2001-11-06 18:34:19 +00:00
|
|
|
|
/*
|
2002-01-17 11:44:27 +00:00
|
|
|
|
* pkcs15.c: PKCS #15 general functions
|
2001-11-01 15:43:20 +00:00
|
|
|
|
*
|
2002-04-05 14:46:44 +00:00
|
|
|
|
* Copyright (C) 2001, 2002 Juha Yrj<EFBFBD>l<EFBFBD> <juha.yrjola@iki.fi>
|
2001-11-06 18:34:19 +00:00
|
|
|
|
*
|
|
|
|
|
* This library is free software; you can redistribute it and/or
|
|
|
|
|
* modify it under the terms of the GNU Lesser General Public
|
|
|
|
|
* License as published by the Free Software Foundation; either
|
|
|
|
|
* version 2.1 of the License, or (at your option) any later version.
|
|
|
|
|
*
|
|
|
|
|
* This library is distributed in the hope that it will be useful,
|
2001-11-01 15:43:20 +00:00
|
|
|
|
* but WITHOUT ANY WARRANTY; without even the implied warranty of
|
2001-11-06 18:34:19 +00:00
|
|
|
|
* MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU
|
|
|
|
|
* Lesser General Public License for more details.
|
2001-11-01 15:43:20 +00:00
|
|
|
|
*
|
2001-11-06 18:34:19 +00:00
|
|
|
|
* You should have received a copy of the GNU Lesser General Public
|
|
|
|
|
* License along with this library; if not, write to the Free Software
|
|
|
|
|
* Foundation, Inc., 59 Temple Place, Suite 330, Boston, MA 02111-1307 USA
|
2001-11-01 15:43:20 +00:00
|
|
|
|
*/
|
|
|
|
|
|
2002-04-05 10:44:51 +00:00
|
|
|
|
#include "internal.h"
|
|
|
|
|
#include "pkcs15.h"
|
|
|
|
|
#include "asn1.h"
|
|
|
|
|
#include "log.h"
|
2001-11-01 15:43:20 +00:00
|
|
|
|
#include <stdlib.h>
|
|
|
|
|
#include <string.h>
|
|
|
|
|
#include <stdio.h>
|
|
|
|
|
#include <assert.h>
|
|
|
|
|
|
|
|
|
|
void sc_pkcs15_print_card(const struct sc_pkcs15_card *card)
|
|
|
|
|
{
|
|
|
|
|
const char *flags[] = {
|
|
|
|
|
"Read-only",
|
|
|
|
|
"Login required",
|
|
|
|
|
"PRN generation",
|
|
|
|
|
"EID compliant"
|
|
|
|
|
};
|
|
|
|
|
int i;
|
|
|
|
|
|
|
|
|
|
assert(card != NULL);
|
|
|
|
|
printf("PKCS#15 Card [%s]:\n", card->label);
|
|
|
|
|
printf("\tVersion : %d\n", card->version);
|
|
|
|
|
printf("\tSerial number : %s\n", card->serial_number);
|
|
|
|
|
printf("\tManufacturer ID: %s\n", card->manufacturer_id);
|
|
|
|
|
printf("\tFlags : ");
|
|
|
|
|
for (i = 0; i < 4; i++) {
|
|
|
|
|
int count = 0;
|
|
|
|
|
if ((card->flags >> i) & 1) {
|
|
|
|
|
if (count)
|
|
|
|
|
printf(", ");
|
|
|
|
|
printf("%s", flags[i]);
|
|
|
|
|
count++;
|
|
|
|
|
}
|
|
|
|
|
}
|
|
|
|
|
printf("\n");
|
|
|
|
|
}
|
|
|
|
|
|
2002-01-13 23:56:13 +00:00
|
|
|
|
static const struct sc_asn1_entry c_asn1_toki[] = {
|
|
|
|
|
{ "version", SC_ASN1_INTEGER, ASN1_INTEGER, 0, NULL },
|
|
|
|
|
{ "serialNumber", SC_ASN1_OCTET_STRING, ASN1_OCTET_STRING, 0, NULL },
|
|
|
|
|
{ "manufacturerID", SC_ASN1_UTF8STRING, ASN1_UTF8STRING, SC_ASN1_OPTIONAL, NULL },
|
|
|
|
|
{ "label", SC_ASN1_UTF8STRING, SC_ASN1_CTX | 0, SC_ASN1_OPTIONAL, NULL },
|
|
|
|
|
{ "tokenflags", SC_ASN1_BIT_STRING, ASN1_BIT_STRING, 0, NULL },
|
|
|
|
|
{ "seInfo", SC_ASN1_SEQUENCE, SC_ASN1_CONS | ASN1_SEQUENCE, SC_ASN1_OPTIONAL, NULL },
|
|
|
|
|
{ "recordInfo", SC_ASN1_STRUCT, SC_ASN1_CONS | SC_ASN1_CTX | 1, SC_ASN1_OPTIONAL, NULL },
|
|
|
|
|
{ "supportedAlgorithms", SC_ASN1_STRUCT, SC_ASN1_CONS | SC_ASN1_CTX | 2, SC_ASN1_OPTIONAL, NULL },
|
|
|
|
|
{ NULL }
|
|
|
|
|
};
|
|
|
|
|
|
|
|
|
|
static const struct sc_asn1_entry c_asn1_tokeninfo[] = {
|
|
|
|
|
{ "TokenInfo", SC_ASN1_STRUCT, SC_ASN1_CONS | ASN1_SEQUENCE, 0, NULL },
|
|
|
|
|
{ NULL }
|
|
|
|
|
};
|
|
|
|
|
|
2002-03-14 11:50:48 +00:00
|
|
|
|
static void parse_tokeninfo(struct sc_pkcs15_card *card, const u8 * buf, size_t buflen)
|
2001-11-01 15:43:20 +00:00
|
|
|
|
{
|
2001-12-16 18:46:32 +00:00
|
|
|
|
int i, r;
|
|
|
|
|
u8 serial[128];
|
2002-05-26 12:31:23 +00:00
|
|
|
|
size_t serial_len = sizeof(serial);
|
2001-12-16 18:46:32 +00:00
|
|
|
|
u8 mnfid[128];
|
2002-05-26 12:31:23 +00:00
|
|
|
|
size_t mnfid_len = sizeof(mnfid);
|
2002-01-13 23:56:13 +00:00
|
|
|
|
u8 label[128];
|
2002-05-26 12:31:23 +00:00
|
|
|
|
size_t label_len = sizeof(label);
|
|
|
|
|
size_t flags_len = sizeof(card->flags);
|
2002-02-24 16:50:29 +00:00
|
|
|
|
struct sc_asn1_entry asn1_toki[9], asn1_tokeninfo[3];
|
2001-11-01 15:43:20 +00:00
|
|
|
|
|
2002-01-13 23:56:13 +00:00
|
|
|
|
sc_copy_asn1_entry(c_asn1_toki, asn1_toki);
|
|
|
|
|
sc_copy_asn1_entry(c_asn1_tokeninfo, asn1_tokeninfo);
|
|
|
|
|
sc_format_asn1_entry(asn1_toki + 0, &card->version, NULL, 0);
|
|
|
|
|
sc_format_asn1_entry(asn1_toki + 1, serial, &serial_len, 0);
|
|
|
|
|
sc_format_asn1_entry(asn1_toki + 2, mnfid, &mnfid_len, 0);
|
|
|
|
|
sc_format_asn1_entry(asn1_toki + 3, label, &label_len, 0);
|
|
|
|
|
sc_format_asn1_entry(asn1_toki + 4, &card->flags, &flags_len, 0);
|
|
|
|
|
sc_format_asn1_entry(asn1_tokeninfo, asn1_toki, NULL, 0);
|
|
|
|
|
|
2002-01-07 18:23:34 +00:00
|
|
|
|
r = sc_asn1_decode(card->card->ctx, asn1_tokeninfo, buf, buflen, NULL, NULL);
|
2001-12-16 18:46:32 +00:00
|
|
|
|
if (r) {
|
|
|
|
|
error(card->card->ctx, "ASN.1 parsing failed: %s\n", sc_strerror(r));
|
2001-11-01 15:43:20 +00:00
|
|
|
|
goto err;
|
2001-12-16 18:46:32 +00:00
|
|
|
|
}
|
|
|
|
|
card->version += 1;
|
2002-04-19 14:23:31 +00:00
|
|
|
|
card->serial_number = (char *) malloc(serial_len * 2 + 1);
|
2001-11-01 15:43:20 +00:00
|
|
|
|
card->serial_number[0] = 0;
|
2001-12-16 18:46:32 +00:00
|
|
|
|
for (i = 0; i < serial_len; i++) {
|
2001-11-01 15:43:20 +00:00
|
|
|
|
char byte[3];
|
|
|
|
|
|
2001-12-16 18:46:32 +00:00
|
|
|
|
sprintf(byte, "%02X", serial[i]);
|
2001-11-01 15:43:20 +00:00
|
|
|
|
strcat(card->serial_number, byte);
|
|
|
|
|
}
|
2001-12-20 13:57:58 +00:00
|
|
|
|
if (card->manufacturer_id == NULL) {
|
2002-03-19 10:04:11 +00:00
|
|
|
|
if (asn1_toki[2].flags & SC_ASN1_PRESENT)
|
2001-12-30 21:17:34 +00:00
|
|
|
|
card->manufacturer_id = strdup((char *) mnfid);
|
2001-12-20 13:57:58 +00:00
|
|
|
|
else
|
|
|
|
|
card->manufacturer_id = strdup("(unknown)");
|
|
|
|
|
}
|
2002-01-13 23:56:13 +00:00
|
|
|
|
if (card->label == NULL) {
|
2002-03-19 10:04:11 +00:00
