BA / SerialCom

Important changes to repositories hosted on mbed.com

Mbed hosted mercurial repositories are deprecated and are due to be permanently deleted in July 2026.

To keep a copy of this software download the repository Zip archive or clone locally using Mercurial.

It is also possible to export all your personal repositories from the account settings page.

Fork of OmniWheels by Gustav Atmel

mbed-os/features/mbedtls/src/x509_create.c@2:798925c9e4a8, 2018-05-01 (annotated)

Committer:
gustavatmel
Date:
Tue May 01 15:55:34 2018 +0000
Revision:
2:798925c9e4a8
Parent:
1:9c5af431a1f1 
bluetooth

Who changed what in which revision?

UserRevisionLine numberNew contents of line
gustavatmel 1:9c5af431a1f1 1 /*
gustavatmel 1:9c5af431a1f1 2 * X.509 base functions for creating certificates / CSRs
gustavatmel 1:9c5af431a1f1 3 *
gustavatmel 1:9c5af431a1f1 4 * Copyright (C) 2006-2015, ARM Limited, All Rights Reserved
gustavatmel 1:9c5af431a1f1 5 * SPDX-License-Identifier: Apache-2.0
gustavatmel 1:9c5af431a1f1 6 *
gustavatmel 1:9c5af431a1f1 7 * Licensed under the Apache License, Version 2.0 (the "License"); you may
gustavatmel 1:9c5af431a1f1 8 * not use this file except in compliance with the License.
gustavatmel 1:9c5af431a1f1 9 * You may obtain a copy of the License at
gustavatmel 1:9c5af431a1f1 10 *
gustavatmel 1:9c5af431a1f1 11 * http://www.apache.org/licenses/LICENSE-2.0
gustavatmel 1:9c5af431a1f1 12 *
gustavatmel 1:9c5af431a1f1 13 * Unless required by applicable law or agreed to in writing, software
gustavatmel 1:9c5af431a1f1 14 * distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
gustavatmel 1:9c5af431a1f1 15 * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
gustavatmel 1:9c5af431a1f1 16 * See the License for the specific language governing permissions and
gustavatmel 1:9c5af431a1f1 17 * limitations under the License.
gustavatmel 1:9c5af431a1f1 18 *
gustavatmel 1:9c5af431a1f1 19 * This file is part of mbed TLS (https://tls.mbed.org)
gustavatmel 1:9c5af431a1f1 20 */
gustavatmel 1:9c5af431a1f1 21
gustavatmel 1:9c5af431a1f1 22 #if !defined(MBEDTLS_CONFIG_FILE)
gustavatmel 1:9c5af431a1f1 23 #include "mbedtls/config.h"
gustavatmel 1:9c5af431a1f1 24 #else
gustavatmel 1:9c5af431a1f1 25 #include MBEDTLS_CONFIG_FILE
gustavatmel 1:9c5af431a1f1 26 #endif
gustavatmel 1:9c5af431a1f1 27
gustavatmel 1:9c5af431a1f1 28 #if defined(MBEDTLS_X509_CREATE_C)
gustavatmel 1:9c5af431a1f1 29
gustavatmel 1:9c5af431a1f1 30 #include "mbedtls/x509.h"
