1c9490d33b98b7affb729b5f1db13cb0a348471aagl@chromium.org/* v3_ocsp.c */ 2c9490d33b98b7affb729b5f1db13cb0a348471aagl@chromium.org/* Written by Dr Stephen N Henson (steve@openssl.org) for the OpenSSL 3c9490d33b98b7affb729b5f1db13cb0a348471aagl@chromium.org * project 1999. 4c9490d33b98b7affb729b5f1db13cb0a348471aagl@chromium.org */ 5c9490d33b98b7affb729b5f1db13cb0a348471aagl@chromium.org/* ==================================================================== 6c9490d33b98b7affb729b5f1db13cb0a348471aagl@chromium.org * Copyright (c) 1999 The OpenSSL Project. All rights reserved. 7c9490d33b98b7affb729b5f1db13cb0a348471aagl@chromium.org * 8c9490d33b98b7affb729b5f1db13cb0a348471aagl@chromium.org * Redistribution and use in source and binary forms, with or without 9c9490d33b98b7affb729b5f1db13cb0a348471aagl@chromium.org * modification, are permitted provided that the following conditions 10c9490d33b98b7affb729b5f1db13cb0a348471aagl@chromium.org * are met: 11c9490d33b98b7affb729b5f1db13cb0a348471aagl@chromium.org * 12c9490d33b98b7affb729b5f1db13cb0a348471aagl@chromium.org * 1. Redistributions of source code must retain the above copyright 13c9490d33b98b7affb729b5f1db13cb0a348471aagl@chromium.org * notice, this list of conditions and the following disclaimer. 14c9490d33b98b7affb729b5f1db13cb0a348471aagl@chromium.org * 15c9490d33b98b7affb729b5f1db13cb0a348471aagl@chromium.org * 2. Redistributions in binary form must reproduce the above copyright 16c9490d33b98b7affb729b5f1db13cb0a348471aagl@chromium.org * notice, this list of conditions and the following disclaimer in 17c9490d33b98b7affb729b5f1db13cb0a348471aagl@chromium.org * the documentation and/or other materials provided with the 18c9490d33b98b7affb729b5f1db13cb0a348471aagl@chromium.org * distribution. 19c9490d33b98b7affb729b5f1db13cb0a348471aagl@chromium.org * 20c9490d33b98b7affb729b5f1db13cb0a348471aagl@chromium.org * 3. All advertising materials mentioning features or use of this 21c9490d33b98b7affb729b5f1db13cb0a348471aagl@chromium.org * software must display the following acknowledgment: 22c9490d33b98b7affb729b5f1db13cb0a348471aagl@chromium.org * "This product includes software developed by the OpenSSL Project 23c9490d33b98b7affb729b5f1db13cb0a348471aagl@chromium.org * for use in the OpenSSL Toolkit. (http://www.OpenSSL.org/)" 24c9490d33b98b7affb729b5f1db13cb0a348471aagl@chromium.org * 25c9490d33b98b7affb729b5f1db13cb0a348471aagl@chromium.org * 4. The names "OpenSSL Toolkit" and "OpenSSL Project" must not be used to 26c9490d33b98b7affb729b5f1db13cb0a348471aagl@chromium.org * endorse or promote products derived from this software without 27c9490d33b98b7affb729b5f1db13cb0a348471aagl@chromium.org * prior written permission. For written permission, please contact 28c9490d33b98b7affb729b5f1db13cb0a348471aagl@chromium.org * licensing@OpenSSL.org. 29c9490d33b98b7affb729b5f1db13cb0a348471aagl@chromium.org * 30c9490d33b98b7affb729b5f1db13cb0a348471aagl@chromium.org * 5. Products derived from this software may not be called "OpenSSL" 31c9490d33b98b7affb729b5f1db13cb0a348471aagl@chromium.org * nor may "OpenSSL" appear in their names without prior written 32c9490d33b98b7affb729b5f1db13cb0a348471aagl@chromium.org * permission of the OpenSSL Project. 33c9490d33b98b7affb729b5f1db13cb0a348471aagl@chromium.org * 34c9490d33b98b7affb729b5f1db13cb0a348471aagl@chromium.org * 6. Redistributions of any form whatsoever must retain the following 35c9490d33b98b7affb729b5f1db13cb0a348471aagl@chromium.org * acknowledgment: 36c9490d33b98b7affb729b5f1db13cb0a348471aagl@chromium.org * "This product includes software developed by the OpenSSL Project 37c9490d33b98b7affb729b5f1db13cb0a348471aagl@chromium.org * for use in the OpenSSL Toolkit (http://www.OpenSSL.org/)" 38c9490d33b98b7affb729b5f1db13cb0a348471aagl@chromium.org * 39c9490d33b98b7affb729b5f1db13cb0a348471aagl@chromium.org * THIS SOFTWARE IS PROVIDED BY THE OpenSSL PROJECT ``AS IS'' AND ANY 40c9490d33b98b7affb729b5f1db13cb0a348471aagl@chromium.org * EXPRESSED OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE 41c9490d33b98b7affb729b5f1db13cb0a348471aagl@chromium.org * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR 42c9490d33b98b7affb729b5f1db13cb0a348471aagl@chromium.org * PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE OpenSSL PROJECT OR 43c9490d33b98b7affb729b5f1db13cb0a348471aagl@chromium.org * ITS CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, 44c9490d33b98b7affb729b5f1db13cb0a348471aagl@chromium.org * SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT 45c9490d33b98b7affb729b5f1db13cb0a348471aagl@chromium.org * NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; 46c9490d33b98b7affb729b5f1db13cb0a348471aagl@chromium.org * LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) 47c9490d33b98b7affb729b5f1db13cb0a348471aagl@chromium.org * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, 48c9490d33b98b7affb729b5f1db13cb0a348471aagl@chromium.org * STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) 49c9490d33b98b7affb729b5f1db13cb0a348471aagl@chromium.org * ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED 50c9490d33b98b7affb729b5f1db13cb0a348471aagl@chromium.org * OF THE POSSIBILITY OF SUCH DAMAGE. 51c9490d33b98b7affb729b5f1db13cb0a348471aagl@chromium.org * ==================================================================== 52c9490d33b98b7affb729b5f1db13cb0a348471aagl@chromium.org * 53c9490d33b98b7affb729b5f1db13cb0a348471aagl@chromium.org * This product includes cryptographic software written by Eric Young 54c9490d33b98b7affb729b5f1db13cb0a348471aagl@chromium.org * (eay@cryptsoft.com). This product includes software written by Tim 55c9490d33b98b7affb729b5f1db13cb0a348471aagl@chromium.org * Hudson (tjh@cryptsoft.com). 