|
|
|
|
if (asn1_toki[3].flags & SC_ASN1_PRESENT)
|
2002-02-20 09:56:47 +00:00
|
|
|
|
card->label = strdup((char *) label);
|
2002-01-13 23:56:13 +00:00
|
|
|
|
else
|
2002-02-20 09:56:47 +00:00
|
|
|
|
card->label = strdup("(unknown)");
|
2002-01-13 23:56:13 +00:00
|
|
|
|
}
|
2001-11-01 15:43:20 +00:00
|
|
|
|
return;
|
2001-12-16 18:46:32 +00:00
|
|
|
|
err:
|
2001-11-01 15:43:20 +00:00
|
|
|
|
if (card->serial_number == NULL)
|
|
|
|
|
card->serial_number = strdup("(unknown)");
|
|
|
|
|
if (card->manufacturer_id == NULL)
|
|
|
|
|
card->manufacturer_id = strdup("(unknown)");
|
|
|
|
|
return;
|
|
|
|
|
}
|
|
|
|
|
|
2002-01-17 11:44:27 +00:00
|
|
|
|
int sc_pkcs15_encode_tokeninfo(struct sc_context *ctx,
|
|
|
|
|
struct sc_pkcs15_card *card,
|
|
|
|
|
u8 **buf, size_t *buflen)
|
2002-01-13 23:56:13 +00:00
|
|
|
|
{
|
2002-12-04 15:36:33 +00:00
|
|
|
|
int r;
|
2002-01-13 23:56:13 +00:00
|
|
|
|
u8 serial[128];
|
2002-05-26 12:31:23 +00:00
|
|
|
|
size_t serial_len = 0;
|
|
|
|
|
size_t mnfid_len;
|
|
|
|
|
size_t label_len;
|
|
|
|
|
size_t flags_len;
|
2002-01-13 23:56:13 +00:00
|
|
|
|
int version = card->version;
|
|
|
|
|
|
|
|
|
|
struct sc_asn1_entry asn1_toki[9], asn1_tokeninfo[2];
|
|
|
|
|
|
|
|
|
|
sc_copy_asn1_entry(c_asn1_toki, asn1_toki);
|
|
|
|
|
sc_copy_asn1_entry(c_asn1_tokeninfo, asn1_tokeninfo);
|
|
|
|
|
version--;
|
|
|
|
|
sc_format_asn1_entry(asn1_toki + 0, &version, NULL, 1);
|
|
|
|
|
if (card->serial_number != NULL) {
|
|
|
|
|
if (strlen(card->serial_number)/2 > sizeof(serial))
|
|
|
|
|
return SC_ERROR_BUFFER_TOO_SMALL;
|
2002-12-04 15:36:33 +00:00
|
|
|
|
serial_len = sizeof(serial);
|
|
|
|
|
if (sc_hex_to_bin(card->serial_number, serial, &serial_len) < 0)
|
|
|
|
|
return SC_ERROR_INVALID_ARGUMENTS;
|
2002-01-13 23:56:13 +00:00
|
|
|
|
sc_format_asn1_entry(asn1_toki + 1, serial, &serial_len, 1);
|
|
|
|
|
}
|
|
|
|
|
if (card->manufacturer_id != NULL) {
|
|
|
|
|
mnfid_len = strlen(card->manufacturer_id);
|
|
|
|
|
sc_format_asn1_entry(asn1_toki + 2, card->manufacturer_id, &mnfid_len, 1);
|
|
|
|
|
}
|
|
|
|
|
if (card->label != NULL) {
|
|
|
|
|
label_len = strlen(card->label);
|
|
|
|
|
sc_format_asn1_entry(asn1_toki + 3, card->label, &label_len, 1);
|
|
|
|
|
}
|
|
|
|
|
if (card->flags) {
|
2002-03-01 11:52:55 +00:00
|
|
|
|
flags_len = _sc_count_bit_string_size(&card->flags, sizeof(card->flags));
|
2002-01-13 23:56:13 +00:00
|
|
|
|
sc_format_asn1_entry(asn1_toki + 4, &card->flags, &flags_len, 1);
|
|
|
|
|
}
|
|
|
|
|
sc_format_asn1_entry(asn1_tokeninfo, asn1_toki, NULL, 1);
|
|
|
|
|
|
2002-01-16 23:59:18 +00:00
|
|
|
|
r = sc_asn1_encode(ctx, asn1_tokeninfo, buf, buflen);
|
2002-01-13 23:56:13 +00:00
|
|
|
|
if (r) {
|
2002-01-16 23:59:18 +00:00
|
|
|
|
error(ctx, "sc_asn1_encode() failed: %s\n", sc_strerror(r));
|
2002-01-13 23:56:13 +00:00
|
|
|
|
return r;
|
|
|
|
|
}
|
|
|
|
|
return 0;
|
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
static const struct sc_asn1_entry c_asn1_ddo[] = {
|
|
|
|
|
{ "oid", SC_ASN1_OBJECT, ASN1_OBJECT, 0, NULL },
|
|
|
|
|
{ "odfPath", SC_ASN1_PATH, SC_ASN1_CONS | ASN1_SEQUENCE, SC_ASN1_OPTIONAL, NULL },
|
|
|
|
|
{ "tokenInfoPath", SC_ASN1_PATH, SC_ASN1_CONS | SC_ASN1_CTX | 0, SC_ASN1_OPTIONAL, NULL },
|
|
|
|
|
{ "unusedPath", SC_ASN1_PATH, SC_ASN1_CONS | SC_ASN1_CTX | 1, SC_ASN1_OPTIONAL, NULL },
|
|
|
|
|
{ NULL }
|
|
|
|
|
};
|
|
|
|
|
|
2002-02-20 09:56:47 +00:00
|
|
|
|
static const u8 *pkcs15_aid = (const u8 *) "\xA0\x00\x00\x00\x63PKCS-15";
|
|
|
|
|
static const size_t pkcs15_aid_len = 12;
|
2002-01-13 23:56:13 +00:00
|
|
|
|
|
2002-02-20 09:56:47 +00:00
|
|
|
|
static int parse_ddo(struct sc_pkcs15_card *p15card, const u8 * buf, size_t buflen)
|
2001-11-01 15:43:20 +00:00
|
|
|
|
{
|
2002-02-20 09:56:47 +00:00
|
|
|
|
struct sc_asn1_entry asn1_ddo[5];
|
|
|
|
|
struct sc_path odf_path, ti_path;
|
2001-12-16 18:46:32 +00:00
|
|
|
|
int r;
|
2002-02-20 09:56:47 +00:00
|
|
|
|
|
2002-01-13 23:56:13 +00:00
|
|
|
|
sc_copy_asn1_entry(c_asn1_ddo, asn1_ddo);
|
2002-02-20 09:56:47 +00:00
|
|
|
|
sc_format_asn1_entry(asn1_ddo + 1, &odf_path, NULL, 0);
|
|
|
|
|
sc_format_asn1_entry(asn1_ddo + 2, &ti_path, NULL, 0);
|
|
|
|
|
|
|
|
|
|
r = sc_asn1_decode(p15card->card->ctx, asn1_ddo, buf, buflen, NULL, NULL);
|
2001-12-16 18:46:32 +00:00
|
|
|
|
if (r) {
|
2002-02-20 09:56:47 +00:00
|
|
|
|
error(p15card->card->ctx, "DDO parsing failed: %s\n",
|
2001-12-16 18:46:32 +00:00
|
|
|
|
sc_strerror(r));
|
|
|
|
|
return r;
|
|
|
|
|
}
|
2002-02-20 09:56:47 +00:00
|
|
|
|
if (asn1_ddo[1].flags & SC_ASN1_PRESENT) {
|
|
|
|
|
p15card->file_odf = sc_file_new();
|
|
|
|
|
if (p15card->file_odf == NULL)
|
|
|
|
|
goto mem_err;
|
|
|
|
|
p15card->file_odf->path = odf_path;
|
|
|
|
|
}
|
|
|
|
|
if (asn1_ddo[2].flags & SC_ASN1_PRESENT) {
|
|
|
|
|
p15card->file_tokeninfo = sc_file_new();
|
|
|
|
|
if (p15card->file_tokeninfo == NULL)
|
|
|
|
|
goto mem_err;
|
|
|
|
|
p15card->file_tokeninfo->path = ti_path;
|
2001-11-01 15:43:20 +00:00
|
|
|
|
}
|
|
|
|
|
return 0;
|
2002-02-20 09:56:47 +00:00
|
|
|
|
mem_err:
|
|
|
|
|
if (p15card->file_odf != NULL) {
|
|
|
|
|
sc_file_free(p15card->file_odf);
|
|
|
|
|
p15card->file_odf = NULL;
|
|
|
|
|
}
|
|
|
|
|
if (p15card->file_tokeninfo != NULL) {
|
|
|
|
|
sc_file_free(p15card->file_tokeninfo);
|
|
|
|
|
p15card->file_tokeninfo = NULL;
|
|
|
|
|
}
|
|
|
|
|
return SC_ERROR_OUT_OF_MEMORY;
|
2001-11-01 15:43:20 +00:00
|
|
|
|
}
|
|
|
|
|
|
2002-02-20 09:56:47 +00:00
|
|
|
|
#if 0
|
|
|
|
|
static int encode_ddo(struct sc_pkcs15_card *p15card, u8 **buf, size_t *buflen)
|
2002-01-13 23:56:13 +00:00
|
|
|
|
{
|
2002-02-20 09:56:47 +00:00
|
|
|
|
struct sc_asn1_entry asn1_ddo[5];
|
2002-01-13 23:56:13 +00:00
|
|
|
|
int r;
|
|
|
|
|
size_t label_len;
|
|
|
|
|
|
|
|
|
|
sc_copy_asn1_entry(c_asn1_ddo, asn1_ddo);
|
2002-02-20 09:56:47 +00:00
|
|
|
|
|
2002-01-13 23:56:13 +00:00
|
|
|
|
sc_format_asn1_entry(asn1_ddo + 1, &card->file_odf.path, NULL, 0);
|
|
|
|
|
sc_format_asn1_entry(asn1_ddo + 2, &card->file_tokeninfo.path, NULL, 0);
