xref: /freebsd/crypto/openssl/crypto/x509/v3_admis.c (revision b077aed33b7b6aefca7b17ddb250cf521f938613)
1 /*
2  * Copyright 2017-2023 The OpenSSL Project Authors. All Rights Reserved.
3  *
4  * Licensed under the Apache License 2.0 (the "License").  You may not use
5  * this file except in compliance with the License.  You can obtain a copy
6  * in the file LICENSE in the source distribution or at
7  * https://www.openssl.org/source/license.html
8  */
9 #include <stdio.h>
10 #include "internal/cryptlib.h"
11 #include <openssl/conf.h>
12 #include <openssl/types.h>
13 #include <openssl/asn1.h>
14 #include <openssl/asn1t.h>
15 
16 #include <openssl/x509v3.h>
17 
18 #include <openssl/safestack.h>
19 
20 #include "v3_admis.h"
21 #include "ext_dat.h"
22 
23 ASN1_SEQUENCE(NAMING_AUTHORITY) = {
24     ASN1_OPT(NAMING_AUTHORITY, namingAuthorityId, ASN1_OBJECT),
25     ASN1_OPT(NAMING_AUTHORITY, namingAuthorityUrl, ASN1_IA5STRING),
26     ASN1_OPT(NAMING_AUTHORITY, namingAuthorityText, DIRECTORYSTRING),
27 } ASN1_SEQUENCE_END(NAMING_AUTHORITY)
28 
29 ASN1_SEQUENCE(PROFESSION_INFO) = {
30     ASN1_EXP_OPT(PROFESSION_INFO, namingAuthority, NAMING_AUTHORITY, 0),
31     ASN1_SEQUENCE_OF(PROFESSION_INFO, professionItems, DIRECTORYSTRING),
32     ASN1_SEQUENCE_OF_OPT(PROFESSION_INFO, professionOIDs, ASN1_OBJECT),
33     ASN1_OPT(PROFESSION_INFO, registrationNumber, ASN1_PRINTABLESTRING),
34     ASN1_OPT(PROFESSION_INFO, addProfessionInfo, ASN1_OCTET_STRING),
35 } ASN1_SEQUENCE_END(PROFESSION_INFO)
36 
37 ASN1_SEQUENCE(ADMISSIONS) = {
38     ASN1_EXP_OPT(ADMISSIONS, admissionAuthority, GENERAL_NAME, 0),
39     ASN1_EXP_OPT(ADMISSIONS, namingAuthority, NAMING_AUTHORITY, 1),
40     ASN1_SEQUENCE_OF(ADMISSIONS, professionInfos, PROFESSION_INFO),
41 } ASN1_SEQUENCE_END(ADMISSIONS)
42 
43 ASN1_SEQUENCE(ADMISSION_SYNTAX) = {
44     ASN1_OPT(ADMISSION_SYNTAX, admissionAuthority, GENERAL_NAME),
45     ASN1_SEQUENCE_OF(ADMISSION_SYNTAX, contentsOfAdmissions, ADMISSIONS),
46 } ASN1_SEQUENCE_END(ADMISSION_SYNTAX)
47 
48 IMPLEMENT_ASN1_FUNCTIONS(NAMING_AUTHORITY)
49 IMPLEMENT_ASN1_FUNCTIONS(PROFESSION_INFO)
50 IMPLEMENT_ASN1_FUNCTIONS(ADMISSIONS)
51 IMPLEMENT_ASN1_FUNCTIONS(ADMISSION_SYNTAX)
52 
53 static int i2r_ADMISSION_SYNTAX(const struct v3_ext_method *method, void *in,
54                                 BIO *bp, int ind);
55 
56 const X509V3_EXT_METHOD ossl_v3_ext_admission = {
57     NID_x509ExtAdmission,   /* .ext_nid = */
58     0,                      /* .ext_flags = */
59     ASN1_ITEM_ref(ADMISSION_SYNTAX), /* .it = */
60     NULL, NULL, NULL, NULL,
61     NULL,                   /* .i2s = */
62     NULL,                   /* .s2i = */
63     NULL,                   /* .i2v = */
64     NULL,                   /* .v2i = */
65     &i2r_ADMISSION_SYNTAX,  /* .i2r = */
66     NULL,                   /* .r2i = */
67     NULL                    /* extension-specific data */
68 };
69 
70 
i2r_NAMING_AUTHORITY(const struct v3_ext_method * method,void * in,BIO * bp,int ind)71 static int i2r_NAMING_AUTHORITY(const struct v3_ext_method *method, void *in,
