155714Skris/* v3_conf.c */ 2280297Sjkim/* 3280297Sjkim * Written by Dr Stephen N Henson (steve@openssl.org) for the OpenSSL project 4280297Sjkim * 1999. 555714Skris */ 655714Skris/* ==================================================================== 7331638Sjkim * Copyright (c) 1999-2018 The OpenSSL Project. All rights reserved. 855714Skris * 955714Skris * Redistribution and use in source and binary forms, with or without 1055714Skris * modification, are permitted provided that the following conditions 1155714Skris * are met: 1255714Skris * 1355714Skris * 1. Redistributions of source code must retain the above copyright 14280297Sjkim * notice, this list of conditions and the following disclaimer. 1555714Skris * 1655714Skris * 2. Redistributions in binary form must reproduce the above copyright 1755714Skris * notice, this list of conditions and the following disclaimer in 1855714Skris * the documentation and/or other materials provided with the 1955714Skris * distribution. 2055714Skris * 2155714Skris * 3. All advertising materials mentioning features or use of this 2255714Skris * software must display the following acknowledgment: 2355714Skris * "This product includes software developed by the OpenSSL Project 2455714Skris * for use in the OpenSSL Toolkit. (http://www.OpenSSL.org/)" 2555714Skris * 2655714Skris * 4. The names "OpenSSL Toolkit" and "OpenSSL Project" must not be used to 2755714Skris * endorse or promote products derived from this software without 2855714Skris * prior written permission. For written permission, please contact 2955714Skris * licensing@OpenSSL.org. 3055714Skris * 3155714Skris * 5. Products derived from this software may not be called "OpenSSL" 3255714Skris * nor may "OpenSSL" appear in their names without prior written 3355714Skris * permission of the OpenSSL Project. 3455714Skris * 3555714Skris * 6. Redistributions of any form whatsoever must retain the following 3655714Skris * acknowledgment: 3755714Skris * "This product includes software developed by the OpenSSL Project 3855714Skris * for use in the OpenSSL Toolkit (http://www.OpenSSL.org/)" 3955714Skris * 4055714Skris * THIS SOFTWARE IS PROVIDED BY THE OpenSSL PROJECT ``AS IS'' AND ANY 4155714Skris * EXPRESSED OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE 4255714Skris * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR 4355714Skris * PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE OpenSSL PROJECT OR 4455714Skris * ITS CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, 4555714Skris * SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT 4655714Skris * NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; 4755714Skris * LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) 4855714Skris * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, 4955714Skris * STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) 5055714Skris * ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED 5155714Skris * OF THE POSSIBILITY OF SUCH DAMAGE. 