/src/openssl111/crypto/ts/ts_asn1.c
Line | Count | Source (jump to first uncovered line) |
1 | | /* |
2 | | * Copyright 2006-2016 The OpenSSL Project Authors. All Rights Reserved. |
3 | | * |
4 | | * Licensed under the OpenSSL license (the "License"). You may not use |
5 | | * this file except in compliance with the License. You can obtain a copy |
6 | | * in the file LICENSE in the source distribution or at |
7 | | * https://www.openssl.org/source/license.html |
8 | | */ |
9 | | |
10 | | #include <openssl/ts.h> |
11 | | #include <openssl/err.h> |
12 | | #include <openssl/asn1t.h> |
13 | | #include "ts_local.h" |
14 | | |
15 | | ASN1_SEQUENCE(TS_MSG_IMPRINT) = { |
16 | | ASN1_SIMPLE(TS_MSG_IMPRINT, hash_algo, X509_ALGOR), |
17 | | ASN1_SIMPLE(TS_MSG_IMPRINT, hashed_msg, ASN1_OCTET_STRING) |
18 | | } static_ASN1_SEQUENCE_END(TS_MSG_IMPRINT) |
19 | | |
20 | | IMPLEMENT_ASN1_FUNCTIONS_const(TS_MSG_IMPRINT) |
21 | | IMPLEMENT_ASN1_DUP_FUNCTION(TS_MSG_IMPRINT) |
22 | | TS_MSG_IMPRINT *d2i_TS_MSG_IMPRINT_bio(BIO *bp, TS_MSG_IMPRINT **a) |
23 | 0 | { |
24 | 0 | return ASN1_d2i_bio_of(TS_MSG_IMPRINT, TS_MSG_IMPRINT_new, |
25 | 0 | d2i_TS_MSG_IMPRINT, bp, a); |
26 | 0 | } |
27 | | |
28 | | int i2d_TS_MSG_IMPRINT_bio(BIO *bp, TS_MSG_IMPRINT *a) |
29 | 0 | { |
30 | 0 | return ASN1_i2d_bio_of_const(TS_MSG_IMPRINT, i2d_TS_MSG_IMPRINT, bp, a); |
31 | 0 | } |
32 | | #ifndef OPENSSL_NO_STDIO |
33 | | TS_MSG_IMPRINT *d2i_TS_MSG_IMPRINT_fp(FILE *fp, TS_MSG_IMPRINT **a) |
34 | 0 | { |
35 | 0 | return ASN1_d2i_fp_of(TS_MSG_IMPRINT, TS_MSG_IMPRINT_new, |
36 | 0 | d2i_TS_MSG_IMPRINT, fp, a); |
37 | 0 | } |
38 | | |
39 | | int i2d_TS_MSG_IMPRINT_fp(FILE *fp, TS_MSG_IMPRINT *a) |
40 | 0 | { |
41 | 0 | return ASN1_i2d_fp_of_const(TS_MSG_IMPRINT, i2d_TS_MSG_IMPRINT, fp, a); |
42 | 0 | } |
43 | | #endif |
44 | | |
45 | | ASN1_SEQUENCE(TS_REQ) = { |
46 | | ASN1_SIMPLE(TS_REQ, version, ASN1_INTEGER), |
47 | | ASN1_SIMPLE(TS_REQ, msg_imprint, TS_MSG_IMPRINT), |
48 | | ASN1_OPT(TS_REQ, policy_id, ASN1_OBJECT), |
49 | | ASN1_OPT(TS_REQ, nonce, ASN1_INTEGER), |
50 | | ASN1_OPT(TS_REQ, cert_req, ASN1_FBOOLEAN), |
51 | | ASN1_IMP_SEQUENCE_OF_OPT(TS_REQ, extensions, X509_EXTENSION, 0) |
52 | | } static_ASN1_SEQUENCE_END(TS_REQ) |
