1 /*
2 * Copyright 2024-2025 The OpenSSL Project Authors. All Rights Reserved.
3 *
4 * Licensed under the Apache License 2.0 (the "License"). You may not use
5 * this file except in compliance with the License. You can obtain a copy
6 * in the file LICENSE in the source distribution or at
7 * https://www.openssl.org/source/license.html
8 */
9
10 #include <openssl/asn1t.h>
11 #include <openssl/x509v3.h>
12 #include <crypto/x509.h>
13 #include "ext_dat.h"
14
15 ASN1_SEQUENCE(OSSL_HASH) = {
16 ASN1_SIMPLE(OSSL_HASH, algorithmIdentifier, X509_ALGOR),
17 ASN1_OPT(OSSL_HASH, hashValue, ASN1_BIT_STRING),
18 } ASN1_SEQUENCE_END(OSSL_HASH)
19
20 ASN1_SEQUENCE(OSSL_INFO_SYNTAX_POINTER) = {
21 ASN1_SIMPLE(OSSL_INFO_SYNTAX_POINTER, name, GENERAL_NAMES),
22 ASN1_OPT(OSSL_INFO_SYNTAX_POINTER, hash, OSSL_HASH),
23 } ASN1_SEQUENCE_END(OSSL_INFO_SYNTAX_POINTER)
24
25 ASN1_CHOICE(OSSL_INFO_SYNTAX) = {
26 ASN1_SIMPLE(OSSL_INFO_SYNTAX, choice.content, DIRECTORYSTRING),
27 ASN1_SIMPLE(OSSL_INFO_SYNTAX, choice.pointer, OSSL_INFO_SYNTAX_POINTER)
28 } ASN1_CHOICE_END(OSSL_INFO_SYNTAX)
29
30 ASN1_SEQUENCE(OSSL_PRIVILEGE_POLICY_ID) = {
31 ASN1_SIMPLE(OSSL_PRIVILEGE_POLICY_ID, privilegePolicy, ASN1_OBJECT),
32 ASN1_SIMPLE(OSSL_PRIVILEGE_POLICY_ID, privPolSyntax, OSSL_INFO_SYNTAX),
33 } ASN1_SEQUENCE_END(OSSL_PRIVILEGE_POLICY_ID)
34
35 ASN1_SEQUENCE(OSSL_ATTRIBUTE_DESCRIPTOR) = {
36 ASN1_SIMPLE(OSSL_ATTRIBUTE_DESCRIPTOR, identifier, ASN1_OBJECT),
37 ASN1_SIMPLE(OSSL_ATTRIBUTE_DESCRIPTOR, attributeSyntax, ASN1_OCTET_STRING),
38 ASN1_IMP_OPT(OSSL_ATTRIBUTE_DESCRIPTOR, name, ASN1_UTF8STRING, 0),
39 ASN1_IMP_OPT(OSSL_ATTRIBUTE_DESCRIPTOR, description, ASN1_UTF8STRING, 1),
40 ASN1_SIMPLE(OSSL_ATTRIBUTE_DESCRIPTOR, dominationRule, OSSL_PRIVILEGE_POLICY_ID),
41 } ASN1_SEQUENCE_END(OSSL_ATTRIBUTE_DESCRIPTOR)
42
43 IMPLEMENT_ASN1_FUNCTIONS(OSSL_HASH)
44 IMPLEMENT_ASN1_FUNCTIONS(OSSL_INFO_SYNTAX)
45 IMPLEMENT_ASN1_FUNCTIONS(OSSL_INFO_SYNTAX_POINTER)
46 IMPLEMENT_ASN1_FUNCTIONS(OSSL_PRIVILEGE_POLICY_ID)
47 IMPLEMENT_ASN1_FUNCTIONS(OSSL_ATTRIBUTE_DESCRIPTOR)
48
49 static int i2r_HASH(X509V3_EXT_METHOD *method,
50 OSSL_HASH *hash,
51 BIO *out, int indent)
52 {
53 if (BIO_printf(out, "%*sAlgorithm: ", indent, "") <= 0)
54 return 0;
55 if (i2a_ASN1_OBJECT(out, hash->algorithmIdentifier->algorithm) <= 0)
56 return 0;
57 if (BIO_puts(out, "\n") <= 0)
58 return 0;
59 if (hash->algorithmIdentifier->parameter) {
60 if (BIO_printf(out, "%*sParameter: ", indent, "") <= 0)
61 return 0;
62 if (ossl_print_attribute_value(out, 0, hash->algorithmIdentifier->parameter,
63 indent + 4) <= 0)
64 return 0;
65 if (BIO_puts(out, "\n") <= 0)
66 return 0;
67 }
68 if (BIO_printf(out, "%*sHash Value: ", indent, "") <= 0)
69 return 0;
70 if (hash->hashValue == NULL)
71 return 0;
72 return ossl_bio_print_hex(out, hash->hashValue->data, hash->hashValue->length);
73 }
74
i2r_INFO_SYNTAX_POINTER(X509V3_EXT_METHOD * method,OSSL_INFO_SYNTAX_POINTER * pointer,BIO * out,int indent)75 static int i2r_INFO_SYNTAX_POINTER(X509V3_EXT_METHOD *method,
76 OSSL_INFO_SYNTAX_POINTER *pointer,
77 BIO *out, int indent)
78 {
79 if (BIO_printf(out, "%*sNames:\n", indent, "") <= 0)
80 return 0;
81 if (OSSL_GENERAL_NAMES_print(out, pointer->name, indent) <= 0)
82 return 0;
