From 5a75c290994945ada94e48a082792aee6d1d3cf2 Mon Sep 17 00:00:00 2001
From: Jakub Witczak <kuba@erlang.org>
Date: Mon, 18 Sep 2023 13:23:36 +0200
Subject: [PATCH] public_key: exclusive_decode config & data

---
 lib/public_key/BasicOcspResponse.data      | Bin 0 -> 1577 bytes
 lib/public_key/README.txt                  |  13 +++++++++++++
 lib/public_key/asn1/Makefile               |   3 ++-
 lib/public_key/asn1/OTP-PUB-KEY.asn1config |  17 ++++++++++++++---
 4 files changed, 29 insertions(+), 4 deletions(-)
 create mode 100644 lib/public_key/BasicOcspResponse.data
 create mode 100644 lib/public_key/README.txt

diff --git a/lib/public_key/BasicOcspResponse.data b/lib/public_key/BasicOcspResponse.data
new file mode 100644
index 0000000000000000000000000000000000000000..016ce972c3c43ee50986eca0ddcb1f3aa2ef05e9
GIT binary patch
literal 1577
zcmXqLVpBC}Vq{*}*lEz%W+-UD&&C|e!py^wT9lKRm+tInC~P1I65{6Jas>-1_=f}-
ziWmri1i5&)U5hf4i;MH~6daulg$x8hqU=1J!6o_0*%|pcxrW>ZoFFkaVWwbLLsbK1
zHcqWJkGAi;jGT;OVg;!ssYMQ{MVS?PKmu%zUU8}fzmb8Fv4N$bg`uH=xshd*L5e|=
zffdjoR&73JCMi}17Lmu3|7@F`+NgVIkyvcKUctd5G9O>Ch@88$XMbE#QHYG7h5okA
zZ;76{-?W(+IU5)-j9egyEM#Z|vV|A!Hb!n%2IeM4Muy&bOaF`1FV&b<=kznldoS;I
z_LifJdO|DfeoYr%9R4`E_PE^ZXJPW2+#as$xc|#*XD^rRzn7)l*3p-yacun}Bf0cs
zLz~Q}9iF$YE#jHExKQe|#oWi%cHBxQ#Z;~&=2-9fe^QRaHjR1ptcBJtIycYEOP%W&
z^R_11Ow3-Nap#sErBhSh@MNg^n+dH9ew$N%NNrxQmYPP?sq^cuzH?sj+%e(3lSzxi
z<i>gHf-=Kq2J+PD{+SbR^iJfhsa|LOJ<Ad<|2E~Py3N9-HS4eR@3>Gnare~Tb+?av
zZg?tkVeO82x(_X;P296Uut7hpZ)TyKPNf0I_u6u2q2yb_JeNGx{r@U0XkuYAXkuY9
zXkz|n(8Tm?0W%XL6O)K{%r>W`Ggq*F@14VK@wrVTp{!~GTJQ~;)MOwh&Wn_qOrt<t
zLj!2yGL0HM4sBvoLJmYma2n)i0A^1vCQxEr-6JD&c3zgHpz_l6sx>XWy$N^vIllX3
zsyuQlU)b$Z$1`g~uw3KBsE%95qIE8d_upDCzWUTn>xx&3Rc@Uvo!r;UZ>R-0JhxjS
z`rhkK*k2DLm6*IPei=LV!#20FRo+XNeN*0(;gz&hb#l<GQx|U}@#y)SQ{3##tr;qD
z#r+$jQ%>KC9?8}^Z3pc?UpGu#wc1qDxY8_M&h59)&1@sF>!C0B4O92H%q?9Z#6Gts
zbK99n*~bTac{VigeEHfVzO~Jb=Re2PwSnO?zs+8EOkrnv_lnzr`*?%&9g>1V4>6vX
zulGy8VizxPAZx)Chl}%8eTmeLy}|fAOW@h_XoalWqKmRj%!~|-i<1lzz=f2oFeBrC
z7FGjhAZ5S}EMsK(Sy+I{lg&UD#NlHRV-e|Jrrz{?bxzmZpOOLjm6Nsv{rYyzKoKM@
z$RcGR(TJk}LXHJkNx-A+v+RiV^d`&s`P-HU`l}o_p5gR*>$iJ{mx}tXW&5loWs>$T
zzh>_BPgg%htg)Rf9HX8!y{qIh?_1k~?`-ostxAuc@BjGOyOqDl{OKkqCf7?7gMafT
z@Yzji%l!5)`PRbLXy%l=ZLK|5EPtsr<vG`!Y+Bd5|3EY6o`k<sm`txY{tq;me#38G
ztkBWvoHExJTJrkMQ?wRYEU^1g^Ir9{KOF<kI(`d~`}J^o!t3Bzz6+-$otAXm>5Z>s
zJ1+9S#(BqbllPOhdOgxs+a|HLJoWW`<C&e4zMc%?J)pL}<Bx-vg~yeP2h<I#ykeiE
ccW1t^)B5=GtMJ3m_ZBi_rF@ukd!o}i0GF&hvH$=8

