t_req.c revision 59191
1/* crypto/asn1/t_req.c */ 2/* Copyright (C) 1995-1998 Eric Young (eay@cryptsoft.com) 3 * All rights reserved. 4 * 5 * This package is an SSL implementation written 6 * by Eric Young (eay@cryptsoft.com). 7 * The implementation was written so as to conform with Netscapes SSL. 8 * 9 * This library is free for commercial and non-commercial use as long as 10 * the following conditions are aheared to. The following conditions 11 * apply to all code found in this distribution, be it the RC4, RSA, 12 * lhash, DES, etc., code; not just the SSL code. The SSL documentation 13 * included with this distribution is covered by the same copyright terms 14 * except that the holder is Tim Hudson (tjh@cryptsoft.com). 15 * 16 * Copyright remains Eric Young's, and as such any Copyright notices in 17 * the code are not to be removed. 18 * If this package is used in a product, Eric Young should be given attribution 19 * as the author of the parts of the library used. 20 * This can be in the form of a textual message at program startup or 21 * in documentation (online or textual) provided with the package. 22 * 23 * Redistribution and use in source and binary forms, with or without 24 * modification, are permitted provided that the following conditions 25 * are met: 26 * 1. Redistributions of source code must retain the copyright 27 * notice, this list of conditions and the following disclaimer. 28 * 2. Redistributions in binary form must reproduce the above copyright 29 * notice, this list of conditions and the following disclaimer in the 30 * documentation and/or other materials provided with the distribution. 31 * 3. All advertising materials mentioning features or use of this software 32 * must display the following acknowledgement: 33 * "This product includes cryptographic software written by 34 * Eric Young (eay@cryptsoft.com)" 35 * The word 'cryptographic' can be left out if the rouines from the library 36 * being used are not cryptographic related :-). 37 * 4. If you include any Windows specific code (or a derivative thereof) from 38 * the apps directory (application code) you must include an acknowledgement: 39 * "This product includes software written by Tim Hudson (tjh@cryptsoft.com)" 40 * 41 * THIS SOFTWARE IS PROVIDED BY ERIC YOUNG ``AS IS'' AND 42 * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE 43 * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE 44 * ARE DISCLAIMED. IN NO EVENT SHALL THE AUTHOR OR CONTRIBUTORS BE LIABLE 45 * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL 46 * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS 47 * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) 48 * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT 49 * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY 50 * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF 51 * SUCH DAMAGE. 52 * 53 * The licence and distribution terms for any publically available version or 54 * derivative of this code cannot be changed. i.e. this code cannot simply be 55 * copied and put under another distribution licence 56 * [including the GNU Public Licence.] 57 */ 58 59#include <stdio.h> 60#include "cryptlib.h" 61#include <openssl/buffer.h> 62#include <openssl/bn.h> 63#include <openssl/objects.h> 64#include <openssl/x509.h> 65#include <openssl/x509v3.h> 66 67#ifndef NO_FP_API 68int X509_REQ_print_fp(FILE *fp, X509_REQ *x) 69 { 70 BIO *b; 71 int ret; 72 73 if ((b=BIO_new(BIO_s_file())) == NULL) 74 { 75 X509err(X509_F_X509_REQ_PRINT_FP,ERR_R_BUF_LIB); 76 return(0); 77 } 78 BIO_set_fp(b,fp,BIO_NOCLOSE); 79 ret=X509_REQ_print(b, x); 80 BIO_free(b); 81 return(ret); 82 } 83#endif 84 85int X509_REQ_print(BIO *bp, X509_REQ *x) 86 { 87 unsigned long l; 88 int i,n; 89 char *s; 90 const char *neg; 91 X509_REQ_INFO *ri; 92 EVP_PKEY *pkey; 93 STACK_OF(X509_ATTRIBUTE) *sk; 94 STACK_OF(X509_EXTENSION) *exts; 95 char str[128]; 96 97 ri=x->req_info; 98 sprintf(str,"Certificate Request:\n"); 99 if (BIO_puts(bp,str) <= 0) goto err; 100 sprintf(str,"%4sData:\n",""); 101 if (BIO_puts(bp,str) <= 0) goto err; 102 103 neg=(ri->version->type == V_ASN1_NEG_INTEGER)?"