2 * {- join("\n * ", @autowarntext) -}
4 * Copyright 1999-2025 The OpenSSL Project Authors. All Rights Reserved.
6 * Licensed under the Apache License 2.0 (the "License"). You may not use
7 * this file except in compliance with the License. You can obtain a copy
8 * in the file LICENSE in the source distribution or at
9 * https://www.openssl.org/source/license.html
13 use
OpenSSL::stackhash
qw(generate_stack_macros
);
16 #ifndef OPENSSL_X509V3_H
17 # define OPENSSL_X509V3_H
20 # include <openssl/macros.h>
21 # ifndef OPENSSL_NO_DEPRECATED_3_0
22 # define HEADER_X509V3_H
25 # include <openssl/bio.h>
26 # include <openssl/x509.h>
27 # include <openssl/conf.h>
28 # include <openssl/x509v3err.h>
29 # ifndef OPENSSL_NO_STDIO
37 /* Forward reference */
43 typedef void *(*X509V3_EXT_NEW
)(void);
44 typedef void (*X509V3_EXT_FREE
) (void *);
45 typedef void *(*X509V3_EXT_D2I
)(void *, const unsigned char **, long);
46 typedef int (*X509V3_EXT_I2D
) (const void *, unsigned char **);
47 typedef STACK_OF(CONF_VALUE
) *
48 (*X509V3_EXT_I2V
) (const struct v3_ext_method
*method
, void *ext
,
49 STACK_OF(CONF_VALUE
) *extlist
);
50 typedef void *(*X509V3_EXT_V2I
)(const struct v3_ext_method
*method
,
51 struct v3_ext_ctx
*ctx
,
52 STACK_OF(CONF_VALUE
) *values
);
53 typedef char *(*X509V3_EXT_I2S
)(const struct v3_ext_method
*method
,
55 typedef void *(*X509V3_EXT_S2I
)(const struct v3_ext_method
*method
,
56 struct v3_ext_ctx
*ctx
, const char *str
);
57 typedef int (*X509V3_EXT_I2R
) (const struct v3_ext_method
*method
, void *ext
,
58 BIO
*out
, int indent
);
59 typedef void *(*X509V3_EXT_R2I
)(const struct v3_ext_method
*method
,
60 struct v3_ext_ctx
*ctx
, const char *str
);
62 /* V3 extension structure */
64 struct v3_ext_method
{
67 /* If this is set the following four fields are ignored */
69 /* Old style ASN1 calls */
70 X509V3_EXT_NEW ext_new
;
71 X509V3_EXT_FREE ext_free
;
74 /* The following pair is used for string extensions */
77 /* The following pair is used for multi-valued extensions */
80 /* The following are used for raw extensions */
83 void *usr_data
; /* Any extension specific data */
86 typedef struct X509V3_CONF_METHOD_st
{
87 char *(*get_string
) (void *db
, const char *section
, const char *value
);
88 STACK_OF(CONF_VALUE
) *(*get_section
) (void *db
, const char *section
);
89 void (*free_string
) (void *db
, char *string
);
90 void (*free_section
) (void *db
, STACK_OF(CONF_VALUE
) *section
);
93 /* Context specific info for producing X509 v3 extensions*/
95 # define X509V3_CTX_TEST 0x1
96 # ifndef OPENSSL_NO_DEPRECATED_3_0
97 # define CTX_TEST X509V3_CTX_TEST
99 # define X509V3_CTX_REPLACE 0x2
103 X509_REQ
*subject_req
;
105 X509V3_CONF_METHOD
*db_meth
;
107 EVP_PKEY
*issuer_pkey
;
108 /* Maybe more here */
111 typedef struct v3_ext_method X509V3_EXT_METHOD
;
114 generate_stack_macros("X509V3_EXT_METHOD");
117 /* ext_flags values */
118 # define X509V3_EXT_DYNAMIC 0x1
119 # define X509V3_EXT_CTX_DEP 0x2
120 # define X509V3_EXT_MULTILINE 0x4
122 typedef BIT_STRING_BITNAME ENUMERATED_NAMES
;
124 typedef struct BASIC_CONSTRAINTS_st
{
126 ASN1_INTEGER
*pathlen
;
129 typedef struct OSSL_BASIC_ATTR_CONSTRAINTS_st
{
131 ASN1_INTEGER
*pathlen
;
132 } OSSL_BASIC_ATTR_CONSTRAINTS
;
134 typedef struct PKEY_USAGE_PERIOD_st
{
135 ASN1_GENERALIZEDTIME
*notBefore
;
136 ASN1_GENERALIZEDTIME
*notAfter
;
139 typedef struct otherName_st
{
140 ASN1_OBJECT
*type_id
;
144 typedef struct EDIPartyName_st
{
145 ASN1_STRING
*nameAssigner
;
146 ASN1_STRING
*partyName
;
149 typedef struct GENERAL_NAME_st
{
150 # define GEN_OTHERNAME 0
154 # define GEN_DIRNAME 4
155 # define GEN_EDIPARTY 5
162 OTHERNAME
*otherName
; /* otherName */
163 ASN1_IA5STRING
*rfc822Name
;
164 ASN1_IA5STRING
*dNSName
;
165 ASN1_STRING
*x400Address
;
166 X509_NAME
*directoryName
;
167 EDIPARTYNAME
*ediPartyName
;
168 ASN1_IA5STRING
*uniformResourceIdentifier
;
169 ASN1_OCTET_STRING
*iPAddress
;
170 ASN1_OBJECT
*registeredID
;
172 ASN1_OCTET_STRING
*ip
; /* iPAddress */
173 X509_NAME
*dirn
; /* dirn */
174 ASN1_IA5STRING
*ia5
; /* rfc822Name, dNSName,
175 * uniformResourceIdentifier */
176 ASN1_OBJECT
*rid
; /* registeredID */
177 ASN1_TYPE
*other
; /* x400Address */
181 typedef struct ACCESS_DESCRIPTION_st
{
183 GENERAL_NAME
*location
;
184 } ACCESS_DESCRIPTION
;
186 int GENERAL_NAME_set1_X509_NAME(GENERAL_NAME
**tgt
, const X509_NAME
*src
);
189 generate_stack_macros("ACCESS_DESCRIPTION")
190 .generate_stack_macros("GENERAL_NAME");
193 typedef STACK_OF(ACCESS_DESCRIPTION
) AUTHORITY_INFO_ACCESS
;
194 typedef STACK_OF(ASN1_OBJECT
) EXTENDED_KEY_USAGE
;
195 typedef STACK_OF(ASN1_INTEGER
) TLS_FEATURE
;
196 typedef STACK_OF(GENERAL_NAME
) GENERAL_NAMES
;
199 generate_stack_macros("GENERAL_NAMES");
202 typedef struct DIST_POINT_NAME_st
{
205 GENERAL_NAMES
*fullname
;
206 STACK_OF(X509_NAME_ENTRY
) *relativename
;
208 /* If relativename then this contains the full distribution point name */
211 DECLARE_ASN1_DUP_FUNCTION(DIST_POINT_NAME
)
212 /* All existing reasons */
213 # define CRLDP_ALL_REASONS 0x807f
215 # define CRL_REASON_NONE -1
216 # define CRL_REASON_UNSPECIFIED 0
217 # define CRL_REASON_KEY_COMPROMISE 1
218 # define CRL_REASON_CA_COMPROMISE 2
219 # define CRL_REASON_AFFILIATION_CHANGED 3
220 # define CRL_REASON_SUPERSEDED 4
221 # define CRL_REASON_CESSATION_OF_OPERATION 5
222 # define CRL_REASON_CERTIFICATE_HOLD 6
223 # define CRL_REASON_REMOVE_FROM_CRL 8
224 # define CRL_REASON_PRIVILEGE_WITHDRAWN 9
