src/tls/tlsv1_client_ocsp.c

116 	struct asn1_hdr hdr;
141 	if (asn1_get_next(resp, len, &hdr) < 0 ||
142 	    hdr.class != ASN1_CLASS_UNIVERSAL ||
143 	    hdr.tag != ASN1_TAG_SEQUENCE) {
146 			   hdr.class, hdr.tag);
149 	pos = hdr.payload;
150 	end = hdr.payload + hdr.length;
165 	if (asn1_get_next(pos, end - pos, &hdr) < 0 ||
166 	    hdr.class != ASN1_CLASS_UNIVERSAL ||
167 	    hdr.tag != ASN1_TAG_OCTETSTRING) {
170 			   hdr.class, hdr.tag);
173 	name_hash = hdr.payload;
174 	name_hash_len = hdr.length;
177 	pos = hdr.payload + hdr.length;
192 	if (asn1_get_next(pos, end - pos, &hdr) < 0 ||
193 	    hdr.class != ASN1_CLASS_UNIVERSAL ||
194 	    hdr.tag != ASN1_TAG_OCTETSTRING) {
197 			   hdr.class, hdr.tag);
200 	key_hash = hdr.payload;
201 	key_hash_len = hdr.length;
203 	pos = hdr.payload + hdr.length;
216 	if (asn1_get_next(pos, end - pos, &hdr) < 0 ||
217 	    hdr.class != ASN1_CLASS_UNIVERSAL ||
218 	    hdr.tag != ASN1_TAG_INTEGER ||
219 	    hdr.length < 1 || hdr.length > X509_MAX_SERIAL_NUM_LEN) {
221 			   hdr.class, hdr.tag, hdr.length);
224 	serial_number = hdr.payload;
225 	serial_number_len = hdr.length;
244 	if (asn1_get_next(pos, end - pos, &hdr) < 0 ||
245 	    hdr.class != ASN1_CLASS_CONTEXT_SPECIFIC) {
248 			   hdr.class, hdr.tag);
251 	cert_status = hdr.tag;
254 		    hdr.payload, hdr.length);
255 	pos = hdr.payload + hdr.length;
259 	if (asn1_get_next(pos, end - pos, &hdr) < 0 ||
260 	    hdr.class != ASN1_CLASS_UNIVERSAL ||
261 	    hdr.tag != ASN1_TAG_GENERALIZEDTIME ||
262 	    x509_parse_time(hdr.payload, hdr.length, hdr.tag, &update) < 0) {
267 	pos = hdr.payload + hdr.length;
276 		if (asn1_get_next(pos, end - pos, &hdr) < 0)
278 		if (hdr.class == ASN1_CLASS_CONTEXT_SPECIFIC && hdr.tag == 0) {
279 			const u8 *next = hdr.payload + hdr.length;
281 			if (asn1_get_next(hdr.payload, hdr.length, &hdr) < 0 ||
282 			    hdr.class != ASN1_CLASS_UNIVERSAL ||
283 			    hdr.tag != ASN1_TAG_GENERALIZEDTIME ||
284 			    x509_parse_time(hdr.payload, hdr.length, hdr.tag,
323 	struct asn1_hdr hdr;
331 		if (asn1_get_next(pos, end - pos, &hdr) < 0 ||
332 		    hdr.class != ASN1_CLASS_UNIVERSAL ||
333 		    hdr.tag != ASN1_TAG_SEQUENCE) {
336 				   hdr.class, hdr.tag);
340 						     hdr.payload, hdr.length,
343 		pos = hdr.payload + hdr.length;
357 	struct asn1_hdr hdr;
384 	if (asn1_get_next(resp, len, &hdr) < 0 ||
385 	    hdr.class != ASN1_CLASS_UNIVERSAL ||
386 	    hdr.tag != ASN1_TAG_SEQUENCE) {
389 			   hdr.class, hdr.tag);
392 	pos = hdr.payload;
393 	end = hdr.payload + hdr.length;
396 	if (asn1_get_next(pos, end - pos, &hdr) < 0 ||
397 	    hdr.class != ASN1_CLASS_UNIVERSAL ||
398 	    hdr.tag != ASN1_TAG_SEQUENCE) {
401 			   hdr.class, hdr.tag);
404 	resp_data = hdr.payload;
405 	resp_data_len = hdr.length;
407 	pos = hdr.payload + hdr.length;
415 	if (asn1_get_next(pos, end - pos, &hdr) < 0 ||
416 	    hdr.class != ASN1_CLASS_UNIVERSAL ||
417 	    hdr.tag != ASN1_TAG_BITSTRING) {
420 			   hdr.class, hdr.tag);
423 	if (hdr.length < 1)
425 	pos = hdr.payload;
435 	sign_value_len = hdr.length - 1;
436 	pos += hdr.length;
441 		if (asn1_get_next(pos, end - pos, &hdr) < 0 ||
442 		    hdr.class != ASN1_CLASS_CONTEXT_SPECIFIC ||
