VirtualBox

source: vbox/trunk/src/libs/openssl-3.0.7/crypto/cmp/cmp_asn.c@ 98024

Last change on this file since 98024 was 94320, checked in by vboxsync, 3 years ago

libs/openssl-3.0.1: Export to OSE and fix copyright headers in Makefiles, bugref:10128
File size: 17.9 KB
Line 
1/*
2 * Copyright 2007-2021 The OpenSSL Project Authors. All Rights Reserved.
3 * Copyright Nokia 2007-2019
4 * Copyright Siemens AG 2015-2019
5 *
6 * Licensed under the Apache License 2.0 (the "License"). You may not use
7 * this file except in compliance with the License. You can obtain a copy
8 * in the file LICENSE in the source distribution or at
9 * https://www.openssl.org/source/license.html
10 */
11
12#include <openssl/asn1t.h>
13
14#include "cmp_local.h"
15
16/* explicit #includes not strictly needed since implied by the above: */
17#include <openssl/cmp.h>
18#include <openssl/crmf.h>
19
20/* ASN.1 declarations from RFC4210 */
21ASN1_SEQUENCE(OSSL_CMP_REVANNCONTENT) = {
22 /* OSSL_CMP_PKISTATUS is effectively ASN1_INTEGER so it is used directly */
23 ASN1_SIMPLE(OSSL_CMP_REVANNCONTENT, status, ASN1_INTEGER),
24 ASN1_SIMPLE(OSSL_CMP_REVANNCONTENT, certId, OSSL_CRMF_CERTID),
25 ASN1_SIMPLE(OSSL_CMP_REVANNCONTENT, willBeRevokedAt, ASN1_GENERALIZEDTIME),
26 ASN1_SIMPLE(OSSL_CMP_REVANNCONTENT, badSinceDate, ASN1_GENERALIZEDTIME),
27 ASN1_OPT(OSSL_CMP_REVANNCONTENT, crlDetails, X509_EXTENSIONS)
28} ASN1_SEQUENCE_END(OSSL_CMP_REVANNCONTENT)
29IMPLEMENT_ASN1_FUNCTIONS(OSSL_CMP_REVANNCONTENT)
30
31
32ASN1_SEQUENCE(OSSL_CMP_CHALLENGE) = {
33 ASN1_OPT(OSSL_CMP_CHALLENGE, owf, X509_ALGOR),
34 ASN1_SIMPLE(OSSL_CMP_CHALLENGE, witness, ASN1_OCTET_STRING),
35 ASN1_SIMPLE(OSSL_CMP_CHALLENGE, challenge, ASN1_OCTET_STRING)
36} ASN1_SEQUENCE_END(OSSL_CMP_CHALLENGE)
37IMPLEMENT_ASN1_FUNCTIONS(OSSL_CMP_CHALLENGE)
38
39
40ASN1_ITEM_TEMPLATE(OSSL_CMP_POPODECKEYCHALLCONTENT) =
41 ASN1_EX_TEMPLATE_TYPE(ASN1_TFLG_SEQUENCE_OF, 0,
42 OSSL_CMP_POPODECKEYCHALLCONTENT, OSSL_CMP_CHALLENGE)
43ASN1_ITEM_TEMPLATE_END(OSSL_CMP_POPODECKEYCHALLCONTENT)
44
45
46ASN1_ITEM_TEMPLATE(OSSL_CMP_POPODECKEYRESPCONTENT) =
47 ASN1_EX_TEMPLATE_TYPE(ASN1_TFLG_SEQUENCE_OF, 0,
48 OSSL_CMP_POPODECKEYRESPCONTENT, ASN1_INTEGER)
49ASN1_ITEM_TEMPLATE_END(OSSL_CMP_POPODECKEYRESPCONTENT)
