Line | Source | Count |
1 | | - |
2 | | - |
3 | | - |
4 | | - |
5 | | - |
6 | | - |
7 | | - |
8 | | - |
9 | | - |
10 | | - |
11 | | - |
12 | | - |
13 | | - |
14 | | - |
15 | | - |
16 | | - |
17 | | - |
18 | | - |
19 | | - |
20 | | - |
21 | | - |
22 | | - |
23 | | - |
24 | | - |
25 | | - |
26 | | - |
27 | | - |
28 | | - |
29 | | - |
30 | | - |
31 | | - |
32 | | - |
33 | | - |
34 | | - |
35 | | - |
36 | | - |
37 | | - |
38 | | - |
39 | | - |
40 | | - |
41 | | - |
42 | | - |
43 | | - |
44 | | - |
45 | | - |
46 | | - |
47 | | - |
48 | | - |
49 | | - |
50 | | - |
51 | | - |
52 | | - |
53 | | - |
54 | | - |
55 | | - |
56 | | - |
57 | | - |
58 | | - |
59 | #include <string.h> | - |
60 | | - |
61 | #include <openssl/opensslconf.h> | - |
62 | | - |
63 | #include <openssl/crypto.h> | - |
64 | #include <openssl/err.h> | - |
65 | #include <openssl/pem.h> | - |
66 | #include <openssl/ts.h> | - |
67 | | - |
68 | #ifndef OPENSSL_NO_ENGINE | - |
69 | #include <openssl/engine.h> | - |
70 | #endif | - |
71 | | - |
72 | | - |
73 | | - |
74 | #define BASE_SECTION "tsa" | - |
75 | #define ENV_DEFAULT_TSA "default_tsa" | - |
76 | #define ENV_SERIAL "serial" | - |
77 | #define ENV_CRYPTO_DEVICE "crypto_device" | - |
78 | #define ENV_SIGNER_CERT "signer_cert" | - |
79 | #define ENV_CERTS "certs" | - |
80 | #define ENV_SIGNER_KEY "signer_key" | - |
81 | #define ENV_DEFAULT_POLICY "default_policy" | - |
82 | #define ENV_OTHER_POLICIES "other_policies" | - |
83 | #define ENV_DIGESTS "digests" | - |
84 | #define ENV_ACCURACY "accuracy" | - |
85 | #define ENV_ORDERING "ordering" | - |
86 | #define ENV_TSA_NAME "tsa_name" | - |
87 | #define ENV_ESS_CERT_ID_CHAIN "ess_cert_id_chain" | - |
88 | #define ENV_VALUE_SECS "secs" | - |
89 | #define ENV_VALUE_MILLISECS "millisecs" | - |
90 | #define ENV_VALUE_MICROSECS "microsecs" | - |
91 | #define ENV_CLOCK_PRECISION_DIGITS "clock_precision_digits" | - |
92 | #define ENV_VALUE_YES "yes" | - |
93 | #define ENV_VALUE_NO "no" | - |
94 | | - |
95 | | - |
96 | | - |
97 | X509 * | - |
98 | TS_CONF_load_cert(const char *file) | - |
99 | { | - |
100 | BIO *cert = NULL; | - |
101 | X509 *x = NULL; | - |
102 | | - |
103 | if ((cert = BIO_new_file(file, "r")) == NULL)TRUE | never evaluated | FALSE | never evaluated |
| 0 |
104 | goto end; never executed: goto end; | 0 |
105 | x = PEM_read_bio_X509_AUX(cert, NULL, NULL, NULL); | - |
106 | | - |
107 | end: code before this statement never executed: end: | 0 |
108 | if (x == NULL)TRUE | never evaluated | FALSE | never evaluated |
| 0 |
109 | fprintf(stderr, "unable to load certificate: %s\n", file); never executed: fprintf( stderr , "unable to load certificate: %s\n", file); | 0 |
110 | BIO_free(cert); | - |
111 | return x; never executed: return x; | 0 |
112 | } | - |
113 | | - |
114 | STACK_OF(X509) * | - |
115 | TS_CONF_load_certs(const char *file) | - |
116 | { | - |
117 | BIO *certs = NULL; | - |
118 | STACK_OF(X509) *othercerts = NULL; | - |
119 | STACK_OF(X509_INFO) *allcerts = NULL; | - |
120 | int i; | - |
121 | | - |
122 | if (!(certs = BIO_new_file(file, "r")))TRUE | never evaluated | FALSE | never evaluated |
| 0 |
123 | goto end; never executed: goto end; | 0 |
124 | | - |
125 | if (!(othercerts = sk_X509_new_null()))TRUE | never evaluated | FALSE | never evaluated |
| 0 |
126 | goto end; never executed: goto end; | 0 |
127 | allcerts = PEM_X509_INFO_read_bio(certs, NULL, NULL, NULL); | - |
128 | for (i = 0; i < sk_X509_INFO_num(allcerts); i++) {TRUE | never evaluated | FALSE | never evaluated |
| 0 |
