1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
|
/*
* Copyright 2000-2016 The OpenSSL Project Authors. All Rights Reserved.
*
* Licensed under the OpenSSL license (the "License"). You may not use
* this file except in compliance with the License. You can obtain a copy
* in the file LICENSE in the source distribution or at
* https://www.openssl.org/source/license.html
*/
#include <openssl/x509v3.h>
#include <openssl/asn1.h>
#include <openssl/bio.h>
#include <openssl/nid.h>
// OCSP extensions and a couple of CRL entry extensions
static int i2r_ocsp_acutoff(const X509V3_EXT_METHOD *method, void *nonce,
BIO *out, int indent);
static int i2r_ocsp_nocheck(const X509V3_EXT_METHOD *method, void *nocheck,
BIO *out, int indent);
static void *s2i_ocsp_nocheck(const X509V3_EXT_METHOD *method,
const X509V3_CTX *ctx, const char *str);
const X509V3_EXT_METHOD v3_crl_invdate = {
NID_invalidity_date,
0,
ASN1_ITEM_ref(ASN1_GENERALIZEDTIME),
0,
0,
0,
0,
0,
0,
0,
0,
i2r_ocsp_acutoff,
0,
NULL,
};
const X509V3_EXT_METHOD v3_ocsp_nocheck = {
NID_id_pkix_OCSP_noCheck,
0,
ASN1_ITEM_ref(ASN1_NULL),
0,
0,
0,
0,
0,
s2i_ocsp_nocheck,
0,
0,
i2r_ocsp_nocheck,
0,
NULL,
};
static int i2r_ocsp_acutoff(const X509V3_EXT_METHOD *method, void *cutoff,
BIO *bp, int ind) {
if (BIO_printf(bp, "%*s", ind, "") <= 0) {
return 0;
}
if (!ASN1_GENERALIZEDTIME_print(bp, cutoff)) {
return 0;
}
return 1;
}
// Nocheck is just a single NULL. Don't print anything and always set it
static int i2r_ocsp_nocheck(const X509V3_EXT_METHOD *method, void *nocheck,
BIO *out, int indent) {
return 1;
}
static void *s2i_ocsp_nocheck(const X509V3_EXT_METHOD *method,
const X509V3_CTX *ctx, const char *str) {
return ASN1_NULL_new();
}
|
