2011-08-25 23:41:19 +04:00
|
|
|
/* asn.h
|
2011-02-05 22:14:47 +03:00
|
|
|
*
|
2013-02-06 00:44:17 +04:00
|
|
|
* Copyright (C) 2006-2013 wolfSSL Inc.
|
2011-02-05 22:14:47 +03:00
|
|
|
*
|
|
|
|
* This file is part of CyaSSL.
|
|
|
|
*
|
|
|
|
* CyaSSL is free software; you can redistribute it and/or modify
|
|
|
|
* it under the terms of the GNU General Public License as published by
|
|
|
|
* the Free Software Foundation; either version 2 of the License, or
|
|
|
|
* (at your option) any later version.
|
|
|
|
*
|
|
|
|
* CyaSSL is distributed in the hope that it will be useful,
|
|
|
|
* but WITHOUT ANY WARRANTY; without even the implied warranty of
|
|
|
|
* MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
|
|
|
|
* GNU General Public License for more details.
|
|
|
|
*
|
|
|
|
* You should have received a copy of the GNU General Public License
|
|
|
|
* along with this program; if not, write to the Free Software
|
|
|
|
* Foundation, Inc., 59 Temple Place - Suite 330, Boston, MA 02111-1307, USA
|
|
|
|
*/
|
|
|
|
|
2012-11-02 02:03:29 +04:00
|
|
|
#ifndef NO_ASN
|
2011-02-05 22:14:47 +03:00
|
|
|
|
|
|
|
#ifndef CTAO_CRYPT_ASN_H
|
|
|
|
#define CTAO_CRYPT_ASN_H
|
|
|
|
|
2011-08-25 23:41:19 +04:00
|
|
|
#include <cyassl/ctaocrypt/types.h>
|
|
|
|
#include <cyassl/ctaocrypt/rsa.h>
|
|
|
|
#include <cyassl/ctaocrypt/dh.h>
|
|
|
|
#include <cyassl/ctaocrypt/dsa.h>
|
|
|
|
#include <cyassl/ctaocrypt/sha.h>
|
2012-05-17 04:04:56 +04:00
|
|
|
#include <cyassl/ctaocrypt/md5.h>
|
2011-08-25 23:41:19 +04:00
|
|
|
#include <cyassl/ctaocrypt/asn_public.h> /* public interface */
|
2011-02-05 22:14:47 +03:00
|
|
|
#ifdef HAVE_ECC
|
2011-08-25 23:41:19 +04:00
|
|
|
#include <cyassl/ctaocrypt/ecc.h>
|
2011-02-05 22:14:47 +03:00
|
|
|
#endif
|
|
|
|
|
|
|
|
#ifdef __cplusplus
|
|
|
|
extern "C" {
|
|
|
|
#endif
|
|
|
|
|
|
|
|
|
|
|
|
enum {
|
|
|
|
ISSUER = 0,
|
|
|
|
SUBJECT = 1,
|
|
|
|
|
2011-04-11 23:55:17 +04:00
|
|
|
EXTERNAL_SERIAL_SIZE = 32,
|
2011-03-12 02:22:16 +03:00
|
|
|
|
2011-02-05 22:14:47 +03:00
|
|
|
BEFORE = 0,
|
|
|
|
AFTER = 1
|
|
|
|
};
|
|
|
|
|
|
|
|
/* ASN Tags */
|
|
|
|
enum ASN_Tags {
|
2011-11-03 01:57:14 +04:00
|
|
|
ASN_BOOLEAN = 0x01,
|
2011-02-05 22:14:47 +03:00
|
|
|
ASN_INTEGER = 0x02,
|
|
|
|
ASN_BIT_STRING = 0x03,
|
|
|
|
ASN_OCTET_STRING = 0x04,
|
|
|
|
ASN_TAG_NULL = 0x05,
|
|
|
|
ASN_OBJECT_ID = 0x06,
|
2012-04-27 00:52:48 +04:00
|
|
|
ASN_ENUMERATED = 0x0a,
|
2011-02-05 22:14:47 +03:00
|
|
|
ASN_SEQUENCE = 0x10,
|
|
|
|
ASN_SET = 0x11,
|
|
|
|
ASN_UTC_TIME = 0x17,
|
2012-08-01 04:45:48 +04:00