gustavatmel 1:9c5af431a1f1 31 #include "mbedtls/asn1write.h"
gustavatmel 1:9c5af431a1f1 32 #include "mbedtls/oid.h"
gustavatmel 1:9c5af431a1f1 33
gustavatmel 1:9c5af431a1f1 34 #include <string.h>
gustavatmel 1:9c5af431a1f1 35
gustavatmel 1:9c5af431a1f1 36 typedef struct {
gustavatmel 1:9c5af431a1f1 37 const char *name;
gustavatmel 1:9c5af431a1f1 38 size_t name_len;
gustavatmel 1:9c5af431a1f1 39 const char*oid;
gustavatmel 1:9c5af431a1f1 40 } x509_attr_descriptor_t;
gustavatmel 1:9c5af431a1f1 41
gustavatmel 1:9c5af431a1f1 42 #define ADD_STRLEN( s ) s, sizeof( s ) - 1
gustavatmel 1:9c5af431a1f1 43
gustavatmel 1:9c5af431a1f1 44 static const x509_attr_descriptor_t x509_attrs[] =
gustavatmel 1:9c5af431a1f1 45 {
gustavatmel 1:9c5af431a1f1 46 { ADD_STRLEN( "CN" ), MBEDTLS_OID_AT_CN },
gustavatmel 1:9c5af431a1f1 47 { ADD_STRLEN( "commonName" ), MBEDTLS_OID_AT_CN },
gustavatmel 1:9c5af431a1f1 48 { ADD_STRLEN( "C" ), MBEDTLS_OID_AT_COUNTRY },
gustavatmel 1:9c5af431a1f1 49 { ADD_STRLEN( "countryName" ), MBEDTLS_OID_AT_COUNTRY },
gustavatmel 1:9c5af431a1f1 50 { ADD_STRLEN( "O" ), MBEDTLS_OID_AT_ORGANIZATION },
gustavatmel 1:9c5af431a1f1 51 { ADD_STRLEN( "organizationName" ), MBEDTLS_OID_AT_ORGANIZATION },
gustavatmel 1:9c5af431a1f1 52 { ADD_STRLEN( "L" ), MBEDTLS_OID_AT_LOCALITY },
gustavatmel 1:9c5af431a1f1 53 { ADD_STRLEN( "locality" ), MBEDTLS_OID_AT_LOCALITY },
gustavatmel 1:9c5af431a1f1 54 { ADD_STRLEN( "R" ), MBEDTLS_OID_PKCS9_EMAIL },
gustavatmel 1:9c5af431a1f1 55 { ADD_STRLEN( "OU" ), MBEDTLS_OID_AT_ORG_UNIT },
gustavatmel 1:9c5af431a1f1 56 { ADD_STRLEN( "organizationalUnitName" ), MBEDTLS_OID_AT_ORG_UNIT },
gustavatmel 1:9c5af431a1f1 57 { ADD_STRLEN( "ST" ), MBEDTLS_OID_AT_STATE },
gustavatmel 1:9c5af431a1f1 58 { ADD_STRLEN( "stateOrProvinceName" ), MBEDTLS_OID_AT_STATE },
gustavatmel 1:9c5af431a1f1 59 { ADD_STRLEN( "emailAddress" ), MBEDTLS_OID_PKCS9_EMAIL },
gustavatmel 1:9c5af431a1f1 60 { ADD_STRLEN( "serialNumber" ), MBEDTLS_OID_AT_SERIAL_NUMBER },
gustavatmel 1:9c5af431a1f1 61 { ADD_STRLEN( "postalAddress" ), MBEDTLS_OID_AT_POSTAL_ADDRESS },
gustavatmel 1:9c5af431a1f1 62 { ADD_STRLEN( "postalCode" ), MBEDTLS_OID_AT_POSTAL_CODE },
gustavatmel 1:9c5af431a1f1 63 { ADD_STRLEN( "dnQualifier" ), MBEDTLS_OID_AT_DN_QUALIFIER },
gustavatmel 1:9c5af431a1f1 64 { ADD_STRLEN( "title" ), MBEDTLS_OID_AT_TITLE },
gustavatmel 1:9c5af431a1f1 65 { ADD_STRLEN( "surName" ), MBEDTLS_OID_AT_SUR_NAME },
gustavatmel 1:9c5af431a1f1 66 { ADD_STRLEN( "SN" ), MBEDTLS_OID_AT_SUR_NAME },
