Home | History | Annotate | Download | only in x509v3 
      1 /* pcy_data.c */
      2 /* Written by Dr Stephen N Henson (steve (at) openssl.org) for the OpenSSL
      3  * project 2004.
      4  */
      5 /* ====================================================================
      6  * Copyright (c) 2004 The OpenSSL Project.  All rights reserved.
      7  *
      8  * Redistribution and use in source and binary forms, with or without
      9  * modification, are permitted provided that the following conditions
     10  * are met:
     11  *
     12  * 1. Redistributions of source code must retain the above copyright
     13  *    notice, this list of conditions and the following disclaimer.
     14  *
     15  * 2. Redistributions in binary form must reproduce the above copyright
     16  *    notice, this list of conditions and the following disclaimer in
     17  *    the documentation and/or other materials provided with the
     18  *    distribution.
     19  *
     20  * 3. All advertising materials mentioning features or use of this
     21  *    software must display the following acknowledgment:
     22  *    "This product includes software developed by the OpenSSL Project
     23  *    for use in the OpenSSL Toolkit. (http://www.OpenSSL.org/)"
     24  *
     25  * 4. The names "OpenSSL Toolkit" and "OpenSSL Project" must not be used to
     26  *    endorse or promote products derived from this software without
     27  *    prior written permission. For written permission, please contact
     28  *    licensing (at) OpenSSL.org.
     29  *
     30  * 5. Products derived from this software may not be called "OpenSSL"
     31  *    nor may "OpenSSL" appear in their names without prior written
     32  *    permission of the OpenSSL Project.
     33  *
     34  * 6. Redistributions of any form whatsoever must retain the following
     35  *    acknowledgment:
     36  *    "This product includes software developed by the OpenSSL Project
     37  *    for use in the OpenSSL Toolkit (http://www.OpenSSL.org/)"
     38  *
     39  * THIS SOFTWARE IS PROVIDED BY THE OpenSSL PROJECT ``AS IS'' AND ANY
     40  * EXPRESSED OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
     41  * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR
     42  * PURPOSE ARE DISCLAIMED.  IN NO EVENT SHALL THE OpenSSL PROJECT OR
     43  * ITS CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL,
     44  * SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT
     45  * NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES;
     46  * LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
     47  * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT,
     48  * STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE)
     49  * ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED
     50  * OF THE POSSIBILITY OF SUCH DAMAGE.
     51  * ====================================================================
     52  *
     53  * This product includes cryptographic software written by Eric Young
     54  * (eay (at) cryptsoft.com).  This product includes software written by Tim
     55  * Hudson (tjh (at) cryptsoft.com).
     56  *
     57  */
     58 
     59 #include "cryptlib.h"
     60 #include <openssl/x509.h>
     61 #include <openssl/x509v3.h>
     62 
     63 #include "pcy_int.h"
     64 
     65 /* Policy Node routines */
     66 
     67 void policy_data_free(X509_POLICY_DATA *data)
     68 	{
     69 	ASN1_OBJECT_free(data->valid_policy);
     70 	/* Don't free qualifiers if shared */
     71 	if (!(data->flags & POLICY_DATA_FLAG_SHARED_QUALIFIERS))
     72 		sk_POLICYQUALINFO_pop_free(data->qualifier_set,
     73 					POLICYQUALINFO_free);
     74 	sk_ASN1_OBJECT_pop_free(data->expected_policy_set, ASN1_OBJECT_free);
     75 	OPENSSL_free(data);
     76 	}
     77 
     78 /* Create a data based on an existing policy. If 'id' is NULL use the
     79  * oid in the policy, otherwise use 'id'. This behaviour covers the two
     80  * types of data in RFC3280: data with from a CertificatePolcies extension
     81  * and additional data with just the qualifiers of anyPolicy and ID from
     82  * another source.
     83  */
     84 
     85 X509_POLICY_DATA *policy_data_new(POLICYINFO *policy, ASN1_OBJECT *id, int crit)
     86 	{
     87 	X509_POLICY_DATA *ret;
     88 	if (!policy && !id)
     89 		return NULL;
     90 	if (id)
     91 		{
     92 		id = OBJ_dup(id);
     93 		if (!id)
     94 			return NULL;
     95 		}
     96 	ret = OPENSSL_malloc(sizeof(X509_POLICY_DATA));
     97 	if (!ret)
     98 		return NULL;
     99 	ret->expected_policy_set = sk_ASN1_OBJECT_new_null();
    100 	if (!ret->expected_policy_set)
    101 		{
    102 		OPENSSL_free(ret);
    103 		if (id)
    104 			ASN1_OBJECT_free(id);
    105 		return NULL;
    106 		}
    107 
    108 	if (crit)
    109 		ret->flags = POLICY_DATA_FLAG_CRITICAL;
    110 	else
    111 		ret->flags = 0;
    112 
    113 	if (id)
    114 		ret->valid_policy = id;
    115 	else
    116 		{
    117 		ret->valid_policy = policy->policyid;
    118 		policy->policyid = NULL;
    119 		}
    120 
    121 	if (policy)
    122 		{
    123 		ret->qualifier_set = policy->qualifiers;
    124 		policy->qualifiers = NULL;
    125 		}
    126 	else
    127 		ret->qualifier_set = NULL;
    128 
    129 	return ret;
    130 	}
    131 
    132