1*2139Sjp161948 /* pcy_data.c */
2*2139Sjp161948 /* Written by Dr Stephen N Henson (shenson@bigfoot.com) for the OpenSSL
3*2139Sjp161948 * project 2004.
4*2139Sjp161948 */
5*2139Sjp161948 /* ====================================================================
6*2139Sjp161948 * Copyright (c) 2004 The OpenSSL Project. All rights reserved.
7*2139Sjp161948 *
8*2139Sjp161948 * Redistribution and use in source and binary forms, with or without
9*2139Sjp161948 * modification, are permitted provided that the following conditions
10*2139Sjp161948 * are met:
11*2139Sjp161948 *
12*2139Sjp161948 * 1. Redistributions of source code must retain the above copyright
13*2139Sjp161948 * notice, this list of conditions and the following disclaimer.
14*2139Sjp161948 *
15*2139Sjp161948 * 2. Redistributions in binary form must reproduce the above copyright
16*2139Sjp161948 * notice, this list of conditions and the following disclaimer in
17*2139Sjp161948 * the documentation and/or other materials provided with the
18*2139Sjp161948 * distribution.
19*2139Sjp161948 *
20*2139Sjp161948 * 3. All advertising materials mentioning features or use of this
21*2139Sjp161948 * software must display the following acknowledgment:
22*2139Sjp161948 * "This product includes software developed by the OpenSSL Project
23*2139Sjp161948 * for use in the OpenSSL Toolkit. (http://www.OpenSSL.org/)"
24*2139Sjp161948 *
25*2139Sjp161948 * 4. The names "OpenSSL Toolkit" and "OpenSSL Project" must not be used to
26*2139Sjp161948 * endorse or promote products derived from this software without
27*2139Sjp161948 * prior written permission. For written permission, please contact
28*2139Sjp161948 * licensing@OpenSSL.org.
29*2139Sjp161948 *
30*2139Sjp161948 * 5. Products derived from this software may not be called "OpenSSL"
31*2139Sjp161948 * nor may "OpenSSL" appear in their names without prior written
32*2139Sjp161948 * permission of the OpenSSL Project.
33*2139Sjp161948 *
34*2139Sjp161948 * 6. Redistributions of any form whatsoever must retain the following
35*2139Sjp161948 * acknowledgment:
36*2139Sjp161948 * "This product includes software developed by the OpenSSL Project
37*2139Sjp161948 * for use in the OpenSSL Toolkit (http://www.OpenSSL.org/)"
38*2139Sjp161948 *
39*2139Sjp161948 * THIS SOFTWARE IS PROVIDED BY THE OpenSSL PROJECT ``AS IS'' AND ANY
40*2139Sjp161948 * EXPRESSED OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
41*2139Sjp161948 * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR
42*2139Sjp161948 * PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE OpenSSL PROJECT OR
43*2139Sjp161948 * ITS CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL,
44*2139Sjp161948 * SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT
45*2139Sjp161948 * NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES;
46*2139Sjp161948 * LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
47*2139Sjp161948 * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT,
48*2139Sjp161948 * STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE)
49*2139Sjp161948 * ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED
50*2139Sjp161948 * OF THE POSSIBILITY OF SUCH DAMAGE.
51*2139Sjp161948 * ====================================================================
52*2139Sjp161948 *
53*2139Sjp161948 * This product includes cryptographic software written by Eric Young
54*2139Sjp161948 * (eay@cryptsoft.com). This product includes software written by Tim
55*2139Sjp161948 * Hudson (tjh@cryptsoft.com).
56*2139Sjp161948 *
57*2139Sjp161948 */
58*2139Sjp161948
59*2139Sjp161948 #include "cryptlib.h"
60*2139Sjp161948 #include <openssl/x509.h>
61*2139Sjp161948 #include <openssl/x509v3.h>
62*2139Sjp161948
63*2139Sjp161948 #include "pcy_int.h"
64*2139Sjp161948
65*2139Sjp161948 /* Policy Node routines */
66*2139Sjp161948
policy_data_free(X509_POLICY_DATA * data)67*2139Sjp161948 void policy_data_free(X509_POLICY_DATA *data)
68*2139Sjp161948 {
69*2139Sjp161948 ASN1_OBJECT_free(data->valid_policy);
70*2139Sjp161948 /* Don't free qualifiers if shared */
71*2139Sjp161948 if (!(data->flags & POLICY_DATA_FLAG_SHARED_QUALIFIERS))
72*2139Sjp161948 sk_POLICYQUALINFO_pop_free(data->qualifier_set,
73*2139Sjp161948 POLICYQUALINFO_free);
74*2139Sjp161948 sk_ASN1_OBJECT_pop_free(data->expected_policy_set, ASN1_OBJECT_free);
75*2139Sjp161948 OPENSSL_free(data);
76*2139Sjp161948 }
77*2139Sjp161948
78*2139Sjp161948 /* Create a data based on an existing policy. If 'id' is NULL use the
79*2139Sjp161948 * oid in the policy, otherwise use 'id'. This behaviour covers the two
80*2139Sjp161948 * types of data in RFC3280: data with from a CertificatePolcies extension
81*2139Sjp161948 * and additional data with just the qualifiers of anyPolicy and ID from
82*2139Sjp161948 * another source.
83*2139Sjp161948 */
84*2139Sjp161948
policy_data_new(POLICYINFO * policy,ASN1_OBJECT * id,int crit)85*2139Sjp161948 X509_POLICY_DATA *policy_data_new(POLICYINFO *policy, ASN1_OBJECT *id, int crit)
86*2139Sjp161948 {
87*2139Sjp161948 X509_POLICY_DATA *ret;
88*2139Sjp161948 if (!policy && !id)
89*2139Sjp161948 return NULL;
90*2139Sjp161948 ret = OPENSSL_malloc(sizeof(X509_POLICY_DATA));
91*2139Sjp161948 if (!ret)
92*2139Sjp161948 return NULL;
93*2139Sjp161948 ret->expected_policy_set = sk_ASN1_OBJECT_new_null();
94*2139Sjp161948 if (!ret->expected_policy_set)
95*2139Sjp161948 {
96*2139Sjp161948 OPENSSL_free(ret);
97*2139Sjp161948 return NULL;
98*2139Sjp161948 }
99*2139Sjp161948
100*2139Sjp161948 if (crit)
101*2139Sjp161948 ret->flags = POLICY_DATA_FLAG_CRITICAL;
102*2139Sjp161948 else
103*2139Sjp161948 ret->flags = 0;
104*2139Sjp161948
105*2139Sjp161948 if (id)
106*2139Sjp161948 ret->valid_policy = id;
107*2139Sjp161948 else
108*2139Sjp161948 {
109*2139Sjp161948 ret->valid_policy = policy->policyid;
110*2139Sjp161948 policy->policyid = NULL;
111*2139Sjp161948 }
112*2139Sjp161948
113*2139Sjp161948 if (policy)
114*2139Sjp161948 {
115*2139Sjp161948 ret->qualifier_set = policy->qualifiers;
116*2139Sjp161948 policy->qualifiers = NULL;
117*2139Sjp161948 }
118*2139Sjp161948 else
119*2139Sjp161948 ret->qualifier_set = NULL;
120*2139Sjp161948
121*2139Sjp161948 return ret;
122*2139Sjp161948 }
123*2139Sjp161948
124