xref: /onnv-gate/usr/src/common/openssl/crypto/x509v3/v3_bitst.c (revision 0:68f95e015346)
1*0Sstevel@tonic-gate /* v3_bitst.c */
2*0Sstevel@tonic-gate /* Written by Dr Stephen N Henson (shenson@bigfoot.com) for the OpenSSL
3*0Sstevel@tonic-gate  * project 1999.
4*0Sstevel@tonic-gate  */
5*0Sstevel@tonic-gate /* ====================================================================
6*0Sstevel@tonic-gate  * Copyright (c) 1999 The OpenSSL Project.  All rights reserved.
7*0Sstevel@tonic-gate  *
8*0Sstevel@tonic-gate  * Redistribution and use in source and binary forms, with or without
9*0Sstevel@tonic-gate  * modification, are permitted provided that the following conditions
10*0Sstevel@tonic-gate  * are met:
11*0Sstevel@tonic-gate  *
12*0Sstevel@tonic-gate  * 1. Redistributions of source code must retain the above copyright
13*0Sstevel@tonic-gate  *    notice, this list of conditions and the following disclaimer.
14*0Sstevel@tonic-gate  *
15*0Sstevel@tonic-gate  * 2. Redistributions in binary form must reproduce the above copyright
16*0Sstevel@tonic-gate  *    notice, this list of conditions and the following disclaimer in
17*0Sstevel@tonic-gate  *    the documentation and/or other materials provided with the
18*0Sstevel@tonic-gate  *    distribution.
19*0Sstevel@tonic-gate  *
20*0Sstevel@tonic-gate  * 3. All advertising materials mentioning features or use of this
21*0Sstevel@tonic-gate  *    software must display the following acknowledgment:
22*0Sstevel@tonic-gate  *    "This product includes software developed by the OpenSSL Project
23*0Sstevel@tonic-gate  *    for use in the OpenSSL Toolkit. (http://www.OpenSSL.org/)"
24*0Sstevel@tonic-gate  *
25*0Sstevel@tonic-gate  * 4. The names "OpenSSL Toolkit" and "OpenSSL Project" must not be used to
26*0Sstevel@tonic-gate  *    endorse or promote products derived from this software without
27*0Sstevel@tonic-gate  *    prior written permission. For written permission, please contact
28*0Sstevel@tonic-gate  *    licensing@OpenSSL.org.
29*0Sstevel@tonic-gate  *
30*0Sstevel@tonic-gate  * 5. Products derived from this software may not be called "OpenSSL"
31*0Sstevel@tonic-gate  *    nor may "OpenSSL" appear in their names without prior written
32*0Sstevel@tonic-gate  *    permission of the OpenSSL Project.
33*0Sstevel@tonic-gate  *
34*0Sstevel@tonic-gate  * 6. Redistributions of any form whatsoever must retain the following
35*0Sstevel@tonic-gate  *    acknowledgment:
36*0Sstevel@tonic-gate  *    "This product includes software developed by the OpenSSL Project
37*0Sstevel@tonic-gate  *    for use in the OpenSSL Toolkit (http://www.OpenSSL.org/)"
38*0Sstevel@tonic-gate  *
39*0Sstevel@tonic-gate  * THIS SOFTWARE IS PROVIDED BY THE OpenSSL PROJECT ``AS IS'' AND ANY
40*0Sstevel@tonic-gate  * EXPRESSED OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
41*0Sstevel@tonic-gate  * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR
42*0Sstevel@tonic-gate  * PURPOSE ARE DISCLAIMED.  IN NO EVENT SHALL THE OpenSSL PROJECT OR
43*0Sstevel@tonic-gate  * ITS CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL,
44*0Sstevel@tonic-gate  * SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT
45*0Sstevel@tonic-gate  * NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES;
46*0Sstevel@tonic-gate  * LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
47*0Sstevel@tonic-gate  * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT,
48*0Sstevel@tonic-gate  * STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE)
49*0Sstevel@tonic-gate  * ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED
50*0Sstevel@tonic-gate  * OF THE POSSIBILITY OF SUCH DAMAGE.