gustavatmel 1:9c5af431a1f1 67 { ADD_STRLEN( "givenName" ), MBEDTLS_OID_AT_GIVEN_NAME },
gustavatmel 1:9c5af431a1f1 68 { ADD_STRLEN( "GN" ), MBEDTLS_OID_AT_GIVEN_NAME },
gustavatmel 1:9c5af431a1f1 69 { ADD_STRLEN( "initials" ), MBEDTLS_OID_AT_INITIALS },
gustavatmel 1:9c5af431a1f1 70 { ADD_STRLEN( "pseudonym" ), MBEDTLS_OID_AT_PSEUDONYM },
gustavatmel 1:9c5af431a1f1 71 { ADD_STRLEN( "generationQualifier" ), MBEDTLS_OID_AT_GENERATION_QUALIFIER },
gustavatmel 1:9c5af431a1f1 72 { ADD_STRLEN( "domainComponent" ), MBEDTLS_OID_DOMAIN_COMPONENT },
gustavatmel 1:9c5af431a1f1 73 { ADD_STRLEN( "DC" ), MBEDTLS_OID_DOMAIN_COMPONENT },
gustavatmel 1:9c5af431a1f1 74 { NULL, 0, NULL }
gustavatmel 1:9c5af431a1f1 75 };
gustavatmel 1:9c5af431a1f1 76
gustavatmel 1:9c5af431a1f1 77 static const char *x509_at_oid_from_name( const char *name, size_t name_len )
gustavatmel 1:9c5af431a1f1 78 {
gustavatmel 1:9c5af431a1f1 79 const x509_attr_descriptor_t *cur;
gustavatmel 1:9c5af431a1f1 80
gustavatmel 1:9c5af431a1f1 81 for( cur = x509_attrs; cur->name != NULL; cur++ )
gustavatmel 1:9c5af431a1f1 82 if( cur->name_len == name_len &&
gustavatmel 1:9c5af431a1f1 83 strncmp( cur->name, name, name_len ) == 0 )
gustavatmel 1:9c5af431a1f1 84 break;
gustavatmel 1:9c5af431a1f1 85
gustavatmel 1:9c5af431a1f1 86 return( cur->oid );
gustavatmel 1:9c5af431a1f1 87 }
gustavatmel 1:9c5af431a1f1 88
gustavatmel 1:9c5af431a1f1 89 int mbedtls_x509_string_to_names( mbedtls_asn1_named_data **head, const char *name )
gustavatmel 1:9c5af431a1f1 90 {
gustavatmel 1:9c5af431a1f1 91 int ret = 0;
gustavatmel 1:9c5af431a1f1 92 const char *s = name, *c = s;
gustavatmel 1:9c5af431a1f1 93 const char *end = s + strlen( s );
gustavatmel 1:9c5af431a1f1 94 const char *oid = NULL;
gustavatmel 1:9c5af431a1f1 95 int in_tag = 1;
gustavatmel 1:9c5af431a1f1 96 char data[MBEDTLS_X509_MAX_DN_NAME_SIZE];
gustavatmel 1:9c5af431a1f1 97 char *d = data;
gustavatmel 1:9c5af431a1f1 98
gustavatmel 1:9c5af431a1f1 99 /* Clear existing chain if present */
gustavatmel 1:9c5af431a1f1 100 mbedtls_asn1_free_named_data_list( head );
gustavatmel 1:9c5af431a1f1 101
gustavatmel 1:9c5af431a1f1 102 while( c <= end )
gustavatmel 1:9c5af431a1f1 103 {
gustavatmel 1:9c5af431a1f1 104 if( in_tag && *c == '=' )
gustavatmel 1:9c5af431a1f1 105 {
gustavatmel 1:9c5af431a1f1 106 if( ( oid = x509_at_oid_from_name( s, c - s ) ) == NULL )
gustavatmel 1:9c5af431a1f1 107 {
gustavatmel 1:9c5af431a1f1 108 ret = MBEDTLS_ERR_X509_UNKNOWN_OID;
gustavatmel 1:9c5af431a1f1 109 goto exit;
