path: root/src/daemon/https/x509/mpi.c

/*
 * Copyright (C) 2003, 2004, 2005, 2007 Free Software Foundation
 *
 * Author: Nikos Mavrogiannopoulos
 *
 * This file is part of GNUTLS.
 *
 * The GNUTLS library is free software; you can redistribute it and/or
 * modify it under the terms of the GNU Lesser General Public License
 * as published by the Free Software Foundation; either version 2.1 of
 * the License, or (at your option) any later version.
 *
 * This library is distributed in the hope that it will be useful, but
 * WITHOUT ANY WARRANTY; without even the implied warranty of
 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the GNU
 * Lesser General Public License for more details.
 *
 * You should have received a copy of the GNU Lesser General Public
 * License along with this library; if not, write to the Free Software
 * Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301,
 * USA
 *
 */

#include <gnutls_int.h>
#include <gnutls_errors.h>
#include <gnutls_global.h>
#include <libtasn1.h>
#include <gnutls_datum.h>
#include "common.h"
#include "x509.h"
#include <gnutls_num.h>
#include "mpi.h"

/*
 * some x509 certificate parsing functions that relate to MPI parameter
 * extraction. This reads the BIT STRING subjectPublicKey.
 * Returns 2 parameters (m,e).
 */
int
MHD__gnutls_x509_read_rsa_params (opaque * der, int dersize, mpi_t * params)
{
  int result;
  ASN1_TYPE spk = ASN1_TYPE_EMPTY;

  if ((result =
       MHD__asn1_create_element (MHD__gnutls_getMHD__gnutls_asn (),
                                 "GNUTLS.RSAPublicKey",
                                 &spk)) != ASN1_SUCCESS)
    {
      MHD_gnutls_assert ();
      return MHD_gtls_asn2err (result);
    }

  result = MHD__asn1_der_decoding (&spk, der, dersize, NULL);

  if (result != ASN1_SUCCESS)
    {
      MHD_gnutls_assert ();
      MHD__asn1_delete_structure (&spk);
      return MHD_gtls_asn2err (result);
    }

  if ((result = MHD__gnutls_x509_read_int (spk, "modulus", &params[0])) < 0)
    {
      MHD_gnutls_assert ();
      MHD__asn1_delete_structure (&spk);
      return GNUTLS_E_ASN1_GENERIC_ERROR;
    }

  if ((result =
       MHD__gnutls_x509_read_int (spk, "publicExponent", &params[1])) < 0)
    {
      MHD_gnutls_assert ();
      MHD_gtls_mpi_release (&params[0]);
      MHD__asn1_delete_structure (&spk);
      return GNUTLS_E_ASN1_GENERIC_ERROR;
    }

  MHD__asn1_delete_structure (&spk);

  return 0;

}

/* reads p,q and g
 * from the certificate (subjectPublicKey BIT STRING).
 * params[0-2]
 */
int
MHD__gnutls_x509_read_dsa_params (opaque * der, int dersize, mpi_t * params)
{
  int result;
  ASN1_TYPE spk = ASN1_TYPE_EMPTY;

  if ((result =
       MHD__asn1_create_element (MHD__gnutls_get_pkix (), "PKIX1.Dss-Parms",
                                 &spk)) != ASN1_SUCCESS)
    {
      MHD_gnutls_assert ();
      return MHD_gtls_asn2err (result);
    }

  result = MHD__asn1_der_decoding (&spk, der, dersize, NULL);

  if (result != ASN1_SUCCESS)
    {
      MHD_gnutls_assert ();
      MHD__asn1_delete_structure (&spk);
      return MHD_gtls_asn2err (result);
    }

  /* FIXME: If the parameters are not included in the certificate
   * then the issuer's parameters should be used. This is not
   * done yet.
   */

  /* Read p */

  if ((result = MHD__gnutls_x509_read_int (spk, "p", &params[0])) < 0)
    {
      MHD_gnutls_assert ();
      MHD__asn1_delete_structure (&spk);
      return GNUTLS_E_ASN1_GENERIC_ERROR;
    }

