secoid.c

来自「支持SSL v2/v3, TLS, PKCS #5, PKCS #7, PKCS」· C语言 代码 · 共 1,534 行 · 第 1/5 页

    { { siDEROID, missiCertDSS, sizeof(missiCertDSS) },
          SEC_OID_MISSI_DSS, "MISSI DSS Algorithm",
	  CKM_INVALID_MECHANISM, INVALID_CERT_EXTENSION  },
    { { siDEROID, missiCertKEA, sizeof(missiCertKEA) },
          SEC_OID_MISSI_KEA, "MISSI KEA Algorithm",
	  CKM_INVALID_MECHANISM, INVALID_CERT_EXTENSION  },
    { { siDEROID, missiCertAltKEA, sizeof(missiCertAltKEA) },
          SEC_OID_MISSI_ALT_KEA, "MISSI Alternate KEA Algorithm",
          CKM_INVALID_MECHANISM, INVALID_CERT_EXTENSION  },

    /* Netscape private extensions */
    { { siDEROID, nsCertExtNetscapeOK,
	  sizeof(nsCertExtNetscapeOK) },
	  SEC_OID_NS_CERT_EXT_NETSCAPE_OK,
	  "Netscape says this cert is OK",
	  CKM_INVALID_MECHANISM, UNSUPPORTED_CERT_EXTENSION },
    { { siDEROID, nsCertExtIssuerLogo,
	  sizeof(nsCertExtIssuerLogo) },
	  SEC_OID_NS_CERT_EXT_ISSUER_LOGO,
	  "Certificate Issuer Logo",
	  CKM_INVALID_MECHANISM, UNSUPPORTED_CERT_EXTENSION },
    { { siDEROID, nsCertExtSubjectLogo,
	  sizeof(nsCertExtSubjectLogo) },
	  SEC_OID_NS_CERT_EXT_SUBJECT_LOGO,
	  "Certificate Subject Logo",
	  CKM_INVALID_MECHANISM, UNSUPPORTED_CERT_EXTENSION },
    { { siDEROID, nsExtCertType,
	  sizeof(nsExtCertType) },
	  SEC_OID_NS_CERT_EXT_CERT_TYPE,
	  "Certificate Type",
	  CKM_INVALID_MECHANISM, SUPPORTED_CERT_EXTENSION },
    { { siDEROID, nsExtBaseURL,
	  sizeof(nsExtBaseURL) },
	  SEC_OID_NS_CERT_EXT_BASE_URL,
	  "Certificate Extension Base URL",
	  CKM_INVALID_MECHANISM, SUPPORTED_CERT_EXTENSION },
    { { siDEROID, nsExtRevocationURL,
	  sizeof(nsExtRevocationURL) },
	  SEC_OID_NS_CERT_EXT_REVOCATION_URL,
	  "Certificate Revocation URL",
	  CKM_INVALID_MECHANISM, SUPPORTED_CERT_EXTENSION },
    { { siDEROID, nsExtCARevocationURL,
	  sizeof(nsExtCARevocationURL) },
	  SEC_OID_NS_CERT_EXT_CA_REVOCATION_URL,
	  "Certificate Authority Revocation URL",
	  CKM_INVALID_MECHANISM, SUPPORTED_CERT_EXTENSION },
    { { siDEROID, nsExtCACRLURL,
	  sizeof(nsExtCACRLURL) },
	  SEC_OID_NS_CERT_EXT_CA_CRL_URL,
	  "Certificate Authority CRL Download URL",
	  CKM_INVALID_MECHANISM, UNSUPPORTED_CERT_EXTENSION },
    { { siDEROID, nsExtCACertURL,
	  sizeof(nsExtCACertURL) },
	  SEC_OID_NS_CERT_EXT_CA_CERT_URL,
	  "Certificate Authority Certificate Download URL",
