identification: Add support for dmdName RDN (2.5.4.54)

It's listed in RFC 2256 but was later removed with RFC 4519, but there
are still some certs that use it.

Closes strongswan/strongswan#43.

diff --git a/src/libstrongswan/asn1/oid.txt b/src/libstrongswan/asn1/oid.txt
index b5ec15f3c7ca40fa8bf659d8ccd4560bb8856746..eeeb234c7e7057cd7f78dc2edf412f397260bf00 100644 (file)
--- a/src/libstrongswan/asn1/oid.txt
+++ b/src/libstrongswan/asn1/oid.txt
@@ -34,6 +34,7 @@
     0x2B                     "I"                                               OID_INITIALS
     0x2D                     "ID"                                              OID_UNIQUE_IDENTIFIER
     0x2E                     "dnQualifier"                             OID_DN_QUALIFIER
+    0x36                     "dmdName"                                 OID_DMD_NAME
     0x41                     "pseudonym"                               OID_PSEUDONYM
     0x48                     "role"                                            OID_ROLE
   0x1D                       "id-ce"

diff --git a/src/libstrongswan/utils/identification.c b/src/libstrongswan/utils/identification.c
index 2b2e907f0f3a39ce0ac3f5029f4c14cdff7ef12f..9084335bbfc09e6393f203d8053d84969fd2d9d6 100644 (file)
--- a/src/libstrongswan/utils/identification.c
+++ b/src/libstrongswan/utils/identification.c
@@ -80,6 +80,7 @@ static const x501rdn_t x501rdns[] = {
        {"G",                                   OID_GIVEN_NAME,                         ASN1_PRINTABLESTRING},
        {"I",                                   OID_INITIALS,                           ASN1_PRINTABLESTRING},
        {"dnQualifier",                 OID_DN_QUALIFIER,                       ASN1_PRINTABLESTRING},
+       {"dmdName",                     OID_DMD_NAME,                           ASN1_PRINTABLESTRING},
        {"pseudonym",                   OID_PSEUDONYM,                          ASN1_PRINTABLESTRING},
        {"ID",                                  OID_UNIQUE_IDENTIFIER,          ASN1_PRINTABLESTRING},
        {"EN",                                  OID_EMPLOYEE_NUMBER,            ASN1_PRINTABLESTRING},
@@ -220,6 +221,7 @@ METHOD(enumerator_t, rdn_part_enumerate, bool,
                {OID_GIVEN_NAME,                ID_PART_RDN_G},
                {OID_INITIALS,                  ID_PART_RDN_I},
                {OID_DN_QUALIFIER,              ID_PART_RDN_DNQ},
+               {OID_DMD_NAME,                  ID_PART_RDN_DMDN},
                {OID_PSEUDONYM,                 ID_PART_RDN_PN},
                {OID_UNIQUE_IDENTIFIER, ID_PART_RDN_ID},
                {OID_EMAIL_ADDRESS,             ID_PART_RDN_E},

diff --git a/src/libstrongswan/utils/identification.h b/src/libstrongswan/utils/identification.h
index 51d13249179b0b4eef6e8d65c88cb89bd8ad46e9..206f7c3e07a59cd34eaddc69f634286b1117c3a6 100644 (file)
--- a/src/libstrongswan/utils/identification.h
+++ b/src/libstrongswan/utils/identification.h
@@ -168,6 +168,8 @@ enum id_part_t {
        ID_PART_RDN_I,
        /** DN Qualifier RDN of a DN */
        ID_PART_RDN_DNQ,
+       /** dmdName RDN of a DN */
+       ID_PART_RDN_DMDN,
        /** Pseudonym RDN of a DN */
        ID_PART_RDN_PN,
        /** UniqueIdentifier RDN of a DN */