v3_ist.c 5.2 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144
  1. /*
  2. * Copyright 2020-2023 The OpenSSL Project Authors. All Rights Reserved.
  3. *
  4. * Licensed under the Apache License 2.0 (the "License"). You may not use
  5. * this file except in compliance with the License. You can obtain a copy
  6. * in the file LICENSE in the source distribution or at
  7. * https://www.openssl.org/source/license.html
  8. */
  9. #include <stdio.h>
  10. #include "internal/cryptlib.h"
  11. #include <openssl/conf.h>
  12. #include <openssl/asn1.h>
  13. #include <openssl/asn1t.h>
  14. #include <openssl/x509v3.h>
  15. #include "ext_dat.h"
  16. /*
  17. * Issuer Sign Tool (1.2.643.100.112) The name of the tool used to signs the subject (ASN1_SEQUENCE)
  18. * This extension is required to obtain the status of a qualified certificate at Russian Federation.
  19. * RFC-style description is available here: https://tools.ietf.org/html/draft-deremin-rfc4491-bis-04#section-5
  20. * Russian Federal Law 63 "Digital Sign" is available here: http://www.consultant.ru/document/cons_doc_LAW_112701/
  21. */
  22. ASN1_SEQUENCE(ISSUER_SIGN_TOOL) = {
  23. ASN1_SIMPLE(ISSUER_SIGN_TOOL, signTool, ASN1_UTF8STRING),
  24. ASN1_SIMPLE(ISSUER_SIGN_TOOL, cATool, ASN1_UTF8STRING),
  25. ASN1_SIMPLE(ISSUER_SIGN_TOOL, signToolCert, ASN1_UTF8STRING),
  26. ASN1_SIMPLE(ISSUER_SIGN_TOOL, cAToolCert, ASN1_UTF8STRING)
  27. } ASN1_SEQUENCE_END(ISSUER_SIGN_TOOL)
  28. IMPLEMENT_ASN1_FUNCTIONS(ISSUER_SIGN_TOOL)
  29. static ISSUER_SIGN_TOOL *v2i_issuer_sign_tool(X509V3_EXT_METHOD *method, X509V3_CTX *ctx,
  30. STACK_OF(CONF_VALUE) *nval)
  31. {
  32. ISSUER_SIGN_TOOL *ist = ISSUER_SIGN_TOOL_new();
  33. int i;
  34. if (ist == NULL) {
  35. ERR_raise(ERR_LIB_X509V3, ERR_R_ASN1_LIB);
  36. return NULL;
  37. }
  38. for (i = 0; i < sk_CONF_VALUE_num(nval); ++i) {
  39. CONF_VALUE *cnf = sk_CONF_VALUE_value(nval, i);
  40. if (cnf == NULL) {
  41. continue;
  42. }
  43. if (strcmp(cnf->name, "signTool") == 0) {
  44. ist->signTool = ASN1_UTF8STRING_new();
  45. if (ist->signTool == NULL || !ASN1_STRING_set(ist->signTool, cnf->value, strlen(cnf->value))) {
  46. ERR_raise(ERR_LIB_X509V3, ERR_R_ASN1_LIB);
  47. goto err;
  48. }
  49. } else if (strcmp(cnf->name, "cATool") == 0) {
  50. ist->cATool = ASN1_UTF8STRING_new();
  51. if (ist->cATool == NULL || !ASN1_STRING_set(ist->cATool, cnf->value, strlen(cnf->value))) {
  52. ERR_raise(ERR_LIB_X509V3, ERR_R_ASN1_LIB);
  53. goto err;
  54. }
  55. } else if (strcmp(cnf->name, "signToolCert") == 0) {
  56. ist->signToolCert = ASN1_UTF8STRING_new();
  57. if (ist->signToolCert == NULL || !ASN1_STRING_set(ist->signToolCert, cnf->value, strlen(cnf->value))) {
  58. ERR_raise(ERR_LIB_X509V3, ERR_R_ASN1_LIB);
  59. goto err;
  60. }
  61. } else if (strcmp(cnf->name, "cAToolCert") == 0) {
  62. ist->cAToolCert = ASN1_UTF8STRING_new();
  63. if (ist->cAToolCert == NULL || !ASN1_STRING_set(ist->cAToolCert, cnf->value, strlen(cnf->value))) {
  64. ERR_raise(ERR_LIB_X509V3, ERR_R_ASN1_LIB);
  65. goto err;
  66. }
  67. } else {
  68. ERR_raise(ERR_LIB_X509V3, ERR_R_PASSED_INVALID_ARGUMENT);
  69. goto err;
  70. }
  71. }
  72. return ist;
  73. err:
  74. ISSUER_SIGN_TOOL_free(ist);
  75. return NULL;
  76. }
  77. static int i2r_issuer_sign_tool(X509V3_EXT_METHOD *method,
  78. ISSUER_SIGN_TOOL *ist, BIO *out,
  79. int indent)
  80. {
  81. int new_line = 0;
  82. if (ist == NULL) {
  83. ERR_raise(ERR_LIB_X509V3, ERR_R_PASSED_INVALID_ARGUMENT);
  84. return 0;
  85. }
  86. if (ist->signTool != NULL) {
  87. if (new_line == 1) {
  88. BIO_write(out, "\n", 1);
  89. }
  90. BIO_printf(out, "%*ssignTool : ", indent, "");
  91. BIO_write(out, ist->signTool->data, ist->signTool->length);
  92. new_line = 1;
  93. }
  94. if (ist->cATool != NULL) {
  95. if (new_line == 1) {
  96. BIO_write(out, "\n", 1);
  97. }
  98. BIO_printf(out, "%*scATool : ", indent, "");
  99. BIO_write(out, ist->cATool->data, ist->cATool->length);
  100. new_line = 1;
  101. }
  102. if (ist->signToolCert != NULL) {
  103. if (new_line == 1) {
  104. BIO_write(out, "\n", 1);
  105. }
  106. BIO_printf(out, "%*ssignToolCert: ", indent, "");
  107. BIO_write(out, ist->signToolCert->data, ist->signToolCert->length);
  108. new_line = 1;
  109. }
  110. if (ist->cAToolCert != NULL) {
  111. if (new_line == 1) {
  112. BIO_write(out, "\n", 1);
  113. }
  114. BIO_printf(out, "%*scAToolCert : ", indent, "");
  115. BIO_write(out, ist->cAToolCert->data, ist->cAToolCert->length);
  116. new_line = 1;
  117. }
  118. return 1;
  119. }
  120. const X509V3_EXT_METHOD ossl_v3_issuer_sign_tool = {
  121. NID_issuerSignTool, /* nid */
  122. X509V3_EXT_MULTILINE, /* flags */
  123. ASN1_ITEM_ref(ISSUER_SIGN_TOOL), /* template */
  124. 0, 0, 0, 0, /* old functions, ignored */
  125. 0, /* i2s */
  126. 0, /* s2i */
  127. 0, /* i2v */
  128. (X509V3_EXT_V2I)v2i_issuer_sign_tool, /* v2i */
  129. (X509V3_EXT_I2R)i2r_issuer_sign_tool, /* i2r */
  130. 0, /* r2i */
  131. NULL /* extension-specific data */
  132. };