|
2002-02-20 09:56:47 +00:00
|
|
|
|
|
2002-01-13 23:56:13 +00:00
|
|
|
|
r = sc_asn1_encode(ctx, asn1_dir, buf, buflen);
|
|
|
|
|
if (r) {
|
2002-01-16 23:59:18 +00:00
|
|
|
|
error(ctx, "sc_asn1_encode() failed: %s\n",
|
2002-01-13 23:56:13 +00:00
|
|
|
|
sc_strerror(r));
|
|
|
|
|
return r;
|
|
|
|
|
}
|
|
|
|
|
return 0;
|
|
|
|
|
}
|
2002-02-20 09:56:47 +00:00
|
|
|
|
#endif
|
2002-01-13 23:56:13 +00:00
|
|
|
|
|
2002-01-17 11:44:27 +00:00
|
|
|
|
int sc_pkcs15_create_dir(struct sc_pkcs15_card *p15card, struct sc_card *card)
|
2002-01-13 23:56:13 +00:00
|
|
|
|
{
|
2002-02-20 09:56:47 +00:00
|
|
|
|
#if 0
|
2002-01-13 23:56:13 +00:00
|
|
|
|
struct sc_path path;
|
2002-01-17 23:47:03 +00:00
|
|
|
|
struct sc_file file;
|
2002-01-13 23:56:13 +00:00
|
|
|
|
u8 *buf;
|
|
|
|
|
size_t bufsize;
|
2002-01-17 23:47:03 +00:00
|
|
|
|
int r, i;
|
2002-02-20 09:56:47 +00:00
|
|
|
|
|
2002-01-13 23:56:13 +00:00
|
|
|
|
SC_FUNC_CALLED(card->ctx, 1);
|
|
|
|
|
sc_format_path("3F00", &path);
|
|
|
|
|
r = sc_select_file(card, &path, NULL);
|
|
|
|
|
SC_TEST_RET(card->ctx, r, "sc_select_file(MF) failed");
|
2002-01-16 23:59:18 +00:00
|
|
|
|
r = encode_dir(card->ctx, p15card, &buf, &bufsize);
|
2002-01-13 23:56:13 +00:00
|
|
|
|
SC_TEST_RET(card->ctx, r, "EF(DIR) encoding failed");
|
2002-01-17 23:47:03 +00:00
|
|
|
|
memset(&file, 0, sizeof(file));
|
|
|
|
|
for (i = 0; i < SC_MAX_AC_OPS; i++)
|
2002-01-21 12:49:00 +00:00
|
|
|
|
file.acl[i] = p15card->file_dir.acl[i];
|
2002-01-17 23:47:03 +00:00
|
|
|
|
file.size = bufsize;
|
|
|
|
|
file.type = SC_FILE_TYPE_WORKING_EF;
|
|
|
|
|
file.ef_structure = SC_FILE_EF_TRANSPARENT;
|
|
|
|
|
file.id = 0x2F00;
|
|
|
|
|
file.status = SC_FILE_STATUS_ACTIVATED;
|
|
|
|
|
sc_format_path("3F002F00", &path);
|
2002-01-24 16:02:54 +00:00
|
|
|
|
i = card->ctx->log_errors;
|
|
|
|
|
card->ctx->log_errors = 0;
|
2002-01-17 23:47:03 +00:00
|
|
|
|
r = sc_select_file(card, &path, NULL);
|
2002-01-24 16:02:54 +00:00
|
|
|
|
card->ctx->log_errors = i;
|
2002-01-20 21:20:09 +00:00
|
|
|
|
if (r != 0) {
|
|
|
|
|
r = sc_create_file(card, &file);
|
|
|
|
|
if (r) {
|
|
|
|
|
sc_perror(card->ctx, r, "Error creating EF(DIR)");
|
|
|
|
|
free(buf);
|
|
|
|
|
return r;
|
|
|
|
|
}
|
|
|
|
|
r = sc_select_file(card, &path, NULL);
|
|
|
|
|
if (r) {
|
|
|
|
|
sc_perror(card->ctx, r, "Error selecting EF(DIR)");
|
|
|
|
|
free(buf);
|
|
|
|
|
return r;
|
|
|
|
|
}
|
2002-01-17 23:47:03 +00:00
|
|
|
|
}
|
|
|
|
|
r = sc_update_binary(card, 0, buf, bufsize, 0);
|
|
|
|
|
free(buf);
|
|
|
|
|
SC_TEST_RET(card->ctx, r, "Error updating EF(DIR)");
|
2002-02-20 09:56:47 +00:00
|
|
|
|
#endif
|
2002-01-13 23:56:13 +00:00
|
|
|
|
return 0;
|
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
static const struct sc_asn1_entry c_asn1_odf[] = {
|
|
|
|
|
{ "privateKeys", SC_ASN1_STRUCT, SC_ASN1_CTX | 0 | SC_ASN1_CONS, 0, NULL },
|
2002-03-03 00:32:28 +00:00
|
|
|
|
{ "publicKeys", SC_ASN1_STRUCT, SC_ASN1_CTX | 1 | SC_ASN1_CONS, 0, NULL },
|
|
|
|
|
{ "trustedPublicKeys", SC_ASN1_STRUCT, SC_ASN1_CTX | 2 | SC_ASN1_CONS, 0, NULL },
|
2002-01-13 23:56:13 +00:00
|
|
|
|
{ "certificates", SC_ASN1_STRUCT, SC_ASN1_CTX | 4 | SC_ASN1_CONS, 0, NULL },
|
|
|
|
|
{ "trustedCertificates", SC_ASN1_STRUCT, SC_ASN1_CTX | 5 | SC_ASN1_CONS, 0, NULL },
|
2002-03-03 00:32:28 +00:00
|
|
|
|
{ "usefulCertificates", SC_ASN1_STRUCT, SC_ASN1_CTX | 6 | SC_ASN1_CONS, 0, NULL },
|
2002-01-13 23:56:13 +00:00
|
|
|
|
{ "dataObjects", SC_ASN1_STRUCT, SC_ASN1_CTX | 7 | SC_ASN1_CONS, 0, NULL },
|
|
|
|
|
{ "authObjects", SC_ASN1_STRUCT, SC_ASN1_CTX | 8 | SC_ASN1_CONS, 0, NULL },
|
|
|
|
|
{ NULL }
|
|
|
|
|
};
|
|
|
|
|
|
|
|
|
|
static const int odf_indexes[] = {
|
|
|
|
|
SC_PKCS15_PRKDF,
|
2002-03-03 00:32:28 +00:00
|
|
|
|
SC_PKCS15_PUKDF,
|
|
|
|
|
SC_PKCS15_PUKDF_TRUSTED,
|
2002-01-13 23:56:13 +00:00
|
|
|
|
SC_PKCS15_CDF,
|
|
|
|
|
SC_PKCS15_CDF_TRUSTED,
|
2002-03-03 00:32:28 +00:00
|
|
|
|
SC_PKCS15_CDF_USEFUL,
|
2002-01-13 23:56:13 +00:00
|
|
|
|
SC_PKCS15_DODF,
|
|
|
|
|
SC_PKCS15_AODF,
|
|
|
|
|
};
|
|
|
|
|
|
2001-11-01 15:43:20 +00:00
|
|
|
|
static int parse_odf(const u8 * buf, int buflen, struct sc_pkcs15_card *card)
|
|
|
|
|
{
|
2001-12-16 18:46:32 +00:00
|
|
|
|
const u8 *p = buf;
|
2002-01-01 19:56:07 +00:00
|
|
|
|
size_t left = buflen;
|
2002-01-13 23:56:13 +00:00
|
|
|
|
int r, i;
|
2001-12-16 18:46:32 +00:00
|
|
|
|
struct sc_path path;
|
2002-01-10 12:33:56 +00:00
|
|
|
|
struct sc_asn1_entry asn1_obj_or_path[] = {
|
2001-12-16 18:46:32 +00:00
|
|
|
|
{ "path", SC_ASN1_PATH, SC_ASN1_CONS | SC_ASN1_SEQUENCE, 0, &path },
|
2001-12-19 21:58:04 +00:00
|
|
|
|
{ NULL }
|
|
|
|
|
};
|
2002-03-03 00:32:28 +00:00
|
|
|
|
struct sc_asn1_entry asn1_odf[9];
|
2001-12-16 18:46:32 +00:00
|
|
|
|
|
2002-01-13 23:56:13 +00:00
|
|
|
|
sc_copy_asn1_entry(c_asn1_odf, asn1_odf);
|
|
|
|
|
for (i = 0; asn1_odf[i].name != NULL; i++)
|
|
|
|
|
sc_format_asn1_entry(asn1_odf + i, asn1_obj_or_path, NULL, 0);
|
2001-12-16 18:46:32 +00:00
|
|
|
|
while (left > 0) {
|
2002-01-07 18:23:34 +00:00
|
|
|
|
r = sc_asn1_decode_choice(card->card->ctx, asn1_odf, p, left, &p, &left);
|
2001-12-16 18:46:32 +00:00
|
|
|
|
if (r == SC_ERROR_ASN1_END_OF_CONTENTS)
|
|
|
|
|
break;
|
|
|
|
|
if (r < 0)
|
|
|
|
|
return r;
|
2002-04-19 09:22:44 +00:00
|
|
|
|
r = sc_pkcs15_add_df(card, odf_indexes[r], &path, NULL);
|
|
|
|
|
if (r)
|
|
|
|
|
return r;
|
2002-01-13 23:56:13 +00:00
|
|
|
|
}
|
|
|
|
|
return 0;
|
|
|
|
|
}
|
|
|
|
|
|
2002-02-21 18:53:23 +00:00
|
|
|
|
int sc_pkcs15_encode_odf(struct sc_context *ctx,
|
2002-04-19 09:22:44 +00:00
|
|
|
|
struct sc_pkcs15_card *p15card,
|
|
|
|
|
u8 **buf, size_t *buflen)
|
2002-01-13 23:56:13 +00:00
|
|
|
|
{
|
|
|
|
|
struct sc_path path;
|
|
|
|
|
struct sc_asn1_entry asn1_obj_or_path[] = {
|
|
|
|
|
{ "path", SC_ASN1_PATH, SC_ASN1_CONS | SC_ASN1_SEQUENCE, 0, &path },
|
2002-01-16 23:59:18 +00:00
|
|
|
|
{ NULL }
|
2002-01-13 23:56:13 +00:00
|
|
|
|
};
|
|
|
|
|
