ViewVC Help
View File | Revision Log | Show Annotations | Download File
/cvs/Convert-BER-XS/XS.pm
(Generate patch)

Comparing Convert-BER-XS/XS.pm (file contents):
Revision 1.24 by root, Sat Apr 20 14:59:26 2019 UTC vs.
Revision 1.34 by root, Sat Apr 20 18:38:33 2019 UTC

8 8
9 my $ber = ber_decode $buf, $Convert::BER::XS::SNMP_PROFILE 9 my $ber = ber_decode $buf, $Convert::BER::XS::SNMP_PROFILE
10 or die "unable to decode SNMP message"; 10 or die "unable to decode SNMP message";
11 11
12 # The above results in a data structure consisting of 12 # The above results in a data structure consisting of
13 # (class, tag, # constructed, data) 13 # (class, tag, flags, data)
14 # tuples. Below is such a message, SNMPv1 trap 14 # tuples. Below is such a message, SNMPv1 trap
15 # with a Cisco mac change notification. 15 # with a Cisco mac change notification.
16 # Did you know that Cisco is in the news almost 16 # Did you know that Cisco is in the news almost
17 # every week because of some backdoor password 17 # every week because of some backdoor password
18 # or other extremely stupid security bug? 18 # or other extremely stupid security bug?
19 19
20 [ ASN_UNIVERSAL, ASN_SEQUENCE, 1, 20 [ ASN_UNIVERSAL, ASN_SEQUENCE, 1,
21 [ 21 [
22 [ ASN_UNIVERSAL, ASN_INTEGER32, 0, 0 ], # snmp version 1 22 [ ASN_UNIVERSAL, ASN_INTEGER, 0, 0 ], # snmp version 1
23 [ ASN_UNIVERSAL, 4, 0, "public" ], # community 23 [ ASN_UNIVERSAL, 4, 0, "public" ], # community
24 [ ASN_CONTEXT, 4, 1, # CHOICE, constructed - trap PDU 24 [ ASN_CONTEXT, 4, 1, # CHOICE, constructed - trap PDU
25 [ 25 [
26 [ ASN_UNIVERSAL, ASN_OBJECT_IDENTIFIER, 0, "1.3.6.1.4.1.9.9.215.2" ], # enterprise oid 26 [ ASN_UNIVERSAL, ASN_OBJECT_IDENTIFIER, 0, "1.3.6.1.4.1.9.9.215.2" ], # enterprise oid
27 [ ASN_APPLICATION, SNMP_IPADDRESS, 0, "10.0.0.1" ], # SNMP IpAddress 27 [ ASN_APPLICATION, SNMP_IPADDRESS, 0, "10.0.0.1" ], # SNMP IpAddress
28 [ ASN_UNIVERSAL, ASN_INTEGER32, 0, 6 ], # generic trap 28 [ ASN_UNIVERSAL, ASN_INTEGER, 0, 6 ], # generic trap
29 [ ASN_UNIVERSAL, ASN_INTEGER32, 0, 1 ], # specific trap 29 [ ASN_UNIVERSAL, ASN_INTEGER, 0, 1 ], # specific trap
30 [ ASN_APPLICATION, SNMP_TIMETICKS, 0, 1817903850 ], # SNMP TimeTicks 30 [ ASN_APPLICATION, SNMP_TIMETICKS, 0, 1817903850 ], # SNMP TimeTicks
31 [ ASN_UNIVERSAL, ASN_SEQUENCE, 1, # the varbindlist 31 [ ASN_UNIVERSAL, ASN_SEQUENCE, 1, # the varbindlist
32 [ 32 [
33 [ ASN_UNIVERSAL, ASN_SEQUENCE, 1, # a single varbind, "key value" pair 33 [ ASN_UNIVERSAL, ASN_SEQUENCE, 1, # a single varbind, "key value" pair
34 [ 34 [
42 # let's decode it a bit with some helper functions 42 # let's decode it a bit with some helper functions
43 43
44 my $msg = ber_is_seq $ber 44 my $msg = ber_is_seq $ber
45 or die "SNMP message does not start with a sequence"; 45 or die "SNMP message does not start with a sequence";
46 46
47 ber_is $msg->[0], ASN_UNIVERSAL, ASN_INTEGER32, 0 47 ber_is $msg->[0], ASN_UNIVERSAL, ASN_INTEGER, 0
48 or die "SNMP message does not start with snmp version\n"; 48 or die "SNMP message does not start with snmp version\n";
49 49
50 # message is SNMP v1 or v2c? 50 # message is SNMP v1 or v2c?
