OpenCoverage

ocsp_ext.c

Absolute File Name:/home/opencoverage/opencoverage/guest-scripts/libressl/src/crypto/ocsp/ocsp_ext.c
Source codeSwitch to Preprocessed file
LineSourceCount
1/* $OpenBSD: ocsp_ext.c,v 1.18 2018/05/14 23:47:10 tb Exp $ */-
2/* Written by Tom Titchener <Tom_Titchener@groove.net> for the OpenSSL-
3 * project. */-
4-
5/* History:-
6 This file was transfered to Richard Levitte from CertCo by Kathy-
7 Weinhold in mid-spring 2000 to be included in OpenSSL or released-
8 as a patch kit. */-
9-
10/* ====================================================================-
11 * Copyright (c) 1998-2000 The OpenSSL Project. All rights reserved.-
12 *-
13 * Redistribution and use in source and binary forms, with or without-
14 * modification, are permitted provided that the following conditions-
15 * are met:-
16 *-
17 * 1. Redistributions of source code must retain the above copyright-
18 * notice, this list of conditions and the following disclaimer.-
19 *-
20 * 2. Redistributions in binary form must reproduce the above copyright-
21 * notice, this list of conditions and the following disclaimer in-
22 * the documentation and/or other materials provided with the-
23 * distribution.-
24 *-
25 * 3. All advertising materials mentioning features or use of this-
26 * software must display the following acknowledgment:-
27 * "This product includes software developed by the OpenSSL Project-
28 * for use in the OpenSSL Toolkit. (http://www.openssl.org/)"-
29 *-
30 * 4. The names "OpenSSL Toolkit" and "OpenSSL Project" must not be used to-
31 * endorse or promote products derived from this software without-
32 * prior written permission. For written permission, please contact-
33 * openssl-core@openssl.org.-
34 *-
35 * 5. Products derived from this software may not be called "OpenSSL"-
36 * nor may "OpenSSL" appear in their names without prior written-
37 * permission of the OpenSSL Project.-
38 *-
39 * 6. Redistributions of any form whatsoever must retain the following-
40 * acknowledgment:-
41 * "This product includes software developed by the OpenSSL Project-
42 * for use in the OpenSSL Toolkit (http://www.openssl.org/)"-
43 *-
44 * THIS SOFTWARE IS PROVIDED BY THE OpenSSL PROJECT ``AS IS'' AND ANY-
45 * EXPRESSED OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE-
46 * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR-
47 * PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE OpenSSL PROJECT OR-
48 * ITS CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL,-
49 * SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT-
50 * NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES;-
51 * LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)-
52 * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT,-
53 * STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE)-
54 * ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED-
55 * OF THE POSSIBILITY OF SUCH DAMAGE.-
56 * ====================================================================-
57 *-
58 * This product includes cryptographic software written by Eric Young-
59 * (eay@cryptsoft.com). This product includes software written by Tim-
60 * Hudson (tjh@cryptsoft.com).-
61 *-
62 */-
63-
64#include <stdio.h>-
65#include <stdlib.h>-
66#include <string.h>-
67-
68#include <openssl/objects.h>-
69#include <openssl/ocsp.h>-
70#include <openssl/x509.h>-
71#include <openssl/x509v3.h>-
72-