|
|
|
ASN_DNS_TYPE = 0x02,
|
2011-02-05 22:14:47 +03:00
|
|
|
ASN_GENERALIZED_TIME = 0x18,
|
2012-05-18 21:52:32 +04:00
|
|
|
CRL_EXTENSIONS = 0xa0,
|
2011-10-08 03:50:32 +04:00
|
|
|
ASN_EXTENSIONS = 0xa3,
|
2011-02-05 22:14:47 +03:00
|
|
|
ASN_LONG_LENGTH = 0x80
|
|
|
|
};
|
|
|
|
|
|
|
|
enum ASN_Flags{
|
|
|
|
ASN_CONSTRUCTED = 0x20,
|
|
|
|
ASN_CONTEXT_SPECIFIC = 0x80
|
|
|
|
};
|
|
|
|
|
|
|
|
enum DN_Tags {
|
|
|
|
ASN_COMMON_NAME = 0x03, /* CN */
|
|
|
|
ASN_SUR_NAME = 0x04, /* SN */
|
|
|
|
ASN_COUNTRY_NAME = 0x06, /* C */
|
|
|
|
ASN_LOCALITY_NAME = 0x07, /* L */
|
|
|
|
ASN_STATE_NAME = 0x08, /* ST */
|
|
|
|
ASN_ORG_NAME = 0x0a, /* O */
|
|
|
|
ASN_ORGUNIT_NAME = 0x0b /* OU */
|
|
|
|
};
|
|
|
|
|
2011-03-22 17:35:18 +03:00
|
|
|
enum PBES {
|
2011-04-14 21:04:24 +04:00
|
|
|
PBE_MD5_DES = 0,
|
|
|
|
PBE_SHA1_DES = 1,
|
|
|
|
PBE_SHA1_DES3 = 2,
|
|
|
|
PBE_SHA1_RC4_128 = 3,
|
|
|
|
PBES2 = 13 /* algo ID */
|
2011-03-22 17:35:18 +03:00
|
|
|
};
|
|
|
|
|
|
|
|
enum ENCRYPTION_TYPES {
|
2011-04-14 21:04:24 +04:00
|
|
|
DES_TYPE = 0,
|
|
|
|
DES3_TYPE = 1,
|
|
|
|
RC4_TYPE = 2
|
2011-03-22 17:35:18 +03:00
|
|
|
};
|
|
|
|
|
2011-12-02 01:10:01 +04:00
|
|
|
enum ECC_TYPES {
|
|
|
|
ECC_PREFIX_0 = 160,
|
|
|
|
ECC_PREFIX_1 = 161
|
|
|
|
};
|
|
|
|
|
2011-02-05 22:14:47 +03:00
|
|
|
enum Misc_ASN {
|
2011-03-22 17:35:18 +03:00
|
|
|
ASN_NAME_MAX = 256,
|
|
|
|
MAX_SALT_SIZE = 64, /* MAX PKCS Salt length */
|
2011-04-14 21:04:24 +04:00
|
|
|
MAX_IV_SIZE = 64, /* MAX PKCS Iv length */
|
2011-03-22 17:35:18 +03:00
|
|
|
MAX_KEY_SIZE = 64, /* MAX PKCS Key length */
|
|
|
|
PKCS5 = 5, /* PKCS oid tag */
|
2011-04-14 21:04:24 +04:00
|
|
|
PKCS5v2 = 6, /* PKCS #5 v2.0 */
|
|
|
|
PKCS12 = 12, /* PKCS #12 */
|
|
|
|
MAX_UNICODE_SZ = 256,
|
2011-12-07 03:17:10 +04:00
|
|
|
ASN_BOOL_SIZE = 2, /* including type */
|
2011-02-05 22:14:47 +03:00
|
|
|
SHA_SIZE = 20,
|
|
|
|
RSA_INTS = 8, /* RSA ints in private key */
|
|
|
|
MIN_DATE_SIZE = 13,
|
|
|
|
MAX_DATE_SIZE = 32,
|
|
|
|
ASN_GEN_TIME_SZ = 15, /* 7 numbers * 2 + Zulu tag */
|
|
|
|
MAX_ENCODED_SIG_SZ = 512,
|
|
|
|
MAX_SIG_SZ = 256,
|
|
|
|
MAX_ALGO_SZ = 20,
|
|
|
|
MAX_SEQ_SZ = 5, /* enum(seq | con) + length(4) */
|
|
|
|
MAX_SET_SZ = 5, /* enum(set | con) + length(4) */
|
|
|
|
MAX_VERSION_SZ = 5, /* enum + id + version(byte) + (header(2))*/
|
2011-04-08 22:00:38 +04:00
|
|
|
MAX_ENCODED_DIG_SZ = 73, /* sha512 + enum(bit or octet) + legnth(4) */
|
2011-02-05 22:14:47 +03:00
|
|
|
MAX_RSA_INT_SZ = 517, /* RSA raw sz 4096 for bits + tag + len(4) */
|
|
|
|
