]> git.ipfire.org Git - thirdparty/openssl.git/blame - crypto/include/internal/x509_int.h
Supply a build rule for the recently added nptest
[thirdparty/openssl.git] / crypto / include / internal / x509_int.h
CommitLineData
2743e38c
DSH
1/* x509_int.h */
2/*
3 * Written by Dr Stephen N Henson (steve@openssl.org) for the OpenSSL project
4 * 2015.
5 */
6/* ====================================================================
7 * Copyright (c) 2015 The OpenSSL Project. All rights reserved.
8 *
9 * Redistribution and use in source and binary forms, with or without
10 * modification, are permitted provided that the following conditions
11 * are met:
12 *
13 * 1. Redistributions of source code must retain the above copyright
14 * notice, this list of conditions and the following disclaimer.
15 *
16 * 2. Redistributions in binary form must reproduce the above copyright
17 * notice, this list of conditions and the following disclaimer in
18 * the documentation and/or other materials provided with the
19 * distribution.
20 *
21 * 3. All advertising materials mentioning features or use of this
22 * software must display the following acknowledgment:
23 * "This product includes software developed by the OpenSSL Project
24 * for use in the OpenSSL Toolkit. (http://www.OpenSSL.org/)"
25 *
26 * 4. The names "OpenSSL Toolkit" and "OpenSSL Project" must not be used to
27 * endorse or promote products derived from this software without
28 * prior written permission. For written permission, please contact
29 * licensing@OpenSSL.org.
30 *
31 * 5. Products derived from this software may not be called "OpenSSL"
32 * nor may "OpenSSL" appear in their names without prior written
33 * permission of the OpenSSL Project.
34 *
35 * 6. Redistributions of any form whatsoever must retain the following
36 * acknowledgment:
37 * "This product includes software developed by the OpenSSL Project
38 * for use in the OpenSSL Toolkit (http://www.OpenSSL.org/)"
39 *
40 * THIS SOFTWARE IS PROVIDED BY THE OpenSSL PROJECT ``AS IS'' AND ANY
41 * EXPRESSED OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
42 * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR
43 * PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE OpenSSL PROJECT OR
44 * ITS CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL,
45 * SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT
46 * NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES;
47 * LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
48 * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT,
49 * STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE)
50 * ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED
51 * OF THE POSSIBILITY OF SUCH DAMAGE.
52 * ====================================================================
53 *
54 * This product includes cryptographic software written by Eric Young
55 * (eay@cryptsoft.com). This product includes software written by Tim
56 * Hudson (tjh@cryptsoft.com).
57 *
58 */
59
60/* Internal X509 structures and functions: not for application use */
61
62struct X509_name_entry_st {
63 ASN1_OBJECT *object;
64 ASN1_STRING *value;
65 int set;
66 int size; /* temp variable */
67};
68
69/* we always keep X509_NAMEs in 2 forms. */
70struct X509_name_st {
71 STACK_OF(X509_NAME_ENTRY) *entries;
72 int modified; /* true if 'bytes' needs to be built */
73 BUF_MEM *bytes;
74/* unsigned long hash; Keep the hash around for lookups */
75 unsigned char *canon_enc;
76 int canon_enclen;
77} /* X509_NAME */ ;
bc3686df
DSH
78
79/*
80 * This stuff is certificate "auxiliary info" it contains details which are
81 * useful in certificate stores and databases. When used this is tagged onto
82 * the end of the certificate itself
83 */
84
85struct x509_cert_aux_st {
86 STACK_OF(ASN1_OBJECT) *trust; /* trusted uses */
87 STACK_OF(ASN1_OBJECT) *reject; /* rejected uses */
88 ASN1_UTF8STRING *alias; /* "friendly name" */
89 ASN1_OCTET_STRING *keyid; /* key id of private key */
90 STACK_OF(X509_ALGOR) *other; /* other unspecified info */
91};
124055a9
DSH
92
93struct X509_req_info_st {
94 ASN1_ENCODING enc;
95 ASN1_INTEGER *version;
96 X509_NAME *subject;
97 X509_PUBKEY *pubkey;
98 /* d=2 hl=2 l= 0 cons: cont: 00 */
99 STACK_OF(X509_ATTRIBUTE) *attributes; /* [ 0 ] */
100};
101
102struct X509_req_st {
103 X509_REQ_INFO *req_info;
104 X509_ALGOR *sig_alg;
105 ASN1_BIT_STRING *signature;
106 int references;
107};
e3e57192
DSH
108
109struct X509_crl_info_st {
110 ASN1_INTEGER *version;
111 X509_ALGOR *sig_alg;
112 X509_NAME *issuer;
113 ASN1_TIME *lastUpdate;
114 ASN1_TIME *nextUpdate;
115 STACK_OF(X509_REVOKED) *revoked;
116 STACK_OF(X509_EXTENSION) /* [0] */ *extensions;
117 ASN1_ENCODING enc;
118};
119
120struct X509_crl_st {
121 /* actual signature */
122 X509_CRL_INFO *crl;
123 X509_ALGOR *sig_alg;
124 ASN1_BIT_STRING *signature;
125 int references;
126 int flags;
127 /* Copies of various extensions */
128 AUTHORITY_KEYID *akid;
129 ISSUING_DIST_POINT *idp;
130 /* Convenient breakdown of IDP */
131 int idp_flags;
132 int idp_reasons;
133 /* CRL and base CRL numbers for delta processing */
134 ASN1_INTEGER *crl_number;
135 ASN1_INTEGER *base_crl_number;
136 unsigned char sha1_hash[SHA_DIGEST_LENGTH];
137 STACK_OF(GENERAL_NAMES) *issuers;
138 const X509_CRL_METHOD *meth;
139 void *meth_data;
140};