[thirdparty/openssl.git] / apps / apps.h

/* apps/apps.h */
/* Copyright (C) 1995-1998 Eric Young (eay@cryptsoft.com)
 * All rights reserved.
 *
 * This package is an SSL implementation written
 * by Eric Young (eay@cryptsoft.com).
 * The implementation was written so as to conform with Netscapes SSL.
 * 
 * This library is free for commercial and non-commercial use as long as
 * the following conditions are aheared to.  The following conditions
 * apply to all code found in this distribution, be it the RC4, RSA,
 * lhash, DES, etc., code; not just the SSL code.  The SSL documentation
 * included with this distribution is covered by the same copyright terms
 * except that the holder is Tim Hudson (tjh@cryptsoft.com).
 * 
 * Copyright remains Eric Young's, and as such any Copyright notices in
 * the code are not to be removed.
 * If this package is used in a product, Eric Young should be given attribution
 * as the author of the parts of the library used.
 * This can be in the form of a textual message at program startup or
 * in documentation (online or textual) provided with the package.
 * 
 * Redistribution and use in source and binary forms, with or without
 * modification, are permitted provided that the following conditions
 * are met:
 * 1. Redistributions of source code must retain the copyright
 *    notice, this list of conditions and the following disclaimer.
 * 2. Redistributions in binary form must reproduce the above copyright
 *    notice, this list of conditions and the following disclaimer in the
 *    documentation and/or other materials provided with the distribution.
 * 3. All advertising materials mentioning features or use of this software
 *    must display the following acknowledgement:
 *    "This product includes cryptographic software written by
 *     Eric Young (eay@cryptsoft.com)"
 *    The word 'cryptographic' can be left out if the rouines from the library
 *    being used are not cryptographic related :-).
 * 4. If you include any Windows specific code (or a derivative thereof) from 
 *    the apps directory (application code) you must include an acknowledgement:
 *    "This product includes software written by Tim Hudson (tjh@cryptsoft.com)"
 * 
 * THIS SOFTWARE IS PROVIDED BY ERIC YOUNG ``AS IS'' AND
 * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
 * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
 * ARE DISCLAIMED.  IN NO EVENT SHALL THE AUTHOR OR CONTRIBUTORS BE LIABLE
 * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
 * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
 * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
 * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
 * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
 * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
 * SUCH DAMAGE.
 * 
 * The licence and distribution terms for any publically available version or
 * derivative of this code cannot be changed.  i.e. this code cannot simply be
 * copied and put under another distribution licence
 * [including the GNU Public Licence.]
 */
/* ====================================================================
 * Copyright (c) 1998-2001 The OpenSSL Project.  All rights reserved.
 *
 * Redistribution and use in source and binary forms, with or without
 * modification, are permitted provided that the following conditions
 * are met:
 *
 * 1. Redistributions of source code must retain the above copyright
 *    notice, this list of conditions and the following disclaimer. 
 *
 * 2. Redistributions in binary form must reproduce the above copyright
 *    notice, this list of conditions and the following disclaimer in
 *    the documentation and/or other materials provided with the
 *    distribution.
 *
 * 3. All advertising materials mentioning features or use of this
 *    software must display the following acknowledgment:
 *    "This product includes software developed by the OpenSSL Project
 *    for use in the OpenSSL Toolkit. (http://www.openssl.org/)"
 *
 * 4. The names "OpenSSL Toolkit" and "OpenSSL Project" must not be used to
 *    endorse or promote products derived from this software without
 *    prior written permission. For written permission, please contact
 *    openssl-core@openssl.org.
 *
 * 5. Products derived from this software may not be called "OpenSSL"
 *    nor may "OpenSSL" appear in their names without prior written
 *    permission of the OpenSSL Project.
 *
 * 6. Redistributions of any form whatsoever must retain the following
 *    acknowledgment:
 *    "This product includes software developed by the OpenSSL Project
 *    for use in the OpenSSL Toolkit (http://www.openssl.org/)"
 *
 * THIS SOFTWARE IS PROVIDED BY THE OpenSSL PROJECT ``AS IS'' AND ANY
 * EXPRESSED OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
 * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR
 * PURPOSE ARE DISCLAIMED.  IN NO EVENT SHALL THE OpenSSL PROJECT OR
 * ITS CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL,
 * SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT
 * NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES;
 * LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
 * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT,
 * STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE)
 * ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED
 * OF THE POSSIBILITY OF SUCH DAMAGE.
 * ====================================================================
 *
 * This product includes cryptographic software written by Eric Young
 * (eay@cryptsoft.com).  This product includes software written by Tim
 * Hudson (tjh@cryptsoft.com).
 *
 */

