1 /* crypto/ts/ts_asn1.c */
3 * Written by Nils Larsch for the OpenSSL project 2004.
5 /* ====================================================================
6 * Copyright (c) 2006 The OpenSSL Project. All rights reserved.
8 * Redistribution and use in source and binary forms, with or without
9 * modification, are permitted provided that the following conditions
12 * 1. Redistributions of source code must retain the above copyright
13 * notice, this list of conditions and the following disclaimer.
15 * 2. Redistributions in binary form must reproduce the above copyright
16 * notice, this list of conditions and the following disclaimer in
17 * the documentation and/or other materials provided with the
20 * 3. All advertising materials mentioning features or use of this
21 * software must display the following acknowledgment:
22 * "This product includes software developed by the OpenSSL Project
23 * for use in the OpenSSL Toolkit. (http://www.OpenSSL.org/)"
25 * 4. The names "OpenSSL Toolkit" and "OpenSSL Project" must not be used to
26 * endorse or promote products derived from this software without
27 * prior written permission. For written permission, please contact
28 * licensing@OpenSSL.org.
30 * 5. Products derived from this software may not be called "OpenSSL"
31 * nor may "OpenSSL" appear in their names without prior written
32 * permission of the OpenSSL Project.
34 * 6. Redistributions of any form whatsoever must retain the following
36 * "This product includes software developed by the OpenSSL Project
37 * for use in the OpenSSL Toolkit (http://www.OpenSSL.org/)"
39 * THIS SOFTWARE IS PROVIDED BY THE OpenSSL PROJECT ``AS IS'' AND ANY
40 * EXPRESSED OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
41 * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR
42 * PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE OpenSSL PROJECT OR
43 * ITS CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL,
44 * SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT
45 * NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES;
46 * LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
47 * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT,
48 * STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE)
49 * ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED
50 * OF THE POSSIBILITY OF SUCH DAMAGE.
51 * ====================================================================
53 * This product includes cryptographic software written by Eric Young
54 * (eay@cryptsoft.com). This product includes software written by Tim
55 * Hudson (tjh@cryptsoft.com).
59 #include <openssl/ts.h>
