blob: 90ef5438ec1e673734405e0fe22c007866811ea7 [file] [log] [blame]
Jean-Paul Calderone897bc252008-02-18 20:50:23 -05001/*
2 * x509ext.c
3 *
Jean-Paul Calderone8b63d452008-03-21 18:31:12 -04004 * Copyright (C) Jean-Paul Calderone 2008, All rights reserved
5 *
Jean-Paul Calderone897bc252008-02-18 20:50:23 -05006 * Export X.509 extension functions and data structures.
7 * See the file RATIONALE for a short explanation of why this module was written.
8 *
9 * @(#) $Id: x509ext.c,v 1.1 2002/07/09 13:34:46 martin Exp $
10 */
11
12#include <Python.h>
13#define crypto_MODULE
14#include "crypto.h"
15
Jean-Paul Calderone897bc252008-02-18 20:50:23 -050016static char crypto_X509Extension_get_critical_doc[] = "\n\
17Returns the critical field of the X509Extension\n\
18\n\
Jean-Paul Calderone54bcc832009-05-27 14:06:48 -040019@return: The critical field.\n\
Jean-Paul Calderone897bc252008-02-18 20:50:23 -050020";
21
22static PyObject *
23crypto_X509Extension_get_critical(crypto_X509ExtensionObj *self, PyObject *args)
24{
25 if (!PyArg_ParseTuple(args, ":get_critical"))
26 return NULL;
27
28 return PyInt_FromLong(X509_EXTENSION_get_critical(self->x509_extension));
29}
30
Jean-Paul Calderonef8c5fab2008-12-31 15:53:48 -050031static char crypto_X509Extension_get_short_name_doc[] = "\n\
32Returns the short version of the type name of the X509Extension\n\
33\n\
Jean-Paul Calderone54bcc832009-05-27 14:06:48 -040034@return: The short type name.\n\
Jean-Paul Calderonef8c5fab2008-12-31 15:53:48 -050035";
36
37static PyObject *
38crypto_X509Extension_get_short_name(crypto_X509ExtensionObj *self, PyObject *args) {
39 ASN1_OBJECT *obj;
40 const char *extname;
41
42 if (!PyArg_ParseTuple(args, ":get_short_name")) {
43 return NULL;
44 }
45
46 /* Returns an internal pointer to x509_extension, not a copy */
47 obj = X509_EXTENSION_get_object(self->x509_extension);
48
49 extname = OBJ_nid2sn(OBJ_obj2nid(obj));
50 return PyString_FromString(extname);
51}
52
53
Jean-Paul Calderone897bc252008-02-18 20:50:23 -050054/*
55 * ADD_METHOD(name) expands to a correct PyMethodDef declaration
56 * { 'name', (PyCFunction)crypto_X509Extension_name, METH_VARARGS }
57 * for convenience
58 */
59#define ADD_METHOD(name) \
60{ #name, (PyCFunction)crypto_X509Extension_##name, METH_VARARGS, crypto_X509Extension_##name##_doc }
61static PyMethodDef crypto_X509Extension_methods[] =
62{
63 ADD_METHOD(get_critical),
Jean-Paul Calderonef8c5fab2008-12-31 15:53:48 -050064 ADD_METHOD(get_short_name),
Jean-Paul Calderone897bc252008-02-18 20:50:23 -050065 { NULL, NULL }
66};
67#undef ADD_METHOD
68
69/*
70 * Constructor for X509Extension, never called by Python code directly
71 *
72 * Arguments: type_name - ???
73 * critical - ???
74 * value - ???
Jean-Paul Calderonee04be5f2009-07-17 15:09:48 -040075 * subject - An x509v3 certificate which is the subject for this extension.
76 * issuer - An x509v3 certificate which is the issuer for this extension.
