1 files changed, 0 insertions, 686 deletions

diff --git a/src/daemon/https/x509/common.c b/src/daemon/https/x509/common.c
index 2dabe3e9..9134597e 100644
--- a/src/daemon/https/x509/common.c
+++ b/src/daemon/https/x509/common.c
@@ -35,692 +35,6 @@
 #include <mpi.h>
 #include <time.h>
 
-typedef struct _oid2string
-{
-  const char *oid;
-  const char *ldap_desc;
-  int choice;                   /* of type DirectoryString */
-  int printable;
-} oid2string;
-
-/* This list contains all the OIDs that may be
- * contained in a rdnSequence and are printable.
- */
-static const oid2string _oid2str[] = {
-  /* PKIX
-   */
-  {"1.3.6.1.5.5.7.9.1",
-   "dateOfBirth",
-   0,
-   1},
-  {"1.3.6.1.5.5.7.9.2",
-   "placeOfBirth",
-   0,
-   1},
-  {"1.3.6.1.5.5.7.9.3",
-   "gender",
-   0,
-   1},
-  {"1.3.6.1.5.5.7.9.4",
-   "countryOfCitizenship",
-   0,
-   1},
-  {"1.3.6.1.5.5.7.9.5",
-   "countryOfResidence",
-   0,
-   1},
-
-  {"2.5.4.6",
-   "C",
-   0,
-   1},
-  {"2.5.4.9",
-   "STREET",
-   1,
-   1},
-  {"2.5.4.12",
-   "T",
-   1,
-   1},
-  {"2.5.4.10",
-   "O",
-   1,
-   1},
-  {"2.5.4.11",
-   "OU",
-   1,
-   1},
-  {"2.5.4.3",
-   "CN",
-   1,
-   1},
-  {"2.5.4.7",
-   "L",
-   1,
-   1},
-  {"2.5.4.8",
-   "ST",
-   1,
-   1},
-
-  {"2.5.4.5",
-   "serialNumber",
-   0,
-   1},
-  {"2.5.4.20",
-   "telephoneNumber",
-   0,
-   1},
-  {"2.5.4.4",
-   "surName",
-   1,
-   1},
-  {"2.5.4.43",
-   "initials",
-   1,
-   1},
-  {"2.5.4.44",
-   "generationQualifier",
-   1,
-   1},
-  {"2.5.4.42",
-   "givenName",
-   1,
-   1},
-  {"2.5.4.65",
-   "pseudonym",
-   1,
-   1},
-  {"2.5.4.46",
-   "dnQualifier",
-   0,
-   1},
-
-  {"0.9.2342.19200300.100.1.25",
-   "DC",
-   0,
-   1},
-  {"0.9.2342.19200300.100.1.1",
-   "UID",
-   1,
-   1},
-
-  /* PKCS #9
-   */
-  {"1.2.840.113549.1.9.1",
-   "EMAIL",
-   0,
-   1},
-  {"1.2.840.113549.1.9.7",
-   NULL,
-   1,
-   1},
-
-  /* friendly name */
-  {"1.2.840.113549.1.9.20",
-   NULL,
-   0,
-   1},
-  {NULL,
-   NULL,
-   0,
-   0}
-};
-
-/* Returns 1 if the data defined by the OID are printable.
- */
-int
-MHD__gnutls_x509_oid_data_printable (const char *oid)
-{
-  int i = 0;
-
-  do
-    {
-      if (strcmp (_oid2str[i].oid, oid) == 0)
-        return _oid2str[i].printable;
-      i++;
-    }
-  while (_oid2str[i].oid != NULL);
-
-  return 0;
-}
-
-/**
- * MHD_gnutls_x509_dn_oid_known - This function will return true if the given OID is known
- * @oid: holds an Object Identifier in a null terminated string
- *
- * This function will inform about known DN OIDs. This is useful since functions
- * like MHD_gnutls_x509_crt_set_dn_by_oid() use the information on known
- * OIDs to properly encode their input. Object Identifiers that are not
- * known are not encoded by these functions, and their input is stored directly
- * into the ASN.1 structure. In that case of unknown OIDs, you have
- * the responsibility of DER encoding your data.
