1 /* 2 * Copyright (c) 2015, ARM Limited and Contributors. All rights reserved. 3 * 4 * Redistribution and use in source and binary forms, with or without 5 * modification, are permitted provided that the following conditions are met: 6 * 7 * Redistributions of source code must retain the above copyright notice, this 8 * list of conditions and the following disclaimer. 9 * 10 * Redistributions in binary form must reproduce the above copyright notice, 11 * this list of conditions and the following disclaimer in the documentation 12 * and/or other materials provided with the distribution. 13 * 14 * Neither the name of ARM nor the names of its contributors may be used 15 * to endorse or promote products derived from this software without specific 16 * prior written permission. 17 * 18 * THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS "AS IS" 19 * AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE 20 * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE 21 * ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT HOLDER OR CONTRIBUTORS BE 22 * LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR 23 * CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF 24 * SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS 25 * INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN 26 * CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) 27 * ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE 28 * POSSIBILITY OF SUCH DAMAGE. 29 */ 30 31 #ifndef EXT_H_ 32 #define EXT_H_ 33 34 #include "key.h" 35 #include <openssl/x509v3.h> 36 37 /* Extension types supported */ 38 enum { 39 EXT_TYPE_NVCOUNTER, 40 EXT_TYPE_PKEY, 41 EXT_TYPE_HASH 42 }; 43 44 /* 45 * This structure contains the relevant information to create the extensions 46 * to be included in the certificates. This extensions will be used to 47 * establish the chain of trust. 48 */ 49 typedef struct ext_s { 50 const char *oid; /* OID of the extension */ 51 const char *sn; /* Short name */ 52 const char *ln; /* Long description */ 53 int asn1_type; /* OpenSSL ASN1 type of the extension data. 54 * Supported types are: 55 * - V_ASN1_INTEGER 56 * - V_ASN1_OCTET_STRING 57 */ 58 int type; 59 /* Extension data (depends on extension type) */ 60 union { 61 const char *fn; /* File with extension data */ 62 int nvcounter; /* Non volatile counter */ 63 int key; /* Public key */ 64 } data; 65 66 int alias; /* In case OpenSSL provides an standard 67 * extension of the same type, add the new 68 * extension as an alias of this one 69 */ 70 71 X509V3_EXT_METHOD method; /* This field may be used to define a custom 72 * function to print the contents of the 73 * extension */ 74 } ext_t; 75 76 enum { 77 EXT_NON_CRIT = 0, 78 EXT_CRIT = !EXT_NON_CRIT, 79 }; 80 81 /* Exported API */ 82 int ext_register(ext_t *tbb_ext); 83 X509_EXTENSION *ext_new_hash(int nid, int crit, const EVP_MD *md, 84 unsigned char *buf, size_t len); 85 X509_EXTENSION *ext_new_nvcounter(int nid, int crit, int value); 86 X509_EXTENSION *ext_new_key(int nid, int crit, EVP_PKEY *k); 87 88 /* Macro to register the extensions used in the CoT */ 89 #define REGISTER_EXTENSIONS(_ext) \ 90 ext_t *extensions = &_ext[0]; \ 91 const unsigned int num_extensions = sizeof(_ext)/sizeof(_ext[0]); 92 93 /* Exported variables */ 94 extern ext_t *extensions; 95 extern const unsigned int num_extensions; 96 97 #endif /* EXT_H_ */ 98