]> git.ipfire.org Git - thirdparty/openssl.git/blob - include/openssl/x509v3.h.in
Add lock contention checking to our pthreads implementation
[thirdparty/openssl.git] / include / openssl / x509v3.h.in
1 /*
2 * {- join("\n * ", @autowarntext) -}
3 *
4 * Copyright 1999-2025 The OpenSSL Project Authors. All Rights Reserved.
5 *
6 * Licensed under the Apache License 2.0 (the "License"). You may not use
7 * this file except in compliance with the License. You can obtain a copy
8 * in the file LICENSE in the source distribution or at
9 * https://www.openssl.org/source/license.html
10 */
11
12 {-
13 use OpenSSL::stackhash qw(generate_stack_macros);
14 -}
15
16 #ifndef OPENSSL_X509V3_H
17 # define OPENSSL_X509V3_H
18 # pragma once
19
20 # include <openssl/macros.h>
21 # ifndef OPENSSL_NO_DEPRECATED_3_0
22 # define HEADER_X509V3_H
23 # endif
24
25 # include <openssl/bio.h>
26 # include <openssl/x509.h>
27 # include <openssl/conf.h>
28 # include <openssl/x509v3err.h>
29 # ifndef OPENSSL_NO_STDIO
30 # include <stdio.h>
31 # endif
32
33 #ifdef __cplusplus
34 extern "C" {
35 #endif
36
37 /* Forward reference */
38 struct v3_ext_method;
39 struct v3_ext_ctx;
40
41 /* Useful typedefs */
42
43 typedef void *(*X509V3_EXT_NEW)(void);
44 typedef void (*X509V3_EXT_FREE) (void *);
45 typedef void *(*X509V3_EXT_D2I)(void *, const unsigned char **, long);
46 typedef int (*X509V3_EXT_I2D) (const void *, unsigned char **);
47 typedef STACK_OF(CONF_VALUE) *
48 (*X509V3_EXT_I2V) (const struct v3_ext_method *method, void *ext,
49 STACK_OF(CONF_VALUE) *extlist);
50 typedef void *(*X509V3_EXT_V2I)(const struct v3_ext_method *method,
51 struct v3_ext_ctx *ctx,
52 STACK_OF(CONF_VALUE) *values);
53 typedef char *(*X509V3_EXT_I2S)(const struct v3_ext_method *method,
54 void *ext);
55 typedef void *(*X509V3_EXT_S2I)(const struct v3_ext_method *method,
56 struct v3_ext_ctx *ctx, const char *str);
57 typedef int (*X509V3_EXT_I2R) (const struct v3_ext_method *method, void *ext,
58 BIO *out, int indent);
59 typedef void *(*X509V3_EXT_R2I)(const struct v3_ext_method *method,
60 struct v3_ext_ctx *ctx, const char *str);
61
62 /* V3 extension structure */
63
64 struct v3_ext_method {
65 int ext_nid;
66 int ext_flags;
67 /* If this is set the following four fields are ignored */
68 ASN1_ITEM_EXP *it;
69 /* Old style ASN1 calls */
70 X509V3_EXT_NEW ext_new;
71 X509V3_EXT_FREE ext_free;
72 X509V3_EXT_D2I d2i;
73 X509V3_EXT_I2D i2d;
74 /* The following pair is used for string extensions */
75 X509V3_EXT_I2S i2s;
76 X509V3_EXT_S2I s2i;
77 /* The following pair is used for multi-valued extensions */
78 X509V3_EXT_I2V i2v;
79 X509V3_EXT_V2I v2i;
80 /* The following are used for raw extensions */
81 X509V3_EXT_I2R i2r;
82 X509V3_EXT_R2I r2i;
83 void *usr_data; /* Any extension specific data */
84 };
85
86 typedef struct X509V3_CONF_METHOD_st {
87 char *(*get_string) (void *db, const char *section, const char *value);
88 STACK_OF(CONF_VALUE) *(*get_section) (void *db, const char *section);
89 void (*free_string) (void *db, char *string);
90 void (*free_section) (void *db, STACK_OF(CONF_VALUE) *section);
91 } X509V3_CONF_METHOD;
92
93 /* Context specific info for producing X509 v3 extensions*/
94 struct v3_ext_ctx {
95 # define X509V3_CTX_TEST 0x1
96 # ifndef OPENSSL_NO_DEPRECATED_3_0
97 # define CTX_TEST X509V3_CTX_TEST
98 # endif
99 # define X509V3_CTX_REPLACE 0x2
100 int flags;
101 X509 *issuer_cert;
102 X509 *subject_cert;
103 X509_REQ *subject_req;
104 X509_CRL *crl;
105 X509V3_CONF_METHOD *db_meth;
106 void *db;
107 EVP_PKEY *issuer_pkey;
108 /* Maybe more here */
109 };
110
111 typedef struct v3_ext_method X509V3_EXT_METHOD;
112
113 {-
114 generate_stack_macros("X509V3_EXT_METHOD");
115 -}
116
117 /* ext_flags values */
118 # define X509V3_EXT_DYNAMIC 0x1
119 # define X509V3_EXT_CTX_DEP 0x2
120 # define X509V3_EXT_MULTILINE 0x4
121
122 typedef BIT_STRING_BITNAME ENUMERATED_NAMES;
123
124 typedef struct BASIC_CONSTRAINTS_st {
125 int ca;
126 ASN1_INTEGER *pathlen;
127 } BASIC_CONSTRAINTS;
128
129 typedef struct OSSL_BASIC_ATTR_CONSTRAINTS_st {
130 int authority;
131 ASN1_INTEGER *pathlen;
132 } OSSL_BASIC_ATTR_CONSTRAINTS;
133
134 typedef struct PKEY_USAGE_PERIOD_st {
135 ASN1_GENERALIZEDTIME *notBefore;
136 ASN1_GENERALIZEDTIME *notAfter;
137 } PKEY_USAGE_PERIOD;
138
139 typedef struct otherName_st {
140 ASN1_OBJECT *type_id;
141 ASN1_TYPE *value;
142 } OTHERNAME;
143
144 typedef struct EDIPartyName_st {
145 ASN1_STRING *nameAssigner;
146 ASN1_STRING *partyName;
147 } EDIPARTYNAME;
148
149 typedef struct GENERAL_NAME_st {
150 # define GEN_OTHERNAME 0
151 # define GEN_EMAIL 1
152 # define GEN_DNS 2
153 # define GEN_X400 3
154 # define GEN_DIRNAME 4
155 # define GEN_EDIPARTY 5
156 # define GEN_URI 6
157 # define GEN_IPADD 7
158 # define GEN_RID 8
159 int type;
160 union {
161 char *ptr;
162 OTHERNAME *otherName; /* otherName */
163 ASN1_IA5STRING *rfc822Name;
164 ASN1_IA5STRING *dNSName;
165 ASN1_STRING *x400Address;
166 X509_NAME *directoryName;
167 EDIPARTYNAME *ediPartyName;
168 ASN1_IA5STRING *uniformResourceIdentifier;
169 ASN1_OCTET_STRING *iPAddress;
170 ASN1_OBJECT *registeredID;
171 /* Old names */
172 ASN1_OCTET_STRING *ip; /* iPAddress */
173 X509_NAME *dirn; /* dirn */
174 ASN1_IA5STRING *ia5; /* rfc822Name, dNSName,
175 * uniformResourceIdentifier */
176 ASN1_OBJECT *rid; /* registeredID */
177 ASN1_TYPE *other; /* x400Address */
178 } d;
179 } GENERAL_NAME;
180
181 typedef struct ACCESS_DESCRIPTION_st {
182 ASN1_OBJECT *method;
183 GENERAL_NAME *location;
184 } ACCESS_DESCRIPTION;
185
186 int GENERAL_NAME_set1_X509_NAME(GENERAL_NAME **tgt, const X509_NAME *src);
187
188 {-
189 generate_stack_macros("ACCESS_DESCRIPTION")
190 .generate_stack_macros("GENERAL_NAME");
191 -}
192
193 typedef STACK_OF(ACCESS_DESCRIPTION) AUTHORITY_INFO_ACCESS;
194 typedef STACK_OF(ASN1_OBJECT) EXTENDED_KEY_USAGE;
195 typedef STACK_OF(ASN1_INTEGER) TLS_FEATURE;
196 typedef STACK_OF(GENERAL_NAME) GENERAL_NAMES;
197
198 {-
199 generate_stack_macros("GENERAL_NAMES");
200 -}
201
