Packages

hackney

3.0.2
4.7.2 4.7.1 4.7.0 4.6.1 4.6.0 4.5.2 4.5.1 4.5.0 4.4.5 4.4.3 4.4.2 4.4.1 4.4.0 4.3.0 4.2.3 4.2.2 4.2.1 4.2.0 4.1.0 4.0.3 4.0.2 4.0.1 4.0.0 3.2.1 3.2.0 3.1.2 3.1.1 3.1.0 3.0.3 3.0.2 3.0.1 3.0.0 retired 2.0.1 2.0.0 2.0.0-beta.1 1.25.0 1.24.1 1.24.0 1.23.0 1.22.0 1.21.0 1.20.1 1.20.0 1.19.1 1.19.0 1.18.2 1.18.1 1.18.0 1.17.4 1.17.3 1.17.2 1.17.1 1.17.0 1.16.0 1.15.2 1.15.1 1.15.0 1.14.3 1.14.2 1.14.0 1.13.0 1.12.1 1.12.0 1.11.0 1.10.1 1.10.0 1.9.0 1.8.6 1.8.5 1.8.4 1.8.3 1.8.2 1.8.0 1.7.1 1.7.0 1.6.6 retired 1.6.5 1.6.4 retired 1.6.3 1.6.2 1.6.1 1.6.0 1.5.7 1.5.6 1.5.5 1.5.4 1.5.3 1.5.2 1.5.1 1.5.0 1.4.10 1.4.8 1.4.7 1.4.6 1.4.5 1.4.4 1.4.3 1.4.2 1.4.1 1.4.0 1.3.2 1.3.1 1.3.0 1.2.0 1.1.0 1.0.6 1.0.5 1.0.2 1.0.1 0.15.2 0.15.0 0.14.3 0.14.2 0.14.1 0.14.0 0.13.1

Simple HTTP client with HTTP/1.1, HTTP/2, and HTTP/3 support

Security advisory: This version has known vulnerabilities. View advisories
HexDocs

Current section

Files

Jump to
Readme
116 Versions
6 Dependencies
Dependants
12 Advisories
Files
Activity
hackney c_src boringssl crypto x509 x_req.cc
Raw

c_src/boringssl/crypto/x509/x_req.cc 

// Copyright 1995-2016 The OpenSSL Project Authors. All Rights Reserved.

//

// Licensed under the Apache License, Version 2.0 (the "License");

// you may not use this file except in compliance with the License.

// You may obtain a copy of the License at

//

//     https://www.apache.org/licenses/LICENSE-2.0

//

// Unless required by applicable law or agreed to in writing, software

// distributed under the License is distributed on an "AS IS" BASIS,

// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.

// See the License for the specific language governing permissions and

// limitations under the License.



#include <stdio.h>



#include <openssl/asn1t.h>

#include <openssl/x509.h>



#include "internal.h"





// X509_REQ_INFO is handled in an unusual way to get round invalid encodings.

// Some broken certificate requests don't encode the attributes field if it

// is empty. This is in violation of PKCS#10 but we need to tolerate it. We

// do this by making the attributes field OPTIONAL then using the callback to

// initialise it to an empty STACK. This means that the field will be

// correctly encoded unless we NULL out the field.



static int rinf_cb(int operation, ASN1_VALUE **pval, const ASN1_ITEM *it,

                   void *exarg) {

  X509_REQ_INFO *rinf = (X509_REQ_INFO *)*pval;



  if (operation == ASN1_OP_NEW_POST) {

    rinf->attributes = sk_X509_ATTRIBUTE_new_null();

    if (!rinf->attributes) {

      return 0;

    }

  }



  if (operation == ASN1_OP_D2I_POST) {

    // The only defined CSR version is v1(0). For compatibility, we also accept

    // a hypothetical v3(2). Although not defined, older versions of certbot

    // use it. See https://github.com/certbot/certbot/pull/9334.

    long version = ASN1_INTEGER_get(rinf->version);

    if (version != X509_REQ_VERSION_1 && version != 2) {

      OPENSSL_PUT_ERROR(X509, X509_R_INVALID_VERSION);

      return 0;

    }

  }



  return 1;

}



ASN1_SEQUENCE_enc(X509_REQ_INFO, enc, rinf_cb) = {

    ASN1_SIMPLE(X509_REQ_INFO, version, ASN1_INTEGER),

    ASN1_SIMPLE(X509_REQ_INFO, subject, X509_NAME),

    ASN1_SIMPLE(X509_REQ_INFO, pubkey, X509_PUBKEY),

    // This isn't really OPTIONAL but it gets around invalid encodings.

    ASN1_IMP_SET_OF_OPT(X509_REQ_INFO, attributes, X509_ATTRIBUTE, 0),

} ASN1_SEQUENCE_END_enc(X509_REQ_INFO, X509_REQ_INFO)



IMPLEMENT_ASN1_FUNCTIONS_const(X509_REQ_INFO)



ASN1_SEQUENCE(X509_REQ) = {

    ASN1_SIMPLE(X509_REQ, req_info, X509_REQ_INFO),

    ASN1_SIMPLE(X509_REQ, sig_alg, X509_ALGOR),

    ASN1_SIMPLE(X509_REQ, signature, ASN1_BIT_STRING),

} ASN1_SEQUENCE_END(X509_REQ)



IMPLEMENT_ASN1_FUNCTIONS_const(X509_REQ)



IMPLEMENT_ASN1_DUP_FUNCTION_const(X509_REQ)