/src/openssl30/crypto/ocsp/v3_ocsp.c

Source (jump to first uncovered line)
/*
 * Copyright 2000-2021 The OpenSSL Project Authors. All Rights Reserved.
 *
 * Licensed under the Apache License 2.0 (the "License").  You may not use
 * this file except in compliance with the License.  You can obtain a copy
 * in the file LICENSE in the source distribution or at
 * https://www.openssl.org/source/license.html
 */

#include <stdio.h>
#include "internal/cryptlib.h"
#include <openssl/conf.h>
#include <openssl/asn1.h>
#include <openssl/ocsp.h>
#include "ocsp_local.h"
#include <openssl/x509v3.h>
#include "../x509/ext_dat.h"

/*
 * OCSP extensions and a couple of CRL entry extensions
 */

static int i2r_ocsp_crlid(const X509V3_EXT_METHOD *method, void *nonce,
                          BIO *out, int indent);
static int i2r_ocsp_acutoff(const X509V3_EXT_METHOD *method, void *nonce,
                            BIO *out, int indent);
static int i2r_object(const X509V3_EXT_METHOD *method, void *obj, BIO *out,
                      int indent);

static void *ocsp_nonce_new(void);
static int i2d_ocsp_nonce(const void *a, unsigned char **pp);
static void *d2i_ocsp_nonce(void *a, const unsigned char **pp, long length);
static void ocsp_nonce_free(void *a);
static int i2r_ocsp_nonce(const X509V3_EXT_METHOD *method, void *nonce,
                          BIO *out, int indent);

static int i2r_ocsp_nocheck(const X509V3_EXT_METHOD *method,
                            void *nocheck, BIO *out, int indent);
static void *s2i_ocsp_nocheck(const X509V3_EXT_METHOD *method,
                              X509V3_CTX *ctx, const char *str);
static int i2r_ocsp_serviceloc(const X509V3_EXT_METHOD *method, void *in,
                               BIO *bp, int ind);

const X509V3_EXT_METHOD ossl_v3_ocsp_crlid = {
    NID_id_pkix_OCSP_CrlID, 0, ASN1_ITEM_ref(OCSP_CRLID),
    0, 0, 0, 0,
    0, 0,
    0, 0,
    i2r_ocsp_crlid, 0,
    NULL
};

const X509V3_EXT_METHOD ossl_v3_ocsp_acutoff = {
    NID_id_pkix_OCSP_archiveCutoff, 0, ASN1_ITEM_ref(ASN1_GENERALIZEDTIME),
    0, 0, 0, 0,
    0, 0,
    0, 0,
    i2r_ocsp_acutoff, 0,
    NULL
};

const X509V3_EXT_METHOD ossl_v3_crl_invdate = {
    NID_invalidity_date, 0, ASN1_ITEM_ref(ASN1_GENERALIZEDTIME),
    0, 0, 0, 0,
    0, 0,
    0, 0,
    i2r_ocsp_acutoff, 0,
    NULL
};

const X509V3_EXT_METHOD ossl_v3_crl_hold = {
    NID_hold_instruction_code, 0, ASN1_ITEM_ref(ASN1_OBJECT),
    0, 0, 0, 0,
    0, 0,
    0, 0,
    i2r_object, 0,
    NULL
};

const X509V3_EXT_METHOD ossl_v3_ocsp_nonce = {
    NID_id_pkix_OCSP_Nonce, 0, NULL,
    ocsp_nonce_new,
    ocsp_nonce_free,
    d2i_ocsp_nonce,
    i2d_ocsp_nonce,
    0, 0,
    0, 0,
    i2r_ocsp_nonce, 0,
    NULL
};

const X509V3_EXT_METHOD ossl_v3_ocsp_nocheck = {
    NID_id_pkix_OCSP_noCheck, 0, ASN1_ITEM_ref(ASN1_NULL),
    0, 0, 0, 0,
    0, s2i_ocsp_nocheck,
    0, 0,
    i2r_ocsp_nocheck, 0,
    NULL
};

