2 * Copyright 1995-2016 The OpenSSL Project Authors. All Rights Reserved.
4 * Licensed under the OpenSSL license (the "License"). You may not use
5 * this file except in compliance with the License. You can obtain a copy
6 * in the file LICENSE in the source distribution or at
7 * https://www.openssl.org/source/license.html
11 #include <openssl/stack.h>
12 #include "internal/cryptlib.h"
13 #include <openssl/asn1.h>
14 #include <openssl/objects.h>
15 #include <openssl/evp.h>
16 #include <openssl/x509.h>
17 #include "internal/x509_int.h"
19 int X509_NAME_get_text_by_NID(X509_NAME
*name
, int nid
, char *buf
, int len
)
23 obj
= OBJ_nid2obj(nid
);
26 return (X509_NAME_get_text_by_OBJ(name
, obj
, buf
, len
));
29 int X509_NAME_get_text_by_OBJ(X509_NAME
*name
, const ASN1_OBJECT
*obj
, char *buf
,
33 const ASN1_STRING
*data
;
35 i
= X509_NAME_get_index_by_OBJ(name
, obj
, -1);
38 data
= X509_NAME_ENTRY_get_data(X509_NAME_get_entry(name
, i
));
39 i
= (data
->length
> (len
- 1)) ? (len
- 1) : data
->length
;
41 return (data
->length
);
42 memcpy(buf
, data
->data
, i
);
47 int X509_NAME_entry_count(const X509_NAME
*name
)
51 return (sk_X509_NAME_ENTRY_num(name
->entries
));
54 int X509_NAME_get_index_by_NID(X509_NAME
*name
, int nid
, int lastpos
)
58 obj
= OBJ_nid2obj(nid
);
61 return (X509_NAME_get_index_by_OBJ(name
, obj
, lastpos
));
64 /* NOTE: you should be passing -1, not 0 as lastpos */
65 int X509_NAME_get_index_by_OBJ(X509_NAME
*name
, const ASN1_OBJECT
*obj
, int lastpos
)
69 STACK_OF(X509_NAME_ENTRY
) *sk
;
76 n
= sk_X509_NAME_ENTRY_num(sk
);
77 for (lastpos
++; lastpos
< n
; lastpos
++) {
78 ne
= sk_X509_NAME_ENTRY_value(sk
, lastpos
);
79 if (OBJ_cmp(ne
->object
, obj
) == 0)
85 X509_NAME_ENTRY
*X509_NAME_get_entry(const X509_NAME
*name
, int loc
)
87 if (name
== NULL
|| sk_X509_NAME_ENTRY_num(name
->entries
) <= loc
91 return (sk_X509_NAME_ENTRY_value(name
->entries
, loc
));
94 X509_NAME_ENTRY
*X509_NAME_delete_entry(X509_NAME
*name
, int loc
)
97 int i
, n
, set_prev
, set_next
;
98 STACK_OF(X509_NAME_ENTRY
) *sk
;
100 if (name
== NULL
|| sk_X509_NAME_ENTRY_num(name
->entries
) <= loc
104 ret
= sk_X509_NAME_ENTRY_delete(sk
, loc
);
105 n
= sk_X509_NAME_ENTRY_num(sk
);
110 /* else we need to fixup the set field */
112 set_prev
= (sk_X509_NAME_ENTRY_value(sk
, loc
- 1))->set
;
114 set_prev
= ret
->set
- 1;
115 set_next
= sk_X509_NAME_ENTRY_value(sk
, loc
)->set
;
118 * set_prev is the previous set
119 * set is the current set
120 * set_next is the following
121 * prev 1 1 1 1 1 1 1 1
123 * next 1 1 2 2 2 2 3 2
124 * so basically only if prev and next differ by 2, then
125 * re-number down by 1
127 if (set_prev
+ 1 < set_next
)
128 for (i
= loc
; i
< n
; i
++)
129 sk_X509_NAME_ENTRY_value(sk
, i
)->set
--;
133 int X509_NAME_add_entry_by_OBJ(X509_NAME
*name
, const ASN1_OBJECT
*obj
, int type
,
134 const unsigned char *bytes
, int len
, int loc
,
139 ne
= X509_NAME_ENTRY_create_by_OBJ(NULL
, obj
, type
, bytes
, len
);
142 ret
= X509_NAME_add_entry(name
, ne
, loc
, set
);
143 X509_NAME_ENTRY_free(ne
);
147 int X509_NAME_add_entry_by_NID(X509_NAME
*name
, int nid
, int type
,
148 const unsigned char *bytes
, int len
, int loc
,
153 ne
= X509_NAME_ENTRY_create_by_NID(NULL
, nid
, type
, bytes
, len
);
156 ret
= X509_NAME_add_entry(name
, ne
, loc
, set
);
157 X509_NAME_ENTRY_free(ne
);
161 int X509_NAME_add_entry_by_txt(X509_NAME
*name
, const char *field
, int type
,
162 const unsigned char *bytes
, int len
, int loc
,
167 ne
= X509_NAME_ENTRY_create_by_txt(NULL
, field
, type
, bytes
, len
);
170 ret
= X509_NAME_add_entry(name
, ne
, loc
, set
);
171 X509_NAME_ENTRY_free(ne
);
176 * if set is -1, append to previous set, 0 'a new one', and 1, prepend to the
177 * guy we are about to stomp on.