	  CKM_INVALID_MECHANISM, UNSUPPORTED_CERT_EXTENSION },
    { { siDEROID, nsExtCertRenewalURL,
	  sizeof(nsExtCertRenewalURL) },
	  SEC_OID_NS_CERT_EXT_CERT_RENEWAL_URL,
	  "Certificate Renewal URL", CKM_INVALID_MECHANISM,
          SUPPORTED_CERT_EXTENSION }, 
    { { siDEROID, nsExtCAPolicyURL,
	  sizeof(nsExtCAPolicyURL) },
	  SEC_OID_NS_CERT_EXT_CA_POLICY_URL,
	  "Certificate Authority Policy URL",
	  CKM_INVALID_MECHANISM, SUPPORTED_CERT_EXTENSION },
    { { siDEROID, nsExtHomepageURL,
	  sizeof(nsExtHomepageURL) },
	  SEC_OID_NS_CERT_EXT_HOMEPAGE_URL,
	  "Certificate Homepage URL", CKM_INVALID_MECHANISM,
	  UNSUPPORTED_CERT_EXTENSION },
    { { siDEROID, nsExtEntityLogo,
	  sizeof(nsExtEntityLogo) },
	  SEC_OID_NS_CERT_EXT_ENTITY_LOGO,
	  "Certificate Entity Logo", CKM_INVALID_MECHANISM,
	  UNSUPPORTED_CERT_EXTENSION },
    { { siDEROID, nsExtUserPicture,
	  sizeof(nsExtUserPicture) },
	  SEC_OID_NS_CERT_EXT_USER_PICTURE,
	  "Certificate User Picture", CKM_INVALID_MECHANISM,
	  UNSUPPORTED_CERT_EXTENSION },
    { { siDEROID, nsExtSSLServerName,
	  sizeof(nsExtSSLServerName) },
	  SEC_OID_NS_CERT_EXT_SSL_SERVER_NAME,
	  "Certificate SSL Server Name", CKM_INVALID_MECHANISM,
	  SUPPORTED_CERT_EXTENSION },
    { { siDEROID, nsExtComment,
	  sizeof(nsExtComment) },
	  SEC_OID_NS_CERT_EXT_COMMENT,
	  "Certificate Comment", CKM_INVALID_MECHANISM, SUPPORTED_CERT_EXTENSION },
    { { siDEROID, nsExtLostPasswordURL,
          sizeof(nsExtLostPasswordURL) },
          SEC_OID_NS_CERT_EXT_LOST_PASSWORD_URL,
          "Lost Password URL", CKM_INVALID_MECHANISM,
          SUPPORTED_CERT_EXTENSION },
    { { siDEROID, nsExtCertRenewalTime, 
	sizeof(nsExtCertRenewalTime) },
	SEC_OID_NS_CERT_EXT_CERT_RENEWAL_TIME, 
	"Certificate Renewal Time", CKM_INVALID_MECHANISM, SUPPORTED_CERT_EXTENSION },
    { { siDEROID, nsKeyUsageGovtApproved,
	  sizeof(nsKeyUsageGovtApproved) },
	  SEC_OID_NS_KEY_USAGE_GOVT_APPROVED,
	  "Strong Crypto Export Approved",
	  CKM_INVALID_MECHANISM, UNSUPPORTED_CERT_EXTENSION },


    /* x.509 v3 certificate extensions */
    { { siDEROID, x509SubjectDirectoryAttr, sizeof(x509SubjectDirectoryAttr) },
	  SEC_OID_X509_SUBJECT_DIRECTORY_ATTR,
	  "Certificate Subject Directory Attributes",
	  CKM_INVALID_MECHANISM, UNSUPPORTED_CERT_EXTENSION},
    { { siDEROID, x509SubjectKeyID, sizeof(x509SubjectKeyID) },
