blob: a69098638c3015fc244593730f4b6560a3b03fcc [file] [log] [blame]
Paul Bakker7c6b2c32013-09-16 13:49:26 +02001/*
2 * X.509 certificate writing
3 *
Manuel Pégourié-Gonnard6fb81872015-07-27 11:11:48 +02004 * Copyright (C) 2006-2015, ARM Limited, All Rights Reserved
Bence Szépkúti4e9f7122020-06-05 13:02:18 +02005 * SPDX-License-Identifier: Apache-2.0 OR GPL-2.0-or-later
6 *
7 * This file is provided under the Apache License 2.0, or the
8 * GNU General Public License v2.0 or later.
9 *
10 * **********
11 * Apache License 2.0:
Manuel Pégourié-Gonnard37ff1402015-09-04 14:21:07 +020012 *
13 * Licensed under the Apache License, Version 2.0 (the "License"); you may
14 * not use this file except in compliance with the License.
15 * You may obtain a copy of the License at
16 *
17 * http://www.apache.org/licenses/LICENSE-2.0
18 *
19 * Unless required by applicable law or agreed to in writing, software
20 * distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
21 * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
22 * See the License for the specific language governing permissions and
23 * limitations under the License.
Paul Bakker7c6b2c32013-09-16 13:49:26 +020024 *
Bence Szépkúti4e9f7122020-06-05 13:02:18 +020025 * **********
26 *
27 * **********
28 * GNU General Public License v2.0 or later:
29 *
30 * This program is free software; you can redistribute it and/or modify
31 * it under the terms of the GNU General Public License as published by
32 * the Free Software Foundation; either version 2 of the License, or
33 * (at your option) any later version.
34 *
35 * This program is distributed in the hope that it will be useful,
36 * but WITHOUT ANY WARRANTY; without even the implied warranty of
37 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
38 * GNU General Public License for more details.
39 *
40 * You should have received a copy of the GNU General Public License along
41 * with this program; if not, write to the Free Software Foundation, Inc.,
42 * 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301 USA.
43 *
44 * **********
45 *
Manuel Pégourié-Gonnardfe446432015-03-06 13:17:10 +000046 * This file is part of mbed TLS (https://tls.mbed.org)
Paul Bakker7c6b2c32013-09-16 13:49:26 +020047 */
48/*
49 * References:
50 * - certificates: RFC 5280, updated by RFC 6818
51 * - CSRs: PKCS#10 v1.7 aka RFC 2986
52 * - attributes: PKCS#9 v2.0 aka RFC 2985
53 */
54
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +020055#if !defined(MBEDTLS_CONFIG_FILE)
Manuel Pégourié-Gonnard7f809972015-03-09 17:05:11 +000056#include "mbedtls/config.h"
Manuel Pégourié-Gonnardcef4ad22014-04-29 12:39:06 +020057#else
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +020058#include MBEDTLS_CONFIG_FILE
Manuel Pégourié-Gonnardcef4ad22014-04-29 12:39:06 +020059#endif
Paul Bakker7c6b2c32013-09-16 13:49:26 +020060
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +020061#if defined(MBEDTLS_X509_CRT_WRITE_C)
Paul Bakker7c6b2c32013-09-16 13:49:26 +020062
Manuel Pégourié-Gonnard7f809972015-03-09 17:05:11 +000063#include "mbedtls/x509_crt.h"
64#include "mbedtls/oid.h"
65#include "mbedtls/asn1write.h"
66#include "mbedtls/sha1.h"
Paul Bakker7c6b2c32013-09-16 13:49:26 +020067
Rich Evans00ab4702015-02-06 13:43:58 +000068#include <string.h>
69
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +020070#if defined(MBEDTLS_PEM_WRITE_C)
Manuel Pégourié-Gonnard7f809972015-03-09 17:05:11 +000071#include "mbedtls/pem.h"
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +020072#endif /* MBEDTLS_PEM_WRITE_C */
Paul Bakker7c6b2c32013-09-16 13:49:26 +020073
