BA / SerialCom

Important changes to repositories hosted on mbed.com

Mbed hosted mercurial repositories are deprecated and are due to be permanently deleted in July 2026.

To keep a copy of this software download the repository Zip archive or clone locally using Mercurial.

It is also possible to export all your personal repositories from the account settings page.

Fork of OmniWheels by Gustav Atmel

mbed-os/features/mbedtls/src/x509_csr.c@1:9c5af431a1f1, 2018-05-01 (annotated)

Committer:
gustavatmel
Date:
Tue May 01 15:47:08 2018 +0000
Revision:
1:9c5af431a1f1
sdf

Who changed what in which revision?

UserRevisionLine numberNew contents of line
gustavatmel 1:9c5af431a1f1 1 /*
gustavatmel 1:9c5af431a1f1 2 * X.509 Certificate Signing Request (CSR) parsing
gustavatmel 1:9c5af431a1f1 3 *
gustavatmel 1:9c5af431a1f1 4 * Copyright (C) 2006-2015, ARM Limited, All Rights Reserved
gustavatmel 1:9c5af431a1f1 5 * SPDX-License-Identifier: Apache-2.0
gustavatmel 1:9c5af431a1f1 6 *
gustavatmel 1:9c5af431a1f1 7 * Licensed under the Apache License, Version 2.0 (the "License"); you may
gustavatmel 1:9c5af431a1f1 8 * not use this file except in compliance with the License.
gustavatmel 1:9c5af431a1f1 9 * You may obtain a copy of the License at
gustavatmel 1:9c5af431a1f1 10 *
gustavatmel 1:9c5af431a1f1 11 * http://www.apache.org/licenses/LICENSE-2.0
gustavatmel 1:9c5af431a1f1 12 *
gustavatmel 1:9c5af431a1f1 13 * Unless required by applicable law or agreed to in writing, software
gustavatmel 1:9c5af431a1f1 14 * distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
gustavatmel 1:9c5af431a1f1 15 * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
gustavatmel 1:9c5af431a1f1 16 * See the License for the specific language governing permissions and
gustavatmel 1:9c5af431a1f1 17 * limitations under the License.
gustavatmel 1:9c5af431a1f1 18 *
gustavatmel 1:9c5af431a1f1 19 * This file is part of mbed TLS (https://tls.mbed.org)
gustavatmel 1:9c5af431a1f1 20 */
gustavatmel 1:9c5af431a1f1 21 /*
gustavatmel 1:9c5af431a1f1 22 * The ITU-T X.509 standard defines a certificate format for PKI.
gustavatmel 1:9c5af431a1f1 23 *
gustavatmel 1:9c5af431a1f1 24 * http://www.ietf.org/rfc/rfc5280.txt (Certificates and CRLs)
gustavatmel 1:9c5af431a1f1 25 * http://www.ietf.org/rfc/rfc3279.txt (Alg IDs for CRLs)
gustavatmel 1:9c5af431a1f1 26 * http://www.ietf.org/rfc/rfc2986.txt (CSRs, aka PKCS#10)
gustavatmel 1:9c5af431a1f1 27 *
gustavatmel 1:9c5af431a1f1 28 * http://www.itu.int/ITU-T/studygroups/com17/languages/X.680-0207.pdf
gustavatmel 1:9c5af431a1f1 29 * http://www.itu.int/ITU-T/studygroups/com17/languages/X.690-0207.pdf
gustavatmel 1:9c5af431a1f1 30 */
gustavatmel 1:9c5af431a1f1 31
gustavatmel 1:9c5af431a1f1 32 #if !defined(MBEDTLS_CONFIG_FILE)
gustavatmel 1:9c5af431a1f1 33 #include "mbedtls/config.h"
gustavatmel 1:9c5af431a1f1 34 #else
gustavatmel 1:9c5af431a1f1 35 #include MBEDTLS_CONFIG_FILE
gustavatmel 1:9c5af431a1f1 36 #endif
gustavatmel 1:9c5af431a1f1 37
gustavatmel 1:9c5af431a1f1 38 #if defined(MBEDTLS_X509_CSR_PARSE_C)
