t_req.c 7.9 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266
  1. /* crypto/asn1/t_req.c */
  2. /* Copyright (C) 1995-1998 Eric Young (eay@cryptsoft.com)
  3. * All rights reserved.
  4. *
  5. * This package is an SSL implementation written
  6. * by Eric Young (eay@cryptsoft.com).
  7. * The implementation was written so as to conform with Netscapes SSL.
  8. *
  9. * This library is free for commercial and non-commercial use as long as
  10. * the following conditions are aheared to. The following conditions
  11. * apply to all code found in this distribution, be it the RC4, RSA,
  12. * lhash, DES, etc., code; not just the SSL code. The SSL documentation
  13. * included with this distribution is covered by the same copyright terms
  14. * except that the holder is Tim Hudson (tjh@cryptsoft.com).
  15. *
  16. * Copyright remains Eric Young's, and as such any Copyright notices in
  17. * the code are not to be removed.
  18. * If this package is used in a product, Eric Young should be given attribution
  19. * as the author of the parts of the library used.
  20. * This can be in the form of a textual message at program startup or
  21. * in documentation (online or textual) provided with the package.
  22. *
  23. * Redistribution and use in source and binary forms, with or without
  24. * modification, are permitted provided that the following conditions
  25. * are met:
  26. * 1. Redistributions of source code must retain the copyright
  27. * notice, this list of conditions and the following disclaimer.
  28. * 2. Redistributions in binary form must reproduce the above copyright
  29. * notice, this list of conditions and the following disclaimer in the
  30. * documentation and/or other materials provided with the distribution.
  31. * 3. All advertising materials mentioning features or use of this software
  32. * must display the following acknowledgement:
  33. * "This product includes cryptographic software written by
  34. * Eric Young (eay@cryptsoft.com)"
  35. * The word 'cryptographic' can be left out if the rouines from the library
  36. * being used are not cryptographic related :-).
  37. * 4. If you include any Windows specific code (or a derivative thereof) from
  38. * the apps directory (application code) you must include an acknowledgement:
  39. * "This product includes software written by Tim Hudson (tjh@cryptsoft.com)"
  40. *
  41. * THIS SOFTWARE IS PROVIDED BY ERIC YOUNG ``AS IS'' AND
  42. * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
  43. * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
  44. * ARE DISCLAIMED. IN NO EVENT SHALL THE AUTHOR OR CONTRIBUTORS BE LIABLE
  45. * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
  46. * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
  47. * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
  48. * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
  49. * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
  50. * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
  51. * SUCH DAMAGE.
  52. *
  53. * The licence and distribution terms for any publically available version or
  54. * derivative of this code cannot be changed. i.e. this code cannot simply be
  55. * copied and put under another distribution licence
  56. * [including the GNU Public Licence.]
  57. */
  58. #include <stdio.h>
  59. #include "cryptlib.h"
  60. #include <openssl/buffer.h>
  61. #include <openssl/bn.h>
  62. #include <openssl/objects.h>
  63. #include <openssl/x509.h>
  64. #include <openssl/x509v3.h>
  65. #ifndef OPENSSL_NO_RSA
  66. #include <openssl/rsa.h>
  67. #endif
  68. #ifndef OPENSSL_NO_DSA
  69. #include <openssl/dsa.h>
  70. #endif
  71. #ifndef OPENSSL_NO_FP_API
  72. int X509_REQ_print_fp(FILE *fp, X509_REQ *x)
  73. {
  74. BIO *b;
  75. int ret;
  76. if ((b=BIO_new(BIO_s_file())) == NULL)
  77. {
  78. X509err(X509_F_X509_REQ_PRINT_FP,ERR_R_BUF_LIB);
  79. return(0);
  80. }
  81. BIO_set_fp(b,fp,BIO_NOCLOSE);
  82. ret=X509_REQ_print(b, x);
  83. BIO_free(b);
  84. return(ret);
  85. }
  86. #endif
  87. int X509_REQ_print_ex(BIO *bp, X509_REQ *x, unsigned long nmflags, unsigned long cflag)
  88. {
  89. unsigned long l;
  90. int i;
  91. const char *neg;
  92. X509_REQ_INFO *ri;
  93. EVP_PKEY *pkey;
  94. STACK_OF(X509_ATTRIBUTE) *sk;
  95. STACK_OF(X509_EXTENSION) *exts;
  96. char mlch = ' ';
  97. int nmindent = 0;
