Project. All rights reserved.
	7	*
	8	* Redistribution and use in source and binary forms, with or without
	9	* modification, are permitted provided that the following conditions
	10	* are met:
	11	*
	12	* 1. Redistributions of source code must retain the above copyright
	13	* notice, this list of conditions and the following disclaimer.
	14	*
	15	* 2. Redistributions in binary form must reproduce the above copyright
	16	* notice, this list of conditions and the following disclaimer in
	17	* the documentation and/or other materials provided with the
	18	* distribution.
	19	*
	20	* 3. All advertising materials mentioning features or use of this
	21	* software must display the following acknowledgment:
	22	* "This product includes software developed by the OpenSSL Project
	23	* for use in the OpenSSL Toolkit. (http://www.OpenSSL.org/)"
	24	*
	25	* 4. The names "OpenSSL Toolkit" and "OpenSSL Project" must not be used to
	26	* endorse or promote products derived from this software without
	27	* prior written permission. For written permission, please contact
	28	* licensing@OpenSSL.org.
	29	*
	30	* 5. Products derived from this software may not be called "OpenSSL"
	31	* nor may "OpenSSL" appear in their names without prior written
	32	* permission of the OpenSSL Project.
	33	*
	34	* 6. Redistributions of any form whatsoever must retain the following
	35	* acknowledgment:
	36	* "This product includes software developed by the OpenSSL Project
	37	* for use in the OpenSSL Toolkit (http://www.OpenSSL.org/)"
	38	*
	39	* THIS SOFTWARE IS PROVIDED BY THE OpenSSL PROJECT ``AS IS'' AND ANY
	40	* EXPRESSED OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
	41	* IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR
	42	* PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE OpenSSL PROJECT OR
	43	* ITS CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL,
	44	* SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT
	45	* NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES;
	46	* LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
	47	* HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT,
	48	* STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE)
	49	* ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED
	50	* OF THE POSSIBILITY OF SUCH DAMAGE.
	51	* ====================================================================
	52	*
	53	* This product includes cryptographic software written by Eric Young
	54	* (eay@cryptsoft.com). This product includes software written by Tim
	55	* Hudson (tjh@cryptsoft.com).
	56	*
	57	*/
	58
	59	#include <stdio.h>
	60	#include "cryptlib.h"
	61	#include <openssl/conf.h>
	62	#include <openssl/asn1.h>
	63	#include <openssl/ocsp.h>
	64	#include <openssl/x509v3.h>
	65
c08523d8	66	/* OCSP extensions.
2fc0d1f1 DSH	67	*/
2fc0d1f1 DSH	68
c08523d8 DSH	69	static int i2r_ocsp_crlid(X509V3_EXT_METHOD method, void nonce, BIO *out, int indent);
	70	static int i2r_ocsp_acutoff(X509V3_EXT_METHOD method, void nonce, BIO *out, int indent);
	71
2fc0d1f1 DSH	72	static void *ocsp_nonce_new(void);
	73	static int i2d_ocsp_nonce(void a, unsigned char *pp);
