123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204 |
- =pod
- =head1 NAME
- i2t_ASN1_OBJECT,
- OBJ_length, OBJ_get0_data, OBJ_nid2obj, OBJ_nid2ln,
- OBJ_nid2sn, OBJ_obj2nid, OBJ_txt2nid, OBJ_ln2nid, OBJ_sn2nid, OBJ_cmp,
- OBJ_dup, OBJ_txt2obj, OBJ_obj2txt, OBJ_create, OBJ_cleanup, OBJ_add_sigid
- - ASN1 object utility functions
- =head1 SYNOPSIS
- #include <openssl/objects.h>
- ASN1_OBJECT *OBJ_nid2obj(int n);
- const char *OBJ_nid2ln(int n);
- const char *OBJ_nid2sn(int n);
- int OBJ_obj2nid(const ASN1_OBJECT *o);
- int OBJ_ln2nid(const char *ln);
- int OBJ_sn2nid(const char *sn);
- int OBJ_txt2nid(const char *s);
- ASN1_OBJECT *OBJ_txt2obj(const char *s, int no_name);
- int OBJ_obj2txt(char *buf, int buf_len, const ASN1_OBJECT *a, int no_name);
- int i2t_ASN1_OBJECT(char *buf, int buf_len, const ASN1_OBJECT *a);
- int OBJ_cmp(const ASN1_OBJECT *a, const ASN1_OBJECT *b);
- ASN1_OBJECT *OBJ_dup(const ASN1_OBJECT *o);
- int OBJ_create(const char *oid, const char *sn, const char *ln);
- size_t OBJ_length(const ASN1_OBJECT *obj);
- const unsigned char *OBJ_get0_data(const ASN1_OBJECT *obj);
- int OBJ_add_sigid(int signid, int dig_id, int pkey_id);
- The following function has been deprecated since OpenSSL 1.1.0, and can be
- hidden entirely by defining B<OPENSSL_API_COMPAT> with a suitable version value,
- see L<openssl_user_macros(7)>:
- void OBJ_cleanup(void);
- =head1 DESCRIPTION
- The ASN1 object utility functions process ASN1_OBJECT structures which are
- a representation of the ASN1 OBJECT IDENTIFIER (OID) type.
- For convenience, OIDs are usually represented in source code as numeric
- identifiers, or B<NID>s. OpenSSL has an internal table of OIDs that
- are generated when the library is built, and their corresponding NIDs
- are available as defined constants. For the functions below, application
- code should treat all returned values -- OIDs, NIDs, or names -- as
- constants.
- OBJ_nid2obj(), OBJ_nid2ln() and OBJ_nid2sn() convert the NID I<n> to
- an ASN1_OBJECT structure, its long name and its short name respectively,
- or B<NULL> if an error occurred.
- OBJ_obj2nid(), OBJ_ln2nid(), OBJ_sn2nid() return the corresponding NID
- for the object I<o>, the long name I<ln> or the short name I<sn> respectively
- or NID_undef if an error occurred.
- OBJ_txt2nid() returns NID corresponding to text string I<s>. I<s> can be
- a long name, a short name or the numerical representation of an object.
- OBJ_txt2obj() converts the text string I<s> into an ASN1_OBJECT structure.
- If I<no_name> is 0 then long names and short names will be interpreted
- as well as numerical forms. If I<no_name> is 1 only the numerical form
- is acceptable.
- OBJ_obj2txt() converts the B<ASN1_OBJECT> I<a> into a textual representation.
- Unless I<buf> is NULL,
- the representation is written as a NUL-terminated string to I<buf>, where
- at most I<buf_len> bytes are written, truncating the result if necessary.
- In any case it returns the total string length, excluding the NUL character,
- required for non-truncated representation, or -1 on error.
- If I<no_name> is 0 then if the object has a long or short name
- then that will be used, otherwise the numerical form will be used.
- If I<no_name> is 1 then the numerical form will always be used.
- i2t_ASN1_OBJECT() is the same as OBJ_obj2txt() with the I<no_name> set to zero.
- OBJ_cmp() compares I<a> to I<b>. If the two are identical 0 is returned.
- OBJ_dup() returns a copy of I<o>.
