OLD | NEW |
| (Empty) |
1 /* crypto/x509/x509name.c */ | |
2 /* Copyright (C) 1995-1998 Eric Young (eay@cryptsoft.com) | |
3 * All rights reserved. | |
4 * | |
5 * This package is an SSL implementation written | |
6 * by Eric Young (eay@cryptsoft.com). | |
7 * The implementation was written so as to conform with Netscapes SSL. | |
8 * | |
9 * This library is free for commercial and non-commercial use as long as | |
10 * the following conditions are aheared to. The following conditions | |
11 * apply to all code found in this distribution, be it the RC4, RSA, | |
12 * lhash, DES, etc., code; not just the SSL code. The SSL documentation | |
13 * included with this distribution is covered by the same copyright terms | |
14 * except that the holder is Tim Hudson (tjh@cryptsoft.com). | |
15 * | |
16 * Copyright remains Eric Young's, and as such any Copyright notices in | |
17 * the code are not to be removed. | |
18 * If this package is used in a product, Eric Young should be given attribution | |
19 * as the author of the parts of the library used. | |
20 * This can be in the form of a textual message at program startup or | |
21 * in documentation (online or textual) provided with the package. | |
22 * | |
23 * Redistribution and use in source and binary forms, with or without | |
24 * modification, are permitted provided that the following conditions | |
25 * are met: | |
26 * 1. Redistributions of source code must retain the copyright | |
27 * notice, this list of conditions and the following disclaimer. | |
28 * 2. Redistributions in binary form must reproduce the above copyright | |
29 * notice, this list of conditions and the following disclaimer in the | |
30 * documentation and/or other materials provided with the distribution. | |
31 * 3. All advertising materials mentioning features or use of this software | |
32 * must display the following acknowledgement: | |
33 * "This product includes cryptographic software written by | |
34 * Eric Young (eay@cryptsoft.com)" | |
35 * The word 'cryptographic' can be left out if the rouines from the library | |
36 * being used are not cryptographic related :-). | |
37 * 4. If you include any Windows specific code (or a derivative thereof) from | |
38 * the apps directory (application code) you must include an acknowledgement: | |
39 * "This product includes software written by Tim Hudson (tjh@cryptsoft.com)" | |
40 * | |
41 * THIS SOFTWARE IS PROVIDED BY ERIC YOUNG ``AS IS'' AND | |
42 * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE | |
43 * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE | |
44 * ARE DISCLAIMED. IN NO EVENT SHALL THE AUTHOR OR CONTRIBUTORS BE LIABLE | |
45 * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL | |
46 * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS | |
47 * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) | |
48 * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT | |
49 * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY | |
50 * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF | |
51 * SUCH DAMAGE. | |
52 * | |
53 * The licence and distribution terms for any publically available version or | |
54 * derivative of this code cannot be changed. i.e. this code cannot simply be | |
