libressl: Fix validation errors in certificate chains with expired certificates
[dragonfly.git] / crypto / libressl / crypto / x509 / x509_pku.c
1 /* $OpenBSD: x509_pku.c,v 1.1 2020/06/04 15:19:32 jsing Exp $ */
2 /* Written by Dr Stephen N Henson (steve@openssl.org) for the OpenSSL
3  * project 1999.
4  */
5 /* ====================================================================
6  * Copyright (c) 1999 The OpenSSL Project.  All rights reserved.
7  *
8  * Redistribution and use in source and binary forms, with or without
9  * modification, are permitted provided that the following conditions
10  * are met:
11  *
12  * 1. Redistributions of source code must retain the above copyright
13  *    notice, this list of conditions and the following disclaimer.
14  *
15  * 2. Redistributions in binary form must reproduce the above copyright
16  *    notice, this list of conditions and the following disclaimer in
17  *    the documentation and/or other materials provided with the
18  *    distribution.
19  *
20  * 3. All advertising materials mentioning features or use of this
21  *    software must display the following acknowledgment:
22  *    "This product includes software developed by the OpenSSL Project
23  *    for use in the OpenSSL Toolkit. (http://www.OpenSSL.org/)"
24  *
25  * 4. The names "OpenSSL Toolkit" and "OpenSSL Project" must not be used to
26  *    endorse or promote products derived from this software without
27  *    prior written permission. For written permission, please contact
28  *    licensing@OpenSSL.org.
29  *
30  * 5. Products derived from this software may not be called "OpenSSL"
31  *    nor may "OpenSSL" appear in their names without prior written
32  *    permission of the OpenSSL Project.
33  *
34  * 6. Redistributions of any form whatsoever must retain the following
35  *    acknowledgment:
36  *    "This product includes software developed by the OpenSSL Project
37  *    for use in the OpenSSL Toolkit (http://www.OpenSSL.org/)"
38  *
39  * THIS SOFTWARE IS PROVIDED BY THE OpenSSL PROJECT ``AS IS'' AND ANY
40  * EXPRESSED OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
41  * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR
42  * PURPOSE ARE DISCLAIMED.  IN NO EVENT SHALL THE OpenSSL PROJECT OR
43  * ITS CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL,
44  * SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT
45  * NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES;
46  * LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
47  * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT,
48  * STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE)
49  * ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED
50  * OF THE POSSIBILITY OF SUCH DAMAGE.
51  * ====================================================================
52  *
53  * This product includes cryptographic software written by Eric Young
54  * (eay@cryptsoft.com).  This product includes software written by Tim
55  * Hudson (tjh@cryptsoft.com).
56  *
57  */
58
59 #include <stdio.h>
60
61 #include <openssl/asn1.h>
62 #include <openssl/asn1t.h>
63 #include <openssl/x509v3.h>
64
65 static int i2r_PKEY_USAGE_PERIOD(X509V3_EXT_METHOD *method,
66     PKEY_USAGE_PERIOD *usage, BIO *out, int indent);
67
68 const X509V3_EXT_METHOD v3_pkey_usage_period = {
69         .ext_nid = NID_private_key_usage_period,
70         .ext_flags = 0,
71         .it = &PKEY_USAGE_PERIOD_it,
72         .ext_new = NULL,
73         .ext_free = NULL,
74         .d2i = NULL,
75         .i2d = NULL,
76         .i2s = NULL,
77         .s2i = NULL,
78         .i2v = NULL,
79         .v2i = NULL,
80         .i2r = (X509V3_EXT_I2R)i2r_PKEY_USAGE_PERIOD,
81         .r2i = NULL,
82         .usr_data = NULL,
83 };
84
85 static const ASN1_TEMPLATE PKEY_USAGE_PERIOD_seq_tt[] = {
86         {
87                 .flags = ASN1_TFLG_IMPLICIT | ASN1_TFLG_OPTIONAL,
88                 .tag = 0,
89                 .offset = offsetof(PKEY_USAGE_PERIOD, notBefore),
90                 .field_name = "notBefore",
91                 .item = &ASN1_GENERALIZEDTIME_it,
92         },
93         {
94                 .flags = ASN1_TFLG_IMPLICIT | ASN1_TFLG_OPTIONAL,
95                 .tag = 1,
96                 .offset = offsetof(PKEY_USAGE_PERIOD, notAfter),
97                 .field_name = "notAfter",
98                 .item = &ASN1_GENERALIZEDTIME_it,
99         },
100 };
101
102 const ASN1_ITEM PKEY_USAGE_PERIOD_it = {
103         .itype = ASN1_ITYPE_SEQUENCE,
104         .utype = V_ASN1_SEQUENCE,
105         .templates = PKEY_USAGE_PERIOD_seq_tt,
106         .tcount = sizeof(PKEY_USAGE_PERIOD_seq_tt) / sizeof(ASN1_TEMPLATE),
107         .funcs = NULL,
108         .size = sizeof(PKEY_USAGE_PERIOD),
109         .sname = "PKEY_USAGE_PERIOD",
110 };
111
112
113 PKEY_USAGE_PERIOD *
114 d2i_PKEY_USAGE_PERIOD(PKEY_USAGE_PERIOD **a, const unsigned char **in, long len)
115 {
116         return (PKEY_USAGE_PERIOD *)ASN1_item_d2i((ASN1_VALUE **)a, in, len,
117             &PKEY_USAGE_PERIOD_it);
118 }
119
120 int
121 i2d_PKEY_USAGE_PERIOD(PKEY_USAGE_PERIOD *a, unsigned char **out)
122 {
123         return ASN1_item_i2d((ASN1_VALUE *)a, out, &PKEY_USAGE_PERIOD_it);
124 }
125
126 PKEY_USAGE_PERIOD *
127 PKEY_USAGE_PERIOD_new(void)
128 {
129         return (PKEY_USAGE_PERIOD *)ASN1_item_new(&PKEY_USAGE_PERIOD_it);
130 }
131
132 void
133 PKEY_USAGE_PERIOD_free(PKEY_USAGE_PERIOD *a)
134 {
135         ASN1_item_free((ASN1_VALUE *)a, &PKEY_USAGE_PERIOD_it);
136 }
137
138 static int
139 i2r_PKEY_USAGE_PERIOD(X509V3_EXT_METHOD *method, PKEY_USAGE_PERIOD *usage,
140     BIO *out, int indent)
141 {
142         BIO_printf(out, "%*s", indent, "");
143         if (usage->notBefore) {
144                 BIO_write(out, "Not Before: ", 12);
145                 ASN1_GENERALIZEDTIME_print(out, usage->notBefore);
146                 if (usage->notAfter)
147                         BIO_write(out, ", ", 2);
148         }
149         if (usage->notAfter) {
150                 BIO_write(out, "Not After: ", 11);
151                 ASN1_GENERALIZEDTIME_print(out, usage->notAfter);
152         }
153         return 1;
154 }