/* asn1.h * * Copyright (C) 2006-2023 wolfSSL Inc. * * This file is part of wolfSSL. * * wolfSSL is free software; you can redistribute it and/or modify * it under the terms of the GNU General Public License as published by * the Free Software Foundation; either version 2 of the License, or * (at your option) any later version. * * wolfSSL is distributed in the hope that it will be useful, * but WITHOUT ANY WARRANTY; without even the implied warranty of * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the * GNU General Public License for more details. * * You should have received a copy of the GNU General Public License * along with this program; if not, write to the Free Software * Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA 02110-1335, USA */ /* asn1.h for openssl */ #ifndef WOLFSSL_ASN1_H_ #define WOLFSSL_ASN1_H_ #include #define ASN1_STRING_new wolfSSL_ASN1_STRING_new #define ASN1_STRING_type_new wolfSSL_ASN1_STRING_type_new #define ASN1_STRING_type wolfSSL_ASN1_STRING_type #define ASN1_STRING_set wolfSSL_ASN1_STRING_set #define ASN1_OCTET_STRING_set wolfSSL_ASN1_STRING_set #define ASN1_STRING_free wolfSSL_ASN1_STRING_free #define ASN1_get_object wolfSSL_ASN1_get_object #define d2i_ASN1_OBJECT wolfSSL_d2i_ASN1_OBJECT #define c2i_ASN1_OBJECT wolfSSL_c2i_ASN1_OBJECT #define V_ASN1_INTEGER 0x02 #define V_ASN1_OCTET_STRING 0x04 /* tag for ASN1_OCTET_STRING */ #define V_ASN1_NEG 0x100 #define V_ASN1_NEG_INTEGER (2 | V_ASN1_NEG) #define V_ASN1_NEG_ENUMERATED (10 | V_ASN1_NEG) /* Type for ASN1_print_ex */ # define ASN1_STRFLGS_ESC_2253 1 # define ASN1_STRFLGS_ESC_CTRL 2 # define ASN1_STRFLGS_ESC_MSB 4 # define ASN1_STRFLGS_ESC_QUOTE 8 # define ASN1_STRFLGS_UTF8_CONVERT 0x10 # define ASN1_STRFLGS_IGNORE_TYPE 0x20 # define ASN1_STRFLGS_SHOW_TYPE 0x40 # define ASN1_STRFLGS_DUMP_ALL 0x80 # define ASN1_STRFLGS_DUMP_UNKNOWN 0x100 # define ASN1_STRFLGS_DUMP_DER 0x200 # define ASN1_STRFLGS_RFC2253 (ASN1_STRFLGS_ESC_2253 | \ ASN1_STRFLGS_ESC_CTRL | \ ASN1_STRFLGS_ESC_MSB | \ ASN1_STRFLGS_UTF8_CONVERT | \ ASN1_STRFLGS_DUMP_UNKNOWN | \ ASN1_STRFLGS_DUMP_DER) #define MBSTRING_UTF8 0x1000 #define MBSTRING_ASC 0x1001 #define MBSTRING_BMP 0x1002 #define MBSTRING_UNIV 0x1004 #define ASN1_UTCTIME_print wolfSSL_ASN1_UTCTIME_print #define ASN1_TIME_check wolfSSL_ASN1_TIME_check #define ASN1_TIME_diff wolfSSL_ASN1_TIME_diff #define ASN1_TIME_compare wolfSSL_ASN1_TIME_compare #define ASN1_TIME_set wolfSSL_ASN1_TIME_set #define V_ASN1_EOC 0 #define V_ASN1_NULL 5 #define V_ASN1_OBJECT 6 #define V_ASN1_UTF8STRING 12 #define V_ASN1_SEQUENCE 16 #define V_ASN1_SET 17 #define V_ASN1_PRINTABLESTRING 19 #define V_ASN1_T61STRING 20 #define V_ASN1_IA5STRING 22 #define V_ASN1_UTCTIME 23 #define V_ASN1_GENERALIZEDTIME 24 #define V_ASN1_UNIVERSALSTRING 28 #define V_ASN1_BMPSTRING 30 #define V_ASN1_CONSTRUCTED 0x20 #define ASN1_STRING_FLAG_BITS_LEFT 0x008 #define ASN1_STRING_FLAG_NDEF 0x010 #define ASN1_STRING_FLAG_CONT 0x020 #define ASN1_STRING_FLAG_MSTRING 0x040 #define ASN1_STRING_FLAG_EMBED 0x080 /* X.509 PKI size limits from RFC2459 (appendix A) */ /* internally our limit is CTC_NAME_SIZE (64) - overridden