]>
Commit | Line | Data |
---|---|---|
d02b48c6 | 1 | /* crypto/asn1/t_req.c */ |
58964a49 | 2 | /* Copyright (C) 1995-1998 Eric Young (eay@cryptsoft.com) |
d02b48c6 RE |
3 | * All rights reserved. |
4 | * | |
5 | * This package is an SSL implementation written | |
6 | * by Eric Young (eay@cryptsoft.com). | |
7 | * The implementation was written so as to conform with Netscapes SSL. | |
40720ce3 | 8 | * |
d02b48c6 RE |
9 | * This library is free for commercial and non-commercial use as long as |
10 | * the following conditions are aheared to. The following conditions | |
11 | * apply to all code found in this distribution, be it the RC4, RSA, | |
12 | * lhash, DES, etc., code; not just the SSL code. The SSL documentation | |
13 | * included with this distribution is covered by the same copyright terms | |
14 | * except that the holder is Tim Hudson (tjh@cryptsoft.com). | |
40720ce3 | 15 | * |
d02b48c6 RE |
16 | * Copyright remains Eric Young's, and as such any Copyright notices in |
17 | * the code are not to be removed. | |
18 | * If this package is used in a product, Eric Young should be given attribution | |
19 | * as the author of the parts of the library used. | |
20 | * This can be in the form of a textual message at program startup or | |
21 | * in documentation (online or textual) provided with the package. | |
40720ce3 | 22 | * |
d02b48c6 RE |
23 | * Redistribution and use in source and binary forms, with or without |
24 | * modification, are permitted provided that the following conditions | |
25 | * are met: | |
26 | * 1. Redistributions of source code must retain the copyright | |
27 | * notice, this list of conditions and the following disclaimer. | |
28 | * 2. Redistributions in binary form must reproduce the above copyright | |
29 | * notice, this list of conditions and the following disclaimer in the | |
30 | * documentation and/or other materials provided with the distribution. | |
31 | * 3. All advertising materials mentioning features or use of this software | |
32 | * must display the following acknowledgement: | |
33 | * "This product includes cryptographic software written by | |
34 | * Eric Young (eay@cryptsoft.com)" | |
35 | * The word 'cryptographic' can be left out if the rouines from the library | |
36 | * being used are not cryptographic related :-). | |
40720ce3 | 37 | * 4. If you include any Windows specific code (or a derivative thereof) from |
d02b48c6 RE |
38 | * the apps directory (application code) you must include an acknowledgement: |
39 | * "This product includes software written by Tim Hudson (tjh@cryptsoft.com)" | |
40720ce3 | 40 | * |
d02b48c6 RE |
41 | * THIS SOFTWARE IS PROVIDED BY ERIC YOUNG ``AS IS'' AND |
42 | * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE | |
43 | * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE | |
44 | * ARE DISCLAIMED. IN NO EVENT SHALL THE AUTHOR OR CONTRIBUTORS BE LIABLE | |
45 | * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL | |
46 | * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS | |
47 | * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) | |
48 | * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT | |
49 | * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY | |
50 | * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF | |
51 | * SUCH DAMAGE. | |
40720ce3 | 52 | * |
d02b48c6 RE |
53 | * The licence and distribution terms for any publically available version or |
54 | * derivative of this code cannot be changed. i.e. this code cannot simply be | |
55 | * copied and put under another distribution licence | |
56 | * [including the GNU Public Licence.] | |
57 | */ | |
58 | ||
59 | #include <stdio.h> | |
60 | #include "cryptlib.h" | |