50
51
52ASN1_SEQUENCE(OSSL_CMP_CAKEYUPDANNCONTENT) = {
53 /* OSSL_CMP_CMPCERTIFICATE is effectively X509 so it is used directly */
54 ASN1_SIMPLE(OSSL_CMP_CAKEYUPDANNCONTENT, oldWithNew, X509),
55 /* OSSL_CMP_CMPCERTIFICATE is effectively X509 so it is used directly */
56 ASN1_SIMPLE(OSSL_CMP_CAKEYUPDANNCONTENT, newWithOld, X509),
57 /* OSSL_CMP_CMPCERTIFICATE is effectively X509 so it is used directly */
58 ASN1_SIMPLE(OSSL_CMP_CAKEYUPDANNCONTENT, newWithNew, X509)
59} ASN1_SEQUENCE_END(OSSL_CMP_CAKEYUPDANNCONTENT)
60IMPLEMENT_ASN1_FUNCTIONS(OSSL_CMP_CAKEYUPDANNCONTENT)
61
62
63ASN1_SEQUENCE(OSSL_CMP_ERRORMSGCONTENT) = {
64 ASN1_SIMPLE(OSSL_CMP_ERRORMSGCONTENT, pKIStatusInfo, OSSL_CMP_PKISI),
65 ASN1_OPT(OSSL_CMP_ERRORMSGCONTENT, errorCode, ASN1_INTEGER),
66 /*
67 * OSSL_CMP_PKIFREETEXT is effectively a sequence of ASN1_UTF8STRING
68 * so it is used directly
69 *
70 */
71 ASN1_SEQUENCE_OF_OPT(OSSL_CMP_ERRORMSGCONTENT, errorDetails,
72 ASN1_UTF8STRING)
73} ASN1_SEQUENCE_END(OSSL_CMP_ERRORMSGCONTENT)
74IMPLEMENT_ASN1_FUNCTIONS(OSSL_CMP_ERRORMSGCONTENT)
75
76ASN1_ADB_TEMPLATE(infotypeandvalue_default) = ASN1_OPT(OSSL_CMP_ITAV,
77 infoValue.other,
78 ASN1_ANY);
79/* ITAV means InfoTypeAndValue */
80ASN1_ADB(OSSL_CMP_ITAV) = {
81 /* OSSL_CMP_CMPCERTIFICATE is effectively X509 so it is used directly */
82 ADB_ENTRY(NID_id_it_caProtEncCert, ASN1_OPT(OSSL_CMP_ITAV,
83 infoValue.caProtEncCert, X509)),
84 ADB_ENTRY(NID_id_it_signKeyPairTypes,
85 ASN1_SEQUENCE_OF_OPT(OSSL_CMP_ITAV,
86 infoValue.signKeyPairTypes, X509_ALGOR)),
87 ADB_ENTRY(NID_id_it_encKeyPairTypes,
88 ASN1_SEQUENCE_OF_OPT(OSSL_CMP_ITAV,
89 infoValue.encKeyPairTypes, X509_ALGOR)),
90 ADB_ENTRY(NID_id_it_preferredSymmAlg,
91 ASN1_OPT(OSSL_CMP_ITAV, infoValue.preferredSymmAlg,
92 X509_ALGOR)),
93 ADB_ENTRY(NID_id_it_caKeyUpdateInfo,
94 ASN1_OPT(OSSL_CMP_ITAV, infoValue.caKeyUpdateInfo,
95 OSSL_CMP_CAKEYUPDANNCONTENT)),
96 ADB_ENTRY(NID_id_it_currentCRL,
97 ASN1_OPT(OSSL_CMP_ITAV, infoValue.currentCRL, X509_CRL)),
98 ADB_ENTRY(NID_id_it_unsupportedOIDs,
99 ASN1_SEQUENCE_OF_OPT(OSSL_CMP_ITAV,
100 infoValue.unsupportedOIDs, ASN1_OBJECT)),
101 ADB_ENTRY(NID_id_it_keyPairParamReq,
102 ASN1_OPT(OSSL_CMP_ITAV, infoValue.keyPairParamReq,
103 ASN1_OBJECT)),
