76
76
typedef void (*X509V3_EXT_FREE)(void *);
77
77
typedef void * (*X509V3_EXT_D2I)(void *, const unsigned char ** , long);
78
78
typedef int (*X509V3_EXT_I2D)(void *, unsigned char **);
79
typedef STACK_OF(CONF_VALUE) * (*X509V3_EXT_I2V)(struct v3_ext_method *method, void *ext, STACK_OF(CONF_VALUE) *extlist);
80
typedef void * (*X509V3_EXT_V2I)(struct v3_ext_method *method, struct v3_ext_ctx *ctx, STACK_OF(CONF_VALUE) *values);
81
typedef char * (*X509V3_EXT_I2S)(struct v3_ext_method *method, void *ext);
82
typedef void * (*X509V3_EXT_S2I)(struct v3_ext_method *method, struct v3_ext_ctx *ctx, const char *str);
83
typedef int (*X509V3_EXT_I2R)(struct v3_ext_method *method, void *ext, BIO *out, int indent);
84
typedef void * (*X509V3_EXT_R2I)(struct v3_ext_method *method, struct v3_ext_ctx *ctx, const char *str);
79
typedef STACK_OF(CONF_VALUE) *
80
(*X509V3_EXT_I2V)(const struct v3_ext_method *method, void *ext,
81
STACK_OF(CONF_VALUE) *extlist);
82
typedef void * (*X509V3_EXT_V2I)(const struct v3_ext_method *method,
83
struct v3_ext_ctx *ctx,
84
STACK_OF(CONF_VALUE) *values);
85
typedef char * (*X509V3_EXT_I2S)(const struct v3_ext_method *method, void *ext);
86
typedef void * (*X509V3_EXT_S2I)(const struct v3_ext_method *method,
87
struct v3_ext_ctx *ctx, const char *str);
88
typedef int (*X509V3_EXT_I2R)(const struct v3_ext_method *method, void *ext,
89
BIO *out, int indent);
90
typedef void * (*X509V3_EXT_R2I)(const struct v3_ext_method *method,
91
struct v3_ext_ctx *ctx, const char *str);
86
93
/* V3 extension structure */
220
227
GENERAL_NAMES *fullname;
221
228
STACK_OF(X509_NAME_ENTRY) *relativename;
230
/* If relativename then this contains the full distribution point name */
223
232
} DIST_POINT_NAME;
225
typedef struct DIST_POINT_st {
233
/* All existing reasons */
234
#define CRLDP_ALL_REASONS 0x807f
236
#define CRL_REASON_NONE -1
237
#define CRL_REASON_UNSPECIFIED 0
238
#define CRL_REASON_KEY_COMPROMISE 1
239
#define CRL_REASON_CA_COMPROMISE 2
240
#define CRL_REASON_AFFILIATION_CHANGED 3
241
#define CRL_REASON_SUPERSEDED 4
242
#define CRL_REASON_CESSATION_OF_OPERATION 5
243
#define CRL_REASON_CERTIFICATE_HOLD 6
244
#define CRL_REASON_REMOVE_FROM_CRL 8
245
#define CRL_REASON_PRIVILEGE_WITHDRAWN 9
246
#define CRL_REASON_AA_COMPROMISE 10
248
struct DIST_POINT_st {
226
249
DIST_POINT_NAME *distpoint;
227
250
ASN1_BIT_STRING *reasons;
228
251
GENERAL_NAMES *CRLissuer;
231
255
typedef STACK_OF(DIST_POINT) CRL_DIST_POINTS;
233
257
DECLARE_STACK_OF(DIST_POINT)
234
258
DECLARE_ASN1_SET_OF(DIST_POINT)
236
typedef struct AUTHORITY_KEYID_st {
260
struct AUTHORITY_KEYID_st {
237
261
ASN1_OCTET_STRING *keyid;
238
262
GENERAL_NAMES *issuer;
239
263
ASN1_INTEGER *serial;
242
266
/* Strong extranet structures */
304
