1d9e397b599b13d642138480a28c14db7a136bf0Adam Langley/* v3_extku.c */ 24969cc9b0ab2905ec478277f50ed3849b37a6c6bDavid Benjamin/* 34969cc9b0ab2905ec478277f50ed3849b37a6c6bDavid Benjamin * Written by Dr Stephen N Henson (steve@openssl.org) for the OpenSSL project 44969cc9b0ab2905ec478277f50ed3849b37a6c6bDavid Benjamin * 1999. 5d9e397b599b13d642138480a28c14db7a136bf0Adam Langley */ 6d9e397b599b13d642138480a28c14db7a136bf0Adam Langley/* ==================================================================== 7d9e397b599b13d642138480a28c14db7a136bf0Adam Langley * Copyright (c) 1999 The OpenSSL Project. All rights reserved. 8d9e397b599b13d642138480a28c14db7a136bf0Adam Langley * 9d9e397b599b13d642138480a28c14db7a136bf0Adam Langley * Redistribution and use in source and binary forms, with or without 10d9e397b599b13d642138480a28c14db7a136bf0Adam Langley * modification, are permitted provided that the following conditions 11d9e397b599b13d642138480a28c14db7a136bf0Adam Langley * are met: 12d9e397b599b13d642138480a28c14db7a136bf0Adam Langley * 13d9e397b599b13d642138480a28c14db7a136bf0Adam Langley * 1. Redistributions of source code must retain the above copyright 144969cc9b0ab2905ec478277f50ed3849b37a6c6bDavid Benjamin * notice, this list of conditions and the following disclaimer. 15d9e397b599b13d642138480a28c14db7a136bf0Adam Langley * 16d9e397b599b13d642138480a28c14db7a136bf0Adam Langley * 2. Redistributions in binary form must reproduce the above copyright 17d9e397b599b13d642138480a28c14db7a136bf0Adam Langley * notice, this list of conditions and the following disclaimer in 18d9e397b599b13d642138480a28c14db7a136bf0Adam Langley * the documentation and/or other materials provided with the 19d9e397b599b13d642138480a28c14db7a136bf0Adam Langley * distribution. 20d9e397b599b13d642138480a28c14db7a136bf0Adam Langley * 21d9e397b599b13d642138480a28c14db7a136bf0Adam Langley * 3. All advertising materials mentioning features or use of this 22d9e397b599b13d642138480a28c14db7a136bf0Adam Langley * software must display the following acknowledgment: 23d9e397b599b13d642138480a28c14db7a136bf0Adam Langley * "This product includes software developed by the OpenSSL Project 24d9e397b599b13d642138480a28c14db7a136bf0Adam Langley * for use in the OpenSSL Toolkit. (http://www.OpenSSL.org/)" 25d9e397b599b13d642138480a28c14db7a136bf0Adam Langley * 26d9e397b599b13d642138480a28c14db7a136bf0Adam Langley * 4. The names "OpenSSL Toolkit" and "OpenSSL Project" must not be used to 27d9e397b599b13d642138480a28c14db7a136bf0Adam Langley * endorse or promote products derived from this software without 28d9e397b599b13d642138480a28c14db7a136bf0Adam Langley * prior written permission. For written permission, please contact 29d9e397b599b13d642138480a28c14db7a136bf0Adam Langley * licensing@OpenSSL.org. 30d9e397b599b13d642138480a28c14db7a136bf0Adam Langley * 31d9e397b599b13d642138480a28c14db7a136bf0Adam Langley * 5. Products derived from this software may not be called "OpenSSL" 32d9e397b599b13d642138480a28c14db7a136bf0Adam Langley * nor may "OpenSSL" appear in their names without prior written 33d9e397b599b13d642138480a28c14db7a136bf0Adam Langley * permission of the OpenSSL Project. 