v3_crld.c revision 656d9c7f52f88b3a3daccafa7655dec086c4756e
1656d9c7f52f88b3a3daccafa7655dec086c4756eThe Android Open Source Project/* v3_crld.c */ 2656d9c7f52f88b3a3daccafa7655dec086c4756eThe Android Open Source Project/* Written by Dr Stephen N Henson (shenson@bigfoot.com) for the OpenSSL 3656d9c7f52f88b3a3daccafa7655dec086c4756eThe Android Open Source Project * project 1999. 4656d9c7f52f88b3a3daccafa7655dec086c4756eThe Android Open Source Project */ 5656d9c7f52f88b3a3daccafa7655dec086c4756eThe Android Open Source Project/* ==================================================================== 6656d9c7f52f88b3a3daccafa7655dec086c4756eThe Android Open Source Project * Copyright (c) 1999 The OpenSSL Project. All rights reserved. 7656d9c7f52f88b3a3daccafa7655dec086c4756eThe Android Open Source Project * 8656d9c7f52f88b3a3daccafa7655dec086c4756eThe Android Open Source Project * Redistribution and use in source and binary forms, with or without 9656d9c7f52f88b3a3daccafa7655dec086c4756eThe Android Open Source Project * modification, are permitted provided that the following conditions 10656d9c7f52f88b3a3daccafa7655dec086c4756eThe Android Open Source Project * are met: 11656d9c7f52f88b3a3daccafa7655dec086c4756eThe Android Open Source Project * 12656d9c7f52f88b3a3daccafa7655dec086c4756eThe Android Open Source Project * 1. Redistributions of source code must retain the above copyright 13656d9c7f52f88b3a3daccafa7655dec086c4756eThe Android Open Source Project * notice, this list of conditions and the following disclaimer. 14656d9c7f52f88b3a3daccafa7655dec086c4756eThe Android Open Source Project * 15656d9c7f52f88b3a3daccafa7655dec086c4756eThe Android Open Source Project * 2. Redistributions in binary form must reproduce the above copyright 16656d9c7f52f88b3a3daccafa7655dec086c4756eThe Android Open Source Project * notice, this list of conditions and the following disclaimer in 17656d9c7f52f88b3a3daccafa7655dec086c4756eThe Android Open Source Project * the documentation and/or other materials provided with the 18656d9c7f52f88b3a3daccafa7655dec086c4756eThe Android Open Source Project * distribution. 19656d9c7f52f88b3a3daccafa7655dec086c4756eThe Android Open Source Project * 20656d9c7f52f88b3a3daccafa7655dec086c4756eThe Android Open Source Project * 3. All advertising materials mentioning features or use of this 21656d9c7f52f88b3a3daccafa7655dec086c4756eThe Android Open Source Project * software must display the following acknowledgment: 22656d9c7f52f88b3a3daccafa7655dec086c4756eThe Android Open Source Project * "This product includes software developed by the OpenSSL Project 23656d9c7f52f88b3a3daccafa7655dec086c4756eThe Android Open Source Project * for use in the OpenSSL Toolkit. (http://www.OpenSSL.org/)" 24656d9c7f52f88b3a3daccafa7655dec086c4756eThe Android Open Source Project * 25656d9c7f52f88b3a3daccafa7655dec086c4756eThe Android Open Source Project * 4. The names "OpenSSL Toolkit" and "OpenSSL Project" must not be used to 26656d9c7f52f88b3a3daccafa7655dec086c4756eThe Android Open Source Project * endorse or promote products derived from this software without 27656d9c7f52f88b3a3daccafa7655dec086c4756eThe Android Open Source Project * prior written permission. For written permission, please contact 28656d9c7f52f88b3a3daccafa7655dec086c4756eThe Android Open Source Project * licensing@OpenSSL.org. 29656d9c7f52f88b3a3daccafa7655dec086c4756eThe Android Open Source Project * 30656d9c7f52f88b3a3daccafa7655dec086c4756eThe Android Open Source Project * 5. Products derived from this software may not be called "OpenSSL" 31656d9c7f52f88b3a3daccafa7655dec086c4756eThe Android Open Source Project * nor may "OpenSSL" appear in their names without prior written 32656d9c7f52f88b3a3daccafa7655dec086c4756eThe Android Open Source Project * permission of the OpenSSL Project. 