const X509V3_EXT_METHOD ossl_v3_ocsp_serviceloc = {
    NID_id_pkix_OCSP_serviceLocator, 0, ASN1_ITEM_ref(OCSP_SERVICELOC),
    0, 0, 0, 0,
    0, 0,
    0, 0,
    i2r_ocsp_serviceloc, 0,
    NULL
};

static int i2r_ocsp_crlid(const X509V3_EXT_METHOD *method, void *in, BIO *bp,
                          int ind)
{
    OCSP_CRLID *a = in;
    if (a->crlUrl) {
        if (BIO_printf(bp, "%*scrlUrl: ", ind, "") <= 0)
            goto err;
        if (!ASN1_STRING_print(bp, (ASN1_STRING *)a->crlUrl))
            goto err;
        if (BIO_write(bp, "\n", 1) <= 0)
            goto err;
    }
    if (a->crlNum) {
        if (BIO_printf(bp, "%*scrlNum: ", ind, "") <= 0)
            goto err;
        if (i2a_ASN1_INTEGER(bp, a->crlNum) <= 0)
            goto err;
        if (BIO_write(bp, "\n", 1) <= 0)
            goto err;
    }
    if (a->crlTime) {
        if (BIO_printf(bp, "%*scrlTime: ", ind, "") <= 0)
            goto err;
        if (!ASN1_GENERALIZEDTIME_print(bp, a->crlTime))
            goto err;
        if (BIO_write(bp, "\n", 1) <= 0)
            goto err;
    }
    return 1;
 err:
    return 0;
}

static int i2r_ocsp_acutoff(const X509V3_EXT_METHOD *method, void *cutoff,
                            BIO *bp, int ind)
{
    if (BIO_printf(bp, "%*s", ind, "") <= 0)
        return 0;
    if (!ASN1_GENERALIZEDTIME_print(bp, cutoff))
        return 0;
    return 1;
}

static int i2r_object(const X509V3_EXT_METHOD *method, void *oid, BIO *bp,
                      int ind)
{
    if (BIO_printf(bp, "%*s", ind, "") <= 0)
        return 0;
    if (i2a_ASN1_OBJECT(bp, oid) <= 0)
        return 0;
    return 1;
}

/*
 * OCSP nonce. This is needs special treatment because it doesn't have an
 * ASN1 encoding at all: it just contains arbitrary data.
 */

static void *ocsp_nonce_new(void)
{
    return ASN1_OCTET_STRING_new();
}

static int i2d_ocsp_nonce(const void *a, unsigned char **pp)
{
    const ASN1_OCTET_STRING *os = a;
    if (pp) {
        memcpy(*pp, os->data, os->length);
        *pp += os->length;
    }
    return os->length;
}

static void *d2i_ocsp_nonce(void *a, const unsigned char **pp, long length)
{
    ASN1_OCTET_STRING *os, **pos;
    pos = a;
    if (pos == NULL || *pos == NULL) {
        os = ASN1_OCTET_STRING_new();
        if (os == NULL)
            goto err;
    } else {
        os = *pos;
    }
    if (!ASN1_OCTET_STRING_set(os, *pp, length))
        goto err;

    *pp += length;

    if (pos)
        *pos = os;
    return os;

 err:
    if ((pos == NULL) || (*pos != os))
        ASN1_OCTET_STRING_free(os);
    ERR_raise(ERR_LIB_OCSP, ERR_R_MALLOC_FAILURE);
    return NULL;
}

static void ocsp_nonce_free(void *a)
{
    ASN1_OCTET_STRING_free(a);
}

static int i2r_ocsp_nonce(const X509V3_EXT_METHOD *method, void *nonce,
                          BIO *out, int indent)
{
    if (BIO_printf(out, "%*s", indent, "") <= 0)
        return 0;
    if (i2a_ASN1_STRING(out, nonce, V_ASN1_OCTET_STRING) <= 0)
        return 0;
    return 1;
}