73/* Standard wrapper functions for extensions */-
74-
75/* OCSP request extensions */-
76-
77int-
78OCSP_REQUEST_get_ext_count(OCSP_REQUEST *x)-
79{-
80 return X509v3_get_ext_count(x->tbsRequest->requestExtensions);
never executed: return X509v3_get_ext_count(x->tbsRequest->requestExtensions);
0
81}-
82-
83int-
84OCSP_REQUEST_get_ext_by_NID(OCSP_REQUEST *x, int nid, int lastpos)-
85{-
86 return X509v3_get_ext_by_NID(x->tbsRequest->requestExtensions, nid,
never executed: return X509v3_get_ext_by_NID(x->tbsRequest->requestExtensions, nid, lastpos);
0
87 lastpos);
never executed: return X509v3_get_ext_by_NID(x->tbsRequest->requestExtensions, nid, lastpos);
0
88}-
89-
90int-
91OCSP_REQUEST_get_ext_by_OBJ(OCSP_REQUEST *x, const ASN1_OBJECT *obj,-
92 int lastpos)-
93{-
94 return X509v3_get_ext_by_OBJ(x->tbsRequest->requestExtensions, obj,
never executed: return X509v3_get_ext_by_OBJ(x->tbsRequest->requestExtensions, obj, lastpos);
0
95 lastpos);
never executed: return X509v3_get_ext_by_OBJ(x->tbsRequest->requestExtensions, obj, lastpos);
0
96}-
97-
98int-
99OCSP_REQUEST_get_ext_by_critical(OCSP_REQUEST *x, int crit, int lastpos)-
100{-
101 return X509v3_get_ext_by_critical(x->tbsRequest->requestExtensions,
never executed: return X509v3_get_ext_by_critical(x->tbsRequest->requestExtensions, crit, lastpos);
0
102 crit, lastpos);
never executed: return X509v3_get_ext_by_critical(x->tbsRequest->requestExtensions, crit, lastpos);
0
103}-
104-
105X509_EXTENSION *-
106OCSP_REQUEST_get_ext(OCSP_REQUEST *x, int loc)-
107{-
108 return X509v3_get_ext(x->tbsRequest->requestExtensions, loc);
never executed: return X509v3_get_ext(x->tbsRequest->requestExtensions, loc);
0
109}-
110-
111X509_EXTENSION *-
112OCSP_REQUEST_delete_ext(OCSP_REQUEST *x, int loc)-
113{-
114 return X509v3_delete_ext(x->tbsRequest->requestExtensions, loc);
never executed: return X509v3_delete_ext(x->tbsRequest->requestExtensions, loc);
0
115}-
116-
117void *-
118OCSP_REQUEST_get1_ext_d2i(OCSP_REQUEST *x, int nid, int *crit, int *idx)-
119{-
120 return X509V3_get_d2i(x->tbsRequest->requestExtensions, nid, crit, idx);
never executed: return X509V3_get_d2i(x->tbsRequest->requestExtensions, nid, crit, idx);
0
121}-
122-
123int-
124OCSP_REQUEST_add1_ext_i2d(OCSP_REQUEST *x, int nid, void *value, int crit,-
125 unsigned long flags)-
126{-
127 return X509V3_add1_i2d(&x->tbsRequest->requestExtensions, nid, value,
never executed: return X509V3_add1_i2d(&x->tbsRequest->requestExtensions, nid, value, crit, flags);
0
128 crit, flags);
never executed: return X509V3_add1_i2d(&x->tbsRequest->requestExtensions, nid, value, crit, flags);
0
129}-
130-
131int-
132OCSP_REQUEST_add_ext(OCSP_REQUEST *x, X509_EXTENSION *ex, int loc)-
133{-
134 return X509v3_add_ext(&(x->tbsRequest->requestExtensions), ex,
never executed: return X509v3_add_ext(&(x->tbsRequest->requestExtensions), ex, loc) != ((void *)0) ;
0
135 loc) != NULL;
never executed: return X509v3_add_ext(&(x->tbsRequest->requestExtensions), ex, loc) != ((void *)0) ;
0
136}-
137-
138/* Single extensions */-
139-
140int-
141OCSP_ONEREQ_get_ext_count(OCSP_ONEREQ *x)-
142{-
143 return X509v3_get_ext_count(x->singleRequestExtensions);
never executed: return X509v3_get_ext_count(x->singleRequestExtensions);
0
144}-
145-
146int-
147OCSP_ONEREQ_get_ext_by_NID(OCSP_ONEREQ *x, int nid, int lastpos)-
148{-
149 return X509v3_get_ext_by_NID(x->singleRequestExtensions, nid, lastpos);