ec577822 BM |
61 | #include <openssl/buffer.h> |
62 | #include <openssl/bn.h> | |
63 | #include <openssl/objects.h> | |
64 | #include <openssl/x509.h> | |
87c49f62 | 65 | #include <openssl/x509v3.h> |
4913b88f | 66 | #ifndef OPENSSL_NO_RSA |
40720ce3 | 67 | # include <openssl/rsa.h> |
4913b88f NL |
68 | #endif |
69 | #ifndef OPENSSL_NO_DSA | |
40720ce3 | 70 | # include <openssl/dsa.h> |
4913b88f | 71 | #endif |
d02b48c6 | 72 | |
cf1b7d96 | 73 | #ifndef OPENSSL_NO_FP_API |
6b691a5c | 74 | int X509_REQ_print_fp(FILE *fp, X509_REQ *x) |
40720ce3 MC |
75 | { |
76 | BIO *b; | |
77 | int ret; | |
d02b48c6 | 78 | |
40720ce3 MC |
79 | if ((b = BIO_new(BIO_s_file())) == NULL) { |
80 | X509err(X509_F_X509_REQ_PRINT_FP, ERR_R_BUF_LIB); | |
81 | return (0); | |
82 | } | |
83 | BIO_set_fp(b, fp, BIO_NOCLOSE); | |
84 | ret = X509_REQ_print(b, x); | |
85 | BIO_free(b); | |
86 | return (ret); | |
87 | } | |
d02b48c6 RE |
88 | #endif |
89 | ||
40720ce3 MC |
90 | int X509_REQ_print_ex(BIO *bp, X509_REQ *x, unsigned long nmflags, |
91 | unsigned long cflag) | |
92 | { | |
93 | unsigned long l; | |
94 | int i; | |
95 | const char *neg; | |
96 | X509_REQ_INFO *ri; | |
97 | EVP_PKEY *pkey; | |
98 | STACK_OF(X509_ATTRIBUTE) *sk; | |
99 | STACK_OF(X509_EXTENSION) *exts; | |
100 | char mlch = ' '; | |
101 | int nmindent = 0; | |
fc85ac20 | 102 | |
40720ce3 MC |
103 | if ((nmflags & XN_FLAG_SEP_MASK) == XN_FLAG_SEP_MULTILINE) { |
104 | mlch = '\n'; | |
105 | nmindent = 12; | |
106 | } | |
fc85ac20 | 107 | |
40720ce3 MC |
108 | if (nmflags == X509_FLAG_COMPAT) |
109 | nmindent = 16; | |
d02b48c6 | 110 | |
40720ce3 MC |
111 | ri = x->req_info; |
112 | if (!(cflag & X509_FLAG_NO_HEADER)) { | |
113 | if (BIO_write(bp, "Certificate Request:\n", 21) <= 0) | |
114 | goto err; | |
115 | if (BIO_write(bp, " Data:\n", 10) <= 0) | |
116 | goto err; | |
117 | } | |
118 | if (!(cflag & X509_FLAG_NO_VERSION)) { | |
119 | neg = (ri->version->type == V_ASN1_NEG_INTEGER) ? "-" : ""; | |
120 | l = 0; | |
121 | for (i = 0; i < ri->version->length; i++) { | |
122 | l <<= 8; | |
123 | l += ri->version->data[i]; | |
124 | } | |
125 | if (BIO_printf(bp, "%8sVersion: %s%lu (%s0x%lx)\n", "", neg, l, neg, | |
126 | l) <= 0) | |
127 | goto err; | |
128 | } | |
129 | if (!(cflag & X509_FLAG_NO_SUBJECT)) { | |
130 | if (BIO_printf(bp, " Subject:%c", mlch) <= 0) | |
131 | goto err; | |
132 | if (X509_NAME_print_ex(bp, ri->subject, nmindent, nmflags) < 0) | |
133 | goto err; | |
134 | if (BIO_write(bp, "\n", 1) <= 0) | |
135 | goto err; | |
136 | } | |
137 | if (!(cflag & X509_FLAG_NO_PUBKEY)) { | |
138 | if (BIO_write(bp, " Subject Public Key Info:\n", 33) <= 0) | |
139 | goto err; | |
140 | if (BIO_printf(bp, "%12sPublic Key Algorithm: ", "") <= 0) | |
141 | goto err; | |
142 | if (i2a_ASN1_OBJECT(bp, ri->pubkey->algor->algorithm) <= 0) | |
143 | goto err; | |
144 | if (BIO_puts(bp, "\n") <= 0) | |
145 | goto err; | |
fc85ac20 | 146 | |
40720ce3 MC |
147 | pkey = X509_REQ_get_pubkey(x); |
148 | if (pkey == NULL) { | |
149 | BIO_printf(bp, "%12sUnable to load Public Key\n", ""); | |
150 | ERR_print_errors(bp); | |
151 | } else | |
fc85ac20 | 152 | #ifndef OPENSSL_NO_RSA |
40720ce3 MC |
153 | if (pkey->type == EVP_PKEY_RSA) { |
154 | BIO_printf(bp, "%12sRSA Public Key: (%d bit)\n", "", | |
155 | BN_num_bits(pkey->pkey.rsa->n)); | |
156 | RSA_print(bp, pkey->pkey.rsa, 16); | |
157 | } else | |
fc85ac20 DSH |
158 | #endif |
159 | #ifndef OPENSSL_NO_DSA | |
40720ce3 MC |
160 | if (pkey->type == EVP_PKEY_DSA) { |
161 | BIO_printf(bp, "%12sDSA Public Key:\n", ""); | |
162 | DSA_print(bp, pkey->pkey.dsa, 16); | |
163 | } else | |
d02b48c6 | 164 | #endif |
14a7cfb3 | 165 | #ifndef OPENSSL_NO_EC |