struct sc_asn1_entry *asn1_paths = NULL;
|
|
|
|
|
struct sc_asn1_entry *asn1_odf = NULL;
|
2002-04-19 09:22:44 +00:00
|
|
|
|
int df_count = 0, r, c = 0;
|
2002-01-13 23:56:13 +00:00
|
|
|
|
const int nr_indexes = sizeof(odf_indexes)/sizeof(odf_indexes[0]);
|
2002-04-19 09:22:44 +00:00
|
|
|
|
struct sc_pkcs15_df *df;
|
2002-01-13 23:56:13 +00:00
|
|
|
|
|
2002-04-19 09:22:44 +00:00
|
|
|
|
df = p15card->df_list;
|
|
|
|
|
while (df != NULL) {
|
|
|
|
|
df_count++;
|
|
|
|
|
df = df->next;
|
|
|
|
|
};
|
2002-01-17 11:44:27 +00:00
|
|
|
|
if (df_count == 0) {
|
|
|
|
|
error(ctx, "No DF's found.\n");
|
|
|
|
|
return SC_ERROR_OBJECT_NOT_FOUND;
|
|
|
|
|
}
|
2002-04-19 14:23:31 +00:00
|
|
|
|
asn1_odf = (struct sc_asn1_entry *) malloc(sizeof(struct sc_asn1_entry) * (df_count + 1));
|
2002-01-13 23:56:13 +00:00
|
|
|
|
if (asn1_odf == NULL) {
|
|
|
|
|
r = SC_ERROR_OUT_OF_MEMORY;
|
|
|
|
|
goto err;
|
|
|
|
|
}
|
2002-04-19 14:23:31 +00:00
|
|
|
|
asn1_paths = (struct sc_asn1_entry *) malloc(sizeof(struct sc_asn1_entry) * (df_count * 2));
|
2002-01-13 23:56:13 +00:00
|
|
|
|
if (asn1_paths == NULL) {
|
|
|
|
|
r = SC_ERROR_OUT_OF_MEMORY;
|
|
|
|
|
goto err;
|
|
|
|
|
}
|
2002-04-19 09:22:44 +00:00
|
|
|
|
for (df = p15card->df_list; df != NULL; df = df->next) {
|
2002-01-13 23:56:13 +00:00
|
|
|
|
int j, type = -1;
|
2002-04-19 09:22:44 +00:00
|
|
|
|
|
2002-01-13 23:56:13 +00:00
|
|
|
|
for (j = 0; j < nr_indexes; j++)
|
2002-04-19 09:22:44 +00:00
|
|
|
|
if (odf_indexes[j] == df->type) {
|
2002-01-13 23:56:13 +00:00
|
|
|
|
type = j;
|
2001-12-16 18:46:32 +00:00
|
|
|
|
break;
|
|
|
|
|
}
|
2002-01-13 23:56:13 +00:00
|
|
|
|
if (type == -1) {
|
2002-01-16 23:59:18 +00:00
|
|
|
|
error(ctx, "Unsupported DF type.\n");
|
2002-01-13 23:56:13 +00:00
|
|
|
|
continue;
|
|
|
|
|
}
|
2002-04-19 09:22:44 +00:00
|
|
|
|
asn1_odf[c] = c_asn1_odf[type];
|
|
|
|
|
sc_format_asn1_entry(asn1_odf + c, asn1_paths + 2*c, NULL, 1);
|
|
|
|
|
sc_copy_asn1_entry(asn1_obj_or_path, asn1_paths + 2*c);
|
|
|
|
|
sc_format_asn1_entry(asn1_paths + 2*c, &df->path, NULL, 1);
|
|
|
|
|
c++;
|
2001-12-16 18:46:32 +00:00
|
|
|
|
}
|
2002-04-19 09:22:44 +00:00
|
|
|
|
asn1_odf[c].name = NULL;
|
2002-01-16 23:59:18 +00:00
|
|
|
|
r = sc_asn1_encode(ctx, asn1_odf, buf, buflen);
|
2002-01-13 23:56:13 +00:00
|
|
|
|
err:
|
|
|
|
|
if (asn1_paths != NULL)
|
|
|
|
|
free(asn1_paths);
|
|
|
|
|
if (asn1_odf != NULL)
|
|
|
|
|
free(asn1_odf);
|
|
|
|
|
return r;
|
|
|
|
|
}
|
|
|
|
|
|
2002-01-16 23:59:18 +00:00
|
|
|
|
struct sc_pkcs15_card * sc_pkcs15_card_new()
|
|
|
|
|
{
|
|
|
|
|
struct sc_pkcs15_card *p15card;
|
|
|
|
|
|
2002-04-19 14:23:31 +00:00
|
|
|
|
p15card = (struct sc_pkcs15_card *) malloc(sizeof(struct sc_pkcs15_card));
|
2002-01-16 23:59:18 +00:00
|
|
|
|
if (p15card == NULL)
|
|
|
|
|
return NULL;
|
|
|
|
|
memset(p15card, 0, sizeof(struct sc_pkcs15_card));
|
2002-01-24 18:37:12 +00:00
|
|
|
|
p15card->magic = SC_PKCS15_CARD_MAGIC;
|
2002-01-16 23:59:18 +00:00
|
|
|
|
return p15card;
|
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
void sc_pkcs15_card_free(struct sc_pkcs15_card *p15card)
|
|
|
|
|
{
|
2002-01-24 18:37:12 +00:00
|
|
|
|
assert(p15card != NULL && p15card->magic == SC_PKCS15_CARD_MAGIC);
|
2002-04-19 09:22:44 +00:00
|
|
|
|
while (p15card->obj_list)
|
|
|
|
|
sc_pkcs15_remove_object(p15card, p15card->obj_list);
|
|
|
|
|
while (p15card->df_list)
|
|
|
|
|
sc_pkcs15_remove_df(p15card, p15card->df_list);
|
2002-02-20 09:56:47 +00:00
|
|
|
|
if (p15card->file_app != NULL)
|
|
|
|
|
sc_file_free(p15card->file_app);
|
|
|
|
|
if (p15card->file_tokeninfo != NULL)
|
|
|
|
|
sc_file_free(p15card->file_tokeninfo);
|
|
|
|
|
if (p15card->file_odf != NULL)
|
|
|
|
|
sc_file_free(p15card->file_odf);
|
2002-01-24 18:37:12 +00:00
|
|
|
|
p15card->magic = 0;
|
2002-02-20 09:56:47 +00:00
|
|
|
|
if (p15card->label)
|
|
|
|
|
free(p15card->label);
|
|
|
|
|
if (p15card->serial_number)
|
|
|
|
|
free(p15card->serial_number);
|
|
|
|
|
if (p15card->manufacturer_id)
|
|
|
|
|
free(p15card->manufacturer_id);
|
2002-01-16 23:59:18 +00:00
|
|
|
|
free(p15card);
|
|
|
|
|
}
|
|
|
|
|
|
2001-12-21 23:34:47 +00:00
|
|
|
|
int sc_pkcs15_bind(struct sc_card *card,
|
2001-11-01 15:43:20 +00:00
|
|
|
|
struct sc_pkcs15_card **p15card_out)
|
|
|
|
|
{
|
2002-02-24 19:32:14 +00:00
|
|
|
|
unsigned char buf[SC_MAX_APDU_BUFFER_SIZE];
|
2002-05-26 12:31:23 +00:00
|
|
|
|
int err;
|
|
|
|
|
size_t len;
|
2001-11-01 15:43:20 +00:00
|
|
|
|
struct sc_pkcs15_card *p15card = NULL;
|
|
|
|
|
struct sc_path tmppath;
|
2001-12-25 20:45:48 +00:00
|
|
|
|
struct sc_context *ctx;
|
2003-01-09 12:31:03 +00:00
|
|
|
|
scconf_block *conf_block = NULL, **blocks;
|
|
|
|
|
int i;
|
2001-11-01 15:43:20 +00:00
|
|
|
|
|
2001-12-25 20:45:48 +00:00
|
|
|
|
assert(sc_card_valid(card) && p15card_out != NULL);
|
|
|
|
|
ctx = card->ctx;
|
|
|
|
|
SC_FUNC_CALLED(ctx, 1);
|
2002-01-16 23:59:18 +00:00
|
|
|
|
p15card = sc_pkcs15_card_new();
|
2001-11-01 15:43:20 +00:00
|
|
|
|
if (p15card == NULL)
|
|
|
|
|
return SC_ERROR_OUT_OF_MEMORY;
|
|
|
|
|
p15card->card = card;
|
2001-11-17 14:55:41 +00:00
|
|
|
|
|
2003-01-09 12:31:03 +00:00
|
|
|
|
for (i = 0; ctx->conf_blocks[i] != NULL; i++) {
|
|
|
|
|
blocks = scconf_find_blocks(ctx->conf, ctx->conf_blocks[i],
|
|
|
|
|
"framework", "pkcs15");
|
|
|
|
|
conf_block = blocks[0];
|
|
|
|
|
free(blocks);
|
|
|
|
|
if (conf_block != NULL)
|
|
|
|
|
break;
|
|
|
|
|
}
|
|
|
|
|
if (conf_block)
|
|
|
|
|
p15card->opts.use_cache = scconf_get_bool(conf_block, "use_caching", 0);
|
2002-04-19 09:22:44 +00:00
|
|
|
|
|
2001-12-25 20:45:48 +00:00
|
|
|
|
err = sc_lock(card);
|
|
|
|
|
if (err) {
|
|
|
|
|
error(ctx, "sc_lock() failed: %s\n", sc_strerror(err));
|
|
|
|
|
goto error;
|
|
|
|
|
}
|
2002-02-20 09:56:47 +00:00
|
|
|
|
|
|
|
|
|
if (card->app_count < 0) {
|
|
|
|
|
err = sc_enum_apps(card);
|
|
|
|
|
if (err < 0 && err != SC_ERROR_FILE_NOT_FOUND) {
|
|
|
|
|
error(ctx, "unable to enumerate apps: %s\n", sc_strerror(err));
|
|
|
|
|
goto error;