gustavatmel 1:9c5af431a1f1 110 }
gustavatmel 1:9c5af431a1f1 111
gustavatmel 1:9c5af431a1f1 112 s = c + 1;
gustavatmel 1:9c5af431a1f1 113 in_tag = 0;
gustavatmel 1:9c5af431a1f1 114 d = data;
gustavatmel 1:9c5af431a1f1 115 }
gustavatmel 1:9c5af431a1f1 116
gustavatmel 1:9c5af431a1f1 117 if( !in_tag && *c == '\\' && c != end )
gustavatmel 1:9c5af431a1f1 118 {
gustavatmel 1:9c5af431a1f1 119 c++;
gustavatmel 1:9c5af431a1f1 120
gustavatmel 1:9c5af431a1f1 121 /* Check for valid escaped characters */
gustavatmel 1:9c5af431a1f1 122 if( c == end || *c != ',' )
gustavatmel 1:9c5af431a1f1 123 {
gustavatmel 1:9c5af431a1f1 124 ret = MBEDTLS_ERR_X509_INVALID_NAME;
gustavatmel 1:9c5af431a1f1 125 goto exit;
gustavatmel 1:9c5af431a1f1 126 }
gustavatmel 1:9c5af431a1f1 127 }
gustavatmel 1:9c5af431a1f1 128 else if( !in_tag && ( *c == ',' || c == end ) )
gustavatmel 1:9c5af431a1f1 129 {
gustavatmel 1:9c5af431a1f1 130 if( mbedtls_asn1_store_named_data( head, oid, strlen( oid ),
gustavatmel 1:9c5af431a1f1 131 (unsigned char *) data,
gustavatmel 1:9c5af431a1f1 132 d - data ) == NULL )
gustavatmel 1:9c5af431a1f1 133 {
gustavatmel 1:9c5af431a1f1 134 return( MBEDTLS_ERR_X509_ALLOC_FAILED );
gustavatmel 1:9c5af431a1f1 135 }
gustavatmel 1:9c5af431a1f1 136
gustavatmel 1:9c5af431a1f1 137 while( c < end && *(c + 1) == ' ' )
gustavatmel 1:9c5af431a1f1 138 c++;
gustavatmel 1:9c5af431a1f1 139
gustavatmel 1:9c5af431a1f1 140 s = c + 1;
gustavatmel 1:9c5af431a1f1 141 in_tag = 1;
gustavatmel 1:9c5af431a1f1 142 }
gustavatmel 1:9c5af431a1f1 143
gustavatmel 1:9c5af431a1f1 144 if( !in_tag && s != c + 1 )
gustavatmel 1:9c5af431a1f1 145 {
gustavatmel 1:9c5af431a1f1 146 *(d++) = *c;
gustavatmel 1:9c5af431a1f1 147
gustavatmel 1:9c5af431a1f1 148 if( d - data == MBEDTLS_X509_MAX_DN_NAME_SIZE )
gustavatmel 1:9c5af431a1f1 149 {
gustavatmel 1:9c5af431a1f1 150 ret = MBEDTLS_ERR_X509_INVALID_NAME;
gustavatmel 1:9c5af431a1f1 151 goto exit;
gustavatmel 1:9c5af431a1f1 152 }
gustavatmel 1:9c5af431a1f1 153 }
gustavatmel 1:9c5af431a1f1 154
gustavatmel 1:9c5af431a1f1 155 c++;
gustavatmel 1:9c5af431a1f1 156 }
gustavatmel 1:9c5af431a1f1 157
gustavatmel 1:9c5af431a1f1 158 exit:
gustavatmel 1:9c5af431a1f1 159
gustavatmel 1:9c5af431a1f1 160 return( ret );
gustavatmel 1:9c5af431a1f1 161 }
gustavatmel 1:9c5af431a1f1 162
gustavatmel 1:9c5af431a1f1 163 /* The first byte of the value in the mbedtls_asn1_named_data structure is reserved
gustavatmel 1:9c5af431a1f1 164 * to store the critical boolean for us
