/src/boringssl/crypto/x509/x509name.cc

Source
// Copyright 1995-2016 The OpenSSL Project Authors. All Rights Reserved.
//
// Licensed under the Apache License, Version 2.0 (the "License");
// you may not use this file except in compliance with the License.
// You may obtain a copy of the License at
//
//     https://www.apache.org/licenses/LICENSE-2.0
//
// Unless required by applicable law or agreed to in writing, software
// distributed under the License is distributed on an "AS IS" BASIS,
// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
// See the License for the specific language governing permissions and
// limitations under the License.

#include <string.h>

#include <openssl/asn1.h>
#include <openssl/bytestring.h>
#include <openssl/err.h>
#include <openssl/evp.h>
#include <openssl/obj.h>
#include <openssl/stack.h>
#include <openssl/x509.h>

#include "../internal.h"
#include "internal.h"


using namespace bssl;

int X509_NAME_get_text_by_NID(const X509_NAME *name, int nid, char *buf,
                              int len) {
  const ASN1_OBJECT *obj;

  obj = OBJ_nid2obj(nid);
  if (obj == nullptr) {
    return -1;
  }
  return (X509_NAME_get_text_by_OBJ(name, obj, buf, len));
}

int X509_NAME_get_text_by_OBJ(const X509_NAME *name, const ASN1_OBJECT *obj,
                              char *buf, int len) {
  int i = X509_NAME_get_index_by_OBJ(name, obj, -1);
  if (i < 0) {
    return -1;
  }
  const ASN1_STRING *data =
      X509_NAME_ENTRY_get_data(X509_NAME_get_entry(name, i));
  unsigned char *text = nullptr;
  int ret = -1;
  int text_len = ASN1_STRING_to_UTF8(&text, data);
  // Fail if we could not encode as UTF-8.
  if (text_len < 0) {
    goto out;
  }
  CBS cbs;
  CBS_init(&cbs, text, text_len);
  // Fail if the UTF-8 encoding contains a 0 byte because this is returned as a
  // C string and callers very often do not check.
  if (CBS_contains_zero_byte(&cbs)) {
    goto out;
  }
  // We still support the "pass NULL to find out how much" API
  if (buf != nullptr) {
    if (text_len >= len || len <= 0 ||
        !CBS_copy_bytes(&cbs, (uint8_t *)buf, text_len)) {
      goto out;
    }
    // It must be a C string
    buf[text_len] = '\0';
  }
  ret = text_len;

out:
  OPENSSL_free(text);
  return ret;
}

int X509_NAME_entry_count(const X509_NAME *name) {
  if (name == nullptr) {
    return 0;
  }
  const auto *impl = FromOpaque(name);
  return (int)sk_X509_NAME_ENTRY_num(impl->entries);
}

int X509_NAME_get_index_by_NID(const X509_NAME *name, int nid, int lastpos) {
  const ASN1_OBJECT *obj;

  obj = OBJ_nid2obj(nid);
  if (obj == nullptr) {
    return -2;
  }
  return X509_NAME_get_index_by_OBJ(name, obj, lastpos);
}

// NOTE: you should be passing -1, not 0 as lastpos
int X509_NAME_get_index_by_OBJ(const X509_NAME *name, const ASN1_OBJECT *obj,
                               int lastpos) {
  if (name == nullptr) {
    return -1;
  }
  const auto *impl = FromOpaque(name);
  if (lastpos < 0) {
    lastpos = -1;
  }
  const STACK_OF(X509_NAME_ENTRY) *sk = impl->entries;
  int n = (int)sk_X509_NAME_ENTRY_num(sk);
  for (lastpos++; lastpos < n; lastpos++) {
    const X509_NAME_ENTRY *ne = sk_X509_NAME_ENTRY_value(sk, lastpos);
    if (OBJ_cmp(ne->object, obj) == 0) {
      return lastpos;
    }
  }
  return -1;
}

X509_NAME_ENTRY *X509_NAME_get_entry(const X509_NAME *name, int loc) {
  if (name == nullptr) {
    return nullptr;
  }
  const auto *impl = FromOpaque(name);
  if (loc < 0 || sk_X509_NAME_ENTRY_num(impl->entries) <= (size_t)loc) {
    return nullptr;
  } else {
    return (sk_X509_NAME_ENTRY_value(impl->entries, loc));
  }
}