- *
- * Returns 1 on known OIDs and 0 otherwise.
- *
- **/
-int
-MHD_gnutls_x509_dn_oid_known (const char *oid)
-{
-  int i = 0;
-
-  do
-    {
-      if (strcmp (_oid2str[i].oid, oid) == 0)
-        return 1;
-      i++;
-    }
-  while (_oid2str[i].oid != NULL);
-
-  return 0;
-}
-
-/* Returns 1 if the data defined by the OID are of a choice
- * type.
- */
-static int
-MHD__gnutls_x509_oid_data_choice (const char *oid)
-{
-  int i = 0;
-
-  do
-    {
-      if (strcmp (_oid2str[i].oid, oid) == 0)
-        return _oid2str[i].choice;
-      i++;
-    }
-  while (_oid2str[i].oid != NULL);
-
-  return 0;
-}
-
-const char *
-MHD__gnutls_x509_oid2ldap_string (const char *oid)
-{
-  int i = 0;
-
-  do
-    {
-      if (strcmp (_oid2str[i].oid, oid) == 0)
-        return _oid2str[i].ldap_desc;
-      i++;
-    }
-  while (_oid2str[i].oid != NULL);
-
-  return NULL;
-}
-
-/* This function will convert an attribute value, specified by the OID,
- * to a string. The result will be a null terminated string.
- *
- * res may be null. This will just return the res_size, needed to
- * hold the string.
- */
-int
-MHD__gnutls_x509_oid_data2string (const char *oid,
-                                  void *value,
-                                  int value_size, char *res,
-                                  size_t * res_size)
-{
-  char str[MAX_STRING_LEN], tmpname[128];
-  const char *ANAME = NULL;
-  int CHOICE = -1, len = -1, result;
-  ASN1_TYPE tmpasn = ASN1_TYPE_EMPTY;
-  char MHD__asn1_err[MAX_ERROR_DESCRIPTION_SIZE] = "";
-
-  if (value == NULL || value_size <= 0 || res_size == NULL)
-    {
-      MHD_gnutls_assert ();
-      return GNUTLS_E_INVALID_REQUEST;
-    }
-
-  if (MHD__gnutls_x509_oid_data_printable (oid) == 0)
-    {
-      MHD_gnutls_assert ();
-      return GNUTLS_E_INTERNAL_ERROR;
-    }
-
-  ANAME = MHD__asn1_find_structure_from_oid (MHD__gnutls_get_pkix (), oid);
-  CHOICE = MHD__gnutls_x509_oid_data_choice (oid);
-
-  if (ANAME == NULL)
-    {
-      MHD_gnutls_assert ();
-      return GNUTLS_E_INTERNAL_ERROR;
-    }
-
-  MHD_gtls_str_cpy (str, sizeof (str), "PKIX1.");
-  MHD_gtls_str_cat (str, sizeof (str), ANAME);
-
-  if ((result = MHD__asn1_create_element (MHD__gnutls_get_pkix (), str,
-                                          &tmpasn)) != ASN1_SUCCESS)
-    {
-      MHD_gnutls_assert ();
-      return MHD_gtls_asn2err (result);
-    }
-
-  if ((result =
-       MHD__asn1_der_decoding (&tmpasn, value, value_size,
-                               MHD__asn1_err)) != ASN1_SUCCESS)
-    {
-      MHD_gnutls_assert ();
-      MHD__gnutls_x509_log ("MHD__asn1_der_decoding: %s:%s\n", str,
-                            MHD__asn1_err);
-      MHD__asn1_delete_structure (&tmpasn);
-      return MHD_gtls_asn2err (result);
-    }
-
-  /* If this is a choice then we read the choice. Otherwise it
-   * is the value;
-   */
-  len = sizeof (str) - 1;
-  if ((result = MHD__asn1_read_value (tmpasn, "", str, &len)) != ASN1_SUCCESS)
-    {                           /* CHOICE */
-      MHD_gnutls_assert ();
-      MHD__asn1_delete_structure (&tmpasn);
-      return MHD_gtls_asn2err (result);
-    }
-
-  if (CHOICE == 0)
-    {
-      str[len] = 0;
-
-      if (res)
-        MHD_gtls_str_cpy (res, *res_size, str);
-      *res_size = len;
-
-      MHD__asn1_delete_structure (&tmpasn);
-    }
-  else
-    {                           /* CHOICE */
-      int non_printable = 0, teletex = 0;
-      str[len] = 0;
-
-      /* Note that we do not support strings other than
-       * UTF-8 (thus ASCII as well).
-       */
-      if (strcmp (str, "printableString") != 0
-          && strcmp (str, "ia5String") != 0
-          && strcmp (str, "utf8String") != 0)
-        {
-          non_printable = 1;
-        }
-      if (strcmp (str, "teletexString") == 0)
-        teletex = 1;
-
-      MHD_gtls_str_cpy (tmpname, sizeof (tmpname), str);
-
-      len = sizeof (str) - 1;
-      if ((result = MHD__asn1_read_value (tmpasn, tmpname, str, &len))
-          != ASN1_SUCCESS)
-        {
-          MHD__asn1_delete_structure (&tmpasn);
-          return MHD_gtls_asn2err (result);
-        }
-
-      MHD__asn1_delete_structure (&tmpasn);
-
-      if (teletex != 0)
-        {
-          int ascii = 0, i;
-          /* HACK: if the teletex string contains only ascii
-           * characters then treat it as printable.
-           */
-          for (i = 0; i < len; i++)
-            if (!isascii (str[i]))
-              ascii = 1;
-
-          if (ascii == 0)
-            non_printable = 0;
-        }
-
-      if (res)
-        {
-          if (non_printable == 0)
-            {
-              str[len] = 0;
-              MHD_gtls_str_cpy (res, *res_size, str);
-              *res_size = len;
-            }
-          else
-            {
-              result =
-                MHD__gnutls_x509_data2hex ((const unsigned char *) str, len,
-                                           (unsigned char *) res, res_size);
-              if (result < 0)
-                {
-                  MHD_gnutls_assert ();
-                  return result;
-                }
-            }
-        }
-
-    }
-
-  return 0;
-}
-
-/* Converts a data string to an LDAP rfc2253 hex string
- * something like '#01020304'
- */
-int
-MHD__gnutls_x509_data2hex (const opaque * data,
-                           size_t data_size, opaque * out,
-                           size_t * sizeof_out)
-{
-  char *res;
-  char escaped[MAX_STRING_LEN];
-  unsigned int size;
-
-  if (2 * data_size + 1 > MAX_STRING_LEN)
-    {
-      MHD_gnutls_assert ();
-      return GNUTLS_E_INTERNAL_ERROR;
-    }
-  res = MHD_gtls_bin2hex (data, data_size, escaped, sizeof (escaped));
-  if (!res)
-    {
-      MHD_gnutls_assert ();
-      return GNUTLS_E_INTERNAL_ERROR;
-    }
-  
-  size = strlen (res) + 1;
-  if (size + 1 > *sizeof_out)
-    {
-      *sizeof_out = size;
-      return GNUTLS_E_SHORT_MEMORY_BUFFER;
-    }
-  *sizeof_out = size;   /* -1 for the null +1 for the '#' */
-  
-  if (out)
-    {
-      strcpy ((char*) out, "#");
-      strcat ((char*) out, res);
-    }
-  return 0;
-}
-
-/* TIME functions
- * Convertions between generalized or UTC time to time_t
- *
- */
-
-/* This is an emulations of the struct tm.
- * Since we do not use libc's functions, we don't need to
- * depend on the libc structure.
- */
-typedef struct fake_tm
-{
-  int tm_mon;
-  int tm_year;                  /* FULL year - ie 1971 */
-  int tm_mday;
-  int tm_hour;
-  int tm_min;
-  int tm_sec;
-} fake_tm;
-
-/* The mktime_utc function is due to Russ Allbery (rra@stanford.edu),
- * who placed it under public domain:
- */
-
-/* The number of days in each month.
