The Android Open Source Project | 845e012 | 2009-03-03 19:31:34 -0800 | [diff] [blame] | 1 | /* |
| 2 | * Testing tool for ASN.1/X.509v3 routines |
| 3 | * Copyright (c) 2006, Jouni Malinen <j@w1.fi> |
| 4 | * |
| 5 | * This program is free software; you can redistribute it and/or modify |
| 6 | * it under the terms of the GNU General Public License version 2 as |
| 7 | * published by the Free Software Foundation. |
| 8 | * |
| 9 | * Alternatively, this software may be distributed under the terms of BSD |
| 10 | * license. |
| 11 | * |
| 12 | * See README and COPYING for more details. |
| 13 | */ |
| 14 | |
| 15 | #include "includes.h" |
| 16 | |
| 17 | #include "common.h" |
| 18 | #include "asn1.h" |
| 19 | #include "x509v3.h" |
| 20 | |
| 21 | extern int wpa_debug_level; |
| 22 | |
| 23 | |
| 24 | static const char * asn1_class_str(int class) |
| 25 | { |
| 26 | switch (class) { |
| 27 | case ASN1_CLASS_UNIVERSAL: |
| 28 | return "Universal"; |
| 29 | case ASN1_CLASS_APPLICATION: |
| 30 | return "Application"; |
| 31 | case ASN1_CLASS_CONTEXT_SPECIFIC: |
| 32 | return "Context-specific"; |
| 33 | case ASN1_CLASS_PRIVATE: |
| 34 | return "Private"; |
| 35 | default: |
| 36 | return "?"; |
| 37 | } |
| 38 | } |
| 39 | |
| 40 | |
| 41 | int asn1_parse(const u8 *buf, size_t len, int level) |
| 42 | { |
| 43 | const u8 *pos, *prev, *end; |
| 44 | char prefix[10], str[100]; |
| 45 | int _level; |
| 46 | struct asn1_hdr hdr; |
| 47 | struct asn1_oid oid; |
| 48 | u8 tmp; |
| 49 | |
| 50 | _level = level; |
| 51 | if ((size_t) _level > sizeof(prefix) - 1) |
| 52 | _level = sizeof(prefix) - 1; |
| 53 | memset(prefix, ' ', _level); |
| 54 | prefix[_level] = '\0'; |
| 55 | |
| 56 | pos = buf; |
| 57 | end = buf + len; |
| 58 | |
| 59 | while (pos < end) { |
| 60 | if (asn1_get_next(pos, end - pos, &hdr) < 0) |
| 61 | return -1; |
| 62 | |
| 63 | prev = pos; |
| 64 | pos = hdr.payload; |
| 65 | |
| 66 | wpa_printf(MSG_MSGDUMP, "ASN.1:%s Class %d(%s) P/C %d(%s) " |
| 67 | "Tag %u Length %u", |
| 68 | prefix, hdr.class, asn1_class_str(hdr.class), |
| 69 | hdr.constructed, |
| 70 | hdr.constructed ? "Constructed" : "Primitive", |
| 71 | hdr.tag, hdr.length); |
| 72 | |
| 73 | if (hdr.class == ASN1_CLASS_CONTEXT_SPECIFIC && |
| 74 | hdr.constructed) { |
| 75 | if (asn1_parse(pos, hdr.length, level + 1) < 0) |
| 76 | return -1; |
| 77 | pos += hdr.length; |
| 78 | } |
| 79 | |
| 80 | if (hdr.class != ASN1_CLASS_UNIVERSAL) |
| 81 | continue; |
| 82 | |
| 83 | switch (hdr.tag) { |
| 84 | case ASN1_TAG_EOC: |
| 85 | if (hdr.length) { |
| 86 | wpa_printf(MSG_DEBUG, "ASN.1: Non-zero " |
| 87 | "end-of-contents length (%u)", |
| 88 | hdr.length); |
| 89 | return -1; |
| 90 | } |
| 91 | wpa_printf(MSG_MSGDUMP, "ASN.1:%s EOC", prefix); |
| 92 | break; |
| 93 | case ASN1_TAG_BOOLEAN: |
| 94 | if (hdr.length != 1) { |
| 95 | wpa_printf(MSG_DEBUG, "ASN.1: Unexpected " |
| 96 | "Boolean length (%u)", hdr.length); |
| 97 | return -1; |
| 98 | } |
| 99 | tmp = *pos++; |
| 100 | wpa_printf(MSG_MSGDUMP, "ASN.1:%s Boolean %s", |
| 101 | prefix, tmp ? "TRUE" : "FALSE"); |
| 102 | break; |
| 103 | case ASN1_TAG_INTEGER: |
| 104 | wpa_hexdump(MSG_MSGDUMP, "ASN.1: INTEGER", |
| 105 | pos, hdr.length); |