never executed: return X509v3_get_ext_by_NID(x->singleRequestExtensions, nid, lastpos);
0
150}-
151-
152int-
153OCSP_ONEREQ_get_ext_by_OBJ(OCSP_ONEREQ *x, const ASN1_OBJECT *obj, int lastpos)-
154{-
155 return X509v3_get_ext_by_OBJ(x->singleRequestExtensions, obj, lastpos);
never executed: return X509v3_get_ext_by_OBJ(x->singleRequestExtensions, obj, lastpos);
0
156}-
157-
158int-
159OCSP_ONEREQ_get_ext_by_critical(OCSP_ONEREQ *x, int crit, int lastpos)-
160{-
161 return X509v3_get_ext_by_critical(x->singleRequestExtensions, crit,
never executed: return X509v3_get_ext_by_critical(x->singleRequestExtensions, crit, lastpos);
0
162 lastpos);
never executed: return X509v3_get_ext_by_critical(x->singleRequestExtensions, crit, lastpos);
0
163}-
164-
165X509_EXTENSION *-
166OCSP_ONEREQ_get_ext(OCSP_ONEREQ *x, int loc)-
167{-
168 return X509v3_get_ext(x->singleRequestExtensions, loc);
never executed: return X509v3_get_ext(x->singleRequestExtensions, loc);
0
169}-
170-
171X509_EXTENSION *-
172OCSP_ONEREQ_delete_ext(OCSP_ONEREQ *x, int loc)-
173{-
174 return X509v3_delete_ext(x->singleRequestExtensions, loc);
never executed: return X509v3_delete_ext(x->singleRequestExtensions, loc);
0
175}-
176-
177void *-
178OCSP_ONEREQ_get1_ext_d2i(OCSP_ONEREQ *x, int nid, int *crit, int *idx)-
179{-
180 return X509V3_get_d2i(x->singleRequestExtensions, nid, crit, idx);
never executed: return X509V3_get_d2i(x->singleRequestExtensions, nid, crit, idx);
0
181}-
182-
183int-
184OCSP_ONEREQ_add1_ext_i2d(OCSP_ONEREQ *x, int nid, void *value, int crit,-
185 unsigned long flags)-
186{-
187 return X509V3_add1_i2d(&x->singleRequestExtensions, nid, value, crit,
never executed: return X509V3_add1_i2d(&x->singleRequestExtensions, nid, value, crit, flags);
0
188 flags);
never executed: return X509V3_add1_i2d(&x->singleRequestExtensions, nid, value, crit, flags);
0
189}-
190-
191int-
192OCSP_ONEREQ_add_ext(OCSP_ONEREQ *x, X509_EXTENSION *ex, int loc)-
193{-
194 return X509v3_add_ext(&(x->singleRequestExtensions), ex, loc) != NULL;
never executed: return X509v3_add_ext(&(x->singleRequestExtensions), ex, loc) != ((void *)0) ;
0
195}-
196-
197/* OCSP Basic response */-
198-
199int-
200OCSP_BASICRESP_get_ext_count(OCSP_BASICRESP *x)-
201{-
202 return X509v3_get_ext_count(x->tbsResponseData->responseExtensions);
never executed: return X509v3_get_ext_count(x->tbsResponseData->responseExtensions);
0
203}-
204-
205int-
206OCSP_BASICRESP_get_ext_by_NID(OCSP_BASICRESP *x, int nid, int lastpos)-
207{-
208 return X509v3_get_ext_by_NID(x->tbsResponseData->responseExtensions,
never executed: return X509v3_get_ext_by_NID(x->tbsResponseData->responseExtensions, nid, lastpos);
0
209 nid, lastpos);
never executed: return X509v3_get_ext_by_NID(x->tbsResponseData->responseExtensions, nid, lastpos);
0
210}-
211-
212int-
213OCSP_BASICRESP_get_ext_by_OBJ(OCSP_BASICRESP *x, const ASN1_OBJECT *obj,-
214 int lastpos)-
215{-
216 return X509v3_get_ext_by_OBJ(x->tbsResponseData->responseExtensions,
never executed: return X509v3_get_ext_by_OBJ(x->tbsResponseData->responseExtensions, obj, lastpos);
0
217 obj, lastpos);
never executed: return X509v3_get_ext_by_OBJ(x->tbsResponseData->responseExtensions, obj, lastpos);
0
218}-
219-
220int-
221OCSP_BASICRESP_get_ext_by_critical(OCSP_BASICRESP *x, int crit, int lastpos)-
222{-
223 return X509v3_get_ext_by_critical(
never executed: return X509v3_get_ext_by_critical( x->tbsResponseData->responseExtensions, crit, lastpos);
0