gustavatmel 1:9c5af431a1f1 39
gustavatmel 1:9c5af431a1f1 40 #include "mbedtls/x509_csr.h"
gustavatmel 1:9c5af431a1f1 41 #include "mbedtls/oid.h"
gustavatmel 1:9c5af431a1f1 42
gustavatmel 1:9c5af431a1f1 43 #include <string.h>
gustavatmel 1:9c5af431a1f1 44
gustavatmel 1:9c5af431a1f1 45 #if defined(MBEDTLS_PEM_PARSE_C)
gustavatmel 1:9c5af431a1f1 46 #include "mbedtls/pem.h"
gustavatmel 1:9c5af431a1f1 47 #endif
gustavatmel 1:9c5af431a1f1 48
gustavatmel 1:9c5af431a1f1 49 #if defined(MBEDTLS_PLATFORM_C)
gustavatmel 1:9c5af431a1f1 50 #include "mbedtls/platform.h"
gustavatmel 1:9c5af431a1f1 51 #else
gustavatmel 1:9c5af431a1f1 52 #include <stdlib.h>
gustavatmel 1:9c5af431a1f1 53 #include <stdio.h>
gustavatmel 1:9c5af431a1f1 54 #define mbedtls_free free
gustavatmel 1:9c5af431a1f1 55 #define mbedtls_calloc calloc
gustavatmel 1:9c5af431a1f1 56 #define mbedtls_snprintf snprintf
gustavatmel 1:9c5af431a1f1 57 #endif
gustavatmel 1:9c5af431a1f1 58
gustavatmel 1:9c5af431a1f1 59 #if defined(MBEDTLS_FS_IO) || defined(EFIX64) || defined(EFI32)
gustavatmel 1:9c5af431a1f1 60 #include <stdio.h>
gustavatmel 1:9c5af431a1f1 61 #endif
gustavatmel 1:9c5af431a1f1 62
gustavatmel 1:9c5af431a1f1 63 /* Implementation that should never be optimized out by the compiler */
gustavatmel 1:9c5af431a1f1 64 static void mbedtls_zeroize( void *v, size_t n ) {
gustavatmel 1:9c5af431a1f1 65 volatile unsigned char *p = v; while( n-- ) *p++ = 0;
gustavatmel 1:9c5af431a1f1 66 }
gustavatmel 1:9c5af431a1f1 67
gustavatmel 1:9c5af431a1f1 68 /*
gustavatmel 1:9c5af431a1f1 69 * Version ::= INTEGER { v1(0) }
gustavatmel 1:9c5af431a1f1 70 */
gustavatmel 1:9c5af431a1f1 71 static int x509_csr_get_version( unsigned char **p,
gustavatmel 1:9c5af431a1f1 72 const unsigned char *end,
gustavatmel 1:9c5af431a1f1 73 int *ver )
gustavatmel 1:9c5af431a1f1 74 {
gustavatmel 1:9c5af431a1f1 75 int ret;
gustavatmel 1:9c5af431a1f1 76
gustavatmel 1:9c5af431a1f1 77 if( ( ret = mbedtls_asn1_get_int( p, end, ver ) ) != 0 )
gustavatmel 1:9c5af431a1f1 78 {
gustavatmel 1:9c5af431a1f1 79 if( ret == MBEDTLS_ERR_ASN1_UNEXPECTED_TAG )
gustavatmel 1:9c5af431a1f1 80 {
gustavatmel 1:9c5af431a1f1 81 *ver = 0;
gustavatmel 1:9c5af431a1f1 82 return( 0 );
gustavatmel 1:9c5af431a1f1 83 }
gustavatmel 1:9c5af431a1f1 84
gustavatmel 1:9c5af431a1f1 85 return( MBEDTLS_ERR_X509_INVALID_VERSION + ret );
gustavatmel 1:9c5af431a1f1 86 }
gustavatmel 1:9c5af431a1f1 87
gustavatmel 1:9c5af431a1f1 88 return( 0 );
gustavatmel 1:9c5af431a1f1 89 }
gustavatmel 1:9c5af431a1f1 90
gustavatmel 1:9c5af431a1f1 91 /*
gustavatmel 1:9c5af431a1f1 92 * Parse a CSR in DER format
gustavatmel 1:9c5af431a1f1 93 */
gustavatmel 1:9c5af431a1f1 94 int mbedtls_x509_csr_parse_der( mbedtls_x509_csr *csr,
gustavatmel 1:9c5af431a1f1 95 const unsigned char *buf, size_t buflen )
gustavatmel 1:9c5af431a1f1 96 {
gustavatmel 1:9c5af431a1f1 97 int ret;
gustavatmel 1:9c5af431a1f1 98 size_t len;
gustavatmel 1:9c5af431a1f1 99 unsigned char *p, *end;
gustavatmel 1:9c5af431a1f1 100 mbedtls_x509_buf sig_params;
