2018-05-04 16:08:28 +02:00
|
|
|
/* This Source Code Form is subject to the terms of the Mozilla Public
|
|
|
|
* License, v. 2.0. If a copy of the MPL was not distributed with this
|
|
|
|
* file, You can obtain one at http://mozilla.org/MPL/2.0/. */
|
2015-10-21 05:03:22 +02:00
|
|
|
|
|
|
|
#include "plarena.h"
|
|
|
|
#include "secitem.h"
|
|
|
|
#include "secoid.h"
|
|
|
|
#include "seccomon.h"
|
|
|
|
#include "secport.h"
|
|
|
|
#include "cert.h"
|
|
|
|
#include "secpkcs7.h"
|
|
|
|
#include "secasn1.h"
|
|
|
|
#include "p12t.h"
|
|
|
|
|
|
|
|
SEC_ASN1_MKSUB(SEC_AnyTemplate)
|
|
|
|
SEC_ASN1_MKSUB(sgn_DigestInfoTemplate)
|
|
|
|
|
|
|
|
static const SEC_ASN1Template *
|
|
|
|
sec_pkcs12_choose_safe_bag_type(void *src_or_dest, PRBool encoding)
|
|
|
|
{
|
|
|
|
const SEC_ASN1Template *theTemplate;
|
|
|
|
sec_PKCS12SafeBag *safeBag;
|
|
|
|
SECOidData *oiddata;
|
|
|
|
|
|
|
|
if (src_or_dest == NULL) {
|
|
|
|
return NULL;
|
|
|
|
}
|
|
|
|
|
|
|
|
safeBag = (sec_PKCS12SafeBag*)src_or_dest;
|
|
|
|
|
|
|
|
oiddata = SECOID_FindOID(&safeBag->safeBagType);
|
|
|
|
if(oiddata == NULL) {
|
|
|
|
return SEC_ASN1_GET(SEC_AnyTemplate);
|
|
|
|
}
|
|
|
|
|
|
|
|
switch (oiddata->offset) {
|
|
|
|
default:
|
|
|
|
theTemplate = SEC_ASN1_GET(SEC_AnyTemplate);
|
|
|
|
break;
|
|
|
|
case SEC_OID_PKCS12_V1_KEY_BAG_ID:
|
|
|
|
theTemplate = SEC_ASN1_GET(SECKEY_PointerToPrivateKeyInfoTemplate);
|
|
|
|
break;
|
|
|
|
case SEC_OID_PKCS12_V1_CERT_BAG_ID:
|
|
|
|
theTemplate = sec_PKCS12PointerToCertBagTemplate;
|
|
|
|
break;
|
|
|
|
case SEC_OID_PKCS12_V1_CRL_BAG_ID:
|
|
|
|
theTemplate = sec_PKCS12PointerToCRLBagTemplate;
|
|
|
|
break;
|
|
|
|
case SEC_OID_PKCS12_V1_SECRET_BAG_ID:
|
|
|
|
theTemplate = sec_PKCS12PointerToSecretBagTemplate;
|
|
|
|
break;
|
|
|
|
case SEC_OID_PKCS12_V1_PKCS8_SHROUDED_KEY_BAG_ID:
|
|
|
|
theTemplate =
|
|
|
|
SEC_ASN1_GET(SECKEY_PointerToEncryptedPrivateKeyInfoTemplate);
|
|
|
|
break;
|
|
|
|
case SEC_OID_PKCS12_V1_SAFE_CONTENTS_BAG_ID:
|
|
|
|
if(encoding) {
|
|
|
|
theTemplate = sec_PKCS12PointerToSafeContentsTemplate;
|
|
|
|
} else {
|
|
|
|