55 * copied and put under another distribution licence | |
56 * [including the GNU Public Licence.] | |
57 */ | |
58 | |
59 #include <stdio.h> | |
60 #include <openssl/stack.h> | |
61 #include "cryptlib.h" | |
62 #include <openssl/asn1.h> | |
63 #include <openssl/objects.h> | |
64 #include <openssl/evp.h> | |
65 #include <openssl/x509.h> | |
66 | |
67 int X509_NAME_get_text_by_NID(X509_NAME *name, int nid, char *buf, int len) | |
68 { | |
69 ASN1_OBJECT *obj; | |
70 | |
71 obj=OBJ_nid2obj(nid); | |
72 if (obj == NULL) return(-1); | |
73 return(X509_NAME_get_text_by_OBJ(name,obj,buf,len)); | |
74 } | |
75 | |
76 int X509_NAME_get_text_by_OBJ(X509_NAME *name, ASN1_OBJECT *obj, char *buf, | |
77 int len) | |
78 { | |
79 int i; | |
80 ASN1_STRING *data; | |
81 | |
82 i=X509_NAME_get_index_by_OBJ(name,obj,-1); | |
83 if (i < 0) return(-1); | |
84 data=X509_NAME_ENTRY_get_data(X509_NAME_get_entry(name,i)); | |
85 i=(data->length > (len-1))?(len-1):data->length; | |
86 if (buf == NULL) return(data->length); | |
87 memcpy(buf,data->data,i); | |
88 buf[i]='\0'; | |
89 return(i); | |
90 } | |
91 | |
92 int X509_NAME_entry_count(X509_NAME *name) | |
93 { | |
94 if (name == NULL) return(0); | |
95 return(sk_X509_NAME_ENTRY_num(name->entries)); | |
96 } | |
97 | |
98 int X509_NAME_get_index_by_NID(X509_NAME *name, int nid, int lastpos) | |
99 { | |
100 ASN1_OBJECT *obj; | |
101 | |
102 obj=OBJ_nid2obj(nid); | |
103 if (obj == NULL) return(-2); | |
104 return(X509_NAME_get_index_by_OBJ(name,obj,lastpos)); | |
105 } | |
106 | |
107 /* NOTE: you should be passsing -1, not 0 as lastpos */ | |
108 int X509_NAME_get_index_by_OBJ(X509_NAME *name, ASN1_OBJECT *obj, | |
109 int lastpos) | |
110 { | |
111 int n; | |
112 X509_NAME_ENTRY *ne; | |
113 STACK_OF(X509_NAME_ENTRY) *sk; | |
114 | |
115 if (name == NULL) return(-1); | |
116 if (lastpos < 0) | |
117 lastpos= -1; | |
118 sk=name->entries; | |
119 n=sk_X509_NAME_ENTRY_num(sk); | |
120 for (lastpos++; lastpos < n; lastpos++) | |
121 { | |
122 ne=sk_X509_NAME_ENTRY_value(sk,lastpos); | |
123 if (OBJ_cmp(ne->object,obj) == 0) | |
124 return(lastpos); | |
125 } | |
126 return(-1); | |
127 } | |
128 | |
129 X509_NAME_ENTRY *X509_NAME_get_entry(X509_NAME *name, int loc) | |
130 { | |
131 if(name == NULL || sk_X509_NAME_ENTRY_num(name->entries) <= loc | |
132 || loc < 0) | |
133 return(NULL); | |
134 else | |
135 return(sk_X509_NAME_ENTRY_value(name->entries,loc)); | |
136 } | |
137 | |
138 X509_NAME_ENTRY *X509_NAME_delete_entry(X509_NAME *name, int loc) | |
139 { | |
140 X509_NAME_ENTRY *ret; | |
141 int i,n,set_prev,set_next; | |
142 STACK_OF(X509_NAME_ENTRY) *sk; | |
143 | |
144 if (name == NULL || sk_X509_NAME_ENTRY_num(name->entries) <= loc | |
145 || loc < 0) | |
146 return(NULL); | |
147 sk=name->entries; | |
148 ret=sk_X509_NAME_ENTRY_delete(sk,loc); | |
149 n=sk_X509_NAME_ENTRY_num(sk); | |
150 name->modified=1; | |
151 if (loc == n) return(ret); | |
152 | |
153 /* else we need to fixup the set field */ | |
154 if (loc != 0) | |
155 set_prev=(sk_X509_NAME_ENTRY_value(sk,loc-1))->set; | |
156 else | |
157 set_prev=ret->set-1; | |
158 set_next=sk_X509_NAME_ENTRY_value(sk,loc)->set; | |
159 | |
160 /* set_prev is the previous set | |
161 * set is the current set | |
162 * set_next is the following | |