33656d9c7f52f88b3a3daccafa7655dec086c4756eThe Android Open Source Project * 34656d9c7f52f88b3a3daccafa7655dec086c4756eThe Android Open Source Project * 6. Redistributions of any form whatsoever must retain the following 35656d9c7f52f88b3a3daccafa7655dec086c4756eThe Android Open Source Project * acknowledgment: 36656d9c7f52f88b3a3daccafa7655dec086c4756eThe Android Open Source Project * "This product includes software developed by the OpenSSL Project 37656d9c7f52f88b3a3daccafa7655dec086c4756eThe Android Open Source Project * for use in the OpenSSL Toolkit (http://www.OpenSSL.org/)" 38656d9c7f52f88b3a3daccafa7655dec086c4756eThe Android Open Source Project * 39656d9c7f52f88b3a3daccafa7655dec086c4756eThe Android Open Source Project * THIS SOFTWARE IS PROVIDED BY THE OpenSSL PROJECT ``AS IS'' AND ANY 40656d9c7f52f88b3a3daccafa7655dec086c4756eThe Android Open Source Project * EXPRESSED OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE 41656d9c7f52f88b3a3daccafa7655dec086c4756eThe Android Open Source Project * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR 42656d9c7f52f88b3a3daccafa7655dec086c4756eThe Android Open Source Project * PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE OpenSSL PROJECT OR 43656d9c7f52f88b3a3daccafa7655dec086c4756eThe Android Open Source Project * ITS CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, 44656d9c7f52f88b3a3daccafa7655dec086c4756eThe Android Open Source Project * SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT 45656d9c7f52f88b3a3daccafa7655dec086c4756eThe Android Open Source Project * NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; 46656d9c7f52f88b3a3daccafa7655dec086c4756eThe Android Open Source Project * LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) 47656d9c7f52f88b3a3daccafa7655dec086c4756eThe Android Open Source Project * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, 48656d9c7f52f88b3a3daccafa7655dec086c4756eThe Android Open Source Project * STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) 49656d9c7f52f88b3a3daccafa7655dec086c4756eThe Android Open Source Project * ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED 50656d9c7f52f88b3a3daccafa7655dec086c4756eThe Android Open Source Project * OF THE POSSIBILITY OF SUCH DAMAGE. 51656d9c7f52f88b3a3daccafa7655dec086c4756eThe Android Open Source Project * ==================================================================== 52656d9c7f52f88b3a3daccafa7655dec086c4756eThe Android Open Source Project * 53656d9c7f52f88b3a3daccafa7655dec086c4756eThe Android Open Source Project * This product includes cryptographic software written by Eric Young 54656d9c7f52f88b3a3daccafa7655dec086c4756eThe Android Open Source Project * (eay@cryptsoft.com). This product includes software written by Tim 55656d9c7f52f88b3a3daccafa7655dec086c4756eThe Android Open Source Project * Hudson (tjh@cryptsoft.com). 