theTemplate = SEC_ASN1_GET(SEC_PointerToAnyTemplate);
|
|
|
|
}
|
|
|
|
break;
|
|
|
|
}
|
|
|
|
return theTemplate;
|
|
|
|
}
|
|
|
|
|
|
|
|
static const SEC_ASN1Template *
|
|
|
|
sec_pkcs12_choose_crl_bag_type(void *src_or_dest, PRBool encoding)
|
|
|
|
{
|
|
|
|
const SEC_ASN1Template *theTemplate;
|
|
|
|
sec_PKCS12CRLBag *crlbag;
|
|
|
|
SECOidData *oiddata;
|
|
|
|
|
|
|
|
if (src_or_dest == NULL) {
|
|
|
|
return NULL;
|
|
|
|
}
|
|
|
|
|
|
|
|
crlbag = (sec_PKCS12CRLBag*)src_or_dest;
|
|
|
|
|
|
|
|
oiddata = SECOID_FindOID(&crlbag->bagID);
|
|
|
|
if(oiddata == NULL) {
|
|
|
|
return SEC_ASN1_GET(SEC_AnyTemplate);
|
|
|
|
}
|
|
|
|
|
|
|
|
switch (oiddata->offset) {
|
|
|
|
default:
|
|
|
|
theTemplate = SEC_ASN1_GET(SEC_AnyTemplate);
|
|
|
|
break;
|
|
|
|
case SEC_OID_PKCS9_X509_CRL:
|
|
|
|
theTemplate = SEC_ASN1_GET(SEC_OctetStringTemplate);
|
|
|
|
break;
|
|
|
|
}
|
|
|
|
return theTemplate;
|
|
|
|
}
|
|
|
|
|
|
|
|
static const SEC_ASN1Template *
|
|
|
|
sec_pkcs12_choose_cert_bag_type(void *src_or_dest, PRBool encoding)
|
|
|
|
{
|
|
|
|
const SEC_ASN1Template *theTemplate;
|
|
|
|
sec_PKCS12CertBag *certbag;
|
|
|
|
SECOidData *oiddata;
|
|
|
|
|
|
|
|
if (src_or_dest == NULL) {
|
|
|
|
return NULL;
|
|
|
|
}
|
|
|
|
|
|
|
|
certbag = (sec_PKCS12CertBag*)src_or_dest;
|
|
|
|
|
|
|
|
oiddata = SECOID_FindOID(&certbag->bagID);
|
|
|
|
if(oiddata == NULL) {
|
|
|
|
return SEC_ASN1_GET(SEC_AnyTemplate);
|
|
|
|
}
|
|
|
|
|
|
|
|
switch (oiddata->offset) {
|
|
|
|
default:
|
|
|
|
theTemplate = SEC_ASN1_GET(SEC_AnyTemplate);
|
|
|
|
break;
|
|
|
|
case SEC_OID_PKCS9_X509_CERT:
|
|
|
|
theTemplate = SEC_ASN1_GET(SEC_OctetStringTemplate);
|
|
|
|
break;
|
|
|
|
case SEC_OID_PKCS9_SDSI_CERT:
|
|
|
|
theTemplate = SEC_ASN1_GET(SEC_IA5StringTemplate);
|
|
|
|
break;
|
|
|
|
}
|
|
|
|
return theTemplate;
|
|
|
|
}
|
|
|
|
|
|
|
|
static const SEC_ASN1Template *
|
|
|
|
sec_pkcs12_choose_attr_type(void *src_or_dest, PRBool encoding)
|
|
|
|
{
|
|
|
|
const SEC_ASN1Template *theTemplate;
|
|
|
|
sec_PKCS12Attribute *attr;
|
|
|
|
SECOidData *oiddata;
|
|
|
|
|
|
|
|
if (src_or_dest == NULL) {
