crypto/libressl/crypto/x509v3/v3_prn.c

   1 /* $OpenBSD: v3_prn.c,v 1.17 2014/07/11 08:44:49 jsing Exp $ */
   2 /* Written by Dr Stephen N Henson (steve@openssl.org) for the OpenSSL
   3  * project 1999.
   4  */
   5 /* ====================================================================
   6  * Copyright (c) 1999 The OpenSSL Project.  All rights reserved.
   7  *
   8  * Redistribution and use in source and binary forms, with or without
   9  * modification, are permitted provided that the following conditions
  10  * are met:
  11  *
  12  * 1. Redistributions of source code must retain the above copyright
  13  *    notice, this list of conditions and the following disclaimer.
  14  *
  15  * 2. Redistributions in binary form must reproduce the above copyright
  16  *    notice, this list of conditions and the following disclaimer in
  17  *    the documentation and/or other materials provided with the
  18  *    distribution.
  19  *
  20  * 3. All advertising materials mentioning features or use of this
  21  *    software must display the following acknowledgment:
  22  *    "This product includes software developed by the OpenSSL Project
  23  *    for use in the OpenSSL Toolkit. (http://www.OpenSSL.org/)"
  24  *
  25  * 4. The names "OpenSSL Toolkit" and "OpenSSL Project" must not be used to
  26  *    endorse or promote products derived from this software without
  27  *    prior written permission. For written permission, please contact
  28  *    licensing@OpenSSL.org.
  29  *
  30  * 5. Products derived from this software may not be called "OpenSSL"
  31  *    nor may "OpenSSL" appear in their names without prior written
  32  *    permission of the OpenSSL Project.
  33  *
  34  * 6. Redistributions of any form whatsoever must retain the following
  35  *    acknowledgment:
  36  *    "This product includes software developed by the OpenSSL Project
  37  *    for use in the OpenSSL Toolkit (http://www.OpenSSL.org/)"
  38  *
  39  * THIS SOFTWARE IS PROVIDED BY THE OpenSSL PROJECT ``AS IS'' AND ANY
  40  * EXPRESSED OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
  41  * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR
  42  * PURPOSE ARE DISCLAIMED.  IN NO EVENT SHALL THE OpenSSL PROJECT OR
  43  * ITS CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL,
  44  * SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT
  45  * NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES;
  46  * LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
  47  * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT,
  48  * STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE)
  49  * ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED
  50  * OF THE POSSIBILITY OF SUCH DAMAGE.
  51  * ====================================================================
  52  *
  53  * This product includes cryptographic software written by Eric Young
  54  * (eay@cryptsoft.com).  This product includes software written by Tim
  55  * Hudson (tjh@cryptsoft.com).
  56  *
  57  */
  58 /* X509 v3 extension utilities */
  59
  60 #include <stdio.h>
  61
  62 #include <openssl/conf.h>
  63 #include <openssl/x509v3.h>
  64
  65 /* Extension printing routines */
  66
  67 static int unknown_ext_print(BIO *out, X509_EXTENSION *ext, unsigned long flag,
  68     int indent, int supported);
  69
  70 /* Print out a name+value stack */
  71
  72 void
  73 X509V3_EXT_val_prn(BIO *out, STACK_OF(CONF_VALUE) *val, int indent, int ml)
  74 {
  75         int i;
  76         CONF_VALUE *nval;
  77
  78         if (!val)
  79                 return;
  80         if (!ml || !sk_CONF_VALUE_num(val)) {
  81                 BIO_printf(out, "%*s", indent, "");
  82                 if (!sk_CONF_VALUE_num(val))
  83                         BIO_puts(out, "<EMPTY>\n");
  84         }
  85         for (i = 0; i < sk_CONF_VALUE_num(val); i++) {
  86                 if (ml)
  87                         BIO_printf(out, "%*s", indent, "");
  88                 else if (i > 0) BIO_printf(out, ", ");
  89                         nval = sk_CONF_VALUE_value(val, i);
  90                 if (!nval->name)
  91                         BIO_puts(out, nval->value);
  92                 else if (!nval->value)
  93                         BIO_puts(out, nval->name);
  94                 else
  95                         BIO_printf(out, "%s:%s", nval->name, nval->value);
  96                 if (ml)
  97                         BIO_puts(out, "\n");
  98         }
  99 }
 100
 101 /* Main routine: print out a general extension */
 102
 103 int