#ifndef HEADER_APPS_H
#define HEADER_APPS_H

#include "e_os.h"

#include <openssl/bio.h>
#include <openssl/x509.h>
#include <openssl/lhash.h>
#include <openssl/conf.h>
#include <openssl/txt_db.h>
#ifndef OPENSSL_NO_ENGINE
#include <openssl/engine.h>
#endif
#ifndef OPENSSL_NO_OCSP
#include <openssl/ocsp.h>
#endif
#include <openssl/ossl_typ.h>

int app_RAND_load_file(const char *file, BIO *bio_e, int dont_warn);
int app_RAND_write_file(const char *file, BIO *bio_e);
/* When `file' is NULL, use defaults.
 * `bio_e' is for error messages. */
void app_RAND_allow_write_file(void);
long app_RAND_load_files(char *file); /* `file' is a list of files to read,
                                       * separated by LIST_SEPARATOR_CHAR
                                       * (see e_os.h).  The string is
                                       * destroyed! */

#ifndef MONOLITH

#define MAIN(a,v)	main(a,v)

#ifndef NON_MAIN
CONF *config=NULL;
BIO *bio_err=NULL;
#else
extern CONF *config;
extern BIO *bio_err;
#endif

#else

#define MAIN(a,v)	PROG(a,v)
extern CONF *config;
extern char *default_config_file;
extern BIO *bio_err;

#endif

#ifndef OPENSSL_SYS_NETWARE
#include <signal.h>
#endif

#ifdef SIGPIPE
#define do_pipe_sig()	signal(SIGPIPE,SIG_IGN)
#else
#define do_pipe_sig()
#endif

#if defined(MONOLITH) && !defined(OPENSSL_C)
#  define apps_startup() \
		do_pipe_sig()
#  define apps_shutdown()
#else
#  ifndef OPENSSL_NO_ENGINE
#    define apps_startup() \
			do { do_pipe_sig(); CRYPTO_malloc_init(); \
			ERR_load_crypto_strings(); OpenSSL_add_all_algorithms(); \
			ENGINE_load_builtin_engines(); setup_ui_method(); } while(0)
#    define apps_shutdown() \
			do { CONF_modules_unload(1); destroy_ui_method(); \
			OBJ_cleanup(); EVP_cleanup(); ENGINE_cleanup(); \
			CRYPTO_cleanup_all_ex_data(); ERR_remove_thread_state(NULL); \
			ERR_free_strings(); COMP_zlib_cleanup();} while(0)
#  else
#    define apps_startup() \
			do { do_pipe_sig(); CRYPTO_malloc_init(); \
			ERR_load_crypto_strings(); OpenSSL_add_all_algorithms(); \
			setup_ui_method(); } while(0)
#    define apps_shutdown() \
			do { CONF_modules_unload(1); destroy_ui_method(); \
			OBJ_cleanup(); EVP_cleanup(); \
			CRYPTO_cleanup_all_ex_data(); ERR_remove_thread_state(NULL); \
			ERR_free_strings(); } while(0)
#  endif
#endif

#ifdef OPENSSL_SYSNAME_WIN32
#  define openssl_fdset(a,b) FD_SET((unsigned int)a, b)
#else
#  define openssl_fdset(a,b) FD_SET(a, b)
#endif


typedef struct args_st
	{
	char **data;
	int count;
	} ARGS;