51*0Sstevel@tonic-gate  * ====================================================================
52*0Sstevel@tonic-gate  *
53*0Sstevel@tonic-gate  * This product includes cryptographic software written by Eric Young
54*0Sstevel@tonic-gate  * (eay@cryptsoft.com).  This product includes software written by Tim
55*0Sstevel@tonic-gate  * Hudson (tjh@cryptsoft.com).
56*0Sstevel@tonic-gate  *
57*0Sstevel@tonic-gate  */
58*0Sstevel@tonic-gate 
59*0Sstevel@tonic-gate #include <stdio.h>
60*0Sstevel@tonic-gate #include "cryptlib.h"
61*0Sstevel@tonic-gate #include <openssl/conf.h>
62*0Sstevel@tonic-gate #include <openssl/x509v3.h>
63*0Sstevel@tonic-gate 
64*0Sstevel@tonic-gate static ASN1_BIT_STRING *v2i_ASN1_BIT_STRING(X509V3_EXT_METHOD *method,
65*0Sstevel@tonic-gate 				X509V3_CTX *ctx, STACK_OF(CONF_VALUE) *nval);
66*0Sstevel@tonic-gate static STACK_OF(CONF_VALUE) *i2v_ASN1_BIT_STRING(X509V3_EXT_METHOD *method,
67*0Sstevel@tonic-gate 				ASN1_BIT_STRING *bits,
68*0Sstevel@tonic-gate 				STACK_OF(CONF_VALUE) *extlist);
69*0Sstevel@tonic-gate 
70*0Sstevel@tonic-gate static BIT_STRING_BITNAME ns_cert_type_table[] = {
71*0Sstevel@tonic-gate {0, "SSL Client", "client"},
72*0Sstevel@tonic-gate {1, "SSL Server", "server"},
73*0Sstevel@tonic-gate {2, "S/MIME", "email"},
74*0Sstevel@tonic-gate {3, "Object Signing", "objsign"},
75*0Sstevel@tonic-gate {4, "Unused", "reserved"},
76*0Sstevel@tonic-gate {5, "SSL CA", "sslCA"},
77*0Sstevel@tonic-gate {6, "S/MIME CA", "emailCA"},
78*0Sstevel@tonic-gate {7, "Object Signing CA", "objCA"},
79*0Sstevel@tonic-gate {-1, NULL, NULL}
80*0Sstevel@tonic-gate };
81*0Sstevel@tonic-gate 
82*0Sstevel@tonic-gate static BIT_STRING_BITNAME key_usage_type_table[] = {
83*0Sstevel@tonic-gate {0, "Digital Signature", "digitalSignature"},
84*0Sstevel@tonic-gate {1, "Non Repudiation", "nonRepudiation"},
85*0Sstevel@tonic-gate {2, "Key Encipherment", "keyEncipherment"},
86*0Sstevel@tonic-gate {3, "Data Encipherment", "dataEncipherment"},
87*0Sstevel@tonic-gate {4, "Key Agreement", "keyAgreement"},
88*0Sstevel@tonic-gate {5, "Certificate Sign", "keyCertSign"},
89*0Sstevel@tonic-gate {6, "CRL Sign", "cRLSign"},
90*0Sstevel@tonic-gate {7, "Encipher Only", "encipherOnly"},
91*0Sstevel@tonic-gate {8, "Decipher Only", "decipherOnly"},
92*0Sstevel@tonic-gate {-1, NULL, NULL}
93*0Sstevel@tonic-gate };
94*0Sstevel@tonic-gate 
95*0Sstevel@tonic-gate 
96*0Sstevel@tonic-gate 