83 if (BIO_puts(out, "\n") <= 0)
84 return 0;
85 if (pointer->hash != NULL) {
86 if (BIO_printf(out, "%*sHash:\n", indent, "") <= 0)
87 return 0;
88 if (i2r_HASH(method, pointer->hash, out, indent + 4) <= 0)
89 return 0;
90 }
91 return 1;
92 }
93
i2r_OSSL_INFO_SYNTAX(X509V3_EXT_METHOD * method,OSSL_INFO_SYNTAX * info,BIO * out,int indent)94 static int i2r_OSSL_INFO_SYNTAX(X509V3_EXT_METHOD *method,
95 OSSL_INFO_SYNTAX *info,
96 BIO *out, int indent)
97 {
98 switch (info->type) {
99 case OSSL_INFO_SYNTAX_TYPE_CONTENT:
100 if (BIO_printf(out, "%*sContent: ", indent, "") <= 0)
101 return 0;
102 if (BIO_printf(out, "%.*s", info->choice.content->length, info->choice.content->data) <= 0)
103 return 0;
104 if (BIO_puts(out, "\n") <= 0)
105 return 0;
106 return 1;
107 case OSSL_INFO_SYNTAX_TYPE_POINTER:
108 if (BIO_printf(out, "%*sPointer:\n", indent, "") <= 0)
109 return 0;
110 return i2r_INFO_SYNTAX_POINTER(method, info->choice.pointer, out, indent + 4);
111 default:
112 return 0;
113 }
114 return 0;
115 }
116
i2r_OSSL_PRIVILEGE_POLICY_ID(X509V3_EXT_METHOD * method,OSSL_PRIVILEGE_POLICY_ID * ppid,BIO * out,int indent)117 static int i2r_OSSL_PRIVILEGE_POLICY_ID(X509V3_EXT_METHOD *method,
118 OSSL_PRIVILEGE_POLICY_ID *ppid,
119 BIO *out, int indent)
120 {
121 char buf[80];
122
123 /* Intentionally display the numeric OID, rather than the textual name. */
124 if (OBJ_obj2txt(buf, sizeof(buf), ppid->privilegePolicy, 1) <= 0)
125 return 0;
126 if (BIO_printf(out, "%*sPrivilege Policy Identifier: %s\n", indent, "", buf) <= 0)
127 return 0;
128 if (BIO_printf(out, "%*sPrivilege Policy Syntax:\n", indent, "") <= 0)
129 return 0;
130 return i2r_OSSL_INFO_SYNTAX(method, ppid->privPolSyntax, out, indent + 4);
131 }
132
i2r_OSSL_ATTRIBUTE_DESCRIPTOR(X509V3_EXT_METHOD * method,OSSL_ATTRIBUTE_DESCRIPTOR * ad,BIO * out,int indent)133 static int i2r_OSSL_ATTRIBUTE_DESCRIPTOR(X509V3_EXT_METHOD *method,
134 OSSL_ATTRIBUTE_DESCRIPTOR *ad,
135 BIO *out, int indent)
136 {
137 char buf[80];
138
139 /* Intentionally display the numeric OID, rather than the textual name. */
140 if (OBJ_obj2txt(buf, sizeof(buf), ad->identifier, 1) <= 0)
141 return 0;
142 if (BIO_printf(out, "%*sIdentifier: %s\n", indent, "", buf) <= 0)
143 return 0;
144 if (BIO_printf(out, "%*sSyntax:\n", indent, "") <= 0)
145 return 0;
146 if (BIO_printf(out, "%*s%.*s", indent + 4, "",
147 ad->attributeSyntax->length, ad->attributeSyntax->data) <= 0)
148 return 0;
149 if (BIO_puts(out, "\n\n") <= 0)
150 return 0;
151 if (ad->name != NULL) {
152 if (BIO_printf(out, "%*sName: %.*s\n", indent, "", ad->name->length, ad->name->data) <= 0)
153 return 0;
154 }
155 if (ad->description != NULL) {
156 if (BIO_printf(out, "%*sDescription: %.*s\n", indent, "",
157 ad->description->length, ad->description->data) <= 0)
158 return 0;
159 }
160 if (BIO_printf(out, "%*sDomination Rule:\n", indent, "") <= 0)
161 return 0;
162 return i2r_OSSL_PRIVILEGE_POLICY_ID(method, ad->dominationRule, out, indent + 4);
163 }
164
165 const X509V3_EXT_METHOD ossl_v3_attribute_descriptor = {
166 NID_attribute_descriptor, X509V3_EXT_MULTILINE,
167 ASN1_ITEM_ref(OSSL_ATTRIBUTE_DESCRIPTOR),
168 0, 0, 0, 0,
169 0, 0,
170 0,
171 0,
172 (X509V3_EXT_I2R)i2r_OSSL_ATTRIBUTE_DESCRIPTOR,
173 NULL,
174 NULL
175 };
176