104 ADB_ENTRY(NID_id_it_keyPairParamRep,
105 ASN1_OPT(OSSL_CMP_ITAV, infoValue.keyPairParamRep,
106 X509_ALGOR)),
107 ADB_ENTRY(NID_id_it_revPassphrase,
108 ASN1_OPT(OSSL_CMP_ITAV, infoValue.revPassphrase,
109 OSSL_CRMF_ENCRYPTEDVALUE)),
110 ADB_ENTRY(NID_id_it_implicitConfirm,
111 ASN1_OPT(OSSL_CMP_ITAV, infoValue.implicitConfirm,
112 ASN1_NULL)),
113 ADB_ENTRY(NID_id_it_confirmWaitTime,
114 ASN1_OPT(OSSL_CMP_ITAV, infoValue.confirmWaitTime,
115 ASN1_GENERALIZEDTIME)),
116 ADB_ENTRY(NID_id_it_origPKIMessage,
117 ASN1_OPT(OSSL_CMP_ITAV, infoValue.origPKIMessage,
118 OSSL_CMP_MSGS)),
119 ADB_ENTRY(NID_id_it_suppLangTags,
120 ASN1_SEQUENCE_OF_OPT(OSSL_CMP_ITAV, infoValue.suppLangTagsValue,
121 ASN1_UTF8STRING)),
122} ASN1_ADB_END(OSSL_CMP_ITAV, 0, infoType, 0,
123 &infotypeandvalue_default_tt, NULL);
124
125
126ASN1_SEQUENCE(OSSL_CMP_ITAV) = {
127 ASN1_SIMPLE(OSSL_CMP_ITAV, infoType, ASN1_OBJECT),
128 ASN1_ADB_OBJECT(OSSL_CMP_ITAV)
129} ASN1_SEQUENCE_END(OSSL_CMP_ITAV)
130IMPLEMENT_ASN1_FUNCTIONS(OSSL_CMP_ITAV)
131IMPLEMENT_ASN1_DUP_FUNCTION(OSSL_CMP_ITAV)
132
133OSSL_CMP_ITAV *OSSL_CMP_ITAV_create(ASN1_OBJECT *type, ASN1_TYPE *value)
134{
135 OSSL_CMP_ITAV *itav;
136
137 if (type == NULL || (itav = OSSL_CMP_ITAV_new()) == NULL)
138 return NULL;
139 OSSL_CMP_ITAV_set0(itav, type, value);
140 return itav;
141}
142
143void OSSL_CMP_ITAV_set0(OSSL_CMP_ITAV *itav, ASN1_OBJECT *type,
144 ASN1_TYPE *value)
145{
146 itav->infoType = type;
147 itav->infoValue.other = value;
148}
149
150ASN1_OBJECT *OSSL_CMP_ITAV_get0_type(const OSSL_CMP_ITAV *itav)
151{
152 if (itav == NULL)
153 return NULL;
154 return itav->infoType;
155}
156
157ASN1_TYPE *OSSL_CMP_ITAV_get0_value(const OSSL_CMP_ITAV *itav)
158{
159 if (itav == NULL)
160 return NULL;
161 return itav->infoValue.other;
162}
163
164int OSSL_CMP_ITAV_push0_stack_item(STACK_OF(OSSL_CMP_ITAV) **itav_sk_p,
165 OSSL_CMP_ITAV *itav)
166{
167 int created = 0;
168
169 if (itav_sk_p == NULL || itav == NULL) {
170 ERR_raise(ERR_LIB_CMP, CMP_R_NULL_ARGUMENT);
171 goto err;
172 }
173
174 if (*itav_sk_p == NULL) {
175 if ((*itav_sk_p = sk_OSSL_CMP_ITAV_new_null()) == NULL)
176 goto err;
177 created = 1;
178 }
179 if (!sk_OSSL_CMP_ITAV_push(*itav_sk_p, itav))
180 goto err;
181 return 1;
182