97*0Sstevel@tonic-gate X509V3_EXT_METHOD v3_nscert = EXT_BITSTRING(NID_netscape_cert_type, ns_cert_type_table);
98*0Sstevel@tonic-gate X509V3_EXT_METHOD v3_key_usage = EXT_BITSTRING(NID_key_usage, key_usage_type_table);
99*0Sstevel@tonic-gate 
100*0Sstevel@tonic-gate static STACK_OF(CONF_VALUE) *i2v_ASN1_BIT_STRING(X509V3_EXT_METHOD *method,
101*0Sstevel@tonic-gate 	     ASN1_BIT_STRING *bits, STACK_OF(CONF_VALUE) *ret)
102*0Sstevel@tonic-gate {
103*0Sstevel@tonic-gate 	BIT_STRING_BITNAME *bnam;
104*0Sstevel@tonic-gate 	for(bnam =method->usr_data; bnam->lname; bnam++) {
105*0Sstevel@tonic-gate 		if(ASN1_BIT_STRING_get_bit(bits, bnam->bitnum))
106*0Sstevel@tonic-gate 			X509V3_add_value(bnam->lname, NULL, &ret);
107*0Sstevel@tonic-gate 	}
108*0Sstevel@tonic-gate 	return ret;
109*0Sstevel@tonic-gate }
110*0Sstevel@tonic-gate 
111*0Sstevel@tonic-gate static ASN1_BIT_STRING *v2i_ASN1_BIT_STRING(X509V3_EXT_METHOD *method,
112*0Sstevel@tonic-gate 	     X509V3_CTX *ctx, STACK_OF(CONF_VALUE) *nval)
113*0Sstevel@tonic-gate {
114*0Sstevel@tonic-gate 	CONF_VALUE *val;
115*0Sstevel@tonic-gate 	ASN1_BIT_STRING *bs;
116*0Sstevel@tonic-gate 	int i;
117*0Sstevel@tonic-gate 	BIT_STRING_BITNAME *bnam;
118*0Sstevel@tonic-gate 	if(!(bs = M_ASN1_BIT_STRING_new())) {
119*0Sstevel@tonic-gate 		X509V3err(X509V3_F_V2I_ASN1_BIT_STRING,ERR_R_MALLOC_FAILURE);
120*0Sstevel@tonic-gate 		return NULL;
121*0Sstevel@tonic-gate 	}
122*0Sstevel@tonic-gate 	for(i = 0; i < sk_CONF_VALUE_num(nval); i++) {
123*0Sstevel@tonic-gate 		val = sk_CONF_VALUE_value(nval, i);
124*0Sstevel@tonic-gate 		for(bnam = method->usr_data; bnam->lname; bnam++) {
125*0Sstevel@tonic-gate 			if(!strcmp(bnam->sname, val->name) ||
126*0Sstevel@tonic-gate 				!strcmp(bnam->lname, val->name) ) {
127*0Sstevel@tonic-gate 				ASN1_BIT_STRING_set_bit(bs, bnam->bitnum, 1);
128*0Sstevel@tonic-gate 				break;
129*0Sstevel@tonic-gate 			}
130*0Sstevel@tonic-gate 		}
131*0Sstevel@tonic-gate 		if(!bnam->lname) {
132*0Sstevel@tonic-gate 			X509V3err(X509V3_F_V2I_ASN1_BIT_STRING,
133*0Sstevel@tonic-gate 					X509V3_R_UNKNOWN_BIT_STRING_ARGUMENT);
134*0Sstevel@tonic-gate 			X509V3_conf_err(val);
135*0Sstevel@tonic-gate 			M_ASN1_BIT_STRING_free(bs);
136*0Sstevel@tonic-gate 			return NULL;
137*0Sstevel@tonic-gate 		}
138*0Sstevel@tonic-gate 	}
139*0Sstevel@tonic-gate 	return bs;
140*0Sstevel@tonic-gate }
141*0Sstevel@tonic-gate 
142*0Sstevel@tonic-gate 
143