Paul Bakker34617722014-06-13 17:20:13 +020074/* Implementation that should never be optimized out by the compiler */
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +020075static void mbedtls_zeroize( void *v, size_t n ) {
Paul Bakker34617722014-06-13 17:20:13 +020076 volatile unsigned char *p = v; while( n-- ) *p++ = 0;
77}
78
k-stachowiakb50c39c2019-05-31 20:11:26 +020079/*
80 * For the currently used signature algorithms the buffer to store any signature
81 * must be at least of size MAX(MBEDTLS_ECDSA_MAX_LEN, MBEDTLS_MPI_MAX_SIZE)
82 */
83#if MBEDTLS_ECDSA_MAX_LEN > MBEDTLS_MPI_MAX_SIZE
84#define SIGNATURE_MAX_SIZE MBEDTLS_ECDSA_MAX_LEN
85#else
86#define SIGNATURE_MAX_SIZE MBEDTLS_MPI_MAX_SIZE
87#endif
88
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +020089void mbedtls_x509write_crt_init( mbedtls_x509write_cert *ctx )
Paul Bakker7c6b2c32013-09-16 13:49:26 +020090{
Hanno Becker81535d02017-09-13 15:39:59 +010091 memset( ctx, 0, sizeof( mbedtls_x509write_cert ) );
Paul Bakker7c6b2c32013-09-16 13:49:26 +020092
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +020093 mbedtls_mpi_init( &ctx->serial );
94 ctx->version = MBEDTLS_X509_CRT_VERSION_3;
Paul Bakker7c6b2c32013-09-16 13:49:26 +020095}
96
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +020097void mbedtls_x509write_crt_free( mbedtls_x509write_cert *ctx )
Paul Bakker7c6b2c32013-09-16 13:49:26 +020098{
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +020099 mbedtls_mpi_free( &ctx->serial );
Paul Bakker7c6b2c32013-09-16 13:49:26 +0200100
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200101 mbedtls_asn1_free_named_data_list( &ctx->subject );
102 mbedtls_asn1_free_named_data_list( &ctx->issuer );
103 mbedtls_asn1_free_named_data_list( &ctx->extensions );
Paul Bakker7c6b2c32013-09-16 13:49:26 +0200104
Hanno Becker81535d02017-09-13 15:39:59 +0100105 mbedtls_zeroize( ctx, sizeof( mbedtls_x509write_cert ) );
Paul Bakker7c6b2c32013-09-16 13:49:26 +0200106}
107
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200108void mbedtls_x509write_crt_set_version( mbedtls_x509write_cert *ctx, int version )
Paul Bakker5191e922013-10-11 10:54:28 +0200109{
110 ctx->version = version;
111}
112
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200113void mbedtls_x509write_crt_set_md_alg( mbedtls_x509write_cert *ctx, mbedtls_md_type_t md_alg )
Paul Bakker7c6b2c32013-09-16 13:49:26 +0200114{
115 ctx->md_alg = md_alg;
116}
117
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200118void mbedtls_x509write_crt_set_subject_key( mbedtls_x509write_cert *ctx, mbedtls_pk_context *key )
Paul Bakker7c6b2c32013-09-16 13:49:26 +0200119{
120 ctx->subject_key = key;
121}
122
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200123void mbedtls_x509write_crt_set_issuer_key( mbedtls_x509write_cert *ctx, mbedtls_pk_context *key )
Paul Bakker7c6b2c32013-09-16 13:49:26 +0200124{
125 ctx->issuer_key = key;
126}
127
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200128int mbedtls_x509write_crt_set_subject_name( mbedtls_x509write_cert *ctx,
Paul Bakker50dc8502013-10-28 21:19:10 +0100129 const char *subject_name )
Paul Bakker7c6b2c32013-09-16 13:49:26 +0200130{
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200131 return mbedtls_x509_string_to_names( &ctx->subject, subject_name );
Paul Bakker7c6b2c32013-09-16 13:49:26 +0200132}
133
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200134int mbedtls_x509write_crt_set_issuer_name( mbedtls_x509write_cert *ctx,
Paul Bakker50dc8502013-10-28 21:19:10 +0100135 const char *issuer_name )
Paul Bakker7c6b2c32013-09-16 13:49:26 +0200136{
