1656d9c7f52f88b3a3daccafa7655dec086c4756eThe Android Open Source Project/* pcy_lib.c */
2e45f106cb6b47af1f21efe76e933bdea2f5dd1caNagendra Modadugu/* Written by Dr Stephen N Henson (steve@openssl.org) for the OpenSSL
3656d9c7f52f88b3a3daccafa7655dec086c4756eThe Android Open Source Project * project 2004.
4656d9c7f52f88b3a3daccafa7655dec086c4756eThe Android Open Source Project */
5656d9c7f52f88b3a3daccafa7655dec086c4756eThe Android Open Source Project/* ====================================================================
6656d9c7f52f88b3a3daccafa7655dec086c4756eThe Android Open Source Project * Copyright (c) 2004 The OpenSSL Project.  All rights reserved.
7656d9c7f52f88b3a3daccafa7655dec086c4756eThe Android Open Source Project *
8656d9c7f52f88b3a3daccafa7655dec086c4756eThe Android Open Source Project * Redistribution and use in source and binary forms, with or without
9656d9c7f52f88b3a3daccafa7655dec086c4756eThe Android Open Source Project * modification, are permitted provided that the following conditions
10656d9c7f52f88b3a3daccafa7655dec086c4756eThe Android Open Source Project * are met:
11656d9c7f52f88b3a3daccafa7655dec086c4756eThe Android Open Source Project *
12656d9c7f52f88b3a3daccafa7655dec086c4756eThe Android Open Source Project * 1. Redistributions of source code must retain the above copyright
13656d9c7f52f88b3a3daccafa7655dec086c4756eThe Android Open Source Project *    notice, this list of conditions and the following disclaimer.
14656d9c7f52f88b3a3daccafa7655dec086c4756eThe Android Open Source Project *
15656d9c7f52f88b3a3daccafa7655dec086c4756eThe Android Open Source Project * 2. Redistributions in binary form must reproduce the above copyright
16656d9c7f52f88b3a3daccafa7655dec086c4756eThe Android Open Source Project *    notice, this list of conditions and the following disclaimer in
17656d9c7f52f88b3a3daccafa7655dec086c4756eThe Android Open Source Project *    the documentation and/or other materials provided with the
18656d9c7f52f88b3a3daccafa7655dec086c4756eThe Android Open Source Project *    distribution.
19656d9c7f52f88b3a3daccafa7655dec086c4756eThe Android Open Source Project *
20656d9c7f52f88b3a3daccafa7655dec086c4756eThe Android Open Source Project * 3. All advertising materials mentioning features or use of this
21656d9c7f52f88b3a3daccafa7655dec086c4756eThe Android Open Source Project *    software must display the following acknowledgment:
22656d9c7f52f88b3a3daccafa7655dec086c4756eThe Android Open Source Project *    "This product includes software developed by the OpenSSL Project
23656d9c7f52f88b3a3daccafa7655dec086c4756eThe Android Open Source Project *    for use in the OpenSSL Toolkit. (http://www.OpenSSL.org/)"
24656d9c7f52f88b3a3daccafa7655dec086c4756eThe Android Open Source Project *
25656d9c7f52f88b3a3daccafa7655dec086c4756eThe Android Open Source Project * 4. The names "OpenSSL Toolkit" and "OpenSSL Project" must not be used to
26656d9c7f52f88b3a3daccafa7655dec086c4756eThe Android Open Source Project *    endorse or promote products derived from this software without
27656d9c7f52f88b3a3daccafa7655dec086c4756eThe Android Open Source Project *    prior written permission. For written permission, please contact
28656d9c7f52f88b3a3daccafa7655dec086c4756eThe Android Open Source Project *    licensing@OpenSSL.org.
29656d9c7f52f88b3a3daccafa7655dec086c4756eThe Android Open Source Project *
30656d9c7f52f88b3a3daccafa7655dec086c4756eThe Android Open Source Project * 5. Products derived from this software may not be called "OpenSSL"
31656d9c7f52f88b3a3daccafa7655dec086c4756eThe Android Open Source Project *    nor may "OpenSSL" appear in their names without prior written
32656d9c7f52f88b3a3daccafa7655dec086c4756eThe Android Open Source Project *    permission of the OpenSSL Project.