MAX_NTRU_KEY_SZ = 610, /* NTRU 112 bit public key */
|
|
|
|
MAX_NTRU_ENC_SZ = 628, /* NTRU 112 bit DER public encoding */
|
2011-09-07 04:30:57 +04:00
|
|
|
MAX_LENGTH_SZ = 4, /* Max length size for DER encoding */
|
2011-02-05 22:14:47 +03:00
|
|
|
MAX_RSA_E_SZ = 16, /* Max RSA public e size */
|
2011-09-07 04:30:57 +04:00
|
|
|
MAX_CA_SZ = 32, /* Max encoded CA basic constraint length */
|
2012-05-09 06:02:25 +04:00
|
|
|
MAX_SN_SZ = 35, /* Max encoded serial number (INT) length */
|
2011-10-08 03:50:32 +04:00
|
|
|
#ifdef CYASSL_CERT_GEN
|
2012-04-05 23:48:28 +04:00
|
|
|
#ifdef CYASSL_ALT_NAMES
|
|
|
|
MAX_EXTENSIONS_SZ = 1 + MAX_LENGTH_SZ + CTC_MAX_ALT_SIZE,
|
|
|
|
#else
|
|
|
|
MAX_EXTENSIONS_SZ = 1 + MAX_LENGTH_SZ + MAX_CA_SZ,
|
|
|
|
#endif
|
2011-09-07 04:30:57 +04:00
|
|
|
/* Max total extensions, id + len + others */
|
2011-10-08 03:50:32 +04:00
|
|
|
#endif
|
2012-05-18 21:18:56 +04:00
|
|
|
MAX_OCSP_EXT_SZ = 58, /* Max OCSP Extension length */
|
|
|
|
MAX_OCSP_NONCE_SZ = 18, /* OCSP Nonce size */
|
2012-10-31 04:35:12 +04:00
|
|
|
EIGHTK_BUF = 8192, /* Tmp buffer size */
|
2011-09-07 04:30:57 +04:00
|
|
|
MAX_PUBLIC_KEY_SZ = MAX_NTRU_ENC_SZ + MAX_ALGO_SZ + MAX_SEQ_SZ * 2
|
2011-02-05 22:14:47 +03:00
|
|
|
/* use bigger NTRU size */
|
|
|
|
};
|
|
|
|
|
|
|
|
|
|
|
|
enum Oid_Types {
|
|
|
|
hashType = 0,
|
|
|
|
sigType = 1,
|
|
|
|
keyType = 2
|
|
|
|
};
|
|
|
|
|
|
|
|
|
|
|
|
enum Hash_Sum {
|
2011-04-08 22:00:38 +04:00
|
|
|
MD2h = 646,
|
|
|
|
MD5h = 649,
|
|
|
|
SHAh = 88,
|
2012-04-28 00:49:35 +04:00
|
|
|
SHA256h = 414,
|
|
|
|
SHA384h = 415,
|
|
|
|
SHA512h = 416
|
2011-02-05 22:14:47 +03:00
|
|
|
};
|
|
|
|
|
2011-10-27 00:23:03 +04:00
|
|
|
|
2011-02-05 22:14:47 +03:00
|
|
|
enum Key_Sum {
|
|
|
|
DSAk = 515,
|
|
|
|
RSAk = 645,
|
|
|
|
NTRUk = 364,
|
|
|
|
ECDSAk = 518
|
|
|
|
};
|
|
|
|
|
2011-10-27 00:23:03 +04:00
|
|
|
|
2011-02-05 22:14:47 +03:00
|
|
|
enum Ecc_Sum {
|
|
|
|
ECC_256R1 = 526,
|
|
|
|
ECC_384R1 = 210,
|
|
|
|
ECC_521R1 = 211,
|
|
|
|
ECC_160R1 = 184,
|
|
|
|
ECC_192R1 = 520,
|
|
|
|
ECC_224R1 = 209
|
|
|
|
};
|
|
|
|
|
|
|
|
|
2011-04-14 21:04:24 +04:00
|
|
|
enum KDF_Sum {
|
|
|
|
PBKDF2_OID = 660
|
|
|
|
};
|
|
|
|
|
|
|
|
|
2011-10-08 03:50:32 +04:00
|
|
|
enum Extensions_Sum {
|
2011-11-03 01:57:14 +04:00
|
|
|
BASIC_CA_OID = 133,
|
2012-05-15 02:38:59 +04:00
|
|
|
ALT_NAMES_OID = 131,
|
|
|
|
CRL_DIST_OID = 145,
|
|
|
|
AUTH_INFO_OID = 69,
|
|
|
|
CA_ISSUER_OID = 117
|
2011-10-08 03:50:32 +04:00
|
|
|
};
|
|
|
|
|
|
|
|
|
2011-02-05 22:14:47 +03:00
|
|
|
enum VerifyType {
|
|
|
|
NO_VERIFY = 0,