225 # define CRL_REASON_AA_COMPROMISE 10
227 struct DIST_POINT_st
{
228 DIST_POINT_NAME
*distpoint
;
229 ASN1_BIT_STRING
*reasons
;
230 GENERAL_NAMES
*CRLissuer
;
235 generate_stack_macros("DIST_POINT");
238 typedef STACK_OF(DIST_POINT
) CRL_DIST_POINTS
;
240 struct AUTHORITY_KEYID_st
{
241 ASN1_OCTET_STRING
*keyid
;
242 GENERAL_NAMES
*issuer
;
243 ASN1_INTEGER
*serial
;
246 /* Strong extranet structures */
248 typedef struct SXNET_ID_st
{
250 ASN1_OCTET_STRING
*user
;
254 generate_stack_macros("SXNETID");
258 typedef struct SXNET_st
{
259 ASN1_INTEGER
*version
;
260 STACK_OF(SXNETID
) *ids
;
263 typedef struct ISSUER_SIGN_TOOL_st
{
264 ASN1_UTF8STRING
*signTool
;
265 ASN1_UTF8STRING
*cATool
;
266 ASN1_UTF8STRING
*signToolCert
;
267 ASN1_UTF8STRING
*cAToolCert
;
270 typedef struct NOTICEREF_st
{
271 ASN1_STRING
*organization
;
272 STACK_OF(ASN1_INTEGER
) *noticenos
;
275 typedef struct USERNOTICE_st
{
276 NOTICEREF
*noticeref
;
277 ASN1_STRING
*exptext
;
280 typedef struct POLICYQUALINFO_st
{
281 ASN1_OBJECT
*pqualid
;
283 ASN1_IA5STRING
*cpsuri
;
284 USERNOTICE
*usernotice
;
290 generate_stack_macros("POLICYQUALINFO");
294 typedef struct POLICYINFO_st
{
295 ASN1_OBJECT
*policyid
;
296 STACK_OF(POLICYQUALINFO
) *qualifiers
;
300 generate_stack_macros("POLICYINFO");
303 typedef STACK_OF(POLICYINFO
) CERTIFICATEPOLICIES
;
305 typedef struct POLICY_MAPPING_st
{
306 ASN1_OBJECT
*issuerDomainPolicy
;
307 ASN1_OBJECT
*subjectDomainPolicy
;
311 generate_stack_macros("POLICY_MAPPING");
314 typedef STACK_OF(POLICY_MAPPING
) POLICY_MAPPINGS
;
316 typedef struct GENERAL_SUBTREE_st
{
318 ASN1_INTEGER
*minimum
;
319 ASN1_INTEGER
*maximum
;
323 generate_stack_macros("GENERAL_SUBTREE");
326 struct NAME_CONSTRAINTS_st
{
327 STACK_OF(GENERAL_SUBTREE
) *permittedSubtrees
;
328 STACK_OF(GENERAL_SUBTREE
) *excludedSubtrees
;
331 typedef struct POLICY_CONSTRAINTS_st
{
332 ASN1_INTEGER
*requireExplicitPolicy
;
333 ASN1_INTEGER
*inhibitPolicyMapping
;
334 } POLICY_CONSTRAINTS
;
336 /* Proxy certificate structures, see RFC 3820 */
337 typedef struct PROXY_POLICY_st
{
338 ASN1_OBJECT
*policyLanguage
;
339 ASN1_OCTET_STRING
*policy
;
342 typedef struct PROXY_CERT_INFO_EXTENSION_st
{
343 ASN1_INTEGER
*pcPathLengthConstraint
;
344 PROXY_POLICY
*proxyPolicy
;
345 } PROXY_CERT_INFO_EXTENSION
;
347 DECLARE_ASN1_FUNCTIONS(PROXY_POLICY
)
348 DECLARE_ASN1_FUNCTIONS(PROXY_CERT_INFO_EXTENSION
)
350 struct ISSUING_DIST_POINT_st
{
351 DIST_POINT_NAME
*distpoint
;
354 ASN1_BIT_STRING
*onlysomereasons
;
359 /* Values in idp_flags field */
361 # define IDP_PRESENT 0x1
362 /* IDP values inconsistent */
363 # define IDP_INVALID 0x2
365 # define IDP_ONLYUSER 0x4
367 # define IDP_ONLYCA 0x8
369 # define IDP_ONLYATTR 0x10
370 /* indirectCRL true */
371 # define IDP_INDIRECT 0x20
372 /* onlysomereasons present */
373 # define IDP_REASONS 0x40
375 # define X509V3_conf_err(val) ERR_add_error_data(6, \
376 "section:", (val)->section, \
377 ",name:", (val)->name, ",value:", (val)->value)
379 # define X509V3_set_ctx_test(ctx) \
380 X509V3_set_ctx(ctx, NULL, NULL, NULL, NULL, X509V3_CTX_TEST)
381 # define X509V3_set_ctx_nodb(ctx) (ctx)->db = NULL;
383 # define EXT_BITSTRING(nid, table) { nid, 0, ASN1_ITEM_ref(ASN1_BIT_STRING), \
386 (X509V3_EXT_I2V)i2v_ASN1_BIT_STRING, \
387 (X509V3_EXT_V2I)v2i_ASN1_BIT_STRING, \
391 # define EXT_IA5STRING(nid) { nid, 0, ASN1_ITEM_ref(ASN1_IA5STRING), \
393 (X509V3_EXT_I2S)i2s_ASN1_IA5STRING, \
394 (X509V3_EXT_S2I)s2i_ASN1_IA5STRING, \
398 #define EXT_UTF8STRING(nid) { nid, 0, ASN1_ITEM_ref(ASN1_UTF8STRING), \
400 (X509V3_EXT_I2S)i2s_ASN1_UTF8STRING, \
401 (X509V3_EXT_S2I)s2i_ASN1_UTF8STRING, \
405 # define EXT_END { -1, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0}
407 /* X509_PURPOSE stuff */
409 # define EXFLAG_BCONS 0x1
410 # define EXFLAG_KUSAGE 0x2
411 # define EXFLAG_XKUSAGE 0x4
412 # define EXFLAG_NSCERT 0x8
414 # define EXFLAG_CA 0x10
415 # define EXFLAG_SI 0x20 /* self-issued, maybe not self-signed */
416 # define EXFLAG_V1 0x40
417 # define EXFLAG_INVALID 0x80
418 /* EXFLAG_SET is set to indicate that some values have been precomputed */
419 # define EXFLAG_SET 0x100
420 # define EXFLAG_CRITICAL 0x200
421 # define EXFLAG_PROXY 0x400
423 # define EXFLAG_INVALID_POLICY 0x800
424 # define EXFLAG_FRESHEST 0x1000
425 # define EXFLAG_SS 0x2000 /* cert is apparently self-signed */
427 # define EXFLAG_BCONS_CRITICAL 0x10000
428 # define EXFLAG_AKID_CRITICAL 0x20000
429 # define EXFLAG_SKID_CRITICAL 0x40000
430 # define EXFLAG_SAN_CRITICAL 0x80000
431 # define EXFLAG_NO_FINGERPRINT 0x100000
433 /* https://datatracker.ietf.org/doc/html/rfc5280#section-4.2.1.3 */
434 # define KU_DIGITAL_SIGNATURE X509v3_KU_DIGITAL_SIGNATURE
435 # define KU_NON_REPUDIATION X509v3_KU_NON_REPUDIATION
436 # define KU_KEY_ENCIPHERMENT X509v3_KU_KEY_ENCIPHERMENT
437 # define KU_DATA_ENCIPHERMENT X509v3_KU_DATA_ENCIPHERMENT
438 # define KU_KEY_AGREEMENT X509v3_KU_KEY_AGREEMENT
439 # define KU_KEY_CERT_SIGN X509v3_KU_KEY_CERT_SIGN
440 # define KU_CRL_SIGN X509v3_KU_CRL_SIGN
441 # define KU_ENCIPHER_ONLY X509v3_KU_ENCIPHER_ONLY
442 # define KU_DECIPHER_ONLY X509v3_KU_DECIPHER_ONLY
444 # define NS_SSL_CLIENT 0x80
445 # define NS_SSL_SERVER 0x40
446 # define NS_SMIME 0x20
447 # define NS_OBJSIGN 0x10
448 # define NS_SSL_CA 0x04
449 # define NS_SMIME_CA 0x02
450 # define NS_OBJSIGN_CA 0x01
451 # define NS_ANY_CA (NS_SSL_CA|NS_SMIME_CA|NS_OBJSIGN_CA)
453 # define XKU_SSL_SERVER 0x1
