1 /* $MirOS: src/lib/libssl/src/crypto/x509v3/x509v3.h,v 1.3 2005/04/29 13:52:33 tg Exp $ */ 2 3 /* x509v3.h */ 4 /* Written by Dr Stephen N Henson (shenson@bigfoot.com) for the OpenSSL 5 * project 1999. 6 */ 7 /* ==================================================================== 8 * Copyright (c) 1999 The OpenSSL Project. All rights reserved. 9 * 10 * Redistribution and use in source and binary forms, with or without 11 * modification, are permitted provided that the following conditions 12 * are met: 13 * 14 * 1. Redistributions of source code must retain the above copyright 15 * notice, this list of conditions and the following disclaimer. 16 * 17 * 2. Redistributions in binary form must reproduce the above copyright 18 * notice, this list of conditions and the following disclaimer in 19 * the documentation and/or other materials provided with the 20 * distribution. 21 * 22 * 3. All advertising materials mentioning features or use of this 23 * software must display the following acknowledgment: 24 * "This product includes software developed by the OpenSSL Project 25 * for use in the OpenSSL Toolkit. (http://www.OpenSSL.org/)" 26 * 27 * 4. The names "OpenSSL Toolkit" and "OpenSSL Project" must not be used to 28 * endorse or promote products derived from this software without 29 * prior written permission. For written permission, please contact 30 * licensing@OpenSSL.org. 31 * 32 * 5. Products derived from this software may not be called "OpenSSL" 33 * nor may "OpenSSL" appear in their names without prior written 34 * permission of the OpenSSL Project. 35 * 36 * 6. Redistributions of any form whatsoever must retain the following 37 * acknowledgment: 38 * "This product includes software developed by the OpenSSL Project 39 * for use in the OpenSSL Toolkit (http://www.OpenSSL.org/)" 40 * 41 * THIS SOFTWARE IS PROVIDED BY THE OpenSSL PROJECT ``AS IS'' AND ANY 42 * EXPRESSED OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE 43 * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR 44 * PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE OpenSSL PROJECT OR 45 * ITS CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, 46 * SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT 47 * NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; 48 * LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) 49 * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, 50 * STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) 51 * ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED 52 * OF THE POSSIBILITY OF SUCH DAMAGE. 53 * ==================================================================== 54 * 55 * This product includes cryptographic software written by Eric Young 56 * (eay@cryptsoft.com). This product includes software written by Tim 57 * Hudson (tjh@cryptsoft.com). 