1 | /* Copyright (C) 1995-1998 Eric Young (eay@cryptsoft.com) |
2 | * All rights reserved. |
3 | * |
4 | * This package is an SSL implementation written |
5 | * by Eric Young (eay@cryptsoft.com). |
6 | * The implementation was written so as to conform with Netscapes SSL. |
7 | * |
8 | * This library is free for commercial and non-commercial use as long as |
9 | * the following conditions are aheared to. The following conditions |
10 | * apply to all code found in this distribution, be it the RC4, RSA, |
11 | * lhash, DES, etc., code; not just the SSL code. The SSL documentation |
12 | * included with this distribution is covered by the same copyright terms |
13 | * except that the holder is Tim Hudson (tjh@cryptsoft.com). |
14 | * |
15 | * Copyright remains Eric Young's, and as such any Copyright notices in |
16 | * the code are not to be removed. |
17 | * If this package is used in a product, Eric Young should be given attribution |
18 | * as the author of the parts of the library used. |
19 | * This can be in the form of a textual message at program startup or |
20 | * in documentation (online or textual) provided with the package. |
21 | * |
22 | * Redistribution and use in source and binary forms, with or without |
23 | * modification, are permitted provided that the following conditions |
24 | * are met: |
25 | * 1. Redistributions of source code must retain the copyright |
26 | * notice, this list of conditions and the following disclaimer. |
27 | * 2. Redistributions in binary form must reproduce the above copyright |
28 | * notice, this list of conditions and the following disclaimer in the |
29 | * documentation and/or other materials provided with the distribution. |
30 | * 3. All advertising materials mentioning features or use of this software |
31 | * must display the following acknowledgement: |
32 | * "This product includes cryptographic software written by |
33 | * Eric Young (eay@cryptsoft.com)" |
34 | * The word 'cryptographic' can be left out if the rouines from the library |
35 | * being used are not cryptographic related :-). |
36 | * 4. If you include any Windows specific code (or a derivative thereof) from |
37 | * the apps directory (application code) you must include an acknowledgement: |
38 | * "This product includes software written by Tim Hudson (tjh@cryptsoft.com)" |
39 | * |
40 | * THIS SOFTWARE IS PROVIDED BY ERIC YOUNG ``AS IS'' AND |
41 | * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE |
42 | * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE |
43 | * ARE DISCLAIMED. IN NO EVENT SHALL THE AUTHOR OR CONTRIBUTORS BE LIABLE |
44 | * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL |
45 | * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS |
46 | * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) |
47 | * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT |
48 | * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY |
49 | * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF |
50 | * SUCH DAMAGE. |
51 | * |
52 | * The licence and distribution terms for any publically available version or |
53 | * derivative of this code cannot be changed. i.e. this code cannot simply be |
54 | * copied and put under another distribution licence |
55 | * [including the GNU Public Licence.] */ |
56 | |
57 | #include <openssl/asn1.h> |
58 | #include <openssl/err.h> |
59 | #include <openssl/mem.h> |
60 | #include <openssl/obj.h> |
61 | #include <openssl/x509.h> |
62 | #include <openssl/x509v3.h> |
63 | |
64 | #ifndef OPENSSL_NO_FP_API |
65 | int X509_CRL_print_fp(FILE *fp, X509_CRL *x) |
66 | { |
67 | BIO *b = BIO_new_fp(fp, BIO_NOCLOSE); |
68 | if (b == NULL) { |
69 | OPENSSL_PUT_ERROR(X509, ERR_R_BUF_LIB); |
70 | return 0; |
71 | } |
72 | int ret = X509_CRL_print(b, x); |
73 | BIO_free(b); |
74 | return ret; |
75 | } |
76 | #endif |
77 | |
78 | int X509_CRL_print(BIO *out, X509_CRL *x) |
79 | { |
80 | STACK_OF(X509_REVOKED) *rev; |
81 | X509_REVOKED *r; |
82 | long l; |
83 | size_t i; |
84 | char *p; |
85 | |
86 | BIO_printf(out, "Certificate Revocation List (CRL):\n" ); |
87 | l = X509_CRL_get_version(x); |
88 | BIO_printf(out, "%8sVersion %lu (0x%lx)\n" , "" , l + 1, l); |
89 | X509_signature_print(out, x->sig_alg, NULL); |
90 | p = X509_NAME_oneline(X509_CRL_get_issuer(x), NULL, 0); |
91 | BIO_printf(out, "%8sIssuer: %s\n" , "" , p); |
92 | OPENSSL_free(p); |
93 | BIO_printf(out, "%8sLast Update: " , "" ); |
94 | ASN1_TIME_print(out, X509_CRL_get_lastUpdate(x)); |
95 | BIO_printf(out, "\n%8sNext Update: " , "" ); |
96 | if (X509_CRL_get_nextUpdate(x)) |
97 | ASN1_TIME_print(out, X509_CRL_get_nextUpdate(x)); |
98 | else |
99 | BIO_printf(out, "NONE" ); |
100 | BIO_printf(out, "\n" ); |
101 | |
102 | X509V3_extensions_print(out, "CRL extensions" , x->crl->extensions, 0, 8); |
103 | |
104 | rev = X509_CRL_get_REVOKED(x); |
105 | |
106 | if (sk_X509_REVOKED_num(rev) > 0) |
107 | BIO_printf(out, "Revoked Certificates:\n" ); |
108 | else |
109 | BIO_printf(out, "No Revoked Certificates.\n" ); |
110 | |
111 | for (i = 0; i < sk_X509_REVOKED_num(rev); i++) { |
112 | r = sk_X509_REVOKED_value(rev, i); |
113 | BIO_printf(out, " Serial Number: " ); |
114 | i2a_ASN1_INTEGER(out, r->serialNumber); |
115 | BIO_printf(out, "\n Revocation Date: " ); |
116 | ASN1_TIME_print(out, r->revocationDate); |
117 | BIO_printf(out, "\n" ); |
118 | X509V3_extensions_print(out, "CRL entry extensions" , |
119 | r->extensions, 0, 8); |
120 | } |
121 | X509_signature_print(out, x->sig_alg, x->signature); |
122 | |
123 | return 1; |
124 | |
125 | } |
126 | |