51 if ($msg->[0][BER_DATA] == 0 || $msg->[0][BER_DATA] == 1) { 51 if ($msg->[0][BER_DATA] == 0 || $msg->[0][BER_DATA] == 1) {
52 52
55 my $trap = $msg->[2][BER_DATA]; 55 my $trap = $msg->[2][BER_DATA];
56 56
57 # check whether trap is a cisco mac notification mac changed message 57 # check whether trap is a cisco mac notification mac changed message
58 if ( 58 if (
59 (ber_is_oid $trap->[0], "1.3.6.1.4.1.9.9.215.2") # cmnInterfaceObjects 59 (ber_is_oid $trap->[0], "1.3.6.1.4.1.9.9.215.2") # cmnInterfaceObjects
60 and (ber_is_i32 $trap->[2], 6) 60 and (ber_is_int $trap->[2], 6)
61 and (ber_is_i32 $trap->[3], 1) # mac changed msg 61 and (ber_is_int $trap->[3], 1) # mac changed msg
62 ) { 62 ) {
63 ... and so on 63 ... and so on
64 64
65 # finally, let's encode it again and hope it results in the same bit pattern 65 # finally, let's encode it again and hope it results in the same bit pattern
66 66
100 100
101=item C<:const_index> 101=item C<:const_index>
102 102
103The BER tuple array index constants: 103The BER tuple array index constants:
104 104
105 BER_CLASS BER_TAG BER_CONSTRUCTED BER_DATA 105 BER_CLASS BER_TAG BER_FLAGS BER_DATA
106 106
107=item C<:const_asn> 107=item C<:const_asn>
108 108
109ASN class values (these are C<0>, C<1>, C<2> and C<3>, respectively - 109ASN class values (these are C<0>, C<1>, C<2> and C<3>, respectively -
110exactly thw two topmost bits from the identifier octet shifted 6 bits to 110exactly thw two topmost bits from the identifier octet shifted 6 bits to
113 ASN_UNIVERSAL ASN_APPLICATION ASN_CONTEXT ASN_PRIVATE 113 ASN_UNIVERSAL ASN_APPLICATION ASN_CONTEXT ASN_PRIVATE
114 114
115ASN tag values (some of which are aliases, such as C<ASN_OID>). Their 115ASN tag values (some of which are aliases, such as C<ASN_OID>). Their
116numerical value corresponds exactly to the numbers used in BER/X.690. 116numerical value corresponds exactly to the numbers used in BER/X.690.
117 117
118 ASN_BOOLEAN ASN_INTEGER32 ASN_BIT_STRING ASN_OCTET_STRING ASN_NULL ASN_OBJECT_IDENTIFIER 118 ASN_BOOLEAN ASN_INTEGER ASN_BIT_STRING ASN_OCTET_STRING ASN_NULL ASN_OBJECT_IDENTIFIER
119 ASN_OBJECT_DESCRIPTOR ASN_OID ASN_EXTERNAL ASN_REAL ASN_SEQUENCE ASN_ENUMERATED 119 ASN_OBJECT_DESCRIPTOR ASN_OID ASN_EXTERNAL ASN_REAL ASN_SEQUENCE ASN_ENUMERATED
120 ASN_EMBEDDED_PDV ASN_UTF8_STRING ASN_RELATIVE_OID ASN_SET ASN_NUMERIC_STRING 120 ASN_EMBEDDED_PDV ASN_UTF8_STRING ASN_RELATIVE_OID ASN_SET ASN_NUMERIC_STRING
121 ASN_PRINTABLE_STRING ASN_TELETEX_STRING ASN_T61_STRING ASN_VIDEOTEX_STRING ASN_IA5_STRING 121 ASN_PRINTABLE_STRING ASN_TELETEX_STRING ASN_T61_STRING ASN_VIDEOTEX_STRING ASN_IA5_STRING
122 ASN_ASCII_STRING ASN_UTC_TIME ASN_GENERALIZED_TIME ASN_GRAPHIC_STRING ASN_VISIBLE_STRING 122 ASN_ASCII_STRING ASN_UTC_TIME ASN_GENERALIZED_TIME ASN_GRAPHIC_STRING ASN_VISIBLE_STRING
123 ASN_ISO646_STRING ASN_GENERAL_STRING ASN_UNIVERSAL_STRING ASN_CHARACTER_STRING ASN_BMP_STRING 123 ASN_ISO646_STRING ASN_GENERAL_STRING ASN_UNIVERSAL_STRING ASN_CHARACTER_STRING ASN_BMP_STRING
134 134
135Constants only relevant to SNMP. These are the tag values used by SNMP in 135Constants only relevant to SNMP. These are the tag values used by SNMP in
136the C<ASN_APPLICATION> namespace and have the exact numerical value as in 136the C<ASN_APPLICATION> namespace and have the exact numerical value as in
137BER/RFC 2578. 137BER/RFC 2578.
