x509.c File Reference

#include <rz_util.h>
#include <rz_cons.h>
#include <stdlib.h>
#include <string.h>
#include "./x509.h"

Go to the source code of this file.

Functions
static bool	rz_x509_parse_validity (RX509Validity *validity, RASN1Object *object)
static bool	is_oid_object (RASN1Object *object)
RZ_API bool	rz_x509_parse_algorithmidentifier (RX509AlgorithmIdentifier *ai, RASN1Object *object)
RZ_API bool	rz_x509_parse_subjectpublickeyinfo (RX509SubjectPublicKeyInfo *spki, RASN1Object *object)
RZ_API bool	rz_x509_parse_name (RX509Name *name, RASN1Object *object)
RZ_API bool	rz_x509_parse_extension (RX509Extension *ext, RASN1Object *object)
RZ_API bool	rz_x509_parse_extensions (RX509Extensions *ext, RASN1Object *object)
RZ_API bool	rz_x509_parse_tbscertificate (RX509TBSCertificate *tbsc, RASN1Object *object)
RZ_API RX509Certificate *	rz_x509_parse_certificate (RASN1Object *object)
RZ_API RX509Certificate *	rz_x509_parse_certificate2 (const ut8 *buffer, ut32 length)
RZ_API RX509CRLEntry *	rz_x509_parse_crlentry (RASN1Object *object)
RZ_API RX509CertificateRevocationList *	rz_x509_parse_crl (RASN1Object *object)
RZ_API void	rz_x509_free_algorithmidentifier (RX509AlgorithmIdentifier *ai)
static void	rz_x509_free_validity (RX509Validity *validity)
RZ_API void	rz_x509_free_name (RX509Name *name)
RZ_API void	rz_x509_free_extension (RX509Extension *ex)
RZ_API void	rz_x509_free_extensions (RX509Extensions *ex)
RZ_API void	rz_x509_free_subjectpublickeyinfo (RX509SubjectPublicKeyInfo *spki)
RZ_API void	rz_x509_free_tbscertificate (RX509TBSCertificate *tbsc)
RZ_API void	rz_x509_free_certificate (RX509Certificate *certificate)
static void	rz_x509_free_crlentry (RX509CRLEntry *entry)
void	rz_x509_free_crl (RX509CertificateRevocationList *crl)
static void	rz_x509_validity_dump (RX509Validity *validity, const char *pad, RzStrBuf *sb)
RZ_API void	rz_x509_name_dump (RX509Name *name, const char *pad, RzStrBuf *sb)
static void	rz_x509_subjectpublickeyinfo_dump (RX509SubjectPublicKeyInfo *spki, const char *pad, RzStrBuf *sb)
static void	rz_x509_extensions_dump (RX509Extensions *exts, const char *pad, RzStrBuf *sb)
static void	rz_x509_tbscertificate_dump (RX509TBSCertificate *tbsc, const char *pad, RzStrBuf *sb)
RZ_API void	rz_x509_certificate_dump (RX509Certificate *cert, const char *pad, RzStrBuf *sb)
void	rz_x509_crlentry_dump (RX509CRLEntry *crle, const char *pad, RzStrBuf *sb)
RZ_API char *	rz_x509_crl_to_string (RX509CertificateRevocationList *crl, const char *pad)
RZ_API void	rz_x509_validity_json (PJ *pj, RX509Validity *validity)
RZ_API void	rz_x509_name_json (PJ *pj, RX509Name *name)
RZ_API void	rz_x509_subjectpublickeyinfo_json (PJ *pj, RX509SubjectPublicKeyInfo *spki)
RZ_API void	rz_x509_extensions_json (PJ *pj, RX509Extensions *exts)
RZ_API void	rz_x509_crlentry_json (PJ *pj, RX509CRLEntry *crle)
RZ_API void	rz_x509_crl_json (PJ *pj, RX509CertificateRevocationList *crl)
RZ_API void	rz_x509_tbscertificate_json (PJ *pj, RX509TBSCertificate *tbsc)
RZ_API void	rz_x509_certificate_json (PJ *pj, RX509Certificate *certificate)

Function Documentation

is_oid_object()

static bool is_oid_object ( RASN1Object *  object )

inlinestatic

Definition at line 38 of file x509.c.

                                                      {
    return object->list.objects[0] &&
        object->list.objects[0]->klass == CLASS_UNIVERSAL &&
        object->list.objects[0]->tag == TAG_OID;
}

References CLASS_UNIVERSAL, and TAG_OID.

Referenced by rz_x509_parse_algorithmidentifier().

rz_x509_certificate_dump()

RZ_API void rz_x509_certificate_dump	(	RX509Certificate *	cert,
		const char *	pad,
		RzStrBuf *	sb
	)

Definition at line 546 of file x509.c.

                                                                                            {
    RASN1String *algo = NULL;
    char *pad2;
    if (!cert) {
        return;
    }
    if (!pad) {
        pad = "";
    }
    pad2 = rz_str_newf("%s  ", pad);
    if (!pad2) {
        return;
    }
    rz_strbuf_appendf(sb, "%sTBSCertificate:\n", pad);
    rz_x509_tbscertificate_dump(&cert->tbsCertificate, pad2, sb);
 
    algo = cert->algorithmIdentifier.algorithm;
    //  signature = rz_asn1_stringify_bytes (certificate->signature->binary, certificate->signature->length);
    //  eprintf ("%sAlgorithm:\n%s%s\n%sSignature: %u bytes\n%s\n",
    //              pad, pad2, algo ? algo->string : "",
    //              pad, certificate->signature->length, signature ? signature->string : "");
    rz_strbuf_appendf(sb, "%sAlgorithm:\n%s%s\n%sSignature: %u bytes\n",
        pad, pad2, algo ? algo->string : "", pad, cert->signature->length);
    free(pad2);
    //  rz_asn1_free_string (signature);
}

References rz_x509_algorithmidentifier_t::algorithm, rz_x509_certificate_t::algorithmIdentifier, free(), rz_asn1_bin_t::length, NULL, pad(), rz_str_newf(), rz_strbuf_appendf(), rz_x509_tbscertificate_dump(), sb, rz_x509_certificate_t::signature, rz_asn1_string_t::string, and rz_x509_certificate_t::tbsCertificate.

Referenced by cmd_print_fromage(), and rz_pkcs7_cms_to_string().

rz_x509_certificate_json()

RZ_API void rz_x509_certificate_json	(	PJ *	pj,
		RX509Certificate *	certificate
	)

Definition at line 790 of file x509.c.

                                                                            {
    if (!certificate) {
        return;
    }
    RASN1String *m = NULL;
    pj_o(pj);
    pj_k(pj, "TBSCertificate");
    rz_x509_tbscertificate_json(pj, &certificate->tbsCertificate);
    if (certificate->algorithmIdentifier.algorithm) {
        pj_ks(pj, "Algorithm", certificate->algorithmIdentifier.algorithm->string);
    }
    if (certificate->signature) {
        m = rz_asn1_stringify_integer(certificate->signature->binary, certificate->signature->length);
        if (m) {
            pj_ks(pj, "Signature", m->string);
        }
        rz_asn1_free_string(m);
    }
    pj_end(pj);
}

References rz_x509_algorithmidentifier_t::algorithm, rz_x509_certificate_t::algorithmIdentifier, rz_asn1_bin_t::binary, rz_asn1_bin_t::length, regress::m, NULL, pj_end(), pj_k(), pj_ks(), pj_o(), rz_asn1_free_string(), rz_asn1_stringify_integer(), rz_x509_tbscertificate_json(), rz_x509_certificate_t::signature, rz_asn1_string_t::string, and rz_x509_certificate_t::tbsCertificate.