  /* Read q */

  if ((result = MHD__gnutls_x509_read_int (spk, "q", &params[1])) < 0)
    {
      MHD_gnutls_assert ();
      MHD__asn1_delete_structure (&spk);
      MHD_gtls_mpi_release (&params[0]);
      return GNUTLS_E_ASN1_GENERIC_ERROR;
    }

  /* Read g */

  if ((result = MHD__gnutls_x509_read_int (spk, "g", &params[2])) < 0)
    {
      MHD_gnutls_assert ();
      MHD__asn1_delete_structure (&spk);
      MHD_gtls_mpi_release (&params[0]);
      MHD_gtls_mpi_release (&params[1]);
      return GNUTLS_E_ASN1_GENERIC_ERROR;
    }

  MHD__asn1_delete_structure (&spk);

  return 0;

}

/* Reads an Integer from the DER encoded data
 */

int
MHD__gnutls_x509_read_der_int (opaque * der, int dersize, mpi_t * out)
{
  int result;
  ASN1_TYPE spk = ASN1_TYPE_EMPTY;

  /* == INTEGER */
  if ((result =
       MHD__asn1_create_element (MHD__gnutls_getMHD__gnutls_asn (),
                                 "GNUTLS.DSAPublicKey",
                                 &spk)) != ASN1_SUCCESS)
    {
      MHD_gnutls_assert ();
      return MHD_gtls_asn2err (result);
    }

  result = MHD__asn1_der_decoding (&spk, der, dersize, NULL);

  if (result != ASN1_SUCCESS)
    {
      MHD_gnutls_assert ();
      MHD__asn1_delete_structure (&spk);
      return MHD_gtls_asn2err (result);
    }

  /* Read Y */

  if ((result = MHD__gnutls_x509_read_int (spk, "", out)) < 0)
    {
      MHD_gnutls_assert ();
      MHD__asn1_delete_structure (&spk);
      return MHD_gtls_asn2err (result);
    }

  MHD__asn1_delete_structure (&spk);

  return 0;

}

/* reads DSA's Y
 * from the certificate
 * only sets params[3]
 */
int
MHD__gnutls_x509_read_dsa_pubkey (opaque * der, int dersize, mpi_t * params)
{
  return MHD__gnutls_x509_read_der_int (der, dersize, &params[3]);
}

/* Extracts DSA and RSA parameters from a certificate.
 */
int
MHD__gnutls_x509_crt_get_mpis (MHD_gnutls_x509_crt_t cert,
                               mpi_t * params, int *params_size)
{
  int result;
  int pk_algorithm;
  MHD_gnutls_datum_t tmp = { NULL, 0 };

  /* Read the algorithm's OID
   */
  pk_algorithm = MHD_gnutls_x509_crt_get_pk_algorithm (cert, NULL);

  /* Read the algorithm's parameters
   */
  result
    = MHD__gnutls_x509_read_value (cert->cert,
                                   "tbsCertificate.subjectPublicKeyInfo.subjectPublicKey",
                                   &tmp, 2);

  if (result < 0)
    {
      MHD_gnutls_assert ();
      return result;
    }

  switch (pk_algorithm)
    {
    case MHD_GNUTLS_PK_RSA:
      /* params[0] is the modulus,
       * params[1] is the exponent
       */
      if (*params_size < RSA_PUBLIC_PARAMS)
        {
          MHD_gnutls_assert ();
          /* internal error. Increase the mpi_ts in params */
          result = GNUTLS_E_INTERNAL_ERROR;
          goto error;
        }

      if ((result =
           MHD__gnutls_x509_read_rsa_params (tmp.data, tmp.size, params)) < 0)
        {
          MHD_gnutls_assert ();
          goto error;
        }
      *params_size = RSA_PUBLIC_PARAMS;

      break;
    default:
      /* other types like DH
       * currently not supported
       */
      MHD_gnutls_assert ();
      result = GNUTLS_E_X509_CERTIFICATE_ERROR;
      goto error;
    }

  result = 0;

error:MHD__gnutls_free_datum (&tmp);
  return result;
}

/*
 * some x509 certificate functions that relate to MPI parameter
 * setting. This writes the BIT STRING subjectPublicKey.
 * Needs 2 parameters (m,e).
 *
 * Allocates the space used to store the DER data.
 */
int
MHD__gnutls_x509_write_rsa_params (mpi_t * params,
                                   int params_size, MHD_gnutls_datum_t * der)
{
  int result;
  ASN1_TYPE spk = ASN1_TYPE_EMPTY;