gustavatmel 1:9c5af431a1f1 101
gustavatmel 1:9c5af431a1f1 102 memset( &sig_params, 0, sizeof( mbedtls_x509_buf ) );
gustavatmel 1:9c5af431a1f1 103
gustavatmel 1:9c5af431a1f1 104 /*
gustavatmel 1:9c5af431a1f1 105 * Check for valid input
gustavatmel 1:9c5af431a1f1 106 */
gustavatmel 1:9c5af431a1f1 107 if( csr == NULL || buf == NULL || buflen == 0 )
gustavatmel 1:9c5af431a1f1 108 return( MBEDTLS_ERR_X509_BAD_INPUT_DATA );
gustavatmel 1:9c5af431a1f1 109
gustavatmel 1:9c5af431a1f1 110 mbedtls_x509_csr_init( csr );
gustavatmel 1:9c5af431a1f1 111
gustavatmel 1:9c5af431a1f1 112 /*
gustavatmel 1:9c5af431a1f1 113 * first copy the raw DER data
gustavatmel 1:9c5af431a1f1 114 */
gustavatmel 1:9c5af431a1f1 115 p = mbedtls_calloc( 1, len = buflen );
gustavatmel 1:9c5af431a1f1 116
gustavatmel 1:9c5af431a1f1 117 if( p == NULL )
gustavatmel 1:9c5af431a1f1 118 return( MBEDTLS_ERR_X509_ALLOC_FAILED );
gustavatmel 1:9c5af431a1f1 119
gustavatmel 1:9c5af431a1f1 120 memcpy( p, buf, buflen );
gustavatmel 1:9c5af431a1f1 121
gustavatmel 1:9c5af431a1f1 122 csr->raw.p = p;
gustavatmel 1:9c5af431a1f1 123 csr->raw.len = len;
gustavatmel 1:9c5af431a1f1 124 end = p + len;
gustavatmel 1:9c5af431a1f1 125
gustavatmel 1:9c5af431a1f1 126 /*
gustavatmel 1:9c5af431a1f1 127 * CertificationRequest ::= SEQUENCE {
gustavatmel 1:9c5af431a1f1 128 * certificationRequestInfo CertificationRequestInfo,
gustavatmel 1:9c5af431a1f1 129 * signatureAlgorithm AlgorithmIdentifier,
gustavatmel 1:9c5af431a1f1 130 * signature BIT STRING
gustavatmel 1:9c5af431a1f1 131 * }
gustavatmel 1:9c5af431a1f1 132 */
gustavatmel 1:9c5af431a1f1 133 if( ( ret = mbedtls_asn1_get_tag( &p, end, &len,
gustavatmel 1:9c5af431a1f1 134 MBEDTLS_ASN1_CONSTRUCTED | MBEDTLS_ASN1_SEQUENCE ) ) != 0 )
gustavatmel 1:9c5af431a1f1 135 {
gustavatmel 1:9c5af431a1f1 136 mbedtls_x509_csr_free( csr );
gustavatmel 1:9c5af431a1f1 137 return( MBEDTLS_ERR_X509_INVALID_FORMAT );
gustavatmel 1:9c5af431a1f1 138 }
gustavatmel 1:9c5af431a1f1 139
gustavatmel 1:9c5af431a1f1 140 if( len != (size_t) ( end - p ) )
gustavatmel 1:9c5af431a1f1 141 {
gustavatmel 1:9c5af431a1f1 142 mbedtls_x509_csr_free( csr );
gustavatmel 1:9c5af431a1f1 143 return( MBEDTLS_ERR_X509_INVALID_FORMAT +
gustavatmel 1:9c5af431a1f1 144 MBEDTLS_ERR_ASN1_LENGTH_MISMATCH );
gustavatmel 1:9c5af431a1f1 145 }
gustavatmel 1:9c5af431a1f1 146
gustavatmel 1:9c5af431a1f1 147 /*
gustavatmel 1:9c5af431a1f1 148 * CertificationRequestInfo ::= SEQUENCE {
gustavatmel 1:9c5af431a1f1 149 */
gustavatmel 1:9c5af431a1f1 150 csr->cri.p = p;
gustavatmel 1:9c5af431a1f1 151
gustavatmel 1:9c5af431a1f1 152 if( ( ret = mbedtls_asn1_get_tag( &p, end, &len,
gustavatmel 1:9c5af431a1f1 153 MBEDTLS_ASN1_CONSTRUCTED | MBEDTLS_ASN1_SEQUENCE ) ) != 0 )
gustavatmel 1:9c5af431a1f1 154 {
gustavatmel 1:9c5af431a1f1 155 mbedtls_x509_csr_free( csr );
gustavatmel 1:9c5af431a1f1 156 return( MBEDTLS_ERR_X509_INVALID_FORMAT + ret );
gustavatmel 1:9c5af431a1f1 157 }
gustavatmel 1:9c5af431a1f1 158
gustavatmel 1:9c5af431a1f1 159 end = p + len;