56656d9c7f52f88b3a3daccafa7655dec086c4756eThe Android Open Source Project * 57656d9c7f52f88b3a3daccafa7655dec086c4756eThe Android Open Source Project */ 58656d9c7f52f88b3a3daccafa7655dec086c4756eThe Android Open Source Project 59656d9c7f52f88b3a3daccafa7655dec086c4756eThe Android Open Source Project#include <stdio.h> 60656d9c7f52f88b3a3daccafa7655dec086c4756eThe Android Open Source Project#include "cryptlib.h" 61656d9c7f52f88b3a3daccafa7655dec086c4756eThe Android Open Source Project#include <openssl/conf.h> 62656d9c7f52f88b3a3daccafa7655dec086c4756eThe Android Open Source Project#include <openssl/asn1.h> 63656d9c7f52f88b3a3daccafa7655dec086c4756eThe Android Open Source Project#include <openssl/asn1t.h> 64656d9c7f52f88b3a3daccafa7655dec086c4756eThe Android Open Source Project#include <openssl/x509v3.h> 65656d9c7f52f88b3a3daccafa7655dec086c4756eThe Android Open Source Project 66656d9c7f52f88b3a3daccafa7655dec086c4756eThe Android Open Source Projectstatic STACK_OF(CONF_VALUE) *i2v_crld(X509V3_EXT_METHOD *method, 67656d9c7f52f88b3a3daccafa7655dec086c4756eThe Android Open Source Project STACK_OF(DIST_POINT) *crld, STACK_OF(CONF_VALUE) *extlist); 68656d9c7f52f88b3a3daccafa7655dec086c4756eThe Android Open Source Projectstatic STACK_OF(DIST_POINT) *v2i_crld(X509V3_EXT_METHOD *method, 69656d9c7f52f88b3a3daccafa7655dec086c4756eThe Android Open Source Project X509V3_CTX *ctx, STACK_OF(CONF_VALUE) *nval); 70656d9c7f52f88b3a3daccafa7655dec086c4756eThe Android Open Source Project 71656d9c7f52f88b3a3daccafa7655dec086c4756eThe Android Open Source Projectconst X509V3_EXT_METHOD v3_crld = { 72656d9c7f52f88b3a3daccafa7655dec086c4756eThe Android Open Source ProjectNID_crl_distribution_points, X509V3_EXT_MULTILINE, ASN1_ITEM_ref(CRL_DIST_POINTS), 73656d9c7f52f88b3a3daccafa7655dec086c4756eThe Android Open Source Project0,0,0,0, 74656d9c7f52f88b3a3daccafa7655dec086c4756eThe Android Open Source Project0,0, 75656d9c7f52f88b3a3daccafa7655dec086c4756eThe Android Open Source Project(X509V3_EXT_I2V)i2v_crld, 76656d9c7f52f88b3a3daccafa7655dec086c4756eThe Android Open Source Project(X509V3_EXT_V2I)v2i_crld, 77656d9c7f52f88b3a3daccafa7655dec086c4756eThe Android Open Source Project0,0, 78656d9c7f52f88b3a3daccafa7655dec086c4756eThe Android Open Source ProjectNULL 79656d9c7f52f88b3a3daccafa7655dec086c4756eThe Android Open Source Project}; 80656d9c7f52f88b3a3daccafa7655dec086c4756eThe Android Open Source Project 81656d9c7f52f88b3a3daccafa7655dec086c4756eThe Android Open Source Projectstatic STACK_OF(CONF_VALUE) *i2v_crld(X509V3_EXT_METHOD *method, 82656d9c7f52f88b3a3daccafa7655dec086c4756eThe Android Open Source Project STACK_OF(DIST_POINT) *crld, STACK_OF(CONF_VALUE) *exts) 83656d9c7f52f88b3a3daccafa7655dec086c4756eThe Android Open Source Project{ 84656d9c7f52f88b3a3daccafa7655dec086c4756eThe Android Open Source Project DIST_POINT *point; 85656d9c7f52f88b3a3daccafa7655dec086c4756eThe Android Open Source Project int i; 86656d9c7f52f88b3a3daccafa7655dec086c4756eThe Android Open Source Project for(i = 0; i < sk_DIST_POINT_num(crld); i++) { 87656d9c7f52f88b3a3daccafa7655dec086c4756eThe Android Open Source Project point = sk_DIST_POINT_value(crld, i); 88656d9c7f52f88b3a3daccafa7655dec086c4756eThe Android Open Source Project if(point->distpoint) { 89656d9c7f52f88b3a3daccafa7655dec086c4756eThe Android Open Source Project if(point->distpoint->type == 0) 90656d9c7f52f88b3a3daccafa7655dec086c4756eThe Android Open Source Project exts = i2v_GENERAL_NAMES(NULL, 91656d9c7f52f88b3a3daccafa7655dec086c4756eThe Android Open Source Project point->distpoint->name.fullname, exts); 92656d9c7f52f88b3a3daccafa7655dec086c4756eThe Android Open Source Project else X509V3_add_value("RelativeName","<UNSUPPORTED>", &exts); 93656d9c7f52f88b3a3daccafa7655dec086c4756eThe Android Open Source Project } 94656d9c7f52f88b3a3daccafa7655dec086c4756eThe Android Open Source