1 | /* |
2 | * Copyright 1999-2016 The OpenSSL Project Authors. All Rights Reserved. |
3 | * |
4 | * Licensed under the Apache License 2.0 (the "License"). You may not use |
5 | * this file except in compliance with the License. You can obtain a copy |
6 | * in the file LICENSE in the source distribution or at |
7 | * https://www.openssl.org/source/license.html |
8 | */ |
9 | |
10 | /* X509 v3 extension utilities */ |
11 | |
12 | #include <stdio.h> |
13 | #include "internal/cryptlib.h" |
14 | #include <openssl/conf.h> |
15 | #include <openssl/x509v3.h> |
16 | |
17 | /* Extension printing routines */ |
18 | |
19 | static int unknown_ext_print(BIO *out, const unsigned char *ext, int extlen, |
20 | unsigned long flag, int indent, int supported); |
21 | |
22 | /* Print out a name+value stack */ |
23 | |
24 | void X509V3_EXT_val_prn(BIO *out, STACK_OF(CONF_VALUE) *val, int indent, |
25 | int ml) |
26 | { |
27 | int i; |
28 | CONF_VALUE *nval; |
29 | if (!val) |
30 | return; |
31 | if (!ml || !sk_CONF_VALUE_num(val)) { |
32 | BIO_printf(out, "%*s" , indent, "" ); |
33 | if (!sk_CONF_VALUE_num(val)) |
34 | BIO_puts(out, "<EMPTY>\n" ); |
35 | } |
36 | for (i = 0; i < sk_CONF_VALUE_num(val); i++) { |
37 | if (ml) { |
38 | if (i > 0) |
39 | BIO_printf(out, "\n" ); |
40 | BIO_printf(out, "%*s" , indent, "" ); |
41 | } |
42 | else if (i > 0) |
43 | BIO_printf(out, ", " ); |
44 | nval = sk_CONF_VALUE_value(val, i); |
45 | if (!nval->name) |
46 | BIO_puts(out, nval->value); |
47 | else if (!nval->value) |
48 | BIO_puts(out, nval->name); |
49 | #ifndef CHARSET_EBCDIC |
50 | else |
51 | BIO_printf(out, "%s:%s" , nval->name, nval->value); |
52 | #else |
53 | else { |
54 | int len; |
55 | char *tmp; |
56 | len = strlen(nval->value) + 1; |
57 | tmp = OPENSSL_malloc(len); |
58 | if (tmp != NULL) { |
59 | ascii2ebcdic(tmp, nval->value, len); |
60 | BIO_printf(out, "%s:%s" , nval->name, tmp); |
61 | OPENSSL_free(tmp); |
62 | } |
63 | } |
64 | #endif |
65 | } |
66 | } |
67 | |
68 | /* Main routine: print out a general extension */ |
69 | |
70 | int X509V3_EXT_print(BIO *out, X509_EXTENSION *ext, unsigned long flag, |
71 | int indent) |
72 | { |
73 | void *ext_str = NULL; |
74 | char *value = NULL; |
75 | ASN1_OCTET_STRING *extoct; |
76 | const unsigned char *p; |
77 | int extlen; |
78 | const X509V3_EXT_METHOD *method; |
79 | STACK_OF(CONF_VALUE) *nval = NULL; |
80 | int ok = 1; |
81 | |
82 | extoct = X509_EXTENSION_get_data(ext); |
83 | p = ASN1_STRING_get0_data(extoct); |
84 | extlen = ASN1_STRING_length(extoct); |
85 | |
86 | if ((method = X509V3_EXT_get(ext)) == NULL) |
87 | return unknown_ext_print(out, p, extlen, flag, indent, 0); |
88 | if (method->it) |
89 | ext_str = ASN1_item_d2i(NULL, &p, extlen, ASN1_ITEM_ptr(method->it)); |
90 | else |
91 | ext_str = method->d2i(NULL, &p, extlen); |
92 | |
93 | if (!ext_str) |
94 | return unknown_ext_print(out, p, extlen, flag, indent, 1); |
95 | |
96 | if (method->i2s) { |
97 | if ((value = method->i2s(method, ext_str)) == NULL) { |
98 | ok = 0; |
99 | goto err; |
100 | } |
101 | #ifndef CHARSET_EBCDIC |
102 | BIO_printf(out, "%*s%s" , indent, "" , value); |
103 | #else |
104 | { |
105 | int len; |
