PKI_X509_EXTENSION_STACK *PKI_X509_CERT_get_extensions(const PKI_X509_CERT *x) {
PKI_X509_EXTENSION_STACK *ret = NULL;
int i = 0;
int ext_count = 0;
if (!x) return NULL;
if ((ext_count = X509_get_ext_count (x->value)) <= 0 ) return NULL;
for ( i=0; i < ext_count; i++ ) {
LIBPKI_X509_EXTENSION *ext = NULL;
// PKI_X509_EXTENSION_VALUE *ext = NULL;
PKI_X509_EXTENSION *pki_ext = NULL;
if((ext = X509_get_ext ( x->value, i )) == NULL ) {
continue;
}
if((pki_ext = PKI_X509_EXTENSION_new()) == NULL ) {
PKI_log_err ( "Memory Allocation");
continue;
}
if( ext->object == NULL ) {
PKI_X509_EXTENSION_free ( pki_ext );
continue;
}
pki_ext->oid = PKI_OID_dup ( ext->object );
pki_ext->critical = ext->critical;
if((pki_ext->value = X509V3_EXT_d2i ( ext )) == NULL ) {
PKI_log_debug( "Extension %d -- not parsable", i);
PKI_X509_EXTENSION_free ( pki_ext );
continue;
}
}
return ret;
}
PKI_X509_EXTENSION_STACK *PKI_X509_EXTENSION_get_list ( void *x,
PKI_X509_DATA type ) {
PKI_X509_EXTENSION_STACK *ret = NULL;
int i = 0;
int ext_count = 0;
if (!x) return NULL;
if ((ext_count = X509_get_ext_count (x)) <= 0 ) return NULL;
if(( ret = PKI_STACK_X509_EXTENSION_new()) == NULL ) return NULL;
for ( i=0; i < ext_count; i++ ) {
PKI_X509_EXTENSION_VALUE *ext = NULL;
PKI_X509_EXTENSION *pki_ext = NULL;
if((ext = X509_get_ext ( x, i )) == NULL ) {
continue;
}
if((pki_ext = PKI_X509_EXTENSION_new()) == NULL ) {
PKI_log_err ( "Memory Allocation");
continue;
}
pki_ext->oid = ext->object;
pki_ext->critical = ext->critical;
if((pki_ext->value = X509V3_EXT_d2i ( ext )) == NULL ) {
PKI_log_debug( "Extension %d -- not parsable", i);
PKI_X509_EXTENSION_free ( pki_ext );
continue;
}
PKI_STACK_X509_EXTENSION_push ( ret, pki_ext );
}
return ret;
}
PKI_X509_EXTENSION *PKI_X509_CERT_get_extension_by_oid(const PKI_X509_CERT *x,
const PKI_OID *id ) {
PKI_ID nid = PKI_ID_UNKNOWN;
PKI_X509_EXTENSION *ext = NULL;
if ( !x || !id ) return NULL;
if((nid = PKI_OID_get_id ( id )) == PKI_ID_UNKNOWN ) {
return NULL;
}
if(( ext = PKI_X509_EXTENSION_new()) == NULL ) {
return NULL;
}
if((ext->value = X509_get_ext_d2i ( x->value, nid,
NULL, NULL )) == NULL ) {
PKI_X509_EXTENSION_free ( ext );
return ( NULL );
}
return ext;
}
PKI_X509_EXTENSION *PKI_X509_EXTENSION_value_new_profile (
PKI_X509_PROFILE *profile, PKI_CONFIG *oids,
PKI_CONFIG_ELEMENT *extNode, PKI_TOKEN *tk ) {
/* TODO: Implement the extended version of the extensions, this
should allow better extensions management. That is, the value
will be encoded as:
extName=@section
[ section ]
extName=value
otherVal=val
otherVal=val
...
The corresponding XML should be:
<pki:extension name=".." critical=".." >
<pki:value name="" type=".." tag=".."> .. </pki:value>
<pki:value name="" type=".." tag=".."> .. </pki:value>
</pki:extension>
*/
PKI_CONFIG_ELEMENT *valNode = NULL;
PKI_X509_EXTENSION *ret = NULL;
PKI_X509_EXTENSION_VALUE *ext = NULL;
xmlChar *type_s = NULL;
xmlChar *tag_s = NULL;
xmlChar *oid_s = NULL;
xmlChar *value_s = NULL;
xmlChar *name_s = NULL;
xmlChar *crit_s = NULL;
PKI_OID *oid = NULL;
X509V3_CTX v3_ctx;
CONF *conf = NULL;
char *envValString = NULL;
char *valString = NULL;
int crit = 0;
if( !profile || !extNode ) {
PKI_log_debug("ERROR, no profile or extNode provided in "
"PKI_X509_EXTENSION_value_new_profile()");
return (NULL);
}
if((crit_s = xmlGetProp( extNode, BAD_CAST "critical" )) != NULL ) {
if( strncmp_nocase( (char *) crit_s, "n", 1 ) == 0) {
crit = 0;
} else {
crit = 1;
}
}
if((name_s = xmlGetProp( extNode, BAD_CAST "name" )) == NULL ) {
PKI_log_debug("ERROR, no name property in node %s",
extNode->name);
if( crit_s ) xmlFree ( crit_s );
return (NULL);
}
if ((oid = PKI_OID_get((char *) name_s)) == NULL)
{
if ((oid = PKI_CONFIG_OID_search(oids, (char *)name_s)) == NULL)
{
