t_req.c 8.8 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242
  1. /* crypto/asn1/t_req.c */
  2. /* Copyright (C) 1995-1998 Eric Young (eay@cryptsoft.com)
  3. * All rights reserved.
  4. *
  5. * This package is an SSL implementation written
  6. * by Eric Young (eay@cryptsoft.com).
  7. * The implementation was written so as to conform with Netscapes SSL.
  8. *
  9. * This library is free for commercial and non-commercial use as long as
  10. * the following conditions are aheared to. The following conditions
  11. * apply to all code found in this distribution, be it the RC4, RSA,
  12. * lhash, DES, etc., code; not just the SSL code. The SSL documentation
  13. * included with this distribution is covered by the same copyright terms
  14. * except that the holder is Tim Hudson (tjh@cryptsoft.com).
  15. *
  16. * Copyright remains Eric Young's, and as such any Copyright notices in
  17. * the code are not to be removed.
  18. * If this package is used in a product, Eric Young should be given attribution
  19. * as the author of the parts of the library used.
  20. * This can be in the form of a textual message at program startup or
  21. * in documentation (online or textual) provided with the package.
  22. *
  23. * Redistribution and use in source and binary forms, with or without
  24. * modification, are permitted provided that the following conditions
  25. * are met:
  26. * 1. Redistributions of source code must retain the copyright
  27. * notice, this list of conditions and the following disclaimer.
  28. * 2. Redistributions in binary form must reproduce the above copyright
  29. * notice, this list of conditions and the following disclaimer in the
  30. * documentation and/or other materials provided with the distribution.
  31. * 3. All advertising materials mentioning features or use of this software
  32. * must display the following acknowledgement:
  33. * "This product includes cryptographic software written by
  34. * Eric Young (eay@cryptsoft.com)"
  35. * The word 'cryptographic' can be left out if the rouines from the library
  36. * being used are not cryptographic related :-).
  37. * 4. If you include any Windows specific code (or a derivative thereof) from
  38. * the apps directory (application code) you must include an acknowledgement:
  39. * "This product includes software written by Tim Hudson (tjh@cryptsoft.com)"
  40. *
  41. * THIS SOFTWARE IS PROVIDED BY ERIC YOUNG ``AS IS'' AND
  42. * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
  43. * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
  44. * ARE DISCLAIMED. IN NO EVENT SHALL THE AUTHOR OR CONTRIBUTORS BE LIABLE
  45. * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
  46. * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
  47. * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
  48. * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
  49. * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
  50. * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
  51. * SUCH DAMAGE.
  52. *
  53. * The licence and distribution terms for any publically available version or
  54. * derivative of this code cannot be changed. i.e. this code cannot simply be
  55. * copied and put under another distribution licence
  56. * [including the GNU Public Licence.]
  57. */
  58. #include <stdio.h>
  59. #include "internal/cryptlib.h"
  60. #include <openssl/buffer.h>
  61. #include <openssl/bn.h>
  62. #include <openssl/objects.h>
  63. #include <openssl/x509.h>
  64. #include <openssl/x509v3.h>
  65. #ifndef OPENSSL_NO_RSA
  66. # include <openssl/rsa.h>
  67. #endif
  68. #ifndef OPENSSL_NO_DSA
  69. # include <openssl/dsa.h>
  70. #endif
  71. #ifndef OPENSSL_NO_STDIO
  72. int X509_REQ_print_fp(FILE *fp, X509_REQ *x)
  73. {
  74. BIO *b;
  75. int ret;
  76. if ((b = BIO_new(BIO_s_file())) == NULL) {
  77. X509err(X509_F_X509_REQ_PRINT_FP, ERR_R_BUF_LIB);
  78. return (0);
  79. }
  80. BIO_set_fp(b, fp, BIO_NOCLOSE);
  81. ret = X509_REQ_print(b, x);
  82. BIO_free(b);
  83. return (ret);
  84. }
  85. #endif
  86. int X509_REQ_print_ex(BIO *bp, X509_REQ *x, unsigned long nmflags,
  87. unsigned long cflag)
  88. {
  89. long l;
  90. int i;
  91. X509_REQ_INFO *ri;
  92. EVP_PKEY *pkey;
  93. STACK_OF(X509_ATTRIBUTE) *sk;
  94. STACK_OF(X509_EXTENSION) *exts;