	  SEC_OID_X509_SUBJECT_KEY_ID, "Certificate Subject Key ID",
	  CKM_INVALID_MECHANISM, SUPPORTED_CERT_EXTENSION },
    { { siDEROID, x509KeyUsage, sizeof(x509KeyUsage) },
	  SEC_OID_X509_KEY_USAGE, "Certificate Key Usage",
	  CKM_INVALID_MECHANISM, SUPPORTED_CERT_EXTENSION },
    { { siDEROID, x509PrivateKeyUsagePeriod,
	  sizeof(x509PrivateKeyUsagePeriod) },
	  SEC_OID_X509_PRIVATE_KEY_USAGE_PERIOD,
	  "Certificate Private Key Usage Period",
          CKM_INVALID_MECHANISM, UNSUPPORTED_CERT_EXTENSION },
    { { siDEROID, x509SubjectAltName, sizeof(x509SubjectAltName) },
	  SEC_OID_X509_SUBJECT_ALT_NAME, "Certificate Subject Alt Name",
          CKM_INVALID_MECHANISM, SUPPORTED_CERT_EXTENSION },
    { { siDEROID, x509IssuerAltName, sizeof(x509IssuerAltName) },
	  SEC_OID_X509_ISSUER_ALT_NAME, "Certificate Issuer Alt Name",
          CKM_INVALID_MECHANISM, UNSUPPORTED_CERT_EXTENSION },
    { { siDEROID, x509BasicConstraints, sizeof(x509BasicConstraints) },
	  SEC_OID_X509_BASIC_CONSTRAINTS, "Certificate Basic Constraints",
	  CKM_INVALID_MECHANISM, SUPPORTED_CERT_EXTENSION },
    { { siDEROID, x509NameConstraints, sizeof(x509NameConstraints) },
	  SEC_OID_X509_NAME_CONSTRAINTS, "Certificate Name Constraints",
	  CKM_INVALID_MECHANISM, SUPPORTED_CERT_EXTENSION },
    { { siDEROID, x509CRLDistPoints, sizeof(x509CRLDistPoints) },
	  SEC_OID_X509_CRL_DIST_POINTS, "CRL Distribution Points",
	  CKM_INVALID_MECHANISM, UNSUPPORTED_CERT_EXTENSION },
    { { siDEROID, x509CertificatePolicies, sizeof(x509CertificatePolicies) },
	  SEC_OID_X509_CERTIFICATE_POLICIES,
	  "Certificate Policies",
          CKM_INVALID_MECHANISM, UNSUPPORTED_CERT_EXTENSION },
    { { siDEROID, x509PolicyMappings, sizeof(x509PolicyMappings) },
	  SEC_OID_X509_POLICY_MAPPINGS, "Certificate Policy Mappings",
          CKM_INVALID_MECHANISM, UNSUPPORTED_CERT_EXTENSION },
    { { siDEROID, x509PolicyConstraints, sizeof(x509PolicyConstraints) },
	  SEC_OID_X509_POLICY_CONSTRAINTS, "Certificate Policy Constraints",
          CKM_INVALID_MECHANISM, UNSUPPORTED_CERT_EXTENSION },
    { { siDEROID, x509AuthKeyID, sizeof(x509AuthKeyID) },
	  SEC_OID_X509_AUTH_KEY_ID, "Certificate Authority Key Identifier",
	  CKM_INVALID_MECHANISM, SUPPORTED_CERT_EXTENSION },
    { { siDEROID, x509ExtKeyUsage, sizeof(x509ExtKeyUsage) },
