TeamHepta/mbedtls
1
0
Fork 0
mirror of https://github.com/Mbed-TLS/mbedtls.git synced 2026-04-06 20:46:32 +02:00
Code Issues Packages Projects Releases Wiki Activity

Parse top-level OCSP ResponseData

Browse Source 
Populate the function x509_ocsp_get_response_data() with code that
parses the following ASN.1 structure:

   ResponseData ::= SEQUENCE {
      version              [0] EXPLICIT Version DEFAULT v1,
      responderID              ResponderID,
      producedAt               GeneralizedTime,
      responses                SEQUENCE OF SingleResponse,
      responseExtensions   [1] EXPLICIT Extensions OPTIONAL }

x509_ocsp_get_response_data() will parse the top-level SEQUENCE and the
two EXPLICIT tags. It delegates the parsing of the individual
subcomponents to x509_ocsp_get_version(), x509_ocsp_get_responder_id(),
x509_ocsp_get_generalized_time(), x509_ocsp_get_responses() and
x509_ocsp_get_extensions().
This commit is contained in:
Andres Amaya Garcia
2017-08-25 10:46:38 +01:00
committed by Andres Amaya Garcia
parent 8f1e390a36
commit 4775cd3827
2 changed files with 144 additions and 9 deletions
Download Patch File Download Diff File Expand all files Collapse all files

37
include/mbedtls/x509_ocsp.h
View File

@@ -47,6 +47,8 @@
#define MBEDTLS_X509_OCSP_RESPONSE_STATUS_SIG_REQUIRED 5
#define MBEDTLS_X509_OCSP_RESPONSE_STATUS_UNAUTHORIZED 6
#define MBEDTLS_X509_OCSP_VERSION_1 0
/**
* \addtogroup x509_module
* \{
@@ -61,24 +63,41 @@ extern "C" {
* \{
*/
/**
* Container for an X.509 OCSP ResponderID.
*/
typedef struct mbedtls_x509_ocsp_responder_id {
} mbedtls_x509_ocsp_responder_id;
/**
* Container for an X.509 OCSP SingleResponse.
*/
typedef struct mbedtls_x509_ocsp_single_response {
} mbedtls_x509_ocsp_single_response;
/**
* Container for an X.509 OCSP response.
*/
typedef struct mbedtls_x509_ocsp_response {
mbedtls_x509_buf raw; /**< The raw response data (DER). */
mbedtls_x509_buf raw; /**< The raw response data (DER). */
mbedtls_x509_buf resp_type; /**< The type of response e.g. OCSP or BASIC */
uint8_t resp_status; /**< The OCSP response status */
uint8_t resp_status; /**< The OCSP response status */
mbedtls_x509_buf resp_type; /**< The type of response e.g. OCSP or BASIC */
mbedtls_x509_buf sig; /**< Signature computed on the hash of the ResponseData */
int version; /**< The OCSP response version. (0=v1) */
mbedtls_x509_ocsp_responder_id responder_id; /**< Internal representation of the ResponderID */
mbedtls_x509_time produced_at; /**< The time at which the OCSP responder signed this response */
mbedtls_x509_ocsp_single_response single_resp; /**< List of SingleResponse containers each containing the revocation status of a certificate */
mbedtls_x509_buf sig_oid; /**< Signature algorithm OID, e.g. sha1RSA */
mbedtls_md_type_t sig_md; /**< Internal representation of the MD algorithm of the signature algorithm, e.g. MBEDTLS_MD_SHA256 */
mbedtls_pk_type_t sig_pk; /**< Internal representation of the Public Key algorithm of the signature algorithm, e.g. MBEDTLS_PK_RSA */
void *sig_opts; /**< Signature options passed to mbedtls_pk_verify_ext(), e.g. for RSASSA-PSS */
mbedtls_x509_buf sig; /**< Signature computed on the hash of the ResponseData */
mbedtls_x509_crt certs; /**< List of certificates included in the OCSP response */
mbedtls_x509_buf sig_oid; /**< Signature algorithm OID, e.g. sha1RSA */
mbedtls_md_type_t sig_md; /**< Internal representation of the MD algorithm of the signature algorithm, e.g. MBEDTLS_MD_SHA256 */
mbedtls_pk_type_t sig_pk; /**< Internal representation of the Public Key algorithm of the signature algorithm, e.g. MBEDTLS_PK_RSA */
void *sig_opts; /**< Signature options passed to mbedtls_pk_verify_ext(), e.g. for RSASSA-PSS */
mbedtls_x509_crt certs; /**< List of certificates included in the OCSP response */
} mbedtls_x509_ocsp_response;
/**