wolfSSL/wolfssl
1
0
Fork 1
mirror of https://github.com/wolfSSL/wolfssl.git synced 2025-07-29 18:27:29 +02:00
Code Issues Packages Projects Releases Wiki Activity

Merge pull request #5411 from anhu/selfsigned_template

Browse Source 
Fix ASN template to use the subject as issuer if cert is selfsigned
This commit is contained in:
David Garske
2022-07-27 16:02:14 -07:00
committed by GitHub
parent 6ecf2c0a5e 58cc326621
commit 7b65a1f1c2
1 changed files with 14 additions and 9 deletions
Download Patch File Download Diff File Expand all files Collapse all files

23
wolfcrypt/src/asn.c
View File

@ -25607,7 +25607,7 @@ int AddSignature(byte* buf, int bodySz, const byte* sig, int sigSz,
dataASN[SIGASN_IDX_SIGALGO_NULL].noOut = 1;
}
SetASN_Buffer(&dataASN[SIGASN_IDX_SIGNATURE], sig, sigSz);
/* Calcuate size of signature data. */
/* Calculate size of signature data. */
ret = SizeASN_Items(&sigASN[SIGASN_IDX_SIGALGO_SEQ],
&dataASN[SIGASN_IDX_SIGALGO_SEQ], sigASN_Length - 2, &sz);
}
@ -25757,8 +25757,10 @@ static int MakeAnyCert(Cert* cert, byte* derBuffer, word32 derSz,
else
#endif
{
/* Calcuate issuer name encoding size. */
issuerSz = SetNameEx(NULL, WC_ASN_NAME_MAX, &cert->issuer, cert->heap);
/* Calculate issuer name encoding size. If the cert is self-signed
* use the subject instead of the issuer. */
issuerSz = SetNameEx(NULL, WC_ASN_NAME_MAX, cert->selfSigned ?
&cert->subject : &cert->issuer, cert->heap);
ret = issuerSz;
}
}
@ -25773,18 +25775,19 @@ static int MakeAnyCert(Cert* cert, byte* derBuffer, word32 derSz,
else
#endif
{
/* Calcuate subject name encoding size. */
subjectSz = SetNameEx(NULL, WC_ASN_NAME_MAX, &cert->subject, cert->heap);
/* Calculate subject name encoding size. */
subjectSz = SetNameEx(NULL, WC_ASN_NAME_MAX, &cert->subject,
cert->heap);
ret = subjectSz;
}
}
if (ret >= 0) {
/* Calcuate public key encoding size. */
/* Calculate public key encoding size. */
ret = publicKeySz = EncodePublicKey(cert->keyType, NULL, 0, rsaKey,
eccKey, ed25519Key, ed448Key, dsaKey);
}
if (ret >= 0) {
/* Calcuate extensions encoding size - may be 0. */
/* Calculate extensions encoding size - may be 0. */
ret = extSz = EncodeExtensions(cert, NULL, 0, 0);
}
if (ret >= 0) {
@ -25906,11 +25909,13 @@ static int MakeAnyCert(Cert* cert, byte* derBuffer, word32 derSz,
SetASN_Items(x509CertASN, dataASN, x509CertASN_Length, derBuffer);
if (issRawLen == 0) {
/* Encode issuer name into buffer. */
/* Encode issuer name into buffer. Use the subject as the issuer
* if it is self-signed. Size will be correct because we did the
* same for size. */
ret = SetNameEx(
(byte*)dataASN[X509CERTASN_IDX_TBS_ISSUER_SEQ].data.buffer.data,
dataASN[X509CERTASN_IDX_TBS_ISSUER_SEQ].data.buffer.length,
&cert->issuer, cert->heap);
cert->selfSigned ? &cert->subject : &cert->issuer, cert->heap);
}
}
if ((ret >= 0) && (sbjRawLen == 0)) {