+++ /dev/null
-/*
- * Copyright (c) 2003-2006,2008,2010-2012,2014 Apple Inc. All Rights Reserved.
- *
- * @APPLE_LICENSE_HEADER_START@
- *
- * This file contains Original Code and/or Modifications of Original Code
- * as defined in and that are subject to the Apple Public Source License
- * Version 2.0 (the 'License'). You may not use this file except in
- * compliance with the License. Please obtain a copy of the License at
- * http://www.opensource.apple.com/apsl/ and read it before using this
- * file.
- *
- * The Original Code and all software distributed under the License are
- * distributed on an 'AS IS' basis, WITHOUT WARRANTY OF ANY KIND, EITHER
- * EXPRESS OR IMPLIED, AND APPLE HEREBY DISCLAIMS ALL SUCH WARRANTIES,
- * INCLUDING WITHOUT LIMITATION, ANY WARRANTIES OF MERCHANTABILITY,
- * FITNESS FOR A PARTICULAR PURPOSE, QUIET ENJOYMENT OR NON-INFRINGEMENT.
- * Please see the License for the specific language governing rights and
- * limitations under the License.
- *
- * @APPLE_LICENSE_HEADER_END@
- *
- * nameTemplates.c - ASN1 templates for X509 Name, GeneralName, etc.
- */
-
-#include "SecAsn1Templates.h"
-#include "nameTemplates.h"
-#include "X509Templates.h"
-#include "keyTemplates.h"
-#include <stddef.h>
-#include <assert.h>
-
-typedef struct {
- SecAsn1Oid typeId;
- SecAsn1Item value; // unparsed, BER-encoded
-} CE_OtherName;
-
-// MARK: ----- Generalized NSS_TaggedItem template chooser support -----
-
-/*
- * Generalized Template chooser.
- */
-const SecAsn1Template * SecAsn1TaggedTemplateChooser(
- /* Four args passed to specific SecAsn1TemplateChooser */
- void *arg, // currently not used
- Boolean enc,
- const char *buf,
- void *dest,
- /* array of tag/template pairs */
- const NSS_TagChoice *chooser)
-{
- unsigned char tag = 0;
- const SecAsn1Template *templ = NULL;
- NSS_TaggedItem *item = (NSS_TaggedItem *)dest;
-
- assert(item != NULL);
- assert((chooser != NULL) && (chooser->templ != NULL));
-
- if(enc) {
- /* encoding: tag from an NSS_TaggedItem at *dest */
- tag = item->tag;
- }
- else {
- /* decoding: tag from raw bytes being decoded */
- tag = buf[0] & SEC_ASN1_TAGNUM_MASK;
- /* and tell caller what's coming */
- item->tag = tag;
- }
-
- /* infer template from tag */
- const NSS_TagChoice *thisChoice;
- for(thisChoice=chooser; thisChoice->templ != NULL; thisChoice++) {
- if(tag == thisChoice->tag) {
- templ = thisChoice->templ;
- break;
- }
- }
- if(templ == NULL) {
- /*
- * Tag not found. On decoding, this is the caller's fault
- * and they'll have to deal with it.
- * On decode, pick a template guaranteed to cause a decoding
- * failure - the template from the first array of
- * NSS_TagChoices should do the trick since its tag didn't match.
- */
- templ = chooser[0].templ;
- }
- return templ;
-}
-
-// MARK: ----- X509 Name, RDN ------
-
-/* AttributeTypeAndValue */
-
-/*
- * NSS_ATV Template chooser.