183 err:
184 if (created != 0) {
185 sk_OSSL_CMP_ITAV_free(*itav_sk_p);
186 *itav_sk_p = NULL;
187 }
188 return 0;
189}
190
191/* get ASN.1 encoded integer, return -1 on error */
192int ossl_cmp_asn1_get_int(const ASN1_INTEGER *a)
193{
194 int64_t res;
195
196 if (!ASN1_INTEGER_get_int64(&res, a)) {
197 ERR_raise(ERR_LIB_CMP, ASN1_R_INVALID_NUMBER);
198 return -1;
199 }
200 if (res < INT_MIN) {
201 ERR_raise(ERR_LIB_CMP, ASN1_R_TOO_SMALL);
202 return -1;
203 }
204 if (res > INT_MAX) {
205 ERR_raise(ERR_LIB_CMP, ASN1_R_TOO_LARGE);
206 return -1;
207 }
208 return (int)res;
209}
210
211static int ossl_cmp_msg_cb(int operation, ASN1_VALUE **pval,
212 const ASN1_ITEM *it, void *exarg)
213{
214 OSSL_CMP_MSG *msg = (OSSL_CMP_MSG *)*pval;
215
216 switch (operation) {
217 case ASN1_OP_FREE_POST:
218 OPENSSL_free(msg->propq);
219 break;
220
221 case ASN1_OP_DUP_POST:
222 {
223 OSSL_CMP_MSG *old = exarg;
224
225 if (!ossl_cmp_msg_set0_libctx(msg, old->libctx, old->propq))
226 return 0;
227 }
228 break;
229 case ASN1_OP_GET0_LIBCTX:
230 {
231 OSSL_LIB_CTX **libctx = exarg;
232
233 *libctx = msg->libctx;
234 }
235 break;
236 case ASN1_OP_GET0_PROPQ:
237 {
238 const char **propq = exarg;
239
240 *propq = msg->propq;
241 }
242 break;
243 default:
244 break;
245 }
246
247 return 1;
248}
249
250ASN1_CHOICE(OSSL_CMP_CERTORENCCERT) = {
251 /* OSSL_CMP_CMPCERTIFICATE is effectively X509 so it is used directly */
252 ASN1_EXP(OSSL_CMP_CERTORENCCERT, value.certificate, X509, 0),
253 ASN1_EXP(OSSL_CMP_CERTORENCCERT, value.encryptedCert,
254 OSSL_CRMF_ENCRYPTEDVALUE, 1),
255} ASN1_CHOICE_END(OSSL_CMP_CERTORENCCERT)
256IMPLEMENT_ASN1_FUNCTIONS(OSSL_CMP_CERTORENCCERT)
257
258
259ASN1_SEQUENCE(OSSL_CMP_CERTIFIEDKEYPAIR) = {
260 ASN1_SIMPLE(OSSL_CMP_CERTIFIEDKEYPAIR, certOrEncCert,
261 OSSL_CMP_CERTORENCCERT),
262 ASN1_EXP_OPT(OSSL_CMP_CERTIFIEDKEYPAIR, privateKey,
263 OSSL_CRMF_ENCRYPTEDVALUE, 0),
264 ASN1_EXP_OPT(OSSL_CMP_CERTIFIEDKEYPAIR, publicationInfo,
265 OSSL_CRMF_PKIPUBLICATIONINFO, 1)
266} ASN1_SEQUENCE_END(OSSL_CMP_CERTIFIEDKEYPAIR)
267IMPLEMENT_ASN1_FUNCTIONS(OSSL_CMP_CERTIFIEDKEYPAIR)
268
269
270ASN1_SEQUENCE(OSSL_CMP_REVDETAILS) = {
271 ASN1_SIMPLE(OSSL_CMP_REVDETAILS, certDetails, OSSL_CRMF_CERTTEMPLATE),
