/src/openssl/crypto/x509/v3_ac_tgt.c
Line  | Count  | Source  | 
1  |  | /*  | 
2  |  |  * Copyright 1999-2025 The OpenSSL Project Authors. All Rights Reserved.  | 
3  |  |  *  | 
4  |  |  * Licensed under the Apache License 2.0 (the "License").  You may not use  | 
5  |  |  * this file except in compliance with the License.  You can obtain a copy  | 
6  |  |  * in the file LICENSE in the source distribution or at  | 
7  |  |  * https://www.openssl.org/source/license.html  | 
8  |  |  */  | 
9  |  |  | 
10  |  | /*  | 
11  |  |  * Needed for EVP_PKEY_asn1_find  | 
12  |  |  */  | 
13  |  | #define OPENSSL_SUPPRESS_DEPRECATED  | 
14  |  |  | 
15  |  | #include <stdio.h>  | 
16  |  | #include <openssl/x509_acert.h>  | 
17  |  | #include <crypto/x509_acert.h>  | 
18  |  | #include "internal/cryptlib.h"  | 
19  |  | #include <openssl/asn1.h>  | 
20  |  | #include <openssl/asn1t.h>  | 
21  |  | #include <openssl/conf.h>  | 
22  |  | #include <openssl/x509v3.h>  | 
23  |  | #include "ext_dat.h"  | 
24  |  | #include "x509_local.h"  | 
25  |  | #include "crypto/asn1.h"  | 
26  |  |  | 
27  |  | static int i2r_ISSUER_SERIAL(X509V3_EXT_METHOD *method,  | 
28  |  |                              OSSL_ISSUER_SERIAL *iss,  | 
29  |  |                              BIO *out, int indent);  | 
30  |  | static int i2r_OBJECT_DIGEST_INFO(X509V3_EXT_METHOD *method,  | 
31  |  |                                   OSSL_OBJECT_DIGEST_INFO *odi,  | 
32  |  |                                   BIO *out, int indent);  | 
33  |  | static int i2r_TARGET_CERT(X509V3_EXT_METHOD *method,  | 
34  |  |                            OSSL_TARGET_CERT *tc,  | 
35  |  |                            BIO *out, int indent);  | 
36  |  | static int i2r_TARGET(X509V3_EXT_METHOD *method,  | 
37  |  |                       OSSL_TARGET *target,  | 
38  |  |                       BIO *out, int indent);  | 
39  |  | static int i2r_TARGETING_INFORMATION(X509V3_EXT_METHOD *method,  | 
40  |  |                                      OSSL_TARGETING_INFORMATION *tinfo,  | 
41  |  |                                      BIO *out, int indent);  | 
42  |  |  | 
43  |  | ASN1_SEQUENCE(OSSL_ISSUER_SERIAL) = { | 
44  |  |     ASN1_SEQUENCE_OF(OSSL_ISSUER_SERIAL, issuer, GENERAL_NAME),  | 
45  |  |     ASN1_EMBED(OSSL_ISSUER_SERIAL, serial, ASN1_INTEGER),  | 
46  |  |     ASN1_OPT(OSSL_ISSUER_SERIAL, issuerUID, ASN1_BIT_STRING),  | 
47  | 0  | } static_ASN1_SEQUENCE_END(OSSL_ISSUER_SERIAL)  | 
48  | 0  | 
  | 
49  | 0  | ASN1_SEQUENCE(OSSL_OBJECT_DIGEST_INFO) = { | 
50  | 0  |     ASN1_EMBED(OSSL_OBJECT_DIGEST_INFO, digestedObjectType, ASN1_ENUMERATED),  | 
51  | 0  |     ASN1_OPT(OSSL_OBJECT_DIGEST_INFO, otherObjectTypeID, ASN1_OBJECT),  | 
52  | 0  |     ASN1_EMBED(OSSL_OBJECT_DIGEST_INFO, digestAlgorithm, X509_ALGOR),  | 
53  | 0  |     ASN1_EMBED(OSSL_OBJECT_DIGEST_INFO, objectDigest, ASN1_BIT_STRING),  | 
54  | 0  | } static_ASN1_SEQUENCE_END(OSSL_OBJECT_DIGEST_INFO)  | 
55  | 0  | 
  | 
56  | 0  | ASN1_SEQUENCE(OSSL_TARGET_CERT) = { | 
57  | 0  |     ASN1_SIMPLE(OSSL_TARGET_CERT, targetCertificate, OSSL_ISSUER_SERIAL),  | 
