123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268269270271272273274275276277278279280281282283284285286287288289290291292293294295296297298299300301302303304305306307308309310311312313314315316317318319320321322323324325326327328329330331332333334335336337338339340341342343344345346347348349350351352353354355356357358359360361362363364365366367368369370371372373374375376377378379380381382383384385386387388389390391392393394395396397398399400401402403404405406407408409410411412413414415416417418419420421422423424425426427428429430431432433434435436437438439440441442443444445446447448449450451452453454455456457458459460461462463464465466467468469470471472473474475476477478479480481482483484485486487488489490491492493494495496497498499500501502503504505506507508509510511512513514515516517518519520521522523524525526527528529530531532533534535536537538539540541542543544545546547548549550551552553554555556557558559560561562563564565566567568569570571572573574575576577578579580581582583584585586587588589590591592593594595596597598599600601602603604605606607608609610611612613614615616617618619620621622623624625626627628629630631632633634635636637638639640641642643644645646647648649650651652653654655656657658659660661662663664665666667668669670671672673674675676677678679680681682683684685686687688689690691692693694695696697698699700701702703704705706707708709710711712713714715716717718719720721722723724725726727728729730731732733734735736737738739740741742743744745746747748749750751752753754755756757758759760761762763764765766767768769770771772773774775776777 |
- #ifndef POLARSSL_X509_H
- #define POLARSSL_X509_H
- #include "polarssl/rsa.h"
- #include "polarssl/dhm.h"
-
- #define POLARSSL_ERR_ASN1_OUT_OF_DATA -0x0014
- #define POLARSSL_ERR_ASN1_UNEXPECTED_TAG -0x0016
- #define POLARSSL_ERR_ASN1_INVALID_LENGTH -0x0018
- #define POLARSSL_ERR_ASN1_LENGTH_MISMATCH -0x001A
- #define POLARSSL_ERR_ASN1_INVALID_DATA -0x001C
- #define POLARSSL_ERR_X509_FEATURE_UNAVAILABLE -0x2080
- #define POLARSSL_ERR_X509_CERT_INVALID_PEM -0x2100
- #define POLARSSL_ERR_X509_CERT_INVALID_FORMAT -0x2180
- #define POLARSSL_ERR_X509_CERT_INVALID_VERSION -0x2200
- #define POLARSSL_ERR_X509_CERT_INVALID_SERIAL -0x2280
- #define POLARSSL_ERR_X509_CERT_INVALID_ALG -0x2300
- #define POLARSSL_ERR_X509_CERT_INVALID_NAME -0x2380
- #define POLARSSL_ERR_X509_CERT_INVALID_DATE -0x2400
- #define POLARSSL_ERR_X509_CERT_INVALID_PUBKEY -0x2480
- #define POLARSSL_ERR_X509_CERT_INVALID_SIGNATURE -0x2500
- #define POLARSSL_ERR_X509_CERT_INVALID_EXTENSIONS -0x2580
- #define POLARSSL_ERR_X509_CERT_UNKNOWN_VERSION -0x2600
- #define POLARSSL_ERR_X509_CERT_UNKNOWN_SIG_ALG -0x2680
- #define POLARSSL_ERR_X509_UNKNOWN_PK_ALG -0x2700
- #define POLARSSL_ERR_X509_CERT_SIG_MISMATCH -0x2780
- #define POLARSSL_ERR_X509_CERT_VERIFY_FAILED -0x2800