X509_NAME_ENTRY *X509_NAME_delete_entry(X509_NAME *name, int loc) {
  if (name == nullptr) {
    return nullptr;
  }
  const auto *impl = FromOpaque(name);
  if (loc < 0 || sk_X509_NAME_ENTRY_num(impl->entries) <= (size_t)loc) {
    return nullptr;
  }

  STACK_OF(X509_NAME_ENTRY) *sk = impl->entries;
  X509_NAME_ENTRY *ret = sk_X509_NAME_ENTRY_delete(sk, loc);
  size_t n = sk_X509_NAME_ENTRY_num(sk);
  x509_name_invalidate_cache(name);
  if ((size_t)loc == n) {
    return ret;
  }

  int set_prev;
  if (loc != 0) {
    set_prev = sk_X509_NAME_ENTRY_value(sk, loc - 1)->set;
  } else {
    set_prev = ret->set - 1;
  }
  int set_next = sk_X509_NAME_ENTRY_value(sk, loc)->set;

  // If we removed a singleton RDN, update the RDN indices so they are
  // consecutive again.
  if (set_prev + 1 < set_next) {
    for (size_t i = loc; i < n; i++) {
      sk_X509_NAME_ENTRY_value(sk, i)->set--;
    }
  }
  return ret;
}

int X509_NAME_add_entry_by_OBJ(X509_NAME *name, const ASN1_OBJECT *obj,
                               int type, const unsigned char *bytes,
                               ossl_ssize_t len, int loc, int set) {
  X509_NAME_ENTRY *ne =
      X509_NAME_ENTRY_create_by_OBJ(nullptr, obj, type, bytes, len);
  if (!ne) {
    return 0;
  }
  int ret = X509_NAME_add_entry(name, ne, loc, set);
  X509_NAME_ENTRY_free(ne);
  return ret;
}

int X509_NAME_add_entry_by_NID(X509_NAME *name, int nid, int type,
                               const unsigned char *bytes, ossl_ssize_t len,
                               int loc, int set) {
  X509_NAME_ENTRY *ne =
      X509_NAME_ENTRY_create_by_NID(nullptr, nid, type, bytes, len);
  if (!ne) {
    return 0;
  }
  int ret = X509_NAME_add_entry(name, ne, loc, set);
  X509_NAME_ENTRY_free(ne);
  return ret;
}

int X509_NAME_add_entry_by_txt(X509_NAME *name, const char *field, int type,
                               const unsigned char *bytes, ossl_ssize_t len,
                               int loc, int set) {
  X509_NAME_ENTRY *ne =
      X509_NAME_ENTRY_create_by_txt(nullptr, field, type, bytes, len);
  if (!ne) {
    return 0;
  }
  int ret = X509_NAME_add_entry(name, ne, loc, set);
  X509_NAME_ENTRY_free(ne);
  return ret;
}

// if set is -1, append to previous set, 0 'a new one', and 1, prepend to the
// guy we are about to stomp on.
int X509_NAME_add_entry(X509_NAME *name, const X509_NAME_ENTRY *entry, int loc,
                        int set) {
  if (name == nullptr) {
    return 0;
  }
  auto *impl = FromOpaque(name);
  if (impl->entries == nullptr) {
    impl->entries = sk_X509_NAME_ENTRY_new_null();
    if (impl->entries == nullptr) {
      return 0;
    }
  }

  STACK_OF(X509_NAME_ENTRY) *sk = impl->entries;
  int n = (int)sk_X509_NAME_ENTRY_num(sk);
  if (loc > n) {
    loc = n;
  } else if (loc < 0) {
    loc = n;
  }

  bool inc = set == 0;
  x509_name_invalidate_cache(name);

  if (set == -1) {
    if (loc == 0) {
      set = 0;
      inc = 1;
    } else {
      set = sk_X509_NAME_ENTRY_value(sk, loc - 1)->set;
    }
  } else {  // if (set >= 0)
    if (loc >= n) {
      if (loc != 0) {
        set = sk_X509_NAME_ENTRY_value(sk, loc - 1)->set + 1;
      } else {
        set = 0;
      }
    } else {
      set = sk_X509_NAME_ENTRY_value(sk, loc)->set;
    }
  }