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200137 return mbedtls_x509_string_to_names( &ctx->issuer, issuer_name );
Paul Bakker7c6b2c32013-09-16 13:49:26 +0200138}
139
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200140int mbedtls_x509write_crt_set_serial( mbedtls_x509write_cert *ctx, const mbedtls_mpi *serial )
Paul Bakker7c6b2c32013-09-16 13:49:26 +0200141{
142 int ret;
143
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200144 if( ( ret = mbedtls_mpi_copy( &ctx->serial, serial ) ) != 0 )
Paul Bakker7c6b2c32013-09-16 13:49:26 +0200145 return( ret );
146
147 return( 0 );
148}
149
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200150int mbedtls_x509write_crt_set_validity( mbedtls_x509write_cert *ctx, const char *not_before,
Paul Bakker50dc8502013-10-28 21:19:10 +0100151 const char *not_after )
Paul Bakker7c6b2c32013-09-16 13:49:26 +0200152{
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200153 if( strlen( not_before ) != MBEDTLS_X509_RFC5280_UTC_TIME_LEN - 1 ||
154 strlen( not_after ) != MBEDTLS_X509_RFC5280_UTC_TIME_LEN - 1 )
Paul Bakker7c6b2c32013-09-16 13:49:26 +0200155 {
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200156 return( MBEDTLS_ERR_X509_BAD_INPUT_DATA );
Paul Bakker7c6b2c32013-09-16 13:49:26 +0200157 }
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200158 strncpy( ctx->not_before, not_before, MBEDTLS_X509_RFC5280_UTC_TIME_LEN );
159 strncpy( ctx->not_after , not_after , MBEDTLS_X509_RFC5280_UTC_TIME_LEN );
160 ctx->not_before[MBEDTLS_X509_RFC5280_UTC_TIME_LEN - 1] = 'Z';
161 ctx->not_after[MBEDTLS_X509_RFC5280_UTC_TIME_LEN - 1] = 'Z';
Paul Bakker7c6b2c32013-09-16 13:49:26 +0200162
163 return( 0 );
164}
165
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200166int mbedtls_x509write_crt_set_extension( mbedtls_x509write_cert *ctx,
Paul Bakker7c6b2c32013-09-16 13:49:26 +0200167 const char *oid, size_t oid_len,
168 int critical,
169 const unsigned char *val, size_t val_len )
170{
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200171 return mbedtls_x509_set_extension( &ctx->extensions, oid, oid_len,
Paul Bakker7c6b2c32013-09-16 13:49:26 +0200172 critical, val, val_len );
173}
174
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200175int mbedtls_x509write_crt_set_basic_constraints( mbedtls_x509write_cert *ctx,
Paul Bakker7c6b2c32013-09-16 13:49:26 +0200176 int is_ca, int max_pathlen )
177{
178 int ret;
179 unsigned char buf[9];
180 unsigned char *c = buf + sizeof(buf);
181 size_t len = 0;
182
183 memset( buf, 0, sizeof(buf) );
184
185 if( is_ca && max_pathlen > 127 )
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200186 return( MBEDTLS_ERR_X509_BAD_INPUT_DATA );
Paul Bakker7c6b2c32013-09-16 13:49:26 +0200187
188 if( is_ca )
189 {
190 if( max_pathlen >= 0 )
191 {
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200192 MBEDTLS_ASN1_CHK_ADD( len, mbedtls_asn1_write_int( &c, buf, max_pathlen ) );
Paul Bakker7c6b2c32013-09-16 13:49:26 +0200193 }
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200194 MBEDTLS_ASN1_CHK_ADD( len, mbedtls_asn1_write_bool( &c, buf, 1 ) );
Paul Bakker7c6b2c32013-09-16 13:49:26 +0200195 }
196
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200197 MBEDTLS_ASN1_CHK_ADD( len, mbedtls_asn1_write_len( &c, buf, len ) );
198 MBEDTLS_ASN1_CHK_ADD( len, mbedtls_asn1_write_tag( &c, buf, MBEDTLS_ASN1_CONSTRUCTED |
199 MBEDTLS_ASN1_SEQUENCE ) );
Paul Bakker7c6b2c32013-09-16 13:49:26 +0200200
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200201 return mbedtls_x509write_crt_set_extension( ctx, MBEDTLS_OID_BASIC_CONSTRAINTS,