60 #include <openssl/err.h>
61 #include <openssl/asn1t.h>
63 ASN1_SEQUENCE(TS_MSG_IMPRINT
) = {
64 ASN1_SIMPLE(TS_MSG_IMPRINT
, hash_algo
, X509_ALGOR
),
65 ASN1_SIMPLE(TS_MSG_IMPRINT
, hashed_msg
, ASN1_OCTET_STRING
)
66 } ASN1_SEQUENCE_END(TS_MSG_IMPRINT
)
68 IMPLEMENT_ASN1_FUNCTIONS_const(TS_MSG_IMPRINT
)
69 IMPLEMENT_ASN1_DUP_FUNCTION(TS_MSG_IMPRINT
)
70 TS_MSG_IMPRINT
*d2i_TS_MSG_IMPRINT_bio(BIO
*bp
, TS_MSG_IMPRINT
**a
)
72 return ASN1_d2i_bio_of(TS_MSG_IMPRINT
, TS_MSG_IMPRINT_new
,
73 d2i_TS_MSG_IMPRINT
, bp
, a
);
76 int i2d_TS_MSG_IMPRINT_bio(BIO
*bp
, TS_MSG_IMPRINT
*a
)
78 return ASN1_i2d_bio_of_const(TS_MSG_IMPRINT
, i2d_TS_MSG_IMPRINT
, bp
, a
);
80 #ifndef OPENSSL_NO_STDIO
81 TS_MSG_IMPRINT
*d2i_TS_MSG_IMPRINT_fp(FILE *fp
, TS_MSG_IMPRINT
**a
)
83 return ASN1_d2i_fp_of(TS_MSG_IMPRINT
, TS_MSG_IMPRINT_new
,
84 d2i_TS_MSG_IMPRINT
, fp
, a
);
87 int i2d_TS_MSG_IMPRINT_fp(FILE *fp
, TS_MSG_IMPRINT
*a
)
89 return ASN1_i2d_fp_of_const(TS_MSG_IMPRINT
, i2d_TS_MSG_IMPRINT
, fp
, a
);
93 ASN1_SEQUENCE(TS_REQ
) = {
94 ASN1_SIMPLE(TS_REQ
, version
, ASN1_INTEGER
),
95 ASN1_SIMPLE(TS_REQ
, msg_imprint
, TS_MSG_IMPRINT
),
96 ASN1_OPT(TS_REQ
, policy_id
, ASN1_OBJECT
),
97 ASN1_OPT(TS_REQ
, nonce
, ASN1_INTEGER
),
98 ASN1_OPT(TS_REQ
, cert_req
, ASN1_FBOOLEAN
),
99 ASN1_IMP_SEQUENCE_OF_OPT(TS_REQ
, extensions
, X509_EXTENSION
, 0)
100 } ASN1_SEQUENCE_END(TS_REQ
)
102 IMPLEMENT_ASN1_FUNCTIONS_const(TS_REQ
)
103 IMPLEMENT_ASN1_DUP_FUNCTION(TS_REQ
)
104 TS_REQ
*d2i_TS_REQ_bio(BIO
*bp
, TS_REQ
**a
)
106 return ASN1_d2i_bio_of(TS_REQ
, TS_REQ_new
, d2i_TS_REQ
, bp
, a
);
109 int i2d_TS_REQ_bio(BIO
*bp
, TS_REQ
*a
)
111 return ASN1_i2d_bio_of_const(TS_REQ
, i2d_TS_REQ
, bp
, a
);
113 #ifndef OPENSSL_NO_STDIO
114 TS_REQ
*d2i_TS_REQ_fp(FILE *fp
, TS_REQ
**a
)
116 return ASN1_d2i_fp_of(TS_REQ
, TS_REQ_new
, d2i_TS_REQ
, fp
, a
);
119 int i2d_TS_REQ_fp(FILE *fp
, TS_REQ
*a
)
121 return ASN1_i2d_fp_of_const(TS_REQ
, i2d_TS_REQ
, fp
, a
);
125 ASN1_SEQUENCE(TS_ACCURACY
) = {
126 ASN1_OPT(TS_ACCURACY
, seconds
, ASN1_INTEGER
),
127 ASN1_IMP_OPT(TS_ACCURACY
, millis
, ASN1_INTEGER
, 0),
128 ASN1_IMP_OPT(TS_ACCURACY
, micros
, ASN1_INTEGER
, 1)
129 } ASN1_SEQUENCE_END(TS_ACCURACY
)
131 IMPLEMENT_ASN1_FUNCTIONS_const(TS_ACCURACY
)
132 IMPLEMENT_ASN1_DUP_FUNCTION(TS_ACCURACY
)
134 ASN1_SEQUENCE(TS_TST_INFO
) = {
135 ASN1_SIMPLE(TS_TST_INFO
, version
, ASN1_INTEGER
),
136 ASN1_SIMPLE(TS_TST_INFO
, policy_id
, ASN1_OBJECT
),
137 ASN1_SIMPLE(TS_TST_INFO
, msg_imprint
, TS_MSG_IMPRINT
),
138 ASN1_SIMPLE(TS_TST_INFO
, serial
, ASN1_INTEGER
),
139 ASN1_SIMPLE(TS_TST_INFO
, time