272 ASN1_OPT(OSSL_CMP_REVDETAILS, crlEntryDetails, X509_EXTENSIONS)
273} ASN1_SEQUENCE_END(OSSL_CMP_REVDETAILS)
274IMPLEMENT_ASN1_FUNCTIONS(OSSL_CMP_REVDETAILS)
275
276
277ASN1_ITEM_TEMPLATE(OSSL_CMP_REVREQCONTENT) =
278 ASN1_EX_TEMPLATE_TYPE(ASN1_TFLG_SEQUENCE_OF, 0, OSSL_CMP_REVREQCONTENT,
279 OSSL_CMP_REVDETAILS)
280ASN1_ITEM_TEMPLATE_END(OSSL_CMP_REVREQCONTENT)
281
282
283ASN1_SEQUENCE(OSSL_CMP_REVREPCONTENT) = {
284 ASN1_SEQUENCE_OF(OSSL_CMP_REVREPCONTENT, status, OSSL_CMP_PKISI),
285 ASN1_EXP_SEQUENCE_OF_OPT(OSSL_CMP_REVREPCONTENT, revCerts, OSSL_CRMF_CERTID,
286 0),
287 ASN1_EXP_SEQUENCE_OF_OPT(OSSL_CMP_REVREPCONTENT, crls, X509_CRL, 1)
288} ASN1_SEQUENCE_END(OSSL_CMP_REVREPCONTENT)
289IMPLEMENT_ASN1_FUNCTIONS(OSSL_CMP_REVREPCONTENT)
290
291
292ASN1_SEQUENCE(OSSL_CMP_KEYRECREPCONTENT) = {
293 ASN1_SIMPLE(OSSL_CMP_KEYRECREPCONTENT, status, OSSL_CMP_PKISI),
294 ASN1_EXP_OPT(OSSL_CMP_KEYRECREPCONTENT, newSigCert, X509, 0),
295 ASN1_EXP_SEQUENCE_OF_OPT(OSSL_CMP_KEYRECREPCONTENT, caCerts, X509, 1),
296 ASN1_EXP_SEQUENCE_OF_OPT(OSSL_CMP_KEYRECREPCONTENT, keyPairHist,
297 OSSL_CMP_CERTIFIEDKEYPAIR, 2)
298} ASN1_SEQUENCE_END(OSSL_CMP_KEYRECREPCONTENT)
299IMPLEMENT_ASN1_FUNCTIONS(OSSL_CMP_KEYRECREPCONTENT)
300
301
302ASN1_ITEM_TEMPLATE(OSSL_CMP_PKISTATUS) =
303 ASN1_EX_TEMPLATE_TYPE(ASN1_TFLG_UNIVERSAL, 0, status, ASN1_INTEGER)
304ASN1_ITEM_TEMPLATE_END(OSSL_CMP_PKISTATUS)
305
306ASN1_SEQUENCE(OSSL_CMP_PKISI) = {
307 ASN1_SIMPLE(OSSL_CMP_PKISI, status, OSSL_CMP_PKISTATUS),
308 /*
309 * CMP_PKIFREETEXT is effectively a sequence of ASN1_UTF8STRING
310 * so it is used directly
311 */
312 ASN1_SEQUENCE_OF_OPT(OSSL_CMP_PKISI, statusString, ASN1_UTF8STRING),
313 /*
314 * OSSL_CMP_PKIFAILUREINFO is effectively ASN1_BIT_STRING so used directly
315 */
316 ASN1_OPT(OSSL_CMP_PKISI, failInfo, ASN1_BIT_STRING)
317} ASN1_SEQUENCE_END(OSSL_CMP_PKISI)
318IMPLEMENT_ASN1_FUNCTIONS(OSSL_CMP_PKISI)
319IMPLEMENT_ASN1_DUP_FUNCTION(OSSL_CMP_PKISI)
320
321ASN1_SEQUENCE(OSSL_CMP_CERTSTATUS) = {
322 ASN1_SIMPLE(OSSL_CMP_CERTSTATUS, certHash, ASN1_OCTET_STRING),
323 ASN1_SIMPLE(OSSL_CMP_CERTSTATUS, certReqId, ASN1_INTEGER),
324 ASN1_OPT(OSSL_CMP_CERTSTATUS, statusInfo, OSSL_CMP_PKISI)
325} ASN1_SEQUENCE_END(OSSL_CMP_CERTSTATUS)
326IMPLEMENT_ASN1_FUNCTIONS(OSSL_CMP_CERTSTATUS)