	74	static void d2i_ocsp_nonce(void a, unsigned char **pp, long length);
	75	static void ocsp_nonce_free(void *a);
	76	static int i2r_ocsp_nonce(X509V3_EXT_METHOD method, void nonce, BIO *out, int indent);
	77
c08523d8 DSH	78	X509V3_EXT_METHOD v3_ocsp_crlid = {
	79	NID_id_pkix_OCSP_CrlID, 0, &OCSP_CRLID_it,
	80	0,0,0,0,
	81	0,0,
	82	0,0,
	83	i2r_ocsp_crlid,0,
	84	NULL
	85	};
	86
	87	X509V3_EXT_METHOD v3_ocsp_acutoff = {
	88	NID_id_pkix_OCSP_archiveCutoff, 0, &ASN1_GENERALIZEDTIME_it,
	89	0,0,0,0,
	90	0,0,
	91	0,0,
	92	i2r_ocsp_acutoff,0,
	93	NULL
	94	};
	95
2fc0d1f1 DSH	96	X509V3_EXT_METHOD v3_ocsp_nonce = {
	97	NID_id_pkix_OCSP_Nonce, 0, NULL,
	98	ocsp_nonce_new,
	99	ocsp_nonce_free,
	100	d2i_ocsp_nonce,
	101	i2d_ocsp_nonce,
	102	0,0,
	103	0,0,
	104	i2r_ocsp_nonce,0,
	105	NULL
	106	};
	107
c08523d8 DSH	108	static int i2r_ocsp_crlid(X509V3_EXT_METHOD method, void in, BIO *bp, int ind)
	109	{
	110	OCSP_CRLID *a = in;
	111	if (a->crlUrl)
	112	{
	113	if (!BIO_printf(bp, "%*scrlUrl: ", ind, "")) goto err;
	114	if (!ASN1_STRING_print(bp, (ASN1_STRING*)a->crlUrl)) goto err;
	115	if (!BIO_write(bp, "\n", 1)) goto err;
	116	}
	117	if (a->crlNum)
	118	{
	119	if (!BIO_printf(bp, "%*scrlNum: ", ind, "")) goto err;
	120	if (!i2a_ASN1_INTEGER(bp, a->crlNum)) goto err;
	121	if (!BIO_write(bp, "\n", 1)) goto err;
	122	}
	123	if (a->crlTime)
	124	{
	125	if (!BIO_printf(bp, "%*scrlTime: ", ind, "")) goto err;
	126	if (!ASN1_GENERALIZEDTIME_print(bp, a->crlTime)) goto err;
	127	if (!BIO_write(bp, "\n", 1)) goto err;
	128	}
	129	return 1;
	130	err:
	131	return 0;
	132	}
	133
	134	static int i2r_ocsp_acutoff(X509V3_EXT_METHOD method, void cutoff, BIO *bp, int ind)
	135	{
	136	if (!BIO_printf(bp, "%*s", ind, "")) return 0;
	137	if(!ASN1_GENERALIZEDTIME_print(bp, cutoff)) return 0;
	138	return 1;
	139	}
	140
	141
	142	/* OCSP nonce. This is needs special treatment because it doesn't have
	143	* an ASN1 encoding at all: it just contains arbitrary data.
	144	*/
	145
2fc0d1f1 DSH	146	static void *ocsp_nonce_new(void)
	147	{
	148	return ASN1_OCTET_STRING_new();
	149	}
	150
	151	static int i2d_ocsp_nonce(void a, unsigned char *pp)
	152	{
	153	ASN1_OCTET_STRING *os = a;
	154	if(*pp) {
	155	memcpy(*pp, os->data, os->length);
	156	*pp += os->length;
	157	}
	158	return os->length;
	159	}
	160
	161	static void d2i_ocsp_nonce(void a, unsigned char **pp, long length)
	162	{
	163	ASN1_OCTET_STRING os, *pos;
	164	pos = a;
	165	if(!pos \|\| !*pos) os = ASN1_OCTET_STRING_new();
	166	else os = *pos;
	167	if(!ASN1_OCTET_STRING_set(os, *pp, length)) goto err;
	168
	169	*pp += length;
	170
	171	if(pos) *pos = os;
	172	return os;
	173
	174	err:
	175	if(os && (!pos \|\| (*pos != os))) M_ASN1_OCTET_STRING_free(os);
	176	OCSPerr(OCSP_F_D2I_OCSP_NONCE, ERR_R_MALLOC_FAILURE);
	177	return NULL;
	178	}
	179
	180	static void ocsp_nonce_free(void *a)
	181	{
	182	M_ASN1_OCTET_STRING_free(a);
	183	}
	184
	185	static int i2r_ocsp_nonce(X509V3_EXT_METHOD method, void nonce, BIO *out, int indent)
	186	{
	187	if(BIO_printf(out, "%*s", indent, "") <= 0) return 0;
	188	if(i2a_ASN1_STRING(out, nonce, V_ASN1_OCTET_STRING) <= 0) return 0;
	189	return 1;
	190	}
c08523d8 DSH	191
c08523d8 DSH	192