]>
Commit | Line | Data |
---|---|---|
b1322259 RS |
1 | /* |
2 | * Copyright 1995-2016 The OpenSSL Project Authors. All Rights Reserved. | |
d02b48c6 | 3 | * |
b1322259 RS |
4 | * Licensed under the OpenSSL license (the "License"). You may not use |
5 | * this file except in compliance with the License. You can obtain a copy | |
6 | * in the file LICENSE in the source distribution or at | |
7 | * https://www.openssl.org/source/license.html | |
d02b48c6 RE |
8 | */ |
9 | ||
10 | #include <stdio.h> | |
b39fc560 | 11 | #include "internal/cryptlib.h" |
ec577822 BM |
12 | #include <openssl/buffer.h> |
13 | #include <openssl/bn.h> | |
ec577822 BM |
14 | #include <openssl/objects.h> |
15 | #include <openssl/x509.h> | |
16 | #include <openssl/x509v3.h> | |
5fe736e5 | 17 | #include "internal/asn1_int.h" |
d02b48c6 | 18 | |
4b618848 | 19 | #ifndef OPENSSL_NO_STDIO |
6b691a5c | 20 | int X509_print_fp(FILE *fp, X509 *x) |
0f113f3e MC |
21 | { |
22 | return X509_print_ex_fp(fp, x, XN_FLAG_COMPAT, X509_FLAG_COMPAT); | |
23 | } | |
d0c98589 | 24 | |
0f113f3e MC |
25 | int X509_print_ex_fp(FILE *fp, X509 *x, unsigned long nmflag, |
26 | unsigned long cflag) | |
27 | { | |
28 | BIO *b; | |
29 | int ret; | |
30 | ||
31 | if ((b = BIO_new(BIO_s_file())) == NULL) { | |
32 | X509err(X509_F_X509_PRINT_EX_FP, ERR_R_BUF_LIB); | |
33 | return (0); | |
34 | } | |
35 | BIO_set_fp(b, fp, BIO_NOCLOSE); | |
36 | ret = X509_print_ex(b, x, nmflag, cflag); | |
37 | BIO_free(b); | |
38 | return (ret); | |
39 | } | |
d02b48c6 RE |
40 | #endif |
41 | ||
6b691a5c | 42 | int X509_print(BIO *bp, X509 *x) |
d0c98589 | 43 | { |
0f113f3e | 44 | return X509_print_ex(bp, x, XN_FLAG_COMPAT, X509_FLAG_COMPAT); |
d0c98589 DSH |
45 | } |
46 | ||
0f113f3e MC |
47 | int X509_print_ex(BIO *bp, X509 *x, unsigned long nmflags, |
48 | unsigned long cflag) | |
49 | { | |
50 | long l; | |
51 | int ret = 0, i; | |
52 | char *m = NULL, mlch = ' '; | |
53 | int nmindent = 0; | |
0f113f3e MC |
54 | ASN1_INTEGER *bs; |
55 | EVP_PKEY *pkey = NULL; | |
56 | const char *neg; | |
57 | ||
58 | if ((nmflags & XN_FLAG_SEP_MASK) == XN_FLAG_SEP_MULTILINE) { | |
59 | mlch = '\n'; | |
60 | nmindent = 12; | |
61 | } | |
62 | ||
63 | if (nmflags == X509_FLAG_COMPAT) | |
64 | nmindent = 16; | |
65 | ||
0f113f3e MC |
66 | if (!(cflag & X509_FLAG_NO_HEADER)) { |
67 | if (BIO_write(bp, "Certificate:\n", 13) <= 0) | |
68 | goto err; | |
69 | if (BIO_write(bp, " Data:\n", 10) <= 0) | |
70 | goto err; | |
71 | } | |
72 | if (!(cflag & X509_FLAG_NO_VERSION)) { | |
73 | l = X509_get_version(x); | |
676befbe KR |
74 | if (l >= 0 && l <= 2) { |