454 # define XKU_SSL_CLIENT 0x2
455 # define XKU_SMIME 0x4
456 # define XKU_CODE_SIGN 0x8
457 # define XKU_SGC 0x10 /* Netscape or MS Server-Gated Crypto */
458 # define XKU_OCSP_SIGN 0x20
459 # define XKU_TIMESTAMP 0x40
460 # define XKU_DVCS 0x80
461 # define XKU_ANYEKU 0x100
463 # define X509_PURPOSE_DYNAMIC 0x1
464 # define X509_PURPOSE_DYNAMIC_NAME 0x2
466 typedef struct x509_purpose_st
{
468 int trust
; /* Default trust ID */
470 int (*check_purpose
) (const struct x509_purpose_st
*, const X509
*, int);
477 generate_stack_macros("X509_PURPOSE");
480 # define X509_PURPOSE_DEFAULT_ANY 0
481 # define X509_PURPOSE_SSL_CLIENT 1
482 # define X509_PURPOSE_SSL_SERVER 2
483 # define X509_PURPOSE_NS_SSL_SERVER 3
484 # define X509_PURPOSE_SMIME_SIGN 4
485 # define X509_PURPOSE_SMIME_ENCRYPT 5
486 # define X509_PURPOSE_CRL_SIGN 6
487 # define X509_PURPOSE_ANY 7
488 # define X509_PURPOSE_OCSP_HELPER 8
489 # define X509_PURPOSE_TIMESTAMP_SIGN 9
490 # define X509_PURPOSE_CODE_SIGN 10
492 # define X509_PURPOSE_MIN 1
493 # define X509_PURPOSE_MAX 10
495 /* Flags for X509V3_EXT_print() */
497 # define X509V3_EXT_UNKNOWN_MASK (0xfL << 16)
498 /* Return error for unknown extensions */
499 # define X509V3_EXT_DEFAULT 0
500 /* Print error for unknown extensions */
501 # define X509V3_EXT_ERROR_UNKNOWN (1L << 16)
502 /* ASN1 parse unknown extensions */
503 # define X509V3_EXT_PARSE_UNKNOWN (2L << 16)
504 /* BIO_dump unknown extensions */
505 # define X509V3_EXT_DUMP_UNKNOWN (3L << 16)
507 /* Flags for X509V3_add1_i2d */
509 # define X509V3_ADD_OP_MASK 0xfL
510 # define X509V3_ADD_DEFAULT 0L
511 # define X509V3_ADD_APPEND 1L
512 # define X509V3_ADD_REPLACE 2L
513 # define X509V3_ADD_REPLACE_EXISTING 3L
514 # define X509V3_ADD_KEEP_EXISTING 4L
515 # define X509V3_ADD_DELETE 5L
516 # define X509V3_ADD_SILENT 0x10
518 DECLARE_ASN1_FUNCTIONS(BASIC_CONSTRAINTS
)
519 DECLARE_ASN1_FUNCTIONS(OSSL_BASIC_ATTR_CONSTRAINTS
)
521 DECLARE_ASN1_FUNCTIONS(SXNET
)
522 DECLARE_ASN1_FUNCTIONS(SXNETID
)
524 DECLARE_ASN1_FUNCTIONS(ISSUER_SIGN_TOOL
)
526 int SXNET_add_id_asc(SXNET
**psx
, const char *zone
, const char *user
, int userlen
);
527 int SXNET_add_id_ulong(SXNET
**psx
, unsigned long lzone
, const char *user
,
529 int SXNET_add_id_INTEGER(SXNET
**psx
, ASN1_INTEGER
*izone
, const char *user
,
532 ASN1_OCTET_STRING
*SXNET_get_id_asc(SXNET
*sx
, const char *zone
);
533 ASN1_OCTET_STRING
*SXNET_get_id_ulong(SXNET
*sx
, unsigned long lzone
);
534 ASN1_OCTET_STRING
*SXNET_get_id_INTEGER(SXNET
*sx
, ASN1_INTEGER
*zone
);
536 DECLARE_ASN1_FUNCTIONS(AUTHORITY_KEYID
)
538 DECLARE_ASN1_FUNCTIONS(PKEY_USAGE_PERIOD
)
540 DECLARE_ASN1_FUNCTIONS(GENERAL_NAME
)
541 DECLARE_ASN1_DUP_FUNCTION(GENERAL_NAME
)
542 int GENERAL_NAME_cmp(GENERAL_NAME
*a
, GENERAL_NAME
*b
);
544 ASN1_BIT_STRING
*v2i_ASN1_BIT_STRING(X509V3_EXT_METHOD
*method
,
546 STACK_OF(CONF_VALUE
) *nval
);
547 STACK_OF(CONF_VALUE
) *i2v_ASN1_BIT_STRING(X509V3_EXT_METHOD
*method
,
548 ASN1_BIT_STRING
*bits
,
549 STACK_OF(CONF_VALUE
) *extlist
);
550 char *i2s_ASN1_IA5STRING(X509V3_EXT_METHOD
*method
, ASN1_IA5STRING
*ia5
);
551 ASN1_IA5STRING
*s2i_ASN1_IA5STRING(X509V3_EXT_METHOD
*method
,
552 X509V3_CTX
*ctx
, const char *str
);
553 char *i2s_ASN1_UTF8STRING(X509V3_EXT_METHOD
*method
, ASN1_UTF8STRING
*utf8
);
554 ASN1_UTF8STRING
*s2i_ASN1_UTF8STRING(X509V3_EXT_METHOD
*method
,
555 X509V3_CTX
*ctx
, const char *str
);
557 STACK_OF(CONF_VALUE
) *i2v_GENERAL_NAME(X509V3_EXT_METHOD
*method
,
559 STACK_OF(CONF_VALUE
) *ret
);
560 int GENERAL_NAME_print(BIO
*out
, GENERAL_NAME
*gen
);
562 DECLARE_ASN1_FUNCTIONS(GENERAL_NAMES
)
564 STACK_OF(CONF_VALUE
) *i2v_GENERAL_NAMES(X509V3_EXT_METHOD
*method
,
566 STACK_OF(CONF_VALUE
) *extlist
);
567 GENERAL_NAMES
*v2i_GENERAL_NAMES(const X509V3_EXT_METHOD
*method
,
568 X509V3_CTX
*ctx
, STACK_OF(CONF_VALUE
) *nval
);
570 DECLARE_ASN1_FUNCTIONS(OTHERNAME
)
571 DECLARE_ASN1_FUNCTIONS(EDIPARTYNAME
)
572 int OTHERNAME_cmp(OTHERNAME
*a
, OTHERNAME
*b
);
573 void GENERAL_NAME_set0_value(GENERAL_NAME
*a
, int type
, void *value
);
574 void *GENERAL_NAME_get0_value(const GENERAL_NAME
*a
, int *ptype
);
575 int GENERAL_NAME_set0_othername(GENERAL_NAME
*gen
,
576 ASN1_OBJECT
*oid
, ASN1_TYPE
*value
);
577 int GENERAL_NAME_get0_otherName(const GENERAL_NAME
*gen
,
578 ASN1_OBJECT
**poid
, ASN1_TYPE
**pvalue
);
580 char *i2s_ASN1_OCTET_STRING(X509V3_EXT_METHOD
*method
,
581 const ASN1_OCTET_STRING
*ia5
);
582 ASN1_OCTET_STRING
*s2i_ASN1_OCTET_STRING(X509V3_EXT_METHOD
*method
,
583 X509V3_CTX
*ctx
, const char *str
);
585 DECLARE_ASN1_FUNCTIONS(EXTENDED_KEY_USAGE
)
586 int i2a_ACCESS_DESCRIPTION(BIO
*bp
, const ACCESS_DESCRIPTION
*a
);
588 DECLARE_ASN1_ALLOC_FUNCTIONS(TLS_FEATURE
)
590 DECLARE_ASN1_FUNCTIONS(CERTIFICATEPOLICIES
)
591 DECLARE_ASN1_FUNCTIONS(POLICYINFO
)
592 DECLARE_ASN1_FUNCTIONS(POLICYQUALINFO
)
593 DECLARE_ASN1_FUNCTIONS(USERNOTICE
)
594 DECLARE_ASN1_FUNCTIONS(NOTICEREF
)
596 DECLARE_ASN1_FUNCTIONS(CRL_DIST_POINTS
)
597 DECLARE_ASN1_FUNCTIONS(DIST_POINT
)
598 DECLARE_ASN1_FUNCTIONS(DIST_POINT_NAME
)
599 DECLARE_ASN1_FUNCTIONS(ISSUING_DIST_POINT
)
601 int DIST_POINT_set_dpname(DIST_POINT_NAME
*dpn
, const X509_NAME
*iname
);
603 int NAME_CONSTRAINTS_check(X509
*x
, NAME_CONSTRAINTS
*nc
);
604 int NAME_CONSTRAINTS_check_CN(X509
*x
, NAME_CONSTRAINTS
*nc
);
606 DECLARE_ASN1_FUNCTIONS(ACCESS_DESCRIPTION
)
607 DECLARE_ASN1_FUNCTIONS(AUTHORITY_INFO_ACCESS
)
609 DECLARE_ASN1_ITEM(POLICY_MAPPING
)
