commit e12b01d31b032e5db26f9b5f36f577668ad3e867
author Andrzej Kurek <andrzej.kurek@arm.com> Tue Jan 10 06:47:38 2023 -0500
committer Andrzej Kurek <andrzej.kurek@arm.com> Wed Mar 29 11:03:01 2023 -0400
tree 0ba5b78ee12dfdd6f4a009155935f15427ffbe9d
parent 05c5a915144eb8e971073f7d59872a6f86a2cd84

Add support for directoryName subjectAltName

Signed-off-by: Andrzej Kurek <andrzej.kurek@arm.com>

library/x509.c

diff --git a/library/x509.c b/library/x509.c
index 6f88f3f..da772b8 100644
--- a/library/x509.c
+++ b/library/x509.c
@@ -1434,6 +1434,31 @@
         break;
 
         /*
+         * directoryName
+         */
+        case (MBEDTLS_ASN1_CONTEXT_SPECIFIC | MBEDTLS_X509_SAN_DIRECTORY_NAME):
+        {
+            size_t name_len;
+            unsigned char *p = san_buf->p;
+            memset(san, 0, sizeof(mbedtls_x509_subject_alternative_name));
+            san->type = MBEDTLS_X509_SAN_DIRECTORY_NAME;
+
+            ret = mbedtls_asn1_get_tag(&p, p + san_buf->len, &name_len,
+                                       MBEDTLS_ASN1_CONSTRUCTED | MBEDTLS_ASN1_SEQUENCE);
+
+            if (ret != 0) {
+                return MBEDTLS_ERROR_ADD(MBEDTLS_ERR_X509_INVALID_EXTENSIONS,
+                                         ret);
+            }
+
+            if ((ret = mbedtls_x509_get_name(&p, p + name_len,
+                                             &san->san.directory_name)) != 0) {
+                return MBEDTLS_ERROR_ADD(MBEDTLS_ERR_X509_INVALID_EXTENSIONS,
+                                         ret);
+            }
+        }
+        break;
+        /*
          * Type not supported
          */
         default:
@@ -1554,6 +1579,22 @@
             break;
 
             /*
+             * directoryName
+             */
+            case MBEDTLS_X509_SAN_DIRECTORY_NAME:
+            {
+                ret = mbedtls_snprintf(p, n, "\n%s    directoryName : ", prefix);
+                MBEDTLS_X509_SAFE_SNPRINTF;
+                ret = mbedtls_x509_dn_gets(p, n, &san.san.directory_name);
+                if (ret < 0) {
+                    return ret;
+                }
+
+                p += ret;
+                n -= ret;
+            }
+            break;
+            /*
              * Type not supported, skip item.
              */
             default: