/*
* Copyright (c) 2003 - 2007 Nokia Corporation and/or its subsidiary(-ies).
* All rights reserved.
* This component and the accompanying materials are made available
* under the terms of "Eclipse Public License v1.0"
* which accompanies this distribution, and is available
* at the URL "http://www.eclipse.org/legal/epl-v10.html".
*
* Initial Contributors:
* Nokia Corporation - initial contribution.
*
* Contributors:
*
* Description: Pkcs10 certificate request.
*
*/
#ifndef _PKCS10_H_
#define _PKCS10_H_
#include "pkidefs.h"
////////////////////////////////////////////////////////////////////////////////////////
// Definitions
////////////////////////////////////////////////////////////////////////////////////////
#define SHA1_HASH_LTH 20
#define MD5_HASH_LTH 16
#define ASN1_MAX_LENGTH 0xffff
#define ASN1_MAX_INTEGER 0xffff
#define MAX_SIGNATURE_LENGTH 512
#define ASN1_SHORT_TAG_HDR_LTH 2
#define ASN1_LONG_TAG_HDR_LTH 4
#define ASN1_NULL_LTH 2
#define ASN1_CONSTRUCTED 0x20
#define ASN1_CONTEXT_SPECIFIC 0x80
#define COMMON_NAME_OID_LTH 3
#define KEY_TYPE_RSA_OID_LTH 9
#define SUBJECTALTNAME_EMAIL_OID_LTH 9
#define SUBJECTALTNAME_OID_LTH 3
#define CHALLENGEPW_OID_LTH 9
#define MD5WITHRSA_OID_LTH 9
#define MD5SIGNATURE_OID_LTH 8
#define SHA1WITHRSA_OID_LTH 9
#define PKCS10_EXTENSION_OID_LTH 9
#define DC_OID_LTH 10
enum THashType {HASH_TYPE_MD5, HASH_TYPE_SHA1};
const TUint8 KCommonNameOid[COMMON_NAME_OID_LTH] = {0x55, 0x04, 0x03};
const TUint8 KEmailAddressOid[SUBJECTALTNAME_EMAIL_OID_LTH] = {0x2A, 0x86, 0x48, 0x86, 0xF7, 0x0D, 0x01, 0x09, 0x01};
const TUint8 KSubjectAltNameOid[SUBJECTALTNAME_OID_LTH] = {0x55, 0x1D, 0x11};
const TUint8 KChallengePWOid[CHALLENGEPW_OID_LTH] = { 0x2A, 0x86, 0x48, 0x86, 0xF7, 0x0D, 0x01, 0x09, 0x07};
const TUint8 KKeyTypeRSAOid[KEY_TYPE_RSA_OID_LTH] = {0x2A, 0x86, 0x48, 0x86, 0xF7, 0x0D, 0x01, 0x01, 0x01};
const TUint8 KMd5WithRSAEncryptionOid[MD5WITHRSA_OID_LTH] = {0x2A, 0x86, 0x48, 0x86, 0xF7, 0x0D, 0x01, 0x01, 0x04};
const TUint8 KMd5SignatureOid[MD5SIGNATURE_OID_LTH] = {0x2A, 0x86, 0x48, 0x86, 0xF7, 0x0D, 0x02, 0x05};
const TUint8 KSha1WithRSAEncryptionOid[SHA1WITHRSA_OID_LTH] = {0x2A, 0x86, 0x48, 0x86, 0xF7, 0x0D, 0x01, 0x01, 0x05};
const TUint8 KPkcs10ExtensionOid[PKCS10_EXTENSION_OID_LTH] = {0x2A, 0x86, 0x48, 0x86, 0xF7, 0x0D, 0x01, 0x09, 0x0E};
#define HEADERLENGTH 40
#define TRAILERLENGTH 37
#define HEADER _L("-----BEGIN NEW CERTIFICATE REQUEST-----\n")
#define TRAILER _L("\n-----END NEW CERTIFICATE REQUEST-----")
#define StoreINTValue(d, s) \
(*(unsigned char*)((unsigned char*)(d)+3)) = (unsigned char)((s) & 0xff);\
(*(unsigned char*)((unsigned char*)(d)+2)) = (unsigned char)(((s) >> 8 ) & 0xff);\
(*(unsigned char*)((unsigned char*)(d)+1)) = (unsigned char)(((s) >> 16) & 0xff);\
(*(unsigned char*)(d)) = (unsigned char)(((s) >> 24) & 0xff)
typedef TBool (*TSignCallback)(const TDesC8 &aHash, TDes8 &aSig, const TPKIKeyIdentifier &aPrivKey, TAny* aContext);
class TIndexPair
{
public:
TUint startIndex;