Referenced by rz_pkcs7_cms_json().

rz_x509_crl_json()

RZ_API void rz_x509_crl_json	(	PJ *	pj,
		RX509CertificateRevocationList *	crl
	)

Definition at line 719 of file x509.c.

                                                                          {
    ut32 i;
    if (crl) {
        if (crl->signature.algorithm) {
            pj_ks(pj, "Signature", crl->signature.algorithm->string);
        }
        pj_k(pj, "Issuer");
        pj_o(pj);
        rz_x509_name_json(pj, &crl->issuer);
        pj_end(pj);
        if (crl->lastUpdate) {
            pj_ks(pj, "LastUpdate", crl->lastUpdate->string);
        }
        if (crl->nextUpdate) {
            pj_ks(pj, "NextUpdate", crl->nextUpdate->string);
        }
        pj_k(pj, "RevokedCertificates");
        pj_a(pj);
        for (i = 0; i < crl->length; i++) {
            rz_x509_crlentry_json(pj, crl->revokedCertificates[i]);
        }
        pj_end(pj);
    }
}

References rz_x509_algorithmidentifier_t::algorithm, i, rz_x509_certificaterevocationlist::issuer, rz_x509_certificaterevocationlist::lastUpdate, rz_x509_certificaterevocationlist::length, rz_x509_certificaterevocationlist::nextUpdate, pj_a(), pj_end(), pj_k(), pj_ks(), pj_o(), rz_x509_certificaterevocationlist::revokedCertificates, rz_x509_crlentry_json(), rz_x509_name_json(), rz_x509_certificaterevocationlist::signature, and rz_asn1_string_t::string.

Referenced by rz_pkcs7_cms_json().

rz_x509_crl_to_string()

RZ_API char* rz_x509_crl_to_string	(	RX509CertificateRevocationList *	crl,
		const char *	pad
	)

Definition at line 592 of file x509.c.

                                                                                         {
    RASN1String *algo = NULL, *last = NULL, *next = NULL;
    ut32 i;
    char *pad2, *pad3;
    if (!crl) {
        return NULL;
    }
    if (!pad) {
        pad = "";
    }
    pad3 = rz_str_newf("%s    ", pad);
    if (!pad3) {
        return NULL;
    }
    pad2 = pad3 + 2;
    algo = crl->signature.algorithm;
    last = crl->lastUpdate;
    next = crl->nextUpdate;
    RzStrBuf *sb = rz_strbuf_new("");
    rz_strbuf_appendf(sb, "%sCRL:\n%sSignature:\n%s%s\n%sIssuer\n", pad, pad2, pad3,
        algo ? algo->string : "", pad2);
    rz_x509_name_dump(&crl->issuer, pad3, sb);
 
    rz_strbuf_appendf(sb, "%sLast Update: %s\n%sNext Update: %s\n%sRevoked Certificates:\n",
        pad2, last ? last->string : "Missing",
        pad2, next ? next->string : "Missing", pad2);
 
    for (i = 0; i < crl->length; i++) {
        rz_x509_crlentry_dump(crl->revokedCertificates[i], pad3, sb);
    }
 
    free(pad3);
    return rz_strbuf_drain(sb);
}

References rz_x509_algorithmidentifier_t::algorithm, free(), i, rz_x509_certificaterevocationlist::issuer, rz_x509_certificaterevocationlist::lastUpdate, rz_x509_certificaterevocationlist::length, rz_x509_certificaterevocationlist::nextUpdate, NULL, pad(), rz_x509_certificaterevocationlist::revokedCertificates, rz_str_newf(), rz_strbuf_appendf(), rz_strbuf_drain(), rz_strbuf_new(), rz_x509_crlentry_dump(), rz_x509_name_dump(), sb, rz_x509_certificaterevocationlist::signature, and rz_asn1_string_t::string.

Referenced by rz_pkcs7_cms_to_string().

rz_x509_crlentry_dump()

void rz_x509_crlentry_dump	(	RX509CRLEntry *	crle,
		const char *	pad,
		RzStrBuf *	sb
	)

Definition at line 573 of file x509.c.

                                                                               {
    RASN1String *id = NULL, *utc = NULL;
    if (!crle) {
        return;
    }
    if (!pad) {
        pad = "";
    }
    utc = crle->revocationDate;
    if (crle->userCertificate) {
        id = rz_asn1_stringify_integer(crle->userCertificate->binary, crle->userCertificate->length);
    }
    rz_strbuf_appendf(sb, "%sUser Certificate:\n%s  %s\n"
                  "%sRevocation Date:\n%s  %s\n",
        pad, pad, id ? id->string : "Missing",
        pad, pad, utc ? utc->string : "Missing");
    rz_asn1_free_string(id);
}

References rz_asn1_bin_t::binary, id, rz_asn1_bin_t::length, NULL, pad(), rz_x509_crlentry::revocationDate, rz_asn1_free_string(), rz_asn1_stringify_integer(), rz_strbuf_appendf(), sb, and rz_x509_crlentry::userCertificate.

Referenced by rz_x509_crl_to_string().

rz_x509_crlentry_json()

RZ_API void rz_x509_crlentry_json	(	PJ *	pj,
		RX509CRLEntry *	crle
	)

Definition at line 703 of file x509.c.

                                                               {
    RASN1String *m = NULL;
    if (crle) {
        if (crle->userCertificate) {
            m = rz_asn1_stringify_integer(crle->userCertificate->binary, crle->userCertificate->length);
            if (m) {
                pj_ks(pj, "UserCertificate", m->string);
            }
            rz_asn1_free_string(m);
        }
        if (crle->revocationDate) {
            pj_ks(pj, "RevocationDate", crle->revocationDate->string);
        }
    }
}

References rz_asn1_bin_t::binary, rz_asn1_bin_t::length, regress::m, NULL, pj_ks(), rz_x509_crlentry::revocationDate, rz_asn1_free_string(), rz_asn1_stringify_integer(), rz_asn1_string_t::string, and rz_x509_crlentry::userCertificate.

Referenced by rz_x509_crl_json().

rz_x509_extensions_dump()

static void rz_x509_extensions_dump ( RX509Extensions *  exts, const char *  pad, RzStrBuf *  sb  )

static

Definition at line 472 of file x509.c.

                                                                                          {
    ut32 i;
    if (!exts) {
        return;
    }
    if (!pad) {
        pad = "";
    }
    for (i = 0; i < exts->length; i++) {
        RX509Extension *e = exts->extensions[i];
        if (!e) {
            continue;
        }
        // TODO handle extensions..
        // s = rz_asn1_stringify_bytes (e->extnValue->sector, e->extnValue->length);
        rz_strbuf_appendf(sb, "%s%s: %s\n%s%u bytes\n", pad,
            e->extnID ? e->extnID->string : "Missing",
            e->critical ? "critical" : "",
            pad, e->extnValue ? e->extnValue->length : 0);
        // rz_asn1_free_string (s);
    }
}

References e, rz_x509_extensions_t::extensions, i, rz_x509_extensions_t::length, pad(), rz_strbuf_appendf(), and sb.