202 typedef struct DIST_POINT_NAME_st {
203 int type;
204 union {
205 GENERAL_NAMES *fullname;
206 STACK_OF(X509_NAME_ENTRY) *relativename;
207 } name;
208 /* If relativename then this contains the full distribution point name */
209 X509_NAME *dpname;
210 } DIST_POINT_NAME;
211 DECLARE_ASN1_DUP_FUNCTION(DIST_POINT_NAME)
212 /* All existing reasons */
213 # define CRLDP_ALL_REASONS 0x807f
214
215 # define CRL_REASON_NONE -1
216 # define CRL_REASON_UNSPECIFIED 0
217 # define CRL_REASON_KEY_COMPROMISE 1
218 # define CRL_REASON_CA_COMPROMISE 2
219 # define CRL_REASON_AFFILIATION_CHANGED 3
220 # define CRL_REASON_SUPERSEDED 4
221 # define CRL_REASON_CESSATION_OF_OPERATION 5
222 # define CRL_REASON_CERTIFICATE_HOLD 6
223 # define CRL_REASON_REMOVE_FROM_CRL 8
224 # define CRL_REASON_PRIVILEGE_WITHDRAWN 9
225 # define CRL_REASON_AA_COMPROMISE 10
226
227 struct DIST_POINT_st {
228 DIST_POINT_NAME *distpoint;
229 ASN1_BIT_STRING *reasons;
230 GENERAL_NAMES *CRLissuer;
231 int dp_reasons;
232 };
233
234 {-
235 generate_stack_macros("DIST_POINT");
236 -}
237
238 typedef STACK_OF(DIST_POINT) CRL_DIST_POINTS;
239
240 struct AUTHORITY_KEYID_st {
241 ASN1_OCTET_STRING *keyid;
242 GENERAL_NAMES *issuer;
243 ASN1_INTEGER *serial;
244 };
245
246 /* Strong extranet structures */
247
248 typedef struct SXNET_ID_st {
249 ASN1_INTEGER *zone;
250 ASN1_OCTET_STRING *user;
251 } SXNETID;
252
253 {-
254 generate_stack_macros("SXNETID");
255 -}
256
257
258 typedef struct SXNET_st {
259 ASN1_INTEGER *version;
260 STACK_OF(SXNETID) *ids;
261 } SXNET;
262
263 typedef struct ISSUER_SIGN_TOOL_st {
264 ASN1_UTF8STRING *signTool;
265 ASN1_UTF8STRING *cATool;
266 ASN1_UTF8STRING *signToolCert;
267 ASN1_UTF8STRING *cAToolCert;
268 } ISSUER_SIGN_TOOL;
269
270 typedef struct NOTICEREF_st {
271 ASN1_STRING *organization;
272 STACK_OF(ASN1_INTEGER) *noticenos;
273 } NOTICEREF;
274
275 typedef struct USERNOTICE_st {
276 NOTICEREF *noticeref;
277 ASN1_STRING *exptext;
278 } USERNOTICE;
279
280 typedef struct POLICYQUALINFO_st {
281 ASN1_OBJECT *pqualid;
282 union {
283 ASN1_IA5STRING *cpsuri;
284 USERNOTICE *usernotice;
285 ASN1_TYPE *other;
286 } d;
287 } POLICYQUALINFO;
288
289 {-
290 generate_stack_macros("POLICYQUALINFO");
291 -}
292
293
294 typedef struct POLICYINFO_st {
295 ASN1_OBJECT *policyid;
296 STACK_OF(POLICYQUALINFO) *qualifiers;
297 } POLICYINFO;
298
299 {-
300 generate_stack_macros("POLICYINFO");
301 -}
302
303 typedef STACK_OF(POLICYINFO) CERTIFICATEPOLICIES;
304
305 typedef struct POLICY_MAPPING_st {
306 ASN1_OBJECT *issuerDomainPolicy;
307 ASN1_OBJECT *subjectDomainPolicy;
308 } POLICY_MAPPING;
309
310 {-
311 generate_stack_macros("POLICY_MAPPING");
312 -}
313
314 typedef STACK_OF(POLICY_MAPPING) POLICY_MAPPINGS;
315
316 typedef struct GENERAL_SUBTREE_st {
317 GENERAL_NAME *base;
318 ASN1_INTEGER *minimum;
319 ASN1_INTEGER *maximum;
320 } GENERAL_SUBTREE;
321
322 {-
323 generate_stack_macros("GENERAL_SUBTREE");
324 -}
325
326 struct NAME_CONSTRAINTS_st {
327 STACK_OF(GENERAL_SUBTREE) *permittedSubtrees;
328 STACK_OF(GENERAL_SUBTREE) *excludedSubtrees;
329 };
330
331 typedef struct POLICY_CONSTRAINTS_st {
332 ASN1_INTEGER *requireExplicitPolicy;
333 ASN1_INTEGER *inhibitPolicyMapping;
334 } POLICY_CONSTRAINTS;
335
336 /* Proxy certificate structures, see RFC 3820 */
337 typedef struct PROXY_POLICY_st {
338 ASN1_OBJECT *policyLanguage;
339 ASN1_OCTET_STRING *policy;
340 } PROXY_POLICY;
341
342 typedef struct PROXY_CERT_INFO_EXTENSION_st {
343 ASN1_INTEGER *pcPathLengthConstraint;
344 PROXY_POLICY *proxyPolicy;
345 } PROXY_CERT_INFO_EXTENSION;
346
347 DECLARE_ASN1_FUNCTIONS(PROXY_POLICY)
348 DECLARE_ASN1_FUNCTIONS(PROXY_CERT_INFO_EXTENSION)
349
350 struct ISSUING_DIST_POINT_st {
351 DIST_POINT_NAME *distpoint;
352 int onlyuser;
353 int onlyCA;
354 ASN1_BIT_STRING *onlysomereasons;
355 int indirectCRL;
356 int onlyattr;
357 };
358
359 /* Values in idp_flags field */
360 /* IDP present */
361 # define IDP_PRESENT 0x1
362 /* IDP values inconsistent */
363 # define IDP_INVALID 0x2
364 /* onlyuser true */
365 # define IDP_ONLYUSER 0x4
366 /* onlyCA true */
367 # define IDP_ONLYCA 0x8
368 /* onlyattr true */
369 # define IDP_ONLYATTR 0x10
370 /* indirectCRL true */
371 # define IDP_INDIRECT 0x20
372 /* onlysomereasons present */
373 # define IDP_REASONS 0x40
374
375 # define X509V3_conf_err(val) ERR_add_error_data(6, \
376 "section:", (val)->section, \
377 ",name:", (val)->name, ",value:", (val)->value)
378
379 # define X509V3_set_ctx_test(ctx) \
380 X509V3_set_ctx(ctx, NULL, NULL, NULL, NULL, X509V3_CTX_TEST)
381 # define X509V3_set_ctx_nodb(ctx) (ctx)->db = NULL;
382
383 # define EXT_BITSTRING(nid, table) { nid, 0, ASN1_ITEM_ref(ASN1_BIT_STRING), \
384 0,0,0,0, \
385 0,0, \
386 (X509V3_EXT_I2V)i2v_ASN1_BIT_STRING, \
387 (X509V3_EXT_V2I)v2i_ASN1_BIT_STRING, \
388 NULL, NULL, \
389 table}
390
391 # define EXT_IA5STRING(nid) { nid, 0, ASN1_ITEM_ref(ASN1_IA5STRING), \
392 0,0,0,0, \
393 (X509V3_EXT_I2S)i2s_ASN1_IA5STRING, \
394 (X509V3_EXT_S2I)s2i_ASN1_IA5STRING, \
395 0,0,0,0, \
396 NULL}
397
398 #define EXT_UTF8STRING(nid) { nid, 0, ASN1_ITEM_ref(ASN1_UTF8STRING), \
399 0,0,0,0, \
400 (X509V3_EXT_I2S)i2s_ASN1_UTF8STRING, \
401 (X509V3_EXT_S2I)s2i_ASN1_UTF8STRING, \
402 0,0,0,0, \
403 NULL}
404
405 # define EXT_END { -1, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0}
406
407 /* X509_PURPOSE stuff */
408
409 # define EXFLAG_BCONS 0x1
410 # define EXFLAG_KUSAGE 0x2
411 # define EXFLAG_XKUSAGE 0x4
412 # define EXFLAG_NSCERT 0x8
413
414 # define EXFLAG_CA 0x10
415 # define EXFLAG_SI 0x20 /* self-issued, maybe not self-signed */
416 # define EXFLAG_V1 0x40
417 # define EXFLAG_INVALID 0x80
418 /* EXFLAG_SET is set to indicate that some values have been precomputed */
419 # define EXFLAG_SET 0x100
420 # define EXFLAG_CRITICAL 0x200
421 # define EXFLAG_PROXY 0x400
422
423 # define EXFLAG_INVALID_POLICY 0x800
424 # define EXFLAG_FRESHEST 0x1000
425 # define EXFLAG_SS 0x2000 /* cert is apparently self-signed */
426
427 # define EXFLAG_BCONS_CRITICAL 0x10000