- */
-static const NSS_TagChoice atvChoices[] = {
- { SEC_ASN1_PRINTABLE_STRING, kSecAsn1PrintableStringTemplate} ,
- { SEC_ASN1_TELETEX_STRING, kSecAsn1TeletexStringTemplate },
- { SEC_ASN1_UNIVERSAL_STRING, kSecAsn1UniversalStringTemplate },
- { SEC_ASN1_UTF8_STRING, kSecAsn1UTF8StringTemplate },
- { SEC_ASN1_BMP_STRING, kSecAsn1BMPStringTemplate },
- { SEC_ASN1_IA5_STRING, kSecAsn1IA5StringTemplate },
- { 0, NULL}
-};
-
-static const SecAsn1Template * NSS_ATVChooser(
- void *arg,
- Boolean enc,
- const char *buf,
- void *dest)
-{
- return SecAsn1TaggedTemplateChooser(arg, enc, buf, dest, atvChoices);
-}
-
-static const SecAsn1TemplateChooserPtr NSS_ATVChooserPtr = NSS_ATVChooser;
-
-const SecAsn1Template kSecAsn1ATVTemplate[] = {
- { SEC_ASN1_SEQUENCE,
- 0, NULL, sizeof(NSS_ATV) },
- { SEC_ASN1_OBJECT_ID,
- offsetof(NSS_ATV,type), },
- { SEC_ASN1_INLINE | SEC_ASN1_DYNAMIC,
- offsetof(NSS_ATV,value),
- &NSS_ATVChooserPtr },
- { 0, }
-};
-
-/* RelativeDistinguishedName */
-const SecAsn1Template kSecAsn1RDNTemplate[] = {
- { SEC_ASN1_SET_OF,
- offsetof(NSS_RDN,atvs), kSecAsn1ATVTemplate, sizeof(NSS_RDN) }
-};
-
-/* X509 Name */
-const SecAsn1Template kSecAsn1NameTemplate[] = {
- { SEC_ASN1_SEQUENCE_OF,
- offsetof(NSS_Name,rdns), kSecAsn1RDNTemplate, sizeof(NSS_Name) }
-};
-
-// MARK: ----- OtherName, GeneralizedName -----
-
-/*
- * CE_OtherName.value expressed as ASN_ANY, not en/decoded.
- */
-const SecAsn1Template NSS_OtherNameTemplate[] = {
- { SEC_ASN1_SEQUENCE,
- 0, NULL, sizeof(CE_OtherName) },
- { SEC_ASN1_OBJECT_ID,
- offsetof(CE_OtherName,typeId), },
- { SEC_ASN1_ANY,
- offsetof(CE_OtherName,value), },
- { 0, }
-};
-
-/*
- * For decoding an OtherName when it's a context-specific CHOICE
- * of a GeneralName.
- */
-const SecAsn1Template kSecAsn1GenNameOtherNameTemplate[] = {
- { SEC_ASN1_CONTEXT_SPECIFIC | SEC_ASN1_CONSTRUCTED | NGT_OtherName,
- 0, NSS_OtherNameTemplate, sizeof(CE_OtherName) }
-};
-
-/*
- * NSS_GeneralName template chooser.
- * First, a crufty set of templates specific to this context.
- * All offsets are zero (the fundamental type is a NSS_TaggedItem).
- *
- * NOTE WELL: RFC2459 says that all of the choices within a
- * GeneralName (which these templates implement) have implicit
- * context-specific tags.
- * HOWEVER: RFC2538 and the real world indicate that the directoryName
- * choice is EXPLICITLY tagged. This causes an extra layer of DER -
- * the "thing" is wrapped in a header consisting of the tag byte
- * (SEC_ASN1_CONTEXT_SPECIFIC plus context tag plus SEC_ASN1_CONSTRUCTED)
- * and the length field.
- *
- * To actually implement this in the current pile-of-cruft context,
- * the directoryName and otherName choices are processed here with
- * NSS_InnerAnyTemplate which strips off the explicit tag layer, leaving
- * further processing to the app.
- *
- * I sure hope we don't find certs that actually conform to RFC2459 on
- * this. We might have to handle both. Be forewarned.
