]> git.ipfire.org Git - thirdparty/openssl.git/blame - crypto/x509/t_req.c
Fix undefined behaviour when printing the X509 and CRL version
[thirdparty/openssl.git] / crypto / x509 / t_req.c
CommitLineData
b1322259
RS
1/*
2 * Copyright 1995-2016 The OpenSSL Project Authors. All Rights Reserved.
d02b48c6 3 *
b1322259
RS
4 * Licensed under the OpenSSL license (the "License"). You may not use
5 * this file except in compliance with the License. You can obtain a copy
6 * in the file LICENSE in the source distribution or at
7 * https://www.openssl.org/source/license.html
d02b48c6
RE
8 */
9
10#include <stdio.h>
b39fc560 11#include "internal/cryptlib.h"
ec577822
BM
12#include <openssl/buffer.h>
13#include <openssl/bn.h>
14#include <openssl/objects.h>
15#include <openssl/x509.h>
87c49f62 16#include <openssl/x509v3.h>
3c27208f
RS
17#include <openssl/rsa.h>
18#include <openssl/dsa.h>
d02b48c6 19
4b618848 20#ifndef OPENSSL_NO_STDIO
6b691a5c 21int X509_REQ_print_fp(FILE *fp, X509_REQ *x)
0f113f3e
MC
22{
23 BIO *b;
24 int ret;
d02b48c6 25
0f113f3e
MC
26 if ((b = BIO_new(BIO_s_file())) == NULL) {
27 X509err(X509_F_X509_REQ_PRINT_FP, ERR_R_BUF_LIB);
28 return (0);
29 }
30 BIO_set_fp(b, fp, BIO_NOCLOSE);
31 ret = X509_REQ_print(b, x);
32 BIO_free(b);
33 return (ret);
34}
d02b48c6
RE
35#endif
36
0f113f3e
MC
37int X509_REQ_print_ex(BIO *bp, X509_REQ *x, unsigned long nmflags,
38 unsigned long cflag)
39{
40 long l;
41 int i;
0f113f3e 42 EVP_PKEY *pkey;
0f113f3e
MC
43 STACK_OF(X509_EXTENSION) *exts;
44 char mlch = ' ';
45 int nmindent = 0;
fc85ac20 46
0f113f3e
MC
47 if ((nmflags & XN_FLAG_SEP_MASK) == XN_FLAG_SEP_MULTILINE) {
48 mlch = '\n';
49 nmindent = 12;
50 }
fc85ac20 51
0f113f3e
MC
52 if (nmflags == X509_FLAG_COMPAT)
53 nmindent = 16;
d02b48c6 54
0f113f3e
MC
55 if (!(cflag & X509_FLAG_NO_HEADER)) {
56 if (BIO_write(bp, "Certificate Request:\n", 21) <= 0)
57 goto err;
58 if (BIO_write(bp, " Data:\n", 10) <= 0)
59 goto err;
60 }
61 if (!(cflag & X509_FLAG_NO_VERSION)) {
62 l = X509_REQ_get_version(x);
c2ce477f
KR
63 if (l >= 0 && l <= 2) {
64 if (BIO_printf(bp, "%8sVersion: %ld (0x%lx)\n", "", l + 1, (unsigned long)l) <= 0)
65 goto err;
66 } else {
67 if (BIO_printf(bp, "%8sVersion: Unknown (%ld)\n", "", l) <= 0)
68 goto err;
69 }
0f113f3e
MC
70 }
71 if (!(cflag & X509_FLAG_NO_SUBJECT)) {
72 if (BIO_printf(bp, " Subject:%c", mlch) <= 0)
73 goto err;
7880e143
DSH
74 if (X509_NAME_print_ex(bp, X509_REQ_get_subject_name(x),
75 nmindent, nmflags) < 0)
0f113f3e
MC
76 goto err;
77 if (BIO_write(bp, "\n", 1) <= 0)
78 goto err;
79 }
80 if (!(cflag & X509_FLAG_NO_PUBKEY)) {
1f143e08
DSH
81 X509_PUBKEY *xpkey;
82 ASN1_OBJECT *koid;
0f113f3e
MC
83 if (BIO_write(bp, " Subject Public Key Info:\n", 33) <= 0)
84 goto err;
85 if (BIO_printf(bp, "%12sPublic Key Algorithm: ", "") <= 0)
86 goto err;
1f143e08
DSH
87 xpkey = X509_REQ_get_X509_PUBKEY(x);
88 X509_PUBKEY_get0_param(&koid, NULL, NULL, NULL, xpkey);
89 if (i2a_ASN1_OBJECT(bp, koid) <= 0)
0f113f3e
MC
90 goto err;
91 if (BIO_puts(bp, "\n") <= 0)
92 goto err;
fc85ac20 93
1c72f70d 94 pkey = X509_REQ_get0_pubkey(x);
0f113f3e
MC
95 if (pkey == NULL) {
96 BIO_printf(bp, "%12sUnable to load Public Key\n", "");
