1/*
2 * Copyright 1999-2016 The OpenSSL Project Authors. All Rights Reserved.
3 *
4 * Licensed under the Apache License 2.0 (the "License"). You may not use
5 * this file except in compliance with the License. You can obtain a copy
6 * in the file LICENSE in the source distribution or at
7 * https://www.openssl.org/source/license.html
8 */
9
10#include <stdio.h>
11#include <stdlib.h>
12#include <openssl/bio.h>
13#include <openssl/asn1.h>
14#include <openssl/asn1t.h>
15#include <openssl/pem.h>
16#include <openssl/pkcs7.h>
17#include <openssl/x509.h>
18#include <openssl/err.h>
19
20int PKCS7_add_attrib_smimecap(PKCS7_SIGNER_INFO *si,
21 STACK_OF(X509_ALGOR) *cap)
22{
23 ASN1_STRING *seq;
24
25 if ((seq = ASN1_STRING_new()) == NULL) {
26 PKCS7err(PKCS7_F_PKCS7_ADD_ATTRIB_SMIMECAP, ERR_R_MALLOC_FAILURE);
27 return 0;
28 }
29 seq->length = ASN1_item_i2d((ASN1_VALUE *)cap, &seq->data,
30 ASN1_ITEM_rptr(X509_ALGORS));
31 return PKCS7_add_signed_attribute(si, NID_SMIMECapabilities,
32 V_ASN1_SEQUENCE, seq);
33}
34
35STACK_OF(X509_ALGOR) *PKCS7_get_smimecap(PKCS7_SIGNER_INFO *si)
36{
37 ASN1_TYPE *cap;
38 const unsigned char *p;
39
40 cap = PKCS7_get_signed_attribute(si, NID_SMIMECapabilities);
41 if (cap == NULL || (cap->type != V_ASN1_SEQUENCE))
42 return NULL;
43 p = cap->value.sequence->data;
44 return (STACK_OF(X509_ALGOR) *)
45 ASN1_item_d2i(NULL, &p, cap->value.sequence->length,
46 ASN1_ITEM_rptr(X509_ALGORS));
47}
48
49/* Basic smime-capabilities OID and optional integer arg */
50int PKCS7_simple_smimecap(STACK_OF(X509_ALGOR) *sk, int nid, int arg)
51{
52 ASN1_INTEGER *nbit = NULL;
53 X509_ALGOR *alg;
54
55 if ((alg = X509_ALGOR_new()) == NULL) {
56 PKCS7err(PKCS7_F_PKCS7_SIMPLE_SMIMECAP, ERR_R_MALLOC_FAILURE);
57 return 0;
58 }
59 ASN1_OBJECT_free(alg->algorithm);
60 alg->algorithm = OBJ_nid2obj(nid);
61 if (arg > 0) {
62 if ((alg->parameter = ASN1_TYPE_new()) == NULL) {
63 goto err;
64 }
65 if ((nbit = ASN1_INTEGER_new()) == NULL) {
66 goto err;
67 }
68 if (!ASN1_INTEGER_set(nbit, arg)) {
69 goto err;
70 }
71 alg->parameter->value.integer = nbit;
72 alg->parameter->type = V_ASN1_INTEGER;
73 nbit = NULL;
74 }
75 if (!sk_X509_ALGOR_push(sk, alg)) {
76 goto err;
77 }
78 return 1;
79err:
80 PKCS7err(PKCS7_F_PKCS7_SIMPLE_SMIMECAP, ERR_R_MALLOC_FAILURE);
81 ASN1_INTEGER_free(nbit);
82 X509_ALGOR_free(alg);
83 return 0;
84}
85
86int PKCS7_add_attrib_content_type(PKCS7_SIGNER_INFO *si, ASN1_OBJECT *coid)
87{
88 if (PKCS7_get_signed_attribute(si, NID_pkcs9_contentType))
89 return 0;
90 if (!coid)
91 coid = OBJ_nid2obj(NID_pkcs7_data);
92 return PKCS7_add_signed_attribute(si, NID_pkcs9_contentType,
93 V_ASN1_OBJECT, coid);
94}
95
96int PKCS7_add0_attrib_signing_time(PKCS7_SIGNER_INFO *si, ASN1_TIME *t)
97{
98 if (t == NULL && (t = X509_gmtime_adj(NULL, 0)) == NULL) {
99 PKCS7err(PKCS7_F_PKCS7_ADD0_ATTRIB_SIGNING_TIME,
100 ERR_R_MALLOC_FAILURE);
101 return 0;
102 }
103 return PKCS7_add_signed_attribute(si, NID_pkcs9_signingTime,
104 V_ASN1_UTCTIME, t);
105}
106
107int PKCS7_add1_attrib_digest(PKCS7_SIGNER_INFO *si,
108 const unsigned char *md, int mdlen)
109{
110 ASN1_OCTET_STRING *os;
111 os = ASN1_OCTET_STRING_new();
112 if (os == NULL)
113 return 0;
114 if (!ASN1_STRING_set(os, md, mdlen)
115 || !PKCS7_add_signed_attribute(si, NID_pkcs9_messageDigest,
116 V_ASN1_OCTET_STRING, os)) {
117 ASN1_OCTET_STRING_free(os);
118 return 0;
119 }
120 return 1;
121}
122