gustavatmel 1:9c5af431a1f1 160 csr->cri.len = end - csr->cri.p;
gustavatmel 1:9c5af431a1f1 161
gustavatmel 1:9c5af431a1f1 162 /*
gustavatmel 1:9c5af431a1f1 163 * Version ::= INTEGER { v1(0) }
gustavatmel 1:9c5af431a1f1 164 */
gustavatmel 1:9c5af431a1f1 165 if( ( ret = x509_csr_get_version( &p, end, &csr->version ) ) != 0 )
gustavatmel 1:9c5af431a1f1 166 {
gustavatmel 1:9c5af431a1f1 167 mbedtls_x509_csr_free( csr );
gustavatmel 1:9c5af431a1f1 168 return( ret );
gustavatmel 1:9c5af431a1f1 169 }
gustavatmel 1:9c5af431a1f1 170
gustavatmel 1:9c5af431a1f1 171 if( csr->version != 0 )
gustavatmel 1:9c5af431a1f1 172 {
gustavatmel 1:9c5af431a1f1 173 mbedtls_x509_csr_free( csr );
gustavatmel 1:9c5af431a1f1 174 return( MBEDTLS_ERR_X509_UNKNOWN_VERSION );
gustavatmel 1:9c5af431a1f1 175 }
gustavatmel 1:9c5af431a1f1 176
gustavatmel 1:9c5af431a1f1 177 csr->version++;
gustavatmel 1:9c5af431a1f1 178
gustavatmel 1:9c5af431a1f1 179 /*
gustavatmel 1:9c5af431a1f1 180 * subject Name
gustavatmel 1:9c5af431a1f1 181 */
gustavatmel 1:9c5af431a1f1 182 csr->subject_raw.p = p;
gustavatmel 1:9c5af431a1f1 183
gustavatmel 1:9c5af431a1f1 184 if( ( ret = mbedtls_asn1_get_tag( &p, end, &len,
gustavatmel 1:9c5af431a1f1 185 MBEDTLS_ASN1_CONSTRUCTED | MBEDTLS_ASN1_SEQUENCE ) ) != 0 )
gustavatmel 1:9c5af431a1f1 186 {
gustavatmel 1:9c5af431a1f1 187 mbedtls_x509_csr_free( csr );
gustavatmel 1:9c5af431a1f1 188 return( MBEDTLS_ERR_X509_INVALID_FORMAT + ret );
gustavatmel 1:9c5af431a1f1 189 }
gustavatmel 1:9c5af431a1f1 190
gustavatmel 1:9c5af431a1f1 191 if( ( ret = mbedtls_x509_get_name( &p, p + len, &csr->subject ) ) != 0 )
gustavatmel 1:9c5af431a1f1 192 {
gustavatmel 1:9c5af431a1f1 193 mbedtls_x509_csr_free( csr );
gustavatmel 1:9c5af431a1f1 194 return( ret );
gustavatmel 1:9c5af431a1f1 195 }
gustavatmel 1:9c5af431a1f1 196
gustavatmel 1:9c5af431a1f1 197 csr->subject_raw.len = p - csr->subject_raw.p;
gustavatmel 1:9c5af431a1f1 198
gustavatmel 1:9c5af431a1f1 199 /*
gustavatmel 1:9c5af431a1f1 200 * subjectPKInfo SubjectPublicKeyInfo
gustavatmel 1:9c5af431a1f1 201 */
gustavatmel 1:9c5af431a1f1 202 if( ( ret = mbedtls_pk_parse_subpubkey( &p, end, &csr->pk ) ) != 0 )
gustavatmel 1:9c5af431a1f1 203 {
gustavatmel 1:9c5af431a1f1 204 mbedtls_x509_csr_free( csr );
gustavatmel 1:9c5af431a1f1 205 return( ret );
gustavatmel 1:9c5af431a1f1 206 }
gustavatmel 1:9c5af431a1f1 207
gustavatmel 1:9c5af431a1f1 208 /*
gustavatmel 1:9c5af431a1f1 209 * attributes [0] Attributes
gustavatmel 1:9c5af431a1f1 210 *
gustavatmel 1:9c5af431a1f1 211 * The list of possible attributes is open-ended, though RFC 2985
gustavatmel 1:9c5af431a1f1 212 * (PKCS#9) defines a few in section 5.4. We currently don't support any,
gustavatmel 1:9c5af431a1f1 213 * so we just ignore them. This is a safe thing to do as the worst thing
gustavatmel 1:9c5af431a1f1 214 * that could happen is that we issue a certificate that does not match
gustavatmel 1:9c5af431a1f1 215 * the requester's expectations - this cannot cause a violation of our
gustavatmel 1:9c5af431a1f1 216 * signature policies.
