t_req.c 9.3 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255
  1. /* crypto/asn1/t_req.c */
  2. /* Copyright (C) 1995-1998 Eric Young (eay@cryptsoft.com)
  3. * All rights reserved.
  4. *
  5. * This package is an SSL implementation written
  6. * by Eric Young (eay@cryptsoft.com).
  7. * The implementation was written so as to conform with Netscapes SSL.
  8. *
  9. * This library is free for commercial and non-commercial use as long as
  10. * the following conditions are aheared to. The following conditions
  11. * apply to all code found in this distribution, be it the RC4, RSA,
  12. * lhash, DES, etc., code; not just the SSL code. The SSL documentation
  13. * included with this distribution is covered by the same copyright terms
  14. * except that the holder is Tim Hudson (tjh@cryptsoft.com).
  15. *
  16. * Copyright remains Eric Young's, and as such any Copyright notices in
  17. * the code are not to be removed.
  18. * If this package is used in a product, Eric Young should be given attribution
  19. * as the author of the parts of the library used.
  20. * This can be in the form of a textual message at program startup or
  21. * in documentation (online or textual) provided with the package.
  22. *
  23. * Redistribution and use in source and binary forms, with or without
  24. * modification, are permitted provided that the following conditions
  25. * are met:
  26. * 1. Redistributions of source code must retain the copyright
  27. * notice, this list of conditions and the following disclaimer.
  28. * 2. Redistributions in binary form must reproduce the above copyright
  29. * notice, this list of conditions and the following disclaimer in the
  30. * documentation and/or other materials provided with the distribution.
  31. * 3. All advertising materials mentioning features or use of this software
  32. * must display the following acknowledgement:
  33. * "This product includes cryptographic software written by
  34. * Eric Young (eay@cryptsoft.com)"
  35. * The word 'cryptographic' can be left out if the rouines from the library
  36. * being used are not cryptographic related :-).
  37. * 4. If you include any Windows specific code (or a derivative thereof) from
  38. * the apps directory (application code) you must include an acknowledgement:
  39. * "This product includes software written by Tim Hudson (tjh@cryptsoft.com)"
  40. *
  41. * THIS SOFTWARE IS PROVIDED BY ERIC YOUNG ``AS IS'' AND
  42. * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
  43. * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
  44. * ARE DISCLAIMED. IN NO EVENT SHALL THE AUTHOR OR CONTRIBUTORS BE LIABLE
  45. * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
  46. * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
  47. * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
  48. * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
  49. * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
  50. * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
  51. * SUCH DAMAGE.
  52. *
  53. * The licence and distribution terms for any publically available version or
  54. * derivative of this code cannot be changed. i.e. this code cannot simply be
  55. * copied and put under another distribution licence
  56. * [including the GNU Public Licence.]
  57. */
  58. #include <stdio.h>
  59. #include "cryptlib.h"
  60. #include <openssl/buffer.h>
  61. #include <openssl/bn.h>
  62. #include <openssl/objects.h>
  63. #include <openssl/x509.h>
  64. #include <openssl/x509v3.h>
  65. #ifndef OPENSSL_NO_RSA
  66. # include <openssl/rsa.h>
  67. #endif
  68. #ifndef OPENSSL_NO_DSA
  69. # include <openssl/dsa.h>
  70. #endif
  71. #ifndef OPENSSL_NO_FP_API
  72. int X509_REQ_print_fp(FILE *fp, X509_REQ *x)
  73. {
  74. BIO *b;
  75. int ret;
  76. if ((b = BIO_new(BIO_s_file())) == NULL) {
  77. X509err(X509_F_X509_REQ_PRINT_FP, ERR_R_BUF_LIB);
  78. return (0);
  79. }
  80. BIO_set_fp(b, fp, BIO_NOCLOSE);
  81. ret = X509_REQ_print(b, x);
  82. BIO_free(b);
  83. return (ret);
  84. }
  85. #endif
  86. int X509_REQ_print_ex(BIO *bp, X509_REQ *x, unsigned long nmflags,
  87. unsigned long cflag)
  88. {
  89. unsigned long l;
  90. int i;
  91. const char *neg;
  92. X509_REQ_INFO *ri;
  93. EVP_PKEY *pkey;
  94. STACK_OF(X509_ATTRIBUTE) *sk;
  95. STACK_OF(X509_EXTENSION) *exts;
  96. char mlch = ' ';
  97. int nmindent = 0;
  98. if ((nmflags & XN_FLAG_SEP_MASK) == XN_FLAG_SEP_MULTILINE) {
