1 | /*
|
---|
2 | * Copyright 1995-2016 The OpenSSL Project Authors. All Rights Reserved.
|
---|
3 | *
|
---|
4 | * Licensed under the OpenSSL license (the "License"). You may not use
|
---|
5 | * this file except in compliance with the License. You can obtain a copy
|
---|
6 | * in the file LICENSE in the source distribution or at
|
---|
7 | * https://www.openssl.org/source/license.html
|
---|
8 | */
|
---|
9 |
|
---|
10 | /* ====================================================================
|
---|
11 | * Copyright 2002 Sun Microsystems, Inc. ALL RIGHTS RESERVED.
|
---|
12 | * ECDH support in OpenSSL originally developed by
|
---|
13 | * SUN MICROSYSTEMS, INC., and contributed to the OpenSSL project.
|
---|
14 | */
|
---|
15 |
|
---|
16 | #ifndef HEADER_X509_H
|
---|
17 | # define HEADER_X509_H
|
---|
18 |
|
---|
19 | # include <openssl/e_os2.h>
|
---|
20 | # include <openssl/ossl_typ.h>
|
---|
21 | # include <openssl/symhacks.h>
|
---|
22 | # include <openssl/buffer.h>
|
---|
23 | # include <openssl/evp.h>
|
---|
24 | # include <openssl/bio.h>
|
---|
25 | # include <openssl/stack.h>
|
---|
26 | # include <openssl/asn1.h>
|
---|
27 | # include <openssl/safestack.h>
|
---|
28 | # include <openssl/ec.h>
|
---|
29 |
|
---|
30 | # if OPENSSL_API_COMPAT < 0x10100000L
|
---|
31 | # include <openssl/rsa.h>
|
---|
32 | # include <openssl/dsa.h>
|
---|
33 | # include <openssl/dh.h>
|
---|
34 | # endif
|
---|
35 |
|
---|
36 | # include <openssl/sha.h>
|
---|
37 |
|
---|
38 | #ifdef __cplusplus
|
---|
39 | extern "C" {
|
---|
40 | #endif
|
---|
41 |
|
---|
42 | # define X509_FILETYPE_PEM 1
|
---|
43 | # define X509_FILETYPE_ASN1 2
|
---|
44 | # define X509_FILETYPE_DEFAULT 3
|
---|
45 |
|
---|
46 | # define X509v3_KU_DIGITAL_SIGNATURE 0x0080
|
---|
47 | # define X509v3_KU_NON_REPUDIATION 0x0040
|
---|
48 | # define X509v3_KU_KEY_ENCIPHERMENT 0x0020
|
---|
49 | # define X509v3_KU_DATA_ENCIPHERMENT 0x0010
|
---|
50 | # define X509v3_KU_KEY_AGREEMENT 0x0008
|
---|
51 | # define X509v3_KU_KEY_CERT_SIGN 0x0004
|
---|
52 | # define X509v3_KU_CRL_SIGN 0x0002
|
---|
53 | # define X509v3_KU_ENCIPHER_ONLY 0x0001
|
---|
54 | # define X509v3_KU_DECIPHER_ONLY 0x8000
|
---|
55 | # define X509v3_KU_UNDEF 0xffff
|
---|
56 |
|
---|
57 | struct X509_algor_st {
|
---|
58 | ASN1_OBJECT *algorithm;
|
---|
59 | ASN1_TYPE *parameter;
|
---|
60 | } /* X509_ALGOR */ ;
|
---|
61 |
|
---|
62 | typedef STACK_OF(X509_ALGOR) X509_ALGORS;
|
---|
63 |
|
---|
64 | typedef struct X509_val_st {
|
---|
65 | ASN1_TIME *notBefore;
|
---|
66 | ASN1_TIME *notAfter;
|
---|
67 | } X509_VAL;
|
---|
68 |
|
---|
69 | typedef struct X509_sig_st X509_SIG;
|
---|
70 |
|
---|
71 | typedef struct X509_name_entry_st X509_NAME_ENTRY;
|
---|
72 |
|
---|
73 | DEFINE_STACK_OF(X509_NAME_ENTRY)
|
---|
74 |
|
---|
75 | DEFINE_STACK_OF(X509_NAME)
|
---|
76 |
|
---|
77 | # define X509_EX_V_NETSCAPE_HACK 0x8000
|
---|
78 | # define X509_EX_V_INIT 0x0001
|
---|
79 | typedef struct X509_extension_st X509_EXTENSION;
|
---|
80 |
|
---|
81 | typedef STACK_OF(X509_EXTENSION) X509_EXTENSIONS;
|
---|
82 |
|
---|
83 | DEFINE_STACK_OF(X509_EXTENSION)
|
---|
84 |
|
---|
85 | typedef struct x509_attributes_st X509_ATTRIBUTE;
|
---|
86 |
|
---|
87 | DEFINE_STACK_OF(X509_ATTRIBUTE)
|
---|
88 |
|
---|
89 | typedef struct X509_req_info_st X509_REQ_INFO;
|
---|
90 |
|
---|
91 | typedef struct X509_req_st X509_REQ;
|
---|
92 |
|
---|
93 | typedef struct x509_cert_aux_st X509_CERT_AUX;
|
---|
94 |
|
---|
95 | typedef struct x509_cinf_st X509_CINF;
|
---|
96 |
|
---|
97 | DEFINE_STACK_OF(X509)
|
---|
98 |
|
---|
99 | /* This is used for a table of trust checking functions */
|
---|
100 |
|
---|
101 | typedef struct x509_trust_st {
|
---|
102 | int trust;
|
---|
103 | int flags;
|
---|
104 | int (*check_trust) (struct x509_trust_st *, X509 *, int);
|
---|
105 | char *name;
|
---|
106 | int arg1;
|
---|
107 | void *arg2;
|
---|
108 | } X509_TRUST;
|
---|
109 |
|
---|
110 | DEFINE_STACK_OF(X509_TRUST)
|
---|
111 |
|
---|
112 | /* standard trust ids */
|
---|
113 |
|
---|
114 | # define X509_TRUST_DEFAULT 0 /* Only valid in purpose settings */
|
---|
115 |
|
---|
116 | # define X509_TRUST_COMPAT 1
|
---|
117 | # define X509_TRUST_SSL_CLIENT 2
|
---|
118 | # define X509_TRUST_SSL_SERVER 3
|
---|
119 | # define X509_TRUST_EMAIL 4
|
---|
120 | # define X509_TRUST_OBJECT_SIGN 5
|
---|
121 | # define X509_TRUST_OCSP_SIGN 6
|
---|
122 | # define X509_TRUST_OCSP_REQUEST 7
|
---|
123 | # define X509_TRUST_TSA 8
|
---|
124 |
|
---|
125 | /* Keep these up to date! */
|
---|
126 | # define X509_TRUST_MIN 1
|
---|
127 | # define X509_TRUST_MAX 8
|
---|
128 |
|
---|
129 | /* trust_flags values */
|
---|
130 | # define X509_TRUST_DYNAMIC (1U << 0)
|
---|
131 | # define X509_TRUST_DYNAMIC_NAME (1U << 1)
|
---|
132 | /* No compat trust if self-signed, preempts "DO_SS" */
|
---|
133 | # define X509_TRUST_NO_SS_COMPAT (1U << 2)
|
---|
134 | /* Compat trust if no explicit accepted trust EKUs */
|
---|
135 | # define X509_TRUST_DO_SS_COMPAT (1U << 3)
|
---|
136 | /* Accept "anyEKU" as a wildcard trust OID */
|
---|
137 | # define X509_TRUST_OK_ANY_EKU (1U << 4)
|
---|
138 |
|
---|
139 | /* check_trust return codes */
|
---|
140 |
|
---|
141 | # define X509_TRUST_TRUSTED 1
|
---|
142 | # define X509_TRUST_REJECTED 2
|
---|
143 | # define X509_TRUST_UNTRUSTED 3
|
---|
144 |
|
---|
145 | /* Flags for X509_print_ex() */
|
---|
146 |
|
---|
147 | # define X509_FLAG_COMPAT 0
|
---|
148 | # define X509_FLAG_NO_HEADER 1L
|
---|
149 | # define X509_FLAG_NO_VERSION (1L << 1)
|
---|
150 | # define X509_FLAG_NO_SERIAL (1L << 2)
|
---|
151 | # define X509_FLAG_NO_SIGNAME (1L << 3)
|
---|
152 | # define X509_FLAG_NO_ISSUER (1L << 4)
|
---|
153 | # define X509_FLAG_NO_VALIDITY (1L << 5)
|
---|
154 | # define X509_FLAG_NO_SUBJECT (1L << 6)
|
---|
155 | # define X509_FLAG_NO_PUBKEY (1L << 7)
|
---|
156 | # define X509_FLAG_NO_EXTENSIONS (1L << 8)
|
---|
157 | # define X509_FLAG_NO_SIGDUMP (1L << 9)
|
---|
158 | # define X509_FLAG_NO_AUX (1L << 10)
|
---|
159 | # define X509_FLAG_NO_ATTRIBUTES (1L << 11)
|
---|
160 | # define X509_FLAG_NO_IDS (1L << 12)
|
---|
161 |
|
---|
162 | /* Flags specific to X509_NAME_print_ex() */
|
---|
163 |
|
---|
164 | /* The field separator information */
|
---|
165 |
|
---|
166 | # define XN_FLAG_SEP_MASK (0xf << 16)
|
---|
167 |
|
---|
168 | # define XN_FLAG_COMPAT 0/* Traditional; use old X509_NAME_print */
|
---|
169 | # define XN_FLAG_SEP_COMMA_PLUS (1 << 16)/* RFC2253 ,+ */
|
---|
170 | # define XN_FLAG_SEP_CPLUS_SPC (2 << 16)/* ,+ spaced: more readable */
|
---|
171 | # define XN_FLAG_SEP_SPLUS_SPC (3 << 16)/* ;+ spaced */
|
---|
172 | # define XN_FLAG_SEP_MULTILINE (4 << 16)/* One line per field */
|
---|
173 |
|
---|
174 | # define XN_FLAG_DN_REV (1 << 20)/* Reverse DN order */
|
---|
175 |
|
---|
176 | /* How the field name is shown */
|
---|
177 |
|
---|
178 | # define XN_FLAG_FN_MASK (0x3 << 21)
|
---|
179 |
|
---|
180 | # define XN_FLAG_FN_SN 0/* Object short name */
|
---|
181 | # define XN_FLAG_FN_LN (1 << 21)/* Object long name */
|
---|
182 | # define XN_FLAG_FN_OID (2 << 21)/* Always use OIDs */
|
---|
183 | # define XN_FLAG_FN_NONE (3 << 21)/* No field names */
|
---|
184 |
|
---|
185 | # define XN_FLAG_SPC_EQ (1 << 23)/* Put spaces round '=' */
|
---|
186 |
|
---|
187 | /*
|
---|
188 | * This determines if we dump fields we don't recognise: RFC2253 requires
|
---|
189 | * this.
|
---|
190 | */
|
---|
191 |
|
---|
192 | # define XN_FLAG_DUMP_UNKNOWN_FIELDS (1 << 24)
|
---|
193 |
|
---|
194 | # define XN_FLAG_FN_ALIGN (1 << 25)/* Align field names to 20
|
---|
195 | * characters */
|
---|
196 |
|
---|
197 | /* Complete set of RFC2253 flags */
|
---|
198 |
|
---|
199 | # define XN_FLAG_RFC2253 (ASN1_STRFLGS_RFC2253 | \
|
---|
200 | XN_FLAG_SEP_COMMA_PLUS | \
|
---|
201 | XN_FLAG_DN_REV | \
|
---|
202 | XN_FLAG_FN_SN | \
|
---|
203 | XN_FLAG_DUMP_UNKNOWN_FIELDS)
|
---|
204 |
|
---|
205 | /* readable oneline form */
|
---|
206 |
|
---|
207 | # define XN_FLAG_ONELINE (ASN1_STRFLGS_RFC2253 | \
|
---|
208 | ASN1_STRFLGS_ESC_QUOTE | \
|
---|
209 | XN_FLAG_SEP_CPLUS_SPC | \
|
---|
210 | XN_FLAG_SPC_EQ | \
|
---|
211 | XN_FLAG_FN_SN)
|
---|
212 |
|
---|
213 | /* readable multiline form */
|
---|
214 |
|
---|
215 | # define XN_FLAG_MULTILINE (ASN1_STRFLGS_ESC_CTRL | \
|
---|
216 | ASN1_STRFLGS_ESC_MSB | \
|
---|
217 | XN_FLAG_SEP_MULTILINE | \
|
---|
218 | XN_FLAG_SPC_EQ | \
|
---|
219 | XN_FLAG_FN_LN | \
|
---|
220 | XN_FLAG_FN_ALIGN)
|
---|
221 |
|
---|
222 | DEFINE_STACK_OF(X509_REVOKED)
|
---|
223 |
|
---|
224 | typedef struct X509_crl_info_st X509_CRL_INFO;
|
---|
225 |
|
---|
226 | DEFINE_STACK_OF(X509_CRL)
|
---|
227 |
|
---|
228 | typedef struct private_key_st {
|
---|
229 | int version;
|
---|
230 | /* The PKCS#8 data types */
|
---|
231 | X509_ALGOR *enc_algor;
|
---|
232 | ASN1_OCTET_STRING *enc_pkey; /* encrypted pub key */
|
---|
233 | /* When decrypted, the following will not be NULL */
|
---|
234 | EVP_PKEY *dec_pkey;
|
---|
235 | /* used to encrypt and decrypt */
|
---|
236 | int key_length;
|
---|
237 | char *key_data;
|
---|
238 | int key_free; /* true if we should auto free key_data */
|
---|
239 | /* expanded version of 'enc_algor' */
|
---|
240 | EVP_CIPHER_INFO cipher;
|
---|
241 | } X509_PKEY;
|
---|
242 |
|
---|
243 | typedef struct X509_info_st {
|
---|
244 | X509 *x509;
|
---|
245 | X509_CRL *crl;
|
---|
246 | X509_PKEY *x_pkey;
|
---|
247 | EVP_CIPHER_INFO enc_cipher;
|
---|
248 | int enc_len;
|
---|
249 | char *enc_data;
|
---|
250 | } X509_INFO;
|
---|
251 |
|
---|
252 | DEFINE_STACK_OF(X509_INFO)
|
---|
253 |
|
---|
254 | /*
|
---|
255 | * The next 2 structures and their 8 routines were sent to me by Pat Richard
|
---|
256 | * <patr@x509.com> and are used to manipulate Netscapes spki structures -
|
---|
257 | * useful if you are writing a CA web page
|
---|
258 | */
|
---|
259 | typedef struct Netscape_spkac_st {
|
---|
260 | X509_PUBKEY *pubkey;
|
---|
261 | ASN1_IA5STRING *challenge; /* challenge sent in atlas >= PR2 */
|
---|
262 | } NETSCAPE_SPKAC;
|
---|
263 |
|
---|
264 | typedef struct Netscape_spki_st {
|
---|
265 | NETSCAPE_SPKAC *spkac; /* signed public key and challenge */
|
---|
266 | X509_ALGOR sig_algor;
|
---|
267 | ASN1_BIT_STRING *signature;
|
---|
268 | } NETSCAPE_SPKI;
|
---|
269 |
|
---|
270 | /* Netscape certificate sequence structure */
|
---|
271 | typedef struct Netscape_certificate_sequence {
|
---|
272 | ASN1_OBJECT *type;
|
---|
273 | STACK_OF(X509) *certs;
|
---|
274 | } NETSCAPE_CERT_SEQUENCE;
|
---|
275 |
|
---|
276 | /*- Unused (and iv length is wrong)
|
---|
277 | typedef struct CBCParameter_st
|
---|
278 | {
|
---|
279 | unsigned char iv[8];
|
---|
280 | } CBC_PARAM;
|
---|
281 | */
|
---|
282 |
|
---|
283 | /* Password based encryption structure */
|
---|
284 |
|
---|
285 | typedef struct PBEPARAM_st {
|
---|
286 | ASN1_OCTET_STRING *salt;
|
---|
287 | ASN1_INTEGER *iter;
|
---|
288 | } PBEPARAM;
|
---|
289 |
|
---|
290 | /* Password based encryption V2 structures */
|
---|
291 |
|
---|
292 | typedef struct PBE2PARAM_st {
|
---|
293 | X509_ALGOR *keyfunc;
|
---|
294 | X509_ALGOR *encryption;
|
---|
295 | } PBE2PARAM;
|
---|
296 |
|
---|
297 | typedef struct PBKDF2PARAM_st {
|
---|
298 | /* Usually OCTET STRING but could be anything */
|
---|
299 | ASN1_TYPE *salt;
|
---|
300 | ASN1_INTEGER *iter;
|
---|
301 | ASN1_INTEGER *keylength;
|
---|
302 | X509_ALGOR *prf;
|
---|
303 | } PBKDF2PARAM;
|
---|
304 |
|
---|
305 | #ifdef __cplusplus
|
---|
306 | }
|
---|
307 | #endif
|
---|
308 |
|
---|
309 | # include <openssl/x509_vfy.h>
|
---|
310 | # include <openssl/pkcs7.h>
|
---|
311 |
|
---|
312 | #ifdef __cplusplus
|
---|
313 | extern "C" {
|
---|
314 | #endif
|
---|
315 |
|
---|
316 | # define X509_EXT_PACK_UNKNOWN 1
|
---|
317 | # define X509_EXT_PACK_STRING 2
|
---|
318 |
|
---|
319 | # define X509_extract_key(x) X509_get_pubkey(x)/*****/
|
---|
320 | # define X509_REQ_extract_key(a) X509_REQ_get_pubkey(a)
|
---|
321 | # define X509_name_cmp(a,b) X509_NAME_cmp((a),(b))
|
---|
322 |
|
---|
323 | void X509_CRL_set_default_method(const X509_CRL_METHOD *meth);
|
---|
324 | X509_CRL_METHOD *X509_CRL_METHOD_new(int (*crl_init) (X509_CRL *crl),
|
---|
325 | int (*crl_free) (X509_CRL *crl),
|
---|
326 | int (*crl_lookup) (X509_CRL *crl,
|
---|
327 | X509_REVOKED **ret,
|
---|
328 | ASN1_INTEGER *ser,
|
---|
329 | X509_NAME *issuer),
|
---|
330 | int (*crl_verify) (X509_CRL *crl,
|
---|
331 | EVP_PKEY *pk));
|
---|
332 | void X509_CRL_METHOD_free(X509_CRL_METHOD *m);
|
---|
333 |
|
---|
334 | void X509_CRL_set_meth_data(X509_CRL *crl, void *dat);
|
---|
335 | void *X509_CRL_get_meth_data(X509_CRL *crl);
|
---|
336 |
|
---|
337 | const char *X509_verify_cert_error_string(long n);
|
---|
338 |
|
---|
339 | int X509_verify(X509 *a, EVP_PKEY *r);
|
---|
340 |
|
---|
341 | int X509_REQ_verify(X509_REQ *a, EVP_PKEY *r);
|
---|
342 | int X509_CRL_verify(X509_CRL *a, EVP_PKEY *r);
|
---|
343 | int NETSCAPE_SPKI_verify(NETSCAPE_SPKI *a, EVP_PKEY *r);
|
---|
344 |
|
---|
345 | NETSCAPE_SPKI *NETSCAPE_SPKI_b64_decode(const char *str, int len);
|
---|
346 | char *NETSCAPE_SPKI_b64_encode(NETSCAPE_SPKI *x);
|
---|
347 | EVP_PKEY *NETSCAPE_SPKI_get_pubkey(NETSCAPE_SPKI *x);
|
---|
348 | int NETSCAPE_SPKI_set_pubkey(NETSCAPE_SPKI *x, EVP_PKEY *pkey);
|
---|
349 |
|
---|
350 | int NETSCAPE_SPKI_print(BIO *out, NETSCAPE_SPKI *spki);
|
---|
351 |
|
---|
352 | int X509_signature_dump(BIO *bp, const ASN1_STRING *sig, int indent);
|
---|
353 | int X509_signature_print(BIO *bp, const X509_ALGOR *alg,
|
---|
354 | const ASN1_STRING *sig);
|
---|
355 |
|
---|
356 | int X509_sign(X509 *x, EVP_PKEY *pkey, const EVP_MD *md);
|
---|
357 | int X509_sign_ctx(X509 *x, EVP_MD_CTX *ctx);
|
---|
358 | # ifndef OPENSSL_NO_OCSP
|
---|
359 | int X509_http_nbio(OCSP_REQ_CTX *rctx, X509 **pcert);
|
---|
360 | # endif
|
---|
361 | int X509_REQ_sign(X509_REQ *x, EVP_PKEY *pkey, const EVP_MD *md);
|
---|
362 | int X509_REQ_sign_ctx(X509_REQ *x, EVP_MD_CTX *ctx);
|
---|
363 | int X509_CRL_sign(X509_CRL *x, EVP_PKEY *pkey, const EVP_MD *md);
|
---|
364 | int X509_CRL_sign_ctx(X509_CRL *x, EVP_MD_CTX *ctx);
|
---|
365 | # ifndef OPENSSL_NO_OCSP
|
---|
366 | int X509_CRL_http_nbio(OCSP_REQ_CTX *rctx, X509_CRL **pcrl);
|
---|
367 | # endif
|
---|
368 | int NETSCAPE_SPKI_sign(NETSCAPE_SPKI *x, EVP_PKEY *pkey, const EVP_MD *md);
|
---|
369 |
|
---|
370 | int X509_pubkey_digest(const X509 *data, const EVP_MD *type,
|
---|
371 | unsigned char *md, unsigned int *len);
|
---|
372 | int X509_digest(const X509 *data, const EVP_MD *type,
|
---|
373 | unsigned char *md, unsigned int *len);
|
---|
374 | int X509_CRL_digest(const X509_CRL *data, const EVP_MD *type,
|
---|
375 | unsigned char *md, unsigned int *len);
|
---|
376 | int X509_REQ_digest(const X509_REQ *data, const EVP_MD *type,
|
---|
377 | unsigned char *md, unsigned int *len);
|
---|
378 | int X509_NAME_digest(const X509_NAME *data, const EVP_MD *type,
|
---|
379 | unsigned char *md, unsigned int *len);
|
---|
380 |
|
---|
381 | # ifndef OPENSSL_NO_STDIO
|
---|
382 | X509 *d2i_X509_fp(FILE *fp, X509 **x509);
|
---|
383 | int i2d_X509_fp(FILE *fp, X509 *x509);
|
---|
384 | X509_CRL *d2i_X509_CRL_fp(FILE *fp, X509_CRL **crl);
|
---|
385 | int i2d_X509_CRL_fp(FILE *fp, X509_CRL *crl);
|
---|
386 | X509_REQ *d2i_X509_REQ_fp(FILE *fp, X509_REQ **req);
|
---|
387 | int i2d_X509_REQ_fp(FILE *fp, X509_REQ *req);
|
---|
388 | # ifndef OPENSSL_NO_RSA
|
---|
389 | RSA *d2i_RSAPrivateKey_fp(FILE *fp, RSA **rsa);
|
---|
390 | int i2d_RSAPrivateKey_fp(FILE *fp, RSA *rsa);
|
---|
391 | RSA *d2i_RSAPublicKey_fp(FILE *fp, RSA **rsa);
|
---|
392 | int i2d_RSAPublicKey_fp(FILE *fp, RSA *rsa);
|
---|
393 | RSA *d2i_RSA_PUBKEY_fp(FILE *fp, RSA **rsa);
|
---|
394 | int i2d_RSA_PUBKEY_fp(FILE *fp, RSA *rsa);
|
---|
395 | # endif
|
---|
396 | # ifndef OPENSSL_NO_DSA
|
---|
397 | DSA *d2i_DSA_PUBKEY_fp(FILE *fp, DSA **dsa);
|
---|
398 | int i2d_DSA_PUBKEY_fp(FILE *fp, DSA *dsa);
|
---|
399 | DSA *d2i_DSAPrivateKey_fp(FILE *fp, DSA **dsa);
|
---|
400 | int i2d_DSAPrivateKey_fp(FILE *fp, DSA *dsa);
|
---|
401 | # endif
|
---|
402 | # ifndef OPENSSL_NO_EC
|
---|
403 | EC_KEY *d2i_EC_PUBKEY_fp(FILE *fp, EC_KEY **eckey);
|
---|
404 | int i2d_EC_PUBKEY_fp(FILE *fp, EC_KEY *eckey);
|
---|
405 | EC_KEY *d2i_ECPrivateKey_fp(FILE *fp, EC_KEY **eckey);
|
---|
406 | int i2d_ECPrivateKey_fp(FILE *fp, EC_KEY *eckey);
|
---|
407 | # endif
|
---|
408 | X509_SIG *d2i_PKCS8_fp(FILE *fp, X509_SIG **p8);
|
---|
409 | int i2d_PKCS8_fp(FILE *fp, X509_SIG *p8);
|
---|
410 | PKCS8_PRIV_KEY_INFO *d2i_PKCS8_PRIV_KEY_INFO_fp(FILE *fp,
|
---|
411 | PKCS8_PRIV_KEY_INFO **p8inf);
|
---|
412 | int i2d_PKCS8_PRIV_KEY_INFO_fp(FILE *fp, PKCS8_PRIV_KEY_INFO *p8inf);
|
---|
413 | int i2d_PKCS8PrivateKeyInfo_fp(FILE *fp, EVP_PKEY *key);
|
---|
414 | int i2d_PrivateKey_fp(FILE *fp, EVP_PKEY *pkey);
|
---|
415 | EVP_PKEY *d2i_PrivateKey_fp(FILE *fp, EVP_PKEY **a);
|
---|
416 | int i2d_PUBKEY_fp(FILE *fp, EVP_PKEY *pkey);
|
---|
417 | EVP_PKEY *d2i_PUBKEY_fp(FILE *fp, EVP_PKEY **a);
|
---|
418 | # endif
|
---|
419 |
|
---|
420 | X509 *d2i_X509_bio(BIO *bp, X509 **x509);
|
---|
421 | int i2d_X509_bio(BIO *bp, X509 *x509);
|
---|
422 | X509_CRL *d2i_X509_CRL_bio(BIO *bp, X509_CRL **crl);
|
---|
423 | int i2d_X509_CRL_bio(BIO *bp, X509_CRL *crl);
|
---|
424 | X509_REQ *d2i_X509_REQ_bio(BIO *bp, X509_REQ **req);
|
---|
425 | int i2d_X509_REQ_bio(BIO *bp, X509_REQ *req);
|
---|
426 | # ifndef OPENSSL_NO_RSA
|
---|
427 | RSA *d2i_RSAPrivateKey_bio(BIO *bp, RSA **rsa);
|
---|
428 | int i2d_RSAPrivateKey_bio(BIO *bp, RSA *rsa);
|
---|
429 | RSA *d2i_RSAPublicKey_bio(BIO *bp, RSA **rsa);
|
---|
430 | int i2d_RSAPublicKey_bio(BIO *bp, RSA *rsa);
|
---|
431 | RSA *d2i_RSA_PUBKEY_bio(BIO *bp, RSA **rsa);
|
---|
432 | int i2d_RSA_PUBKEY_bio(BIO *bp, RSA *rsa);
|
---|
433 | # endif
|
---|
434 | # ifndef OPENSSL_NO_DSA
|
---|
435 | DSA *d2i_DSA_PUBKEY_bio(BIO *bp, DSA **dsa);
|
---|
436 | int i2d_DSA_PUBKEY_bio(BIO *bp, DSA *dsa);
|
---|
437 | DSA *d2i_DSAPrivateKey_bio(BIO *bp, DSA **dsa);
|
---|
438 | int i2d_DSAPrivateKey_bio(BIO *bp, DSA *dsa);
|
---|
439 | # endif
|
---|
440 | # ifndef OPENSSL_NO_EC
|
---|
441 | EC_KEY *d2i_EC_PUBKEY_bio(BIO *bp, EC_KEY **eckey);
|
---|
442 | int i2d_EC_PUBKEY_bio(BIO *bp, EC_KEY *eckey);
|
---|
443 | EC_KEY *d2i_ECPrivateKey_bio(BIO *bp, EC_KEY **eckey);
|
---|
444 | int i2d_ECPrivateKey_bio(BIO *bp, EC_KEY *eckey);
|
---|
445 | # endif
|
---|
446 | X509_SIG *d2i_PKCS8_bio(BIO *bp, X509_SIG **p8);
|
---|
447 | int i2d_PKCS8_bio(BIO *bp, X509_SIG *p8);
|
---|
448 | PKCS8_PRIV_KEY_INFO *d2i_PKCS8_PRIV_KEY_INFO_bio(BIO *bp,
|
---|
449 | PKCS8_PRIV_KEY_INFO **p8inf);
|
---|
450 | int i2d_PKCS8_PRIV_KEY_INFO_bio(BIO *bp, PKCS8_PRIV_KEY_INFO *p8inf);
|
---|
451 | int i2d_PKCS8PrivateKeyInfo_bio(BIO *bp, EVP_PKEY *key);
|
---|
452 | int i2d_PrivateKey_bio(BIO *bp, EVP_PKEY *pkey);
|
---|
453 | EVP_PKEY *d2i_PrivateKey_bio(BIO *bp, EVP_PKEY **a);
|
---|
454 | int i2d_PUBKEY_bio(BIO *bp, EVP_PKEY *pkey);
|
---|
455 | EVP_PKEY *d2i_PUBKEY_bio(BIO *bp, EVP_PKEY **a);
|
---|
456 |
|
---|
457 | X509 *X509_dup(X509 *x509);
|
---|
458 | X509_ATTRIBUTE *X509_ATTRIBUTE_dup(X509_ATTRIBUTE *xa);
|
---|
459 | X509_EXTENSION *X509_EXTENSION_dup(X509_EXTENSION *ex);
|
---|
460 | X509_CRL *X509_CRL_dup(X509_CRL *crl);
|
---|
461 | X509_REVOKED *X509_REVOKED_dup(X509_REVOKED *rev);
|
---|
462 | X509_REQ *X509_REQ_dup(X509_REQ *req);
|
---|
463 | X509_ALGOR *X509_ALGOR_dup(X509_ALGOR *xn);
|
---|
464 | int X509_ALGOR_set0(X509_ALGOR *alg, ASN1_OBJECT *aobj, int ptype,
|
---|
465 | void *pval);
|
---|
466 | void X509_ALGOR_get0(const ASN1_OBJECT **paobj, int *pptype,
|
---|
467 | const void **ppval, const X509_ALGOR *algor);
|
---|
468 | void X509_ALGOR_set_md(X509_ALGOR *alg, const EVP_MD *md);
|
---|
469 | int X509_ALGOR_cmp(const X509_ALGOR *a, const X509_ALGOR *b);
|
---|
470 |
|
---|
471 | X509_NAME *X509_NAME_dup(X509_NAME *xn);
|
---|
472 | X509_NAME_ENTRY *X509_NAME_ENTRY_dup(X509_NAME_ENTRY *ne);
|
---|
473 |
|
---|
474 | int X509_cmp_time(const ASN1_TIME *s, time_t *t);
|
---|
475 | int X509_cmp_current_time(const ASN1_TIME *s);
|
---|
476 | ASN1_TIME *X509_time_adj(ASN1_TIME *s, long adj, time_t *t);
|
---|
477 | ASN1_TIME *X509_time_adj_ex(ASN1_TIME *s,
|
---|
478 | int offset_day, long offset_sec, time_t *t);
|
---|
479 | ASN1_TIME *X509_gmtime_adj(ASN1_TIME *s, long adj);
|
---|
480 |
|
---|
481 | const char *X509_get_default_cert_area(void);
|
---|
482 | const char *X509_get_default_cert_dir(void);
|
---|
483 | const char *X509_get_default_cert_file(void);
|
---|
484 | const char *X509_get_default_cert_dir_env(void);
|
---|
485 | const char *X509_get_default_cert_file_env(void);
|
---|
486 | const char *X509_get_default_private_dir(void);
|
---|
487 |
|
---|
488 | X509_REQ *X509_to_X509_REQ(X509 *x, EVP_PKEY *pkey, const EVP_MD *md);
|
---|
489 | X509 *X509_REQ_to_X509(X509_REQ *r, int days, EVP_PKEY *pkey);
|
---|
490 |
|
---|
491 | DECLARE_ASN1_FUNCTIONS(X509_ALGOR)
|
---|
492 | DECLARE_ASN1_ENCODE_FUNCTIONS(X509_ALGORS, X509_ALGORS, X509_ALGORS)
|
---|
493 | DECLARE_ASN1_FUNCTIONS(X509_VAL)
|
---|
494 |
|
---|
495 | DECLARE_ASN1_FUNCTIONS(X509_PUBKEY)
|
---|
496 |
|
---|
497 | int X509_PUBKEY_set(X509_PUBKEY **x, EVP_PKEY *pkey);
|
---|
498 | EVP_PKEY *X509_PUBKEY_get0(X509_PUBKEY *key);
|
---|
499 | EVP_PKEY *X509_PUBKEY_get(X509_PUBKEY *key);
|
---|
500 | int X509_get_pubkey_parameters(EVP_PKEY *pkey, STACK_OF(X509) *chain);
|
---|
501 | long X509_get_pathlen(X509 *x);
|
---|
502 | int i2d_PUBKEY(EVP_PKEY *a, unsigned char **pp);
|
---|
503 | EVP_PKEY *d2i_PUBKEY(EVP_PKEY **a, const unsigned char **pp, long length);
|
---|
504 | # ifndef OPENSSL_NO_RSA
|
---|
505 | int i2d_RSA_PUBKEY(RSA *a, unsigned char **pp);
|
---|
506 | RSA *d2i_RSA_PUBKEY(RSA **a, const unsigned char **pp, long length);
|
---|
507 | # endif
|
---|
508 | # ifndef OPENSSL_NO_DSA
|
---|
509 | int i2d_DSA_PUBKEY(DSA *a, unsigned char **pp);
|
---|
510 | DSA *d2i_DSA_PUBKEY(DSA **a, const unsigned char **pp, long length);
|
---|
511 | # endif
|
---|
512 | # ifndef OPENSSL_NO_EC
|
---|
513 | int i2d_EC_PUBKEY(EC_KEY *a, unsigned char **pp);
|
---|
514 | EC_KEY *d2i_EC_PUBKEY(EC_KEY **a, const unsigned char **pp, long length);
|
---|
515 | # endif
|
---|
516 |
|
---|
517 | DECLARE_ASN1_FUNCTIONS(X509_SIG)
|
---|
518 | void X509_SIG_get0(const X509_SIG *sig, const X509_ALGOR **palg,
|
---|
519 | const ASN1_OCTET_STRING **pdigest);
|
---|
520 | void X509_SIG_getm(X509_SIG *sig, X509_ALGOR **palg,
|
---|
521 | ASN1_OCTET_STRING **pdigest);
|
---|
522 |
|
---|
523 | DECLARE_ASN1_FUNCTIONS(X509_REQ_INFO)
|
---|
524 | DECLARE_ASN1_FUNCTIONS(X509_REQ)
|
---|
525 |
|
---|
526 | DECLARE_ASN1_FUNCTIONS(X509_ATTRIBUTE)
|
---|
527 | X509_ATTRIBUTE *X509_ATTRIBUTE_create(int nid, int atrtype, void *value);
|
---|
528 |
|
---|
529 | DECLARE_ASN1_FUNCTIONS(X509_EXTENSION)
|
---|
530 | DECLARE_ASN1_ENCODE_FUNCTIONS(X509_EXTENSIONS, X509_EXTENSIONS, X509_EXTENSIONS)
|
---|
531 |
|
---|
532 | DECLARE_ASN1_FUNCTIONS(X509_NAME_ENTRY)
|
---|
533 |
|
---|
534 | DECLARE_ASN1_FUNCTIONS(X509_NAME)
|
---|
535 |
|
---|
536 | int X509_NAME_set(X509_NAME **xn, X509_NAME *name);
|
---|
537 |
|
---|
538 | DECLARE_ASN1_FUNCTIONS(X509_CINF)
|
---|
539 |
|
---|
540 | DECLARE_ASN1_FUNCTIONS(X509)
|
---|
541 | DECLARE_ASN1_FUNCTIONS(X509_CERT_AUX)
|
---|
542 |
|
---|
543 | #define X509_get_ex_new_index(l, p, newf, dupf, freef) \
|
---|
544 | CRYPTO_get_ex_new_index(CRYPTO_EX_INDEX_X509, l, p, newf, dupf, freef)
|
---|
545 | int X509_set_ex_data(X509 *r, int idx, void *arg);
|
---|
546 | void *X509_get_ex_data(X509 *r, int idx);
|
---|
547 | int i2d_X509_AUX(X509 *a, unsigned char **pp);
|
---|
548 | X509 *d2i_X509_AUX(X509 **a, const unsigned char **pp, long length);
|
---|
549 |
|
---|
550 | int i2d_re_X509_tbs(X509 *x, unsigned char **pp);
|
---|
551 |
|
---|
552 | void X509_get0_signature(const ASN1_BIT_STRING **psig,
|
---|
553 | const X509_ALGOR **palg, const X509 *x);
|
---|
554 | int X509_get_signature_nid(const X509 *x);
|
---|
555 |
|
---|
556 | int X509_trusted(const X509 *x);
|
---|
557 | int X509_alias_set1(X509 *x, const unsigned char *name, int len);
|
---|
558 | int X509_keyid_set1(X509 *x, const unsigned char *id, int len);
|
---|
559 | unsigned char *X509_alias_get0(X509 *x, int *len);
|
---|
560 | unsigned char *X509_keyid_get0(X509 *x, int *len);
|
---|
561 | int (*X509_TRUST_set_default(int (*trust) (int, X509 *, int))) (int, X509 *,
|
---|
562 | int);
|
---|
563 | int X509_TRUST_set(int *t, int trust);
|
---|
564 | int X509_add1_trust_object(X509 *x, const ASN1_OBJECT *obj);
|
---|
565 | int X509_add1_reject_object(X509 *x, const ASN1_OBJECT *obj);
|
---|
566 | void X509_trust_clear(X509 *x);
|
---|
567 | void X509_reject_clear(X509 *x);
|
---|
568 |
|
---|
569 | STACK_OF(ASN1_OBJECT) *X509_get0_trust_objects(X509 *x);
|
---|
570 | STACK_OF(ASN1_OBJECT) *X509_get0_reject_objects(X509 *x);
|
---|
571 |
|
---|
572 | DECLARE_ASN1_FUNCTIONS(X509_REVOKED)
|
---|
573 | DECLARE_ASN1_FUNCTIONS(X509_CRL_INFO)
|
---|
574 | DECLARE_ASN1_FUNCTIONS(X509_CRL)
|
---|
575 |
|
---|
576 | int X509_CRL_add0_revoked(X509_CRL *crl, X509_REVOKED *rev);
|
---|
577 | int X509_CRL_get0_by_serial(X509_CRL *crl,
|
---|
578 | X509_REVOKED **ret, ASN1_INTEGER *serial);
|
---|
579 | int X509_CRL_get0_by_cert(X509_CRL *crl, X509_REVOKED **ret, X509 *x);
|
---|
580 |
|
---|
581 | X509_PKEY *X509_PKEY_new(void);
|
---|
582 | void X509_PKEY_free(X509_PKEY *a);
|
---|
583 |
|
---|
584 | DECLARE_ASN1_FUNCTIONS(NETSCAPE_SPKI)
|
---|
585 | DECLARE_ASN1_FUNCTIONS(NETSCAPE_SPKAC)
|
---|
586 | DECLARE_ASN1_FUNCTIONS(NETSCAPE_CERT_SEQUENCE)
|
---|
587 |
|
---|
588 | X509_INFO *X509_INFO_new(void);
|
---|
589 | void X509_INFO_free(X509_INFO *a);
|
---|
590 | char *X509_NAME_oneline(const X509_NAME *a, char *buf, int size);
|
---|
591 |
|
---|
592 | int ASN1_verify(i2d_of_void *i2d, X509_ALGOR *algor1,
|
---|
593 | ASN1_BIT_STRING *signature, char *data, EVP_PKEY *pkey);
|
---|
594 |
|
---|
595 | int ASN1_digest(i2d_of_void *i2d, const EVP_MD *type, char *data,
|
---|
596 | unsigned char *md, unsigned int *len);
|
---|
597 |
|
---|
598 | int ASN1_sign(i2d_of_void *i2d, X509_ALGOR *algor1,
|
---|
599 | X509_ALGOR *algor2, ASN1_BIT_STRING *signature,
|
---|
600 | char *data, EVP_PKEY *pkey, const EVP_MD *type);
|
---|
601 |
|
---|
602 | int ASN1_item_digest(const ASN1_ITEM *it, const EVP_MD *type, void *data,
|
---|
603 | unsigned char *md, unsigned int *len);
|
---|
604 |
|
---|
605 | int ASN1_item_verify(const ASN1_ITEM *it, X509_ALGOR *algor1,
|
---|
606 | ASN1_BIT_STRING *signature, void *data, EVP_PKEY *pkey);
|
---|
607 |
|
---|
608 | int ASN1_item_sign(const ASN1_ITEM *it, X509_ALGOR *algor1,
|
---|
609 | X509_ALGOR *algor2, ASN1_BIT_STRING *signature, void *data,
|
---|
610 | EVP_PKEY *pkey, const EVP_MD *type);
|
---|
611 | int ASN1_item_sign_ctx(const ASN1_ITEM *it, X509_ALGOR *algor1,
|
---|
612 | X509_ALGOR *algor2, ASN1_BIT_STRING *signature,
|
---|
613 | void *asn, EVP_MD_CTX *ctx);
|
---|
614 |
|
---|
615 | long X509_get_version(const X509 *x);
|
---|
616 | int X509_set_version(X509 *x, long version);
|
---|
617 | int X509_set_serialNumber(X509 *x, ASN1_INTEGER *serial);
|
---|
618 | ASN1_INTEGER *X509_get_serialNumber(X509 *x);
|
---|
619 | const ASN1_INTEGER *X509_get0_serialNumber(const X509 *x);
|
---|
620 | int X509_set_issuer_name(X509 *x, X509_NAME *name);
|
---|
621 | X509_NAME *X509_get_issuer_name(const X509 *a);
|
---|
622 | int X509_set_subject_name(X509 *x, X509_NAME *name);
|
---|
623 | X509_NAME *X509_get_subject_name(const X509 *a);
|
---|
624 | const ASN1_TIME * X509_get0_notBefore(const X509 *x);
|
---|
625 | ASN1_TIME *X509_getm_notBefore(const X509 *x);
|
---|
626 | int X509_set1_notBefore(X509 *x, const ASN1_TIME *tm);
|
---|
627 | const ASN1_TIME *X509_get0_notAfter(const X509 *x);
|
---|
628 | ASN1_TIME *X509_getm_notAfter(const X509 *x);
|
---|
629 | int X509_set1_notAfter(X509 *x, const ASN1_TIME *tm);
|
---|
630 | int X509_set_pubkey(X509 *x, EVP_PKEY *pkey);
|
---|
631 | int X509_up_ref(X509 *x);
|
---|
632 | int X509_get_signature_type(const X509 *x);
|
---|
633 |
|
---|
634 | # if OPENSSL_API_COMPAT < 0x10100000L
|
---|
635 | # define X509_get_notBefore X509_getm_notBefore
|
---|
636 | # define X509_get_notAfter X509_getm_notAfter
|
---|
637 | # define X509_set_notBefore X509_set1_notBefore
|
---|
638 | # define X509_set_notAfter X509_set1_notAfter
|
---|
639 | #endif
|
---|
640 |
|
---|
641 |
|
---|
642 | /*
|
---|
643 | * This one is only used so that a binary form can output, as in
|
---|
644 | * i2d_X509_NAME(X509_get_X509_PUBKEY(x),&buf)
|
---|
645 | */
|
---|
646 | X509_PUBKEY *X509_get_X509_PUBKEY(const X509 *x);
|
---|
647 | const STACK_OF(X509_EXTENSION) *X509_get0_extensions(const X509 *x);
|
---|
648 | void X509_get0_uids(const X509 *x, const ASN1_BIT_STRING **piuid,
|
---|
649 | const ASN1_BIT_STRING **psuid);
|
---|
650 | const X509_ALGOR *X509_get0_tbs_sigalg(const X509 *x);
|
---|
651 |
|
---|
652 | EVP_PKEY *X509_get0_pubkey(const X509 *x);
|
---|
653 | EVP_PKEY *X509_get_pubkey(X509 *x);
|
---|
654 | ASN1_BIT_STRING *X509_get0_pubkey_bitstr(const X509 *x);
|
---|
655 | int X509_certificate_type(const X509 *x, const EVP_PKEY *pubkey);
|
---|
656 |
|
---|
657 | long X509_REQ_get_version(const X509_REQ *req);
|
---|
658 | int X509_REQ_set_version(X509_REQ *x, long version);
|
---|
659 | X509_NAME *X509_REQ_get_subject_name(const X509_REQ *req);
|
---|
660 | int X509_REQ_set_subject_name(X509_REQ *req, X509_NAME *name);
|
---|
661 | void X509_REQ_get0_signature(const X509_REQ *req, const ASN1_BIT_STRING **psig,
|
---|
662 | const X509_ALGOR **palg);
|
---|
663 | int X509_REQ_get_signature_nid(const X509_REQ *req);
|
---|
664 | int i2d_re_X509_REQ_tbs(X509_REQ *req, unsigned char **pp);
|
---|
665 | int X509_REQ_set_pubkey(X509_REQ *x, EVP_PKEY *pkey);
|
---|
666 | EVP_PKEY *X509_REQ_get_pubkey(X509_REQ *req);
|
---|
667 | EVP_PKEY *X509_REQ_get0_pubkey(X509_REQ *req);
|
---|
668 | X509_PUBKEY *X509_REQ_get_X509_PUBKEY(X509_REQ *req);
|
---|
669 | int X509_REQ_extension_nid(int nid);
|
---|
670 | int *X509_REQ_get_extension_nids(void);
|
---|
671 | void X509_REQ_set_extension_nids(int *nids);
|
---|
672 | STACK_OF(X509_EXTENSION) *X509_REQ_get_extensions(X509_REQ *req);
|
---|
673 | int X509_REQ_add_extensions_nid(X509_REQ *req, STACK_OF(X509_EXTENSION) *exts,
|
---|
674 | int nid);
|
---|
675 | int X509_REQ_add_extensions(X509_REQ *req, STACK_OF(X509_EXTENSION) *exts);
|
---|
676 | int X509_REQ_get_attr_count(const X509_REQ *req);
|
---|
677 | int X509_REQ_get_attr_by_NID(const X509_REQ *req, int nid, int lastpos);
|
---|
678 | int X509_REQ_get_attr_by_OBJ(const X509_REQ *req, const ASN1_OBJECT *obj,
|
---|
679 | int lastpos);
|
---|
680 | X509_ATTRIBUTE *X509_REQ_get_attr(const X509_REQ *req, int loc);
|
---|
681 | X509_ATTRIBUTE *X509_REQ_delete_attr(X509_REQ *req, int loc);
|
---|
682 | int X509_REQ_add1_attr(X509_REQ *req, X509_ATTRIBUTE *attr);
|
---|
683 | int X509_REQ_add1_attr_by_OBJ(X509_REQ *req,
|
---|
684 | const ASN1_OBJECT *obj, int type,
|
---|
685 | const unsigned char *bytes, int len);
|
---|
686 | int X509_REQ_add1_attr_by_NID(X509_REQ *req,
|
---|
687 | int nid, int type,
|
---|
688 | const unsigned char *bytes, int len);
|
---|
689 | int X509_REQ_add1_attr_by_txt(X509_REQ *req,
|
---|
690 | const char *attrname, int type,
|
---|
691 | const unsigned char *bytes, int len);
|
---|
692 |
|
---|
693 | int X509_CRL_set_version(X509_CRL *x, long version);
|
---|
694 | int X509_CRL_set_issuer_name(X509_CRL *x, X509_NAME *name);
|
---|
695 | int X509_CRL_set1_lastUpdate(X509_CRL *x, const ASN1_TIME *tm);
|
---|
696 | int X509_CRL_set1_nextUpdate(X509_CRL *x, const ASN1_TIME *tm);
|
---|
697 | int X509_CRL_sort(X509_CRL *crl);
|
---|
698 | int X509_CRL_up_ref(X509_CRL *crl);
|
---|
699 |
|
---|
700 | # if OPENSSL_API_COMPAT < 0x10100000L
|
---|
701 | # define X509_CRL_set_lastUpdate X509_CRL_set1_lastUpdate
|
---|
702 | # define X509_CRL_set_nextUpdate X509_CRL_set1_nextUpdate
|
---|
703 | #endif
|
---|
704 |
|
---|
705 | long X509_CRL_get_version(const X509_CRL *crl);
|
---|
706 | const ASN1_TIME *X509_CRL_get0_lastUpdate(const X509_CRL *crl);
|
---|
707 | const ASN1_TIME *X509_CRL_get0_nextUpdate(const X509_CRL *crl);
|
---|
708 | DEPRECATEDIN_1_1_0(ASN1_TIME *X509_CRL_get_lastUpdate(X509_CRL *crl))
|
---|
709 | DEPRECATEDIN_1_1_0(ASN1_TIME *X509_CRL_get_nextUpdate(X509_CRL *crl))
|
---|
710 | X509_NAME *X509_CRL_get_issuer(const X509_CRL *crl);
|
---|
711 | const STACK_OF(X509_EXTENSION) *X509_CRL_get0_extensions(const X509_CRL *crl);
|
---|
712 | STACK_OF(X509_REVOKED) *X509_CRL_get_REVOKED(X509_CRL *crl);
|
---|
713 | void X509_CRL_get0_signature(const X509_CRL *crl, const ASN1_BIT_STRING **psig,
|
---|
714 | const X509_ALGOR **palg);
|
---|
715 | int X509_CRL_get_signature_nid(const X509_CRL *crl);
|
---|
716 | int i2d_re_X509_CRL_tbs(X509_CRL *req, unsigned char **pp);
|
---|
717 |
|
---|
718 | const ASN1_INTEGER *X509_REVOKED_get0_serialNumber(const X509_REVOKED *x);
|
---|
719 | int X509_REVOKED_set_serialNumber(X509_REVOKED *x, ASN1_INTEGER *serial);
|
---|
720 | const ASN1_TIME *X509_REVOKED_get0_revocationDate(const X509_REVOKED *x);
|
---|
721 | int X509_REVOKED_set_revocationDate(X509_REVOKED *r, ASN1_TIME *tm);
|
---|
722 | const STACK_OF(X509_EXTENSION) *
|
---|
723 | X509_REVOKED_get0_extensions(const X509_REVOKED *r);
|
---|
724 |
|
---|
725 | X509_CRL *X509_CRL_diff(X509_CRL *base, X509_CRL *newer,
|
---|
726 | EVP_PKEY *skey, const EVP_MD *md, unsigned int flags);
|
---|
727 |
|
---|
728 | int X509_REQ_check_private_key(X509_REQ *x509, EVP_PKEY *pkey);
|
---|
729 |
|
---|
730 | int X509_check_private_key(const X509 *x509, const EVP_PKEY *pkey);
|
---|
731 | int X509_chain_check_suiteb(int *perror_depth,
|
---|
732 | X509 *x, STACK_OF(X509) *chain,
|
---|
733 | unsigned long flags);
|
---|
734 | int X509_CRL_check_suiteb(X509_CRL *crl, EVP_PKEY *pk, unsigned long flags);
|
---|
735 | STACK_OF(X509) *X509_chain_up_ref(STACK_OF(X509) *chain);
|
---|
736 |
|
---|
737 | int X509_issuer_and_serial_cmp(const X509 *a, const X509 *b);
|
---|
738 | unsigned long X509_issuer_and_serial_hash(X509 *a);
|
---|
739 |
|
---|
740 | int X509_issuer_name_cmp(const X509 *a, const X509 *b);
|
---|
741 | unsigned long X509_issuer_name_hash(X509 *a);
|
---|
742 |
|
---|
743 | int X509_subject_name_cmp(const X509 *a, const X509 *b);
|
---|
744 | unsigned long X509_subject_name_hash(X509 *x);
|
---|
745 |
|
---|
746 | # ifndef OPENSSL_NO_MD5
|
---|
747 | unsigned long X509_issuer_name_hash_old(X509 *a);
|
---|
748 | unsigned long X509_subject_name_hash_old(X509 *x);
|
---|
749 | # endif
|
---|
750 |
|
---|
751 | int X509_cmp(const X509 *a, const X509 *b);
|
---|
752 | int X509_NAME_cmp(const X509_NAME *a, const X509_NAME *b);
|
---|
753 | unsigned long X509_NAME_hash(X509_NAME *x);
|
---|
754 | unsigned long X509_NAME_hash_old(X509_NAME *x);
|
---|
755 |
|
---|
756 | int X509_CRL_cmp(const X509_CRL *a, const X509_CRL *b);
|
---|
757 | int X509_CRL_match(const X509_CRL *a, const X509_CRL *b);
|
---|
758 | int X509_aux_print(BIO *out, X509 *x, int indent);
|
---|
759 | # ifndef OPENSSL_NO_STDIO
|
---|
760 | int X509_print_ex_fp(FILE *bp, X509 *x, unsigned long nmflag,
|
---|
761 | unsigned long cflag);
|
---|
762 | int X509_print_fp(FILE *bp, X509 *x);
|
---|
763 | int X509_CRL_print_fp(FILE *bp, X509_CRL *x);
|
---|
764 | int X509_REQ_print_fp(FILE *bp, X509_REQ *req);
|
---|
765 | int X509_NAME_print_ex_fp(FILE *fp, const X509_NAME *nm, int indent,
|
---|
766 | unsigned long flags);
|
---|
767 | # endif
|
---|
768 |
|
---|
769 | int X509_NAME_print(BIO *bp, const X509_NAME *name, int obase);
|
---|
770 | int X509_NAME_print_ex(BIO *out, const X509_NAME *nm, int indent,
|
---|
771 | unsigned long flags);
|
---|
772 | int X509_print_ex(BIO *bp, X509 *x, unsigned long nmflag,
|
---|
773 | unsigned long cflag);
|
---|
774 | int X509_print(BIO *bp, X509 *x);
|
---|
775 | int X509_ocspid_print(BIO *bp, X509 *x);
|
---|
776 | int X509_CRL_print(BIO *bp, X509_CRL *x);
|
---|
777 | int X509_REQ_print_ex(BIO *bp, X509_REQ *x, unsigned long nmflag,
|
---|
778 | unsigned long cflag);
|
---|
779 | int X509_REQ_print(BIO *bp, X509_REQ *req);
|
---|
780 |
|
---|
781 | int X509_NAME_entry_count(const X509_NAME *name);
|
---|
782 | int X509_NAME_get_text_by_NID(X509_NAME *name, int nid, char *buf, int len);
|
---|
783 | int X509_NAME_get_text_by_OBJ(X509_NAME *name, const ASN1_OBJECT *obj,
|
---|
784 | char *buf, int len);
|
---|
785 |
|
---|
786 | /*
|
---|
787 | * NOTE: you should be passing -1, not 0 as lastpos. The functions that use
|
---|
788 | * lastpos, search after that position on.
|
---|
789 | */
|
---|
790 | int X509_NAME_get_index_by_NID(X509_NAME *name, int nid, int lastpos);
|
---|
791 | int X509_NAME_get_index_by_OBJ(X509_NAME *name, const ASN1_OBJECT *obj,
|
---|
792 | int lastpos);
|
---|
793 | X509_NAME_ENTRY *X509_NAME_get_entry(const X509_NAME *name, int loc);
|
---|
794 | X509_NAME_ENTRY *X509_NAME_delete_entry(X509_NAME *name, int loc);
|
---|
795 | int X509_NAME_add_entry(X509_NAME *name, const X509_NAME_ENTRY *ne,
|
---|
796 | int loc, int set);
|
---|
797 | int X509_NAME_add_entry_by_OBJ(X509_NAME *name, const ASN1_OBJECT *obj, int type,
|
---|
798 | const unsigned char *bytes, int len, int loc,
|
---|
799 | int set);
|
---|
800 | int X509_NAME_add_entry_by_NID(X509_NAME *name, int nid, int type,
|
---|
801 | const unsigned char *bytes, int len, int loc,
|
---|
802 | int set);
|
---|
803 | X509_NAME_ENTRY *X509_NAME_ENTRY_create_by_txt(X509_NAME_ENTRY **ne,
|
---|
804 | const char *field, int type,
|
---|
805 | const unsigned char *bytes,
|
---|
806 | int len);
|
---|
807 | X509_NAME_ENTRY *X509_NAME_ENTRY_create_by_NID(X509_NAME_ENTRY **ne, int nid,
|
---|
808 | int type,
|
---|
809 | const unsigned char *bytes,
|
---|
810 | int len);
|
---|
811 | int X509_NAME_add_entry_by_txt(X509_NAME *name, const char *field, int type,
|
---|
812 | const unsigned char *bytes, int len, int loc,
|
---|
813 | int set);
|
---|
814 | X509_NAME_ENTRY *X509_NAME_ENTRY_create_by_OBJ(X509_NAME_ENTRY **ne,
|
---|
815 | const ASN1_OBJECT *obj, int type,
|
---|
816 | const unsigned char *bytes,
|
---|
817 | int len);
|
---|
818 | int X509_NAME_ENTRY_set_object(X509_NAME_ENTRY *ne, const ASN1_OBJECT *obj);
|
---|
819 | int X509_NAME_ENTRY_set_data(X509_NAME_ENTRY *ne, int type,
|
---|
820 | const unsigned char *bytes, int len);
|
---|
821 | ASN1_OBJECT *X509_NAME_ENTRY_get_object(const X509_NAME_ENTRY *ne);
|
---|
822 | ASN1_STRING * X509_NAME_ENTRY_get_data(const X509_NAME_ENTRY *ne);
|
---|
823 | int X509_NAME_ENTRY_set(const X509_NAME_ENTRY *ne);
|
---|
824 |
|
---|
825 | int X509_NAME_get0_der(X509_NAME *nm, const unsigned char **pder,
|
---|
826 | size_t *pderlen);
|
---|
827 |
|
---|
828 | int X509v3_get_ext_count(const STACK_OF(X509_EXTENSION) *x);
|
---|
829 | int X509v3_get_ext_by_NID(const STACK_OF(X509_EXTENSION) *x,
|
---|
830 | int nid, int lastpos);
|
---|
831 | int X509v3_get_ext_by_OBJ(const STACK_OF(X509_EXTENSION) *x,
|
---|
832 | const ASN1_OBJECT *obj, int lastpos);
|
---|
833 | int X509v3_get_ext_by_critical(const STACK_OF(X509_EXTENSION) *x,
|
---|
834 | int crit, int lastpos);
|
---|
835 | X509_EXTENSION *X509v3_get_ext(const STACK_OF(X509_EXTENSION) *x, int loc);
|
---|
836 | X509_EXTENSION *X509v3_delete_ext(STACK_OF(X509_EXTENSION) *x, int loc);
|
---|
837 | STACK_OF(X509_EXTENSION) *X509v3_add_ext(STACK_OF(X509_EXTENSION) **x,
|
---|
838 | X509_EXTENSION *ex, int loc);
|
---|
839 |
|
---|
840 | int X509_get_ext_count(const X509 *x);
|
---|
841 | int X509_get_ext_by_NID(const X509 *x, int nid, int lastpos);
|
---|
842 | int X509_get_ext_by_OBJ(const X509 *x, const ASN1_OBJECT *obj, int lastpos);
|
---|
843 | int X509_get_ext_by_critical(const X509 *x, int crit, int lastpos);
|
---|
844 | X509_EXTENSION *X509_get_ext(const X509 *x, int loc);
|
---|
845 | X509_EXTENSION *X509_delete_ext(X509 *x, int loc);
|
---|
846 | int X509_add_ext(X509 *x, X509_EXTENSION *ex, int loc);
|
---|
847 | void *X509_get_ext_d2i(const X509 *x, int nid, int *crit, int *idx);
|
---|
848 | int X509_add1_ext_i2d(X509 *x, int nid, void *value, int crit,
|
---|
849 | unsigned long flags);
|
---|
850 |
|
---|
851 | int X509_CRL_get_ext_count(const X509_CRL *x);
|
---|
852 | int X509_CRL_get_ext_by_NID(const X509_CRL *x, int nid, int lastpos);
|
---|
853 | int X509_CRL_get_ext_by_OBJ(const X509_CRL *x, const ASN1_OBJECT *obj,
|
---|
854 | int lastpos);
|
---|
855 | int X509_CRL_get_ext_by_critical(const X509_CRL *x, int crit, int lastpos);
|
---|
856 | X509_EXTENSION *X509_CRL_get_ext(const X509_CRL *x, int loc);
|
---|
857 | X509_EXTENSION *X509_CRL_delete_ext(X509_CRL *x, int loc);
|
---|
858 | int X509_CRL_add_ext(X509_CRL *x, X509_EXTENSION *ex, int loc);
|
---|
859 | void *X509_CRL_get_ext_d2i(const X509_CRL *x, int nid, int *crit, int *idx);
|
---|
860 | int X509_CRL_add1_ext_i2d(X509_CRL *x, int nid, void *value, int crit,
|
---|
861 | unsigned long flags);
|
---|
862 |
|
---|
863 | int X509_REVOKED_get_ext_count(const X509_REVOKED *x);
|
---|
864 | int X509_REVOKED_get_ext_by_NID(const X509_REVOKED *x, int nid, int lastpos);
|
---|
865 | int X509_REVOKED_get_ext_by_OBJ(const X509_REVOKED *x, const ASN1_OBJECT *obj,
|
---|
866 | int lastpos);
|
---|
867 | int X509_REVOKED_get_ext_by_critical(const X509_REVOKED *x, int crit,
|
---|
868 | int lastpos);
|
---|
869 | X509_EXTENSION *X509_REVOKED_get_ext(const X509_REVOKED *x, int loc);
|
---|
870 | X509_EXTENSION *X509_REVOKED_delete_ext(X509_REVOKED *x, int loc);
|
---|
871 | int X509_REVOKED_add_ext(X509_REVOKED *x, X509_EXTENSION *ex, int loc);
|
---|
872 | void *X509_REVOKED_get_ext_d2i(const X509_REVOKED *x, int nid, int *crit,
|
---|
873 | int *idx);
|
---|
874 | int X509_REVOKED_add1_ext_i2d(X509_REVOKED *x, int nid, void *value, int crit,
|
---|
875 | unsigned long flags);
|
---|
876 |
|
---|
877 | X509_EXTENSION *X509_EXTENSION_create_by_NID(X509_EXTENSION **ex,
|
---|
878 | int nid, int crit,
|
---|
879 | ASN1_OCTET_STRING *data);
|
---|
880 | X509_EXTENSION *X509_EXTENSION_create_by_OBJ(X509_EXTENSION **ex,
|
---|
881 | const ASN1_OBJECT *obj, int crit,
|
---|
882 | ASN1_OCTET_STRING *data);
|
---|
883 | int X509_EXTENSION_set_object(X509_EXTENSION *ex, const ASN1_OBJECT *obj);
|
---|
884 | int X509_EXTENSION_set_critical(X509_EXTENSION *ex, int crit);
|
---|
885 | int X509_EXTENSION_set_data(X509_EXTENSION *ex, ASN1_OCTET_STRING *data);
|
---|
886 | ASN1_OBJECT *X509_EXTENSION_get_object(X509_EXTENSION *ex);
|
---|
887 | ASN1_OCTET_STRING *X509_EXTENSION_get_data(X509_EXTENSION *ne);