  UniquePtr<X509_NAME_ENTRY> new_entry(X509_NAME_ENTRY_dup(entry));
  if (new_entry == nullptr) {
    return 0;
  }
  new_entry->set = set;
  if (!sk_X509_NAME_ENTRY_insert(sk, new_entry.get(), loc)) {
    return 0;
  }
  new_entry.release(); // |sk| took ownership.
  if (inc) {
    n = (int)sk_X509_NAME_ENTRY_num(sk);
    for (int i = loc + 1; i < n; i++) {
      sk_X509_NAME_ENTRY_value(sk, i)->set += 1;
    }
  }
  return 1;
}

X509_NAME_ENTRY *X509_NAME_ENTRY_create_by_txt(X509_NAME_ENTRY **ne,
                                               const char *field, int type,
                                               const unsigned char *bytes,
                                               ossl_ssize_t len) {
  ASN1_OBJECT *obj;
  X509_NAME_ENTRY *nentry;

  obj = OBJ_txt2obj(field, 0);
  if (obj == nullptr) {
    OPENSSL_PUT_ERROR(X509, X509_R_INVALID_FIELD_NAME);
    ERR_add_error_data(2, "name=", field);
    return nullptr;
  }
  nentry = X509_NAME_ENTRY_create_by_OBJ(ne, obj, type, bytes, len);
  ASN1_OBJECT_free(obj);
  return nentry;
}

X509_NAME_ENTRY *X509_NAME_ENTRY_create_by_NID(X509_NAME_ENTRY **ne, int nid,
                                               int type,
                                               const unsigned char *bytes,
                                               ossl_ssize_t len) {
  const ASN1_OBJECT *obj = OBJ_nid2obj(nid);
  if (obj == nullptr) {
    OPENSSL_PUT_ERROR(X509, X509_R_UNKNOWN_NID);
    return nullptr;
  }
  return X509_NAME_ENTRY_create_by_OBJ(ne, obj, type, bytes, len);
}

X509_NAME_ENTRY *X509_NAME_ENTRY_create_by_OBJ(X509_NAME_ENTRY **ne,
                                               const ASN1_OBJECT *obj, int type,
                                               const unsigned char *bytes,
                                               ossl_ssize_t len) {
  X509_NAME_ENTRY *ret;

  if ((ne == nullptr) || (*ne == nullptr)) {
    if ((ret = X509_NAME_ENTRY_new()) == nullptr) {
      return nullptr;
    }
  } else {
    ret = *ne;
  }

  if (!X509_NAME_ENTRY_set_object(ret, obj)) {
    goto err;
  }
  if (!X509_NAME_ENTRY_set_data(ret, type, bytes, len)) {
    goto err;
  }

  if ((ne != nullptr) && (*ne == nullptr)) {
    *ne = ret;
  }
  return ret;
err:
  if ((ne == nullptr) || (ret != *ne)) {
    X509_NAME_ENTRY_free(ret);
  }
  return nullptr;
}

int X509_NAME_ENTRY_set_object(X509_NAME_ENTRY *ne, const ASN1_OBJECT *obj) {
  if ((ne == nullptr) || (obj == nullptr)) {
    OPENSSL_PUT_ERROR(X509, ERR_R_PASSED_NULL_PARAMETER);
    return 0;
  }
  ASN1_OBJECT_free(ne->object);
  ne->object = OBJ_dup(obj);
  return ((ne->object == nullptr) ? 0 : 1);
}

int X509_NAME_ENTRY_set_data(X509_NAME_ENTRY *ne, int type,
                             const unsigned char *bytes, ossl_ssize_t len) {
  if ((ne == nullptr) || ((bytes == nullptr) && (len != 0))) {
    return 0;
  }
  if ((type > 0) && (type & MBSTRING_FLAG)) {
    ASN1_STRING *dst = &ne->value;
    return ASN1_STRING_set_by_NID(&dst, bytes, len, type,
                                  OBJ_obj2nid(ne->object)) != nullptr;
  }
  if (len < 0) {
    len = strlen((const char *)bytes);
  }
  if (!ASN1_STRING_set(&ne->value, bytes, len)) {
    return 0;
  }
  if (type != V_ASN1_UNDEF) {
    ne->value.type = type;
  }
  return 1;
}

