This patch adds some comments for API usage clarification, and adds one object initialization in X509ConstructCertificateStack implementation to fix possible memory release issue. Contributed-under: TianoCore Contribution Agreement 1.0 Signed-off-by: Qin Long <qin.long@intel.com> Reviewed-by: Ting Ye <ting.ye@intel.com> git-svn-id: https://svn.code.sf.net/p/edk2/code/trunk/edk2@17671 6f19259b-4bc3-4df7-8a09-765794883524
		
			
				
	
	
		
			206 lines
		
	
	
		
			5.5 KiB
		
	
	
	
		
			C
		
	
	
	
	
	
			
		
		
	
	
			206 lines
		
	
	
		
			5.5 KiB
		
	
	
	
		
			C
		
	
	
	
	
	
/** @file
 | 
						|
  X.509 Certificate Handler Wrapper Implementation which does not provide
 | 
						|
  real capabilities.
 | 
						|
 | 
						|
Copyright (c) 2012 - 2014, Intel Corporation. All rights reserved.<BR>
 | 
						|
This program and the accompanying materials
 | 
						|
are licensed and made available under the terms and conditions of the BSD License
 | 
						|
which accompanies this distribution.  The full text of the license may be found at
 | 
						|
http://opensource.org/licenses/bsd-license.php
 | 
						|
 | 
						|
THE PROGRAM IS DISTRIBUTED UNDER THE BSD LICENSE ON AN "AS IS" BASIS,
 | 
						|
WITHOUT WARRANTIES OR REPRESENTATIONS OF ANY KIND, EITHER EXPRESS OR IMPLIED.
 | 
						|
 | 
						|
**/
 | 
						|
 | 
						|
#include "InternalCryptLib.h"
 | 
						|
 | 
						|
/**
 | 
						|
  Construct a X509 object from DER-encoded certificate data.
 | 
						|
 | 
						|
  Return FALSE to indicate this interface is not supported.
 | 
						|
 | 
						|
  @param[in]  Cert            Pointer to the DER-encoded certificate data.
 | 
						|
  @param[in]  CertSize        The size of certificate data in bytes.
 | 
						|
  @param[out] SingleX509Cert  The generated X509 object.
 | 
						|
 | 
						|
  @retval FALSE  This interface is not supported.
 | 
						|
 | 
						|
**/
 | 
						|
BOOLEAN
 | 
						|
EFIAPI
 | 
						|
X509ConstructCertificate (
 | 
						|
  IN   CONST UINT8  *Cert,
 | 
						|
  IN   UINTN        CertSize,
 | 
						|
  OUT  UINT8        **SingleX509Cert
 | 
						|
  )
 | 
						|
{
 | 
						|
  ASSERT (FALSE);
 | 
						|
  return FALSE;
 | 
						|
}
 | 
						|
 | 
						|
/**
 | 
						|
  Construct a X509 stack object from a list of DER-encoded certificate data.
 | 
						|
 | 
						|
  Return FALSE to indicate this interface is not supported.
 | 
						|
 | 
						|
  @param[in, out]  X509Stack  On input, pointer to an existing or NULL X509 stack object.
 | 
						|
                              On output, pointer to the X509 stack object with new
 | 
						|
                              inserted X509 certificate.
 | 
						|
  @param           ...        A list of DER-encoded single certificate data followed
 | 
						|
                              by certificate size. A NULL terminates the list. The
 | 
						|
                              pairs are the arguments to X509ConstructCertificate().
 | 
						|
                                 