- #define POLARSSL_ERR_X509_KEY_INVALID_VERSION -0x2880
- #define POLARSSL_ERR_X509_KEY_INVALID_FORMAT -0x2900
- #define POLARSSL_ERR_X509_POINT_ERROR -0x2980
- #define POLARSSL_ERR_X509_VALUE_TO_LENGTH -0x2A00
- #define BADCERT_EXPIRED 0x01
- #define BADCERT_REVOKED 0x02
- #define BADCERT_CN_MISMATCH 0x04
- #define BADCERT_NOT_TRUSTED 0x08
- #define BADCRL_NOT_TRUSTED 0x10
- #define BADCRL_EXPIRED 0x20
- #define BADCERT_MISSING 0x40
- #define BADCERT_SKIP_VERIFY 0x80
- #define ASN1_BOOLEAN 0x01
- #define ASN1_INTEGER 0x02
- #define ASN1_BIT_STRING 0x03
- #define ASN1_OCTET_STRING 0x04
- #define ASN1_NULL 0x05
- #define ASN1_OID 0x06
- #define ASN1_UTF8_STRING 0x0C
- #define ASN1_SEQUENCE 0x10
- #define ASN1_SET 0x11
- #define ASN1_PRINTABLE_STRING 0x13
- #define ASN1_T61_STRING 0x14
- #define ASN1_IA5_STRING 0x16
- #define ASN1_UTC_TIME 0x17
- #define ASN1_GENERALIZED_TIME 0x18
- #define ASN1_UNIVERSAL_STRING 0x1C
- #define ASN1_BMP_STRING 0x1E
- #define ASN1_PRIMITIVE 0x00
- #define ASN1_CONSTRUCTED 0x20
- #define ASN1_CONTEXT_SPECIFIC 0x80
- #define X520_COMMON_NAME 3
- #define X520_COUNTRY 6
- #define X520_LOCALITY 7
- #define X520_STATE 8
- #define X520_ORGANIZATION 10
- #define X520_ORG_UNIT 11
- #define PKCS9_EMAIL 1
- #define X509_OUTPUT_DER 0x01
- #define X509_OUTPUT_PEM 0x02
- #define PEM_LINE_LENGTH 72
- #define X509_ISSUER 0x01
- #define X509_SUBJECT 0x02
- #define OID_SIZE(x) (sizeof(x) - 1)
- #define OID_X520 "\x55\x04"
- #define OID_CN OID_X520 "\x03"
- #define OID_PKCS1 "\x2A\x86\x48\x86\xF7\x0D\x01\x01"
- #define OID_PKCS1_RSA OID_PKCS1 "\x01"
- #define OID_RSA_SHA_OBS "\x2B\x0E\x03\x02\x1D"
- #define OID_PKCS9 "\x2A\x86\x48\x86\xF7\x0D\x01\x09"
- #define OID_PKCS9_EMAIL OID_PKCS9 "\x01"
- #define OID_ID_CE "\x55\x1D"
- #define OID_PKIX "\x2B\x06\x01\x05\x05\x07"
- #define OID_AUTHORITY_KEY_IDENTIFIER OID_ID_CE "\x23"
- #define OID_SUBJECT_KEY_IDENTIFIER OID_ID_CE "\x0E"
- #define OID_KEY_USAGE OID_ID_CE "\x0F"
- #define OID_CERTIFICATE_POLICIES OID_ID_CE "\x20"
- #define OID_POLICY_MAPPINGS OID_ID_CE "\x21"
- #define OID_SUBJECT_ALT_NAME OID_ID_CE "\x11"
- #define OID_ISSUER_ALT_NAME OID_ID_CE "\x12"
- #define OID_SUBJECT_DIRECTORY_ATTRS OID_ID_CE "\x09"
- #define OID_BASIC_CONSTRAINTS OID_ID_CE "\x13"
- #define OID_NAME_CONSTRAINTS OID_ID_CE "\x1E"
- #define OID_POLICY_CONSTRAINTS OID_ID_CE "\x24"
- #define OID_EXTENDED_KEY_USAGE OID_ID_CE "\x25"
- #define OID_CRL_DISTRIBUTION_POINTS OID_ID_CE "\x1F"
- #define OID_INIHIBIT_ANYPOLICY OID_ID_CE "\x36"
- #define OID_FRESHEST_CRL OID_ID_CE "\x2E"
- #define KU_DIGITAL_SIGNATURE (0x80)
- #define KU_NON_REPUDIATION (0x40)
- #define KU_KEY_ENCIPHERMENT (0x20)
- #define KU_DATA_ENCIPHERMENT (0x10)
- #define KU_KEY_AGREEMENT (0x08)
- #define KU_KEY_CERT_SIGN (0x04)
- #define KU_CRL_SIGN (0x02)
- #define OID_ANY_EXTENDED_KEY_USAGE OID_EXTENDED_KEY_USAGE "\x00"
