2 /* Written by Dr Stephen N Henson (shenson@bigfoot.com) for the OpenSSL
5 /* ====================================================================
6 * Copyright (c) 1999 The OpenSSL Project. All rights reserved.
8 * Redistribution and use in source and binary forms, with or without
9 * modification, are permitted provided that the following conditions
12 * 1. Redistributions of source code must retain the above copyright
13 * notice, this list of conditions and the following disclaimer.
15 * 2. Redistributions in binary form must reproduce the above copyright
16 * notice, this list of conditions and the following disclaimer in
17 * the documentation and/or other materials provided with the
20 * 3. All advertising materials mentioning features or use of this
21 * software must display the following acknowledgment:
22 * "This product includes software developed by the OpenSSL Project
23 * for use in the OpenSSL Toolkit. (http://www.OpenSSL.org/)"
25 * 4. The names "OpenSSL Toolkit" and "OpenSSL Project" must not be used to
26 * endorse or promote products derived from this software without
27 * prior written permission. For written permission, please contact
28 * licensing@OpenSSL.org.
30 * 5. Products derived from this software may not be called "OpenSSL"
31 * nor may "OpenSSL" appear in their names without prior written
32 * permission of the OpenSSL Project.
34 * 6. Redistributions of any form whatsoever must retain the following
36 * "This product includes software developed by the OpenSSL Project
37 * for use in the OpenSSL Toolkit (http://www.OpenSSL.org/)"
39 * THIS SOFTWARE IS PROVIDED BY THE OpenSSL PROJECT ``AS IS'' AND ANY
40 * EXPRESSED OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
41 * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR
42 * PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE OpenSSL PROJECT OR
43 * ITS CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL,
44 * SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT
45 * NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES;
46 * LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
47 * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT,
48 * STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE)
49 * ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED
50 * OF THE POSSIBILITY OF SUCH DAMAGE.
51 * ====================================================================
53 * This product includes cryptographic software written by Eric Young
54 * (eay@cryptsoft.com). This product includes software written by Tim
55 * Hudson (tjh@cryptsoft.com).
58 /* X509 v3 extension utilities */
62 #include <openssl/conf.h>
63 #include <openssl/x509v3.h>
65 /* Extension printing routines */
67 static int unknown_ext_print(BIO
*out
, X509_EXTENSION
*ext
, unsigned long flag
, int indent
, int supported
);
69 /* Print out a name+value stack */
71 void X509V3_EXT_val_prn(BIO
*out
, STACK_OF(CONF_VALUE
) *val
, int indent
, int ml
)
76 if(!ml
|| !sk_CONF_VALUE_num(val
)) {
77 BIO_printf(out
, "%*s", indent
, "");
78 if(!sk_CONF_VALUE_num(val
)) BIO_puts(out
, "<EMPTY>\n");
80 for(i
= 0; i
< sk_CONF_VALUE_num(val
); i
++) {
81 if(ml
) BIO_printf(out
, "%*s", indent
, "");
82 else if(i
> 0) BIO_printf(out
, ", ");
83 nval
= sk_CONF_VALUE_value(val
, i
);
84 if(!nval
->name
) BIO_puts(out
, nval
