1 /* This Source Code Form is subject to the terms of the Mozilla Public
2 * License, v. 2.0. If a copy of the MPL was not distributed with this
3 * file, You can obtain one at http://mozilla.org/MPL/2.0/. */
4
5 #include "plarena.h"
6 #include "secitem.h"
7 #include "secoid.h"
8 #include "seccomon.h"
9 #include "secport.h"
10 #include "cert.h"
11 #include "secpkcs7.h"
12 #include "secasn1.h"
13 #include "p12t.h"
14
15 SEC_ASN1_MKSUB(SEC_AnyTemplate)
SEC_ASN1_MKSUB(sgn_DigestInfoTemplate)16 SEC_ASN1_MKSUB(sgn_DigestInfoTemplate)
17
18 static const SEC_ASN1Template *
19 sec_pkcs12_choose_safe_bag_type(void *src_or_dest, PRBool encoding)
20 {
21 const SEC_ASN1Template *theTemplate;
22 sec_PKCS12SafeBag *safeBag;
23 SECOidData *oiddata;
24
25 if (src_or_dest == NULL) {
26 return NULL;
27 }
28
29 safeBag = (sec_PKCS12SafeBag *)src_or_dest;
30
31 oiddata = SECOID_FindOID(&safeBag->safeBagType);
32 if (oiddata == NULL) {
33 return SEC_ASN1_GET(SEC_AnyTemplate);
34 }
35
36 switch (oiddata->offset) {
37 default:
38 theTemplate = SEC_ASN1_GET(SEC_AnyTemplate);
39 break;
40 case SEC_OID_PKCS12_V1_KEY_BAG_ID:
41 theTemplate = SEC_ASN1_GET(SECKEY_PointerToPrivateKeyInfoTemplate);
42 break;
43 case SEC_OID_PKCS12_V1_CERT_BAG_ID:
44 theTemplate = sec_PKCS12PointerToCertBagTemplate;
45 break;
46 case SEC_OID_PKCS12_V1_CRL_BAG_ID:
47 theTemplate = sec_PKCS12PointerToCRLBagTemplate;
48 break;
49 case SEC_OID_PKCS12_V1_SECRET_BAG_ID:
50 theTemplate = sec_PKCS12PointerToSecretBagTemplate;
51 break;
52 case SEC_OID_PKCS12_V1_PKCS8_SHROUDED_KEY_BAG_ID:
53 theTemplate =
54 SEC_ASN1_GET(SECKEY_PointerToEncryptedPrivateKeyInfoTemplate);
55 break;
56 case SEC_OID_PKCS12_V1_SAFE_CONTENTS_BAG_ID:
57 if (encoding) {
58 theTemplate = sec_PKCS12PointerToSafeContentsTemplate;
59 } else {
60 theTemplate = SEC_ASN1_GET(SEC_PointerToAnyTemplate);
61 }
62 break;
63 }
64 return theTemplate;
65 }
66
67 static const SEC_ASN1Template *
sec_pkcs12_choose_crl_bag_type(void * src_or_dest,PRBool encoding)68 sec_pkcs12_choose_crl_bag_type(void *src_or_dest, PRBool encoding)
69 {
70 const SEC_ASN1Template *theTemplate;
71 sec_PKCS12CRLBag *crlbag;
72 SECOidData *oiddata;
73
74 if (src_or_dest == NULL) {
75 return NULL;
76 }
77
78 crlbag = (sec_PKCS12CRLBag *)src_or_dest;
79
80 oiddata = SECOID_FindOID(&crlbag->bagID);
81 if (oiddata == NULL) {
82 return SEC_ASN1_GET(SEC_AnyTemplate);
83 }
84
85 switch (oiddata->offset) {
86 default:
87 theTemplate = SEC_ASN1_GET(SEC_AnyTemplate);
88 break;
89 case SEC_OID_PKCS9_X509_CRL:
90 theTemplate = SEC_ASN1_GET(SEC_OctetStringTemplate);
91 break;
92 }
93 return theTemplate;
94 }
95
96 static const SEC_ASN1Template *
sec_pkcs12_choose_cert_bag_type(void * src_or_dest,PRBool encoding)97 sec_pkcs12_choose_cert_bag_type(void *src_or_dest, PRBool encoding)
98 {
99 const SEC_ASN1Template *theTemplate;
100 sec_PKCS12CertBag *certbag;
101 SECOidData *oiddata;
102
103 if (src_or_dest == NULL) {
104 return NULL;
105 }
106
107 certbag = (sec_PKCS12CertBag *)src_or_dest;
108
109 oiddata = SECOID_FindOID(&certbag->bagID);
110 if (oiddata == NULL) {
111 return SEC_ASN1_GET(SEC_AnyTemplate);
112 }
113
114 switch (oiddata->offset) {