138 138
139 SNMP_IPADDRESS SNMP_COUNTER32 SNMP_UNSIGNED32 SNMP_TIMETICKS SNMP_OPAQUE SNMP_COUNTER64 139 SNMP_IPADDRESS SNMP_COUNTER32 SNMP_UNSIGNED32 SNMP_GAUGE32
140 SNMP_TIMETICKS SNMP_OPAQUE SNMP_COUNTER64
140 141
141=item C<:decode> 142=item C<:decode>
142 143
143C<ber_decode> and the match helper functions: 144C<ber_decode> and the match helper functions:
144 145
146 ber_decode ber-decode_prefix
145 ber_decode ber_is ber_is_seq ber_is_i32 ber_is_oid 147 ber_is ber_is_seq ber_is_int ber_is_oid
146 148
147=item C<:encode> 149=item C<:encode>
148 150
149C<ber_encode> and the construction helper functions: 151C<ber_encode> and the construction helper functions:
150 152
151 ber_encode ber_i32 153 ber_encode
154 ber_int
152 155
153=back 156=back
154 157
155=head2 ASN.1/BER/DER/... BASICS 158=head2 ASN.1/BER/DER/... BASICS
156 159
157ASN.1 is a strange language that can be used to describe protocols and 160ASN.1 is a strange language that can be used to describe protocols and
158data structures. It supports various mappings to JSON, XML, but most 161data structures. It supports various mappings to JSON, XML, but most
159importantly, to a various binary encodings such as BER, that is the topic 162importantly, to a various binary encodings such as BER, that is the topic
160of this module, and is used in SNMP or LDAP for example. 163of this module, and is used in SNMP, LDAP or X.509 for example.
161 164
162While ASN.1 defines a schema that is useful to interpret encoded data, 165While ASN.1 defines a schema that is useful to interpret encoded data,
163the BER encoding is actually somewhat self-describing: you might not know 166the BER encoding is actually somewhat self-describing: you might not know
164whether something is a string or a number or a sequence or something else, 167whether something is a string or a number or a sequence or something else,
165but you can nevertheless decode the overall structure, even if you end up 168but you can nevertheless decode the overall structure, even if you end up
167 170
168This works because BER values are tagged with a type and a namespace, 171This works because BER values are tagged with a type and a namespace,
169and also have a flag that says whether a value consists of subvalues (is 172and also have a flag that says whether a value consists of subvalues (is
170"constructed") or not (is "primitive"). 173"constructed") or not (is "primitive").
171 174
172Tags are simple integers, and ASN.1 defines a somewhat weird assortment of 175Tags are simple integers, and ASN.1 defines a somewhat weird assortment
173those - for example, you have 32 bit signed integers and 16(!) different 176of those - for example, you have one integers and 16(!) different
174string types, but there is no Unsigned32 type for example. Different 177string types, but there is no Unsigned32 type for example. Different
175applications work around this in different ways, for example, SNMP defines 178applications work around this in different ways, for example, SNMP defines
176application-specific Gauge32, Counter32 and Unsigned32, which are mapped 179application-specific Gauge32, Counter32 and Unsigned32, which are mapped
177to two different tags: you can distinguish between Counter32 and the 180to two different tags: you can distinguish between Counter32 and the
178others, but not between Gause32 and Unsigned32, without the ASN.1 schema. 181others, but not between Gause32 and Unsigned32, without the ASN.1 schema.
182=head2 DECODED BER REPRESENTATION 185=head2 DECODED BER REPRESENTATION
183 186
184This module represents every BER value as a 4-element tuple (actually an 187This module represents every BER value as a 4-element tuple (actually an
185array-reference): 188array-reference):
186 189
187 [CLASS, TAG, CONSTRUCTED, DATA] 190 [CLASS, TAG, FLAGS, DATA]
188 191
189For example: 192For example:
190 193
191 [ASN_UNIVERSAL, ASN_INTEGER32, 0, 177] # the integer 177 194 [ASN_UNIVERSAL, ASN_INTEGER, 0, 177] # the integer 177
192 [ASN_UNIVERSAL, ASN_OCTET_STRING, 0, "john"] # the string "john" 195 [ASN_UNIVERSAL, ASN_OCTET_STRING, 0, "john"] # the string "john"
193 [ASN_UNIVERSAL, ASN_OID, 0, "1.3.6.133"] # some OID 196 [ASN_UNIVERSAL, ASN_OID, 0, "1.3.6.133"] # some OID
194 [ASN_UNIVERSAL, ASN_SEQUENCE, 1, [ [ASN_UNIVERSAL... # a sequence 197 [ASN_UNIVERSAL, ASN_SEQUENCE, 1, [ [ASN_UNIVERSAL... # a sequence
195 198
196To avoid non-descriptive hardcoded array index numbers, this module 199To avoid non-descriptive hardcoded array index numbers, this module
197defines symbolic constants to access these members: C<BER_CLASS>, 200defines symbolic constants to access these members: C<BER_CLASS>,
198C<BER_TAG>, C<BER_CONSTRUCTED> and C<BER_DATA>. 201C<BER_TAG>, C<BER_FLAGS> and C<BER_DATA>.