|
|
|
|
return NULL;
|
|
|
|
}
|
|
|
|
|
|
|
|
attr = (sec_PKCS12Attribute*)src_or_dest;
|
|
|
|
|
|
|
|
oiddata = SECOID_FindOID(&attr->attrType);
|
|
|
|
if(oiddata == NULL) {
|
|
|
|
return SEC_ASN1_GET(SEC_AnyTemplate);
|
|
|
|
}
|
|
|
|
|
|
|
|
switch (oiddata->offset) {
|
|
|
|
default:
|
|
|
|
theTemplate = SEC_ASN1_GET(SEC_AnyTemplate);
|
|
|
|
break;
|
|
|
|
case SEC_OID_PKCS9_FRIENDLY_NAME:
|
|
|
|
theTemplate = SEC_ASN1_GET(SEC_BMPStringTemplate);
|
|
|
|
break;
|
|
|
|
case SEC_OID_PKCS9_LOCAL_KEY_ID:
|
|
|
|
theTemplate = SEC_ASN1_GET(SEC_OctetStringTemplate);
|
|
|
|
break;
|
|
|
|
case SEC_OID_PKCS12_KEY_USAGE:
|
|
|
|
theTemplate = SEC_ASN1_GET(SEC_BitStringTemplate);
|
|
|
|
break;
|
|
|
|
}
|
|
|
|
|
|
|
|
return theTemplate;
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
|
|
const SEC_ASN1Template sec_PKCS12PointerToContentInfoTemplate[] = {
|
|
|
|
{ SEC_ASN1_POINTER | SEC_ASN1_MAY_STREAM, 0, sec_PKCS7ContentInfoTemplate }
|
|
|
|
};
|
|
|
|
|
|
|
|
static const SEC_ASN1TemplateChooserPtr sec_pkcs12_crl_bag_chooser =
|
|
|
|
sec_pkcs12_choose_crl_bag_type;
|
|
|
|
|
|
|
|
static const SEC_ASN1TemplateChooserPtr sec_pkcs12_cert_bag_chooser =
|
|
|
|
sec_pkcs12_choose_cert_bag_type;
|
|
|
|
|
|
|
|
static const SEC_ASN1TemplateChooserPtr sec_pkcs12_safe_bag_chooser =
|
|
|
|
sec_pkcs12_choose_safe_bag_type;
|
|
|
|
|
|
|
|
static const SEC_ASN1TemplateChooserPtr sec_pkcs12_attr_chooser =
|
|
|
|
sec_pkcs12_choose_attr_type;
|
|
|
|
|
|
|
|
const SEC_ASN1Template sec_PKCS12PointerToCertBagTemplate[] = {
|
|
|
|
{ SEC_ASN1_POINTER, 0, sec_PKCS12CertBagTemplate }
|
|
|
|
};
|
|
|
|
|
|
|
|
const SEC_ASN1Template sec_PKCS12PointerToCRLBagTemplate[] = {
|
|
|
|
{ SEC_ASN1_POINTER, 0, sec_PKCS12CRLBagTemplate }
|
|
|
|
};
|
|
|
|
|
|
|
|
const SEC_ASN1Template sec_PKCS12PointerToSecretBagTemplate[] = {
|
|
|
|
{ SEC_ASN1_POINTER, 0, sec_PKCS12SecretBagTemplate }
|
|
|
|
};
|
|
|
|
|
|
|
|
const SEC_ASN1Template sec_PKCS12PointerToSafeContentsTemplate[] = {
|
|
|
|
{ SEC_ASN1_POINTER, 0, sec_PKCS12SafeContentsTemplate }
|
|
|
|
};
|
|
|
|
|
|
|
|