72                                 BIO *bp, int ind)
73 {
74     NAMING_AUTHORITY * namingAuthority = (NAMING_AUTHORITY*) in;
75 
76     if (namingAuthority == NULL)
77         return 0;
78 
79     if (namingAuthority->namingAuthorityId == NULL
80         && namingAuthority->namingAuthorityText == NULL
81         && namingAuthority->namingAuthorityUrl == NULL)
82         return 0;
83 
84     if (BIO_printf(bp, "%*snamingAuthority: ", ind, "") <= 0)
85         goto err;
86 
87     if (namingAuthority->namingAuthorityId != NULL) {
88         char objbuf[128];
89         const char *ln = OBJ_nid2ln(OBJ_obj2nid(namingAuthority->namingAuthorityId));
90 
91         if (BIO_printf(bp, "%*s  admissionAuthorityId: ", ind, "") <= 0)
92             goto err;
93 
94         OBJ_obj2txt(objbuf, sizeof(objbuf), namingAuthority->namingAuthorityId, 1);
95 
96         if (BIO_printf(bp, "%s%s%s%s\n", ln ? ln : "",
97                        ln ? " (" : "", objbuf, ln ? ")" : "") <= 0)
98             goto err;
99     }
100     if (namingAuthority->namingAuthorityText != NULL) {
101         if (BIO_printf(bp, "%*s  namingAuthorityText: ", ind, "") <= 0
102             || ASN1_STRING_print(bp, namingAuthority->namingAuthorityText) <= 0
103             || BIO_printf(bp, "\n") <= 0)
104             goto err;
105     }
106     if (namingAuthority->namingAuthorityUrl != NULL ) {
107         if (BIO_printf(bp, "%*s  namingAuthorityUrl: ", ind, "") <= 0
108             || ASN1_STRING_print(bp, namingAuthority->namingAuthorityUrl) <= 0
109             || BIO_printf(bp, "\n") <= 0)
110             goto err;
111     }
112     return 1;
113 
114 err:
115     return 0;
116 }
117 
i2r_ADMISSION_SYNTAX(const struct v3_ext_method * method,void * in,BIO * bp,int ind)118 static int i2r_ADMISSION_SYNTAX(const struct v3_ext_method *method, void *in,
119                                 BIO *bp, int ind)
120 {
121     ADMISSION_SYNTAX * admission = (ADMISSION_SYNTAX *)in;
122     int i, j, k;
123 
124     if (admission->admissionAuthority != NULL) {
125         if (BIO_printf(bp, "%*sadmissionAuthority:\n", ind, "") <= 0
126             || BIO_printf(bp, "%*s  ", ind, "") <= 0
127             || GENERAL_NAME_print(bp, admission->admissionAuthority) <= 0
128             || BIO_printf(bp, "\n") <= 0)
129             goto err;
130     }
131 
132     for (i = 0; i < sk_ADMISSIONS_num(admission->contentsOfAdmissions); i++) {
133         ADMISSIONS* entry = sk_ADMISSIONS_value(admission->contentsOfAdmissions, i);
134 
135         if (BIO_printf(bp, "%*sEntry %0d:\n", ind, "", 1 + i) <= 0) goto err;
136 
137         if (entry->admissionAuthority != NULL) {
138             if (BIO_printf(bp, "%*s  admissionAuthority:\n", ind, "") <= 0
139                 || BIO_printf(bp, "%*s    ", ind, "") <= 0
140                 || GENERAL_NAME_print(bp, entry->admissionAuthority) <= 0
141                 || BIO_printf(bp, "\n") <= 0)
142                 goto err;
143         }
144 