 104 X509V3_EXT_print(BIO *out, X509_EXTENSION *ext, unsigned long flag, int indent)
 105 {
 106         void *ext_str = NULL;
 107         char *value = NULL;
 108         const unsigned char *p;
 109         const X509V3_EXT_METHOD *method;
 110         STACK_OF(CONF_VALUE) *nval = NULL;
 111         int ok = 1;
 112
 113         if (!(method = X509V3_EXT_get(ext)))
 114                 return unknown_ext_print(out, ext, flag, indent, 0);
 115         p = ext->value->data;
 116         if (method->it)
 117                 ext_str = ASN1_item_d2i(NULL, &p, ext->value->length,
 118                     ASN1_ITEM_ptr(method->it));
 119         else
 120                 ext_str = method->d2i(NULL, &p, ext->value->length);
 121
 122         if (!ext_str)
 123                 return unknown_ext_print(out, ext, flag, indent, 1);
 124
 125         if (method->i2s) {
 126                 if (!(value = method->i2s(method, ext_str))) {
 127                         ok = 0;
 128                         goto err;
 129                 }
 130                 BIO_printf(out, "%*s%s", indent, "", value);
 131         } else if (method->i2v) {
 132                 if (!(nval = method->i2v(method, ext_str, NULL))) {
 133                         ok = 0;
 134                         goto err;
 135                 }
 136                 X509V3_EXT_val_prn(out, nval, indent,
 137                     method->ext_flags & X509V3_EXT_MULTILINE);
 138         } else if (method->i2r) {
 139                 if (!method->i2r(method, ext_str, out, indent))
 140                         ok = 0;
 141         } else
 142                 ok = 0;
 143
 144 err:
 145         sk_CONF_VALUE_pop_free(nval, X509V3_conf_free);
 146         free(value);
 147         if (method->it)
 148                 ASN1_item_free(ext_str, ASN1_ITEM_ptr(method->it));
 149         else
 150                 method->ext_free(ext_str);
 151         return ok;
 152 }
 153
 154 int
 155 X509V3_extensions_print(BIO *bp, char *title, STACK_OF(X509_EXTENSION) *exts,
 156     unsigned long flag, int indent)
 157 {
 158         int i, j;
 159
 160         if (sk_X509_EXTENSION_num(exts) <= 0)
 161                 return 1;
 162
 163         if (title) {
 164                 BIO_printf(bp, "%*s%s:\n",indent, "", title);
 165                 indent += 4;
 166         }
 167
 168         for (i = 0; i < sk_X509_EXTENSION_num(exts); i++) {
 169                 ASN1_OBJECT *obj;
 170                 X509_EXTENSION *ex;
 171                 ex = sk_X509_EXTENSION_value(exts, i);
 172                 if (indent && BIO_printf(bp, "%*s",indent, "") <= 0)
 173                         return 0;
 174                 obj = X509_EXTENSION_get_object(ex);
 175                 i2a_ASN1_OBJECT(bp, obj);
 176                 j = X509_EXTENSION_get_critical(ex);
 177                 if (BIO_printf(bp, ": %s\n",j?"critical":"") <= 0)
 178                         return 0;
 179                 if (!X509V3_EXT_print(bp, ex, flag, indent + 4)) {
 180                         BIO_printf(bp, "%*s", indent + 4, "");
 181                         ASN1_STRING_print(bp, ex->value);
 182                 }
 183                 if (BIO_write(bp, "\n",1) <= 0)
 184                         return 0;
 185         }
 186         return 1;
 187 }
 188
 189 static int
 190 unknown_ext_print(BIO *out, X509_EXTENSION *ext, unsigned long flag,
 191     int indent, int supported)
 192 {
 193         switch (flag & X509V3_EXT_UNKNOWN_MASK) {
 194         case X509V3_EXT_DEFAULT:
 195                 return 0;
 196         case X509V3_EXT_ERROR_UNKNOWN:
 197                 if (supported)
 198                         BIO_printf(out, "%*s<Parse Error>", indent, "");
 199                 else
 200                         BIO_printf(out, "%*s<Not Supported>", indent, "");
 201                 return 1;
 202         case X509V3_EXT_PARSE_UNKNOWN:
 203                 return ASN1_parse_dump(out,
 204                     ext->value->data, ext->value->length, indent, -1);
 205         case X509V3_EXT_DUMP_UNKNOWN:
 206                 return BIO_dump_indent(out, (char *)ext->value->data,
 207                     ext->value->length, indent);
 208         default:
 209                 return 1;
 210         }
 211 }
 212
 213
 214 int
 215 X509V3_EXT_print_fp(FILE *fp, X509_EXTENSION *ext, int flag, int indent)
 216 {
 217         BIO *bio_tmp;
 218         int ret;
 219
 220         if (!(bio_tmp = BIO_new_fp(fp, BIO_NOCLOSE)))
 221                 return 0;
 222         ret = X509V3_EXT_print(bio_tmp, ext, flag, indent);
 223         BIO_free(bio_tmp);
 224         return ret;
 225 }