2 * Copyright (c) 2004 - 2007 Kungliga Tekniska Högskolan
3 * (Royal Institute of Technology, Stockholm, Sweden).
6 * Redistribution and use in source and binary forms, with or without
7 * modification, are permitted provided that the following conditions
10 * 1. Redistributions of source code must retain the above copyright
11 * notice, this list of conditions and the following disclaimer.
13 * 2. Redistributions in binary form must reproduce the above copyright
14 * notice, this list of conditions and the following disclaimer in the
15 * documentation and/or other materials provided with the distribution.
17 * 3. Neither the name of the Institute nor the names of its contributors
18 * may be used to endorse or promote products derived from this software
19 * without specific prior written permission.
21 * THIS SOFTWARE IS PROVIDED BY THE INSTITUTE AND CONTRIBUTORS ``AS IS'' AND
22 * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
23 * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
24 * ARE DISCLAIMED. IN NO EVENT SHALL THE INSTITUTE OR CONTRIBUTORS BE LIABLE
25 * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
26 * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
27 * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
28 * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
29 * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
30 * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
36 #ifndef HEIMDAL_HX509_H
37 #define HEIMDAL_HX509_H 1
39 #include <rfc2459_asn1.h>
44 typedef struct hx509_cert_attribute_data
*hx509_cert_attribute
;
45 typedef struct hx509_cert_data
*hx509_cert
;
46 typedef struct hx509_certs_data
*hx509_certs
;
47 typedef struct hx509_context_data
*hx509_context
;
48 typedef struct hx509_crypto_data
*hx509_crypto
;
49 typedef struct hx509_lock_data
*hx509_lock
;
50 typedef struct hx509_name_data
*hx509_name
;
51 typedef struct hx509_private_key
*hx509_private_key
;
52 typedef struct hx509_private_key_ops hx509_private_key_ops
;
53 typedef struct hx509_validate_ctx_data
*hx509_validate_ctx
;
54 typedef struct hx509_verify_ctx_data
*hx509_verify_ctx
;
55 typedef struct hx509_revoke_ctx_data
*hx509_revoke_ctx
;
56 typedef struct hx509_query_data hx509_query
;
57 typedef void * hx509_cursor
;
58 typedef struct hx509_request_data
*hx509_request
;
59 typedef struct hx509_error_data
*hx509_error
;
60 typedef struct hx509_peer_info
*hx509_peer_info
;
61 typedef struct hx509_ca_tbs
*hx509_ca_tbs
;
62 typedef struct hx509_env_data
*hx509_env
;
63 typedef struct hx509_crl
*hx509_crl
;
65 typedef void (*hx509_vprint_func
)(void *, const char *, va_list);
68 HX509_VHN_F_ALLOW_NO_MATCH
= 1
72 HX509_VALIDATE_F_VALIDATE
= 1,
73 HX509_VALIDATE_F_VERBOSE
= 2
77 HX509_CRYPTO_PADDING_PKCS7
= 0,
78 HX509_CRYPTO_PADDING_NONE
= 1
82 HX509_KEY_FORMAT_GUESS
= 0,
83 HX509_KEY_FORMAT_DER
= 1,
84 HX509_KEY_FORMAT_WIN_BACKUPKEY
= 2
86 typedef uint32_t hx509_key_format_t
;
88 struct hx509_cert_attribute_data
{
90 heim_octet_string data
;
94 HX509_PROMPT_TYPE_PASSWORD
= 0x1, /* password, hidden */
95 HX509_PROMPT_TYPE_QUESTION
= 0x2, /* question, not hidden */
96 HX509_PROMPT_TYPE_INFO
= 0x4 /* infomation, reply doesn't matter */
99 typedef struct hx509_prompt
{
101 hx509_prompt_type type
;
102 heim_octet_string reply
;
105 typedef int (*hx509_prompter_fct
)(void *, const hx509_prompt
*);
107 typedef struct hx509_octet_string_list
{
109 heim_octet_string
*val
;
110 } hx509_octet_string_list
;
112 typedef struct hx509_pem_header
{
113 struct hx509_pem_header
*next
;
119 (*hx509_pem_read_func
)(hx509_context
, const char *, const hx509_pem_header
*,
120 const void *, size_t, void *ctx
);
123 * Options passed to hx509_query_match_option.
126 HX509_QUERY_OPTION_PRIVATE_KEY
= 1,
127 HX509_QUERY_OPTION_KU_ENCIPHERMENT
= 2,
128 HX509_QUERY_OPTION_KU_DIGITALSIGNATURE
= 3,
129 HX509_QUERY_OPTION_KU_KEYCERTSIGN
= 4,
130 HX509_QUERY_OPTION_END
= 0xffff
131 } hx509_query_option
;
133 /* flags to hx509_certs_init */
134 #define HX509_CERTS_CREATE 0x01
135 #define HX509_CERTS_UNPROTECT_ALL 0x02
137 /* flags to hx509_set_error_string */
138 #define HX509_ERROR_APPEND 0x01
140 /* flags to hx509_cms_unenvelope */
141 #define HX509_CMS_UE_DONT_REQUIRE_KU_ENCIPHERMENT 0x01
142 #define HX509_CMS_UE_ALLOW_WEAK 0x02
144 /* flags to hx509_cms_envelope_1 */
145 #define HX509_CMS_EV_NO_KU_CHECK 0x01
146 #define HX509_CMS_EV_ALLOW_WEAK 0x02
147 #define HX509_CMS_EV_ID_NAME 0x04
149 /* flags to hx509_cms_verify_signed */
150 #define HX509_CMS_VS_ALLOW_DATA_OID_MISMATCH 0x01
151 #define HX509_CMS_VS_NO_KU_CHECK 0x02
152 #define HX509_CMS_VS_ALLOW_ZERO_SIGNER 0x04
153 #define HX509_CMS_VS_NO_VALIDATE 0x08
155 /* selectors passed to hx509_crypto_select and hx509_crypto_available */
156 #define HX509_SELECT_ALL 0
157 #define HX509_SELECT_DIGEST 1
158 #define HX509_SELECT_PUBLIC_SIG 2
159 #define HX509_SELECT_PUBLIC_ENC 3
160 #define HX509_SELECT_SECRET_ENC 4
162 /* flags to hx509_ca_tbs_set_template */
163 #define HX509_CA_TEMPLATE_SUBJECT 1
164 #define HX509_CA_TEMPLATE_SERIAL 2
165 #define HX509_CA_TEMPLATE_NOTBEFORE 4
166 #define HX509_CA_TEMPLATE_NOTAFTER 8
167 #define HX509_CA_TEMPLATE_SPKI 16
168 #define HX509_CA_TEMPLATE_KU 32
169 #define HX509_CA_TEMPLATE_EKU 64
171 /* flags hx509_cms_create_signed* */
172 #define HX509_CMS_SIGNATURE_DETACHED 0x01
173 #define HX509_CMS_SIGNATURE_ID_NAME 0x02
174 #define HX509_CMS_SIGNATURE_NO_SIGNER 0x04
175 #define HX509_CMS_SIGNATURE_LEAF_ONLY 0x08
176 #define HX509_CMS_SIGNATURE_NO_CERTS 0x10
178 /* hx509_verify_hostname nametype */
180 HX509_HN_HOSTNAME
= 0,
182 } hx509_hostname_type
;
184 #include <hx509-protos.h>
185 #include <hx509_err.h>
187 #endif /* HEIMDAL_HX509_H */