224 x->tbsResponseData->responseExtensions, crit, lastpos);
never executed: return X509v3_get_ext_by_critical( x->tbsResponseData->responseExtensions, crit, lastpos);
0
225}-
226-
227X509_EXTENSION *-
228OCSP_BASICRESP_get_ext(OCSP_BASICRESP *x, int loc)-
229{-
230 return X509v3_get_ext(x->tbsResponseData->responseExtensions, loc);
never executed: return X509v3_get_ext(x->tbsResponseData->responseExtensions, loc);
0
231}-
232-
233X509_EXTENSION *-
234OCSP_BASICRESP_delete_ext(OCSP_BASICRESP *x, int loc)-
235{-
236 return X509v3_delete_ext(x->tbsResponseData->responseExtensions, loc);
never executed: return X509v3_delete_ext(x->tbsResponseData->responseExtensions, loc);
0
237}-
238-
239void *-
240OCSP_BASICRESP_get1_ext_d2i(OCSP_BASICRESP *x, int nid, int *crit, int *idx)-
241{-
242 return X509V3_get_d2i(x->tbsResponseData->responseExtensions, nid,
never executed: return X509V3_get_d2i(x->tbsResponseData->responseExtensions, nid, crit, idx);
0
243 crit, idx);
never executed: return X509V3_get_d2i(x->tbsResponseData->responseExtensions, nid, crit, idx);
0
244}-
245-
246int-
247OCSP_BASICRESP_add1_ext_i2d(OCSP_BASICRESP *x, int nid, void *value, int crit,-
248 unsigned long flags)-
249{-
250 return X509V3_add1_i2d(&x->tbsResponseData->responseExtensions, nid,
never executed: return X509V3_add1_i2d(&x->tbsResponseData->responseExtensions, nid, value, crit, flags);
0
251 value, crit, flags);
never executed: return X509V3_add1_i2d(&x->tbsResponseData->responseExtensions, nid, value, crit, flags);
0
252}-
253-
254int-
255OCSP_BASICRESP_add_ext(OCSP_BASICRESP *x, X509_EXTENSION *ex, int loc)-
256{-
257 return X509v3_add_ext(&(x->tbsResponseData->responseExtensions), ex,
never executed: return X509v3_add_ext(&(x->tbsResponseData->responseExtensions), ex, loc) != ((void *)0) ;
0
258 loc) != NULL;
never executed: return X509v3_add_ext(&(x->tbsResponseData->responseExtensions), ex, loc) != ((void *)0) ;
0
259}-
260-
261/* OCSP single response extensions */-
262-
263int-
264OCSP_SINGLERESP_get_ext_count(OCSP_SINGLERESP *x)-
265{-
266 return X509v3_get_ext_count(x->singleExtensions);
never executed: return X509v3_get_ext_count(x->singleExtensions);
0
267}-
268-
269int-
270OCSP_SINGLERESP_get_ext_by_NID(OCSP_SINGLERESP *x, int nid, int lastpos)-
271{-
272 return X509v3_get_ext_by_NID(x->singleExtensions, nid, lastpos);
never executed: return X509v3_get_ext_by_NID(x->singleExtensions, nid, lastpos);
0
273}-
274-
275int-
276OCSP_SINGLERESP_get_ext_by_OBJ(OCSP_SINGLERESP *x, const ASN1_OBJECT *obj,-
277 int lastpos)-
278{-
279 return X509v3_get_ext_by_OBJ(x->singleExtensions, obj, lastpos);
never executed: return X509v3_get_ext_by_OBJ(x->singleExtensions, obj, lastpos);
0
280}-
281-
282int-
283OCSP_SINGLERESP_get_ext_by_critical(OCSP_SINGLERESP *x, int crit, int lastpos)-
284{-
285 return X509v3_get_ext_by_critical(x->singleExtensions, crit, lastpos);
never executed: return X509v3_get_ext_by_critical(x->singleExtensions, crit, lastpos);
0
286}-
287-
288X509_EXTENSION *-
289OCSP_SINGLERESP_get_ext(OCSP_SINGLERESP *x, int loc)-
290{-
291 return X509v3_get_ext(x->singleExtensions, loc);
never executed: return X509v3_get_ext(x->singleExtensions, loc);
0
292}-
293-
294X509_EXTENSION *-
295OCSP_SINGLERESP_delete_ext(OCSP_SINGLERESP *x, int loc)-
296{-
297 return X509v3_delete_ext(x->singleExtensions, loc);
never executed: return X509v3_delete_ext(x->singleExtensions, loc);
0
298}-
299-
300void *-