Referenced by rz_x509_tbscertificate_dump().

rz_x509_extensions_json()

RZ_API void rz_x509_extensions_json	(	PJ *	pj,
		RX509Extensions *	exts
	)

Definition at line 671 of file x509.c.

                                                                   {
    if (exts) {
        RASN1String *m = NULL;
        ut32 i;
        pj_a(pj);
        for (i = 0; i < exts->length; i++) {
            RX509Extension *e = exts->extensions[i];
            if (!e) {
                continue;
            }
            pj_o(pj);
            if (e->extnID) {
                pj_ks(pj, "OID", e->extnID->string);
            }
            if (e->critical) {
                pj_kb(pj, "Critical", e->critical);
            }
            // TODO handle extensions correctly..
            if (e->extnValue) {
                m = rz_asn1_stringify_integer(e->extnValue->binary, e->extnValue->length);
                if (m) {
                    pj_ks(pj, "Value", m->string);
                }
                rz_asn1_free_string(m);
            }
            pj_end(pj);
        }
        pj_end(pj);
        pj_end(pj);
    }
}

References e, rz_x509_extensions_t::extensions, i, rz_x509_extensions_t::length, regress::m, NULL, pj_a(), pj_end(), pj_kb(), pj_ks(), pj_o(), rz_asn1_free_string(), and rz_asn1_stringify_integer().

Referenced by rz_x509_tbscertificate_json().

rz_x509_free_algorithmidentifier()

RZ_API void rz_x509_free_algorithmidentifier

(

RX509AlgorithmIdentifier *

ai

)

Definition at line 306 of file x509.c.

                                                                           {
    if (ai) {
        // no need to free ai, since this functions is used internally
        rz_asn1_free_string(ai->algorithm);
        rz_asn1_free_string(ai->parameters);
    }
}

References rz_x509_algorithmidentifier_t::algorithm, rz_x509_algorithmidentifier_t::parameters, and rz_asn1_free_string().

Referenced by rz_pkcs7_free_digestalgorithmidentifier(), rz_pkcs7_free_signerinfo(), rz_pkcs7_free_spcmessagedigest(), rz_x509_free_certificate(), rz_x509_free_crl(), rz_x509_free_subjectpublickeyinfo(), and rz_x509_free_tbscertificate().

rz_x509_free_certificate()

RZ_API void rz_x509_free_certificate

(

RX509Certificate *

certificate

)

Definition at line 387 of file x509.c.

                                                                    {
    if (certificate) {
        rz_asn1_free_binary(certificate->signature);
        rz_x509_free_algorithmidentifier(&certificate->algorithmIdentifier);
        rz_x509_free_tbscertificate(&certificate->tbsCertificate);
        free(certificate);
    }
}

References rz_x509_certificate_t::algorithmIdentifier, free(), rz_asn1_free_binary(), rz_x509_free_algorithmidentifier(), rz_x509_free_tbscertificate(), rz_x509_certificate_t::signature, and rz_x509_certificate_t::tbsCertificate.

Referenced by cmd_print_fromage(), and rz_pkcs7_free_extendedcertificatesandcertificates().

rz_x509_free_crl()

void rz_x509_free_crl

(

RX509CertificateRevocationList *

crl

)

Definition at line 404 of file x509.c.

                                                           {
    ut32 i;
    if (crl) {
        rz_x509_free_algorithmidentifier(&crl->signature);
        rz_x509_free_name(&crl->issuer);
        rz_asn1_free_string(crl->nextUpdate);
        rz_asn1_free_string(crl->lastUpdate);
        if (crl->revokedCertificates) {
            for (i = 0; i < crl->length; i++) {
                rz_x509_free_crlentry(crl->revokedCertificates[i]);
                crl->revokedCertificates[i] = NULL;
            }
            RZ_FREE(crl->revokedCertificates);
        }
        free(crl);
    }
}

References free(), i, rz_x509_certificaterevocationlist::issuer, rz_x509_certificaterevocationlist::lastUpdate, rz_x509_certificaterevocationlist::length, rz_x509_certificaterevocationlist::nextUpdate, NULL, rz_x509_certificaterevocationlist::revokedCertificates, rz_asn1_free_string(), RZ_FREE, rz_x509_free_algorithmidentifier(), rz_x509_free_crlentry(), rz_x509_free_name(), and rz_x509_certificaterevocationlist::signature.

Referenced by rz_pkcs7_free_certificaterevocationlists().

rz_x509_free_crlentry()

static void rz_x509_free_crlentry ( RX509CRLEntry *  entry )

static

Definition at line 396 of file x509.c.

                                                        {
    if (entry) {
        rz_asn1_free_binary(entry->userCertificate);
        rz_asn1_free_string(entry->revocationDate);
        free(entry);
    }
}

References free(), rz_asn1_free_binary(), and rz_asn1_free_string().

Referenced by rz_x509_free_crl().

rz_x509_free_extension()

RZ_API void rz_x509_free_extension

(

RX509Extension *

ex

)

Definition at line 338 of file x509.c.

                                                       {
    if (ex) {
        rz_asn1_free_string(ex->extnID);
        rz_asn1_free_binary(ex->extnValue);
        // this is allocated dinamically so, i'll free
        free(ex);
    }
}

References ex, free(), rz_asn1_free_binary(), and rz_asn1_free_string().

Referenced by rz_x509_free_extensions(), and rz_x509_parse_extensions().

rz_x509_free_extensions()

RZ_API void rz_x509_free_extensions

(

RX509Extensions *

ex

)

Definition at line 347 of file x509.c.

                                                         {
    ut32 i;
    if (!ex) {
        return;
    }
    if (ex->extensions) {
        for (i = 0; i < ex->length; i++) {
            rz_x509_free_extension(ex->extensions[i]);
        }
        free(ex->extensions);
    }
    // no need to free ex, since this functions is used internally
}

References ex, free(), i, and rz_x509_free_extension().

Referenced by rz_x509_free_tbscertificate().

rz_x509_free_name()

RZ_API void rz_x509_free_name

(

RX509Name *

name

)

Definition at line 322 of file x509.c.

                                               {
    ut32 i;
    if (!name) {
        return;
    }
    if (name->names) {
        for (i = 0; i < name->length; i++) {
            rz_asn1_free_string(name->oids[i]);
            rz_asn1_free_string(name->names[i]);
        }
        RZ_FREE(name->names);
        RZ_FREE(name->oids);
    }
    // not freeing name since it's not allocated dinamically
}

References i, rz_asn1_free_string(), and RZ_FREE.

Referenced by rz_pkcs7_free_issuerandserialnumber(), rz_x509_free_crl(), and rz_x509_free_tbscertificate().

rz_x509_free_subjectpublickeyinfo()

RZ_API void rz_x509_free_subjectpublickeyinfo

(

RX509SubjectPublicKeyInfo *

spki

)

Definition at line 361 of file x509.c.

