430ca62d97
function, note that this doesn't not work directly for backends that implements ->query, they must do their own processing. (I'm running out of flags, only 12 left now) git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@15810 ec53bebd-3082-4978-b11e-865c3cabbd6b
138 lines
4.3 KiB
C
138 lines
4.3 KiB
C
/*
|
|
* Copyright (c) 2004 - 2005 Kungliga Tekniska Högskolan
|
|
* (Royal Institute of Technology, Stockholm, Sweden).
|
|
* All rights reserved.
|
|
*
|
|
* Redistribution and use in source and binary forms, with or without
|
|
* modification, are permitted provided that the following conditions
|
|
* are met:
|
|
*
|
|
* 1. Redistributions of source code must retain the above copyright
|
|
* notice, this list of conditions and the following disclaimer.
|
|
*
|
|
* 2. Redistributions in binary form must reproduce the above copyright
|
|
* notice, this list of conditions and the following disclaimer in the
|
|
* documentation and/or other materials provided with the distribution.
|
|
*
|
|
* 3. Neither the name of the Institute nor the names of its contributors
|
|
* may be used to endorse or promote products derived from this software
|
|
* without specific prior written permission.
|
|
*
|
|
* THIS SOFTWARE IS PROVIDED BY THE INSTITUTE AND CONTRIBUTORS ``AS IS'' AND
|
|
* ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
|
|
* IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
|
|
* ARE DISCLAIMED. IN NO EVENT SHALL THE INSTITUTE OR CONTRIBUTORS BE LIABLE
|
|
* FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
|
|
* DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
|
|
* OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
|
|
* HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
|
|
* LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
|
|
* OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
|
|
* SUCH DAMAGE.
|
|
*/
|
|
|
|
/* $Id$ */
|
|
|
|
#ifdef HAVE_CONFIG_H
|
|
#include <config.h>
|
|
#endif
|
|
|
|
#include <stdio.h>
|
|
#include <stdlib.h>
|
|
#include <errno.h>
|
|
#include <strings.h>
|
|
#include <assert.h>
|
|
#include <stdarg.h>
|
|
#include <err.h>
|
|
#include <getarg.h>
|
|
#include <base64.h>
|
|
#include <roken.h>
|
|
|
|
#include <heim_asn1.h>
|
|
#include <rfc2459_asn1.h>
|
|
#include <cms_asn1.h>
|
|
#include <pkcs8_asn1.h>
|
|
#include <pkcs9_asn1.h>
|
|
#include <pkcs12_asn1.h>
|
|
#include <asn1_err.h>
|
|
|
|
#include <der.h>
|
|
|
|
struct hx509_query_data;
|
|
typedef struct hx509_query_data hx509_query;
|
|
|
|
struct hx509_keyset_ops;
|
|
|
|
#include <hx509.h>
|
|
#include <hx509-private.h>
|
|
#include <hx509_err.h>
|
|
|
|
#define HX509_CERTS_FIND_SERIALNUMBER 1
|
|
#define HX509_CERTS_FIND_ISSUER 2
|
|
#define HX509_CERTS_FIND_SUBJECT 4
|
|
#define HX509_CERTS_FIND_ISSUER_KEY_ID 8
|
|
#define HX509_CERTS_FIND_SUBJECT_KEY_ID 16
|
|
|
|
struct hx509_name_data {
|
|
Name der_name;
|
|
};
|
|
|
|
typedef struct hx509_path {
|
|
size_t len;
|
|
hx509_cert *val;
|
|
} hx509_path;
|
|
|
|
struct hx509_query_data {
|
|
int match;
|
|
#define HX509_QUERY_FIND_ISSUER_CERT 0x00001
|
|
#define HX509_QUERY_MATCH_SERIALNUMBER 0x00002
|
|
#define HX509_QUERY_MATCH_ISSUER_NAME 0x00004
|
|
#define HX509_QUERY_MATCH_SUBJECT_NAME 0x00008
|
|
#define HX509_QUERY_MATCH_SUBJECT_KEY_ID 0x00010
|
|
#define HX509_QUERY_MATCH_ISSUER_ID 0x00020
|
|
#define HX509_QUERY_PRIVATE_KEY 0x00040
|
|
#define HX509_QUERY_KU_ENCIPHERMENT 0x00080
|
|
#define HX509_QUERY_KU_DIGITALSIGNATURE 0x00100
|
|
#define HX509_QUERY_KU_KEYCERTSIGN 0x00200
|
|
#define HX509_QUERY_KU_CRLSIGN 0x00400
|
|
#define HX509_QUERY_KU_NONREPUDIATION 0x00800
|
|
#define HX509_QUERY_KU_KEYAGREEMENT 0x01000
|
|
#define HX509_QUERY_KU_DATAENCIPHERMENT 0x02000
|
|
#define HX509_QUERY_ANCHOR 0x04000
|
|
#define HX509_QUERY_MATCH_CERTIFICATE 0x08000
|
|
#define HX509_QUERY_MATCH_LOCAL_KEY_ID 0x10000
|
|
#define HX509_QUERY_NO_MATCH_PATH 0x20000
|
|
#define HX509_QUERY_MATCH_FRIENDLY_NAME 0x40000
|
|
#define HX509_QUERY_MATCH_FUNCTION 0x80000
|
|
#define HX509_QUERY_MASK 0xfffff
|
|
Certificate *subject;
|
|
Certificate *certificate;
|
|
heim_integer *serial;
|
|
heim_octet_string *subject_id;
|
|
heim_octet_string *local_key_id;
|
|
Name *issuer_name;
|
|
Name *subject_name;
|
|
hx509_path *path;
|
|
char *friendlyname;
|
|
int (*cmp_func)(hx509_cert);
|
|
};
|
|
|
|
struct hx509_keyset_ops {
|
|
char *name;
|
|
int flags;
|
|
int (*init)(hx509_certs, void **, int, const char *, hx509_lock);
|
|
int (*free)(hx509_certs, void *);
|
|
int (*add)(hx509_certs, void *, hx509_cert);
|
|
int (*query)(hx509_certs, void *, const hx509_query *, hx509_cert *);
|
|
int (*iter_start)(hx509_certs, void *, void **);
|
|
int (*iter)(hx509_certs, void *, void *, hx509_cert *);
|
|
int (*iter_end)(hx509_certs, void *, void *);
|
|
};
|
|
|
|
struct _hx509_password {
|
|
size_t len;
|
|
char **val;
|
|
};
|
|
|
|
extern hx509_lock _hx509_empty_lock;
|