X-Git-Url: https://git.saurik.com/apple/security.git/blobdiff_plain/80e2389990082500d76eb566d4946be3e786c3ef..d8f41ccd20de16f8ebe2ccc84d47bf1cb2b26bbb:/SecurityTests/clxutils/ocspTool/findOcspUrl.cpp

diff --git a/SecurityTests/clxutils/ocspTool/findOcspUrl.cpp b/SecurityTests/clxutils/ocspTool/findOcspUrl.cpp
new file mode 100644
index 00000000..8dc42533
--- /dev/null
+++ b/SecurityTests/clxutils/ocspTool/findOcspUrl.cpp
@@ -0,0 +1,61 @@
+/*
+ * Copyright (c) 2002,2005 Apple Computer, Inc. All Rights Reserved.
+ * 
+ * The contents of this file constitute Original Code as defined in and are
+ * subject to the Apple Public Source License Version 1.2 (the 'License').
+ * You may not use this file except in compliance with the License. Please obtain
+ * a copy of the License at http://www.apple.com/publicsource and read it before
+ * using this file.
+ * 
+ * This Original Code and all software distributed under the License are
+ * distributed on an 'AS IS' basis, WITHOUT WARRANTY OF ANY KIND, EITHER EXPRESS
+ * OR IMPLIED, AND APPLE HEREBY DISCLAIMS ALL SUCH WARRANTIES, INCLUDING WITHOUT
+ * LIMITATION, ANY WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR
+ * PURPOSE, QUIET ENJOYMENT OR NON-INFRINGEMENT. Please see the License for the
+ * specific language governing rights and limitations under the License.
+ */
+
+
+/*
+ * findOcspUrl.cpp - find URL for OCSP for aspecified cert.
+ */
+ 
+#include <Security/SecAsn1Coder.h>
+#include <clAppUtils/CertParser.h>
+#include <utilLib/common.h>
+
+/* 
+ * Examine cert, looking for AuthorityInfoAccess, with id-ad-ocsp URIs. Return
+ * the first URL found.
+ */
+CSSM_DATA *ocspUrlFromCert(
+	CertParser &subject, 
+	SecAsn1CoderRef coder)
+{
+	CE_AuthorityInfoAccess *aia = (CE_AuthorityInfoAccess *)
+		subject.extensionForOid(CSSMOID_AuthorityInfoAccess);
+	if(aia == NULL) {
+		printf("***No AIA extension found; OCSP aborted.\n");
+		return NULL;
+	}
+	CSSM_DATA *url = NULL;
+	for(unsigned dex=0; dex<aia->numAccessDescriptions; dex++) {
+		CE_AccessDescription *ad = &aia->accessDescriptions[dex];
+		if(!appCompareCssmData(&ad->accessMethod, &CSSMOID_AD_OCSP)) {
+			continue;
+		}
+		CE_GeneralName *genName = &ad->accessLocation;
+		if(genName->nameType != GNT_URI) {
+			printf("tpOcspUrlsFromCert: CSSMOID_AD_OCSP, but not type URI");
+			continue;
+		}
+		
+		/* got one */
+		url = (CSSM_DATA *)SecAsn1Malloc(coder, sizeof(CSSM_DATA));
+		SecAsn1AllocCopyItem(coder, &genName->name, url);
+		return url;
+	}
+	
+	printf("***No AIA extension with URI found; OCSP aborted.\n");
+	return NULL;
+}