|
|
|
|
|
}
|
2001-12-25 20:45:48 +00:00
|
|
|
|
}
|
2002-02-20 09:56:47 +00:00
|
|
|
|
p15card->file_app = sc_file_new();
|
|
|
|
|
if (p15card->file_app == NULL) {
|
|
|
|
|
err = SC_ERROR_OUT_OF_MEMORY;
|
2001-11-01 15:43:20 +00:00
|
|
|
|
goto error;
|
2001-12-25 20:45:48 +00:00
|
|
|
|
}
|
2002-02-20 09:56:47 +00:00
|
|
|
|
sc_format_path("3F005015", &p15card->file_app->path);
|
|
|
|
|
if (card->app_count > 0) {
|
|
|
|
|
const struct sc_app_info *info;
|
|
|
|
|
|
|
|
|
|
info = sc_find_app_by_aid(card, pkcs15_aid, pkcs15_aid_len);
|
|
|
|
|
if (info != NULL) {
|
|
|
|
|
if (info->path.len)
|
|
|
|
|
p15card->file_app->path = info->path;
|
|
|
|
|
if (info->ddo != NULL)
|
|
|
|
|
parse_ddo(p15card, info->ddo, info->ddo_len);
|
|
|
|
|
}
|
2001-11-01 15:43:20 +00:00
|
|
|
|
}
|
2002-02-20 09:56:47 +00:00
|
|
|
|
if (p15card->file_odf == NULL) {
|
|
|
|
|
tmppath = p15card->file_app->path;
|
2002-02-24 16:50:29 +00:00
|
|
|
|
sc_append_path_id(&tmppath, (const u8 *) "\x50\x31", 2);
|
2002-02-20 09:56:47 +00:00
|
|
|
|
} else {
|
|
|
|
|
tmppath = p15card->file_odf->path;
|
|
|
|
|
sc_file_free(p15card->file_odf);
|
|
|
|
|
p15card->file_odf = NULL;
|
2001-11-01 15:43:20 +00:00
|
|
|
|
}
|
2002-02-20 09:56:47 +00:00
|
|
|
|
err = sc_select_file(card, &tmppath, &p15card->file_odf);
|
|
|
|
|
if (err) /* FIXME: finish writing error reporting stuff */
|
2002-01-24 16:02:54 +00:00
|
|
|
|
goto error;
|
2002-03-06 12:32:42 +00:00
|
|
|
|
|
|
|
|
|
/* XXX: fix buffer overflow. Silently truncate ODF if it
|
|
|
|
|
* is too large. --okir */
|
|
|
|
|
if ((len = p15card->file_odf->size) > sizeof(buf))
|
|
|
|
|
len = sizeof(buf);
|
|
|
|
|
err = sc_read_binary(card, 0, buf, len, 0);
|
2002-01-24 16:02:54 +00:00
|
|
|
|
if (err < 0)
|
|
|
|
|
goto error;
|
|
|
|
|
if (err < 2) {
|
|
|
|
|
err = SC_ERROR_PKCS15_APP_NOT_FOUND;
|
|
|
|
|
goto error;
|
2001-11-01 15:43:20 +00:00
|
|
|
|
}
|
2002-01-24 16:02:54 +00:00
|
|
|
|
len = err;
|
|
|
|
|
if (parse_odf(buf, len, p15card)) {
|
|
|
|
|
err = SC_ERROR_PKCS15_APP_NOT_FOUND;
|
2002-04-04 20:40:40 +00:00
|
|
|
|
error(card->ctx, "Unable to parse ODF\n");
|
2002-01-24 16:02:54 +00:00
|
|
|
|
goto error;
|
|
|
|
|
}
|
2002-02-20 09:56:47 +00:00
|
|
|
|
if (p15card->file_tokeninfo == NULL) {
|
|
|
|
|
tmppath = p15card->file_app->path;
|
2002-02-24 16:50:29 +00:00
|
|
|
|
sc_append_path_id(&tmppath, (const u8 *) "\x50\x32", 2);
|
2002-02-20 09:56:47 +00:00
|
|
|
|
} else {
|
|
|
|
|
tmppath = p15card->file_tokeninfo->path;
|
|
|
|
|
sc_file_free(p15card->file_tokeninfo);
|
|
|
|
|
p15card->file_tokeninfo = NULL;
|
|
|
|
|
}
|
|
|
|
|
err = sc_select_file(card, &tmppath, &p15card->file_tokeninfo);
|
2001-11-01 15:43:20 +00:00
|
|
|
|
if (err)
|
|
|
|
|
goto error;
|
2002-03-06 13:21:22 +00:00
|
|
|
|
|
|
|
|
|
if ((len = p15card->file_tokeninfo->size) > sizeof(buf))
|
|
|
|
|
len = sizeof(buf);
|
|
|
|
|
err = sc_read_binary(card, 0, buf, len, 0);
|
2001-11-01 15:43:20 +00:00
|
|
|
|
if (err < 0)
|
|
|
|
|
goto error;
|
|
|
|
|
if (err <= 2) {
|
2002-01-10 12:33:56 +00:00
|
|
|
|
err = SC_ERROR_PKCS15_APP_NOT_FOUND;
|
2001-11-01 15:43:20 +00:00
|
|
|
|
goto error;
|
|
|
|
|
}
|
|
|
|
|
parse_tokeninfo(p15card, buf, err);
|
2001-12-22 20:43:09 +00:00
|
|
|
|
|
2001-11-01 15:43:20 +00:00
|
|
|
|
*p15card_out = p15card;
|
2001-12-25 20:45:48 +00:00
|
|
|
|
sc_unlock(card);
|
2001-11-01 15:43:20 +00:00
|
|
|
|
return 0;
|
2001-12-16 18:46:32 +00:00
|
|
|
|
error:
|
2002-02-20 09:56:47 +00:00
|
|
|
|
sc_pkcs15_card_free(p15card);
|
2001-12-25 20:45:48 +00:00
|
|
|
|
sc_unlock(card);
|
|
|
|
|
SC_FUNC_RETURN(ctx, 1, err);
|
2001-11-01 15:43:20 +00:00
|
|
|
|
}
|
|
|
|
|
|
2002-01-08 13:56:50 +00:00
|
|
|
|
int sc_pkcs15_detect(struct sc_card *card)
|
|
|
|
|
{
|
|
|
|
|
int r;
|
|
|
|
|
struct sc_path path;
|
|
|
|
|
|
|
|
|
|
sc_format_path("NA0000063504B43532D3135", &path);
|
2002-02-20 09:56:47 +00:00
|
|
|
|
r = sc_select_file(card, &path, NULL);
|
2002-01-08 13:56:50 +00:00
|
|
|
|
if (r != 0)
|
|
|
|
|
return 0;
|
|
|
|
|
return 1;
|
|
|
|
|
}
|
|
|
|
|
|
2001-12-21 23:34:47 +00:00
|
|
|
|
int sc_pkcs15_unbind(struct sc_pkcs15_card *p15card)
|
2001-11-01 15:43:20 +00:00
|
|
|
|
{
|
2002-01-24 18:37:12 +00:00
|
|
|
|
assert(p15card != NULL && p15card->magic == SC_PKCS15_CARD_MAGIC);
|
2001-12-22 20:43:09 +00:00
|
|
|
|
SC_FUNC_CALLED(p15card->card->ctx, 1);
|
2002-01-16 23:59:18 +00:00
|
|
|
|
sc_pkcs15_card_free(p15card);
|
2001-11-01 15:43:20 +00:00
|
|
|
|
return 0;
|
|
|
|
|
}
|
|
|
|
|
|
2002-03-03 00:32:28 +00:00
|
|
|
|
int sc_pkcs15_get_objects_cond(struct sc_pkcs15_card *p15card, int type,
|
|
|
|
|
int (* func)(struct sc_pkcs15_object *, void *),
|
|
|
|
|
void *func_arg,
|
|
|
|
|
struct sc_pkcs15_object **ret, int ret_size)
|
|
|
|
|
{
|
|
|
|
|
const int prkey_df[] = { SC_PKCS15_PRKDF, -1 };
|
|
|
|
|
const int pubkey_df[] = { SC_PKCS15_PUKDF, SC_PKCS15_PUKDF_TRUSTED, -1 };
|
|
|
|
|
const int cert_df[] = { SC_PKCS15_CDF, SC_PKCS15_CDF_TRUSTED, SC_PKCS15_CDF_USEFUL, -1 };
|
2002-12-18 10:17:01 +00:00
|
|
|
|
const int data_df[] = { SC_PKCS15_DODF, -1 };
|
2002-03-03 00:32:28 +00:00
|
|
|
|
const int auth_df[] = { SC_PKCS15_AODF, -1 };
|
|
|
|
|
const int *dfs;
|
2002-04-19 09:22:44 +00:00
|
|
|
|
sc_pkcs15_object_t *obj;
|
|
|
|
|
int match_count = 0, i, r = 0;
|
2002-03-03 00:32:28 +00:00
|
|
|
|
|
|
|
|
|
switch (type & SC_PKCS15_TYPE_CLASS_MASK) {
|
|
|
|
|
case SC_PKCS15_TYPE_PRKEY:
|
|
|
|
|
dfs = prkey_df;
|
|
|
|
|
break;
|
|
|
|
|
case SC_PKCS15_TYPE_PUBKEY:
|
|
|
|
|
dfs = pubkey_df;
|
|
|
|
|
break;
|
|
|
|
|
case SC_PKCS15_TYPE_CERT:
|
|
|
|
|
dfs = cert_df;
|
|
|
|
|
break;
|
2002-12-18 10:17:01 +00:00
|
|
|
|
case SC_PKCS15_TYPE_DATA_OBJECT:
|
|
|
|
|
dfs = data_df;
|
|
|
|
|
break;
|
2002-03-03 00:32:28 +00:00
|
|
|
|
case SC_PKCS15_TYPE_AUTH:
|
|
|
|
|
dfs = auth_df;
|
|
|
|
|
break;
|
|
|
|
|
default:
|
|
|
|
|
return SC_ERROR_INVALID_ARGUMENTS;
|
|
|
|
|
}
|
|
|
|
|
for (i = 0; dfs[i] != -1; i++) {
|
2002-04-19 09:22:44 +00:00
|
|
|
|