56c9490d33b98b7affb729b5f1db13cb0a348471aagl@chromium.org * 57c9490d33b98b7affb729b5f1db13cb0a348471aagl@chromium.org */ 58c9490d33b98b7affb729b5f1db13cb0a348471aagl@chromium.org 59c9490d33b98b7affb729b5f1db13cb0a348471aagl@chromium.org#ifndef OPENSSL_NO_OCSP 60c9490d33b98b7affb729b5f1db13cb0a348471aagl@chromium.org 61c9490d33b98b7affb729b5f1db13cb0a348471aagl@chromium.org#include <stdio.h> 62c9490d33b98b7affb729b5f1db13cb0a348471aagl@chromium.org#include "cryptlib.h" 63c9490d33b98b7affb729b5f1db13cb0a348471aagl@chromium.org#include <openssl/conf.h> 64c9490d33b98b7affb729b5f1db13cb0a348471aagl@chromium.org#include <openssl/asn1.h> 65c9490d33b98b7affb729b5f1db13cb0a348471aagl@chromium.org#include <openssl/ocsp.h> 66c9490d33b98b7affb729b5f1db13cb0a348471aagl@chromium.org#include <openssl/x509v3.h> 67c9490d33b98b7affb729b5f1db13cb0a348471aagl@chromium.org 68c9490d33b98b7affb729b5f1db13cb0a348471aagl@chromium.org/* OCSP extensions and a couple of CRL entry extensions 69c9490d33b98b7affb729b5f1db13cb0a348471aagl@chromium.org */ 70c9490d33b98b7affb729b5f1db13cb0a348471aagl@chromium.org 71480da75abf485e7e2a6be5acc0f71842368792c0jnd@chromium.orgstatic int i2r_ocsp_crlid(const X509V3_EXT_METHOD *method, void *nonce, 72480da75abf485e7e2a6be5acc0f71842368792c0jnd@chromium.org BIO *out, int indent); 73480da75abf485e7e2a6be5acc0f71842368792c0jnd@chromium.orgstatic int i2r_ocsp_acutoff(const X509V3_EXT_METHOD *method, void *nonce, 74480da75abf485e7e2a6be5acc0f71842368792c0jnd@chromium.org BIO *out, int indent); 75480da75abf485e7e2a6be5acc0f71842368792c0jnd@chromium.orgstatic int i2r_object(const X509V3_EXT_METHOD *method, void *obj, BIO *out, 76480da75abf485e7e2a6be5acc0f71842368792c0jnd@chromium.org int indent); 77c9490d33b98b7affb729b5f1db13cb0a348471aagl@chromium.org 78c9490d33b98b7affb729b5f1db13cb0a348471aagl@chromium.orgstatic void *ocsp_nonce_new(void); 79c9490d33b98b7affb729b5f1db13cb0a348471aagl@chromium.orgstatic int i2d_ocsp_nonce(void *a, unsigned char **pp); 80c9490d33b98b7affb729b5f1db13cb0a348471aagl@chromium.orgstatic void *d2i_ocsp_nonce(void *a, const unsigned char **pp, long length); 81c9490d33b98b7affb729b5f1db13cb0a348471aagl@chromium.orgstatic void ocsp_nonce_free(void *a); 82480da75abf485e7e2a6be5acc0f71842368792c0jnd@chromium.orgstatic int i2r_ocsp_nonce(const X509V3_EXT_METHOD *method, void *nonce, 83480da75abf485e7e2a6be5acc0f71842368792c0jnd@chromium.org BIO *out, int indent); 84c9490d33b98b7affb729b5f1db13cb0a348471aagl@chromium.org 85480da75abf485e7e2a6be5acc0f71842368792c0jnd@chromium.orgstatic int i2r_ocsp_nocheck(const X509V3_EXT_METHOD *method, 86480da75abf485e7e2a6be5acc0f71842368792c0jnd@chromium.org void *nocheck, BIO *out, int indent); 87480da75abf485e7e2a6be5acc0f71842368792c0jnd@chromium.orgstatic void *s2i_ocsp_nocheck(const X509V3_EXT_METHOD *method, X509V3_CTX *ctx, 88480da75abf485e7e2a6be5acc0f71842368792c0jnd@chromium.org const char *str); 89480da75abf485e7e2a6be5acc0f71842368792c0jnd@chromium.orgstatic int i2r_ocsp_serviceloc(const X509V3_EXT_METHOD *method, void *in, 90480da75abf485e7e2a6be5acc0f71842368792c0jnd@chromium.org BIO *bp, int ind); 91c9490d33b98b7affb729b5f1db13cb0a348471aagl@chromium.org 92c9490d33b98b7affb729b5f1db13cb0a348471aagl@chromium.orgconst X509V3_EXT_METHOD v3_ocsp_crlid = { 93c9490d33b98b7affb729b5f1db13cb0a348471aagl@chromium.org NID_id_pkix_OCSP_CrlID, 0, ASN1_ITEM_ref(OCSP_CRLID), 94c9490d33b98b7affb729b5f1db13cb0a348471aagl@chromium.org 0,0,0,0, 95c9490d33b98b7affb729b5f1db13cb0a348471aagl@chromium.org 0,0, 