#define PW_MIN_LENGTH 4
typedef struct pw_cb_data
	{
	const void *password;
	const char *prompt_info;
	} PW_CB_DATA;

int password_callback(char *buf, int bufsiz, int verify,
	PW_CB_DATA *cb_data);

int setup_ui_method(void);
void destroy_ui_method(void);

int should_retry(int i);
int args_from_file(char *file, int *argc, char **argv[]);
int str2fmt(char *s);
void program_name(char *in,char *out,int size);
int chopup_args(ARGS *arg,char *buf, int *argc, char **argv[]);
#ifdef HEADER_X509_H
int dump_cert_text(BIO *out, X509 *x);
void print_name(BIO *out, const char *title, X509_NAME *nm, unsigned long lflags);
#endif
int set_cert_ex(unsigned long *flags, const char *arg);
int set_name_ex(unsigned long *flags, const char *arg);
int set_ext_copy(int *copy_type, const char *arg);
int copy_extensions(X509 *x, X509_REQ *req, int copy_type);
int app_passwd(BIO *err, char *arg1, char *arg2, char **pass1, char **pass2);
int add_oid_section(BIO *err, CONF *conf);
X509 *load_cert(BIO *err, const char *file, int format,
	const char *pass, ENGINE *e, const char *cert_descrip);
EVP_PKEY *load_key(BIO *err, const char *file, int format, int maybe_stdin,
	const char *pass, ENGINE *e, const char *key_descrip);
EVP_PKEY *load_pubkey(BIO *err, const char *file, int format, int maybe_stdin,
	const char *pass, ENGINE *e, const char *key_descrip);
STACK_OF(X509) *load_certs(BIO *err, const char *file, int format,
	const char *pass, ENGINE *e, const char *cert_descrip);
X509_STORE *setup_verify(BIO *bp, char *CAfile, char *CApath);
#ifndef OPENSSL_NO_ENGINE
ENGINE *setup_engine(BIO *err, const char *engine, int debug);
#endif

#ifndef OPENSSL_NO_OCSP
OCSP_RESPONSE *process_responder(BIO *err, OCSP_REQUEST *req,
			char *host, char *path, char *port, int use_ssl,
			int req_timeout);
#endif

int load_config(BIO *err, CONF *cnf);
char *make_config_name(void);

/* Functions defined in ca.c and also used in ocsp.c */
int unpack_revinfo(ASN1_TIME **prevtm, int *preason, ASN1_OBJECT **phold,
			ASN1_GENERALIZEDTIME **pinvtm, const char *str);

#define DB_type         0
#define DB_exp_date     1
#define DB_rev_date     2
#define DB_serial       3       /* index - unique */
#define DB_file         4       
#define DB_name         5       /* index - unique when active and not disabled */
#define DB_NUMBER       6

#define DB_TYPE_REV	'R'
#define DB_TYPE_EXP	'E'
#define DB_TYPE_VAL	'V'

typedef struct db_attr_st
	{
	int unique_subject;
	} DB_ATTR;
typedef struct ca_db_st
	{
	DB_ATTR attributes;
	TXT_DB *db;
	} CA_DB;

BIGNUM *load_serial(char *serialfile, int create, ASN1_INTEGER **retai);
int save_serial(char *serialfile, char *suffix, BIGNUM *serial, ASN1_INTEGER **retai);
int rotate_serial(char *serialfile, char *new_suffix, char *old_suffix);
int rand_serial(BIGNUM *b, ASN1_INTEGER *ai);
CA_DB *load_index(char *dbfile, DB_ATTR *dbattr);
int index_index(CA_DB *db);
int save_index(const char *dbfile, const char *suffix, CA_DB *db);
int rotate_index(const char *dbfile, const char *new_suffix, const char *old_suffix);
void free_index(CA_DB *db);
int index_name_cmp(const STRING *a, const STRING *b);
int parse_yesno(const char *str, int def);