struct sc_pkcs15_df *df = p15card->df_list;
|
|
|
|
|
|
|
|
|
|
for (df = p15card->df_list; df != NULL; df = df->next) {
|
|
|
|
|
if (df->type != dfs[i])
|
|
|
|
|
continue;
|
|
|
|
|
if (df->enumerated)
|
|
|
|
|
continue;
|
|
|
|
|
/* Enumerate the DF's, so p15card->obj_list is
|
|
|
|
|
* populated. */
|
|
|
|
|
r = sc_pkcs15_parse_df(p15card, df);
|
|
|
|
|
if (r < 0)
|
|
|
|
|
break;
|
2002-03-03 00:32:28 +00:00
|
|
|
|
SC_TEST_RET(p15card->card->ctx, r, "DF parsing failed");
|
|
|
|
|
df->enumerated = 1;
|
|
|
|
|
}
|
|
|
|
|
}
|
2002-04-19 09:22:44 +00:00
|
|
|
|
for (obj = p15card->obj_list; obj != NULL; obj = obj->next) {
|
|
|
|
|
if (obj->type != type
|
|
|
|
|
&& (obj->type & SC_PKCS15_TYPE_CLASS_MASK) != type)
|
|
|
|
|
continue;
|
|
|
|
|
if (func != NULL && func(obj, func_arg) <= 0)
|
|
|
|
|
continue;
|
|
|
|
|
/* Okay, we have a match. */
|
|
|
|
|
match_count++;
|
|
|
|
|
if (ret_size <= 0)
|
|
|
|
|
continue;
|
|
|
|
|
ret[match_count-1] = obj;
|
|
|
|
|
if (ret_size <= match_count)
|
|
|
|
|
break;
|
2002-03-03 00:32:28 +00:00
|
|
|
|
}
|
2002-04-19 09:22:44 +00:00
|
|
|
|
return match_count;
|
2002-03-03 00:32:28 +00:00
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
int sc_pkcs15_get_objects(struct sc_pkcs15_card *p15card, int type,
|
|
|
|
|
struct sc_pkcs15_object **ret, int ret_size)
|
|
|
|
|
{
|
|
|
|
|
return sc_pkcs15_get_objects_cond(p15card, type, NULL, NULL, ret, ret_size);
|
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
static int compare_obj_id(struct sc_pkcs15_object *obj, void *arg)
|
|
|
|
|
{
|
|
|
|
|
void *data = obj->data;
|
2002-04-19 14:23:31 +00:00
|
|
|
|
const struct sc_pkcs15_id *id = (const struct sc_pkcs15_id *) arg;
|
2002-03-03 00:32:28 +00:00
|
|
|
|
|
|
|
|
|
switch (obj->type) {
|
|
|
|
|
case SC_PKCS15_TYPE_CERT_X509:
|
|
|
|
|
return sc_pkcs15_compare_id(&((struct sc_pkcs15_cert_info *) data)->id, id);
|
|
|
|
|
case SC_PKCS15_TYPE_PRKEY_RSA:
|
2002-04-18 10:59:13 +00:00
|
|
|
|
case SC_PKCS15_TYPE_PRKEY_DSA:
|
2002-03-03 00:32:28 +00:00
|
|
|
|
return sc_pkcs15_compare_id(&((struct sc_pkcs15_prkey_info *) data)->id, id);
|
|
|
|
|
case SC_PKCS15_TYPE_PUBKEY_RSA:
|
2002-04-18 10:59:13 +00:00
|
|
|
|
case SC_PKCS15_TYPE_PUBKEY_DSA:
|
2002-03-03 00:32:28 +00:00
|
|
|
|
return sc_pkcs15_compare_id(&((struct sc_pkcs15_pubkey_info *) data)->id, id);
|
|
|
|
|
case SC_PKCS15_TYPE_AUTH_PIN:
|
|
|
|
|
return sc_pkcs15_compare_id(&((struct sc_pkcs15_pin_info *) data)->auth_id, id);
|
2002-12-18 10:17:01 +00:00
|
|
|
|
case SC_PKCS15_TYPE_DATA_OBJECT:
|
|
|
|
|
return sc_pkcs15_compare_id(&((struct sc_pkcs15_data_info *) data)->id, id);
|
2002-03-03 00:32:28 +00:00
|
|
|
|
}
|
|
|
|
|
return 0;
|
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
static int find_by_id(struct sc_pkcs15_card *p15card,
|
|
|
|
|
int type, const struct sc_pkcs15_id *id,
|
|
|
|
|
struct sc_pkcs15_object **out)
|
|
|
|
|
{
|
|
|
|
|
int r;
|
|
|
|
|
|
|
|
|
|
r = sc_pkcs15_get_objects_cond(p15card, type, compare_obj_id, (void *) id, out, 1);
|
|
|
|
|
if (r < 0)
|
|
|
|
|
return r;
|
|
|
|
|
if (r == 0)
|
|
|
|
|
return SC_ERROR_OBJECT_NOT_FOUND;
|
|
|
|
|
return 0;
|
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
int sc_pkcs15_find_cert_by_id(struct sc_pkcs15_card *p15card,
|
|
|
|
|
const struct sc_pkcs15_id *id,
|
|
|
|
|
struct sc_pkcs15_object **out)
|
|
|
|
|
{
|
2002-04-18 15:01:02 +00:00
|
|
|
|
return find_by_id(p15card, SC_PKCS15_TYPE_CERT, id, out);
|
2002-03-03 00:32:28 +00:00
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
int sc_pkcs15_find_prkey_by_id(struct sc_pkcs15_card *p15card,
|
|
|
|
|
const struct sc_pkcs15_id *id,
|
|
|
|
|
struct sc_pkcs15_object **out)
|
|
|
|
|
{
|
2002-04-18 15:01:02 +00:00
|
|
|
|
return find_by_id(p15card, SC_PKCS15_TYPE_PRKEY, id, out);
|
2002-03-03 00:32:28 +00:00
|
|
|
|
}
|
|
|
|
|
|
2002-04-18 10:59:13 +00:00
|
|
|
|
int sc_pkcs15_find_pubkey_by_id(struct sc_pkcs15_card *p15card,
|
|
|
|
|
const struct sc_pkcs15_id *id,
|
|
|
|
|
struct sc_pkcs15_object **out)
|
|
|
|
|
{
|
|
|
|
|
return find_by_id(p15card, SC_PKCS15_TYPE_PUBKEY, id, out);
|
|
|
|
|
}
|
|
|
|
|
|
2002-03-03 00:32:28 +00:00
|
|
|
|
int sc_pkcs15_find_pin_by_auth_id(struct sc_pkcs15_card *p15card,
|
|
|
|
|
const struct sc_pkcs15_id *id,
|
|
|
|
|
struct sc_pkcs15_object **out)
|
|
|
|
|
{
|
|
|
|
|
return find_by_id(p15card, SC_PKCS15_TYPE_AUTH_PIN, id, out);
|
|
|
|
|
}
|
|
|
|
|
|
2002-12-18 10:17:01 +00:00
|
|
|
|
int sc_pkcs15_find_data_object_by_id(struct sc_pkcs15_card *p15card,
|
|
|
|
|
const struct sc_pkcs15_id *id,
|
|
|
|
|
struct sc_pkcs15_object **out)
|
|
|
|
|
{
|
|
|
|
|
return find_by_id(p15card, SC_PKCS15_TYPE_DATA_OBJECT, id, out);
|
|
|
|
|
}
|
|
|
|
|
|
2002-04-18 15:01:02 +00:00
|
|
|
|
static int compare_flags(struct sc_pkcs15_object *obj, void *arg)
|
2002-04-08 15:45:28 +00:00
|
|
|
|
{
|
|
|
|
|
struct sc_pkcs15_pin_info *pin;
|
|
|
|
|
unsigned int *match = (unsigned int *) arg;
|
|
|
|
|
|
|
|
|
|
assert (obj->type == SC_PKCS15_TYPE_AUTH_PIN);
|
|
|
|
|
pin = (struct sc_pkcs15_pin_info *) obj->data;
|
|
|
|
|
return (pin->flags & match[0]) == match[1];
|
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
int sc_pkcs15_find_so_pin(struct sc_pkcs15_card *p15card,
|
|
|
|
|
struct sc_pkcs15_object **out)
|
|
|
|
|
{
|
|
|
|
|
unsigned int match[2];
|
|
|
|
|
int r;
|
|
|
|
|
|
|
|
|
|
/* The PIN flags are masked with the first word and
|
|
|
|
|
* compared to the second word. */
|
|
|
|
|
match[0] = SC_PKCS15_PIN_FLAG_SO_PIN;
|
|
|
|
|
match[1] = SC_PKCS15_PIN_FLAG_SO_PIN;
|
|
|
|
|
|
|
|
|
|
r = sc_pkcs15_get_objects_cond(p15card,
|
|
|
|
|
SC_PKCS15_TYPE_AUTH_PIN, compare_flags,
|
|
|
|
|
match, out, 1);
|
|
|
|
|
if (r < 0)
|
|
|
|
|
return r;
|
|
|
|
|
if (r == 0)
|
|
|
|
|
return SC_ERROR_OBJECT_NOT_FOUND;
|
|
|
|
|
return 0;
|
|
|
|
|
}
|
|
|
|
|
|
2002-04-19 09:22:44 +00:00
|
|
|
|
int sc_pkcs15_add_object(struct sc_pkcs15_card *p15card,
|
|
|
|
|
struct sc_pkcs15_object *obj)
|
2002-01-24 16:02:54 +00:00
