diff options
author | lloyd <[email protected]> | 2006-05-18 18:33:19 +0000 |
---|---|---|
committer | lloyd <[email protected]> | 2006-05-18 18:33:19 +0000 |
commit | a2c99d3270eb73ef2db5704fc54356c6b75096f8 (patch) | |
tree | ad3d6c4fcc8dd0f403f8105598943616246fe172 /src/crl_ent.cpp |
Initial checkin1.5.6
Diffstat (limited to 'src/crl_ent.cpp')
-rw-r--r-- | src/crl_ent.cpp | 165 |
1 files changed, 165 insertions, 0 deletions
diff --git a/src/crl_ent.cpp b/src/crl_ent.cpp new file mode 100644 index 000000000..086dd496b --- /dev/null +++ b/src/crl_ent.cpp @@ -0,0 +1,165 @@ +/************************************************* +* CRL Entry Source File * +* (C) 1999-2006 The Botan Project * +*************************************************/ + +#include <botan/crl_ent.h> +#include <botan/der_enc.h> +#include <botan/ber_dec.h> +#include <botan/conf.h> +#include <botan/oids.h> +#include <botan/x509_crl.h> +#include <botan/util.h> + +namespace Botan { + +/************************************************* +* Create a CRL_Entry * +*************************************************/ +CRL_Entry::CRL_Entry() + { + reason = UNSPECIFIED; + } + +/************************************************* +* Create a CRL_Entry * +*************************************************/ +CRL_Entry::CRL_Entry(const X509_Certificate& cert, CRL_Code why) + { + serial = cert.serial_number(); + time = X509_Time(system_time()); + reason = why; + } + +/************************************************* +* Compare two CRL_Entrys for equality * +*************************************************/ +bool operator==(const CRL_Entry& a1, const CRL_Entry& a2) + { + if(a1.serial != a2.serial) + return false; + if(a1.time != a2.time) + return false; + if(a1.reason != a2.reason) + return false; + return true; + } + +/************************************************* +* Compare two CRL_Entrys for inequality * +*************************************************/ +bool operator!=(const CRL_Entry& a1, const CRL_Entry& a2) + { + return !(a1 == a2); + } + +/************************************************* +* Compare two CRL_Entrys * +*************************************************/ +bool operator<(const CRL_Entry& a1, const CRL_Entry& a2) + { + return (a1.time.cmp(a2.time) < 0); + } + +namespace DER { + +/************************************************* +* DER encode an CRL_Entry * +*************************************************/ +void encode(DER_Encoder& der, const CRL_Entry& crl_ent) + { + der.start_sequence() + .encode(BigInt::decode(crl_ent.serial, crl_ent.serial.size())) + .encode(crl_ent.time) + .start_sequence(); + + if(crl_ent.reason != UNSPECIFIED) + { +#if 1 + der.start_sequence() + .encode(OIDS::lookup("X509v3.ReasonCode")) + .encode( + DER_Encoder() + .encode((u32bit)crl_ent.reason, ENUMERATED, UNIVERSAL) + .get_contents(), + OCTET_STRING) + .end_sequence(); +#else + DER_Encoder v2_ext; + v2_ext.encode((u32bit)crl_ent.reason, ENUMERATED, UNIVERSAL); + der.encode(Extension("X509v3.ReasonCode", v2_ext.get_contents())); +#endif + } + + der.end_sequence() + .end_sequence(); + } + +} + +namespace BER { + +namespace { + +/************************************************* +* Decode a CRL entry extension * +*************************************************/ +void handle_crl_entry_extension(CRL_Entry& crl_ent, const Extension& extn) + { + BER_Decoder value(extn.value); + + if(extn.oid == OIDS::lookup("X509v3.ReasonCode")) + { + u32bit reason_code; + value.decode(reason_code, ENUMERATED, UNIVERSAL); + crl_ent.reason = CRL_Code(reason_code); + } + else + { + if(extn.critical) + { + std::string action = Config::get_string("x509/crl/unknown_critical"); + if(action == "throw") + throw Decoding_Error("Unknown critical CRL entry extension " + + extn.oid.as_string()); + else if(action != "ignore") + throw Invalid_Argument("Bad value of x509/crl/unknown_critical: " + + action); + } + return; + } + + value.verify_end(); + } + +} + +/************************************************* +* Decode a BER encoded CRL_Entry * +*************************************************/ +void decode(BER_Decoder& source, CRL_Entry& crl_ent) + { + BigInt serial_number; + + BER_Decoder sequence = BER::get_subsequence(source); + sequence.decode(serial_number); + crl_ent.serial = BigInt::encode(serial_number); + BER::decode(sequence, crl_ent.time); + + if(sequence.more_items()) + { + BER_Decoder crl_entry_exts = BER::get_subsequence(sequence); + while(crl_entry_exts.more_items()) + { + Extension extn; + BER::decode(crl_entry_exts, extn); + handle_crl_entry_extension(crl_ent, extn); + } + } + + sequence.verify_end(); + } + +} + +} |