53 | | |
54 | | IMPLEMENT_ASN1_FUNCTIONS_const(TS_REQ) |
55 | | IMPLEMENT_ASN1_DUP_FUNCTION(TS_REQ) |
56 | | TS_REQ *d2i_TS_REQ_bio(BIO *bp, TS_REQ **a) |
57 | 0 | { |
58 | 0 | return ASN1_d2i_bio_of(TS_REQ, TS_REQ_new, d2i_TS_REQ, bp, a); |
59 | 0 | } |
60 | | |
61 | | int i2d_TS_REQ_bio(BIO *bp, TS_REQ *a) |
62 | 0 | { |
63 | 0 | return ASN1_i2d_bio_of_const(TS_REQ, i2d_TS_REQ, bp, a); |
64 | 0 | } |
65 | | #ifndef OPENSSL_NO_STDIO |
66 | | TS_REQ *d2i_TS_REQ_fp(FILE *fp, TS_REQ **a) |
67 | 0 | { |
68 | 0 | return ASN1_d2i_fp_of(TS_REQ, TS_REQ_new, d2i_TS_REQ, fp, a); |
69 | 0 | } |
70 | | |
71 | | int i2d_TS_REQ_fp(FILE *fp, TS_REQ *a) |
72 | 0 | { |
73 | 0 | return ASN1_i2d_fp_of_const(TS_REQ, i2d_TS_REQ, fp, a); |
74 | 0 | } |
75 | | #endif |
76 | | |
77 | | ASN1_SEQUENCE(TS_ACCURACY) = { |
78 | | ASN1_OPT(TS_ACCURACY, seconds, ASN1_INTEGER), |
79 | | ASN1_IMP_OPT(TS_ACCURACY, millis, ASN1_INTEGER, 0), |
80 | | ASN1_IMP_OPT(TS_ACCURACY, micros, ASN1_INTEGER, 1) |
81 | | } static_ASN1_SEQUENCE_END(TS_ACCURACY) |
82 | | |
83 | | IMPLEMENT_ASN1_FUNCTIONS_const(TS_ACCURACY) |
84 | | IMPLEMENT_ASN1_DUP_FUNCTION(TS_ACCURACY) |
85 | | |
86 | | ASN1_SEQUENCE(TS_TST_INFO) = { |
87 | | ASN1_SIMPLE(TS_TST_INFO, version, ASN1_INTEGER), |
88 | | ASN1_SIMPLE(TS_TST_INFO, policy_id, ASN1_OBJECT), |
89 | | ASN1_SIMPLE(TS_TST_INFO, msg_imprint, TS_MSG_IMPRINT), |
90 | | ASN1_SIMPLE(TS_TST_INFO, serial, ASN1_INTEGER), |
91 | | ASN1_SIMPLE(TS_TST_INFO, time, ASN1_GENERALIZEDTIME), |
92 | | ASN1_OPT(TS_TST_INFO, accuracy, TS_ACCURACY), |
93 | | ASN1_OPT(TS_TST_INFO, ordering, ASN1_FBOOLEAN), |
94 | | ASN1_OPT(TS_TST_INFO, nonce, ASN1_INTEGER), |
95 | | ASN1_EXP_OPT(TS_TST_INFO, tsa, GENERAL_NAME, 0), |
96 | | ASN1_IMP_SEQUENCE_OF_OPT(TS_TST_INFO, extensions, X509_EXTENSION, 1) |
97 | | } static_ASN1_SEQUENCE_END(TS_TST_INFO) |
98 | | |
99 | | IMPLEMENT_ASN1_FUNCTIONS_const(TS_TST_INFO) |
100 | | IMPLEMENT_ASN1_DUP_FUNCTION(TS_TST_INFO) |
101 | | TS_TST_INFO *d2i_TS_TST_INFO_bio(BIO *bp, TS_TST_INFO **a) |
102 | 0 | { |
103 | 0 | return ASN1_d2i_bio_of(TS_TST_INFO, TS_TST_INFO_new, d2i_TS_TST_INFO, bp, |
104 | 0 | a); |
105 | 0 | } |
106 | | |
107 | | int i2d_TS_TST_INFO_bio(BIO *bp, TS_TST_INFO *a) |
