xref: /freebsd/crypto/openssl/crypto/x509/v3_admis.c (revision f25b8c9fb4f58cf61adb47d7570abe7caa6d385d)
1 /*
2  * Copyright 2017-2023 The OpenSSL Project Authors. All Rights Reserved.
3  *
4  * Licensed under the Apache License 2.0 (the "License").  You may not use
5  * this file except in compliance with the License.  You can obtain a copy
6  * in the file LICENSE in the source distribution or at
7  * https://www.openssl.org/source/license.html
8  */
9 #include <stdio.h>
10 #include "internal/cryptlib.h"
11 #include <openssl/conf.h>
12 #include <openssl/types.h>
13 #include <openssl/asn1.h>
14 #include <openssl/asn1t.h>
15 
16 #include <openssl/x509v3.h>
17 
18 #include <openssl/safestack.h>
19 
20 #include "v3_admis.h"
21 #include "ext_dat.h"
22 
23 ASN1_SEQUENCE(NAMING_AUTHORITY) = {
24     ASN1_OPT(NAMING_AUTHORITY, namingAuthorityId, ASN1_OBJECT),
25     ASN1_OPT(NAMING_AUTHORITY, namingAuthorityUrl, ASN1_IA5STRING),
26     ASN1_OPT(NAMING_AUTHORITY, namingAuthorityText, DIRECTORYSTRING),
27 } ASN1_SEQUENCE_END(NAMING_AUTHORITY)
28 
29 ASN1_SEQUENCE(PROFESSION_INFO) = {
30     ASN1_EXP_OPT(PROFESSION_INFO, namingAuthority, NAMING_AUTHORITY, 0),
31     ASN1_SEQUENCE_OF(PROFESSION_INFO, professionItems, DIRECTORYSTRING),
32     ASN1_SEQUENCE_OF_OPT(PROFESSION_INFO, professionOIDs, ASN1_OBJECT),
33     ASN1_OPT(PROFESSION_INFO, registrationNumber, ASN1_PRINTABLESTRING),
34     ASN1_OPT(PROFESSION_INFO, addProfessionInfo, ASN1_OCTET_STRING),
35 } ASN1_SEQUENCE_END(PROFESSION_INFO)
36 
37 ASN1_SEQUENCE(ADMISSIONS) = {
38     ASN1_EXP_OPT(ADMISSIONS, admissionAuthority, GENERAL_NAME, 0),
39     ASN1_EXP_OPT(ADMISSIONS, namingAuthority, NAMING_AUTHORITY, 1),
40     ASN1_SEQUENCE_OF(ADMISSIONS, professionInfos, PROFESSION_INFO),
41 } ASN1_SEQUENCE_END(ADMISSIONS)
42 
43 ASN1_SEQUENCE(ADMISSION_SYNTAX) = {
44     ASN1_OPT(ADMISSION_SYNTAX, admissionAuthority, GENERAL_NAME),
45     ASN1_SEQUENCE_OF(ADMISSION_SYNTAX, contentsOfAdmissions, ADMISSIONS),
46 } ASN1_SEQUENCE_END(ADMISSION_SYNTAX)
47 
48 IMPLEMENT_ASN1_FUNCTIONS(NAMING_AUTHORITY)
49 IMPLEMENT_ASN1_FUNCTIONS(PROFESSION_INFO)
50 IMPLEMENT_ASN1_FUNCTIONS(ADMISSIONS)
51 IMPLEMENT_ASN1_FUNCTIONS(ADMISSION_SYNTAX)
52 
53 static int i2r_ADMISSION_SYNTAX(const struct v3_ext_method *method, void *in,
54     BIO *bp, int ind);
55 
56 const X509V3_EXT_METHOD ossl_v3_ext_admission = {
57     NID_x509ExtAdmission, /* .ext_nid = */
58     0, /* .ext_flags = */
59     ASN1_ITEM_ref(ADMISSION_SYNTAX), /* .it = */
60     NULL, NULL, NULL, NULL,
61     NULL, /* .i2s = */
62     NULL, /* .s2i = */
63     NULL, /* .i2v = */
64     NULL, /* .v2i = */
65     &i2r_ADMISSION_SYNTAX, /* .i2r = */
66     NULL, /* .r2i = */
67     NULL /* extension-specific data */
68 };
69 
i2r_NAMING_AUTHORITY(const struct v3_ext_method * method,void * in,BIO * bp,int ind)70 static int i2r_NAMING_AUTHORITY(const struct v3_ext_method *method, void *in,
71     BIO *bp, int ind)