ASN1_OBJECT *X509_NAME_ENTRY_get_object(const X509_NAME_ENTRY *ne) {
  if (ne == nullptr) {
    return nullptr;
  }
  return ne->object;
}

ASN1_STRING *X509_NAME_ENTRY_get_data(const X509_NAME_ENTRY *ne) {
  if (ne == nullptr) {
    return nullptr;
  }
  // This function is not const-correct for OpenSSL compatibility.
  return const_cast<ASN1_STRING*>(&ne->value);
}

Coverage Report

Created: 2026-02-16 07:12

Line	Count	Source
1		// Copyright 1995-2016 The OpenSSL Project Authors. All Rights Reserved.
2		//
3		// Licensed under the Apache License, Version 2.0 (the "License");
4		// you may not use this file except in compliance with the License.
5		// You may obtain a copy of the License at
6		//
7		// https://www.apache.org/licenses/LICENSE-2.0
8		//
9		// Unless required by applicable law or agreed to in writing, software
10		// distributed under the License is distributed on an "AS IS" BASIS,
11		// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
12		// See the License for the specific language governing permissions and
13		// limitations under the License.
14
15		#include <string.h>
16
17		#include <openssl/asn1.h>
18		#include <openssl/bytestring.h>
19		#include <openssl/err.h>
20		#include <openssl/evp.h>
21		#include <openssl/obj.h>
22		#include <openssl/stack.h>
23		#include <openssl/x509.h>
24
25		#include "../internal.h"
26		#include "internal.h"
27
28
29		using namespace bssl;
30
31		int X509_NAME_get_text_by_NID(const X509_NAME name, int nid, char buf,
32	0	int len) {
33	0	const ASN1_OBJECT *obj;
34
35	0	obj = OBJ_nid2obj(nid);
36	0	if (obj == nullptr) {
37	0	return -1;
38	0	}
39	0	return (X509_NAME_get_text_by_OBJ(name, obj, buf, len));
40	0	}
41
42		int X509_NAME_get_text_by_OBJ(const X509_NAME name, const ASN1_OBJECT obj,
43	0	char *buf, int len) {
44	0	int i = X509_NAME_get_index_by_OBJ(name, obj, -1);
45	0	if (i < 0) {
46	0	return -1;
47	0	}
48	0	const ASN1_STRING *data =
49	0	X509_NAME_ENTRY_get_data(X509_NAME_get_entry(name, i));
50	0	unsigned char *text = nullptr;
51	0	int ret = -1;
52	0	int text_len = ASN1_STRING_to_UTF8(&text, data);
53		// Fail if we could not encode as UTF-8.
54	0	if (text_len < 0) {
55	0	goto out;
56	0	}
57	0	CBS cbs;
58	0	CBS_init(&cbs, text, text_len);
59		// Fail if the UTF-8 encoding contains a 0 byte because this is returned as a
60		// C string and callers very often do not check.
61	0	if (CBS_contains_zero_byte(&cbs)) {
62	0	goto out;
63	0	}
64		// We still support the "pass NULL to find out how much" API
65	0	if (buf != nullptr) {
66	0	if (text_len >= len \|\| len <= 0 \|\|
67	0	!CBS_copy_bytes(&cbs, (uint8_t *)buf, text_len)) {
68	0	goto out;
69	0	}
70		// It must be a C string
71	0	buf[text_len] = '\0';
72	0	}
73	0	ret = text_len;
74
75	0	out:
76	0	OPENSSL_free(text);
77	0	return ret;
78	0	}
79
80	135	int X509_NAME_entry_count(const X509_NAME *name) {
81	135	if (name == nullptr) {
82	0	return 0;
83	0	}
84	135	const auto *impl = FromOpaque(name);
