/* * (C) 2014,2015 Jack Lloyd * * Botan is released under the Simplified BSD License (see license.txt) */ #include "cli.h" #if defined(BOTAN_HAS_ASN1) && defined(BOTAN_HAS_PEM_CODEC) #include #include #include #include #include #include #include #include #include #include #include #include #include // Set this if your terminal understands UTF-8; otherwise output is in Latin-1 #define UTF8_TERMINAL 1 /* What level the outermost layer of stuff is at. Probably 0 or 1; asn1parse uses 0 as the outermost, while 1 makes more sense to me. 2+ doesn't make much sense at all. */ #define INITIAL_LEVEL 0 namespace Botan_CLI { namespace { std::string url_encode(const std::vector& in) { std::ostringstream out; size_t unprintable = 0; for(size_t i = 0; i != in.size(); ++i) { const int c = in[i]; if(::isprint(c)) out << static_cast(c); else { out << "%" << std::hex << static_cast(c) << std::dec; ++unprintable; } } if(unprintable >= in.size() / 4) return Botan::hex_encode(in); return out.str(); } void emit(const std::string& type, size_t level, size_t length, const std::string& value = "") { const size_t LIMIT = 4*1024; const size_t BIN_LIMIT = 1024; std::ostringstream out; out << " d=" << std::setw(2) << level << ", l=" << std::setw(4) << length << ": "; for(size_t i = INITIAL_LEVEL; i != level; ++i) out << ' '; out << type; bool should_skip = false; if(value.length() > LIMIT) should_skip = true; if((type == "OCTET STRING" || type == "BIT STRING") && value.length() > BIN_LIMIT) should_skip = true; if(value != "" && !should_skip) { if(out.tellp() % 2 == 0) out << ' '; while(out.tellp() < 50) out << ' '; out << value; } std::cout << out.str() << std::endl; } std::string type_name(Botan::ASN1_Tag type) { switch(type) { case Botan::PRINTABLE_STRING: return "PRINTABLE STRING"; case Botan::NUMERIC_STRING: return "NUMERIC STRING"; case Botan::IA5_STRING: return "IA5 STRING"; case Botan::T61_STRING: return "T61 STRING"; case Botan::UTF8_STRING: return "UTF8 STRING"; case Botan::VISIBLE_STRING: return "VISIBLE STRING"; case Botan::BMP_STRING: return "BMP STRING"; case Botan::UTC_TIME: return "UTC TIME"; case Botan::GENERALIZED_TIME: return "GENERALIZED TIME"; case Botan::OCTET_STRING: return "OCTET STRING"; case Botan::BIT_STRING: return "BIT STRING"; case Botan::ENUMERATED: return "ENUMERATED"; case Botan::INTEGER: return "INTEGER"; case Botan::NULL_TAG: return "NULL"; case Botan::OBJECT_ID: return "OBJECT"; case Botan::BOOLEAN: return "BOOLEAN"; default: return "TAG(" + std::to_string(static_cast(type)) + ")"; } return "(UNKNOWN)"; } void decode(Botan::BER_Decoder& decoder, size_t level) { Botan::BER_Object obj = decoder.get_next_object(); while(obj.type_tag != Botan::NO_OBJECT) { const Botan::ASN1_Tag type_tag = obj.type_tag; const Botan::ASN1_Tag class_tag = obj.class_tag; const size_t length = obj.value.size(); /* hack to insert the tag+length back in front of the stuff now that we've gotten the type info */ Botan::DER_Encoder encoder; encoder.add_object(type_tag, class_tag, obj.value); std::vector bits = encoder.get_contents_unlocked(); Botan::BER_Decoder data(bits); if(class_tag & Botan::CONSTRUCTED) { Botan::BER_Decoder cons_info(obj.value); if(type_tag == Botan::SEQUENCE) { emit("SEQUENCE", level, length); decode(cons_info, level+1); } else if(type_tag == Botan::SET) { emit("SET", level, length); decode(cons_info, level+1); } else { std::string name; if((class_tag & Botan::APPLICATION) || (class_tag & Botan::CONTEXT_SPECIFIC)) { name = "cons [" + std::to_string(type_tag) + "]"; if(class_tag & Botan::APPLICATION) name += " appl"; if(class_tag & Botan::CONTEXT_SPECIFIC) name += " context"; } else name = type_name(type_tag) + " (cons)"; emit(name, level, length); decode(cons_info, level+1); } } else if((class_tag & Botan::APPLICATION) || (class_tag & Botan::CONTEXT_SPECIFIC)) { #if 0 std::vector bits; data.decode(bits, type_tag); try { Botan::BER_Decoder inner(bits); decode(inner, level + 1); } catch(...) { emit("[" + std::to_string(type_tag) + "]", level, length, url_encode(bits)); } #else emit("[" + std::to_string(type_tag) + "]", level, length, url_encode(bits)); #endif } else if(type_tag == Botan::OBJECT_ID) { Botan::OID oid; data.decode(oid); std::string out = Botan::OIDS::lookup(oid); if(out != oid.as_string()) out += " [" + oid.as_string() + "]"; emit(type_name(type_tag), level, length, out); } else if(type_tag == Botan::INTEGER || type_tag == Botan::ENUMERATED) { Botan::BigInt number; if(type_tag == Botan::INTEGER) data.decode(number); else if(type_tag == Botan::ENUMERATED) data.decode(number, Botan::ENUMERATED, class_tag); std::vector rep; /* If it's small, it's probably a number, not a hash */ if(number.bits() <= 20) rep = Botan::BigInt::encode(number, Botan::BigInt::Decimal); else rep = Botan::BigInt::encode(number, Botan::BigInt::Hexadecimal); std::string str; for(size_t i = 0; i != rep.size(); ++i) str += static_cast(rep[i]); emit(type_name(type_tag), level, length, str); } else if(type_tag == Botan::BOOLEAN) { bool boolean; data.decode(boolean); emit(type_name(type_tag), level, length, (boolean ? "true" : "false")); } else if(type_tag == Botan::NULL_TAG) { emit(type_name(type_tag), level, length); } else if(type_tag == Botan::OCTET_STRING) { std::vector bits; data.decode(bits, type_tag); try { Botan::BER_Decoder inner(bits); decode(inner, level + 1); } catch(...) { emit(type_name(type_tag), level, length, url_encode(bits)); } } else if(type_tag == Botan::BIT_STRING) { std::vector bits; data.decode(bits, type_tag); std::vector bit_set; for(size_t i = 0; i != bits.size(); ++i) for(size_t j = 0; j != 8; ++j) { const bool bit = static_cast((bits[bits.size()-i-1] >> (7-j)) & 1); bit_set.push_back(bit); } std::string bit_str; for(size_t i = 0; i != bit_set.size(); ++i) { bool the_bit = bit_set[bit_set.size()-i-1]; if(!the_bit && bit_str.size() == 0) continue; bit_str += (the_bit ? "1" : "0"); } emit(type_name(type_tag), level, length, bit_str); } else if(type_tag == Botan::PRINTABLE_STRING || type_tag == Botan::NUMERIC_STRING || type_tag == Botan::IA5_STRING || type_tag == Botan::T61_STRING || type_tag == Botan::VISIBLE_STRING || type_tag == Botan::UTF8_STRING || type_tag == Botan::BMP_STRING) { Botan::ASN1_String str; data.decode(str); if(UTF8_TERMINAL) { emit(type_name(type_tag), level, length, Botan::Charset::transcode(str.iso_8859(), Botan::LATIN1_CHARSET, Botan::UTF8_CHARSET)); } else { emit(type_name(type_tag), level, length, str.iso_8859()); } } else if(type_tag == Botan::UTC_TIME || type_tag == Botan::GENERALIZED_TIME) { Botan::X509_Time time; data.decode(time); emit(type_name(type_tag), level, length, time.readable_string()); } else { std::cout << "Unknown ASN.1 tag class=" << static_cast(class_tag) << " type=" << static_cast(type_tag) << std::endl; } obj = decoder.get_next_object(); } } } class ASN1_Printer final : public Command { public: ASN1_Printer() : Command("asn1print file") {} void go() override { Botan::DataSource_Stream in(get_arg("file")); if(!Botan::PEM_Code::matches(in)) { Botan::BER_Decoder decoder(in); decode(decoder, INITIAL_LEVEL); } else { std::string label; // ignored Botan::BER_Decoder decoder(Botan::PEM_Code::decode(in, label)); decode(decoder, INITIAL_LEVEL); } } }; BOTAN_REGISTER_COMMAND("asn1print", ASN1_Printer); } #endif // BOTAN_HAS_ASN1 && BOTAN_HAS_PEM_CODEC