327
328ASN1_ITEM_TEMPLATE(OSSL_CMP_CERTCONFIRMCONTENT) =
329 ASN1_EX_TEMPLATE_TYPE(ASN1_TFLG_SEQUENCE_OF, 0, OSSL_CMP_CERTCONFIRMCONTENT,
330 OSSL_CMP_CERTSTATUS)
331ASN1_ITEM_TEMPLATE_END(OSSL_CMP_CERTCONFIRMCONTENT)
332
333ASN1_SEQUENCE(OSSL_CMP_CERTRESPONSE) = {
334 ASN1_SIMPLE(OSSL_CMP_CERTRESPONSE, certReqId, ASN1_INTEGER),
335 ASN1_SIMPLE(OSSL_CMP_CERTRESPONSE, status, OSSL_CMP_PKISI),
336 ASN1_OPT(OSSL_CMP_CERTRESPONSE, certifiedKeyPair,
337 OSSL_CMP_CERTIFIEDKEYPAIR),
338 ASN1_OPT(OSSL_CMP_CERTRESPONSE, rspInfo, ASN1_OCTET_STRING)
339} ASN1_SEQUENCE_END(OSSL_CMP_CERTRESPONSE)
340IMPLEMENT_ASN1_FUNCTIONS(OSSL_CMP_CERTRESPONSE)
341
342ASN1_SEQUENCE(OSSL_CMP_POLLREQ) = {
343 ASN1_SIMPLE(OSSL_CMP_POLLREQ, certReqId, ASN1_INTEGER)
344} ASN1_SEQUENCE_END(OSSL_CMP_POLLREQ)
345IMPLEMENT_ASN1_FUNCTIONS(OSSL_CMP_POLLREQ)
346
347ASN1_ITEM_TEMPLATE(OSSL_CMP_POLLREQCONTENT) =
348 ASN1_EX_TEMPLATE_TYPE(ASN1_TFLG_SEQUENCE_OF, 0, OSSL_CMP_POLLREQCONTENT,
349 OSSL_CMP_POLLREQ)
350ASN1_ITEM_TEMPLATE_END(OSSL_CMP_POLLREQCONTENT)
351
352ASN1_SEQUENCE(OSSL_CMP_POLLREP) = {
353 ASN1_SIMPLE(OSSL_CMP_POLLREP, certReqId, ASN1_INTEGER),
354 ASN1_SIMPLE(OSSL_CMP_POLLREP, checkAfter, ASN1_INTEGER),
355 ASN1_SEQUENCE_OF_OPT(OSSL_CMP_POLLREP, reason, ASN1_UTF8STRING),
356} ASN1_SEQUENCE_END(OSSL_CMP_POLLREP)
357IMPLEMENT_ASN1_FUNCTIONS(OSSL_CMP_POLLREP)
358
359ASN1_ITEM_TEMPLATE(OSSL_CMP_POLLREPCONTENT) =
360 ASN1_EX_TEMPLATE_TYPE(ASN1_TFLG_SEQUENCE_OF, 0,
361 OSSL_CMP_POLLREPCONTENT,
362 OSSL_CMP_POLLREP)
363ASN1_ITEM_TEMPLATE_END(OSSL_CMP_POLLREPCONTENT)
364
365ASN1_SEQUENCE(OSSL_CMP_CERTREPMESSAGE) = {
366 /* OSSL_CMP_CMPCERTIFICATE is effectively X509 so it is used directly */
367 ASN1_EXP_SEQUENCE_OF_OPT(OSSL_CMP_CERTREPMESSAGE, caPubs, X509, 1),
368 ASN1_SEQUENCE_OF(OSSL_CMP_CERTREPMESSAGE, response, OSSL_CMP_CERTRESPONSE)
369} ASN1_SEQUENCE_END(OSSL_CMP_CERTREPMESSAGE)
370IMPLEMENT_ASN1_FUNCTIONS(OSSL_CMP_CERTREPMESSAGE)
371
372ASN1_ITEM_TEMPLATE(OSSL_CMP_GENMSGCONTENT) =
373 ASN1_EX_TEMPLATE_TYPE(ASN1_TFLG_SEQUENCE_OF, 0, OSSL_CMP_GENMSGCONTENT,
374 OSSL_CMP_ITAV)
375ASN1_ITEM_TEMPLATE_END(OSSL_CMP_GENMSGCONTENT)
376
377ASN1_ITEM_TEMPLATE(OSSL_CMP_GENREPCONTENT) =
