mirror of
https://github.com/openssl/openssl.git
synced 2024-11-27 05:21:51 +08:00
7a4f0c6aea
Reviewed-by: Neil Horman <nhorman@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/25244)
244 lines
8.4 KiB
C
244 lines
8.4 KiB
C
/*
|
|
* Copyright 1999-2024 The OpenSSL Project Authors. All Rights Reserved.
|
|
*
|
|
* Licensed under the Apache License 2.0 (the "License"). You may not use
|
|
* this file except in compliance with the License. You can obtain a copy
|
|
* in the file LICENSE in the source distribution or at
|
|
* https://www.openssl.org/source/license.html
|
|
*/
|
|
|
|
#include <stdio.h>
|
|
#include <openssl/x509_acert.h>
|
|
#include <crypto/x509_acert.h>
|
|
#include "internal/cryptlib.h"
|
|
#include <openssl/asn1.h>
|
|
#include <openssl/asn1t.h>
|
|
#include <openssl/conf.h>
|
|
#include <openssl/x509v3.h>
|
|
#include "ext_dat.h"
|
|
#include "x509_local.h"
|
|
#include "crypto/asn1.h"
|
|
|
|
static int i2r_ISSUER_SERIAL(X509V3_EXT_METHOD *method,
|
|
OSSL_ISSUER_SERIAL *iss,
|
|
BIO *out, int indent);
|
|
static int i2r_OBJECT_DIGEST_INFO(X509V3_EXT_METHOD *method,
|
|
OSSL_OBJECT_DIGEST_INFO *odi,
|
|
BIO *out, int indent);
|
|
static int i2r_TARGET_CERT(X509V3_EXT_METHOD *method,
|
|
OSSL_TARGET_CERT *tc,
|
|
BIO *out, int indent);
|
|
static int i2r_TARGET(X509V3_EXT_METHOD *method,
|
|
OSSL_TARGET *target,
|
|
BIO *out, int indent);
|
|
static int i2r_TARGETING_INFORMATION(X509V3_EXT_METHOD *method,
|
|
OSSL_TARGETING_INFORMATION *tinfo,
|
|
BIO *out, int indent);
|
|
|
|
ASN1_SEQUENCE(OSSL_ISSUER_SERIAL) = {
|
|
ASN1_SEQUENCE_OF(OSSL_ISSUER_SERIAL, issuer, GENERAL_NAME),
|
|
ASN1_EMBED(OSSL_ISSUER_SERIAL, serial, ASN1_INTEGER),
|
|
ASN1_OPT(OSSL_ISSUER_SERIAL, issuerUID, ASN1_BIT_STRING),
|
|
} static_ASN1_SEQUENCE_END(OSSL_ISSUER_SERIAL)
|
|
|
|
ASN1_SEQUENCE(OSSL_OBJECT_DIGEST_INFO) = {
|
|
ASN1_EMBED(OSSL_OBJECT_DIGEST_INFO, digestedObjectType, ASN1_ENUMERATED),
|
|
ASN1_OPT(OSSL_OBJECT_DIGEST_INFO, otherObjectTypeID, ASN1_OBJECT),
|
|
ASN1_EMBED(OSSL_OBJECT_DIGEST_INFO, digestAlgorithm, X509_ALGOR),
|
|
ASN1_EMBED(OSSL_OBJECT_DIGEST_INFO, objectDigest, ASN1_BIT_STRING),
|
|
} static_ASN1_SEQUENCE_END(OSSL_OBJECT_DIGEST_INFO)
|
|
|
|
ASN1_SEQUENCE(OSSL_TARGET_CERT) = {
|
|
ASN1_SIMPLE(OSSL_TARGET_CERT, targetCertificate, OSSL_ISSUER_SERIAL),
|
|
ASN1_OPT(OSSL_TARGET_CERT, targetName, GENERAL_NAME),
|
|
ASN1_OPT(OSSL_TARGET_CERT, certDigestInfo, OSSL_OBJECT_DIGEST_INFO),
|
|
} static_ASN1_SEQUENCE_END(OSSL_TARGET_CERT)
|
|
|
|
ASN1_CHOICE(OSSL_TARGET) = {
|
|
ASN1_EXP(OSSL_TARGET, choice.targetName, GENERAL_NAME, 0),
|
|
ASN1_EXP(OSSL_TARGET, choice.targetGroup, GENERAL_NAME, 1),
|
|
ASN1_IMP(OSSL_TARGET, choice.targetCert, OSSL_TARGET_CERT, 2),
|
|
} ASN1_CHOICE_END(OSSL_TARGET)
|
|
|
|