gustavatmel 1:9c5af431a1f1 165 */
gustavatmel 1:9c5af431a1f1 166 int mbedtls_x509_set_extension( mbedtls_asn1_named_data **head, const char *oid, size_t oid_len,
gustavatmel 1:9c5af431a1f1 167 int critical, const unsigned char *val, size_t val_len )
gustavatmel 1:9c5af431a1f1 168 {
gustavatmel 1:9c5af431a1f1 169 mbedtls_asn1_named_data *cur;
gustavatmel 1:9c5af431a1f1 170
gustavatmel 1:9c5af431a1f1 171 if( ( cur = mbedtls_asn1_store_named_data( head, oid, oid_len,
gustavatmel 1:9c5af431a1f1 172 NULL, val_len + 1 ) ) == NULL )
gustavatmel 1:9c5af431a1f1 173 {
gustavatmel 1:9c5af431a1f1 174 return( MBEDTLS_ERR_X509_ALLOC_FAILED );
gustavatmel 1:9c5af431a1f1 175 }
gustavatmel 1:9c5af431a1f1 176
gustavatmel 1:9c5af431a1f1 177 cur->val.p[0] = critical;
gustavatmel 1:9c5af431a1f1 178 memcpy( cur->val.p + 1, val, val_len );
gustavatmel 1:9c5af431a1f1 179
gustavatmel 1:9c5af431a1f1 180 return( 0 );
gustavatmel 1:9c5af431a1f1 181 }
gustavatmel 1:9c5af431a1f1 182
gustavatmel 1:9c5af431a1f1 183 /*
gustavatmel 1:9c5af431a1f1 184 * RelativeDistinguishedName ::=
gustavatmel 1:9c5af431a1f1 185 * SET OF AttributeTypeAndValue
gustavatmel 1:9c5af431a1f1 186 *
gustavatmel 1:9c5af431a1f1 187 * AttributeTypeAndValue ::= SEQUENCE {
gustavatmel 1:9c5af431a1f1 188 * type AttributeType,
gustavatmel 1:9c5af431a1f1 189 * value AttributeValue }
gustavatmel 1:9c5af431a1f1 190 *
gustavatmel 1:9c5af431a1f1 191 * AttributeType ::= OBJECT IDENTIFIER
gustavatmel 1:9c5af431a1f1 192 *
gustavatmel 1:9c5af431a1f1 193 * AttributeValue ::= ANY DEFINED BY AttributeType
gustavatmel 1:9c5af431a1f1 194 */
gustavatmel 1:9c5af431a1f1 195 static int x509_write_name( unsigned char **p, unsigned char *start,
gustavatmel 1:9c5af431a1f1 196 const char *oid, size_t oid_len,
gustavatmel 1:9c5af431a1f1 197 const unsigned char *name, size_t name_len )
gustavatmel 1:9c5af431a1f1 198 {
gustavatmel 1:9c5af431a1f1 199 int ret;
gustavatmel 1:9c5af431a1f1 200 size_t len = 0;
gustavatmel 1:9c5af431a1f1 201
gustavatmel 1:9c5af431a1f1 202 // Write PrintableString for all except MBEDTLS_OID_PKCS9_EMAIL
gustavatmel 1:9c5af431a1f1 203 //
gustavatmel 1:9c5af431a1f1 204 if( MBEDTLS_OID_SIZE( MBEDTLS_OID_PKCS9_EMAIL ) == oid_len &&
gustavatmel 1:9c5af431a1f1 205 memcmp( oid, MBEDTLS_OID_PKCS9_EMAIL, oid_len ) == 0 )
gustavatmel 1:9c5af431a1f1 206 {
gustavatmel 1:9c5af431a1f1 207 MBEDTLS_ASN1_CHK_ADD( len, mbedtls_asn1_write_ia5_string( p, start,
gustavatmel 1:9c5af431a1f1 208 (const char *) name,
gustavatmel 1:9c5af431a1f1 209 name_len ) );