428 # define EXFLAG_AKID_CRITICAL 0x20000
429 # define EXFLAG_SKID_CRITICAL 0x40000
430 # define EXFLAG_SAN_CRITICAL 0x80000
431 # define EXFLAG_NO_FINGERPRINT 0x100000
432
433 /* https://datatracker.ietf.org/doc/html/rfc5280#section-4.2.1.3 */
434 # define KU_DIGITAL_SIGNATURE X509v3_KU_DIGITAL_SIGNATURE
435 # define KU_NON_REPUDIATION X509v3_KU_NON_REPUDIATION
436 # define KU_KEY_ENCIPHERMENT X509v3_KU_KEY_ENCIPHERMENT
437 # define KU_DATA_ENCIPHERMENT X509v3_KU_DATA_ENCIPHERMENT
438 # define KU_KEY_AGREEMENT X509v3_KU_KEY_AGREEMENT
439 # define KU_KEY_CERT_SIGN X509v3_KU_KEY_CERT_SIGN
440 # define KU_CRL_SIGN X509v3_KU_CRL_SIGN
441 # define KU_ENCIPHER_ONLY X509v3_KU_ENCIPHER_ONLY
442 # define KU_DECIPHER_ONLY X509v3_KU_DECIPHER_ONLY
443
444 # define NS_SSL_CLIENT 0x80
445 # define NS_SSL_SERVER 0x40
446 # define NS_SMIME 0x20
447 # define NS_OBJSIGN 0x10
448 # define NS_SSL_CA 0x04
449 # define NS_SMIME_CA 0x02
450 # define NS_OBJSIGN_CA 0x01
451 # define NS_ANY_CA (NS_SSL_CA|NS_SMIME_CA|NS_OBJSIGN_CA)
452
453 # define XKU_SSL_SERVER 0x1
454 # define XKU_SSL_CLIENT 0x2
455 # define XKU_SMIME 0x4
456 # define XKU_CODE_SIGN 0x8
457 # define XKU_SGC 0x10 /* Netscape or MS Server-Gated Crypto */
458 # define XKU_OCSP_SIGN 0x20
459 # define XKU_TIMESTAMP 0x40
460 # define XKU_DVCS 0x80
461 # define XKU_ANYEKU 0x100
462
463 # define X509_PURPOSE_DYNAMIC 0x1
464 # define X509_PURPOSE_DYNAMIC_NAME 0x2
465
466 typedef struct x509_purpose_st {
467 int purpose;
468 int trust; /* Default trust ID */
469 int flags;
470 int (*check_purpose) (const struct x509_purpose_st *, const X509 *, int);
471 char *name;
472 char *sname;
473 void *usr_data;
474 } X509_PURPOSE;
475
476 {-
477 generate_stack_macros("X509_PURPOSE");
478 -}
479
480 # define X509_PURPOSE_DEFAULT_ANY 0
481 # define X509_PURPOSE_SSL_CLIENT 1
482 # define X509_PURPOSE_SSL_SERVER 2
483 # define X509_PURPOSE_NS_SSL_SERVER 3
484 # define X509_PURPOSE_SMIME_SIGN 4
485 # define X509_PURPOSE_SMIME_ENCRYPT 5
486 # define X509_PURPOSE_CRL_SIGN 6
487 # define X509_PURPOSE_ANY 7
488 # define X509_PURPOSE_OCSP_HELPER 8
489 # define X509_PURPOSE_TIMESTAMP_SIGN 9
490 # define X509_PURPOSE_CODE_SIGN 10
491
492 # define X509_PURPOSE_MIN 1
493 # define X509_PURPOSE_MAX 10
494
495 /* Flags for X509V3_EXT_print() */
496
497 # define X509V3_EXT_UNKNOWN_MASK (0xfL << 16)
498 /* Return error for unknown extensions */
499 # define X509V3_EXT_DEFAULT 0
500 /* Print error for unknown extensions */
501 # define X509V3_EXT_ERROR_UNKNOWN (1L << 16)
502 /* ASN1 parse unknown extensions */
503 # define X509V3_EXT_PARSE_UNKNOWN (2L << 16)
504 /* BIO_dump unknown extensions */
505 # define X509V3_EXT_DUMP_UNKNOWN (3L << 16)
506
507 /* Flags for X509V3_add1_i2d */
508
509 # define X509V3_ADD_OP_MASK 0xfL
510 # define X509V3_ADD_DEFAULT 0L
511 # define X509V3_ADD_APPEND 1L
512 # define X509V3_ADD_REPLACE 2L
513 # define X509V3_ADD_REPLACE_EXISTING 3L
514 # define X509V3_ADD_KEEP_EXISTING 4L
515 # define X509V3_ADD_DELETE 5L
516 # define X509V3_ADD_SILENT 0x10
517
518 DECLARE_ASN1_FUNCTIONS(BASIC_CONSTRAINTS)
519 DECLARE_ASN1_FUNCTIONS(OSSL_BASIC_ATTR_CONSTRAINTS)
520
521 DECLARE_ASN1_FUNCTIONS(SXNET)
522 DECLARE_ASN1_FUNCTIONS(SXNETID)
523
524 DECLARE_ASN1_FUNCTIONS(ISSUER_SIGN_TOOL)
525
526 int SXNET_add_id_asc(SXNET **psx, const char *zone, const char *user, int userlen);
527 int SXNET_add_id_ulong(SXNET **psx, unsigned long lzone, const char *user,
528 int userlen);
529 int SXNET_add_id_INTEGER(SXNET **psx, ASN1_INTEGER *izone, const char *user,
530 int userlen);
531
532 ASN1_OCTET_STRING *SXNET_get_id_asc(SXNET *sx, const char *zone);
533 ASN1_OCTET_STRING *SXNET_get_id_ulong(SXNET *sx, unsigned long lzone);
534 ASN1_OCTET_STRING *SXNET_get_id_INTEGER(SXNET *sx, ASN1_INTEGER *zone);
535
536 DECLARE_ASN1_FUNCTIONS(AUTHORITY_KEYID)
537
538 DECLARE_ASN1_FUNCTIONS(PKEY_USAGE_PERIOD)
539
540 DECLARE_ASN1_FUNCTIONS(GENERAL_NAME)
541 DECLARE_ASN1_DUP_FUNCTION(GENERAL_NAME)
542 int GENERAL_NAME_cmp(GENERAL_NAME *a, GENERAL_NAME *b);
543
544 ASN1_BIT_STRING *v2i_ASN1_BIT_STRING(X509V3_EXT_METHOD *method,
545 X509V3_CTX *ctx,
546 STACK_OF(CONF_VALUE) *nval);
547 STACK_OF(CONF_VALUE) *i2v_ASN1_BIT_STRING(X509V3_EXT_METHOD *method,
548 ASN1_BIT_STRING *bits,
549 STACK_OF(CONF_VALUE) *extlist);
550 char *i2s_ASN1_IA5STRING(X509V3_EXT_METHOD *method, ASN1_IA5STRING *ia5);
551 ASN1_IA5STRING *s2i_ASN1_IA5STRING(X509V3_EXT_METHOD *method,
552 X509V3_CTX *ctx, const char *str);
553 char *i2s_ASN1_UTF8STRING(X509V3_EXT_METHOD *method, ASN1_UTF8STRING *utf8);
554 ASN1_UTF8STRING *s2i_ASN1_UTF8STRING(X509V3_EXT_METHOD *method,
555 X509V3_CTX *ctx, const char *str);
556
557 STACK_OF(CONF_VALUE) *i2v_GENERAL_NAME(X509V3_EXT_METHOD *method,
558 GENERAL_NAME *gen,
559 STACK_OF(CONF_VALUE) *ret);
560 int GENERAL_NAME_print(BIO *out, GENERAL_NAME *gen);
561
562 DECLARE_ASN1_FUNCTIONS(GENERAL_NAMES)
563
564 STACK_OF(CONF_VALUE) *i2v_GENERAL_NAMES(X509V3_EXT_METHOD *method,
565 GENERAL_NAMES *gen,
566 STACK_OF(CONF_VALUE) *extlist);
567 GENERAL_NAMES *v2i_GENERAL_NAMES(const X509V3_EXT_METHOD *method,
568 X509V3_CTX *ctx, STACK_OF(CONF_VALUE) *nval);
569
570 DECLARE_ASN1_FUNCTIONS(OTHERNAME)
571 DECLARE_ASN1_FUNCTIONS(EDIPARTYNAME)
572 int OTHERNAME_cmp(OTHERNAME *a, OTHERNAME *b);
573 void GENERAL_NAME_set0_value(GENERAL_NAME *a, int type, void *value);
574 void *GENERAL_NAME_get0_value(const GENERAL_NAME *a, int *ptype);
575 int GENERAL_NAME_set0_othername(GENERAL_NAME *gen,
576 ASN1_OBJECT *oid, ASN1_TYPE *value);
577 int GENERAL_NAME_get0_otherName(const GENERAL_NAME *gen,
578 ASN1_OBJECT **poid, ASN1_TYPE **pvalue);
579
580 char *i2s_ASN1_OCTET_STRING(X509V3_EXT_METHOD *method,
581 const ASN1_OCTET_STRING *ia5);
582 ASN1_OCTET_STRING *s2i_ASN1_OCTET_STRING(X509V3_EXT_METHOD *method,
583 X509V3_CTX *ctx, const char *str);
584
585 DECLARE_ASN1_FUNCTIONS(EXTENDED_KEY_USAGE)
586 int i2a_ACCESS_DESCRIPTION(BIO *bp, const ACCESS_DESCRIPTION *a);
587
588 DECLARE_ASN1_ALLOC_FUNCTIONS(TLS_FEATURE)
589
