x509_crt.h

Go to the documentation of this file.

 
#ifndef POLARSSL_X509_CRT_H
#define POLARSSL_X509_CRT_H
 
#if !defined(POLARSSL_CONFIG_FILE)
#include "config.h"
#else
#include POLARSSL_CONFIG_FILE
#endif
 
#include "x509.h"
 
#include "x509_crl.h"
 
#ifdef __cplusplus
extern "C" {
#endif
 
typedef struct _x509_crt
{
    x509_buf raw;               
    x509_buf tbs;               
    int version;                
    x509_buf serial;            
    x509_buf sig_oid1;          
    x509_buf issuer_raw;        
    x509_buf subject_raw;       
    x509_name issuer;           
    x509_name subject;          
    x509_time valid_from;       
    x509_time valid_to;         
    pk_context pk;              
    x509_buf issuer_id;         
    x509_buf subject_id;        
    x509_buf v3_ext;            
    x509_sequence subject_alt_names;    
    int ext_types;              
    int ca_istrue;              
    int max_pathlen;            
    unsigned char key_usage;    
    x509_sequence ext_key_usage; 
    unsigned char ns_cert_type; 
    x509_buf sig_oid2;          
    x509_buf sig;               
    md_type_t sig_md;           
    pk_type_t sig_pk;           
    void *sig_opts;             
    struct _x509_crt *next;     
}
x509_crt;
 
#define X509_CRT_VERSION_1              0
#define X509_CRT_VERSION_2              1
#define X509_CRT_VERSION_3              2
 
#define X509_RFC5280_MAX_SERIAL_LEN 32
#define X509_RFC5280_UTC_TIME_LEN   15
 
typedef struct _x509write_cert
{
    int version;
    mpi serial;
    pk_context *subject_key;
    pk_context *issuer_key;
    asn1_named_data *subject;
    asn1_named_data *issuer;
    md_type_t md_alg;
    char not_before[X509_RFC5280_UTC_TIME_LEN + 1];
    char not_after[X509_RFC5280_UTC_TIME_LEN + 1];
    asn1_named_data *extensions;
}
x509write_cert;
 
#if defined(POLARSSL_X509_CRT_PARSE_C)
int x509_crt_parse_der( x509_crt *chain, const unsigned char *buf,
                        size_t buflen );
 
int x509_crt_parse( x509_crt *chain, const unsigned char *buf, size_t buflen );
 
#if defined(POLARSSL_FS_IO)
int x509_crt_parse_file( x509_crt *chain, const char *path );
 
int x509_crt_parse_path( x509_crt *chain, const char *path );
#endif /* POLARSSL_FS_IO */
 
int x509_crt_info( char *buf, size_t size, const char *prefix,
                   const x509_crt *crt );
 
int x509_crt_verify( x509_crt *crt,
                     x509_crt *trust_ca,
                     x509_crl *ca_crl,
                     const char *cn, int *flags,
                     int (*f_vrfy)(void *, x509_crt *, int, int *),
                     void *p_vrfy );
 
#if defined(POLARSSL_X509_CHECK_KEY_USAGE)
int x509_crt_check_key_usage( const x509_crt *crt, int usage );
#endif /* POLARSSL_X509_CHECK_KEY_USAGE) */
 
#if defined(POLARSSL_X509_CHECK_EXTENDED_KEY_USAGE)
int x509_crt_check_extended_key_usage( const x509_crt *crt,
                                       const char *usage_oid,
                                       size_t usage_len );
#endif /* POLARSSL_X509_CHECK_EXTENDED_KEY_USAGE) */
 
#if defined(POLARSSL_X509_CRL_PARSE_C)
int x509_crt_revoked( const x509_crt *crt, const x509_crl *crl );
#endif /* POLARSSL_X509_CRL_PARSE_C */
 
void x509_crt_init( x509_crt *crt );
 
void x509_crt_free( x509_crt *crt );
#endif /* POLARSSL_X509_CRT_PARSE_C */
 
/* \} name */
/* \} addtogroup x509_module */
 
#if defined(POLARSSL_X509_CRT_WRITE_C)
void x509write_crt_init( x509write_cert *ctx );
 
void x509write_crt_set_version( x509write_cert *ctx, int version );
 
int x509write_crt_set_serial( x509write_cert *ctx, const mpi *serial );
 
int x509write_crt_set_validity( x509write_cert *ctx, const char *not_before,
                                const char *not_after );
 
int x509write_crt_set_issuer_name( x509write_cert *ctx,
                                   const char *issuer_name );
 
int x509write_crt_set_subject_name( x509write_cert *ctx,
                                    const char *subject_name );
 
void x509write_crt_set_subject_key( x509write_cert *ctx, pk_context *key );
 
void x509write_crt_set_issuer_key( x509write_cert *ctx, pk_context *key );
 
void x509write_crt_set_md_alg( x509write_cert *ctx, md_type_t md_alg );
 
int x509write_crt_set_extension( x509write_cert *ctx,
                                 const char *oid, size_t oid_len,
                                 int critical,
                                 const unsigned char *val, size_t val_len );
 
int x509write_crt_set_basic_constraints( x509write_cert *ctx,
                                         int is_ca, int max_pathlen );
 
#if defined(POLARSSL_SHA1_C)
int x509write_crt_set_subject_key_identifier( x509write_cert *ctx );
 
int x509write_crt_set_authority_key_identifier( x509write_cert *ctx );
#endif /* POLARSSL_SHA1_C */
 
int x509write_crt_set_key_usage( x509write_cert *ctx, unsigned char key_usage );
 
int x509write_crt_set_ns_cert_type( x509write_cert *ctx,
                                    unsigned char ns_cert_type );
 
void x509write_crt_free( x509write_cert *ctx );
 
int x509write_crt_der( x509write_cert *ctx, unsigned char *buf, size_t size,
                       int (*f_rng)(void *, unsigned char *, size_t),
                       void *p_rng );
 
#if defined(POLARSSL_PEM_WRITE_C)
int x509write_crt_pem( x509write_cert *ctx, unsigned char *buf, size_t size,
                       int (*f_rng)(void *, unsigned char *, size_t),
                       void *p_rng );
#endif /* POLARSSL_PEM_WRITE_C */
#endif /* POLARSSL_X509_CRT_WRITE_C */
 
#ifdef __cplusplus
}
#endif
 
#endif /* x509_crt.h */