58 * 59 */ 60 #ifndef HEADER_X509V3_H 61 #define HEADER_X509V3_H 62 63 #include <openssl/bio.h> 64 #include <openssl/x509.h> 65 #include <openssl/conf.h> 66 67 #ifdef __cplusplus 68 extern "C" { 69 #endif 70 71 /* Forward reference */ 72 struct v3_ext_method; 73 struct v3_ext_ctx; 74 75 /* Useful typedefs */ 76 77 typedef void * (*X509V3_EXT_NEW)(void); 78 typedef void (*X509V3_EXT_FREE)(void *); 79 typedef void * (*X509V3_EXT_D2I)(void *, unsigned char ** , long); 80 typedef int (*X509V3_EXT_I2D)(void *, unsigned char **); 81 typedef STACK_OF(CONF_VALUE) * (*X509V3_EXT_I2V)(struct v3_ext_method *method, void *ext, STACK_OF(CONF_VALUE) *extlist); 82 typedef void * (*X509V3_EXT_V2I)(struct v3_ext_method *method, struct v3_ext_ctx *ctx, STACK_OF(CONF_VALUE) *values); 83 typedef char * (*X509V3_EXT_I2S)(struct v3_ext_method *method, void *ext); 84 typedef void * (*X509V3_EXT_S2I)(struct v3_ext_method *method, struct v3_ext_ctx *ctx, char *str); 85 typedef int (*X509V3_EXT_I2R)(struct v3_ext_method *method, void *ext, BIO *out, int indent); 86 typedef void * (*X509V3_EXT_R2I)(struct v3_ext_method *method, struct v3_ext_ctx *ctx, char *str); 87 88 /* V3 extension structure */ 89 90 struct v3_ext_method { 91 int ext_nid; 92 int ext_flags; 93 /* If this is set the following four fields are ignored */ 94 ASN1_ITEM_EXP *it; 95 /* Old style ASN1 calls */ 96 X509V3_EXT_NEW ext_new; 97 X509V3_EXT_FREE ext_free; 98 X509V3_EXT_D2I d2i; 99 X509V3_EXT_I2D i2d; 100 101 /* The following pair is used for string extensions */ 102 X509V3_EXT_I2S i2s; 103 X509V3_EXT_S2I s2i; 104 105 /* The following pair is used for multi-valued extensions */ 106 X509V3_EXT_I2V i2v; 107 X509V3_EXT_V2I v2i; 108 109 /* The following are used for raw extensions */ 110 X509V3_EXT_I2R i2r; 111 X509V3_EXT_R2I r2i; 112 113 void *usr_data; /* Any extension specific data */ 114 }; 115 116 typedef struct X509V3_CONF_METHOD_st { 117 char * (*get_string)(void *db, char *section, char *value); 118 STACK_OF(CONF_VALUE) * (*get_section)(void *db, char *section); 119 void (*free_string)(void *db, char * string); 120 void (*free_section)(void *db, STACK_OF(CONF_VALUE) *section); 121 } X509V3_CONF_METHOD; 122 123 /* Context specific info */ 124 struct v3_ext_ctx { 125 #define CTX_TEST 0x1 126 int flags; 127 X509 *issuer_cert; 128 X509 *subject_cert; 129 X509_REQ *subject_req; 130 X509_CRL *crl; 131 X509V3_CONF_METHOD *db_meth; 132 void *db; 133 /* Maybe more here */ 134 }; 135 136 typedef struct v3_ext_method X509V3_EXT_METHOD; 137 typedef struct v3_ext_ctx X509V3_CTX; 138 139 DECLARE_STACK_OF(X509V3_EXT_METHOD) 140 141 /* ext_flags values */ 142 #define X509V3_EXT_DYNAMIC 0x1 143 #define X509V3_EXT_CTX_DEP 0x2 144 #define X509V3_EXT_MULTILINE 0x4 145 146 typedef BIT_STRING_BITNAME ENUMERATED_NAMES; 147 148 typedef struct BASIC_CONSTRAINTS_st { 149 int ca; 150 ASN1_INTEGER *pathlen; 151 } BASIC_CONSTRAINTS; 152 153 154 typedef struct PKEY_USAGE_PERIOD_st { 155 ASN1_GENERALIZEDTIME *notBefore; 156 ASN1_GENERALIZEDTIME *notAfter; 157 } PKEY_USAGE_PERIOD; 158 159 typedef struct otherName_st { 160 ASN1_OBJECT *type_id; 161 ASN1_TYPE *value; 162 } OTHERNAME; 163 164 typedef struct EDIPartyName_st { 165 ASN1_STRING *nameAssigner; 166 ASN1_STRING *partyName; 167 } EDIPARTYNAME; 168 169 typedef struct GENERAL_NAME_st { 170 171 #define GEN_OTHERNAME 0 172 #define GEN_EMAIL 1 173 #define GEN_DNS 2 174 #define GEN_X400 3 175 #define GEN_DIRNAME 4 176 #define