X509_NAME *parse_name(char *str, long chtype, int multirdn);
int args_verify(char ***pargs, int *pargc,
			int *badarg, BIO *err, X509_VERIFY_PARAM **pm);
void policies_print(BIO *out, X509_STORE_CTX *ctx);
int bio_to_mem(unsigned char **out, int maxlen, BIO *in);
int pkey_ctrl_string(EVP_PKEY_CTX *ctx, char *value);
int init_gen_str(BIO *err, EVP_PKEY_CTX **pctx,
			const char *algname, ENGINE *e, int do_param);

#define FORMAT_UNDEF    0
#define FORMAT_ASN1     1
#define FORMAT_TEXT     2
#define FORMAT_PEM      3
#define FORMAT_NETSCAPE 4
#define FORMAT_PKCS12   5
#define FORMAT_SMIME    6
#define FORMAT_ENGINE   7
#define FORMAT_IISSGC	8	/* XXX this stupid macro helps us to avoid
				 * adding yet another param to load_*key() */
#define FORMAT_PEMRSA	9	/* PEM RSAPubicKey format */
#define FORMAT_ASN1RSA	10	/* DER RSAPubicKey format */
#define FORMAT_MSBLOB	11	/* MS Key blob format */
#define FORMAT_PVK	12	/* MS PVK file format */

#define EXT_COPY_NONE	0
#define EXT_COPY_ADD	1
#define EXT_COPY_ALL	2

#define NETSCAPE_CERT_HDR	"certificate"

#define APP_PASS_LEN	1024

#define SERIAL_RAND_BITS	64

int app_isdir(const char *);
int raw_read_stdin(void *,int);
int raw_write_stdout(const void *,int);