328
DECLARE_STACK_OF(GENERAL_SUBTREE)
306
typedef struct NAME_CONSTRAINTS_st {
330
struct NAME_CONSTRAINTS_st {
307
331
STACK_OF(GENERAL_SUBTREE) *permittedSubtrees;
308
332
STACK_OF(GENERAL_SUBTREE) *excludedSubtrees;
311
335
typedef struct POLICY_CONSTRAINTS_st {
312
336
ASN1_INTEGER *requireExplicitPolicy;
329
353
DECLARE_ASN1_FUNCTIONS(PROXY_POLICY)
330
354
DECLARE_ASN1_FUNCTIONS(PROXY_CERT_INFO_EXTENSION)
356
struct ISSUING_DIST_POINT_st
358
DIST_POINT_NAME *distpoint;
361
ASN1_BIT_STRING *onlysomereasons;
366
/* Values in idp_flags field */
368
#define IDP_PRESENT 0x1
369
/* IDP values inconsistent */
370
#define IDP_INVALID 0x2
372
#define IDP_ONLYUSER 0x4
374
#define IDP_ONLYCA 0x8
376
#define IDP_ONLYATTR 0x10
377
/* indirectCRL true */
378
#define IDP_INDIRECT 0x20
379
/* onlysomereasons present */
380
#define IDP_REASONS 0x40
333
382
#define X509V3_conf_err(val) ERR_add_error_data(6, "section:", val->section, \
334
383
",name:", val->name, ",value:", val->value);
424
474
#define X509_PURPOSE_CRL_SIGN 6
425
475
#define X509_PURPOSE_ANY 7
426
476
#define X509_PURPOSE_OCSP_HELPER 8
477
#define X509_PURPOSE_TIMESTAMP_SIGN 9
428
479
#define X509_PURPOSE_MIN 1
429
#define X509_PURPOSE_MAX 8
480
#define X509_PURPOSE_MAX 9
431
482
/* Flags for X509V3_EXT_print() */
487
541
STACK_OF(CONF_VALUE) *i2v_GENERAL_NAMES(X509V3_EXT_METHOD *method,
488
542
GENERAL_NAMES *gen, STACK_OF(CONF_VALUE) *extlist);
489
GENERAL_NAMES *v2i_GENERAL_NAMES(X509V3_EXT_METHOD *method,
490
X509V3_CTX *ctx, STACK_OF(CONF_VALUE) *nval);
543
GENERAL_NAMES *v2i_GENERAL_NAMES(const X509V3_EXT_METHOD *method,
544
X509V3_CTX *ctx, STACK_OF(CONF_VALUE) *nval);
492
546
DECLARE_ASN1_FUNCTIONS(OTHERNAME)
493
547
DECLARE_ASN1_FUNCTIONS(EDIPARTYNAME)
548
int OTHERNAME_cmp(OTHERNAME *a, OTHERNAME *b);
549
void GENERAL_NAME_set0_value(GENERAL_NAME *a, int type, void *value);
550
void *GENERAL_NAME_get0_value(GENERAL_NAME *a, int *ptype);
551
int GENERAL_NAME_set0_othername(GENERAL_NAME *gen,
552
ASN1_OBJECT *oid, ASN1_TYPE *value);
553
int GENERAL_NAME_get0_otherName(GENERAL_NAME *gen,
554
ASN1_OBJECT **poid, ASN1_TYPE **pvalue);
495
556
char *i2s_ASN1_OCTET_STRING(X509V3_EXT_METHOD *method, ASN1_OCTET_STRING *ia5);
496
557
ASN1_OCTET_STRING *s2i_ASN1_OCTET_STRING(X509V3_EXT_METHOD *method, X509V3_CTX *ctx, char *str);
507
568
DECLARE_ASN1_FUNCTIONS(CRL_DIST_POINTS)
508
569
DECLARE_ASN1_FUNCTIONS(DIST_POINT)
509
570
DECLARE_ASN1_FUNCTIONS(DIST_POINT_NAME)
571
DECLARE_ASN1_FUNCTIONS(ISSUING_DIST_POINT)
573
int DIST_POINT_set_dpname(DIST_POINT_NAME *dpn, X509_NAME *iname);
575
int NAME_CONSTRAINTS_check(X509 *x, NAME_CONSTRAINTS *nc);
511
577
DECLARE_ASN1_FUNCTIONS(ACCESS_DESCRIPTION)
512
578
DECLARE_ASN1_FUNCTIONS(AUTHORITY_INFO_ACCESS)
524
590