202 MBEDTLS_OID_SIZE( MBEDTLS_OID_BASIC_CONSTRAINTS ),
Paul Bakker7c6b2c32013-09-16 13:49:26 +0200203 0, buf + sizeof(buf) - len, len );
204}
205
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200206#if defined(MBEDTLS_SHA1_C)
207int mbedtls_x509write_crt_set_subject_key_identifier( mbedtls_x509write_cert *ctx )
Paul Bakker7c6b2c32013-09-16 13:49:26 +0200208{
209 int ret;
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200210 unsigned char buf[MBEDTLS_MPI_MAX_SIZE * 2 + 20]; /* tag, length + 2xMPI */
Paul Bakker7c6b2c32013-09-16 13:49:26 +0200211 unsigned char *c = buf + sizeof(buf);
212 size_t len = 0;
213
Paul Bakker66d5d072014-06-17 16:39:18 +0200214 memset( buf, 0, sizeof(buf) );
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200215 MBEDTLS_ASN1_CHK_ADD( len, mbedtls_pk_write_pubkey( &c, buf, ctx->subject_key ) );
Paul Bakker7c6b2c32013-09-16 13:49:26 +0200216
Gilles Peskine9e4f77c2018-01-22 11:48:08 +0100217 ret = mbedtls_sha1_ret( buf + sizeof( buf ) - len, len,
Andres Amaya Garcia8d8204f2017-06-28 11:07:30 +0100218 buf + sizeof( buf ) - 20 );
219 if( ret != 0 )
220 return( ret );
221 c = buf + sizeof( buf ) - 20;
Paul Bakker7c6b2c32013-09-16 13:49:26 +0200222 len = 20;
223
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200224 MBEDTLS_ASN1_CHK_ADD( len, mbedtls_asn1_write_len( &c, buf, len ) );
225 MBEDTLS_ASN1_CHK_ADD( len, mbedtls_asn1_write_tag( &c, buf, MBEDTLS_ASN1_OCTET_STRING ) );
Paul Bakker7c6b2c32013-09-16 13:49:26 +0200226
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200227 return mbedtls_x509write_crt_set_extension( ctx, MBEDTLS_OID_SUBJECT_KEY_IDENTIFIER,
228 MBEDTLS_OID_SIZE( MBEDTLS_OID_SUBJECT_KEY_IDENTIFIER ),
Paul Bakker7c6b2c32013-09-16 13:49:26 +0200229 0, buf + sizeof(buf) - len, len );
230}
231
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200232int mbedtls_x509write_crt_set_authority_key_identifier( mbedtls_x509write_cert *ctx )
Paul Bakker7c6b2c32013-09-16 13:49:26 +0200233{
234 int ret;
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200235 unsigned char buf[MBEDTLS_MPI_MAX_SIZE * 2 + 20]; /* tag, length + 2xMPI */
Hanno Becker81535d02017-09-13 15:39:59 +0100236 unsigned char *c = buf + sizeof( buf );
Paul Bakker7c6b2c32013-09-16 13:49:26 +0200237 size_t len = 0;
238
Paul Bakker66d5d072014-06-17 16:39:18 +0200239 memset( buf, 0, sizeof(buf) );
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200240 MBEDTLS_ASN1_CHK_ADD( len, mbedtls_pk_write_pubkey( &c, buf, ctx->issuer_key ) );
Paul Bakker7c6b2c32013-09-16 13:49:26 +0200241
Gilles Peskine9e4f77c2018-01-22 11:48:08 +0100242 ret = mbedtls_sha1_ret( buf + sizeof( buf ) - len, len,
Andres Amaya Garcia8d8204f2017-06-28 11:07:30 +0100243 buf + sizeof( buf ) - 20 );
244 if( ret != 0 )
245 return( ret );
246 c = buf + sizeof( buf ) - 20;
Paul Bakker7c6b2c32013-09-16 13:49:26 +0200247 len = 20;
248
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200249 MBEDTLS_ASN1_CHK_ADD( len, mbedtls_asn1_write_len( &c, buf, len ) );
250 MBEDTLS_ASN1_CHK_ADD( len, mbedtls_asn1_write_tag( &c, buf, MBEDTLS_ASN1_CONTEXT_SPECIFIC | 0 ) );
Paul Bakker7c6b2c32013-09-16 13:49:26 +0200251
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200252 MBEDTLS_ASN1_CHK_ADD( len, mbedtls_asn1_write_len( &c, buf, len ) );
253 MBEDTLS_ASN1_CHK_ADD( len, mbedtls_asn1_write_tag( &c, buf, MBEDTLS_ASN1_CONSTRUCTED |
254 MBEDTLS_ASN1_SEQUENCE ) );
Paul Bakker7c6b2c32013-09-16 13:49:26 +0200255
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200256 return mbedtls_x509write_crt_set_extension( ctx, MBEDTLS_OID_AUTHORITY_KEY_IDENTIFIER,