590 DECLARE_ASN1_FUNCTIONS(CERTIFICATEPOLICIES)
591 DECLARE_ASN1_FUNCTIONS(POLICYINFO)
592 DECLARE_ASN1_FUNCTIONS(POLICYQUALINFO)
593 DECLARE_ASN1_FUNCTIONS(USERNOTICE)
594 DECLARE_ASN1_FUNCTIONS(NOTICEREF)
595
596 DECLARE_ASN1_FUNCTIONS(CRL_DIST_POINTS)
597 DECLARE_ASN1_FUNCTIONS(DIST_POINT)
598 DECLARE_ASN1_FUNCTIONS(DIST_POINT_NAME)
599 DECLARE_ASN1_FUNCTIONS(ISSUING_DIST_POINT)
600
601 int DIST_POINT_set_dpname(DIST_POINT_NAME *dpn, const X509_NAME *iname);
602
603 int NAME_CONSTRAINTS_check(X509 *x, NAME_CONSTRAINTS *nc);
604 int NAME_CONSTRAINTS_check_CN(X509 *x, NAME_CONSTRAINTS *nc);
605
606 DECLARE_ASN1_FUNCTIONS(ACCESS_DESCRIPTION)
607 DECLARE_ASN1_FUNCTIONS(AUTHORITY_INFO_ACCESS)
608
609 DECLARE_ASN1_ITEM(POLICY_MAPPING)
610 DECLARE_ASN1_ALLOC_FUNCTIONS(POLICY_MAPPING)
611 DECLARE_ASN1_ITEM(POLICY_MAPPINGS)
612
613 DECLARE_ASN1_ITEM(GENERAL_SUBTREE)
614 DECLARE_ASN1_ALLOC_FUNCTIONS(GENERAL_SUBTREE)
615
616 DECLARE_ASN1_ITEM(NAME_CONSTRAINTS)
617 DECLARE_ASN1_ALLOC_FUNCTIONS(NAME_CONSTRAINTS)
618
619 DECLARE_ASN1_ALLOC_FUNCTIONS(POLICY_CONSTRAINTS)
620 DECLARE_ASN1_ITEM(POLICY_CONSTRAINTS)
621
622 GENERAL_NAME *a2i_GENERAL_NAME(GENERAL_NAME *out,
623 const X509V3_EXT_METHOD *method,
624 X509V3_CTX *ctx, int gen_type,
625 const char *value, int is_nc);
626
627 # ifdef OPENSSL_CONF_H
628 GENERAL_NAME *v2i_GENERAL_NAME(const X509V3_EXT_METHOD *method,
629 X509V3_CTX *ctx, CONF_VALUE *cnf);
630 GENERAL_NAME *v2i_GENERAL_NAME_ex(GENERAL_NAME *out,
631 const X509V3_EXT_METHOD *method,
632 X509V3_CTX *ctx, CONF_VALUE *cnf,
633 int is_nc);
634
635 void X509V3_conf_free(CONF_VALUE *val);
636
637 X509_EXTENSION *X509V3_EXT_nconf_nid(CONF *conf, X509V3_CTX *ctx, int ext_nid,
638 const char *value);
639 X509_EXTENSION *X509V3_EXT_nconf(CONF *conf, X509V3_CTX *ctx, const char *name,
640 const char *value);
641 int X509V3_EXT_add_nconf_sk(CONF *conf, X509V3_CTX *ctx, const char *section,
642 STACK_OF(X509_EXTENSION) **sk);
643 int X509V3_EXT_add_nconf(CONF *conf, X509V3_CTX *ctx, const char *section,
644 X509 *cert);
645 int X509V3_EXT_REQ_add_nconf(CONF *conf, X509V3_CTX *ctx, const char *section,
646 X509_REQ *req);
647 int X509V3_EXT_CRL_add_nconf(CONF *conf, X509V3_CTX *ctx, const char *section,
648 X509_CRL *crl);
649
650 X509_EXTENSION *X509V3_EXT_conf_nid(LHASH_OF(CONF_VALUE) *conf,
651 X509V3_CTX *ctx, int ext_nid,
652 const char *value);
653 X509_EXTENSION *X509V3_EXT_conf(LHASH_OF(CONF_VALUE) *conf, X509V3_CTX *ctx,
654 const char *name, const char *value);
655 int X509V3_EXT_add_conf(LHASH_OF(CONF_VALUE) *conf, X509V3_CTX *ctx,
656 const char *section, X509 *cert);
657 int X509V3_EXT_REQ_add_conf(LHASH_OF(CONF_VALUE) *conf, X509V3_CTX *ctx,
658 const char *section, X509_REQ *req);
659 int X509V3_EXT_CRL_add_conf(LHASH_OF(CONF_VALUE) *conf, X509V3_CTX *ctx,
660 const char *section, X509_CRL *crl);
661
662 int X509V3_add_value_bool_nf(const char *name, int asn1_bool,
663 STACK_OF(CONF_VALUE) **extlist);
664 int X509V3_get_value_bool(const CONF_VALUE *value, int *asn1_bool);
665 int X509V3_get_value_int(const CONF_VALUE *value, ASN1_INTEGER **aint);
666 void X509V3_set_nconf(X509V3_CTX *ctx, CONF *conf);
667 void X509V3_set_conf_lhash(X509V3_CTX *ctx, LHASH_OF(CONF_VALUE) *lhash);
668 # endif
669
670 char *X509V3_get_string(X509V3_CTX *ctx, const char *name, const char *section);
671 STACK_OF(CONF_VALUE) *X509V3_get_section(X509V3_CTX *ctx, const char *section);
672 void X509V3_string_free(X509V3_CTX *ctx, char *str);
673 void X509V3_section_free(X509V3_CTX *ctx, STACK_OF(CONF_VALUE) *section);
674 void X509V3_set_ctx(X509V3_CTX *ctx, X509 *issuer, X509 *subject,
675 X509_REQ *req, X509_CRL *crl, int flags);
676 /* For API backward compatibility, this is separate from X509V3_set_ctx(): */
677 int X509V3_set_issuer_pkey(X509V3_CTX *ctx, EVP_PKEY *pkey);
678
679 int X509V3_add_value(const char *name, const char *value,
680 STACK_OF(CONF_VALUE) **extlist);
681 int X509V3_add_value_uchar(const char *name, const unsigned char *value,
682 STACK_OF(CONF_VALUE) **extlist);
683 int X509V3_add_value_bool(const char *name, int asn1_bool,
684 STACK_OF(CONF_VALUE) **extlist);
685 int X509V3_add_value_int(const char *name, const ASN1_INTEGER *aint,
686 STACK_OF(CONF_VALUE) **extlist);
687 char *i2s_ASN1_INTEGER(X509V3_EXT_METHOD *meth, const ASN1_INTEGER *aint);
688 ASN1_INTEGER *s2i_ASN1_INTEGER(X509V3_EXT_METHOD *meth, const char *value);
689 char *i2s_ASN1_ENUMERATED(X509V3_EXT_METHOD *meth, const ASN1_ENUMERATED *aint);
690 char *i2s_ASN1_ENUMERATED_TABLE(X509V3_EXT_METHOD *meth,
691 const ASN1_ENUMERATED *aint);
692 int X509V3_EXT_add(X509V3_EXT_METHOD *ext);
693 int X509V3_EXT_add_list(X509V3_EXT_METHOD *extlist);
694 int X509V3_EXT_add_alias(int nid_to, int nid_from);
695 void X509V3_EXT_cleanup(void);
696
697 const X509V3_EXT_METHOD *X509V3_EXT_get(X509_EXTENSION *ext);
698 const X509V3_EXT_METHOD *X509V3_EXT_get_nid(int nid);
699 int X509V3_add_standard_extensions(void);
700 STACK_OF(CONF_VALUE) *X509V3_parse_list(const char *line);
701 void *X509V3_EXT_d2i(X509_EXTENSION *ext);
702 void *X509V3_get_d2i(const STACK_OF(X509_EXTENSION) *x, int nid, int *crit,
703 int *idx);
704
705 X509_EXTENSION *X509V3_EXT_i2d(int ext_nid, int crit, void *ext_struc);
706 int X509V3_add1_i2d(STACK_OF(X509_EXTENSION) **x, int nid, void *value,
707 int crit, unsigned long flags);
708
709 #ifndef OPENSSL_NO_DEPRECATED_1_1_0
710 /* The new declarations are in crypto.h, but the old ones were here. */
711 # define hex_to_string OPENSSL_buf2hexstr
712 # define string_to_hex OPENSSL_hexstr2buf
713 #endif
714
715 void X509V3_EXT_val_prn(BIO *out, STACK_OF(CONF_VALUE) *val, int indent,
716 int ml);
717 int X509V3_EXT_print(BIO *out, X509_EXTENSION *ext, unsigned long flag,
718 int indent);
719 #ifndef OPENSSL_NO_STDIO
720 int X509V3_EXT_print_fp(FILE *out, X509_EXTENSION *ext, int flag, int indent);
721 #endif
722 int X509V3_extensions_print(BIO *out, const char *title,
723 const STACK_OF(X509_EXTENSION) *exts,
724 unsigned long flag, int indent);
725
726 int X509_check_ca(X509 *x);
