1*de0e0e4dSAntonio Huete Jimenez /* $OpenBSD: x509type.c,v 1.15 2021/12/12 21:30:14 tb Exp $ */
2f5b1c8a1SJohn Marino /* Copyright (C) 1995-1998 Eric Young (eay@cryptsoft.com)
3f5b1c8a1SJohn Marino * All rights reserved.
4f5b1c8a1SJohn Marino *
5f5b1c8a1SJohn Marino * This package is an SSL implementation written
6f5b1c8a1SJohn Marino * by Eric Young (eay@cryptsoft.com).
7f5b1c8a1SJohn Marino * The implementation was written so as to conform with Netscapes SSL.
8f5b1c8a1SJohn Marino *
9f5b1c8a1SJohn Marino * This library is free for commercial and non-commercial use as long as
10f5b1c8a1SJohn Marino * the following conditions are aheared to. The following conditions
11f5b1c8a1SJohn Marino * apply to all code found in this distribution, be it the RC4, RSA,
12f5b1c8a1SJohn Marino * lhash, DES, etc., code; not just the SSL code. The SSL documentation
13f5b1c8a1SJohn Marino * included with this distribution is covered by the same copyright terms
14f5b1c8a1SJohn Marino * except that the holder is Tim Hudson (tjh@cryptsoft.com).
15f5b1c8a1SJohn Marino *
16f5b1c8a1SJohn Marino * Copyright remains Eric Young's, and as such any Copyright notices in
17f5b1c8a1SJohn Marino * the code are not to be removed.
18f5b1c8a1SJohn Marino * If this package is used in a product, Eric Young should be given attribution
19f5b1c8a1SJohn Marino * as the author of the parts of the library used.
20f5b1c8a1SJohn Marino * This can be in the form of a textual message at program startup or
21f5b1c8a1SJohn Marino * in documentation (online or textual) provided with the package.
22f5b1c8a1SJohn Marino *
23f5b1c8a1SJohn Marino * Redistribution and use in source and binary forms, with or without
24f5b1c8a1SJohn Marino * modification, are permitted provided that the following conditions
25f5b1c8a1SJohn Marino * are met:
26f5b1c8a1SJohn Marino * 1. Redistributions of source code must retain the copyright
27f5b1c8a1SJohn Marino * notice, this list of conditions and the following disclaimer.
28f5b1c8a1SJohn Marino * 2. Redistributions in binary form must reproduce the above copyright
29f5b1c8a1SJohn Marino * notice, this list of conditions and the following disclaimer in the
30f5b1c8a1SJohn Marino * documentation and/or other materials provided with the distribution.
31f5b1c8a1SJohn Marino * 3. All advertising materials mentioning features or use of this software
32f5b1c8a1SJohn Marino * must display the following acknowledgement:
33f5b1c8a1SJohn Marino * "This product includes cryptographic software written by
34f5b1c8a1SJohn Marino * Eric Young (eay@cryptsoft.com)"
35f5b1c8a1SJohn Marino * The word 'cryptographic' can be left out if the rouines from the library
36f5b1c8a1SJohn Marino * being used are not cryptographic related :-).
37f5b1c8a1SJohn Marino * 4. If you include any Windows specific code (or a derivative thereof) from
38f5b1c8a1SJohn Marino * the apps directory (application code) you must include an acknowledgement:
39f5b1c8a1SJohn Marino * "This product includes software written by Tim Hudson (tjh@cryptsoft.com)"
40f5b1c8a1SJohn Marino *
41f5b1c8a1SJohn Marino * THIS SOFTWARE IS PROVIDED BY ERIC YOUNG ``AS IS'' AND
42f5b1c8a1SJohn Marino * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
43f5b1c8a1SJohn Marino * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
44f5b1c8a1SJohn Marino * ARE DISCLAIMED. IN NO EVENT SHALL THE AUTHOR OR CONTRIBUTORS BE LIABLE
45f5b1c8a1SJohn Marino * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
46f5b1c8a1SJohn Marino * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
47f5b1c8a1SJohn Marino * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
48f5b1c8a1SJohn Marino * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
49f5b1c8a1SJohn Marino * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
50f5b1c8a1SJohn Marino * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
51f5b1c8a1SJohn Marino * SUCH DAMAGE.
52f5b1c8a1SJohn Marino *
53f5b1c8a1SJohn Marino * The licence and distribution terms for any publically available version or
54f5b1c8a1SJohn Marino * derivative of this code cannot be changed. i.e. this code cannot simply be
55f5b1c8a1SJohn Marino * copied and put under another distribution licence
56f5b1c8a1SJohn Marino * [including the GNU Public Licence.]