                                                                               {
    if (spki) {
        rz_x509_free_algorithmidentifier(&spki->algorithm);
        rz_asn1_free_binary(spki->subjectPublicKey);
        rz_asn1_free_binary(spki->subjectPublicKeyExponent);
        rz_asn1_free_binary(spki->subjectPublicKeyModule);
        // No need to free spki, since it's a static variable.
    }
}

References rz_x509_subjectpublickeyinfo_t::algorithm, rz_asn1_free_binary(), rz_x509_free_algorithmidentifier(), rz_x509_subjectpublickeyinfo_t::subjectPublicKey, rz_x509_subjectpublickeyinfo_t::subjectPublicKeyExponent, and rz_x509_subjectpublickeyinfo_t::subjectPublicKeyModule.

Referenced by rz_x509_free_tbscertificate().

rz_x509_free_tbscertificate()

RZ_API void rz_x509_free_tbscertificate

(

RX509TBSCertificate *

tbsc

)

Definition at line 371 of file x509.c.

                                                                   {
    if (tbsc) {
        //  version is ut32
        rz_asn1_free_string(tbsc->serialNumber);
        rz_x509_free_algorithmidentifier(&tbsc->signature);
        rz_x509_free_name(&tbsc->issuer);
        rz_x509_free_validity(&tbsc->validity);
        rz_x509_free_name(&tbsc->subject);
        rz_x509_free_subjectpublickeyinfo(&tbsc->subjectPublicKeyInfo);
        rz_asn1_free_binary(tbsc->subjectUniqueID);
        rz_asn1_free_binary(tbsc->issuerUniqueID);
        rz_x509_free_extensions(&tbsc->extensions);
        // no need to free tbsc, since this functions is used internally
    }
}

References rz_x509_tbscertificate_t::extensions, rz_x509_tbscertificate_t::issuer, rz_x509_tbscertificate_t::issuerUniqueID, rz_asn1_free_binary(), rz_asn1_free_string(), rz_x509_free_algorithmidentifier(), rz_x509_free_extensions(), rz_x509_free_name(), rz_x509_free_subjectpublickeyinfo(), rz_x509_free_validity(), rz_x509_tbscertificate_t::serialNumber, rz_x509_tbscertificate_t::signature, rz_x509_tbscertificate_t::subject, rz_x509_tbscertificate_t::subjectPublicKeyInfo, rz_x509_tbscertificate_t::subjectUniqueID, and rz_x509_tbscertificate_t::validity.

Referenced by rz_x509_free_certificate().

rz_x509_free_validity()

static void rz_x509_free_validity ( RX509Validity *  validity )

static

Definition at line 314 of file x509.c.

                                                           {
    if (validity) {
        // not freeing validity since it's not allocated dinamically
        rz_asn1_free_string(validity->notAfter);
        rz_asn1_free_string(validity->notBefore);
    }
}

References rz_x509_validity_t::notAfter, rz_x509_validity_t::notBefore, and rz_asn1_free_string().

Referenced by rz_x509_free_tbscertificate().

rz_x509_name_dump()

RZ_API void rz_x509_name_dump	(	RX509Name *	name,
		const char *	pad,
		RzStrBuf *	sb
	)

Definition at line 434 of file x509.c.

                                                                              {
    ut32 i;
    if (!name) {
        return;
    }
    if (!pad) {
        pad = "";
    }
    for (i = 0; i < name->length; i++) {
        if (!name->oids[i] || !name->names[i]) {
            continue;
        }
        rz_strbuf_appendf(sb, "%s%s: %s\n", pad, name->oids[i]->string, name->names[i]->string);
    }
}

References i, pad(), rz_strbuf_appendf(), and sb.

Referenced by rz_x509_crl_to_string(), rz_x509_signedinfo_dump(), and rz_x509_tbscertificate_dump().

rz_x509_name_json()

RZ_API void rz_x509_name_json	(	PJ *	pj,
		RX509Name *	name
	)

Definition at line 638 of file x509.c.

                                                       {
    ut32 i;
    for (i = 0; i < name->length; i++) {
        if (!name->oids[i] || !name->names[i]) {
            continue;
        }
        pj_ks(pj, name->oids[i]->string, name->names[i]->string);
    }
}

References i, and pj_ks().

Referenced by rz_x509_crl_json(), rz_x509_signedinfo_json(), and rz_x509_tbscertificate_json().

rz_x509_parse_algorithmidentifier()

RZ_API bool rz_x509_parse_algorithmidentifier	(	RX509AlgorithmIdentifier *	ai,
		RASN1Object *	object
	)

Definition at line 44 of file x509.c.

                                                                                                 {
    rz_return_val_if_fail(ai && object, false);
 
    if (object->list.length < 1 || !object->list.objects || !is_oid_object(object)) {
        return false;
    }
 
    ai->algorithm = rz_asn1_stringify_oid(object->list.objects[0]->sector, object->list.objects[0]->length);
    ai->parameters = NULL; // TODO
    // ai->parameters = asn1_stringify_sector (object->list.objects[1]);
    return true;
}

References rz_x509_algorithmidentifier_t::algorithm, is_oid_object(), rz_asn1_list_t::length, rz_asn1_object_t::length, rz_asn1_object_t::list, NULL, rz_asn1_list_t::objects, rz_x509_algorithmidentifier_t::parameters, rz_asn1_stringify_oid(), rz_return_val_if_fail, and rz_asn1_object_t::sector.

Referenced by rz_pkcs7_parse_digestalgorithmidentifier(), rz_pkcs7_parse_signerinfo(), rz_pkcs7_parse_spcmessagedigest(), rz_x509_parse_certificate(), rz_x509_parse_crl(), rz_x509_parse_subjectpublickeyinfo(), and rz_x509_parse_tbscertificate().

rz_x509_parse_certificate()

RZ_API RX509Certificate* rz_x509_parse_certificate

(

RASN1Object *

object

)

Definition at line 217 of file x509.c.

                                                                        {
    if (!object) {
        return NULL;
    }
    RX509Certificate *cert = RZ_NEW0(RX509Certificate);
    if (!cert) {
        goto fail;
    }
    if (object->klass != CLASS_UNIVERSAL || object->form != FORM_CONSTRUCTED || object->list.length != 3) {
        RZ_FREE(cert);
        goto fail;
    }
    RASN1Object *tmp = object->list.objects[2];
    if (!tmp) {
        RZ_FREE(cert);
        goto fail;
    }
    if (tmp->klass != CLASS_UNIVERSAL || tmp->form != FORM_PRIMITIVE || tmp->tag != TAG_BITSTRING) {
        RZ_FREE(cert);
        goto fail;
    }
    cert->signature = rz_asn1_create_binary(object->list.objects[2]->sector, object->list.objects[2]->length);
    rz_x509_parse_tbscertificate(&cert->tbsCertificate, object->list.objects[0]);
 
    if (!rz_x509_parse_algorithmidentifier(&cert->algorithmIdentifier, object->list.objects[1])) {
        RZ_FREE(cert);
    }
fail:
    rz_asn1_free_object(object);
    return cert;
}

References rz_x509_certificate_t::algorithmIdentifier, CLASS_UNIVERSAL, fail, rz_asn1_object_t::form, FORM_CONSTRUCTED, FORM_PRIMITIVE, rz_asn1_object_t::klass, rz_asn1_list_t::length, rz_asn1_object_t::length, rz_asn1_object_t::list, NULL, rz_asn1_list_t::objects, rz_asn1_create_binary(), rz_asn1_free_object(), RZ_FREE, RZ_NEW0, rz_x509_parse_algorithmidentifier(), rz_x509_parse_tbscertificate(), rz_asn1_object_t::sector, rz_x509_certificate_t::signature, TAG_BITSTRING, rz_x509_certificate_t::tbsCertificate, and autogen_x86imm::tmp.