96c9490d33b98b7affb729b5f1db13cb0a348471aagl@chromium.org 0,0, 97c9490d33b98b7affb729b5f1db13cb0a348471aagl@chromium.org i2r_ocsp_crlid,0, 98c9490d33b98b7affb729b5f1db13cb0a348471aagl@chromium.org NULL 99c9490d33b98b7affb729b5f1db13cb0a348471aagl@chromium.org}; 100c9490d33b98b7affb729b5f1db13cb0a348471aagl@chromium.org 101c9490d33b98b7affb729b5f1db13cb0a348471aagl@chromium.orgconst X509V3_EXT_METHOD v3_ocsp_acutoff = { 102c9490d33b98b7affb729b5f1db13cb0a348471aagl@chromium.org NID_id_pkix_OCSP_archiveCutoff, 0, ASN1_ITEM_ref(ASN1_GENERALIZEDTIME), 103c9490d33b98b7affb729b5f1db13cb0a348471aagl@chromium.org 0,0,0,0, 104c9490d33b98b7affb729b5f1db13cb0a348471aagl@chromium.org 0,0, 105c9490d33b98b7affb729b5f1db13cb0a348471aagl@chromium.org 0,0, 106c9490d33b98b7affb729b5f1db13cb0a348471aagl@chromium.org i2r_ocsp_acutoff,0, 107c9490d33b98b7affb729b5f1db13cb0a348471aagl@chromium.org NULL 108c9490d33b98b7affb729b5f1db13cb0a348471aagl@chromium.org}; 109c9490d33b98b7affb729b5f1db13cb0a348471aagl@chromium.org 110c9490d33b98b7affb729b5f1db13cb0a348471aagl@chromium.orgconst X509V3_EXT_METHOD v3_crl_invdate = { 111c9490d33b98b7affb729b5f1db13cb0a348471aagl@chromium.org NID_invalidity_date, 0, ASN1_ITEM_ref(ASN1_GENERALIZEDTIME), 112c9490d33b98b7affb729b5f1db13cb0a348471aagl@chromium.org 0,0,0,0, 113c9490d33b98b7affb729b5f1db13cb0a348471aagl@chromium.org 0,0, 114c9490d33b98b7affb729b5f1db13cb0a348471aagl@chromium.org 0,0, 115c9490d33b98b7affb729b5f1db13cb0a348471aagl@chromium.org i2r_ocsp_acutoff,0, 116c9490d33b98b7affb729b5f1db13cb0a348471aagl@chromium.org NULL 117c9490d33b98b7affb729b5f1db13cb0a348471aagl@chromium.org}; 118c9490d33b98b7affb729b5f1db13cb0a348471aagl@chromium.org 119c9490d33b98b7affb729b5f1db13cb0a348471aagl@chromium.orgconst X509V3_EXT_METHOD v3_crl_hold = { 120c9490d33b98b7affb729b5f1db13cb0a348471aagl@chromium.org NID_hold_instruction_code, 0, ASN1_ITEM_ref(ASN1_OBJECT), 121c9490d33b98b7affb729b5f1db13cb0a348471aagl@chromium.org 0,0,0,0, 122c9490d33b98b7affb729b5f1db13cb0a348471aagl@chromium.org 0,0, 123c9490d33b98b7affb729b5f1db13cb0a348471aagl@chromium.org 0,0, 124c9490d33b98b7affb729b5f1db13cb0a348471aagl@chromium.org i2r_object,0, 125c9490d33b98b7affb729b5f1db13cb0a348471aagl@chromium.org NULL 126c9490d33b98b7affb729b5f1db13cb0a348471aagl@chromium.org}; 127c9490d33b98b7affb729b5f1db13cb0a348471aagl@chromium.org 128c9490d33b98b7affb729b5f1db13cb0a348471aagl@chromium.orgconst X509V3_EXT_METHOD v3_ocsp_nonce = { 129c9490d33b98b7affb729b5f1db13cb0a348471aagl@chromium.org NID_id_pkix_OCSP_Nonce, 0, NULL, 130c9490d33b98b7affb729b5f1db13cb0a348471aagl@chromium.org ocsp_nonce_new, 131c9490d33b98b7affb729b5f1db13cb0a348471aagl@chromium.org ocsp_nonce_free, 132c9490d33b98b7affb729b5f1db13cb0a348471aagl@chromium.org d2i_ocsp_nonce, 133c9490d33b98b7affb729b5f1db13cb0a348471aagl@chromium.org i2d_ocsp_nonce, 134c9490d33b98b7affb729b5f1db13cb0a348471aagl@chromium.org 0,0, 135c9490d33b98b7affb729b5f1db13cb0a348471aagl@chromium.org 0,0, 136c9490d33b98b7affb729b5f1db13cb0a348471aagl@chromium.org i2r_ocsp_nonce,0, 137c9490d33b98b7affb729b5f1db13cb0a348471aagl@chromium.org