gustavatmel 1:9c5af431a1f1 217 */
gustavatmel 1:9c5af431a1f1 218 if( ( ret = mbedtls_asn1_get_tag( &p, end, &len,
gustavatmel 1:9c5af431a1f1 219 MBEDTLS_ASN1_CONSTRUCTED | MBEDTLS_ASN1_CONTEXT_SPECIFIC ) ) != 0 )
gustavatmel 1:9c5af431a1f1 220 {
gustavatmel 1:9c5af431a1f1 221 mbedtls_x509_csr_free( csr );
gustavatmel 1:9c5af431a1f1 222 return( MBEDTLS_ERR_X509_INVALID_FORMAT + ret );
gustavatmel 1:9c5af431a1f1 223 }
gustavatmel 1:9c5af431a1f1 224
gustavatmel 1:9c5af431a1f1 225 p += len;
gustavatmel 1:9c5af431a1f1 226
gustavatmel 1:9c5af431a1f1 227 end = csr->raw.p + csr->raw.len;
gustavatmel 1:9c5af431a1f1 228
gustavatmel 1:9c5af431a1f1 229 /*
gustavatmel 1:9c5af431a1f1 230 * signatureAlgorithm AlgorithmIdentifier,
gustavatmel 1:9c5af431a1f1 231 * signature BIT STRING
gustavatmel 1:9c5af431a1f1 232 */
gustavatmel 1:9c5af431a1f1 233 if( ( ret = mbedtls_x509_get_alg( &p, end, &csr->sig_oid, &sig_params ) ) != 0 )
gustavatmel 1:9c5af431a1f1 234 {
gustavatmel 1:9c5af431a1f1 235 mbedtls_x509_csr_free( csr );
gustavatmel 1:9c5af431a1f1 236 return( ret );
gustavatmel 1:9c5af431a1f1 237 }
gustavatmel 1:9c5af431a1f1 238
gustavatmel 1:9c5af431a1f1 239 if( ( ret = mbedtls_x509_get_sig_alg( &csr->sig_oid, &sig_params,
gustavatmel 1:9c5af431a1f1 240 &csr->sig_md, &csr->sig_pk,
gustavatmel 1:9c5af431a1f1 241 &csr->sig_opts ) ) != 0 )
gustavatmel 1:9c5af431a1f1 242 {
gustavatmel 1:9c5af431a1f1 243 mbedtls_x509_csr_free( csr );
gustavatmel 1:9c5af431a1f1 244 return( MBEDTLS_ERR_X509_UNKNOWN_SIG_ALG );
gustavatmel 1:9c5af431a1f1 245 }
gustavatmel 1:9c5af431a1f1 246
gustavatmel 1:9c5af431a1f1 247 if( ( ret = mbedtls_x509_get_sig( &p, end, &csr->sig ) ) != 0 )
gustavatmel 1:9c5af431a1f1 248 {
gustavatmel 1:9c5af431a1f1 249 mbedtls_x509_csr_free( csr );
gustavatmel 1:9c5af431a1f1 250 return( ret );
gustavatmel 1:9c5af431a1f1 251 }
gustavatmel 1:9c5af431a1f1 252
gustavatmel 1:9c5af431a1f1 253 if( p != end )
gustavatmel 1:9c5af431a1f1 254 {
gustavatmel 1:9c5af431a1f1 255 mbedtls_x509_csr_free( csr );
gustavatmel 1:9c5af431a1f1 256 return( MBEDTLS_ERR_X509_INVALID_FORMAT +
gustavatmel 1:9c5af431a1f1 257 MBEDTLS_ERR_ASN1_LENGTH_MISMATCH );
gustavatmel 1:9c5af431a1f1 258 }
gustavatmel 1:9c5af431a1f1 259
gustavatmel 1:9c5af431a1f1 260 return( 0 );
gustavatmel 1:9c5af431a1f1 261 }
gustavatmel 1:9c5af431a1f1 262
gustavatmel 1:9c5af431a1f1 263 /*
gustavatmel 1:9c5af431a1f1 264 * Parse a CSR, allowing for PEM or raw DER encoding
gustavatmel 1:9c5af431a1f1 265 */
gustavatmel 1:9c5af431a1f1 266 int mbedtls_x509_csr_parse( mbedtls_x509_csr *csr, const unsigned char *buf, size_t buflen )
gustavatmel 1:9c5af431a1f1 267 {
gustavatmel 1:9c5af431a1f1 268 #if defined(MBEDTLS_PEM_PARSE_C)