199 202
200Also, the first three members are integers with a little caveat: for 203Also, the first three members are integers with a little caveat: for
201performance reasons, these are readonly and shared, so you must not modify 204performance reasons, these are readonly and shared, so you must not modify
202them (increment, assign to them etc.) in any way. You may modify the 205them (increment, assign to them etc.) in any way. You may modify the
203I<DATA> member, and you may re-assign the array itself, e.g.: 206I<DATA> member, and you may re-assign the array itself, e.g.:
204 207
205 $ber = ber_decode $binbuf; 208 $ber = ber_decode $binbuf;
206 209
207 # the following is NOT legal: 210 # the following is NOT legal:
208 $ber->[BER_CLASS] = ASN_PRIVATE; # ERROR, CLASS/TAG/CONSTRUCTED are READ ONLY(!) 211 $ber->[BER_CLASS] = ASN_PRIVATE; # ERROR, CLASS/TAG/FLAGS are READ ONLY(!)
209 212
210 # but all of the following are fine: 213 # but all of the following are fine:
211 $ber->[BER_DATA] = "string"; 214 $ber->[BER_DATA] = "string";
212 $ber->[BER_DATA] = [ASN_UNIVERSAL, ASN_INTEGER32, 0, 123]; 215 $ber->[BER_DATA] = [ASN_UNIVERSAL, ASN_INTEGER, 0, 123];
213 @$ber = (ASN_APPLICATION, SNMP_TIMETICKS, 0, 1000); 216 @$ber = (ASN_APPLICATION, SNMP_TIMETICKS, 0, 1000);
214 217
215I<CLASS> is something like a namespace for I<TAG>s - there is the 218I<CLASS> is something like a namespace for I<TAG>s - there is the
216C<ASN_UNIVERSAL> namespace which defines tags common to all ASN.1 219C<ASN_UNIVERSAL> namespace which defines tags common to all ASN.1
217implementations, the C<ASN_APPLICATION> namespace which defines tags for 220implementations, the C<ASN_APPLICATION> namespace which defines tags for
223(partial) interpretation of the data value. For example, SNMP defines 226(partial) interpretation of the data value. For example, SNMP defines
224extra tags in the C<ASN_APPLICATION> namespace, and to take full advantage 227extra tags in the C<ASN_APPLICATION> namespace, and to take full advantage
225of these, you need to tell this module how to handle those via profiles. 228of these, you need to tell this module how to handle those via profiles.
226 229
227The most common tags in the C<ASN_UNIVERSAL> namespace are 230The most common tags in the C<ASN_UNIVERSAL> namespace are
228C<ASN_INTEGER32>, C<ASN_BIT_STRING>, C<ASN_NULL>, C<ASN_OCTET_STRING>, 231C<ASN_INTEGER>, C<ASN_BIT_STRING>, C<ASN_NULL>, C<ASN_OCTET_STRING>,
229C<ASN_OBJECT_IDENTIFIER>, C<ASN_SEQUENCE>, C<ASN_SET> and 232C<ASN_OBJECT_IDENTIFIER>, C<ASN_SEQUENCE>, C<ASN_SET> and
230C<ASN_IA5_STRING>. 233C<ASN_IA5_STRING>.
231 234
232The most common tags in SNMP's C<ASN_APPLICATION> namespace are 235The most common tags in SNMP's C<ASN_APPLICATION> namespace are
233C<SNMP_COUNTER32>, C<SNMP_UNSIGNED32>, C<SNMP_TIMETICKS> and 236C<SNMP_COUNTER32>, C<SNMP_UNSIGNED32>, C<SNMP_TIMETICKS> and
234C<SNMP_COUNTER64>. 237C<SNMP_COUNTER64>.