GEN_EDIPARTY 5 177 #define GEN_URI 6 178 #define GEN_IPADD 7 179 #define GEN_RID 8 180 181 int type; 182 union { 183 char *ptr; 184 OTHERNAME *otherName; /* otherName */ 185 ASN1_IA5STRING *rfc822Name; 186 ASN1_IA5STRING *dNSName; 187 ASN1_TYPE *x400Address; 188 X509_NAME *directoryName; 189 EDIPARTYNAME *ediPartyName; 190 ASN1_IA5STRING *uniformResourceIdentifier; 191 ASN1_OCTET_STRING *iPAddress; 192 ASN1_OBJECT *registeredID; 193 194 /* Old names */ 195 ASN1_OCTET_STRING *ip; /* iPAddress */ 196 X509_NAME *dirn; /* dirn */ 197 ASN1_IA5STRING *ia5;/* rfc822Name, dNSName, uniformResourceIdentifier */ 198 ASN1_OBJECT *rid; /* registeredID */ 199 ASN1_TYPE *other; /* x400Address */ 200 } d; 201 } GENERAL_NAME; 202 203 typedef STACK_OF(GENERAL_NAME) GENERAL_NAMES; 204 205 typedef struct ACCESS_DESCRIPTION_st { 206 ASN1_OBJECT *method; 207 GENERAL_NAME *location; 208 } ACCESS_DESCRIPTION; 209 210 typedef STACK_OF(ACCESS_DESCRIPTION) AUTHORITY_INFO_ACCESS; 211 212 typedef STACK_OF(ASN1_OBJECT) EXTENDED_KEY_USAGE; 213 214 DECLARE_STACK_OF(GENERAL_NAME) 215 DECLARE_ASN1_SET_OF(GENERAL_NAME) 216 217 DECLARE_STACK_OF(ACCESS_DESCRIPTION) 218 DECLARE_ASN1_SET_OF(ACCESS_DESCRIPTION) 219 220 typedef struct DIST_POINT_NAME_st { 221 int type; 222 union { 223 GENERAL_NAMES *fullname; 224 STACK_OF(X509_NAME_ENTRY) *relativename; 225 } name; 226 } DIST_POINT_NAME; 227 228 typedef struct DIST_POINT_st { 229 DIST_POINT_NAME *distpoint; 230 ASN1_BIT_STRING *reasons; 231 GENERAL_NAMES *CRLissuer; 232 } DIST_POINT; 233 234 typedef STACK_OF(DIST_POINT) CRL_DIST_POINTS; 235 236 DECLARE_STACK_OF(DIST_POINT) 237 DECLARE_ASN1_SET_OF(DIST_POINT) 238 239 typedef struct AUTHORITY_KEYID_st { 240 ASN1_OCTET_STRING *keyid; 241 GENERAL_NAMES *issuer; 242 ASN1_INTEGER *serial; 243 } AUTHORITY_KEYID; 244 245 /* Strong extranet structures */ 246 247 typedef struct SXNET_ID_st { 248 ASN1_INTEGER *zone; 249 ASN1_OCTET_STRING *user; 250 } SXNETID; 251 252 DECLARE_STACK_OF(SXNETID) 253 DECLARE_ASN1_SET_OF(SXNETID) 254 255 typedef struct SXNET_st { 256 ASN1_INTEGER *version; 257 STACK_OF(SXNETID) *ids; 258 } SXNET; 259 260 typedef struct NOTICEREF_st { 261 ASN1_STRING *organization; 262 STACK_OF(ASN1_INTEGER) *noticenos; 263 } NOTICEREF; 264 265 typedef struct USERNOTICE_st { 266 NOTICEREF *noticeref; 267 ASN1_STRING *exptext; 268 } USERNOTICE; 269 270 typedef struct POLICYQUALINFO_st { 271 ASN1_OBJECT *pqualid; 272 union { 273 ASN1_IA5STRING *cpsuri; 274 USERNOTICE *usernotice; 275 ASN1_TYPE *other; 276 } d; 277 } POLICYQUALINFO; 278 279 DECLARE_STACK_OF(POLICYQUALINFO) 280 DECLARE_ASN1_SET_OF(POLICYQUALINFO) 281 282 typedef struct POLICYINFO_st { 283 ASN1_OBJECT *policyid; 284 STACK_OF(POLICYQUALINFO) *qualifiers; 285 } POLICYINFO; 286 287 typedef STACK_OF(POLICYINFO) CERTIFICATEPOLICIES; 288 289 DECLARE_STACK_OF(POLICYINFO) 290 DECLARE_ASN1_SET_OF(POLICYINFO) 291 292 /* Proxy certificate structures, see RFC 3820 */ 293 typedef struct PROXY_POLICY_st 294 { 295 ASN1_OBJECT *policyLanguage; 296 ASN1_OCTET_STRING *policy; 297 } PROXY_POLICY; 298 299 typedef struct PROXY_CERT_INFO_EXTENSION_st 300 { 301 ASN1_INTEGER *pcPathLengthConstraint; 302 PROXY_POLICY *proxyPolicy; 303 } PROXY_CERT_INFO_EXTENSION; 304 305 DECLARE_ASN1_FUNCTIONS(PROXY_POLICY) 306 DECLARE_ASN1_FUNCTIONS(PROXY_CERT_INFO_EXTENSION) 307 308 309 #define X509V3_conf_err(val) ERR_add_error_data(6, "section:", val->section, \ 310 ",name:", val->name, ",value:", val->value); 311 312 #define X509V3_set_ctx_test(ctx) \ 313 X509V3_set_ctx(ctx, NULL, NULL, NULL, NULL, CTX_TEST) 314 #define X509V3_set_ctx_nodb(ctx) (ctx)->db = NULL; 315 316 #define EXT_BITSTRING(nid, table) { nid, 0, ASN1_ITEM_ref(ASN1_BIT_STRING), \ 317 0,0,0,0, \ 318 0,0, \ 319 (X509V3_EXT_I2V)i2v_ASN1_BIT_STRING, \ 320 (X509V3_EXT_V2I)v2i_ASN1_BIT_STRING, \ 321 NULL, NULL, \ 322 table} 323 324 #define EXT_IA5STRING(nid) { nid, 0, ASN1_ITEM_ref(ASN1_IA5STRING), \ 325 0,0,0,0, \ 326 (X509V3_EXT_I2S)i2s_ASN1_IA5STRING, \ 327 (X509V3_EXT_S2I)s2i_ASN1_IA5STRING, \ 328 0,0,0,0, \ 329 NULL} 330 331 #define EXT_END { -1, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0} 332 333 334 /* X509_PURPOSE stuff */ 335 336 #define EXFLAG_BCONS 0x1 337 #define EXFLAG_KUSAGE 0x2 338 #define EXFLAG_XKUSAGE 0x4 339 #define EXFLAG_NSCERT 0x8 340 341 #define EXFLAG_CA 0x10 342 #define EXFLAG_SS 0x20 343 #define EXFLAG_V1 0x40 344 #define EXFLAG_INVALID 0x80 345 #define EXFLAG_SET 0x100 346 #define EXFLAG_CRITICAL 0x200 347 #define EXFLAG_PROXY 0x400 348 349 #define KU_DIGITAL_SIGNATURE 0x0080 350 #define KU_NON_REPUDIATION 0x0040 351 #define KU_KEY_ENCIPHERMENT 0x0020 352 #define KU_DATA_ENCIPHERMENT 0x0010 353 #define KU_KEY_AGREEMENT 0x0008 354 #define KU_KEY_CERT_SIGN 0x0004 355 #define KU_CRL_SIGN 0x0002 356 #define KU_ENCIPHER_ONLY 0x0001 357 #define KU_DECIPHER_ONLY 0x8000 358 359 #define NS_SSL_CLIENT 0x80 360 #define NS_SSL_SERVER 0x40 361 #define NS_SMIME 0x20 362 #define NS_OBJSIGN 0x10 363 #define NS_SSL_CA 0x04 364 #define NS_SMIME_CA 0x02 365 #define NS_OBJSIGN_CA 0x01 366 #define NS_ANY_CA (NS_SSL_CA|NS_SMIME_CA|NS_OBJSIGN_CA) 367 368 #define XKU_SSL_SERVER 0x1 369 #define XKU_SSL_CLIENT 0x2 370 #define XKU_SMIME 0x4 371 #define XKU_CODE_SIGN 0x8 372 #define XKU_SGC 0x10 373 #define XKU_OCSP_SIGN 0x20 374 #define XKU_TIMESTAMP 0x40 375 #define XKU_DVCS 0x80 376 377 #define X509_PURPOSE_DYNAMIC 0x1 378 #define X509_PURPOSE_DYNAMIC_NAME 0x2 379 380 typedef struct x509_purpose_st { 381 int purpose; 382 int trust; /* Default trust ID */ 383 int flags; 384 int (*check_purpose)(const struct x509_purpose_st *, 385 const X509 *, int); 386 char *name; 387 char *sname; 388 void *usr_data; 389 } X509_PURPOSE; 390 391 #define X509_PURPOSE_SSL_CLIENT 1 392 #define X509_PURPOSE_SSL_SERVER 2 393 #define X509_PURPOSE_NS_SSL_SERVER 3 394 #define X509_PURPOSE_SMIME_SIGN 4 395 #define X509_PURPOSE_SMIME_ENCRYPT 5 396 #define X509_PURPOSE_CRL_SIGN 6 397 #define X509_PURPOSE_ANY 7 398 #define X509_PURPOSE_OCSP_HELPER 8 399 400 #define X509_PURPOSE_MIN 1 401 #define X509_PURPOSE_MAX 8 402 403 /* Flags for X509V3_EXT_print() */ 404 405 #define X509V3_EXT_UNKNOWN_MASK (0xfL << 16) 406 /* Return error for unknown extensions */ 407 #define X509V3_EXT_DEFAULT 0 408 /* Print error for unknown extensions */ 409 #define X509V3_EXT_ERROR_UNKNOWN (1L << 16) 410 /* ASN1 parse unknown extensions */ 411 #define X509V3_EXT_PARSE_UNKNOWN (2L << 16) 412 /* BIO_dump unknown extensions */ 413 #define X509V3_EXT_DUMP_UNKNOWN (3L << 16) 414 415 /* Flags for X509V3_add1_i2d */ 416 417 #define X509V3_ADD_OP_MASK 0xfL 418 #define X509V3_ADD_DEFAULT 0L 419 #define X509V3_ADD_APPEND 1L 420 #define X509V3_ADD_REPLACE 2L 421 #define X509V3_ADD_REPLACE_EXISTING 3L 422 #define X509V3_ADD_KEEP_EXISTING 4L 423 #define X509V3_ADD_DELETE 5L 424 #define X509V3_ADD_SILENT 0x10 425 426 DECLARE_STACK_OF(X509_PURPOSE) 427 428 DECLARE_ASN1_FUNCTIONS(BASIC_CONSTRAINTS) 429 430 DECLARE_ASN1_FUNCTIONS(SXNET) 431 DECLARE_ASN1_FUNCTIONS(SXNETID) 432 433 int SXNET_add_id_asc(SXNET **psx, char *zone, char *user, int userlen); 434 int SXNET_add_id_ulong(SXNET **psx, unsigned long lzone, char *user, int userlen); 435 int SXNET_add_id_INTEGER(SXNET **psx, ASN1_INTEGER *izone, char *user, int userlen); 436 437 ASN1_OCTET_STRING *SXNET_get_id_asc(SXNET *sx, char *zone); 438 ASN1_OCTET_STRING *SXNET_get_id_ulong(SXNET *sx, unsigned long lzone); 439 ASN1_OCTET_STRING *SXNET_get_id_INTEGER(SXNET *sx, ASN1_INTEGER *zone); 440 441 DECLARE_ASN1_FUNCTIONS(AUTHORITY_KEYID) 442 443 DECLARE_ASN1_FUNCTIONS(PKEY_USAGE_PERIOD) 444 445 DECLARE_ASN1_FUNCTIONS(GENERAL_NAME) 446 447 STACK_OF(CONF_VALUE) *i2v_GENERAL_NAME(X509V3_EXT_METHOD *method, GENERAL_NAME *gen, STACK_OF(CONF_VALUE) *ret); 448 int GENERAL_NAME_print(BIO *out, GENERAL_NAME *gen); 449 450 DECLARE_ASN1_FUNCTIONS(GENERAL_NAMES) 451 452 STACK_OF(CONF_VALUE) *i2v_GENERAL_NAMES(X509V3_EXT_METHOD *method, 453 GENERAL_NAMES *gen, STACK_OF(CONF_VALUE) *extlist); 454 GENERAL_NAMES *v2i_GENERAL_NAMES(X509V3_EXT_METHOD *method, 455 X509V3_CTX *ctx, STACK_OF(CONF_VALUE) *nval); 456 457 DECLARE_ASN1_FUNCTIONS(OTHERNAME) 458 DECLARE_ASN1_FUNCTIONS(EDIPARTYNAME) 459 460 char *i2s_ASN1_OCTET_STRING(X509V3_EXT_METHOD *method, ASN1_OCTET_STRING *ia5); 461 ASN1_OCTET_STRING *s2i_ASN1_OCTET_STRING(X509V3_EXT_METHOD *method, X509V3_CTX *ctx, char *str); 462 463 DECLARE_ASN1_FUNCTIONS(EXTENDED_KEY_USAGE) 464 int i2a_ACCESS_DESCRIPTION(BIO *bp, ACCESS_DESCRIPTION* a); 465 466 DECLARE_ASN1_FUNCTIONS(CERTIFICATEPOLICIES) 467 DECLARE_ASN1_FUNCTIONS(POLICYINFO) 468 DECLARE_ASN1_FUNCTIONS(POLICYQUALINFO) 469 DECLARE_ASN1_FUNCTIONS(USERNOTICE) 470 DECLARE_ASN1_FUNCTIONS(NOTICEREF) 471 472 DECLARE_ASN1_FUNCTIONS(CRL_DIST_POINTS) 473 DECLARE_ASN1_FUNCTIONS(DIST_POINT) 474 DECLARE_ASN1_FUNCTIONS(DIST_POINT_NAME) 475 476 DECLARE_ASN1_FUNCTIONS(ACCESS_DESCRIPTION) 477 DECLARE_ASN1_FUNCTIONS(AUTHORITY_INFO_ACCESS) 478 479 #ifdef HEADER_CONF_H 480 GENERAL_NAME *v2i_GENERAL_NAME(X509V3_EXT_METHOD *method, X509V3_CTX *ctx, CONF_VALUE *cnf); 481 void X509V3_conf_free(CONF_VALUE *val); 482 483 X509_EXTENSION *X509V3_EXT_nconf_nid(CONF *conf, X509V3_CTX *ctx, int ext_nid, char *value); 484 X509_EXTENSION *X509V3_EXT_nconf(CONF *conf, X509V3_CTX *ctx, char *name, char *value); 485 int X509V3_EXT_add_nconf_sk(CONF *conf, X509V3_CTX *ctx, char *section, STACK_OF(X509_EXTENSION) **sk); 486 int X509V3_EXT_add_nconf(CONF *conf, X509V3_CTX *ctx, char *section, X509 *cert); 487 int X509V3_EXT_REQ_add_nconf(CONF *conf, X509V3_CTX *ctx, char *section, X509_REQ *req); 488 int X509V3_EXT_CRL_add_nconf(CONF *conf, X509V3_CTX *ctx, char *section, X509_CRL *crl); 489 490 X509_EXTENSION *X509V3_EXT_conf_nid(LHASH *conf, X509V3_CTX *ctx, int ext_nid, char *value); 491 X509_EXTENSION *X509V3_EXT_conf(LHASH *conf, X509V3_CTX *ctx, char *name, char *value); 492 int X509V3_EXT_add_conf(LHASH *conf, X509V3_CTX *ctx, char *section, X509 *cert); 493 int X509V3_EXT_REQ_add_conf(LHASH *conf, X509V3_CTX *ctx, char *section, X509_REQ *req); 494 int X509V3_EXT_CRL_add_conf(LHASH *conf, X509V3_CTX *ctx, char *section, X509_CRL *crl); 495 496 int X509V3_add_value_bool_nf(char *name, int asn1_bool, 497 STACK_OF(CONF_VALUE) **extlist); 498 int X509V3_get_value_bool(CONF_VALUE *value, int *asn1_bool); 499 int X509V3_get_value_int(CONF_VALUE *value, ASN1_INTEGER **aint); 500 void X509V3_set_nconf(X509V3_CTX *ctx, CONF *conf); 501 void X509V3_set_conf_lhash(X509V3_CTX *ctx, LHASH *lhash); 502 #endif 503 504 char * X509V3_get_string(X509V3_CTX *ctx, char *name, char *section); 505 STACK_OF(CONF_VALUE) * X509V3_get_section(X509V3_CTX *ctx, char *section); 506 void X509V3_string_free(X509V3_CTX *ctx, char *str); 507 void X509V3_section_free( X509V3_CTX *ctx, STACK_OF(CONF_VALUE) *section); 508 void X509V3_set_ctx(X509V3_CTX *ctx, X509 *issuer, X509 *subject, 509 X509_REQ *req, X509_CRL *crl, int flags); 510 511 int X509V3_add_value(const char *name, const char *value, 512 STACK_OF(CONF_VALUE) **extlist); 513 int X509V3_add_value_uchar(const char *name, const unsigned char *value, 514 STACK_OF(CONF_VALUE) **extlist); 515 int X509V3_add_value_bool(const char *name, int asn1_bool, 516 STACK_OF(CONF_VALUE) **extlist); 517 int X509V3_add_value_int(const char *name, ASN1_INTEGER *aint, 518 STACK_OF(CONF_VALUE) **extlist); 519 char * i2s_ASN1_INTEGER(X509V3_EXT_METHOD *meth, ASN1_INTEGER *aint); 520 ASN1_INTEGER * s2i_ASN1_INTEGER(X509V3_EXT_METHOD *meth, char *value); 521 char * i2s_ASN1_ENUMERATED(X509V3_EXT_METHOD *meth, ASN1_ENUMERATED *aint); 522 char * i2s_ASN1_ENUMERATED_TABLE(X509V3_EXT_METHOD *meth, ASN1_ENUMERATED *aint); 523 int X509V3_EXT_add(X509V3_EXT_METHOD *ext); 524 int X509V3_EXT_add_list(X509V3_EXT_METHOD *extlist); 525 int X509V3_EXT_add_alias(int nid_to, int nid_from); 526 void X509V3_EXT_cleanup(void); 527 528 X509V3_EXT_METHOD *X509V3_EXT_get(X509_EXTENSION *ext); 529 X509V3_EXT_METHOD *X509V3_EXT_get_nid(int nid); 530 int X509V3_add_standard_extensions(void); 531 STACK_OF(CONF_VALUE) *X509V3_parse_list(const char *line); 532 void *X509V3_EXT_d2i(X509_EXTENSION *ext); 533 void *X509V3_get_d2i(STACK_OF(X509_EXTENSION) *x, int nid, int *crit, int *idx); 534 535 536 X509_EXTENSION *X509V3_EXT_i2d(int ext_nid, int crit, void *ext_struc); 537 int X509V3_add1_i2d(STACK_OF(X509_EXTENSION) **x, int nid, void *value, int crit, unsigned long flags); 538 539 char *hex_to_string(unsigned char *buffer, long len); 540 unsigned char *string_to_hex(char *str, long *len); 541 int name_cmp(const char *name, const char *cmp); 542 543 void