58  | 0  |     ASN1_OPT(OSSL_TARGET_CERT, targetName, GENERAL_NAME),  | 
59  | 0  |     ASN1_OPT(OSSL_TARGET_CERT, certDigestInfo, OSSL_OBJECT_DIGEST_INFO),  | 
60  | 0  | } static_ASN1_SEQUENCE_END(OSSL_TARGET_CERT)  | 
61  | 0  | 
  | 
62  | 0  | ASN1_CHOICE(OSSL_TARGET) = { | 
63  | 0  |     ASN1_EXP(OSSL_TARGET, choice.targetName, GENERAL_NAME, 0),  | 
64  | 0  |     ASN1_EXP(OSSL_TARGET, choice.targetGroup, GENERAL_NAME, 1),  | 
65  | 0  |     ASN1_IMP(OSSL_TARGET, choice.targetCert, OSSL_TARGET_CERT, 2),  | 
66  | 0  | } ASN1_CHOICE_END(OSSL_TARGET)  | 
67  | 0  | 
  | 
68  | 0  | ASN1_ITEM_TEMPLATE(OSSL_TARGETS) =  | 
69  | 0  |     ASN1_EX_TEMPLATE_TYPE(ASN1_TFLG_SEQUENCE_OF, 0, Targets, OSSL_TARGET)  | 
70  | 0  | ASN1_ITEM_TEMPLATE_END(OSSL_TARGETS)  | 
71  |  |  | 
72  |  | ASN1_ITEM_TEMPLATE(OSSL_TARGETING_INFORMATION) =  | 
73  |  |     ASN1_EX_TEMPLATE_TYPE(ASN1_TFLG_SEQUENCE_OF, 0, TargetingInformation, OSSL_TARGETS)  | 
74  | 0  | ASN1_ITEM_TEMPLATE_END(OSSL_TARGETING_INFORMATION)  | 
75  |  |  | 
76  |  | IMPLEMENT_ASN1_FUNCTIONS(OSSL_TARGET)  | 
77  |  | IMPLEMENT_ASN1_FUNCTIONS(OSSL_TARGETS)  | 
78  |  | IMPLEMENT_ASN1_FUNCTIONS(OSSL_TARGETING_INFORMATION)  | 
79  |  |  | 
80  |  | static int i2r_ISSUER_SERIAL(X509V3_EXT_METHOD *method,  | 
81  |  |                              OSSL_ISSUER_SERIAL *iss,  | 
82  |  |                              BIO *out, int indent)  | 
83  | 0  | { | 
84  | 0  |     if (iss->issuer != NULL) { | 
85  | 0  |         BIO_printf(out, "%*sIssuer Names:\n", indent, "");  | 
86  | 0  |         OSSL_GENERAL_NAMES_print(out, iss->issuer, indent);  | 
87  | 0  |         BIO_puts(out, "\n");  | 
88  | 0  |     } else { | 
89  | 0  |         BIO_printf(out, "%*sIssuer Names: <none>\n", indent, "");  | 
90  | 0  |     }  | 
91  | 0  |     BIO_printf(out, "%*sIssuer Serial: ", indent, "");  | 
92  | 0  |     if (i2a_ASN1_INTEGER(out, &(iss->serial)) <= 0)  | 
93  | 0  |         return 0;  | 
94  | 0  |     BIO_puts(out, "\n");  | 
95  | 0  |     if (iss->issuerUID != NULL) { | 
96  | 0  |         BIO_printf(out, "%*sIssuer UID: ", indent, "");  | 
97  | 0  |         if (i2a_ASN1_STRING(out, iss->issuerUID, V_ASN1_BIT_STRING) <= 0)  | 
98  | 0  |             return 0;  | 
99  | 0  |         BIO_puts(out, "\n");  | 
100  | 0  |     } else { | 
101  | 0  |         BIO_printf(out, "%*sIssuer UID: <none>\n", indent, "");  | 
102  | 0  |     }  | 
103  | 0  |     return 1;  | 
104  | 0  | }  | 
105  |  |  | 
106  |  | static int i2r_OBJECT_DIGEST_INFO(X509V3_EXT_METHOD *method,  | 
107  |  |                            OSSL_OBJECT_DIGEST_INFO *odi,  | 
108  |  |                            BIO *out, int indent)  | 
109  | 0  | { | 
110  | 0  |     int64_t dot = 0;  | 
111  | 0  | #ifndef OPENSSL_NO_DEPRECATED_3_6  | 
112  | 0  |     int sig_nid;  | 
113  | 0  |     X509_ALGOR *digalg;  | 
114  | 0  | #endif  | 
115  | 0  |     ASN1_STRING *sig;  | 
116  |  | 
  | 
117  | 0  |     if (odi == NULL) { | 
118  | 0  |         ERR_raise(ERR_LIB_ASN1, ERR_R_PASSED_NULL_PARAMETER);  | 
119  | 0  |         return 0;  | 
120  | 0  |     }  | 
121  | 0  |     sig = &odi->objectDigest;  | 