235 238
236The I<CONSTRUCTED> flag is really just a boolean - if it is false, 239The I<FLAGS> value is really just a boolean at this time (but might
237the value is "primitive" and contains no subvalues, kind of like a 240get extended) - if it is C<0>, the value is "primitive" and contains
238non-reference perl scalar. If it is true, then the value is "constructed" 241no subvalues, kind of like a non-reference perl scalar. If it is C<1>,
239which just means it contains a list of subvalues which this module will 242then the value is "constructed" which just means it contains a list of
240en-/decode as BER tuples themselves. 243subvalues which this module will en-/decode as BER tuples themselves.
241 244
242The I<DATA> value is either a reference to an array of further tuples (if 245The I<DATA> value is either a reference to an array of further tuples
243the value is I<CONSTRUCTED>), some decoded representation of the value, 246(if the value is I<FLAGS>), some decoded representation of the value, if
244if this module knows how to decode it (e.g. for the integer types above) 247this module knows how to decode it (e.g. for the integer types above) or
245or a binary string with the raw octets if this module doesn't know how to 248a binary string with the raw octets if this module doesn't know how to
246interpret the namespace/tag. 249interpret the namespace/tag.
247 250
248Thus, you can always decode a BER data structure and at worst you get a 251Thus, you can always decode a BER data structure and at worst you get a
249string in place of some nice decoded value. 252string in place of some nice decoded value.
250 253
252 255
253=head2 DECODING AND ENCODING 256=head2 DECODING AND ENCODING
254 257
255=over 258=over
256 259
257=item $tuple = ber_decoded $bindata[, $profile] 260=item $tuple = ber_decode $bindata[, $profile]
258 261
259Decodes binary BER data in C<$bindata> and returns the resulting BER 262Decodes binary BER data in C<$bindata> and returns the resulting BER
260tuple. Croaks on any decoding error, so the returned C<$tuple> is always 263tuple. Croaks on any decoding error, so the returned C<$tuple> is always
261valid. 264valid.
262 265
266 269
267In addition to rolling your own, this module provides a 270In addition to rolling your own, this module provides a
268C<$Convert::BER::XS::SNMP_PROFILE> that knows about the additional SNMP 271C<$Convert::BER::XS::SNMP_PROFILE> that knows about the additional SNMP
269types. 272types.
270 273
274Example: decode a BER blob using the default profile - SNMP values will be
275decided as raw strings.
276
277 $tuple = ber_decode $data;
278
279Example: as above, but use the provided SNMP profile.
280
281 $tuple = ber_encode $data, $Convert::BER::XS::SNMP_PROFILE;
282
283=item ($tuple, $bytes) = ber_decode_prefix $bindata[, $profile]
284
285Works like C<ber_decode>, except it doesn't croak when there is data after
286the BER data, but instead returns the decoded value and the number of
287bytes it decoded.
288
289This is useful when you have BER data at the start of a buffer and other
290data after, and you need to find the length.
291
292Also, since BER is self-delimited, this can be used to decode multiple BER
293values joined together.
294
271=item $bindata = ber_encode $tuple[, $profile] 295=item $bindata = ber_encode $tuple[, $profile]
272 296
273Encodes the BER tuple into a BER/DER data structure. AS with 297Encodes the BER tuple into a BER/DER data structure. AS with
274Cyber_decode>, an optional profile can be given. 298Cyber_decode>, an optional profile can be given.
299
300The encoded data should be both BER and DER ("shortest form") compliant
301unless the input says otherwise (e.g. it uses constructed strings).
275 302
276=back 303=back
277 304
278=head2 HELPER FUNCTIONS 305=head2 HELPER FUNCTIONS
279 306
291a ease-of-use exception, they usually also accept C<undef> instead of a 318a ease-of-use exception, they usually also accept C<undef> instead of a
292tuple reference, in which case they silently fail to match. 319tuple reference, in which case they silently fail to match.
293 320
294=over 321=over
295 322
296=item $bool = ber_is $tuple, $class, $tag, $constructed, $data 323=item $bool = ber_is $tuple, $class, $tag, $flags, $data
297 324
298This takes a BER C<$tuple> and matches its elements against the provided 325This takes a BER C<$tuple> and matches its elements against the provided
299values, all of which are optional - values that are either missing or 326values, all of which are optional - values that are either missing or
300C<undef> will be ignored, the others will be matched exactly (e.g. as if 327C<undef> will be ignored, the others will be matched exactly (e.g. as if
301you used C<==> or C<eq> (for C<$data>)). 328you used C<==> or C<eq> (for C<$data>)).