163 * prev 1 1 1 1 1 1 1 1 | |
164 * set 1 1 2 2 | |
165 * next 1 1 2 2 2 2 3 2 | |
166 * so basically only if prev and next differ by 2, then | |
167 * re-number down by 1 */ | |
168 if (set_prev+1 < set_next) | |
169 for (i=loc; i<n; i++) | |
170 sk_X509_NAME_ENTRY_value(sk,i)->set--; | |
171 return(ret); | |
172 } | |
173 | |
174 int X509_NAME_add_entry_by_OBJ(X509_NAME *name, ASN1_OBJECT *obj, int type, | |
175 unsigned char *bytes, int len, int loc, int set) | |
176 { | |
177 X509_NAME_ENTRY *ne; | |
178 int ret; | |
179 ne = X509_NAME_ENTRY_create_by_OBJ(NULL, obj, type, bytes, len); | |
180 if(!ne) return 0; | |
181 ret = X509_NAME_add_entry(name, ne, loc, set); | |
182 X509_NAME_ENTRY_free(ne); | |
183 return ret; | |
184 } | |
185 | |
186 int X509_NAME_add_entry_by_NID(X509_NAME *name, int nid, int type, | |
187 unsigned char *bytes, int len, int loc, int set) | |
188 { | |
189 X509_NAME_ENTRY *ne; | |
190 int ret; | |
191 ne = X509_NAME_ENTRY_create_by_NID(NULL, nid, type, bytes, len); | |
192 if(!ne) return 0; | |
193 ret = X509_NAME_add_entry(name, ne, loc, set); | |
194 X509_NAME_ENTRY_free(ne); | |
195 return ret; | |
196 } | |
197 | |
198 int X509_NAME_add_entry_by_txt(X509_NAME *name, const char *field, int type, | |
199 const unsigned char *bytes, int len, int loc, int set) | |
200 { | |
201 X509_NAME_ENTRY *ne; | |
202 int ret; | |
203 ne = X509_NAME_ENTRY_create_by_txt(NULL, field, type, bytes, len); | |
204 if(!ne) return 0; | |
205 ret = X509_NAME_add_entry(name, ne, loc, set); | |
206 X509_NAME_ENTRY_free(ne); | |
207 return ret; | |
208 } | |
209 | |
210 /* if set is -1, append to previous set, 0 'a new one', and 1, | |
211 * prepend to the guy we are about to stomp on. */ | |
212 int X509_NAME_add_entry(X509_NAME *name, X509_NAME_ENTRY *ne, int loc, | |
213 int set) | |
214 { | |
215 X509_NAME_ENTRY *new_name=NULL; | |
216 int n,i,inc; | |
217 STACK_OF(X509_NAME_ENTRY) *sk; | |
218 | |
219 if (name == NULL) return(0); | |
220 sk=name->entries; | |
221 n=sk_X509_NAME_ENTRY_num(sk); | |
222 if (loc > n) loc=n; | |
223 else if (loc < 0) loc=n; | |
224 | |
225 name->modified=1; | |
226 | |
227 if (set == -1) | |
228 { | |
229 if (loc == 0) | |
230 { | |
231 set=0; | |
232 inc=1; | |
233 } | |
234 else | |
235 { | |
236 set=sk_X509_NAME_ENTRY_value(sk,loc-1)->set; | |
237 inc=0; | |
238 } | |
239 } | |
240 else /* if (set >= 0) */ | |
241 { | |
242 if (loc >= n) | |
243 { | |
244 if (loc != 0) | |
245 set=sk_X509_NAME_ENTRY_value(sk,loc-1)->set+1; | |
246 else | |
247 set=0; | |
248 } | |
249 else | |
250 set=sk_X509_NAME_ENTRY_value(sk,loc)->set; | |
251 inc=(set == 0)?1:0; | |
252 } | |
253 | |
254 if ((new_name=X509_NAME_ENTRY_dup(ne)) == NULL) | |
255 goto err; | |
256 new_name->set=set; | |
257 if (!sk_X509_NAME_ENTRY_insert(sk,new_name,loc)) | |
258 { | |
259 X509err(X509_F_X509_NAME_ADD_ENTRY,ERR_R_MALLOC_FAILURE); | |
260 goto err; | |
261 } | |
262 if (inc) | |
263 { | |
264 n=sk_X509_NAME_ENTRY_num(sk); | |
265 for (i=loc+1; i<n; i++) | |
266 sk_X509_NAME_ENTRY_value(sk,i-1)->set+=1; | |
267 } | |
268 return(1); | |
269 err: | |
270 if (new_name != NULL) | |
271 X509_NAME_ENTRY_free(new_name); | |
272 return(0); | |
273 } | |
274 | |
275 X509_NAME_ENTRY *X509_NAME_ENTRY_create_by_txt(X509_NAME_ENTRY **ne, | |