X509V3_EXT_val_prn(BIO *out, STACK_OF(CONF_VALUE) *val, int indent, 544 int ml); 545 int X509V3_EXT_print(BIO *out, X509_EXTENSION *ext, unsigned long flag, int indent); 546 int X509V3_EXT_print_fp(FILE *out, X509_EXTENSION *ext, int flag, int indent); 547 548 int X509V3_extensions_print(BIO *out, char *title, STACK_OF(X509_EXTENSION) *exts, unsigned long flag, int indent); 549 550 int X509_check_ca(X509 *x); 551 int X509_check_purpose(X509 *x, int id, int ca); 552 int X509_supported_extension(X509_EXTENSION *ex); 553 int X509_PURPOSE_set(int *p, int purpose); 554 int X509_check_issued(X509 *issuer, X509 *subject); 555 int X509_PURPOSE_get_count(void); 556 X509_PURPOSE * X509_PURPOSE_get0(int idx); 557 int X509_PURPOSE_get_by_sname(char *sname); 558 int X509_PURPOSE_get_by_id(int id); 559 int X509_PURPOSE_add(int id, int trust, int flags, 560 int (*ck)(const X509_PURPOSE *, const X509 *, int), 561 char *name, char *sname, void *arg); 562 char *X509_PURPOSE_get0_name(X509_PURPOSE *xp); 563 char *X509_PURPOSE_get0_sname(X509_PURPOSE *xp); 564 int X509_PURPOSE_get_trust(X509_PURPOSE *xp); 565 void X509_PURPOSE_cleanup(void); 566 int X509_PURPOSE_get_id(X509_PURPOSE *); 567 568 STACK *X509_get1_email(X509 *x); 569 STACK *X509_REQ_get1_email(X509_REQ *x); 570 void X509_email_free(STACK *sk); 571 572 ASN1_OCTET_STRING *a2i_IPADDRESS(const char *ipasc); 573 574 /* BEGIN ERROR CODES */ 575 /* The following lines are auto generated by the script mkerr.pl. Any changes 576 * made after this point may be overwritten when the script is next run. 577 */ 578 void ERR_load_X509V3_strings(void); 579 580 /* Error codes for the X509V3 functions. */ 581 582 /* Function codes. */ 583 #define X509V3_F_COPY_EMAIL 122 584 #define X509V3_F_COPY_ISSUER 123 585 #define X509V3_F_DO_EXT_CONF 124 586 #define X509V3_F_DO_EXT_I2D 135 587 #define X509V3_F_HEX_TO_STRING 111 588 #define X509V3_F_I2S_ASN1_ENUMERATED 121 589 #define X509V3_F_I2S_ASN1_IA5STRING 142 590 #define X509V3_F_I2S_ASN1_INTEGER 120 591 #define X509V3_F_I2V_AUTHORITY_INFO_ACCESS 138 592 #define X509V3_F_NOTICE_SECTION 132 593 #define X509V3_F_NREF_NOS 133 594 #define X509V3_F_POLICY_SECTION 131 595 #define X509V3_F_R2I_CERTPOL 130 596 #define X509V3_F_R2I_PCI 142 597 #define X509V3_F_S2I_ASN1_IA5STRING 100 598 #define X509V3_F_S2I_ASN1_INTEGER 108 599 #define X509V3_F_S2I_ASN1_OCTET_STRING 112 600 #define X509V3_F_S2I_ASN1_SKEY_ID 114 601 #define X509V3_F_S2I_S2I_SKEY_ID 115 602 #define X509V3_F_STRING_TO_HEX 113 603 #define X509V3_F_SXNET_ADD_ASC 125 604 #define X509V3_F_SXNET_ADD_ID_INTEGER 126 605 #define X509V3_F_SXNET_ADD_ID_ULONG 127 606 #define X509V3_F_SXNET_GET_ID_ASC 128 607 #define X509V3_F_SXNET_GET_ID_ULONG 129 608 #define X509V3_F_V2I_ACCESS_DESCRIPTION 139 609 #define X509V3_F_V2I_ASN1_BIT_STRING 101 610 #define X509V3_F_V2I_AUTHORITY_KEYID 119 611 #define X509V3_F_V2I_BASIC_CONSTRAINTS 102 612 #define X509V3_F_V2I_CRLD 134 613 #define X509V3_F_V2I_EXT_KU 103 614 #define X509V3_F_V2I_GENERAL_NAME 117 615 #define X509V3_F_V2I_GENERAL_NAMES 118 616 #define X509V3_F_V3_GENERIC_EXTENSION 116 617 #define X509V3_F_X509V3_ADD_I2D 140 618 #define