33656d9c7f52f88b3a3daccafa7655dec086c4756eThe Android Open Source Project *
34656d9c7f52f88b3a3daccafa7655dec086c4756eThe Android Open Source Project * 6. Redistributions of any form whatsoever must retain the following
35656d9c7f52f88b3a3daccafa7655dec086c4756eThe Android Open Source Project *    acknowledgment:
36656d9c7f52f88b3a3daccafa7655dec086c4756eThe Android Open Source Project *    "This product includes software developed by the OpenSSL Project
37656d9c7f52f88b3a3daccafa7655dec086c4756eThe Android Open Source Project *    for use in the OpenSSL Toolkit (http://www.OpenSSL.org/)"
38656d9c7f52f88b3a3daccafa7655dec086c4756eThe Android Open Source Project *
39656d9c7f52f88b3a3daccafa7655dec086c4756eThe Android Open Source Project * THIS SOFTWARE IS PROVIDED BY THE OpenSSL PROJECT ``AS IS'' AND ANY
40656d9c7f52f88b3a3daccafa7655dec086c4756eThe Android Open Source Project * EXPRESSED OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
41656d9c7f52f88b3a3daccafa7655dec086c4756eThe Android Open Source Project * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR
42656d9c7f52f88b3a3daccafa7655dec086c4756eThe Android Open Source Project * PURPOSE ARE DISCLAIMED.  IN NO EVENT SHALL THE OpenSSL PROJECT OR
43656d9c7f52f88b3a3daccafa7655dec086c4756eThe Android Open Source Project * ITS CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL,
44656d9c7f52f88b3a3daccafa7655dec086c4756eThe Android Open Source Project * SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT
45656d9c7f52f88b3a3daccafa7655dec086c4756eThe Android Open Source Project * NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES;
46656d9c7f52f88b3a3daccafa7655dec086c4756eThe Android Open Source Project * LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
47656d9c7f52f88b3a3daccafa7655dec086c4756eThe Android Open Source Project * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT,
48656d9c7f52f88b3a3daccafa7655dec086c4756eThe Android Open Source Project * STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE)
49656d9c7f52f88b3a3daccafa7655dec086c4756eThe Android Open Source Project * ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED
50656d9c7f52f88b3a3daccafa7655dec086c4756eThe Android Open Source Project * OF THE POSSIBILITY OF SUCH DAMAGE.
51656d9c7f52f88b3a3daccafa7655dec086c4756eThe Android Open Source Project * ====================================================================
52656d9c7f52f88b3a3daccafa7655dec086c4756eThe Android Open Source Project *
53656d9c7f52f88b3a3daccafa7655dec086c4756eThe Android Open Source Project * This product includes cryptographic software written by Eric Young
54656d9c7f52f88b3a3daccafa7655dec086c4756eThe Android Open Source Project * (eay@cryptsoft.com).  This product includes software written by Tim
55656d9c7f52f88b3a3daccafa7655dec086c4756eThe Android Open Source Project * Hudson (tjh@cryptsoft.com).
