/src/libressl/crypto/x509/x509_ocsp.c

Source (jump to first uncovered line)
/* $OpenBSD: x509_ocsp.c,v 1.2 2022/01/07 09:45:52 tb Exp $ */
/* Written by Dr Stephen N Henson (steve@openssl.org) for the OpenSSL
 * project 1999.
 */
/* ====================================================================
 * Copyright (c) 1999 The OpenSSL Project.  All rights reserved.
 *
 * Redistribution and use in source and binary forms, with or without
 * modification, are permitted provided that the following conditions
 * are met:
 *
 * 1. Redistributions of source code must retain the above copyright
 *    notice, this list of conditions and the following disclaimer.
 *
 * 2. Redistributions in binary form must reproduce the above copyright
 *    notice, this list of conditions and the following disclaimer in
 *    the documentation and/or other materials provided with the
 *    distribution.
 *
 * 3. All advertising materials mentioning features or use of this
 *    software must display the following acknowledgment:
 *    "This product includes software developed by the OpenSSL Project
 *    for use in the OpenSSL Toolkit. (http://www.OpenSSL.org/)"
 *
 * 4. The names "OpenSSL Toolkit" and "OpenSSL Project" must not be used to
 *    endorse or promote products derived from this software without
 *    prior written permission. For written permission, please contact
 *    licensing@OpenSSL.org.
 *
 * 5. Products derived from this software may not be called "OpenSSL"
 *    nor may "OpenSSL" appear in their names without prior written
 *    permission of the OpenSSL Project.
 *
 * 6. Redistributions of any form whatsoever must retain the following
 *    acknowledgment:
 *    "This product includes software developed by the OpenSSL Project
 *    for use in the OpenSSL Toolkit (http://www.OpenSSL.org/)"
 *
 * THIS SOFTWARE IS PROVIDED BY THE OpenSSL PROJECT ``AS IS'' AND ANY
 * EXPRESSED OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
 * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR
 * PURPOSE ARE DISCLAIMED.  IN NO EVENT SHALL THE OpenSSL PROJECT OR
 * ITS CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL,
 * SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT
 * NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES;
 * LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
 * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT,
 * STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE)
 * ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED
 * OF THE POSSIBILITY OF SUCH DAMAGE.
 * ====================================================================
 *
 * This product includes cryptographic software written by Eric Young
 * (eay@cryptsoft.com).  This product includes software written by Tim
 * Hudson (tjh@cryptsoft.com).
 *
 */

#include <stdio.h>
#include <string.h>

#include <openssl/opensslconf.h>

#ifndef OPENSSL_NO_OCSP

#include <openssl/asn1.h>
#include <openssl/conf.h>
#include <openssl/err.h>
#include <openssl/ocsp.h>
#include <openssl/x509v3.h>

#include "ocsp_local.h"

/* OCSP extensions and a couple of CRL entry extensions
 */

static int i2r_ocsp_crlid(const X509V3_EXT_METHOD *method, void *nonce,
    BIO *out, int indent);
static int i2r_ocsp_acutoff(const X509V3_EXT_METHOD *method, void *nonce,
    BIO *out, int indent);
static int i2r_object(const X509V3_EXT_METHOD *method, void *obj, BIO *out,
    int indent);

static void *ocsp_nonce_new(void);
static int i2d_ocsp_nonce(void *a, unsigned char **pp);
static void *d2i_ocsp_nonce(void *a, const unsigned char **pp, long length);
static void ocsp_nonce_free(void *a);
static int i2r_ocsp_nonce(const X509V3_EXT_METHOD *method, void *nonce,
    BIO *out, int indent);

static int i2r_ocsp_nocheck(const X509V3_EXT_METHOD *method,
    void *nocheck, BIO *out, int indent);
static void *s2i_ocsp_nocheck(const X509V3_EXT_METHOD *method, X509V3_CTX *ctx,
    const char *str);
static int i2r_ocsp_serviceloc(const X509V3_EXT_METHOD *method, void *in,
    BIO *bp, int ind);