115 default:
116 theTemplate = SEC_ASN1_GET(SEC_AnyTemplate);
117 break;
118 case SEC_OID_PKCS9_X509_CERT:
119 theTemplate = SEC_ASN1_GET(SEC_OctetStringTemplate);
120 break;
121 case SEC_OID_PKCS9_SDSI_CERT:
122 theTemplate = SEC_ASN1_GET(SEC_IA5StringTemplate);
123 break;
124 }
125 return theTemplate;
126 }
127
128 static const SEC_ASN1Template *
sec_pkcs12_choose_attr_type(void * src_or_dest,PRBool encoding)129 sec_pkcs12_choose_attr_type(void *src_or_dest, PRBool encoding)
130 {
131 const SEC_ASN1Template *theTemplate;
132 sec_PKCS12Attribute *attr;
133 SECOidData *oiddata;
134
135 if (src_or_dest == NULL) {
136 return NULL;
137 }
138
139 attr = (sec_PKCS12Attribute *)src_or_dest;
140
141 oiddata = SECOID_FindOID(&attr->attrType);
142 if (oiddata == NULL) {
143 return SEC_ASN1_GET(SEC_AnyTemplate);
144 }
145
146 switch (oiddata->offset) {
147 default:
148 theTemplate = SEC_ASN1_GET(SEC_AnyTemplate);
149 break;
150 case SEC_OID_PKCS9_FRIENDLY_NAME:
151 theTemplate = SEC_ASN1_GET(SEC_BMPStringTemplate);
152 break;
153 case SEC_OID_PKCS9_LOCAL_KEY_ID:
154 theTemplate = SEC_ASN1_GET(SEC_OctetStringTemplate);
155 break;
156 case SEC_OID_PKCS12_KEY_USAGE:
157 theTemplate = SEC_ASN1_GET(SEC_BitStringTemplate);
158 break;
159 }
160
161 return theTemplate;
162 }
163
164 const SEC_ASN1Template sec_PKCS12PointerToContentInfoTemplate[] = {
165 { SEC_ASN1_POINTER | SEC_ASN1_MAY_STREAM, 0, sec_PKCS7ContentInfoTemplate }
166 };
167
168 static const SEC_ASN1TemplateChooserPtr sec_pkcs12_crl_bag_chooser =
169 sec_pkcs12_choose_crl_bag_type;
170
171 static const SEC_ASN1TemplateChooserPtr sec_pkcs12_cert_bag_chooser =
172 sec_pkcs12_choose_cert_bag_type;
173
174 static const SEC_ASN1TemplateChooserPtr sec_pkcs12_safe_bag_chooser =
175 sec_pkcs12_choose_safe_bag_type;
176
177 static const SEC_ASN1TemplateChooserPtr sec_pkcs12_attr_chooser =
178 sec_pkcs12_choose_attr_type;
179
180 const SEC_ASN1Template sec_PKCS12PointerToCertBagTemplate[] = {
181 { SEC_ASN1_POINTER, 0, sec_PKCS12CertBagTemplate }
182 };
183
184 const SEC_ASN1Template sec_PKCS12PointerToCRLBagTemplate[] = {
185 { SEC_ASN1_POINTER, 0, sec_PKCS12CRLBagTemplate }
186 };
187
188 const SEC_ASN1Template sec_PKCS12PointerToSecretBagTemplate[] = {
189 { SEC_ASN1_POINTER, 0, sec_PKCS12SecretBagTemplate }
190 };
191
192 const SEC_ASN1Template sec_PKCS12PointerToSafeContentsTemplate[] = {
193 { SEC_ASN1_POINTER, 0, sec_PKCS12SafeContentsTemplate }
194 };
195
196 const SEC_ASN1Template sec_PKCS12PFXItemTemplate[] = {
197 { SEC_ASN1_SEQUENCE | SEC_ASN1_MAY_STREAM, 0, NULL,
198 sizeof(sec_PKCS12PFXItem) },
199 { SEC_ASN1_OPTIONAL | SEC_ASN1_INTEGER,
200 offsetof(sec_PKCS12PFXItem, version) },
201 { SEC_ASN1_ANY | SEC_ASN1_MAY_STREAM,
202 offsetof(sec_PKCS12PFXItem, encodedAuthSafe) },
203 { SEC_ASN1_ANY | SEC_ASN1_MAY_STREAM,
204 offsetof(sec_PKCS12PFXItem, encodedMacData) },
205 { 0 }
206 };
207
208 const SEC_ASN1Template sec_PKCS12MacDataTemplate[] = {
209 { SEC_ASN1_SEQUENCE, 0, NULL, sizeof(sec_PKCS12MacData) },
210 { SEC_ASN1_INLINE | SEC_ASN1_XTRN, offsetof(sec_PKCS12MacData, safeMac),
211 SEC_ASN1_SUB(sgn_DigestInfoTemplate) },