727 int X509_check_purpose(X509 *x, int id, int ca);
728 int X509_supported_extension(X509_EXTENSION *ex);
729 int X509_check_issued(X509 *issuer, X509 *subject);
730 int X509_check_akid(const X509 *issuer, const AUTHORITY_KEYID *akid);
731 void X509_set_proxy_flag(X509 *x);
732 void X509_set_proxy_pathlen(X509 *x, long l);
733 long X509_get_proxy_pathlen(X509 *x);
734
735 uint32_t X509_get_extension_flags(X509 *x);
736 uint32_t X509_get_key_usage(X509 *x);
737 uint32_t X509_get_extended_key_usage(X509 *x);
738 const ASN1_OCTET_STRING *X509_get0_subject_key_id(X509 *x);
739 const ASN1_OCTET_STRING *X509_get0_authority_key_id(X509 *x);
740 const GENERAL_NAMES *X509_get0_authority_issuer(X509 *x);
741 const ASN1_INTEGER *X509_get0_authority_serial(X509 *x);
742
743 int X509_PURPOSE_get_count(void);
744 int X509_PURPOSE_get_unused_id(OSSL_LIB_CTX *libctx);
745 int X509_PURPOSE_get_by_sname(const char *sname);
746 int X509_PURPOSE_get_by_id(int id);
747 int X509_PURPOSE_add(int id, int trust, int flags,
748 int (*ck) (const X509_PURPOSE *, const X509 *, int),
749 const char *name, const char *sname, void *arg);
750 void X509_PURPOSE_cleanup(void);
751
752 X509_PURPOSE *X509_PURPOSE_get0(int idx);
753 int X509_PURPOSE_get_id(const X509_PURPOSE *);
754 char *X509_PURPOSE_get0_name(const X509_PURPOSE *xp);
755 char *X509_PURPOSE_get0_sname(const X509_PURPOSE *xp);
756 int X509_PURPOSE_get_trust(const X509_PURPOSE *xp);
757 int X509_PURPOSE_set(int *p, int purpose);
758
759 STACK_OF(OPENSSL_STRING) *X509_get1_email(X509 *x);
760 STACK_OF(OPENSSL_STRING) *X509_REQ_get1_email(X509_REQ *x);
761 void X509_email_free(STACK_OF(OPENSSL_STRING) *sk);
762 STACK_OF(OPENSSL_STRING) *X509_get1_ocsp(X509 *x);
763
764 /* Flags for X509_check_* functions */
765
766 /*
767 * Always check subject name for host match even if subject alt names present
768 */
769 # define X509_CHECK_FLAG_ALWAYS_CHECK_SUBJECT 0x1
770 /* Disable wildcard matching for dnsName fields and common name. */
771 # define X509_CHECK_FLAG_NO_WILDCARDS 0x2
772 /* Wildcards must not match a partial label. */
773 # define X509_CHECK_FLAG_NO_PARTIAL_WILDCARDS 0x4
774 /* Allow (non-partial) wildcards to match multiple labels. */
775 # define X509_CHECK_FLAG_MULTI_LABEL_WILDCARDS 0x8
776 /* Constraint verifier subdomain patterns to match a single labels. */
777 # define X509_CHECK_FLAG_SINGLE_LABEL_SUBDOMAINS 0x10
778 /* Never check the subject CN */
779 # define X509_CHECK_FLAG_NEVER_CHECK_SUBJECT 0x20
780 /*
781 * Match reference identifiers starting with "." to any sub-domain.
782 * This is a non-public flag, turned on implicitly when the subject
783 * reference identity is a DNS name.
784 */
785 # define _X509_CHECK_FLAG_DOT_SUBDOMAINS 0x8000
786
787 int X509_check_host(X509 *x, const char *chk, size_t chklen,
788 unsigned int flags, char **peername);
789 int X509_check_email(X509 *x, const char *chk, size_t chklen,
790 unsigned int flags);
791 int X509_check_ip(X509 *x, const unsigned char *chk, size_t chklen,
792 unsigned int flags);
793 int X509_check_ip_asc(X509 *x, const char *ipasc, unsigned int flags);
794
795 ASN1_OCTET_STRING *a2i_IPADDRESS(const char *ipasc);
796 ASN1_OCTET_STRING *a2i_IPADDRESS_NC(const char *ipasc);
797 int X509V3_NAME_from_section(X509_NAME *nm, STACK_OF(CONF_VALUE) *dn_sk,
798 unsigned long chtype);
799
800 void X509_POLICY_NODE_print(BIO *out, X509_POLICY_NODE *node, int indent);
801 {-
802 generate_stack_macros("X509_POLICY_NODE");
803 -}
804
805
806 #ifndef OPENSSL_NO_RFC3779
807 typedef struct ASRange_st {
808 ASN1_INTEGER *min, *max;
809 } ASRange;
810
811 # define ASIdOrRange_id 0
812 # define ASIdOrRange_range 1
813
814 typedef struct ASIdOrRange_st {
815 int type;
816 union {
817 ASN1_INTEGER *id;
818 ASRange *range;
819 } u;
820 } ASIdOrRange;
821
822 {-
823 generate_stack_macros("ASIdOrRange");
824 -}
825
826 typedef STACK_OF(ASIdOrRange) ASIdOrRanges;
827
828 # define ASIdentifierChoice_inherit 0
829 # define ASIdentifierChoice_asIdsOrRanges 1
830
831 typedef struct ASIdentifierChoice_st {
832 int type;
833 union {
834 ASN1_NULL *inherit;
835 ASIdOrRanges *asIdsOrRanges;
836 } u;
837 } ASIdentifierChoice;
838
839 typedef struct ASIdentifiers_st {
840 ASIdentifierChoice *asnum, *rdi;
841 } ASIdentifiers;
842
843 DECLARE_ASN1_FUNCTIONS(ASRange)
844 DECLARE_ASN1_FUNCTIONS(ASIdOrRange)
845 DECLARE_ASN1_FUNCTIONS(ASIdentifierChoice)
846 DECLARE_ASN1_FUNCTIONS(ASIdentifiers)
847
848 typedef struct IPAddressRange_st {
849 ASN1_BIT_STRING *min, *max;
850 } IPAddressRange;
851
852 # define IPAddressOrRange_addressPrefix 0
853 # define IPAddressOrRange_addressRange 1
854
855 typedef struct IPAddressOrRange_st {
856 int type;
857 union {
858 ASN1_BIT_STRING *addressPrefix;
859 IPAddressRange *addressRange;
860 } u;
861 } IPAddressOrRange;
862
863 {-
864 generate_stack_macros("IPAddressOrRange");
865 -}
866
867 typedef STACK_OF(IPAddressOrRange) IPAddressOrRanges;
868
869 # define IPAddressChoice_inherit 0
870 # define IPAddressChoice_addressesOrRanges 1
871
872 typedef struct IPAddressChoice_st {
873 int type;
874 union {
875 ASN1_NULL *inherit;
876 IPAddressOrRanges *addressesOrRanges;
877 } u;
878 } IPAddressChoice;
879
880 typedef struct IPAddressFamily_st {
881 ASN1_OCTET_STRING *addressFamily;
882 IPAddressChoice *ipAddressChoice;
883 } IPAddressFamily;
884
885 {-
886 generate_stack_macros("IPAddressFamily");
887 -}
888
889
890 typedef STACK_OF(IPAddressFamily) IPAddrBlocks;
891
892 DECLARE_ASN1_FUNCTIONS(IPAddressRange)
893 DECLARE_ASN1_FUNCTIONS(IPAddressOrRange)
894 DECLARE_ASN1_FUNCTIONS(IPAddressChoice)
895 DECLARE_ASN1_FUNCTIONS(IPAddressFamily)
896
897 /*
898 * API tag for elements of the ASIdentifer SEQUENCE.
899 */
900 # define V3_ASID_ASNUM 0
901 # define V3_ASID_RDI 1
902
903 /*
904 * AFI values, assigned by IANA. It'd be nice to make the AFI
905 * handling code totally generic, but there are too many little things
906 * that would need to be defined for other address families for it to
907 * be worth the trouble.