Jean-Paul Calderone897bc252008-02-18 20:50:23 -050077 * Returns: The newly created X509Extension object
78 */
79crypto_X509ExtensionObj *
Jean-Paul Calderone5ae32fb2009-07-17 15:03:31 -040080crypto_X509Extension_New(char *type_name, int critical, char *value,
Jean-Paul Calderonee04be5f2009-07-17 15:09:48 -040081 crypto_X509Obj *subject, crypto_X509Obj *issuer) {
Jean-Paul Calderone2ee1e7c2008-12-31 14:58:38 -050082 X509V3_CTX ctx;
Jean-Paul Calderone897bc252008-02-18 20:50:23 -050083 crypto_X509ExtensionObj *self;
Jean-Paul Calderonee7db4b42008-12-31 13:39:24 -050084 char* value_with_critical = NULL;
Jean-Paul Calderone897bc252008-02-18 20:50:23 -050085
Jean-Paul Calderonee04be5f2009-07-17 15:09:48 -040086
Jean-Paul Calderone5ae32fb2009-07-17 15:03:31 -040087 /*
Jean-Paul Calderonee04be5f2009-07-17 15:09:48 -040088 * A context is necessary for any extension which uses the r2i conversion
89 * method. That is, X509V3_EXT_nconf may segfault if passed a NULL ctx.
90 * Start off by initializing most of the fields to NULL.
Jean-Paul Calderone5ae32fb2009-07-17 15:03:31 -040091 */
92 X509V3_set_ctx(&ctx, NULL, NULL, NULL, NULL, 0);
93
Jean-Paul Calderonee04be5f2009-07-17 15:09:48 -040094 /*
95 * We have no configuration database - but perhaps we should (some
96 * extensions may require it).
Jean-Paul Calderone5ae32fb2009-07-17 15:03:31 -040097 */
Jean-Paul Calderone2ee1e7c2008-12-31 14:58:38 -050098 X509V3_set_ctx_nodb(&ctx);
99
Jean-Paul Calderone5ae32fb2009-07-17 15:03:31 -0400100 /*
101 * Initialize the subject and issuer, if appropriate. ctx is a local, and
102 * as far as I can tell none of the X509V3_* APIs invoked here steal any
103 * references, so no need to incref subject or issuer.
104 */
105 if (subject) {
Rick Dean47262da2009-07-08 16:17:17 -0500106 ctx.subject_cert = subject->x509;
Jean-Paul Calderone5ae32fb2009-07-17 15:03:31 -0400107 }
108
109 if (issuer) {
Rick Dean47262da2009-07-08 16:17:17 -0500110 ctx.issuer_cert = issuer->x509;
Jean-Paul Calderone5ae32fb2009-07-17 15:03:31 -0400111 }
Jean-Paul Calderone897bc252008-02-18 20:50:23 -0500112
113 self = PyObject_New(crypto_X509ExtensionObj, &crypto_X509Extension_Type);
114
Jean-Paul Calderonee7db4b42008-12-31 13:39:24 -0500115 if (self == NULL) {
Jean-Paul Calderone2ee1e7c2008-12-31 14:58:38 -0500116 goto error;
Jean-Paul Calderone897bc252008-02-18 20:50:23 -0500117 }
118
Jean-Paul Calderone391585f2008-12-31 14:36:31 -0500119 self->dealloc = 0;
120
Jean-Paul Calderonee7db4b42008-12-31 13:39:24 -0500121 /* There are other OpenSSL APIs which would let us pass in critical
122 * separately, but they're harder to use, and since value is already a pile
123 * of crappy junk smuggling a ton of utterly important structured data,
124 * what's the point of trying to avoid nasty stuff with strings? (However,
125 * X509V3_EXT_i2d in particular seems like it would be a better API to
126 * invoke. I do not know where to get the ext_struc it desires for its
127 * last parameter, though.) */
128 value_with_critical = malloc(strlen("critical,") + strlen(value) + 1);
Jean-Paul Calderone2ee1e7c2008-12-31 14:58:38 -0500129 if (!value_with_critical) {
130 goto critical_malloc_error;
131 }
132
Jean-Paul Calderonee7db4b42008-12-31 13:39:24 -0500133 if (critical) {
134 strcpy(value_with_critical, "critical,");
135 strcpy(value_with_critical + strlen("critical,"), value);
Jean-Paul Calderone897bc252008-02-18 20:50:23 -0500136 } else {
Jean-Paul Calderonee7db4b42008-12-31 13:39:24 -0500137 strcpy(value_with_critical, value);
Jean-Paul Calderone897bc252008-02-18 20:50:23 -0500138 }
139
Jean-Paul Calderonee7db4b42008-12-31 13:39:24 -0500140 self->x509_extension = X509V3_EXT_nconf(