- #define OID_KP OID_PKIX "\x03"
- #define OID_SERVER_AUTH OID_KP "\x01"
- #define OID_CLIENT_AUTH OID_KP "\x02"
- #define OID_CODE_SIGNING OID_KP "\x03"
- #define OID_EMAIL_PROTECTION OID_KP "\x04"
- #define OID_TIME_STAMPING OID_KP "\x08"
- #define OID_OCSP_SIGNING OID_KP "\x09"
- #define STRING_SERVER_AUTH "TLS Web Server Authentication"
- #define STRING_CLIENT_AUTH "TLS Web Client Authentication"
- #define STRING_CODE_SIGNING "Code Signing"
- #define STRING_EMAIL_PROTECTION "E-mail Protection"
- #define STRING_TIME_STAMPING "Time Stamping"
- #define STRING_OCSP_SIGNING "OCSP Signing"
- #define OID_PRIVATE_KEY_USAGE_PERIOD OID_ID_CE "\x10"
- #define OID_CRL_NUMBER OID_ID_CE "\x14"
- #define OID_NETSCAPE "\x60\x86\x48\x01\x86\xF8\x42"
- #define OID_NS_CERT OID_NETSCAPE "\x01"
- #define OID_NS_CERT_TYPE OID_NS_CERT "\x01"
- #define OID_NS_BASE_URL OID_NS_CERT "\x02"
- #define OID_NS_REVOCATION_URL OID_NS_CERT "\x03"
- #define OID_NS_CA_REVOCATION_URL OID_NS_CERT "\x04"
- #define OID_NS_RENEWAL_URL OID_NS_CERT "\x07"
- #define OID_NS_CA_POLICY_URL OID_NS_CERT "\x08"
- #define OID_NS_SSL_SERVER_NAME OID_NS_CERT "\x0C"
- #define OID_NS_COMMENT OID_NS_CERT "\x0D"
- #define OID_NS_DATA_TYPE OID_NETSCAPE "\x02"
- #define OID_NS_CERT_SEQUENCE OID_NS_DATA_TYPE "\x05"
- #define NS_CERT_TYPE_SSL_CLIENT (0x80)
- #define NS_CERT_TYPE_SSL_SERVER (0x40)
- #define NS_CERT_TYPE_EMAIL (0x20)
- #define NS_CERT_TYPE_OBJECT_SIGNING (0x10)
- #define NS_CERT_TYPE_RESERVED (0x08)
- #define NS_CERT_TYPE_SSL_CA (0x04)
- #define NS_CERT_TYPE_EMAIL_CA (0x02)
- #define NS_CERT_TYPE_OBJECT_SIGNING_CA (0x01)
- #define EXT_AUTHORITY_KEY_IDENTIFIER (1 << 0)
- #define EXT_SUBJECT_KEY_IDENTIFIER (1 << 1)
- #define EXT_KEY_USAGE (1 << 2)
- #define EXT_CERTIFICATE_POLICIES (1 << 3)
- #define EXT_POLICY_MAPPINGS (1 << 4)
- #define EXT_SUBJECT_ALT_NAME (1 << 5)
- #define EXT_ISSUER_ALT_NAME (1 << 6)
- #define EXT_SUBJECT_DIRECTORY_ATTRS (1 << 7)
- #define EXT_BASIC_CONSTRAINTS (1 << 8)
- #define EXT_NAME_CONSTRAINTS (1 << 9)
- #define EXT_POLICY_CONSTRAINTS (1 << 10)
- #define EXT_EXTENDED_KEY_USAGE (1 << 11)
- #define EXT_CRL_DISTRIBUTION_POINTS (1 << 12)
- #define EXT_INIHIBIT_ANYPOLICY (1 << 13)
- #define EXT_FRESHEST_CRL (1 << 14)
- #define EXT_NS_CERT_TYPE (1 << 16)
-
- typedef struct _x509_buf
- {
- int tag;
- size_t len;
- unsigned char *p;
- }
- x509_buf;
- typedef struct _x509_bitstring
- {
- size_t len;
- unsigned char unused_bits;
- unsigned char *p;
- }
- x509_bitstring;
- typedef struct _x509_name
- {
- x509_buf oid;
- x509_buf val;
- struct _x509_name *next;
- }
- x509_name;
- typedef struct _x509_sequence
- {
- x509_buf buf;
- struct _x509_sequence *next;
- }
- x509_sequence;
- typedef struct _x509_time
- {
- int year, mon, day;
- int hour, min, sec;
- }
- x509_time;
- typedef struct _x509_cert
- {
- x509_buf raw;