Project if(point->reasons) 95656d9c7f52f88b3a3daccafa7655dec086c4756eThe Android Open Source Project X509V3_add_value("reasons","<UNSUPPORTED>", &exts); 96656d9c7f52f88b3a3daccafa7655dec086c4756eThe Android Open Source Project if(point->CRLissuer) 97656d9c7f52f88b3a3daccafa7655dec086c4756eThe Android Open Source Project X509V3_add_value("CRLissuer","<UNSUPPORTED>", &exts); 98656d9c7f52f88b3a3daccafa7655dec086c4756eThe Android Open Source Project } 99656d9c7f52f88b3a3daccafa7655dec086c4756eThe Android Open Source Project return exts; 100656d9c7f52f88b3a3daccafa7655dec086c4756eThe Android Open Source Project} 101656d9c7f52f88b3a3daccafa7655dec086c4756eThe Android Open Source Project 102656d9c7f52f88b3a3daccafa7655dec086c4756eThe Android Open Source Projectstatic STACK_OF(DIST_POINT) *v2i_crld(X509V3_EXT_METHOD *method, 103656d9c7f52f88b3a3daccafa7655dec086c4756eThe Android Open Source Project X509V3_CTX *ctx, STACK_OF(CONF_VALUE) *nval) 104656d9c7f52f88b3a3daccafa7655dec086c4756eThe Android Open Source Project{ 105656d9c7f52f88b3a3daccafa7655dec086c4756eThe Android Open Source Project STACK_OF(DIST_POINT) *crld = NULL; 106656d9c7f52f88b3a3daccafa7655dec086c4756eThe Android Open Source Project GENERAL_NAMES *gens = NULL; 107656d9c7f52f88b3a3daccafa7655dec086c4756eThe Android Open Source Project GENERAL_NAME *gen = NULL; 108656d9c7f52f88b3a3daccafa7655dec086c4756eThe Android Open Source Project CONF_VALUE *cnf; 109656d9c7f52f88b3a3daccafa7655dec086c4756eThe Android Open Source Project int i; 110656d9c7f52f88b3a3daccafa7655dec086c4756eThe Android Open Source Project if(!(crld = sk_DIST_POINT_new_null())) goto merr; 111656d9c7f52f88b3a3daccafa7655dec086c4756eThe Android Open Source Project for(i = 0; i < sk_CONF_VALUE_num(nval); i++) { 112656d9c7f52f88b3a3daccafa7655dec086c4756eThe Android Open Source Project DIST_POINT *point; 113656d9c7f52f88b3a3daccafa7655dec086c4756eThe Android Open Source Project cnf = sk_CONF_VALUE_value(nval, i); 114656d9c7f52f88b3a3daccafa7655dec086c4756eThe Android Open Source Project if(!(gen = v2i_GENERAL_NAME(method, ctx, cnf))) goto err; 115656d9c7f52f88b3a3daccafa7655dec086c4756eThe Android Open Source Project if(!(gens = GENERAL_NAMES_new())) goto merr; 116656d9c7f52f88b3a3daccafa7655dec086c4756eThe Android Open Source Project if(!sk_GENERAL_NAME_push(gens, gen)) goto merr; 117656d9c7f52f88b3a3daccafa7655dec086c4756eThe Android Open Source Project gen = NULL; 118656d9c7f52f88b3a3daccafa7655dec086c4756eThe Android Open Source Project if(!(point = DIST_POINT_new())) goto merr; 119656d9c7f52f88b3a3daccafa7655dec086c4756eThe Android Open Source Project if(!sk_DIST_POINT_push(crld, point)) { 120656d9c7f52f88b3a3daccafa7655dec086c4756eThe Android Open Source Project DIST_POINT_free(point); 121656d9c7f52f88b3a3daccafa7655dec086c4756eThe Android Open Source Project goto merr; 122656d9c7f52f88b3a3daccafa7655dec086c4756eThe Android Open Source Project } 123656d9c7f52f88b3a3daccafa7655dec086c4756eThe Android Open Source Project if(!