  der->data = NULL;
  der->size = 0;

  if (params_size < 2)
    {
      MHD_gnutls_assert ();
      result = GNUTLS_E_INVALID_REQUEST;
      goto cleanup;
    }

  if ((result =
       MHD__asn1_create_element (MHD__gnutls_getMHD__gnutls_asn (),
                                 "GNUTLS.RSAPublicKey",
                                 &spk)) != ASN1_SUCCESS)
    {
      MHD_gnutls_assert ();
      return MHD_gtls_asn2err (result);
    }

  result = MHD__gnutls_x509_write_int (spk, "modulus", params[0], 0);
  if (result < 0)
    {
      MHD_gnutls_assert ();
      goto cleanup;
    }

  result = MHD__gnutls_x509_write_int (spk, "publicExponent", params[1], 0);
  if (result < 0)
    {
      MHD_gnutls_assert ();
      goto cleanup;
    }

  result = MHD__gnutls_x509_der_encode (spk, "", der, 0);
  if (result < 0)
    {
      MHD_gnutls_assert ();
      goto cleanup;
    }

  MHD__asn1_delete_structure (&spk);
  return 0;

cleanup:MHD__asn1_delete_structure (&spk);

  return result;
}

/*
 * This function writes and encodes the parameters for DSS or RSA keys.
 * This is the "signatureAlgorithm" fields.
 */
int
MHD__gnutls_x509_write_sig_params (ASN1_TYPE dst,
                                   const char *dst_name,
                                   enum MHD_GNUTLS_PublicKeyAlgorithm
                                   pk_algorithm,
                                   enum MHD_GNUTLS_HashAlgorithm dig,
                                   mpi_t * params, int params_size)
{
  int result;
  char name[128];
  const char *pk;

  MHD_gtls_str_cpy (name, sizeof (name), dst_name);
  MHD_gtls_str_cat (name, sizeof (name), ".algorithm");

  pk = MHD_gtls_x509_sign_to_oid (pk_algorithm, HASH2MAC (dig));
  if (pk == NULL)
    {
      MHD_gnutls_assert ();
      return GNUTLS_E_INVALID_REQUEST;
    }

  /* write the OID.
   */
  result = MHD__asn1_write_value (dst, name, pk, 1);
  if (result != ASN1_SUCCESS)
    {
      MHD_gnutls_assert ();
      return MHD_gtls_asn2err (result);
    }

  MHD_gtls_str_cpy (name, sizeof (name), dst_name);
  MHD_gtls_str_cat (name, sizeof (name), ".parameters");

  if (pk_algorithm == MHD_GNUTLS_PK_RSA)
    {                           /* RSA */
      result = MHD__asn1_write_value (dst, name, NULL, 0);

      if (result != ASN1_SUCCESS && result != ASN1_ELEMENT_NOT_FOUND)
        {
          /* Here we ignore the element not found error, since this
           * may have been disabled before.
           */
          MHD_gnutls_assert ();
          return MHD_gtls_asn2err (result);
        }
    }

  return 0;
}

/*
 * This function writes the parameters for DSS keys.
 * Needs 3 parameters (p,q,g).
 *
 * Allocates the space used to store the DER data.
 */
int
MHD__gnutls_x509_write_dsa_params (mpi_t * params,
                                   int params_size, MHD_gnutls_datum_t * der)
{
  int result;
  ASN1_TYPE spk = ASN1_TYPE_EMPTY;

  der->data = NULL;
  der->size = 0;

  if (params_size < 3)
    {
      MHD_gnutls_assert ();
      result = GNUTLS_E_INVALID_REQUEST;
      goto cleanup;
    }

  if ((result =
       MHD__asn1_create_element (MHD__gnutls_getMHD__gnutls_asn (),
                                 "GNUTLS.DSAParameters",
                                 &spk)) != ASN1_SUCCESS)
    {
      MHD_gnutls_assert ();
      return MHD_gtls_asn2err (result);
    }

  result = MHD__gnutls_x509_write_int (spk, "p", params[0], 0);
  if (result < 0)
    {
      MHD_gnutls_assert ();
      goto cleanup;
    }