#define TM_START	0
#define TM_STOP		1
double app_tminterval (int stop,int usertime);
#endif
Commit	Line	Data
d02b48c6	1	/* apps/apps.h */
58964a49	2	/* Copyright (C) 1995-1998 Eric Young (eay@cryptsoft.com)
d02b48c6 RE	3	* All rights reserved.
	4	*
	5	* This package is an SSL implementation written
	6	* by Eric Young (eay@cryptsoft.com).
	7	* The implementation was written so as to conform with Netscapes SSL.
	8	*
	9	* This library is free for commercial and non-commercial use as long as
	10	* the following conditions are aheared to. The following conditions
	11	* apply to all code found in this distribution, be it the RC4, RSA,
	12	* lhash, DES, etc., code; not just the SSL code. The SSL documentation
	13	* included with this distribution is covered by the same copyright terms
	14	* except that the holder is Tim Hudson (tjh@cryptsoft.com).
	15	*
	16	* Copyright remains Eric Young's, and as such any Copyright notices in
	17	* the code are not to be removed.
	18	* If this package is used in a product, Eric Young should be given attribution
	19	* as the author of the parts of the library used.
	20	* This can be in the form of a textual message at program startup or
	21	* in documentation (online or textual) provided with the package.
	22	*
	23	* Redistribution and use in source and binary forms, with or without
	24	* modification, are permitted provided that the following conditions
	25	* are met:
	26	* 1. Redistributions of source code must retain the copyright
	27	* notice, this list of conditions and the following disclaimer.
	28	* 2. Redistributions in binary form must reproduce the above copyright
	29	* notice, this list of conditions and the following disclaimer in the
	30	* documentation and/or other materials provided with the distribution.
	31	* 3. All advertising materials mentioning features or use of this software
	32	* must display the following acknowledgement:
	33	* "This product includes cryptographic software written by
	34	* Eric Young (eay@cryptsoft.com)"
	35	* The word 'cryptographic' can be left out if the rouines from the library
	36	* being used are not cryptographic related :-).
	37	* 4. If you include any Windows specific code (or a derivative thereof) from
	38	* the apps directory (application code) you must include an acknowledgement:
	39	* "This product includes software written by Tim Hudson (tjh@cryptsoft.com)"
	40	*
	41	* THIS SOFTWARE IS PROVIDED BY ERIC YOUNG ``AS IS'' AND
	42	* ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
	43	* IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
	44	* ARE DISCLAIMED. IN NO EVENT SHALL THE AUTHOR OR CONTRIBUTORS BE LIABLE
	45	* FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
	46	* DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
	47	* OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
	48	* HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
	49	* LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
	50	* OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
	51	* SUCH DAMAGE.
	52	*
	53	* The licence and distribution terms for any publically available version or
	54	* derivative of this code cannot be changed. i.e. this code cannot simply be
	55	* copied and put under another distribution licence
	56	* [including the GNU Public Licence.]
	57	*/
a661b653 BM	58	/* ====================================================================
	59	* Copyright (c) 1998-2001 The OpenSSL Project. All rights reserved.
	60	*
	61	* Redistribution and use in source and binary forms, with or without
	62	* modification, are permitted provided that the following conditions
	63	* are met:
	64	*
	65	* 1. Redistributions of source code must retain the above copyright
	66	* notice, this list of conditions and the following disclaimer.