610 DECLARE_ASN1_ALLOC_FUNCTIONS(POLICY_MAPPING
)
611 DECLARE_ASN1_ITEM(POLICY_MAPPINGS
)
613 DECLARE_ASN1_ITEM(GENERAL_SUBTREE
)
614 DECLARE_ASN1_ALLOC_FUNCTIONS(GENERAL_SUBTREE
)
616 DECLARE_ASN1_ITEM(NAME_CONSTRAINTS
)
617 DECLARE_ASN1_ALLOC_FUNCTIONS(NAME_CONSTRAINTS
)
619 DECLARE_ASN1_ALLOC_FUNCTIONS(POLICY_CONSTRAINTS
)
620 DECLARE_ASN1_ITEM(POLICY_CONSTRAINTS
)
622 GENERAL_NAME
*a2i_GENERAL_NAME(GENERAL_NAME
*out
,
623 const X509V3_EXT_METHOD
*method
,
624 X509V3_CTX
*ctx
, int gen_type
,
625 const char *value
, int is_nc
);
627 # ifdef OPENSSL_CONF_H
628 GENERAL_NAME
*v2i_GENERAL_NAME(const X509V3_EXT_METHOD
*method
,
629 X509V3_CTX
*ctx
, CONF_VALUE
*cnf
);
630 GENERAL_NAME
*v2i_GENERAL_NAME_ex(GENERAL_NAME
*out
,
631 const X509V3_EXT_METHOD
*method
,
632 X509V3_CTX
*ctx
, CONF_VALUE
*cnf
,
635 void X509V3_conf_free(CONF_VALUE
*val
);
637 X509_EXTENSION
*X509V3_EXT_nconf_nid(CONF
*conf
, X509V3_CTX
*ctx
, int ext_nid
,
639 X509_EXTENSION
*X509V3_EXT_nconf(CONF
*conf
, X509V3_CTX
*ctx
, const char *name
,
641 int X509V3_EXT_add_nconf_sk(CONF
*conf
, X509V3_CTX
*ctx
, const char *section
,
642 STACK_OF(X509_EXTENSION
) **sk
);
643 int X509V3_EXT_add_nconf(CONF
*conf
, X509V3_CTX
*ctx
, const char *section
,
645 int X509V3_EXT_REQ_add_nconf(CONF
*conf
, X509V3_CTX
*ctx
, const char *section
,
647 int X509V3_EXT_CRL_add_nconf(CONF
*conf
, X509V3_CTX
*ctx
, const char *section
,
650 X509_EXTENSION
*X509V3_EXT_conf_nid(LHASH_OF(CONF_VALUE
) *conf
,
651 X509V3_CTX
*ctx
, int ext_nid
,
653 X509_EXTENSION
*X509V3_EXT_conf(LHASH_OF(CONF_VALUE
) *conf
, X509V3_CTX
*ctx
,
654 const char *name
, const char *value
);
655 int X509V3_EXT_add_conf(LHASH_OF(CONF_VALUE
) *conf
, X509V3_CTX
*ctx
,
656 const char *section
, X509
*cert
);
657 int X509V3_EXT_REQ_add_conf(LHASH_OF(CONF_VALUE
) *conf
, X509V3_CTX
*ctx
,
658 const char *section
, X509_REQ
*req
);
659 int X509V3_EXT_CRL_add_conf(LHASH_OF(CONF_VALUE
) *conf
, X509V3_CTX
*ctx
,
660 const char *section
, X509_CRL
*crl
);
662 int X509V3_add_value_bool_nf(const char *name
, int asn1_bool
,
663 STACK_OF(CONF_VALUE
) **extlist
);
664 int X509V3_get_value_bool(const CONF_VALUE
*value
, int *asn1_bool
);
665 int X509V3_get_value_int(const CONF_VALUE
*value
, ASN1_INTEGER
**aint
);
666 void X509V3_set_nconf(X509V3_CTX
*ctx
, CONF
*conf
);
667 void X509V3_set_conf_lhash(X509V3_CTX
*ctx
, LHASH_OF(CONF_VALUE
) *lhash
);
670 char *X509V3_get_string(X509V3_CTX
*ctx
, const char *name
, const char *section
);
671 STACK_OF(CONF_VALUE
) *X509V3_get_section(X509V3_CTX
*ctx
, const char *section
);
672 void X509V3_string_free(X509V3_CTX
*ctx
, char *str
);
673 void X509V3_section_free(X509V3_CTX
*ctx
, STACK_OF(CONF_VALUE
) *section
);
674 void X509V3_set_ctx(X509V3_CTX
*ctx
, X509
*issuer
, X509
*subject
,
675 X509_REQ
*req
, X509_CRL
*crl
, int flags
);
676 /* For API backward compatibility, this is separate from X509V3_set_ctx(): */
677 int X509V3_set_issuer_pkey(X509V3_CTX
*ctx
, EVP_PKEY
*pkey
);
679 int X509V3_add_value(const char *name
, const char *value
,
680 STACK_OF(CONF_VALUE
) **extlist
);
681 int X509V3_add_value_uchar(const char *name
, const unsigned char *value
,
682 STACK_OF(CONF_VALUE
) **extlist
);
683 int X509V3_add_value_bool(const char *name
, int asn1_bool
,
684 STACK_OF(CONF_VALUE
) **extlist
);
685 int X509V3_add_value_int(const char *name
, const ASN1_INTEGER
*aint
,
686 STACK_OF(CONF_VALUE
) **extlist
);
687 char *i2s_ASN1_INTEGER(X509V3_EXT_METHOD
*meth
, const ASN1_INTEGER
*aint
);
688 ASN1_INTEGER
*s2i_ASN1_INTEGER(X509V3_EXT_METHOD
*meth
, const char *value
);
689 char *i2s_ASN1_ENUMERATED(X509V3_EXT_METHOD
*meth
, const ASN1_ENUMERATED
*aint
);
690 char *i2s_ASN1_ENUMERATED_TABLE(X509V3_EXT_METHOD
*meth
,
691 const ASN1_ENUMERATED
*aint
);
692 int X509V3_EXT_add(X509V3_EXT_METHOD
*ext
);
693 int X509V3_EXT_add_list(X509V3_EXT_METHOD
*extlist
);
694 int X509V3_EXT_add_alias(int nid_to
, int nid_from
);
695 void X509V3_EXT_cleanup(void);
697 const X509V3_EXT_METHOD
*X509V3_EXT_get(X509_EXTENSION
*ext
);
698 const X509V3_EXT_METHOD
*X509V3_EXT_get_nid(int nid
);
699 int X509V3_add_standard_extensions(void);
700 STACK_OF(CONF_VALUE
) *X509V3_parse_list(const char *line
);
701 void *X509V3_EXT_d2i(X509_EXTENSION
*ext
);
702 void *X509V3_get_d2i(const STACK_OF(X509_EXTENSION
) *x
, int nid
, int *crit
,
705 X509_EXTENSION
*X509V3_EXT_i2d(int ext_nid
, int crit
, void *ext_struc
);
706 int X509V3_add1_i2d(STACK_OF(X509_EXTENSION
) **x
, int nid
, void *value
,
707 int crit
, unsigned long flags
);
709 #ifndef OPENSSL_NO_DEPRECATED_1_1_0
710 /* The new declarations are in crypto.h, but the old ones were here. */
711 # define hex_to_string OPENSSL_buf2hexstr
712 # define string_to_hex OPENSSL_hexstr2buf
715 void X509V3_EXT_val_prn(BIO
*out
, STACK_OF(CONF_VALUE
) *val
, int indent
,
717 int X509V3_EXT_print(BIO
*out
, X509_EXTENSION
*ext
, unsigned long flag
,
719 #ifndef OPENSSL_NO_STDIO
720 int X509V3_EXT_print_fp(FILE *out
, X509_EXTENSION
*ext
, int flag
, int indent
);
722 int X509V3_extensions_print(BIO
*out
, const char *title
,
723 const STACK_OF(X509_EXTENSION
) *exts
,
724 unsigned long flag
, int indent
);
726 int X509_check_ca(X509
*x
);
727 int X509_check_purpose(X509
*x
, int id
, int ca
);
728 int X509_supported_extension(X509_EXTENSION
*ex
);
729 int X509_check_issued(X509
*issuer
, X509
*subject
);
730 int X509_check_akid(const X509
*issuer
, const AUTHORITY_KEYID
*akid
);