5255714Skris * ==================================================================== 5355714Skris * 5455714Skris * This product includes cryptographic software written by Eric Young 5555714Skris * (eay@cryptsoft.com). This product includes software written by Tim 5655714Skris * Hudson (tjh@cryptsoft.com). 5755714Skris * 5855714Skris */ 5955714Skris/* extension creation utilities */ 6055714Skris 6155714Skris#include <stdio.h> 6255714Skris#include <ctype.h> 6355714Skris#include "cryptlib.h" 6455714Skris#include <openssl/conf.h> 6555714Skris#include <openssl/x509.h> 6655714Skris#include <openssl/x509v3.h> 6755714Skris 6855714Skrisstatic int v3_check_critical(char **value); 6955714Skrisstatic int v3_check_generic(char **value); 70280297Sjkimstatic X509_EXTENSION *do_ext_nconf(CONF *conf, X509V3_CTX *ctx, int ext_nid, 71280297Sjkim int crit, char *value); 72280297Sjkimstatic X509_EXTENSION *v3_generic_extension(const char *ext, char *value, 73280297Sjkim int crit, int type, 74280297Sjkim X509V3_CTX *ctx); 7555714Skrisstatic char *conf_lhash_get_string(void *db, char *section, char *value); 7655714Skrisstatic STACK_OF(CONF_VALUE) *conf_lhash_get_section(void *db, char *section); 77280297Sjkimstatic X509_EXTENSION *do_ext_i2d(const X509V3_EXT_METHOD *method, 78280297Sjkim int ext_nid, int crit, void *ext_struc); 79280297Sjkimstatic unsigned char *generic_asn1(char *value, X509V3_CTX *ctx, 80280297Sjkim long *ext_len); 81109998Smarkm/* CONF *conf: Config file */ 8255714Skris/* char *name: Name */ 8355714Skris/* char *value: Value */ 84109998SmarkmX509_EXTENSION *X509V3_EXT_nconf(CONF *conf, X509V3_CTX *ctx, char *name, 85280297Sjkim char *value) 86280297Sjkim{ 87280297Sjkim int crit; 88280297Sjkim int ext_type; 89280297Sjkim X509_EXTENSION *ret; 90280297Sjkim crit = v3_check_critical(&value); 91280297Sjkim if ((ext_type = v3_check_generic(&value))) 92280297Sjkim return v3_generic_extension(name, value, crit, ext_type, ctx); 93280297Sjkim ret = do_ext_nconf(conf, ctx, OBJ_sn2nid(name), crit, value); 94280297Sjkim if (!ret) { 95280297Sjkim X509V3err(X509V3_F_X509V3_EXT_NCONF, X509V3_R_ERROR_IN_EXTENSION); 96280297Sjkim ERR_add_error_data(4, "name=", name, ", value=", value); 97280297Sjkim } 98280297Sjkim return ret; 99280297Sjkim} 10055714Skris 101109998Smarkm/* CONF *conf: Config file */ 10255714Skris/* char *value: Value */ 103109998SmarkmX509_EXTENSION *X509V3_EXT_nconf_nid(CONF *conf, X509V3_CTX *ctx, int ext_nid, 104280297Sjkim char *value) 105280297Sjkim{ 106280297Sjkim int crit; 107280297Sjkim int ext_type; 108280297Sjkim crit = v3_check_critical(&value); 109280297Sjkim if ((ext_type = v3_check_generic(&value))) 110280297Sjkim return v3_generic_extension(OBJ_nid2sn(ext_nid), 111280297Sjkim value, crit, ext_type, ctx); 112280297Sjkim return do_ext_nconf(conf, ctx, ext_nid, crit, value); 113280297Sjkim} 11455714Skris 115109998Smarkm/* CONF *conf: Config file */ 11655714Skris/* char *value: Value */ 117109998Smarkmstatic X509_EXTENSION *do_ext_nconf(CONF *conf, X509V3_CTX *ctx, int ext_nid, 118280297Sjkim int crit, char *value) 119280297Sjkim{ 120280297Sjkim const X509V3_EXT_METHOD *method; 121280297Sjkim X509_EXTENSION *ext; 122280297Sjkim STACK_OF(CONF_VALUE) *nval; 123280297Sjkim void *ext_struc; 124280297Sjkim if (ext_nid == NID_undef) { 125280297Sjkim X509V3err(X509V3_F_DO_EXT_NCONF, X509V3_R_UNKNOWN_EXTENSION_NAME); 126280297Sjkim return NULL; 127280297Sjkim } 128280297Sjkim if (!