129 | X509_INFO *xi = sk_X509_INFO_value(allcerts, i); | - |
130 | if (xi->x509) {TRUE | never evaluated | FALSE | never evaluated |
| 0 |
131 | if (sk_X509_push(othercerts, xi->x509) == 0) {TRUE | never evaluated | FALSE | never evaluated |
| 0 |
132 | sk_X509_pop_free(othercerts, X509_free); | - |
133 | othercerts = NULL; | - |
134 | goto end; never executed: goto end; | 0 |
135 | } | - |
136 | xi->x509 = NULL; | - |
137 | } never executed: end of block | 0 |
138 | } never executed: end of block | 0 |
139 | | - |
140 | end: code before this statement never executed: end: | 0 |
141 | if (othercerts == NULL)TRUE | never evaluated | FALSE | never evaluated |
| 0 |
142 | fprintf(stderr, "unable to load certificates: %s\n", file); never executed: fprintf( stderr , "unable to load certificates: %s\n", file); | 0 |
143 | sk_X509_INFO_pop_free(allcerts, X509_INFO_free); | - |
144 | BIO_free(certs); | - |
145 | return othercerts; never executed: return othercerts; | 0 |
146 | } | - |
147 | | - |
148 | EVP_PKEY * | - |
149 | TS_CONF_load_key(const char *file, const char *pass) | - |
150 | { | - |
151 | BIO *key = NULL; | - |
152 | EVP_PKEY *pkey = NULL; | - |
153 | | - |
154 | if (!(key = BIO_new_file(file, "r")))TRUE | never evaluated | FALSE | never evaluated |
| 0 |
155 | goto end; never executed: goto end; | 0 |
156 | pkey = PEM_read_bio_PrivateKey(key, NULL, NULL, (char *) pass); | - |
157 | | - |
158 | end: code before this statement never executed: end: | 0 |
159 | if (pkey == NULL)TRUE | never evaluated | FALSE | never evaluated |
| 0 |
160 | fprintf(stderr, "unable to load private key: %s\n", file); never executed: fprintf( stderr , "unable to load private key: %s\n", file); | 0 |
161 | BIO_free(key); | - |
162 | return pkey; never executed: return pkey; | 0 |
163 | } | - |
164 | | - |
165 | | - |
166 | | - |
167 | static void | - |
168 | TS_CONF_lookup_fail(const char *name, const char *tag) | - |
169 | { | - |
170 | fprintf(stderr, "variable lookup failed for %s::%s\n", name, tag); | - |
171 | } never executed: end of block | 0 |
172 | | - |
173 | static void | - |
174 | TS_CONF_invalid(const char *name, const char *tag) | - |
175 | { | - |
176 | fprintf(stderr, "invalid variable value for %s::%s\n", name, tag); | - |
177 | } never executed: end of block | 0 |
178 | | - |
179 | const char * | - |
180 | TS_CONF_get_tsa_section(CONF *conf, const char *section) | - |
181 | { | - |
182 | if (!section) {TRUE | never evaluated | FALSE | never evaluated |
| 0 |
183 | section = NCONF_get_string(conf, BASE_SECTION, ENV_DEFAULT_TSA); | - |
184 | if (!section)TRUE | never evaluated | FALSE | never evaluated |
| 0 |
185 | TS_CONF_lookup_fail(BASE_SECTION, ENV_DEFAULT_TSA); never executed: TS_CONF_lookup_fail("tsa", "default_tsa"); | 0 |
186 | } never executed: end of block | 0 |
187 | return section; never executed: return section; | 0 |
188 | } | - |
189 | | - |
190 | int | - |
191 | TS_CONF_set_serial(CONF *conf, const char *section, TS_serial_cb cb, | - |
192 | TS_RESP_CTX *ctx) | - |
193 | { | - |
194 | int ret = 0; | - |
195 | char *serial = NCONF_get_string(conf, section, ENV_SERIAL); | - |
196 | | - |
197 | if (!serial) {TRUE | never evaluated | FALSE | never evaluated |
| 0 |
198 | TS_CONF_lookup_fail(section, ENV_SERIAL); | - |
199 | goto err; never executed: goto err; | 0 |
200 | } | - |
201 | TS_RESP_CTX_set_serial_cb(ctx, cb, serial); | - |
202 | | - |
203 | ret = 1; | - |
204 | | - |
205 | err: code before this statement never executed: err: | 0 |