|
---|
888 | int X509_EXTENSION_get_critical(const X509_EXTENSION *ex);
|
---|
889 |
|
---|
890 | int X509at_get_attr_count(const STACK_OF(X509_ATTRIBUTE) *x);
|
---|
891 | int X509at_get_attr_by_NID(const STACK_OF(X509_ATTRIBUTE) *x, int nid,
|
---|
892 | int lastpos);
|
---|
893 | int X509at_get_attr_by_OBJ(const STACK_OF(X509_ATTRIBUTE) *sk,
|
---|
894 | const ASN1_OBJECT *obj, int lastpos);
|
---|
895 | X509_ATTRIBUTE *X509at_get_attr(const STACK_OF(X509_ATTRIBUTE) *x, int loc);
|
---|
896 | X509_ATTRIBUTE *X509at_delete_attr(STACK_OF(X509_ATTRIBUTE) *x, int loc);
|
---|
897 | STACK_OF(X509_ATTRIBUTE) *X509at_add1_attr(STACK_OF(X509_ATTRIBUTE) **x,
|
---|
898 | X509_ATTRIBUTE *attr);
|
---|
899 | STACK_OF(X509_ATTRIBUTE) *X509at_add1_attr_by_OBJ(STACK_OF(X509_ATTRIBUTE)
|
---|
900 | **x, const ASN1_OBJECT *obj,
|
---|
901 | int type,
|
---|
902 | const unsigned char *bytes,
|
---|
903 | int len);
|
---|
904 | STACK_OF(X509_ATTRIBUTE) *X509at_add1_attr_by_NID(STACK_OF(X509_ATTRIBUTE)
|
---|
905 | **x, int nid, int type,
|
---|
906 | const unsigned char *bytes,
|
---|
907 | int len);
|
---|
908 | STACK_OF(X509_ATTRIBUTE) *X509at_add1_attr_by_txt(STACK_OF(X509_ATTRIBUTE)
|
---|
909 | **x, const char *attrname,
|
---|
910 | int type,
|
---|
911 | const unsigned char *bytes,
|
---|
912 | int len);
|
---|
913 | void *X509at_get0_data_by_OBJ(STACK_OF(X509_ATTRIBUTE) *x,
|
---|
914 | const ASN1_OBJECT *obj, int lastpos, int type);
|
---|
915 | X509_ATTRIBUTE *X509_ATTRIBUTE_create_by_NID(X509_ATTRIBUTE **attr, int nid,
|
---|
916 | int atrtype, const void *data,
|
---|
917 | int len);
|
---|
918 | X509_ATTRIBUTE *X509_ATTRIBUTE_create_by_OBJ(X509_ATTRIBUTE **attr,
|
---|
919 | const ASN1_OBJECT *obj,
|
---|
920 | int atrtype, const void *data,
|
---|
921 | int len);
|
---|
922 | X509_ATTRIBUTE *X509_ATTRIBUTE_create_by_txt(X509_ATTRIBUTE **attr,
|
---|
923 | const char *atrname, int type,
|
---|
924 | const unsigned char *bytes,
|
---|
925 | int len);
|
---|
926 | int X509_ATTRIBUTE_set1_object(X509_ATTRIBUTE *attr, const ASN1_OBJECT *obj);
|
---|
927 | int X509_ATTRIBUTE_set1_data(X509_ATTRIBUTE *attr, int attrtype,
|
---|
928 | const void *data, int len);
|
---|
929 | void *X509_ATTRIBUTE_get0_data(X509_ATTRIBUTE *attr, int idx, int atrtype,
|
---|
930 | void *data);
|
---|
931 | int X509_ATTRIBUTE_count(const X509_ATTRIBUTE *attr);
|
---|
932 | ASN1_OBJECT *X509_ATTRIBUTE_get0_object(X509_ATTRIBUTE *attr);
|
---|
933 | ASN1_TYPE *X509_ATTRIBUTE_get0_type(X509_ATTRIBUTE *attr, int idx);
|
---|
934 |
|
---|
935 | int EVP_PKEY_get_attr_count(const EVP_PKEY *key);
|
---|
936 | int EVP_PKEY_get_attr_by_NID(const EVP_PKEY *key, int nid, int lastpos);
|
---|
937 | int EVP_PKEY_get_attr_by_OBJ(const EVP_PKEY *key, const ASN1_OBJECT *obj,
|
---|
938 | int lastpos);
|
---|
939 | X509_ATTRIBUTE *EVP_PKEY_get_attr(const EVP_PKEY *key, int loc);
|
---|
940 | X509_ATTRIBUTE *EVP_PKEY_delete_attr(EVP_PKEY *key, int loc);
|
---|
941 | int EVP_PKEY_add1_attr(EVP_PKEY *key, X509_ATTRIBUTE *attr);
|
---|
942 | int EVP_PKEY_add1_attr_by_OBJ(EVP_PKEY *key,
|
---|
943 | const ASN1_OBJECT *obj, int type,
|
---|
944 | const unsigned char *bytes, int len);
|
---|
945 | int EVP_PKEY_add1_attr_by_NID(EVP_PKEY *key,
|
---|
946 | int nid, int type,
|
---|
947 | const unsigned char *bytes, int len);
|
---|
948 | int EVP_PKEY_add1_attr_by_txt(EVP_PKEY *key,
|
---|
949 | const char *attrname, int type,
|
---|
950 | const unsigned char *bytes, int len);
|
---|
951 |
|
---|
952 | int X509_verify_cert(X509_STORE_CTX *ctx);
|
---|
953 |
|
---|
954 | /* lookup a cert from a X509 STACK */
|
---|
955 | X509 *X509_find_by_issuer_and_serial(STACK_OF(X509) *sk, X509_NAME *name,
|
---|
956 | ASN1_INTEGER *serial);
|
---|
957 | X509 *X509_find_by_subject(STACK_OF(X509) *sk, X509_NAME *name);
|
---|
958 |
|
---|
959 | DECLARE_ASN1_FUNCTIONS(PBEPARAM)
|
---|
960 | DECLARE_ASN1_FUNCTIONS(PBE2PARAM)
|
---|
961 | DECLARE_ASN1_FUNCTIONS(PBKDF2PARAM)
|
---|
962 |
|
---|
963 | int PKCS5_pbe_set0_algor(X509_ALGOR *algor, int alg, int iter,
|
---|
964 | const unsigned char *salt, int saltlen);
|
---|
965 |
|
---|
966 | X509_ALGOR *PKCS5_pbe_set(int alg, int iter,
|
---|
967 | const unsigned char *salt, int saltlen);
|
---|
968 | X509_ALGOR *PKCS5_pbe2_set(const EVP_CIPHER *cipher, int iter,
|
---|
969 | unsigned char *salt, int saltlen);
|
---|
970 | X509_ALGOR *PKCS5_pbe2_set_iv(const EVP_CIPHER *cipher, int iter,
|
---|
971 | unsigned char *salt, int saltlen,
|
---|
972 | unsigned char *aiv, int prf_nid);
|
---|
973 |
|
---|
974 | #ifndef OPENSSL_NO_SCRYPT
|
---|
975 | X509_ALGOR *PKCS5_pbe2_set_scrypt(const EVP_CIPHER *cipher,
|
---|
976 | const unsigned char *salt, int saltlen,
|
---|
977 | unsigned char *aiv, uint64_t N, uint64_t r,
|
---|
978 | uint64_t p);
|
---|
979 | #endif
|
---|
980 |
|
---|
981 | X509_ALGOR *PKCS5_pbkdf2_set(int iter, unsigned char *salt, int saltlen,
|
---|
982 | int prf_nid, int keylen);
|
---|
983 |
|
---|
984 | /* PKCS#8 utilities */
|
---|
985 |
|
---|
986 | DECLARE_ASN1_FUNCTIONS(PKCS8_PRIV_KEY_INFO)
|
---|
987 |
|
---|
988 | EVP_PKEY *EVP_PKCS82PKEY(const PKCS8_PRIV_KEY_INFO *p8);
|
---|
989 | PKCS8_PRIV_KEY_INFO *EVP_PKEY2PKCS8(EVP_PKEY *pkey);
|
---|
990 |
|
---|
991 | int PKCS8_pkey_set0(PKCS8_PRIV_KEY_INFO *priv, ASN1_OBJECT *aobj,
|
---|
992 | int version, int ptype, void *pval,
|
---|
993 | unsigned char *penc, int penclen);
|
---|
994 | int PKCS8_pkey_get0(const ASN1_OBJECT **ppkalg,
|
---|
995 | const unsigned char **pk, int *ppklen,
|
---|
996 | const X509_ALGOR **pa, const PKCS8_PRIV_KEY_INFO *p8);
|
---|
997 |
|
---|
998 | const STACK_OF(X509_ATTRIBUTE) *
|
---|
999 | PKCS8_pkey_get0_attrs(const PKCS8_PRIV_KEY_INFO *p8);
|
---|
1000 | int PKCS8_pkey_add1_attr_by_NID(PKCS8_PRIV_KEY_INFO *p8, int nid, int type,
|
---|
1001 | const unsigned char *bytes, int len);
|
---|
1002 |
|
---|
1003 | int X509_PUBKEY_set0_param(X509_PUBKEY *pub, ASN1_OBJECT *aobj,
|
---|
1004 | int ptype, void *pval,
|
---|
1005 | unsigned char *penc, int penclen);
|
---|
1006 | int X509_PUBKEY_get0_param(ASN1_OBJECT **ppkalg,
|
---|
1007 | const unsigned char **pk, int *ppklen,
|
---|
1008 | X509_ALGOR **pa, X509_PUBKEY *pub);
|
---|
1009 |
|
---|
1010 | int X509_check_trust(X509 *x, int id, int flags);
|
---|
1011 | int X509_TRUST_get_count(void);
|
---|
1012 | X509_TRUST *X509_TRUST_get0(int idx);
|
---|
1013 | int X509_TRUST_get_by_id(int id);
|
---|
1014 | int X509_TRUST_add(int id, int flags, int (*ck) (X509_TRUST *, X509 *, int),
|
---|
1015 | const char *name, int arg1, void *arg2);
|
---|
1016 | void X509_TRUST_cleanup(void);
|
---|
1017 | int X509_TRUST_get_flags(const X509_TRUST *xp);
|
---|
1018 | char *X509_TRUST_get0_name(const X509_TRUST *xp);
|
---|
1019 | int X509_TRUST_get_trust(const X509_TRUST *xp);
|
---|
1020 |
|
---|
1021 | /* BEGIN ERROR CODES */
|
---|
1022 | /*
|
---|
1023 | * The following lines are auto generated by the script mkerr.pl. Any changes
|
---|
1024 | * made after this point may be overwritten when the script is next run.