- OBJ_create() adds a new object to the internal table. I<oid> is the
- numerical form of the object, I<sn> the short name and I<ln> the
- long name. A new NID is returned for the created object in case of
- success and NID_undef in case of failure. Any of I<oid>, I<sn> and
- I<ln> may be NULL, but not all at once.
- OBJ_length() returns the size of the content octets of I<obj>.
- OBJ_get0_data() returns a pointer to the content octets of I<obj>.
- The returned pointer is an internal pointer which B<must not> be freed.
- OBJ_add_sigid() creates a new composite "Signature Algorithm" that associates a
- given NID with two other NIDs - one representing the underlying signature
- algorithm and the other representing a digest algorithm to be used in
- conjunction with it. I<signid> represents the NID for the composite "Signature
- Algorithm", I<dig_id> is the NID for the digest algorithm and I<pkey_id> is the
- NID for the underlying signature algorithm. As there are signature algorithms
- that do not require a digest, NID_undef is a valid I<dig_id>.
- OBJ_cleanup() releases any resources allocated by creating new objects.
- =head1 NOTES
- Objects in OpenSSL can have a short name, a long name and a numerical
- identifier (NID) associated with them. A standard set of objects is
- represented in an internal table. The appropriate values are defined
- in the header file B<objects.h>.
- For example the OID for commonName has the following definitions:
- #define SN_commonName "CN"
- #define LN_commonName "commonName"
- #define NID_commonName 13
- New objects can be added by calling OBJ_create().
- Table objects have certain advantages over other objects: for example
- their NIDs can be used in a C language switch statement. They are
- also static constant structures which are shared: that is there
- is only a single constant structure for each table object.
- Objects which are not in the table have the NID value NID_undef.
- Objects do not need to be in the internal tables to be processed,
- the functions OBJ_txt2obj() and OBJ_obj2txt() can process the numerical
- form of an OID.
- Some objects are used to represent algorithms which do not have a
- corresponding ASN.1 OBJECT IDENTIFIER encoding (for example no OID currently
- exists for a particular algorithm). As a result they B<cannot> be encoded or
- decoded as part of ASN.1 structures. Applications can determine if there
- is a corresponding OBJECT IDENTIFIER by checking OBJ_length() is not zero.
- These functions cannot return B<const> because an B<ASN1_OBJECT> can
- represent both an internal, constant, OID and a dynamically-created one.
- The latter cannot be constant because it needs to be freed after use.
- These functions were not thread safe in OpenSSL 3.0 and before.
- =head1 RETURN VALUES
- OBJ_nid2obj() returns an B<ASN1_OBJECT> structure or B<NULL> is an
- error occurred.
- OBJ_nid2ln() and OBJ_nid2sn() returns a valid string or B<NULL>
- on error.
- OBJ_obj2nid(), OBJ_ln2nid(), OBJ_sn2nid() and OBJ_txt2nid() return
- a NID or B<NID_undef> on error.
- OBJ_add_sigid() returns 1 on success or 0 on error.
- i2t_ASN1_OBJECT() an OBJ_obj2txt() return -1 on error.
- On success, they return the length of the string written to I<buf> if I<buf> is
- not NULL and I<buf_len> is big enough, otherwise the total string length.
- Note that this does not count the trailing NUL character.
- =head1 EXAMPLES
- Create an object for B<commonName>:
- ASN1_OBJECT *o = OBJ_nid2obj(NID_commonName);
- Check if an object is B<commonName>
- if (OBJ_obj2nid(obj) == NID_commonName)
- /* Do something */
- Create a new NID and initialize an object from it:
- int new_nid = OBJ_create("1.2.3.4", "NewOID", "New Object Identifier");
- ASN1_OBJECT *obj = OBJ_nid2obj(new_nid);
- Create a new object directly:
- obj = OBJ_txt2obj("1.2.3.4", 1);
- =head1 SEE ALSO
- L<ERR_get_error(3)>
- =head1 HISTORY
- OBJ_cleanup() was deprecated in OpenSSL 1.1.0 by L<OPENSSL_init_crypto(3)>
- and should not be used.
- =head1 COPYRIGHT
- Copyright 2002-2021 The OpenSSL Project Authors. All Rights Reserved.
- Licensed under the Apache License 2.0 (the "License"). You may not use
- this file except in compliance with the License. You can obtain a copy
- in the file LICENSE in the source distribution or at
- L<https://www.openssl.org/source/license.html>.
- =cut
|