gustavatmel 1:9c5af431a1f1 210 }
gustavatmel 1:9c5af431a1f1 211 else
gustavatmel 1:9c5af431a1f1 212 {
gustavatmel 1:9c5af431a1f1 213 MBEDTLS_ASN1_CHK_ADD( len, mbedtls_asn1_write_printable_string( p, start,
gustavatmel 1:9c5af431a1f1 214 (const char *) name,
gustavatmel 1:9c5af431a1f1 215 name_len ) );
gustavatmel 1:9c5af431a1f1 216 }
gustavatmel 1:9c5af431a1f1 217
gustavatmel 1:9c5af431a1f1 218 // Write OID
gustavatmel 1:9c5af431a1f1 219 //
gustavatmel 1:9c5af431a1f1 220 MBEDTLS_ASN1_CHK_ADD( len, mbedtls_asn1_write_oid( p, start, oid, oid_len ) );
gustavatmel 1:9c5af431a1f1 221
gustavatmel 1:9c5af431a1f1 222 MBEDTLS_ASN1_CHK_ADD( len, mbedtls_asn1_write_len( p, start, len ) );
gustavatmel 1:9c5af431a1f1 223 MBEDTLS_ASN1_CHK_ADD( len, mbedtls_asn1_write_tag( p, start, MBEDTLS_ASN1_CONSTRUCTED |
gustavatmel 1:9c5af431a1f1 224 MBEDTLS_ASN1_SEQUENCE ) );
gustavatmel 1:9c5af431a1f1 225
gustavatmel 1:9c5af431a1f1 226 MBEDTLS_ASN1_CHK_ADD( len, mbedtls_asn1_write_len( p, start, len ) );
gustavatmel 1:9c5af431a1f1 227 MBEDTLS_ASN1_CHK_ADD( len, mbedtls_asn1_write_tag( p, start, MBEDTLS_ASN1_CONSTRUCTED |
gustavatmel 1:9c5af431a1f1 228 MBEDTLS_ASN1_SET ) );
gustavatmel 1:9c5af431a1f1 229
gustavatmel 1:9c5af431a1f1 230 return( (int) len );
gustavatmel 1:9c5af431a1f1 231 }
gustavatmel 1:9c5af431a1f1 232
gustavatmel 1:9c5af431a1f1 233 int mbedtls_x509_write_names( unsigned char **p, unsigned char *start,
gustavatmel 1:9c5af431a1f1 234 mbedtls_asn1_named_data *first )
gustavatmel 1:9c5af431a1f1 235 {
gustavatmel 1:9c5af431a1f1 236 int ret;
gustavatmel 1:9c5af431a1f1 237 size_t len = 0;
gustavatmel 1:9c5af431a1f1 238 mbedtls_asn1_named_data *cur = first;
gustavatmel 1:9c5af431a1f1 239
gustavatmel 1:9c5af431a1f1 240 while( cur != NULL )
gustavatmel 1:9c5af431a1f1 241 {
gustavatmel 1:9c5af431a1f1 242 MBEDTLS_ASN1_CHK_ADD( len, x509_write_name( p, start, (char *) cur->oid.p,
gustavatmel 1:9c5af431a1f1 243 cur->oid.len,
gustavatmel 1:9c5af431a1f1 244 cur->val.p, cur->val.len ) );
gustavatmel 1:9c5af431a1f1 245 cur = cur->next;
gustavatmel 1:9c5af431a1f1 246 }
gustavatmel 1:9c5af431a1f1 247
gustavatmel 1:9c5af431a1f1 248 MBEDTLS_ASN1_CHK_ADD( len, mbedtls_asn1_write_len( p, start, len ) );
gustavatmel 1:9c5af431a1f1 249 MBEDTLS_ASN1_CHK_ADD( len, mbedtls_asn1_write_tag( p, start, MBEDTLS_ASN1_CONSTRUCTED |
gustavatmel 1:9c5af431a1f1 250 MBEDTLS_ASN1_SEQUENCE ) );
gustavatmel 1:9c5af431a1f1 251
gustavatmel 1:9c5af431a1f1 252 return( (int) len );