145         if (entry->namingAuthority != NULL) {
146             if (i2r_NAMING_AUTHORITY(method, entry->namingAuthority, bp, ind) <= 0)
147                 goto err;
148         }
149 
150         for (j = 0; j < sk_PROFESSION_INFO_num(entry->professionInfos); j++) {
151             PROFESSION_INFO* pinfo = sk_PROFESSION_INFO_value(entry->professionInfos, j);
152 
153             if (BIO_printf(bp, "%*s  Profession Info Entry %0d:\n", ind, "", 1 + j) <= 0)
154                 goto err;
155 
156             if (pinfo->registrationNumber != NULL) {
157                 if (BIO_printf(bp, "%*s    registrationNumber: ", ind, "") <= 0
158                     || ASN1_STRING_print(bp, pinfo->registrationNumber) <= 0
159                     || BIO_printf(bp, "\n") <= 0)
160                     goto err;
161             }
162 
163             if (pinfo->namingAuthority != NULL) {
164                 if (i2r_NAMING_AUTHORITY(method, pinfo->namingAuthority, bp, ind + 2) <= 0)
165                     goto err;
166             }
167 
168             if (pinfo->professionItems != NULL) {
169 
170                 if (BIO_printf(bp, "%*s    Info Entries:\n", ind, "") <= 0)
171                     goto err;
172                 for (k = 0; k < sk_ASN1_STRING_num(pinfo->professionItems); k++) {
173                     ASN1_STRING* val = sk_ASN1_STRING_value(pinfo->professionItems, k);
174 
175                     if (BIO_printf(bp, "%*s      ", ind, "") <= 0
176                         || ASN1_STRING_print(bp, val) <= 0
177                         || BIO_printf(bp, "\n") <= 0)
178                         goto err;
179                 }
180             }
181 
182             if (pinfo->professionOIDs != NULL) {
183                 if (BIO_printf(bp, "%*s    Profession OIDs:\n", ind, "") <= 0)
184                     goto err;
185                 for (k = 0; k < sk_ASN1_OBJECT_num(pinfo->professionOIDs); k++) {
186                     ASN1_OBJECT* obj = sk_ASN1_OBJECT_value(pinfo->professionOIDs, k);
187                     const char *ln = OBJ_nid2ln(OBJ_obj2nid(obj));
188                     char objbuf[128];
189 
190                     OBJ_obj2txt(objbuf, sizeof(objbuf), obj, 1);
191                     if (BIO_printf(bp, "%*s      %s%s%s%s\n", ind, "",
192                                    ln ? ln : "", ln ? " (" : "",
193                                    objbuf, ln ? ")" : "") <= 0)
194                         goto err;
195                 }
196             }
197         }
198     }
199     return 1;
200 
201 err:
202     return 0;
203 }
204 
NAMING_AUTHORITY_get0_authorityId(const NAMING_AUTHORITY * n)205 const ASN1_OBJECT *NAMING_AUTHORITY_get0_authorityId(const NAMING_AUTHORITY *n)
206 {
207     return n->namingAuthorityId;
208 }
209 
NAMING_AUTHORITY_set0_authorityId(NAMING_AUTHORITY * n,ASN1_OBJECT * id)210 void NAMING_AUTHORITY_set0_authorityId(NAMING_AUTHORITY *n, ASN1_OBJECT* id)
211 {
212     ASN1_OBJECT_free(n->namingAuthorityId);
213     n->namingAuthorityId = id;
214 }
215 