Referenced by cmd_print_fromage(), rz_pkcs7_parse_extendedcertificatesandcertificates(), and rz_x509_parse_certificate2().

rz_x509_parse_certificate2()

RZ_API RX509Certificate* rz_x509_parse_certificate2	(	const ut8 *	buffer,
		ut32	length
	)

Definition at line 249 of file x509.c.

                                                                                    {
    RX509Certificate *certificate;
    RASN1Object *object;
    if (!buffer || !length) {
        return NULL;
    }
    object = rz_asn1_create_object(buffer, length, buffer);
    certificate = rz_x509_parse_certificate(object);
    // object freed by rz_x509_parse_certificate
    return certificate;
}

References length, NULL, rz_asn1_create_object(), and rz_x509_parse_certificate().

rz_x509_parse_crl()

RZ_API RX509CertificateRevocationList* rz_x509_parse_crl

(

RASN1Object *

object

)

Definition at line 275 of file x509.c.

                                                                              {
    RX509CertificateRevocationList *crl;
    RASN1Object **elems;
    if (!object || object->list.length < 4) {
        return NULL;
    }
    crl = (RX509CertificateRevocationList *)malloc(sizeof(RX509CertificateRevocationList));
    if (!crl) {
        return NULL;
    }
    memset(crl, 0, sizeof(RX509CertificateRevocationList));
    elems = object->list.objects;
    rz_x509_parse_algorithmidentifier(&crl->signature, elems[0]);
    rz_x509_parse_name(&crl->issuer, elems[1]);
    crl->lastUpdate = rz_asn1_stringify_utctime(elems[2]->sector, elems[2]->length);
    crl->nextUpdate = rz_asn1_stringify_utctime(elems[3]->sector, elems[3]->length);
    if (object->list.length > 4 && object->list.objects[4]) {
        ut32 i;
        crl->revokedCertificates = calloc(object->list.objects[4]->list.length, sizeof(RX509CRLEntry *));
        if (!crl->revokedCertificates) {
            free(crl);
            return NULL;
        }
        crl->length = object->list.objects[4]->list.length;
        for (i = 0; i < object->list.objects[4]->list.length; i++) {
            crl->revokedCertificates[i] = rz_x509_parse_crlentry(object->list.objects[4]->list.objects[i]);
        }
    }
    return crl;
}

References calloc(), free(), i, rz_x509_certificaterevocationlist::issuer, rz_x509_certificaterevocationlist::lastUpdate, rz_asn1_list_t::length, rz_x509_certificaterevocationlist::length, length, rz_asn1_object_t::list, malloc(), memset(), rz_x509_certificaterevocationlist::nextUpdate, NULL, rz_asn1_list_t::objects, rz_x509_certificaterevocationlist::revokedCertificates, rz_asn1_stringify_utctime(), rz_x509_parse_algorithmidentifier(), rz_x509_parse_crlentry(), rz_x509_parse_name(), and rz_x509_certificaterevocationlist::signature.

Referenced by rz_pkcs7_parse_certificaterevocationlists().

rz_x509_parse_crlentry()

RZ_API RX509CRLEntry* rz_x509_parse_crlentry

(

RASN1Object *

object

)

Definition at line 261 of file x509.c.

                                                                  {
    RX509CRLEntry *entry;
    if (!object || object->list.length != 2) {
        return NULL;
    }
    entry = (RX509CRLEntry *)malloc(sizeof(RX509CRLEntry));
    if (!entry) {
        return NULL;
    }
    entry->userCertificate = rz_asn1_create_binary(object->list.objects[0]->sector, object->list.objects[0]->length);
    entry->revocationDate = rz_asn1_stringify_utctime(object->list.objects[1]->sector, object->list.objects[1]->length);
    return entry;
}

References rz_asn1_list_t::length, rz_asn1_object_t::length, rz_asn1_object_t::list, malloc(), NULL, rz_asn1_list_t::objects, rz_asn1_create_binary(), rz_asn1_stringify_utctime(), and rz_asn1_object_t::sector.

Referenced by rz_x509_parse_crl().

rz_x509_parse_extension()

RZ_API bool rz_x509_parse_extension	(	RX509Extension *	ext,
		RASN1Object *	object
	)

Definition at line 122 of file x509.c.

                                                                              {
    RASN1Object *o;
    if (!ext || !object || object->list.length < 2) {
        return false;
    }
    o = object->list.objects[0];
    if (o && o->tag == TAG_OID) {
        ext->extnID = rz_asn1_stringify_oid(o->sector, o->length);
        o = object->list.objects[1];
        if (o->tag == TAG_BOOLEAN && object->list.length > 2) {
            // This field is optional (so len must be 3)
            ext->critical = o->sector[0] != 0;
            o = object->list.objects[2];
        }
        if (o->tag == TAG_OCTETSTRING) {
            ext->extnValue = rz_asn1_create_binary(o->sector, o->length);
        }
    }
    return true;
}

References ext, rz_asn1_list_t::length, rz_asn1_object_t::length, rz_asn1_object_t::list, rz_asn1_list_t::objects, rz_asn1_create_binary(), rz_asn1_stringify_oid(), rz_asn1_object_t::sector, rz_asn1_object_t::tag, TAG_BOOLEAN, TAG_OCTETSTRING, and TAG_OID.

Referenced by rz_x509_parse_extensions().

rz_x509_parse_extensions()

RZ_API bool rz_x509_parse_extensions	(	RX509Extensions *	ext,
		RASN1Object *	object
	)

Definition at line 143 of file x509.c.

                                                                                {
    ut32 i;
    if (!ext || !object || object->list.length != 1 || !object->list.objects[0]->length) {
        return false;
    }
    object = object->list.objects[0];
    ext->extensions = (RX509Extension **)calloc(object->list.length, sizeof(RX509Extension *));
    if (!ext->extensions) {
        return false;
    }
    ext->length = object->list.length;
    for (i = 0; i < object->list.length; i++) {
        ext->extensions[i] = RZ_NEW0(RX509Extension);
        if (!rz_x509_parse_extension(ext->extensions[i], object->list.objects[i])) {
            rz_x509_free_extension(ext->extensions[i]);
            ext->extensions[i] = NULL;
        }
    }
    return true;
}

References calloc(), ext, i, rz_asn1_list_t::length, rz_asn1_object_t::length, rz_asn1_object_t::list, NULL, rz_asn1_list_t::objects, RZ_NEW0, rz_x509_free_extension(), and rz_x509_parse_extension().

Referenced by rz_x509_parse_tbscertificate().

rz_x509_parse_name()

RZ_API bool rz_x509_parse_name	(	RX509Name *	name,
		RASN1Object *	object
	)

Definition at line 79 of file x509.c.