  result = MHD__gnutls_x509_write_int (spk, "q", params[1], 0);
  if (result < 0)
    {
      MHD_gnutls_assert ();
      goto cleanup;
    }

  result = MHD__gnutls_x509_write_int (spk, "g", params[2], 0);
  if (result < 0)
    {
      MHD_gnutls_assert ();
      goto cleanup;
    }

  result = MHD__gnutls_x509_der_encode (spk, "", der, 0);
  if (result < 0)
    {
      MHD_gnutls_assert ();
      goto cleanup;
    }

  result = 0;

cleanup:MHD__asn1_delete_structure (&spk);
  return result;
}

/*
 * This function writes the public parameters for DSS keys.
 * Needs 1 parameter (y).
 *
 * Allocates the space used to store the DER data.
 */
int
MHD__gnutls_x509_write_dsa_public_key (mpi_t * params,
                                       int params_size,
                                       MHD_gnutls_datum_t * der)
{
  int result;
  ASN1_TYPE spk = ASN1_TYPE_EMPTY;

  der->data = NULL;
  der->size = 0;

  if (params_size < 3)
    {
      MHD_gnutls_assert ();
      result = GNUTLS_E_INVALID_REQUEST;
      goto cleanup;
    }

  if ((result =
       MHD__asn1_create_element (MHD__gnutls_getMHD__gnutls_asn (),
                                 "GNUTLS.DSAPublicKey",
                                 &spk)) != ASN1_SUCCESS)
    {
      MHD_gnutls_assert ();
      return MHD_gtls_asn2err (result);
    }

  result = MHD__gnutls_x509_write_int (spk, "", params[3], 0);
  if (result < 0)
    {
      MHD_gnutls_assert ();
      goto cleanup;
    }

  result = MHD__gnutls_x509_der_encode (spk, "", der, 0);
  if (result < 0)
    {
      MHD_gnutls_assert ();
      goto cleanup;
    }

  MHD__asn1_delete_structure (&spk);
  return 0;

cleanup:MHD__asn1_delete_structure (&spk);
  return result;
}

/* this function reads a (small) unsigned integer
 * from asn1 structs. Combines the read and the convertion
 * steps.
 */
int
MHD__gnutls_x509_read_uint (ASN1_TYPE node, const char *value,
                            unsigned int *ret)
{
  int len, result;
  opaque *tmpstr;

  len = 0;
  result = MHD__asn1_read_value (node, value, NULL, &len);
  if (result != ASN1_MEM_ERROR)
    {
      MHD_gnutls_assert ();
      return MHD_gtls_asn2err (result);
    }

  tmpstr = MHD_gnutls_alloca (len);
  if (tmpstr == NULL)
    {
      MHD_gnutls_assert ();
      return GNUTLS_E_MEMORY_ERROR;
    }

  result = MHD__asn1_read_value (node, value, tmpstr, &len);

  if (result != ASN1_SUCCESS)
    {
      MHD_gnutls_assert ();
      MHD_gnutls_afree (tmpstr);
      return MHD_gtls_asn2err (result);
    }

  if (len == 1)
    *ret = tmpstr[0];
  else if (len == 2)
    *ret = MHD_gtls_read_uint16 (tmpstr);
  else if (len == 3)
    *ret = MHD_gtls_read_uint24 (tmpstr);
  else if (len == 4)
    *ret = MHD_gtls_read_uint32 (tmpstr);
  else
    {
      MHD_gnutls_assert ();
      MHD_gnutls_afree (tmpstr);
      return GNUTLS_E_INTERNAL_ERROR;
    }

  MHD_gnutls_afree (tmpstr);

  return 0;
}

/* Writes the specified integer into the specified node.
 */
int
MHD__gnutls_x509_write_uint32 (ASN1_TYPE node, const char *value,
                               uint32_t num)
{
  opaque tmpstr[4];
  int result;

  MHD_gtls_write_uint32 (num, tmpstr);

  result = MHD__asn1_write_value (node, value, tmpstr, 4);

  if (result != ASN1_SUCCESS)
    {
      MHD_gnutls_assert ();
      return MHD_gtls_asn2err (result);
    }

  return 0;
}