72 {
73     NAMING_AUTHORITY *namingAuthority = (NAMING_AUTHORITY *)in;
74 
75     if (namingAuthority == NULL)
76         return 0;
77 
78     if (namingAuthority->namingAuthorityId == NULL
79         && namingAuthority->namingAuthorityText == NULL
80         && namingAuthority->namingAuthorityUrl == NULL)
81         return 0;
82 
83     if (BIO_printf(bp, "%*snamingAuthority:\n", ind, "") <= 0)
84         goto err;
85 
86     if (namingAuthority->namingAuthorityId != NULL) {
87         char objbuf[128];
88         const char *ln = OBJ_nid2ln(OBJ_obj2nid(namingAuthority->namingAuthorityId));
89 
90         if (BIO_printf(bp, "%*s  namingAuthorityId: ", ind, "") <= 0)
91             goto err;
92 
93         OBJ_obj2txt(objbuf, sizeof(objbuf), namingAuthority->namingAuthorityId, 1);
94 
95         if (BIO_printf(bp, "%s%s%s%s\n", ln ? ln : "",
96                 ln ? " (" : "", objbuf, ln ? ")" : "")
97             <= 0)
98             goto err;
99     }
100     if (namingAuthority->namingAuthorityText != NULL) {
101         if (BIO_printf(bp, "%*s  namingAuthorityText: ", ind, "") <= 0
102             || ASN1_STRING_print(bp, namingAuthority->namingAuthorityText) <= 0
103             || BIO_printf(bp, "\n") <= 0)
104             goto err;
105     }
106     if (namingAuthority->namingAuthorityUrl != NULL) {
107         if (BIO_printf(bp, "%*s  namingAuthorityUrl: ", ind, "") <= 0
108             || ASN1_STRING_print(bp, namingAuthority->namingAuthorityUrl) <= 0
109             || BIO_printf(bp, "\n") <= 0)
110             goto err;
111     }
112     return 1;
113 
114 err:
115     return 0;
116 }
117 
i2r_ADMISSION_SYNTAX(const struct v3_ext_method * method,void * in,BIO * bp,int ind)118 static int i2r_ADMISSION_SYNTAX(const struct v3_ext_method *method, void *in,
119     BIO *bp, int ind)
120 {
121     ADMISSION_SYNTAX *admission = (ADMISSION_SYNTAX *)in;
122     int i, j, k;
123 
124     if (admission->admissionAuthority != NULL) {
125         if (BIO_printf(bp, "%*sadmissionAuthority:\n", ind, "") <= 0
126             || BIO_printf(bp, "%*s  ", ind, "") <= 0
127             || GENERAL_NAME_print(bp, admission->admissionAuthority) <= 0
128             || BIO_printf(bp, "\n") <= 0)
129             goto err;
130     }
131 
132     for (i = 0; i < sk_ADMISSIONS_num(admission->contentsOfAdmissions); i++) {
133         ADMISSIONS *entry = sk_ADMISSIONS_value(admission->contentsOfAdmissions, i);
134 
135         if (BIO_printf(bp, "%*sEntry %0d:\n", ind, "", 1 + i) <= 0)
136             goto err;
137 
138         if (entry->admissionAuthority != NULL) {
139             if (BIO_printf(bp, "%*s  admissionAuthority:\n", ind, "") <= 0
140                 || BIO_printf(bp, "%*s    ", ind, "") <= 0
141                 || GENERAL_NAME_print(bp, entry->admissionAuthority) <= 0
142                 || BIO_printf(bp, "\n") <= 0)
143                 goto err;
144         }
145 
