release/src/router/openvpn/pkcs11.h

   1 /*
   2  *  OpenVPN -- An application to securely tunnel IP networks
   3  *             over a single TCP/UDP port, with support for SSL/TLS-based
   4  *             session authentication and key exchange,
   5  *             packet encryption, packet authentication, and
   6  *             packet compression.
   7  *
   8  *  Copyright (C) 2002-2009 OpenVPN Technologies, Inc. <sales@openvpn.net>
   9  *
  10  *  This program is free software; you can redistribute it and/or modify
  11  *  it under the terms of the GNU General Public License version 2
  12  *  as published by the Free Software Foundation.
  13  *
  14  *  This program is distributed in the hope that it will be useful,
  15  *  but WITHOUT ANY WARRANTY; without even the implied warranty of
  16  *  MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
  17  *  GNU General Public License for more details.
  18  *
  19  *  You should have received a copy of the GNU General Public License
  20  *  along with this program (see the file COPYING included with this
  21  *  distribution); if not, write to the Free Software Foundation, Inc.,
  22  *  59 Temple Place, Suite 330, Boston, MA  02111-1307  USA
  23  */
  24
  25 #ifndef OPENVPN_PKCS11_H
  26 #define OPENVPN_PKCS11_H
  27
  28 #if defined(ENABLE_PKCS11)
  29
  30 #include <openssl/ssl.h>
  31
  32 bool
  33 pkcs11_initialize (
  34         const bool fProtectedAuthentication,
  35         const int nPINCachePeriod
  36 );
  37
  38 void
  39 pkcs11_terminate ();
  40
  41 void
  42 pkcs11_forkFixup ();
  43
  44 bool
  45 pkcs11_addProvider (
  46         const char * const provider,
  47         const bool fProtectedAuthentication,
  48         const unsigned private_mode,
  49         const bool fCertIsPrivate
  50 );
  51
  52 int
  53 pkcs11_logout();
  54
  55 int
  56 pkcs11_management_id_count ();
  57
  58 bool
  59 pkcs11_management_id_get (
  60         const int index,
  61         char ** id,
  62         char **base64
  63 );
  64
  65 int
  66 SSL_CTX_use_pkcs11 (
  67         SSL_CTX * const ssl_ctx,
  68         bool pkcs11_id_management,
  69         const char * const pkcs11_id
  70 );
  71
  72 void
  73 show_pkcs11_ids (
  74         const char * const provider,
  75         bool cert_private
  76 );
  77
  78 #endif                  /* ENABLE_PKCS11 */
  79
  80 #endif                  /* OPENVPN_PKCS11H_H */