->value
);
85 else if(!nval
->value
) BIO_puts(out
, nval
->name
);
86 #ifndef CHARSET_EBCDIC
87 else BIO_printf(out
, "%s:%s", nval
->name
, nval
->value
);
92 len
= strlen(nval
->value
)+1;
93 tmp
= OPENSSL_malloc(len
);
96 ascii2ebcdic(tmp
, nval
->value
, len
);
97 BIO_printf(out
, "%s:%s", nval
->name
, tmp
);
102 if(ml
) BIO_puts(out
, "\n");
106 /* Main routine: print out a general extension */
108 int X509V3_EXT_print(BIO
*out
, X509_EXTENSION
*ext
, unsigned long flag
, int indent
)
110 void *ext_str
= NULL
;
113 X509V3_EXT_METHOD
*method
;
114 STACK_OF(CONF_VALUE
) *nval
= NULL
;
116 if(!(method
= X509V3_EXT_get(ext
)))
117 return unknown_ext_print(out
, ext
, flag
, indent
, 0);
118 p
= ext
->value
->data
;
119 if(method
->it
) ext_str
= ASN1_item_d2i(NULL
, &p
, ext
->value
->length
, ASN1_ITEM_ptr(method
->it
));
120 else ext_str
= method
->d2i(NULL
, &p
, ext
->value
->length
);
122 if(!ext_str
) return unknown_ext_print(out
, ext
, flag
, indent
, 1);
125 if(!(value
= method
->i2s(method
, ext_str
))) {
129 #ifndef CHARSET_EBCDIC
130 BIO_printf(out
, "%*s%s", indent
, "", value
);
135 len
= strlen(value
)+1;
136 tmp
= OPENSSL_malloc(len
);
139 ascii2ebcdic(tmp
, value
, len
);
140 BIO_printf(out
, "%*s%s", indent
, "", tmp
);
145 } else if(method
->i2v
) {
146 if(!(nval
= method
->i2v(method
, ext_str
, NULL
))) {
150 X509V3_EXT_val_prn(out
, nval
, indent
,
151 method
->ext_flags
& X509V3_EXT_MULTILINE
);
152 } else if(method
->i2r
) {
153 if(!method
->i2r(method
, ext_str
, out
, indent
)) ok
= 0;
157 sk_CONF_VALUE_pop_free(nval
, X509V3_conf_free
);
158 if(value
) OPENSSL_free(value
);
159 if(method
->it
) ASN1_item_free(ext_str
, ASN1_ITEM_ptr(method
->it
));
160 else method
->ext_free(ext_str
);
164 int X509V3_extensions_print(BIO
*bp
, char *title
, STACK_OF(X509_EXTENSION
) *exts
, unsigned long flag
, int indent
)
168 if(sk_X509_EXTENSION_num(exts
) <= 0) return 1;
172 BIO_printf(bp
,"%*s%s:\n",indent
, "", title
);
176 for (i
=0; i
<sk_X509_EXTENSION_num(exts
); i
++)
180 ex
=sk_X509_EXTENSION_value(exts
, i
);
181 if (indent
&& BIO_printf(bp
,"%*s",indent
, "") <= 0) return 0;
182 obj
=X509_EXTENSION_get_object(ex
);
183 i2a_ASN1_OBJECT(bp
,obj
);
184 j
=X509_EXTENSION_get_critical(ex
);
185 if (BIO_printf(bp
,": %s\n",j
?"critical":"","") <= 0)
187 if(!X509V3_EXT_print(bp
, ex
, flag
, indent
+ 4))
189 BIO_printf(bp
, "%*s", indent
+ 4, "");
190 M_ASN1_OCTET_STRING_print(bp
,ex
->value
);
192 if (BIO_write(bp
,"\n",1) <= 0) return 0;
197 static int unknown_ext_print(BIO
*out
, X509_EXTENSION
*ext
, unsigned long flag
, int indent
, int supported
)
199 switch(flag
& X509V3_EXT_UNKNOWN_MASK
) {
201 case X509V3_EXT_DEFAULT
:
204 case X509V3_EXT_ERROR_UNKNOWN
:
206 BIO_printf(out
, "%*s<Parse Error>", indent
, "");
208 BIO_printf(out
, "%*s<Not Supported>", indent
, "");
211 case X509V3_EXT_PARSE_UNKNOWN
:
212 return ASN1_parse_dump(out
,
213 ext
->value
->data
, ext
->value
->length
, indent
, -1);
214 case X509V3_EXT_DUMP_UNKNOWN
:
215 return BIO_dump_indent(out
, (char *)ext
->value
->data
, ext
->value
->length
, indent
);
223 #ifndef OPENSSL_NO_FP_API
224 int X509V3_EXT_print_fp(FILE *fp
, X509_EXTENSION
*ext
, int flag
, int indent
)
228 if(!(bio_tmp
= BIO_new_fp(fp
, BIO_NOCLOSE
))) return 0;
229 ret
= X509V3_EXT_print(bio_tmp
, ext
, flag
, indent
);