731 void X509_set_proxy_flag(X509
*x
);
732 void X509_set_proxy_pathlen(X509
*x
, long l
);
733 long X509_get_proxy_pathlen(X509
*x
);
735 uint32_t X509_get_extension_flags(X509
*x
);
736 uint32_t X509_get_key_usage(X509
*x
);
737 uint32_t X509_get_extended_key_usage(X509
*x
);
738 const ASN1_OCTET_STRING
*X509_get0_subject_key_id(X509
*x
);
739 const ASN1_OCTET_STRING
*X509_get0_authority_key_id(X509
*x
);
740 const GENERAL_NAMES
*X509_get0_authority_issuer(X509
*x
);
741 const ASN1_INTEGER
*X509_get0_authority_serial(X509
*x
);
743 int X509_PURPOSE_get_count(void);
744 int X509_PURPOSE_get_unused_id(OSSL_LIB_CTX
*libctx
);
745 int X509_PURPOSE_get_by_sname(const char *sname
);
746 int X509_PURPOSE_get_by_id(int id
);
747 int X509_PURPOSE_add(int id
, int trust
, int flags
,
748 int (*ck
) (const X509_PURPOSE
*, const X509
*, int),
749 const char *name
, const char *sname
, void *arg
);
750 void X509_PURPOSE_cleanup(void);
752 X509_PURPOSE
*X509_PURPOSE_get0(int idx
);
753 int X509_PURPOSE_get_id(const X509_PURPOSE
*);
754 char *X509_PURPOSE_get0_name(const X509_PURPOSE
*xp
);
755 char *X509_PURPOSE_get0_sname(const X509_PURPOSE
*xp
);
756 int X509_PURPOSE_get_trust(const X509_PURPOSE
*xp
);
757 int X509_PURPOSE_set(int *p
, int purpose
);
759 STACK_OF(OPENSSL_STRING
) *X509_get1_email(X509
*x
);
760 STACK_OF(OPENSSL_STRING
) *X509_REQ_get1_email(X509_REQ
*x
);
761 void X509_email_free(STACK_OF(OPENSSL_STRING
) *sk
);
762 STACK_OF(OPENSSL_STRING
) *X509_get1_ocsp(X509
*x
);
764 /* Flags for X509_check_* functions */
767 * Always check subject name for host match even if subject alt names present
769 # define X509_CHECK_FLAG_ALWAYS_CHECK_SUBJECT 0x1
770 /* Disable wildcard matching for dnsName fields and common name. */
771 # define X509_CHECK_FLAG_NO_WILDCARDS 0x2
772 /* Wildcards must not match a partial label. */
773 # define X509_CHECK_FLAG_NO_PARTIAL_WILDCARDS 0x4
774 /* Allow (non-partial) wildcards to match multiple labels. */
775 # define X509_CHECK_FLAG_MULTI_LABEL_WILDCARDS 0x8
776 /* Constraint verifier subdomain patterns to match a single labels. */
777 # define X509_CHECK_FLAG_SINGLE_LABEL_SUBDOMAINS 0x10
778 /* Never check the subject CN */
779 # define X509_CHECK_FLAG_NEVER_CHECK_SUBJECT 0x20
781 * Match reference identifiers starting with "." to any sub-domain.
782 * This is a non-public flag, turned on implicitly when the subject
783 * reference identity is a DNS name.
785 # define _X509_CHECK_FLAG_DOT_SUBDOMAINS 0x8000
787 int X509_check_host(X509
*x
, const char *chk
, size_t chklen
,
788 unsigned int flags
, char **peername
);
789 int X509_check_email(X509
*x
, const char *chk
, size_t chklen
,
791 int X509_check_ip(X509
*x
, const unsigned char *chk
, size_t chklen
,
793 int X509_check_ip_asc(X509
*x
, const char *ipasc
, unsigned int flags
);
795 ASN1_OCTET_STRING
*a2i_IPADDRESS(const char *ipasc
);
796 ASN1_OCTET_STRING
*a2i_IPADDRESS_NC(const char *ipasc
);
797 int X509V3_NAME_from_section(X509_NAME
*nm
, STACK_OF(CONF_VALUE
) *dn_sk
,
798 unsigned long chtype
);
800 void X509_POLICY_NODE_print(BIO
*out
, X509_POLICY_NODE
*node
, int indent
);
802 generate_stack_macros("X509_POLICY_NODE");
806 #ifndef OPENSSL_NO_RFC3779
807 typedef struct ASRange_st
{
808 ASN1_INTEGER
*min
, *max
;
811 # define ASIdOrRange_id 0
812 # define ASIdOrRange_range 1
814 typedef struct ASIdOrRange_st
{
823 generate_stack_macros("ASIdOrRange");
826 typedef STACK_OF(ASIdOrRange
) ASIdOrRanges
;
828 # define ASIdentifierChoice_inherit 0
829 # define ASIdentifierChoice_asIdsOrRanges 1
831 typedef struct ASIdentifierChoice_st
{
835 ASIdOrRanges
*asIdsOrRanges
;
837 } ASIdentifierChoice
;
839 typedef struct ASIdentifiers_st
{
840 ASIdentifierChoice
*asnum
, *rdi
;
843 DECLARE_ASN1_FUNCTIONS(ASRange
)
844 DECLARE_ASN1_FUNCTIONS(ASIdOrRange
)
845 DECLARE_ASN1_FUNCTIONS(ASIdentifierChoice
)
846 DECLARE_ASN1_FUNCTIONS(ASIdentifiers
)
848 typedef struct IPAddressRange_st
{
849 ASN1_BIT_STRING
*min
, *max
;
852 # define IPAddressOrRange_addressPrefix 0
853 # define IPAddressOrRange_addressRange 1
855 typedef struct IPAddressOrRange_st
{
858 ASN1_BIT_STRING
*addressPrefix
;
859 IPAddressRange
*addressRange
;
864 generate_stack_macros("IPAddressOrRange");
867 typedef STACK_OF(IPAddressOrRange
) IPAddressOrRanges
;
869 # define IPAddressChoice_inherit 0
870 # define IPAddressChoice_addressesOrRanges 1
872 typedef struct IPAddressChoice_st
{
876 IPAddressOrRanges
*addressesOrRanges
;
880 typedef struct IPAddressFamily_st
{
881 ASN1_OCTET_STRING
*addressFamily
;
882 IPAddressChoice
*ipAddressChoice
;
886 generate_stack_macros("IPAddressFamily");
890 typedef STACK_OF(IPAddressFamily
) IPAddrBlocks
;
892 DECLARE_ASN1_FUNCTIONS(IPAddressRange
)
893 DECLARE_ASN1_FUNCTIONS(IPAddressOrRange
)
894 DECLARE_ASN1_FUNCTIONS(IPAddressChoice
)
895 DECLARE_ASN1_FUNCTIONS(IPAddressFamily
)
898 * API tag for elements of the ASIdentifer SEQUENCE.
900 # define V3_ASID_ASNUM 0
901 # define V3_ASID_RDI 1
904 * AFI values, assigned by IANA. It'd be nice to make the AFI
905 * handling code totally generic, but there are too many little things
906 * that would need to be defined for other address families for it to
907 * be worth the trouble.
909 # define IANA_AFI_IPV4 1
910 # define IANA_AFI_IPV6 2
913 * Utilities to construct and extract values from RFC3779 extensions,
914 * since some of the encodings (particularly for IP address prefixes
915 * and ranges) are a bit tedious to work with directly.