(point->distpoint = DIST_POINT_NAME_new())) goto merr; 124656d9c7f52f88b3a3daccafa7655dec086c4756eThe Android Open Source Project point->distpoint->name.fullname = gens; 125656d9c7f52f88b3a3daccafa7655dec086c4756eThe Android Open Source Project point->distpoint->type = 0; 126656d9c7f52f88b3a3daccafa7655dec086c4756eThe Android Open Source Project gens = NULL; 127656d9c7f52f88b3a3daccafa7655dec086c4756eThe Android Open Source Project } 128656d9c7f52f88b3a3daccafa7655dec086c4756eThe Android Open Source Project return crld; 129656d9c7f52f88b3a3daccafa7655dec086c4756eThe Android Open Source Project 130656d9c7f52f88b3a3daccafa7655dec086c4756eThe Android Open Source Project merr: 131656d9c7f52f88b3a3daccafa7655dec086c4756eThe Android Open Source Project X509V3err(X509V3_F_V2I_CRLD,ERR_R_MALLOC_FAILURE); 132656d9c7f52f88b3a3daccafa7655dec086c4756eThe Android Open Source Project err: 133656d9c7f52f88b3a3daccafa7655dec086c4756eThe Android Open Source Project GENERAL_NAME_free(gen); 134656d9c7f52f88b3a3daccafa7655dec086c4756eThe Android Open Source Project GENERAL_NAMES_free(gens); 135656d9c7f52f88b3a3daccafa7655dec086c4756eThe Android Open Source Project sk_DIST_POINT_pop_free(crld, DIST_POINT_free); 136656d9c7f52f88b3a3daccafa7655dec086c4756eThe Android Open Source Project return NULL; 137656d9c7f52f88b3a3daccafa7655dec086c4756eThe Android Open Source Project} 138656d9c7f52f88b3a3daccafa7655dec086c4756eThe Android Open Source Project 139656d9c7f52f88b3a3daccafa7655dec086c4756eThe Android Open Source ProjectIMPLEMENT_STACK_OF(DIST_POINT) 140656d9c7f52f88b3a3daccafa7655dec086c4756eThe Android Open Source ProjectIMPLEMENT_ASN1_SET_OF(DIST_POINT) 141656d9c7f52f88b3a3daccafa7655dec086c4756eThe Android Open Source Project 142656d9c7f52f88b3a3daccafa7655dec086c4756eThe Android Open Source Project 143656d9c7f52f88b3a3daccafa7655dec086c4756eThe Android Open Source ProjectASN1_CHOICE(DIST_POINT_NAME) = { 144656d9c7f52f88b3a3daccafa7655dec086c4756eThe Android Open Source Project ASN1_IMP_SEQUENCE_OF(DIST_POINT_NAME, name.fullname, GENERAL_NAME, 0), 145656d9c7f52f88b3a3daccafa7655dec086c4756eThe Android Open Source Project ASN1_IMP_SET_OF(DIST_POINT_NAME, name.relativename, X509_NAME_ENTRY, 1) 146656d9c7f52f88b3a3daccafa7655dec086c4756eThe Android Open Source Project} ASN1_CHOICE_END(DIST_POINT_NAME) 147656d9c7f52f88b3a3daccafa7655dec086c4756eThe Android Open Source Project 148656d9c7f52f88b3a3daccafa7655dec086c4756eThe Android Open Source ProjectIMPLEMENT_ASN1_FUNCTIONS(DIST_POINT_NAME) 149656d9c7f52f88b3a3daccafa7655dec086c4756eThe Android Open Source Project 150656d9c7f52f88b3a3daccafa7655dec086c4756eThe Android Open Source ProjectASN1_SEQUENCE(DIST_POINT) = { 151656d9c7f52f88b3a3daccafa7655dec086c4756eThe Android Open Source Project ASN1_EXP_OPT(DIST_POINT, distpoint, DIST_POINT_NAME, 0), 152656d9c7f52f88b3a3daccafa7655dec086c4756eThe Android Open Source Project ASN1_IMP_OPT(DIST_POINT, reasons, ASN1_BIT_STRING, 1), 153656d9c7f52f88b3a3daccafa7655dec086c4756eThe Android Open Source Project ASN1_IMP_SEQUENCE_OF_OPT(DIST_POINT, CRLissuer, GENERAL_NAME, 2) 154656d9c7f52f88b3a3daccafa7655dec086c4756eThe Android Open Source Project} ASN1_SEQUENCE_END(DIST_POINT) 155656d9c7f52f88b3a3daccafa7655dec086c4756eThe Android Open Source Project 156656d9c7f52f88b3a3daccafa7655dec086c4756eThe Android Open Source ProjectIMPLEMENT_ASN1_FUNCTIONS(DIST_POINT) 157656d9c7f52f88b3a3daccafa7655dec086c4756eThe Android Open Source Project 158656d9c7f52f88b3a3daccafa7655dec086c4756eThe Android Open Source ProjectASN1_ITEM_TEMPLATE(CRL_DIST_POINTS) = 159656d9c7f52f88b3a3daccafa7655dec086c4756eThe Android Open Source Project ASN1_EX_TEMPLATE_TYPE(ASN1_TFLG_SEQUENCE_OF, 0, CRLDistributionPoints, DIST_POINT) 160656d9c7f52f88b3a3daccafa7655dec086c4756eThe Android Open Source ProjectASN1_ITEM_TEMPLATE_END(CRL_DIST_POINTS) 161656d9c7f52f88b3a3daccafa7655dec086c4756eThe Android Open Source Project 162656d9c7f52f88b3a3daccafa7655dec086c4756eThe Android Open Source ProjectIMPLEMENT_ASN1_FUNCTIONS(CRL_DIST_POINTS) 163