WolfSSL
/
wolfssl
mirror of https://github.com/wolfSSL/wolfssl.git
1
0
Fork 0
Code Issues Releases Wiki Activity

Add some FPKI test OIDs which are currently being used in DoD JITC certificates.

pull/8652/head
Kareem 2025-04-07 14:48:37 -07:00
parent cb1a35ac7d
commit 00a6c3953c
2 changed files with 40 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

33
wolfcrypt/src/asn.c
View File

@ -4516,6 +4516,19 @@ static const byte extCertPolicyIsrgDomainValid[] =
static const byte extCertPolicyFpkiPiviAuthOid[] =
CERT_POLICY_TYPE_OID_BASE(45);
/* Federal PKI Test OIDs - 2.16.840.1.101.3.2.1.48.x */
#define TEST_CERT_POLICY_TYPE_OID_BASE(num) {96, 134, 72, 1, 101, 3, 2, 1, 48, num}
static const byte extCertPolicyFpkiAuthTestOid[] =
TEST_CERT_POLICY_TYPE_OID_BASE(11);
static const byte extCertPolicyFpkiCardauthTestOid[] =
TEST_CERT_POLICY_TYPE_OID_BASE(13);
static const byte extCertPolicyFpkiPivContentTestOid[] =
TEST_CERT_POLICY_TYPE_OID_BASE(86);
static const byte extCertPolicyFpkiAuthDerivedTestOid[] =
TEST_CERT_POLICY_TYPE_OID_BASE(109);
static const byte extCertPolicyFpkiAuthDerivedHwTestOid[] =
TEST_CERT_POLICY_TYPE_OID_BASE(110);
/* DoD PKI OIDs - 2.16.840.1.101.2.1.11.X */
#define DOD_POLICY_TYPE_OID_BASE(num) {96, 134, 72, 1, 101, 2, 1, 11, num}
static const byte extCertPolicyDodMediumOid[] =
@ -5601,6 +5614,26 @@ const byte* OidFromId(word32 id, word32 type, word32* oidSz)
oid = extCertPolicyFpkiPiviAuthOid;
*oidSz = sizeof(extCertPolicyFpkiPiviAuthOid);
break;
case CP_FPKI_AUTH_TEST_OID:
oid = extCertPolicyFpkiAuthTestOid;
*oidSz = sizeof(extCertPolicyFpkiAuthTestOid);
break;
case CP_FPKI_CARDAUTH_TEST_OID:
oid = extCertPolicyFpkiCardauthTestOid;
*oidSz = sizeof(extCertPolicyFpkiCardauthTestOid);
break;
case CP_FPKI_PIV_CONTENT_TEST_OID:
oid = extCertPolicyFpkiPivContentTestOid;
*oidSz = sizeof(extCertPolicyFpkiPivContentTestOid);
break;
case CP_FPKI_PIV_AUTH_DERIVED_TEST_OID:
oid = extCertPolicyFpkiAuthDerivedTestOid;
*oidSz = sizeof(extCertPolicyFpkiAuthDerivedTestOid);
break;
case CP_FPKI_PIV_AUTH_DERIVED_HW_TEST_OID:
oid = extCertPolicyFpkiAuthDerivedHwTestOid;
*oidSz = sizeof(extCertPolicyFpkiAuthDerivedHwTestOid);
break;
case CP_DOD_MEDIUM_OID:
oid = extCertPolicyDodMediumOid;
*oidSz = sizeof(extCertPolicyDodMediumOid);

7
wolfssl/wolfcrypt/asn.h
View File

@ -1442,6 +1442,13 @@ enum CertificatePolicy_Sum {
CP_FPKI_PIVI_AUTH_OID = 458, /* 2.16.840.1.101.3.2.1.3.45 */
CP_FPKI_COMMON_PIVI_CONTENT_SIGNING_OID = 460, /* 2.16.840.1.101.3.2.1.3.47 */
/* Federal PKI Test OIDs */
CP_FPKI_AUTH_TEST_OID = 469, /* 2.16.840.1.101.3.2.1.48.11 */
CP_FPKI_CARDAUTH_TEST_OID = 471, /* 2.16.840.1.101.3.2.1.48.13 */
CP_FPKI_PIV_CONTENT_TEST_OID = 544, /* 2.16.840.1.101.3.2.1.48.86 */
CP_FPKI_PIV_AUTH_DERIVED_TEST_OID = 567, /* 2.16.840.1.101.3.2.1.48.109 */
CP_FPKI_PIV_AUTH_DERIVED_HW_TEST_OID = 568, /* 2.16.840.1.101.3.2.1.48.110 */
/* DoD PKI OIDs */
CP_DOD_MEDIUM_OID = 423, /* 2.16.840.1.101.2.1.11.5 */
CP_DOD_MEDIUM_HARDWARE_OID = 427, /* 2.16.840.1.101.2.1.11.9 */