146         if (entry->namingAuthority != NULL) {
147             if (i2r_NAMING_AUTHORITY(method, entry->namingAuthority, bp, ind + 2) <= 0)
148                 goto err;
149         }
150 
151         for (j = 0; j < sk_PROFESSION_INFO_num(entry->professionInfos); j++) {
152             PROFESSION_INFO *pinfo = sk_PROFESSION_INFO_value(entry->professionInfos, j);
153 
154             if (BIO_printf(bp, "%*s  Profession Info Entry %0d:\n", ind, "", 1 + j) <= 0)
155                 goto err;
156 
157             if (pinfo->registrationNumber != NULL) {
158                 if (BIO_printf(bp, "%*s    registrationNumber: ", ind, "") <= 0
159                     || ASN1_STRING_print(bp, pinfo->registrationNumber) <= 0
160                     || BIO_printf(bp, "\n") <= 0)
161                     goto err;
162             }
163 
164             if (pinfo->namingAuthority != NULL) {
165                 if (i2r_NAMING_AUTHORITY(method, pinfo->namingAuthority, bp, ind + 4) <= 0)
166                     goto err;
167             }
168 
169             if (pinfo->professionItems != NULL) {
170 
171                 if (BIO_printf(bp, "%*s    Info Entries:\n", ind, "") <= 0)
172                     goto err;
173                 for (k = 0; k < sk_ASN1_STRING_num(pinfo->professionItems); k++) {
174                     ASN1_STRING *val = sk_ASN1_STRING_value(pinfo->professionItems, k);
175 
176                     if (BIO_printf(bp, "%*s      ", ind, "") <= 0
177                         || ASN1_STRING_print(bp, val) <= 0
178                         || BIO_printf(bp, "\n") <= 0)
179                         goto err;
180                 }
181             }
182 
183             if (pinfo->professionOIDs != NULL) {
184                 if (BIO_printf(bp, "%*s    Profession OIDs:\n", ind, "") <= 0)
185                     goto err;
186                 for (k = 0; k < sk_ASN1_OBJECT_num(pinfo->professionOIDs); k++) {
187                     ASN1_OBJECT *obj = sk_ASN1_OBJECT_value(pinfo->professionOIDs, k);
188                     const char *ln = OBJ_nid2ln(OBJ_obj2nid(obj));
189                     char objbuf[128];
190 
191                     OBJ_obj2txt(objbuf, sizeof(objbuf), obj, 1);
192                     if (BIO_printf(bp, "%*s      %s%s%s%s\n", ind, "",
193                             ln ? ln : "", ln ? " (" : "",
194                             objbuf, ln ? ")" : "")
195                         <= 0)
196                         goto err;
197                 }
198             }
199         }
200     }
201     return 1;
202 
203 err:
204     return 0;
205 }
206 
NAMING_AUTHORITY_get0_authorityId(const NAMING_AUTHORITY * n)207 const ASN1_OBJECT *NAMING_AUTHORITY_get0_authorityId(const NAMING_AUTHORITY *n)
208 {
209     return n->namingAuthorityId;
210 }
211 
NAMING_AUTHORITY_set0_authorityId(NAMING_AUTHORITY * n,ASN1_OBJECT * id)212 void NAMING_AUTHORITY_set0_authorityId(NAMING_AUTHORITY *n, ASN1_OBJECT *id)