206 | return ret; never executed: return ret; | 0 |
207 | } | - |
208 | | - |
209 | #ifndef OPENSSL_NO_ENGINE | - |
210 | | - |
211 | int | - |
212 | TS_CONF_set_crypto_device(CONF *conf, const char *section, const char *device) | - |
213 | { | - |
214 | int ret = 0; | - |
215 | | - |
216 | if (!device)TRUE | never evaluated | FALSE | never evaluated |
| 0 |
217 | device = NCONF_get_string(conf, section, ENV_CRYPTO_DEVICE); never executed: device = NCONF_get_string(conf, section, "crypto_device"); | 0 |
218 | | - |
219 | if (device && !TS_CONF_set_default_engine(device)) {TRUE | never evaluated | FALSE | never evaluated |
TRUE | never evaluated | FALSE | never evaluated |
| 0 |
220 | TS_CONF_invalid(section, ENV_CRYPTO_DEVICE); | - |
221 | goto err; never executed: goto err; | 0 |
222 | } | - |
223 | ret = 1; | - |
224 | | - |
225 | err: code before this statement never executed: err: | 0 |
226 | return ret; never executed: return ret; | 0 |
227 | } | - |
228 | | - |
229 | int | - |
230 | TS_CONF_set_default_engine(const char *name) | - |
231 | { | - |
232 | ENGINE *e = NULL; | - |
233 | int ret = 0; | - |
234 | | - |
235 | | - |
236 | if (strcmp(name, "builtin") == 0) never executed: __result = (((const unsigned char *) (const char *) ( name ))[3] - __s2[3]); never executed: end of block never executed: end of block never executed: __result = (((const unsigned char *) (const char *) ( "builtin" ))[3] - __s2[3]); never executed: end of block never executed: end of block TRUE | never evaluated | FALSE | never evaluated |
TRUE | never evaluated | FALSE | never evaluated |
TRUE | never evaluated | FALSE | never evaluated |
TRUE | never evaluated | FALSE | never evaluated |
TRUE | never evaluated | FALSE | never evaluated |
TRUE | never evaluated | FALSE | never evaluated |
TRUE | never evaluated | FALSE | never evaluated |
TRUE | never evaluated | FALSE | never evaluated |
TRUE | never evaluated | FALSE | never evaluated |
TRUE | never evaluated | FALSE | never evaluated |
TRUE | never evaluated | FALSE | never evaluated |
TRUE | never evaluated | FALSE | never evaluated |
TRUE | never evaluated | FALSE | never evaluated |
| 0 |
237 | return 1; never executed: return 1; | 0 |
238 | | - |
239 | if (!(e = ENGINE_by_id(name)))TRUE | never evaluated | FALSE | never evaluated |
| 0 |
240 | goto err; never executed: goto err; | 0 |
241 | | - |
242 | if (!ENGINE_set_default(e, ENGINE_METHOD_ALL))TRUE | never evaluated | FALSE | never evaluated |
| 0 |
243 | goto err; never executed: goto err; | 0 |
244 | ret = 1; | - |
245 | | - |
246 | err: code before this statement never executed: err: | 0 |
247 | if (!ret) {TRUE | never evaluated | FALSE | never evaluated |
| 0 |
248 | TSerror(TS_R_COULD_NOT_SET_ENGINE); | - |
249 | ERR_asprintf_error_data("engine:%s", name); | - |
250 | } never executed: end of block | 0 |
251 | ENGINE_free(e); | - |
252 | return ret; never executed: return ret; | 0 |
253 | } | - |
254 | | - |
255 | #endif | - |
256 | | - |
257 | int | - |
258 | TS_CONF_set_signer_cert(CONF *conf, const char *section, const char *cert, | - |
259 | TS_RESP_CTX *ctx) | - |
260 | { | - |
261 | int ret = 0; | - |
262 | X509 *cert_obj = NULL; | - |
263 | | - |
264 | if (!cert)TRUE | never evaluated | FALSE | never evaluated |
| 0 |
265 | cert = NCONF_get_string(conf, section, ENV_SIGNER_CERT); never executed: cert = NCONF_get_string(conf, section, "signer_cert"); | 0 |
266 | if (!cert) {TRUE | never evaluated | FALSE | never evaluated |
| 0 |
267 | TS_CONF_lookup_fail(section, ENV_SIGNER_CERT); | - |