- */
-
-/* inner contents of an ASN_ANY */
-
-#define NSS_GEN_NAME_OFFSET (offsetof(NSS_GeneralName,item))
-#define NSS_GEN_NAME_SIZE (sizeof(NSS_GeneralName))
-
-const SecAsn1Template kSecAsn1OtherNameTemplate[] = {
- { SEC_ASN1_CONTEXT_SPECIFIC | SEC_ASN1_CONSTRUCTED | NGT_OtherName,
- NSS_GEN_NAME_OFFSET, kSecAsn1AnyTemplate, NSS_GEN_NAME_SIZE }
-};
-const SecAsn1Template kSecAsn1RFC822NameTemplate[] = {
- { SEC_ASN1_CONTEXT_SPECIFIC | NGT_RFC822Name,
- NSS_GEN_NAME_OFFSET, kSecAsn1IA5StringTemplate, NSS_GEN_NAME_SIZE }
-};
-const SecAsn1Template kSecAsn1DNSNameTemplate[] = {
- { SEC_ASN1_CONTEXT_SPECIFIC | NGT_DNSName,
- NSS_GEN_NAME_OFFSET, kSecAsn1IA5StringTemplate, NSS_GEN_NAME_SIZE }
-};
-const SecAsn1Template kSecAsn1X400AddressTemplate[] = {
- { SEC_ASN1_CONTEXT_SPECIFIC | SEC_ASN1_CONSTRUCTED | NGT_X400Address,
- NSS_GEN_NAME_OFFSET, kSecAsn1AnyTemplate, NSS_GEN_NAME_SIZE }
-};
-const SecAsn1Template kSecAsn1DirectoryNameTemplate[] = {
- { SEC_ASN1_CONTEXT_SPECIFIC | SEC_ASN1_CONSTRUCTED |
- SEC_ASN1_EXPLICIT | NGT_DirectoryName,
- NSS_GEN_NAME_OFFSET, kSecAsn1AnyTemplate, NSS_GEN_NAME_SIZE }
- };
-const SecAsn1Template kSecAsn1EdiPartyNameTemplate[] = {
- { SEC_ASN1_CONTEXT_SPECIFIC | SEC_ASN1_CONSTRUCTED | NGT_EdiPartyName,
- NSS_GEN_NAME_OFFSET, kSecAsn1AnyTemplate, NSS_GEN_NAME_SIZE }
-};
-const SecAsn1Template kSecAsn1URITemplate[] = {
- { SEC_ASN1_CONTEXT_SPECIFIC | NGT_URI,
- NSS_GEN_NAME_OFFSET, kSecAsn1IA5StringTemplate, NSS_GEN_NAME_SIZE }
-};
-const SecAsn1Template kSecAsn1IPAddressTemplate[] = {
- { SEC_ASN1_CONTEXT_SPECIFIC | NGT_IPAddress,
- NSS_GEN_NAME_OFFSET, kSecAsn1OctetStringTemplate, NSS_GEN_NAME_SIZE }
-};
-const SecAsn1Template kSecAsn1RegisteredIDTemplate[] = {
- { SEC_ASN1_CONTEXT_SPECIFIC | NGT_RegisteredID,
- NSS_GEN_NAME_OFFSET, kSecAsn1ObjectIDTemplate, NSS_GEN_NAME_SIZE }
-};
-
-static const NSS_TagChoice genNameChoices[] = {
- { NGT_OtherName, kSecAsn1OtherNameTemplate} ,
- { NGT_RFC822Name, kSecAsn1RFC822NameTemplate },
- { NGT_DNSName, kSecAsn1DNSNameTemplate },
- { NGT_X400Address, kSecAsn1X400AddressTemplate },
- { NGT_DirectoryName, kSecAsn1DirectoryNameTemplate },
- { NGT_EdiPartyName, kSecAsn1EdiPartyNameTemplate },
- { NGT_URI, kSecAsn1URITemplate },
- { NGT_IPAddress, kSecAsn1IPAddressTemplate },
- { NGT_RegisteredID, kSecAsn1RegisteredIDTemplate },
- { 0, NULL}
-};
-
-static const SecAsn1Template * NSS_genNameChooser(
- void *arg,
- Boolean enc,
- const char *buf,
- void *dest)
-{
- return SecAsn1TaggedTemplateChooser(arg, enc, buf, dest, genNameChoices);
-}
-
-static const SecAsn1TemplateChooserPtr NSS_genNameChooserPtr =
- NSS_genNameChooser;
-
-const SecAsn1Template kSecAsn1GeneralNameTemplate[] = {
- { SEC_ASN1_DYNAMIC | SEC_ASN1_CONTEXT_SPECIFIC,
- offsetof(NSS_GeneralName,item), // Needed?
- &NSS_genNameChooserPtr },
- { 0, } // Needed?
-};
projects / apple / security.git / blobdiff