301OCSP_SINGLERESP_get1_ext_d2i(OCSP_SINGLERESP *x, int nid, int *crit, int *idx)-
302{-
303 return X509V3_get_d2i(x->singleExtensions, nid, crit, idx);
never executed: return X509V3_get_d2i(x->singleExtensions, nid, crit, idx);
0
304}-
305-
306int-
307OCSP_SINGLERESP_add1_ext_i2d(OCSP_SINGLERESP *x, int nid, void *value, int crit,-
308 unsigned long flags)-
309{-
310 return X509V3_add1_i2d(&x->singleExtensions, nid, value, crit, flags);
never executed: return X509V3_add1_i2d(&x->singleExtensions, nid, value, crit, flags);
0
311}-
312-
313int-
314OCSP_SINGLERESP_add_ext(OCSP_SINGLERESP *x, X509_EXTENSION *ex, int loc)-
315{-
316 return X509v3_add_ext(&(x->singleExtensions), ex, loc) != NULL;
never executed: return X509v3_add_ext(&(x->singleExtensions), ex, loc) != ((void *)0) ;
0
317}-
318-
319/* Nonce handling functions */-
320-
321/* Add a nonce to an extension stack. A nonce can be specificed or if NULL-
322 * a random nonce will be generated.-
323 * Note: OpenSSL 0.9.7d and later create an OCTET STRING containing the-
324 * nonce, previous versions used the raw nonce.-
325 */-
326-
327static int-
328ocsp_add1_nonce(STACK_OF(X509_EXTENSION) **exts, unsigned char *val, int len)-
329{-
330 unsigned char *tmpval;-
331 ASN1_OCTET_STRING os;-
332 int ret = 0;-
333-
334 if (len <= 0)
len <= 0Description
TRUEnever evaluated
FALSEnever evaluated
0
335 len = OCSP_DEFAULT_NONCE_LENGTH;
never executed: len = 16;
0
336 /* Create the OCTET STRING manually by writing out the header and-
337 * appending the content octets. This avoids an extra memory allocation-
338 * operation in some cases. Applications should *NOT* do this because-
339 * it relies on library internals.-
340 */-
341 os.length = ASN1_object_size(0, len, V_ASN1_OCTET_STRING);-
342 os.data = malloc(os.length);-
343 if (os.data == NULL)
os.data == ((void *)0)Description
TRUEnever evaluated
FALSEnever evaluated
0
344 goto err;
never executed: goto err;
0
345 tmpval = os.data;-
346 ASN1_put_object(&tmpval, 0, len, V_ASN1_OCTET_STRING, V_ASN1_UNIVERSAL);-
347 if (val)
valDescription
TRUEnever evaluated
FALSEnever evaluated
0
348 memcpy(tmpval, val, len);
never executed: memcpy(tmpval, val, len);
0
349 else-
350 arc4random_buf(tmpval, len);
never executed: arc4random_buf(tmpval, len);
0
351 if (!X509V3_add1_i2d(exts, NID_id_pkix_OCSP_Nonce, &os, 0,
!X509V3_add1_i...6, &os, 0, 2L)Description
TRUEnever evaluated
FALSEnever evaluated
0
352 X509V3_ADD_REPLACE))
!X509V3_add1_i...6, &os, 0, 2L)Description
TRUEnever evaluated
FALSEnever evaluated
0
353 goto err;
never executed: goto err;
0
354 ret = 1;-
355-
356err:
code before this statement never executed: err:
0
357 free(os.data);-
358 return ret;
never executed: return ret;
0
359}-
360-
361/* Add nonce to an OCSP request */-
362int-
363OCSP_request_add1_nonce(OCSP_REQUEST *req, unsigned char *val, int len)-
364{-
365 return ocsp_add1_nonce(&req->tbsRequest->requestExtensions, val, len);
never executed: return ocsp_add1_nonce(&req->tbsRequest->requestExtensions, val, len);
0
366}-
367-
368/* Same as above but for a response */-
369int-
370OCSP_basic_add1_nonce(OCSP_BASICRESP *resp, unsigned char *val, int len)-
371{-
372 return ocsp_add1_nonce(&resp->tbsResponseData->responseExtensions, val,
never executed: return ocsp_add1_nonce(&resp->tbsResponseData->responseExtensions, val, len);
0
373 len);
never executed: return ocsp_add1_nonce(&resp->tbsResponseData->responseExtensions, val, len);
0