X509V3_F_X509V3_ADD_VALUE 105 619 #define X509V3_F_X509V3_EXT_ADD 104 620 #define X509V3_F_X509V3_EXT_ADD_ALIAS 106 621 #define X509V3_F_X509V3_EXT_CONF 107 622 #define X509V3_F_X509V3_EXT_I2D 136 623 #define X509V3_F_X509V3_GET_VALUE_BOOL 110 624 #define X509V3_F_X509V3_PARSE_LIST 109 625 #define X509V3_F_X509_PURPOSE_ADD 137 626 #define X509V3_F_X509_PURPOSE_SET 141 627 628 /* Reason codes. */ 629 #define X509V3_R_BAD_IP_ADDRESS 118 630 #define X509V3_R_BAD_OBJECT 119 631 #define X509V3_R_BN_DEC2BN_ERROR 100 632 #define X509V3_R_BN_TO_ASN1_INTEGER_ERROR 101 633 #define X509V3_R_DUPLICATE_ZONE_ID 133 634 #define X509V3_R_ERROR_CONVERTING_ZONE 131 635 #define X509V3_R_ERROR_CREATING_EXTENSION 144 636 #define X509V3_R_ERROR_IN_EXTENSION 128 637 #define X509V3_R_EXPECTED_A_SECTION_NAME 137 638 #define X509V3_R_EXTENSION_EXISTS 145 639 #define X509V3_R_EXTENSION_NAME_ERROR 115 640 #define X509V3_R_EXTENSION_NOT_FOUND 102 641 #define X509V3_R_EXTENSION_SETTING_NOT_SUPPORTED 103 642 #define X509V3_R_EXTENSION_VALUE_ERROR 116 643 #define X509V3_R_ILLEGAL_HEX_DIGIT 113 644 #define X509V3_R_INCORRECT_POLICY_SYNTAX_TAG 153 645 #define X509V3_R_INVALID_BOOLEAN_STRING 104 646 #define X509V3_R_INVALID_EXTENSION_STRING 105 647 #define X509V3_R_INVALID_NAME 106 648 #define X509V3_R_INVALID_NULL_ARGUMENT 107 649 #define X509V3_R_INVALID_NULL_NAME 108 650 #define X509V3_R_INVALID_NULL_VALUE 109 651 #define X509V3_R_INVALID_NUMBER 140 652 #define X509V3_R_INVALID_NUMBERS 141 653 #define X509V3_R_INVALID_OBJECT_IDENTIFIER 110 654 #define X509V3_R_INVALID_OPTION 138 655 #define X509V3_R_INVALID_POLICY_IDENTIFIER 134 656 #define X509V3_R_INVALID_PROXY_POLICY_IDENTIFIER 147 657 #define X509V3_R_INVALID_PROXY_POLICY_SETTING 151 658 #define X509V3_R_INVALID_PURPOSE 146 659 #define X509V3_R_INVALID_SECTION 135 660 #define X509V3_R_INVALID_SYNTAX 143 661 #define X509V3_R_ISSUER_DECODE_ERROR 126 662 #define X509V3_R_MISSING_VALUE 124 663 #define X509V3_R_NEED_ORGANIZATION_AND_NUMBERS 142 664 #define X509V3_R_NO_CONFIG_DATABASE 136 665 #define X509V3_R_NO_ISSUER_CERTIFICATE 121 666 #define X509V3_R_NO_ISSUER_DETAILS 127 667 #define X509V3_R_NO_POLICY_IDENTIFIER 139 668 #define X509V3_R_NO_PROXY_CERT_POLICY_LANGUAGE_DEFINED 148 669 #define X509V3_R_NO_PUBLIC_KEY 114 670 #define X509V3_R_NO_SUBJECT_DETAILS 125 671 #define X509V3_R_ODD_NUMBER_OF_DIGITS 112 672 #define X509V3_R_POLICY_LANGUAGE_ALREADTY_DEFINED 149 673 #define X509V3_R_POLICY_PATH_LENGTH 152 674 #define X509V3_R_POLICY_PATH_LENGTH_ALREADTY_DEFINED 150 675 #define X509V3_R_POLICY_SYNTAX_NOT 154 676 #define X509V3_R_POLICY_SYNTAX_NOT_CURRENTLY_SUPPORTED 155 677 #define X509V3_R_POLICY_WHEN_PROXY_LANGUAGE_REQUIRES_NO_POLICY 156 678 #define X509V3_R_UNABLE_TO_GET_ISSUER_DETAILS 122 679 #define X509V3_R_UNABLE_TO_GET_ISSUER_KEYID 123 680 #define X509V3_R_UNKNOWN_BIT_STRING_ARGUMENT 111 681 #define X509V3_R_UNKNOWN_EXTENSION 129 682 #define X509V3_R_UNKNOWN_EXTENSION_NAME 130 683 #define X509V3_R_UNKNOWN_OPTION 120 684 #define X509V3_R_UNSUPPORTED_OPTION 117 685 #define X509V3_R_USER_TOO_LONG 132 686 687 #ifdef __cplusplus 688 } 689 #endif 690 #endif 691