  99. mlch = '\n';
  100. nmindent = 12;
  101. }
  102. if (nmflags == X509_FLAG_COMPAT)
  103. nmindent = 16;
  104. ri = x->req_info;
  105. if (!(cflag & X509_FLAG_NO_HEADER)) {
  106. if (BIO_write(bp, "Certificate Request:\n", 21) <= 0)
  107. goto err;
  108. if (BIO_write(bp, " Data:\n", 10) <= 0)
  109. goto err;
  110. }
  111. if (!(cflag & X509_FLAG_NO_VERSION)) {
  112. neg = (ri->version->type == V_ASN1_NEG_INTEGER) ? "-" : "";
  113. l = 0;
  114. for (i = 0; i < ri->version->length; i++) {
  115. l <<= 8;
  116. l += ri->version->data[i];
  117. }
  118. if (BIO_printf(bp, "%8sVersion: %s%lu (%s0x%lx)\n", "", neg, l, neg,
  119. l) <= 0)
  120. goto err;
  121. }
  122. if (!(cflag & X509_FLAG_NO_SUBJECT)) {
  123. if (BIO_printf(bp, " Subject:%c", mlch) <= 0)
  124. goto err;
  125. if (X509_NAME_print_ex(bp, ri->subject, nmindent, nmflags) < 0)
  126. goto err;
  127. if (BIO_write(bp, "\n", 1) <= 0)
  128. goto err;
  129. }
  130. if (!(cflag & X509_FLAG_NO_PUBKEY)) {
  131. if (BIO_write(bp, " Subject Public Key Info:\n", 33) <= 0)
  132. goto err;
  133. if (BIO_printf(bp, "%12sPublic Key Algorithm: ", "") <= 0)
  134. goto err;
  135. if (i2a_ASN1_OBJECT(bp, ri->pubkey->algor->algorithm) <= 0)
  136. goto err;
  137. if (BIO_puts(bp, "\n") <= 0)
  138. goto err;
  139. pkey = X509_REQ_get_pubkey(x);
  140. if (pkey == NULL) {
  141. BIO_printf(bp, "%12sUnable to load Public Key\n", "");
  142. ERR_print_errors(bp);
  143. } else {
  144. EVP_PKEY_print_public(bp, pkey, 16, NULL);
  145. EVP_PKEY_free(pkey);
  146. }
  147. }
  148. if (!(cflag & X509_FLAG_NO_ATTRIBUTES)) {
  149. /* may not be */
  150. if (BIO_printf(bp, "%8sAttributes:\n", "") <= 0)
  151. goto err;
  152. sk = x->req_info->attributes;
  153. if (sk_X509_ATTRIBUTE_num(sk) == 0) {
  154. if (BIO_printf(bp, "%12sa0:00\n", "") <= 0)
  155. goto err;
  156. } else {
  157. for (i = 0; i < sk_X509_ATTRIBUTE_num(sk); i++) {
  158. ASN1_TYPE *at;
  159. X509_ATTRIBUTE *a;
  160. ASN1_BIT_STRING *bs = NULL;
  161. ASN1_TYPE *t;
  162. int j, type = 0, count = 1, ii = 0;
  163. a = sk_X509_ATTRIBUTE_value(sk, i);
  164. if (X509_REQ_extension_nid(OBJ_obj2nid(a->object)))
  165. continue;
  166. if (BIO_printf(bp, "%12s", "") <= 0)
  167. goto err;
  168. if ((j = i2a_ASN1_OBJECT(bp, a->object)) > 0) {
  169. if (a->single) {
  170. t = a->value.single;
  171. type = t->type;
  172. bs = t->value.bit_string;
  173. } else {
  174. ii = 0;
  175. count = sk_ASN1_TYPE_num(a->value.set);
  176. get_next:
  177. at = sk_ASN1_TYPE_value(a->value.set, ii);
  178. type = at->type;
  179. bs = at->value.asn1_string;
  180. }
  181. }
  182. for (j = 25 - j; j > 0; j--)
  183. if (BIO_write(bp, " ", 1) != 1)
  184. goto err;
  185. if (BIO_puts(bp, ":") <= 0)
  186. goto err;
  187. if ((type == V_ASN1_PRINTABLESTRING) ||
  188. (type == V_ASN1_UTF8STRING) ||
  189. (type == V_ASN1_T61STRING) ||
  190. (type == V_ASN1_IA5STRING)) {
  191. if (BIO_write(bp, (char *)bs->data, bs->length)
  192. != bs->length)
  193. goto err;
  194. BIO_puts(bp, "\n");
  195. } else {
  196. BIO_puts(bp, "unable to print attribute\n");
  197. }
  198. if (++ii < count)
  199. goto get_next;
  200. }
  201. }
  202. }
  203. if (!(cflag & X509_FLAG_NO_EXTENSIONS)) {
  204. exts = X509_REQ_get_extensions(x);
  205. if (exts) {
  206. BIO_printf(bp, "%8sRequested Extensions:\n", "");
  207. for (i = 0; i < sk_X509_EXTENSION_num(exts); i++) {
  208. ASN1_OBJECT *obj;
  209. X509_EXTENSION *ex;
  210. int j;
  211. ex = sk_X509_EXTENSION_value(exts, i);
  212. if (BIO_printf(bp, "%12s", "") <= 0)
  213. goto err;
  214. obj = X509_EXTENSION_get_object(ex);
  215. i2a_ASN1_OBJECT(bp, obj);
  216. j = X509_EXTENSION_get_critical(ex);
  217. if (BIO_printf(bp, ": %s\n", j ? "critical" : "") <= 0)
  218. goto err;
  219. if (!X509V3_EXT_print(bp, ex, cflag, 16)) {
  220. BIO_printf(bp, "%16s", "");
  221. M_ASN1_OCTET_STRING_print(bp, ex->value);
  222. }
  223. if (BIO_write(bp, "\n", 1) <= 0)
  224. goto err;
  225. }
  226. sk_X509_EXTENSION_pop_free(exts, X509_EXTENSION_free);
  227. }
  228. }
  229. if (!(cflag & X509_FLAG_NO_SIGDUMP)) {
  230. if (!X509_signature_print(bp, x->sig_alg, x->signature))
  231. goto err;
  232. }
  233. return (1);
  234. err:
  235. X509err(X509_F_X509_REQ_PRINT_EX, ERR_R_BUF_LIB);
  236. return (0);
  237. }
  238. int X509_REQ_print(BIO *bp, X509_REQ *x)
  239. {
  240. return X509_REQ_print_ex(bp, x, XN_FLAG_COMPAT, X509_FLAG_COMPAT);
  241. }