const X509V3_EXT_METHOD v3_ocsp_crlid = {
  .ext_nid = NID_id_pkix_OCSP_CrlID,
  .ext_flags = 0,
  .it = &OCSP_CRLID_it,
  .ext_new = NULL,
  .ext_free = NULL,
  .d2i = NULL,
  .i2d = NULL,
  .i2s = NULL,
  .s2i = NULL,
  .i2v = NULL,
  .v2i = NULL,
  .i2r = i2r_ocsp_crlid,
  .r2i = NULL,
  .usr_data = NULL,
};

const X509V3_EXT_METHOD v3_ocsp_acutoff = {
  .ext_nid = NID_id_pkix_OCSP_archiveCutoff,
  .ext_flags = 0,
  .it = &ASN1_GENERALIZEDTIME_it,
  .ext_new = NULL,
  .ext_free = NULL,
  .d2i = NULL,
  .i2d = NULL,
  .i2s = NULL,
  .s2i = NULL,
  .i2v = NULL,
  .v2i = NULL,
  .i2r = i2r_ocsp_acutoff,
  .r2i = NULL,
  .usr_data = NULL,
};

const X509V3_EXT_METHOD v3_crl_invdate = {
  .ext_nid = NID_invalidity_date,
  .ext_flags = 0,
  .it = &ASN1_GENERALIZEDTIME_it,
  .ext_new = NULL,
  .ext_free = NULL,
  .d2i = NULL,
  .i2d = NULL,
  .i2s = NULL,
  .s2i = NULL,
  .i2v = NULL,
  .v2i = NULL,
  .i2r = i2r_ocsp_acutoff,
  .r2i = NULL,
  .usr_data = NULL,
};

const X509V3_EXT_METHOD v3_crl_hold = {
  .ext_nid = NID_hold_instruction_code,
  .ext_flags = 0,
  .it = &ASN1_OBJECT_it,
  .ext_new = NULL,
  .ext_free = NULL,
  .d2i = NULL,
  .i2d = NULL,
  .i2s = NULL,
  .s2i = NULL,
  .i2v = NULL,
  .v2i = NULL,
  .i2r = i2r_object,
  .r2i = NULL,
  .usr_data = NULL,
};

const X509V3_EXT_METHOD v3_ocsp_nonce = {
  .ext_nid = NID_id_pkix_OCSP_Nonce,
  .ext_flags = 0,
  .it = NULL,
  .ext_new = ocsp_nonce_new,
  .ext_free = ocsp_nonce_free,
  .d2i = d2i_ocsp_nonce,
  .i2d = i2d_ocsp_nonce,
  .i2s = NULL,
  .s2i = NULL,
  .i2v = NULL,
  .v2i = NULL,
  .i2r = i2r_ocsp_nonce,
  .r2i = NULL,
  .usr_data = NULL,
};

const X509V3_EXT_METHOD v3_ocsp_nocheck = {
  .ext_nid = NID_id_pkix_OCSP_noCheck,
  .ext_flags = 0,
  .it = &ASN1_NULL_it,
  .ext_new = NULL,
  .ext_free = NULL,
  .d2i = NULL,
  .i2d = NULL,
  .i2s = NULL,
  .s2i = s2i_ocsp_nocheck,
  .i2v = NULL,
  .v2i = NULL,
  .i2r = i2r_ocsp_nocheck,
  .r2i = NULL,
  .usr_data = NULL,
};

const X509V3_EXT_METHOD v3_ocsp_serviceloc = {
  .ext_nid = NID_id_pkix_OCSP_serviceLocator,
  .ext_flags = 0,
  .it = &OCSP_SERVICELOC_it,
  .ext_new = NULL,
  .ext_free = NULL,
  .d2i = NULL,
  .i2d = NULL,
  .i2s = NULL,
  .s2i = NULL,
  .i2v = NULL,
  .v2i = NULL,
  .i2r = i2r_ocsp_serviceloc,
  .r2i = NULL,
  .usr_data = NULL,
};