268 | goto err; never executed: goto err; | 0 |
269 | } | - |
270 | if (!(cert_obj = TS_CONF_load_cert(cert)))TRUE | never evaluated | FALSE | never evaluated |
| 0 |
271 | goto err; never executed: goto err; | 0 |
272 | if (!TS_RESP_CTX_set_signer_cert(ctx, cert_obj))TRUE | never evaluated | FALSE | never evaluated |
| 0 |
273 | goto err; never executed: goto err; | 0 |
274 | | - |
275 | ret = 1; | - |
276 | | - |
277 | err: code before this statement never executed: err: | 0 |
278 | X509_free(cert_obj); | - |
279 | return ret; never executed: return ret; | 0 |
280 | } | - |
281 | | - |
282 | int | - |
283 | TS_CONF_set_certs(CONF *conf, const char *section, const char *certs, | - |
284 | TS_RESP_CTX *ctx) | - |
285 | { | - |
286 | int ret = 0; | - |
287 | STACK_OF(X509) *certs_obj = NULL; | - |
288 | | - |
289 | if (!certs)TRUE | never evaluated | FALSE | never evaluated |
| 0 |
290 | certs = NCONF_get_string(conf, section, ENV_CERTS); never executed: certs = NCONF_get_string(conf, section, "certs"); | 0 |
291 | | - |
292 | if (!certs)TRUE | never evaluated | FALSE | never evaluated |
| 0 |
293 | goto end; never executed: goto end; | 0 |
294 | if (!(certs_obj = TS_CONF_load_certs(certs)))TRUE | never evaluated | FALSE | never evaluated |
| 0 |
295 | goto err; never executed: goto err; | 0 |
296 | if (!TS_RESP_CTX_set_certs(ctx, certs_obj))TRUE | never evaluated | FALSE | never evaluated |
| 0 |
297 | goto err; never executed: goto err; | 0 |
298 | | - |
299 | end: code before this statement never executed: end: | 0 |
300 | ret = 1; | - |
301 | err: code before this statement never executed: err: | 0 |
302 | sk_X509_pop_free(certs_obj, X509_free); | - |
303 | return ret; never executed: return ret; | 0 |
304 | } | - |
305 | | - |
306 | int | - |
307 | TS_CONF_set_signer_key(CONF *conf, const char *section, const char *key, | - |
308 | const char *pass, TS_RESP_CTX *ctx) | - |
309 | { | - |
310 | int ret = 0; | - |
311 | EVP_PKEY *key_obj = NULL; | - |
312 | | - |
313 | if (!key)TRUE | never evaluated | FALSE | never evaluated |
| 0 |
314 | key = NCONF_get_string(conf, section, ENV_SIGNER_KEY); never executed: key = NCONF_get_string(conf, section, "signer_key"); | 0 |
315 | if (!key) {TRUE | never evaluated | FALSE | never evaluated |
| 0 |
316 | TS_CONF_lookup_fail(section, ENV_SIGNER_KEY); | - |
317 | goto err; never executed: goto err; | 0 |
318 | } | - |
319 | if (!(key_obj = TS_CONF_load_key(key, pass)))TRUE | never evaluated | FALSE | never evaluated |
| 0 |
320 | goto err; never executed: goto err; | 0 |
321 | if (!TS_RESP_CTX_set_signer_key(ctx, key_obj))TRUE | never evaluated | FALSE | never evaluated |
| 0 |
322 | goto err; never executed: goto err; | 0 |
323 | | - |
324 | ret = 1; | - |
325 | | - |
326 | err: code before this statement never executed: err: | 0 |
327 | EVP_PKEY_free(key_obj); | - |
328 | return ret; never executed: return ret; | 0 |
329 | } | - |
330 | | - |
331 | int | - |
332 | TS_CONF_set_def_policy(CONF *conf, const char *section, const char *policy, | - |
333 | TS_RESP_CTX *ctx) | - |
334 | { | - |
335 | int ret = 0; | - |
336 | ASN1_OBJECT *policy_obj = NULL; | - |
337 | | - |
338 | if (!policy)TRUE | never evaluated | FALSE | never evaluated |
| 0 |
339 | policy = NCONF_get_string(conf, section, ENV_DEFAULT_POLICY); never executed: policy = NCONF_get_string(conf, section, "default_policy"); | 0 |
340 | if (!policy) {TRUE | never evaluated | FALSE | never evaluated |
| 0 |
341 | TS_CONF_lookup_fail(section, ENV_DEFAULT_POLICY); | - |