	67	*
	68	* 2. Redistributions in binary form must reproduce the above copyright
	69	* notice, this list of conditions and the following disclaimer in
	70	* the documentation and/or other materials provided with the
	71	* distribution.
	72	*
	73	* 3. All advertising materials mentioning features or use of this
	74	* software must display the following acknowledgment:
	75	* "This product includes software developed by the OpenSSL Project
	76	* for use in the OpenSSL Toolkit. (http://www.openssl.org/)"
	77	*
	78	* 4. The names "OpenSSL Toolkit" and "OpenSSL Project" must not be used to
	79	* endorse or promote products derived from this software without
	80	* prior written permission. For written permission, please contact
	81	* openssl-core@openssl.org.
	82	*
	83	* 5. Products derived from this software may not be called "OpenSSL"
	84	* nor may "OpenSSL" appear in their names without prior written
	85	* permission of the OpenSSL Project.
	86	*
	87	* 6. Redistributions of any form whatsoever must retain the following
	88	* acknowledgment:
	89	* "This product includes software developed by the OpenSSL Project
	90	* for use in the OpenSSL Toolkit (http://www.openssl.org/)"
	91	*
	92	* THIS SOFTWARE IS PROVIDED BY THE OpenSSL PROJECT ``AS IS'' AND ANY
	93	* EXPRESSED OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
	94	* IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR
	95	* PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE OpenSSL PROJECT OR
	96	* ITS CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL,
	97	* SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT
	98	* NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES;
	99	* LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
	100	* HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT,
	101	* STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE)
	102	* ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED
	103	* OF THE POSSIBILITY OF SUCH DAMAGE.
	104	* ====================================================================
	105	*
	106	* This product includes cryptographic software written by Eric Young
	107	* (eay@cryptsoft.com). This product includes software written by Tim
	108	* Hudson (tjh@cryptsoft.com).
	109	*
	110	*/
d02b48c6 RE	111
	112	#ifndef HEADER_APPS_H
	113	#define HEADER_APPS_H
	114
41d2a336	115	#include "e_os.h"
d02b48c6	116
ec577822	117	#include <openssl/bio.h>
954ef7ef	118	#include <openssl/x509.h>
431b0cce	119	#include <openssl/lhash.h>
095aadc4	120	#include <openssl/conf.h>
ee306a13	121	#include <openssl/txt_db.h>
0b13e9f0	122	#ifndef OPENSSL_NO_ENGINE
032c49b8	123	#include <openssl/engine.h>
0b13e9f0	124	#endif
67c8e7f4 DSH	125	#ifndef OPENSSL_NO_OCSP
	126	#include <openssl/ocsp.h>
	127	#endif
2aa9043a	128	#include <openssl/ossl_typ.h>
d02b48c6	129
a31011e8 BM	130	int app_RAND_load_file(const char file, BIO bio_e, int dont_warn);
	131	int app_RAND_write_file(const char file, BIO bio_e);
	132	/* When `file' is NULL, use defaults.
	133	* `bio_e' is for error messages. */
	134	void app_RAND_allow_write_file(void);
	135	long app_RAND_load_files(char file); / `file' is a list of files to read,
	136	* separated by LIST_SEPARATOR_CHAR
	137	* (see e_os.h). The string is
	138	* destroyed! */
	139
d02b48c6 RE	140	#ifndef MONOLITH
	141
	142	#define MAIN(a,v) main(a,v)
	143
	144	#ifndef NON_MAIN
0e2cc42c	145	CONF *config=NULL;
d02b48c6 RE	146	BIO *bio_err=NULL;
d02b48c6 RE	147	#else
0e2cc42c	148	extern CONF *config;
d02b48c6 RE	149	extern BIO *bio_err;
	150	#endif
	151
	152	#else
	153
	154	#define MAIN(a,v) PROG(a,v)
b7a26e6d	155	extern CONF *config;
d02b48c6 RE	156	extern char *default_config_file;
	157	extern BIO *bio_err;
	158
	159	#endif
	160