, ASN1_GENERALIZEDTIME
),
140 ASN1_OPT(TS_TST_INFO
, accuracy
, TS_ACCURACY
),
141 ASN1_OPT(TS_TST_INFO
, ordering
, ASN1_FBOOLEAN
),
142 ASN1_OPT(TS_TST_INFO
, nonce
, ASN1_INTEGER
),
143 ASN1_EXP_OPT(TS_TST_INFO
, tsa
, GENERAL_NAME
, 0),
144 ASN1_IMP_SEQUENCE_OF_OPT(TS_TST_INFO
, extensions
, X509_EXTENSION
, 1)
145 } ASN1_SEQUENCE_END(TS_TST_INFO
)
147 IMPLEMENT_ASN1_FUNCTIONS_const(TS_TST_INFO
)
148 IMPLEMENT_ASN1_DUP_FUNCTION(TS_TST_INFO
)
149 TS_TST_INFO
*d2i_TS_TST_INFO_bio(BIO
*bp
, TS_TST_INFO
**a
)
151 return ASN1_d2i_bio_of(TS_TST_INFO
, TS_TST_INFO_new
, d2i_TS_TST_INFO
, bp
,
155 int i2d_TS_TST_INFO_bio(BIO
*bp
, TS_TST_INFO
*a
)
157 return ASN1_i2d_bio_of_const(TS_TST_INFO
, i2d_TS_TST_INFO
, bp
, a
);
159 #ifndef OPENSSL_NO_STDIO
160 TS_TST_INFO
*d2i_TS_TST_INFO_fp(FILE *fp
, TS_TST_INFO
**a
)
162 return ASN1_d2i_fp_of(TS_TST_INFO
, TS_TST_INFO_new
, d2i_TS_TST_INFO
, fp
,
166 int i2d_TS_TST_INFO_fp(FILE *fp
, TS_TST_INFO
*a
)
168 return ASN1_i2d_fp_of_const(TS_TST_INFO
, i2d_TS_TST_INFO
, fp
, a
);
172 ASN1_SEQUENCE(TS_STATUS_INFO
) = {
173 ASN1_SIMPLE(TS_STATUS_INFO
, status
, ASN1_INTEGER
),
174 ASN1_SEQUENCE_OF_OPT(TS_STATUS_INFO
, text
, ASN1_UTF8STRING
),
175 ASN1_OPT(TS_STATUS_INFO
, failure_info
, ASN1_BIT_STRING
)
176 } ASN1_SEQUENCE_END(TS_STATUS_INFO
)
178 IMPLEMENT_ASN1_FUNCTIONS_const(TS_STATUS_INFO
)
179 IMPLEMENT_ASN1_DUP_FUNCTION(TS_STATUS_INFO
)
181 static int ts_resp_set_tst_info(TS_RESP
*a
)
185 status
= ASN1_INTEGER_get(a
->status_info
->status
);
188 if (status
!= 0 && status
!= 1) {
189 TSerr(TS_F_TS_RESP_SET_TST_INFO
, TS_R_TOKEN_PRESENT
);
192 if (a
->tst_info
!= NULL
)
193 TS_TST_INFO_free(a
->tst_info
);
194 a
->tst_info
= PKCS7_to_TS_TST_INFO(a
->token
);
196 TSerr(TS_F_TS_RESP_SET_TST_INFO
,
197 TS_R_PKCS7_TO_TS_TST_INFO_FAILED
);
200 } else if (status
== 0 || status
== 1) {
201 TSerr(TS_F_TS_RESP_SET_TST_INFO
, TS_R_TOKEN_NOT_PRESENT
);
208 static int ts_resp_cb(int op
, ASN1_VALUE
**pval
, const ASN1_ITEM
*it
,
211 TS_RESP
*ts_resp
= (TS_RESP
*)*pval
;
212 if (op
== ASN1_OP_NEW_POST
) {
213 ts_resp
->tst_info
= NULL
;
214 } else if (op
== ASN1_OP_FREE_POST
) {
215 if (ts_resp
->tst_info
!= NULL
)
216 TS_TST_INFO_free(ts_resp
->tst_info
);
217 } else if (op
== ASN1_OP_D2I_POST
) {
218 if (ts_resp_set_tst_info(ts_resp
) == 0)
224 ASN1_SEQUENCE_cb(TS_RESP
, ts_resp_cb
) = {
225 ASN1_SIMPLE(TS_RESP
, status_info
, TS_STATUS_INFO
),
226 ASN1_OPT(TS_RESP
, token
, PKCS7
),
227 } ASN1_SEQUENCE_END_cb(TS_RESP
, TS_RESP
)
229 IMPLEMENT_ASN1_FUNCTIONS_const(TS_RESP
)
231 IMPLEMENT_ASN1_DUP_FUNCTION(TS_RESP
)
233 TS_RESP
*d2i_TS_RESP_bio(BIO
*bp