/* Nocheck is just a single NULL. Don't print anything and always set it */

static int i2r_ocsp_nocheck(const X509V3_EXT_METHOD *method, void *nocheck,
                            BIO *out, int indent)
{
    return 1;
}

static void *s2i_ocsp_nocheck(const X509V3_EXT_METHOD *method,
                              X509V3_CTX *ctx, const char *str)
{
    return ASN1_NULL_new();
}

static int i2r_ocsp_serviceloc(const X509V3_EXT_METHOD *method, void *in,
                               BIO *bp, int ind)
{
    int i;
    OCSP_SERVICELOC *a = in;
    ACCESS_DESCRIPTION *ad;

    if (BIO_printf(bp, "%*sIssuer: ", ind, "") <= 0)
        goto err;
    if (X509_NAME_print_ex(bp, a->issuer, 0, XN_FLAG_ONELINE) <= 0)
        goto err;
    for (i = 0; i < sk_ACCESS_DESCRIPTION_num(a->locator); i++) {
        ad = sk_ACCESS_DESCRIPTION_value(a->locator, i);
        if (BIO_printf(bp, "\n%*s", (2 * ind), "") <= 0)
            goto err;
        if (i2a_ASN1_OBJECT(bp, ad->method) <= 0)
            goto err;
        if (BIO_puts(bp, " - ") <= 0)
            goto err;
        if (GENERAL_NAME_print(bp, ad->location) <= 0)
            goto err;
    }
    return 1;
 err:
    return 0;
}