gustavatmel 1:9c5af431a1f1 253 }
gustavatmel 1:9c5af431a1f1 254
gustavatmel 1:9c5af431a1f1 255 int mbedtls_x509_write_sig( unsigned char **p, unsigned char *start,
gustavatmel 1:9c5af431a1f1 256 const char *oid, size_t oid_len,
gustavatmel 1:9c5af431a1f1 257 unsigned char *sig, size_t size )
gustavatmel 1:9c5af431a1f1 258 {
gustavatmel 1:9c5af431a1f1 259 int ret;
gustavatmel 1:9c5af431a1f1 260 size_t len = 0;
gustavatmel 1:9c5af431a1f1 261
gustavatmel 1:9c5af431a1f1 262 if( *p < start || (size_t)( *p - start ) < size )
gustavatmel 1:9c5af431a1f1 263 return( MBEDTLS_ERR_ASN1_BUF_TOO_SMALL );
gustavatmel 1:9c5af431a1f1 264
gustavatmel 1:9c5af431a1f1 265 len = size;
gustavatmel 1:9c5af431a1f1 266 (*p) -= len;
gustavatmel 1:9c5af431a1f1 267 memcpy( *p, sig, len );
gustavatmel 1:9c5af431a1f1 268
gustavatmel 1:9c5af431a1f1 269 if( *p - start < 1 )
gustavatmel 1:9c5af431a1f1 270 return( MBEDTLS_ERR_ASN1_BUF_TOO_SMALL );
gustavatmel 1:9c5af431a1f1 271
gustavatmel 1:9c5af431a1f1 272 *--(*p) = 0;
gustavatmel 1:9c5af431a1f1 273 len += 1;
gustavatmel 1:9c5af431a1f1 274
gustavatmel 1:9c5af431a1f1 275 MBEDTLS_ASN1_CHK_ADD( len, mbedtls_asn1_write_len( p, start, len ) );
gustavatmel 1:9c5af431a1f1 276 MBEDTLS_ASN1_CHK_ADD( len, mbedtls_asn1_write_tag( p, start, MBEDTLS_ASN1_BIT_STRING ) );
gustavatmel 1:9c5af431a1f1 277
gustavatmel 1:9c5af431a1f1 278 // Write OID
gustavatmel 1:9c5af431a1f1 279 //
gustavatmel 1:9c5af431a1f1 280 MBEDTLS_ASN1_CHK_ADD( len, mbedtls_asn1_write_algorithm_identifier( p, start, oid,
gustavatmel 1:9c5af431a1f1 281 oid_len, 0 ) );
gustavatmel 1:9c5af431a1f1 282
gustavatmel 1:9c5af431a1f1 283 return( (int) len );
gustavatmel 1:9c5af431a1f1 284 }
gustavatmel 1:9c5af431a1f1 285
gustavatmel 1:9c5af431a1f1 286 static int x509_write_extension( unsigned char **p, unsigned char *start,
gustavatmel 1:9c5af431a1f1 287 mbedtls_asn1_named_data *ext )
gustavatmel 1:9c5af431a1f1 288 {
gustavatmel 1:9c5af431a1f1 289 int ret;
gustavatmel 1:9c5af431a1f1 290 size_t len = 0;
gustavatmel 1:9c5af431a1f1 291
gustavatmel 1:9c5af431a1f1 292 MBEDTLS_ASN1_CHK_ADD( len, mbedtls_asn1_write_raw_buffer( p, start, ext->val.p + 1,
gustavatmel 1:9c5af431a1f1 293 ext->val.len - 1 ) );
gustavatmel 1:9c5af431a1f1 294 MBEDTLS_ASN1_CHK_ADD( len, mbedtls_asn1_write_len( p, start, ext->val.len - 1 ) );
gustavatmel 1:9c5af431a1f1 295 MBEDTLS_ASN1_CHK_ADD( len, mbedtls_asn1_write_tag( p, start, MBEDTLS_ASN1_OCTET_STRING ) );
gustavatmel 1:9c5af431a1f1 296
gustavatmel 1:9c5af431a1f1 297 if( ext->val.p[0] != 0 )
