src/tls/x509v3.c

210 	if (asn1_get_oid(pos, end - pos, &id->oid, &pos))
297 	struct asn1_oid oid;
356 		if (asn1_get_oid(seq_pos, seq_end - seq_pos, &oid, &seq_pos)) {
378 		if (oid.len == 4 &&
379 		    oid.oid[0] == 2 && oid.oid[1] == 5 && oid.oid[2] == 4) {
381 			switch (oid.oid[3]) {
407 		} else if (oid.len == 7 &&
408 			   oid.oid[0] == 1 && oid.oid[1] == 2 &&
409 			   oid.oid[2] == 840 && oid.oid[3] == 113549 &&
410 			   oid.oid[4] == 1 && oid.oid[5] == 9 &&
411 			   oid.oid[6] == 1) {
422 		} else if (oid.len == 7 &&
423 			   oid.oid[0] == 0 && oid.oid[1] == 9 &&
424 			   oid.oid[2] == 2342 && oid.oid[3] == 19200300 &&
425 			   oid.oid[4] == 100 && oid.oid[5] == 1 &&
426 			   oid.oid[6] == 25) {
433 				    (u8 *) oid.oid,
434 				    oid.len * sizeof(oid.oid[0]));
715 static int x509_id_ce_oid(struct asn1_oid *oid)
718 	return oid->len >= 4 &&
719 		oid->oid[0] == 2 /* joint-iso-ccitt */ &&
720 		oid->oid[1] == 5 /* ds */ &&
721 		oid->oid[2] == 29 /* id-ce */;
1079 				     struct asn1_oid *oid,
1082 	if (!x509_id_ce_oid(oid))
1092 	switch (oid->oid[3]) {
1112 	struct asn1_oid oid;
1135 	if (asn1_get_oid(pos, end - pos, &oid, &pos) < 0) {
1171 	asn1_oid_to_str(&oid, buf, sizeof(buf));
1176 	res = x509_parse_extension_data(cert, &oid, hdr.payload, hdr.length);
1413 static int x509_rsadsi_oid(struct asn1_oid *oid)
1415 	return oid->len >= 4 &&
1416 		oid->oid[0] == 1 /* iso */ &&
1417 		oid->oid[1] == 2 /* member-body */ &&
1418 		oid->oid[2] == 840 /* us */ &&
1419 		oid->oid[3] == 113549 /* rsadsi */;
1423 static int x509_pkcs_oid(struct asn1_oid *oid)
1425 	return oid->len >= 5 &&
1426 		x509_rsadsi_oid(oid) &&
1427 		oid->oid[4] == 1 /* pkcs */;
1431 static int x509_digest_oid(struct asn1_oid *oid)
1433 	return oid->len >= 5 &&
1434 		x509_rsadsi_oid(oid) &&
1435 		oid->oid[4] == 2 /* digestAlgorithm */;
1439 static int x509_sha1_oid(struct asn1_oid *oid)
1441 	return oid->len == 6 &&
1442 		oid->oid[0] == 1 /* iso */ &&
1443 		oid->oid[1] == 3 /* identified-organization */ &&
1444 		oid->oid[2] == 14 /* oiw */ &&
1445 		oid->oid[3] == 3 /* secsig */ &&
1446 		oid->oid[4] == 2 /* algorithms */ &&
1447 		oid->oid[5] == 26 /* id-sha1 */;
1451 static int x509_sha256_oid(struct asn1_oid *oid)
1453 	return oid->len == 9 &&
1454 		oid->oid[0] == 2 /* joint-iso-itu-t */ &&
1455 		oid->oid[1] == 16 /* country */ &&
1456 		oid->oid[2] == 840 /* us */ &&
1457 		oid->oid[3] == 1 /* organization */ &&
1458 		oid->oid[4] == 101 /* gov */ &&
1459 		oid->oid[5] == 3 /* csor */ &&
1460 		oid->oid[6] == 4 /* nistAlgorithm */ &&
1461 		oid->oid[7] == 2 /* hashAlgs */ &&
1462 		oid->oid[8] == 1 /* sha256 */;
1589 	struct asn1_oid oid;
1593 	if (!x509_pkcs_oid(&cert->signature.oid) ||
1594 	    cert->signature.oid.len != 7 ||
1595 	    cert->signature.oid.oid[5] != 1 /* pkcs-1 */) {
1670 	if (asn1_get_oid(hdr.payload, hdr.length, &oid, &next)) {
1676 	if (x509_sha1_oid(&oid)) {
1677 		if (cert->signature.oid.oid[6] !=
1682 				   cert->signature.oid.oid[6]);
1689 	if (x509_sha256_oid(&oid)) {
1690 		if (cert->signature.oid.oid[6] !=
1695 				   cert->signature.oid.oid[6]);
1702 	if (!x509_digest_oid(&oid)) {
1707 	switch (oid.oid[5]) {
1709 		if (cert->signature.oid.oid[6] != 4 /* md5WithRSAEncryption */)
1714 				   cert->signature.oid.oid[6]);
1723 			   "(%lu)", oid.oid[5]);
1745 	switch (cert->signature.oid.oid[6]) {
1772 			   "algorithm (%lu)", cert->signature.oid.oid[6]);