NAMING_AUTHORITY_get0_authorityURL(const NAMING_AUTHORITY * n)216 const ASN1_IA5STRING *NAMING_AUTHORITY_get0_authorityURL(
217     const NAMING_AUTHORITY *n)
218 {
219     return n->namingAuthorityUrl;
220 }
221 
NAMING_AUTHORITY_set0_authorityURL(NAMING_AUTHORITY * n,ASN1_IA5STRING * u)222 void NAMING_AUTHORITY_set0_authorityURL(NAMING_AUTHORITY *n, ASN1_IA5STRING* u)
223 {
224     ASN1_IA5STRING_free(n->namingAuthorityUrl);
225     n->namingAuthorityUrl = u;
226 }
227 
NAMING_AUTHORITY_get0_authorityText(const NAMING_AUTHORITY * n)228 const ASN1_STRING *NAMING_AUTHORITY_get0_authorityText(
229     const NAMING_AUTHORITY *n)
230 {
231     return n->namingAuthorityText;
232 }
233 
NAMING_AUTHORITY_set0_authorityText(NAMING_AUTHORITY * n,ASN1_STRING * t)234 void NAMING_AUTHORITY_set0_authorityText(NAMING_AUTHORITY *n, ASN1_STRING* t)
235 {
236     ASN1_IA5STRING_free(n->namingAuthorityText);
237     n->namingAuthorityText = t;
238 }
239 
ADMISSION_SYNTAX_get0_admissionAuthority(const ADMISSION_SYNTAX * as)240 const GENERAL_NAME *ADMISSION_SYNTAX_get0_admissionAuthority(const ADMISSION_SYNTAX *as)
241 {
242     return as->admissionAuthority;
243 }
244 
ADMISSION_SYNTAX_set0_admissionAuthority(ADMISSION_SYNTAX * as,GENERAL_NAME * aa)245 void ADMISSION_SYNTAX_set0_admissionAuthority(ADMISSION_SYNTAX *as,
246                                               GENERAL_NAME *aa)
247 {
248     GENERAL_NAME_free(as->admissionAuthority);
249     as->admissionAuthority = aa;
250 }
251 
STACK_OF(ADMISSIONS)252 const STACK_OF(ADMISSIONS) *ADMISSION_SYNTAX_get0_contentsOfAdmissions(const ADMISSION_SYNTAX *as)
253 {
254     return as->contentsOfAdmissions;
255 }
256 
ADMISSION_SYNTAX_set0_contentsOfAdmissions(ADMISSION_SYNTAX * as,STACK_OF (ADMISSIONS)* a)257 void ADMISSION_SYNTAX_set0_contentsOfAdmissions(ADMISSION_SYNTAX *as,
258                                                 STACK_OF(ADMISSIONS) *a)
259 {
260     sk_ADMISSIONS_pop_free(as->contentsOfAdmissions, ADMISSIONS_free);
261     as->contentsOfAdmissions = a;
262 }
263 
ADMISSIONS_get0_admissionAuthority(const ADMISSIONS * a)264 const GENERAL_NAME *ADMISSIONS_get0_admissionAuthority(const ADMISSIONS *a)
265 {
266     return a->admissionAuthority;
267 }
268 
ADMISSIONS_set0_admissionAuthority(ADMISSIONS * a,GENERAL_NAME * aa)269 void ADMISSIONS_set0_admissionAuthority(ADMISSIONS *a, GENERAL_NAME *aa)
270 {
271     GENERAL_NAME_free(a->admissionAuthority);
272     a->admissionAuthority = aa;
273 }
274 
ADMISSIONS_get0_namingAuthority(const ADMISSIONS * a)275 const NAMING_AUTHORITY *ADMISSIONS_get0_namingAuthority(const ADMISSIONS *a)
276 {
277     return a->namingAuthority;
278 }
279 
ADMISSIONS_set0_namingAuthority(ADMISSIONS * a,NAMING_AUTHORITY * na)280 void ADMISSIONS_set0_namingAuthority(ADMISSIONS *a, NAMING_AUTHORITY *na)
281 {
282     NAMING_AUTHORITY_free(a->namingAuthority);
283     a->namingAuthority = na;
284 }
285 
ADMISSIONS_get0_professionInfos(const ADMISSIONS * a)286 const PROFESSION_INFOS *ADMISSIONS_get0_professionInfos(const ADMISSIONS *a)