const SEC_ASN1Template sec_PKCS12PFXItemTemplate[] = {
|
|
|
|
{ SEC_ASN1_SEQUENCE | SEC_ASN1_MAY_STREAM, 0, NULL,
|
|
|
|
sizeof(sec_PKCS12PFXItem) },
|
|
|
|
{ SEC_ASN1_OPTIONAL | SEC_ASN1_INTEGER,
|
|
|
|
offsetof(sec_PKCS12PFXItem, version) },
|
|
|
|
{ SEC_ASN1_ANY | SEC_ASN1_MAY_STREAM,
|
|
|
|
offsetof(sec_PKCS12PFXItem, encodedAuthSafe) },
|
|
|
|
{ SEC_ASN1_ANY | SEC_ASN1_MAY_STREAM,
|
|
|
|
offsetof(sec_PKCS12PFXItem, encodedMacData) },
|
|
|
|
{ 0 }
|
|
|
|
};
|
|
|
|
|
|
|
|
const SEC_ASN1Template sec_PKCS12MacDataTemplate[] = {
|
|
|
|
{ SEC_ASN1_SEQUENCE, 0, NULL, sizeof(sec_PKCS12MacData) },
|
|
|
|
{ SEC_ASN1_INLINE | SEC_ASN1_XTRN , offsetof(sec_PKCS12MacData, safeMac),
|
|
|
|
SEC_ASN1_SUB(sgn_DigestInfoTemplate) },
|
|
|
|
{ SEC_ASN1_OCTET_STRING, offsetof(sec_PKCS12MacData, macSalt) },
|
|
|
|
{ SEC_ASN1_OPTIONAL | SEC_ASN1_INTEGER, offsetof(sec_PKCS12MacData, iter) },
|
|
|
|
{ 0 }
|
|
|
|
};
|
|
|
|
|
|
|
|
const SEC_ASN1Template sec_PKCS12AuthenticatedSafeTemplate[] = {
|
|
|
|
{ SEC_ASN1_SEQUENCE_OF | SEC_ASN1_MAY_STREAM | SEC_ASN1_XTRN ,
|
|
|
|
offsetof(sec_PKCS12AuthenticatedSafe, encodedSafes),
|
|
|
|
SEC_ASN1_SUB(SEC_AnyTemplate) }
|
|
|
|
};
|
|
|
|
|
|
|
|
const SEC_ASN1Template sec_PKCS12SafeBagTemplate[] = {
|
|
|
|
{ SEC_ASN1_SEQUENCE | SEC_ASN1_MAY_STREAM, 0, NULL,
|
|
|
|
sizeof(sec_PKCS12SafeBag) },
|
|
|
|
{ SEC_ASN1_OBJECT_ID, offsetof(sec_PKCS12SafeBag, safeBagType) },
|
|
|
|
{ SEC_ASN1_EXPLICIT | SEC_ASN1_DYNAMIC | SEC_ASN1_CONSTRUCTED |
|
|
|
|
SEC_ASN1_MAY_STREAM | SEC_ASN1_CONTEXT_SPECIFIC | 0,
|
|
|
|
offsetof(sec_PKCS12SafeBag, safeBagContent),
|
|
|
|
&sec_pkcs12_safe_bag_chooser },
|
|
|
|
{ SEC_ASN1_SET_OF | SEC_ASN1_OPTIONAL, offsetof(sec_PKCS12SafeBag, attribs),
|
|
|
|
sec_PKCS12AttributeTemplate },
|
|
|
|
{ 0 }
|
|
|
|
};
|
|
|
|
|
|
|
|
const SEC_ASN1Template sec_PKCS12SafeContentsTemplate[] = {
|
|
|
|
{ SEC_ASN1_SEQUENCE_OF | SEC_ASN1_MAY_STREAM,
|
|
|
|
offsetof(sec_PKCS12SafeContents, safeBags),
|
|
|
|
sec_PKCS12SafeBagTemplate }
|
|
|
|
};
|
|
|
|
|
|
|
|
const SEC_ASN1Template sec_PKCS12SequenceOfAnyTemplate[] = {
|
|
|
|