gustavatmel 1:9c5af431a1f1 269 int ret;
gustavatmel 1:9c5af431a1f1 270 size_t use_len;
gustavatmel 1:9c5af431a1f1 271 mbedtls_pem_context pem;
gustavatmel 1:9c5af431a1f1 272 #endif
gustavatmel 1:9c5af431a1f1 273
gustavatmel 1:9c5af431a1f1 274 /*
gustavatmel 1:9c5af431a1f1 275 * Check for valid input
gustavatmel 1:9c5af431a1f1 276 */
gustavatmel 1:9c5af431a1f1 277 if( csr == NULL || buf == NULL || buflen == 0 )
gustavatmel 1:9c5af431a1f1 278 return( MBEDTLS_ERR_X509_BAD_INPUT_DATA );
gustavatmel 1:9c5af431a1f1 279
gustavatmel 1:9c5af431a1f1 280 #if defined(MBEDTLS_PEM_PARSE_C)
gustavatmel 1:9c5af431a1f1 281 mbedtls_pem_init( &pem );
gustavatmel 1:9c5af431a1f1 282
gustavatmel 1:9c5af431a1f1 283 /* Avoid calling mbedtls_pem_read_buffer() on non-null-terminated string */
gustavatmel 1:9c5af431a1f1 284 if( buf[buflen - 1] != '\0' )
gustavatmel 1:9c5af431a1f1 285 ret = MBEDTLS_ERR_PEM_NO_HEADER_FOOTER_PRESENT;
gustavatmel 1:9c5af431a1f1 286 else
gustavatmel 1:9c5af431a1f1 287 ret = mbedtls_pem_read_buffer( &pem,
gustavatmel 1:9c5af431a1f1 288 "-----BEGIN CERTIFICATE REQUEST-----",
gustavatmel 1:9c5af431a1f1 289 "-----END CERTIFICATE REQUEST-----",
gustavatmel 1:9c5af431a1f1 290 buf, NULL, 0, &use_len );
gustavatmel 1:9c5af431a1f1 291
gustavatmel 1:9c5af431a1f1 292 if( ret == 0 )
gustavatmel 1:9c5af431a1f1 293 {
gustavatmel 1:9c5af431a1f1 294 /*
gustavatmel 1:9c5af431a1f1 295 * Was PEM encoded, parse the result
gustavatmel 1:9c5af431a1f1 296 */
gustavatmel 1:9c5af431a1f1 297 if( ( ret = mbedtls_x509_csr_parse_der( csr, pem.buf, pem.buflen ) ) != 0 )
gustavatmel 1:9c5af431a1f1 298 return( ret );
gustavatmel 1:9c5af431a1f1 299
gustavatmel 1:9c5af431a1f1 300 mbedtls_pem_free( &pem );
gustavatmel 1:9c5af431a1f1 301 return( 0 );
gustavatmel 1:9c5af431a1f1 302 }
gustavatmel 1:9c5af431a1f1 303 else if( ret != MBEDTLS_ERR_PEM_NO_HEADER_FOOTER_PRESENT )
gustavatmel 1:9c5af431a1f1 304 {
gustavatmel 1:9c5af431a1f1 305 mbedtls_pem_free( &pem );
gustavatmel 1:9c5af431a1f1 306 return( ret );
gustavatmel 1:9c5af431a1f1 307 }
gustavatmel 1:9c5af431a1f1 308 else
gustavatmel 1:9c5af431a1f1 309 #endif /* MBEDTLS_PEM_PARSE_C */
gustavatmel 1:9c5af431a1f1 310 return( mbedtls_x509_csr_parse_der( csr, buf, buflen ) );
gustavatmel 1:9c5af431a1f1 311 }
gustavatmel 1:9c5af431a1f1 312
gustavatmel 1:9c5af431a1f1 313 #if defined(MBEDTLS_FS_IO)
gustavatmel 1:9c5af431a1f1 314 /*
gustavatmel 1:9c5af431a1f1 315 * Load a CSR into the structure
gustavatmel 1:9c5af431a1f1 316 */
gustavatmel 1:9c5af431a1f1 317 int mbedtls_x509_csr_parse_file( mbedtls_x509_csr *csr, const char *path )
gustavatmel 1:9c5af431a1f1 318 {
gustavatmel 1:9c5af431a1f1 319 int ret;