212 { SEC_ASN1_OCTET_STRING, offsetof(sec_PKCS12MacData, macSalt) },
213 { SEC_ASN1_OPTIONAL | SEC_ASN1_INTEGER, offsetof(sec_PKCS12MacData, iter) },
214 { 0 }
215 };
216
217 const SEC_ASN1Template sec_PKCS12AuthenticatedSafeTemplate[] = {
218 { SEC_ASN1_SEQUENCE_OF | SEC_ASN1_MAY_STREAM | SEC_ASN1_XTRN,
219 offsetof(sec_PKCS12AuthenticatedSafe, encodedSafes),
220 SEC_ASN1_SUB(SEC_AnyTemplate) }
221 };
222
223 const SEC_ASN1Template sec_PKCS12SafeBagTemplate[] = {
224 { SEC_ASN1_SEQUENCE | SEC_ASN1_MAY_STREAM, 0, NULL,
225 sizeof(sec_PKCS12SafeBag) },
226 { SEC_ASN1_OBJECT_ID, offsetof(sec_PKCS12SafeBag, safeBagType) },
227 { SEC_ASN1_EXPLICIT | SEC_ASN1_DYNAMIC | SEC_ASN1_CONSTRUCTED |
228 SEC_ASN1_MAY_STREAM | SEC_ASN1_CONTEXT_SPECIFIC | 0,
229 offsetof(sec_PKCS12SafeBag, safeBagContent),
230 &sec_pkcs12_safe_bag_chooser },
231 { SEC_ASN1_SET_OF | SEC_ASN1_OPTIONAL, offsetof(sec_PKCS12SafeBag, attribs),
232 sec_PKCS12AttributeTemplate },
233 { 0 }
234 };
235
236 const SEC_ASN1Template sec_PKCS12SafeContentsTemplate[] = {
237 { SEC_ASN1_SEQUENCE_OF | SEC_ASN1_MAY_STREAM,
238 offsetof(sec_PKCS12SafeContents, safeBags),
239 sec_PKCS12SafeBagTemplate }
240 };
241
242 const SEC_ASN1Template sec_PKCS12SequenceOfAnyTemplate[] = {
243 { SEC_ASN1_SEQUENCE_OF | SEC_ASN1_MAY_STREAM | SEC_ASN1_XTRN, 0,
244 SEC_ASN1_SUB(SEC_AnyTemplate) }
245 };
246
247 const SEC_ASN1Template sec_PKCS12NestedSafeContentsDecodeTemplate[] = {
248 { SEC_ASN1_EXPLICIT | SEC_ASN1_CONTEXT_SPECIFIC | SEC_ASN1_CONSTRUCTED | 0,
249 offsetof(sec_PKCS12SafeContents, encodedSafeBags),
250 sec_PKCS12SequenceOfAnyTemplate }
251 };
252
253 const SEC_ASN1Template sec_PKCS12SafeContentsDecodeTemplate[] = {
254 { SEC_ASN1_SEQUENCE_OF | SEC_ASN1_MAY_STREAM | SEC_ASN1_XTRN,
255 offsetof(sec_PKCS12SafeContents, encodedSafeBags),
256 SEC_ASN1_SUB(SEC_AnyTemplate) }
257 };
258
259 const SEC_ASN1Template sec_PKCS12CRLBagTemplate[] = {
260 { SEC_ASN1_SEQUENCE, 0, NULL, sizeof(sec_PKCS12CRLBag) },
261 { SEC_ASN1_OBJECT_ID, offsetof(sec_PKCS12CRLBag, bagID) },
262 { SEC_ASN1_DYNAMIC | SEC_ASN1_POINTER,
263 offsetof(sec_PKCS12CRLBag, value), &sec_pkcs12_crl_bag_chooser },
264 { 0 }
265 };
266
267 const SEC_ASN1Template sec_PKCS12CertBagTemplate[] = {
268 { SEC_ASN1_SEQUENCE, 0, NULL, sizeof(sec_PKCS12CertBag) },
269 { SEC_ASN1_OBJECT_ID, offsetof(sec_PKCS12CertBag, bagID) },
270 { SEC_ASN1_DYNAMIC | SEC_ASN1_EXPLICIT | SEC_ASN1_CONSTRUCTED |
271 SEC_ASN1_CONTEXT_SPECIFIC | 0,
272 offsetof(sec_PKCS12CertBag, value), &sec_pkcs12_cert_bag_chooser },
273 { 0 }
274 };
275
276 const SEC_ASN1Template sec_PKCS12SecretBagTemplate[] = {
277 { SEC_ASN1_SEQUENCE, 0, NULL, sizeof(sec_PKCS12SecretBag) },
278 { SEC_ASN1_OBJECT_ID, offsetof(sec_PKCS12SecretBag, secretType) },
279 { SEC_ASN1_ANY, offsetof(sec_PKCS12SecretBag, secretContent) },
280 { 0 }
281 };
282
283 const SEC_ASN1Template sec_PKCS12AttributeTemplate[] = {
284 { SEC_ASN1_SEQUENCE, 0, NULL, sizeof(sec_PKCS12Attribute) },
285 { SEC_ASN1_OBJECT_ID, offsetof(sec_PKCS12Attribute, attrType) },
286 { SEC_ASN1_SET_OF | SEC_ASN1_DYNAMIC,
287 offsetof(sec_PKCS12Attribute, attrValue),
288 &sec_pkcs12_attr_chooser },
289 { 0 }
290 };
291