xref: /onnv-gate/usr/src/common/openssl/crypto/pkcs7/pk7_attr.c (revision 2139:6243c3338933)
10Sstevel@tonic-gate /* pk7_attr.c */
20Sstevel@tonic-gate /* Written by Dr Stephen N Henson (shenson@bigfoot.com) for the OpenSSL
30Sstevel@tonic-gate  * project 2001.
40Sstevel@tonic-gate  */
50Sstevel@tonic-gate /* ====================================================================
6*2139Sjp161948  * Copyright (c) 2001-2004 The OpenSSL Project.  All rights reserved.
70Sstevel@tonic-gate  *
80Sstevel@tonic-gate  * Redistribution and use in source and binary forms, with or without
90Sstevel@tonic-gate  * modification, are permitted provided that the following conditions
100Sstevel@tonic-gate  * are met:
110Sstevel@tonic-gate  *
120Sstevel@tonic-gate  * 1. Redistributions of source code must retain the above copyright
130Sstevel@tonic-gate  *    notice, this list of conditions and the following disclaimer.
140Sstevel@tonic-gate  *
150Sstevel@tonic-gate  * 2. Redistributions in binary form must reproduce the above copyright
160Sstevel@tonic-gate  *    notice, this list of conditions and the following disclaimer in
170Sstevel@tonic-gate  *    the documentation and/or other materials provided with the
180Sstevel@tonic-gate  *    distribution.
190Sstevel@tonic-gate  *
200Sstevel@tonic-gate  * 3. All advertising materials mentioning features or use of this
210Sstevel@tonic-gate  *    software must display the following acknowledgment:
220Sstevel@tonic-gate  *    "This product includes software developed by the OpenSSL Project
230Sstevel@tonic-gate  *    for use in the OpenSSL Toolkit. (http://www.OpenSSL.org/)"
240Sstevel@tonic-gate  *
250Sstevel@tonic-gate  * 4. The names "OpenSSL Toolkit" and "OpenSSL Project" must not be used to
260Sstevel@tonic-gate  *    endorse or promote products derived from this software without
270Sstevel@tonic-gate  *    prior written permission. For written permission, please contact
280Sstevel@tonic-gate  *    licensing@OpenSSL.org.
290Sstevel@tonic-gate  *
300Sstevel@tonic-gate  * 5. Products derived from this software may not be called "OpenSSL"
310Sstevel@tonic-gate  *    nor may "OpenSSL" appear in their names without prior written
320Sstevel@tonic-gate  *    permission of the OpenSSL Project.
330Sstevel@tonic-gate  *
340Sstevel@tonic-gate  * 6. Redistributions of any form whatsoever must retain the following
350Sstevel@tonic-gate  *    acknowledgment:
360Sstevel@tonic-gate  *    "This product includes software developed by the OpenSSL Project
370Sstevel@tonic-gate  *    for use in the OpenSSL Toolkit (http://www.OpenSSL.org/)"
380Sstevel@tonic-gate  *
390Sstevel@tonic-gate  * THIS SOFTWARE IS PROVIDED BY THE OpenSSL PROJECT ``AS IS'' AND ANY
400Sstevel@tonic-gate  * EXPRESSED OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
410Sstevel@tonic-gate  * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR
420Sstevel@tonic-gate  * PURPOSE ARE DISCLAIMED.  IN NO EVENT SHALL THE OpenSSL PROJECT OR
430Sstevel@tonic-gate  * ITS CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL,
440Sstevel@tonic-gate  * SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT
450Sstevel@tonic-gate  * NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES;
460Sstevel@tonic-gate  * LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
470Sstevel@tonic-gate  * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT,
480Sstevel@tonic-gate  * STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE)
490Sstevel@tonic-gate  * ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED
500Sstevel@tonic-gate  * OF THE POSSIBILITY OF SUCH DAMAGE.