908 */
909 # define IANA_AFI_IPV4 1
910 # define IANA_AFI_IPV6 2
911
912 /*
913 * Utilities to construct and extract values from RFC3779 extensions,
914 * since some of the encodings (particularly for IP address prefixes
915 * and ranges) are a bit tedious to work with directly.
916 */
917 int X509v3_asid_add_inherit(ASIdentifiers *asid, int which);
918 int X509v3_asid_add_id_or_range(ASIdentifiers *asid, int which,
919 ASN1_INTEGER *min, ASN1_INTEGER *max);
920 int X509v3_addr_add_inherit(IPAddrBlocks *addr,
921 const unsigned afi, const unsigned *safi);
922 int X509v3_addr_add_prefix(IPAddrBlocks *addr,
923 const unsigned afi, const unsigned *safi,
924 unsigned char *a, const int prefixlen);
925 int X509v3_addr_add_range(IPAddrBlocks *addr,
926 const unsigned afi, const unsigned *safi,
927 unsigned char *min, unsigned char *max);
928 unsigned X509v3_addr_get_afi(const IPAddressFamily *f);
929 int X509v3_addr_get_range(IPAddressOrRange *aor, const unsigned afi,
930 unsigned char *min, unsigned char *max,
931 const int length);
932
933 /*
934 * Canonical forms.
935 */
936 int X509v3_asid_is_canonical(ASIdentifiers *asid);
937 int X509v3_addr_is_canonical(IPAddrBlocks *addr);
938 int X509v3_asid_canonize(ASIdentifiers *asid);
939 int X509v3_addr_canonize(IPAddrBlocks *addr);
940
941 /*
942 * Tests for inheritance and containment.
943 */
944 int X509v3_asid_inherits(ASIdentifiers *asid);
945 int X509v3_addr_inherits(IPAddrBlocks *addr);
946 int X509v3_asid_subset(ASIdentifiers *a, ASIdentifiers *b);
947 int X509v3_addr_subset(IPAddrBlocks *a, IPAddrBlocks *b);
948
949 /*
950 * Check whether RFC 3779 extensions nest properly in chains.
951 */
952 int X509v3_asid_validate_path(X509_STORE_CTX *);
953 int X509v3_addr_validate_path(X509_STORE_CTX *);
954 int X509v3_asid_validate_resource_set(STACK_OF(X509) *chain,
955 ASIdentifiers *ext,
956 int allow_inheritance);
957 int X509v3_addr_validate_resource_set(STACK_OF(X509) *chain,
958 IPAddrBlocks *ext, int allow_inheritance);
959
960 #endif /* OPENSSL_NO_RFC3779 */
961
962 {-
963 generate_stack_macros("ASN1_STRING");
964 -}
965
966 /*
967 * Admission Syntax
968 */
969 typedef struct NamingAuthority_st NAMING_AUTHORITY;
970 typedef struct ProfessionInfo_st PROFESSION_INFO;
971 typedef struct Admissions_st ADMISSIONS;
972 typedef struct AdmissionSyntax_st ADMISSION_SYNTAX;
973 DECLARE_ASN1_FUNCTIONS(NAMING_AUTHORITY)
974 DECLARE_ASN1_FUNCTIONS(PROFESSION_INFO)
975 DECLARE_ASN1_FUNCTIONS(ADMISSIONS)
976 DECLARE_ASN1_FUNCTIONS(ADMISSION_SYNTAX)
977 {-
978 generate_stack_macros("PROFESSION_INFO")
979 .generate_stack_macros("ADMISSIONS");
980 -}
981 typedef STACK_OF(PROFESSION_INFO) PROFESSION_INFOS;
982
983 const ASN1_OBJECT *NAMING_AUTHORITY_get0_authorityId(
984 const NAMING_AUTHORITY *n);
985 const ASN1_IA5STRING *NAMING_AUTHORITY_get0_authorityURL(
986 const NAMING_AUTHORITY *n);
987 const ASN1_STRING *NAMING_AUTHORITY_get0_authorityText(
988 const NAMING_AUTHORITY *n);
989 void NAMING_AUTHORITY_set0_authorityId(NAMING_AUTHORITY *n,
990 ASN1_OBJECT* namingAuthorityId);
991 void NAMING_AUTHORITY_set0_authorityURL(NAMING_AUTHORITY *n,
992 ASN1_IA5STRING* namingAuthorityUrl);
993 void NAMING_AUTHORITY_set0_authorityText(NAMING_AUTHORITY *n,
994 ASN1_STRING* namingAuthorityText);
995
996 const GENERAL_NAME *ADMISSION_SYNTAX_get0_admissionAuthority(
997 const ADMISSION_SYNTAX *as);
998 void ADMISSION_SYNTAX_set0_admissionAuthority(
999 ADMISSION_SYNTAX *as, GENERAL_NAME *aa);
1000 const STACK_OF(ADMISSIONS) *ADMISSION_SYNTAX_get0_contentsOfAdmissions(
1001 const ADMISSION_SYNTAX *as);
1002 void ADMISSION_SYNTAX_set0_contentsOfAdmissions(
1003 ADMISSION_SYNTAX *as, STACK_OF(ADMISSIONS) *a);
1004 const GENERAL_NAME *ADMISSIONS_get0_admissionAuthority(const ADMISSIONS *a);
1005 void ADMISSIONS_set0_admissionAuthority(ADMISSIONS *a, GENERAL_NAME *aa);
1006 const NAMING_AUTHORITY *ADMISSIONS_get0_namingAuthority(const ADMISSIONS *a);
1007 void ADMISSIONS_set0_namingAuthority(ADMISSIONS *a, NAMING_AUTHORITY *na);
1008 const PROFESSION_INFOS *ADMISSIONS_get0_professionInfos(const ADMISSIONS *a);
1009 void ADMISSIONS_set0_professionInfos(ADMISSIONS *a, PROFESSION_INFOS *pi);
1010 const ASN1_OCTET_STRING *PROFESSION_INFO_get0_addProfessionInfo(
1011 const PROFESSION_INFO *pi);
1012 void PROFESSION_INFO_set0_addProfessionInfo(
1013 PROFESSION_INFO *pi, ASN1_OCTET_STRING *aos);
1014 const NAMING_AUTHORITY *PROFESSION_INFO_get0_namingAuthority(
1015 const PROFESSION_INFO *pi);
1016 void PROFESSION_INFO_set0_namingAuthority(
1017 PROFESSION_INFO *pi, NAMING_AUTHORITY *na);
1018 const STACK_OF(ASN1_STRING) *PROFESSION_INFO_get0_professionItems(
1019 const PROFESSION_INFO *pi);
1020 void PROFESSION_INFO_set0_professionItems(
1021 PROFESSION_INFO *pi, STACK_OF(ASN1_STRING) *as);
1022 const STACK_OF(ASN1_OBJECT) *PROFESSION_INFO_get0_professionOIDs(
1023 const PROFESSION_INFO *pi);
1024 void PROFESSION_INFO_set0_professionOIDs(
1025 PROFESSION_INFO *pi, STACK_OF(ASN1_OBJECT) *po);
1026 const ASN1_PRINTABLESTRING *PROFESSION_INFO_get0_registrationNumber(
1027 const PROFESSION_INFO *pi);
1028 void PROFESSION_INFO_set0_registrationNumber(
1029 PROFESSION_INFO *pi, ASN1_PRINTABLESTRING *rn);
1030
1031 int OSSL_GENERAL_NAMES_print(BIO *out, GENERAL_NAMES *gens, int indent);
1032