  95. char mlch = ' ';
  96. int nmindent = 0;
  97. if ((nmflags & XN_FLAG_SEP_MASK) == XN_FLAG_SEP_MULTILINE) {
  98. mlch = '\n';
  99. nmindent = 12;
  100. }
  101. if (nmflags == X509_FLAG_COMPAT)
  102. nmindent = 16;
  103. ri = x->req_info;
  104. if (!(cflag & X509_FLAG_NO_HEADER)) {
  105. if (BIO_write(bp, "Certificate Request:\n", 21) <= 0)
  106. goto err;
  107. if (BIO_write(bp, " Data:\n", 10) <= 0)
  108. goto err;
  109. }
  110. if (!(cflag & X509_FLAG_NO_VERSION)) {
  111. l = X509_REQ_get_version(x);
  112. if (BIO_printf(bp, "%8sVersion: %ld (0x%lx)\n", "", l + 1, l) <= 0)
  113. goto err;
  114. }
  115. if (!(cflag & X509_FLAG_NO_SUBJECT)) {
  116. if (BIO_printf(bp, " Subject:%c", mlch) <= 0)
  117. goto err;
  118. if (X509_NAME_print_ex(bp, ri->subject, nmindent, nmflags) < 0)
  119. goto err;
  120. if (BIO_write(bp, "\n", 1) <= 0)
  121. goto err;
  122. }
  123. if (!(cflag & X509_FLAG_NO_PUBKEY)) {
  124. if (BIO_write(bp, " Subject Public Key Info:\n", 33) <= 0)
  125. goto err;
  126. if (BIO_printf(bp, "%12sPublic Key Algorithm: ", "") <= 0)
  127. goto err;
  128. if (i2a_ASN1_OBJECT(bp, ri->pubkey->algor->algorithm) <= 0)
  129. goto err;
  130. if (BIO_puts(bp, "\n") <= 0)
  131. goto err;
  132. pkey = X509_REQ_get_pubkey(x);
  133. if (pkey == NULL) {
  134. BIO_printf(bp, "%12sUnable to load Public Key\n", "");
  135. ERR_print_errors(bp);
  136. } else {
  137. EVP_PKEY_print_public(bp, pkey, 16, NULL);
  138. EVP_PKEY_free(pkey);
  139. }
  140. }
  141. if (!(cflag & X509_FLAG_NO_ATTRIBUTES)) {
  142. /* may not be */
  143. if (BIO_printf(bp, "%8sAttributes:\n", "") <= 0)
  144. goto err;
  145. sk = x->req_info->attributes;
  146. if (sk_X509_ATTRIBUTE_num(sk) == 0) {
  147. if (BIO_printf(bp, "%12sa0:00\n", "") <= 0)
  148. goto err;
  149. } else {
  150. for (i = 0; i < sk_X509_ATTRIBUTE_num(sk); i++) {
  151. ASN1_TYPE *at;
  152. X509_ATTRIBUTE *a;
  153. ASN1_BIT_STRING *bs = NULL;
  154. ASN1_OBJECT *aobj;
  155. int j, type = 0, count = 1, ii = 0;
  156. a = sk_X509_ATTRIBUTE_value(sk, i);
  157. aobj = X509_ATTRIBUTE_get0_object(a);
  158. if (X509_REQ_extension_nid(OBJ_obj2nid(aobj)))
  159. continue;
  160. if (BIO_printf(bp, "%12s", "") <= 0)
  161. goto err;
  162. if ((j = i2a_ASN1_OBJECT(bp, aobj)) > 0) {
  163. ii = 0;
  164. count = X509_ATTRIBUTE_count(a);
  165. get_next:
  166. at = X509_ATTRIBUTE_get0_type(a, ii);
  167. type = at->type;
  168. bs = at->value.asn1_string;
  169. }
  170. for (j = 25 - j; j > 0; j--)
  171. if (BIO_write(bp, " ", 1) != 1)
  172. goto err;
  173. if (BIO_puts(bp, ":") <= 0)
  174. goto err;
  175. if ((type == V_ASN1_PRINTABLESTRING) ||
  176. (type == V_ASN1_T61STRING) ||
  177. (type == V_ASN1_IA5STRING)) {
  178. if (BIO_write(bp, (char *)bs->data, bs->length)
  179. != bs->length)
  180. goto err;
  181. BIO_puts(bp, "\n");
  182. } else {
  183. BIO_puts(bp, "unable to print attribute\n");
  184. }
  185. if (++ii < count)
  186. goto get_next;
  187. }
  188. }
  189. }
  190. if (!(cflag & X509_FLAG_NO_EXTENSIONS)) {
  191. exts = X509_REQ_get_extensions(x);
  192. if (exts) {
  193. BIO_printf(bp, "%8sRequested Extensions:\n", "");
  194. for (i = 0; i < sk_X509_EXTENSION_num(exts); i++) {
  195. ASN1_OBJECT *obj;
  196. X509_EXTENSION *ex;
  197. int j;
  198. ex = sk_X509_EXTENSION_value(exts, i);
  199. if (BIO_printf(bp, "%12s", "") <= 0)
  200. goto err;
  201. obj = X509_EXTENSION_get_object(ex);
  202. i2a_ASN1_OBJECT(bp, obj);
  203. j = X509_EXTENSION_get_critical(ex);
  204. if (BIO_printf(bp, ": %s\n", j ? "critical" : "") <= 0)
  205. goto err;
  206. if (!X509V3_EXT_print(bp, ex, cflag, 16)) {
  207. BIO_printf(bp, "%16s", "");
  208. ASN1_STRING_print(bp, X509_EXTENSION_get_data(ex));
  209. }
  210. if (BIO_write(bp, "\n", 1) <= 0)
  211. goto err;
  212. }
  213. sk_X509_EXTENSION_pop_free(exts, X509_EXTENSION_free);
  214. }
  215. }
  216. if (!(cflag & X509_FLAG_NO_SIGDUMP)) {
  217. if (!X509_signature_print(bp, x->sig_alg, x->signature))
  218. goto err;
  219. }
  220. return (1);
  221. err:
  222. X509err(X509_F_X509_REQ_PRINT_EX, ERR_R_BUF_LIB);
  223. return (0);
  224. }
  225. int X509_REQ_print(BIO *bp, X509_REQ *x)
  226. {
  227. return X509_REQ_print_ex(bp, x, XN_FLAG_COMPAT, X509_FLAG_COMPAT);
  228. }