342 | goto err; never executed: goto err; | 0 |
343 | } | - |
344 | if (!(policy_obj = OBJ_txt2obj(policy, 0))) {TRUE | never evaluated | FALSE | never evaluated |
| 0 |
345 | TS_CONF_invalid(section, ENV_DEFAULT_POLICY); | - |
346 | goto err; never executed: goto err; | 0 |
347 | } | - |
348 | if (!TS_RESP_CTX_set_def_policy(ctx, policy_obj))TRUE | never evaluated | FALSE | never evaluated |
| 0 |
349 | goto err; never executed: goto err; | 0 |
350 | | - |
351 | ret = 1; | - |
352 | | - |
353 | err: code before this statement never executed: err: | 0 |
354 | ASN1_OBJECT_free(policy_obj); | - |
355 | return ret; never executed: return ret; | 0 |
356 | } | - |
357 | | - |
358 | int | - |
359 | TS_CONF_set_policies(CONF *conf, const char *section, TS_RESP_CTX *ctx) | - |
360 | { | - |
361 | int ret = 0; | - |
362 | int i; | - |
363 | STACK_OF(CONF_VALUE) *list = NULL; | - |
364 | char *policies = NCONF_get_string(conf, section, ENV_OTHER_POLICIES); | - |
365 | | - |
366 | | - |
367 | if (policies && !(list = X509V3_parse_list(policies))) {TRUE | never evaluated | FALSE | never evaluated |
TRUE | never evaluated | FALSE | never evaluated |
| 0 |
368 | TS_CONF_invalid(section, ENV_OTHER_POLICIES); | - |
369 | goto err; never executed: goto err; | 0 |
370 | } | - |
371 | for (i = 0; i < sk_CONF_VALUE_num(list); ++i) {TRUE | never evaluated | FALSE | never evaluated |
| 0 |
372 | CONF_VALUE *val = sk_CONF_VALUE_value(list, i); | - |
373 | const char *extval = val->value ? val->value : val->name;TRUE | never evaluated | FALSE | never evaluated |
| 0 |
374 | ASN1_OBJECT *objtmp; | - |
375 | if (!(objtmp = OBJ_txt2obj(extval, 0))) {TRUE | never evaluated | FALSE | never evaluated |
| 0 |
376 | TS_CONF_invalid(section, ENV_OTHER_POLICIES); | - |
377 | goto err; never executed: goto err; | 0 |
378 | } | - |
379 | if (!TS_RESP_CTX_add_policy(ctx, objtmp))TRUE | never evaluated | FALSE | never evaluated |
| 0 |
380 | goto err; never executed: goto err; | 0 |
381 | ASN1_OBJECT_free(objtmp); | - |
382 | } never executed: end of block | 0 |
383 | | - |
384 | ret = 1; | - |
385 | | - |
386 | err: code before this statement never executed: err: | 0 |
387 | sk_CONF_VALUE_pop_free(list, X509V3_conf_free); | - |
388 | return ret; never executed: return ret; | 0 |
389 | } | - |
390 | | - |
391 | int | - |
392 | TS_CONF_set_digests(CONF *conf, const char *section, TS_RESP_CTX *ctx) | - |
393 | { | - |
394 | int ret = 0; | - |
395 | int i; | - |
396 | STACK_OF(CONF_VALUE) *list = NULL; | - |
397 | char *digests = NCONF_get_string(conf, section, ENV_DIGESTS); | - |
398 | | - |
399 | if (!digests) {TRUE | never evaluated | FALSE | never evaluated |
| 0 |
400 | TS_CONF_lookup_fail(section, ENV_DIGESTS); | - |
401 | goto err; never executed: goto err; | 0 |
402 | } | - |
403 | if (!(list = X509V3_parse_list(digests))) {TRUE | never evaluated | FALSE | never evaluated |
| 0 |
404 | TS_CONF_invalid(section, ENV_DIGESTS); | - |
405 | goto err; never executed: goto err; | 0 |
406 | } | - |
407 | if (sk_CONF_VALUE_num(list) == 0) {TRUE | never evaluated | FALSE | never evaluated |
| 0 |
408 | TS_CONF_invalid(section, ENV_DIGESTS); | - |
409 | goto err; never executed: goto err; | 0 |
410 | } | - |
411 | for (i = 0; i < sk_CONF_VALUE_num(list); ++i) {TRUE | never evaluated | FALSE | never evaluated |
| 0 |
412 | CONF_VALUE *val = sk_CONF_VALUE_value(list, i); | - |
413 | const char *extval = val->value ? val->value : val->name;TRUE | never evaluated | FALSE | never evaluated |
| 0 |