Coverage Report

Created: 2023-09-25 06:45

Line	Count	Source (jump to first uncovered line)
1		/*
2		* Copyright 2000-2021 The OpenSSL Project Authors. All Rights Reserved.
3		*
4		* Licensed under the Apache License 2.0 (the "License"). You may not use
5		* this file except in compliance with the License. You can obtain a copy
6		* in the file LICENSE in the source distribution or at
7		* https://www.openssl.org/source/license.html
8		*/
9
10		#include <stdio.h>
11		#include "internal/cryptlib.h"
12		#include <openssl/conf.h>
13		#include <openssl/asn1.h>
14		#include <openssl/ocsp.h>
15		#include "ocsp_local.h"
16		#include <openssl/x509v3.h>
17		#include "../x509/ext_dat.h"
18
19		/*
20		* OCSP extensions and a couple of CRL entry extensions
21		*/
22
23		static int i2r_ocsp_crlid(const X509V3_EXT_METHOD method, void nonce,
24		BIO *out, int indent);
25		static int i2r_ocsp_acutoff(const X509V3_EXT_METHOD method, void nonce,
26		BIO *out, int indent);
27		static int i2r_object(const X509V3_EXT_METHOD method, void obj, BIO *out,
28		int indent);
29
30		static void *ocsp_nonce_new(void);
31		static int i2d_ocsp_nonce(const void a, unsigned char *pp);
32		static void d2i_ocsp_nonce(void a, const unsigned char **pp, long length);
33		static void ocsp_nonce_free(void *a);
34		static int i2r_ocsp_nonce(const X509V3_EXT_METHOD method, void nonce,
35		BIO *out, int indent);
36
37		static int i2r_ocsp_nocheck(const X509V3_EXT_METHOD *method,
38		void nocheck, BIO out, int indent);
39		static void s2i_ocsp_nocheck(const X509V3_EXT_METHOD method,
40		X509V3_CTX ctx, const char str);
41		static int i2r_ocsp_serviceloc(const X509V3_EXT_METHOD method, void in,
42		BIO *bp, int ind);
43
44		const X509V3_EXT_METHOD ossl_v3_ocsp_crlid = {
45		NID_id_pkix_OCSP_CrlID, 0, ASN1_ITEM_ref(OCSP_CRLID),
46		0, 0, 0, 0,
47		0, 0,
48		0, 0,
49		i2r_ocsp_crlid, 0,
50		NULL
51		};
52
53		const X509V3_EXT_METHOD ossl_v3_ocsp_acutoff = {
54		NID_id_pkix_OCSP_archiveCutoff, 0, ASN1_ITEM_ref(ASN1_GENERALIZEDTIME),
55		0, 0, 0, 0,
56		0, 0,
57		0, 0,
58		i2r_ocsp_acutoff, 0,
59		NULL
60		};
61
62		const X509V3_EXT_METHOD ossl_v3_crl_invdate = {
63		NID_invalidity_date, 0, ASN1_ITEM_ref(ASN1_GENERALIZEDTIME),
64		0, 0, 0, 0,
65		0, 0,
66		0, 0,
67		i2r_ocsp_acutoff, 0,
68		NULL
69		};
70
71		const X509V3_EXT_METHOD ossl_v3_crl_hold = {
72		NID_hold_instruction_code, 0, ASN1_ITEM_ref(ASN1_OBJECT),
73		0, 0, 0, 0,
74		0, 0,
75		0, 0,
76		i2r_object, 0,
77		NULL
78		};
79
80		const X509V3_EXT_METHOD ossl_v3_ocsp_nonce = {
81		NID_id_pkix_OCSP_Nonce, 0, NULL,
82		ocsp_nonce_new,
83		ocsp_nonce_free,
84		d2i_ocsp_nonce,
85		i2d_ocsp_nonce,
86		0, 0,
87		0, 0,
88		i2r_ocsp_nonce, 0,
89		NULL
90		};
91
92		const X509V3_EXT_METHOD ossl_v3_ocsp_nocheck = {
93		NID_id_pkix_OCSP_noCheck, 0, ASN1_ITEM_ref(ASN1_NULL),
94		0, 0, 0, 0,
95		0, s2i_ocsp_nocheck,
96		0, 0,
97		i2r_ocsp_nocheck, 0,
98		NULL
99		};
100
101		const X509V3_EXT_METHOD ossl_v3_ocsp_serviceloc = {
102		NID_id_pkix_OCSP_serviceLocator, 0, ASN1_ITEM_ref(OCSP_SERVICELOC),
103		0, 0, 0, 0,
104		0, 0,
105		0, 0,
106		i2r_ocsp_serviceloc, 0,
107		NULL
108		};
109
110		static int i2r_ocsp_crlid(const X509V3_EXT_METHOD method, void in, BIO *bp,
111		int ind)
112	3.86k	{
113	3.86k	OCSP_CRLID *a = in;
114	3.86k	if (a->crlUrl) {
115	143	if (BIO_printf(bp, "%*scrlUrl: ", ind, "") <= 0)
116	0	goto err;
117	143	if (!ASN1_STRING_print(bp, (ASN1_STRING *)a->crlUrl))
118	0	goto err;
119	143	if (BIO_write(bp, "\n", 1) <= 0)
120	0	goto err;
121	143	}
122	3.86k	if (a->crlNum) {
123	1.98k	if (BIO_printf(bp, "%*scrlNum: ", ind, "") <= 0)
124	0	goto err;
125	1.98k	if (i2a_ASN1_INTEGER(bp, a->crlNum) <= 0)
126	0	goto err;