static int
i2r_ocsp_crlid(const X509V3_EXT_METHOD *method, void *in, BIO *bp, int ind)
{
  OCSP_CRLID *a = in;
  if (a->crlUrl) {
    if (BIO_printf(bp, "%*scrlUrl: ", ind, "") <= 0)
      goto err;
    if (!ASN1_STRING_print(bp, (ASN1_STRING*)a->crlUrl))
      goto err;
    if (BIO_write(bp, "\n", 1) <= 0)
      goto err;
  }
  if (a->crlNum) {
    if (BIO_printf(bp, "%*scrlNum: ", ind, "") <= 0)
      goto err;
    if (i2a_ASN1_INTEGER(bp, a->crlNum) <= 0)
      goto err;
    if (BIO_write(bp, "\n", 1) <= 0)
      goto err;
  }
  if (a->crlTime) {
    if (BIO_printf(bp, "%*scrlTime: ", ind, "") <= 0)
      goto err;
    if (!ASN1_GENERALIZEDTIME_print(bp, a->crlTime))
      goto err;
    if (BIO_write(bp, "\n", 1) <= 0)
      goto err;
  }
  return 1;

err:
  return 0;
}

static int
i2r_ocsp_acutoff(const X509V3_EXT_METHOD *method, void *cutoff, BIO *bp,
    int ind)
{
  if (BIO_printf(bp, "%*s", ind, "") <= 0)
    return 0;
  if (!ASN1_GENERALIZEDTIME_print(bp, cutoff))
    return 0;
  return 1;
}

static int
i2r_object(const X509V3_EXT_METHOD *method, void *oid, BIO *bp, int ind)
{
  if (BIO_printf(bp, "%*s", ind, "") <= 0)
    return 0;
  if (i2a_ASN1_OBJECT(bp, oid) <= 0)
    return 0;
  return 1;
}

/* OCSP nonce. This is needs special treatment because it doesn't have
 * an ASN1 encoding at all: it just contains arbitrary data.
 */

static void *
ocsp_nonce_new(void)
{
  return ASN1_OCTET_STRING_new();
}

static int
i2d_ocsp_nonce(void *a, unsigned char **pp)
{
  ASN1_OCTET_STRING *os = a;

  if (pp) {
    memcpy(*pp, os->data, os->length);
    *pp += os->length;
  }
  return os->length;
}

static void *
d2i_ocsp_nonce(void *a, const unsigned char **pp, long length)
{
  ASN1_OCTET_STRING *os, **pos;

  pos = a;
  if (pos == NULL || *pos == NULL) {
    os = ASN1_OCTET_STRING_new();
    if (os == NULL)
      goto err;
  } else
    os = *pos;
  if (ASN1_OCTET_STRING_set(os, *pp, length) == 0)
    goto err;

  *pp += length;

  if (pos != NULL)
    *pos = os;
  return os;

err:
  if (pos == NULL || *pos != os)
    ASN1_OCTET_STRING_free(os);
  OCSPerror(ERR_R_MALLOC_FAILURE);
  return NULL;
}

static void
ocsp_nonce_free(void *a)
{
  ASN1_OCTET_STRING_free(a);
}

static int
i2r_ocsp_nonce(const X509V3_EXT_METHOD *method, void *nonce, BIO *out,
    int indent)
{
  if (BIO_printf(out, "%*s", indent, "") <= 0)
    return 0;
  if (i2a_ASN1_STRING(out, nonce, V_ASN1_OCTET_STRING) <= 0)
    return 0;
  return 1;
}

