use crate::{
asn1::{
Any, Asn1DecodeWrapper, Asn1EncodeWrapper, Len, Oid, Opt, SEQUENCE_TAG, SequenceBuffer,
asn1_writer, decode_asn1_tlv,
},
codec::{Decode, DecodeWrapper, Encode, EncodeWrapper, GenericCodec},
collection::ArrayVectorU8,
x509::X509Error,
};
#[derive(Debug, PartialEq)]
pub struct CertificatePolicies<'bytes>(
pub ArrayVectorU8<PolicyInformation<'bytes>, 2>,
);
impl<'de> Decode<'de, GenericCodec<Asn1DecodeWrapper, ()>> for CertificatePolicies<'de> {
#[inline]
fn decode(dw: &mut DecodeWrapper<'de, Asn1DecodeWrapper>) -> crate::Result<Self> {
Ok(Self(SequenceBuffer::decode(dw, SEQUENCE_TAG)?.0))
}
}
impl<'bytes> Encode<GenericCodec<(), Asn1EncodeWrapper>> for CertificatePolicies<'bytes> {
#[inline]
fn encode(&self, ew: &mut EncodeWrapper<'_, Asn1EncodeWrapper>) -> crate::Result<()> {
SequenceBuffer(&self.0).encode(ew, Len::MAX_TWO_BYTES, SEQUENCE_TAG)
}
}
#[derive(Debug, PartialEq)]
pub struct PolicyInformation<'bytes> {
pub policy_identifier: Oid,
pub policy_qualifiers: Option<ArrayVectorU8<PolicyQualifierInfo<'bytes>, 1>>,
}
impl<'de> Decode<'de, GenericCodec<Asn1DecodeWrapper, ()>> for PolicyInformation<'de> {
#[inline]
fn decode(dw: &mut DecodeWrapper<'de, Asn1DecodeWrapper>) -> crate::Result<Self> {
let (SEQUENCE_TAG, _, value, rest) = decode_asn1_tlv(dw.bytes)? else {
return Err(X509Error::InvalidExtensionCertificatePolicies.into());
};
dw.bytes = value;
let policy_identifier = Oid::decode(dw)?;
let policy_qualifiers = Opt::decode_seq(dw, SEQUENCE_TAG)?.0;
dw.bytes = rest;
Ok(Self { policy_identifier, policy_qualifiers })
}
}
impl<'bytes> Encode<GenericCodec<(), Asn1EncodeWrapper>> for PolicyInformation<'bytes> {
#[inline]
fn encode(&self, ew: &mut EncodeWrapper<'_, Asn1EncodeWrapper>) -> crate::Result<()> {
asn1_writer(ew, Len::MAX_TWO_BYTES, SEQUENCE_TAG, |local_ew| {
self.policy_identifier.encode(local_ew)?;
Opt(&self.policy_qualifiers).encode_seq(local_ew, Len::MAX_ONE_BYTE, SEQUENCE_TAG)?;
Ok(())
})
}
}
#[derive(Debug, PartialEq)]
pub struct PolicyQualifierInfo<'bytes> {
pub policy_qualifier_id: Oid,
pub qualifier: Any<&'bytes [u8]>,
}
impl<'de> Decode<'de, GenericCodec<Asn1DecodeWrapper, ()>> for PolicyQualifierInfo<'de> {
#[inline]
fn decode(dw: &mut DecodeWrapper<'de, Asn1DecodeWrapper>) -> crate::Result<Self> {
let (SEQUENCE_TAG, _, value, rest) = decode_asn1_tlv(dw.bytes)? else {
return Err(X509Error::InvalidExtensionCertificatePolicies.into());
};
dw.bytes = value;
let policy_qualifier_id = Oid::decode(dw)?;
let qualifier = Any::decode(dw)?;
dw.bytes = rest;
Ok(Self { policy_qualifier_id, qualifier })
}
}
impl<'bytes> Encode<GenericCodec<(), Asn1EncodeWrapper>> for PolicyQualifierInfo<'bytes> {
#[inline]
fn encode(&self, ew: &mut EncodeWrapper<'_, Asn1EncodeWrapper>) -> crate::Result<()> {
asn1_writer(ew, Len::MAX_TWO_BYTES, SEQUENCE_TAG, |local_ew| {
self.policy_qualifier_id.encode(local_ew)?;
self.qualifier.encode(local_ew)?;
Ok(())
})
}
}