257 MBEDTLS_OID_SIZE( MBEDTLS_OID_AUTHORITY_KEY_IDENTIFIER ),
Hanno Becker81535d02017-09-13 15:39:59 +0100258 0, buf + sizeof( buf ) - len, len );
Paul Bakker7c6b2c32013-09-16 13:49:26 +0200259}
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200260#endif /* MBEDTLS_SHA1_C */
Paul Bakker7c6b2c32013-09-16 13:49:26 +0200261
Andres Amaya Garcia04ee5e02018-09-26 10:48:24 +0100262static size_t crt_get_unused_bits_for_named_bitstring( unsigned char bitstring,
263 size_t bit_offset )
264{
265 size_t unused_bits;
266
267 /* Count the unused bits removing trailing 0s */
268 for( unused_bits = bit_offset; unused_bits < 8; unused_bits++ )
269 if( ( ( bitstring >> unused_bits ) & 0x1 ) != 0 )
270 break;
271
272 return( unused_bits );
273}
274
Manuel Pégourié-Gonnard1cd10ad2015-06-23 11:07:37 +0200275int mbedtls_x509write_crt_set_key_usage( mbedtls_x509write_cert *ctx,
276 unsigned int key_usage )
Paul Bakker7c6b2c32013-09-16 13:49:26 +0200277{
Manuel Pégourié-Gonnard1cd10ad2015-06-23 11:07:37 +0200278 unsigned char buf[4], ku;
Paul Bakker7c6b2c32013-09-16 13:49:26 +0200279 unsigned char *c;
280 int ret;
Andres Amaya Garcia04ee5e02018-09-26 10:48:24 +0100281 size_t unused_bits;
282 const unsigned int allowed_bits = MBEDTLS_X509_KU_DIGITAL_SIGNATURE |
283 MBEDTLS_X509_KU_NON_REPUDIATION |
284 MBEDTLS_X509_KU_KEY_ENCIPHERMENT |
285 MBEDTLS_X509_KU_DATA_ENCIPHERMENT |
286 MBEDTLS_X509_KU_KEY_AGREEMENT |
287 MBEDTLS_X509_KU_KEY_CERT_SIGN |
288 MBEDTLS_X509_KU_CRL_SIGN;
Paul Bakker7c6b2c32013-09-16 13:49:26 +0200289
Andres Amaya Garcia04ee5e02018-09-26 10:48:24 +0100290 /* Check that nothing other than the allowed flags is set */
291 if( ( key_usage & ~allowed_bits ) != 0 )
Manuel Pégourié-Gonnard1cd10ad2015-06-23 11:07:37 +0200292 return( MBEDTLS_ERR_X509_FEATURE_UNAVAILABLE );
Paul Bakker7c6b2c32013-09-16 13:49:26 +0200293
Manuel Pégourié-Gonnard1cd10ad2015-06-23 11:07:37 +0200294 c = buf + 4;
Andres Amaya Garcia04ee5e02018-09-26 10:48:24 +0100295 ku = (unsigned char)key_usage;
296 unused_bits = crt_get_unused_bits_for_named_bitstring( ku, 1 );
297 ret = mbedtls_asn1_write_bitstring( &c, buf, &ku, 8 - unused_bits );
Manuel Pégourié-Gonnard1cd10ad2015-06-23 11:07:37 +0200298
Andres Amaya Garcia04ee5e02018-09-26 10:48:24 +0100299 if( ret < 0 )
Paul Bakker7c6b2c32013-09-16 13:49:26 +0200300 return( ret );
Andres Amaya Garcia04ee5e02018-09-26 10:48:24 +0100301 else if( ret < 3 || ret > 4 )
302 return( MBEDTLS_ERR_X509_INVALID_FORMAT );
Paul Bakker7c6b2c32013-09-16 13:49:26 +0200303
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200304 ret = mbedtls_x509write_crt_set_extension( ctx, MBEDTLS_OID_KEY_USAGE,
305 MBEDTLS_OID_SIZE( MBEDTLS_OID_KEY_USAGE ),
Andres Amaya Garcia04ee5e02018-09-26 10:48:24 +0100306 1, c, (size_t)ret );
Paul Bakker7c6b2c32013-09-16 13:49:26 +0200307 if( ret != 0 )
308 return( ret );
309
310 return( 0 );
311}
312
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200313int mbedtls_x509write_crt_set_ns_cert_type( mbedtls_x509write_cert *ctx,
Paul Bakker7c6b2c32013-09-16 13:49:26 +0200314 unsigned char ns_cert_type )
315{
316 unsigned char buf[4];
317 unsigned char *c;
Andres Amaya Garcia04ee5e02018-09-26 10:48:24 +0100318 size_t unused_bits;
Paul Bakker7c6b2c32013-09-16 13:49:26 +0200319 int ret;
320
321 c = buf + 4;
322
Andres Amaya Garcia04ee5e02018-09-26 10:48:24 +0100323 unused_bits = crt_get_unused_bits_for_named_bitstring( ns_cert_type, 0 );
324 ret = mbedtls_asn1_write_bitstring( &c,
325 buf,
326 &ns_cert_type,
327 8 - unused_bits );
328 if( ret < 3 || ret > 4 )
Paul Bakker7c6b2c32013-09-16 13:49:26 +0200329 return( ret );