(method = X509V3_EXT_get_nid(ext_nid))) { 129280297Sjkim X509V3err(X509V3_F_DO_EXT_NCONF, X509V3_R_UNKNOWN_EXTENSION); 130280297Sjkim return NULL; 131280297Sjkim } 132280297Sjkim /* Now get internal extension representation based on type */ 133280297Sjkim if (method->v2i) { 134280297Sjkim if (*value == '@') 135280297Sjkim nval = NCONF_get_section(conf, value + 1); 136280297Sjkim else 137280297Sjkim nval = X509V3_parse_list(value); 138306195Sjkim if (nval == NULL || sk_CONF_VALUE_num(nval) <= 0) { 139280297Sjkim X509V3err(X509V3_F_DO_EXT_NCONF, 140280297Sjkim X509V3_R_INVALID_EXTENSION_STRING); 141280297Sjkim ERR_add_error_data(4, "name=", OBJ_nid2sn(ext_nid), ",section=", 142280297Sjkim value); 143306195Sjkim if (*value != '@') 144306195Sjkim sk_CONF_VALUE_free(nval); 145280297Sjkim return NULL; 146280297Sjkim } 147280297Sjkim ext_struc = method->v2i(method, ctx, nval); 148280297Sjkim if (*value != '@') 149280297Sjkim sk_CONF_VALUE_pop_free(nval, X509V3_conf_free); 150280297Sjkim if (!ext_struc) 151280297Sjkim return NULL; 152280297Sjkim } else if (method->s2i) { 153280297Sjkim if (!(ext_struc = method->s2i(method, ctx, value))) 154280297Sjkim return NULL; 155280297Sjkim } else if (method->r2i) { 156280297Sjkim if (!ctx->db || !ctx->db_meth) { 157280297Sjkim X509V3err(X509V3_F_DO_EXT_NCONF, X509V3_R_NO_CONFIG_DATABASE); 158280297Sjkim return NULL; 159280297Sjkim } 160280297Sjkim if (!(ext_struc = method->r2i(method, ctx, value))) 161280297Sjkim return NULL; 162280297Sjkim } else { 163280297Sjkim X509V3err(X509V3_F_DO_EXT_NCONF, 164280297Sjkim X509V3_R_EXTENSION_SETTING_NOT_SUPPORTED); 165280297Sjkim ERR_add_error_data(2, "name=", OBJ_nid2sn(ext_nid)); 166280297Sjkim return NULL; 167280297Sjkim } 16855714Skris 169280297Sjkim ext = do_ext_i2d(method, ext_nid, crit, ext_struc); 170280297Sjkim if (method->it) 171280297Sjkim ASN1_item_free(ext_struc, ASN1_ITEM_ptr(method->it)); 172280297Sjkim else 173280297Sjkim method->ext_free(ext_struc); 174280297Sjkim return ext; 17555714Skris 176280297Sjkim} 17755714Skris 178280297Sjkimstatic X509_EXTENSION *do_ext_i2d(const X509V3_EXT_METHOD *method, 179280297Sjkim int ext_nid, int crit, void *ext_struc) 180280297Sjkim{ 181280297Sjkim unsigned char *ext_der; 182280297Sjkim int ext_len; 183280297Sjkim ASN1_OCTET_STRING *ext_oct; 184280297Sjkim X509_EXTENSION *ext; 185280297Sjkim /* Convert internal representation to DER */ 186280297Sjkim if (method->it) { 187280297Sjkim ext_der = NULL; 188280297Sjkim ext_len = 189280297Sjkim ASN1_item_i2d(ext_struc, &ext_der, ASN1_ITEM_ptr(method->it)); 190280297Sjkim if (ext_len < 0) 191280297Sjkim goto merr; 192280297Sjkim } else { 193280297Sjkim unsigned char *p; 194280297Sjkim ext_len = method->i2d(ext_struc, NULL); 195280297Sjkim if (!(ext_der = OPENSSL_malloc(ext_len))) 196280297Sjkim goto merr; 197280297Sjkim p = ext_der; 198280297Sjkim method->i2d(ext_struc, &p); 199280297Sjkim } 200280297Sjkim if (!