Home | History | Annotate | Download | only in x509v3 
      1 /* v3_bitst.c */
      2 /*
      3  * Written by Dr Stephen N Henson (steve (at) openssl.org) for the OpenSSL project
      4  * 1999.
      5  */
      6 /* ====================================================================
      7  * Copyright (c) 1999 The OpenSSL Project.  All rights reserved.
      8  *
      9  * Redistribution and use in source and binary forms, with or without
     10  * modification, are permitted provided that the following conditions
     11  * are met:
     12  *
     13  * 1. Redistributions of source code must retain the above copyright
     14  *    notice, this list of conditions and the following disclaimer.
     15  *
     16  * 2. Redistributions in binary form must reproduce the above copyright
     17  *    notice, this list of conditions and the following disclaimer in
     18  *    the documentation and/or other materials provided with the
     19  *    distribution.
     20  *
     21  * 3. All advertising materials mentioning features or use of this
     22  *    software must display the following acknowledgment:
     23  *    "This product includes software developed by the OpenSSL Project
     24  *    for use in the OpenSSL Toolkit. (http://www.OpenSSL.org/)"
     25  *
     26  * 4. The names "OpenSSL Toolkit" and "OpenSSL Project" must not be used to
     27  *    endorse or promote products derived from this software without
     28  *    prior written permission. For written permission, please contact
     29  *    licensing (at) OpenSSL.org.
     30  *
     31  * 5. Products derived from this software may not be called "OpenSSL"
     32  *    nor may "OpenSSL" appear in their names without prior written
     33  *    permission of the OpenSSL Project.
     34  *
     35  * 6. Redistributions of any form whatsoever must retain the following
     36  *    acknowledgment:
     37  *    "This product includes software developed by the OpenSSL Project
     38  *    for use in the OpenSSL Toolkit (http://www.OpenSSL.org/)"
     39  *
     40  * THIS SOFTWARE IS PROVIDED BY THE OpenSSL PROJECT ``AS IS'' AND ANY
     41  * EXPRESSED OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
     42  * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR
     43  * PURPOSE ARE DISCLAIMED.  IN NO EVENT SHALL THE OpenSSL PROJECT OR
     44  * ITS CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL,
     45  * SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT
     46  * NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES;
     47  * LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
     48  * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT,
     49  * STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE)
     50  * ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED
     51  * OF THE POSSIBILITY OF SUCH DAMAGE.
     52  * ====================================================================
     53  *
     54  * This product includes cryptographic software written by Eric Young
     55  * (eay (at) cryptsoft.com).  This product includes software written by Tim
     56  * Hudson (tjh (at) cryptsoft.com). */
     57 
     58 #include <stdio.h>
     59 #include <string.h>
     60 
     61 #include <openssl/conf.h>
     62 #include <openssl/err.h>
     63 #include <openssl/obj.h>
     64 #include <openssl/x509v3.h>
     65 
     66 static const BIT_STRING_BITNAME ns_cert_type_table[] = {
     67     {0, "SSL Client", "client"},
     68     {1, "SSL Server", "server"},
     69     {2, "S/MIME", "email"},
     70     {3, "Object Signing", "objsign"},
     71     {4, "Unused", "reserved"},
     72     {5, "SSL CA", "sslCA"},
     73     {6, "S/MIME CA", "emailCA"},
     74     {7, "Object Signing CA", "objCA"},
     75     {-1, NULL, NULL}
     76 };
     77 
     78 static const BIT_STRING_BITNAME key_usage_type_table[] = {
     79     {0, "Digital Signature", "digitalSignature"},
     80     {1, "Non Repudiation", "nonRepudiation"},
     81     {2, "Key Encipherment", "keyEncipherment"},
     82     {3, "Data Encipherment", "dataEncipherment"},
     83     {4, "Key Agreement", "keyAgreement"},
     84     {5, "Certificate Sign", "keyCertSign"},
     85     {6, "CRL Sign", "cRLSign"},
     86     {7, "Encipher Only", "encipherOnly"},
     87     {8, "Decipher Only", "decipherOnly"},
     88     {-1, NULL, NULL}
     89 };
     90 
     91 const X509V3_EXT_METHOD v3_nscert =
     92 EXT_BITSTRING(NID_netscape_cert_type, ns_cert_type_table);
     93 const X509V3_EXT_METHOD v3_key_usage =
     94 EXT_BITSTRING(NID_key_usage, key_usage_type_table);
     95 
     96 STACK_OF(CONF_VALUE) *i2v_ASN1_BIT_STRING(X509V3_EXT_METHOD *method,
     97                                           ASN1_BIT_STRING *bits,
     98                                           STACK_OF(CONF_VALUE) *ret)
     99 {
    100     const BIT_STRING_BITNAME *bnam;
    101     for (bnam = method->usr_data; bnam->lname; bnam++) {
    102         if (ASN1_BIT_STRING_get_bit(bits, bnam->bitnum))
    103             X509V3_add_value(bnam->lname, NULL, &ret);
    104     }
    105     return ret;
    106 }
    107 
    108 ASN1_BIT_STRING *v2i_ASN1_BIT_STRING(X509V3_EXT_METHOD *method,
    109                                      X509V3_CTX *ctx,
    110                                      STACK_OF(CONF_VALUE) *nval)
    111 {
    112     CONF_VALUE *val;
    113     ASN1_BIT_STRING *bs;
    114     size_t i;
    115     const BIT_STRING_BITNAME *bnam;
    116     if (!(bs = M_ASN1_BIT_STRING_new())) {
    117         OPENSSL_PUT_ERROR(X509V3, ERR_R_MALLOC_FAILURE);
    118         return NULL;
    119     }
    120     for (i = 0; i < sk_CONF_VALUE_num(nval); i++) {
    121         val = sk_CONF_VALUE_value(nval, i);
    122         for (bnam = method->usr_data; bnam->lname; bnam++) {
    123             if (!strcmp(bnam->sname, val->name) ||
    124                 !strcmp(bnam->lname, val->name)) {
    125                 if (!ASN1_BIT_STRING_set_bit(bs, bnam->bitnum, 1)) {
    126                     OPENSSL_PUT_ERROR(X509V3, ERR_R_MALLOC_FAILURE);
    127                     M_ASN1_BIT_STRING_free(bs);
    128                     return NULL;
    129                 }
    130                 break;
    131             }
    132         }
    133         if (!bnam->lname) {
    134             OPENSSL_PUT_ERROR(X509V3, X509V3_R_UNKNOWN_BIT_STRING_ARGUMENT);
    135             X509V3_conf_err(val);
    136             M_ASN1_BIT_STRING_free(bs);
    137             return NULL;
    138         }
    139     }
    140     return bs;
    141 }
    142