1 #ifndef HEADER_CURL_X509ASN1_H 2 #define HEADER_CURL_X509ASN1_H 3 4 /*************************************************************************** 5 * _ _ ____ _ 6 * Project ___| | | | _ \| | 7 * / __| | | | |_) | | 8 * | (__| |_| | _ <| |___ 9 * \___|\___/|_| \_\_____| 10 * 11 * Copyright (C) 1998 - 2019, Daniel Stenberg, <daniel@haxx.se>, et al. 12 * 13 * This software is licensed as described in the file COPYING, which 14 * you should have received as part of this distribution. The terms 15 * are also available at https://curl.haxx.se/docs/copyright.html. 16 * 17 * You may opt to use, copy, modify, merge, publish, distribute and/or sell 18 * copies of the Software, and permit persons to whom the Software is 19 * furnished to do so, under the terms of the COPYING file. 20 * 21 * This software is distributed on an "AS IS" basis, WITHOUT WARRANTY OF ANY 22 * KIND, either express or implied. 23 * 24 ***************************************************************************/ 25 26 #include "curl_setup.h" 27 28 #if defined(USE_GSKIT) || defined(USE_NSS) || defined(USE_GNUTLS) || \ 29 defined(USE_WOLFSSL) || defined(USE_SCHANNEL) 30 31 #include "urldata.h" 32 33 /* 34 * Constants. 35 */ 36 37 /* Largest supported ASN.1 structure. */ 38 #define CURL_ASN1_MAX ((size_t) 0x40000) /* 256K */ 39 40 /* ASN.1 classes. */ 41 #define CURL_ASN1_UNIVERSAL 0 42 #define CURL_ASN1_APPLICATION 1 43 #define CURL_ASN1_CONTEXT_SPECIFIC 2 44 #define CURL_ASN1_PRIVATE 3 45 46 /* ASN.1 types. */ 47 #define CURL_ASN1_BOOLEAN 1 48 #define CURL_ASN1_INTEGER 2 49 #define CURL_ASN1_BIT_STRING 3 50 #define CURL_ASN1_OCTET_STRING 4 51 #define CURL_ASN1_NULL 5 52 #define CURL_ASN1_OBJECT_IDENTIFIER 6 53 #define CURL_ASN1_OBJECT_DESCRIPTOR 7 54 #define CURL_ASN1_INSTANCE_OF 8 55 #define CURL_ASN1_REAL 9 56 #define CURL_ASN1_ENUMERATED 10 57 #define CURL_ASN1_EMBEDDED 11 58 #define CURL_ASN1_UTF8_STRING 12 59 #define CURL_ASN1_RELATIVE_OID 13 60 #define CURL_ASN1_SEQUENCE 16 61 #define CURL_ASN1_SET 17 62 #define CURL_ASN1_NUMERIC_STRING 18 63 #define CURL_ASN1_PRINTABLE_STRING 19 64 #define CURL_ASN1_TELETEX_STRING 20 65 #define CURL_ASN1_VIDEOTEX_STRING 21 66 #define CURL_ASN1_IA5_STRING 22 67 #define CURL_ASN1_UTC_TIME 23 68 #define CURL_ASN1_GENERALIZED_TIME 24 69 #define CURL_ASN1_GRAPHIC_STRING 25 70 #define CURL_ASN1_VISIBLE_STRING 26 71 #define CURL_ASN1_GENERAL_STRING 27 72 #define CURL_ASN1_UNIVERSAL_STRING 28 73 #define CURL_ASN1_CHARACTER_STRING 29 74 #define CURL_ASN1_BMP_STRING 30 75 76 77 /* 78 * Types. 79 */ 80 81 /* ASN.1 parsed element. */ 82 typedef struct { 83 const char * header; /* Pointer to header byte. */ 84 const char * beg; /* Pointer to element data. */ 85 const char * end; /* Pointer to 1st byte after element. */ 86 unsigned char class; /* ASN.1 element class. */ 87 unsigned char tag; /* ASN.1 element tag. */ 88 bool constructed; /* Element is constructed. */ 89 } curl_asn1Element; 90 91 92 /* ASN.1 OID table entry. */ 93 typedef struct { 94 const char * numoid; /* Dotted-numeric OID. */ 95 const char * textoid; /* OID name. */ 96 } curl_OID; 97 98 99 /* X509 certificate: RFC 5280. */ 100 typedef struct { 101 curl_asn1Element certificate; 102 curl_asn1Element version; 103 curl_asn1Element serialNumber; 104 curl_asn1Element signatureAlgorithm; 105 curl_asn1Element signature; 106 curl_asn1Element issuer; 107 curl_asn1Element notBefore; 108 curl_asn1Element notAfter; 109 curl_asn1Element subject; 110 curl_asn1Element subjectPublicKeyInfo; 111 curl_asn1Element subjectPublicKeyAlgorithm; 112 curl_asn1Element subjectPublicKey; 113 curl_asn1Element issuerUniqueID; 114 curl_asn1Element subjectUniqueID; 115 curl_asn1Element extensions; 116 } curl_X509certificate; 117 118 119 /* 120 * Prototypes. 121 */ 122 123 const char *Curl_getASN1Element(curl_asn1Element *elem, 124 const char *beg, const char *end); 125 const char *Curl_ASN1tostr(curl_asn1Element *elem, int type); 126 const char *Curl_DNtostr(curl_asn1Element *dn); 127 int Curl_parseX509(curl_X509certificate *cert, 128 const char *beg, const char *end); 129 CURLcode Curl_extract_certinfo(struct connectdata *conn, int certnum, 130 const char *beg, const char *end); 131 CURLcode Curl_verifyhost(struct connectdata *conn, 132 const char *beg, const char *end); 133 #endif /* USE_GSKIT or USE_NSS or USE_GNUTLS or USE_WOLFSSL or USE_SCHANNEL */ 134 #endif /* HEADER_CURL_X509ASN1_H */ 135