x509.h 42 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268269270271272273274275276277278279280281282283284285286287288289290291292293294295296297298299300301302303304305306307308309310311312313314315316317318319320321322323324325326327328329330331332333334335336337338339340341342343344345346347348349350351352353354355356357358359360361362363364365366367368369370371372373374375376377378379380381382383384385386387388389390391392393394395396397398399400401402403404405406407408409410411412413414415416417418419420421422423424425426427428429430431432433434435436437438439440441442443444445446447448449450451452453454455456457458459460461462463464465466467468469470471472473474475476477478479480481482483484485486487488489490491492493494495496497498499500501502503504505506507508509510511512513514515516517518519520521522523524525526527528529530531532533534535536537538539540541542543544545546547548549550551552553554555556557558559560561562563564565566567568569570571572573574575576577578579580581582583584585586587588589590591592593594595596597598599600601602603604605606607608609610611612613614615616617618619620621622623624625626627628629630631632633634635636637638639640641642643644645646647648649650651652653654655656657658659660661662663664665666667668669670671672673674675676677678679680681682683684685686687688689690691692693694695696697698699700701702703704705706707708709710711712713714715716717718719720721722723724725726727728729730731732733734735736737738739740741742743744745746747748749750751752753754755756757758759760761762763764765766767768769770771772773774775776777778779780781782783784785786787788789790791792793794795796797798799800801802803804805806807808809810811812813814815816817818819820821822823824825826827828829830831832833834835836837838839840841842843844845846847848849850851852853854855856857858859860861862863864865866867868869870871872873874875876877878879880881882883884885886887888889890891892893894895896897898899900901902903904905906907908909910911912913914915916917918919920921922923924925926927928929930931932933934935936937938939940941942943944945946947948949950951952953954955956957958959960961962963964965966967968969970971972973974975976977978979980981982983984985986987988989990991992993994995996997998999100010011002100310041005100610071008100910101011101210131014101510161017101810191020102110221023102410251026102710281029103010311032103310341035103610371038103910401041104210431044104510461047104810491050
  1. /*
  2. * Copyright 1995-2020 The OpenSSL Project Authors. All Rights Reserved.
  3. * Copyright (c) 2002, Oracle and/or its affiliates. All rights reserved
  4. *
  5. * Licensed under the OpenSSL license (the "License"). You may not use
  6. * this file except in compliance with the License. You can obtain a copy
  7. * in the file LICENSE in the source distribution or at
  8. * https://www.openssl.org/source/license.html
  9. */
  10. #ifndef HEADER_X509_H
  11. # define HEADER_X509_H
  12. # include <openssl/e_os2.h>
  13. # include <openssl/ossl_typ.h>
  14. # include <openssl/symhacks.h>
  15. # include <openssl/buffer.h>
  16. # include <openssl/evp.h>
  17. # include <openssl/bio.h>
  18. # include <openssl/asn1.h>
  19. # include <openssl/safestack.h>
  20. # include <openssl/ec.h>
  21. # if OPENSSL_API_COMPAT < 0x10100000L
  22. # include <openssl/rsa.h>
  23. # include <openssl/dsa.h>
  24. # include <openssl/dh.h>
  25. # endif
  26. # include <openssl/sha.h>
  27. # include <openssl/x509err.h>
  28. #ifdef __cplusplus
  29. extern "C" {
  30. #endif
  31. /* Flags for X509_get_signature_info() */
  32. /* Signature info is valid */
  33. # define X509_SIG_INFO_VALID 0x1
  34. /* Signature is suitable for TLS use */
  35. # define X509_SIG_INFO_TLS 0x2
  36. # define X509_FILETYPE_PEM 1
  37. # define X509_FILETYPE_ASN1 2