306 orf die "tuple is not an ASN SEQUENCE"; 333 orf die "tuple is not an ASN SEQUENCE";
307 334
308 ber_is $tuple, ASN_UNIVERSAL, ASN_NULL 335 ber_is $tuple, ASN_UNIVERSAL, ASN_NULL
309 or die "tuple is not an ASN NULL value"; 336 or die "tuple is not an ASN NULL value";
310 337
311 ber_is $tuple, ASN_UNIVERSAL, ASN_INTEGER32, 0, 50 338 ber_is $tuple, ASN_UNIVERSAL, ASN_INTEGER, 0, 50
312 or die "BER integer must be 50"; 339 or die "BER integer must be 50";
313 340
314=item $seq = ber_is_seq $tuple 341=item $seq = ber_is_seq $tuple
315 342
316Returns the sequence members (the array of subvalues) if the C<$tuple> is 343Returns the sequence members (the array of subvalues) if the C<$tuple> is
323 my $snmp = ber_is_seq $ber 350 my $snmp = ber_is_seq $ber
324 or die "SNMP packet invalid: does not start with SEQUENCE"; 351 or die "SNMP packet invalid: does not start with SEQUENCE";
325 352
326 # now we know $snmp is a sequence, so decode the SNMP version 353 # now we know $snmp is a sequence, so decode the SNMP version
327 354
328 my $version = ber_is_i32 $snmp->[0] 355 my $version = ber_is_int $snmp->[0]
329 or die "SNMP packet invalid: does not start with version number"; 356 or die "SNMP packet invalid: does not start with version number";
330 357
331=item $bool = ber_is_i32 $tuple, $i32 358=item $bool = ber_is_int $tuple, $int
332 359
333Returns a true value if the C<$tuple> represents an ASN INTEGER32 with 360Returns a true value if the C<$tuple> represents an ASN INTEGER with
334the value C<$i32>. 361the value C<$int>.
335 362
336=item $i32 = ber_is_i32 $tuple 363=item $int = ber_is_int $tuple
337 364
338Returns true (and extracts the integer value) if the C<$tuple> is an ASN 365Returns true (and extracts the integer value) if the C<$tuple> is an
339INTEGER32. For C<0>, this function returns a special value that is 0 but 366C<ASN_INTEGER>. For C<0>, this function returns a special value that is 0
340true. 367but true.
341 368
342=item $bool = ber_is_oid $tuple, $oid_string 369=item $bool = ber_is_oid $tuple, $oid_string
343 370
344Returns true if the C<$tuple> represents an ASN_OBJECT_IDENTIFIER 371Returns true if the C<$tuple> represents an ASN_OBJECT_IDENTIFIER
345that exactly matches C<$oid_string>. Example: 372that exactly matches C<$oid_string>. Example:
356 383
357=head3 CONSTRUCTION HELPERS 384=head3 CONSTRUCTION HELPERS
358 385
359=over 386=over
360 387
361=item $tuple = ber_i32 $value 388=item $tuple = ber_int $value
362 389
363Constructs a new C<ASN_INTEGER32> tuple. 390Constructs a new C<ASN_INTEGER> tuple.
364 391
365=back 392=back
366 393
367=head2 RELATIONSHIP TO L<Convert::BER> and L<Convert::ASN1> 394=head2 RELATIONSHIP TO L<Convert::BER> and L<Convert::ASN1>
368 395
381use Exporter qw(import); 408use Exporter qw(import);
382 409
383our $VERSION; 410our $VERSION;
384 411
385BEGIN { 412BEGIN {
386 $VERSION = 0.8; 413 $VERSION = 0.9;
387 XSLoader::load __PACKAGE__, $VERSION; 414 XSLoader::load __PACKAGE__, $VERSION;
388} 415}
389 416
390our %EXPORT_TAGS = ( 417our %EXPORT_TAGS = (
391 const_index => [qw( 418 const_index => [qw(
392 BER_CLASS BER_TAG BER_CONSTRUCTED BER_DATA 419 BER_CLASS BER_TAG BER_FLAGS BER_DATA
393 )], 420 )],
394 const_asn => [qw( 421 const_asn => [qw(