NULL 138c9490d33b98b7affb729b5f1db13cb0a348471aagl@chromium.org}; 139c9490d33b98b7affb729b5f1db13cb0a348471aagl@chromium.org 140c9490d33b98b7affb729b5f1db13cb0a348471aagl@chromium.orgconst X509V3_EXT_METHOD v3_ocsp_nocheck = { 141c9490d33b98b7affb729b5f1db13cb0a348471aagl@chromium.org NID_id_pkix_OCSP_noCheck, 0, ASN1_ITEM_ref(ASN1_NULL), 142c9490d33b98b7affb729b5f1db13cb0a348471aagl@chromium.org 0,0,0,0, 143c9490d33b98b7affb729b5f1db13cb0a348471aagl@chromium.org 0,s2i_ocsp_nocheck, 144c9490d33b98b7affb729b5f1db13cb0a348471aagl@chromium.org 0,0, 145c9490d33b98b7affb729b5f1db13cb0a348471aagl@chromium.org i2r_ocsp_nocheck,0, 146c9490d33b98b7affb729b5f1db13cb0a348471aagl@chromium.org NULL 147c9490d33b98b7affb729b5f1db13cb0a348471aagl@chromium.org}; 148c9490d33b98b7affb729b5f1db13cb0a348471aagl@chromium.org 149c9490d33b98b7affb729b5f1db13cb0a348471aagl@chromium.orgconst X509V3_EXT_METHOD v3_ocsp_serviceloc = { 150c9490d33b98b7affb729b5f1db13cb0a348471aagl@chromium.org NID_id_pkix_OCSP_serviceLocator, 0, ASN1_ITEM_ref(OCSP_SERVICELOC), 151c9490d33b98b7affb729b5f1db13cb0a348471aagl@chromium.org 0,0,0,0, 152c9490d33b98b7affb729b5f1db13cb0a348471aagl@chromium.org 0,0, 153c9490d33b98b7affb729b5f1db13cb0a348471aagl@chromium.org 0,0, 154c9490d33b98b7affb729b5f1db13cb0a348471aagl@chromium.org i2r_ocsp_serviceloc,0, 155c9490d33b98b7affb729b5f1db13cb0a348471aagl@chromium.org NULL 156c9490d33b98b7affb729b5f1db13cb0a348471aagl@chromium.org}; 157c9490d33b98b7affb729b5f1db13cb0a348471aagl@chromium.org 158480da75abf485e7e2a6be5acc0f71842368792c0jnd@chromium.orgstatic int i2r_ocsp_crlid(const X509V3_EXT_METHOD *method, void *in, BIO *bp, 159480da75abf485e7e2a6be5acc0f71842368792c0jnd@chromium.org int ind) 160c9490d33b98b7affb729b5f1db13cb0a348471aagl@chromium.org{ 161c9490d33b98b7affb729b5f1db13cb0a348471aagl@chromium.org OCSP_CRLID *a = in; 162c9490d33b98b7affb729b5f1db13cb0a348471aagl@chromium.org if (a->crlUrl) 163c9490d33b98b7affb729b5f1db13cb0a348471aagl@chromium.org { 164c9490d33b98b7affb729b5f1db13cb0a348471aagl@chromium.org if (BIO_printf(bp, "%*scrlUrl: ", ind, "") <= 0) goto err; 165c9490d33b98b7affb729b5f1db13cb0a348471aagl@chromium.org if (!ASN1_STRING_print(bp, (ASN1_STRING*)a->crlUrl)) goto err; 166c9490d33b98b7affb729b5f1db13cb0a348471aagl@chromium.org if (BIO_write(bp, "\n", 1) <= 0) goto err; 167c9490d33b98b7affb729b5f1db13cb0a348471aagl@chromium.org } 168c9490d33b98b7affb729b5f1db13cb0a348471aagl@chromium.org if (a->crlNum) 169c9490d33b98b7affb729b5f1db13cb0a348471aagl@chromium.org { 170c9490d33b98b7affb729b5f1db13cb0a348471aagl@chromium.org if (BIO_printf(bp, "%*scrlNum: ", ind, "") <= 0) goto err; 171c9490d33b98b7affb729b5f1db13cb0a348471aagl@chromium.org if (i2a_ASN1_INTEGER(bp, a->crlNum) <= 0) goto err; 172c9490d33b98b7affb729b5f1db13cb0a348471aagl@chromium.org if (BIO_write(bp, "\n", 1) <= 0) goto err; 173c9490d33b98b7affb729b5f1db13cb0a348471aagl@chromium.org } 174c9490d33b98b7affb729b5f1db13cb0a348471aagl@chromium.org if (a->crlTime) 175c9490d33b98b7affb729b5f1db13cb0a348471aagl@chromium.org { 176c9490d33b98b7affb729b5f1db13cb0a348471aagl@chromium.org