414 | const EVP_MD *md; | - |
415 | if (!(md = EVP_get_digestbyname(extval))) {TRUE | never evaluated | FALSE | never evaluated |
| 0 |
416 | TS_CONF_invalid(section, ENV_DIGESTS); | - |
417 | goto err; never executed: goto err; | 0 |
418 | } | - |
419 | if (!TS_RESP_CTX_add_md(ctx, md))TRUE | never evaluated | FALSE | never evaluated |
| 0 |
420 | goto err; never executed: goto err; | 0 |
421 | } never executed: end of block | 0 |
422 | | - |
423 | ret = 1; | - |
424 | | - |
425 | err: code before this statement never executed: err: | 0 |
426 | sk_CONF_VALUE_pop_free(list, X509V3_conf_free); | - |
427 | return ret; never executed: return ret; | 0 |
428 | } | - |
429 | | - |
430 | int | - |
431 | TS_CONF_set_accuracy(CONF *conf, const char *section, TS_RESP_CTX *ctx) | - |
432 | { | - |
433 | int ret = 0; | - |
434 | int i; | - |
435 | int secs = 0, millis = 0, micros = 0; | - |
436 | STACK_OF(CONF_VALUE) *list = NULL; | - |
437 | char *accuracy = NCONF_get_string(conf, section, ENV_ACCURACY); | - |
438 | | - |
439 | if (accuracy && !(list = X509V3_parse_list(accuracy))) {TRUE | never evaluated | FALSE | never evaluated |
TRUE | never evaluated | FALSE | never evaluated |
| 0 |
440 | TS_CONF_invalid(section, ENV_ACCURACY); | - |
441 | goto err; never executed: goto err; | 0 |
442 | } | - |
443 | for (i = 0; i < sk_CONF_VALUE_num(list); ++i) {TRUE | never evaluated | FALSE | never evaluated |
| 0 |
444 | CONF_VALUE *val = sk_CONF_VALUE_value(list, i); | - |
445 | if (strcmp(val->name, ENV_VALUE_SECS) == 0) { never executed: __result = (((const unsigned char *) (const char *) ( val->name ))[3] - __s2[3]); never executed: end of block never executed: end of block never executed: __result = (((const unsigned char *) (const char *) ( "secs" ))[3] - __s2[3]); never executed: end of block never executed: end of block TRUE | never evaluated | FALSE | never evaluated |
TRUE | never evaluated | FALSE | never evaluated |
TRUE | never evaluated | FALSE | never evaluated |
TRUE | never evaluated | FALSE | never evaluated |
TRUE | never evaluated | FALSE | never evaluated |
TRUE | never evaluated | FALSE | never evaluated |
TRUE | never evaluated | FALSE | never evaluated |
TRUE | never evaluated | FALSE | never evaluated |
TRUE | never evaluated | FALSE | never evaluated |
TRUE | never evaluated | FALSE | never evaluated |
TRUE | never evaluated | FALSE | never evaluated |
TRUE | never evaluated | FALSE | never evaluated |
TRUE | never evaluated | FALSE | never evaluated |
| 0 |
446 | if (val->value)TRUE | never evaluated | FALSE | never evaluated |
| 0 |
447 | secs = atoi(val->value); never executed: secs = atoi(val->value); | 0 |
448 | } else if (strcmp(val->name, ENV_VALUE_MILLISECS) == 0) { never executed: end of block never executed: __result = (((const unsigned char *) (const char *) ( val->name ))[3] - __s2[3]); never executed: end of block never executed: end of block never executed: __result = (((const unsigned char *) (const char *) ( "millisecs" ))[3] - __s2[3]); never executed: end of block never executed: end of block TRUE | never evaluated | FALSE | never evaluated |
TRUE | never evaluated | FALSE | never evaluated |
TRUE | never evaluated | FALSE | never evaluated |
TRUE | never evaluated | FALSE | never evaluated |
TRUE | never evaluated | FALSE | never evaluated |
TRUE | never evaluated | FALSE | never evaluated |
TRUE | never evaluated | FALSE | never evaluated |
TRUE | never evaluated | FALSE | never evaluated |
TRUE | never evaluated | FALSE | never evaluated |
