pkcs7_x509.c | Explore in Territory

/* Copyright (c) 2017, Google Inc.
 *
 * Permission to use, copy, modify, and/or distribute this software for any
 * purpose with or without fee is hereby granted, provided that the above
 * copyright notice and this permission notice appear in all copies.
 *
 * THE SOFTWARE IS PROVIDED "AS IS" AND THE AUTHOR DISCLAIMS ALL WARRANTIES
 * WITH REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF
 * MERCHANTABILITY AND FITNESS. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR ANY
 * SPECIAL, DIRECT, INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES
 * WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR PROFITS, WHETHER IN AN ACTION
 * OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF OR IN
 * CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE. */

#include <openssl/pkcs7.h>

#include <assert.h>
#include <limits.h>

#include <openssl/bytestring.h>
#include <openssl/err.h>
#include <openssl/mem.h>
#include <openssl/obj.h>
#include <openssl/pem.h>
#include <openssl/pool.h>
#include <openssl/stack.h>
#include <openssl/x509.h>

#include "internal.h"
#include "../internal.h"


int PKCS7_get_certificates(STACK_OF(X509) *out_certs, CBS *cbs) { … }

int PKCS7_get_CRLs(STACK_OF(X509_CRL) *out_crls, CBS *cbs) { … }

int PKCS7_get_PEM_certificates(STACK_OF(X509) *out_certs, BIO *pem_bio) { … }

int PKCS7_get_PEM_CRLs(STACK_OF(X509_CRL) *out_crls, BIO *pem_bio) { … }

static int pkcs7_bundle_certificates_cb(CBB *out, const void *arg) { … }

int PKCS7_bundle_certificates(CBB *out, const STACK_OF(X509) *certs) { … }

static int pkcs7_bundle_crls_cb(CBB *out, const void *arg) { … }

int PKCS7_bundle_CRLs(CBB *out, const STACK_OF(X509_CRL) *crls) { … }

static PKCS7 *pkcs7_new(CBS *cbs) { … }

PKCS7 *d2i_PKCS7(PKCS7 **out, const uint8_t **inp,
                 size_t len) { … }

PKCS7 *d2i_PKCS7_bio(BIO *bio, PKCS7 **out) { … }

int i2d_PKCS7(const PKCS7 *p7, uint8_t **out) { … }

int i2d_PKCS7_bio(BIO *bio, const PKCS7 *p7) { … }

void PKCS7_free(PKCS7 *p7) { … }

// We only support signed data, so these getters are no-ops.
int PKCS7_type_is_data(const PKCS7 *p7) { … }
int PKCS7_type_is_digest(const PKCS7 *p7) { … }
int PKCS7_type_is_encrypted(const PKCS7 *p7) { … }
int PKCS7_type_is_enveloped(const PKCS7 *p7) { … }
int PKCS7_type_is_signed(const PKCS7 *p7) { … }
int PKCS7_type_is_signedAndEnveloped(const PKCS7 *p7) { … }

// write_sha256_ai writes an AlgorithmIdentifier for SHA-256 to
// |digest_algos_set|.
static int write_sha256_ai(CBB *digest_algos_set, const void *arg) { … }

// sign_sha256 writes at most |max_out_sig| bytes of the signature of |data| by
// |pkey| to |out_sig| and sets |*out_sig_len| to the number of bytes written.
// It returns one on success or zero on error.
static int sign_sha256(uint8_t *out_sig, size_t *out_sig_len,
                       size_t max_out_sig, EVP_PKEY *pkey, BIO *data) { … }

struct signer_info_data { … };

// write_signer_info writes the SignerInfo structure from
// https://datatracker.ietf.org/doc/html/rfc2315#section-9.2 to |out|. It
// returns one on success or zero on error.
static int write_signer_info(CBB *out, const void *arg) { … }

PKCS7 *PKCS7_sign(X509 *sign_cert, EVP_PKEY *pkey, STACK_OF(X509) *certs,
                  BIO *data, int flags) { … }
chromium/third_party/boringssl/src/crypto/pkcs7/pkcs7_x509.c
