Update ocspreq.c

This commit is contained in:
Zhi Guan
2026-06-08 19:44:30 +08:00
parent 87f5111760
commit 566530de3c

View File

@@ -12,13 +12,14 @@
#include <errno.h> #include <errno.h>
#include <string.h> #include <string.h>
#include <stdlib.h> #include <stdlib.h>
#include <gmssl/asn1.h>
#include <gmssl/digest.h> #include <gmssl/digest.h>
#include <gmssl/x509.h> #include <gmssl/x509.h>
#include <gmssl/ocsp.h> #include <gmssl/ocsp.h>
#include <gmssl/error.h> #include <gmssl/error.h>
static const char *options = "-in pem [-digest name] [-out der]"; static const char *options = "-in pem [-digest name] [-out der] [-verbose]";
static const char *help = static const char *help =
"Options\n" "Options\n"
@@ -28,10 +29,11 @@ static const char *help =
" The second certificate is its issuer certificate\n" " The second certificate is its issuer certificate\n"
" -digest name Digest algorithm for CertID, default sm3\n" " -digest name Digest algorithm for CertID, default sm3\n"
" -out der | stdout Output OCSPRequest in DER format\n" " -out der | stdout Output OCSPRequest in DER format\n"
" -verbose Print OCSPRequest to stderr\n"
"\n" "\n"
"Examples\n" "Examples\n"
"\n" "\n"
" gmssl ocspreq -in chain.pem -out req.der\n" " gmssl ocspreq -in chain.pem -out req.der -verbose\n"
"\n"; "\n";
@@ -45,12 +47,17 @@ int ocspreq_main(int argc, char **argv)
FILE *infp = stdin; FILE *infp = stdin;
FILE *outfp = stdout; FILE *outfp = stdout;
const DIGEST *digest; const DIGEST *digest;
int verbose = 0;
uint8_t cert[18192]; uint8_t cert[18192];
size_t certlen; size_t certlen;
uint8_t issuer_cert[18192]; uint8_t issuer_cert[18192];
size_t issuer_certlen; size_t issuer_certlen;
uint8_t req[1024]; uint8_t req[1024];
size_t reqlen; size_t reqlen;
const uint8_t *request;
size_t request_len;
const uint8_t *p;
size_t len;
argc--; argc--;
argv++; argv++;
@@ -78,6 +85,8 @@ int ocspreq_main(int argc, char **argv)
fprintf(stderr, "%s: open '%s' failure : %s\n", prog, outfile, strerror(errno)); fprintf(stderr, "%s: open '%s' failure : %s\n", prog, outfile, strerror(errno));
goto end; goto end;
} }
} else if (!strcmp(*argv, "-verbose")) {
verbose = 1;
} else { } else {
fprintf(stderr, "%s: illegal option `%s`\n", prog, *argv); fprintf(stderr, "%s: illegal option `%s`\n", prog, *argv);
goto end; goto end;
@@ -111,6 +120,16 @@ bad:
fprintf(stderr, "%s: generate OCSPRequest failure\n", prog); fprintf(stderr, "%s: generate OCSPRequest failure\n", prog);
goto end; goto end;
} }
if (verbose) {
p = req;
len = reqlen;
if (asn1_sequence_from_der(&request, &request_len, &p, &len) != 1
|| asn1_length_is_zero(len) != 1
|| ocsp_request_print(stderr, 0, 0, "OCSPRequest", request, request_len) != 1) {
fprintf(stderr, "%s: print OCSPRequest failure\n", prog);
goto end;
}
}
if (fwrite(req, 1, reqlen, outfp) != reqlen) { if (fwrite(req, 1, reqlen, outfp) != reqlen) {
fprintf(stderr, "%s: output failure : %s\n", prog, strerror(errno)); fprintf(stderr, "%s: output failure : %s\n", prog, strerror(errno));
goto end; goto end;