	  SEC_OID_X509_EXT_KEY_USAGE, "Extended Key Usage",
	  CKM_INVALID_MECHANISM, SUPPORTED_CERT_EXTENSION },
    { { siDEROID, x509AuthInfoAccess, sizeof(x509AuthInfoAccess) },
          SEC_OID_X509_AUTH_INFO_ACCESS, "Authority Information Access",
          CKM_INVALID_MECHANISM, SUPPORTED_CERT_EXTENSION },

    /* x.509 v3 CRL extensions */
    { { siDEROID, x509CrlNumber, sizeof(x509CrlNumber) },
	  SEC_OID_X509_CRL_NUMBER, "CRL	Number", CKM_INVALID_MECHANISM,
	  SUPPORTED_CERT_EXTENSION },
    { { siDEROID, x509ReasonCode, sizeof(x509ReasonCode) },
	  SEC_OID_X509_REASON_CODE, "CRL reason code", CKM_INVALID_MECHANISM,
	  SUPPORTED_CERT_EXTENSION },
    { { siDEROID, x509InvalidDate, sizeof(x509InvalidDate) },
	  SEC_OID_X509_INVALID_DATE, "Invalid Date", CKM_INVALID_MECHANISM,
	  SUPPORTED_CERT_EXTENSION },
	  
    { { siDEROID, x500RSAEncryption, sizeof(x500RSAEncryption) },
	  SEC_OID_X500_RSA_ENCRYPTION,
	  "X500 RSA Encryption", CKM_RSA_X_509, INVALID_CERT_EXTENSION },

    /* added for alg 1485 */
    { { siDEROID, rfc1274Uid,
	  sizeof(rfc1274Uid) },
	  SEC_OID_RFC1274_UID,
	  "RFC1274 User Id", CKM_INVALID_MECHANISM, INVALID_CERT_EXTENSION },
    { { siDEROID, rfc1274Mail,
	  sizeof(rfc1274Uid) },
	  SEC_OID_RFC1274_MAIL,
	  "RFC1274 E-mail Address", CKM_INVALID_MECHANISM, INVALID_CERT_EXTENSION },

    /* pkcs 12 additions */
    { { siDEROID, pkcs12, sizeof(pkcs12) },
	  SEC_OID_PKCS12,
	  "PKCS #12", CKM_INVALID_MECHANISM, INVALID_CERT_EXTENSION },
    { { siDEROID, pkcs12ModeIDs, sizeof(pkcs12ModeIDs) },
	  SEC_OID_PKCS12_MODE_IDS,
	  "PKCS #12 Mode IDs", CKM_INVALID_MECHANISM, INVALID_CERT_EXTENSION },
    { { siDEROID, pkcs12ESPVKIDs, sizeof(pkcs12ESPVKIDs) },
	  SEC_OID_PKCS12_ESPVK_IDS,
	  "PKCS #12 ESPVK IDs", CKM_INVALID_MECHANISM, INVALID_CERT_EXTENSION },
    { { siDEROID, pkcs12BagIDs, sizeof(pkcs12BagIDs) },
	  SEC_OID_PKCS12_BAG_IDS,
	  "PKCS #12 Bag IDs", CKM_INVALID_MECHANISM, INVALID_CERT_EXTENSION },
    { { siDEROID, pkcs12CertBagIDs, sizeof(pkcs12CertBagIDs) },
	  SEC_OID_PKCS12_CERT_BAG_IDS,
	  "PKCS #12 Cert Bag IDs", CKM_INVALID_MECHANISM,
	  INVALID_CERT_EXTENSION },
    { { siDEROID, pkcs12OIDs, sizeof(pkcs12OIDs) },
	  SEC_OID_PKCS12_OIDS,
	  "PKCS #12 OIDs", CKM_INVALID_MECHANISM,
	  INVALID_CERT_EXTENSION },
    { { siDEROID, pkcs12PBEIDs, sizeof(pkcs12PBEIDs) },