 | 
						|
  @retval FALSE  This interface is not supported.
 | 
						|
 | 
						|
**/
 | 
						|
BOOLEAN
 | 
						|
EFIAPI
 | 
						|
X509ConstructCertificateStack (
 | 
						|
  IN OUT  UINT8  **X509Stack,
 | 
						|
  ...  
 | 
						|
  )
 | 
						|
{
 | 
						|
  ASSERT (FALSE);
 | 
						|
  return FALSE;
 | 
						|
}
 | 
						|
 | 
						|
/**
 | 
						|
  Release the specified X509 object.
 | 
						|
 | 
						|
  If the interface is not supported, then ASSERT().
 | 
						|
 | 
						|
  @param[in]  X509Cert  Pointer to the X509 object to be released.
 | 
						|
 | 
						|
**/
 | 
						|
VOID
 | 
						|
EFIAPI
 | 
						|
X509Free (
 | 
						|
  IN  VOID  *X509Cert
 | 
						|
  )
 | 
						|
{ 
 | 
						|
  ASSERT (FALSE);
 | 
						|
}
 | 
						|
 | 
						|
/**
 | 
						|
  Release the specified X509 stack object.
 | 
						|
 | 
						|
  If the interface is not supported, then ASSERT().
 | 
						|
 | 
						|
  @param[in]  X509Stack  Pointer to the X509 stack object to be released.
 | 
						|
 | 
						|
**/
 | 
						|
VOID
 | 
						|
EFIAPI
 | 
						|
X509StackFree (
 | 
						|
  IN  VOID  *X509Stack
 | 
						|
  )
 | 
						|
{
 | 
						|
  ASSERT (FALSE);
 | 
						|
}
 | 
						|
 | 
						|
/**
 | 
						|
  Retrieve the subject bytes from one X.509 certificate.
 | 
						|
 | 
						|
  Return FALSE to indicate this interface is not supported.
 | 
						|
 | 
						|
  @param[in]      Cert         Pointer to the DER-encoded X509 certificate.
 | 
						|
  @param[in]      CertSize     Size of the X509 certificate in bytes.
 | 
						|
  @param[out]     CertSubject  Pointer to the retrieved certificate subject bytes.
 | 
						|
  @param[in, out] SubjectSize  The size in bytes of the CertSubject buffer on input,
 | 
						|
                               and the size of buffer returned CertSubject on output.
 | 
						|
 | 
						|
 | 
						|
  @retval FALSE  This interface is not supported.
 | 
						|
 | 
						|
**/
 | 
						|
BOOLEAN
 | 
						|
EFIAPI
 | 
						|
X509GetSubjectName (
 | 
						|
  IN      CONST UINT8  *Cert,
 | 
						|
  IN      UINTN        CertSize,
 | 
						|
  OUT     UINT8        *CertSubject,
 | 
						|
  IN OUT  UINTN        *SubjectSize
 | 
						|
  )
 | 
						|
{
 | 
						|
  ASSERT (FALSE);
 | 
						|
  return FALSE;
 | 
						|
}
 | 
						|
 | 
						|
/**
 | 
						|
  Retrieve the RSA Public Key from one DER-encoded X509 certificate.
 | 
						|
 | 
						|
  Return FALSE to indicate this interface is not supported.
 | 
						|
 | 
						|
  @param[in]  Cert         Pointer to the DER-encoded X509 certificate.
 | 
						|
  @param[in]  CertSize     Size of the X509 certificate in bytes.
 | 
						|
  @param[out] RsaContext   Pointer to new-generated RSA context which contain the retrieved
 | 
						|
                           RSA public key component. Use RsaFree() function to free the
 | 
						|
                           resource.
 | 
						|
 | 
						|
  @retval FALSE  This interface is not supported.
 | 
						|
 | 
						|
**/
 | 
						|
BOOLEAN
 | 
						|
EFIAPI
 | 
						|
RsaGetPublicKeyFromX509 (
 | 
						|
  IN   CONST UINT8  *Cert,
 | 
						|
  IN   UINTN        CertSize,
 | 
						|
  OUT  VOID         **RsaContext
 | 
						|
  )
 | 
						|
{
 | 
						|
  ASSERT (FALSE);
 | 
						|
  return FALSE;
 | 
						|
}
 | 
						|
 | 
						|
/**
 | 
						|
  Verify one X509 certificate was issued by the trusted CA.
 | 
						|
 | 
						|
  Return FALSE to indicate this interface is not supported.
 | 
						|
 | 
						|
  @param[in]      Cert         Pointer to the DER-encoded X509 certificate to be verified.
 | 
						|
  @param[in]      CertSize     Size of the X509 certificate in bytes.
 | 
						|
  @param[in]      CACert       Pointer to the DER-encoded trusted CA certificate.
 | 
						|
  @param[in]      CACertSize   Size of the CA Certificate in bytes.
 | 
						|
 | 
						|
  @retval FALSE  This interface is not supported.
 | 
						|
 
 | 
						|
**/
 | 
						|
BOOLEAN
 | 
						|
EFIAPI
 | 
						|
X509VerifyCert (
 | 
						|
  IN  CONST UINT8  *Cert,
 | 
						|
  IN  UINTN        CertSize,
 | 
						|
  IN  CONST UINT8  *CACert,
 | 
						|
  IN  UINTN        CACertSize
 | 
						|
  )
 | 
						|
{
 | 
						|
  ASSERT (FALSE);
 | 
						|
  return FALSE;
 | 
						|
}
 | 
						|
 | 
						|
/**
 | 
						|
  Retrieve the TBSCertificate from one given X.509 certificate.
 | 
						|
 | 
						|
  Return FALSE to indicate this interface is not supported.
 | 
						|
 | 
						|
  @param[in]      Cert         Pointer to the given DER-encoded X509 certificate.
 | 
						|
  @param[in]      CertSize     Size of the X509 certificate in bytes.
 | 
						|
  @param[out]     TBSCert      DER-Encoded To-Be-Signed certificate.
 | 
						|
  @param[out]     TBSCertSize  Size of the TBS certificate in bytes.
 | 
						|
 | 
						|
  @retval  FALSE  This interface is not supported.
 | 
						|
 | 
						|
**/
 | 
						|
BOOLEAN
 | 
						|
EFIAPI
 | 
						|
X509GetTBSCert (
 | 
						|
  IN  CONST UINT8  *Cert,
 | 
						|
  IN  UINTN        CertSize,
 | 
						|
  OUT UINT8        **TBSCert,
 | 
						|
  OUT UINTN        *TBSCertSize
 | 
						|
  )
 | 
						|
{
 | 
						|
  ASSERT (FALSE);
 | 
						|
  return FALSE;
 | 
						|
} |