85	135	return (int)sk_X509_NAME_ENTRY_num(impl->entries);
86	135	}
87
88	491	int X509_NAME_get_index_by_NID(const X509_NAME *name, int nid, int lastpos) {
89	491	const ASN1_OBJECT *obj;
90
91	491	obj = OBJ_nid2obj(nid);
92	491	if (obj == nullptr) {
93	0	return -2;
94	0	}
95	491	return X509_NAME_get_index_by_OBJ(name, obj, lastpos);
96	491	}
97
98		// NOTE: you should be passing -1, not 0 as lastpos
99		int X509_NAME_get_index_by_OBJ(const X509_NAME name, const ASN1_OBJECT obj,
100	491	int lastpos) {
101	491	if (name == nullptr) {
102	0	return -1;
103	0	}
104	491	const auto *impl = FromOpaque(name);
105	491	if (lastpos < 0) {
106	491	lastpos = -1;
107	491	}
108	491	const STACK_OF(X509_NAME_ENTRY) *sk = impl->entries;
109	491	int n = (int)sk_X509_NAME_ENTRY_num(sk);
110	491	for (lastpos++; lastpos < n; lastpos++) {
111	0	const X509_NAME_ENTRY *ne = sk_X509_NAME_ENTRY_value(sk, lastpos);
112	0	if (OBJ_cmp(ne->object, obj) == 0) {
113	0	return lastpos;
114	0	}
115	0	}
116	491	return -1;
117	491	}
118
119	390	X509_NAME_ENTRY X509_NAME_get_entry(const X509_NAME name, int loc) {
120	390	if (name == nullptr) {
121	0	return nullptr;
122	0	}
123	390	const auto *impl = FromOpaque(name);
124	390	if (loc < 0 \|\| sk_X509_NAME_ENTRY_num(impl->entries) <= (size_t)loc) {
125	0	return nullptr;
126	390	} else {
127	390	return (sk_X509_NAME_ENTRY_value(impl->entries, loc));
128	390	}
129	390	}
130
131	0	X509_NAME_ENTRY X509_NAME_delete_entry(X509_NAME name, int loc) {
132	0	if (name == nullptr) {
133	0	return nullptr;
134	0	}
135	0	const auto *impl = FromOpaque(name);
136	0	if (loc < 0 \|\| sk_X509_NAME_ENTRY_num(impl->entries) <= (size_t)loc) {
137	0	return nullptr;
138	0	}
139
140	0	STACK_OF(X509_NAME_ENTRY) *sk = impl->entries;
141	0	X509_NAME_ENTRY *ret = sk_X509_NAME_ENTRY_delete(sk, loc);
142	0	size_t n = sk_X509_NAME_ENTRY_num(sk);
143	0	x509_name_invalidate_cache(name);
144	0	if ((size_t)loc == n) {
145	0	return ret;
146	0	}
147
148	0	int set_prev;
149	0	if (loc != 0) {
150	0	set_prev = sk_X509_NAME_ENTRY_value(sk, loc - 1)->set;
151	0	} else {
152	0	set_prev = ret->set - 1;
153	0	}
154	0	int set_next = sk_X509_NAME_ENTRY_value(sk, loc)->set;
155
156		// If we removed a singleton RDN, update the RDN indices so they are
157		// consecutive again.
158	0	if (set_prev + 1 < set_next) {
159	0	for (size_t i = loc; i < n; i++) {
160	0	sk_X509_NAME_ENTRY_value(sk, i)->set--;
161	0	}
162	0	}
163	0	return ret;
164	0	}
165
166		int X509_NAME_add_entry_by_OBJ(X509_NAME name, const ASN1_OBJECT obj,
167		int type, const unsigned char *bytes,
168	0	ossl_ssize_t len, int loc, int set) {
169	0	X509_NAME_ENTRY *ne =
170	0	X509_NAME_ENTRY_create_by_OBJ(nullptr, obj, type, bytes, len);
171	0	if (!ne) {
172	0	return 0;
173	0	}
174	0	int ret = X509_NAME_add_entry(name, ne, loc, set);
175	0	X509_NAME_ENTRY_free(ne);
176	0	return ret;
177	0	}
178
179		int X509_NAME_add_entry_by_NID(X509_NAME *name, int nid, int type,