330
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200331 ret = mbedtls_x509write_crt_set_extension( ctx, MBEDTLS_OID_NS_CERT_TYPE,
332 MBEDTLS_OID_SIZE( MBEDTLS_OID_NS_CERT_TYPE ),
Andres Amaya Garcia04ee5e02018-09-26 10:48:24 +0100333 0, c, (size_t)ret );
Paul Bakker7c6b2c32013-09-16 13:49:26 +0200334 if( ret != 0 )
335 return( ret );
336
337 return( 0 );
338}
339
340static int x509_write_time( unsigned char **p, unsigned char *start,
Hanno Becker61937d42017-04-26 15:01:23 +0100341 const char *t, size_t size )
Paul Bakker7c6b2c32013-09-16 13:49:26 +0200342{
343 int ret;
344 size_t len = 0;
345
346 /*
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200347 * write MBEDTLS_ASN1_UTC_TIME if year < 2050 (2 bytes shorter)
Paul Bakker7c6b2c32013-09-16 13:49:26 +0200348 */
Hanno Becker61937d42017-04-26 15:01:23 +0100349 if( t[0] == '2' && t[1] == '0' && t[2] < '5' )
Paul Bakker7c6b2c32013-09-16 13:49:26 +0200350 {
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200351 MBEDTLS_ASN1_CHK_ADD( len, mbedtls_asn1_write_raw_buffer( p, start,
Hanno Becker61937d42017-04-26 15:01:23 +0100352 (const unsigned char *) t + 2,
Paul Bakker7c6b2c32013-09-16 13:49:26 +0200353 size - 2 ) );
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200354 MBEDTLS_ASN1_CHK_ADD( len, mbedtls_asn1_write_len( p, start, len ) );
355 MBEDTLS_ASN1_CHK_ADD( len, mbedtls_asn1_write_tag( p, start, MBEDTLS_ASN1_UTC_TIME ) );
Paul Bakker7c6b2c32013-09-16 13:49:26 +0200356 }
357 else
358 {
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200359 MBEDTLS_ASN1_CHK_ADD( len, mbedtls_asn1_write_raw_buffer( p, start,
Hanno Becker61937d42017-04-26 15:01:23 +0100360 (const unsigned char *) t,
Paul Bakker7c6b2c32013-09-16 13:49:26 +0200361 size ) );
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200362 MBEDTLS_ASN1_CHK_ADD( len, mbedtls_asn1_write_len( p, start, len ) );
363 MBEDTLS_ASN1_CHK_ADD( len, mbedtls_asn1_write_tag( p, start, MBEDTLS_ASN1_GENERALIZED_TIME ) );
Paul Bakker7c6b2c32013-09-16 13:49:26 +0200364 }
365
Paul Bakkerb9cfaa02013-10-11 18:58:55 +0200366 return( (int) len );
Paul Bakker7c6b2c32013-09-16 13:49:26 +0200367}
368
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200369int mbedtls_x509write_crt_der( mbedtls_x509write_cert *ctx, unsigned char *buf, size_t size,
Paul Bakker7c6b2c32013-09-16 13:49:26 +0200370 int (*f_rng)(void *, unsigned char *, size_t),
371 void *p_rng )
372{
373 int ret;
374 const char *sig_oid;
375 size_t sig_oid_len = 0;
376 unsigned char *c, *c2;
377 unsigned char hash[64];
k-stachowiakb50c39c2019-05-31 20:11:26 +0200378 unsigned char sig[SIGNATURE_MAX_SIZE];
Paul Bakker7c6b2c32013-09-16 13:49:26 +0200379 unsigned char tmp_buf[2048];
380 size_t sub_len = 0, pub_len = 0, sig_and_oid_len = 0, sig_len;
381 size_t len = 0;
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200382 mbedtls_pk_type_t pk_alg;
Paul Bakker7c6b2c32013-09-16 13:49:26 +0200383
384 /*
385 * Prepare data to be signed in tmp_buf
386 */
387 c = tmp_buf + sizeof( tmp_buf );
388
389 /* Signature algorithm needed in TBS, and later for actual signature */
Hanno Beckerfc771442017-09-13 08:45:48 +0100390
391 /* There's no direct way of extracting a signature algorithm
392 * (represented as an element of mbedtls_pk_type_t) from a PK instance. */
393 if( mbedtls_pk_can_do( ctx->issuer_key, MBEDTLS_PK_RSA ) )
394 pk_alg = MBEDTLS_PK_RSA;
395 else if( mbedtls_pk_can_do( ctx->issuer_key, MBEDTLS_PK_ECDSA ) )
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200396 pk_alg = MBEDTLS_PK_ECDSA;
Hanno Beckerfc771442017-09-13 08:45:48 +0100397 else