TUint endIndex;
};
const TUint8 KCountryNameOid[COMMON_NAME_OID_LTH] = {0x55, 0x04, 0x06};
const TUint8 KOrganizationNameOid[COMMON_NAME_OID_LTH] = {0x55, 0x04, 0x0a};
const TUint8 KOrganizationalUnitNameOid[COMMON_NAME_OID_LTH] = {0x55,0x04, 0x0b};
const TUint8 KLocalityNameOid[COMMON_NAME_OID_LTH]= {0x55, 0x04, 0x07};
const TUint8 KStateOrProvinceNameOid[COMMON_NAME_OID_LTH] = {0x55, 0x04, 0x08};
const TUint8 KTitleOid[COMMON_NAME_OID_LTH] = {0x55, 0x04, 0x0c};
const TUint8 KCommonNOid[COMMON_NAME_OID_LTH] = {0x55, 0x04, 0x03};
const TUint8 KGivenNameOid[COMMON_NAME_OID_LTH] = {0x55, 0x04, 0x2a};
const TUint8 KSurnameOid[COMMON_NAME_OID_LTH] = {0x55, 0x04, 0x04};
const TUint8 KInitialsOid[COMMON_NAME_OID_LTH] = {0x55, 0x04, 0x2b};
const TUint8 KGenerationQualifierOid[COMMON_NAME_OID_LTH] = {0x55, 0x04, 0x2c};
const TUint8 KDNQualifierOid[COMMON_NAME_OID_LTH] = {0x55, 0x04, 0x2e};
const TUint8 KSerialNumberOid[COMMON_NAME_OID_LTH] = {0x55, 0x04, 0x05};
const TUint8 KDomainComponentOid[DC_OID_LTH] = {0x09, 0x92, 0x26, 0x89, 0x93, 0xF2, 0x2C, 0x64, 0x01, 0x19};
const TUint KNullAttributeIndex = 0;
const TUint KCountryNameIndex = 1;
const TUint KOrganizationNameIndex = 2;
const TUint KOrganizationalUnitNameIndex = 3;
const TUint KLocalityNameIndex = 4;
const TUint KStateOrProvinceNameIndex = 5;
const TUint KTitleIndex = 6;
const TUint KCommonNameIndex = 7;
const TUint KGivenNameIndex = 8;
const TUint KSurnameIndex = 9;
const TUint KInitialsIndex = 10;
const TUint KGenerationQualifierIndex = 11;
const TUint KDNQualifierIndex = 12;
const TUint KSerialNumberIndex = 13;
const TUint KDomainComponentIndex = 14;
_LIT8(KCountryName, "C");
_LIT8(KOrganizationName, "O");
_LIT8(KOrganizationalUnitName, "OU");
_LIT8(KLocalityName, "L");
_LIT8(KStateOrProvinceName, "ST");
_LIT8(KTitle, "TITLE");
_LIT8(KCommonName, "CN");
_LIT8(KGivenName, "GIVENNAME");
_LIT8(KSurname, "SN");
_LIT8(KInitials, "INITIALS");
_LIT8(KGenerationQualifier, "GENERATIONQUALIFIER");
_LIT8(KDNQualifier, "DNQUALIFIER");
_LIT8(KSerialNumber, "SERIALNUMBER");
_LIT8(KDomainComponent, "DC");
_LIT8(KDot, ".");
//////////////////////////////////////////////////////////////////////////////
// Class CPkcs10Req
//////////////////////////////////////////////////////////////////////////////
class CPkcs10Req : public CBase
{
public:
#ifdef __EABI__
/** Cause vtable & typeinfo to be exported */
IMPORT_C CPkcs10Req() {};
#endif
IMPORT_C ~CPkcs10Req();
//////////////////////////////////////////////////////////////////////
// Visible interface
//////////////////////////////////////////////////////////////////////
// Setting parameters for PKCS#10 request
//////////////////////////////////////////////////////////////////////
IMPORT_C TInt SetDistinguishedName(const TDesC8 &aDistinguishedName);
IMPORT_C TInt SetSubjectAltNameRfc822(const TDesC8 &aSubjectAltNameRfc822);
IMPORT_C TInt SetChallengePw(const TDesC8 &aChallengePw);
IMPORT_C TInt SetDNSName(const TDesC8 &aDNSName);