(ext_oct = M_ASN1_OCTET_STRING_new())) 201280297Sjkim goto merr; 202280297Sjkim ext_oct->data = ext_der; 203280297Sjkim ext_oct->length = ext_len; 204109998Smarkm 205280297Sjkim ext = X509_EXTENSION_create_by_NID(NULL, ext_nid, crit, ext_oct); 206280297Sjkim if (!ext) 207280297Sjkim goto merr; 208280297Sjkim M_ASN1_OCTET_STRING_free(ext_oct); 20955714Skris 210280297Sjkim return ext; 21155714Skris 212280297Sjkim merr: 213280297Sjkim X509V3err(X509V3_F_DO_EXT_I2D, ERR_R_MALLOC_FAILURE); 214280297Sjkim return NULL; 21555714Skris 216280297Sjkim} 21755714Skris 21855714Skris/* Given an internal structure, nid and critical flag create an extension */ 21955714Skris 22055714SkrisX509_EXTENSION *X509V3_EXT_i2d(int ext_nid, int crit, void *ext_struc) 221280297Sjkim{ 222280297Sjkim const X509V3_EXT_METHOD *method; 223280297Sjkim if (!(method = X509V3_EXT_get_nid(ext_nid))) { 224280297Sjkim X509V3err(X509V3_F_X509V3_EXT_I2D, X509V3_R_UNKNOWN_EXTENSION); 225280297Sjkim return NULL; 226280297Sjkim } 227280297Sjkim return do_ext_i2d(method, ext_nid, crit, ext_struc); 22855714Skris} 22955714Skris 23055714Skris/* Check the extension string for critical flag */ 23155714Skrisstatic int v3_check_critical(char **value) 23255714Skris{ 233280297Sjkim char *p = *value; 234280297Sjkim if ((strlen(p) < 9) || strncmp(p, "critical,", 9)) 235280297Sjkim return 0; 236280297Sjkim p += 9; 237280297Sjkim while (isspace((unsigned char)*p)) 238280297Sjkim p++; 239280297Sjkim *value = p; 240280297Sjkim return 1; 24155714Skris} 24255714Skris 24355714Skris/* Check extension string for generic extension and return the type */ 24455714Skrisstatic int v3_check_generic(char **value) 24555714Skris{ 246280297Sjkim int gen_type = 0; 247280297Sjkim char *p = *value; 248280297Sjkim if ((strlen(p) >= 4) && !strncmp(p, "DER:", 4)) { 249280297Sjkim p += 4; 250280297Sjkim gen_type = 1; 251280297Sjkim } else if ((strlen(p) >= 5) && !strncmp(p, "ASN1:", 5)) { 252280297Sjkim p += 5; 253280297Sjkim gen_type = 2; 254280297Sjkim } else 255280297Sjkim return 0; 256160814Ssimon 257280297Sjkim while (isspace((unsigned char)*p)) 258280297Sjkim p++; 259280297Sjkim *value = p; 260280297Sjkim return gen_type; 26155714Skris} 26255714Skris 26359191Skris/* Create a generic extension: for now just handle DER type */ 26455714Skrisstatic X509_EXTENSION *v3_generic_extension(const char *ext, char *value, 265280297Sjkim int crit, int gen_type, 266280297Sjkim X509V3_CTX *ctx) 267280297Sjkim{ 268280297Sjkim unsigned char *ext_der = NULL; 269280297Sjkim long ext_len; 270280297Sjkim ASN1_OBJECT *obj = NULL; 271280297Sjkim ASN1_OCTET_STRING *oct = NULL; 272280297Sjkim X509_EXTENSION *extension = NULL; 273280297Sjkim if (!(obj = OBJ_txt2obj(ext, 0))) { 274280297Sjkim X509V3err(X509V3_F_V3_GENERIC_EXTENSION, 275280297Sjkim X509V3_R_EXTENSION_NAME_ERROR); 276280297Sjkim ERR_add_error_data(2, "name=", ext); 277280297Sjkim goto err; 278280297Sjkim } 27955714Skris 280280297Sjkim if (gen_type == 1) 281280297Sjkim ext_der = string_to_hex(value, &ext_len); 282280297Sjkim else if (gen_type == 2) 283280297Sjkim ext_der = generic_asn1(value, ctx, &ext_len); 284160814Ssimon 285280297Sjkim if (ext_der == NULL) { 286280297Sjkim X509V3err(X509V3_F_V3_GENERIC_EXTENSION, 287280297Sjkim X509V3_R_EXTENSION_VALUE_ERROR); 288280297Sjkim ERR_add_error_data(2, "value=", value); 289280297Sjkim goto err; 290280297Sjkim } 29155714Skris 292280297Sjkim if (!