179 int X509_NAME_add_entry(X509_NAME
*name
, const X509_NAME_ENTRY
*ne
, int loc
,
182 X509_NAME_ENTRY
*new_name
= NULL
;
184 STACK_OF(X509_NAME_ENTRY
) *sk
;
189 n
= sk_X509_NAME_ENTRY_num(sk
);
202 set
= sk_X509_NAME_ENTRY_value(sk
, loc
- 1)->set
;
205 } else { /* if (set >= 0) */
209 set
= sk_X509_NAME_ENTRY_value(sk
, loc
- 1)->set
+ 1;
213 set
= sk_X509_NAME_ENTRY_value(sk
, loc
)->set
;
214 inc
= (set
== 0) ? 1 : 0;
218 * X509_NAME_ENTRY_dup is ASN1 generated code, that can't be easily
219 * const'ified; harmless cast as dup() don't modify its input.
221 if ((new_name
= X509_NAME_ENTRY_dup((X509_NAME_ENTRY
*)ne
)) == NULL
)
224 if (!sk_X509_NAME_ENTRY_insert(sk
, new_name
, loc
)) {
225 X509err(X509_F_X509_NAME_ADD_ENTRY
, ERR_R_MALLOC_FAILURE
);
229 n
= sk_X509_NAME_ENTRY_num(sk
);
230 for (i
= loc
+ 1; i
< n
; i
++)
231 sk_X509_NAME_ENTRY_value(sk
, i
- 1)->set
+= 1;
235 X509_NAME_ENTRY_free(new_name
);
239 X509_NAME_ENTRY
*X509_NAME_ENTRY_create_by_txt(X509_NAME_ENTRY
**ne
,
240 const char *field
, int type
,
241 const unsigned char *bytes
,
245 X509_NAME_ENTRY
*nentry
;
247 obj
= OBJ_txt2obj(field
, 0);
249 X509err(X509_F_X509_NAME_ENTRY_CREATE_BY_TXT
,
250 X509_R_INVALID_FIELD_NAME
);
251 ERR_add_error_data(2, "name=", field
);
254 nentry
= X509_NAME_ENTRY_create_by_OBJ(ne
, obj
, type
, bytes
, len
);
255 ASN1_OBJECT_free(obj
);
259 X509_NAME_ENTRY
*X509_NAME_ENTRY_create_by_NID(X509_NAME_ENTRY
**ne
, int nid
,
261 const unsigned char *bytes
,
265 X509_NAME_ENTRY
*nentry
;
267 obj
= OBJ_nid2obj(nid
);
269 X509err(X509_F_X509_NAME_ENTRY_CREATE_BY_NID
, X509_R_UNKNOWN_NID
);
272 nentry
= X509_NAME_ENTRY_create_by_OBJ(ne
, obj
, type
, bytes
, len
);
273 ASN1_OBJECT_free(obj
);
277 X509_NAME_ENTRY
*X509_NAME_ENTRY_create_by_OBJ(X509_NAME_ENTRY
**ne
,
278 const ASN1_OBJECT
*obj
, int type
,
279 const unsigned char *bytes
,
282 X509_NAME_ENTRY
*ret
;
284 if ((ne
== NULL
) || (*ne
== NULL
)) {
285 if ((ret
= X509_NAME_ENTRY_new()) == NULL
)
290 if (!X509_NAME_ENTRY_set_object(ret
, obj
))
292 if (!X509_NAME_ENTRY_set_data(ret
, type
, bytes
, len
))
295 if ((ne
!= NULL
) && (*ne
== NULL
))
299 if ((ne
== NULL
) || (ret
!= *ne
))
300 X509_NAME_ENTRY_free(ret
);
304 int X509_NAME_ENTRY_set_object(X509_NAME_ENTRY
*ne
, const ASN1_OBJECT
*obj
)
306 if ((ne
== NULL
) || (obj
== NULL
)) {
307 X509err(X509_F_X509_NAME_ENTRY_SET_OBJECT
,
308 ERR_R_PASSED_NULL_PARAMETER
);
311 ASN1_OBJECT_free(ne
->object
);
312 ne
->object
= OBJ_dup(obj
);
313 return ((ne
->object
== NULL
) ? 0 : 1);
316 int X509_NAME_ENTRY_set_data(X509_NAME_ENTRY
*ne
, int type
,
317 const unsigned char *bytes
, int len
)
321 if ((ne
== NULL
) || ((bytes
== NULL
) && (len
!= 0)))
323 if ((type
> 0) && (type
& MBSTRING_FLAG
))
324 return ASN1_STRING_set_by_NID(&ne
->value
, bytes
,
326 OBJ_obj2nid(ne
->object
)) ? 1 : 0;
328 len
= strlen((const char *)bytes
);
329 i
= ASN1_STRING_set(ne
->value
, bytes
, len
);
332 if (type
!= V_ASN1_UNDEF
) {
333 if (type
== V_ASN1_APP_CHOOSE
)
334 ne
->value
->type
= ASN1_PRINTABLE_type(bytes
, len
);
336 ne
->value
->type
= type
;
341 ASN1_OBJECT
*X509_NAME_ENTRY_get_object(const X509_NAME_ENTRY
*ne
)
348 ASN1_STRING
*X509_NAME_ENTRY_get_data(const X509_NAME_ENTRY
*ne
)
355 int X509_NAME_ENTRY_set(const X509_NAME_ENTRY
*ne
)