- */
-static const int MONTHDAYS[] = { 31,
-  28,
-  31,
-  30,
-  31,
-  30,
-  31,
-  31,
-  30,
-  31,
-  30,
-  31
-};
-
-/* Whether a given year is a leap year. */
-#define ISLEAP(year) \
-        (((year) % 4) == 0 && (((year) % 100) != 0 || ((year) % 400) == 0))
-
-/*
- **  Given a struct tm representing a calendar time in UTC, convert it to
- **  seconds since epoch.  Returns (time_t) -1 if the time is not
- **  convertable.  Note that this function does not canonicalize the provided
- **  struct tm, nor does it allow out of range values or years before 1970.
- */
-static time_t
-mktime_utc (const struct fake_tm *tm)
-{
-  time_t result = 0;
-  int i;
-
-  /* We do allow some ill-formed dates, but we don't do anything special
-   * with them and our callers really shouldn't pass them to us.  Do
-   * explicitly disallow the ones that would cause invalid array accesses
-   * or other algorithm problems.
-   */
-  if (tm->tm_mon < 0 || tm->tm_mon > 11 || tm->tm_year < 1970)
-    return (time_t) - 1;
-
-  /* Convert to a time_t.
-   */
-  for (i = 1970; i < tm->tm_year; i++)
-    result += 365 + ISLEAP (i);
-  for (i = 0; i < tm->tm_mon; i++)
-    result += MONTHDAYS[i];
-  if (tm->tm_mon > 1 && ISLEAP (tm->tm_year))
-    result++;
-  result = 24 * (result + tm->tm_mday - 1) + tm->tm_hour;
-  result = 60 * result + tm->tm_min;
-  result = 60 * result + tm->tm_sec;
-  return result;
-}
-
-/* this one will parse dates of the form:
- * month|day|hour|minute|sec* (2 chars each)
- * and year is given. Returns a time_t date.
- */
-static time_t
-MHD__gnutls_x509_time2gtime (const char *ttime, int year)
-{
-  char xx[3];
-  struct fake_tm etime;
-  time_t ret;
-
-  if (strlen (ttime) < 8)
-    {
-      MHD_gnutls_assert ();
-      return (time_t) - 1;
-    }
-
-  etime.tm_year = year;
-
-  /* In order to work with 32 bit
-   * time_t.
-   */
-  if (sizeof (time_t) <= 4 && etime.tm_year >= 2038)
-    return (time_t) 2145914603; /* 2037-12-31 23:23:23 */
-
-  xx[2] = 0;
-
-  /* get the month
-   */
-  memcpy (xx, ttime, 2);        /* month */
-  etime.tm_mon = atoi (xx) - 1;
-  ttime += 2;
-
-  /* get the day
-   */
-  memcpy (xx, ttime, 2);        /* day */
-  etime.tm_mday = atoi (xx);
-  ttime += 2;
-
-  /* get the hour
-   */
-  memcpy (xx, ttime, 2);        /* hour */
-  etime.tm_hour = atoi (xx);
-  ttime += 2;
-
-  /* get the minutes
-   */
-  memcpy (xx, ttime, 2);        /* minutes */
-  etime.tm_min = atoi (xx);
-  ttime += 2;
-
-  if (strlen (ttime) >= 2)
-    {
-      memcpy (xx, ttime, 2);
-      etime.tm_sec = atoi (xx);
-      ttime += 2;
-    }
-  else
-    etime.tm_sec = 0;
-
-  ret = mktime_utc (&etime);
-
-  return ret;
-}
-
-/* returns a time_t value that contains the given time.
- * The given time is expressed as:
- * YEAR(2)|MONTH(2)|DAY(2)|HOUR(2)|MIN(2)|SEC(2)*
- *
- * (seconds are optional)
- */
-static time_t
-MHD__gnutls_x509_utcTime2gtime (const char *ttime)
-{
-  char xx[3];
-  int year;
-
-  if (strlen (ttime) < 10)
-    {
-      MHD_gnutls_assert ();
-      return (time_t) - 1;
-    }
-  xx[2] = 0;
-  /* get the year
-   */
-  memcpy (xx, ttime, 2);        /* year */
-  year = atoi (xx);
-  ttime += 2;
-
-  if (year > 49)
-    year += 1900;
-  else
-    year += 2000;
-
-  return MHD__gnutls_x509_time2gtime (ttime, year);
-}
-
-/* returns a time_t value that contains the given time.