|
---|
1025 | */
|
---|
1026 |
|
---|
1027 | int ERR_load_X509_strings(void);
|
---|
1028 |
|
---|
1029 | /* Error codes for the X509 functions. */
|
---|
1030 |
|
---|
1031 | /* Function codes. */
|
---|
1032 | # define X509_F_ADD_CERT_DIR 100
|
---|
1033 | # define X509_F_BUILD_CHAIN 106
|
---|
1034 | # define X509_F_BY_FILE_CTRL 101
|
---|
1035 | # define X509_F_CHECK_NAME_CONSTRAINTS 149
|
---|
1036 | # define X509_F_CHECK_POLICY 145
|
---|
1037 | # define X509_F_DANE_I2D 107
|
---|
1038 | # define X509_F_DIR_CTRL 102
|
---|
1039 | # define X509_F_GET_CERT_BY_SUBJECT 103
|
---|
1040 | # define X509_F_NETSCAPE_SPKI_B64_DECODE 129
|
---|
1041 | # define X509_F_NETSCAPE_SPKI_B64_ENCODE 130
|
---|
1042 | # define X509_F_X509AT_ADD1_ATTR 135
|
---|
1043 | # define X509_F_X509V3_ADD_EXT 104
|
---|
1044 | # define X509_F_X509_ATTRIBUTE_CREATE_BY_NID 136
|
---|
1045 | # define X509_F_X509_ATTRIBUTE_CREATE_BY_OBJ 137
|
---|
1046 | # define X509_F_X509_ATTRIBUTE_CREATE_BY_TXT 140
|
---|
1047 | # define X509_F_X509_ATTRIBUTE_GET0_DATA 139
|
---|
1048 | # define X509_F_X509_ATTRIBUTE_SET1_DATA 138
|
---|
1049 | # define X509_F_X509_CHECK_PRIVATE_KEY 128
|
---|
1050 | # define X509_F_X509_CRL_DIFF 105
|
---|
1051 | # define X509_F_X509_CRL_PRINT_FP 147
|
---|
1052 | # define X509_F_X509_EXTENSION_CREATE_BY_NID 108
|
---|
1053 | # define X509_F_X509_EXTENSION_CREATE_BY_OBJ 109
|
---|
1054 | # define X509_F_X509_GET_PUBKEY_PARAMETERS 110
|
---|
1055 | # define X509_F_X509_LOAD_CERT_CRL_FILE 132
|
---|
1056 | # define X509_F_X509_LOAD_CERT_FILE 111
|
---|
1057 | # define X509_F_X509_LOAD_CRL_FILE 112
|
---|
1058 | # define X509_F_X509_NAME_ADD_ENTRY 113
|
---|
1059 | # define X509_F_X509_NAME_ENTRY_CREATE_BY_NID 114
|
---|
1060 | # define X509_F_X509_NAME_ENTRY_CREATE_BY_TXT 131
|
---|
1061 | # define X509_F_X509_NAME_ENTRY_SET_OBJECT 115
|
---|
1062 | # define X509_F_X509_NAME_ONELINE 116
|
---|
1063 | # define X509_F_X509_NAME_PRINT 117
|
---|
1064 | # define X509_F_X509_OBJECT_NEW 150
|
---|
1065 | # define X509_F_X509_PRINT_EX_FP 118
|
---|
1066 | # define X509_F_X509_PUBKEY_DECODE 148
|
---|
1067 | # define X509_F_X509_PUBKEY_GET0 119
|
---|
1068 | # define X509_F_X509_PUBKEY_SET 120
|
---|
1069 | # define X509_F_X509_REQ_CHECK_PRIVATE_KEY 144
|
---|
1070 | # define X509_F_X509_REQ_PRINT_EX 121
|
---|
1071 | # define X509_F_X509_REQ_PRINT_FP 122
|
---|
1072 | # define X509_F_X509_REQ_TO_X509 123
|
---|
1073 | # define X509_F_X509_STORE_ADD_CERT 124
|
---|
1074 | # define X509_F_X509_STORE_ADD_CRL 125
|
---|
1075 | # define X509_F_X509_STORE_CTX_GET1_ISSUER 146
|
---|
1076 | # define X509_F_X509_STORE_CTX_INIT 143
|
---|
1077 | # define X509_F_X509_STORE_CTX_NEW 142
|
---|
1078 | # define X509_F_X509_STORE_CTX_PURPOSE_INHERIT 134
|
---|
1079 | # define X509_F_X509_TO_X509_REQ 126
|
---|
1080 | # define X509_F_X509_TRUST_ADD 133
|
---|
1081 | # define X509_F_X509_TRUST_SET 141
|
---|
1082 | # define X509_F_X509_VERIFY_CERT 127
|
---|
1083 |
|
---|
1084 | /* Reason codes. */
|
---|
1085 | # define X509_R_AKID_MISMATCH 110
|
---|
1086 | # define X509_R_BAD_SELECTOR 133
|
---|
1087 | # define X509_R_BAD_X509_FILETYPE 100
|
---|
1088 | # define X509_R_BASE64_DECODE_ERROR 118
|
---|
1089 | # define X509_R_CANT_CHECK_DH_KEY 114
|
---|
1090 | # define X509_R_CERT_ALREADY_IN_HASH_TABLE 101
|
---|
1091 | # define X509_R_CRL_ALREADY_DELTA 127
|
---|
1092 | # define X509_R_CRL_VERIFY_FAILURE 131
|
---|
1093 | # define X509_R_IDP_MISMATCH 128
|
---|
1094 | # define X509_R_INVALID_DIRECTORY 113
|
---|
1095 | # define X509_R_INVALID_FIELD_NAME 119
|
---|
1096 | # define X509_R_INVALID_TRUST 123
|
---|
1097 | # define X509_R_ISSUER_MISMATCH 129
|
---|
1098 | # define X509_R_KEY_TYPE_MISMATCH 115
|
---|
1099 | # define X509_R_KEY_VALUES_MISMATCH 116
|
---|
1100 | # define X509_R_LOADING_CERT_DIR 103
|
---|
1101 | # define X509_R_LOADING_DEFAULTS 104
|
---|
1102 | # define X509_R_METHOD_NOT_SUPPORTED 124
|
---|
1103 | # define X509_R_NAME_TOO_LONG 134
|
---|
1104 | # define X509_R_NEWER_CRL_NOT_NEWER 132
|
---|
1105 | # define X509_R_NO_CERT_SET_FOR_US_TO_VERIFY 105
|
---|
1106 | # define X509_R_NO_CRL_NUMBER 130
|
---|
1107 | # define X509_R_PUBLIC_KEY_DECODE_ERROR 125
|
---|
1108 | # define X509_R_PUBLIC_KEY_ENCODE_ERROR 126
|
---|
1109 | # define X509_R_SHOULD_RETRY 106
|
---|
1110 | # define X509_R_UNABLE_TO_FIND_PARAMETERS_IN_CHAIN 107
|
---|
1111 | # define X509_R_UNABLE_TO_GET_CERTS_PUBLIC_KEY 108
|
---|
1112 | # define X509_R_UNKNOWN_KEY_TYPE 117
|
---|
1113 | # define X509_R_UNKNOWN_NID 109
|
---|
1114 | # define X509_R_UNKNOWN_PURPOSE_ID 121
|
---|
1115 | # define X509_R_UNKNOWN_TRUST_ID 120
|
---|
1116 | # define X509_R_UNSUPPORTED_ALGORITHM 111
|
---|
1117 | # define X509_R_WRONG_LOOKUP_TYPE 112
|
---|
1118 | # define X509_R_WRONG_TYPE 122
|
---|
1119 |
|
---|
1120 | # ifdef __cplusplus
|
---|
1121 | }
|
---|
1122 | # endif
|
---|
1123 | #endif
|
---|