pk7_attr.c 5.5 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165
  1. /* pk7_attr.c */
  2. /* Written by Dr Stephen N Henson (shenson@bigfoot.com) for the OpenSSL
  3. * project 2001.
  4. */
  5. /* ====================================================================
  6. * Copyright (c) 2001-2004 The OpenSSL Project. All rights reserved.
  7. *
  8. * Redistribution and use in source and binary forms, with or without
  9. * modification, are permitted provided that the following conditions
  10. * are met:
  11. *
  12. * 1. Redistributions of source code must retain the above copyright
  13. * notice, this list of conditions and the following disclaimer.
  14. *
  15. * 2. Redistributions in binary form must reproduce the above copyright
  16. * notice, this list of conditions and the following disclaimer in
  17. * the documentation and/or other materials provided with the
  18. * distribution.
  19. *
  20. * 3. All advertising materials mentioning features or use of this
  21. * software must display the following acknowledgment:
  22. * "This product includes software developed by the OpenSSL Project
  23. * for use in the OpenSSL Toolkit. (http://www.OpenSSL.org/)"
  24. *
  25. * 4. The names "OpenSSL Toolkit" and "OpenSSL Project" must not be used to
  26. * endorse or promote products derived from this software without
  27. * prior written permission. For written permission, please contact
  28. * licensing@OpenSSL.org.
  29. *
  30. * 5. Products derived from this software may not be called "OpenSSL"
  31. * nor may "OpenSSL" appear in their names without prior written
  32. * permission of the OpenSSL Project.
  33. *
  34. * 6. Redistributions of any form whatsoever must retain the following
  35. * acknowledgment:
  36. * "This product includes software developed by the OpenSSL Project
  37. * for use in the OpenSSL Toolkit (http://www.OpenSSL.org/)"
  38. *
  39. * THIS SOFTWARE IS PROVIDED BY THE OpenSSL PROJECT ``AS IS'' AND ANY
  40. * EXPRESSED OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
  41. * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR
  42. * PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE OpenSSL PROJECT OR
  43. * ITS CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL,
  44. * SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT
  45. * NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES;
  46. * LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
  47. * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT,
  48. * STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE)
  49. * ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED
  50. * OF THE POSSIBILITY OF SUCH DAMAGE.
  51. * ====================================================================
  52. *
  53. * This product includes cryptographic software written by Eric Young
  54. * (eay@cryptsoft.com). This product includes software written by Tim
  55. * Hudson (tjh@cryptsoft.com).
  56. *
  57. */
  58. #include <stdio.h>
  59. #include <stdlib.h>
  60. #include <openssl/bio.h>
  61. #include <openssl/asn1.h>
  62. #include <openssl/asn1t.h>
  63. #include <openssl/pem.h>