917 int X509v3_asid_add_inherit(ASIdentifiers
*asid
, int which
);
918 int X509v3_asid_add_id_or_range(ASIdentifiers
*asid
, int which
,
919 ASN1_INTEGER
*min
, ASN1_INTEGER
*max
);
920 int X509v3_addr_add_inherit(IPAddrBlocks
*addr
,
921 const unsigned afi
, const unsigned *safi
);
922 int X509v3_addr_add_prefix(IPAddrBlocks
*addr
,
923 const unsigned afi
, const unsigned *safi
,
924 unsigned char *a
, const int prefixlen
);
925 int X509v3_addr_add_range(IPAddrBlocks
*addr
,
926 const unsigned afi
, const unsigned *safi
,
927 unsigned char *min
, unsigned char *max
);
928 unsigned X509v3_addr_get_afi(const IPAddressFamily
*f
);
929 int X509v3_addr_get_range(IPAddressOrRange
*aor
, const unsigned afi
,
930 unsigned char *min
, unsigned char *max
,
936 int X509v3_asid_is_canonical(ASIdentifiers
*asid
);
937 int X509v3_addr_is_canonical(IPAddrBlocks
*addr
);
938 int X509v3_asid_canonize(ASIdentifiers
*asid
);
939 int X509v3_addr_canonize(IPAddrBlocks
*addr
);
942 * Tests for inheritance and containment.
944 int X509v3_asid_inherits(ASIdentifiers
*asid
);
945 int X509v3_addr_inherits(IPAddrBlocks
*addr
);
946 int X509v3_asid_subset(ASIdentifiers
*a
, ASIdentifiers
*b
);
947 int X509v3_addr_subset(IPAddrBlocks
*a
, IPAddrBlocks
*b
);
950 * Check whether RFC 3779 extensions nest properly in chains.
952 int X509v3_asid_validate_path(X509_STORE_CTX
*);
953 int X509v3_addr_validate_path(X509_STORE_CTX
*);
954 int X509v3_asid_validate_resource_set(STACK_OF(X509
) *chain
,
956 int allow_inheritance
);
957 int X509v3_addr_validate_resource_set(STACK_OF(X509
) *chain
,
958 IPAddrBlocks
*ext
, int allow_inheritance
);
960 #endif /* OPENSSL_NO_RFC3779 */
963 generate_stack_macros("ASN1_STRING");
969 typedef struct NamingAuthority_st NAMING_AUTHORITY
;
970 typedef struct ProfessionInfo_st PROFESSION_INFO
;
971 typedef struct Admissions_st ADMISSIONS
;
972 typedef struct AdmissionSyntax_st ADMISSION_SYNTAX
;
973 DECLARE_ASN1_FUNCTIONS(NAMING_AUTHORITY
)
974 DECLARE_ASN1_FUNCTIONS(PROFESSION_INFO
)
975 DECLARE_ASN1_FUNCTIONS(ADMISSIONS
)
976 DECLARE_ASN1_FUNCTIONS(ADMISSION_SYNTAX
)
978 generate_stack_macros("PROFESSION_INFO")
979 .generate_stack_macros("ADMISSIONS");
981 typedef STACK_OF(PROFESSION_INFO
) PROFESSION_INFOS
;
983 const ASN1_OBJECT
*NAMING_AUTHORITY_get0_authorityId(
984 const NAMING_AUTHORITY
*n
);
985 const ASN1_IA5STRING
*NAMING_AUTHORITY_get0_authorityURL(
986 const NAMING_AUTHORITY
*n
);
987 const ASN1_STRING
*NAMING_AUTHORITY_get0_authorityText(
988 const NAMING_AUTHORITY
*n
);
989 void NAMING_AUTHORITY_set0_authorityId(NAMING_AUTHORITY
*n
,
990 ASN1_OBJECT
* namingAuthorityId
);
991 void NAMING_AUTHORITY_set0_authorityURL(NAMING_AUTHORITY
*n
,
992 ASN1_IA5STRING
* namingAuthorityUrl
);
993 void NAMING_AUTHORITY_set0_authorityText(NAMING_AUTHORITY
*n
,
994 ASN1_STRING
* namingAuthorityText
);
996 const GENERAL_NAME
*ADMISSION_SYNTAX_get0_admissionAuthority(
997 const ADMISSION_SYNTAX
*as
);
998 void ADMISSION_SYNTAX_set0_admissionAuthority(
999 ADMISSION_SYNTAX
*as
, GENERAL_NAME
*aa
);
1000 const STACK_OF(ADMISSIONS
) *ADMISSION_SYNTAX_get0_contentsOfAdmissions(
1001 const ADMISSION_SYNTAX
*as
);
1002 void ADMISSION_SYNTAX_set0_contentsOfAdmissions(
1003 ADMISSION_SYNTAX
*as
, STACK_OF(ADMISSIONS
) *a
);
1004 const GENERAL_NAME
*ADMISSIONS_get0_admissionAuthority(const ADMISSIONS
*a
);
1005 void ADMISSIONS_set0_admissionAuthority(ADMISSIONS
*a
, GENERAL_NAME
*aa
);
1006 const NAMING_AUTHORITY
*ADMISSIONS_get0_namingAuthority(const ADMISSIONS
*a
);
1007 void ADMISSIONS_set0_namingAuthority(ADMISSIONS
*a
, NAMING_AUTHORITY
*na
);
1008 const PROFESSION_INFOS
*ADMISSIONS_get0_professionInfos(const ADMISSIONS
*a
);
1009 void ADMISSIONS_set0_professionInfos(ADMISSIONS
*a
, PROFESSION_INFOS
*pi
);
1010 const ASN1_OCTET_STRING
*PROFESSION_INFO_get0_addProfessionInfo(
1011 const PROFESSION_INFO
*pi
);
1012 void PROFESSION_INFO_set0_addProfessionInfo(
1013 PROFESSION_INFO
*pi
, ASN1_OCTET_STRING
*aos
);
1014 const NAMING_AUTHORITY
*PROFESSION_INFO_get0_namingAuthority(
1015 const PROFESSION_INFO
*pi
);
1016 void PROFESSION_INFO_set0_namingAuthority(
1017 PROFESSION_INFO
*pi
, NAMING_AUTHORITY
*na
);
1018 const STACK_OF(ASN1_STRING
) *PROFESSION_INFO_get0_professionItems(
1019 const PROFESSION_INFO
*pi
);
1020 void PROFESSION_INFO_set0_professionItems(
1021 PROFESSION_INFO
*pi
, STACK_OF(ASN1_STRING
) *as
);
1022 const STACK_OF(ASN1_OBJECT
) *PROFESSION_INFO_get0_professionOIDs(
1023 const PROFESSION_INFO
*pi
);
1024 void PROFESSION_INFO_set0_professionOIDs(
1025 PROFESSION_INFO
*pi
, STACK_OF(ASN1_OBJECT
) *po
);
1026 const ASN1_PRINTABLESTRING
*PROFESSION_INFO_get0_registrationNumber(
1027 const PROFESSION_INFO
*pi
);
1028 void PROFESSION_INFO_set0_registrationNumber(
1029 PROFESSION_INFO
*pi
, ASN1_PRINTABLESTRING
*rn
);
1031 int OSSL_GENERAL_NAMES_print(BIO