/* Nocheck is just a single NULL. Don't print anything and always set it */

static int
i2r_ocsp_nocheck(const X509V3_EXT_METHOD *method, void *nocheck, BIO *out,
    int indent)
{
  return 1;
}

static void *
s2i_ocsp_nocheck(const X509V3_EXT_METHOD *method, X509V3_CTX *ctx,
    const char *str)
{
  return ASN1_NULL_new();
}

static int
i2r_ocsp_serviceloc(const X509V3_EXT_METHOD *method, void *in, BIO *bp, int ind)
{
  int i;
  OCSP_SERVICELOC *a = in;
  ACCESS_DESCRIPTION *ad;

  if (BIO_printf(bp, "%*sIssuer: ", ind, "") <= 0)
    goto err;
  if (X509_NAME_print_ex(bp, a->issuer, 0, XN_FLAG_ONELINE) <= 0)
    goto err;
  for (i = 0; i < sk_ACCESS_DESCRIPTION_num(a->locator); i++) {
    ad = sk_ACCESS_DESCRIPTION_value(a->locator, i);
    if (BIO_printf(bp, "\n%*s", (2 * ind), "") <= 0)
      goto err;
    if (i2a_ASN1_OBJECT(bp, ad->method) <= 0)
      goto err;
    if (BIO_puts(bp, " - ") <= 0)
      goto err;
    if (GENERAL_NAME_print(bp, ad->location) <= 0)
      goto err;
  }
  return 1;