443 		    hdr.tag != 0) {
446 				   hdr.class, hdr.tag);
450 			    hdr.payload, hdr.length);
451 		pos = hdr.payload;
452 		end = hdr.payload + hdr.length;
456 			if (asn1_get_next(pos, end - pos, &hdr) < 0 ||
457 			    hdr.class != ASN1_CLASS_UNIVERSAL ||
458 			    hdr.tag != ASN1_TAG_SEQUENCE) {
461 					   hdr.class, hdr.tag);
465 			cert = x509_certificate_parse(hdr.payload, hdr.length);
474 			pos = hdr.payload + hdr.length;
494 	if (asn1_get_next(pos, end - pos, &hdr) < 0 &&
495 	    hdr.class == ASN1_CLASS_CONTEXT_SPECIFIC &&
496 	    hdr.tag == 0) {
497 		if (asn1_get_next(pos, end - pos, &hdr) < 0 ||
498 		    hdr.class != ASN1_CLASS_UNIVERSAL ||
499 		    hdr.tag != ASN1_TAG_INTEGER ||
500 		    hdr.length != 1) {
503 				   hdr.class, hdr.tag, hdr.length);
507 			   hdr.payload[0]);
508 		if (hdr.payload[0] != 0) {
511 				   hdr.payload[0]);
514 		pos = hdr.payload + hdr.length;
525 	if (asn1_get_next(pos, end - pos, &hdr) < 0 ||
526 	    hdr.class != ASN1_CLASS_CONTEXT_SPECIFIC) {
529 			   hdr.class, hdr.tag);
533 	if (hdr.tag == 1) {
535 		if (x509_parse_name(hdr.payload, hdr.length, &name, &pos) < 0)
539 	} else if (hdr.tag == 2) {
541 		if (asn1_get_next(hdr.payload, hdr.length, &hdr) < 0 ||
542 		    hdr.class != ASN1_CLASS_UNIVERSAL ||
543 		    hdr.tag != ASN1_TAG_OCTETSTRING) {
546 				   hdr.class, hdr.tag);
549 		key_hash = hdr.payload;
551 			    key_hash, hdr.length);
552 		if (hdr.length != SHA1_MAC_LEN) {
555 				   hdr.length, SHA1_MAC_LEN);
558 		pos = hdr.payload + hdr.length;
561 			   hdr.tag);
566 	if (asn1_get_next(pos, end - pos, &hdr) < 0 ||
567 	    hdr.class != ASN1_CLASS_UNIVERSAL ||
568 	    hdr.tag != ASN1_TAG_GENERALIZEDTIME ||
569 	    x509_parse_time(hdr.payload, hdr.length, hdr.tag,
576 	pos = hdr.payload + hdr.length;
579 	if (asn1_get_next(pos, end - pos, &hdr) < 0 ||
580 	    hdr.class != ASN1_CLASS_UNIVERSAL ||
581 	    hdr.tag != ASN1_TAG_SEQUENCE) {
584 			   hdr.class, hdr.tag);
587 	responses = hdr.payload;
588 	responses_len = hdr.length;
590 	pos = hdr.payload + hdr.length;
682 	struct asn1_hdr hdr;
700 	if (asn1_get_next(resp, len, &hdr) < 0 ||
701 	    hdr.class != ASN1_CLASS_UNIVERSAL ||
702 	    hdr.tag != ASN1_TAG_SEQUENCE) {
705 			   hdr.class, hdr.tag);
708 	pos = hdr.payload;
709 	end = hdr.payload + hdr.length;
712 	if (asn1_get_next(pos, end - pos, &hdr) < 0 ||
713 	    hdr.class != ASN1_CLASS_UNIVERSAL ||
714 	    hdr.tag != ASN1_TAG_ENUMERATED ||
715 	    hdr.length != 1) {
718 			   hdr.class, hdr.tag, hdr.length);
721 	resp_status = hdr.payload[0];
723 	pos = hdr.payload + hdr.length;
733 	if (asn1_get_next(pos, end - pos, &hdr) < 0 ||
734 	    hdr.class != ASN1_CLASS_CONTEXT_SPECIFIC ||
735 	    hdr.tag != 0) {
738 			   hdr.class, hdr.tag);
748 	if (asn1_get_next(hdr.payload, hdr.length, &hdr) < 0 ||
749 	    hdr.class != ASN1_CLASS_UNIVERSAL ||
750 	    hdr.tag != ASN1_TAG_SEQUENCE) {
753 			   hdr.class, hdr.tag);
756 	pos = hdr.payload;
757 	end = hdr.payload + hdr.length;
773 	if (asn1_get_next(pos, end - pos, &hdr) < 0 ||
774 	    hdr.class != ASN1_CLASS_UNIVERSAL ||
775 	    hdr.tag != ASN1_TAG_OCTETSTRING) {
778 			   hdr.class, hdr.tag);
793 							      hdr.payload,
794 							      hdr.length);