*out
, GENERAL_NAMES
*gens
, int indent
);
1033 typedef STACK_OF(X509_ATTRIBUTE
) OSSL_ATTRIBUTES_SYNTAX
;
1034 DECLARE_ASN1_FUNCTIONS(OSSL_ATTRIBUTES_SYNTAX
)
1036 typedef STACK_OF(USERNOTICE
) OSSL_USER_NOTICE_SYNTAX
;
1037 DECLARE_ASN1_FUNCTIONS(OSSL_USER_NOTICE_SYNTAX
)
1040 generate_stack_macros("USERNOTICE");
1043 typedef struct OSSL_ROLE_SPEC_CERT_ID_st
{
1044 GENERAL_NAME
*roleName
;
1045 GENERAL_NAME
*roleCertIssuer
;
1046 ASN1_INTEGER
*roleCertSerialNumber
;
1047 GENERAL_NAMES
*roleCertLocator
;
1048 } OSSL_ROLE_SPEC_CERT_ID
;
1050 DECLARE_ASN1_FUNCTIONS(OSSL_ROLE_SPEC_CERT_ID
)
1053 generate_stack_macros("OSSL_ROLE_SPEC_CERT_ID");
1056 typedef STACK_OF(OSSL_ROLE_SPEC_CERT_ID
) OSSL_ROLE_SPEC_CERT_ID_SYNTAX
;
1058 DECLARE_ASN1_FUNCTIONS(OSSL_ROLE_SPEC_CERT_ID_SYNTAX
)
1059 typedef struct OSSL_HASH_st
{
1060 X509_ALGOR
*algorithmIdentifier
;
1061 ASN1_BIT_STRING
*hashValue
;
1064 typedef struct OSSL_INFO_SYNTAX_POINTER_st
{
1065 GENERAL_NAMES
*name
;
1067 } OSSL_INFO_SYNTAX_POINTER
;
1069 # define OSSL_INFO_SYNTAX_TYPE_CONTENT 0
1070 # define OSSL_INFO_SYNTAX_TYPE_POINTER 1
1072 typedef struct OSSL_INFO_SYNTAX_st
{
1075 ASN1_STRING
*content
;
1076 OSSL_INFO_SYNTAX_POINTER
*pointer
;
1080 typedef struct OSSL_PRIVILEGE_POLICY_ID_st
{
1081 ASN1_OBJECT
*privilegePolicy
;
1082 OSSL_INFO_SYNTAX
*privPolSyntax
;
1083 } OSSL_PRIVILEGE_POLICY_ID
;
1085 typedef struct OSSL_ATTRIBUTE_DESCRIPTOR_st
{
1086 ASN1_OBJECT
*identifier
;
1087 ASN1_STRING
*attributeSyntax
;
1088 ASN1_UTF8STRING
*name
;
1089 ASN1_UTF8STRING
*description
;
1090 OSSL_PRIVILEGE_POLICY_ID
*dominationRule
;
1091 } OSSL_ATTRIBUTE_DESCRIPTOR
;
1093 DECLARE_ASN1_FUNCTIONS(OSSL_HASH
)
1094 DECLARE_ASN1_FUNCTIONS(OSSL_INFO_SYNTAX
)
1095 DECLARE_ASN1_FUNCTIONS(OSSL_INFO_SYNTAX_POINTER
)
1096 DECLARE_ASN1_FUNCTIONS(OSSL_PRIVILEGE_POLICY_ID
)
1097 DECLARE_ASN1_FUNCTIONS(OSSL_ATTRIBUTE_DESCRIPTOR
)
1099 typedef struct OSSL_TIME_SPEC_ABSOLUTE_st
{
1100 ASN1_GENERALIZEDTIME
*startTime
;
1101 ASN1_GENERALIZEDTIME
*endTime
;
1102 } OSSL_TIME_SPEC_ABSOLUTE
;
1104 typedef struct OSSL_DAY_TIME_st
{
1106 ASN1_INTEGER
*minute
;
1107 ASN1_INTEGER
*second
;
1110 typedef struct OSSL_DAY_TIME_BAND_st
{
1111 OSSL_DAY_TIME
*startDayTime
;
1112 OSSL_DAY_TIME
*endDayTime
;
1113 } OSSL_DAY_TIME_BAND
;
1115 # define OSSL_NAMED_DAY_TYPE_INT 0
1116 # define OSSL_NAMED_DAY_TYPE_BIT 1
1117 # define OSSL_NAMED_DAY_INT_SUN 1
1118 # define OSSL_NAMED_DAY_INT_MON 2
1119 # define OSSL_NAMED_DAY_INT_TUE 3
1120 # define OSSL_NAMED_DAY_INT_WED 4
1121 # define OSSL_NAMED_DAY_INT_THU 5
1122 # define OSSL_NAMED_DAY_INT_FRI 6
1123 # define OSSL_NAMED_DAY_INT_SAT 7
1124 # define OSSL_NAMED_DAY_BIT_SUN 0
1125 # define OSSL_NAMED_DAY_BIT_MON 1
1126 # define OSSL_NAMED_DAY_BIT_TUE 2
1127 # define OSSL_NAMED_DAY_BIT_WED 3
1128 # define OSSL_NAMED_DAY_BIT_THU 4
1129 # define OSSL_NAMED_DAY_BIT_FRI 5
1130 # define OSSL_NAMED_DAY_BIT_SAT 6
1132 typedef struct OSSL_NAMED_DAY_st
{
1135 ASN1_INTEGER
*intNamedDays
;
1136 ASN1_BIT_STRING
*bitNamedDays
;
1140 # define OSSL_TIME_SPEC_X_DAY_OF_FIRST 0
1141 # define OSSL_TIME_SPEC_X_DAY_OF_SECOND 1
1142 # define OSSL_TIME_SPEC_X_DAY_OF_THIRD 2
1143 # define OSSL_TIME_SPEC_X_DAY_OF_FOURTH 3
1144 # define OSSL_TIME_SPEC_X_DAY_OF_FIFTH 4
1146 typedef struct OSSL_TIME_SPEC_X_DAY_OF_st
{
1149 OSSL_NAMED_DAY
*first
;
1150 OSSL_NAMED_DAY
*second
;
1151 OSSL_NAMED_DAY
*third
;
1152 OSSL_NAMED_DAY
*fourth
;
1153 OSSL_NAMED_DAY
*fifth
;
1155 } OSSL_TIME_SPEC_X_DAY_OF
;
1157 # define OSSL_TIME_SPEC_DAY_TYPE_INT 0
1158 # define OSSL_TIME_SPEC_DAY_TYPE_BIT 1
1159 # define OSSL_TIME_SPEC_DAY_TYPE_DAY_OF 2
1160 # define OSSL_TIME_SPEC_DAY_BIT_SUN 0
1161 # define OSSL_TIME_SPEC_DAY_BIT_MON 1
1162 # define OSSL_TIME_SPEC_DAY_BIT_TUE 2
1163 # define OSSL_TIME_SPEC_DAY_BIT_WED 3
1164 # define OSSL_TIME_SPEC_DAY_BIT_THU 4
1165 # define OSSL_TIME_SPEC_DAY_BIT_FRI 5
1166 # define OSSL_TIME_SPEC_DAY_BIT_SAT 6
1167 # define OSSL_TIME_SPEC_DAY_INT_SUN 1
1168 # define OSSL_TIME_SPEC_DAY_INT_MON 2
1169 # define OSSL_TIME_SPEC_DAY_INT_TUE 3
1170 # define OSSL_TIME_SPEC_DAY_INT_WED 4
1171 # define OSSL_TIME_SPEC_DAY_INT_THU 5
1172 # define OSSL_TIME_SPEC_DAY_INT_FRI 6
1173 # define OSSL_TIME_SPEC_DAY_INT_SAT 7
1175 typedef struct OSSL_TIME_SPEC_DAY_st
{
1178 STACK_OF(ASN1_INTEGER
) *intDay
;
1179 ASN1_BIT_STRING
*bitDay
;
1180 OSSL_TIME_SPEC_X_DAY_OF
*dayOf
;
1182 } OSSL_TIME_SPEC_DAY
;
1184 # define OSSL_TIME_SPEC_WEEKS_TYPE_ALL 0
1185 # define OSSL_TIME_SPEC_WEEKS_TYPE_INT 1
1186 # define OSSL_TIME_SPEC_WEEKS_TYPE_BIT 2
1187 # define OSSL_TIME_SPEC_BIT_WEEKS_1 0
1188 # define OSSL_TIME_SPEC_BIT_WEEKS_2 1
1189 # define OSSL_TIME_SPEC_BIT_WEEKS_3 2
1190 # define OSSL_TIME_SPEC_BIT_WEEKS_4 3
1191 # define OSSL_TIME_SPEC_BIT_WEEKS_5 4
1193 typedef struct OSSL_TIME_SPEC_WEEKS_st
{
1196 ASN1_NULL
*allWeeks
;
