oysteikt/heimdal
0
0
Fork 0
Code Issues 5 Pull Requests Releases Activity

Add KeyUsage extension.

Browse Source 
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@19573 ec53bebd-3082-4978-b11e-865c3cabbd6b
This commit is contained in:
Love Hörnquist Åstrand
2006-12-29 17:35:05 +00:00
parent 5342643f04
commit 1ae085e4ce
1 changed files with 37 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

38
lib/hx509/ca.c
View File

@@ -127,6 +127,7 @@ ca_sign(hx509_context context,
const AlgorithmIdentifier *sigalg; const AlgorithmIdentifier *sigalg;
time_t notBefore; time_t notBefore;
time_t notAfter; time_t notAfter;
unsigned key_usage;
sigalg = hx509_signature_rsa_with_sha1(); sigalg = hx509_signature_rsa_with_sha1();
@@ -143,6 +144,19 @@ ca_sign(hx509_context context,
if (notAfter == 0) if (notAfter == 0)
notAfter = time(NULL) + 3600 * 24 * 365; notAfter = time(NULL) + 3600 * 24 * 365;
key_usage = tbs->key_usage;
if (key_usage == 0) {
KeyUsage ku;
memset(&ku, 0, sizeof(ku));
ku.digitalSignature = 1;
ku.keyEncipherment = 1;
key_usage = KeyUsage2int(ku);
}
/*
*
*/
tbsc = &c.tbsCertificate; tbsc = &c.tbsCertificate;
if (tbs->flags.key == 0) { if (tbs->flags.key == 0) {
@@ -222,7 +236,29 @@ ca_sign(hx509_context context,
/* issuerUniqueID [1] IMPLICIT BIT STRING OPTIONAL */ /* issuerUniqueID [1] IMPLICIT BIT STRING OPTIONAL */
/* subjectUniqueID [2] IMPLICIT BIT STRING OPTIONAL */ /* subjectUniqueID [2] IMPLICIT BIT STRING OPTIONAL */
/* extensions [3] EXPLICIT Extensions OPTIONAL */ /* extensions [3] EXPLICIT Extensions OPTIONAL */
/* X509v3 Key Usage: Digital Signature, Non Repudiation, Key Encipherment*/ tbsc->extensions = calloc(1, sizeof(*tbsc->extensions));
if (tbsc->extensions == NULL) {
ret = ENOMEM;
hx509_set_error_string(context, 0, ret, "Out of memory");
goto out;
}
/* add KeyUsage */
{
Extension ext;
KeyUsage ku;
memset(&ext, 0, sizeof(ext));
ku = int2KeyUsage(key_usage);
ret = der_copy_oid(oid_id_x509_ce_keyUsage(), &ext.extnID);
ASN1_MALLOC_ENCODE(KeyUsage,
ext.extnValue.data,
ext.extnValue.length,
&ku, &size, ret);
add_Extensions(tbsc->extensions, &ext);
free_Extension(&ext);
}
/* X509v3 Extended Key Usage: */ /* X509v3 Extended Key Usage: */
/* X509v3 Subject Key Identifier: */ /* X509v3 Subject Key Identifier: */
/* X509v3 Authority Key Identifier: */ /* X509v3 Authority Key Identifier: */