180		const unsigned char *bytes, ossl_ssize_t len,
181	0	int loc, int set) {
182	0	X509_NAME_ENTRY *ne =
183	0	X509_NAME_ENTRY_create_by_NID(nullptr, nid, type, bytes, len);
184	0	if (!ne) {
185	0	return 0;
186	0	}
187	0	int ret = X509_NAME_add_entry(name, ne, loc, set);
188	0	X509_NAME_ENTRY_free(ne);
189	0	return ret;
190	0	}
191
192		int X509_NAME_add_entry_by_txt(X509_NAME name, const char field, int type,
193		const unsigned char *bytes, ossl_ssize_t len,
194	13.3k	int loc, int set) {
195	13.3k	X509_NAME_ENTRY *ne =
196	13.3k	X509_NAME_ENTRY_create_by_txt(nullptr, field, type, bytes, len);
197	13.3k	if (!ne) {
198	51	return 0;
199	51	}
200	13.3k	int ret = X509_NAME_add_entry(name, ne, loc, set);
201	13.3k	X509_NAME_ENTRY_free(ne);
202	13.3k	return ret;
203	13.3k	}
204
205		// if set is -1, append to previous set, 0 'a new one', and 1, prepend to the
206		// guy we are about to stomp on.
207		int X509_NAME_add_entry(X509_NAME name, const X509_NAME_ENTRY entry, int loc,
208	13.3k	int set) {
209	13.3k	if (name == nullptr) {
210	0	return 0;
211	0	}
212	13.3k	auto *impl = FromOpaque(name);
213	13.3k	if (impl->entries == nullptr) {
214	5.83k	impl->entries = sk_X509_NAME_ENTRY_new_null();
215	5.83k	if (impl->entries == nullptr) {
216	0	return 0;
217	0	}
218	5.83k	}
219
220	13.3k	STACK_OF(X509_NAME_ENTRY) *sk = impl->entries;
221	13.3k	int n = (int)sk_X509_NAME_ENTRY_num(sk);
222	13.3k	if (loc > n) {
223	0	loc = n;
224	13.3k	} else if (loc < 0) {
225	13.3k	loc = n;
226	13.3k	}
227
228	13.3k	bool inc = set == 0;
229	13.3k	x509_name_invalidate_cache(name);
230
231	13.3k	if (set == -1) {
232	3.93k	if (loc == 0) {
233	765	set = 0;
234	765	inc = 1;
235	3.16k	} else {
236	3.16k	set = sk_X509_NAME_ENTRY_value(sk, loc - 1)->set;
237	3.16k	}
238	9.40k	} else { // if (set >= 0)
239	9.40k	if (loc >= n) {
240	9.40k	if (loc != 0) {
241	4.34k	set = sk_X509_NAME_ENTRY_value(sk, loc - 1)->set + 1;
242	5.06k	} else {
243	5.06k	set = 0;
244	5.06k	}
245	9.40k	} else {
246	0	set = sk_X509_NAME_ENTRY_value(sk, loc)->set;
247	0	}
248	9.40k	}
249
250	13.3k	UniquePtr<X509_NAME_ENTRY> new_entry(X509_NAME_ENTRY_dup(entry));
251	13.3k	if (new_entry == nullptr) {
252	5	return 0;
253	5	}
254	13.3k	new_entry->set = set;
255	13.3k	if (!sk_X509_NAME_ENTRY_insert(sk, new_entry.get(), loc)) {
256	0	return 0;
257	0	}
258	13.3k	new_entry.release(); // \|sk\| took ownership.
259	13.3k	if (inc) {
260	10.1k	n = (int)sk_X509_NAME_ENTRY_num(sk);
261	10.1k	for (int i = loc + 1; i < n; i++) {
262	0	sk_X509_NAME_ENTRY_value(sk, i)->set += 1;
263	0	}
264	10.1k	}
265	13.3k	return 1;
266	13.3k	}
267
268		X509_NAME_ENTRY X509_NAME_ENTRY_create_by_txt(X509_NAME_ENTRY *ne,
269		const char *field, int type,
270		const unsigned char *bytes,
271	13.3k	ossl_ssize_t len) {
272	13.3k	ASN1_OBJECT *obj;
273	13.3k	X509_NAME_ENTRY *nentry;
274
275	13.3k	obj = OBJ_txt2obj(field, 0);
276	13.3k	if (obj == nullptr) {
277	32	OPENSSL_PUT_ERROR(X509, X509_R_INVALID_FIELD_NAME);