gustavatmel 1:9c5af431a1f1 298 {
gustavatmel 1:9c5af431a1f1 299 MBEDTLS_ASN1_CHK_ADD( len, mbedtls_asn1_write_bool( p, start, 1 ) );
gustavatmel 1:9c5af431a1f1 300 }
gustavatmel 1:9c5af431a1f1 301
gustavatmel 1:9c5af431a1f1 302 MBEDTLS_ASN1_CHK_ADD( len, mbedtls_asn1_write_raw_buffer( p, start, ext->oid.p,
gustavatmel 1:9c5af431a1f1 303 ext->oid.len ) );
gustavatmel 1:9c5af431a1f1 304 MBEDTLS_ASN1_CHK_ADD( len, mbedtls_asn1_write_len( p, start, ext->oid.len ) );
gustavatmel 1:9c5af431a1f1 305 MBEDTLS_ASN1_CHK_ADD( len, mbedtls_asn1_write_tag( p, start, MBEDTLS_ASN1_OID ) );
gustavatmel 1:9c5af431a1f1 306
gustavatmel 1:9c5af431a1f1 307 MBEDTLS_ASN1_CHK_ADD( len, mbedtls_asn1_write_len( p, start, len ) );
gustavatmel 1:9c5af431a1f1 308 MBEDTLS_ASN1_CHK_ADD( len, mbedtls_asn1_write_tag( p, start, MBEDTLS_ASN1_CONSTRUCTED |
gustavatmel 1:9c5af431a1f1 309 MBEDTLS_ASN1_SEQUENCE ) );
gustavatmel 1:9c5af431a1f1 310
gustavatmel 1:9c5af431a1f1 311 return( (int) len );
gustavatmel 1:9c5af431a1f1 312 }
gustavatmel 1:9c5af431a1f1 313
gustavatmel 1:9c5af431a1f1 314 /*
gustavatmel 1:9c5af431a1f1 315 * Extension ::= SEQUENCE {
gustavatmel 1:9c5af431a1f1 316 * extnID OBJECT IDENTIFIER,
gustavatmel 1:9c5af431a1f1 317 * critical BOOLEAN DEFAULT FALSE,
gustavatmel 1:9c5af431a1f1 318 * extnValue OCTET STRING
gustavatmel 1:9c5af431a1f1 319 * -- contains the DER encoding of an ASN.1 value
gustavatmel 1:9c5af431a1f1 320 * -- corresponding to the extension type identified
gustavatmel 1:9c5af431a1f1 321 * -- by extnID
gustavatmel 1:9c5af431a1f1 322 * }
gustavatmel 1:9c5af431a1f1 323 */
gustavatmel 1:9c5af431a1f1 324 int mbedtls_x509_write_extensions( unsigned char **p, unsigned char *start,
gustavatmel 1:9c5af431a1f1 325 mbedtls_asn1_named_data *first )
gustavatmel 1:9c5af431a1f1 326 {
gustavatmel 1:9c5af431a1f1 327 int ret;
gustavatmel 1:9c5af431a1f1 328 size_t len = 0;
gustavatmel 1:9c5af431a1f1 329 mbedtls_asn1_named_data *cur_ext = first;
gustavatmel 1:9c5af431a1f1 330
gustavatmel 1:9c5af431a1f1 331 while( cur_ext != NULL )
gustavatmel 1:9c5af431a1f1 332 {
gustavatmel 1:9c5af431a1f1 333 MBEDTLS_ASN1_CHK_ADD( len, x509_write_extension( p, start, cur_ext ) );
gustavatmel 1:9c5af431a1f1 334 cur_ext = cur_ext->next;
gustavatmel 1:9c5af431a1f1 335 }
gustavatmel 1:9c5af431a1f1 336
gustavatmel 1:9c5af431a1f1 337 return( (int) len );
gustavatmel 1:9c5af431a1f1 338 }
gustavatmel 1:9c5af431a1f1 339
gustavatmel 1:9c5af431a1f1 340 #endif /* MBEDTLS_X509_CREATE_C */