	  SEC_OID_PKCS12_PBE_IDS,
	  "PKCS #12 PBE IDs", CKM_INVALID_MECHANISM,
	  INVALID_CERT_EXTENSION },
    { { siDEROID, pkcs12SignatureIDs, sizeof(pkcs12SignatureIDs) },
	  SEC_OID_PKCS12_SIGNATURE_IDS,
	  "PKCS #12 Signature IDs", CKM_INVALID_MECHANISM,
	  INVALID_CERT_EXTENSION },
    { { siDEROID, pkcs12EnvelopingIDs, sizeof(pkcs12EnvelopingIDs) },
	  SEC_OID_PKCS12_ENVELOPING_IDS,
	  "PKCS #12 Enveloping IDs", CKM_INVALID_MECHANISM,
	  INVALID_CERT_EXTENSION },
    { { siDEROID, pkcs12PKCS8KeyShrouding, 
    	sizeof(pkcs12PKCS8KeyShrouding) },
	  SEC_OID_PKCS12_PKCS8_KEY_SHROUDING,
	  "PKCS #12 Key Shrouding", CKM_INVALID_MECHANISM,
	  INVALID_CERT_EXTENSION },
    { { siDEROID, pkcs12KeyBagID, 
    	sizeof(pkcs12KeyBagID) },
	  SEC_OID_PKCS12_KEY_BAG_ID,
	  "PKCS #12 Key Bag ID", CKM_INVALID_MECHANISM,
	  INVALID_CERT_EXTENSION },
    { { siDEROID, pkcs12CertAndCRLBagID, 
    	sizeof(pkcs12CertAndCRLBagID) },
	  SEC_OID_PKCS12_CERT_AND_CRL_BAG_ID,
	  "PKCS #12 Cert And CRL Bag ID", CKM_INVALID_MECHANISM,
	  INVALID_CERT_EXTENSION },
    { { siDEROID, pkcs12SecretBagID, 
    	sizeof(pkcs12SecretBagID) },
	  SEC_OID_PKCS12_SECRET_BAG_ID,
	  "PKCS #12 Secret Bag ID", CKM_INVALID_MECHANISM, INVALID_CERT_EXTENSION },
    { { siDEROID, pkcs12X509CertCRLBag, 
    	sizeof(pkcs12X509CertCRLBag) },
	  SEC_OID_PKCS12_X509_CERT_CRL_BAG,
	  "PKCS #12 X509 Cert CRL Bag", CKM_INVALID_MECHANISM,
	  INVALID_CERT_EXTENSION },
    { { siDEROID, pkcs12SDSICertBag, 
    	sizeof(pkcs12SDSICertBag) },
	  SEC_OID_PKCS12_SDSI_CERT_BAG,
	  "PKCS #12 SDSI Cert Bag", CKM_INVALID_MECHANISM, INVALID_CERT_EXTENSION },
    { { siDEROID, pkcs12PBEWithSha1And128BitRC4, 
    	sizeof(pkcs12PBEWithSha1And128BitRC4) },
	  SEC_OID_PKCS12_PBE_WITH_SHA1_AND_128_BIT_RC4,
	  "PKCS #12 PBE With Sha1 and 128 Bit RC4", 
	  CKM_NETSCAPE_PBE_SHA1_128_BIT_RC4, INVALID_CERT_EXTENSION },
    { { siDEROID, pkcs12PBEWithSha1And40BitRC4, 
    	sizeof(pkcs12PBEWithSha1And40BitRC4) },
	  SEC_OID_PKCS12_PBE_WITH_SHA1_AND_40_BIT_RC4,
	  "PKCS #12 PBE With Sha1 and 40 Bit RC4", 
	  CKM_NETSCAPE_PBE_SHA1_40_BIT_RC4, INVALID_CERT_EXTENSION },
    { { siDEROID, pkcs12PBEWithSha1AndTripleDESCBC, 
    	sizeof(pkcs12PBEWithSha1AndTripleDESCBC) },
	  SEC_OID_PKCS12_PBE_WITH_SHA1_AND_TRIPLE_DES_CBC,
	  "PKCS #12 PBE With Sha1 and Triple DES CBC", 
