diff options
| author | Mathieu Trudel-Lapierre <mathieu.trudel-lapierre@canonical.com> | 2016-08-17 17:02:02 -0400 |
|---|---|---|
| committer | Peter Jones <pjones@redhat.com> | 2016-09-21 13:32:53 -0400 |
| commit | 8af6e22814dc5a4de5fd93b65071a141112aaa49 (patch) | |
| tree | 7c20386157b2a33a61578e220393ba21c1e8a269 | |
| parent | 903674a2c407d6c5de53e3ef860f36f4a6740ce8 (diff) | |
| download | efi-boot-shim-8af6e22814dc5a4de5fd93b65071a141112aaa49.tar.gz efi-boot-shim-8af6e22814dc5a4de5fd93b65071a141112aaa49.zip | |
MokManager: list Extended Key Usage OIDs
Signed-off-by: Mathieu Trudel-Lapierre <mathieu.trudel-lapierre@canonical.com>
| -rw-r--r-- | MokManager.c | 30 |
1 files changed, 29 insertions, 1 deletions
diff --git a/MokManager.c b/MokManager.c index 20db532f..ebc85db9 100644 --- a/MokManager.c +++ b/MokManager.c @@ -3,6 +3,8 @@ #include <stdarg.h> #include <Library/BaseCryptLib.h> #include <openssl/x509.h> +#include <openssl/x509v3.h> +#include <openssl/asn1.h> #include <openssl/bn.h> #include "shim.h" #include "PeImage.h" @@ -338,6 +340,7 @@ static void show_x509_info (X509 *X509Cert, UINT8 *hash) CHAR16 *subject = NULL; CHAR16 *from = NULL; CHAR16 *until = NULL; + EXTENDED_KEY_USAGE *extusage; POOL_PRINT hash_string1; POOL_PRINT hash_string2; POOL_PRINT serial_string; @@ -405,7 +408,32 @@ static void show_x509_info (X509 *X509Cert, UINT8 *hash) return; i = 0; - text = AllocateZeroPool(sizeof(CHAR16 *) * (fields*3 + 1)); + + extusage = X509_get_ext_d2i(X509Cert, NID_ext_key_usage, NULL, NULL); + text = AllocateZeroPool(sizeof(CHAR16 *) * (fields*3 + sk_ASN1_OBJECT_num(extusage) + 3)); + + if (extusage) { + int j = 0; + + text[i++] = StrDuplicate(L"[Extended Key Usage]"); + + for (j = 0; j < sk_ASN1_OBJECT_num(extusage); j++) { + POOL_PRINT extkeyusage; + ASN1_OBJECT *obj = sk_ASN1_OBJECT_value(extusage, j); + int buflen = 80; + char buf[buflen]; + + ZeroMem(&extkeyusage, sizeof(extkeyusage)); + + OBJ_obj2txt(buf, buflen, obj, 0); + CatPrint(&extkeyusage, L"OID: %a", buf); + text[i++] = StrDuplicate(extkeyusage.str); + FreePool(extkeyusage.str); + } + text[i++] = StrDuplicate(L""); + EXTENDED_KEY_USAGE_free(extusage); + } + if (serial_string.str) { text[i++] = StrDuplicate(L"[Serial Number]"); text[i++] = serial_string.str; |