|
|
|
|
VERIFY = 1
|
|
|
|
};
|
|
|
|
|
|
|
|
|
2012-08-01 04:45:48 +04:00
|
|
|
typedef struct DNS_entry DNS_entry;
|
|
|
|
|
|
|
|
struct DNS_entry {
|
|
|
|
DNS_entry* next; /* next on DNS list */
|
|
|
|
char* name; /* actual DNS name */
|
|
|
|
};
|
|
|
|
|
2011-06-04 00:01:45 +04:00
|
|
|
typedef struct DecodedCert DecodedCert;
|
|
|
|
typedef struct Signer Signer;
|
|
|
|
|
|
|
|
|
2011-06-03 02:43:27 +04:00
|
|
|
struct DecodedCert {
|
2011-02-05 22:14:47 +03:00
|
|
|
byte* publicKey;
|
|
|
|
word32 pubKeySize;
|
|
|
|
int pubKeyStored;
|
|
|
|
word32 certBegin; /* offset to start of cert */
|
|
|
|
word32 sigIndex; /* offset to start of signature */
|
|
|
|
word32 sigLength; /* length of signature */
|
|
|
|
word32 signatureOID; /* sum of algorithm object id */
|
|
|
|
word32 keyOID; /* sum of key algo object id */
|
2012-08-01 04:45:48 +04:00
|
|
|
DNS_entry* altNames; /* alt names list of dns entries */
|
2011-02-05 22:14:47 +03:00
|
|
|
byte subjectHash[SHA_SIZE]; /* hash of all Names */
|
|
|
|
byte issuerHash[SHA_SIZE]; /* hash of all Names */
|
2012-05-09 02:12:33 +04:00
|
|
|
#ifdef HAVE_OCSP
|
|
|
|
byte issuerKeyHash[SHA_SIZE]; /* hash of the public Key */
|
|
|
|
#endif /* HAVE_OCSP */
|
2011-02-05 22:14:47 +03:00
|
|
|
byte* signature; /* not owned, points into raw cert */
|
|
|
|
char* subjectCN; /* CommonName */
|
|
|
|
int subjectCNLen;
|
2012-07-28 03:51:46 +04:00
|
|
|
int subjectCNStored; /* have we saved a copy we own */
|
2011-02-05 22:14:47 +03:00
|
|
|
char issuer[ASN_NAME_MAX]; /* full name including common name */
|
|
|
|
char subject[ASN_NAME_MAX]; /* full name including common name */
|
|
|
|
int verify; /* Default to yes, but could be off */
|
|
|
|
byte* source; /* byte buffer holder cert, NOT owner */
|
|
|
|
word32 srcIdx; /* current offset into buffer */
|
2011-06-16 22:46:45 +04:00
|
|
|
word32 maxIdx; /* max offset based on init size */
|
2011-02-05 22:14:47 +03:00
|
|
|
void* heap; /* for user memory overrides */
|
2011-04-11 23:55:17 +04:00
|
|
|
byte serial[EXTERNAL_SERIAL_SIZE]; /* raw serial number */
|
|
|
|
int serialSz; /* raw serial bytes stored */
|
2011-10-08 03:50:32 +04:00
|
|
|
byte* extensions; /* not owned, points into raw cert */
|
|
|
|
int extensionsSz; /* length of cert extensions */
|
|
|
|
word32 extensionsIdx; /* if want to go back and parse later */
|
2012-05-15 02:38:59 +04:00
|
|
|
byte* extAuthInfo; /* Authority Information Access URI */
|
|
|
|
int extAuthInfoSz; /* length of the URI */
|
|
|
|
byte* extCrlInfo; /* CRL Distribution Points */
|
|
|
|