213 {
214     ASN1_OBJECT_free(n->namingAuthorityId);
215     n->namingAuthorityId = id;
216 }
217 
NAMING_AUTHORITY_get0_authorityURL(const NAMING_AUTHORITY * n)218 const ASN1_IA5STRING *NAMING_AUTHORITY_get0_authorityURL(const NAMING_AUTHORITY *n)
219 {
220     return n->namingAuthorityUrl;
221 }
222 
NAMING_AUTHORITY_set0_authorityURL(NAMING_AUTHORITY * n,ASN1_IA5STRING * u)223 void NAMING_AUTHORITY_set0_authorityURL(NAMING_AUTHORITY *n, ASN1_IA5STRING *u)
224 {
225     ASN1_IA5STRING_free(n->namingAuthorityUrl);
226     n->namingAuthorityUrl = u;
227 }
228 
NAMING_AUTHORITY_get0_authorityText(const NAMING_AUTHORITY * n)229 const ASN1_STRING *NAMING_AUTHORITY_get0_authorityText(const NAMING_AUTHORITY *n)
230 {
231     return n->namingAuthorityText;
232 }
233 
NAMING_AUTHORITY_set0_authorityText(NAMING_AUTHORITY * n,ASN1_STRING * t)234 void NAMING_AUTHORITY_set0_authorityText(NAMING_AUTHORITY *n, ASN1_STRING *t)
235 {
236     ASN1_IA5STRING_free(n->namingAuthorityText);
237     n->namingAuthorityText = t;
238 }
239 
ADMISSION_SYNTAX_get0_admissionAuthority(const ADMISSION_SYNTAX * as)240 const GENERAL_NAME *ADMISSION_SYNTAX_get0_admissionAuthority(const ADMISSION_SYNTAX *as)
241 {
242     return as->admissionAuthority;
243 }
244 
ADMISSION_SYNTAX_set0_admissionAuthority(ADMISSION_SYNTAX * as,GENERAL_NAME * aa)245 void ADMISSION_SYNTAX_set0_admissionAuthority(ADMISSION_SYNTAX *as,
246     GENERAL_NAME *aa)
247 {
248     GENERAL_NAME_free(as->admissionAuthority);
249     as->admissionAuthority = aa;
250 }
251 
STACK_OF(ADMISSIONS)252 const STACK_OF(ADMISSIONS) *ADMISSION_SYNTAX_get0_contentsOfAdmissions(const ADMISSION_SYNTAX *as)
253 {
254     return as->contentsOfAdmissions;
255 }
256 
ADMISSION_SYNTAX_set0_contentsOfAdmissions(ADMISSION_SYNTAX * as,STACK_OF (ADMISSIONS)* a)257 void ADMISSION_SYNTAX_set0_contentsOfAdmissions(ADMISSION_SYNTAX *as,
258     STACK_OF(ADMISSIONS) *a)
259 {
260     sk_ADMISSIONS_pop_free(as->contentsOfAdmissions, ADMISSIONS_free);
261     as->contentsOfAdmissions = a;
262 }
263 
ADMISSIONS_get0_admissionAuthority(const ADMISSIONS * a)264 const GENERAL_NAME *ADMISSIONS_get0_admissionAuthority(const ADMISSIONS *a)
265 {
266     return a->admissionAuthority;
267 }
268 
ADMISSIONS_set0_admissionAuthority(ADMISSIONS * a,GENERAL_NAME * aa)269 void ADMISSIONS_set0_admissionAuthority(ADMISSIONS *a, GENERAL_NAME *aa)
270 {
271     GENERAL_NAME_free(a->admissionAuthority);
272     a->admissionAuthority = aa;
273 }
274 
ADMISSIONS_get0_namingAuthority(const ADMISSIONS * a)275 const NAMING_AUTHORITY *ADMISSIONS_get0_namingAuthority(const ADMISSIONS *a)
276 {
277     return a->namingAuthority;
278 }
279 
ADMISSIONS_set0_namingAuthority(ADMISSIONS * a,NAMING_AUTHORITY * na)280 void ADMISSIONS_set0_namingAuthority(ADMISSIONS *a, NAMING_AUTHORITY *na)
281 {
282     NAMING_AUTHORITY_free(a->namingAuthority);
283     a->namingAuthority = na;
284 }
285 