56656d9c7f52f88b3a3daccafa7655dec086c4756eThe Android Open Source Project *
57656d9c7f52f88b3a3daccafa7655dec086c4756eThe Android Open Source Project */
58656d9c7f52f88b3a3daccafa7655dec086c4756eThe Android Open Source Project
59656d9c7f52f88b3a3daccafa7655dec086c4756eThe Android Open Source Project
60656d9c7f52f88b3a3daccafa7655dec086c4756eThe Android Open Source Project#include "cryptlib.h"
61656d9c7f52f88b3a3daccafa7655dec086c4756eThe Android Open Source Project#include <openssl/x509.h>
62656d9c7f52f88b3a3daccafa7655dec086c4756eThe Android Open Source Project#include <openssl/x509v3.h>
63656d9c7f52f88b3a3daccafa7655dec086c4756eThe Android Open Source Project
64656d9c7f52f88b3a3daccafa7655dec086c4756eThe Android Open Source Project#include "pcy_int.h"
65656d9c7f52f88b3a3daccafa7655dec086c4756eThe Android Open Source Project
66656d9c7f52f88b3a3daccafa7655dec086c4756eThe Android Open Source Project/* accessor functions */
67656d9c7f52f88b3a3daccafa7655dec086c4756eThe Android Open Source Project
68656d9c7f52f88b3a3daccafa7655dec086c4756eThe Android Open Source Project/* X509_POLICY_TREE stuff */
69656d9c7f52f88b3a3daccafa7655dec086c4756eThe Android Open Source Project
70656d9c7f52f88b3a3daccafa7655dec086c4756eThe Android Open Source Projectint X509_policy_tree_level_count(const X509_POLICY_TREE *tree)
71656d9c7f52f88b3a3daccafa7655dec086c4756eThe Android Open Source Project	{
72656d9c7f52f88b3a3daccafa7655dec086c4756eThe Android Open Source Project	if (!tree)
73656d9c7f52f88b3a3daccafa7655dec086c4756eThe Android Open Source Project		return 0;
74656d9c7f52f88b3a3daccafa7655dec086c4756eThe Android Open Source Project	return tree->nlevel;
75656d9c7f52f88b3a3daccafa7655dec086c4756eThe Android Open Source Project	}
76656d9c7f52f88b3a3daccafa7655dec086c4756eThe Android Open Source Project
77656d9c7f52f88b3a3daccafa7655dec086c4756eThe Android Open Source ProjectX509_POLICY_LEVEL *
78656d9c7f52f88b3a3daccafa7655dec086c4756eThe Android Open Source Project	X509_policy_tree_get0_level(const X509_POLICY_TREE *tree, int i)
79656d9c7f52f88b3a3daccafa7655dec086c4756eThe Android Open Source Project	{
80656d9c7f52f88b3a3daccafa7655dec086c4756eThe Android Open Source Project	if (!tree || (i < 0) || (i >= tree->nlevel))
81656d9c7f52f88b3a3daccafa7655dec086c4756eThe Android Open Source Project		return NULL;
82656d9c7f52f88b3a3daccafa7655dec086c4756eThe Android Open Source Project	return tree->levels + i;
83656d9c7f52f88b3a3daccafa7655dec086c4756eThe Android Open Source Project	}
84656d9c7f52f88b3a3daccafa7655dec086c4756eThe Android Open Source Project
85656d9c7f52f88b3a3daccafa7655dec086c4756eThe Android Open Source ProjectSTACK_OF(X509_POLICY_NODE) *
86656d9c7f52f88b3a3daccafa7655dec086c4756eThe Android Open Source Project		X509_policy_tree_get0_policies(const X509_POLICY_TREE *tree)
87656d9c7f52f88b3a3daccafa7655dec086c4756eThe Android Open Source Project	{
88656d9c7f52f88b3a3daccafa7655dec086c4756eThe Android Open Source Project	if (!tree)
89656d9c7f52f88b3a3daccafa7655dec086c4756eThe Android Open Source Project		return NULL;
90656d9c7f52f88b3a3daccafa7655dec086c4756eThe Android Open Source Project	return tree->auth_policies;
91656d9c7f52f88b3a3daccafa7655dec086c4756eThe Android Open Source Project	}
92656d9c7f52f88b3a3daccafa7655dec086c4756eThe Android Open Source Project
93656d9c7f52f88b3a3daccafa7655dec086c4756eThe Android Open Source ProjectSTACK_OF(X509_POLICY_NODE) *