int extCrlInfoSz; /* length of the URI */
|
2011-11-03 01:57:14 +04:00
|
|
|
byte isCA; /* CA basic constraint true */
|
2011-02-05 22:14:47 +03:00
|
|
|
#ifdef CYASSL_CERT_GEN
|
2011-08-05 02:42:55 +04:00
|
|
|
/* easy access to subject info for other sign */
|
2011-02-05 22:14:47 +03:00
|
|
|
char* subjectSN;
|
|
|
|
int subjectSNLen;
|
|
|
|
char* subjectC;
|
|
|
|
int subjectCLen;
|
|
|
|
char* subjectL;
|
|
|
|
int subjectLLen;
|
|
|
|
char* subjectST;
|
|
|
|
int subjectSTLen;
|
|
|
|
char* subjectO;
|
|
|
|
int subjectOLen;
|
|
|
|
char* subjectOU;
|
|
|
|
int subjectOULen;
|
|
|
|
char* subjectEmail;
|
|
|
|
int subjectEmailLen;
|
2012-05-18 01:41:45 +04:00
|
|
|
byte* beforeDate;
|
|
|
|
int beforeDateLen;
|
|
|
|
byte* afterDate;
|
|
|
|
int afterDateLen;
|
2011-02-05 22:14:47 +03:00
|
|
|
#endif /* CYASSL_CERT_GEN */
|
2011-06-03 02:43:27 +04:00
|
|
|
};
|
2011-02-05 22:14:47 +03:00
|
|
|
|
2013-03-08 05:44:40 +04:00
|
|
|
#ifdef SHA_DIGEST_SIZE
|
|
|
|
#define SIGNER_DIGEST_SIZE SHA_DIGEST_SIZE
|
|
|
|
#else
|
|
|
|
#define SIGNER_DIGEST_SIZE 160
|
|
|
|
#endif
|
2011-02-05 22:14:47 +03:00
|
|
|
|
|
|
|
/* CA Signers */
|
|
|
|
struct Signer {
|
|
|
|
byte* publicKey;
|
|
|
|
word32 pubKeySize;
|
|
|
|
word32 keyOID; /* key type */
|
|
|
|
char* name; /* common name */
|
2013-03-08 05:44:40 +04:00
|
|
|
byte hash[SIGNER_DIGEST_SIZE];/* sha hash of names in certificate */
|
2011-02-05 22:14:47 +03:00
|
|
|
Signer* next;
|
|
|
|
};
|
|
|
|
|
|
|
|
|
2011-06-04 00:01:45 +04:00
|
|
|
/* not for public consumption but may use for testing sometimes */
|
|
|
|
#ifdef CYASSL_TEST_CERT
|
|
|
|
#define CYASSL_TEST_API CYASSL_API
|
|
|
|
#else
|
|
|
|
#define CYASSL_TEST_API CYASSL_LOCAL
|
|
|
|
#endif
|
|
|
|
|
2012-08-01 04:45:48 +04:00
|
|
|
CYASSL_TEST_API void FreeAltNames(DNS_entry*, void*);
|
2011-06-16 22:46:45 +04:00
|
|
|
CYASSL_TEST_API void InitDecodedCert(DecodedCert*, byte*, word32, void*);
|
2011-06-04 00:01:45 +04:00
|
|
|
CYASSL_TEST_API void FreeDecodedCert(DecodedCert*);
|
2012-05-04 05:07:31 +04:00
|
|
|
CYASSL_TEST_API int ParseCert(DecodedCert*, int type, int verify, void* cm);
|
2011-06-04 00:01:45 +04:00
|
|
|
|
2012-05-04 05:07:31 +04:00
|
|
|
CYASSL_LOCAL int ParseCertRelative(DecodedCert*, int type, int verify,void* cm);
|
2012-05-03 19:18:59 +04:00
|
|
|
CYASSL_LOCAL int DecodeToKey(DecodedCert*, int verify);
|
2011-02-05 22:14:47 +03:00
|
|
|
|
2011-04-27 02:41:16 +04:00
|
|
|
CYASSL_LOCAL word32 EncodeSignature(byte* out, const byte* digest, word32 digSz,
|
|
|
|
int hashOID);
|
2011-02-05 22:14:47 +03:00