|
|
|
|
{
|
2002-04-19 09:22:44 +00:00
|
|
|
|
struct sc_pkcs15_object *p = p15card->obj_list;
|
2002-01-24 16:02:54 +00:00
|
|
|
|
|
2002-04-19 09:22:44 +00:00
|
|
|
|
obj->next = obj->prev = NULL;
|
|
|
|
|
if (p15card->obj_list == NULL) {
|
|
|
|
|
p15card->obj_list = obj;
|
2002-01-16 23:59:18 +00:00
|
|
|
|
return 0;
|
|
|
|
|
}
|
|
|
|
|
while (p->next != NULL)
|
2002-01-24 16:02:54 +00:00
|
|
|
|
p = p->next;
|
|
|
|
|
p->next = obj;
|
2002-04-19 09:22:44 +00:00
|
|
|
|
obj->prev = p;
|
|
|
|
|
|
2002-01-16 23:59:18 +00:00
|
|
|
|
return 0;
|
2002-04-19 09:22:44 +00:00
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
void sc_pkcs15_remove_object(struct sc_pkcs15_card *p15card,
|
|
|
|
|
struct sc_pkcs15_object *obj)
|
|
|
|
|
{
|
|
|
|
|
if (obj->prev == NULL)
|
|
|
|
|
p15card->obj_list = obj->next;
|
|
|
|
|
else
|
|
|
|
|
obj->prev->next = obj->next;
|
|
|
|
|
if (obj->next != NULL)
|
|
|
|
|
obj->next->prev = obj->prev;
|
|
|
|
|
if (obj->data)
|
|
|
|
|
free(obj->data);
|
2002-12-10 13:27:17 +00:00
|
|
|
|
if (obj->der.value)
|
|
|
|
|
free(obj->der.value);
|
2002-04-19 09:22:44 +00:00
|
|
|
|
free(obj);
|
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
int sc_pkcs15_add_df(struct sc_pkcs15_card *p15card,
|
|
|
|
|
int type, const sc_path_t *path,
|
|
|
|
|
const sc_file_t *file)
|
|
|
|
|
{
|
|
|
|
|
struct sc_pkcs15_df *p = p15card->df_list, *newdf;
|
|
|
|
|
|
2002-04-19 14:23:31 +00:00
|
|
|
|
newdf = (struct sc_pkcs15_df *) malloc(sizeof(struct sc_pkcs15_df));
|
2002-04-19 09:22:44 +00:00
|
|
|
|
if (newdf == NULL)
|
|
|
|
|
return SC_ERROR_OUT_OF_MEMORY;
|
|
|
|
|
memset(newdf, 0, sizeof(struct sc_pkcs15_df));
|
|
|
|
|
newdf->path = *path;
|
|
|
|
|
newdf->type = type;
|
|
|
|
|
if (file != NULL)
|
|
|
|
|
sc_file_dup(&newdf->file, file);
|
|
|
|
|
if (p15card->df_list == NULL) {
|
|
|
|
|
p15card->df_list = newdf;
|
|
|
|
|
return 0;
|
|
|
|
|
}
|
|
|
|
|
while (p->next != NULL)
|
|
|
|
|
p = p->next;
|
|
|
|
|
p->next = newdf;
|
|
|
|
|
newdf->prev = p;
|
|
|
|
|
|
|
|
|
|
return 0;
|
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
void sc_pkcs15_remove_df(struct sc_pkcs15_card *p15card,
|
|
|
|
|
struct sc_pkcs15_df *obj)
|
|
|
|
|
{
|
|
|
|
|
if (obj->prev == NULL)
|
|
|
|
|
p15card->df_list = obj->next;
|
|
|
|
|
else
|
|
|
|
|
obj->prev->next = obj->next;
|
|
|
|
|
if (obj->next != NULL)
|
|
|
|
|
obj->next->prev = obj->prev;
|
|
|
|
|
if (obj->file)
|
|
|
|
|
sc_file_free(obj->file);
|
|
|
|
|
free(obj);
|
|
|
|
|
}
|
2002-01-16 23:59:18 +00:00
|
|
|
|
|
2002-01-17 23:47:03 +00:00
|
|
|
|
int sc_pkcs15_encode_df(struct sc_context *ctx,
|
2002-04-19 09:22:44 +00:00
|
|
|
|
struct sc_pkcs15_card *p15card,
|
2002-01-16 23:59:18 +00:00
|
|
|
|
struct sc_pkcs15_df *df,
|
|
|
|
|
u8 **buf_out, size_t *bufsize_out)
|
|
|
|
|
{
|
|
|
|
|
u8 *buf = NULL, *tmp;
|
|
|
|
|
size_t bufsize = 0, tmpsize;
|
2002-04-19 09:22:44 +00:00
|
|
|
|
const struct sc_pkcs15_object *obj;
|
2002-01-17 23:47:03 +00:00
|
|
|
|
int (* func)(struct sc_context *, const struct sc_pkcs15_object *obj,
|
2002-01-16 23:59:18 +00:00
|
|
|
|
u8 **buf, size_t *bufsize) = NULL;
|
2002-04-19 09:22:44 +00:00
|
|
|
|
int r;
|
|
|
|
|
|
|
|
|
|
assert(p15card != NULL && p15card->magic == SC_PKCS15_CARD_MAGIC);
|
2002-01-16 23:59:18 +00:00
|
|
|
|
switch (df->type) {
|
|
|
|
|
case SC_PKCS15_PRKDF:
|
2002-01-17 23:47:03 +00:00
|
|
|
|
func = sc_pkcs15_encode_prkdf_entry;
|
2002-01-16 23:59:18 +00:00
|
|
|
|
break;
|
2002-03-03 00:32:28 +00:00
|
|
|
|
case SC_PKCS15_PUKDF:
|
|
|
|
|
case SC_PKCS15_PUKDF_TRUSTED:
|
|
|
|
|
func = sc_pkcs15_encode_pukdf_entry;
|
|
|
|
|
break;
|
2002-01-16 23:59:18 +00:00
|
|
|
|
case SC_PKCS15_CDF:
|
|
|
|
|
case SC_PKCS15_CDF_TRUSTED:
|
|
|
|
|
case SC_PKCS15_CDF_USEFUL:
|
|
|
|
|
func = sc_pkcs15_encode_cdf_entry;
|
|
|
|
|
break;
|
2002-12-18 10:17:01 +00:00
|
|
|
|
case SC_PKCS15_DODF:
|
|
|
|
|
func = sc_pkcs15_encode_dodf_entry;
|
|
|
|
|
break;
|
2002-01-17 23:47:03 +00:00
|
|
|
|
case SC_PKCS15_AODF:
|
|
|
|
|
func = sc_pkcs15_encode_aodf_entry;
|
|
|
|
|
break;
|
2002-01-16 23:59:18 +00:00
|
|
|
|
}
|
|
|
|
|
if (func == NULL) {
|
2002-01-17 23:47:03 +00:00
|
|
|
|
error(ctx, "unknown DF type: %d\n", df->type);
|
|
|
|
|
*buf_out = NULL;
|
|
|
|
|
*bufsize_out = 0;
|
|
|
|
|
return 0;
|
2002-01-16 23:59:18 +00:00
|
|
|
|
}
|
2002-04-19 09:22:44 +00:00
|
|
|
|
for (obj = p15card->obj_list; obj != NULL; obj = obj->next) {
|
|
|
|
|
if (obj->df != df)
|
|
|
|
|
continue;
|
2002-01-17 23:47:03 +00:00
|
|
|
|
r = func(ctx, obj, &tmp, &tmpsize);
|
2002-01-16 23:59:18 +00:00
|
|
|
|
if (r) {
|
|
|
|
|
free(buf);
|
|
|
|
|
return r;
|
|
|
|
|
}
|
2002-04-19 14:23:31 +00:00
|
|
|
|
buf = (u8 *) realloc(buf, bufsize + tmpsize);
|
2002-01-16 23:59:18 +00:00
|
|
|
|
memcpy(buf + bufsize, tmp, tmpsize);
|
2002-01-20 21:20:09 +00:00
|
|
|
|
free(tmp);
|
2002-01-16 23:59:18 +00:00
|
|
|
|
bufsize += tmpsize;
|
|
|
|
|
}
|
|
|
|
|
*buf_out = buf;
|
|
|
|
|
*bufsize_out = bufsize;
|
|
|
|
|
|
|
|
|
|
return 0;
|
|
|
|
|
}
|
|
|
|
|
|
2002-01-24 16:02:54 +00:00
|
|
|
|
int sc_pkcs15_parse_df(struct sc_pkcs15_card *p15card,
|
2002-04-19 09:22:44 +00:00
|
|
|
|
struct sc_pkcs15_df *df)
|
2002-01-24 16:02:54 +00:00
|
|
|
|
{
|
|
|
|
|
struct sc_context *ctx = p15card->card->ctx;
|
2002-04-19 09:22:44 +00:00
|
|
|
|
u8 *buf;
|
|
|
|
|
const u8 *p;
|
|
|
|
|
size_t bufsize;
|
|
|
|
|
int r;
|
2002-01-24 16:02:54 +00:00
|
|
|
|
struct sc_pkcs15_object *obj = NULL;
|
|
|
|
|
int (* func)(struct sc_pkcs15_card *, struct sc_pkcs15_object *,
|
|
|
|
|
const u8 **buf, size_t *bufsize) = NULL;
|
|
|
|
|
|
|
|
|
|
switch (df->type) {
|
|
|
|
|
case SC_PKCS15_PRKDF:
|
|
|
|
|
func = sc_pkcs15_decode_prkdf_entry;
|
|
|
|
|
break;
|
2002-03-07 12:33:42 +00:00
|
|
|
|
case SC_PKCS15_PUKDF:
|
|
|
|
|
func = sc_pkcs15_decode_pukdf_entry;
|
|
|
|
|
break;
|
2002-01-24 16:02:54 +00:00
|
|
|
|
case SC_PKCS15_CDF:
|
|
|
|
|
case SC_PKCS15_CDF_TRUSTED:
|
|
|
|
|
case SC_PKCS15_CDF_USEFUL:
|
|
|
|
|