108 | 0 | { |
109 | 0 | return ASN1_i2d_bio_of_const(TS_TST_INFO, i2d_TS_TST_INFO, bp, a); |
110 | 0 | } |
111 | | #ifndef OPENSSL_NO_STDIO |
112 | | TS_TST_INFO *d2i_TS_TST_INFO_fp(FILE *fp, TS_TST_INFO **a) |
113 | 0 | { |
114 | 0 | return ASN1_d2i_fp_of(TS_TST_INFO, TS_TST_INFO_new, d2i_TS_TST_INFO, fp, |
115 | 0 | a); |
116 | 0 | } |
117 | | |
118 | | int i2d_TS_TST_INFO_fp(FILE *fp, TS_TST_INFO *a) |
119 | 0 | { |
120 | 0 | return ASN1_i2d_fp_of_const(TS_TST_INFO, i2d_TS_TST_INFO, fp, a); |
121 | 0 | } |
122 | | #endif |
123 | | |
124 | | ASN1_SEQUENCE(TS_STATUS_INFO) = { |
125 | | ASN1_SIMPLE(TS_STATUS_INFO, status, ASN1_INTEGER), |
126 | | ASN1_SEQUENCE_OF_OPT(TS_STATUS_INFO, text, ASN1_UTF8STRING), |
127 | | ASN1_OPT(TS_STATUS_INFO, failure_info, ASN1_BIT_STRING) |
128 | | } static_ASN1_SEQUENCE_END(TS_STATUS_INFO) |
129 | | |
130 | | IMPLEMENT_ASN1_FUNCTIONS_const(TS_STATUS_INFO) |
131 | | IMPLEMENT_ASN1_DUP_FUNCTION(TS_STATUS_INFO) |
132 | | |
133 | | static int ts_resp_set_tst_info(TS_RESP *a) |
134 | 221 | { |
135 | 221 | long status; |
136 | | |
137 | 221 | status = ASN1_INTEGER_get(a->status_info->status); |
138 | | |
139 | 221 | if (a->token) { |
140 | 99 | if (status != 0 && status != 1) { |
141 | 95 | TSerr(TS_F_TS_RESP_SET_TST_INFO, TS_R_TOKEN_PRESENT); |
142 | 95 | return 0; |
143 | 95 | } |
144 | 4 | TS_TST_INFO_free(a->tst_info); |
145 | 4 | a->tst_info = PKCS7_to_TS_TST_INFO(a->token); |
146 | 4 | if (!a->tst_info) { |
147 | 4 | TSerr(TS_F_TS_RESP_SET_TST_INFO, |
148 | 4 | TS_R_PKCS7_TO_TS_TST_INFO_FAILED); |
149 | 4 | return 0; |
150 | 4 | } |
151 | 122 | } else if (status == 0 || status == 1) { |
152 | 2 | TSerr(TS_F_TS_RESP_SET_TST_INFO, TS_R_TOKEN_NOT_PRESENT); |
153 | 2 | return 0; |
154 | 2 | } |
155 | | |
156 | 120 | return 1; |
157 | 221 | } |
158 | | |
159 | | static int ts_resp_cb(int op, ASN1_VALUE **pval, const ASN1_ITEM *it, |
160 | | void *exarg) |
161 | 49.8k | { |
162 | 49.8k | TS_RESP *ts_resp = (TS_RESP *)*pval; |
163 | 49.8k | if (op == ASN1_OP_NEW_POST) { |
164 | 9.84k | ts_resp->tst_info = NULL; |
165 | 39.9k | } else if (op == ASN1_OP_FREE_POST) { |
166 | 9.84k | TS_TST_INFO_free(ts_resp->tst_info); |
167 | 30.1k | } else if (op == ASN1_OP_D2I_POST) { |