|
|
|
|
2011-04-27 02:41:16 +04:00
|
|
|
CYASSL_LOCAL Signer* MakeSigner(void*);
|
|
|
|
CYASSL_LOCAL void FreeSigners(Signer*, void*);
|
2011-02-05 22:14:47 +03:00
|
|
|
|
|
|
|
|
2011-04-27 02:41:16 +04:00
|
|
|
CYASSL_LOCAL int ToTraditional(byte* buffer, word32 length);
|
|
|
|
CYASSL_LOCAL int ToTraditionalEnc(byte* buffer, word32 length,const char*, int);
|
2011-02-05 22:14:47 +03:00
|
|
|
|
2012-05-25 01:07:59 +04:00
|
|
|
CYASSL_LOCAL int ValidateDate(const byte* date, byte format, int dateType);
|
2011-02-05 22:14:47 +03:00
|
|
|
|
|
|
|
#ifdef HAVE_ECC
|
|
|
|
/* ASN sig helpers */
|
2011-04-27 02:41:16 +04:00
|
|
|
CYASSL_LOCAL int StoreECC_DSA_Sig(byte* out, word32* outLen, mp_int* r,
|
|
|
|
mp_int* s);
|
|
|
|
CYASSL_LOCAL int DecodeECC_DSA_Sig(const byte* sig, word32 sigLen,
|
|
|
|
mp_int* r, mp_int* s);
|
2011-02-05 22:14:47 +03:00
|
|
|
/* private key helpers */
|
2011-04-27 02:41:16 +04:00
|
|
|
CYASSL_LOCAL int EccPrivateKeyDecode(const byte* input,word32* inOutIdx,
|
|
|
|
ecc_key*,word32);
|
2011-02-05 22:14:47 +03:00
|
|
|
#endif
|
|
|
|
|
|
|
|
#ifdef CYASSL_CERT_GEN
|
|
|
|
|
|
|
|
enum cert_enums {
|
|
|
|
NAME_ENTRIES = 8,
|
|
|
|
JOINT_LEN = 2,
|
|
|
|
EMAIL_JOINT_LEN = 9,
|
|
|
|
RSA_KEY = 10,
|
|
|
|
NTRU_KEY = 11
|
|
|
|
};
|
|
|
|
|
|
|
|
|
|
|
|
#endif /* CYASSL_CERT_GEN */
|
|
|
|
|
|
|
|
|
2012-05-29 20:11:37 +04:00
|
|
|
|
|
|
|
/* for pointer use */
|
|
|
|
typedef struct CertStatus CertStatus;
|
|
|
|
|
2012-04-27 00:52:48 +04:00
|
|
|
#ifdef HAVE_OCSP
|
|
|
|
|
|
|
|
enum Ocsp_Response_Status {
|
|
|
|
OCSP_SUCCESSFUL = 0, /* Response has valid confirmations */
|
|
|
|
OCSP_MALFORMED_REQUEST = 1, /* Illegal confirmation request */
|
|
|
|
OCSP_INTERNAL_ERROR = 2, /* Internal error in issuer */
|
|
|
|
OCSP_TRY_LATER = 3, /* Try again later */
|
|
|
|
OCSP_SIG_REQUIRED = 5, /* Must sign the request (4 is skipped) */
|
|
|
|
OCSP_UNAUTHROIZED = 6 /* Request unauthorized */
|
|
|
|
};
|
|
|
|
|
|
|
|
|
|
|
|
enum Ocsp_Cert_Status {
|
|
|
|
CERT_GOOD = 0,
|
|
|
|
CERT_REVOKED = 1,
|
|
|
|
CERT_UNKNOWN = 2
|
|
|
|
};
|
|
|
|
|
|
|
|
|
|
|
|
enum Ocsp_Sums {
|
2012-05-18 21:18:56 +04:00
|
|
|
OCSP_BASIC_OID = 117,
|
|
|
|
OCSP_NONCE_OID = 118
|
2012-04-27 00:52:48 +04:00
|
|
|
};
|
|
|
|
|
|
|
|
|
2012-05-18 21:18:56 +04:00
|
|
|
typedef struct OcspRequest OcspRequest;
|
2012-04-27 00:52:48 +04:00
|
|
|
typedef struct OcspResponse OcspResponse;
|
2012-05-03 01:45:30 +04:00
|
|
|
|
2012-04-27 00:52:48 +04:00
|
|
|
|
2012-05-29 20:11:37 +04:00
|
|
|
struct CertStatus {
|
2012-06-01 04:29:32 +04:00