287 {
288     return a->professionInfos;
289 }
290 
ADMISSIONS_set0_professionInfos(ADMISSIONS * a,PROFESSION_INFOS * pi)291 void ADMISSIONS_set0_professionInfos(ADMISSIONS *a, PROFESSION_INFOS *pi)
292 {
293     sk_PROFESSION_INFO_pop_free(a->professionInfos, PROFESSION_INFO_free);
294     a->professionInfos = pi;
295 }
296 
PROFESSION_INFO_get0_addProfessionInfo(const PROFESSION_INFO * pi)297 const ASN1_OCTET_STRING *PROFESSION_INFO_get0_addProfessionInfo(const PROFESSION_INFO *pi)
298 {
299     return pi->addProfessionInfo;
300 }
301 
PROFESSION_INFO_set0_addProfessionInfo(PROFESSION_INFO * pi,ASN1_OCTET_STRING * aos)302 void PROFESSION_INFO_set0_addProfessionInfo(PROFESSION_INFO *pi,
303                                             ASN1_OCTET_STRING *aos)
304 {
305     ASN1_OCTET_STRING_free(pi->addProfessionInfo);
306     pi->addProfessionInfo = aos;
307 }
308 
PROFESSION_INFO_get0_namingAuthority(const PROFESSION_INFO * pi)309 const NAMING_AUTHORITY *PROFESSION_INFO_get0_namingAuthority(const PROFESSION_INFO *pi)
310 {
311     return pi->namingAuthority;
312 }
313 
PROFESSION_INFO_set0_namingAuthority(PROFESSION_INFO * pi,NAMING_AUTHORITY * na)314 void PROFESSION_INFO_set0_namingAuthority(PROFESSION_INFO *pi,
315                                           NAMING_AUTHORITY *na)
316 {
317     NAMING_AUTHORITY_free(pi->namingAuthority);
318     pi->namingAuthority = na;
319 }
320 
STACK_OF(ASN1_STRING)321 const STACK_OF(ASN1_STRING) *PROFESSION_INFO_get0_professionItems(const PROFESSION_INFO *pi)
322 {
323     return pi->professionItems;
324 }
325 
PROFESSION_INFO_set0_professionItems(PROFESSION_INFO * pi,STACK_OF (ASN1_STRING)* as)326 void PROFESSION_INFO_set0_professionItems(PROFESSION_INFO *pi,
327                                           STACK_OF(ASN1_STRING) *as)
328 {
329     sk_ASN1_STRING_pop_free(pi->professionItems, ASN1_STRING_free);
330     pi->professionItems = as;
331 }
332 
STACK_OF(ASN1_OBJECT)333 const STACK_OF(ASN1_OBJECT) *PROFESSION_INFO_get0_professionOIDs(const PROFESSION_INFO *pi)
334 {
335     return pi->professionOIDs;
336 }
337 
PROFESSION_INFO_set0_professionOIDs(PROFESSION_INFO * pi,STACK_OF (ASN1_OBJECT)* po)338 void PROFESSION_INFO_set0_professionOIDs(PROFESSION_INFO *pi,
339                                          STACK_OF(ASN1_OBJECT) *po)
340 {
341     sk_ASN1_OBJECT_pop_free(pi->professionOIDs, ASN1_OBJECT_free);
342     pi->professionOIDs = po;
343 }
344 
PROFESSION_INFO_get0_registrationNumber(const PROFESSION_INFO * pi)345 const ASN1_PRINTABLESTRING *PROFESSION_INFO_get0_registrationNumber(const PROFESSION_INFO *pi)
346 {
347     return pi->registrationNumber;
348 }
349 
PROFESSION_INFO_set0_registrationNumber(PROFESSION_INFO * pi,ASN1_PRINTABLESTRING * rn)350 void PROFESSION_INFO_set0_registrationNumber(PROFESSION_INFO *pi,
351                                              ASN1_PRINTABLESTRING *rn)
352 {
353     ASN1_PRINTABLESTRING_free(pi->registrationNumber);
354     pi->registrationNumber = rn;
355 }
356