94656d9c7f52f88b3a3daccafa7655dec086c4756eThe Android Open Source Project	X509_policy_tree_get0_user_policies(const X509_POLICY_TREE *tree)
95656d9c7f52f88b3a3daccafa7655dec086c4756eThe Android Open Source Project	{
96656d9c7f52f88b3a3daccafa7655dec086c4756eThe Android Open Source Project	if (!tree)
97656d9c7f52f88b3a3daccafa7655dec086c4756eThe Android Open Source Project		return NULL;
98656d9c7f52f88b3a3daccafa7655dec086c4756eThe Android Open Source Project	if (tree->flags & POLICY_FLAG_ANY_POLICY)
99656d9c7f52f88b3a3daccafa7655dec086c4756eThe Android Open Source Project		return tree->auth_policies;
100656d9c7f52f88b3a3daccafa7655dec086c4756eThe Android Open Source Project	else
101656d9c7f52f88b3a3daccafa7655dec086c4756eThe Android Open Source Project		return tree->user_policies;
102656d9c7f52f88b3a3daccafa7655dec086c4756eThe Android Open Source Project	}
103656d9c7f52f88b3a3daccafa7655dec086c4756eThe Android Open Source Project
104656d9c7f52f88b3a3daccafa7655dec086c4756eThe Android Open Source Project/* X509_POLICY_LEVEL stuff */
105656d9c7f52f88b3a3daccafa7655dec086c4756eThe Android Open Source Project
106656d9c7f52f88b3a3daccafa7655dec086c4756eThe Android Open Source Projectint X509_policy_level_node_count(X509_POLICY_LEVEL *level)
107656d9c7f52f88b3a3daccafa7655dec086c4756eThe Android Open Source Project	{
108656d9c7f52f88b3a3daccafa7655dec086c4756eThe Android Open Source Project	int n;
109656d9c7f52f88b3a3daccafa7655dec086c4756eThe Android Open Source Project	if (!level)
110656d9c7f52f88b3a3daccafa7655dec086c4756eThe Android Open Source Project		return 0;
111656d9c7f52f88b3a3daccafa7655dec086c4756eThe Android Open Source Project	if (level->anyPolicy)
112656d9c7f52f88b3a3daccafa7655dec086c4756eThe Android Open Source Project		n = 1;
113656d9c7f52f88b3a3daccafa7655dec086c4756eThe Android Open Source Project	else
114656d9c7f52f88b3a3daccafa7655dec086c4756eThe Android Open Source Project		n = 0;
115656d9c7f52f88b3a3daccafa7655dec086c4756eThe Android Open Source Project	if (level->nodes)
116656d9c7f52f88b3a3daccafa7655dec086c4756eThe Android Open Source Project		n += sk_X509_POLICY_NODE_num(level->nodes);
117656d9c7f52f88b3a3daccafa7655dec086c4756eThe Android Open Source Project	return n;
118656d9c7f52f88b3a3daccafa7655dec086c4756eThe Android Open Source Project	}
119656d9c7f52f88b3a3daccafa7655dec086c4756eThe Android Open Source Project
120656d9c7f52f88b3a3daccafa7655dec086c4756eThe Android Open Source ProjectX509_POLICY_NODE *X509_policy_level_get0_node(X509_POLICY_LEVEL *level, int i)
121656d9c7f52f88b3a3daccafa7655dec086c4756eThe Android Open Source Project	{
122656d9c7f52f88b3a3daccafa7655dec086c4756eThe Android Open Source Project	if (!level)
123656d9c7f52f88b3a3daccafa7655dec086c4756eThe Android Open Source Project		return NULL;
124656d9c7f52f88b3a3daccafa7655dec086c4756eThe Android Open Source Project	if (level->anyPolicy)
125656d9c7f52f88b3a3daccafa7655dec086c4756eThe Android Open Source Project		{
126656d9c7f52f88b3a3daccafa7655dec086c4756eThe Android Open Source Project		if (i == 0)
127656d9c7f52f88b3a3daccafa7655dec086c4756eThe Android Open Source Project			return level->anyPolicy;
128656d9c7f52f88b3a3daccafa7655dec086c4756eThe Android Open Source Project		i--;
129656d9c7f52f88b3a3daccafa7655dec086c4756eThe Android Open Source Project		}
130656d9c7f52f88b3a3daccafa7655dec086c4756eThe Android Open Source Project	return sk_X509_POLICY_NODE_value(level->nodes, i);