{ SEC_ASN1_SEQUENCE_OF | SEC_ASN1_MAY_STREAM | SEC_ASN1_XTRN , 0,
|
|
|
|
SEC_ASN1_SUB(SEC_AnyTemplate) }
|
|
|
|
};
|
|
|
|
|
|
|
|
const SEC_ASN1Template sec_PKCS12NestedSafeContentsDecodeTemplate[] = {
|
|
|
|
{ SEC_ASN1_EXPLICIT | SEC_ASN1_CONTEXT_SPECIFIC | SEC_ASN1_CONSTRUCTED | 0,
|
|
|
|
offsetof(sec_PKCS12SafeContents, encodedSafeBags),
|
|
|
|
sec_PKCS12SequenceOfAnyTemplate }
|
|
|
|
};
|
|
|
|
|
|
|
|
const SEC_ASN1Template sec_PKCS12SafeContentsDecodeTemplate[] = {
|
|
|
|
{ SEC_ASN1_SEQUENCE_OF | SEC_ASN1_MAY_STREAM | SEC_ASN1_XTRN ,
|
|
|
|
offsetof(sec_PKCS12SafeContents, encodedSafeBags),
|
|
|
|
SEC_ASN1_SUB(SEC_AnyTemplate) }
|
|
|
|
};
|
|
|
|
|
|
|
|
const SEC_ASN1Template sec_PKCS12CRLBagTemplate[] = {
|
|
|
|
{ SEC_ASN1_SEQUENCE, 0, NULL, sizeof(sec_PKCS12CRLBag) },
|
|
|
|
{ SEC_ASN1_OBJECT_ID, offsetof(sec_PKCS12CRLBag, bagID) },
|
|
|
|
{ SEC_ASN1_DYNAMIC | SEC_ASN1_POINTER,
|
|
|
|
offsetof(sec_PKCS12CRLBag, value), &sec_pkcs12_crl_bag_chooser },
|
|
|
|
{ 0 }
|
|
|
|
};
|
|
|
|
|
|
|
|
const SEC_ASN1Template sec_PKCS12CertBagTemplate[] = {
|
|
|
|
{ SEC_ASN1_SEQUENCE, 0, NULL, sizeof(sec_PKCS12CertBag) },
|
|
|
|
{ SEC_ASN1_OBJECT_ID, offsetof(sec_PKCS12CertBag, bagID) },
|
|
|
|
{ SEC_ASN1_DYNAMIC | SEC_ASN1_EXPLICIT | SEC_ASN1_CONSTRUCTED |
|
|
|
|
SEC_ASN1_CONTEXT_SPECIFIC | 0,
|
|
|
|
offsetof(sec_PKCS12CertBag, value), &sec_pkcs12_cert_bag_chooser },
|
|
|
|
{ 0 }
|
|
|
|
};
|
|
|
|
|
|
|
|
const SEC_ASN1Template sec_PKCS12SecretBagTemplate[] = {
|
|
|
|
{ SEC_ASN1_SEQUENCE, 0, NULL, sizeof(sec_PKCS12SecretBag) },
|
|
|
|
{ SEC_ASN1_OBJECT_ID, offsetof(sec_PKCS12SecretBag, secretType) },
|
|
|
|
{ SEC_ASN1_ANY, offsetof(sec_PKCS12SecretBag, secretContent) },
|
|
|
|
{ 0 }
|
|
|
|
};
|
|
|
|
|
|
|
|
const SEC_ASN1Template sec_PKCS12AttributeTemplate[] = {
|
|
|
|
{ SEC_ASN1_SEQUENCE, 0, NULL, sizeof(sec_PKCS12Attribute) },
|
|
|
|
{ SEC_ASN1_OBJECT_ID, offsetof(sec_PKCS12Attribute, attrType) },
|
|
|
|
{ SEC_ASN1_SET_OF | SEC_ASN1_DYNAMIC,
|
|
|
|
offsetof(sec_PKCS12Attribute, attrValue),
|
|
|
|
&sec_pkcs12_attr_chooser },
|
|
|
|
{ 0 }
|
|
|
|
};
|