ASN1_ITEM_TEMPLATE(OSSL_TARGETS) =
|
|
ASN1_EX_TEMPLATE_TYPE(ASN1_TFLG_SEQUENCE_OF, 0, Targets, OSSL_TARGET)
|
|
ASN1_ITEM_TEMPLATE_END(OSSL_TARGETS)
|
|
|
|
ASN1_ITEM_TEMPLATE(OSSL_TARGETING_INFORMATION) =
|
|
ASN1_EX_TEMPLATE_TYPE(ASN1_TFLG_SEQUENCE_OF, 0, TargetingInformation, OSSL_TARGETS)
|
|
ASN1_ITEM_TEMPLATE_END(OSSL_TARGETING_INFORMATION)
|
|
|
|
IMPLEMENT_ASN1_FUNCTIONS(OSSL_TARGET)
|
|
IMPLEMENT_ASN1_FUNCTIONS(OSSL_TARGETS)
|
|
IMPLEMENT_ASN1_FUNCTIONS(OSSL_TARGETING_INFORMATION)
|
|
|
|
static int i2r_ISSUER_SERIAL(X509V3_EXT_METHOD *method,
|
|
OSSL_ISSUER_SERIAL *iss,
|
|
BIO *out, int indent)
|
|
{
|
|
if (iss->issuer != NULL) {
|
|
BIO_printf(out, "%*sIssuer Names:\n", indent, "");
|
|
OSSL_GENERAL_NAMES_print(out, iss->issuer, indent);
|
|
BIO_puts(out, "\n");
|
|
} else {
|
|
BIO_printf(out, "%*sIssuer Names: <none>\n", indent, "");
|
|
}
|
|
BIO_printf(out, "%*sIssuer Serial: ", indent, "");
|
|
if (i2a_ASN1_INTEGER(out, &(iss->serial)) <= 0)
|
|
return 0;
|
|
BIO_puts(out, "\n");
|
|
if (iss->issuerUID != NULL) {
|
|
BIO_printf(out, "%*sIssuer UID: ", indent, "");
|
|
if (i2a_ASN1_STRING(out, iss->issuerUID, V_ASN1_BIT_STRING) <= 0)
|
|
return 0;
|
|
BIO_puts(out, "\n");
|
|
} else {
|
|
BIO_printf(out, "%*sIssuer UID: <none>\n", indent, "");
|
|
}
|
|
return 1;
|
|
}
|
|
|
|
static int i2r_OBJECT_DIGEST_INFO(X509V3_EXT_METHOD *method,
|
|
OSSL_OBJECT_DIGEST_INFO *odi,
|
|
BIO *out, int indent)
|
|
{
|
|
int64_t dot = 0;
|
|
int sig_nid;
|
|
X509_ALGOR *digalg;
|
|
ASN1_STRING *sig;
|
|
|
|
if (odi == NULL) {
|
|
ERR_raise(ERR_LIB_ASN1, ERR_R_PASSED_NULL_PARAMETER);
|
|
return 0;
|
|
}
|
|
digalg = &odi->digestAlgorithm;
|
|
sig = &odi->objectDigest;
|
|
if (!ASN1_ENUMERATED_get_int64(&dot, &odi->digestedObjectType)) {
|
|
return 0;
|
|
}
|
|
switch (dot) {
|
|
case OSSL_ODI_TYPE_PUBLIC_KEY:
|
|
BIO_printf(out, "%*sDigest Type: Public Key\n", indent, "");
|
|
break;
|
|
case OSSL_ODI_TYPE_PUBLIC_KEY_CERT:
|
|
BIO_printf(out, "%*sDigest Type: Public Key Certificate\n", indent, "");
|
|
break;
|
|
case OSSL_ODI_TYPE_OTHER:
|
|
BIO_printf(out, "%*sDigest Type: Other\n", indent, "");
|
|
break;
|
|
}
|
|
if (odi->otherObjectTypeID != NULL) {
|
|
BIO_printf(out, "%*sDigest Type Identifier: ", indent, "");
|
|
i2a_ASN1_OBJECT(out, odi->otherObjectTypeID);
|
|
BIO_puts(out, "\n");
|
|
}
|
|
if (BIO_printf(out, "%*sSignature Algorithm: ", indent, "") <= 0)
|
|
return 0;
|
|
if (i2a_ASN1_OBJECT(out, odi->digestAlgorithm.algorithm) <= 0)
|
|
return 0;
|
|
BIO_puts(out, "\n");
|
|
if (BIO_printf(out, "\n%*sSignature Value: ", indent, "") <= 0)
|
|
return 0;
|
|
sig_nid = OBJ_obj2nid(odi->digestAlgorithm.algorithm);
|
|
if (sig_nid != NID_undef) {
|
|
int pkey_nid, dig_nid;
|
|
const EVP_PKEY_ASN1_METHOD *ameth;
|
|