168 | 221 | if (ts_resp_set_tst_info(ts_resp) == 0) |
169 | 101 | return 0; |
170 | 221 | } |
171 | 49.7k | return 1; |
172 | 49.8k | } |
173 | | |
174 | | ASN1_SEQUENCE_cb(TS_RESP, ts_resp_cb) = { |
175 | | ASN1_SIMPLE(TS_RESP, status_info, TS_STATUS_INFO), |
176 | | ASN1_OPT(TS_RESP, token, PKCS7), |
177 | | } static_ASN1_SEQUENCE_END_cb(TS_RESP, TS_RESP) |
178 | | |
179 | | IMPLEMENT_ASN1_FUNCTIONS_const(TS_RESP) |
180 | | |
181 | | IMPLEMENT_ASN1_DUP_FUNCTION(TS_RESP) |
182 | | |
183 | | TS_RESP *d2i_TS_RESP_bio(BIO *bp, TS_RESP **a) |
184 | 0 | { |
185 | 0 | return ASN1_d2i_bio_of(TS_RESP, TS_RESP_new, d2i_TS_RESP, bp, a); |
186 | 0 | } |
187 | | |
188 | | int i2d_TS_RESP_bio(BIO *bp, TS_RESP *a) |
189 | 0 | { |
190 | 0 | return ASN1_i2d_bio_of_const(TS_RESP, i2d_TS_RESP, bp, a); |
191 | 0 | } |
192 | | #ifndef OPENSSL_NO_STDIO |
193 | | TS_RESP *d2i_TS_RESP_fp(FILE *fp, TS_RESP **a) |
194 | 0 | { |
195 | 0 | return ASN1_d2i_fp_of(TS_RESP, TS_RESP_new, d2i_TS_RESP, fp, a); |
196 | 0 | } |
197 | | |
198 | | int i2d_TS_RESP_fp(FILE *fp, TS_RESP *a) |
199 | 0 | { |
200 | 0 | return ASN1_i2d_fp_of_const(TS_RESP, i2d_TS_RESP, fp, a); |
201 | 0 | } |
202 | | #endif |
203 | | |
204 | | ASN1_SEQUENCE(ESS_ISSUER_SERIAL) = { |
205 | | ASN1_SEQUENCE_OF(ESS_ISSUER_SERIAL, issuer, GENERAL_NAME), |
206 | | ASN1_SIMPLE(ESS_ISSUER_SERIAL, serial, ASN1_INTEGER) |
207 | | } static_ASN1_SEQUENCE_END(ESS_ISSUER_SERIAL) |
208 | | |
209 | | IMPLEMENT_ASN1_FUNCTIONS_const(ESS_ISSUER_SERIAL) |
210 | | IMPLEMENT_ASN1_DUP_FUNCTION(ESS_ISSUER_SERIAL) |
211 | | |
212 | | ASN1_SEQUENCE(ESS_CERT_ID) = { |
213 | | ASN1_SIMPLE(ESS_CERT_ID, hash, ASN1_OCTET_STRING), |
214 | | ASN1_OPT(ESS_CERT_ID, issuer_serial, ESS_ISSUER_SERIAL) |
215 | | } static_ASN1_SEQUENCE_END(ESS_CERT_ID) |
216 | | |
217 | | IMPLEMENT_ASN1_FUNCTIONS_const(ESS_CERT_ID) |
218 | | IMPLEMENT_ASN1_DUP_FUNCTION(ESS_CERT_ID) |
219 | | |
220 | | ASN1_SEQUENCE(ESS_SIGNING_CERT) = { |
221 | | ASN1_SEQUENCE_OF(ESS_SIGNING_CERT, cert_ids, ESS_CERT_ID), |
222 | | ASN1_SEQUENCE_OF_OPT(ESS_SIGNING_CERT, policy_info, POLICYINFO) |
223 | | } static_ASN1_SEQUENCE_END(ESS_SIGNING_CERT) |
224 | | |
225 | | IMPLEMENT_ASN1_FUNCTIONS_const(ESS_SIGNING_CERT) |