, TS_RESP
**a
)
235 return ASN1_d2i_bio_of(TS_RESP
, TS_RESP_new
, d2i_TS_RESP
, bp
, a
);
238 int i2d_TS_RESP_bio(BIO
*bp
, TS_RESP
*a
)
240 return ASN1_i2d_bio_of_const(TS_RESP
, i2d_TS_RESP
, bp
, a
);
242 #ifndef OPENSSL_NO_STDIO
243 TS_RESP
*d2i_TS_RESP_fp(FILE *fp
, TS_RESP
**a
)
245 return ASN1_d2i_fp_of(TS_RESP
, TS_RESP_new
, d2i_TS_RESP
, fp
, a
);
248 int i2d_TS_RESP_fp(FILE *fp
, TS_RESP
*a
)
250 return ASN1_i2d_fp_of_const(TS_RESP
, i2d_TS_RESP
, fp
, a
);
254 ASN1_SEQUENCE(ESS_ISSUER_SERIAL
) = {
255 ASN1_SEQUENCE_OF(ESS_ISSUER_SERIAL
, issuer
, GENERAL_NAME
),
256 ASN1_SIMPLE(ESS_ISSUER_SERIAL
, serial
, ASN1_INTEGER
)
257 } ASN1_SEQUENCE_END(ESS_ISSUER_SERIAL
)
259 IMPLEMENT_ASN1_FUNCTIONS_const(ESS_ISSUER_SERIAL
)
260 IMPLEMENT_ASN1_DUP_FUNCTION(ESS_ISSUER_SERIAL
)
262 ASN1_SEQUENCE(ESS_CERT_ID
) = {
263 ASN1_SIMPLE(ESS_CERT_ID
, hash
, ASN1_OCTET_STRING
),
264 ASN1_OPT(ESS_CERT_ID
, issuer_serial
, ESS_ISSUER_SERIAL
)
265 } ASN1_SEQUENCE_END(ESS_CERT_ID
)
267 IMPLEMENT_ASN1_FUNCTIONS_const(ESS_CERT_ID
)
268 IMPLEMENT_ASN1_DUP_FUNCTION(ESS_CERT_ID
)
270 ASN1_SEQUENCE(ESS_SIGNING_CERT
) = {
271 ASN1_SEQUENCE_OF(ESS_SIGNING_CERT
, cert_ids
, ESS_CERT_ID
),
272 ASN1_SEQUENCE_OF_OPT(ESS_SIGNING_CERT
, policy_info
, POLICYINFO
)
273 } ASN1_SEQUENCE_END(ESS_SIGNING_CERT
)
275 IMPLEMENT_ASN1_FUNCTIONS_const(ESS_SIGNING_CERT
)
276 IMPLEMENT_ASN1_DUP_FUNCTION(ESS_SIGNING_CERT
)
278 /* Getting encapsulated TS_TST_INFO object from PKCS7. */
279 TS_TST_INFO
*PKCS7_to_TS_TST_INFO(PKCS7
*token
)
281 PKCS7_SIGNED
*pkcs7_signed
;
283 ASN1_TYPE
*tst_info_wrapper
;
284 ASN1_OCTET_STRING
*tst_info_der
;
285 const unsigned char *p
;
287 if (!PKCS7_type_is_signed(token
)) {
288 TSerr(TS_F_PKCS7_TO_TS_TST_INFO
, TS_R_BAD_PKCS7_TYPE
);
292 /* Content must be present. */
293 if (PKCS7_get_detached(token
)) {
294 TSerr(TS_F_PKCS7_TO_TS_TST_INFO
, TS_R_DETACHED_CONTENT
);
298 /* We have a signed data with content. */
299 pkcs7_signed
= token
->d
.sign
;
300 enveloped
= pkcs7_signed
->contents
;
301 if (OBJ_obj2nid(enveloped
->type
) != NID_id_smime_ct_TSTInfo
) {
302 TSerr(TS_F_PKCS7_TO_TS_TST_INFO
, TS_R_BAD_PKCS7_TYPE
);
306 /* We have a DER encoded TST_INFO as the signed data. */
307 tst_info_wrapper
= enveloped
->d
.other
;
308 if (tst_info_wrapper
->type
!= V_ASN1_OCTET_STRING
) {
309 TSerr(TS_F_PKCS7_TO_TS_TST_INFO
, TS_R_BAD_TYPE
);
313 /* We have the correct ASN1_OCTET_STRING type. */
314 tst_info_der
= tst_info_wrapper
->value
.octet_string
;
315 /* At last, decode the TST_INFO. */
316 p
= tst_info_der
->data
;
317 return d2i_TS_TST_INFO(NULL
, &p
, tst_info_der
->length
);