	  CKM_NETSCAPE_PBE_SHA1_TRIPLE_DES_CBC, INVALID_CERT_EXTENSION },
    { { siDEROID, pkcs12PBEWithSha1And128BitRC2CBC, 
    	sizeof(pkcs12PBEWithSha1And128BitRC2CBC) },
	  SEC_OID_PKCS12_PBE_WITH_SHA1_AND_128_BIT_RC2_CBC,
	  "PKCS #12 PBE With Sha1 and 128 Bit RC2 CBC", 
	  CKM_NETSCAPE_PBE_SHA1_128_BIT_RC2_CBC, INVALID_CERT_EXTENSION },
    { { siDEROID, pkcs12PBEWithSha1And40BitRC2CBC, 
    	sizeof(pkcs12PBEWithSha1And40BitRC2CBC) },
	  SEC_OID_PKCS12_PBE_WITH_SHA1_AND_40_BIT_RC2_CBC,
	  "PKCS #12 PBE With Sha1 and 40 Bit RC2 CBC", 
	  CKM_NETSCAPE_PBE_SHA1_40_BIT_RC2_CBC, INVALID_CERT_EXTENSION },
    { { siDEROID, pkcs12RSAEncryptionWith128BitRC4, 
    	sizeof(pkcs12RSAEncryptionWith128BitRC4) },
	  SEC_OID_PKCS12_RSA_ENCRYPTION_WITH_128_BIT_RC4,
	  "PKCS #12 RSA Encryption with 128 Bit RC4",
	  CKM_INVALID_MECHANISM, INVALID_CERT_EXTENSION },
    { { siDEROID, pkcs12RSAEncryptionWith40BitRC4, 
    	sizeof(pkcs12RSAEncryptionWith40BitRC4) },
	  SEC_OID_PKCS12_RSA_ENCRYPTION_WITH_40_BIT_RC4,
	  "PKCS #12 RSA Encryption with 40 Bit RC4",
	  CKM_INVALID_MECHANISM, INVALID_CERT_EXTENSION },
    { { siDEROID, pkcs12RSAEncryptionWithTripleDES, 
    	sizeof(pkcs12RSAEncryptionWithTripleDES) },
	  SEC_OID_PKCS12_RSA_ENCRYPTION_WITH_TRIPLE_DES,
	  "PKCS #12 RSA Encryption with Triple DES",
	  CKM_INVALID_MECHANISM, INVALID_CERT_EXTENSION },
    { { siDEROID, pkcs12RSASignatureWithSHA1Digest, 
    	sizeof(pkcs12RSASignatureWithSHA1Digest) },
	  SEC_OID_PKCS12_RSA_SIGNATURE_WITH_SHA1_DIGEST,
	  "PKCS #12 RSA Encryption with Triple DES",
	  CKM_INVALID_MECHANISM, INVALID_CERT_EXTENSION },

    /* DSA signatures */
    { { siDEROID, ansix9DSASignature, sizeof(ansix9DSASignature) },
        SEC_OID_ANSIX9_DSA_SIGNATURE,
	"ANSI X9.57 DSA Signature", CKM_DSA,
	INVALID_CERT_EXTENSION },
    { { siDEROID, ansix9DSASignaturewithSHA1Digest,
	sizeof(ansix9DSASignaturewithSHA1Digest) },
        SEC_OID_ANSIX9_DSA_SIGNATURE_WITH_SHA1_DIGEST,
	"ANSI X9.57 DSA Signature with SHA1 Digest", CKM_DSA_SHA1,
	INVALID_CERT_EXTENSION },
    { { siDEROID, bogusDSASignaturewithSHA1Digest,
	sizeof(bogusDSASignaturewithSHA1Digest) },
        SEC_OID_BOGUS_DSA_SIGNATURE_WITH_SHA1_DIGEST,
	"FORTEZZA DSA Signature with SHA1 Digest", CKM_DSA_SHA1,
	INVALID_CERT_EXTENSION },

    /* verisign oids */
    { { siDEROID, verisignUserNotices,