510Sstevel@tonic-gate  * ====================================================================
520Sstevel@tonic-gate  *
530Sstevel@tonic-gate  * This product includes cryptographic software written by Eric Young
540Sstevel@tonic-gate  * (eay@cryptsoft.com).  This product includes software written by Tim
550Sstevel@tonic-gate  * Hudson (tjh@cryptsoft.com).
560Sstevel@tonic-gate  *
570Sstevel@tonic-gate  */
580Sstevel@tonic-gate 
590Sstevel@tonic-gate #include <stdio.h>
600Sstevel@tonic-gate #include <stdlib.h>
610Sstevel@tonic-gate #include <openssl/bio.h>
620Sstevel@tonic-gate #include <openssl/asn1.h>
630Sstevel@tonic-gate #include <openssl/pem.h>
640Sstevel@tonic-gate #include <openssl/pkcs7.h>
650Sstevel@tonic-gate #include <openssl/x509.h>
660Sstevel@tonic-gate #include <openssl/err.h>
670Sstevel@tonic-gate 
PKCS7_add_attrib_smimecap(PKCS7_SIGNER_INFO * si,STACK_OF (X509_ALGOR)* cap)680Sstevel@tonic-gate int PKCS7_add_attrib_smimecap(PKCS7_SIGNER_INFO *si, STACK_OF(X509_ALGOR) *cap)
690Sstevel@tonic-gate {
700Sstevel@tonic-gate 	ASN1_STRING *seq;
710Sstevel@tonic-gate 	unsigned char *p, *pp;
720Sstevel@tonic-gate 	int len;
730Sstevel@tonic-gate 	len=i2d_ASN1_SET_OF_X509_ALGOR(cap,NULL,i2d_X509_ALGOR,
740Sstevel@tonic-gate 				       V_ASN1_SEQUENCE,V_ASN1_UNIVERSAL,
750Sstevel@tonic-gate 				       IS_SEQUENCE);
760Sstevel@tonic-gate 	if(!(pp=(unsigned char *)OPENSSL_malloc(len))) {
770Sstevel@tonic-gate 		PKCS7err(PKCS7_F_PKCS7_ADD_ATTRIB_SMIMECAP,ERR_R_MALLOC_FAILURE);
780Sstevel@tonic-gate 		return 0;
790Sstevel@tonic-gate 	}
800Sstevel@tonic-gate 	p=pp;
810Sstevel@tonic-gate 	i2d_ASN1_SET_OF_X509_ALGOR(cap,&p,i2d_X509_ALGOR, V_ASN1_SEQUENCE,
820Sstevel@tonic-gate 				   V_ASN1_UNIVERSAL, IS_SEQUENCE);
830Sstevel@tonic-gate 	if(!(seq = ASN1_STRING_new())) {
840Sstevel@tonic-gate 		PKCS7err(PKCS7_F_PKCS7_ADD_ATTRIB_SMIMECAP,ERR_R_MALLOC_FAILURE);
850Sstevel@tonic-gate 		return 0;
860Sstevel@tonic-gate 	}
870Sstevel@tonic-gate 	if(!ASN1_STRING_set (seq, pp, len)) {
880Sstevel@tonic-gate 		PKCS7err(PKCS7_F_PKCS7_ADD_ATTRIB_SMIMECAP,ERR_R_MALLOC_FAILURE);
890Sstevel@tonic-gate 		return 0;
900Sstevel@tonic-gate 	}
910Sstevel@tonic-gate 	OPENSSL_free (pp);
920Sstevel@tonic-gate         return PKCS7_add_signed_attribute(si, NID_SMIMECapabilities,
930Sstevel@tonic-gate 							V_ASN1_SEQUENCE, seq);
940Sstevel@tonic-gate }
950Sstevel@tonic-gate 
