зеркало из https://github.com/mozilla/gecko-dev.git
161 строка
4.0 KiB
C
161 строка
4.0 KiB
C
/* This Source Code Form is subject to the terms of the Mozilla Public
|
|
* License, v. 2.0. If a copy of the MPL was not distributed with this
|
|
* file, You can obtain one at http://mozilla.org/MPL/2.0/. */
|
|
|
|
/*
|
|
* Code for dealing with x.509 v3 crl and crl entries extensions.
|
|
*/
|
|
|
|
#include "cert.h"
|
|
#include "secitem.h"
|
|
#include "secoid.h"
|
|
#include "secoidt.h"
|
|
#include "secder.h"
|
|
#include "secasn1.h"
|
|
#include "certxutl.h"
|
|
|
|
SECStatus
|
|
CERT_FindCRLExtensionByOID(CERTCrl *crl, SECItem *oid, SECItem *value)
|
|
{
|
|
return (cert_FindExtensionByOID(crl->extensions, oid, value));
|
|
}
|
|
|
|
SECStatus
|
|
CERT_FindCRLExtension(CERTCrl *crl, int tag, SECItem *value)
|
|
{
|
|
return (cert_FindExtension(crl->extensions, tag, value));
|
|
}
|
|
|
|
/* Callback to set extensions and adjust verison */
|
|
static void
|
|
SetCrlExts(void *object, CERTCertExtension **exts)
|
|
{
|
|
CERTCrl *crl = (CERTCrl *)object;
|
|
|
|
crl->extensions = exts;
|
|
DER_SetUInteger(crl->arena, &crl->version, SEC_CRL_VERSION_2);
|
|
}
|
|
|
|
void *
|
|
CERT_StartCRLExtensions(CERTCrl *crl)
|
|
{
|
|
return (cert_StartExtensions((void *)crl, crl->arena, SetCrlExts));
|
|
}
|
|
|
|
static void
|
|
SetCrlEntryExts(void *object, CERTCertExtension **exts)
|
|
{
|
|
CERTCrlEntry *crlEntry = (CERTCrlEntry *)object;
|
|
|
|
crlEntry->extensions = exts;
|
|
}
|
|
|
|
void *
|
|
CERT_StartCRLEntryExtensions(CERTCrl *crl, CERTCrlEntry *entry)
|
|
{
|
|
return (cert_StartExtensions(entry, crl->arena, SetCrlEntryExts));
|
|
}
|
|
|
|
SECStatus
|
|
CERT_FindCRLNumberExten(PLArenaPool *arena, CERTCrl *crl,
|
|
SECItem *value)
|
|
{
|
|
SECItem encodedExtenValue;
|
|
SECItem *tmpItem = NULL;
|
|
SECStatus rv;
|
|
void *mark = NULL;
|
|
|
|
encodedExtenValue.data = NULL;
|
|
encodedExtenValue.len = 0;
|
|
|
|
rv = cert_FindExtension(crl->extensions, SEC_OID_X509_CRL_NUMBER,
|
|
&encodedExtenValue);
|
|
if (rv != SECSuccess)
|
|
return (rv);
|
|
|
|
mark = PORT_ArenaMark(arena);
|
|
|
|
tmpItem = SECITEM_ArenaDupItem(arena, &encodedExtenValue);
|
|
if (tmpItem) {
|
|
rv = SEC_QuickDERDecodeItem(arena, value,
|
|
SEC_ASN1_GET(SEC_IntegerTemplate),
|
|
tmpItem);
|
|
} else {
|
|
rv = SECFailure;
|
|
}
|
|
|
|
PORT_Free(encodedExtenValue.data);
|
|
if (rv == SECFailure) {
|
|
PORT_ArenaRelease(arena, mark);
|
|
} else {
|
|
PORT_ArenaUnmark(arena, mark);
|
|
}
|
|
return (rv);
|
|
}
|
|
|
|
SECStatus
|
|
CERT_FindCRLEntryReasonExten(CERTCrlEntry *crlEntry,
|
|
CERTCRLEntryReasonCode *value)
|
|
{
|
|
SECItem wrapperItem = { siBuffer, 0 };
|
|
SECItem tmpItem = { siBuffer, 0 };
|
|
SECStatus rv;
|
|
PLArenaPool *arena = NULL;
|
|
|
|
arena = PORT_NewArena(DER_DEFAULT_CHUNKSIZE);
|
|
if (!arena) {
|
|
return (SECFailure);
|
|
}
|
|
|
|
rv = cert_FindExtension(crlEntry->extensions, SEC_OID_X509_REASON_CODE,
|
|
&wrapperItem);
|
|
if (rv != SECSuccess) {
|
|
goto loser;
|
|
}
|
|
|
|
rv = SEC_QuickDERDecodeItem(arena, &tmpItem,
|
|
SEC_ASN1_GET(SEC_EnumeratedTemplate),
|
|
&wrapperItem);
|
|
|
|
if (rv != SECSuccess) {
|
|
goto loser;
|
|
}
|
|
|
|
*value = (CERTCRLEntryReasonCode)DER_GetInteger(&tmpItem);
|
|
|
|
loser:
|
|
if (arena) {
|
|
PORT_FreeArena(arena, PR_FALSE);
|
|
}
|
|
|
|
if (wrapperItem.data) {
|
|
PORT_Free(wrapperItem.data);
|
|
}
|
|
|
|
return (rv);
|
|
}
|
|
|
|
SECStatus
|
|
CERT_FindInvalidDateExten(CERTCrl *crl, PRTime *value)
|
|
{
|
|
SECItem encodedExtenValue;
|
|
SECItem decodedExtenValue = { siBuffer, 0 };
|
|
SECStatus rv;
|
|
|
|
encodedExtenValue.data = decodedExtenValue.data = NULL;
|
|
encodedExtenValue.len = decodedExtenValue.len = 0;
|
|
|
|
rv = cert_FindExtension(crl->extensions, SEC_OID_X509_INVALID_DATE, &encodedExtenValue);
|
|
if (rv != SECSuccess)
|
|
return (rv);
|
|
|
|
rv = SEC_ASN1DecodeItem(NULL, &decodedExtenValue,
|
|
SEC_ASN1_GET(SEC_GeneralizedTimeTemplate),
|
|
&encodedExtenValue);
|
|
if (rv == SECSuccess)
|
|
rv = DER_GeneralizedTimeToTime(value, &encodedExtenValue);
|
|
PORT_Free(decodedExtenValue.data);
|
|
PORT_Free(encodedExtenValue.data);
|
|
return (rv);
|
|
}
|