Attachment 634839 Details for Bug 870864 – Patch2: Add extended key usage to the nss-util

[patch] Patch2: Add extended key usage to the nss-util

0001-nssutil-Add-extended-key-usage-for-MS-Authenticode-Code-Sign.patch (text/plain), 2.84 KB, created by Elio Maldonado Batiz on 2012-10-29 02:50:52 UTC

(hide)

Description:

Filename:

MIME Type:

Creator: Elio Maldonado Batiz

Created: 2012-10-29 02:50:52 UTC

Size: 2.84 KB

patch

obsolete

>From 3614535b1034b1507b1f95bd50b5f57535e6facb Mon Sep 17 00:00:00 2001
>From: Peter Jones <pjones@redhat.com>
>Date: Wed, 10 Oct 2012 11:12:50 -0400
>Subject: [PATCH] Add extended key usage for MS Authenticode Code Signing.
>
>We need this for Secure Boot keys.  For a detailed list of OIDs
>involved, google for "Object IDs associated with Microsoft
>cryptography".  We use several of these with SB, but only need support
>here (at this time) for generating certificates with the code signing
>EKU.
>
>Signed-off-by: Peter Jones <nss-owner@fedoraproject.org>
>---
> mozilla/security/nss/lib/util/secoid.c  | 11 +++++++++++
> mozilla/security/nss/lib/util/secoidt.h |  4 ++++
> 2 files changed, 15 insertions(+)
>
>diff --git a/mozilla/security/nss/lib/util/secoid.c b/mozilla/security/nss/lib/util/secoid.c
>index c722897..bff7375 100644
>--- a/mozilla/security/nss/lib/util/secoid.c
>+++ b/mozilla/security/nss/lib/util/secoid.c
>@@ -179,6 +179,12 @@ const char __nss_util_sccsid[] = "@(#)NSS " NSSUTIL_VERSION _DEBUG_STRING
> /* { 1.3.6.1.4.1.311 } */
> #define MICROSOFT_OID 0x2b, 0x6, 0x1, 0x4, 0x1, 0x82, 0x37
> #define EV_NAME_ATTRIBUTE 	MICROSOFT_OID, 60, 2, 1
>+/* Microsoft Crypto 2.0 ID space */
>+/* { 1.3.6.1.4.1.311.10 } */
>+#define MS_CRYPTO_20            MICROSOFT_OID, 10
>+/* Microsoft Crypto 2.0 Extended Key Usage ID space */
>+/* { 1.3.6.1.4.1.311.10.3 } */
>+#define MS_CRYPTO_EKU           MS_CRYPTO_20, 3
> 
> #define CERTICOM_OID            0x2b, 0x81, 0x04
> #define SECG_OID                CERTICOM_OID, 0x00
>@@ -481,6 +487,7 @@ CONST_OID pkixExtendedKeyUsageCodeSign[]      	= { PKIX_KEY_USAGE, 3 };
> CONST_OID pkixExtendedKeyUsageEMailProtect[]  	= { PKIX_KEY_USAGE, 4 };
> CONST_OID pkixExtendedKeyUsageTimeStamp[]     	= { PKIX_KEY_USAGE, 8 };
> CONST_OID pkixOCSPResponderExtendedKeyUsage[] 	= { PKIX_KEY_USAGE, 9 };
>+CONST_OID msExtendedKeyUsageCodeSigning[]       = { MS_CRYPTO_EKU, 1 };
> 
> /* OIDs for Netscape defined algorithms */
> CONST_OID netscapeSMimeKEA[] 			= { NETSCAPE_ALGS, 0x01 };
>@@ -1659,6 +1666,10 @@ const static SECOidData oids[SEC_OID_TOTAL] = {
>         "Business Category",
> 	CKM_INVALID_MECHANISM, INVALID_CERT_EXTENSION ),
> 
>+    OD( msExtendedKeyUsageCodeSigning, szOID_KP_CTL_USAGE_SIGNING,
>+        "Microsoft Authenticode Code Signing",
>+	CKM_INVALID_MECHANISM, INVALID_CERT_EXTENSION ),
>+
> };
> 
> /* PRIVATE EXTENDED SECOID Table
>diff --git a/mozilla/security/nss/lib/util/secoidt.h b/mozilla/security/nss/lib/util/secoidt.h
>index 24c8547..ced1c2b 100644
>--- a/mozilla/security/nss/lib/util/secoidt.h
>+++ b/mozilla/security/nss/lib/util/secoidt.h
>@@ -466,6 +466,10 @@ typedef enum {
>     SEC_OID_EV_INCORPORATION_COUNTRY        = 312,
>     SEC_OID_BUSINESS_CATEGORY               = 313,
> 
>+    /* Microsoft Authenticode OIDs */
>+    /* using the terrible microsoft name here... */
>+    szOID_KP_CTL_USAGE_SIGNING              = 314,
>+
>     SEC_OID_TOTAL
> } SECOidTag;
> 
>-- 
>1.7.12.1
>

Actions: View | Diff

Attachments on bug 870864: 634838 | 634839 | 634848 | 634849 | 634850 | 636948 | 636949 | 636950 | 641077 | 644478