STACK_OF(X509_ALGOR)960Sstevel@tonic-gate STACK_OF(X509_ALGOR) *PKCS7_get_smimecap(PKCS7_SIGNER_INFO *si)
97*2139Sjp161948 	{
980Sstevel@tonic-gate 	ASN1_TYPE *cap;
99*2139Sjp161948 	const unsigned char *p;
100*2139Sjp161948 
1010Sstevel@tonic-gate 	cap = PKCS7_get_signed_attribute(si, NID_SMIMECapabilities);
102*2139Sjp161948 	if (!cap || (cap->type != V_ASN1_SEQUENCE))
103*2139Sjp161948 		return NULL;
1040Sstevel@tonic-gate 	p = cap->value.sequence->data;
1050Sstevel@tonic-gate 	return d2i_ASN1_SET_OF_X509_ALGOR(NULL, &p,
1060Sstevel@tonic-gate 					  cap->value.sequence->length,
1070Sstevel@tonic-gate 					  d2i_X509_ALGOR, X509_ALGOR_free,
1080Sstevel@tonic-gate 					  V_ASN1_SEQUENCE, V_ASN1_UNIVERSAL);
109*2139Sjp161948 	}
1100Sstevel@tonic-gate 
1110Sstevel@tonic-gate /* Basic smime-capabilities OID and optional integer arg */
PKCS7_simple_smimecap(STACK_OF (X509_ALGOR)* sk,int nid,int arg)1120Sstevel@tonic-gate int PKCS7_simple_smimecap(STACK_OF(X509_ALGOR) *sk, int nid, int arg)
1130Sstevel@tonic-gate {
1140Sstevel@tonic-gate 	X509_ALGOR *alg;
1150Sstevel@tonic-gate 
1160Sstevel@tonic-gate 	if(!(alg = X509_ALGOR_new())) {
1170Sstevel@tonic-gate 		PKCS7err(PKCS7_F_PKCS7_SIMPLE_SMIMECAP,ERR_R_MALLOC_FAILURE);
1180Sstevel@tonic-gate 		return 0;
1190Sstevel@tonic-gate 	}
1200Sstevel@tonic-gate 	ASN1_OBJECT_free(alg->algorithm);
1210Sstevel@tonic-gate 	alg->algorithm = OBJ_nid2obj (nid);
1220Sstevel@tonic-gate 	if (arg > 0) {
1230Sstevel@tonic-gate 		ASN1_INTEGER *nbit;
1240Sstevel@tonic-gate 		if(!(alg->parameter = ASN1_TYPE_new())) {
1250Sstevel@tonic-gate 			PKCS7err(PKCS7_F_PKCS7_SIMPLE_SMIMECAP,ERR_R_MALLOC_FAILURE);
1260Sstevel@tonic-gate 			return 0;
1270Sstevel@tonic-gate 		}
1280Sstevel@tonic-gate 		if(!(nbit = ASN1_INTEGER_new())) {
1290Sstevel@tonic-gate 			PKCS7err(PKCS7_F_PKCS7_SIMPLE_SMIMECAP,ERR_R_MALLOC_FAILURE);
1300Sstevel@tonic-gate 			return 0;
1310Sstevel@tonic-gate 		}
1320Sstevel@tonic-gate 		if(!ASN1_INTEGER_set (nbit, arg)) {
1330Sstevel@tonic-gate 			PKCS7err(PKCS7_F_PKCS7_SIMPLE_SMIMECAP,ERR_R_MALLOC_FAILURE);
1340Sstevel@tonic-gate 			return 0;
1350Sstevel@tonic-gate 		}
1360Sstevel@tonic-gate 		alg->parameter->value.integer = nbit;
1370Sstevel@tonic-gate 		alg->parameter->type = V_ASN1_INTEGER;
1380Sstevel@tonic-gate 	}
1390Sstevel@tonic-gate 	sk_X509_ALGOR_push (sk, alg);
1400Sstevel@tonic-gate 	return 1;
1410Sstevel@tonic-gate }
142