Jean-Paul Calderone2ee1e7c2008-12-31 14:58:38 -0500141 NULL, &ctx, type_name, value_with_critical);
Jean-Paul Calderone897bc252008-02-18 20:50:23 -0500142
Jean-Paul Calderonee7db4b42008-12-31 13:39:24 -0500143 free(value_with_critical);
144
Jean-Paul Calderone391585f2008-12-31 14:36:31 -0500145 if (!self->x509_extension) {
Jean-Paul Calderone2ee1e7c2008-12-31 14:58:38 -0500146 goto nconf_error;
Jean-Paul Calderone391585f2008-12-31 14:36:31 -0500147 }
148
149 self->dealloc = 1;
Jean-Paul Calderone897bc252008-02-18 20:50:23 -0500150 return self;
Jean-Paul Calderone2ee1e7c2008-12-31 14:58:38 -0500151
152 nconf_error:
Rick Deand369c932009-07-08 11:48:33 -0500153 exception_from_error_queue(crypto_Error);
Jean-Paul Calderone2ee1e7c2008-12-31 14:58:38 -0500154
155 critical_malloc_error:
Jean-Paul Calderonea96bfed2009-05-27 08:47:34 -0400156 Py_XDECREF(self);
Jean-Paul Calderone2ee1e7c2008-12-31 14:58:38 -0500157
158 error:
159 return NULL;
160
Jean-Paul Calderone897bc252008-02-18 20:50:23 -0500161}
162
Jean-Paul Calderone51e90662009-06-27 11:17:28 -0400163static char crypto_X509Extension_doc[] = "\n\
Rick Dean47262da2009-07-08 16:17:17 -0500164X509Extension(typename, critical, value[, subject][, issuer]) -> \n\
165 X509Extension instance\n\
Jean-Paul Calderone51e90662009-06-27 11:17:28 -0400166\n\
167@param typename: The name of the extension to create.\n\
168@type typename: C{str}\n\
169@param critical: A flag indicating whether this is a critical extension.\n\
170@param value: The value of the extension.\n\
171@type value: C{str}\n\
Rick Dean47262da2009-07-08 16:17:17 -0500172@param subject: Optional X509 cert to use as subject.\n\
173@type subject: C{X509}\n\
174@param issuer: Optional X509 cert to use as issuer.\n\
175@type issuer: C{X509}\n\
Jean-Paul Calderone51e90662009-06-27 11:17:28 -0400176@return: The X509Extension object\n\
177";
178
179static PyObject *
Jean-Paul Calderonee04be5f2009-07-17 15:09:48 -0400180crypto_X509Extension_new(PyTypeObject *subtype, PyObject *args,
Rick Dean47262da2009-07-08 16:17:17 -0500181 PyObject *kwargs) {
Jean-Paul Calderone51e90662009-06-27 11:17:28 -0400182 char *type_name, *value;
Rick Dean47262da2009-07-08 16:17:17 -0500183 int critical = 0;
184 crypto_X509Obj * subject = NULL;
185 crypto_X509Obj * issuer = NULL;
Jean-Paul Calderonee04be5f2009-07-17 15:09:48 -0400186 static char *kwlist[] = {"type_name", "critical", "value", "subject",
Rick Dean47262da2009-07-08 16:17:17 -0500187 "issuer", NULL};
Jean-Paul Calderone51e90662009-06-27 11:17:28 -0400188
Jean-Paul Calderonee04be5f2009-07-17 15:09:48 -0400189 if (!PyArg_ParseTupleAndKeywords(args, kwargs, "sis|O!O!:X509Extension",
190 kwlist, &type_name, &critical, &value,
191 &crypto_X509_Type, &subject,
192 &crypto_X509_Type, &issuer )) {
Jean-Paul Calderone51e90662009-06-27 11:17:28 -0400193 return NULL;
194 }
195
Rick Dean47262da2009-07-08 16:17:17 -0500196 return (PyObject *)crypto_X509Extension_New(type_name, critical, value,
197 subject, issuer);
Jean-Paul Calderone51e90662009-06-27 11:17:28 -0400198}
199
Jean-Paul Calderone897bc252008-02-18 20:50:23 -0500200/*
201 * Deallocate the memory used by the X509Extension object
202 *
203 * Arguments: self - The X509Extension object
204 * Returns: None
205 */
206static void
207crypto_X509Extension_dealloc(crypto_X509ExtensionObj *self)
208{
209 /* Sometimes we don't have to dealloc this */
210 if (self->dealloc)
211 X509_EXTENSION_free(self->x509_extension);
212
213 PyObject_Del(self);
214}
215
216/*
217 * Find attribute
218 *
219 * Arguments: self - The X509Extension object
220 * name - The attribute name
221 * Returns: A Python object for the attribute, or NULL if something
222 * went wrong.