                                                                     {
    ut32 i;
    if (!name || !object || !object->list.length) {
        return false;
    }
    if (object->klass == CLASS_UNIVERSAL && object->tag == TAG_SEQUENCE) {
        name->length = object->list.length;
        name->names = (RASN1String **)calloc(name->length, sizeof(RASN1String *));
        if (!name->names) {
            name->length = 0;
            return false;
        }
        name->oids = (RASN1String **)calloc(name->length, sizeof(RASN1String *));
        if (!name->oids) {
            name->length = 0;
            RZ_FREE(name->names);
            return false;
        }
        for (i = 0; i < object->list.length; i++) {
            RASN1Object *o = object->list.objects[i];
            if (o && o->klass == CLASS_UNIVERSAL &&
                o->tag == TAG_SET &&
                o->form == FORM_CONSTRUCTED &&
                o->list.length == 1) {
                o = o->list.objects[0];
                if (o && o->list.length > 1 &&
                    o->klass == CLASS_UNIVERSAL &&
                    o->tag == TAG_SEQUENCE) {
                    if (o->list.objects[0]->klass == CLASS_UNIVERSAL &&
                        o->list.objects[0]->tag == TAG_OID) {
                        name->oids[i] = rz_asn1_stringify_oid(o->list.objects[0]->sector, o->list.objects[0]->length);
                    }
                    RASN1Object *obj1 = o->list.objects[1];
                    if (obj1 && obj1->klass == CLASS_UNIVERSAL) {
                        name->names[i] = rz_asn1_stringify_string(obj1->sector, obj1->length);
                    }
                }
            }
        }
    }
    return true;
}

References calloc(), CLASS_UNIVERSAL, rz_asn1_object_t::form, FORM_CONSTRUCTED, i, rz_asn1_object_t::klass, rz_asn1_list_t::length, rz_asn1_object_t::length, rz_asn1_object_t::list, rz_asn1_list_t::objects, rz_asn1_stringify_oid(), rz_asn1_stringify_string(), RZ_FREE, rz_asn1_object_t::sector, rz_asn1_object_t::tag, TAG_OID, TAG_SEQUENCE, and TAG_SET.

Referenced by rz_pkcs7_parse_issuerandserialnumber(), rz_x509_parse_crl(), and rz_x509_parse_tbscertificate().

rz_x509_parse_subjectpublickeyinfo()

RZ_API bool rz_x509_parse_subjectpublickeyinfo	(	RX509SubjectPublicKeyInfo *	spki,
		RASN1Object *	object
	)

Definition at line 57 of file x509.c.

                                                                                                     {
    RASN1Object *o;
    if (!spki || !object || object->list.length != 2) {
        return false;
    }
    rz_x509_parse_algorithmidentifier(&spki->algorithm, object->list.objects[0]);
    if (object->list.objects[1]) {
        o = object->list.objects[1];
        spki->subjectPublicKey = rz_asn1_create_binary(o->sector, o->length);
        if (o->list.length == 1 && o->list.objects[0] && o->list.objects[0]->list.length == 2) {
            o = o->list.objects[0];
            if (o->list.objects[0]) {
                spki->subjectPublicKeyExponent = rz_asn1_create_binary(o->list.objects[0]->sector, o->list.objects[0]->length);
            }
            if (o->list.objects[1]) {
                spki->subjectPublicKeyModule = rz_asn1_create_binary(o->list.objects[1]->sector, o->list.objects[1]->length);
            }
        }
    }
    return true;
}

References rz_x509_subjectpublickeyinfo_t::algorithm, rz_asn1_list_t::length, rz_asn1_object_t::length, rz_asn1_object_t::list, rz_asn1_list_t::objects, rz_asn1_create_binary(), rz_x509_parse_algorithmidentifier(), rz_asn1_object_t::sector, rz_x509_subjectpublickeyinfo_t::subjectPublicKey, rz_x509_subjectpublickeyinfo_t::subjectPublicKeyExponent, and rz_x509_subjectpublickeyinfo_t::subjectPublicKeyModule.

Referenced by rz_x509_parse_tbscertificate().

rz_x509_parse_tbscertificate()

RZ_API bool rz_x509_parse_tbscertificate	(	RX509TBSCertificate *	tbsc,
		RASN1Object *	object
	)

Definition at line 164 of file x509.c.

                                                                                         {
    RASN1Object **elems;
    ut32 i;
    ut32 shift = 0;
    if (!tbsc || !object || object->list.length < 6) {
        return false;
    }
    elems = object->list.objects;
    // Following RFC
    if (elems[0]->list.length == 1 &&
        elems[0]->klass == CLASS_CONTEXT &&
        elems[0]->form == FORM_CONSTRUCTED &&
        elems[0]->list.objects[0]->tag == TAG_INTEGER &&
        elems[0]->list.objects[0]->length == 1) {
        // Integer inside a CLASS_CONTEXT
        tbsc->version = (ut32)elems[0]->list.objects[0]->sector[0];
        shift = 1;
    } else {
        tbsc->version = 0;
    }
    if (shift < object->list.length && elems[shift]->klass == CLASS_UNIVERSAL && elems[shift]->tag == TAG_INTEGER) {
        tbsc->serialNumber = rz_asn1_stringify_integer(elems[shift]->sector, elems[shift]->length);
    }
    rz_x509_parse_algorithmidentifier(&tbsc->signature, elems[shift + 1]);
    rz_x509_parse_name(&tbsc->issuer, elems[shift + 2]);
    rz_x509_parse_validity(&tbsc->validity, elems[shift + 3]);
    rz_x509_parse_name(&tbsc->subject, elems[shift + 4]);
    rz_x509_parse_subjectpublickeyinfo(&tbsc->subjectPublicKeyInfo, elems[shift + 5]);
    if (tbsc->version > 0) {
        for (i = shift + 6; i < object->list.length; i++) {
            if (!elems[i] || elems[i]->klass != CLASS_CONTEXT) {
                continue;
            }
            if (elems[i]->tag == 1) {
                tbsc->issuerUniqueID = rz_asn1_create_binary(object->list.objects[i]->sector, object->list.objects[i]->length);
            }
            if (!elems[i]) {
                continue;
            }
            if (elems[i]->tag == 2) {
                tbsc->subjectUniqueID = rz_asn1_create_binary(object->list.objects[i]->sector, object->list.objects[i]->length);
            }
            if (!elems[i]) {
                continue;
            }
            if (tbsc->version == 2 && elems[i]->tag == 3 && elems[i]->form == FORM_CONSTRUCTED) {
                rz_x509_parse_extensions(&tbsc->extensions, elems[i]);
            }
        }
    }
    return true;
}

References CLASS_CONTEXT, CLASS_UNIVERSAL, rz_x509_tbscertificate_t::extensions, rz_asn1_object_t::form, FORM_CONSTRUCTED, i, rz_x509_tbscertificate_t::issuer, rz_x509_tbscertificate_t::issuerUniqueID, rz_asn1_object_t::klass, rz_asn1_list_t::length, rz_asn1_object_t::length, length, rz_asn1_object_t::list, list(), rz_asn1_list_t::objects, rz_asn1_create_binary(), rz_asn1_stringify_integer(), rz_x509_parse_algorithmidentifier(), rz_x509_parse_extensions(), rz_x509_parse_name(), rz_x509_parse_subjectpublickeyinfo(), rz_x509_parse_validity(), rz_asn1_object_t::sector, rz_x509_tbscertificate_t::serialNumber, shift(), rz_x509_tbscertificate_t::signature, rz_x509_tbscertificate_t::subject, rz_x509_tbscertificate_t::subjectPublicKeyInfo, rz_x509_tbscertificate_t::subjectUniqueID, rz_asn1_object_t::tag, test-lz4-versions::tag, TAG_INTEGER, rz_x509_tbscertificate_t::validity, and rz_x509_tbscertificate_t::version.