106 | char *tmp; |
107 | len = strlen(value) + 1; |
108 | tmp = OPENSSL_malloc(len); |
109 | if (tmp != NULL) { |
110 | ascii2ebcdic(tmp, value, len); |
111 | BIO_printf(out, "%*s%s" , indent, "" , tmp); |
112 | OPENSSL_free(tmp); |
113 | } |
114 | } |
115 | #endif |
116 | } else if (method->i2v) { |
117 | if ((nval = method->i2v(method, ext_str, NULL)) == NULL) { |
118 | ok = 0; |
119 | goto err; |
120 | } |
121 | X509V3_EXT_val_prn(out, nval, indent, |
122 | method->ext_flags & X509V3_EXT_MULTILINE); |
123 | } else if (method->i2r) { |
124 | if (!method->i2r(method, ext_str, out, indent)) |
125 | ok = 0; |
126 | } else |
127 | ok = 0; |
128 | |
129 | err: |
130 | sk_CONF_VALUE_pop_free(nval, X509V3_conf_free); |
131 | OPENSSL_free(value); |
132 | if (method->it) |
133 | ASN1_item_free(ext_str, ASN1_ITEM_ptr(method->it)); |
134 | else |
135 | method->ext_free(ext_str); |
136 | return ok; |
137 | } |
138 | |
139 | int X509V3_extensions_print(BIO *bp, const char *title, |
140 | const STACK_OF(X509_EXTENSION) *exts, |
141 | unsigned long flag, int indent) |
142 | { |
143 | int i, j; |
144 | |
145 | if (sk_X509_EXTENSION_num(exts) <= 0) |
146 | return 1; |
147 | |
148 | if (title) { |
149 | BIO_printf(bp, "%*s%s:\n" , indent, "" , title); |
150 | indent += 4; |
151 | } |
152 | |
153 | for (i = 0; i < sk_X509_EXTENSION_num(exts); i++) { |
154 | ASN1_OBJECT *obj; |
155 | X509_EXTENSION *ex; |
156 | ex = sk_X509_EXTENSION_value(exts, i); |
157 | if (indent && BIO_printf(bp, "%*s" , indent, "" ) <= 0) |
158 | return 0; |
159 | obj = X509_EXTENSION_get_object(ex); |
160 | i2a_ASN1_OBJECT(bp, obj); |
161 | j = X509_EXTENSION_get_critical(ex); |
162 | if (BIO_printf(bp, ": %s\n" , j ? "critical" : "" ) <= 0) |
163 | return 0; |
164 | if (!X509V3_EXT_print(bp, ex, flag, indent + 4)) { |
165 | BIO_printf(bp, "%*s" , indent + 4, "" ); |
166 | ASN1_STRING_print(bp, X509_EXTENSION_get_data(ex)); |
167 | } |
168 | if (BIO_write(bp, "\n" , 1) <= 0) |
169 | return 0; |
170 | } |
171 | return 1; |
172 | } |
173 | |
174 | static int unknown_ext_print(BIO *out, const unsigned char *ext, int extlen, |
175 | unsigned long flag, int indent, int supported) |
176 | { |
177 | switch (flag & X509V3_EXT_UNKNOWN_MASK) { |
178 | |
179 | case X509V3_EXT_DEFAULT: |
180 | return 0; |
181 | |
182 | case X509V3_EXT_ERROR_UNKNOWN: |
183 | if (supported) |
184 | BIO_printf(out, "%*s<Parse Error>" , indent, "" ); |
185 | else |
186 | BIO_printf(out, "%*s<Not Supported>" , indent, "" ); |
187 | return 1; |
188 | |
189 | case X509V3_EXT_PARSE_UNKNOWN: |
190 | return ASN1_parse_dump(out, ext, extlen, indent, -1); |
191 | case X509V3_EXT_DUMP_UNKNOWN: |
192 | return BIO_dump_indent(out, (const char *)ext, extlen, indent); |
193 | |
194 | default: |
195 | return 1; |
196 | } |
197 | } |
198 | |
199 | #ifndef OPENSSL_NO_STDIO |
200 | int X509V3_EXT_print_fp(FILE *fp, X509_EXTENSION *ext, int flag, int indent) |
201 | { |
202 | BIO *bio_tmp; |
203 | int ret; |
204 | |
205 | if ((bio_tmp = BIO_new_fp(fp, BIO_NOCLOSE)) == NULL) |
206 | return 0; |
207 | ret = X509V3_EXT_print(bio_tmp, ext, flag, indent); |
208 | BIO_free(bio_tmp); |
209 | return ret; |
210 | } |
211 | #endif |
212 | |