75 | if (BIO_printf(bp, "%8sVersion: %ld (0x%lx)\n", "", l + 1, (unsigned long)l) <= 0) | |
76 | goto err; | |
77 | } else { | |
78 | if (BIO_printf(bp, "%8sVersion: Unknown (%ld)\n", "", l) <= 0) | |
79 | goto err; | |
80 | } | |
0f113f3e MC |
81 | } |
82 | if (!(cflag & X509_FLAG_NO_SERIAL)) { | |
83 | ||
84 | if (BIO_write(bp, " Serial Number:", 22) <= 0) | |
85 | goto err; | |
86 | ||
87 | bs = X509_get_serialNumber(x); | |
88 | if (bs->length <= (int)sizeof(long)) { | |
4336de0c DSH |
89 | ERR_set_mark(); |
90 | l = ASN1_INTEGER_get(bs); | |
91 | ERR_pop_to_mark(); | |
92 | } else { | |
93 | l = -1; | |
94 | } | |
95 | if (l != -1) { | |
244d7b28 | 96 | unsigned long ul; |
0f113f3e | 97 | if (bs->type == V_ASN1_NEG_INTEGER) { |
244d7b28 | 98 | ul = 0 - (unsigned long)l; |
0f113f3e MC |
99 | neg = "-"; |
100 | } else | |
244d7b28 | 101 | ul = l; |
0f113f3e | 102 | neg = ""; |
244d7b28 | 103 | if (BIO_printf(bp, " %s%lu (%s0x%lx)\n", neg, ul, neg, ul) <= 0) |
0f113f3e MC |
104 | goto err; |
105 | } else { | |
106 | neg = (bs->type == V_ASN1_NEG_INTEGER) ? " (Negative)" : ""; | |
107 | if (BIO_printf(bp, "\n%12s%s", "", neg) <= 0) | |
108 | goto err; | |
109 | ||
110 | for (i = 0; i < bs->length; i++) { | |
111 | if (BIO_printf(bp, "%02x%c", bs->data[i], | |
112 | ((i + 1 == bs->length) ? '\n' : ':')) <= 0) | |
113 | goto err; | |
114 | } | |
115 | } | |
116 | ||
117 | } | |
118 | ||
119 | if (!(cflag & X509_FLAG_NO_SIGNAME)) { | |
8900f3e3 | 120 | const X509_ALGOR *tsig_alg = X509_get0_tbs_sigalg(x); |
699f1635 | 121 | if (X509_signature_print(bp, tsig_alg, NULL) <= 0) |
0f113f3e | 122 | goto err; |
0f113f3e MC |
123 | } |
124 | ||
125 | if (!(cflag & X509_FLAG_NO_ISSUER)) { | |
126 | if (BIO_printf(bp, " Issuer:%c", mlch) <= 0) | |
127 | goto err; | |
128 | if (X509_NAME_print_ex(bp, X509_get_issuer_name(x), nmindent, nmflags) | |
129 | < 0) | |
130 | goto err; | |
131 | if (BIO_write(bp, "\n", 1) <= 0) | |
132 | goto err; | |
133 | } | |
134 | if (!(cflag & X509_FLAG_NO_VALIDITY)) { | |
135 | if (BIO_write(bp, " Validity\n", 17) <= 0) | |
136 | goto err; | |
137 | if (BIO_write(bp, " Not Before: ", 24) <= 0) | |
138 | goto err; | |
568ce3a5 | 139 | if (!ASN1_TIME_print(bp, X509_get0_notBefore(x))) |
0f113f3e MC |
140 | goto err; |
141 | if (BIO_write(bp, "\n Not After : ", 25) <= 0) | |
142 | goto err; | |
568ce3a5 | 143 | if (!ASN1_TIME_print(bp, X509_get0_notAfter(x))) |
0f113f3e MC |
144 | goto err; |
145 | if (BIO_write(bp, "\n", 1) <= 0) | |
146 | goto err; | |
147 | } | |
148 | if (!(cflag & X509_FLAG_NO_SUBJECT)) { | |
149 | if (BIO_printf(bp, " Subject:%c", mlch) <= 0) | |