- x509_buf tbs;
- int version;
- x509_buf serial;
- x509_buf sig_oid1;
- x509_buf issuer_raw;
- x509_buf subject_raw;
- x509_name issuer;
- x509_name subject;
- x509_time valid_from;
- x509_time valid_to;
- x509_buf pk_oid;
- rsa_context rsa;
- x509_buf issuer_id;
- x509_buf subject_id;
- x509_buf v3_ext;
- int ext_types;
- int ca_istrue;
- int max_pathlen;
- unsigned char key_usage;
- x509_sequence ext_key_usage;
- unsigned char ns_cert_type;
- x509_buf sig_oid2;
- x509_buf sig;
- int sig_alg;
- struct _x509_cert *next;
- }
- x509_cert;
- typedef struct _x509_crl_entry
- {
- x509_buf raw;
- x509_buf serial;
- x509_time revocation_date;
- x509_buf entry_ext;
- struct _x509_crl_entry *next;
- }
- x509_crl_entry;
- typedef struct _x509_crl
- {
- x509_buf raw;
- x509_buf tbs;
- int version;
- x509_buf sig_oid1;
- x509_buf issuer_raw;
- x509_name issuer;
- x509_time this_update;
- x509_time next_update;
- x509_crl_entry entry;
- x509_buf crl_ext;
- x509_buf sig_oid2;
- x509_buf sig;
- int sig_alg;
- struct _x509_crl *next;
- }
- x509_crl;
- #ifdef __cplusplus
- extern "C" {
- #endif
- int x509parse_crt( x509_cert *chain, const unsigned char *buf, size_t buflen );
- int x509parse_crtfile( x509_cert *chain, const char *path );
- int x509parse_crl( x509_crl *chain, const unsigned char *buf, size_t buflen );
- int x509parse_crlfile( x509_crl *chain, const char *path );
- int x509parse_key( rsa_context *rsa,
- const unsigned char *key, size_t keylen,
- const unsigned char *pwd, size_t pwdlen );
- int x509parse_keyfile( rsa_context *rsa, const char *path,
- const char *password );
- int x509parse_public_key( rsa_context *rsa,
- const unsigned char *key, size_t keylen );
- int x509parse_public_keyfile( rsa_context *rsa, const char *path );
- int x509parse_dhm( dhm_context *dhm, const unsigned char *dhmin, size_t dhminlen );
- int x509parse_dhmfile( dhm_context *dhm, const char *path );
- int x509parse_dn_gets( char *buf, size_t size, const x509_name *dn );
- int x509parse_serial_gets( char *buf, size_t size, const x509_buf *serial );
- int x509parse_cert_info( char *buf, size_t size, const char *prefix,
- const x509_cert *crt );
- int x509parse_crl_info( char *buf, size_t size, const char *prefix,
- const x509_crl *crl );
- const char *x509_oid_get_description( x509_buf *oid );
- int x509_oid_get_numeric_string( char *buf, size_t size, x509_buf *oid );
- int x509parse_time_expired( const x509_time *time );
- int x509parse_verify( x509_cert *crt,
- x509_cert *trust_ca,
- x509_crl *ca_crl,
- const char *cn, int *flags,
- int (*f_vrfy)(void *, x509_cert *, int, int),
- void *p_vrfy );
- int x509parse_revoked( const x509_cert *crt, const x509_crl *crl );
- void x509_free( x509_cert *crt );
- void x509_crl_free( x509_crl *crl );
- int x509_self_test( int verbose );
- #ifdef __cplusplus
- }
- #endif
- #endif
|