Added functions to parse the certificate policies extention.

Added gnutls_x509_crt_get_policy() etc. In addition several updated in the
handling of strings in X.509 structures.

1 files changed, 28 insertions, 0 deletions

diff --git a/lib/pkix.asn b/lib/pkix.asn
index 3f1682cd9c..235b6d7c44 100644
--- a/lib/pkix.asn
+++ b/lib/pkix.asn
@@ -552,6 +552,34 @@ ProxyPolicy ::= SEQUENCE {
   policyLanguage   OBJECT IDENTIFIER,
   policy           OCTET STRING OPTIONAL }
 
+-- 2.5.29.32
+
+
+certificatePolicies ::= SEQUENCE SIZE (1..MAX) OF PolicyInformation
+
+PolicyInformation ::= SEQUENCE {
+  policyIdentifier   OBJECT IDENTIFIER,
+  policyQualifiers   SEQUENCE SIZE (1..MAX) OF PolicyQualifierInfo OPTIONAL }
+
+PolicyQualifierInfo ::= SEQUENCE {
+  policyQualifierId  OBJECT IDENTIFIER,
+  qualifier          ANY DEFINED BY policyQualifierId }
+
+CPSuri ::= IA5String
+
+UserNotice ::= SEQUENCE {
+  noticeRef        NoticeReference OPTIONAL,
+  explicitText     DisplayText OPTIONAL }
+
+NoticeReference ::= SEQUENCE {
+  organization     DisplayText,
+  noticeNumbers    SEQUENCE OF INTEGER }
+
+DisplayText ::= CHOICE {
+  ia5String        IA5String      (SIZE (1..200)),
+  bmpString        BMPString      (SIZE (1..200)),
+  utf8String       UTF8String     (SIZE (1..200)) }
+
 -- rfc2560
 
 OCSPRequest     ::=     SEQUENCE {