1197 STACK_OF(ASN1_INTEGER
) *intWeek
;
1198 ASN1_BIT_STRING
*bitWeek
;
1200 } OSSL_TIME_SPEC_WEEKS
;
1202 # define OSSL_TIME_SPEC_MONTH_TYPE_ALL 0
1203 # define OSSL_TIME_SPEC_MONTH_TYPE_INT 1
1204 # define OSSL_TIME_SPEC_MONTH_TYPE_BIT 2
1205 # define OSSL_TIME_SPEC_INT_MONTH_JAN 1
1206 # define OSSL_TIME_SPEC_INT_MONTH_FEB 2
1207 # define OSSL_TIME_SPEC_INT_MONTH_MAR 3
1208 # define OSSL_TIME_SPEC_INT_MONTH_APR 4
1209 # define OSSL_TIME_SPEC_INT_MONTH_MAY 5
1210 # define OSSL_TIME_SPEC_INT_MONTH_JUN 6
1211 # define OSSL_TIME_SPEC_INT_MONTH_JUL 7
1212 # define OSSL_TIME_SPEC_INT_MONTH_AUG 8
1213 # define OSSL_TIME_SPEC_INT_MONTH_SEP 9
1214 # define OSSL_TIME_SPEC_INT_MONTH_OCT 10
1215 # define OSSL_TIME_SPEC_INT_MONTH_NOV 11
1216 # define OSSL_TIME_SPEC_INT_MONTH_DEC 12
1217 # define OSSL_TIME_SPEC_BIT_MONTH_JAN 0
1218 # define OSSL_TIME_SPEC_BIT_MONTH_FEB 1
1219 # define OSSL_TIME_SPEC_BIT_MONTH_MAR 2
1220 # define OSSL_TIME_SPEC_BIT_MONTH_APR 3
1221 # define OSSL_TIME_SPEC_BIT_MONTH_MAY 4
1222 # define OSSL_TIME_SPEC_BIT_MONTH_JUN 5
1223 # define OSSL_TIME_SPEC_BIT_MONTH_JUL 6
1224 # define OSSL_TIME_SPEC_BIT_MONTH_AUG 7
1225 # define OSSL_TIME_SPEC_BIT_MONTH_SEP 8
1226 # define OSSL_TIME_SPEC_BIT_MONTH_OCT 9
1227 # define OSSL_TIME_SPEC_BIT_MONTH_NOV 10
1228 # define OSSL_TIME_SPEC_BIT_MONTH_DEC 11
1230 typedef struct OSSL_TIME_SPEC_MONTH_st
{
1233 ASN1_NULL
*allMonths
;
1234 STACK_OF(ASN1_INTEGER
) *intMonth
;
1235 ASN1_BIT_STRING
*bitMonth
;
1237 } OSSL_TIME_SPEC_MONTH
;
1239 typedef struct OSSL_TIME_PERIOD_st
{
1240 STACK_OF(OSSL_DAY_TIME_BAND
) *timesOfDay
;
1241 OSSL_TIME_SPEC_DAY
*days
;
1242 OSSL_TIME_SPEC_WEEKS
*weeks
;
1243 OSSL_TIME_SPEC_MONTH
*months
;
1244 STACK_OF(ASN1_INTEGER
) *years
;
1247 # define OSSL_TIME_SPEC_TIME_TYPE_ABSOLUTE 0
1248 # define OSSL_TIME_SPEC_TIME_TYPE_PERIODIC 1
1250 typedef struct OSSL_TIME_SPEC_TIME_st
{
1253 OSSL_TIME_SPEC_ABSOLUTE
*absolute
;
1254 STACK_OF(OSSL_TIME_PERIOD
) *periodic
;
1256 } OSSL_TIME_SPEC_TIME
;
1258 typedef struct OSSL_TIME_SPEC_st
{
1259 OSSL_TIME_SPEC_TIME
*time
;
1260 ASN1_BOOLEAN notThisTime
;
1261 ASN1_INTEGER
*timeZone
;
1264 DECLARE_ASN1_FUNCTIONS(OSSL_DAY_TIME
)
1265 DECLARE_ASN1_FUNCTIONS(OSSL_DAY_TIME_BAND
)
1266 DECLARE_ASN1_FUNCTIONS(OSSL_TIME_SPEC_DAY
)
1267 DECLARE_ASN1_FUNCTIONS(OSSL_TIME_SPEC_WEEKS
)
1268 DECLARE_ASN1_FUNCTIONS(OSSL_TIME_SPEC_MONTH
)
1269 DECLARE_ASN1_FUNCTIONS(OSSL_NAMED_DAY
)
1270 DECLARE_ASN1_FUNCTIONS(OSSL_TIME_SPEC_X_DAY_OF
)
1271 DECLARE_ASN1_FUNCTIONS(OSSL_TIME_SPEC_ABSOLUTE
)
1272 DECLARE_ASN1_FUNCTIONS(OSSL_TIME_SPEC_TIME
)
1273 DECLARE_ASN1_FUNCTIONS(OSSL_TIME_SPEC
)
1274 DECLARE_ASN1_FUNCTIONS(OSSL_TIME_PERIOD
)
1277 generate_stack_macros("OSSL_TIME_PERIOD");
1281 generate_stack_macros("OSSL_DAY_TIME_BAND");
1284 /* Attribute Type and Value */
1285 typedef struct atav_st
{
1290 typedef struct ATTRIBUTE_TYPE_MAPPING_st
{
1292 ASN1_OBJECT
*remote
;
1293 } OSSL_ATTRIBUTE_TYPE_MAPPING
;
1295 typedef struct ATTRIBUTE_VALUE_MAPPING_st
{
1298 } OSSL_ATTRIBUTE_VALUE_MAPPING
;
1300 # define OSSL_ATTR_MAP_TYPE 0
1301 # define OSSL_ATTR_MAP_VALUE 1
1303 typedef struct ATTRIBUTE_MAPPING_st
{
1306 OSSL_ATTRIBUTE_TYPE_MAPPING
*typeMappings
;
1307 OSSL_ATTRIBUTE_VALUE_MAPPING
*typeValueMappings
;
1309 } OSSL_ATTRIBUTE_MAPPING
;
1311 typedef STACK_OF(OSSL_ATTRIBUTE_MAPPING
) OSSL_ATTRIBUTE_MAPPINGS
;
1312 DECLARE_ASN1_FUNCTIONS(OSSL_ATAV
)
1313 DECLARE_ASN1_FUNCTIONS(OSSL_ATTRIBUTE_TYPE_MAPPING
)
1314 DECLARE_ASN1_FUNCTIONS(OSSL_ATTRIBUTE_VALUE_MAPPING
)
1315 DECLARE_ASN1_FUNCTIONS(OSSL_ATTRIBUTE_MAPPING
)
1316 DECLARE_ASN1_FUNCTIONS(OSSL_ATTRIBUTE_MAPPINGS
)
1319 generate_stack_macros("OSSL_ATTRIBUTE_MAPPING");
1322 # define OSSL_AAA_ATTRIBUTE_TYPE 0
1323 # define OSSL_AAA_ATTRIBUTE_VALUES 1
1325 typedef struct ALLOWED_ATTRIBUTES_CHOICE_st
{
1328 ASN1_OBJECT
*attributeType
;
1329 X509_ATTRIBUTE
*attributeTypeandValues
;
1331 } OSSL_ALLOWED_ATTRIBUTES_CHOICE
;
1333 typedef struct ALLOWED_ATTRIBUTES_ITEM_st
{
1334 STACK_OF(OSSL_ALLOWED_ATTRIBUTES_CHOICE
) *attributes
;
1335 GENERAL_NAME
*holderDomain
;
1336 } OSSL_ALLOWED_ATTRIBUTES_ITEM
;
1338 typedef STACK_OF(OSSL_ALLOWED_ATTRIBUTES_ITEM
) OSSL_ALLOWED_ATTRIBUTES_SYNTAX
;
1340 DECLARE_ASN1_FUNCTIONS(OSSL_ALLOWED_ATTRIBUTES_CHOICE
)
1341 DECLARE_ASN1_FUNCTIONS(OSSL_ALLOWED_ATTRIBUTES_ITEM
)
1342 DECLARE_ASN1_FUNCTIONS(OSSL_ALLOWED_ATTRIBUTES_SYNTAX
)
1345 generate_stack_macros("OSSL_ALLOWED_ATTRIBUTES_CHOICE");
1349 generate_stack_macros("OSSL_ALLOWED_ATTRIBUTES_ITEM");
1352 typedef struct AA_DIST_POINT_st
{
1353 DIST_POINT_NAME
*distpoint
;
1354 ASN1_BIT_STRING
*reasons
;
1356 ASN1_BOOLEAN indirectCRL
;
1357 ASN1_BOOLEAN containsUserAttributeCerts
;
1358 ASN1_BOOLEAN containsAACerts
;
1359 ASN1_BOOLEAN containsSOAPublicKeyCerts
;
1360 } OSSL_AA_DIST_POINT
;
1362 DECLARE_ASN1_FUNCTIONS(OSSL_AA_DIST_POINT
)