literal 0
HcmV?d00001

diff --git a/lib/public_key/README.txt b/lib/public_key/README.txt
new file mode 100644
index 000000000000..6478e758995e
--- /dev/null
+++ b/lib/public_key/README.txt
@@ -0,0 +1,13 @@
+{ok, Bin} = file:read_file("BasicOcspResponse.data").
+
+%% decode everything
+public_key:der_decode('BasicOCSPResponse', Bin).
+
+%% decode but not signature
+'OTP-PUB-KEY':decode_BasicOCSPResponse_exclusive1(Bin).
+
+%% decode but not certs - 'parts' crashes with function_clause: 'OTP-PUB-KEY':decode_tag_and_length({asn1,"tag failure"
+'OTP-PUB-KEY':decode_BasicOCSPResponse_exclusive2(Bin).
+
+%% decode but not certs - 'undecoded' returns error but shouldn't?
+'OTP-PUB-KEY':decode_BasicOCSPResponse_exclusive3(Bin).
diff --git a/lib/public_key/asn1/Makefile b/lib/public_key/asn1/Makefile
index c1adf58ed49e..2377f719e7b7 100644
--- a/lib/public_key/asn1/Makefile
+++ b/lib/public_key/asn1/Makefile
@@ -48,7 +48,7 @@ EBIN = ../ebin
 ASN_TOP = OTP-PUB-KEY PKCS-FRAME
 ASN_MODULES = PKIX1Explicit88 PKIX1Implicit88 PKIX1Algorithms88 \
 	PKIXAttributeCertificate PKCS-1 PKCS-3 PKCS-7 PKCS-8 PKCS-10 PKCS5v2-0 OTP-PKIX \
-	InformationFramework RFC5639 CMSAesRsaesOaep
+	InformationFramework RFC5639 CMSAesRsaesOaep OCSP-2013-88
 ASN_ASNS = $(ASN_MODULES:%=%.asn1)
 ASN_ERLS = $(ASN_TOP:%=$(ESRC)/%.erl)
 ASN_HRLS = $(ASN_TOP:%=%.hrl)
@@ -124,6 +124,7 @@ OTP-PUB-KEY.asn1db:		PKIX1Algorithms88.asn1 \
 		                PKCS-7.asn1\
 				PKCS-10.asn1\
 				InformationFramework.asn1\
+				OCSP-2013-88.asn1\
 				OTP-PKIX.asn1 \
 				RFC5639.asn1
 
diff --git a/lib/public_key/asn1/OTP-PUB-KEY.asn1config b/lib/public_key/asn1/OTP-PUB-KEY.asn1config
index 9ca30564af16..3543285c00b1 100644
--- a/lib/public_key/asn1/OTP-PUB-KEY.asn1config
+++ b/lib/public_key/asn1/OTP-PUB-KEY.asn1config
@@ -1,3 +1,14 @@
-{exclusive_decode,{'OTP-PUB-KEY',
-		   [{decode_TBSCert_exclusive,['Certificate',[{tbsCertificate,undecoded}]]},
-		    {decode_TBSCertList_exclusive,['CertificateList',[{tbsCertList,undecoded}]]}]}}.
+{exclusive_decode,
+ {'OTP-PUB-KEY',
+  [
+   {decode_TBSCert_exclusive,
+    ['Certificate',[{tbsCertificate,undecoded}]]},
+   %% {decode_TBSCertList_exclusive2,
+   %%  ['CertificateList',[{tbsCertList,undecoded}]]},
+   {decode_BasicOCSPResponse_exclusive1,
+    ['BasicOCSPResponse',[{signature,undecoded}]]}
+   %% ,{decode_BasicOCSPResponse_exclusive2, % FIXME1
+   %%  ['BasicOCSPResponse',[{certs,undecoded}]]}
+   %% ,{decode_BasicOCSPResponse_exclusive2, % FIXME2
+   %%  ['BasicOCSPResponse',[{certs,parts}]]}
+  ]}}.