err:
  return 0;
}
#endif

Coverage Report

Created: 2022-08-24 06:30

Line	Count	Source (jump to first uncovered line)
1		/* $OpenBSD: x509_ocsp.c,v 1.2 2022/01/07 09:45:52 tb Exp $ */
2		/* Written by Dr Stephen N Henson (steve@openssl.org) for the OpenSSL
3		* project 1999.
4		*/
5		/* ====================================================================
6		* Copyright (c) 1999 The OpenSSL Project. All rights reserved.
7		*
8		* Redistribution and use in source and binary forms, with or without
9		* modification, are permitted provided that the following conditions
10		* are met:
11		*
12		* 1. Redistributions of source code must retain the above copyright
13		* notice, this list of conditions and the following disclaimer.
14		*
15		* 2. Redistributions in binary form must reproduce the above copyright
16		* notice, this list of conditions and the following disclaimer in
17		* the documentation and/or other materials provided with the
18		* distribution.
19		*
20		* 3. All advertising materials mentioning features or use of this
21		* software must display the following acknowledgment:
22		* "This product includes software developed by the OpenSSL Project
23		* for use in the OpenSSL Toolkit. (http://www.OpenSSL.org/)"
24		*
25		* 4. The names "OpenSSL Toolkit" and "OpenSSL Project" must not be used to
26		* endorse or promote products derived from this software without
27		* prior written permission. For written permission, please contact
28		* licensing@OpenSSL.org.
29		*
30		* 5. Products derived from this software may not be called "OpenSSL"
31		* nor may "OpenSSL" appear in their names without prior written
32		* permission of the OpenSSL Project.
33		*
34		* 6. Redistributions of any form whatsoever must retain the following
35		* acknowledgment:
36		* "This product includes software developed by the OpenSSL Project
37		* for use in the OpenSSL Toolkit (http://www.OpenSSL.org/)"
38		*
39		* THIS SOFTWARE IS PROVIDED BY THE OpenSSL PROJECT ``AS IS'' AND ANY
40		* EXPRESSED OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
41		* IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR
42		* PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE OpenSSL PROJECT OR
43		* ITS CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL,
44		* SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT
45		* NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES;
46		* LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
47		* HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT,
48		* STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE)
49		* ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED
50		* OF THE POSSIBILITY OF SUCH DAMAGE.
51		* ====================================================================
52		*
53		* This product includes cryptographic software written by Eric Young
54		* (eay@cryptsoft.com). This product includes software written by Tim
55		* Hudson (tjh@cryptsoft.com).
56		*
57		*/
58
59		#include <stdio.h>
60		#include <string.h>
61
62		#include <openssl/opensslconf.h>
63
64		#ifndef OPENSSL_NO_OCSP
65
66		#include <openssl/asn1.h>
67		#include <openssl/conf.h>
68		#include <openssl/err.h>
69		#include <openssl/ocsp.h>
70		#include <openssl/x509v3.h>
71
72		#include "ocsp_local.h"
73
74		/* OCSP extensions and a couple of CRL entry extensions
75		*/
76
77		static int i2r_ocsp_crlid(const X509V3_EXT_METHOD method, void nonce,
78		BIO *out, int indent);
79		static int i2r_ocsp_acutoff(const X509V3_EXT_METHOD method, void nonce,
80		BIO *out, int indent);
81		static int i2r_object(const X509V3_EXT_METHOD method, void obj, BIO *out,
82		int indent);
83
84		static void *ocsp_nonce_new(void);