with WC_CTC_NAME_SIZE */ #define ub_name CTC_NAME_SIZE /* 32768 */ #define ub_common_name CTC_NAME_SIZE /* 64 */ #define ub_locality_name CTC_NAME_SIZE /* 128 */ #define ub_state_name CTC_NAME_SIZE /* 128 */ #define ub_organization_name CTC_NAME_SIZE /* 64 */ #define ub_organization_unit_name CTC_NAME_SIZE /* 64 */ #define ub_title CTC_NAME_SIZE /* 64 */ #define ub_email_address CTC_NAME_SIZE /* 128 */ WOLFSSL_API WOLFSSL_ASN1_INTEGER *wolfSSL_BN_to_ASN1_INTEGER( const WOLFSSL_BIGNUM *bn, WOLFSSL_ASN1_INTEGER *ai); WOLFSSL_API void wolfSSL_ASN1_TYPE_set(WOLFSSL_ASN1_TYPE *a, int type, void *value); WOLFSSL_API int wolfSSL_ASN1_get_object(const unsigned char **in, long *len, int *tag, int *cls, long inLen); WOLFSSL_API WOLFSSL_ASN1_OBJECT *wolfSSL_c2i_ASN1_OBJECT(WOLFSSL_ASN1_OBJECT **a, const unsigned char **pp, long len); #ifdef OPENSSL_ALL /* IMPLEMENT_ASN1_FUNCTIONS is strictly for external use only. Internally * we don't use this. Some projects use OpenSSL to implement ASN1 types and * this section is only to provide those projects with ASN1 functionality. */ typedef struct { size_t offset; /* Offset of this field in structure */ byte type; /* The type of the member as defined in * WOLFSSL_ASN1_TYPES */ } WOLFSSL_ASN1_TEMPLATE; typedef struct { byte type; /* One of the ASN_Tags types */ const WOLFSSL_ASN1_TEMPLATE *members; /* If SEQUENCE or CHOICE this * contains the contents */ size_t mcount; /* Number of members if SEQUENCE * or CHOICE */ size_t size; /* Structure size */ } WOLFSSL_ASN1_ITEM; typedef enum { WOLFSSL_X509_ALGOR_ASN1 = 0, WOLFSSL_ASN1_BIT_STRING_ASN1, WOLFSSL_ASN1_INTEGER_ASN1, } WOLFSSL_ASN1_TYPES; #define ASN1_SEQUENCE(type) \ static const WOLFSSL_ASN1_TEMPLATE type##_member_data[] #define ASN1_SIMPLE(type, member, member_type) \ { OFFSETOF(type, member), \ WOLFSSL_##member_type##_ASN1 } #define ASN1_SEQUENCE_END(type) \ ; \ const WOLFSSL_ASN1_ITEM type##_template_data = { \ ASN_SEQUENCE, \ type##_member_data, \ sizeof(type##_member_data) / sizeof(WOLFSSL_ASN1_TEMPLATE), \ sizeof(type) \ }; WOLFSSL_API void *wolfSSL_ASN1_item_new(const WOLFSSL_ASN1_ITEM *tpl); WOLFSSL_API void wolfSSL_ASN1_item_free(void *val, const WOLFSSL_ASN1_ITEM *tpl); WOLFSSL_API int wolfSSL_ASN1_item_i2d(const void *src, byte **dest, const WOLFSSL_ASN1_ITEM *tpl); /* Need function declaration otherwise compiler complains */ /* // NOLINTBEGIN(readability-named-parameter) */ #define IMPLEMENT_ASN1_FUNCTIONS(type) \ type *type##_new(void); \ type *type##_new(void){ \ return (type*)wolfSSL_ASN1_item_new(&type##_template_data); \ } \ void type##_free(type *t); \ void type##_free(type *t){ \ wolfSSL_ASN1_item_free(t, &type##_template_data); \ } \ int i2d_##type(type *src, byte **dest); \ int i2d_##type(type *src, byte **dest) \ { \ return wolfSSL_ASN1_item_i2d(src, dest, &type##_template_data);\ } /* // NOLINTEND(readability-named-parameter) */ #endif /* OPENSSL_ALL */ #define BN_to_ASN1_INTEGER wolfSSL_BN_to_ASN1_INTEGER #define ASN1_TYPE_set wolfSSL_ASN1_TYPE_set #define ASN1_TYPE_new wolfSSL_ASN1_TYPE_new #define ASN1_TYPE_free wolfSSL_ASN1_TYPE_free #endif /* WOLFSSL_ASN1_H_ */