1 /* Copyright (C) 1995-1998 Eric Young ([email protected])
2 * All rights reserved.
3 *
4 * This package is an SSL implementation written
5 * by Eric Young ([email protected]).
6 * The implementation was written so as to conform with Netscapes SSL.
7 *
8 * This library is free for commercial and non-commercial use as long as
9 * the following conditions are aheared to. The following conditions
10 * apply to all code found in this distribution, be it the RC4, RSA,
11 * lhash, DES, etc., code; not just the SSL code. The SSL documentation
12 * included with this distribution is covered by the same copyright terms
13 * except that the holder is Tim Hudson ([email protected]).
14 *
15 * Copyright remains Eric Young's, and as such any Copyright notices in
16 * the code are not to be removed.
17 * If this package is used in a product, Eric Young should be given attribution
18 * as the author of the parts of the library used.
19 * This can be in the form of a textual message at program startup or
20 * in documentation (online or textual) provided with the package.
21 *
22 * Redistribution and use in source and binary forms, with or without
23 * modification, are permitted provided that the following conditions
24 * are met:
25 * 1. Redistributions of source code must retain the copyright
26 * notice, this list of conditions and the following disclaimer.
27 * 2. Redistributions in binary form must reproduce the above copyright
28 * notice, this list of conditions and the following disclaimer in the
29 * documentation and/or other materials provided with the distribution.
30 * 3. All advertising materials mentioning features or use of this software
31 * must display the following acknowledgement:
32 * "This product includes cryptographic software written by
33 * Eric Young ([email protected])"
34 * The word 'cryptographic' can be left out if the rouines from the library
35 * being used are not cryptographic related :-).
36 * 4. If you include any Windows specific code (or a derivative thereof) from
37 * the apps directory (application code) you must include an acknowledgement:
38 * "This product includes software written by Tim Hudson ([email protected])"
39 *
40 * THIS SOFTWARE IS PROVIDED BY ERIC YOUNG ``AS IS'' AND
41 * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
42 * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
43 * ARE DISCLAIMED. IN NO EVENT SHALL THE AUTHOR OR CONTRIBUTORS BE LIABLE
44 * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
45 * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
46 * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
47 * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
48 * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
49 * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
50 * SUCH DAMAGE.
51 *
52 * The licence and distribution terms for any publically available version or
53 * derivative of this code cannot be changed. i.e. this code cannot simply be
54 * copied and put under another distribution licence
55 * [including the GNU Public Licence.] */
56
57 #include <assert.h>
58 #include <stdio.h>
59
60 #include <openssl/bn.h>
61 #include <openssl/buffer.h>
62 #include <openssl/err.h>
63 #include <openssl/objects.h>
64 #include <openssl/x509.h>
65
66 #include "internal.h"
67
68
X509_REQ_print_fp(FILE * fp,X509_REQ * x)69 int X509_REQ_print_fp(FILE *fp, X509_REQ *x) {
70 BIO *bio = BIO_new_fp(fp, BIO_NOCLOSE);
71 if (bio == NULL) {
72 OPENSSL_PUT_ERROR(X509, ERR_R_BUF_LIB);
73 return 0;
74 }
75 int ret = X509_REQ_print(bio, x);
76 BIO_free(bio);
77 return ret;
78 }
79
X509_REQ_print_ex(BIO * bio,X509_REQ * x,unsigned long nmflags,unsigned long cflag)80 int X509_REQ_print_ex(BIO *bio, X509_REQ *x, unsigned long nmflags,
81 unsigned long cflag) {
82 long l;
83 STACK_OF(X509_ATTRIBUTE) *sk;
84 char mlch = ' ';
85
86 int nmindent = 0;
87
88 if ((nmflags & XN_FLAG_SEP_MASK) == XN_FLAG_SEP_MULTILINE) {
89 mlch = '\n';
90 nmindent = 12;
91 }
92
93 if (nmflags == X509_FLAG_COMPAT) {
94 nmindent = 16;
95 }
96
97 X509_REQ_INFO *ri = x->req_info;
98 if (!(cflag & X509_FLAG_NO_HEADER)) {
99 if (BIO_write(bio, "Certificate Request:\n", 21) <= 0 ||
100 BIO_write(bio, " Data:\n", 10) <= 0) {
101 goto err;
102 }
103 }
104 if (!(cflag & X509_FLAG_NO_VERSION)) {
105 l = X509_REQ_get_version(x);
106 // Only zero, |X509_REQ_VERSION_1|, is valid but our parser accepts some
107 // invalid values for compatibility.