1033 typedef STACK_OF(X509_ATTRIBUTE) OSSL_ATTRIBUTES_SYNTAX;
1034 DECLARE_ASN1_FUNCTIONS(OSSL_ATTRIBUTES_SYNTAX)
1035
1036 typedef STACK_OF(USERNOTICE) OSSL_USER_NOTICE_SYNTAX;
1037 DECLARE_ASN1_FUNCTIONS(OSSL_USER_NOTICE_SYNTAX)
1038
1039 {-
1040 generate_stack_macros("USERNOTICE");
1041 -}
1042
1043 typedef struct OSSL_ROLE_SPEC_CERT_ID_st {
1044 GENERAL_NAME *roleName;
1045 GENERAL_NAME *roleCertIssuer;
1046 ASN1_INTEGER *roleCertSerialNumber;
1047 GENERAL_NAMES *roleCertLocator;
1048 } OSSL_ROLE_SPEC_CERT_ID;
1049
1050 DECLARE_ASN1_FUNCTIONS(OSSL_ROLE_SPEC_CERT_ID)
1051
1052 {-
1053 generate_stack_macros("OSSL_ROLE_SPEC_CERT_ID");
1054 -}
1055
1056 typedef STACK_OF(OSSL_ROLE_SPEC_CERT_ID) OSSL_ROLE_SPEC_CERT_ID_SYNTAX;
1057
1058 DECLARE_ASN1_FUNCTIONS(OSSL_ROLE_SPEC_CERT_ID_SYNTAX)
1059 typedef struct OSSL_HASH_st {
1060 X509_ALGOR *algorithmIdentifier;
1061 ASN1_BIT_STRING *hashValue;
1062 } OSSL_HASH;
1063
1064 typedef struct OSSL_INFO_SYNTAX_POINTER_st {
1065 GENERAL_NAMES *name;
1066 OSSL_HASH *hash;
1067 } OSSL_INFO_SYNTAX_POINTER;
1068
1069 # define OSSL_INFO_SYNTAX_TYPE_CONTENT 0
1070 # define OSSL_INFO_SYNTAX_TYPE_POINTER 1
1071
1072 typedef struct OSSL_INFO_SYNTAX_st {
1073 int type;
1074 union {
1075 ASN1_STRING *content;
1076 OSSL_INFO_SYNTAX_POINTER *pointer;
1077 } choice;
1078 } OSSL_INFO_SYNTAX;
1079
1080 typedef struct OSSL_PRIVILEGE_POLICY_ID_st {
1081 ASN1_OBJECT *privilegePolicy;
1082 OSSL_INFO_SYNTAX *privPolSyntax;
1083 } OSSL_PRIVILEGE_POLICY_ID;
1084
1085 typedef struct OSSL_ATTRIBUTE_DESCRIPTOR_st {
1086 ASN1_OBJECT *identifier;
1087 ASN1_STRING *attributeSyntax;
1088 ASN1_UTF8STRING *name;
1089 ASN1_UTF8STRING *description;
1090 OSSL_PRIVILEGE_POLICY_ID *dominationRule;
1091 } OSSL_ATTRIBUTE_DESCRIPTOR;
1092
1093 DECLARE_ASN1_FUNCTIONS(OSSL_HASH)
1094 DECLARE_ASN1_FUNCTIONS(OSSL_INFO_SYNTAX)
1095 DECLARE_ASN1_FUNCTIONS(OSSL_INFO_SYNTAX_POINTER)
1096 DECLARE_ASN1_FUNCTIONS(OSSL_PRIVILEGE_POLICY_ID)
1097 DECLARE_ASN1_FUNCTIONS(OSSL_ATTRIBUTE_DESCRIPTOR)
1098
1099 typedef struct OSSL_TIME_SPEC_ABSOLUTE_st {
1100 ASN1_GENERALIZEDTIME *startTime;
1101 ASN1_GENERALIZEDTIME *endTime;
1102 } OSSL_TIME_SPEC_ABSOLUTE;
1103
1104 typedef struct OSSL_DAY_TIME_st {
1105 ASN1_INTEGER *hour;
1106 ASN1_INTEGER *minute;
1107 ASN1_INTEGER *second;
1108 } OSSL_DAY_TIME;
1109
1110 typedef struct OSSL_DAY_TIME_BAND_st {
1111 OSSL_DAY_TIME *startDayTime;
1112 OSSL_DAY_TIME *endDayTime;
1113 } OSSL_DAY_TIME_BAND;
1114
1115 # define OSSL_NAMED_DAY_TYPE_INT 0
1116 # define OSSL_NAMED_DAY_TYPE_BIT 1
1117 # define OSSL_NAMED_DAY_INT_SUN 1
1118 # define OSSL_NAMED_DAY_INT_MON 2
1119 # define OSSL_NAMED_DAY_INT_TUE 3
1120 # define OSSL_NAMED_DAY_INT_WED 4
1121 # define OSSL_NAMED_DAY_INT_THU 5
1122 # define OSSL_NAMED_DAY_INT_FRI 6
1123 # define OSSL_NAMED_DAY_INT_SAT 7
1124 # define OSSL_NAMED_DAY_BIT_SUN 0
1125 # define OSSL_NAMED_DAY_BIT_MON 1
1126 # define OSSL_NAMED_DAY_BIT_TUE 2
1127 # define OSSL_NAMED_DAY_BIT_WED 3
1128 # define OSSL_NAMED_DAY_BIT_THU 4
1129 # define OSSL_NAMED_DAY_BIT_FRI 5
1130 # define OSSL_NAMED_DAY_BIT_SAT 6
1131
1132 typedef struct OSSL_NAMED_DAY_st {
1133 int type;
1134 union {
1135 ASN1_INTEGER *intNamedDays;
1136 ASN1_BIT_STRING *bitNamedDays;
1137 } choice;
1138 } OSSL_NAMED_DAY;
1139
1140 # define OSSL_TIME_SPEC_X_DAY_OF_FIRST 0
1141 # define OSSL_TIME_SPEC_X_DAY_OF_SECOND 1
1142 # define OSSL_TIME_SPEC_X_DAY_OF_THIRD 2
1143 # define OSSL_TIME_SPEC_X_DAY_OF_FOURTH 3
1144 # define OSSL_TIME_SPEC_X_DAY_OF_FIFTH 4
1145
1146 typedef struct OSSL_TIME_SPEC_X_DAY_OF_st {
1147 int type;
1148 union {
1149 OSSL_NAMED_DAY *first;
1150 OSSL_NAMED_DAY *second;
1151 OSSL_NAMED_DAY *third;
1152 OSSL_NAMED_DAY *fourth;
1153 OSSL_NAMED_DAY *fifth;
1154 } choice;
1155 } OSSL_TIME_SPEC_X_DAY_OF;
1156
1157 # define OSSL_TIME_SPEC_DAY_TYPE_INT 0
1158 # define OSSL_TIME_SPEC_DAY_TYPE_BIT 1
1159 # define OSSL_TIME_SPEC_DAY_TYPE_DAY_OF 2
1160 # define OSSL_TIME_SPEC_DAY_BIT_SUN 0
1161 # define OSSL_TIME_SPEC_DAY_BIT_MON 1
1162 # define OSSL_TIME_SPEC_DAY_BIT_TUE 2
1163 # define OSSL_TIME_SPEC_DAY_BIT_WED 3
1164 # define OSSL_TIME_SPEC_DAY_BIT_THU 4
1165 # define OSSL_TIME_SPEC_DAY_BIT_FRI 5
1166 # define OSSL_TIME_SPEC_DAY_BIT_SAT 6
1167 # define OSSL_TIME_SPEC_DAY_INT_SUN 1
1168 # define OSSL_TIME_SPEC_DAY_INT_MON 2
1169 # define OSSL_TIME_SPEC_DAY_INT_TUE 3
1170 # define OSSL_TIME_SPEC_DAY_INT_WED 4
1171 # define OSSL_TIME_SPEC_DAY_INT_THU 5
1172 # define OSSL_TIME_SPEC_DAY_INT_FRI 6
1173 # define OSSL_TIME_SPEC_DAY_INT_SAT 7
1174
1175 typedef struct OSSL_TIME_SPEC_DAY_st {
1176 int type;
1177 union {
1178 STACK_OF(ASN1_INTEGER) *intDay;
1179 ASN1_BIT_STRING *bitDay;
1180 OSSL_TIME_SPEC_X_DAY_OF *dayOf;
1181 } choice;
1182 } OSSL_TIME_SPEC_DAY;
1183
1184 # define OSSL_TIME_SPEC_WEEKS_TYPE_ALL 0
1185 # define OSSL_TIME_SPEC_WEEKS_TYPE_INT 1
1186 # define OSSL_TIME_SPEC_WEEKS_TYPE_BIT 2
1187 # define OSSL_TIME_SPEC_BIT_WEEKS_1 0
1188 # define OSSL_TIME_SPEC_BIT_WEEKS_2 1
1189 # define OSSL_TIME_SPEC_BIT_WEEKS_3 2
1190 # define OSSL_TIME_SPEC_BIT_WEEKS_4 3
1191 # define OSSL_TIME_SPEC_BIT_WEEKS_5 4
1192
1193 typedef struct OSSL_TIME_SPEC_WEEKS_st {
1194 int type;
1195 union {
1196 ASN1_NULL *allWeeks;
1197 STACK_OF(ASN1_INTEGER) *intWeek;
1198 ASN1_BIT_STRING *bitWeek;
1199 } choice;
1200 } OSSL_TIME_SPEC_WEEKS;
1201