378 ASN1_EX_TEMPLATE_TYPE(ASN1_TFLG_SEQUENCE_OF, 0, OSSL_CMP_GENREPCONTENT,
379 OSSL_CMP_ITAV)
380ASN1_ITEM_TEMPLATE_END(OSSL_CMP_GENREPCONTENT)
381
382ASN1_ITEM_TEMPLATE(OSSL_CMP_CRLANNCONTENT) =
383 ASN1_EX_TEMPLATE_TYPE(ASN1_TFLG_SEQUENCE_OF, 0,
384 OSSL_CMP_CRLANNCONTENT, X509_CRL)
385ASN1_ITEM_TEMPLATE_END(OSSL_CMP_CRLANNCONTENT)
386
387ASN1_CHOICE(OSSL_CMP_PKIBODY) = {
388 ASN1_EXP(OSSL_CMP_PKIBODY, value.ir, OSSL_CRMF_MSGS, 0),
389 ASN1_EXP(OSSL_CMP_PKIBODY, value.ip, OSSL_CMP_CERTREPMESSAGE, 1),
390 ASN1_EXP(OSSL_CMP_PKIBODY, value.cr, OSSL_CRMF_MSGS, 2),
391 ASN1_EXP(OSSL_CMP_PKIBODY, value.cp, OSSL_CMP_CERTREPMESSAGE, 3),
392 ASN1_EXP(OSSL_CMP_PKIBODY, value.p10cr, X509_REQ, 4),
393 ASN1_EXP(OSSL_CMP_PKIBODY, value.popdecc,
394 OSSL_CMP_POPODECKEYCHALLCONTENT, 5),
395 ASN1_EXP(OSSL_CMP_PKIBODY, value.popdecr,
396 OSSL_CMP_POPODECKEYRESPCONTENT, 6),
397 ASN1_EXP(OSSL_CMP_PKIBODY, value.kur, OSSL_CRMF_MSGS, 7),
398 ASN1_EXP(OSSL_CMP_PKIBODY, value.kup, OSSL_CMP_CERTREPMESSAGE, 8),
399 ASN1_EXP(OSSL_CMP_PKIBODY, value.krr, OSSL_CRMF_MSGS, 9),
400 ASN1_EXP(OSSL_CMP_PKIBODY, value.krp, OSSL_CMP_KEYRECREPCONTENT, 10),
401 ASN1_EXP(OSSL_CMP_PKIBODY, value.rr, OSSL_CMP_REVREQCONTENT, 11),
402 ASN1_EXP(OSSL_CMP_PKIBODY, value.rp, OSSL_CMP_REVREPCONTENT, 12),
403 ASN1_EXP(OSSL_CMP_PKIBODY, value.ccr, OSSL_CRMF_MSGS, 13),
404 ASN1_EXP(OSSL_CMP_PKIBODY, value.ccp, OSSL_CMP_CERTREPMESSAGE, 14),
405 ASN1_EXP(OSSL_CMP_PKIBODY, value.ckuann, OSSL_CMP_CAKEYUPDANNCONTENT, 15),
406 ASN1_EXP(OSSL_CMP_PKIBODY, value.cann, X509, 16),
407 ASN1_EXP(OSSL_CMP_PKIBODY, value.rann, OSSL_CMP_REVANNCONTENT, 17),
408 ASN1_EXP(OSSL_CMP_PKIBODY, value.crlann, OSSL_CMP_CRLANNCONTENT, 18),
409 ASN1_EXP(OSSL_CMP_PKIBODY, value.pkiconf, ASN1_ANY, 19),
410 ASN1_EXP(OSSL_CMP_PKIBODY, value.nested, OSSL_CMP_MSGS, 20),
411 ASN1_EXP(OSSL_CMP_PKIBODY, value.genm, OSSL_CMP_GENMSGCONTENT, 21),
412 ASN1_EXP(OSSL_CMP_PKIBODY, value.genp, OSSL_CMP_GENREPCONTENT, 22),
413 ASN1_EXP(OSSL_CMP_PKIBODY, value.error, OSSL_CMP_ERRORMSGCONTENT, 23),
414 ASN1_EXP(OSSL_CMP_PKIBODY, value.certConf, OSSL_CMP_CERTCONFIRMCONTENT, 24),
415 ASN1_EXP(OSSL_CMP_PKIBODY, value.pollReq, OSSL_CMP_POLLREQCONTENT, 25),
416 ASN1_EXP(OSSL_CMP_PKIBODY, value.pollRep, OSSL_CMP_POLLREPCONTENT, 26),