DECLARE_ASN1_ALLOC_FUNCTIONS(POLICY_CONSTRAINTS)
525
591
DECLARE_ASN1_ITEM(POLICY_CONSTRAINTS)
593
GENERAL_NAME *a2i_GENERAL_NAME(GENERAL_NAME *out,
594
const X509V3_EXT_METHOD *method, X509V3_CTX *ctx,
595
int gen_type, char *value, int is_nc);
527
597
#ifdef HEADER_CONF_H
528
GENERAL_NAME *v2i_GENERAL_NAME(X509V3_EXT_METHOD *method, X509V3_CTX *ctx,
530
GENERAL_NAME *v2i_GENERAL_NAME_ex(GENERAL_NAME *out, X509V3_EXT_METHOD *method,
531
X509V3_CTX *ctx, CONF_VALUE *cnf, int is_nc);
598
GENERAL_NAME *v2i_GENERAL_NAME(const X509V3_EXT_METHOD *method, X509V3_CTX *ctx,
600
GENERAL_NAME *v2i_GENERAL_NAME_ex(GENERAL_NAME *out,
601
const X509V3_EXT_METHOD *method,
602
X509V3_CTX *ctx, CONF_VALUE *cnf, int is_nc);
532
603
void X509V3_conf_free(CONF_VALUE *val);
534
605
X509_EXTENSION *X509V3_EXT_nconf_nid(CONF *conf, X509V3_CTX *ctx, int ext_nid, char *value);
538
609
int X509V3_EXT_REQ_add_nconf(CONF *conf, X509V3_CTX *ctx, char *section, X509_REQ *req);
539
610
int X509V3_EXT_CRL_add_nconf(CONF *conf, X509V3_CTX *ctx, char *section, X509_CRL *crl);
541
X509_EXTENSION *X509V3_EXT_conf_nid(LHASH *conf, X509V3_CTX *ctx, int ext_nid, char *value);
542
X509_EXTENSION *X509V3_EXT_conf(LHASH *conf, X509V3_CTX *ctx, char *name, char *value);
543
int X509V3_EXT_add_conf(LHASH *conf, X509V3_CTX *ctx, char *section, X509 *cert);
544
int X509V3_EXT_REQ_add_conf(LHASH *conf, X509V3_CTX *ctx, char *section, X509_REQ *req);
545
int X509V3_EXT_CRL_add_conf(LHASH *conf, X509V3_CTX *ctx, char *section, X509_CRL *crl);
612
X509_EXTENSION *X509V3_EXT_conf_nid(LHASH_OF(CONF_VALUE) *conf, X509V3_CTX *ctx,
613
int ext_nid, char *value);
614
X509_EXTENSION *X509V3_EXT_conf(LHASH_OF(CONF_VALUE) *conf, X509V3_CTX *ctx,
615
char *name, char *value);
616
int X509V3_EXT_add_conf(LHASH_OF(CONF_VALUE) *conf, X509V3_CTX *ctx,
617
char *section, X509 *cert);
618
int X509V3_EXT_REQ_add_conf(LHASH_OF(CONF_VALUE) *conf, X509V3_CTX *ctx,
619
char *section, X509_REQ *req);
620
int X509V3_EXT_CRL_add_conf(LHASH_OF(CONF_VALUE) *conf, X509V3_CTX *ctx,
621
char *section, X509_CRL *crl);
547
623
int X509V3_add_value_bool_nf(char *name, int asn1_bool,
548
STACK_OF(CONF_VALUE) **extlist);
624
STACK_OF(CONF_VALUE) **extlist);
549
625
int X509V3_get_value_bool(CONF_VALUE *value, int *asn1_bool);
550
626
int X509V3_get_value_int(CONF_VALUE *value, ASN1_INTEGER **aint);
551
627
void X509V3_set_nconf(X509V3_CTX *ctx, CONF *conf);
552
void X509V3_set_conf_lhash(X509V3_CTX *ctx, LHASH *lhash);
628
void X509V3_set_conf_lhash(X509V3_CTX *ctx, LHASH_OF(CONF_VALUE) *lhash);
555
631
char * X509V3_get_string(X509V3_CTX *ctx, char *name, char *section);
576
652
int X509V3_EXT_add_alias(int nid_to, int nid_from);
577
653
void X509V3_EXT_cleanup(void);
579
