Security-57031.1.35.tar.gz

[apple/security.git] / SecurityTests / clxutils / ocspTool / findOcspUrl.cpp

diff --git a/SecurityTests/clxutils/ocspTool/findOcspUrl.cpp b/SecurityTests/clxutils/ocspTool/findOcspUrl.cpp
new file mode 100644 (file)
index 0000000..8dc4253
--- /dev/null
+++ b/SecurityTests/clxutils/ocspTool/findOcspUrl.cpp
@@ -0,0 +1,61 @@
+/*
+ * Copyright (c) 2002,2005 Apple Computer, Inc. All Rights Reserved.
+ * 
+ * The contents of this file constitute Original Code as defined in and are
+ * subject to the Apple Public Source License Version 1.2 (the 'License').
+ * You may not use this file except in compliance with the License. Please obtain
+ * a copy of the License at http://www.apple.com/publicsource and read it before
+ * using this file.
+ * 
+ * This Original Code and all software distributed under the License are
+ * distributed on an 'AS IS' basis, WITHOUT WARRANTY OF ANY KIND, EITHER EXPRESS
+ * OR IMPLIED, AND APPLE HEREBY DISCLAIMS ALL SUCH WARRANTIES, INCLUDING WITHOUT
+ * LIMITATION, ANY WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR
+ * PURPOSE, QUIET ENJOYMENT OR NON-INFRINGEMENT. Please see the License for the
+ * specific language governing rights and limitations under the License.
+ */
+
+
+/*
+ * findOcspUrl.cpp - find URL for OCSP for aspecified cert.
+ */
+ 
+#include <Security/SecAsn1Coder.h>
+#include <clAppUtils/CertParser.h>
+#include <utilLib/common.h>
+
+/* 
+ * Examine cert, looking for AuthorityInfoAccess, with id-ad-ocsp URIs. Return
+ * the first URL found.
+ */
+CSSM_DATA *ocspUrlFromCert(
+       CertParser &subject, 
+       SecAsn1CoderRef coder)
+{
+       CE_AuthorityInfoAccess *aia = (CE_AuthorityInfoAccess *)
+               subject.extensionForOid(CSSMOID_AuthorityInfoAccess);
+       if(aia == NULL) {
+               printf("***No AIA extension found; OCSP aborted.\n");
+               return NULL;
+       }
+       CSSM_DATA *url = NULL;
+       for(unsigned dex=0; dex<aia->numAccessDescriptions; dex++) {
+               CE_AccessDescription *ad = &aia->accessDescriptions[dex];
+               if(!appCompareCssmData(&ad->accessMethod, &CSSMOID_AD_OCSP)) {
+                       continue;
+               }
+               CE_GeneralName *genName = &ad->accessLocation;
+               if(genName->nameType != GNT_URI) {
+                       printf("tpOcspUrlsFromCert: CSSMOID_AD_OCSP, but not type URI");
+                       continue;
+               }
+               
+               /* got one */
+               url = (CSSM_DATA *)SecAsn1Malloc(coder, sizeof(CSSM_DATA));
+               SecAsn1AllocCopyItem(coder, &genName->name, url);
+               return url;
+       }
+       
+       printf("***No AIA extension with URI found; OCSP aborted.\n");
+       return NULL;
+}