-":""; 104 l=0; 105 for (i=0; i<ri->version->length; i++) 106 { l<<=8; l+=ri->version->data[i]; } 107 sprintf(str,"%8sVersion: %s%lu (%s0x%lx)\n","",neg,l,neg,l); 108 if (BIO_puts(bp,str) <= 0) goto err; 109 sprintf(str,"%8sSubject: ",""); 110 if (BIO_puts(bp,str) <= 0) goto err; 111 112 X509_NAME_print(bp,ri->subject,16); 113 sprintf(str,"\n%8sSubject Public Key Info:\n",""); 114 if (BIO_puts(bp,str) <= 0) goto err; 115 i=OBJ_obj2nid(ri->pubkey->algor->algorithm); 116 sprintf(str,"%12sPublic Key Algorithm: %s\n","", 117 (i == NID_undef)?"UNKNOWN":OBJ_nid2ln(i)); 118 if (BIO_puts(bp,str) <= 0) goto err; 119 120 pkey=X509_REQ_get_pubkey(x); 121#ifndef NO_RSA 122 if (pkey != NULL && pkey->type == EVP_PKEY_RSA) 123 { 124 BIO_printf(bp,"%12sRSA Public Key: (%d bit)\n","", 125 BN_num_bits(pkey->pkey.rsa->n)); 126 RSA_print(bp,pkey->pkey.rsa,16); 127 } 128 else 129#endif 130#ifndef NO_DSA 131 if (pkey != NULL && pkey->type == EVP_PKEY_DSA) 132 { 133 BIO_printf(bp,"%12sDSA Public Key:\n",""); 134 DSA_print(bp,pkey->pkey.dsa,16); 135 } 136 else 137#endif 138 BIO_printf(bp,"%12sUnknown Public Key:\n",""); 139 140 if (pkey != NULL) 141 EVP_PKEY_free(pkey); 142 143 /* may not be */ 144 sprintf(str,"%8sAttributes:\n",""); 145 if (BIO_puts(bp,str) <= 0) goto err; 146 147 sk=x->req_info->attributes; 148 if ((sk == NULL) || (sk_X509_ATTRIBUTE_num(sk) == 0)) 149 { 150 if (!x->req_info->req_kludge) 151 { 152 sprintf(str,"%12sa0:00\n",""); 153 if (BIO_puts(bp,str) <= 0) goto err; 154 } 155 } 156 else 157 { 158 for (i=0; i<sk_X509_ATTRIBUTE_num(sk); i++) 159 { 160 ASN1_TYPE *at; 161 X509_ATTRIBUTE *a; 162 ASN1_BIT_STRING *bs=NULL; 163 ASN1_TYPE *t; 164 int j,type=0,count=1,ii=0; 165 166 a=sk_X509_ATTRIBUTE_value(sk,i); 167 if(X509_REQ_extension_nid(OBJ_obj2nid(a->object))) 168 continue; 169 sprintf(str,"%12s",""); 170 if (BIO_puts(bp,str) <= 0) goto err; 171 if ((j=i2a_ASN1_OBJECT(bp,a->object)) > 0) 172 { 173 if (a->set) 174 { 175 ii=0; 176 count=sk_ASN1_TYPE_num(a->value.set); 177get_next: 178 at=sk_ASN1_TYPE_value(a->value.set,ii); 179 type=at->type; 180 bs=at->value.asn1_string; 181 } 182 else 183 { 184 t=a->value.single; 185 type=t->type; 186 bs=t->value.bit_string; 187 } 188 } 189 for (j=25-j; j>0; j--) 190 if (BIO_write(bp," ",1) != 1) goto err; 191 if (BIO_puts(bp,":") <= 0) goto err; 192 if ( (type == V_ASN1_PRINTABLESTRING) || 193 (type == V_ASN1_T61STRING) || 194 (type == V_ASN1_IA5STRING)) 195 { 196 if (BIO_write(bp,(char *)bs->data,bs->length) 197 != bs->length) 198 goto err; 199 BIO_puts(bp,"\n"); 200 } 201 else 202 { 203 BIO_puts(bp,"unable to print attribute\n"); 204 } 205 if (++ii < count) goto get_next; 206 } 207 } 208 209 exts = X509_REQ_get_extensions(x); 210 if(exts) { 211 BIO_printf(bp,"%8sRequested Extensions:\n",""); 212 for (i=0; i<sk_X509_EXTENSION_num(exts); i++) { 213 ASN1_OBJECT *obj; 214 X509_EXTENSION *ex; 215 int j; 216 ex=sk_X509_EXTENSION_value(exts, i); 217 if (BIO_printf(bp,"%12s","") <= 0) goto err; 218 obj=X509_EXTENSION_get_object(ex); 219 i2a_ASN1_OBJECT(bp,obj); 220 j=X509_EXTENSION_get_critical(ex); 221 if (BIO_printf(bp,": %s\n",j?"critical":"","") <= 0) 222 goto err; 223 if(!X509V3_EXT_print(bp, ex, 0, 16)) { 224 BIO_printf(bp, "%16s", ""); 225 M_ASN1_OCTET_STRING_print(bp,ex->value); 226 } 227 if (BIO_write(bp,"\n",1) <= 0) goto err; 228 } 229 sk_X509_EXTENSION_pop_free(exts, X509_EXTENSION_free); 230 } 231 232 i=OBJ_obj2nid(x->sig_alg->algorithm); 233 sprintf(str,"%4sSignature Algorithm: %s","", 234 (i == NID_undef)?"UNKNOWN":OBJ_nid2ln(i)); 235 if (BIO_puts(bp,str) <= 0) goto err; 236 237 n=x->signature->length; 238 s=(char *)x->signature->data; 239 for (i=0; i<n; i++) 240 { 241 if ((i%18) == 0) 242 { 243 sprintf(str,"\n%8s",""); 244 if (BIO_puts(bp,str) <= 0) goto err; 245 } 246 sprintf(str,"%02x%s",(unsigned char)s[i],((i+1) == n)?"":":"); 247 if (BIO_puts(bp,str) <= 0) goto err; 248 } 249 if (BIO_puts(bp,"\n") <= 0) goto err; 250 return(1); 251err: 252 X509err(X509_F_X509_REQ_PRINT,ERR_R_BUF_LIB); 253 return(0); 254 } 255