34d9e397b599b13d642138480a28c14db7a136bf0Adam Langley * 35d9e397b599b13d642138480a28c14db7a136bf0Adam Langley * 6. Redistributions of any form whatsoever must retain the following 36d9e397b599b13d642138480a28c14db7a136bf0Adam Langley * acknowledgment: 37d9e397b599b13d642138480a28c14db7a136bf0Adam Langley * "This product includes software developed by the OpenSSL Project 38d9e397b599b13d642138480a28c14db7a136bf0Adam Langley * for use in the OpenSSL Toolkit (http://www.OpenSSL.org/)" 39d9e397b599b13d642138480a28c14db7a136bf0Adam Langley * 40d9e397b599b13d642138480a28c14db7a136bf0Adam Langley * THIS SOFTWARE IS PROVIDED BY THE OpenSSL PROJECT ``AS IS'' AND ANY 41d9e397b599b13d642138480a28c14db7a136bf0Adam Langley * EXPRESSED OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE 42d9e397b599b13d642138480a28c14db7a136bf0Adam Langley * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR 43d9e397b599b13d642138480a28c14db7a136bf0Adam Langley * PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE OpenSSL PROJECT OR 44d9e397b599b13d642138480a28c14db7a136bf0Adam Langley * ITS CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, 45d9e397b599b13d642138480a28c14db7a136bf0Adam Langley * SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT 46d9e397b599b13d642138480a28c14db7a136bf0Adam Langley * NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; 47d9e397b599b13d642138480a28c14db7a136bf0Adam Langley * LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) 48d9e397b599b13d642138480a28c14db7a136bf0Adam Langley * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, 49d9e397b599b13d642138480a28c14db7a136bf0Adam Langley * STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) 50d9e397b599b13d642138480a28c14db7a136bf0Adam Langley * ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED 51d9e397b599b13d642138480a28c14db7a136bf0Adam Langley * OF THE POSSIBILITY OF SUCH DAMAGE. 52d9e397b599b13d642138480a28c14db7a136bf0Adam Langley * ==================================================================== 53d9e397b599b13d642138480a28c14db7a136bf0Adam Langley * 54d9e397b599b13d642138480a28c14db7a136bf0Adam Langley * This product includes cryptographic software written by Eric Young 55d9e397b599b13d642138480a28c14db7a136bf0Adam Langley * (eay@cryptsoft.com). This product includes software written by Tim 56d9e397b599b13d642138480a28c14db7a136bf0Adam Langley * Hudson (tjh@cryptsoft.com). */ 57d9e397b599b13d642138480a28c14db7a136bf0Adam Langley 58d9e397b599b13d642138480a28c14db7a136bf0Adam Langley#include <stdio.h> 59d9e397b599b13d642138480a28c14db7a136bf0Adam Langley 60d9e397b599b13d642138480a28c14db7a136bf0Adam Langley#include <openssl/asn1t.h> 61d9e397b599b13d642138480a28c14db7a136bf0Adam Langley#include <openssl/conf.h> 62d9e397b599b13d642138480a28c14db7a136bf0Adam Langley#include <openssl/err.h> 63d9e397b599b13d642138480a28c14db7a136bf0Adam Langley#include <openssl/obj.h> 64d9e397b599b13d642138480a28c14db7a136bf0Adam Langley#include <openssl/x509v3.h> 65d9e397b599b13d642138480a28c14db7a136bf0Adam Langley 66d9e397b599b13d642138480a28c14db7a136bf0Adam Langleystatic void *v2i_EXTENDED_KEY_USAGE(const X509V3_EXT_METHOD *method, 674969cc9b0ab2905ec478277f50ed3849b37a6c6bDavid Benjamin X509V3_CTX *ctx, 684969cc9b0ab2905ec478277f50ed3849b37a6c6bDavid