40720ce3 MC |
166 | if (pkey->type == EVP_PKEY_EC) { |
167 | BIO_printf(bp, "%12sEC Public Key: \n", ""); | |
168 | EC_KEY_print(bp, pkey->pkey.ec, 16); | |
169 | } else | |
4d94ae00 | 170 | #endif |
40720ce3 | 171 | BIO_printf(bp, "%12sUnknown Public Key:\n", ""); |
4d94ae00 | 172 | |
40720ce3 MC |
173 | EVP_PKEY_free(pkey); |
174 | } | |
d02b48c6 | 175 | |
40720ce3 MC |
176 | if (!(cflag & X509_FLAG_NO_ATTRIBUTES)) { |
177 | /* may not be */ | |
178 | if (BIO_printf(bp, "%8sAttributes:\n", "") <= 0) | |
179 | goto err; | |
fc85ac20 | 180 | |
40720ce3 MC |
181 | sk = x->req_info->attributes; |
182 | if (sk_X509_ATTRIBUTE_num(sk) == 0) { | |
183 | if (BIO_printf(bp, "%12sa0:00\n", "") <= 0) | |
184 | goto err; | |
185 | } else { | |
186 | for (i = 0; i < sk_X509_ATTRIBUTE_num(sk); i++) { | |
187 | ASN1_TYPE *at; | |
188 | X509_ATTRIBUTE *a; | |
189 | ASN1_BIT_STRING *bs = NULL; | |
190 | ASN1_TYPE *t; | |
191 | int j, type = 0, count = 1, ii = 0; | |
fc85ac20 | 192 | |
40720ce3 MC |
193 | a = sk_X509_ATTRIBUTE_value(sk, i); |
194 | if (X509_REQ_extension_nid(OBJ_obj2nid(a->object))) | |
195 | continue; | |
196 | if (BIO_printf(bp, "%12s", "") <= 0) | |
197 | goto err; | |
198 | if ((j = i2a_ASN1_OBJECT(bp, a->object)) > 0) { | |
199 | if (a->single) { | |
200 | t = a->value.single; | |
201 | type = t->type; | |
202 | bs = t->value.bit_string; | |
203 | } else { | |
204 | ii = 0; | |
205 | count = sk_ASN1_TYPE_num(a->value.set); | |
206 | get_next: | |
207 | at = sk_ASN1_TYPE_value(a->value.set, ii); | |
208 | type = at->type; | |
209 | bs = at->value.asn1_string; | |
210 | } | |
211 | } | |
212 | for (j = 25 - j; j > 0; j--) | |
213 | if (BIO_write(bp, " ", 1) != 1) | |
214 | goto err; | |
215 | if (BIO_puts(bp, ":") <= 0) | |
216 | goto err; | |
217 | if ((type == V_ASN1_PRINTABLESTRING) || | |
218 | (type == V_ASN1_T61STRING) || | |
219 | (type == V_ASN1_IA5STRING)) { | |
220 | if (BIO_write(bp, (char *)bs->data, bs->length) | |
221 | != bs->length) | |
222 | goto err; | |
223 | BIO_puts(bp, "\n"); | |
224 | } else { | |
225 | BIO_puts(bp, "unable to print attribute\n"); | |
226 | } | |
227 | if (++ii < count) | |
228 | goto get_next; | |
229 | } | |
230 | } | |
231 | } | |
232 | if (!(cflag & X509_FLAG_NO_EXTENSIONS)) { | |
233 | exts = X509_REQ_get_extensions(x); | |
234 | if (exts) { | |
235 | BIO_printf(bp, "%8sRequested Extensions:\n", ""); | |
236 | for (i = 0; i < sk_X509_EXTENSION_num(exts); i++) { | |
237 | ASN1_OBJECT *obj; | |
238 | X509_EXTENSION *ex; | |
239 | int j; | |
240 | ex = sk_X509_EXTENSION_value(exts, i); | |
241 | if (BIO_printf(bp, "%12s", "") <= 0) | |
242 | goto err; | |
243 | obj = X509_EXTENSION_get_object(ex); | |
244 | i2a_ASN1_OBJECT(bp, obj); | |
245 | j = X509_EXTENSION_get_critical(ex); | |
246 | if (BIO_printf(bp, ": %s\n", j ? "critical" : "") <= 0) | |
247 | goto err; | |
248 | if (!X509V3_EXT_print(bp, ex, cflag, 16)) { | |
249 | BIO_printf(bp, "%16s", ""); | |
250 | M_ASN1_OCTET_STRING_print(bp, ex->value); | |
251 | } | |
252 | if (BIO_write(bp, "\n", 1) <= 0) | |
253 | goto err; | |
254 | } | |
255 | sk_X509_EXTENSION_pop_free(exts, X509_EXTENSION_free); | |
256 | } | |
257 | } | |
d02b48c6 | 258 | |
40720ce3 MC |
259 | if (!(cflag & X509_FLAG_NO_SIGDUMP)) { |
260 | if (!X509_signature_print(bp, x->sig_alg, x->signature)) | |
261 | goto err; | |
262 | } | |
d02b48c6 | 263 | |
40720ce3 MC |
264 | return (1); |
265 | err: | |
266 | X509err(X509_F_X509_REQ_PRINT_EX, ERR_R_BUF_LIB); | |
267 | return (0); | |
268 | } | |
fc85ac20 DSH |
269 | |
270 | int X509_REQ_print(BIO *bp, X509_REQ *x) | |
40720ce3 MC |
271 | { |
272 | return X509_REQ_print_ex(bp, x, XN_FLAG_COMPAT, X509_FLAG_COMPAT); | |
273 | } |