Hanno Beckerd8a6f7c2017-09-22 16:05:43 +0100398 return( MBEDTLS_ERR_X509_INVALID_ALG );
Paul Bakker7c6b2c32013-09-16 13:49:26 +0200399
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200400 if( ( ret = mbedtls_oid_get_oid_by_sig_alg( pk_alg, ctx->md_alg,
Hanno Becker81535d02017-09-13 15:39:59 +0100401 &sig_oid, &sig_oid_len ) ) != 0 )
Paul Bakker7c6b2c32013-09-16 13:49:26 +0200402 {
403 return( ret );
404 }
405
406 /*
407 * Extensions ::= SEQUENCE SIZE (1..MAX) OF Extension
408 */
Hanno Beckerd7f35202017-09-13 12:00:15 +0100409
410 /* Only for v3 */
Hanno Beckera20e33a2017-09-22 15:40:01 +0100411 if( ctx->version == MBEDTLS_X509_CRT_VERSION_3 )
Hanno Beckerd7f35202017-09-13 12:00:15 +0100412 {
413 MBEDTLS_ASN1_CHK_ADD( len, mbedtls_x509_write_extensions( &c, tmp_buf, ctx->extensions ) );
414 MBEDTLS_ASN1_CHK_ADD( len, mbedtls_asn1_write_len( &c, tmp_buf, len ) );
415 MBEDTLS_ASN1_CHK_ADD( len, mbedtls_asn1_write_tag( &c, tmp_buf, MBEDTLS_ASN1_CONSTRUCTED |
416 MBEDTLS_ASN1_SEQUENCE ) );
417 MBEDTLS_ASN1_CHK_ADD( len, mbedtls_asn1_write_len( &c, tmp_buf, len ) );
418 MBEDTLS_ASN1_CHK_ADD( len, mbedtls_asn1_write_tag( &c, tmp_buf, MBEDTLS_ASN1_CONTEXT_SPECIFIC |
419 MBEDTLS_ASN1_CONSTRUCTED | 3 ) );
420 }
Paul Bakker7c6b2c32013-09-16 13:49:26 +0200421
422 /*
423 * SubjectPublicKeyInfo
424 */
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200425 MBEDTLS_ASN1_CHK_ADD( pub_len, mbedtls_pk_write_pubkey_der( ctx->subject_key,
Paul Bakker7c6b2c32013-09-16 13:49:26 +0200426 tmp_buf, c - tmp_buf ) );
427 c -= pub_len;
428 len += pub_len;
429
430 /*
431 * Subject ::= Name
432 */
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200433 MBEDTLS_ASN1_CHK_ADD( len, mbedtls_x509_write_names( &c, tmp_buf, ctx->subject ) );
Paul Bakker7c6b2c32013-09-16 13:49:26 +0200434
435 /*
436 * Validity ::= SEQUENCE {
437 * notBefore Time,
438 * notAfter Time }
439 */
440 sub_len = 0;
441
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200442 MBEDTLS_ASN1_CHK_ADD( sub_len, x509_write_time( &c, tmp_buf, ctx->not_after,
443 MBEDTLS_X509_RFC5280_UTC_TIME_LEN ) );
Paul Bakker7c6b2c32013-09-16 13:49:26 +0200444
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200445 MBEDTLS_ASN1_CHK_ADD( sub_len, x509_write_time( &c, tmp_buf, ctx->not_before,
446 MBEDTLS_X509_RFC5280_UTC_TIME_LEN ) );
Paul Bakker7c6b2c32013-09-16 13:49:26 +0200447
448 len += sub_len;
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200449 MBEDTLS_ASN1_CHK_ADD( len, mbedtls_asn1_write_len( &c, tmp_buf, sub_len ) );
450 MBEDTLS_ASN1_CHK_ADD( len, mbedtls_asn1_write_tag( &c, tmp_buf, MBEDTLS_ASN1_CONSTRUCTED |
451 MBEDTLS_ASN1_SEQUENCE ) );
Paul Bakker7c6b2c32013-09-16 13:49:26 +0200452
453 /*
454 * Issuer ::= Name
455 */
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200456 MBEDTLS_ASN1_CHK_ADD( len, mbedtls_x509_write_names( &c, tmp_buf, ctx->issuer ) );
Paul Bakker7c6b2c32013-09-16 13:49:26 +0200457
458 /*
459 * Signature ::= AlgorithmIdentifier
460 */
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200461 MBEDTLS_ASN1_CHK_ADD( len, mbedtls_asn1_write_algorithm_identifier( &c, tmp_buf,
Paul Bakker7c6b2c32013-09-16 13:49:26 +0200462 sig_oid, strlen( sig_oid ), 0 ) );
463
464 /*
465 * Serial ::= INTEGER
466 */
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200467 MBEDTLS_ASN1_CHK_ADD( len, mbedtls_asn1_write_mpi( &c, tmp_buf, &ctx->serial ) );
Paul Bakker7c6b2c32013-09-16 13:49:26 +0200468
469 /*
470 * Version ::= INTEGER { v1(0), v2(1), v3(2) }
471 */
Hanno Becker47698652017-09-13 11:59:26 +0100472
473 /* Can be omitted for v1 */