122  | 0  |     if (!ASN1_ENUMERATED_get_int64(&dot, &odi->digestedObjectType)) { | 
123  | 0  |         return 0;  | 
124  | 0  |     }  | 
125  | 0  |     switch (dot) { | 
126  | 0  |     case OSSL_ODI_TYPE_PUBLIC_KEY:  | 
127  | 0  |         BIO_printf(out, "%*sDigest Type: Public Key\n", indent, "");  | 
128  | 0  |         break;  | 
129  | 0  |     case OSSL_ODI_TYPE_PUBLIC_KEY_CERT:  | 
130  | 0  |         BIO_printf(out, "%*sDigest Type: Public Key Certificate\n", indent, "");  | 
131  | 0  |         break;  | 
132  | 0  |     case OSSL_ODI_TYPE_OTHER:  | 
133  | 0  |         BIO_printf(out, "%*sDigest Type: Other\n", indent, "");  | 
134  | 0  |         break;  | 
135  | 0  |     }  | 
136  | 0  |     if (odi->otherObjectTypeID != NULL) { | 
137  | 0  |         BIO_printf(out, "%*sDigest Type Identifier: ", indent, "");  | 
138  | 0  |         i2a_ASN1_OBJECT(out, odi->otherObjectTypeID);  | 
139  | 0  |         BIO_puts(out, "\n");  | 
140  | 0  |     }  | 
141  | 0  |     if (BIO_printf(out, "%*sSignature Algorithm: ", indent, "") <= 0)  | 
142  | 0  |         return 0;  | 
143  | 0  |     if (i2a_ASN1_OBJECT(out, odi->digestAlgorithm.algorithm) <= 0)  | 
144  | 0  |         return 0;  | 
145  | 0  |     BIO_puts(out, "\n");  | 
146  | 0  |     if (BIO_printf(out, "\n%*sSignature Value: ", indent, "") <= 0)  | 
147  | 0  |         return 0;  | 
148  | 0  | #ifndef OPENSSL_NO_DEPRECATED_3_6  | 
149  | 0  |     digalg = &odi->digestAlgorithm;  | 
150  | 0  |     sig_nid = OBJ_obj2nid(odi->digestAlgorithm.algorithm);  | 
151  | 0  |     if (sig_nid != NID_undef) { | 
152  | 0  |         int pkey_nid, dig_nid;  | 
153  | 0  |         const EVP_PKEY_ASN1_METHOD *ameth;  | 
154  | 0  |         if (OBJ_find_sigid_algs(sig_nid, &dig_nid, &pkey_nid)) { | 
155  | 0  |             ameth = EVP_PKEY_asn1_find(NULL, pkey_nid);  | 
156  | 0  |             if (ameth && ameth->sig_print)  | 
157  | 0  |                 return ameth->sig_print(out, digalg, sig, indent + 4, 0);  | 
158  | 0  |         }  | 
159  | 0  |     }  | 
160  | 0  | #endif  | 
161  | 0  |     if (BIO_write(out, "\n", 1) != 1)  | 
162  | 0  |         return 0;  | 
163  | 0  |     if (sig)  | 
164  | 0  |         return X509_signature_dump(out, sig, indent + 4);  | 
165  | 0  |     return 1;  | 
166  | 0  | }  | 
167  |  |  | 
168  |  | static int i2r_TARGET_CERT(X509V3_EXT_METHOD *method,  | 
169  |  |                            OSSL_TARGET_CERT *tc,  | 
170  |  |                            BIO *out, int indent)  | 
171  | 0  | { | 
172  | 0  |     BIO_printf(out, "%*s", indent, "");  | 
173  | 0  |     if (tc->targetCertificate != NULL) { | 
174  | 0  |         BIO_puts(out, "Target Certificate:\n");  | 
175  | 0  |         i2r_ISSUER_SERIAL(method, tc->targetCertificate, out, indent + 2);  | 
176  | 0  |     }  | 
177  | 0  |     if (tc->targetName != NULL) { | 
178  | 0  |         BIO_printf(out, "%*sTarget Name: ", indent, "");  | 
179  | 0  |         GENERAL_NAME_print(out, tc->targetName);  | 
180  | 0  |         BIO_puts(out, "\n");  | 
181  | 0  |     }  | 
182  | 0  |     if (tc->certDigestInfo != NULL) { | 
183  | 0  |         BIO_printf(out, "%*sCertificate Digest Info:\n", indent, "");  | 
184  | 0  |         i2r_OBJECT_DIGEST_INFO(method, tc->certDigestInfo, out, indent + 2);  | 
185  | 0  |     }  | 
186  | 0  |     BIO_puts(out, "\n");  | 
187  | 0  |     return 1;  | 
188  | 0  | }  | 
189  |  |  | 
190  |  | static int i2r_TARGET(X509V3_EXT_METHOD *method,  | 
191  |  |                       OSSL_TARGET *target,  | 
192  |  |                       BIO *out, int indent)  | 
193  | 0  | { | 
194  | 0  |     switch (target->type) { | 
195  | 0  |     case OSSL_TGT_TARGET_NAME:  | 
196  | 0  |         BIO_printf(out, "%*sTarget Name: ", indent, "");  | 
197  | 0  |         GENERAL_NAME_print(out, target->choice.targetName);  | 
198  | 0  |         BIO_puts(out, "\n");  | 
199  | 0  |         break;  | 
200  | 0  |     case OSSL_TGT_TARGET_GROUP:  | 
201  | 0  |         BIO_printf(out, "%*sTarget Group: ", indent, "");  | 
202  | 0  |         GENERAL_NAME_print(out, target->choice.targetGroup);  | 
203  | 0  |         BIO_puts(out, "\n");  | 
204  | 0  |         break;  | 
205  | 0  |     case OSSL_TGT_TARGET_CERT:  | 
206  | 0  |         BIO_printf(out, "%*sTarget Cert:\n", indent, "");  | 
207  | 0  |         i2r_TARGET_CERT(method, target->choice.targetCert, out, indent + 2);  | 
208  | 0  |         break;  | 
209  | 0  |     }  | 
210  | 0  |     return 1;  | 
211  | 0  | }  | 
212  |  |  | 
213  |  | static int i2r_TARGETS(X509V3_EXT_METHOD *method,  | 
214  |  |                       OSSL_TARGETS *targets,  | 
215  |  |                       BIO *out, int indent)  | 
216  | 0  | { | 
217  | 0  |     int i;  | 
218  | 0  |     OSSL_TARGET *target;  | 
219  |  | 
  | 
220  | 0  |     for (i = 0; i < sk_OSSL_TARGET_num(targets); i++) { | 
221  | 0  |         BIO_printf(out, "%*sTarget:\n", indent, "");  | 
222  | 0  |         target = sk_OSSL_TARGET_value(targets, i);  | 
223  | 0  |         i2r_TARGET(method, target, out, indent + 2);  | 
224  | 0  |     }  | 
225  | 0  |     return 1;  | 
226  | 0  | }  | 
227  |  |  | 
228  |  | static int i2r_TARGETING_INFORMATION(X509V3_EXT_METHOD *method,  | 
229  |  |                                      OSSL_TARGETING_INFORMATION *tinfo,  | 
230  |  |                                      BIO *out, int indent)  | 
231  | 0  | { | 
232  | 0  |     int i;  | 
233  | 0  |     OSSL_TARGETS *targets;  | 
234  |  | 
  | 
235  | 0  |     for (i = 0; i < sk_OSSL_TARGETS_num(tinfo); i++) { | 
236  | 0  |         BIO_printf(out, "%*sTargets:\n", indent, "");  | 
237  | 0  |         targets = sk_OSSL_TARGETS_value(tinfo, i);  | 
238  | 0  |         i2r_TARGETS(method, targets, out, indent + 2);  | 
239  | 0  |     }  | 
240  | 0  |     return 1;  | 
241  | 0  | }  | 
242  |  |  | 
243  |  | const X509V3_EXT_METHOD ossl_v3_targeting_information = { | 
244  |  |     NID_target_information, 0, ASN1_ITEM_ref(OSSL_TARGETING_INFORMATION),  | 
245  |  |     0, 0, 0, 0,  | 
246  |  |     0,  | 
247  |  |     0,  | 
248  |  |     0, 0,  | 
249  |  |     (X509V3_EXT_I2R)i2r_TARGETING_INFORMATION,  | 
250  |  |     0,  | 
251  |  |     NULL  | 
252  |  | };  |