127	1.98k	if (BIO_write(bp, "\n", 1) <= 0)
128	0	goto err;
129	1.98k	}
130	3.86k	if (a->crlTime) {
131	118	if (BIO_printf(bp, "%*scrlTime: ", ind, "") <= 0)
132	0	goto err;
133	118	if (!ASN1_GENERALIZEDTIME_print(bp, a->crlTime))
134	118	goto err;
135	0	if (BIO_write(bp, "\n", 1) <= 0)
136	0	goto err;
137	0	}
138	3.74k	return 1;
139	118	err:
140	118	return 0;
141	3.86k	}
142
143		static int i2r_ocsp_acutoff(const X509V3_EXT_METHOD method, void cutoff,
144		BIO *bp, int ind)
145	50.7k	{
146	50.7k	if (BIO_printf(bp, "%*s", ind, "") <= 0)
147	0	return 0;
148	50.7k	if (!ASN1_GENERALIZEDTIME_print(bp, cutoff))
149	36.5k	return 0;
150	14.2k	return 1;
151	50.7k	}
152
153		static int i2r_object(const X509V3_EXT_METHOD method, void oid, BIO *bp,
154		int ind)
155	820	{
156	820	if (BIO_printf(bp, "%*s", ind, "") <= 0)
157	0	return 0;
158	820	if (i2a_ASN1_OBJECT(bp, oid) <= 0)
159	0	return 0;
160	820	return 1;
161	820	}
162
163		/*
164		* OCSP nonce. This is needs special treatment because it doesn't have an
165		* ASN1 encoding at all: it just contains arbitrary data.
166		*/
167
168		static void *ocsp_nonce_new(void)
169	0	{
170	0	return ASN1_OCTET_STRING_new();
171	0	}
172
173		static int i2d_ocsp_nonce(const void a, unsigned char *pp)
174	0	{
175	0	const ASN1_OCTET_STRING *os = a;
176	0	if (pp) {
177	0	memcpy(*pp, os->data, os->length);
178	0	*pp += os->length;
179	0	}
180	0	return os->length;
181	0	}
182
183		static void d2i_ocsp_nonce(void a, const unsigned char **pp, long length)
184	7.67k	{
185	7.67k	ASN1_OCTET_STRING os, *pos;
186	7.67k	pos = a;
187	7.67k	if (pos == NULL \|\| *pos == NULL) {
188	7.67k	os = ASN1_OCTET_STRING_new();
189	7.67k	if (os == NULL)
190	0	goto err;
191	7.67k	} else {
192	0	os = *pos;
193	0	}
194	7.67k	if (!ASN1_OCTET_STRING_set(os, *pp, length))
195	0	goto err;
196
197	7.67k	*pp += length;
198
199	7.67k	if (pos)
200	0	*pos = os;
201	7.67k	return os;
202
203	0	err:
204	0	if ((pos == NULL) \|\| (*pos != os))
205	0	ASN1_OCTET_STRING_free(os);
206	0	ERR_raise(ERR_LIB_OCSP, ERR_R_MALLOC_FAILURE);
207	0	return NULL;
208	7.67k	}
209
210		static void ocsp_nonce_free(void *a)
211	7.67k	{
212	7.67k	ASN1_OCTET_STRING_free(a);
213	7.67k	}
214
215		static int i2r_ocsp_nonce(const X509V3_EXT_METHOD method, void nonce,
216		BIO *out, int indent)
217	7.67k	{
218	7.67k	if (BIO_printf(out, "%*s", indent, "") <= 0)
219	0	return 0;
220	7.67k	if (i2a_ASN1_STRING(out, nonce, V_ASN1_OCTET_STRING) <= 0)
221	0	return 0;
222	7.67k	return 1;
223	7.67k	}
224
225		/* Nocheck is just a single NULL. Don't print anything and always set it */
226
227		static int i2r_ocsp_nocheck(const X509V3_EXT_METHOD method, void nocheck,
228		BIO *out, int indent)
229	1.31k	{
230	1.31k	return 1;
231	1.31k	}
232
233		static void s2i_ocsp_nocheck(const X509V3_EXT_METHOD method,
234		X509V3_CTX ctx, const char str)
235	0	{
236	0	return ASN1_NULL_new();
237	0	}
238
239		static int i2r_ocsp_serviceloc(const X509V3_EXT_METHOD method, void in,
240		BIO *bp, int ind)
241	7.33k	{
242	7.33k	int i;
243	7.33k	OCSP_SERVICELOC *a = in;
244	7.33k	ACCESS_DESCRIPTION *ad;
245
246	7.33k	if (BIO_printf(bp, "%*sIssuer: ", ind, "") <= 0)
247	0	goto err;
248	7.33k	if (X509_NAME_print_ex(bp, a->issuer, 0, XN_FLAG_ONELINE) <= 0)
249	5.58k	goto err;
250	1.75k	for (i = 0; i < sk_ACCESS_DESCRIPTION_num(a->locator); i++) {
251	0	ad = sk_ACCESS_DESCRIPTION_value(a->locator, i);
252	0	if (BIO_printf(bp, "\n%s", (2 ind), "") <= 0)
253	0	goto err;
254	0	if (i2a_ASN1_OBJECT(bp, ad->method) <= 0)
255	0	goto err;
256	0	if (BIO_puts(bp, " - ") <= 0)
257	0	goto err;
258	0	if (GENERAL_NAME_print(bp, ad->location) <= 0)
259	0	goto err;
260	0	}
261	1.75k	return 1;
262	5.58k	err:
263	5.58k	return 0;
264	1.75k	}