Benjamin STACK_OF(CONF_VALUE) *nval); 694969cc9b0ab2905ec478277f50ed3849b37a6c6bDavid Benjaminstatic STACK_OF(CONF_VALUE) *i2v_EXTENDED_KEY_USAGE(const X509V3_EXT_METHOD 704969cc9b0ab2905ec478277f50ed3849b37a6c6bDavid Benjamin *method, void *eku, STACK_OF(CONF_VALUE) 714969cc9b0ab2905ec478277f50ed3849b37a6c6bDavid Benjamin *extlist); 72d9e397b599b13d642138480a28c14db7a136bf0Adam Langley 73d9e397b599b13d642138480a28c14db7a136bf0Adam Langleyconst X509V3_EXT_METHOD v3_ext_ku = { 744969cc9b0ab2905ec478277f50ed3849b37a6c6bDavid Benjamin NID_ext_key_usage, 0, 754969cc9b0ab2905ec478277f50ed3849b37a6c6bDavid Benjamin ASN1_ITEM_ref(EXTENDED_KEY_USAGE), 764969cc9b0ab2905ec478277f50ed3849b37a6c6bDavid Benjamin 0, 0, 0, 0, 774969cc9b0ab2905ec478277f50ed3849b37a6c6bDavid Benjamin 0, 0, 784969cc9b0ab2905ec478277f50ed3849b37a6c6bDavid Benjamin i2v_EXTENDED_KEY_USAGE, 794969cc9b0ab2905ec478277f50ed3849b37a6c6bDavid Benjamin v2i_EXTENDED_KEY_USAGE, 804969cc9b0ab2905ec478277f50ed3849b37a6c6bDavid Benjamin 0, 0, 814969cc9b0ab2905ec478277f50ed3849b37a6c6bDavid Benjamin NULL 82d9e397b599b13d642138480a28c14db7a136bf0Adam Langley}; 83d9e397b599b13d642138480a28c14db7a136bf0Adam Langley 84d9e397b599b13d642138480a28c14db7a136bf0Adam Langley/* NB OCSP acceptable responses also is a SEQUENCE OF OBJECT */ 85d9e397b599b13d642138480a28c14db7a136bf0Adam Langleyconst X509V3_EXT_METHOD v3_ocsp_accresp = { 864969cc9b0ab2905ec478277f50ed3849b37a6c6bDavid Benjamin NID_id_pkix_OCSP_acceptableResponses, 0, 874969cc9b0ab2905ec478277f50ed3849b37a6c6bDavid Benjamin ASN1_ITEM_ref(EXTENDED_KEY_USAGE), 884969cc9b0ab2905ec478277f50ed3849b37a6c6bDavid Benjamin 0, 0, 0, 0, 894969cc9b0ab2905ec478277f50ed3849b37a6c6bDavid Benjamin 0, 0, 904969cc9b0ab2905ec478277f50ed3849b37a6c6bDavid Benjamin i2v_EXTENDED_KEY_USAGE, 914969cc9b0ab2905ec478277f50ed3849b37a6c6bDavid Benjamin v2i_EXTENDED_KEY_USAGE, 924969cc9b0ab2905ec478277f50ed3849b37a6c6bDavid Benjamin 0, 0, 934969cc9b0ab2905ec478277f50ed3849b37a6c6bDavid Benjamin NULL 94d9e397b599b13d642138480a28c14db7a136bf0Adam Langley}; 95d9e397b599b13d642138480a28c14db7a136bf0Adam Langley 964969cc9b0ab2905ec478277f50ed3849b37a6c6bDavid BenjaminASN1_ITEM_TEMPLATE(EXTENDED_KEY_USAGE) = 974969cc9b0ab2905ec478277f50ed3849b37a6c6bDavid Benjamin ASN1_EX_TEMPLATE_TYPE(ASN1_TFLG_SEQUENCE_OF, 0, EXTENDED_KEY_USAGE, ASN1_OBJECT) 98d9e397b599b13d642138480a28c14db7a136bf0Adam LangleyASN1_ITEM_TEMPLATE_END(EXTENDED_KEY_USAGE) 99d9e397b599b13d642138480a28c14db7a136bf0Adam Langley 100d9e397b599b13d642138480a28c14db7a136bf0Adam LangleyIMPLEMENT_ASN1_FUNCTIONS(EXTENDED_KEY_USAGE) 101d9e397b599b13d642138480a28c14db7a136bf0Adam Langley 1024969cc9b0ab2905ec478277f50ed3849b37a6c6bDavid Benjaminstatic STACK_OF(CONF_VALUE) *i2v_EXTENDED_KEY_USAGE(const X509V3_EXT_METHOD 1034969cc9b0ab2905ec478277f50ed3849b37a6c6bDavid Benjamin *method, void *a, STACK_OF(CONF_VALUE) 1044969cc9b0ab2905ec478277f50ed3849b37a6c6bDavid Benjamin *ext_list) 105d9e397b599b13d642138480a28c14db7a136bf0Adam Langley{ 1064969cc9b0ab2905ec478277f50ed3849b37a6c6bDavid Benjamin EXTENDED_KEY_USAGE *eku = a; 1074969cc9b0ab2905ec478277f50ed3849b37a6c6bDavid Benjamin size_t i; 1084969cc9b0ab2905ec478277f50ed3849b37a6c6bDavid