X509V3_EXT_METHOD *X509V3_EXT_get(X509_EXTENSION *ext);
580
X509V3_EXT_METHOD *X509V3_EXT_get_nid(int nid);
655
const X509V3_EXT_METHOD *X509V3_EXT_get(X509_EXTENSION *ext);
656
const X509V3_EXT_METHOD *X509V3_EXT_get_nid(int nid);
581
657
int X509V3_add_standard_extensions(void);
582
658
STACK_OF(CONF_VALUE) *X509V3_parse_list(const char *line);
583
659
void *X509V3_EXT_d2i(X509_EXTENSION *ext);
587
663
X509_EXTENSION *X509V3_EXT_i2d(int ext_nid, int crit, void *ext_struc);
588
664
int X509V3_add1_i2d(STACK_OF(X509_EXTENSION) **x, int nid, void *value, int crit, unsigned long flags);
590
char *hex_to_string(unsigned char *buffer, long len);
591
unsigned char *string_to_hex(char *str, long *len);
666
char *hex_to_string(const unsigned char *buffer, long len);
667
unsigned char *string_to_hex(const char *str, long *len);
592
668
int name_cmp(const char *name, const char *cmp);
594
670
void X509V3_EXT_val_prn(BIO *out, STACK_OF(CONF_VALUE) *val, int indent,
603
679
int X509_supported_extension(X509_EXTENSION *ex);
604
680
int X509_PURPOSE_set(int *p, int purpose);
605
681
int X509_check_issued(X509 *issuer, X509 *subject);
682
int X509_check_akid(X509 *issuer, AUTHORITY_KEYID *akid);
606
683
int X509_PURPOSE_get_count(void);
607
684
X509_PURPOSE * X509_PURPOSE_get0(int idx);
608
685
int X509_PURPOSE_get_by_sname(char *sname);
616
693
void X509_PURPOSE_cleanup(void);
617
694
int X509_PURPOSE_get_id(X509_PURPOSE *);
619
STACK *X509_get1_email(X509 *x);
620
STACK *X509_REQ_get1_email(X509_REQ *x);
621
void X509_email_free(STACK *sk);
622
STACK *X509_get1_ocsp(X509 *x);
696
STACK_OF(OPENSSL_STRING) *X509_get1_email(X509 *x);
697
STACK_OF(OPENSSL_STRING) *X509_REQ_get1_email(X509_REQ *x);
698
void X509_email_free(STACK_OF(OPENSSL_STRING) *sk);
699
STACK_OF(OPENSSL_STRING) *X509_get1_ocsp(X509 *x);
624
701
ASN1_OCTET_STRING *a2i_IPADDRESS(const char *ipasc);
625
702
ASN1_OCTET_STRING *a2i_IPADDRESS_NC(const char *ipasc);
787
865
/* Error codes for the X509V3 functions. */
789
867
/* Function codes. */
790
#define X509V3_F_ASIDENTIFIERCHOICE_CANONIZE 156
791
#define X509V3_F_ASIDENTIFIERCHOICE_IS_CANONICAL 157
868
#define X509V3_F_A2I_GENERAL_NAME 164
869
#define X509V3_F_ASIDENTIFIERCHOICE_CANONIZE 161
870
#define X509V3_F_ASIDENTIFIERCHOICE_IS_CANONICAL 162
792
871
#define X509V3_F_COPY_EMAIL 122
793
872
#define X509V3_F_COPY_ISSUER 123
794
873
#define X509V3_F_DO_DIRNAME 144
796
875
#define X509V3_F_DO_EXT_I2D 135
797
876
#define X509V3_F_DO_EXT_NCONF 151
798
877
#define X509V3_F_DO_I2V_NAME_CONSTRAINTS 148
878
#define X509V3_F_GNAMES_FROM_SECTNAME 156
799
879
#define X509V3_F_HEX_TO_STRING 111
800
880
#define X509V3_F_I2S_ASN1_ENUMERATED 121
801
881
#define X509V3_F_I2S_ASN1_IA5STRING 149
812
892
#define X509V3_F_S2I_ASN1_OCTET_STRING 112