if (OBJ_find_sigid_algs(sig_nid, &dig_nid, &pkey_nid)) {
|
|
ameth = EVP_PKEY_asn1_find(NULL, pkey_nid);
|
|
if (ameth && ameth->sig_print)
|
|
return ameth->sig_print(out, digalg, sig, indent + 4, 0);
|
|
}
|
|
}
|
|
if (BIO_write(out, "\n", 1) != 1)
|
|
return 0;
|
|
if (sig)
|
|
return X509_signature_dump(out, sig, indent + 4);
|
|
return 1;
|
|
}
|
|
|
|
static int i2r_TARGET_CERT(X509V3_EXT_METHOD *method,
|
|
OSSL_TARGET_CERT *tc,
|
|
BIO *out, int indent)
|
|
{
|
|
BIO_printf(out, "%*s", indent, "");
|
|
if (tc->targetCertificate != NULL) {
|
|
BIO_puts(out, "Target Certificate:\n");
|
|
i2r_ISSUER_SERIAL(method, tc->targetCertificate, out, indent + 2);
|
|
}
|
|
if (tc->targetName != NULL) {
|
|
BIO_printf(out, "%*sTarget Name: ", indent, "");
|
|
GENERAL_NAME_print(out, tc->targetName);
|
|
BIO_puts(out, "\n");
|
|
}
|
|
if (tc->certDigestInfo != NULL) {
|
|
BIO_printf(out, "%*sCertificate Digest Info:\n", indent, "");
|
|
i2r_OBJECT_DIGEST_INFO(method, tc->certDigestInfo, out, indent + 2);
|
|
}
|
|
BIO_puts(out, "\n");
|
|
return 1;
|
|
}
|
|
|
|
static int i2r_TARGET(X509V3_EXT_METHOD *method,
|
|
OSSL_TARGET *target,
|
|
BIO *out, int indent)
|
|
{
|
|
switch (target->type) {
|
|
case OSSL_TGT_TARGET_NAME:
|
|
BIO_printf(out, "%*sTarget Name: ", indent, "");
|
|
GENERAL_NAME_print(out, target->choice.targetName);
|
|
BIO_puts(out, "\n");
|
|
break;
|
|
case OSSL_TGT_TARGET_GROUP:
|
|
BIO_printf(out, "%*sTarget Group: ", indent, "");
|
|
GENERAL_NAME_print(out, target->choice.targetGroup);
|
|
BIO_puts(out, "\n");
|
|
break;
|
|
case OSSL_TGT_TARGET_CERT:
|
|
BIO_printf(out, "%*sTarget Cert:\n", indent, "");
|
|
i2r_TARGET_CERT(method, target->choice.targetCert, out, indent + 2);
|
|
break;
|
|
}
|
|
return 1;
|
|
}
|
|
|
|
static int i2r_TARGETS(X509V3_EXT_METHOD *method,
|
|
OSSL_TARGETS *targets,
|
|
BIO *out, int indent)
|
|
{
|
|
int i;
|
|
OSSL_TARGET *target;
|
|
|
|
for (i = 0; i < sk_OSSL_TARGET_num(targets); i++) {
|
|
BIO_printf(out, "%*sTarget:\n", indent, "");
|
|
target = sk_OSSL_TARGET_value(targets, i);
|
|
i2r_TARGET(method, target, out, indent + 2);
|
|
}
|
|
return 1;
|
|
}
|
|
|
|
static int i2r_TARGETING_INFORMATION(X509V3_EXT_METHOD *method,
|
|
OSSL_TARGETING_INFORMATION *tinfo,
|
|
BIO *out, int indent)
|
|
{
|
|
int i;
|
|
OSSL_TARGETS *targets;
|
|
|
|
for (i = 0; i < sk_OSSL_TARGETS_num(tinfo); i++) {
|
|
BIO_printf(out, "%*sTargets:\n", indent, "");
|
|
targets = sk_OSSL_TARGETS_value(tinfo, i);
|
|
i2r_TARGETS(method, targets, out, indent + 2);
|
|
}
|
|
return 1;
|
|
}
|
|
|
|
const X509V3_EXT_METHOD ossl_v3_targeting_information = {
|
|
NID_target_information, 0, ASN1_ITEM_ref(OSSL_TARGETING_INFORMATION),
|
|
0, 0, 0, 0,
|
|
0,
|
|
0,
|
|
0, 0,
|
|
(X509V3_EXT_I2R)i2r_TARGETING_INFORMATION,
|
|
0,
|
|
NULL
|
|
};
|