TRUE | never evaluated | FALSE | never evaluated |
TRUE | never evaluated | FALSE | never evaluated |
TRUE | never evaluated | FALSE | never evaluated |
TRUE | never evaluated | FALSE | never evaluated |
| 0 |
449 | if (val->value)TRUE | never evaluated | FALSE | never evaluated |
| 0 |
450 | millis = atoi(val->value); never executed: millis = atoi(val->value); | 0 |
451 | } else if (strcmp(val->name, ENV_VALUE_MICROSECS) == 0) { never executed: end of block never executed: __result = (((const unsigned char *) (const char *) ( val->name ))[3] - __s2[3]); never executed: end of block never executed: end of block never executed: __result = (((const unsigned char *) (const char *) ( "microsecs" ))[3] - __s2[3]); never executed: end of block never executed: end of block TRUE | never evaluated | FALSE | never evaluated |
TRUE | never evaluated | FALSE | never evaluated |
TRUE | never evaluated | FALSE | never evaluated |
TRUE | never evaluated | FALSE | never evaluated |
TRUE | never evaluated | FALSE | never evaluated |
TRUE | never evaluated | FALSE | never evaluated |
TRUE | never evaluated | FALSE | never evaluated |
TRUE | never evaluated | FALSE | never evaluated |
TRUE | never evaluated | FALSE | never evaluated |
TRUE | never evaluated | FALSE | never evaluated |
TRUE | never evaluated | FALSE | never evaluated |
TRUE | never evaluated | FALSE | never evaluated |
TRUE | never evaluated | FALSE | never evaluated |
| 0 |
452 | if (val->value)TRUE | never evaluated | FALSE | never evaluated |
| 0 |
453 | micros = atoi(val->value); never executed: micros = atoi(val->value); | 0 |
454 | } else { never executed: end of block | 0 |
455 | TS_CONF_invalid(section, ENV_ACCURACY); | - |
456 | goto err; never executed: goto err; | 0 |
457 | } | - |
458 | } | - |
459 | if (!TS_RESP_CTX_set_accuracy(ctx, secs, millis, micros))TRUE | never evaluated | FALSE | never evaluated |
| 0 |
460 | goto err; never executed: goto err; | 0 |
461 | | - |
462 | ret = 1; | - |
463 | | - |
464 | err: code before this statement never executed: err: | 0 |
465 | sk_CONF_VALUE_pop_free(list, X509V3_conf_free); | - |
466 | return ret; never executed: return ret; | 0 |
467 | } | - |
468 | | - |
469 | int | - |
470 | TS_CONF_set_clock_precision_digits(CONF *conf, const char *section, | - |
471 | TS_RESP_CTX *ctx) | - |
472 | { | - |
473 | int ret = 0; | - |
474 | long digits = 0; | - |
475 | | - |
476 | | - |
477 | if (!NCONF_get_number_e(conf, section, ENV_CLOCK_PRECISION_DIGITS,TRUE | never evaluated | FALSE | never evaluated |
| 0 |
478 | &digits))TRUE | never evaluated | FALSE | never evaluated |
| 0 |
479 | digits = 0; never executed: digits = 0; | 0 |
480 | if (digits < 0 || digits > TS_MAX_CLOCK_PRECISION_DIGITS) {TRUE | never evaluated | FALSE | never evaluated |
TRUE | never evaluated | FALSE | never evaluated |
| 0 |
481 | TS_CONF_invalid(section, ENV_CLOCK_PRECISION_DIGITS); | - |
482 | goto err; never executed: goto err; | 0 |
483 | } | - |
484 | | - |
485 | if (!TS_RESP_CTX_set_clock_precision_digits(ctx, digits))TRUE | never evaluated | FALSE | never evaluated |
| 0 |
486 | goto err; never executed: goto err; | 0 |
487 | | - |
488 | return 1; never executed: return 1; | 0 |
489 | | - |
490 | err: | - |
491 | return ret; never executed: return ret; | 0 |
492 | } | - |
493 | | - |
494 | static int | - |
495 | TS_CONF_add_flag(CONF *conf, const char *section, const char *field, int flag, | - |
496 | TS_RESP_CTX *ctx) | - |
497 | { | - |
498 | | - |
499 | const char *value = NCONF_get_string(conf, section, field); | - |