PKI_ERROR(PKI_ERR_OBJECT_CREATE, NULL);
return NULL;
}
}
else
{
PKI_OID_free ( oid );
}
/*
int nid = NID_undef;
if((nid = OBJ_sn2nid( (char *) name_s )) == NID_undef ) {
PKI_OID *oid = NULL;
oid = PKI_CONFIG_OID_search ( oids, (char *) name_s );
if( !oid ) {
PKI_log_debug( "ERROR, can not create object (%s)!",
name_s );
return( NULL );
}
}
*/
if ((valString = (char *) PKI_Malloc(BUFF_MAX_SIZE)) == NULL)
{
PKI_ERROR(PKI_ERR_MEMORY_ALLOC, NULL);
if( name_s ) xmlFree ( name_s );
if( crit_s ) xmlFree (crit_s);
return( NULL );
}
memset( valString, 0, BUFF_MAX_SIZE );
if( crit == 1 ) snprintf( valString, BUFF_MAX_SIZE -1, "%s", "critical" );
for (valNode = extNode->children; valNode; valNode = valNode->next)
{
if ((valNode->type == XML_ELEMENT_NODE) &&
((strncmp_nocase((char *)(valNode->name),"value",5)) == 0))
{
char tmp[BUFF_MAX_SIZE];
type_s = xmlGetProp( valNode, BAD_CAST "type" );
tag_s = xmlGetProp( valNode, BAD_CAST "tag" );
oid_s = xmlGetProp( valNode, BAD_CAST "oid" );
value_s = xmlNodeListGetString( profile,
valNode->xmlChildrenNode, 0);
if( oid_s ) {
/* Let's be sure the OID is created */
if((oid = PKI_CONFIG_OID_search(oids,
(char *) value_s)) == NULL ) {
PKI_log_debug ("WARNING, no oid "
"created for %s!", oid_s );
} else {
PKI_OID_free ( oid );
}
}
memset((unsigned char * )tmp, 0, BUFF_MAX_SIZE );
if( tag_s ) {
snprintf( tmp, BUFF_MAX_SIZE - 1, "%s;",
_ext_txt( tag_s ) );
}
if( type_s == NULL ) {
if( !oid_s ) {
strncat( tmp, (char *) value_s,
BUFF_MAX_SIZE - strlen( tmp ));
} else {
if( value_s && (strlen((char *) value_s) > 0) ) {
strncat( tmp, (char *) oid_s,
BUFF_MAX_SIZE - strlen( tmp ) );
strncat( tmp, ":",
BUFF_MAX_SIZE - strlen ( tmp ));
strncat( tmp, (char *) value_s,
BUFF_MAX_SIZE - strlen (tmp ));
} else {
strncat( tmp, "OID:",
BUFF_MAX_SIZE - strlen(tmp));
strncat( tmp, (char *) oid_s,
BUFF_MAX_SIZE - strlen( tmp ));
}
}
} else {
strncat( tmp, (char *) _ext_txt(type_s),
BUFF_MAX_SIZE - strlen( tmp ));
if( value_s && (strlen((char*)value_s) > 0) ) {
if(strcmp_nocase( (char*) type_s, "ia5org")) {
strncat( tmp, ":",
BUFF_MAX_SIZE - strlen( tmp ));
} else {
strncat( tmp, ",",
BUFF_MAX_SIZE - strlen( tmp ));
}
strncat( tmp, (char *) value_s,
BUFF_MAX_SIZE - strlen( tmp ));
}
}
if( strlen( valString ) > 0 ) {
strncat( valString, ",", BUFF_MAX_SIZE - 1);
}
strncat( valString, (char *) tmp, BUFF_MAX_SIZE - 1 );
if( type_s ) xmlFree ( type_s );
if( oid_s ) xmlFree ( oid_s );
if( tag_s ) xmlFree ( tag_s );
if( value_s ) xmlFree ( value_s );
}
}
//PKI_log_debug("INFO, Encoding %s=%s", name_s, valString);
v3_ctx.db = NULL;
v3_ctx.db_meth = NULL;
v3_ctx.crl = NULL;
v3_ctx.flags = 0;
if ( tk ) {
v3_ctx.issuer_cert = (X509 *)
PKI_X509_get_value ( tk->cacert );
v3_ctx.subject_cert = (X509 *)
PKI_X509_get_value ( tk->cert );
v3_ctx.subject_req = (X509_REQ *)
PKI_X509_get_value ( tk->req );
} else {
v3_ctx.issuer_cert = NULL;
v3_ctx.subject_cert = NULL;
v3_ctx.subject_req = NULL;
}
/* Sets the ctx.db and ctx.method */
conf = NCONF_new( NULL );
X509V3_set_nconf(&v3_ctx, conf);
if((envValString = get_env_string( valString )) != NULL ) {
PKI_log_debug("EXT STRING => %s=%s", name_s, envValString);
ext = X509V3_EXT_conf(NULL, &v3_ctx, (char *) name_s,
(char *) envValString);
PKI_Free ( envValString );
} else {
ext = X509V3_EXT_conf(NULL, &v3_ctx, (char *) name_s,
(char *) valString);
}
if( !ext ) {
PKI_log_debug("EXT::ERR::%s",
ERR_error_string(ERR_get_error(), NULL ));
return NULL;
}
if(( ret = PKI_X509_EXTENSION_new()) == NULL ) {
PKI_ERROR(PKI_ERR_MEMORY_ALLOC, NULL);
X509_EXTENSION_free ( ext );
return NULL;
}
ret->value = ext;
ret->oid = ext->object;
if( name_s ) xmlFree ( name_s );
if( crit_s ) xmlFree (crit_s );
if( valString ) PKI_Free ( valString );
if( conf ) NCONF_free ( conf );
return ( ret );
}