226 | | IMPLEMENT_ASN1_DUP_FUNCTION(ESS_SIGNING_CERT) |
227 | | |
228 | | ASN1_SEQUENCE(ESS_CERT_ID_V2) = { |
229 | | ASN1_OPT(ESS_CERT_ID_V2, hash_alg, X509_ALGOR), |
230 | | ASN1_SIMPLE(ESS_CERT_ID_V2, hash, ASN1_OCTET_STRING), |
231 | | ASN1_OPT(ESS_CERT_ID_V2, issuer_serial, ESS_ISSUER_SERIAL) |
232 | | } static_ASN1_SEQUENCE_END(ESS_CERT_ID_V2) |
233 | | |
234 | | IMPLEMENT_ASN1_FUNCTIONS_const(ESS_CERT_ID_V2) |
235 | | IMPLEMENT_ASN1_DUP_FUNCTION(ESS_CERT_ID_V2) |
236 | | |
237 | | ASN1_SEQUENCE(ESS_SIGNING_CERT_V2) = { |
238 | | ASN1_SEQUENCE_OF(ESS_SIGNING_CERT_V2, cert_ids, ESS_CERT_ID_V2), |
239 | | ASN1_SEQUENCE_OF_OPT(ESS_SIGNING_CERT_V2, policy_info, POLICYINFO) |
240 | | } static_ASN1_SEQUENCE_END(ESS_SIGNING_CERT_V2) |
241 | | |
242 | | IMPLEMENT_ASN1_FUNCTIONS_const(ESS_SIGNING_CERT_V2) |
243 | | IMPLEMENT_ASN1_DUP_FUNCTION(ESS_SIGNING_CERT_V2) |
244 | | |
245 | | /* Getting encapsulated TS_TST_INFO object from PKCS7. */ |
246 | | TS_TST_INFO *PKCS7_to_TS_TST_INFO(PKCS7 *token) |
247 | 4 | { |
248 | 4 | PKCS7_SIGNED *pkcs7_signed; |
249 | 4 | PKCS7 *enveloped; |
250 | 4 | ASN1_TYPE *tst_info_wrapper; |
251 | 4 | ASN1_OCTET_STRING *tst_info_der; |
252 | 4 | const unsigned char *p; |
253 | | |
254 | 4 | if (!PKCS7_type_is_signed(token)) { |
255 | 2 | TSerr(TS_F_PKCS7_TO_TS_TST_INFO, TS_R_BAD_PKCS7_TYPE); |
256 | 2 | return NULL; |
257 | 2 | } |
258 | 2 | if (PKCS7_get_detached(token)) { |
259 | 2 | TSerr(TS_F_PKCS7_TO_TS_TST_INFO, TS_R_DETACHED_CONTENT); |
260 | 2 | return NULL; |
261 | 2 | } |
262 | 0 | pkcs7_signed = token->d.sign; |
263 | 0 | enveloped = pkcs7_signed->contents; |
264 | 0 | if (OBJ_obj2nid(enveloped->type) != NID_id_smime_ct_TSTInfo) { |
265 | 0 | TSerr(TS_F_PKCS7_TO_TS_TST_INFO, TS_R_BAD_PKCS7_TYPE); |
266 | 0 | return NULL; |
267 | 0 | } |
268 | 0 | tst_info_wrapper = enveloped->d.other; |
269 | 0 | if (tst_info_wrapper->type != V_ASN1_OCTET_STRING) { |
270 | 0 | TSerr(TS_F_PKCS7_TO_TS_TST_INFO, TS_R_BAD_TYPE); |
271 | 0 | return NULL; |
272 | 0 | } |
273 | 0 | tst_info_der = tst_info_wrapper->value.octet_string; |
274 | 0 | p = tst_info_der->data; |
275 | 0 | return d2i_TS_TST_INFO(NULL, &p, tst_info_der->length); |
276 | 0 | } |