|
|
|
CertStatus* next;
|
2012-05-29 20:11:37 +04:00
|
|
|
|
2012-06-01 04:29:32 +04:00
|
|
|
byte serial[EXTERNAL_SERIAL_SIZE];
|
|
|
|
int serialSz;
|
2012-05-29 20:11:37 +04:00
|
|
|
|
|
|
|
int status;
|
|
|
|
|
2012-06-01 04:29:32 +04:00
|
|
|
byte thisDate[MAX_DATE_SIZE];
|
|
|
|
byte nextDate[MAX_DATE_SIZE];
|
|
|
|
byte thisDateFormat;
|
|
|
|
byte nextDateFormat;
|
2012-05-29 20:11:37 +04:00
|
|
|
};
|
|
|
|
|
|
|
|
|
2012-04-27 00:52:48 +04:00
|
|
|
struct OcspResponse {
|
|
|
|
int responseStatus; /* return code from Responder */
|
|
|
|
|
2012-06-01 04:29:32 +04:00
|
|
|
byte* response; /* Pointer to beginning of OCSP Response */
|
|
|
|
word32 responseSz; /* length of the OCSP Response */
|
2012-04-27 00:52:48 +04:00
|
|
|
|
2012-06-01 22:57:03 +04:00
|
|
|
byte producedDate[MAX_DATE_SIZE];
|
|
|
|
/* Date at which this response was signed */
|
|
|
|
byte producedDateFormat; /* format of the producedDate */
|
2012-06-01 04:29:32 +04:00
|
|
|
byte* issuerHash;
|
|
|
|
byte* issuerKeyHash;
|
|
|
|
|
|
|
|
byte* cert;
|
|
|
|
word32 certSz;
|
2012-05-18 21:18:56 +04:00
|
|
|
|
2012-06-01 04:29:32 +04:00
|
|
|
byte* sig; /* Pointer to sig in source */
|
|
|
|
word32 sigSz; /* Length in octets for the sig */
|
2012-04-27 00:52:48 +04:00
|
|
|
word32 sigOID; /* OID for hash used for sig */
|
|
|
|
|
2012-06-01 04:29:32 +04:00
|
|
|
CertStatus* status; /* certificate status to fill out */
|
2012-04-27 00:52:48 +04:00
|
|
|
|
2012-05-29 20:11:37 +04:00
|
|
|
byte* nonce; /* pointer to nonce inside ASN.1 response */
|
|
|
|
int nonceSz; /* length of the nonce string */
|
2012-05-18 21:18:56 +04:00
|
|
|
|
2012-04-27 00:52:48 +04:00
|
|
|
byte* source; /* pointer to source buffer, not owned */
|
|
|
|
word32 maxIdx; /* max offset based on init size */
|
|
|
|
};
|
|
|
|
|
|
|
|
|
2012-05-18 21:18:56 +04:00
|
|
|
struct OcspRequest {
|
2012-06-01 04:29:32 +04:00
|
|
|
DecodedCert* cert;
|
|
|
|
|
2012-12-19 22:18:11 +04:00
|
|
|
byte useNonce;
|
2012-06-01 04:29:32 +04:00
|
|
|
byte nonce[MAX_OCSP_NONCE_SZ];
|
2012-05-18 21:18:56 +04:00
|
|
|
int nonceSz;
|
|
|
|
|
2012-06-01 04:29:32 +04:00
|
|
|
byte* issuerHash; /* pointer to issuerHash in source cert */
|
|
|
|
byte* issuerKeyHash; /* pointer to issuerKeyHash in source cert */
|
|
|
|
byte* serial; /* pointer to serial number in source cert */
|
|
|
|
int serialSz; /* length of the serial number */
|
2012-05-29 20:11:37 +04:00
|
|
|
|
|
|
|
byte* dest; /* pointer to the destination ASN.1 buffer */
|
|
|
|
word32 destSz; /* length of the destination buffer */
|