if (BIO_printf(bp, "%*scrlTime: ", ind, "") <= 0) goto err; 177c9490d33b98b7affb729b5f1db13cb0a348471aagl@chromium.org if (!ASN1_GENERALIZEDTIME_print(bp, a->crlTime)) goto err; 178c9490d33b98b7affb729b5f1db13cb0a348471aagl@chromium.org if (BIO_write(bp, "\n", 1) <= 0) goto err; 179c9490d33b98b7affb729b5f1db13cb0a348471aagl@chromium.org } 180c9490d33b98b7affb729b5f1db13cb0a348471aagl@chromium.org return 1; 181c9490d33b98b7affb729b5f1db13cb0a348471aagl@chromium.org err: 182c9490d33b98b7affb729b5f1db13cb0a348471aagl@chromium.org return 0; 183c9490d33b98b7affb729b5f1db13cb0a348471aagl@chromium.org} 184c9490d33b98b7affb729b5f1db13cb0a348471aagl@chromium.org 185480da75abf485e7e2a6be5acc0f71842368792c0jnd@chromium.orgstatic int i2r_ocsp_acutoff(const X509V3_EXT_METHOD *method, void *cutoff, 186480da75abf485e7e2a6be5acc0f71842368792c0jnd@chromium.org BIO *bp, int ind) 187c9490d33b98b7affb729b5f1db13cb0a348471aagl@chromium.org{ 188c9490d33b98b7affb729b5f1db13cb0a348471aagl@chromium.org if (BIO_printf(bp, "%*s", ind, "") <= 0) return 0; 189c9490d33b98b7affb729b5f1db13cb0a348471aagl@chromium.org if(!ASN1_GENERALIZEDTIME_print(bp, cutoff)) return 0; 190c9490d33b98b7affb729b5f1db13cb0a348471aagl@chromium.org return 1; 191c9490d33b98b7affb729b5f1db13cb0a348471aagl@chromium.org} 192c9490d33b98b7affb729b5f1db13cb0a348471aagl@chromium.org 193c9490d33b98b7affb729b5f1db13cb0a348471aagl@chromium.org 194480da75abf485e7e2a6be5acc0f71842368792c0jnd@chromium.orgstatic int i2r_object(const X509V3_EXT_METHOD *method, void *oid, BIO *bp, 195480da75abf485e7e2a6be5acc0f71842368792c0jnd@chromium.org int ind) 196c9490d33b98b7affb729b5f1db13cb0a348471aagl@chromium.org{ 197c9490d33b98b7affb729b5f1db13cb0a348471aagl@chromium.org if (BIO_printf(bp, "%*s", ind, "") <= 0) return 0; 198c9490d33b98b7affb729b5f1db13cb0a348471aagl@chromium.org if(i2a_ASN1_OBJECT(bp, oid) <= 0) return 0; 199c9490d33b98b7affb729b5f1db13cb0a348471aagl@chromium.org return 1; 200c9490d33b98b7affb729b5f1db13cb0a348471aagl@chromium.org} 201c9490d33b98b7affb729b5f1db13cb0a348471aagl@chromium.org 202c9490d33b98b7affb729b5f1db13cb0a348471aagl@chromium.org/* OCSP nonce. This is needs special treatment because it doesn't have 203c9490d33b98b7affb729b5f1db13cb0a348471aagl@chromium.org * an ASN1 encoding at all: it just contains arbitrary data. 204c9490d33b98b7affb729b5f1db13cb0a348471aagl@chromium.org */ 205c9490d33b98b7affb729b5f1db13cb0a348471aagl@chromium.org 206c9490d33b98b7affb729b5f1db13cb0a348471aagl@chromium.orgstatic void *ocsp_nonce_new(void) 207c9490d33b98b7affb729b5f1db13cb0a348471aagl@chromium.org{ 208c9490d33b98b7affb729b5f1db13cb0a348471aagl@chromium.org return ASN1_OCTET_STRING_new(); 209c9490d33b98b7affb729b5f1db13cb0a348471aagl@chromium.org} 210c9490d33b98b7affb729b5f1db13cb0a348471aagl@chromium.org 211c9490d33b98b7affb729b5f1db13cb0a348471aagl@chromium.orgstatic int i2d_ocsp_nonce(void *a, unsigned char **pp) 212c9490d33b98b7affb729b5f1db13cb0a348471aagl@chromium.org{ 213c9490d33b98b7affb729b5f1db13cb0a348471aagl@chromium.org ASN1_OCTET_STRING *os = a; 