  98. if((nmflags & XN_FLAG_SEP_MASK) == XN_FLAG_SEP_MULTILINE) {
  99. mlch = '\n';
  100. nmindent = 12;
  101. }
  102. if(nmflags == X509_FLAG_COMPAT)
  103. nmindent = 16;
  104. ri=x->req_info;
  105. if(!(cflag & X509_FLAG_NO_HEADER))
  106. {
  107. if (BIO_write(bp,"Certificate Request:\n",21) <= 0) goto err;
  108. if (BIO_write(bp," Data:\n",10) <= 0) goto err;
  109. }
  110. if(!(cflag & X509_FLAG_NO_VERSION))
  111. {
  112. neg=(ri->version->type == V_ASN1_NEG_INTEGER)?"-":"";
  113. l=0;
  114. for (i=0; i<ri->version->length; i++)
  115. { l<<=8; l+=ri->version->data[i]; }
  116. if(BIO_printf(bp,"%8sVersion: %s%lu (%s0x%lx)\n","",neg,l,neg,
  117. l) <= 0)
  118. goto err;
  119. }
  120. if(!(cflag & X509_FLAG_NO_SUBJECT))
  121. {
  122. if (BIO_printf(bp," Subject:%c",mlch) <= 0) goto err;
  123. if (X509_NAME_print_ex(bp,ri->subject,nmindent, nmflags) < 0) goto err;
  124. if (BIO_write(bp,"\n",1) <= 0) goto err;
  125. }
  126. if(!(cflag & X509_FLAG_NO_PUBKEY))
  127. {
  128. if (BIO_write(bp," Subject Public Key Info:\n",33) <= 0)
  129. goto err;
  130. if (BIO_printf(bp,"%12sPublic Key Algorithm: ","") <= 0)
  131. goto err;
  132. if (i2a_ASN1_OBJECT(bp, ri->pubkey->algor->algorithm) <= 0)
  133. goto err;
  134. if (BIO_puts(bp, "\n") <= 0)
  135. goto err;
  136. pkey=X509_REQ_get_pubkey(x);
  137. if (pkey == NULL)
  138. {
  139. BIO_printf(bp,"%12sUnable to load Public Key\n","");
  140. ERR_print_errors(bp);
  141. }
  142. else
  143. {
  144. EVP_PKEY_print_public(bp, pkey, 16, NULL);
  145. EVP_PKEY_free(pkey);
  146. }
  147. }
  148. if(!(cflag & X509_FLAG_NO_ATTRIBUTES))
  149. {
  150. /* may not be */
  151. if(BIO_printf(bp,"%8sAttributes:\n","") <= 0)
  152. goto err;
  153. sk=x->req_info->attributes;
  154. if (sk_X509_ATTRIBUTE_num(sk) == 0)
  155. {
  156. if(BIO_printf(bp,"%12sa0:00\n","") <= 0)
  157. goto err;
  158. }
  159. else
  160. {
  161. for (i=0; i<sk_X509_ATTRIBUTE_num(sk); i++)
  162. {
  163. ASN1_TYPE *at;
  164. X509_ATTRIBUTE *a;
  165. ASN1_BIT_STRING *bs=NULL;
  166. ASN1_TYPE *t;
  167. int j,type=0,count=1,ii=0;
  168. a=sk_X509_ATTRIBUTE_value(sk,i);
  169. if(X509_REQ_extension_nid(OBJ_obj2nid(a->object)))
  170. continue;
  171. if(BIO_printf(bp,"%12s","") <= 0)
  172. goto err;
  173. if ((j=i2a_ASN1_OBJECT(bp,a->object)) > 0)
  174. {
  175. if (a->single)
  176. {
  177. t=a->value.single;
  178. type=t->type;
  179. bs=t->value.bit_string;
  180. }
  181. else
  182. {
  183. ii=0;
  184. count=sk_ASN1_TYPE_num(a->value.set);
  185. get_next:
  186. at=sk_ASN1_TYPE_value(a->value.set,ii);
  187. type=at->type;
  188. bs=at->value.asn1_string;
  189. }
  190. }
  191. for (j=25-j; j>0; j--)
  192. if (BIO_write(bp," ",1) != 1) goto err;
  193. if (BIO_puts(bp,":") <= 0) goto err;
  194. if ( (type == V_ASN1_PRINTABLESTRING) ||
  195. (type == V_ASN1_T61STRING) ||
  196. (type == V_ASN1_IA5STRING))
  197. {
  198. if (BIO_write(bp,(char *)bs->data,bs->length)
  199. != bs->length)
  200. goto err;
  201. BIO_puts(bp,"\n");
  202. }
  203. else
  204. {
  205. BIO_puts(bp,"unable to print attribute\n");
  206. }
  207. if (++ii < count) goto get_next;
  208. }
  209. }
  210. }
  211. if(!(cflag & X509_FLAG_NO_EXTENSIONS))
  212. {
  213. exts = X509_REQ_get_extensions(x);
  214. if(exts)
  215. {
  216. BIO_printf(bp,"%8sRequested Extensions:\n","");
  217. for (i=0; i<sk_X509_EXTENSION_num(exts); i++)
  218. {
  219. ASN1_OBJECT *obj;
  220. X509_EXTENSION *ex;
  221. int j;
  222. ex=sk_X509_EXTENSION_value(exts, i);
  223. if (BIO_printf(bp,"%12s","") <= 0) goto err;
  224. obj=X509_EXTENSION_get_object(ex);
  225. i2a_ASN1_OBJECT(bp,obj);
  226. j=X509_EXTENSION_get_critical(ex);
  227. if (BIO_printf(bp,": %s\n",j?"critical":"") <= 0)
  228. goto err;
  229. if(!X509V3_EXT_print(bp, ex, cflag, 16))
  230. {
  231. BIO_printf(bp, "%16s", "");
  232. M_ASN1_OCTET_STRING_print(bp,ex->value);
  233. }
  234. if (BIO_write(bp,"\n",1) <= 0) goto err;
  235. }
  236. sk_X509_EXTENSION_pop_free(exts, X509_EXTENSION_free);
  237. }
  238. }
  239. if(!(cflag & X509_FLAG_NO_SIGDUMP))
  240. {
  241. if(!X509_signature_print(bp, x->sig_alg, x->signature)) goto err;
  242. }
  243. return(1);
  244. err:
  245. X509err(X509_F_X509_REQ_PRINT_EX,ERR_R_BUF_LIB);
  246. return(0);
  247. }
  248. int X509_REQ_print(BIO *bp, X509_REQ *x)
  249. {
  250. return X509_REQ_print_ex(bp, x, XN_FLAG_COMPAT, X509_FLAG_COMPAT);
  251. }