2012-05-18 21:18:56 +04:00
|
|
|
};
|
|
|
|
|
|
|
|
|
2012-06-01 04:29:32 +04:00
|
|
|
CYASSL_LOCAL void InitOcspResponse(OcspResponse*, CertStatus*, byte*, word32);
|
2012-04-27 01:16:34 +04:00
|
|
|
CYASSL_LOCAL int OcspResponseDecode(OcspResponse*);
|
2012-05-18 21:18:56 +04:00
|
|
|
|
2012-12-19 22:18:11 +04:00
|
|
|
CYASSL_LOCAL void InitOcspRequest(OcspRequest*, DecodedCert*,
|
|
|
|
byte, byte*, word32);
|
2012-06-01 04:29:32 +04:00
|
|
|
CYASSL_LOCAL int EncodeOcspRequest(OcspRequest*);
|
2012-04-27 00:52:48 +04:00
|
|
|
|
2012-05-18 21:18:56 +04:00
|
|
|
CYASSL_LOCAL int CompareOcspReqResp(OcspRequest*, OcspResponse*);
|
|
|
|
|
2012-04-27 00:52:48 +04:00
|
|
|
|
|
|
|
#endif /* HAVE_OCSP */
|
|
|
|
|
|
|
|
|
2012-05-17 04:35:51 +04:00
|
|
|
/* for pointer use */
|
2012-05-17 04:04:56 +04:00
|
|
|
typedef struct RevokedCert RevokedCert;
|
|
|
|
|
2012-05-17 04:35:51 +04:00
|
|
|
#ifdef HAVE_CRL
|
|
|
|
|
2012-05-17 04:04:56 +04:00
|
|
|
struct RevokedCert {
|
|
|
|
byte serialNumber[EXTERNAL_SERIAL_SIZE];
|
|
|
|
int serialSz;
|
|
|
|
RevokedCert* next;
|
|
|
|
};
|
|
|
|
|
|
|
|
typedef struct DecodedCRL DecodedCRL;
|
|
|
|
|
|
|
|
struct DecodedCRL {
|
|
|
|
word32 certBegin; /* offset to start of cert */
|
|
|
|
word32 sigIndex; /* offset to start of signature */
|
|
|
|
word32 sigLength; /* length of signature */
|
|
|
|
word32 signatureOID; /* sum of algorithm object id */
|
|
|
|
byte* signature; /* pointer into raw source, not owned */
|
|
|
|
byte issuerHash[SHA_DIGEST_SIZE]; /* issuer hash */
|
2012-11-27 06:40:43 +04:00
|
|
|
byte crlHash[SHA_DIGEST_SIZE]; /* raw crl data hash */
|
2012-05-17 04:04:56 +04:00
|
|
|
byte lastDate[MAX_DATE_SIZE]; /* last date updated */
|
|
|
|
byte nextDate[MAX_DATE_SIZE]; /* next update date */
|
2012-05-25 01:07:59 +04:00
|
|
|
byte lastDateFormat; /* format of last date */
|
|
|
|
byte nextDateFormat; /* format of next date */
|
2012-05-17 04:04:56 +04:00
|
|
|
RevokedCert* certs; /* revoked cert list */
|
|
|
|
int totalCerts; /* number on list */
|
|
|
|
};
|
|
|
|
|
|
|
|
CYASSL_LOCAL void InitDecodedCRL(DecodedCRL*);
|
2012-11-02 01:14:40 +04:00
|
|
|
CYASSL_LOCAL int ParseCRL(DecodedCRL*, const byte* buff, word32 sz, void* cm);
|
2012-05-17 04:04:56 +04:00
|
|
|
CYASSL_LOCAL void FreeDecodedCRL(DecodedCRL*);
|
|
|
|
|
|
|
|
|
|
|
|
#endif /* HAVE_CRL */
|
|
|
|
|
|
|
|
|
2011-02-05 22:14:47 +03:00
|
|
|
#ifdef __cplusplus
|
|
|
|
} /* extern "C" */
|
|
|
|
#endif
|
|
|
|
|
|
|
|
#endif /* CTAO_CRYPT_ASN_H */
|
|
|
|
|
2012-11-02 02:03:29 +04:00
|
|
|
#endif /* !NO_ASN */
|