(oct = M_ASN1_OCTET_STRING_new())) { 293280297Sjkim X509V3err(X509V3_F_V3_GENERIC_EXTENSION, ERR_R_MALLOC_FAILURE); 294280297Sjkim goto err; 295280297Sjkim } 29655714Skris 297280297Sjkim oct->data = ext_der; 298280297Sjkim oct->length = ext_len; 299280297Sjkim ext_der = NULL; 30055714Skris 301280297Sjkim extension = X509_EXTENSION_create_by_OBJ(NULL, obj, crit, oct); 30255714Skris 303280297Sjkim err: 304280297Sjkim ASN1_OBJECT_free(obj); 305280297Sjkim M_ASN1_OCTET_STRING_free(oct); 306280297Sjkim if (ext_der) 307280297Sjkim OPENSSL_free(ext_der); 308280297Sjkim return extension; 30955714Skris 310280297Sjkim} 31155714Skris 312280297Sjkimstatic unsigned char *generic_asn1(char *value, X509V3_CTX *ctx, 313280297Sjkim long *ext_len) 314280297Sjkim{ 315280297Sjkim ASN1_TYPE *typ; 316280297Sjkim unsigned char *ext_der = NULL; 317280297Sjkim typ = ASN1_generate_v3(value, ctx); 318280297Sjkim if (typ == NULL) 319280297Sjkim return NULL; 320280297Sjkim *ext_len = i2d_ASN1_TYPE(typ, &ext_der); 321280297Sjkim ASN1_TYPE_free(typ); 322280297Sjkim return ext_der; 323280297Sjkim} 324109998Smarkm 325280297Sjkim/* 326280297Sjkim * This is the main function: add a bunch of extensions based on a config 327280297Sjkim * file section to an extension STACK. 32855714Skris */ 32955714Skris 330109998Smarkmint X509V3_EXT_add_nconf_sk(CONF *conf, X509V3_CTX *ctx, char *section, 331280297Sjkim STACK_OF(X509_EXTENSION) **sk) 332280297Sjkim{ 333280297Sjkim X509_EXTENSION *ext; 334280297Sjkim STACK_OF(CONF_VALUE) *nval; 335280297Sjkim CONF_VALUE *val; 336280297Sjkim int i; 337280297Sjkim if (!(nval = NCONF_get_section(conf, section))) 338280297Sjkim return 0; 339280297Sjkim for (i = 0; i < sk_CONF_VALUE_num(nval); i++) { 340280297Sjkim val = sk_CONF_VALUE_value(nval, i); 341280297Sjkim if (!(ext = X509V3_EXT_nconf(conf, ctx, val->name, val->value))) 342280297Sjkim return 0; 343331638Sjkim if (sk != NULL) { 344331638Sjkim if (X509v3_add_ext(sk, ext, -1) == NULL) { 345331638Sjkim X509_EXTENSION_free(ext); 346331638Sjkim return 0; 347331638Sjkim } 348331638Sjkim } 349280297Sjkim X509_EXTENSION_free(ext); 350280297Sjkim } 351280297Sjkim return 1; 352280297Sjkim} 35355714Skris 354280297Sjkim/* 355280297Sjkim * Convenience functions to add extensions to a certificate, CRL and request 356280297Sjkim */ 357109998Smarkm 358109998Smarkmint X509V3_EXT_add_nconf(CONF *conf, X509V3_CTX *ctx, char *section, 359280297Sjkim X509 *cert) 360280297Sjkim{ 361280297Sjkim STACK_OF(X509_EXTENSION) **sk = NULL; 362280297Sjkim if (cert) 363280297Sjkim sk = &cert->cert_info->extensions; 364280297Sjkim return X509V3_EXT_add_nconf_sk(conf, ctx, section, sk); 365280297Sjkim} 366109998Smarkm 36755714Skris/* Same as above but for a CRL */ 36855714Skris 369109998Smarkmint X509V3_EXT_CRL_add_nconf(CONF *conf, X509V3_CTX *ctx, char *section, 370280297Sjkim X509_CRL *crl) 371280297Sjkim{ 372280297Sjkim