Referenced by rz_x509_parse_certificate().

rz_x509_parse_validity()

static bool rz_x509_parse_validity ( RX509Validity *  validity, RASN1Object *  object  )

static

Definition at line 10 of file x509.c.

                                                                                 {
    RASN1Object *o;
    if (!validity || !object || object->list.length != 2) {
        return false;
    }
    if (object->klass == CLASS_UNIVERSAL &&
        object->tag == TAG_SEQUENCE &&
        object->form == FORM_CONSTRUCTED) {
        o = object->list.objects[0];
        if (o->klass == CLASS_UNIVERSAL && o->form == FORM_PRIMITIVE) {
            if (o->tag == TAG_UTCTIME) {
                validity->notBefore = rz_asn1_stringify_utctime(o->sector, o->length);
            } else if (o->tag == TAG_GENERALIZEDTIME) {
                validity->notBefore = rz_asn1_stringify_time(o->sector, o->length);
            }
        }
        o = object->list.objects[1];
        if (o->klass == CLASS_UNIVERSAL && o->form == FORM_PRIMITIVE) {
            if (o->tag == TAG_UTCTIME) {
                validity->notAfter = rz_asn1_stringify_utctime(o->sector, o->length);
            } else if (o->tag == TAG_GENERALIZEDTIME) {
                validity->notAfter = rz_asn1_stringify_time(o->sector, o->length);
            }
        }
    }
    return true;
}

References CLASS_UNIVERSAL, rz_asn1_object_t::form, FORM_CONSTRUCTED, FORM_PRIMITIVE, rz_asn1_object_t::klass, rz_asn1_list_t::length, rz_asn1_object_t::length, rz_asn1_object_t::list, rz_x509_validity_t::notAfter, rz_x509_validity_t::notBefore, rz_asn1_list_t::objects, rz_asn1_stringify_time(), rz_asn1_stringify_utctime(), rz_asn1_object_t::sector, rz_asn1_object_t::tag, TAG_GENERALIZEDTIME, TAG_SEQUENCE, and TAG_UTCTIME.

Referenced by rz_x509_parse_tbscertificate().

rz_x509_subjectpublickeyinfo_dump()

static void rz_x509_subjectpublickeyinfo_dump ( RX509SubjectPublicKeyInfo *  spki, const char *  pad, RzStrBuf *  sb  )

static

Definition at line 450 of file x509.c.

                                                                                                              {
    const char *a;
    if (!spki) {
        return;
    }
    if (!pad) {
        pad = "";
    }
    a = spki->algorithm.algorithm ? spki->algorithm.algorithm->string : "Missing";
    RASN1String *m = NULL;
    if (spki->subjectPublicKeyModule) {
        m = rz_asn1_stringify_integer(spki->subjectPublicKeyModule->binary, spki->subjectPublicKeyModule->length);
    }
    //  RASN1String* e = rz_asn1_stringify_bytes (spki->subjectPublicKeyExponent->sector, spki->subjectPublicKeyExponent->length);
    //  r = snprintf (buffer, length, "%sAlgorithm: %s\n%sModule: %s\n%sExponent: %u bytes\n%s\n", pad, a, pad, m->string,
    //              pad, spki->subjectPublicKeyExponent->length - 1, e->string);
    rz_strbuf_appendf(sb, "%sAlgorithm: %s\n%sModule: %s\n%sExponent: %u bytes\n", pad, a, pad, m ? m->string : "Missing",
        pad, spki->subjectPublicKeyExponent ? spki->subjectPublicKeyExponent->length - 1 : 0);
    rz_asn1_free_string(m);
    //  rz_asn1_free_string (e);
}

References a, rz_x509_algorithmidentifier_t::algorithm, rz_x509_subjectpublickeyinfo_t::algorithm, rz_asn1_bin_t::binary, rz_asn1_bin_t::length, regress::m, NULL, pad(), rz_asn1_free_string(), rz_asn1_stringify_integer(), rz_strbuf_appendf(), sb, rz_asn1_string_t::string, rz_x509_subjectpublickeyinfo_t::subjectPublicKeyExponent, and rz_x509_subjectpublickeyinfo_t::subjectPublicKeyModule.

Referenced by rz_x509_tbscertificate_dump().

rz_x509_subjectpublickeyinfo_json()

RZ_API void rz_x509_subjectpublickeyinfo_json	(	PJ *	pj,
		RX509SubjectPublicKeyInfo *	spki
	)

Definition at line 648 of file x509.c.

                                                                                       {
    RASN1String *m = NULL;
    if (spki) {
        if (spki->algorithm.algorithm) {
            pj_ks(pj, "Algorithm", spki->algorithm.algorithm->string);
        }
        if (spki->subjectPublicKeyModule) {
            m = rz_asn1_stringify_integer(spki->subjectPublicKeyModule->binary, spki->subjectPublicKeyModule->length);
            if (m) {
                pj_ks(pj, "Module", m->string);
            }
            rz_asn1_free_string(m);
        }
        if (spki->subjectPublicKeyExponent) {
            m = rz_asn1_stringify_integer(spki->subjectPublicKeyExponent->binary, spki->subjectPublicKeyExponent->length);
            if (m) {
                pj_ks(pj, "Exponent", m->string);
            }
            rz_asn1_free_string(m);
        }
    }
}

References rz_x509_algorithmidentifier_t::algorithm, rz_x509_subjectpublickeyinfo_t::algorithm, rz_asn1_bin_t::binary, rz_asn1_bin_t::length, regress::m, NULL, pj_ks(), rz_asn1_free_string(), rz_asn1_stringify_integer(), rz_asn1_string_t::string, rz_x509_subjectpublickeyinfo_t::subjectPublicKeyExponent, and rz_x509_subjectpublickeyinfo_t::subjectPublicKeyModule.

Referenced by rz_x509_tbscertificate_json().

rz_x509_tbscertificate_dump()

static void rz_x509_tbscertificate_dump ( RX509TBSCertificate *  tbsc, const char *  pad, RzStrBuf *  sb  )

static

Definition at line 495 of file x509.c.