150 | goto err; | |
151 | if (X509_NAME_print_ex | |
152 | (bp, X509_get_subject_name(x), nmindent, nmflags) < 0) | |
153 | goto err; | |
154 | if (BIO_write(bp, "\n", 1) <= 0) | |
155 | goto err; | |
156 | } | |
157 | if (!(cflag & X509_FLAG_NO_PUBKEY)) { | |
699f1635 DSH |
158 | X509_PUBKEY *xpkey = X509_get_X509_PUBKEY(x); |
159 | ASN1_OBJECT *xpoid; | |
160 | X509_PUBKEY_get0_param(&xpoid, NULL, NULL, NULL, xpkey); | |
0f113f3e MC |
161 | if (BIO_write(bp, " Subject Public Key Info:\n", 33) <= 0) |
162 | goto err; | |
163 | if (BIO_printf(bp, "%12sPublic Key Algorithm: ", "") <= 0) | |
164 | goto err; | |
699f1635 | 165 | if (i2a_ASN1_OBJECT(bp, xpoid) <= 0) |
0f113f3e MC |
166 | goto err; |
167 | if (BIO_puts(bp, "\n") <= 0) | |
168 | goto err; | |
169 | ||
c01ff880 | 170 | pkey = X509_get0_pubkey(x); |
0f113f3e MC |
171 | if (pkey == NULL) { |
172 | BIO_printf(bp, "%12sUnable to load Public Key\n", ""); | |
173 | ERR_print_errors(bp); | |
174 | } else { | |
175 | EVP_PKEY_print_public(bp, pkey, 16, NULL); | |
0f113f3e MC |
176 | } |
177 | } | |
178 | ||
179 | if (!(cflag & X509_FLAG_NO_IDS)) { | |
8900f3e3 DSH |
180 | const ASN1_BIT_STRING *iuid, *suid; |
181 | X509_get0_uids(x, &iuid, &suid); | |
699f1635 | 182 | if (iuid != NULL) { |
0f113f3e MC |
183 | if (BIO_printf(bp, "%8sIssuer Unique ID: ", "") <= 0) |
184 | goto err; | |
699f1635 | 185 | if (!X509_signature_dump(bp, iuid, 12)) |
0f113f3e MC |
186 | goto err; |
187 | } | |
699f1635 | 188 | if (suid != NULL) { |
0f113f3e MC |
189 | if (BIO_printf(bp, "%8sSubject Unique ID: ", "") <= 0) |
190 | goto err; | |
699f1635 | 191 | if (!X509_signature_dump(bp, suid, 12)) |
0f113f3e MC |
192 | goto err; |
193 | } | |
194 | } | |
195 | ||
196 | if (!(cflag & X509_FLAG_NO_EXTENSIONS)) | |
197 | X509V3_extensions_print(bp, "X509v3 extensions", | |
699f1635 | 198 | X509_get0_extensions(x), cflag, 8); |
0f113f3e MC |
199 | |
200 | if (!(cflag & X509_FLAG_NO_SIGDUMP)) { | |
8adc1cb8 DSH |
201 | const X509_ALGOR *sig_alg; |
202 | const ASN1_BIT_STRING *sig; | |
699f1635 DSH |
203 | X509_get0_signature(&sig, &sig_alg, x); |
204 | if (X509_signature_print(bp, sig_alg, sig) <= 0) | |
0f113f3e MC |
205 | goto err; |
206 | } | |
207 | if (!(cflag & X509_FLAG_NO_AUX)) { | |
699f1635 | 208 | if (!X509_aux_print(bp, x, 0)) |
0f113f3e MC |
209 | goto err; |
210 | } | |
211 | ret = 1; | |
212 | err: | |
b548a1f1 | 213 | OPENSSL_free(m); |
0f113f3e MC |
214 | return (ret); |
215 | } | |
216 | ||
217 | int X509_ocspid_print(BIO *bp, X509 *x) | |
218 | { | |
219 | unsigned char *der = NULL; | |
220 | unsigned char *dertmp; | |
221 | int derlen; | |