214c9490d33b98b7affb729b5f1db13cb0a348471aagl@chromium.org if(pp) { 215c9490d33b98b7affb729b5f1db13cb0a348471aagl@chromium.org memcpy(*pp, os->data, os->length); 216c9490d33b98b7affb729b5f1db13cb0a348471aagl@chromium.org *pp += os->length; 217c9490d33b98b7affb729b5f1db13cb0a348471aagl@chromium.org } 218c9490d33b98b7affb729b5f1db13cb0a348471aagl@chromium.org return os->length; 219c9490d33b98b7affb729b5f1db13cb0a348471aagl@chromium.org} 220c9490d33b98b7affb729b5f1db13cb0a348471aagl@chromium.org 221c9490d33b98b7affb729b5f1db13cb0a348471aagl@chromium.orgstatic void *d2i_ocsp_nonce(void *a, const unsigned char **pp, long length) 222c9490d33b98b7affb729b5f1db13cb0a348471aagl@chromium.org{ 223c9490d33b98b7affb729b5f1db13cb0a348471aagl@chromium.org ASN1_OCTET_STRING *os, **pos; 224c9490d33b98b7affb729b5f1db13cb0a348471aagl@chromium.org pos = a; 225c9490d33b98b7affb729b5f1db13cb0a348471aagl@chromium.org if(!pos || !*pos) os = ASN1_OCTET_STRING_new(); 226c9490d33b98b7affb729b5f1db13cb0a348471aagl@chromium.org else os = *pos; 227c9490d33b98b7affb729b5f1db13cb0a348471aagl@chromium.org if(!ASN1_OCTET_STRING_set(os, *pp, length)) goto err; 228c9490d33b98b7affb729b5f1db13cb0a348471aagl@chromium.org 229c9490d33b98b7affb729b5f1db13cb0a348471aagl@chromium.org *pp += length; 230c9490d33b98b7affb729b5f1db13cb0a348471aagl@chromium.org 231c9490d33b98b7affb729b5f1db13cb0a348471aagl@chromium.org if(pos) *pos = os; 232c9490d33b98b7affb729b5f1db13cb0a348471aagl@chromium.org return os; 233c9490d33b98b7affb729b5f1db13cb0a348471aagl@chromium.org 234c9490d33b98b7affb729b5f1db13cb0a348471aagl@chromium.org err: 235c9490d33b98b7affb729b5f1db13cb0a348471aagl@chromium.org if(os && (!pos || (*pos != os))) M_ASN1_OCTET_STRING_free(os); 236c9490d33b98b7affb729b5f1db13cb0a348471aagl@chromium.org OCSPerr(OCSP_F_D2I_OCSP_NONCE, ERR_R_MALLOC_FAILURE); 237c9490d33b98b7affb729b5f1db13cb0a348471aagl@chromium.org return NULL; 238c9490d33b98b7affb729b5f1db13cb0a348471aagl@chromium.org} 239c9490d33b98b7affb729b5f1db13cb0a348471aagl@chromium.org 240c9490d33b98b7affb729b5f1db13cb0a348471aagl@chromium.orgstatic void ocsp_nonce_free(void *a) 241c9490d33b98b7affb729b5f1db13cb0a348471aagl@chromium.org{ 242c9490d33b98b7affb729b5f1db13cb0a348471aagl@chromium.org M_ASN1_OCTET_STRING_free(a); 243c9490d33b98b7affb729b5f1db13cb0a348471aagl@chromium.org} 244c9490d33b98b7affb729b5f1db13cb0a348471aagl@chromium.org 245480da75abf485e7e2a6be5acc0f71842368792c0jnd@chromium.orgstatic int i2r_ocsp_nonce(const X509V3_EXT_METHOD *method, void *nonce, 246480da75abf485e7e2a6be5acc0f71842368792c0jnd@chromium.org BIO *out, int indent) 247c9490d33b98b7affb729b5f1db13cb0a348471aagl@chromium.org{ 248c9490d33b98b7affb729b5f1db13cb0a348471aagl@chromium.org if(BIO_printf(out, "%*s", indent, "") <= 0) return 0; 249c9490d33b98b7affb729b5f1db13cb0a348471aagl@chromium.org if(i2a_ASN1_STRING(out, nonce, V_ASN1_OCTET_STRING) <= 0) return 0; 250c9490d33b98b7affb729b5f1db13cb0a348471aagl@chromium.org return 1; 251c9490d33b98b7affb729b5f1db13cb0a348471aagl@chromium.org} 252c9490d33b98b7affb729b5f1db13cb0a348471aagl@chromium.org 