ADMISSIONS_get0_professionInfos(const ADMISSIONS * a)286 const PROFESSION_INFOS *ADMISSIONS_get0_professionInfos(const ADMISSIONS *a)
287 {
288     return a->professionInfos;
289 }
290 
ADMISSIONS_set0_professionInfos(ADMISSIONS * a,PROFESSION_INFOS * pi)291 void ADMISSIONS_set0_professionInfos(ADMISSIONS *a, PROFESSION_INFOS *pi)
292 {
293     sk_PROFESSION_INFO_pop_free(a->professionInfos, PROFESSION_INFO_free);
294     a->professionInfos = pi;
295 }
296 
PROFESSION_INFO_get0_addProfessionInfo(const PROFESSION_INFO * pi)297 const ASN1_OCTET_STRING *PROFESSION_INFO_get0_addProfessionInfo(const PROFESSION_INFO *pi)
298 {
299     return pi->addProfessionInfo;
300 }
301 
PROFESSION_INFO_set0_addProfessionInfo(PROFESSION_INFO * pi,ASN1_OCTET_STRING * aos)302 void PROFESSION_INFO_set0_addProfessionInfo(PROFESSION_INFO *pi,
303     ASN1_OCTET_STRING *aos)
304 {
305     ASN1_OCTET_STRING_free(pi->addProfessionInfo);
306     pi->addProfessionInfo = aos;
307 }
308 
PROFESSION_INFO_get0_namingAuthority(const PROFESSION_INFO * pi)309 const NAMING_AUTHORITY *PROFESSION_INFO_get0_namingAuthority(const PROFESSION_INFO *pi)
310 {
311     return pi->namingAuthority;
312 }
313 
PROFESSION_INFO_set0_namingAuthority(PROFESSION_INFO * pi,NAMING_AUTHORITY * na)314 void PROFESSION_INFO_set0_namingAuthority(PROFESSION_INFO *pi,
315     NAMING_AUTHORITY *na)
316 {
317     NAMING_AUTHORITY_free(pi->namingAuthority);
318     pi->namingAuthority = na;
319 }
320 
STACK_OF(ASN1_STRING)321 const STACK_OF(ASN1_STRING) *PROFESSION_INFO_get0_professionItems(const PROFESSION_INFO *pi)
322 {
323     return pi->professionItems;
324 }
325 
PROFESSION_INFO_set0_professionItems(PROFESSION_INFO * pi,STACK_OF (ASN1_STRING)* as)326 void PROFESSION_INFO_set0_professionItems(PROFESSION_INFO *pi,
327     STACK_OF(ASN1_STRING) *as)
328 {
329     sk_ASN1_STRING_pop_free(pi->professionItems, ASN1_STRING_free);
330     pi->professionItems = as;
331 }
332 
STACK_OF(ASN1_OBJECT)333 const STACK_OF(ASN1_OBJECT) *PROFESSION_INFO_get0_professionOIDs(const PROFESSION_INFO *pi)
334 {
335     return pi->professionOIDs;
336 }
337 
PROFESSION_INFO_set0_professionOIDs(PROFESSION_INFO * pi,STACK_OF (ASN1_OBJECT)* po)338 void PROFESSION_INFO_set0_professionOIDs(PROFESSION_INFO *pi,
339     STACK_OF(ASN1_OBJECT) *po)
340 {
341     sk_ASN1_OBJECT_pop_free(pi->professionOIDs, ASN1_OBJECT_free);
342     pi->professionOIDs = po;
343 }
344 
PROFESSION_INFO_get0_registrationNumber(const PROFESSION_INFO * pi)345 const ASN1_PRINTABLESTRING *PROFESSION_INFO_get0_registrationNumber(const PROFESSION_INFO *pi)
346 {
347     return pi->registrationNumber;
348 }
349 
PROFESSION_INFO_set0_registrationNumber(PROFESSION_INFO * pi,ASN1_PRINTABLESTRING * rn)350 void PROFESSION_INFO_set0_registrationNumber(PROFESSION_INFO *pi,
351     ASN1_PRINTABLESTRING *rn)
352 {
353     ASN1_PRINTABLESTRING_free(pi->registrationNumber);
354     pi->registrationNumber = rn;
355 }
356