  64. #include <openssl/pkcs7.h>
  65. #include <openssl/x509.h>
  66. #include <openssl/err.h>
  67. int PKCS7_add_attrib_smimecap(PKCS7_SIGNER_INFO *si, STACK_OF(X509_ALGOR) *cap)
  68. {
  69. ASN1_STRING *seq;
  70. if(!(seq = ASN1_STRING_new())) {
  71. PKCS7err(PKCS7_F_PKCS7_ADD_ATTRIB_SMIMECAP,ERR_R_MALLOC_FAILURE);
  72. return 0;
  73. }
  74. seq->length = ASN1_item_i2d((ASN1_VALUE *)cap,&seq->data,
  75. ASN1_ITEM_rptr(X509_ALGORS));
  76. return PKCS7_add_signed_attribute(si, NID_SMIMECapabilities,
  77. V_ASN1_SEQUENCE, seq);
  78. }
  79. STACK_OF(X509_ALGOR) *PKCS7_get_smimecap(PKCS7_SIGNER_INFO *si)
  80. {
  81. ASN1_TYPE *cap;
  82. const unsigned char *p;
  83. cap = PKCS7_get_signed_attribute(si, NID_SMIMECapabilities);
  84. if (!cap || (cap->type != V_ASN1_SEQUENCE))
  85. return NULL;
  86. p = cap->value.sequence->data;
  87. return (STACK_OF(X509_ALGOR) *)
  88. ASN1_item_d2i(NULL, &p, cap->value.sequence->length,
  89. ASN1_ITEM_rptr(X509_ALGORS));
  90. }
  91. /* Basic smime-capabilities OID and optional integer arg */
  92. int PKCS7_simple_smimecap(STACK_OF(X509_ALGOR) *sk, int nid, int arg)
  93. {
  94. X509_ALGOR *alg;
  95. if(!(alg = X509_ALGOR_new())) {
  96. PKCS7err(PKCS7_F_PKCS7_SIMPLE_SMIMECAP,ERR_R_MALLOC_FAILURE);
  97. return 0;
  98. }
  99. ASN1_OBJECT_free(alg->algorithm);
  100. alg->algorithm = OBJ_nid2obj (nid);
  101. if (arg > 0) {
  102. ASN1_INTEGER *nbit;
  103. if(!(alg->parameter = ASN1_TYPE_new())) {
  104. PKCS7err(PKCS7_F_PKCS7_SIMPLE_SMIMECAP,ERR_R_MALLOC_FAILURE);
  105. return 0;
  106. }
  107. if(!(nbit = ASN1_INTEGER_new())) {
  108. PKCS7err(PKCS7_F_PKCS7_SIMPLE_SMIMECAP,ERR_R_MALLOC_FAILURE);
  109. return 0;
  110. }
  111. if(!ASN1_INTEGER_set (nbit, arg)) {
  112. PKCS7err(PKCS7_F_PKCS7_SIMPLE_SMIMECAP,ERR_R_MALLOC_FAILURE);
  113. return 0;
  114. }
  115. alg->parameter->value.integer = nbit;
  116. alg->parameter->type = V_ASN1_INTEGER;
  117. }
  118. sk_X509_ALGOR_push (sk, alg);
  119. return 1;
  120. }
  121. int PKCS7_add_attrib_content_type(PKCS7_SIGNER_INFO *si, ASN1_OBJECT *coid)
  122. {
  123. if (PKCS7_get_signed_attribute(si, NID_pkcs9_contentType))
  124. return 0;
  125. if (!coid)
  126. coid = OBJ_nid2obj(NID_pkcs7_data);
  127. return PKCS7_add_signed_attribute(si, NID_pkcs9_contentType,
  128. V_ASN1_OBJECT, coid);
  129. }
  130. int PKCS7_add0_attrib_signing_time(PKCS7_SIGNER_INFO *si, ASN1_TIME *t)
  131. {
  132. if (!t && !(t=X509_gmtime_adj(NULL,0)))
  133. {
  134. PKCS7err(PKCS7_F_PKCS7_ADD0_ATTRIB_SIGNING_TIME,
  135. ERR_R_MALLOC_FAILURE);
  136. return 0;
  137. }
  138. return PKCS7_add_signed_attribute(si, NID_pkcs9_signingTime,
  139. V_ASN1_UTCTIME, t);
  140. }
  141. int PKCS7_add1_attrib_digest(PKCS7_SIGNER_INFO *si,
  142. const unsigned char *md, int mdlen)
  143. {
  144. ASN1_OCTET_STRING *os;
  145. os = ASN1_OCTET_STRING_new();
  146. if (!os)
  147. return 0;
  148. if (!ASN1_STRING_set(os, md, mdlen)
  149. || !PKCS7_add_signed_attribute(si, NID_pkcs9_messageDigest,
  150. V_ASN1_OCTET_STRING, os))
  151. {
  152. ASN1_OCTET_STRING_free(os);
  153. return 0;
  154. }
  155. return 1;
  156. }