278	32	ERR_add_error_data(2, "name=", field);
279	32	return nullptr;
280	32	}
281	13.3k	nentry = X509_NAME_ENTRY_create_by_OBJ(ne, obj, type, bytes, len);
282	13.3k	ASN1_OBJECT_free(obj);
283	13.3k	return nentry;
284	13.3k	}
285
286		X509_NAME_ENTRY X509_NAME_ENTRY_create_by_NID(X509_NAME_ENTRY *ne, int nid,
287		int type,
288		const unsigned char *bytes,
289	0	ossl_ssize_t len) {
290	0	const ASN1_OBJECT *obj = OBJ_nid2obj(nid);
291	0	if (obj == nullptr) {
292	0	OPENSSL_PUT_ERROR(X509, X509_R_UNKNOWN_NID);
293	0	return nullptr;
294	0	}
295	0	return X509_NAME_ENTRY_create_by_OBJ(ne, obj, type, bytes, len);
296	0	}
297
298		X509_NAME_ENTRY X509_NAME_ENTRY_create_by_OBJ(X509_NAME_ENTRY *ne,
299		const ASN1_OBJECT *obj, int type,
300		const unsigned char *bytes,
301	13.3k	ossl_ssize_t len) {
302	13.3k	X509_NAME_ENTRY *ret;
303
304	13.3k	if ((ne == nullptr) \|\| (*ne == nullptr)) {
305	13.3k	if ((ret = X509_NAME_ENTRY_new()) == nullptr) {
306	0	return nullptr;
307	0	}
308	13.3k	} else {
309	0	ret = *ne;
310	0	}
311
312	13.3k	if (!X509_NAME_ENTRY_set_object(ret, obj)) {
313	0	goto err;
314	0	}
315	13.3k	if (!X509_NAME_ENTRY_set_data(ret, type, bytes, len)) {
316	19	goto err;
317	19	}
318
319	13.3k	if ((ne != nullptr) && (*ne == nullptr)) {
320	0	*ne = ret;
321	0	}
322	13.3k	return ret;
323	19	err:
324	19	if ((ne == nullptr) \|\| (ret != *ne)) {
325	19	X509_NAME_ENTRY_free(ret);
326	19	}
327	19	return nullptr;
328	13.3k	}
329
330	13.3k	int X509_NAME_ENTRY_set_object(X509_NAME_ENTRY ne, const ASN1_OBJECT obj) {
331	13.3k	if ((ne == nullptr) \|\| (obj == nullptr)) {
332	0	OPENSSL_PUT_ERROR(X509, ERR_R_PASSED_NULL_PARAMETER);
333	0	return 0;
334	0	}
335	13.3k	ASN1_OBJECT_free(ne->object);
336	13.3k	ne->object = OBJ_dup(obj);
337	13.3k	return ((ne->object == nullptr) ? 0 : 1);
338	13.3k	}
339
340		int X509_NAME_ENTRY_set_data(X509_NAME_ENTRY *ne, int type,
341	13.3k	const unsigned char *bytes, ossl_ssize_t len) {
342	13.3k	if ((ne == nullptr) \|\| ((bytes == nullptr) && (len != 0))) {
343	0	return 0;
344	0	}
345	13.3k	if ((type > 0) && (type & MBSTRING_FLAG)) {
346	13.3k	ASN1_STRING *dst = &ne->value;
347	13.3k	return ASN1_STRING_set_by_NID(&dst, bytes, len, type,
348	13.3k	OBJ_obj2nid(ne->object)) != nullptr;
349	13.3k	}
350	0	if (len < 0) {
351	0	len = strlen((const char *)bytes);
352	0	}
353	0	if (!ASN1_STRING_set(&ne->value, bytes, len)) {
354	0	return 0;
355	0	}
356	0	if (type != V_ASN1_UNDEF) {
357	0	ne->value.type = type;
358	0	}
359	0	return 1;
360	0	}
361
362	390	ASN1_OBJECT X509_NAME_ENTRY_get_object(const X509_NAME_ENTRY ne) {
363	390	if (ne == nullptr) {
364	0	return nullptr;
365	0	}
366	390	return ne->object;
367	390	}
368
369	390	ASN1_STRING X509_NAME_ENTRY_get_data(const X509_NAME_ENTRY ne) {
370	390	if (ne == nullptr) {
371	0	return nullptr;
372	0	}
373		// This function is not const-correct for OpenSSL compatibility.
374	390	return const_cast<ASN1_STRING*>(&ne->value);
375	390	}