4d8743f4	161	#ifndef OPENSSL_SYS_NETWARE
d02b48c6	162	#include <signal.h>
4d8743f4	163	#endif
d02b48c6 RE	164
	165	#ifdef SIGPIPE
	166	#define do_pipe_sig() signal(SIGPIPE,SIG_IGN)
	167	#else
	168	#define do_pipe_sig()
	169	#endif
	170
e290c7d4	171	#if defined(MONOLITH) && !defined(OPENSSL_C)
870d9861 RL	172	# define apps_startup() \
	173	do_pipe_sig()
	174	# define apps_shutdown()
d02b48c6	175	#else
0b13e9f0	176	# ifndef OPENSSL_NO_ENGINE
53261831 AP	177	# define apps_startup() \
53261831 AP	178	do { do_pipe_sig(); CRYPTO_malloc_init(); \
0b13e9f0 RL	179	ERR_load_crypto_strings(); OpenSSL_add_all_algorithms(); \
0b13e9f0 RL	180	ENGINE_load_builtin_engines(); setup_ui_method(); } while(0)
0b13e9f0 RL	181	# define apps_shutdown() \
0b13e9f0 RL	182	do { CONF_modules_unload(1); destroy_ui_method(); \
246e0931	183	OBJ_cleanup(); EVP_cleanup(); ENGINE_cleanup(); \
f7ccba3e	184	CRYPTO_cleanup_all_ex_data(); ERR_remove_thread_state(NULL); \
8931b30d	185	ERR_free_strings(); COMP_zlib_cleanup();} while(0)
d02b48c6	186	# else
53261831 AP	187	# define apps_startup() \
53261831 AP	188	do { do_pipe_sig(); CRYPTO_malloc_init(); \
0b13e9f0 RL	189	ERR_load_crypto_strings(); OpenSSL_add_all_algorithms(); \
0b13e9f0 RL	190	setup_ui_method(); } while(0)
0b13e9f0 RL	191	# define apps_shutdown() \
0b13e9f0 RL	192	do { CONF_modules_unload(1); destroy_ui_method(); \
246e0931	193	OBJ_cleanup(); EVP_cleanup(); \
f7ccba3e	194	CRYPTO_cleanup_all_ex_data(); ERR_remove_thread_state(NULL); \
0b13e9f0	195	ERR_free_strings(); } while(0)
d02b48c6 RE	196	# endif
	197	#endif
	198
7bf7333d DSH	199	#ifdef OPENSSL_SYSNAME_WIN32
	200	# define openssl_fdset(a,b) FD_SET((unsigned int)a, b)
	201	#else
	202	# define openssl_fdset(a,b) FD_SET(a, b)
	203	#endif
	204
	205
d02b48c6	206	typedef struct args_st
b1c4fe36 BM	207	{
b1c4fe36 BM	208	char **data;
d02b48c6	209	int count;
b1c4fe36	210	} ARGS;
d02b48c6	211
30b4c272 RL	212	#define PW_MIN_LENGTH 4
	213	typedef struct pw_cb_data
	214	{
	215	const void *password;
	216	const char *prompt_info;
	217	} PW_CB_DATA;
	218
	219	int password_callback(char *buf, int bufsiz, int verify,
	220	PW_CB_DATA *cb_data);
	221
40889b9c LJ	222	int setup_ui_method(void);
40889b9c LJ	223	void destroy_ui_method(void);
2fe5adc3	224
d02b48c6 RE	225	int should_retry(int i);
	226	int args_from_file(char file, int argc, char **argv[]);
	227	int str2fmt(char *s);
	228	void program_name(char in,char out,int size);
	229	int chopup_args(ARGS arg,char buf, int argc, char *argv[]);
954ef7ef DSH	230	#ifdef HEADER_X509_H
954ef7ef DSH	231	int dump_cert_text(BIO out, X509 x);
7d727231	232	void print_name(BIO out, const char title, X509_NAME *nm, unsigned long lflags);
954ef7ef	233	#endif
8ca533e3	234	int set_cert_ex(unsigned long flags, const char arg);
a657546f	235	int set_name_ex(unsigned long flags, const char arg);
791bd0cd DSH	236	int set_ext_copy(int copy_type, const char arg);
791bd0cd DSH	237	int copy_extensions(X509 x, X509_REQ req, int copy_type);
a3fe382e	238	int app_passwd(BIO err, char arg1, char arg2, char pass1, char *pass2);
b7a26e6d	239	int add_oid_section(BIO err, CONF conf);
30b4c272 RL	240	X509 load_cert(BIO err, const char *file, int format,
30b4c272 RL	241	const char pass, ENGINE e, const char *cert_descrip);
da9b9724	242	EVP_PKEY load_key(BIO err, const char *file, int format, int maybe_stdin,
30b4c272	243	const char pass, ENGINE e, const char *key_descrip);
da9b9724	244	EVP_PKEY load_pubkey(BIO err, const char *file, int format, int maybe_stdin,
30b4c272 RL	245	const char pass, ENGINE e, const char *key_descrip);
	246	STACK_OF(X509) load_certs(BIO err, const char *file, int format,
	247	const char pass, ENGINE e, const char *cert_descrip);
81f169e9	248	X509_STORE setup_verify(BIO bp, char CAfile, char CApath);