395 ASN_BOOLEAN ASN_INTEGER32 ASN_BIT_STRING ASN_OCTET_STRING ASN_NULL ASN_OBJECT_IDENTIFIER 422 ASN_BOOLEAN ASN_INTEGER ASN_BIT_STRING ASN_OCTET_STRING ASN_NULL ASN_OBJECT_IDENTIFIER
396 ASN_OBJECT_DESCRIPTOR ASN_OID ASN_EXTERNAL ASN_REAL ASN_SEQUENCE ASN_ENUMERATED 423 ASN_OBJECT_DESCRIPTOR ASN_OID ASN_EXTERNAL ASN_REAL ASN_SEQUENCE ASN_ENUMERATED
397 ASN_EMBEDDED_PDV ASN_UTF8_STRING ASN_RELATIVE_OID ASN_SET ASN_NUMERIC_STRING 424 ASN_EMBEDDED_PDV ASN_UTF8_STRING ASN_RELATIVE_OID ASN_SET ASN_NUMERIC_STRING
398 ASN_PRINTABLE_STRING ASN_TELETEX_STRING ASN_T61_STRING ASN_VIDEOTEX_STRING ASN_IA5_STRING 425 ASN_PRINTABLE_STRING ASN_TELETEX_STRING ASN_T61_STRING ASN_VIDEOTEX_STRING ASN_IA5_STRING
399 ASN_ASCII_STRING ASN_UTC_TIME ASN_GENERALIZED_TIME ASN_GRAPHIC_STRING ASN_VISIBLE_STRING 426 ASN_ASCII_STRING ASN_UTC_TIME ASN_GENERALIZED_TIME ASN_GRAPHIC_STRING ASN_VISIBLE_STRING
400 ASN_ISO646_STRING ASN_GENERAL_STRING ASN_UNIVERSAL_STRING ASN_CHARACTER_STRING ASN_BMP_STRING 427 ASN_ISO646_STRING ASN_GENERAL_STRING ASN_UNIVERSAL_STRING ASN_CHARACTER_STRING ASN_BMP_STRING
405 BER_TYPE_BYTES BER_TYPE_UTF8 BER_TYPE_UCS2 BER_TYPE_UCS4 BER_TYPE_INT 432 BER_TYPE_BYTES BER_TYPE_UTF8 BER_TYPE_UCS2 BER_TYPE_UCS4 BER_TYPE_INT
406 BER_TYPE_OID BER_TYPE_RELOID BER_TYPE_NULL BER_TYPE_BOOL BER_TYPE_REAL 433 BER_TYPE_OID BER_TYPE_RELOID BER_TYPE_NULL BER_TYPE_BOOL BER_TYPE_REAL
407 BER_TYPE_IPADDRESS BER_TYPE_CROAK 434 BER_TYPE_IPADDRESS BER_TYPE_CROAK
408 )], 435 )],
409 const_snmp => [qw( 436 const_snmp => [qw(
410 SNMP_IPADDRESS SNMP_COUNTER32 SNMP_UNSIGNED32 SNMP_TIMETICKS SNMP_OPAQUE SNMP_COUNTER64 437 SNMP_IPADDRESS SNMP_COUNTER32 SNMP_GAUGE32 SNMP_UNSIGNED32
438 SNMP_TIMETICKS SNMP_OPAQUE SNMP_COUNTER64
411 )], 439 )],
412 decode => [qw( 440 decode => [qw(
413 ber_decode 441 ber_decode ber_decode_prefix
414 ber_is ber_is_seq ber_is_i32 ber_is_oid 442 ber_is ber_is_seq ber_is_int ber_is_oid
415 )], 443 )],
416 encode => [qw( 444 encode => [qw(
417 ber_encode 445 ber_encode
418 ber_i32 446 ber_int
419 )], 447 )],
420); 448);
421 449
422our @EXPORT_OK = map @$_, values %EXPORT_TAGS; 450our @EXPORT_OK = map @$_, values %EXPORT_TAGS;
423 451
424$EXPORT_TAGS{all} = \@EXPORT_OK; 452$EXPORT_TAGS{all} = \@EXPORT_OK;
425$EXPORT_TAGS{const} = [map @{ $EXPORT_TAGS{$_} }, qw(const_index const_asn)]; 453$EXPORT_TAGS{const} = [map @{ $EXPORT_TAGS{$_} }, qw(const_index const_asn)];
426use Data::Dump; ddx \%EXPORT_TAGS;
427 454
428=head1 PROFILES 455=head1 PROFILES
429 456
430While any BER data can be correctly encoded and decoded out of the box, it 457While any BER data can be correctly encoded and decoded out of the box, it
431can be inconvenient to have to manually decode some values into a "better" 458can be inconvenient to have to manually decode some values into a "better"
571C<BER_TYPE_BYTES>. When you don't want that but instead prefer a hard 598C<BER_TYPE_BYTES>. When you don't want that but instead prefer a hard
572error for some types, then C<BER_TYPE_CROAK> is for you. 599error for some types, then C<BER_TYPE_CROAK> is for you.
573 600
574=back 601=back
575 602
603=head2 Example Profile
604
605The following creates a profile suitable for SNMP - it's exactly identical
606to the C<$Convert::BER::XS::SNMP_PROFILE> profile.