223 */
224static PyObject *
225crypto_X509Extension_getattr(crypto_X509ExtensionObj *self, char *name)
226{
227 return Py_FindMethod(crypto_X509Extension_methods, (PyObject *)self, name);
228}
229
230/*
231 * Print a nice text representation of the certificate request.
232 */
233static PyObject *
234crypto_X509Extension_str(crypto_X509ExtensionObj *self)
235{
236 int str_len;
237 char *tmp_str;
238 PyObject *str;
239 BIO *bio = BIO_new(BIO_s_mem());
240
241 if (!X509V3_EXT_print(bio, self->x509_extension, 0, 0))
242 {
243 BIO_free(bio);
Rick Deand369c932009-07-08 11:48:33 -0500244 exception_from_error_queue(crypto_Error);
Jean-Paul Calderone897bc252008-02-18 20:50:23 -0500245 return NULL;
246 }
247
248 str_len = BIO_get_mem_data(bio, &tmp_str);
249 str = PyString_FromStringAndSize(tmp_str, str_len);
250
251 BIO_free(bio);
252
253 return str;
254}
255
256PyTypeObject crypto_X509Extension_Type = {
257 PyObject_HEAD_INIT(NULL)
258 0,
259 "X509Extension",
260 sizeof(crypto_X509ExtensionObj),
261 0,
262 (destructor)crypto_X509Extension_dealloc,
263 NULL, /* print */
264 (getattrfunc)crypto_X509Extension_getattr,
265 NULL, /* setattr (setattrfunc)crypto_X509Name_setattr, */
266 NULL, /* compare */
267 NULL, /* repr */
268 NULL, /* as_number */
269 NULL, /* as_sequence */
270 NULL, /* as_mapping */
271 NULL, /* hash */
272 NULL, /* call */
Jean-Paul Calderone51e90662009-06-27 11:17:28 -0400273 (reprfunc)crypto_X509Extension_str, /* str */
274 NULL, /* getattro */
275 NULL, /* setattro */
276 NULL, /* as_buffer */
277 Py_TPFLAGS_DEFAULT,
278 crypto_X509Extension_doc, /* doc */
279 NULL, /* traverse */
280 NULL, /* clear */
281 NULL, /* tp_richcompare */
282 0, /* tp_weaklistoffset */
283 NULL, /* tp_iter */
284 NULL, /* tp_iternext */
285 crypto_X509Extension_methods, /* tp_methods */
286 NULL, /* tp_members */
287 NULL, /* tp_getset */
288 NULL, /* tp_base */
289 NULL, /* tp_dict */
290 NULL, /* tp_descr_get */
291 NULL, /* tp_descr_set */
292 0, /* tp_dictoffset */
293 NULL, /* tp_init */
294 NULL, /* tp_alloc */
295 crypto_X509Extension_new, /* tp_new */
Jean-Paul Calderone897bc252008-02-18 20:50:23 -0500296};
297
298/*
299 * Initialize the X509Extension part of the crypto module
300 *
Jean-Paul Calderone51e90662009-06-27 11:17:28 -0400301 * Arguments: dict - The crypto module
Jean-Paul Calderone897bc252008-02-18 20:50:23 -0500302 * Returns: None
303 */
304int
Jean-Paul Calderone51e90662009-06-27 11:17:28 -0400305init_crypto_x509extension(PyObject *module)
Jean-Paul Calderone897bc252008-02-18 20:50:23 -0500306{
Jean-Paul Calderone51e90662009-06-27 11:17:28 -0400307 if (PyType_Ready(&crypto_X509Extension_Type) < 0) {
308 return 0;
309 }
310
311 if (PyModule_AddObject(module, "X509Extension",
312 (PyObject *)&crypto_X509Extension_Type) != 0) {
313 return 0;
314 }
315
316 if (PyModule_AddObject(module, "X509ExtensionType",
317 (PyObject *)&crypto_X509Extension_Type) != 0) {
318 return 0;
319 }
320
Jean-Paul Calderone897bc252008-02-18 20:50:23 -0500321 return 1;
322}