417} ASN1_CHOICE_END(OSSL_CMP_PKIBODY)
418IMPLEMENT_ASN1_FUNCTIONS(OSSL_CMP_PKIBODY)
419
420ASN1_SEQUENCE(OSSL_CMP_PKIHEADER) = {
421 ASN1_SIMPLE(OSSL_CMP_PKIHEADER, pvno, ASN1_INTEGER),
422 ASN1_SIMPLE(OSSL_CMP_PKIHEADER, sender, GENERAL_NAME),
423 ASN1_SIMPLE(OSSL_CMP_PKIHEADER, recipient, GENERAL_NAME),
424 ASN1_EXP_OPT(OSSL_CMP_PKIHEADER, messageTime, ASN1_GENERALIZEDTIME, 0),
425 ASN1_EXP_OPT(OSSL_CMP_PKIHEADER, protectionAlg, X509_ALGOR, 1),
426 ASN1_EXP_OPT(OSSL_CMP_PKIHEADER, senderKID, ASN1_OCTET_STRING, 2),
427 ASN1_EXP_OPT(OSSL_CMP_PKIHEADER, recipKID, ASN1_OCTET_STRING, 3),
428 ASN1_EXP_OPT(OSSL_CMP_PKIHEADER, transactionID, ASN1_OCTET_STRING, 4),
429 ASN1_EXP_OPT(OSSL_CMP_PKIHEADER, senderNonce, ASN1_OCTET_STRING, 5),
430 ASN1_EXP_OPT(OSSL_CMP_PKIHEADER, recipNonce, ASN1_OCTET_STRING, 6),
431 /*
432 * OSSL_CMP_PKIFREETEXT is effectively a sequence of ASN1_UTF8STRING
433 * so it is used directly
434 */
435 ASN1_EXP_SEQUENCE_OF_OPT(OSSL_CMP_PKIHEADER, freeText, ASN1_UTF8STRING, 7),
436 ASN1_EXP_SEQUENCE_OF_OPT(OSSL_CMP_PKIHEADER, generalInfo,
437 OSSL_CMP_ITAV, 8)
438} ASN1_SEQUENCE_END(OSSL_CMP_PKIHEADER)
439IMPLEMENT_ASN1_FUNCTIONS(OSSL_CMP_PKIHEADER)
440
441ASN1_SEQUENCE(OSSL_CMP_PROTECTEDPART) = {
442 ASN1_SIMPLE(OSSL_CMP_MSG, header, OSSL_CMP_PKIHEADER),
443 ASN1_SIMPLE(OSSL_CMP_MSG, body, OSSL_CMP_PKIBODY)
444} ASN1_SEQUENCE_END(OSSL_CMP_PROTECTEDPART)
445IMPLEMENT_ASN1_FUNCTIONS(OSSL_CMP_PROTECTEDPART)
446
447ASN1_SEQUENCE_cb(OSSL_CMP_MSG, ossl_cmp_msg_cb) = {
448 ASN1_SIMPLE(OSSL_CMP_MSG, header, OSSL_CMP_PKIHEADER),
449 ASN1_SIMPLE(OSSL_CMP_MSG, body, OSSL_CMP_PKIBODY),
450 ASN1_EXP_OPT(OSSL_CMP_MSG, protection, ASN1_BIT_STRING, 0),
451 /* OSSL_CMP_CMPCERTIFICATE is effectively X509 so it is used directly */
452 ASN1_EXP_SEQUENCE_OF_OPT(OSSL_CMP_MSG, extraCerts, X509, 1)
453} ASN1_SEQUENCE_END_cb(OSSL_CMP_MSG, OSSL_CMP_MSG)
454IMPLEMENT_ASN1_DUP_FUNCTION(OSSL_CMP_MSG)
455
456ASN1_ITEM_TEMPLATE(OSSL_CMP_MSGS) =
457 ASN1_EX_TEMPLATE_TYPE(ASN1_TFLG_SEQUENCE_OF, 0, OSSL_CMP_MSGS,
458 OSSL_CMP_MSG)
459ASN1_ITEM_TEMPLATE_END(OSSL_CMP_MSGS)
Note: See TracBrowser for help on using the repository browser.

© 2024 Oracle Support Privacy / Do Not Sell My Info Terms of Use Trademark Policy Automated Access Etiquette