108 assert(0 <= l && l <= 2);
109 if (BIO_printf(bio, "%8sVersion: %ld (0x%lx)\n", "", l + 1,
110 (unsigned long)l) <= 0) {
111 goto err;
112 }
113 }
114 if (!(cflag & X509_FLAG_NO_SUBJECT)) {
115 if (BIO_printf(bio, " Subject:%c", mlch) <= 0 ||
116 X509_NAME_print_ex(bio, ri->subject, nmindent, nmflags) < 0 ||
117 BIO_write(bio, "\n", 1) <= 0) {
118 goto err;
119 }
120 }
121 if (!(cflag & X509_FLAG_NO_PUBKEY)) {
122 if (BIO_write(bio, " Subject Public Key Info:\n", 33) <= 0 ||
123 BIO_printf(bio, "%12sPublic Key Algorithm: ", "") <= 0 ||
124 i2a_ASN1_OBJECT(bio, ri->pubkey->algor->algorithm) <= 0 ||
125 BIO_puts(bio, "\n") <= 0) {
126 goto err;
127 }
128
129 const EVP_PKEY *pkey = X509_REQ_get0_pubkey(x);
130 if (pkey == NULL) {
131 BIO_printf(bio, "%12sUnable to load Public Key\n", "");
132 ERR_print_errors(bio);
133 } else {
134 EVP_PKEY_print_public(bio, pkey, 16, NULL);
135 }
136 }
137
138 if (!(cflag & X509_FLAG_NO_ATTRIBUTES)) {
139 if (BIO_printf(bio, "%8sAttributes:\n", "") <= 0) {
140 goto err;
141 }
142
143 sk = x->req_info->attributes;
144 if (sk_X509_ATTRIBUTE_num(sk) == 0) {
145 if (BIO_printf(bio, "%12sa0:00\n", "") <= 0) {
146 goto err;
147 }
148 } else {
149 size_t i;
150 for (i = 0; i < sk_X509_ATTRIBUTE_num(sk); i++) {
151 X509_ATTRIBUTE *a = sk_X509_ATTRIBUTE_value(sk, i);
152 ASN1_OBJECT *aobj = X509_ATTRIBUTE_get0_object(a);
153
154 if (X509_REQ_extension_nid(OBJ_obj2nid(aobj))) {
155 continue;
156 }
157
158 if (BIO_printf(bio, "%12s", "") <= 0) {
159 goto err;
160 }
161
162 const int num_attrs = X509_ATTRIBUTE_count(a);
163 const int obj_str_len = i2a_ASN1_OBJECT(bio, aobj);
164 if (obj_str_len <= 0) {
165 if (BIO_puts(bio, "(Unable to print attribute ID.)\n") < 0) {
166 goto err;
167 } else {
168 continue;
169 }
170 }
171
172 int j;
173 for (j = 0; j < num_attrs; j++) {
174 const ASN1_TYPE *at = X509_ATTRIBUTE_get0_type(a, j);
175 const int type = at->type;
176 ASN1_BIT_STRING *bs = at->value.asn1_string;
177
178 int k;
179 for (k = 25 - obj_str_len; k > 0; k--) {
180 if (BIO_write(bio, " ", 1) != 1) {
181 goto err;
182 }
183 }
184
185 if (BIO_puts(bio, ":") <= 0) {
186 goto err;
187 }
188
189 if (type == V_ASN1_PRINTABLESTRING || type == V_ASN1_UTF8STRING ||
190 type == V_ASN1_IA5STRING || type == V_ASN1_T61STRING) {
191 if (BIO_write(bio, (char *)bs->data, bs->length) != bs->length) {
192 goto err;
193 }
194 BIO_puts(bio, "\n");
195 } else {
196 BIO_puts(bio, "unable to print attribute\n");
197 }
198 }
199 }
200 }
201 }
202
203 if (!(cflag & X509_FLAG_NO_EXTENSIONS)) {
204 STACK_OF(X509_EXTENSION) *exts = X509_REQ_get_extensions(x);
205 if (exts) {
206 BIO_printf(bio, "%8sRequested Extensions:\n", "");
207
208 for (size_t i = 0; i < sk_X509_EXTENSION_num(exts); i++) {
209 const X509_EXTENSION *ex = sk_X509_EXTENSION_value(exts, i);
210 if (BIO_printf(bio, "%12s", "") <= 0) {
211 goto err;
212 }
213 const ASN1_OBJECT *obj = X509_EXTENSION_get_object(ex);
214 i2a_ASN1_OBJECT(bio, obj);
215 const int is_critical = X509_EXTENSION_get_critical(ex);
216 if (BIO_printf(bio, ": %s\n", is_critical ? "critical" : "") <= 0) {
217 goto err;
218 }
219 if (!X509V3_EXT_print(bio, ex, cflag, 16)) {
220 BIO_printf(bio, "%16s", "");
221 ASN1_STRING_print(bio, X509_EXTENSION_get_data(ex));
222 }
223 if (BIO_write(bio, "\n", 1) <= 0) {
224 goto err;
225 }
226 }
227 sk_X509_EXTENSION_pop_free(exts, X509_EXTENSION_free);
228 }
229 }
230
231 if (!(cflag & X509_FLAG_NO_SIGDUMP) &&
232 !X509_signature_print(bio, x->sig_alg, x->signature)) {
233 goto err;
234 }
235
236 return 1;
237
238 err:
239 OPENSSL_PUT_ERROR(X509, ERR_R_BUF_LIB);
240 return 0;
241 }
242
X509_REQ_print(BIO * bio,X509_REQ * req)243 int X509_REQ_print(BIO *bio, X509_REQ *req) {
244 return X509_REQ_print_ex(bio, req, XN_FLAG_COMPAT, X509_FLAG_COMPAT);
245 }
246