2 * Copyright 2020 The OpenSSL Project Authors. All Rights Reserved.
4 * Licensed under the Apache License 2.0 (the "License"). You may not use
5 * this file except in compliance with the License. You can obtain a copy
6 * in the file LICENSE in the source distribution or at
7 * https://www.openssl.org/source/license.html
11 #include "internal/cryptlib.h"
12 #include <openssl/conf.h>
13 #include <openssl/asn1.h>
14 #include <openssl/asn1t.h>
15 #include <openssl/x509v3.h>
18 DEFINE_STACK_OF(CONF_VALUE)
21 * Issuer Sign Tool (1.2.643.100.112) The name of the tool used to signs the subject (ASN1_SEQUENCE)
22 * This extention is required to obtain the status of a qualified certificate at Russian Federation.
23 * RFC-style description is available here: https://tools.ietf.org/html/draft-deremin-rfc4491-bis-04#section-5
24 * Russian Federal Law 63 "Digital Sign" is available here: http://www.consultant.ru/document/cons_doc_LAW_112701/
27 ASN1_SEQUENCE(ISSUER_SIGN_TOOL) = {
28 ASN1_SIMPLE(ISSUER_SIGN_TOOL, signTool, ASN1_UTF8STRING),
29 ASN1_SIMPLE(ISSUER_SIGN_TOOL, cATool, ASN1_UTF8STRING),
30 ASN1_SIMPLE(ISSUER_SIGN_TOOL, signToolCert, ASN1_UTF8STRING),
31 ASN1_SIMPLE(ISSUER_SIGN_TOOL, cAToolCert, ASN1_UTF8STRING)
32 } ASN1_SEQUENCE_END(ISSUER_SIGN_TOOL)
34 IMPLEMENT_ASN1_FUNCTIONS(ISSUER_SIGN_TOOL)
37 static ISSUER_SIGN_TOOL *v2i_issuer_sign_tool(X509V3_EXT_METHOD *method, X509V3_CTX *ctx,
38 STACK_OF(CONF_VALUE) *nval)
40 ISSUER_SIGN_TOOL *ist = ISSUER_SIGN_TOOL_new();
44 X509V3err(X509V3_F_V2I_ISSUER_SIGN_TOOL, ERR_R_MALLOC_FAILURE);
47 for (i = 0; i < sk_CONF_VALUE_num(nval); ++i) {
48 CONF_VALUE *cnf = sk_CONF_VALUE_value(nval, i);
53 if (strcmp(cnf->name, "signTool") == 0) {
54 ist->signTool = ASN1_UTF8STRING_new();
55 if (ist->signTool == NULL) {
56 X509V3err(X509V3_F_V2I_ISSUER_SIGN_TOOL, ERR_R_MALLOC_FAILURE);
57 ISSUER_SIGN_TOOL_free(ist);
60 ASN1_STRING_set(ist->signTool, cnf->value, strlen(cnf->value));
61 } else if (strcmp(cnf->name, "cATool") == 0) {
62 ist->cATool = ASN1_UTF8STRING_new();
63 if (ist->cATool == NULL) {
64 X509V3err(X509V3_F_V2I_ISSUER_SIGN_TOOL, ERR_R_MALLOC_FAILURE);
65 ISSUER_SIGN_TOOL_free(ist);
68 ASN1_STRING_set(ist->cATool, cnf->value, strlen(cnf->value));
69 } else if (strcmp(cnf->name, "signToolCert") == 0) {
70 ist->signToolCert = ASN1_UTF8STRING_new();
71 if (ist->signToolCert == NULL) {
72 X509V3err(X509V3_F_V2I_ISSUER_SIGN_TOOL, ERR_R_MALLOC_FAILURE);
73 ISSUER_SIGN_TOOL_free(ist);
76 ASN1_STRING_set(ist->signToolCert, cnf->value, strlen(cnf->value));
77 } else if (strcmp(cnf->name, "cAToolCert") == 0) {
78 ist->cAToolCert = ASN1_UTF8STRING_new();
79 if (ist->cAToolCert == NULL) {
80 X509V3err(X509V3_F_V2I_ISSUER_SIGN_TOOL, ERR_R_MALLOC_FAILURE);
81 ISSUER_SIGN_TOOL_free(ist);
84 ASN1_STRING_set(ist->cAToolCert, cnf->value, strlen(cnf->value));
86 X509V3err(X509V3_F_V2I_ISSUER_SIGN_TOOL, ERR_R_PASSED_INVALID_ARGUMENT);
87 ISSUER_SIGN_TOOL_free(ist);
94 static int i2r_issuer_sign_tool(X509V3_EXT_METHOD *method,
95 ISSUER_SIGN_TOOL *ist, BIO *out,
101 X509V3err(X509V3_F_I2R_ISSUER_SIGN_TOOL, ERR_R_PASSED_INVALID_ARGUMENT);
104 if (ist->signTool != NULL) {
106 BIO_write(out, "\n", 1);
108 BIO_printf(out, "%*ssignTool : ", indent, "");
109 BIO_write(out, ist->signTool->data, ist->signTool->length);
112 if (ist->cATool != NULL) {
114 BIO_write(out, "\n", 1);
116 BIO_printf(out, "%*scATool : ", indent, "");
117 BIO_write(out, ist->cATool->data, ist->cATool->length);
120 if (ist->signToolCert != NULL) {
122 BIO_write(out, "\n", 1);
124 BIO_printf(out, "%*ssignToolCert: ", indent, "");
125 BIO_write(out, ist->signToolCert->data, ist->signToolCert->length);
128 if (ist->cAToolCert != NULL) {
130 BIO_write(out, "\n", 1);
132 BIO_printf(out, "%*scAToolCert : ", indent, "");
133 BIO_write(out, ist->cAToolCert->data, ist->cAToolCert->length);
139 const X509V3_EXT_METHOD v3_issuer_sign_tool = {
140 NID_issuerSignTool, /* nid */
141 X509V3_EXT_MULTILINE, /* flags */
142 ASN1_ITEM_ref(ISSUER_SIGN_TOOL), /* template */
143 0, 0, 0, 0, /* old functions, ignored */
147 (X509V3_EXT_V2I)v2i_issuer_sign_tool, /* v2i */
148 (X509V3_EXT_I2R)i2r_issuer_sign_tool, /* i2r */
150 NULL /* extension-specific data */