Benjamin ASN1_OBJECT *obj; 1094969cc9b0ab2905ec478277f50ed3849b37a6c6bDavid Benjamin char obj_tmp[80]; 1104969cc9b0ab2905ec478277f50ed3849b37a6c6bDavid Benjamin for (i = 0; i < sk_ASN1_OBJECT_num(eku); i++) { 1114969cc9b0ab2905ec478277f50ed3849b37a6c6bDavid Benjamin obj = sk_ASN1_OBJECT_value(eku, i); 1124969cc9b0ab2905ec478277f50ed3849b37a6c6bDavid Benjamin i2t_ASN1_OBJECT(obj_tmp, 80, obj); 1134969cc9b0ab2905ec478277f50ed3849b37a6c6bDavid Benjamin X509V3_add_value(NULL, obj_tmp, &ext_list); 1144969cc9b0ab2905ec478277f50ed3849b37a6c6bDavid Benjamin } 1154969cc9b0ab2905ec478277f50ed3849b37a6c6bDavid Benjamin return ext_list; 116d9e397b599b13d642138480a28c14db7a136bf0Adam Langley} 117d9e397b599b13d642138480a28c14db7a136bf0Adam Langley 118d9e397b599b13d642138480a28c14db7a136bf0Adam Langleystatic void *v2i_EXTENDED_KEY_USAGE(const X509V3_EXT_METHOD *method, 1194969cc9b0ab2905ec478277f50ed3849b37a6c6bDavid Benjamin X509V3_CTX *ctx, 1204969cc9b0ab2905ec478277f50ed3849b37a6c6bDavid Benjamin STACK_OF(CONF_VALUE) *nval) 121d9e397b599b13d642138480a28c14db7a136bf0Adam Langley{ 1224969cc9b0ab2905ec478277f50ed3849b37a6c6bDavid Benjamin EXTENDED_KEY_USAGE *extku; 1234969cc9b0ab2905ec478277f50ed3849b37a6c6bDavid Benjamin char *extval; 1244969cc9b0ab2905ec478277f50ed3849b37a6c6bDavid Benjamin ASN1_OBJECT *objtmp; 1254969cc9b0ab2905ec478277f50ed3849b37a6c6bDavid Benjamin CONF_VALUE *val; 1264969cc9b0ab2905ec478277f50ed3849b37a6c6bDavid Benjamin size_t i; 127d9e397b599b13d642138480a28c14db7a136bf0Adam Langley 1284969cc9b0ab2905ec478277f50ed3849b37a6c6bDavid Benjamin if (!(extku = sk_ASN1_OBJECT_new_null())) { 1294969cc9b0ab2905ec478277f50ed3849b37a6c6bDavid Benjamin OPENSSL_PUT_ERROR(X509V3, ERR_R_MALLOC_FAILURE); 1304969cc9b0ab2905ec478277f50ed3849b37a6c6bDavid Benjamin return NULL; 1314969cc9b0ab2905ec478277f50ed3849b37a6c6bDavid Benjamin } 132d9e397b599b13d642138480a28c14db7a136bf0Adam Langley 1334969cc9b0ab2905ec478277f50ed3849b37a6c6bDavid Benjamin for (i = 0; i < sk_CONF_VALUE_num(nval); i++) { 1344969cc9b0ab2905ec478277f50ed3849b37a6c6bDavid Benjamin val = sk_CONF_VALUE_value(nval, i); 1354969cc9b0ab2905ec478277f50ed3849b37a6c6bDavid Benjamin if (val->value) 1364969cc9b0ab2905ec478277f50ed3849b37a6c6bDavid Benjamin extval = val->value; 1374969cc9b0ab2905ec478277f50ed3849b37a6c6bDavid Benjamin else 1384969cc9b0ab2905ec478277f50ed3849b37a6c6bDavid Benjamin extval = val->name; 1394969cc9b0ab2905ec478277f50ed3849b37a6c6bDavid Benjamin if (!(objtmp = OBJ_txt2obj(extval, 0))) { 1404969cc9b0ab2905ec478277f50ed3849b37a6c6bDavid Benjamin sk_ASN1_OBJECT_pop_free(extku, ASN1_OBJECT_free); 1414969cc9b0ab2905ec478277f50ed3849b37a6c6bDavid Benjamin OPENSSL_PUT_ERROR(X509V3, X509V3_R_INVALID_OBJECT_IDENTIFIER); 1424969cc9b0ab2905ec478277f50ed3849b37a6c6bDavid Benjamin X509V3_conf_err(val); 1434969cc9b0ab2905ec478277f50ed3849b37a6c6bDavid Benjamin return NULL; 1444969cc9b0ab2905ec478277f50ed3849b37a6c6bDavid Benjamin } 1454969cc9b0ab2905ec478277f50ed3849b37a6c6bDavid Benjamin sk_ASN1_OBJECT_push(extku, objtmp); 1464969cc9b0ab2905ec478277f50ed3849b37a6c6bDavid Benjamin } 1474969cc9b0ab2905ec478277f50ed3849b37a6c6bDavid Benjamin return extku; 148d9e397b599b13d642138480a28c14db7a136bf0Adam Langley} 149