                                                                                                  {
    RASN1String *sid = NULL, *iid = NULL;
    if (!tbsc) {
        return;
    }
    if (!pad) {
        pad = "";
    }
    char *pad2 = rz_str_newf("%s  ", pad);
    if (!pad2) {
        return;
    }
    rz_strbuf_appendf(sb, "%sVersion: v%u\n"
                  "%sSerial Number:\n%s  %s\n"
                  "%sSignature Algorithm:\n%s  %s\n"
                  "%sIssuer:\n",
        pad, tbsc->version + 1,
        pad, pad, tbsc->serialNumber ? tbsc->serialNumber->string : "Missing",
        pad, pad, tbsc->signature.algorithm ? tbsc->signature.algorithm->string : "Missing",
        pad);
    rz_x509_name_dump(&tbsc->issuer, pad2, sb);
 
    rz_strbuf_appendf(sb, "%sValidity:\n", pad);
    rz_x509_validity_dump(&tbsc->validity, pad2, sb);
 
    rz_strbuf_appendf(sb, "%sSubject:\n", pad);
    rz_x509_name_dump(&tbsc->subject, pad2, sb);
 
    rz_strbuf_appendf(sb, "%sSubject Public Key Info:\n", pad);
    rz_x509_subjectpublickeyinfo_dump(&tbsc->subjectPublicKeyInfo, pad2, sb);
 
    if (tbsc->issuerUniqueID) {
        iid = rz_asn1_stringify_integer(tbsc->issuerUniqueID->binary, tbsc->issuerUniqueID->length);
        if (iid) {
            rz_strbuf_appendf(sb, "%sIssuer Unique ID:\n%s  %s", pad, pad, iid->string);
            rz_asn1_free_string(iid);
        }
    }
    if (tbsc->subjectUniqueID) {
        sid = rz_asn1_stringify_integer(tbsc->subjectUniqueID->binary, tbsc->subjectUniqueID->length);
        if (sid) {
            rz_strbuf_appendf(sb, "%sSubject Unique ID:\n%s  %s", pad, pad, sid->string);
            rz_asn1_free_string(sid);
        }
    }
 
    rz_strbuf_appendf(sb, "%sExtensions:\n", pad);
    rz_x509_extensions_dump(&tbsc->extensions, pad2, sb);
    free(pad2);
}

References rz_x509_algorithmidentifier_t::algorithm, rz_asn1_bin_t::binary, rz_x509_tbscertificate_t::extensions, free(), rz_x509_tbscertificate_t::issuer, rz_x509_tbscertificate_t::issuerUniqueID, rz_asn1_bin_t::length, NULL, pad(), rz_asn1_free_string(), rz_asn1_stringify_integer(), rz_str_newf(), rz_strbuf_appendf(), rz_x509_extensions_dump(), rz_x509_name_dump(), rz_x509_subjectpublickeyinfo_dump(), rz_x509_validity_dump(), sb, rz_x509_tbscertificate_t::serialNumber, rz_x509_tbscertificate_t::signature, rz_asn1_string_t::string, rz_x509_tbscertificate_t::subject, rz_x509_tbscertificate_t::subjectPublicKeyInfo, rz_x509_tbscertificate_t::subjectUniqueID, rz_x509_tbscertificate_t::validity, and rz_x509_tbscertificate_t::version.

Referenced by rz_x509_certificate_dump().

rz_x509_tbscertificate_json()

RZ_API void rz_x509_tbscertificate_json	(	PJ *	pj,
		RX509TBSCertificate *	tbsc
	)

Definition at line 744 of file x509.c.

                                                                           {
    pj_o(pj);
    RASN1String *m = NULL;
    if (tbsc) {
        pj_ki(pj, "Version", tbsc->version + 1);
        if (tbsc->serialNumber) {
            pj_ks(pj, "SerialNumber", tbsc->serialNumber->string);
        }
        if (tbsc->signature.algorithm) {
            pj_ks(pj, "SignatureAlgorithm", tbsc->signature.algorithm->string);
        }
        pj_k(pj, "Issuer");
        pj_o(pj);
        rz_x509_name_json(pj, &tbsc->issuer);
        pj_end(pj);
        pj_k(pj, "Validity");
        pj_o(pj);
        rz_x509_validity_json(pj, &tbsc->validity);
        pj_end(pj);
        pj_k(pj, "Subject");
        pj_o(pj);
        rz_x509_name_json(pj, &tbsc->subject);
        pj_end(pj);
        pj_k(pj, "SubjectPublicKeyInfo");
        pj_o(pj);
        rz_x509_subjectpublickeyinfo_json(pj, &tbsc->subjectPublicKeyInfo);
        pj_end(pj);
        if (tbsc->issuerUniqueID) {
            m = rz_asn1_stringify_integer(tbsc->issuerUniqueID->binary, tbsc->issuerUniqueID->length);
            if (m) {
                pj_ks(pj, "IssuerUniqueID", m->string);
            }
            rz_asn1_free_string(m);
        }
        if (tbsc->subjectUniqueID) {
            m = rz_asn1_stringify_integer(tbsc->subjectUniqueID->binary, tbsc->subjectUniqueID->length);
            if (m) {
                pj_ks(pj, "SubjectUniqueID", m->string);
            }
            rz_asn1_free_string(m);
        }
        pj_k(pj, "Extensions");
        rz_x509_extensions_json(pj, &tbsc->extensions);
    }
}

References rz_x509_algorithmidentifier_t::algorithm, rz_asn1_bin_t::binary, rz_x509_tbscertificate_t::extensions, rz_x509_tbscertificate_t::issuer, rz_x509_tbscertificate_t::issuerUniqueID, rz_asn1_bin_t::length, regress::m, NULL, pj_end(), pj_k(), pj_ki(), pj_ks(), pj_o(), rz_asn1_free_string(), rz_asn1_stringify_integer(), rz_x509_extensions_json(), rz_x509_name_json(), rz_x509_subjectpublickeyinfo_json(), rz_x509_validity_json(), rz_x509_tbscertificate_t::serialNumber, rz_x509_tbscertificate_t::signature, rz_asn1_string_t::string, rz_x509_tbscertificate_t::subject, rz_x509_tbscertificate_t::subjectPublicKeyInfo, rz_x509_tbscertificate_t::subjectUniqueID, rz_x509_tbscertificate_t::validity, and rz_x509_tbscertificate_t::version.

Referenced by rz_x509_certificate_json().

rz_x509_validity_dump()

static void rz_x509_validity_dump ( RX509Validity *  validity, const char *  pad, RzStrBuf *  sb  )

static

Definition at line 422 of file x509.c.

                                                                                          {
    if (!validity) {
        return;
    }
    if (!pad) {
        pad = "";
    }
    const char *b = validity->notBefore ? validity->notBefore->string : "Missing";
    const char *a = validity->notAfter ? validity->notAfter->string : "Missing";
    rz_strbuf_appendf(sb, "%sNot Before: %s\n%sNot After: %s\n", pad, b, pad, a);
}

References a, b, rz_x509_validity_t::notAfter, rz_x509_validity_t::notBefore, pad(), rz_strbuf_appendf(), sb, and rz_asn1_string_t::string.

Referenced by rz_x509_tbscertificate_dump().

rz_x509_validity_json()

RZ_API void rz_x509_validity_json	(	PJ *	pj,
		RX509Validity *	validity
	)

Definition at line 627 of file x509.c.

                                                                   {
    if (validity) {
        if (validity->notBefore) {
            pj_ks(pj, "NotBefore", validity->notBefore->string);
        }
        if (validity->notAfter) {
            pj_ks(pj, "NotAfter", validity->notAfter->string);
        }
    }
}

References rz_x509_validity_t::notAfter, rz_x509_validity_t::notBefore, pj_ks(), and rz_asn1_string_t::string.

Referenced by rz_x509_tbscertificate_json().