607
608 our $SNMP_PROFILE = new Convert::BER::XS::Profile;
609
610 $SNMP_PROFILE->set (ASN_APPLICATION, SNMP_IPADDRESS , BER_TYPE_IPADDRESS);
611 $SNMP_PROFILE->set (ASN_APPLICATION, SNMP_COUNTER32 , BER_TYPE_INT);
612 $SNMP_PROFILE->set (ASN_APPLICATION, SNMP_UNSIGNED32, BER_TYPE_INT);
613 $SNMP_PROFILE->set (ASN_APPLICATION, SNMP_TIMETICKS , BER_TYPE_INT);
614 $SNMP_PROFILE->set (ASN_APPLICATION, SNMP_OPAQUE , BER_TYPE_IPADDRESS);
615 $SNMP_PROFILE->set (ASN_APPLICATION, SNMP_COUNTER64 , BER_TYPE_INT);
616
576=cut 617=cut
577 618
578our $DEFAULT_PROFILE = new Convert::BER::XS::Profile; 619our $DEFAULT_PROFILE = new Convert::BER::XS::Profile;
579our $SNMP_PROFILE = new Convert::BER::XS::Profile; 620
621$DEFAULT_PROFILE->_set_default;
580 622
581# additional SNMP application types 623# additional SNMP application types
624our $SNMP_PROFILE = new Convert::BER::XS::Profile;
625
582$SNMP_PROFILE->set (ASN_APPLICATION, SNMP_IPADDRESS , BER_TYPE_IPADDRESS); 626$SNMP_PROFILE->set (ASN_APPLICATION, SNMP_IPADDRESS , BER_TYPE_IPADDRESS);
583$SNMP_PROFILE->set (ASN_APPLICATION, SNMP_COUNTER32 , BER_TYPE_INT); 627$SNMP_PROFILE->set (ASN_APPLICATION, SNMP_COUNTER32 , BER_TYPE_INT);
584$SNMP_PROFILE->set (ASN_APPLICATION, SNMP_UNSIGNED32, BER_TYPE_INT); 628$SNMP_PROFILE->set (ASN_APPLICATION, SNMP_UNSIGNED32, BER_TYPE_INT);
585$SNMP_PROFILE->set (ASN_APPLICATION, SNMP_TIMETICKS , BER_TYPE_INT); 629$SNMP_PROFILE->set (ASN_APPLICATION, SNMP_TIMETICKS , BER_TYPE_INT);
586$SNMP_PROFILE->set (ASN_APPLICATION, SNMP_OPAQUE , BER_TYPE_IPADDRESS); 630$SNMP_PROFILE->set (ASN_APPLICATION, SNMP_OPAQUE , BER_TYPE_IPADDRESS);
587$SNMP_PROFILE->set (ASN_APPLICATION, SNMP_COUNTER64 , BER_TYPE_INT); 631$SNMP_PROFILE->set (ASN_APPLICATION, SNMP_COUNTER64 , BER_TYPE_INT);
588 632
589$DEFAULT_PROFILE->_set_default;
590
5911; 6331;
592 634
593=head2 LIMITATIONS/NOTES 635=head2 LIMITATIONS/NOTES
594 636
595This module can only en-/decode 64 bit signed and unsigned integers, and 637This module can only en-/decode 64 bit signed and unsigned integers, and
596only when your perl supports those. 638only when your perl supports those.
597 639
598This module does not generally care about ranges, i.e. it will happily 640This module does not generally care about ranges, i.e. it will happily
599de-/encode 64 bit integers into an C<ASN_INTEGER32> value, or a negative 641de-/encode 64 bit integers into an C<ASN_INTEGER> value, or a negative
600number into an C<SNMP_COUNTER64>. 642number into an C<SNMP_COUNTER64>.
601 643
602OBJECT IDENTIFIEERs cannot have unlimited length, although the limit is 644OBJECT IDENTIFIEERs cannot have unlimited length, although the limit is
603much larger than e.g. the one imposed by SNMP or other protocols,a nd is 645much larger than e.g. the one imposed by SNMP or other protocols,a nd is
604about 4kB. 646about 4kB.
605 647
648Indefinite length encoding is not supported.
649
650Constructed strings are decoded just fine, but there should be a way to
651join them for convenience.
652
606REAL values are not supported and will currently croak. 653REAL values are not supported and will currently croak.
654
655The encoder and decoder tend to accept more formats than should be
656strictly supported.
607 657
608This module has undergone little to no testing so far. 658This module has undergone little to no testing so far.
609 659
610=head2 ITHREADS SUPPORT 660=head2 ITHREADS SUPPORT
611 661

Diff Legend

Removed lines
+ Added lines
< Changed lines
> Changed lines