222 | int i; | |
223 | unsigned char SHA1md[SHA_DIGEST_LENGTH]; | |
699f1635 DSH |
224 | ASN1_BIT_STRING *keybstr; |
225 | X509_NAME *subj; | |
0f113f3e MC |
226 | |
227 | /* | |
228 | * display the hash of the subject as it would appear in OCSP requests | |
229 | */ | |
230 | if (BIO_printf(bp, " Subject OCSP hash: ") <= 0) | |
231 | goto err; | |
699f1635 DSH |
232 | subj = X509_get_subject_name(x); |
233 | derlen = i2d_X509_NAME(subj, NULL); | |
b196e7d9 | 234 | if ((der = dertmp = OPENSSL_malloc(derlen)) == NULL) |
0f113f3e | 235 | goto err; |
699f1635 | 236 | i2d_X509_NAME(subj, &dertmp); |
0f113f3e MC |
237 | |
238 | if (!EVP_Digest(der, derlen, SHA1md, NULL, EVP_sha1(), NULL)) | |
239 | goto err; | |
240 | for (i = 0; i < SHA_DIGEST_LENGTH; i++) { | |
241 | if (BIO_printf(bp, "%02X", SHA1md[i]) <= 0) | |
242 | goto err; | |
243 | } | |
244 | OPENSSL_free(der); | |
245 | der = NULL; | |
246 | ||
247 | /* | |
248 | * display the hash of the public key as it would appear in OCSP requests | |
249 | */ | |
250 | if (BIO_printf(bp, "\n Public key OCSP hash: ") <= 0) | |
251 | goto err; | |
252 | ||
699f1635 DSH |
253 | keybstr = X509_get0_pubkey_bitstr(x); |
254 | ||
255 | if (keybstr == NULL) | |
256 | goto err; | |
257 | ||
17ebf85a DSH |
258 | if (!EVP_Digest(ASN1_STRING_get0_data(keybstr), |
259 | ASN1_STRING_length(keybstr), SHA1md, NULL, EVP_sha1(), | |
260 | NULL)) | |
0f113f3e MC |
261 | goto err; |
262 | for (i = 0; i < SHA_DIGEST_LENGTH; i++) { | |
263 | if (BIO_printf(bp, "%02X", SHA1md[i]) <= 0) | |
264 | goto err; | |
265 | } | |
266 | BIO_printf(bp, "\n"); | |
267 | ||
268 | return (1); | |
269 | err: | |
b548a1f1 | 270 | OPENSSL_free(der); |
0f113f3e MC |
271 | return (0); |
272 | } | |
eb64730b | 273 | |
fa1ba589 | 274 | int X509_signature_dump(BIO *bp, const ASN1_STRING *sig, int indent) |
de487514 | 275 | { |
0f113f3e MC |
276 | const unsigned char *s; |
277 | int i, n; | |
278 | ||
279 | n = sig->length; | |
280 | s = sig->data; | |
281 | for (i = 0; i < n; i++) { | |
282 | if ((i % 18) == 0) { | |
283 | if (BIO_write(bp, "\n", 1) <= 0) | |
284 | return 0; | |
285 | if (BIO_indent(bp, indent, indent) <= 0) | |
286 | return 0; | |
287 | } | |
288 | if (BIO_printf(bp, "%02x%s", s[i], ((i + 1) == n) ? "" : ":") <= 0) | |
289 | return 0; | |
290 | } | |
291 | if (BIO_write(bp, "\n", 1) != 1) | |
292 | return 0; | |
293 | ||
294 | return 1; | |
de487514 DSH |
295 | } |
296 | ||
5e6089f0 MC |
297 | int X509_signature_print(BIO *bp, const X509_ALGOR *sigalg, |
298 | const ASN1_STRING *sig) | |
fa1ba589 | 299 | { |
0f113f3e MC |
300 | int sig_nid; |