813
893
#define X509V3_F_S2I_ASN1_SKEY_ID 114
814
894
#define X509V3_F_S2I_SKEY_ID 115
895
#define X509V3_F_SET_DIST_POINT_NAME 158
815
896
#define X509V3_F_STRING_TO_HEX 113
816
897
#define X509V3_F_SXNET_ADD_ID_ASC 125
817
898
#define X509V3_F_SXNET_ADD_ID_INTEGER 126
818
899
#define X509V3_F_SXNET_ADD_ID_ULONG 127
819
900
#define X509V3_F_SXNET_GET_ID_ASC 128
820
901
#define X509V3_F_SXNET_GET_ID_ULONG 129
821
#define X509V3_F_V2I_ASIDENTIFIERS 158
902
#define X509V3_F_V2I_ASIDENTIFIERS 163
822
903
#define X509V3_F_V2I_ASN1_BIT_STRING 101
823
904
#define X509V3_F_V2I_AUTHORITY_INFO_ACCESS 139
824
905
#define X509V3_F_V2I_AUTHORITY_KEYID 119
827
908
#define X509V3_F_V2I_EXTENDED_KEY_USAGE 103
828
909
#define X509V3_F_V2I_GENERAL_NAMES 118
829
910
#define X509V3_F_V2I_GENERAL_NAME_EX 117
911
#define X509V3_F_V2I_IDP 157
830
912
#define X509V3_F_V2I_IPADDRBLOCKS 159
831
913
#define X509V3_F_V2I_ISSUER_ALT 153
832
914
#define X509V3_F_V2I_NAME_CONSTRAINTS 147
855
937
#define X509V3_R_BN_DEC2BN_ERROR 100
856
938
#define X509V3_R_BN_TO_ASN1_INTEGER_ERROR 101
857
939
#define X509V3_R_DIRNAME_ERROR 149
940
#define X509V3_R_DISTPOINT_ALREADY_SET 160
858
941
#define X509V3_R_DUPLICATE_ZONE_ID 133
859
942
#define X509V3_R_ERROR_CONVERTING_ZONE 131
860
943
#define X509V3_R_ERROR_CREATING_EXTENSION 144
868
951
#define X509V3_R_ILLEGAL_EMPTY_EXTENSION 151
869
952
#define X509V3_R_ILLEGAL_HEX_DIGIT 113
870
953
#define X509V3_R_INCORRECT_POLICY_SYNTAX_TAG 152
871
#define X509V3_R_INVALID_ASNUMBER 160
872
#define X509V3_R_INVALID_ASRANGE 161
954
#define X509V3_R_INVALID_MULTIPLE_RDNS 161
955
#define X509V3_R_INVALID_ASNUMBER 162
956
#define X509V3_R_INVALID_ASRANGE 163
873
957
#define X509V3_R_INVALID_BOOLEAN_STRING 104
874
958
#define X509V3_R_INVALID_EXTENSION_STRING 105
875
#define X509V3_R_INVALID_INHERITANCE 162
876
#define X509V3_R_INVALID_IPADDRESS 163
959
#define X509V3_R_INVALID_INHERITANCE 165
960
#define X509V3_R_INVALID_IPADDRESS 166
877
961
#define X509V3_R_INVALID_NAME 106
878
962
#define X509V3_R_INVALID_NULL_ARGUMENT 107
879
963
#define X509V3_R_INVALID_NULL_NAME 108
901
985
#define X509V3_R_ODD_NUMBER_OF_DIGITS 112
902
986
#define X509V3_R_OPERATION_NOT_DEFINED 148
903
987
#define X509V3_R_OTHERNAME_ERROR 147
904
#define X509V3_R_POLICY_LANGUAGE_ALREADTY_DEFINED 155
988
#define X509V3_R_POLICY_LANGUAGE_ALREADY_DEFINED 155
905
989
#define X509V3_R_POLICY_PATH_LENGTH 156
906
#define X509V3_R_POLICY_PATH_LENGTH_ALREADTY_DEFINED 157
990
#define X509V3_R_POLICY_PATH_LENGTH_ALREADY_DEFINED 157
907
991
#define X509V3_R_POLICY_SYNTAX_NOT_CURRENTLY_SUPPORTED 158
908
992
#define X509V3_R_POLICY_WHEN_PROXY_LANGUAGE_REQUIRES_NO_POLICY 159
909
993
#define X509V3_R_SECTION_NOT_FOUND 150
added
removed
crypto/x509v3/x509v3.h