131656d9c7f52f88b3a3daccafa7655dec086c4756eThe Android Open Source Project	}
132656d9c7f52f88b3a3daccafa7655dec086c4756eThe Android Open Source Project
133656d9c7f52f88b3a3daccafa7655dec086c4756eThe Android Open Source Project/* X509_POLICY_NODE stuff */
134656d9c7f52f88b3a3daccafa7655dec086c4756eThe Android Open Source Project
135656d9c7f52f88b3a3daccafa7655dec086c4756eThe Android Open Source Projectconst ASN1_OBJECT *X509_policy_node_get0_policy(const X509_POLICY_NODE *node)
136656d9c7f52f88b3a3daccafa7655dec086c4756eThe Android Open Source Project	{
137656d9c7f52f88b3a3daccafa7655dec086c4756eThe Android Open Source Project	if (!node)
138656d9c7f52f88b3a3daccafa7655dec086c4756eThe Android Open Source Project		return NULL;
139656d9c7f52f88b3a3daccafa7655dec086c4756eThe Android Open Source Project	return node->data->valid_policy;
140656d9c7f52f88b3a3daccafa7655dec086c4756eThe Android Open Source Project	}
141656d9c7f52f88b3a3daccafa7655dec086c4756eThe Android Open Source Project
142656d9c7f52f88b3a3daccafa7655dec086c4756eThe Android Open Source Project#if 0
143656d9c7f52f88b3a3daccafa7655dec086c4756eThe Android Open Source Projectint X509_policy_node_get_critical(const X509_POLICY_NODE *node)
144656d9c7f52f88b3a3daccafa7655dec086c4756eThe Android Open Source Project	{
145656d9c7f52f88b3a3daccafa7655dec086c4756eThe Android Open Source Project	if (node_critical(node))
146656d9c7f52f88b3a3daccafa7655dec086c4756eThe Android Open Source Project		return 1;
147656d9c7f52f88b3a3daccafa7655dec086c4756eThe Android Open Source Project	return 0;
148656d9c7f52f88b3a3daccafa7655dec086c4756eThe Android Open Source Project	}
149656d9c7f52f88b3a3daccafa7655dec086c4756eThe Android Open Source Project#endif
150656d9c7f52f88b3a3daccafa7655dec086c4756eThe Android Open Source Project
151656d9c7f52f88b3a3daccafa7655dec086c4756eThe Android Open Source ProjectSTACK_OF(POLICYQUALINFO) *
152656d9c7f52f88b3a3daccafa7655dec086c4756eThe Android Open Source Project		X509_policy_node_get0_qualifiers(const X509_POLICY_NODE *node)
153656d9c7f52f88b3a3daccafa7655dec086c4756eThe Android Open Source Project	{
154656d9c7f52f88b3a3daccafa7655dec086c4756eThe Android Open Source Project	if (!node)
155656d9c7f52f88b3a3daccafa7655dec086c4756eThe Android Open Source Project		return NULL;
156656d9c7f52f88b3a3daccafa7655dec086c4756eThe Android Open Source Project	return node->data->qualifier_set;
157656d9c7f52f88b3a3daccafa7655dec086c4756eThe Android Open Source Project	}
158656d9c7f52f88b3a3daccafa7655dec086c4756eThe Android Open Source Project
159656d9c7f52f88b3a3daccafa7655dec086c4756eThe Android Open Source Projectconst X509_POLICY_NODE *
160656d9c7f52f88b3a3daccafa7655dec086c4756eThe Android Open Source Project		X509_policy_node_get0_parent(const X509_POLICY_NODE *node)
161656d9c7f52f88b3a3daccafa7655dec086c4756eThe Android Open Source Project	{
162656d9c7f52f88b3a3daccafa7655dec086c4756eThe Android Open Source Project	if (!node)
163656d9c7f52f88b3a3daccafa7655dec086c4756eThe Android Open Source Project		return NULL;
164656d9c7f52f88b3a3daccafa7655dec086c4756eThe Android Open Source Project	return node->parent;
165656d9c7f52f88b3a3daccafa7655dec086c4756eThe Android Open Source Project	}
166656d9c7f52f88b3a3daccafa7655dec086c4756eThe Android Open Source Project
167656d9c7f52f88b3a3daccafa7655dec086c4756eThe Android Open Source Project
168