500 | | - |
501 | if (value) {TRUE | never evaluated | FALSE | never evaluated |
| 0 |
502 | if (strcmp(value, ENV_VALUE_YES) == 0) never executed: __result = (((const unsigned char *) (const char *) ( value ))[3] - __s2[3]); never executed: end of block never executed: end of block never executed: __result = (((const unsigned char *) (const char *) ( "yes" ))[3] - __s2[3]); never executed: end of block never executed: end of block TRUE | never evaluated | FALSE | never evaluated |
TRUE | never evaluated | FALSE | never evaluated |
TRUE | never evaluated | FALSE | never evaluated |
TRUE | never evaluated | FALSE | never evaluated |
TRUE | never evaluated | FALSE | never evaluated |
TRUE | never evaluated | FALSE | never evaluated |
TRUE | never evaluated | FALSE | never evaluated |
TRUE | never evaluated | FALSE | never evaluated |
TRUE | never evaluated | FALSE | never evaluated |
TRUE | never evaluated | FALSE | never evaluated |
TRUE | never evaluated | FALSE | never evaluated |
TRUE | never evaluated | FALSE | never evaluated |
TRUE | never evaluated | FALSE | never evaluated |
| 0 |
503 | TS_RESP_CTX_add_flags(ctx, flag); never executed: TS_RESP_CTX_add_flags(ctx, flag); | 0 |
504 | else if (strcmp(value, ENV_VALUE_NO) != 0) { never executed: __result = (((const unsigned char *) (const char *) ( value ))[3] - __s2[3]); never executed: end of block never executed: end of block never executed: __result = (((const unsigned char *) (const char *) ( "no" ))[3] - __s2[3]); never executed: end of block never executed: end of block TRUE | never evaluated | FALSE | never evaluated |
TRUE | never evaluated | FALSE | never evaluated |
TRUE | never evaluated | FALSE | never evaluated |
TRUE | never evaluated | FALSE | never evaluated |
TRUE | never evaluated | FALSE | never evaluated |
TRUE | never evaluated | FALSE | never evaluated |
TRUE | never evaluated | FALSE | never evaluated |
TRUE | never evaluated | FALSE | never evaluated |
TRUE | never evaluated | FALSE | never evaluated |
TRUE | never evaluated | FALSE | never evaluated |
TRUE | never evaluated | FALSE | never evaluated |
TRUE | never evaluated | FALSE | never evaluated |
TRUE | never evaluated | FALSE | never evaluated |
| 0 |
505 | TS_CONF_invalid(section, field); | - |
506 | return 0; never executed: return 0; | 0 |
507 | } | - |
508 | } never executed: end of block | 0 |
509 | | - |
510 | return 1; never executed: return 1; | 0 |
511 | } | - |
512 | | - |
513 | int | - |
514 | TS_CONF_set_ordering(CONF *conf, const char *section, TS_RESP_CTX *ctx) | - |
515 | { | - |
516 | return TS_CONF_add_flag(conf, section, ENV_ORDERING, TS_ORDERING, ctx); never executed: return TS_CONF_add_flag(conf, section, "ordering", 0x02, ctx); | 0 |
517 | } | - |
518 | | - |
519 | int | - |
520 | TS_CONF_set_tsa_name(CONF *conf, const char *section, TS_RESP_CTX *ctx) | - |
521 | { | - |
522 | return TS_CONF_add_flag(conf, section, ENV_TSA_NAME, TS_TSA_NAME, ctx); never executed: return TS_CONF_add_flag(conf, section, "tsa_name", 0x01, ctx); | 0 |
523 | } | - |
524 | | - |
525 | int | - |
526 | TS_CONF_set_ess_cert_id_chain(CONF *conf, const char *section, TS_RESP_CTX *ctx) | - |
527 | { | - |
528 | return TS_CONF_add_flag(conf, section, ENV_ESS_CERT_ID_CHAIN, never executed: return TS_CONF_add_flag(conf, section, "ess_cert_id_chain", 0x04, ctx); | 0 |
529 | TS_ESS_CERT_ID_CHAIN, ctx); never executed: return TS_CONF_add_flag(conf, section, "ess_cert_id_chain", 0x04, ctx); | 0 |
530 | } | - |
| | |