| 106 | pos += hdr.length; |
| 107 | break; |
| 108 | case ASN1_TAG_BITSTRING: |
| 109 | wpa_hexdump(MSG_MSGDUMP, "ASN.1: BitString", |
| 110 | pos, hdr.length); |
| 111 | pos += hdr.length; |
| 112 | break; |
| 113 | case ASN1_TAG_OCTETSTRING: |
| 114 | wpa_hexdump(MSG_MSGDUMP, "ASN.1: OctetString", |
| 115 | pos, hdr.length); |
| 116 | pos += hdr.length; |
| 117 | break; |
| 118 | case ASN1_TAG_NULL: |
| 119 | if (hdr.length) { |
| 120 | wpa_printf(MSG_DEBUG, "ASN.1: Non-zero Null " |
| 121 | "length (%u)", hdr.length); |
| 122 | return -1; |
| 123 | } |
| 124 | wpa_printf(MSG_MSGDUMP, "ASN.1:%s Null", prefix); |
| 125 | break; |
| 126 | case ASN1_TAG_OID: |
| 127 | if (asn1_get_oid(prev, end - prev, &oid, &prev) < 0) { |
| 128 | wpa_printf(MSG_DEBUG, "ASN.1: Invalid OID"); |
| 129 | return -1; |
| 130 | } |
| 131 | asn1_oid_to_str(&oid, str, sizeof(str)); |
| 132 | wpa_printf(MSG_DEBUG, "ASN.1:%s OID %s", prefix, str); |
| 133 | pos += hdr.length; |
| 134 | break; |
| 135 | case ANS1_TAG_RELATIVE_OID: |
| 136 | wpa_hexdump(MSG_MSGDUMP, "ASN.1: Relative OID", |
| 137 | pos, hdr.length); |
| 138 | pos += hdr.length; |
| 139 | break; |
| 140 | case ASN1_TAG_SEQUENCE: |
| 141 | wpa_printf(MSG_MSGDUMP, "ASN.1:%s SEQUENCE", prefix); |
| 142 | if (asn1_parse(pos, hdr.length, level + 1) < 0) |
| 143 | return -1; |
| 144 | pos += hdr.length; |
| 145 | break; |
| 146 | case ASN1_TAG_SET: |
| 147 | wpa_printf(MSG_MSGDUMP, "ASN.1:%s SET", prefix); |
| 148 | if (asn1_parse(pos, hdr.length, level + 1) < 0) |
| 149 | return -1; |
| 150 | pos += hdr.length; |
| 151 | break; |
| 152 | case ASN1_TAG_PRINTABLESTRING: |
| 153 | wpa_hexdump_ascii(MSG_MSGDUMP, |
| 154 | "ASN.1: PrintableString", |
| 155 | pos, hdr.length); |
| 156 | pos += hdr.length; |
| 157 | break; |
| 158 | case ASN1_TAG_IA5STRING: |
| 159 | wpa_hexdump_ascii(MSG_MSGDUMP, "ASN.1: IA5String", |
| 160 | pos, hdr.length); |
| 161 | pos += hdr.length; |
| 162 | break; |
| 163 | case ASN1_TAG_UTCTIME: |
| 164 | wpa_hexdump_ascii(MSG_MSGDUMP, "ASN.1: UTCTIME", |
| 165 | pos, hdr.length); |
| 166 | pos += hdr.length; |
| 167 | break; |
| 168 | case ASN1_TAG_VISIBLESTRING: |
| 169 | wpa_hexdump_ascii(MSG_MSGDUMP, "ASN.1: VisibleString", |
| 170 | pos, hdr.length); |
| 171 | pos += hdr.length; |
| 172 | break; |
| 173 | default: |
| 174 | wpa_printf(MSG_DEBUG, "ASN.1: Unknown tag %d", |
| 175 | hdr.tag); |
| 176 | return -1; |
| 177 | } |
| 178 | } |
| 179 | |
| 180 | return 0; |
| 181 | } |
| 182 | |
| 183 | |
| 184 | int main(int argc, char *argv[]) |
| 185 | { |
| 186 | FILE *f; |
| 187 | u8 buf[3000]; |
| 188 | size_t len; |
| 189 | struct x509_certificate *cert; |
| 190 | |
| 191 | wpa_debug_level = 0; |
| 192 | |
| 193 | f = fopen(argv[1], "rb"); |
| 194 | if (f == NULL) |
| 195 | return -1; |
| 196 | len = fread(buf, 1, sizeof(buf), f); |
| 197 | fclose(f); |
| 198 | |
| 199 | if (asn1_parse(buf, len, 0) < 0) |
| 200 | printf("Failed to parse DER ASN.1\n"); |
| 201 | |
| 202 | printf("\n\n"); |
| 203 | |
| 204 | cert = x509_certificate_parse(buf, len); |
| 205 | if (cert == NULL) |
| 206 | printf("Failed to parse X.509 certificate\n"); |
| 207 | x509_certificate_free(cert); |
| 208 | |
| 209 | return 0; |
| 210 | } |