0b13e9f0	249	#ifndef OPENSSL_NO_ENGINE
531d630b	250	ENGINE setup_engine(BIO err, const char *engine, int debug);
0b13e9f0	251	#endif
90ae4673	252
67c8e7f4 DSH	253	#ifndef OPENSSL_NO_OCSP
	254	OCSP_RESPONSE process_responder(BIO err, OCSP_REQUEST *req,
	255	char host, char path, char *port, int use_ssl,
	256	int req_timeout);
	257	#endif
	258
3647bee2	259	int load_config(BIO err, CONF cnf);
54a656ef	260	char *make_config_name(void);
3647bee2	261
ee306a13 DSH	262	/* Functions defined in ca.c and also used in ocsp.c */
ee306a13 DSH	263	int unpack_revinfo(ASN1_TIME *prevtm, int preason, ASN1_OBJECT **phold,
7d727231	264	ASN1_GENERALIZEDTIME *pinvtm, const char str);
f85b68cd RL	265
	266	#define DB_type 0
	267	#define DB_exp_date 1
	268	#define DB_rev_date 2
	269	#define DB_serial 3 /* index - unique */
	270	#define DB_file 4
	271	#define DB_name 5 /* index - unique when active and not disabled */
	272	#define DB_NUMBER 6
	273
	274	#define DB_TYPE_REV 'R'
	275	#define DB_TYPE_EXP 'E'
	276	#define DB_TYPE_VAL 'V'
	277
	278	typedef struct db_attr_st
	279	{
	280	int unique_subject;
	281	} DB_ATTR;
	282	typedef struct ca_db_st
	283	{
	284	DB_ATTR attributes;
	285	TXT_DB *db;
	286	} CA_DB;
	287
	288	BIGNUM load_serial(char serialfile, int create, ASN1_INTEGER **retai);
4c771796 RL	289	int save_serial(char serialfile, char suffix, BIGNUM serial, ASN1_INTEGER *retai);
4c771796 RL	290	int rotate_serial(char serialfile, char new_suffix, char *old_suffix);
64674bcc	291	int rand_serial(BIGNUM b, ASN1_INTEGER ai);
f85b68cd RL	292	CA_DB load_index(char dbfile, DB_ATTR *dbattr);
f85b68cd RL	293	int index_index(CA_DB *db);
7d727231 NL	294	int save_index(const char dbfile, const char suffix, CA_DB *db);
7d727231 NL	295	int rotate_index(const char dbfile, const char new_suffix, const char *old_suffix);
f85b68cd	296	void free_index(CA_DB *db);
3c1d6bbc	297	int index_name_cmp(const STRING a, const STRING b);
ff990440	298	int parse_yesno(const char *str, int def);
ee306a13	299
d45a0984	300	X509_NAME parse_name(char str, long chtype, int multirdn);
c431798e DSH	301	int args_verify(char **pargs, int pargc,
	302	int badarg, BIO err, X509_VERIFY_PARAM **pm);
	303	void policies_print(BIO out, X509_STORE_CTX ctx);
a9164153	304	int bio_to_mem(unsigned char *out, int maxlen, BIO in);
4a3dc3c0	305	int pkey_ctrl_string(EVP_PKEY_CTX ctx, char value);
2022cfe0 DSH	306	int init_gen_str(BIO err, EVP_PKEY_CTX *pctx,
2022cfe0 DSH	307	const char algname, ENGINE e, int do_param);
eee6c81a	308
d02b48c6 RE	309	#define FORMAT_UNDEF 0
	310	#define FORMAT_ASN1 1
	311	#define FORMAT_TEXT 2
	312	#define FORMAT_PEM 3
	313	#define FORMAT_NETSCAPE 4
90ae4673	314	#define FORMAT_PKCS12 5
094fe66d	315	#define FORMAT_SMIME 6
5270e702	316	#define FORMAT_ENGINE 7
80bb905d RL	317	#define FORMAT_IISSGC 8 /* XXX this stupid macro helps us to avoid
80bb905d RL	318	* adding yet another param to load_key() /
eea374fd DSH	319	#define FORMAT_PEMRSA 9 /* PEM RSAPubicKey format */
eea374fd DSH	320	#define FORMAT_ASN1RSA 10 /* DER RSAPubicKey format */
a0156a92 DSH	321	#define FORMAT_MSBLOB 11 /* MS Key blob format */
a0156a92 DSH	322	#define FORMAT_PVK 12 /* MS PVK file format */
90ae4673	323
791bd0cd DSH	324	#define EXT_COPY_NONE 0
	325	#define EXT_COPY_ADD 1
	326	#define EXT_COPY_ALL 2
	327
90ae4673	328	#define NETSCAPE_CERT_HDR "certificate"
d02b48c6	329
a3fe382e DSH	330	#define APP_PASS_LEN 1024
a3fe382e DSH	331
64674bcc DSH	332	#define SERIAL_RAND_BITS 64
64674bcc DSH	333
ffa10187 AP	334	int app_isdir(const char *);
	335	int raw_read_stdin(void *,int);
	336	int raw_write_stdout(const void *,int);
0a39d8f2 AP	337
	338	#define TM_START 0
	339	#define TM_STOP 1
	340	double app_tminterval (int stop,int usertime);
d02b48c6	341	#endif