gustavatmel 1:9c5af431a1f1 320 size_t n;
gustavatmel 1:9c5af431a1f1 321 unsigned char *buf;
gustavatmel 1:9c5af431a1f1 322
gustavatmel 1:9c5af431a1f1 323 if( ( ret = mbedtls_pk_load_file( path, &buf, &n ) ) != 0 )
gustavatmel 1:9c5af431a1f1 324 return( ret );
gustavatmel 1:9c5af431a1f1 325
gustavatmel 1:9c5af431a1f1 326 ret = mbedtls_x509_csr_parse( csr, buf, n );
gustavatmel 1:9c5af431a1f1 327
gustavatmel 1:9c5af431a1f1 328 mbedtls_zeroize( buf, n );
gustavatmel 1:9c5af431a1f1 329 mbedtls_free( buf );
gustavatmel 1:9c5af431a1f1 330
gustavatmel 1:9c5af431a1f1 331 return( ret );
gustavatmel 1:9c5af431a1f1 332 }
gustavatmel 1:9c5af431a1f1 333 #endif /* MBEDTLS_FS_IO */
gustavatmel 1:9c5af431a1f1 334
gustavatmel 1:9c5af431a1f1 335 #define BEFORE_COLON 14
gustavatmel 1:9c5af431a1f1 336 #define BC "14"
gustavatmel 1:9c5af431a1f1 337 /*
gustavatmel 1:9c5af431a1f1 338 * Return an informational string about the CSR.
gustavatmel 1:9c5af431a1f1 339 */
gustavatmel 1:9c5af431a1f1 340 int mbedtls_x509_csr_info( char *buf, size_t size, const char *prefix,
gustavatmel 1:9c5af431a1f1 341 const mbedtls_x509_csr *csr )
gustavatmel 1:9c5af431a1f1 342 {
gustavatmel 1:9c5af431a1f1 343 int ret;
gustavatmel 1:9c5af431a1f1 344 size_t n;
gustavatmel 1:9c5af431a1f1 345 char *p;
gustavatmel 1:9c5af431a1f1 346 char key_size_str[BEFORE_COLON];
gustavatmel 1:9c5af431a1f1 347
gustavatmel 1:9c5af431a1f1 348 p = buf;
gustavatmel 1:9c5af431a1f1 349 n = size;
gustavatmel 1:9c5af431a1f1 350
gustavatmel 1:9c5af431a1f1 351 ret = mbedtls_snprintf( p, n, "%sCSR version : %d",
gustavatmel 1:9c5af431a1f1 352 prefix, csr->version );
gustavatmel 1:9c5af431a1f1 353 MBEDTLS_X509_SAFE_SNPRINTF;
gustavatmel 1:9c5af431a1f1 354
gustavatmel 1:9c5af431a1f1 355 ret = mbedtls_snprintf( p, n, "\n%ssubject name : ", prefix );
gustavatmel 1:9c5af431a1f1 356 MBEDTLS_X509_SAFE_SNPRINTF;
gustavatmel 1:9c5af431a1f1 357 ret = mbedtls_x509_dn_gets( p, n, &csr->subject );
gustavatmel 1:9c5af431a1f1 358 MBEDTLS_X509_SAFE_SNPRINTF;
gustavatmel 1:9c5af431a1f1 359
gustavatmel 1:9c5af431a1f1 360 ret = mbedtls_snprintf( p, n, "\n%ssigned using : ", prefix );
gustavatmel 1:9c5af431a1f1 361 MBEDTLS_X509_SAFE_SNPRINTF;
gustavatmel 1:9c5af431a1f1 362
gustavatmel 1:9c5af431a1f1 363 ret = mbedtls_x509_sig_alg_gets( p, n, &csr->sig_oid, csr->sig_pk, csr->sig_md,
gustavatmel 1:9c5af431a1f1 364 csr->sig_opts );
gustavatmel 1:9c5af431a1f1 365 MBEDTLS_X509_SAFE_SNPRINTF;
gustavatmel 1:9c5af431a1f1 366
gustavatmel 1:9c5af431a1f1 367 if( ( ret = mbedtls_x509_key_size_helper( key_size_str, BEFORE_COLON,
gustavatmel 1:9c5af431a1f1 368 mbedtls_pk_get_name( &csr->pk ) ) ) != 0 )
gustavatmel 1:9c5af431a1f1 369 {
