//============================================================
// Converts OCSP_RESPONSE to PEM form with or without the headers
// pResp - OCSP_RESPONSE
// bHeaders - 1= with headers, 0=no headers
// buf - output buffer newly allocated
// returns error code
//============================================================
EXP_OPTION int getOcspPEM(OCSP_RESPONSE* pResp, int bHeaders, char** buf)
{
int l1, l2;
char *p1, *p2;
RETURN_IF_NULL_PARAM(buf);
RETURN_IF_NULL_PARAM(pResp);
l1 = i2d_OCSP_RESPONSE(pResp, NULL);
p1 = (char*)malloc(l1+10);
RETURN_IF_BAD_ALLOC(p1);
p2 = p1;
i2d_OCSP_RESPONSE(pResp, (unsigned char**)&p2);
l2 = l1 * 2 + 200;
*buf = (char*)malloc(l2);
if(*buf == NULL) {
free(p1);
RETURN_IF_BAD_ALLOC(*buf);
}
memset(*buf, 0, l2);
if(bHeaders)
strncpy(*buf, "-----BEGIN OCSP RESPONSE-----\n", l2);
encode((const byte*)p1, l1, (byte*)strchr(*buf, 0), &l2);
if(bHeaders)
strncat(*buf, "\n-----END OCSP RESPONSE-----", l2 - strlen(*buf));
free(p1);
return ERR_OK;
}
static VALUE
ossl_ocspres_to_der(VALUE self)
{
OCSP_RESPONSE *res;
VALUE str;
long len;
unsigned char *p;
GetOCSPRes(self, res);
if((len = i2d_OCSP_RESPONSE(res, NULL)) <= 0)
ossl_raise(eOCSPError, NULL);
str = rb_str_new(0, len);
p = RSTRING_PTR(str);
if(i2d_OCSP_RESPONSE(res, NULL) <= 0)
ossl_raise(eOCSPError, NULL);
ossl_str_adjust(str, p);
return str;
}
void SslOcspStapling::updateRespData(OCSP_RESPONSE *pResponse)
{
unsigned char *pbuff;
m_iDataLen = i2d_OCSP_RESPONSE(pResponse, NULL);
if (m_iDataLen > 0)
{
if (m_pRespData != NULL)
delete [] m_pRespData;
m_pRespData = new unsigned char[m_iDataLen];
pbuff = m_pRespData;
m_iDataLen = i2d_OCSP_RESPONSE(pResponse, &(pbuff));
if (m_iDataLen <= 0)
{
m_iDataLen = 0;
delete [] m_pRespData;
m_pRespData = NULL;
}
}
}
//--------------------------------------------------
// Helper function to write OCSP_RESPONSE to binary output data
// pResp - address of OCSP_RESPONSE object
// pMBufOutData - output data
// returns error code or ERR_OK
//--------------------------------------------------
int ddocOcspWriteOcspResp(OCSP_RESPONSE* pResp, DigiDocMemBuf* pMBufOutData)
{
int err = ERR_OK, l1;
unsigned char* p1;
RETURN_IF_NULL_PARAM(pResp);
RETURN_IF_NULL_PARAM(pMBufOutData);
pMBufOutData->pMem = NULL;
pMBufOutData->nLen = 0;
// find out how big a buffer we need
l1 = i2d_OCSP_RESPONSE(pResp, NULL);
ddocDebug(4, "ddocOcspReadOcspResp", "converting: %d bytes from OCSP_RESPONSE", l1);
// alloc mem
err = ddocMemSetLength(pMBufOutData, l1 + 50);
p1 = (unsigned char*)pMBufOutData->pMem;
l1 = i2d_OCSP_RESPONSE(pResp, &p1);
pMBufOutData->nLen = l1;
ddocDebug(4, "ddocOcspReadOcspResp", "Converted data: %d", l1);
return err;
}
static VALUE
ossl_ocspres_to_der(VALUE self, SEL sel)
{
OCSP_RESPONSE *res;
VALUE str;
long len;
unsigned char *p;
GetOCSPRes(self, res);
if((len = i2d_OCSP_RESPONSE(res, NULL)) <= 0)
ossl_raise(eOCSPError, NULL);
str = rb_bstr_new();
rb_bstr_resize(str, len);
p = (unsigned char *)rb_bstr_bytes(str);
if(i2d_OCSP_RESPONSE(res, &p) <= 0)
ossl_raise(eOCSPError, NULL);
ossl_str_adjust(str, p);
return str;
}
static ngx_int_t
ngx_ssl_stapling_file(ngx_conf_t *cf, ngx_ssl_t *ssl, ngx_str_t *file)
{
BIO *bio;
int len;
u_char *p, *buf;
OCSP_RESPONSE *response;
ngx_ssl_stapling_t *staple;
staple = SSL_CTX_get_ex_data(ssl->ctx, ngx_ssl_stapling_index);
if (ngx_conf_full_name(cf->cycle, file, 1) != NGX_OK) {
return NGX_ERROR;
}
bio = BIO_new_file((char *) file->data, "r");
if (bio == NULL) {
ngx_ssl_error(NGX_LOG_EMERG, ssl->log, 0,
"BIO_new_file(\"%s\") failed", file->data);
return NGX_ERROR;
}
response = d2i_OCSP_RESPONSE_bio(bio, NULL);
if (response == NULL) {
ngx_ssl_error(NGX_LOG_EMERG, ssl->log, 0,
"d2i_OCSP_RESPONSE_bio(\"%s\") failed", file->data);
BIO_free(bio);
return NGX_ERROR;
}
len = i2d_OCSP_RESPONSE(response, NULL);
if (len <= 0) {
ngx_ssl_error(NGX_LOG_EMERG, ssl->log, 0,
"i2d_OCSP_RESPONSE(\"%s\") failed", file->data);
goto failed;
}
buf = ngx_alloc(len, ssl->log);
if (buf == NULL) {
goto failed;
}
p = buf;
len = i2d_OCSP_RESPONSE(response, &p);
if (len <= 0) {
ngx_ssl_error(NGX_LOG_EMERG, ssl->log, 0,
"i2d_OCSP_RESPONSE(\"%s\") failed", file->data);
ngx_free(buf);
goto failed;
}
OCSP_RESPONSE_free(response);
BIO_free(bio);
staple->staple.data = buf;
staple->staple.len = len;
staple->valid = NGX_MAX_TIME_T_VALUE;
return NGX_OK;
failed:
OCSP_RESPONSE_free(response);
BIO_free(bio);
return NGX_ERROR;
}