374}-
375-
376/* Check nonce validity in a request and response.-
377 * Return value reflects result:-
378 * 1: nonces present and equal.-
379 * 2: nonces both absent.-
380 * 3: nonce present in response only.-
381 * 0: nonces both present and not equal.-
382 * -1: nonce in request only.-
383 *-
384 * For most responders clients can check return > 0.-
385 * If responder doesn't handle nonces return != 0 may be-
386 * necessary. return == 0 is always an error.-
387 */-
388int-
389OCSP_check_nonce(OCSP_REQUEST *req, OCSP_BASICRESP *bs)-
390{-
391 /*-
392 * Since we are only interested in the presence or absence of-
393 * the nonce and comparing its value there is no need to use-
394 * the X509V3 routines: this way we can avoid them allocating an-
395 * ASN1_OCTET_STRING structure for the value which would be-
396 * freed immediately anyway.-
397 */-
398 int req_idx, resp_idx;-
399 X509_EXTENSION *req_ext, *resp_ext;-
400-
401 req_idx = OCSP_REQUEST_get_ext_by_NID(req, NID_id_pkix_OCSP_Nonce, -1);-
402 resp_idx = OCSP_BASICRESP_get_ext_by_NID(bs,-
403 NID_id_pkix_OCSP_Nonce, -1);-
404 /* Check both absent */-
405 if (req_idx < 0 && resp_idx < 0)
req_idx < 0Description
TRUEnever evaluated
FALSEnever evaluated
resp_idx < 0Description
TRUEnever evaluated
FALSEnever evaluated
0
406 return 2;
never executed: return 2;
0
407 /* Check in request only */-
408 if (req_idx >= 0 && resp_idx < 0)
req_idx >= 0Description
TRUEnever evaluated
FALSEnever evaluated
resp_idx < 0Description
TRUEnever evaluated
FALSEnever evaluated
0
409 return -1;
never executed: return -1;
0
410 /* Check in response but not request */-
411 if (req_idx < 0 && resp_idx >= 0)
req_idx < 0Description
TRUEnever evaluated
FALSEnever evaluated
resp_idx >= 0Description
TRUEnever evaluated
FALSEnever evaluated
0
412 return 3;
never executed: return 3;
0
413 /* Otherwise nonce in request and response so retrieve the extensions */-
414 req_ext = OCSP_REQUEST_get_ext(req, req_idx);-
415 resp_ext = OCSP_BASICRESP_get_ext(bs, resp_idx);-
416 if (ASN1_OCTET_STRING_cmp(req_ext->value, resp_ext->value))
ASN1_OCTET_STR...sp_ext->value)Description
TRUEnever evaluated
FALSEnever evaluated
0
417 return 0;
never executed: return 0;
0
418 return 1;
never executed: return 1;
0
419}-
420-
421/* Copy the nonce value (if any) from an OCSP request to-
422 * a response.-
423 */-
424int-
425OCSP_copy_nonce(OCSP_BASICRESP *resp, OCSP_REQUEST *req)-
426{-
427 X509_EXTENSION *req_ext;-
428 int req_idx;-
429-
430 /* Check for nonce in request */-
431 req_idx = OCSP_REQUEST_get_ext_by_NID(req, NID_id_pkix_OCSP_Nonce, -1);-
432 /* If no nonce that's OK */-
433 if (req_idx < 0)
req_idx < 0Description
TRUEnever evaluated
FALSEnever evaluated
0
434 return 2;
never executed: return 2;
0
435 req_ext = OCSP_REQUEST_get_ext(req, req_idx);-
436 return OCSP_BASICRESP_add_ext(resp, req_ext, -1);
never executed: return OCSP_BASICRESP_add_ext(resp, req_ext, -1);
0
437}-
438-
439X509_EXTENSION *-
440OCSP_crlID_new(const char *url, long *n, char *tim)-
441{-
442 X509_EXTENSION *x = NULL;-
443 OCSP_CRLID *cid = NULL;-
444-
445 if (!(cid = OCSP_CRLID_new()))
!(cid = OCSP_CRLID_new())Description
TRUEnever evaluated
FALSEnever evaluated
0
446 goto err;
never executed: goto err;
0
447 if (url) {
urlDescription
TRUEnever evaluated
FALSEnever evaluated
0
448 if (!(cid->crlUrl = ASN1_IA5STRING_new()))
!(cid->crlUrl ...5STRING_new())Description
TRUEnever evaluated