97 ERR_print_errors(bp);
98 } else {
99 EVP_PKEY_print_public(bp, pkey, 16, NULL);
0f113f3e
MC
100 }
101 }
d02b48c6 102
0f113f3e
MC
103 if (!(cflag & X509_FLAG_NO_ATTRIBUTES)) {
104 /* may not be */
105 if (BIO_printf(bp, "%8sAttributes:\n", "") <= 0)
106 goto err;
fc85ac20 107
7880e143 108 if (X509_REQ_get_attr_count(x) == 0) {
0f113f3e
MC
109 if (BIO_printf(bp, "%12sa0:00\n", "") <= 0)
110 goto err;
111 } else {
7880e143 112 for (i = 0; i < X509_REQ_get_attr_count(x); i++) {
0f113f3e
MC
113 ASN1_TYPE *at;
114 X509_ATTRIBUTE *a;
115 ASN1_BIT_STRING *bs = NULL;
9b0a4531 116 ASN1_OBJECT *aobj;
0f113f3e 117 int j, type = 0, count = 1, ii = 0;
fc85ac20 118
7880e143 119 a = X509_REQ_get_attr(x, i);
9b0a4531
DSH
120 aobj = X509_ATTRIBUTE_get0_object(a);
121 if (X509_REQ_extension_nid(OBJ_obj2nid(aobj)))
0f113f3e
MC
122 continue;
123 if (BIO_printf(bp, "%12s", "") <= 0)
124 goto err;
9b0a4531
DSH
125 if ((j = i2a_ASN1_OBJECT(bp, aobj)) > 0) {
126 ii = 0;
127 count = X509_ATTRIBUTE_count(a);
0f113f3e 128 get_next:
9b0a4531
DSH
129 at = X509_ATTRIBUTE_get0_type(a, ii);
130 type = at->type;
131 bs = at->value.asn1_string;
0f113f3e
MC
132 }
133 for (j = 25 - j; j > 0; j--)
134 if (BIO_write(bp, " ", 1) != 1)
135 goto err;
136 if (BIO_puts(bp, ":") <= 0)
137 goto err;
138 if ((type == V_ASN1_PRINTABLESTRING) ||
139 (type == V_ASN1_T61STRING) ||
ec5b56f3 140 (type == V_ASN1_UTF8STRING) ||
0f113f3e
MC
141 (type == V_ASN1_IA5STRING)) {
142 if (BIO_write(bp, (char *)bs->data, bs->length)
143 != bs->length)
144 goto err;
145 BIO_puts(bp, "\n");
146 } else {
147 BIO_puts(bp, "unable to print attribute\n");
148 }
149 if (++ii < count)
150 goto get_next;
151 }
152 }
153 }
154 if (!(cflag & X509_FLAG_NO_EXTENSIONS)) {
155 exts = X509_REQ_get_extensions(x);
156 if (exts) {
157 BIO_printf(bp, "%8sRequested Extensions:\n", "");
158 for (i = 0; i < sk_X509_EXTENSION_num(exts); i++) {
159 ASN1_OBJECT *obj;
160 X509_EXTENSION *ex;
fbff6716 161 int critical;
0f113f3e
MC
162 ex = sk_X509_EXTENSION_value(exts, i);
163 if (BIO_printf(bp, "%12s", "") <= 0)
164 goto err;
165 obj = X509_EXTENSION_get_object(ex);
166 i2a_ASN1_OBJECT(bp, obj);
fbff6716
DM
167 critical = X509_EXTENSION_get_critical(ex);
168 if (BIO_printf(bp, ": %s\n", critical ? "critical" : "") <= 0)
0f113f3e
MC
169 goto err;
170 if (!X509V3_EXT_print(bp, ex, cflag, 16)) {
171 BIO_printf(bp, "%16s", "");
4903abd5 172 ASN1_STRING_print(bp, X509_EXTENSION_get_data(ex));
0f113f3e
MC
173 }
174 if (BIO_write(bp, "\n", 1) <= 0)
175 goto err;
176 }
177 sk_X509_EXTENSION_pop_free(exts, X509_EXTENSION_free);
178 }
179 }
d02b48c6 180
0f113f3e 181 if (!(cflag & X509_FLAG_NO_SIGDUMP)) {
11222483
DSH
182 const X509_ALGOR *sig_alg;
183 const ASN1_BIT_STRING *sig;
184 X509_REQ_get0_signature(x, &sig, &sig_alg);
7880e143 185 if (!X509_signature_print(bp, sig_alg, sig))
0f113f3e
MC
186 goto err;
187 }
d02b48c6 188
0f113f3e
MC
189 return (1);
190 err:
191 X509err(X509_F_X509_REQ_PRINT_EX, ERR_R_BUF_LIB);
192 return (0);
193}
fc85ac20
DSH
194
195int X509_REQ_print(BIO *bp, X509_REQ *x)
0f113f3e
MC
196{
197 return X509_REQ_print_ex(bp, x, XN_FLAG_COMPAT, X509_FLAG_COMPAT);
198}