1 /* 2 * Copyright 1999-2016 The OpenSSL Project Authors. All Rights Reserved. 3 * 4 * Licensed under the OpenSSL license (the "License"). You may not use 5 * this file except in compliance with the License. You can obtain a copy 6 * in the file LICENSE in the source distribution or at 7 * https://www.openssl.org/source/license.html 8 */ 9 10 #include <stdio.h> 11 #include <stdlib.h> 12 #include <openssl/bio.h> 13 #include <openssl/asn1.h> 14 #include <openssl/asn1t.h> 15 #include <openssl/pem.h> 16 #include <openssl/pkcs7.h> 17 #include <openssl/x509.h> 18 #include <openssl/err.h> 19 20 int PKCS7_add_attrib_smimecap(PKCS7_SIGNER_INFO *si, 21 STACK_OF(X509_ALGOR) *cap) 22 { 23 ASN1_STRING *seq; 24 25 if ((seq = ASN1_STRING_new()) == NULL) { 26 PKCS7err(PKCS7_F_PKCS7_ADD_ATTRIB_SMIMECAP, ERR_R_MALLOC_FAILURE); 27 return 0; 28 } 29 seq->length = ASN1_item_i2d((ASN1_VALUE *)cap, &seq->data, 30 ASN1_ITEM_rptr(X509_ALGORS)); 31 return PKCS7_add_signed_attribute(si, NID_SMIMECapabilities, 32 V_ASN1_SEQUENCE, seq); 33 } 34 35 STACK_OF(X509_ALGOR) *PKCS7_get_smimecap(PKCS7_SIGNER_INFO *si) 36 { 37 ASN1_TYPE *cap; 38 const unsigned char *p; 39 40 cap = PKCS7_get_signed_attribute(si, NID_SMIMECapabilities); 41 if (cap == NULL || (cap->type != V_ASN1_SEQUENCE)) 42 return NULL; 43 p = cap->value.sequence->data; 44 return (STACK_OF(X509_ALGOR) *) 45 ASN1_item_d2i(NULL, &p, cap->value.sequence->length, 46 ASN1_ITEM_rptr(X509_ALGORS)); 47 } 48 49 /* Basic smime-capabilities OID and optional integer arg */ 50 int PKCS7_simple_smimecap(STACK_OF(X509_ALGOR) *sk, int nid, int arg) 51 { 52 ASN1_INTEGER *nbit = NULL; 53 X509_ALGOR *alg; 54 55 if ((alg = X509_ALGOR_new()) == NULL) { 56 PKCS7err(PKCS7_F_PKCS7_SIMPLE_SMIMECAP, ERR_R_MALLOC_FAILURE); 57 return 0; 58 } 59 ASN1_OBJECT_free(alg->algorithm); 60 alg->algorithm = OBJ_nid2obj(nid); 61 if (arg > 0) { 62 if ((alg->parameter = ASN1_TYPE_new()) == NULL) { 63 goto err; 64 } 65 if ((nbit = ASN1_INTEGER_new()) == NULL) { 66 goto err; 67 } 68 if (!ASN1_INTEGER_set(nbit, arg)) { 69 goto err; 70 } 71 alg->parameter->value.integer = nbit; 72 alg->parameter->type = V_ASN1_INTEGER; 73 nbit = NULL; 74 } 75 if (!sk_X509_ALGOR_push(sk, alg)) { 76 goto err; 77 } 78 return 1; 79 err: 80 PKCS7err(PKCS7_F_PKCS7_SIMPLE_SMIMECAP, ERR_R_MALLOC_FAILURE); 81 ASN1_INTEGER_free(nbit); 82 X509_ALGOR_free(alg); 83 return 0; 84 } 85 86 int PKCS7_add_attrib_content_type(PKCS7_SIGNER_INFO *si, ASN1_OBJECT *coid) 87 { 88 if (PKCS7_get_signed_attribute(si, NID_pkcs9_contentType)) 89 return 0; 90 if (!coid) 91 coid = OBJ_nid2obj(NID_pkcs7_data); 92 return PKCS7_add_signed_attribute(si, NID_pkcs9_contentType, 93 V_ASN1_OBJECT, coid); 94 } 95 96 int PKCS7_add0_attrib_signing_time(PKCS7_SIGNER_INFO *si, ASN1_TIME *t) 97 { 98 if (t == NULL && (t = X509_gmtime_adj(NULL, 0)) == NULL) { 99 PKCS7err(PKCS7_F_PKCS7_ADD0_ATTRIB_SIGNING_TIME, 100 ERR_R_MALLOC_FAILURE); 101 return 0; 102 } 103 return PKCS7_add_signed_attribute(si, NID_pkcs9_signingTime, 104 V_ASN1_UTCTIME, t); 105 } 106 107 int PKCS7_add1_attrib_digest(PKCS7_SIGNER_INFO *si, 108 const unsigned char *md, int mdlen) 109 { 110 ASN1_OCTET_STRING *os; 111 os = ASN1_OCTET_STRING_new(); 112 if (os == NULL) 113 return 0; 114 if (!ASN1_STRING_set(os, md, mdlen) 115 || !PKCS7_add_signed_attribute(si, NID_pkcs9_messageDigest, 116 V_ASN1_OCTET_STRING, os)) { 117 ASN1_OCTET_STRING_free(os); 118 return 0; 119 } 120 return 1; 121 } 122