IMPORT_C TInt SetPublicKey(const TDesC8 &aPublicKeyBits);
IMPORT_C TInt SetDistinguishedNameExtendedL(const TDesC8 &aDistinguishedName);
//////////////////////////////////////////////////////////////////////
// Create PKCS#10 request
//////////////////////////////////////////////////////////////////////
IMPORT_C HBufC8* CreateCertificateRequestLC(THashType aSignatureAlgorithmId, const TPKIKeyIdentifier& aPrivateKeyFilename, TBool aDoBase64, TBool aDoPEM, TSignCallback aSignCallBack, TAny* aSignCallBackContext);
// Static functions
IMPORT_C static void BuildDistinguishedNameDerFromTextL(HBufC8 *&derBuffer, const TDesC8 &aDistinguishedName, TBool aByPass, const TDesC8 &aByPassType);
IMPORT_C static TPtrC8 AttributeTypeOidToText(const TDesC &aType);
static TInt ASNCopy(TUint8 *dataPtr, TUint8 *valuePtr, TInt length);
static void BuildIndexPairsLC(HBufC8 *&buffer, const TDesC8 &aDistinguishedName, CArrayFixFlat<TIndexPair> *aTypeIndexArray, CArrayFixFlat<TIndexPair> *aValueIndexArray);
static void BuildDerL(HBufC8 *aSource, HBufC8 *&derBuffer, CArrayFixFlat<TIndexPair> *aTypeIndexArray, CArrayFixFlat<TIndexPair> *aValueIndexArray, CArrayFixFlat<TPtr8> *aTypePtrArray, CArrayFixFlat<TPtr8> *aValuePtrArray, TBool aByPass, const TDesC8 &aByPassType);
static TBool OidExistsL(TPtr8 &aTypePtrArray, TUint &aIndex, TBuf8<32> &aDottedOidDer);
static TInt GetOid(TUint aIndex, const TUint8 *&aValue);
static void BuildElementDerLC(CArrayFixFlat<HBufC8 *> *aElementArray, TUint aWholeLength, TUint aSetLength, TUint aSeqLength, TUint aOidLength, TUint aStringLength, TUint aOidIndex, TBuf8<32> &aDottedOidDerPtr, TPtr8 &aValuePtr);
static TInt DERSetLength(TUint8 *p, TInt datalen);
static TInt DERSetInteger(TUint8 *p, TInt aValue);
static inline TInt DERSetTag(TUint8 *p, TUint8 aTag) { *p = aTag; return 1;};
static inline TInt DERSetOid(TUint8 *p, const unsigned char *oid, TInt datalen) {Mem::Copy(p, oid, datalen); return datalen;};
private:
////////////////////////////////////////////////////////////////////////////////////////
// Class variables
////////////////////////////////////////////////////////////////////////////////////////
TPtrC8 iDistinguishedName;
TPtrC8 iSubjectAltName;
TPtrC8 iChallengePW;
TPtrC8 iDNSName;
TPtrC8 iPublicKey;
THashType iSignatureAlgorithmId;
TBool iUseExtendedDistinguishedName;
HBufC8 *iDNDerBuf;
////////////////////////////////////////////////////////////////////////////////////////
// Internal functions
////////////////////////////////////////////////////////////////////////////////////////
void MD5_HashL(const TDesC8 &aInData, TDes8& aOutData);
void SHA1_HashL(const TDesC8 &aInData, TDes8& aOutData);
void DigestL(const TDesC8& aData, TDes8& aDigest, THashType aHashType);
HBufC8* ASNEncodeCertificationRequestInfoLC();
HBufC8* ASNEncodeCertificationRequestLC(const TDes8 &CRLInfoBuffer, const TDes8 &signature);
HBufC8* ASNEncodeCommonAttributesLC();
HBufC8* ASNEncodePKIinfoLC();
HBufC8* ASNEncodeExtendedAttributesLC();
};
#endif