253c9490d33b98b7affb729b5f1db13cb0a348471aagl@chromium.org/* Nocheck is just a single NULL. Don't print anything and always set it */ 254c9490d33b98b7affb729b5f1db13cb0a348471aagl@chromium.org 255480da75abf485e7e2a6be5acc0f71842368792c0jnd@chromium.orgstatic int i2r_ocsp_nocheck(const X509V3_EXT_METHOD *method, void *nocheck, 256480da75abf485e7e2a6be5acc0f71842368792c0jnd@chromium.org BIO *out, int indent) 257c9490d33b98b7affb729b5f1db13cb0a348471aagl@chromium.org{ 258c9490d33b98b7affb729b5f1db13cb0a348471aagl@chromium.org return 1; 259c9490d33b98b7affb729b5f1db13cb0a348471aagl@chromium.org} 260c9490d33b98b7affb729b5f1db13cb0a348471aagl@chromium.org 261480da75abf485e7e2a6be5acc0f71842368792c0jnd@chromium.orgstatic void *s2i_ocsp_nocheck(const X509V3_EXT_METHOD *method, X509V3_CTX *ctx, 262480da75abf485e7e2a6be5acc0f71842368792c0jnd@chromium.org const char *str) 263c9490d33b98b7affb729b5f1db13cb0a348471aagl@chromium.org{ 264c9490d33b98b7affb729b5f1db13cb0a348471aagl@chromium.org return ASN1_NULL_new(); 265c9490d33b98b7affb729b5f1db13cb0a348471aagl@chromium.org} 266c9490d33b98b7affb729b5f1db13cb0a348471aagl@chromium.org 267480da75abf485e7e2a6be5acc0f71842368792c0jnd@chromium.orgstatic int i2r_ocsp_serviceloc(const X509V3_EXT_METHOD *method, void *in, 268480da75abf485e7e2a6be5acc0f71842368792c0jnd@chromium.org BIO *bp, int ind) 269c9490d33b98b7affb729b5f1db13cb0a348471aagl@chromium.org { 270c9490d33b98b7affb729b5f1db13cb0a348471aagl@chromium.org int i; 271c9490d33b98b7affb729b5f1db13cb0a348471aagl@chromium.org OCSP_SERVICELOC *a = in; 272c9490d33b98b7affb729b5f1db13cb0a348471aagl@chromium.org ACCESS_DESCRIPTION *ad; 273c9490d33b98b7affb729b5f1db13cb0a348471aagl@chromium.org 274c9490d33b98b7affb729b5f1db13cb0a348471aagl@chromium.org if (BIO_printf(bp, "%*sIssuer: ", ind, "") <= 0) goto err; 275c9490d33b98b7affb729b5f1db13cb0a348471aagl@chromium.org if (X509_NAME_print_ex(bp, a->issuer, 0, XN_FLAG_ONELINE) <= 0) goto err; 276c9490d33b98b7affb729b5f1db13cb0a348471aagl@chromium.org for (i = 0; i < sk_ACCESS_DESCRIPTION_num(a->locator); i++) 277c9490d33b98b7affb729b5f1db13cb0a348471aagl@chromium.org { 278c9490d33b98b7affb729b5f1db13cb0a348471aagl@chromium.org ad = sk_ACCESS_DESCRIPTION_value(a->locator,i); 279c9490d33b98b7affb729b5f1db13cb0a348471aagl@chromium.org if (BIO_printf(bp, "\n%*s", (2*ind), "") <= 0) 280c9490d33b98b7affb729b5f1db13cb0a348471aagl@chromium.org goto err; 281c9490d33b98b7affb729b5f1db13cb0a348471aagl@chromium.org if(i2a_ASN1_OBJECT(bp, ad->method) <= 0) goto err; 282c9490d33b98b7affb729b5f1db13cb0a348471aagl@chromium.org if(BIO_puts(bp, " - ") <= 0) goto err; 283c9490d33b98b7affb729b5f1db13cb0a348471aagl@chromium.org if(GENERAL_NAME_print(bp, ad->location) <= 0) goto err; 284c9490d33b98b7affb729b5f1db13cb0a348471aagl@chromium.org } 285c9490d33b98b7affb729b5f1db13cb0a348471aagl@chromium.org return 1; 286c9490d33b98b7affb729b5f1db13cb0a348471aagl@chromium.orgerr: 287c9490d33b98b7affb729b5f1db13cb0a348471aagl@chromium.org return 0; 288c9490d33b98b7affb729b5f1db13cb0a348471aagl@chromium.org } 289c9490d33b98b7affb729b5f1db13cb0a348471aagl@chromium.org#endif 290