85		static int i2d_ocsp_nonce(void a, unsigned char *pp);
86		static void d2i_ocsp_nonce(void a, const unsigned char **pp, long length);
87		static void ocsp_nonce_free(void *a);
88		static int i2r_ocsp_nonce(const X509V3_EXT_METHOD method, void nonce,
89		BIO *out, int indent);
90
91		static int i2r_ocsp_nocheck(const X509V3_EXT_METHOD *method,
92		void nocheck, BIO out, int indent);
93		static void s2i_ocsp_nocheck(const X509V3_EXT_METHOD method, X509V3_CTX *ctx,
94		const char *str);
95		static int i2r_ocsp_serviceloc(const X509V3_EXT_METHOD method, void in,
96		BIO *bp, int ind);
97
98		const X509V3_EXT_METHOD v3_ocsp_crlid = {
99		.ext_nid = NID_id_pkix_OCSP_CrlID,
100		.ext_flags = 0,
101		.it = &OCSP_CRLID_it,
102		.ext_new = NULL,
103		.ext_free = NULL,
104		.d2i = NULL,
105		.i2d = NULL,
106		.i2s = NULL,
107		.s2i = NULL,
108		.i2v = NULL,
109		.v2i = NULL,
110		.i2r = i2r_ocsp_crlid,
111		.r2i = NULL,
112		.usr_data = NULL,
113		};
114
115		const X509V3_EXT_METHOD v3_ocsp_acutoff = {
116		.ext_nid = NID_id_pkix_OCSP_archiveCutoff,
117		.ext_flags = 0,
118		.it = &ASN1_GENERALIZEDTIME_it,
119		.ext_new = NULL,
120		.ext_free = NULL,
121		.d2i = NULL,
122		.i2d = NULL,
123		.i2s = NULL,
124		.s2i = NULL,
125		.i2v = NULL,
126		.v2i = NULL,
127		.i2r = i2r_ocsp_acutoff,
128		.r2i = NULL,
129		.usr_data = NULL,
130		};
131
132		const X509V3_EXT_METHOD v3_crl_invdate = {
133		.ext_nid = NID_invalidity_date,
134		.ext_flags = 0,
135		.it = &ASN1_GENERALIZEDTIME_it,
136		.ext_new = NULL,
137		.ext_free = NULL,
138		.d2i = NULL,
139		.i2d = NULL,
140		.i2s = NULL,
141		.s2i = NULL,
142		.i2v = NULL,
143		.v2i = NULL,
144		.i2r = i2r_ocsp_acutoff,
145		.r2i = NULL,
146		.usr_data = NULL,
147		};
148
149		const X509V3_EXT_METHOD v3_crl_hold = {
150		.ext_nid = NID_hold_instruction_code,
151		.ext_flags = 0,
152		.it = &ASN1_OBJECT_it,
153		.ext_new = NULL,
154		.ext_free = NULL,
155		.d2i = NULL,
156		.i2d = NULL,
157		.i2s = NULL,
158		.s2i = NULL,
159		.i2v = NULL,
160		.v2i = NULL,
161		.i2r = i2r_object,
162		.r2i = NULL,
163		.usr_data = NULL,
164		};
165
166		const X509V3_EXT_METHOD v3_ocsp_nonce = {
167		.ext_nid = NID_id_pkix_OCSP_Nonce,
168		.ext_flags = 0,
169		.it = NULL,
170		.ext_new = ocsp_nonce_new,
171		.ext_free = ocsp_nonce_free,
172		.d2i = d2i_ocsp_nonce,
173		.i2d = i2d_ocsp_nonce,
174		.i2s = NULL,
175		.s2i = NULL,
176		.i2v = NULL,
177		.v2i = NULL,
178		.i2r = i2r_ocsp_nonce,
179		.r2i = NULL,
180		.usr_data = NULL,
181		};
182
183		const X509V3_EXT_METHOD v3_ocsp_nocheck = {
184		.ext_nid = NID_id_pkix_OCSP_noCheck,
185		.ext_flags = 0,
186		.it = &ASN1_NULL_it,
187		.ext_new = NULL,
188		.ext_free = NULL,
189		.d2i = NULL,
190		.i2d = NULL,
191		.i2s = NULL,
192		.s2i = s2i_ocsp_nocheck,
193		.i2v = NULL,
194		.v2i = NULL,
195		.i2r = i2r_ocsp_nocheck,
196		.r2i = NULL,
197		.usr_data = NULL,
198		};
199
200		const X509V3_EXT_METHOD v3_ocsp_serviceloc = {
201		.ext_nid = NID_id_pkix_OCSP_serviceLocator,
202		.ext_flags = 0,
203		.it = &OCSP_SERVICELOC_it,
204		.ext_new = NULL,
205		.ext_free = NULL,
206		.d2i = NULL,
207		.i2d = NULL,
208		.i2s = NULL,
209		.s2i = NULL,
210		.i2v = NULL,
211		.v2i = NULL,
212		.i2r = i2r_ocsp_serviceloc,
213		.r2i = NULL,
214		.usr_data = NULL,
215		};
216
217		static int
218		i2r_ocsp_crlid(const X509V3_EXT_METHOD method, void in, BIO *bp, int ind)
219	5	{
220	5	OCSP_CRLID *a = in;
221	5	if (a->crlUrl) {
222	0	if (BIO_printf(bp, "%*scrlUrl: ", ind, "") <= 0)
223	0	goto err;
224	0	if (!ASN1_STRING_print(bp, (ASN1_STRING*)a->crlUrl))
225	0	goto err;
226	0	if (BIO_write(bp, "\n", 1) <= 0)
227	0	goto err;
228	0	}
229	5	if (a->crlNum) {
230	0	if (BIO_printf(bp, "%*scrlNum: ", ind, "") <= 0)