276 const char *field, int type, const unsigned char *bytes, int len
) | |
277 { | |
278 ASN1_OBJECT *obj; | |
279 X509_NAME_ENTRY *nentry; | |
280 | |
281 obj=OBJ_txt2obj(field, 0); | |
282 if (obj == NULL) | |
283 { | |
284 X509err(X509_F_X509_NAME_ENTRY_CREATE_BY_TXT, | |
285 X509_R_INVALID_FIELD_NAME); | |
286 ERR_add_error_data(2, "name=", field); | |
287 return(NULL); | |
288 } | |
289 nentry = X509_NAME_ENTRY_create_by_OBJ(ne,obj,type,bytes,len); | |
290 ASN1_OBJECT_free(obj); | |
291 return nentry; | |
292 } | |
293 | |
294 X509_NAME_ENTRY *X509_NAME_ENTRY_create_by_NID(X509_NAME_ENTRY **ne, int nid, | |
295 int type, unsigned char *bytes, int len) | |
296 { | |
297 ASN1_OBJECT *obj; | |
298 X509_NAME_ENTRY *nentry; | |
299 | |
300 obj=OBJ_nid2obj(nid); | |
301 if (obj == NULL) | |
302 { | |
303 X509err(X509_F_X509_NAME_ENTRY_CREATE_BY_NID,X509_R_UNKNOWN_NID)
; | |
304 return(NULL); | |
305 } | |
306 nentry = X509_NAME_ENTRY_create_by_OBJ(ne,obj,type,bytes,len); | |
307 ASN1_OBJECT_free(obj); | |
308 return nentry; | |
309 } | |
310 | |
311 X509_NAME_ENTRY *X509_NAME_ENTRY_create_by_OBJ(X509_NAME_ENTRY **ne, | |
312 ASN1_OBJECT *obj, int type, const unsigned char *bytes, int len) | |
313 { | |
314 X509_NAME_ENTRY *ret; | |
315 | |
316 if ((ne == NULL) || (*ne == NULL)) | |
317 { | |
318 if ((ret=X509_NAME_ENTRY_new()) == NULL) | |
319 return(NULL); | |
320 } | |
321 else | |
322 ret= *ne; | |
323 | |
324 if (!X509_NAME_ENTRY_set_object(ret,obj)) | |
325 goto err; | |
326 if (!X509_NAME_ENTRY_set_data(ret,type,bytes,len)) | |
327 goto err; | |
328 | |
329 if ((ne != NULL) && (*ne == NULL)) *ne=ret; | |
330 return(ret); | |
331 err: | |
332 if ((ne == NULL) || (ret != *ne)) | |
333 X509_NAME_ENTRY_free(ret); | |
334 return(NULL); | |
335 } | |
336 | |
337 int X509_NAME_ENTRY_set_object(X509_NAME_ENTRY *ne, ASN1_OBJECT *obj) | |
338 { | |
339 if ((ne == NULL) || (obj == NULL)) | |
340 { | |
341 X509err(X509_F_X509_NAME_ENTRY_SET_OBJECT,ERR_R_PASSED_NULL_PARA
METER); | |
342 return(0); | |
343 } | |
344 ASN1_OBJECT_free(ne->object); | |
345 ne->object=OBJ_dup(obj); | |
346 return((ne->object == NULL)?0:1); | |
347 } | |
348 | |
349 int X509_NAME_ENTRY_set_data(X509_NAME_ENTRY *ne, int type, | |
350 const unsigned char *bytes, int len) | |
351 { | |
352 int i; | |
353 | |
354 if ((ne == NULL) || ((bytes == NULL) && (len != 0))) return(0); | |
355 if((type > 0) && (type & MBSTRING_FLAG)) | |
356 return ASN1_STRING_set_by_NID(&ne->value, bytes, | |
357 len, type, | |
358 OBJ_obj2nid(ne->object)) ? 1 : 0; | |
359 if (len < 0) len=strlen((const char *)bytes); | |
360 i=ASN1_STRING_set(ne->value,bytes,len); | |
361 if (!i) return(0); | |
362 if (type != V_ASN1_UNDEF) | |
363 { | |
364 if (type == V_ASN1_APP_CHOOSE) | |
365 ne->value->type=ASN1_PRINTABLE_type(bytes,len); | |
366 else | |
367 ne->value->type=type; | |
368 } | |
369 return(1); | |
370 } | |
371 | |
372 ASN1_OBJECT *X509_NAME_ENTRY_get_object(X509_NAME_ENTRY *ne) | |
373 { | |
374 if (ne == NULL) return(NULL); | |
375 return(ne->object); | |
376 } | |
377 | |
378 ASN1_STRING *X509_NAME_ENTRY_get_data(X509_NAME_ENTRY *ne) | |
379 { | |
380 if (ne == NULL) return(NULL); | |
381 return(ne->value); | |
382 } | |
383 | |
OLD | NEW |