/*
* Copyright (C) 2015-2016 Nikos Mavrogiannopoulos
* Copyright (C) 2015-2016 Red Hat, Inc.
*
* This file is part of GnuTLS.
*
* The GnuTLS is free software; you can redistribute it and/or
* modify it under the terms of the GNU Lesser General Public License
* as published by the Free Software Foundation; either version 2.1 of
* the License, or (at your option) any later version.
*
* This library is distributed in the hope that it will be useful, but
* WITHOUT ANY WARRANTY; without even the implied warranty of
* MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU
* Lesser General Public License for more details.
*
* You should have received a copy of the GNU Lesser General Public License
* along with this program. If not, see <http://www.gnu.org/licenses/>
*
*/
/* This file contains functions to handle the virtual subject alternative names,
* based on othernames, such as GNUTLS_SAN_OTHERNAME_XMPP.
*/
#include "gnutls_int.h"
#include "x509_int.h"
#include "x509_ext_int.h"
#include "common.h"
#include "krb5.h"
#include "virt-san.h"
static
int san_othername_to_virtual(const char *oid, size_t size)
{
if (oid) {
if ((unsigned) size == (sizeof(XMPP_OID)-1)
&& memcmp(oid, XMPP_OID, sizeof(XMPP_OID)-1) == 0)
return GNUTLS_SAN_OTHERNAME_XMPP;
else if ((unsigned) size == (sizeof(KRB5_PRINCIPAL_OID)-1)
&& memcmp(oid, KRB5_PRINCIPAL_OID, sizeof(KRB5_PRINCIPAL_OID)-1) == 0)
return GNUTLS_SAN_OTHERNAME_KRB5PRINCIPAL;
}
return GNUTLS_SAN_OTHERNAME;
}
static
const char * virtual_to_othername_oid(unsigned type)
{
switch(type) {
case GNUTLS_SAN_OTHERNAME_XMPP:
return XMPP_OID;
case GNUTLS_SAN_OTHERNAME_KRB5PRINCIPAL:
return KRB5_PRINCIPAL_OID;
default:
return NULL;
}
}
int _gnutls_alt_name_assign_virt_type(struct name_st *name, unsigned type, gnutls_datum_t *san, const char *othername_oid, unsigned raw)
{
gnutls_datum_t encoded = {NULL, 0};
gnutls_datum_t xmpp = {NULL,0};
int ret;
if (type < 1000) {
name->type = type;
ret = _gnutls_alt_name_process(&name->san, type, san, raw);
if (ret < 0)
return gnutls_assert_val(ret);
gnutls_free(san->data);
san->data = NULL;
if (othername_oid) {
name->othername_oid.data = (uint8_t *) othername_oid;
name->othername_oid.size = strlen(othername_oid);
} else {
name->othername_oid.data = NULL;
name->othername_oid.size = 0;
}
} else { /* virtual types */
const char *oid = virtual_to_othername_oid(type);
if (oid == NULL)
return gnutls_assert_val(GNUTLS_E_INVALID_REQUEST);
switch(type) {
case GNUTLS_SAN_OTHERNAME_XMPP:
ret = gnutls_idna_map((char*)san->data, san->size, &xmpp, 0);
if (ret < 0)
return gnutls_assert_val(ret);
ret = _gnutls_x509_encode_string(ASN1_ETYPE_UTF8_STRING,
xmpp.data, xmpp.size, &encoded);
gnutls_free(xmpp.data);
if (ret < 0)
return gnutls_assert_val(ret);
name->type = GNUTLS_SAN_OTHERNAME;
name->san.data = encoded.data;
name->san.size = encoded.size;
name->othername_oid.data = (void*)gnutls_strdup(oid);
name->othername_oid.size = strlen(oid);
break;
case GNUTLS_SAN_OTHERNAME_KRB5PRINCIPAL:
ret = _gnutls_krb5_principal_to_der((char*)san->data, &name->san);
if (ret < 0)
return gnutls_assert_val(ret);
name->othername_oid.data = (void*)gnutls_strdup(oid);
name->othername_oid.size = strlen(oid);
name->type = GNUTLS_SAN_OTHERNAME;
break;
default:
return gnutls_assert_val(GNUTLS_E_INVALID_REQUEST);
}
gnutls_free(san->data);
}
return 0;
}
/**
* gnutls_x509_othername_to_virtual:
* @oid: The othername object identifier
* @othername: The othername data
* @virt_type: GNUTLS_SAN_OTHERNAME_XXX
* @virt: allocated printable data
*
* This function will parse and convert the othername data to a virtual
* type supported by gnutls.
*
* Returns: On success, %GNUTLS_E_SUCCESS (0) is returned, otherwise a negative error value.
*
* Since: 3.3.8
**/
int gnutls_x509_othername_to_virtual(const char *oid,
const gnutls_datum_t *othername,
unsigned int *virt_type,
gnutls_datum_t *virt)
{
int ret;
unsigned type;
type = san_othername_to_virtual(oid, strlen(oid));
if (type == GNUTLS_SAN_OTHERNAME)
return gnutls_assert_val(GNUTLS_E_X509_UNKNOWN_SAN);
if (virt_type)
*virt_type = type;
switch(type) {
case GNUTLS_SAN_OTHERNAME_XMPP:
ret = _gnutls_x509_decode_string
(ASN1_ETYPE_UTF8_STRING, othername->data,
othername->size, virt, 0);
if (ret < 0) {
gnutls_assert();
return ret;
}
return 0;
case GNUTLS_SAN_OTHERNAME_KRB5PRINCIPAL:
ret = _gnutls_krb5_der_to_principal(othername, virt);
if (ret < 0) {
gnutls_assert();
return ret;
}
return 0;
default:
return gnutls_assert_val(GNUTLS_E_INTERNAL_ERROR);
}
}