gustavatmel 1:9c5af431a1f1 370 return( ret );
gustavatmel 1:9c5af431a1f1 371 }
gustavatmel 1:9c5af431a1f1 372
gustavatmel 1:9c5af431a1f1 373 ret = mbedtls_snprintf( p, n, "\n%s%-" BC "s: %d bits\n", prefix, key_size_str,
gustavatmel 1:9c5af431a1f1 374 (int) mbedtls_pk_get_bitlen( &csr->pk ) );
gustavatmel 1:9c5af431a1f1 375 MBEDTLS_X509_SAFE_SNPRINTF;
gustavatmel 1:9c5af431a1f1 376
gustavatmel 1:9c5af431a1f1 377 return( (int) ( size - n ) );
gustavatmel 1:9c5af431a1f1 378 }
gustavatmel 1:9c5af431a1f1 379
gustavatmel 1:9c5af431a1f1 380 /*
gustavatmel 1:9c5af431a1f1 381 * Initialize a CSR
gustavatmel 1:9c5af431a1f1 382 */
gustavatmel 1:9c5af431a1f1 383 void mbedtls_x509_csr_init( mbedtls_x509_csr *csr )
gustavatmel 1:9c5af431a1f1 384 {
gustavatmel 1:9c5af431a1f1 385 memset( csr, 0, sizeof(mbedtls_x509_csr) );
gustavatmel 1:9c5af431a1f1 386 }
gustavatmel 1:9c5af431a1f1 387
gustavatmel 1:9c5af431a1f1 388 /*
gustavatmel 1:9c5af431a1f1 389 * Unallocate all CSR data
gustavatmel 1:9c5af431a1f1 390 */
gustavatmel 1:9c5af431a1f1 391 void mbedtls_x509_csr_free( mbedtls_x509_csr *csr )
gustavatmel 1:9c5af431a1f1 392 {
gustavatmel 1:9c5af431a1f1 393 mbedtls_x509_name *name_cur;
gustavatmel 1:9c5af431a1f1 394 mbedtls_x509_name *name_prv;
gustavatmel 1:9c5af431a1f1 395
gustavatmel 1:9c5af431a1f1 396 if( csr == NULL )
gustavatmel 1:9c5af431a1f1 397 return;
gustavatmel 1:9c5af431a1f1 398
gustavatmel 1:9c5af431a1f1 399 mbedtls_pk_free( &csr->pk );
gustavatmel 1:9c5af431a1f1 400
gustavatmel 1:9c5af431a1f1 401 #if defined(MBEDTLS_X509_RSASSA_PSS_SUPPORT)
gustavatmel 1:9c5af431a1f1 402 mbedtls_free( csr->sig_opts );
gustavatmel 1:9c5af431a1f1 403 #endif
gustavatmel 1:9c5af431a1f1 404
gustavatmel 1:9c5af431a1f1 405 name_cur = csr->subject.next;
gustavatmel 1:9c5af431a1f1 406 while( name_cur != NULL )
gustavatmel 1:9c5af431a1f1 407 {
gustavatmel 1:9c5af431a1f1 408 name_prv = name_cur;
gustavatmel 1:9c5af431a1f1 409 name_cur = name_cur->next;
gustavatmel 1:9c5af431a1f1 410 mbedtls_zeroize( name_prv, sizeof( mbedtls_x509_name ) );
gustavatmel 1:9c5af431a1f1 411 mbedtls_free( name_prv );
gustavatmel 1:9c5af431a1f1 412 }
gustavatmel 1:9c5af431a1f1 413
gustavatmel 1:9c5af431a1f1 414 if( csr->raw.p != NULL )
gustavatmel 1:9c5af431a1f1 415 {
gustavatmel 1:9c5af431a1f1 416 mbedtls_zeroize( csr->raw.p, csr->raw.len );
gustavatmel 1:9c5af431a1f1 417 mbedtls_free( csr->raw.p );
gustavatmel 1:9c5af431a1f1 418 }
gustavatmel 1:9c5af431a1f1 419
gustavatmel 1:9c5af431a1f1 420 mbedtls_zeroize( csr, sizeof( mbedtls_x509_csr ) );
gustavatmel 1:9c5af431a1f1 421 }
gustavatmel 1:9c5af431a1f1 422
gustavatmel 1:9c5af431a1f1 423 #endif /* MBEDTLS_X509_CSR_PARSE_C */