301 | if (BIO_puts(bp, " Signature Algorithm: ") <= 0) | |
302 | return 0; | |
303 | if (i2a_ASN1_OBJECT(bp, sigalg->algorithm) <= 0) | |
304 | return 0; | |
305 | ||
306 | sig_nid = OBJ_obj2nid(sigalg->algorithm); | |
307 | if (sig_nid != NID_undef) { | |
308 | int pkey_nid, dig_nid; | |
309 | const EVP_PKEY_ASN1_METHOD *ameth; | |
310 | if (OBJ_find_sigid_algs(sig_nid, &dig_nid, &pkey_nid)) { | |
311 | ameth = EVP_PKEY_asn1_find(NULL, pkey_nid); | |
312 | if (ameth && ameth->sig_print) | |
313 | return ameth->sig_print(bp, sigalg, sig, 9, 0); | |
314 | } | |
315 | } | |
316 | if (sig) | |
317 | return X509_signature_dump(bp, sig, 9); | |
318 | else if (BIO_puts(bp, "\n") <= 0) | |
319 | return 0; | |
320 | return 1; | |
fa1ba589 | 321 | } |
699f1635 DSH |
322 | |
323 | int X509_aux_print(BIO *out, X509 *x, int indent) | |
324 | { | |
325 | char oidstr[80], first; | |
326 | STACK_OF(ASN1_OBJECT) *trust, *reject; | |
327 | const unsigned char *alias, *keyid; | |
328 | int keyidlen; | |
329 | int i; | |
330 | if (X509_trusted(x) == 0) | |
331 | return 1; | |
332 | trust = X509_get0_trust_objects(x); | |
333 | reject = X509_get0_reject_objects(x); | |
334 | if (trust) { | |
335 | first = 1; | |
336 | BIO_printf(out, "%*sTrusted Uses:\n%*s", indent, "", indent + 2, ""); | |
337 | for (i = 0; i < sk_ASN1_OBJECT_num(trust); i++) { | |
338 | if (!first) | |
339 | BIO_puts(out, ", "); | |
340 | else | |
341 | first = 0; | |
342 | OBJ_obj2txt(oidstr, sizeof oidstr, | |
343 | sk_ASN1_OBJECT_value(trust, i), 0); | |
344 | BIO_puts(out, oidstr); | |
345 | } | |
346 | BIO_puts(out, "\n"); | |
347 | } else | |
348 | BIO_printf(out, "%*sNo Trusted Uses.\n", indent, ""); | |
349 | if (reject) { | |
350 | first = 1; | |
351 | BIO_printf(out, "%*sRejected Uses:\n%*s", indent, "", indent + 2, ""); | |
352 | for (i = 0; i < sk_ASN1_OBJECT_num(reject); i++) { | |
353 | if (!first) | |
354 | BIO_puts(out, ", "); | |
355 | else | |
356 | first = 0; | |
357 | OBJ_obj2txt(oidstr, sizeof oidstr, | |
358 | sk_ASN1_OBJECT_value(reject, i), 0); | |
359 | BIO_puts(out, oidstr); | |
360 | } | |
361 | BIO_puts(out, "\n"); | |
362 | } else | |
363 | BIO_printf(out, "%*sNo Rejected Uses.\n", indent, ""); | |
364 | alias = X509_alias_get0(x, NULL); | |
365 | if (alias) | |
366 | BIO_printf(out, "%*sAlias: %s\n", indent, "", alias); | |
367 | keyid = X509_keyid_get0(x, &keyidlen); | |
368 | if (keyid) { | |
369 | BIO_printf(out, "%*sKey Id: ", indent, ""); | |
370 | for (i = 0; i < keyidlen; i++) | |
371 | BIO_printf(out, "%s%02X", i ? ":" : "", keyid[i]); | |
372 | BIO_write(out, "\n", 1); | |
373 | } | |
374 | return 1; | |
375 | } |