1 | /* |
2 | * Copyright 1999-2016 The OpenSSL Project Authors. All Rights Reserved. |
3 | * |
4 | * Licensed under the Apache License 2.0 (the "License"). You may not use |
5 | * this file except in compliance with the License. You can obtain a copy |
6 | * in the file LICENSE in the source distribution or at |
7 | * https://www.openssl.org/source/license.html |
8 | */ |
9 | |
10 | #include <stdio.h> |
11 | #include <stdlib.h> |
12 | #include <openssl/bio.h> |
13 | #include <openssl/asn1.h> |
14 | #include <openssl/asn1t.h> |
15 | #include <openssl/pem.h> |
16 | #include <openssl/pkcs7.h> |
17 | #include <openssl/x509.h> |
18 | #include <openssl/err.h> |
19 | |
20 | int PKCS7_add_attrib_smimecap(PKCS7_SIGNER_INFO *si, |
21 | STACK_OF(X509_ALGOR) *cap) |
22 | { |
23 | ASN1_STRING *seq; |
24 | |
25 | if ((seq = ASN1_STRING_new()) == NULL) { |
26 | PKCS7err(PKCS7_F_PKCS7_ADD_ATTRIB_SMIMECAP, ERR_R_MALLOC_FAILURE); |
27 | return 0; |
28 | } |
29 | seq->length = ASN1_item_i2d((ASN1_VALUE *)cap, &seq->data, |
30 | ASN1_ITEM_rptr(X509_ALGORS)); |
31 | return PKCS7_add_signed_attribute(si, NID_SMIMECapabilities, |
32 | V_ASN1_SEQUENCE, seq); |
33 | } |
34 | |
35 | STACK_OF(X509_ALGOR) *PKCS7_get_smimecap(PKCS7_SIGNER_INFO *si) |
36 | { |
37 | ASN1_TYPE *cap; |
38 | const unsigned char *p; |
39 | |
40 | cap = PKCS7_get_signed_attribute(si, NID_SMIMECapabilities); |
41 | if (cap == NULL || (cap->type != V_ASN1_SEQUENCE)) |
42 | return NULL; |
43 | p = cap->value.sequence->data; |
44 | return (STACK_OF(X509_ALGOR) *) |
45 | ASN1_item_d2i(NULL, &p, cap->value.sequence->length, |
46 | ASN1_ITEM_rptr(X509_ALGORS)); |
47 | } |
48 | |
49 | /* Basic smime-capabilities OID and optional integer arg */ |
50 | int PKCS7_simple_smimecap(STACK_OF(X509_ALGOR) *sk, int nid, int arg) |
51 | { |
52 | ASN1_INTEGER *nbit = NULL; |
53 | X509_ALGOR *alg; |
54 | |
55 | if ((alg = X509_ALGOR_new()) == NULL) { |
56 | PKCS7err(PKCS7_F_PKCS7_SIMPLE_SMIMECAP, ERR_R_MALLOC_FAILURE); |
57 | return 0; |
58 | } |
59 | ASN1_OBJECT_free(alg->algorithm); |
60 | alg->algorithm = OBJ_nid2obj(nid); |
61 | if (arg > 0) { |
62 | if ((alg->parameter = ASN1_TYPE_new()) == NULL) { |
63 | goto err; |
64 | } |
65 | if ((nbit = ASN1_INTEGER_new()) == NULL) { |
66 | goto err; |
67 | } |
68 | if (!ASN1_INTEGER_set(nbit, arg)) { |
69 | goto err; |
70 | } |
71 | alg->parameter->value.integer = nbit; |
72 | alg->parameter->type = V_ASN1_INTEGER; |
73 | nbit = NULL; |
74 | } |
75 | if (!sk_X509_ALGOR_push(sk, alg)) { |
76 | goto err; |
77 | } |
78 | return 1; |
79 | err: |
80 | PKCS7err(PKCS7_F_PKCS7_SIMPLE_SMIMECAP, ERR_R_MALLOC_FAILURE); |
81 | ASN1_INTEGER_free(nbit); |
82 | X509_ALGOR_free(alg); |
83 | return 0; |
84 | } |
85 | |
86 | int PKCS7_add_attrib_content_type(PKCS7_SIGNER_INFO *si, ASN1_OBJECT *coid) |
87 | { |
88 | if (PKCS7_get_signed_attribute(si, NID_pkcs9_contentType)) |
89 | return 0; |
90 | if (!coid) |
91 | coid = OBJ_nid2obj(NID_pkcs7_data); |
92 | return PKCS7_add_signed_attribute(si, NID_pkcs9_contentType, |
93 | V_ASN1_OBJECT, coid); |
94 | } |
95 | |
96 | int PKCS7_add0_attrib_signing_time(PKCS7_SIGNER_INFO *si, ASN1_TIME *t) |
97 | { |
98 | if (t == NULL && (t = X509_gmtime_adj(NULL, 0)) == NULL) { |
99 | PKCS7err(PKCS7_F_PKCS7_ADD0_ATTRIB_SIGNING_TIME, |
100 | ERR_R_MALLOC_FAILURE); |
101 | return 0; |
102 | } |
103 | return PKCS7_add_signed_attribute(si, NID_pkcs9_signingTime, |
104 | V_ASN1_UTCTIME, t); |
105 | } |
106 | |
107 | int PKCS7_add1_attrib_digest(PKCS7_SIGNER_INFO *si, |
108 | const unsigned char *md, int mdlen) |
109 | { |
110 | ASN1_OCTET_STRING *os; |
111 | os = ASN1_OCTET_STRING_new(); |
112 | if (os == NULL) |
113 | return 0; |
114 | if (!ASN1_STRING_set(os, md, mdlen) |
115 | || !PKCS7_add_signed_attribute(si, NID_pkcs9_messageDigest, |
116 | V_ASN1_OCTET_STRING, os)) { |
117 | ASN1_OCTET_STRING_free(os); |
118 | return 0; |
119 | } |
120 | return 1; |
121 | } |
122 | |