Hanno Beckera20e33a2017-09-22 15:40:01 +0100474 if( ctx->version != MBEDTLS_X509_CRT_VERSION_1 )
Hanno Becker47698652017-09-13 11:59:26 +0100475 {
476 sub_len = 0;
477 MBEDTLS_ASN1_CHK_ADD( sub_len, mbedtls_asn1_write_int( &c, tmp_buf, ctx->version ) );
478 len += sub_len;
479 MBEDTLS_ASN1_CHK_ADD( len, mbedtls_asn1_write_len( &c, tmp_buf, sub_len ) );
480 MBEDTLS_ASN1_CHK_ADD( len, mbedtls_asn1_write_tag( &c, tmp_buf, MBEDTLS_ASN1_CONTEXT_SPECIFIC |
481 MBEDTLS_ASN1_CONSTRUCTED | 0 ) );
482 }
Paul Bakker7c6b2c32013-09-16 13:49:26 +0200483
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200484 MBEDTLS_ASN1_CHK_ADD( len, mbedtls_asn1_write_len( &c, tmp_buf, len ) );
485 MBEDTLS_ASN1_CHK_ADD( len, mbedtls_asn1_write_tag( &c, tmp_buf, MBEDTLS_ASN1_CONSTRUCTED |
Hanno Becker47698652017-09-13 11:59:26 +0100486 MBEDTLS_ASN1_SEQUENCE ) );
Paul Bakker7c6b2c32013-09-16 13:49:26 +0200487
488 /*
489 * Make signature
490 */
Andres Amaya Garcia8d8204f2017-06-28 11:07:30 +0100491 if( ( ret = mbedtls_md( mbedtls_md_info_from_type( ctx->md_alg ), c,
492 len, hash ) ) != 0 )
493 {
494 return( ret );
495 }
Paul Bakker7c6b2c32013-09-16 13:49:26 +0200496
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200497 if( ( ret = mbedtls_pk_sign( ctx->issuer_key, ctx->md_alg, hash, 0, sig, &sig_len,
Paul Bakker7c6b2c32013-09-16 13:49:26 +0200498 f_rng, p_rng ) ) != 0 )
499 {
500 return( ret );
501 }
502
503 /*
504 * Write data to output buffer
505 */
506 c2 = buf + size;
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200507 MBEDTLS_ASN1_CHK_ADD( sig_and_oid_len, mbedtls_x509_write_sig( &c2, buf,
Paul Bakker7c6b2c32013-09-16 13:49:26 +0200508 sig_oid, sig_oid_len, sig, sig_len ) );
509
Andres AG60dbc932016-09-02 15:23:48 +0100510 if( len > (size_t)( c2 - buf ) )
511 return( MBEDTLS_ERR_ASN1_BUF_TOO_SMALL );
512
Paul Bakker7c6b2c32013-09-16 13:49:26 +0200513 c2 -= len;
514 memcpy( c2, c, len );
515
516 len += sig_and_oid_len;
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200517 MBEDTLS_ASN1_CHK_ADD( len, mbedtls_asn1_write_len( &c2, buf, len ) );
518 MBEDTLS_ASN1_CHK_ADD( len, mbedtls_asn1_write_tag( &c2, buf, MBEDTLS_ASN1_CONSTRUCTED |
519 MBEDTLS_ASN1_SEQUENCE ) );
Paul Bakker7c6b2c32013-09-16 13:49:26 +0200520
Paul Bakkerb9cfaa02013-10-11 18:58:55 +0200521 return( (int) len );
Paul Bakker7c6b2c32013-09-16 13:49:26 +0200522}
523
524#define PEM_BEGIN_CRT "-----BEGIN CERTIFICATE-----\n"
525#define PEM_END_CRT "-----END CERTIFICATE-----\n"
526
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200527#if defined(MBEDTLS_PEM_WRITE_C)
528int mbedtls_x509write_crt_pem( mbedtls_x509write_cert *crt, unsigned char *buf, size_t size,
Paul Bakker7c6b2c32013-09-16 13:49:26 +0200529 int (*f_rng)(void *, unsigned char *, size_t),
530 void *p_rng )
531{
532 int ret;
533 unsigned char output_buf[4096];
534 size_t olen = 0;
535
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200536 if( ( ret = mbedtls_x509write_crt_der( crt, output_buf, sizeof(output_buf),
Paul Bakker7c6b2c32013-09-16 13:49:26 +0200537 f_rng, p_rng ) ) < 0 )
538 {
539 return( ret );
540 }
541
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200542 if( ( ret = mbedtls_pem_write_buffer( PEM_BEGIN_CRT, PEM_END_CRT,
Paul Bakker7c6b2c32013-09-16 13:49:26 +0200543 output_buf + sizeof(output_buf) - ret,
544 ret, buf, size, &olen ) ) != 0 )
545 {
546 return( ret );
547 }
548
549 return( 0 );
550}
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200551#endif /* MBEDTLS_PEM_WRITE_C */
Paul Bakker7c6b2c32013-09-16 13:49:26 +0200552
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200553#endif /* MBEDTLS_X509_CRT_WRITE_C */