FALSEnever evaluated
0
449 goto err;
never executed: goto err;
0
450 if (!(ASN1_STRING_set(cid->crlUrl, url, -1)))
!(ASN1_STRING_...Url, url, -1))Description
TRUEnever evaluated
FALSEnever evaluated
0
451 goto err;
never executed: goto err;
0
452 }
never executed: end of block
0
453 if (n) {
nDescription
TRUEnever evaluated
FALSEnever evaluated
0
454 if (!(cid->crlNum = ASN1_INTEGER_new()))
!(cid->crlNum ...INTEGER_new())Description
TRUEnever evaluated
FALSEnever evaluated
0
455 goto err;
never executed: goto err;
0
456 if (!(ASN1_INTEGER_set(cid->crlNum, *n)))
!(ASN1_INTEGER...->crlNum, *n))Description
TRUEnever evaluated
FALSEnever evaluated
0
457 goto err;
never executed: goto err;
0
458 }
never executed: end of block
0
459 if (tim) {
timDescription
TRUEnever evaluated
FALSEnever evaluated
0
460 if (!(cid->crlTime = ASN1_GENERALIZEDTIME_new()))
!(cid->crlTime...ZEDTIME_new())Description
TRUEnever evaluated
FALSEnever evaluated
0
461 goto err;
never executed: goto err;
0
462 if (!(ASN1_GENERALIZEDTIME_set_string(cid->crlTime, tim)))
!(ASN1_GENERAL...crlTime, tim))Description
TRUEnever evaluated
FALSEnever evaluated
0
463 goto err;
never executed: goto err;
0
464 }
never executed: end of block
0
465 x = X509V3_EXT_i2d(NID_id_pkix_OCSP_CrlID, 0, cid);-
466-
467err:
code before this statement never executed: err:
0
468 if (cid)
cidDescription
TRUEnever evaluated
FALSEnever evaluated
0
469 OCSP_CRLID_free(cid);
never executed: OCSP_CRLID_free(cid);
0
470 return x;
never executed: return x;
0
471}-
472-
473/* AcceptableResponses ::= SEQUENCE OF OBJECT IDENTIFIER */-
474X509_EXTENSION *-
475OCSP_accept_responses_new(char **oids)-
476{-
477 int nid;-
478 STACK_OF(ASN1_OBJECT) *sk = NULL;-
479 ASN1_OBJECT *o = NULL;-
480 X509_EXTENSION *x = NULL;-
481-
482 if (!(sk = sk_ASN1_OBJECT_new_null()))
!(sk = ((struc...k_new_null()))Description
TRUEnever evaluated
FALSEnever evaluated
0
483 return NULL;
never executed: return ((void *)0) ;
0
484 while (oids && *oids) {
oidsDescription
TRUEnever evaluated
FALSEnever evaluated
*oidsDescription
TRUEnever evaluated
FALSEnever evaluated
0
485 if ((nid = OBJ_txt2nid(*oids)) != NID_undef &&
(nid = OBJ_txt...d(*oids)) != 0Description
TRUEnever evaluated
FALSEnever evaluated
0
486 (o = OBJ_nid2obj(nid)))
(o = OBJ_nid2obj(nid))Description
TRUEnever evaluated
FALSEnever evaluated
0
487 if (sk_ASN1_OBJECT_push(sk, o) == 0) {
sk_push(((_STA...ECT*)0))) == 0Description
TRUEnever evaluated
FALSEnever evaluated
0
488 sk_ASN1_OBJECT_pop_free(sk, ASN1_OBJECT_free);-
489 return NULL;
never executed: return ((void *)0) ;
0
490 }-
491 oids++;-
492 }
never executed: end of block
0
493 x = X509V3_EXT_i2d(NID_id_pkix_OCSP_acceptableResponses, 0, sk);-
494 sk_ASN1_OBJECT_pop_free(sk, ASN1_OBJECT_free);-
495 return x;
never executed: return x;
0
496}-
497-
498/* ArchiveCutoff ::= GeneralizedTime */-
499X509_EXTENSION *-
500OCSP_archive_cutoff_new(char* tim)-
501{-
502 X509_EXTENSION *x = NULL;-
503 ASN1_GENERALIZEDTIME *gt = NULL;-
504-
505 if (!(gt = ASN1_GENERALIZEDTIME_new()))
!(gt = ASN1_GE...ZEDTIME_new())Description
TRUEnever evaluated
FALSEnever evaluated
0
506 return NULL;
never executed: return ((void *)0) ;
0
507 if (!(ASN1_GENERALIZEDTIME_set_string(gt, tim)))
!(ASN1_GENERAL...ring(gt, tim))Description
TRUEnever evaluated
FALSEnever evaluated
0
508 goto err;
never executed: goto err;
0
509 x = X509V3_EXT_i2d(NID_id_pkix_OCSP_archiveCutoff, 0, gt);-
510-
511err:
code before this statement never executed: err:
0
512 if (gt)
gtDescription
TRUEnever evaluated
FALSEnever evaluated
0
513 ASN1_GENERALIZEDTIME_free(gt);
never executed: ASN1_GENERALIZEDTIME_free(gt);
0
514 return x;
never executed: return x;
0
515}-
516-
517/* per ACCESS_DESCRIPTION parameter are oids, of which there are currently-
518 * two--NID_ad_ocsp, NID_id_ad_caIssuers--and GeneralName value. This-
519 * method forces NID_ad_ocsp and uniformResourceLocator [6] IA5String.-
520 */-
521X509_EXTENSION *-
522OCSP_url_svcloc_new(X509_NAME* issuer, const char **urls)-
523{-
524 X509_EXTENSION *x = NULL;-
525 ASN1_IA5STRING *ia5 = NULL;-
526 OCSP_SERVICELOC *sloc = NULL;-
527 ACCESS_DESCRIPTION *ad = NULL;-
528-
529 if (!(sloc = OCSP_SERVICELOC_new()))
!(sloc = OCSP_...VICELOC_new())Description
TRUEnever evaluated
FALSEnever evaluated
0
530 goto err;
never executed: goto err;
0
531 if (!(sloc->issuer = X509_NAME_dup(issuer)))
!(sloc->issuer...E_dup(issuer))Description
TRUEnever evaluated
FALSEnever evaluated
0
532 goto err;
never executed: goto err;
0
533 if (urls && *urls &&
urlsDescription
TRUEnever evaluated
FALSEnever evaluated
*urlsDescription
TRUEnever evaluated
FALSEnever evaluated
0
534 !(sloc->locator = sk_ACCESS_DESCRIPTION_new_null()))
!(sloc->locato...k_new_null()))Description
TRUEnever evaluated
FALSEnever evaluated
0
535 goto err;
never executed: goto err;
0
536 while (urls && *urls) {
urlsDescription
TRUEnever evaluated
FALSEnever evaluated
*urlsDescription
TRUEnever evaluated
FALSEnever evaluated
0
537 if (!(ad = ACCESS_DESCRIPTION_new()))
!(ad = ACCESS_...RIPTION_new())Description
TRUEnever evaluated
FALSEnever evaluated
0
538 goto err;
never executed: goto err;
0
539 if (!(ad->method = OBJ_nid2obj(NID_ad_OCSP)))
!(ad->method =..._nid2obj(178))Description
TRUEnever evaluated
FALSEnever evaluated
0
540 goto err;
never executed: goto err;
0
541 if (!(ad->location = GENERAL_NAME_new()))
!(ad->location...AL_NAME_new())Description
TRUEnever evaluated
FALSEnever evaluated
0
542 goto err;
never executed: goto err;
0
543 if (!(ia5 = ASN1_IA5STRING_new()))
!(ia5 = ASN1_IA5STRING_new())Description
TRUEnever evaluated
FALSEnever evaluated
0
544 goto err;
never executed: goto err;
0
545 if (!ASN1_STRING_set((ASN1_STRING*)ia5, *urls, -1))
!ASN1_STRING_s...a5, *urls, -1)Description
TRUEnever evaluated
FALSEnever evaluated
0
546 goto err;
never executed: goto err;
0
547 ad->location->type = GEN_URI;-
548 ad->location->d.ia5 = ia5;-
549 ia5 = NULL;-
550 if (!sk_ACCESS_DESCRIPTION_push(sloc->locator, ad))
!sk_push(((_ST...CRIPTION*)0)))Description
TRUEnever evaluated
FALSEnever evaluated
0
551 goto err;
never executed: goto err;
0
552 ad = NULL;-
553 urls++;-
554 }
never executed: end of block
0
555 x = X509V3_EXT_i2d(NID_id_pkix_OCSP_serviceLocator, 0, sloc);-
556-
557err:
code before this statement never executed: err:
0
558 if (ia5)
ia5Description
TRUEnever evaluated
FALSEnever evaluated
0
559 ASN1_IA5STRING_free(ia5);
never executed: ASN1_IA5STRING_free(ia5);
0
560 if (ad)
adDescription
TRUEnever evaluated
FALSEnever evaluated
0
561 ACCESS_DESCRIPTION_free(ad);
never executed: ACCESS_DESCRIPTION_free(ad);
0
562 if (sloc)
slocDescription
TRUEnever evaluated
FALSEnever evaluated
0
563 OCSP_SERVICELOC_free(sloc);
never executed: OCSP_SERVICELOC_free(sloc);
0
564 return x;
never executed: return x;
0
565}-
Source codeSwitch to Preprocessed file
Generated by Squish Coco 4.2.2