1202 # define OSSL_TIME_SPEC_MONTH_TYPE_ALL 0
1203 # define OSSL_TIME_SPEC_MONTH_TYPE_INT 1
1204 # define OSSL_TIME_SPEC_MONTH_TYPE_BIT 2
1205 # define OSSL_TIME_SPEC_INT_MONTH_JAN 1
1206 # define OSSL_TIME_SPEC_INT_MONTH_FEB 2
1207 # define OSSL_TIME_SPEC_INT_MONTH_MAR 3
1208 # define OSSL_TIME_SPEC_INT_MONTH_APR 4
1209 # define OSSL_TIME_SPEC_INT_MONTH_MAY 5
1210 # define OSSL_TIME_SPEC_INT_MONTH_JUN 6
1211 # define OSSL_TIME_SPEC_INT_MONTH_JUL 7
1212 # define OSSL_TIME_SPEC_INT_MONTH_AUG 8
1213 # define OSSL_TIME_SPEC_INT_MONTH_SEP 9
1214 # define OSSL_TIME_SPEC_INT_MONTH_OCT 10
1215 # define OSSL_TIME_SPEC_INT_MONTH_NOV 11
1216 # define OSSL_TIME_SPEC_INT_MONTH_DEC 12
1217 # define OSSL_TIME_SPEC_BIT_MONTH_JAN 0
1218 # define OSSL_TIME_SPEC_BIT_MONTH_FEB 1
1219 # define OSSL_TIME_SPEC_BIT_MONTH_MAR 2
1220 # define OSSL_TIME_SPEC_BIT_MONTH_APR 3
1221 # define OSSL_TIME_SPEC_BIT_MONTH_MAY 4
1222 # define OSSL_TIME_SPEC_BIT_MONTH_JUN 5
1223 # define OSSL_TIME_SPEC_BIT_MONTH_JUL 6
1224 # define OSSL_TIME_SPEC_BIT_MONTH_AUG 7
1225 # define OSSL_TIME_SPEC_BIT_MONTH_SEP 8
1226 # define OSSL_TIME_SPEC_BIT_MONTH_OCT 9
1227 # define OSSL_TIME_SPEC_BIT_MONTH_NOV 10
1228 # define OSSL_TIME_SPEC_BIT_MONTH_DEC 11
1229
1230 typedef struct OSSL_TIME_SPEC_MONTH_st {
1231 int type;
1232 union {
1233 ASN1_NULL *allMonths;
1234 STACK_OF(ASN1_INTEGER) *intMonth;
1235 ASN1_BIT_STRING *bitMonth;
1236 } choice;
1237 } OSSL_TIME_SPEC_MONTH;
1238
1239 typedef struct OSSL_TIME_PERIOD_st {
1240 STACK_OF(OSSL_DAY_TIME_BAND) *timesOfDay;
1241 OSSL_TIME_SPEC_DAY *days;
1242 OSSL_TIME_SPEC_WEEKS *weeks;
1243 OSSL_TIME_SPEC_MONTH *months;
1244 STACK_OF(ASN1_INTEGER) *years;
1245 } OSSL_TIME_PERIOD;
1246
1247 # define OSSL_TIME_SPEC_TIME_TYPE_ABSOLUTE 0
1248 # define OSSL_TIME_SPEC_TIME_TYPE_PERIODIC 1
1249
1250 typedef struct OSSL_TIME_SPEC_TIME_st {
1251 int type;
1252 union {
1253 OSSL_TIME_SPEC_ABSOLUTE *absolute;
1254 STACK_OF(OSSL_TIME_PERIOD) *periodic;
1255 } choice;
1256 } OSSL_TIME_SPEC_TIME;
1257
1258 typedef struct OSSL_TIME_SPEC_st {
1259 OSSL_TIME_SPEC_TIME *time;
1260 ASN1_BOOLEAN notThisTime;
1261 ASN1_INTEGER *timeZone;
1262 } OSSL_TIME_SPEC;
1263
1264 DECLARE_ASN1_FUNCTIONS(OSSL_DAY_TIME)
1265 DECLARE_ASN1_FUNCTIONS(OSSL_DAY_TIME_BAND)
1266 DECLARE_ASN1_FUNCTIONS(OSSL_TIME_SPEC_DAY)
1267 DECLARE_ASN1_FUNCTIONS(OSSL_TIME_SPEC_WEEKS)
1268 DECLARE_ASN1_FUNCTIONS(OSSL_TIME_SPEC_MONTH)
1269 DECLARE_ASN1_FUNCTIONS(OSSL_NAMED_DAY)
1270 DECLARE_ASN1_FUNCTIONS(OSSL_TIME_SPEC_X_DAY_OF)
1271 DECLARE_ASN1_FUNCTIONS(OSSL_TIME_SPEC_ABSOLUTE)
1272 DECLARE_ASN1_FUNCTIONS(OSSL_TIME_SPEC_TIME)
1273 DECLARE_ASN1_FUNCTIONS(OSSL_TIME_SPEC)
1274 DECLARE_ASN1_FUNCTIONS(OSSL_TIME_PERIOD)
1275
1276 {-
1277 generate_stack_macros("OSSL_TIME_PERIOD");
1278 -}
1279
1280 {-
1281 generate_stack_macros("OSSL_DAY_TIME_BAND");
1282 -}
1283
1284 /* Attribute Type and Value */
1285 typedef struct atav_st {
1286 ASN1_OBJECT *type;
1287 ASN1_TYPE *value;
1288 } OSSL_ATAV;
1289
1290 typedef struct ATTRIBUTE_TYPE_MAPPING_st {
1291 ASN1_OBJECT *local;
1292 ASN1_OBJECT *remote;
1293 } OSSL_ATTRIBUTE_TYPE_MAPPING;
1294
1295 typedef struct ATTRIBUTE_VALUE_MAPPING_st {
1296 OSSL_ATAV *local;
1297 OSSL_ATAV *remote;
1298 } OSSL_ATTRIBUTE_VALUE_MAPPING;
1299
1300 # define OSSL_ATTR_MAP_TYPE 0
1301 # define OSSL_ATTR_MAP_VALUE 1
1302
1303 typedef struct ATTRIBUTE_MAPPING_st {
1304 int type;
1305 union {
1306 OSSL_ATTRIBUTE_TYPE_MAPPING *typeMappings;
1307 OSSL_ATTRIBUTE_VALUE_MAPPING *typeValueMappings;
1308 } choice;
1309 } OSSL_ATTRIBUTE_MAPPING;
1310
1311 typedef STACK_OF(OSSL_ATTRIBUTE_MAPPING) OSSL_ATTRIBUTE_MAPPINGS;
1312 DECLARE_ASN1_FUNCTIONS(OSSL_ATAV)
1313 DECLARE_ASN1_FUNCTIONS(OSSL_ATTRIBUTE_TYPE_MAPPING)
1314 DECLARE_ASN1_FUNCTIONS(OSSL_ATTRIBUTE_VALUE_MAPPING)
1315 DECLARE_ASN1_FUNCTIONS(OSSL_ATTRIBUTE_MAPPING)
1316 DECLARE_ASN1_FUNCTIONS(OSSL_ATTRIBUTE_MAPPINGS)
1317
1318 {-
1319 generate_stack_macros("OSSL_ATTRIBUTE_MAPPING");
1320 -}
1321
1322 # define OSSL_AAA_ATTRIBUTE_TYPE 0
1323 # define OSSL_AAA_ATTRIBUTE_VALUES 1
1324
1325 typedef struct ALLOWED_ATTRIBUTES_CHOICE_st {
1326 int type;
1327 union {
1328 ASN1_OBJECT *attributeType;
1329 X509_ATTRIBUTE *attributeTypeandValues;
1330 } choice;
1331 } OSSL_ALLOWED_ATTRIBUTES_CHOICE;
1332
1333 typedef struct ALLOWED_ATTRIBUTES_ITEM_st {
1334 STACK_OF(OSSL_ALLOWED_ATTRIBUTES_CHOICE) *attributes;
1335 GENERAL_NAME *holderDomain;
1336 } OSSL_ALLOWED_ATTRIBUTES_ITEM;
1337
1338 typedef STACK_OF(OSSL_ALLOWED_ATTRIBUTES_ITEM) OSSL_ALLOWED_ATTRIBUTES_SYNTAX;
1339
1340 DECLARE_ASN1_FUNCTIONS(OSSL_ALLOWED_ATTRIBUTES_CHOICE)
1341 DECLARE_ASN1_FUNCTIONS(OSSL_ALLOWED_ATTRIBUTES_ITEM)
1342 DECLARE_ASN1_FUNCTIONS(OSSL_ALLOWED_ATTRIBUTES_SYNTAX)
1343
1344 {-
1345 generate_stack_macros("OSSL_ALLOWED_ATTRIBUTES_CHOICE");
1346 -}
1347
1348 {-
1349 generate_stack_macros("OSSL_ALLOWED_ATTRIBUTES_ITEM");
1350 -}
1351
1352 typedef struct AA_DIST_POINT_st {
1353 DIST_POINT_NAME *distpoint;
1354 ASN1_BIT_STRING *reasons;
1355 int dp_reasons;
1356 ASN1_BOOLEAN indirectCRL;
1357 ASN1_BOOLEAN containsUserAttributeCerts;
1358 ASN1_BOOLEAN containsAACerts;
1359 ASN1_BOOLEAN containsSOAPublicKeyCerts;
1360 } OSSL_AA_DIST_POINT;
1361
1362 DECLARE_ASN1_FUNCTIONS(OSSL_AA_DIST_POINT)
1363
1364 # ifdef __cplusplus
1365 }
1366 # endif
1367 #endif