231	0	goto err;
232	0	if (i2a_ASN1_INTEGER(bp, a->crlNum) <= 0)
233	0	goto err;
234	0	if (BIO_write(bp, "\n", 1) <= 0)
235	0	goto err;
236	0	}
237	5	if (a->crlTime) {
238	0	if (BIO_printf(bp, "%*scrlTime: ", ind, "") <= 0)
239	0	goto err;
240	0	if (!ASN1_GENERALIZEDTIME_print(bp, a->crlTime))
241	0	goto err;
242	0	if (BIO_write(bp, "\n", 1) <= 0)
243	0	goto err;
244	0	}
245	5	return 1;
246
247	0	err:
248	0	return 0;
249	5	}
250
251		static int
252		i2r_ocsp_acutoff(const X509V3_EXT_METHOD method, void cutoff, BIO *bp,
253		int ind)
254	1.18k	{
255	1.18k	if (BIO_printf(bp, "%*s", ind, "") <= 0)
256	0	return 0;
257	1.18k	if (!ASN1_GENERALIZEDTIME_print(bp, cutoff))
258	0	return 0;
259	1.18k	return 1;
260	1.18k	}
261
262		static int
263		i2r_object(const X509V3_EXT_METHOD method, void oid, BIO *bp, int ind)
264	25	{
265	25	if (BIO_printf(bp, "%*s", ind, "") <= 0)
266	0	return 0;
267	25	if (i2a_ASN1_OBJECT(bp, oid) <= 0)
268	0	return 0;
269	25	return 1;
270	25	}
271
272		/* OCSP nonce. This is needs special treatment because it doesn't have
273		* an ASN1 encoding at all: it just contains arbitrary data.
274		*/
275
276		static void *
277		ocsp_nonce_new(void)
278	0	{
279	0	return ASN1_OCTET_STRING_new();
280	0	}
281
282		static int
283		i2d_ocsp_nonce(void a, unsigned char *pp)
284	0	{
285	0	ASN1_OCTET_STRING *os = a;
286
287	0	if (pp) {
288	0	memcpy(*pp, os->data, os->length);
289	0	*pp += os->length;
290	0	}
291	0	return os->length;
292	0	}
293
294		static void *
295		d2i_ocsp_nonce(void a, const unsigned char *pp, long length)
296	17	{
297	17	ASN1_OCTET_STRING os, *pos;
298
299	17	pos = a;
300	17	if (pos == NULL \|\| *pos == NULL) {
301	17	os = ASN1_OCTET_STRING_new();
302	17	if (os == NULL)
303	0	goto err;
304	17	} else
305	0	os = *pos;
306	17	if (ASN1_OCTET_STRING_set(os, *pp, length) == 0)
307	0	goto err;
308
309	17	*pp += length;
310
311	17	if (pos != NULL)
312	0	*pos = os;
313	17	return os;
314
315	0	err:
316	0	if (pos == NULL \|\| *pos != os)
317	0	ASN1_OCTET_STRING_free(os);
318	0	OCSPerror(ERR_R_MALLOC_FAILURE);
319	0	return NULL;
320	17	}
321
322		static void
323		ocsp_nonce_free(void *a)
324	17	{
325	17	ASN1_OCTET_STRING_free(a);
326	17	}
327
328		static int
329		i2r_ocsp_nonce(const X509V3_EXT_METHOD method, void nonce, BIO *out,
330		int indent)
331	17	{
332	17	if (BIO_printf(out, "%*s", indent, "") <= 0)
333	0	return 0;
334	17	if (i2a_ASN1_STRING(out, nonce, V_ASN1_OCTET_STRING) <= 0)
335	0	return 0;
336	17	return 1;
337	17	}
338
339		/* Nocheck is just a single NULL. Don't print anything and always set it */
340
341		static int
342		i2r_ocsp_nocheck(const X509V3_EXT_METHOD method, void nocheck, BIO *out,
343		int indent)
344	3	{
345	3	return 1;
346	3	}
347
348		static void *
349		s2i_ocsp_nocheck(const X509V3_EXT_METHOD method, X509V3_CTX ctx,
350		const char *str)
351	0	{
352	0	return ASN1_NULL_new();
353	0	}
354
355		static int
356		i2r_ocsp_serviceloc(const X509V3_EXT_METHOD method, void in, BIO *bp, int ind)
357	1	{
358	1	int i;
359	1	OCSP_SERVICELOC *a = in;
360	1	ACCESS_DESCRIPTION *ad;
361
362	1	if (BIO_printf(bp, "%*sIssuer: ", ind, "") <= 0)
363	0	goto err;
364	1	if (X509_NAME_print_ex(bp, a->issuer, 0, XN_FLAG_ONELINE) <= 0)
365	1	goto err;
366	0	for (i = 0; i < sk_ACCESS_DESCRIPTION_num(a->locator); i++) {
367	0	ad = sk_ACCESS_DESCRIPTION_value(a->locator, i);
368	0	if (BIO_printf(bp, "\n%s", (2 ind), "") <= 0)
369	0	goto err;
370	0	if (i2a_ASN1_OBJECT(bp, ad->method) <= 0)
371	0	goto err;
372	0	if (BIO_puts(bp, " - ") <= 0)
373	0	goto err;
374	0	if (GENERAL_NAME_print(bp, ad->location) <= 0)
375	0	goto err;
376	0	}
377	0	return 1;
378
379	1	err:
380	1	return 0;
381	0	}
382		#endif