- * The given time is expressed as:
- * YEAR(4)|MONTH(2)|DAY(2)|HOUR(2)|MIN(2)|SEC(2)*
- */
-static time_t
-MHD__gnutls_x509_generalTime2gtime (const char *ttime)
-{
-  char xx[5];
-  int year;
-
-  if (strlen (ttime) < 12)
-    {
-      MHD_gnutls_assert ();
-      return (time_t) - 1;
-    }
-
-  if (strchr (ttime, 'Z') == 0)
-    {
-      MHD_gnutls_assert ();
-      /* sorry we don't support it yet
-       */
-      return (time_t) - 1;
-    }
-  xx[4] = 0;
-
-  /* get the year
-   */
-  memcpy (xx, ttime, 4);        /* year */
-  year = atoi (xx);
-  ttime += 4;
-
-  return MHD__gnutls_x509_time2gtime (ttime, year);
-
-}
-
-/* Extracts the time in time_t from the ASN1_TYPE given. When should
- * be something like "tbsCertList.thisUpdate".
- */
-#define MAX_TIME 64
-time_t
-MHD__gnutls_x509_get_time (ASN1_TYPE c2, const char *when)
-{
-  char ttime[MAX_TIME];
-  char name[128];
-  time_t c_time = (time_t) - 1;
-  int len, result;
-
-  MHD_gtls_str_cpy (name, sizeof (name), when);
-
-  len = sizeof (ttime) - 1;
-  if ((result = MHD__asn1_read_value (c2, name, ttime, &len)) < 0)
-    {
-      MHD_gnutls_assert ();
-      return (time_t) (-1);
-    }
-
-  /* CHOICE */
-  if (strcmp (ttime, "generalTime") == 0)
-    {
-
-      MHD_gtls_str_cat (name, sizeof (name), ".generalTime");
-      len = sizeof (ttime) - 1;
-      result = MHD__asn1_read_value (c2, name, ttime, &len);
-      if (result == ASN1_SUCCESS)
-        c_time = MHD__gnutls_x509_generalTime2gtime (ttime);
-    }
-  else
-    {                           /* UTCTIME */
-
-      MHD_gtls_str_cat (name, sizeof (name), ".utcTime");
-      len = sizeof (ttime) - 1;
-      result = MHD__asn1_read_value (c2, name, ttime, &len);
-      if (result == ASN1_SUCCESS)
-        c_time = MHD__gnutls_x509_utcTime2gtime (ttime);
-    }
-
-  /* We cannot handle dates after 2031 in 32 bit machines.
-   * a time_t of 64bits has to be used.
-   */
-
-  if (result != ASN1_SUCCESS)
-    {
-      MHD_gnutls_assert ();
-      return (time_t) (-1);
-    }
-  return c_time;
-}
-
-
-MHD_gnutls_x509_subject_alt_name_t
-MHD__gnutls_x509_san_find_type (char *str_type)
-{
-  if (strcmp (str_type, "dNSName") == 0)
-    return GNUTLS_SAN_DNSNAME;
-  if (strcmp (str_type, "rfc822Name") == 0)
-    return GNUTLS_SAN_RFC822NAME;
-  if (strcmp (str_type, "uniformResourceIdentifier") == 0)
-    return GNUTLS_SAN_URI;
-  if (strcmp (str_type, "iPAddress") == 0)
-    return GNUTLS_SAN_IPADDRESS;
-  if (strcmp (str_type, "otherName") == 0)
-    return GNUTLS_SAN_OTHERNAME;
-  if (strcmp (str_type, "directoryName") == 0)
-    return GNUTLS_SAN_DN;
-  return (MHD_gnutls_x509_subject_alt_name_t) - 1;
-}
-
 /* A generic export function. Will export the given ASN.1 encoded data
  * to PEM or DER raw data.
  */