func = sc_pkcs15_decode_cdf_entry;
|
|
|
|
|
break;
|
2002-12-18 10:17:01 +00:00
|
|
|
|
case SC_PKCS15_DODF:
|
|
|
|
|
func = sc_pkcs15_decode_dodf_entry;
|
|
|
|
|
break;
|
2002-01-24 16:02:54 +00:00
|
|
|
|
case SC_PKCS15_AODF:
|
|
|
|
|
func = sc_pkcs15_decode_aodf_entry;
|
|
|
|
|
break;
|
|
|
|
|
}
|
|
|
|
|
if (func == NULL) {
|
|
|
|
|
error(ctx, "unknown DF type: %d\n", df->type);
|
|
|
|
|
return SC_ERROR_INVALID_ARGUMENTS;
|
|
|
|
|
}
|
2002-04-19 09:22:44 +00:00
|
|
|
|
if (df->file != NULL)
|
|
|
|
|
r = sc_pkcs15_read_file(p15card, &df->path,
|
|
|
|
|
&buf, &bufsize, NULL);
|
|
|
|
|
else
|
|
|
|
|
r = sc_pkcs15_read_file(p15card, &df->path,
|
|
|
|
|
&buf, &bufsize, &df->file);
|
2002-12-11 08:54:16 +00:00
|
|
|
|
if (r < 0)
|
|
|
|
|
return r;
|
|
|
|
|
|
2002-04-19 09:22:44 +00:00
|
|
|
|
p = buf;
|
2002-01-24 16:02:54 +00:00
|
|
|
|
do {
|
2002-12-10 13:27:17 +00:00
|
|
|
|
const u8 *oldp;
|
|
|
|
|
size_t obj_len;
|
|
|
|
|
|
2002-04-19 14:23:31 +00:00
|
|
|
|
obj = (struct sc_pkcs15_object *) malloc(sizeof(struct sc_pkcs15_object));
|
2002-04-19 09:22:44 +00:00
|
|
|
|
if (obj == NULL) {
|
|
|
|
|
r = SC_ERROR_OUT_OF_MEMORY;
|
|
|
|
|
goto ret;
|
|
|
|
|
}
|
2002-03-14 11:50:09 +00:00
|
|
|
|
memset(obj, 0, sizeof(struct sc_pkcs15_object));
|
2002-12-10 13:27:17 +00:00
|
|
|
|
oldp = p;
|
2002-01-24 16:02:54 +00:00
|
|
|
|
r = func(p15card, obj, &p, &bufsize);
|
|
|
|
|
if (r) {
|
|
|
|
|
free(obj);
|
|
|
|
|
if (r == SC_ERROR_ASN1_END_OF_CONTENTS)
|
|
|
|
|
break;
|
|
|
|
|
sc_perror(ctx, r, "Error decoding DF entry");
|
2002-04-19 09:22:44 +00:00
|
|
|
|
goto ret;
|
2002-01-24 16:02:54 +00:00
|
|
|
|
}
|
2002-12-10 13:27:17 +00:00
|
|
|
|
obj_len = p - oldp;
|
|
|
|
|
|
|
|
|
|
obj->der.value = malloc(obj_len);
|
|
|
|
|
if (obj->der.value == NULL) {
|
|
|
|
|
r = SC_ERROR_OUT_OF_MEMORY;
|
|
|
|
|
goto ret;
|
|
|
|
|
}
|
|
|
|
|
memcpy(obj->der.value, oldp, obj_len);
|
|
|
|
|
obj->der.len = obj_len;
|
|
|
|
|
|
2002-04-19 09:22:44 +00:00
|
|
|
|
obj->df = df;
|
|
|
|
|
r = sc_pkcs15_add_object(p15card, obj);
|
2002-01-24 16:02:54 +00:00
|
|
|
|
if (r) {
|
|
|
|
|
if (obj->data)
|
|
|
|
|
free(obj->data);
|
|
|
|
|
free(obj);
|
|
|
|
|
sc_perror(ctx, r, "Error adding object");
|
2002-04-19 09:22:44 +00:00
|
|
|
|
goto ret;
|
2002-01-24 16:02:54 +00:00
|
|
|
|
}
|
|
|
|
|
} while (bufsize && *p != 0x00);
|
2002-04-19 09:22:44 +00:00
|
|
|
|
ret:
|
|
|
|
|
free(buf);
|
|
|
|
|
return r;
|
2002-01-24 16:02:54 +00:00
|
|
|
|
}
|
|
|
|
|
|
2002-04-17 09:00:16 +00:00
|
|
|
|
int sc_pkcs15_read_file(struct sc_pkcs15_card *p15card,
|
|
|
|
|
const struct sc_path *path,
|
2002-04-19 09:22:44 +00:00
|
|
|
|
u8 **buf, size_t *buflen,
|
|
|
|
|
struct sc_file **file_out)
|
2002-04-17 09:00:16 +00:00
|
|
|
|
{
|
|
|
|
|
struct sc_file *file;
|
|
|
|
|
u8 *data = NULL;
|
2002-12-02 13:38:50 +00:00
|
|
|
|
size_t len = 0, offset = 0;
|
2002-04-17 09:00:16 +00:00
|
|
|
|
int r = -1;
|
|
|
|
|
|
|
|
|
|
assert(p15card != NULL && path != NULL && buf != NULL);
|
|
|
|
|
SC_FUNC_CALLED(p15card->card->ctx, 1);
|
2002-12-02 13:38:50 +00:00
|
|
|
|
|
2002-04-19 09:22:44 +00:00
|
|
|
|
if (p15card->opts.use_cache) {
|
2002-04-17 09:00:16 +00:00
|
|
|
|
r = sc_pkcs15_read_cached_file(p15card, path, &data, &len);
|
|
|
|
|
}
|
|
|
|
|
if (r) {
|
|
|
|
|
r = sc_lock(p15card->card);
|
|
|
|
|
SC_TEST_RET(p15card->card->ctx, r, "sc_lock() failed");
|
|
|
|
|
r = sc_select_file(p15card->card, path, &file);
|
|
|
|
|
if (r) {
|
|
|
|
|
sc_unlock(p15card->card);
|
|
|
|
|
return r;
|
|
|
|
|
}
|
2002-12-02 13:38:50 +00:00
|
|
|
|
/* Handle the case where the ASN.1 Path object specified
|
|
|
|
|
* index and length values */
|
|
|
|
|
if (path->count < 0) {
|
|
|
|
|
len = file->size;
|
|
|
|
|
offset = 0;
|
|
|
|
|
} else {
|
|
|
|
|
offset = path->index;
|
|
|
|
|
len = path->count;
|
|
|
|
|
/* Make sure we're within proper bounds */
|
|
|
|
|
if (offset >= file->size
|
|
|
|
|
|| offset + len >= file->size) {
|
|
|
|
|
sc_unlock(p15card->card);
|
|
|
|
|
return SC_ERROR_INVALID_ASN1_OBJECT;
|
|
|
|
|
}
|
|
|
|
|
}
|
2002-04-19 09:22:44 +00:00
|
|
|
|
if (file_out != NULL)
|
|
|
|
|
*file_out = file;
|
|
|
|
|
else
|
|
|
|
|
sc_file_free(file);
|
2002-04-19 14:23:31 +00:00
|
|
|
|
data = (u8 *) malloc(len);
|
2002-04-17 09:00:16 +00:00
|
|
|
|
if (data == NULL) {
|
|
|
|
|
sc_unlock(p15card->card);
|
|
|
|
|
return SC_ERROR_OUT_OF_MEMORY;
|
|
|
|
|
}
|
2002-12-02 13:38:50 +00:00
|
|
|
|
r = sc_read_binary(p15card->card, offset, data, len, 0);
|
2002-04-17 09:00:16 +00:00
|
|
|
|
if (r < 0) {
|
|
|
|
|
sc_unlock(p15card->card);
|
|
|
|
|
free(data);
|
|
|
|
|
return r;
|
|
|
|
|
}
|
|
|
|
|
sc_unlock(p15card->card);
|
|
|
|
|
}
|
|
|
|
|
*buf = data;
|
|
|
|
|
*buflen = len;
|
|
|
|
|
return 0;
|
|
|
|
|
}
|
|
|
|
|
|
2001-11-01 15:43:20 +00:00
|
|
|
|
int sc_pkcs15_compare_id(const struct sc_pkcs15_id *id1,
|
|
|
|
|
const struct sc_pkcs15_id *id2)
|
|
|
|
|
{
|
|
|
|
|
assert(id1 != NULL && id2 != NULL);
|
|
|
|
|
if (id1->len != id2->len)
|
|
|
|
|
return 0;
|
|
|
|
|
return memcmp(id1->value, id2->value, id1->len) == 0;
|
|
|
|
|
}
|
|
|
|
|
|
2002-01-17 23:47:03 +00:00
|
|
|
|
void sc_pkcs15_format_id(const char *str, struct sc_pkcs15_id *id)
|
|
|
|
|
{
|
2002-12-04 15:36:33 +00:00
|
|
|
|
size_t len = sizeof(id->value);
|
2002-01-17 23:47:03 +00:00
|
|
|
|
|
2002-12-04 15:36:33 +00:00
|
|
|
|
if (sc_hex_to_bin(str, id->value, &len) >= 0)
|
|
|
|
|
id->len = len;
|
2002-01-17 23:47:03 +00:00
|
|
|
|
}
|
|
|
|
|
|
2001-11-01 15:43:20 +00:00
|
|
|
|
void sc_pkcs15_print_id(const struct sc_pkcs15_id *id)
|
|
|
|
|
{
|
|
|
|
|
int i;
|
|
|
|
|
|
|
|
|
|
for (i = 0; i < id->len; i++)
|
|
|
|
|
printf("%02X", id->value[i]);
|
|
|
|
|
}
|
2001-11-20 22:21:58 +00:00
|
|
|
|
|
|
|
|
|
int sc_pkcs15_hex_string_to_id(const char *in, struct sc_pkcs15_id *out)
|
|
|
|
|
{
|
2002-01-08 13:56:50 +00:00
|
|
|
|
out->len = sizeof(out->value);
|
2001-11-20 22:21:58 +00:00
|
|
|
|
return sc_hex_to_bin(in, out->value, &out->len);
|
|
|
|
|
}
|