STACK_OF(X509_EXTENSION) **sk = NULL; 373280297Sjkim if (crl) 374280297Sjkim sk = &crl->crl->extensions; 375280297Sjkim return X509V3_EXT_add_nconf_sk(conf, ctx, section, sk); 376280297Sjkim} 37755714Skris 37859191Skris/* Add extensions to certificate request */ 37959191Skris 380109998Smarkmint X509V3_EXT_REQ_add_nconf(CONF *conf, X509V3_CTX *ctx, char *section, 381280297Sjkim X509_REQ *req) 382280297Sjkim{ 383280297Sjkim STACK_OF(X509_EXTENSION) *extlist = NULL, **sk = NULL; 384280297Sjkim int i; 385280297Sjkim if (req) 386280297Sjkim sk = &extlist; 387280297Sjkim i = X509V3_EXT_add_nconf_sk(conf, ctx, section, sk); 388280297Sjkim if (!i || !sk) 389280297Sjkim return i; 390280297Sjkim i = X509_REQ_add_extensions(req, extlist); 391280297Sjkim sk_X509_EXTENSION_pop_free(extlist, X509_EXTENSION_free); 392280297Sjkim return i; 393280297Sjkim} 39459191Skris 39555714Skris/* Config database functions */ 39655714Skris 397280297Sjkimchar *X509V3_get_string(X509V3_CTX *ctx, char *name, char *section) 398280297Sjkim{ 399280297Sjkim if (!ctx->db || !ctx->db_meth || !ctx->db_meth->get_string) { 400280297Sjkim X509V3err(X509V3_F_X509V3_GET_STRING, X509V3_R_OPERATION_NOT_DEFINED); 401280297Sjkim return NULL; 402280297Sjkim } 403280297Sjkim if (ctx->db_meth->get_string) 404280297Sjkim return ctx->db_meth->get_string(ctx->db, name, section); 405280297Sjkim return NULL; 406280297Sjkim} 40755714Skris 408280297SjkimSTACK_OF(CONF_VALUE) *X509V3_get_section(X509V3_CTX *ctx, char *section) 409280297Sjkim{ 410280297Sjkim if (!ctx->db || !ctx->db_meth || !ctx->db_meth->get_section) { 411280297Sjkim X509V3err(X509V3_F_X509V3_GET_SECTION, 412280297Sjkim X509V3_R_OPERATION_NOT_DEFINED); 413280297Sjkim return NULL; 414280297Sjkim } 415280297Sjkim if (ctx->db_meth->get_section) 416280297Sjkim return ctx->db_meth->get_section(ctx->db, section); 417280297Sjkim return NULL; 418280297Sjkim} 41955714Skris 42055714Skrisvoid X509V3_string_free(X509V3_CTX *ctx, char *str) 421280297Sjkim{ 422280297Sjkim if (!str) 423280297Sjkim return; 424280297Sjkim if (ctx->db_meth->free_string) 425280297Sjkim ctx->db_meth->free_string(ctx->db, str); 426280297Sjkim} 42755714Skris 42855714Skrisvoid X509V3_section_free(X509V3_CTX *ctx, STACK_OF(CONF_VALUE) *section) 429280297Sjkim{ 430280297Sjkim if (!section) 431280297Sjkim return; 432280297Sjkim if (ctx->db_meth->free_section) 433280297Sjkim ctx->db_meth->free_section(ctx->db, section); 434280297Sjkim} 43555714Skris 436109998Smarkmstatic char *nconf_get_string(void *db, char *section, char *value) 437280297Sjkim{ 438280297Sjkim return NCONF_get_string(db, section, value); 439280297Sjkim} 440109998Smarkm 441109998Smarkmstatic STACK_OF(CONF_VALUE) *nconf_get_section(void *db, char *section) 442280297Sjkim{ 443280297Sjkim return NCONF_get_section(db, section); 444280297Sjkim} 445109998Smarkm 446109998Smarkmstatic X509V3_CONF_METHOD nconf_method = { 447280297Sjkim nconf_get_string, 448280297Sjkim nconf_get_section, 449280297Sjkim NULL, 450280297Sjkim NULL 451109998Smarkm}; 452109998Smarkm 453109998Smarkmvoid X509V3_set_nconf(X509V3_CTX *ctx, CONF *conf) 454280297Sjkim{ 455280297Sjkim ctx->db_meth = &nconf_method; 456280297Sjkim ctx->db = conf; 457280297Sjkim} 458109998Smarkm 459109998Smarkmvoid X509V3_set_ctx(X509V3_CTX *ctx, X509 *issuer, X509 *subj, X509_REQ *req, 460280297Sjkim X509_CRL *crl, int flags) 461280297Sjkim{ 462280297Sjkim ctx->issuer_cert = issuer; 463280297Sjkim ctx->subject_cert = subj; 464280297Sjkim ctx->crl = crl; 465280297Sjkim ctx->subject_req = req; 466280297Sjkim ctx->flags = flags; 467280297Sjkim} 468109998Smarkm 469109998Smarkm/* Old conf compatibility functions */ 470109998Smarkm 471238405SjkimX509_EXTENSION *X509V3_EXT_conf(LHASH_OF(CONF_VALUE) *conf, X509V3_CTX *ctx, 472280297Sjkim char *name, char *value) 473280297Sjkim{ 474280297Sjkim CONF ctmp; 475280297Sjkim CONF_set_nconf(&ctmp, conf); 476280297Sjkim return X509V3_EXT_nconf(&ctmp, ctx, name, value); 477280297Sjkim} 478109998Smarkm 479109998Smarkm/* LHASH *conf: Config file */ 480109998Smarkm/* char *value: Value */ 481280297SjkimX509_EXTENSION *X509V3_EXT_conf_nid(LHASH_OF(CONF_VALUE) *conf, 482280297Sjkim X509V3_CTX *ctx, int ext_nid, char *value) 483280297Sjkim{ 484280297Sjkim CONF ctmp; 485280297Sjkim CONF_set_nconf(&ctmp, conf); 486280297Sjkim return X509V3_EXT_nconf_nid(&ctmp, ctx, ext_nid, value); 487280297Sjkim} 488109998Smarkm 48955714Skrisstatic char *conf_lhash_get_string(void *db, char *section, char *value) 490280297Sjkim{ 491280297Sjkim return CONF_get_string(db, section, value); 492280297Sjkim} 49355714Skris 49455714Skrisstatic STACK_OF(CONF_VALUE) *conf_lhash_get_section(void *db, char *section) 495280297Sjkim{ 496280297Sjkim return CONF_get_section(db, section); 497280297Sjkim} 49855714Skris 49955714Skrisstatic X509V3_CONF_METHOD conf_lhash_method = { 500280297Sjkim conf_lhash_get_string, 501280297Sjkim conf_lhash_get_section, 502280297Sjkim NULL, 503280297Sjkim NULL 50455714Skris}; 50555714Skris 506238405Sjkimvoid X509V3_set_conf_lhash(X509V3_CTX *ctx, LHASH_OF(CONF_VALUE) *lhash) 507280297Sjkim{ 508280297Sjkim ctx->db_meth = &conf_lhash_method; 509280297Sjkim ctx->db = lhash; 510280297Sjkim} 51155714Skris 512238405Sjkimint X509V3_EXT_add_conf(LHASH_OF(CONF_VALUE) *conf, X509V3_CTX *ctx, 513280297Sjkim char *section, X509 *cert) 514280297Sjkim{ 515280297Sjkim CONF ctmp; 516280297Sjkim CONF_set_nconf(&ctmp, conf); 517280297Sjkim return X509V3_EXT_add_nconf(&ctmp, ctx, section, cert); 518280297Sjkim} 519109998Smarkm 520109998Smarkm/* Same as above but for a CRL */ 521109998Smarkm 522238405Sjkimint X509V3_EXT_CRL_add_conf(LHASH_OF(CONF_VALUE) *conf, X509V3_CTX *ctx, 523280297Sjkim char *section, X509_CRL *crl) 524280297Sjkim{ 525280297Sjkim CONF ctmp; 526280297Sjkim CONF_set_nconf(&ctmp, conf); 527280297Sjkim return X509V3_EXT_CRL_add_nconf(&ctmp, ctx, section, crl); 528280297Sjkim} 529109998Smarkm 530109998Smarkm/* Add extensions to certificate request */ 531109998Smarkm 532238405Sjkimint X509V3_EXT_REQ_add_conf(LHASH_OF(CONF_VALUE) *conf, X509V3_CTX *ctx, 533280297Sjkim char *section, X509_REQ *req) 534280297Sjkim{ 535280297Sjkim CONF ctmp; 536280297Sjkim CONF_set_nconf(&ctmp, conf); 537280297Sjkim return X509V3_EXT_REQ_add_nconf(&ctmp, ctx, section, req); 538280297Sjkim} 539