57f5b1c8a1SJohn Marino */
58f5b1c8a1SJohn Marino
59f5b1c8a1SJohn Marino #include <stdio.h>
60f5b1c8a1SJohn Marino
61f5b1c8a1SJohn Marino #include <openssl/evp.h>
62f5b1c8a1SJohn Marino #include <openssl/objects.h>
63f5b1c8a1SJohn Marino #include <openssl/x509.h>
64f5b1c8a1SJohn Marino
65*de0e0e4dSAntonio Huete Jimenez #include "evp_locl.h"
66*de0e0e4dSAntonio Huete Jimenez #include "x509_lcl.h"
67*de0e0e4dSAntonio Huete Jimenez
68f5b1c8a1SJohn Marino int
X509_certificate_type(const X509 * x,const EVP_PKEY * pkey)6972c33676SMaxim Ag X509_certificate_type(const X509 *x, const EVP_PKEY *pkey)
70f5b1c8a1SJohn Marino {
7172c33676SMaxim Ag const EVP_PKEY *pk = pkey;
72f5b1c8a1SJohn Marino int ret = 0, i;
73f5b1c8a1SJohn Marino
74f5b1c8a1SJohn Marino if (x == NULL)
75f5b1c8a1SJohn Marino return (0);
76f5b1c8a1SJohn Marino
7772c33676SMaxim Ag if (pk == NULL) {
7872c33676SMaxim Ag if ((pk = X509_get0_pubkey(x)) == NULL)
79f5b1c8a1SJohn Marino return (0);
8072c33676SMaxim Ag }
81f5b1c8a1SJohn Marino
82f5b1c8a1SJohn Marino switch (pk->type) {
83f5b1c8a1SJohn Marino case EVP_PKEY_RSA:
8472c33676SMaxim Ag ret = EVP_PK_RSA|EVP_PKT_SIGN|EVP_PKT_ENC;
85f5b1c8a1SJohn Marino break;
86f5b1c8a1SJohn Marino case EVP_PKEY_DSA:
87f5b1c8a1SJohn Marino ret = EVP_PK_DSA|EVP_PKT_SIGN;
88f5b1c8a1SJohn Marino break;
89f5b1c8a1SJohn Marino case EVP_PKEY_EC:
90f5b1c8a1SJohn Marino ret = EVP_PK_EC|EVP_PKT_SIGN|EVP_PKT_EXCH;
91f5b1c8a1SJohn Marino break;
92f5b1c8a1SJohn Marino case EVP_PKEY_DH:
93f5b1c8a1SJohn Marino ret = EVP_PK_DH|EVP_PKT_EXCH;
94f5b1c8a1SJohn Marino break;
95f5b1c8a1SJohn Marino case NID_id_GostR3410_94:
96f5b1c8a1SJohn Marino case NID_id_GostR3410_2001:
97f5b1c8a1SJohn Marino ret = EVP_PKT_EXCH|EVP_PKT_SIGN;
98f5b1c8a1SJohn Marino break;
99f5b1c8a1SJohn Marino default:
100f5b1c8a1SJohn Marino break;
101f5b1c8a1SJohn Marino }
102f5b1c8a1SJohn Marino
103f5b1c8a1SJohn Marino i = OBJ_obj2nid(x->sig_alg->algorithm);
104f5b1c8a1SJohn Marino if (i && OBJ_find_sigid_algs(i, NULL, &i)) {
105f5b1c8a1SJohn Marino switch (i) {
106f5b1c8a1SJohn Marino case NID_rsaEncryption:
107f5b1c8a1SJohn Marino case NID_rsa:
108f5b1c8a1SJohn Marino ret |= EVP_PKS_RSA;
109f5b1c8a1SJohn Marino break;
110f5b1c8a1SJohn Marino case NID_dsa:
111f5b1c8a1SJohn Marino case NID_dsa_2:
112f5b1c8a1SJohn Marino ret |= EVP_PKS_DSA;
113f5b1c8a1SJohn Marino break;
114f5b1c8a1SJohn Marino case NID_X9_62_id_ecPublicKey:
115f5b1c8a1SJohn Marino ret |= EVP_PKS_EC;
116f5b1c8a1SJohn Marino break;
117f5b1c8a1SJohn Marino default:
118f5b1c8a1SJohn Marino break;
119f5b1c8a1SJohn Marino }
120f5b1c8a1SJohn Marino }
121f5b1c8a1SJohn Marino
122f5b1c8a1SJohn Marino /* /8 because it's 1024 bits we look for, not bytes */
123f5b1c8a1SJohn Marino if (EVP_PKEY_size(pk) <= 1024 / 8)
124f5b1c8a1SJohn Marino ret |= EVP_PKT_EXP;
125f5b1c8a1SJohn Marino return (ret);
126f5b1c8a1SJohn Marino }
127