  38. # define X509_FILETYPE_DEFAULT 3
  39. # define X509v3_KU_DIGITAL_SIGNATURE 0x0080
  40. # define X509v3_KU_NON_REPUDIATION 0x0040
  41. # define X509v3_KU_KEY_ENCIPHERMENT 0x0020
  42. # define X509v3_KU_DATA_ENCIPHERMENT 0x0010
  43. # define X509v3_KU_KEY_AGREEMENT 0x0008
  44. # define X509v3_KU_KEY_CERT_SIGN 0x0004
  45. # define X509v3_KU_CRL_SIGN 0x0002
  46. # define X509v3_KU_ENCIPHER_ONLY 0x0001
  47. # define X509v3_KU_DECIPHER_ONLY 0x8000
  48. # define X509v3_KU_UNDEF 0xffff
  49. struct X509_algor_st {
  50. ASN1_OBJECT *algorithm;
  51. ASN1_TYPE *parameter;
  52. } /* X509_ALGOR */ ;
  53. typedef STACK_OF(X509_ALGOR) X509_ALGORS;
  54. typedef struct X509_val_st {
  55. ASN1_TIME *notBefore;
  56. ASN1_TIME *notAfter;
  57. } X509_VAL;
  58. typedef struct X509_sig_st X509_SIG;
  59. typedef struct X509_name_entry_st X509_NAME_ENTRY;
  60. DEFINE_STACK_OF(X509_NAME_ENTRY)
  61. DEFINE_STACK_OF(X509_NAME)
  62. # define X509_EX_V_NETSCAPE_HACK 0x8000
  63. # define X509_EX_V_INIT 0x0001
  64. typedef struct X509_extension_st X509_EXTENSION;
  65. typedef STACK_OF(X509_EXTENSION) X509_EXTENSIONS;
  66. DEFINE_STACK_OF(X509_EXTENSION)
  67. typedef struct x509_attributes_st X509_ATTRIBUTE;
  68. DEFINE_STACK_OF(X509_ATTRIBUTE)
  69. typedef struct X509_req_info_st X509_REQ_INFO;
  70. typedef struct X509_req_st X509_REQ;
  71. typedef struct x509_cert_aux_st X509_CERT_AUX;
  72. typedef struct x509_cinf_st X509_CINF;
  73. DEFINE_STACK_OF(X509)
  74. /* This is used for a table of trust checking functions */
  75. typedef struct x509_trust_st {
  76. int trust;
  77. int flags;
  78. int (*check_trust) (struct x509_trust_st *, X509 *, int);
  79. char *name;
  80. int arg1;
  81. void *arg2;
  82. } X509_TRUST;
  83. DEFINE_STACK_OF(X509_TRUST)
  84. /* standard trust ids */
  85. # define X509_TRUST_DEFAULT 0 /* Only valid in purpose settings */
  86. # define X509_TRUST_COMPAT 1
  87. # define X509_TRUST_SSL_CLIENT 2
  88. # define X509_TRUST_SSL_SERVER 3
  89. # define X509_TRUST_EMAIL 4
  90. # define X509_TRUST_OBJECT_SIGN 5
  91. # define X509_TRUST_OCSP_SIGN 6
  92. # define X509_TRUST_OCSP_REQUEST 7
  93. # define X509_TRUST_TSA 8
  94. /* Keep these up to date! */
  95. # define X509_TRUST_MIN 1
  96. # define X509_TRUST_MAX 8
  97. /* trust_flags values */
  98. # define X509_TRUST_DYNAMIC (1U << 0)
  99. # define X509_TRUST_DYNAMIC_NAME (1U << 1)
  100. /* No compat trust if self-signed, preempts "DO_SS" */
  101. # define X509_TRUST_NO_SS_COMPAT (1U << 2)
  102. /* Compat trust if no explicit accepted trust EKUs */
  103. # define X509_TRUST_DO_SS_COMPAT (1U << 3)
  104. /* Accept "anyEKU" as a wildcard trust OID */
  105. # define X509_TRUST_OK_ANY_EKU (1U << 4)
  106. /* check_trust return codes */
  107. # define X509_TRUST_TRUSTED 1
  108. # define X509_TRUST_REJECTED 2
  109. # define X509_TRUST_UNTRUSTED 3
  110. /* Flags for X509_print_ex() */
  111. # define X509_FLAG_COMPAT 0
  112. # define X509_FLAG_NO_HEADER 1L
  113. # define X509_FLAG_NO_VERSION (1L << 1)
  114. # define X509_FLAG_NO_SERIAL (1L << 2)
  115. # define X509_FLAG_NO_SIGNAME (1L << 3)
  116. # define X509_FLAG_NO_ISSUER (1L << 4)
  117. # define X509_FLAG_NO_VALIDITY (1L << 5)
  118. # define X509_FLAG_NO_SUBJECT (1L << 6)
  119. # define X509_FLAG_NO_PUBKEY (1L << 7)
  120. # define X509_FLAG_NO_EXTENSIONS (1L << 8)
  121. # define X509_FLAG_NO_SIGDUMP (1L << 9)
  122. # define X509_FLAG_NO_AUX (1L << 10)
  123. # define X509_FLAG_NO_ATTRIBUTES (1L << 11)
  124. # define X509_FLAG_NO_IDS (1L << 12)
  125. /* Flags specific to X509_NAME_print_ex() */
  126. /* The field separator information */
  127. # define XN_FLAG_SEP_MASK (0xf << 16)
  128. # define XN_FLAG_COMPAT 0/* Traditional; use old X509_NAME_print */
  129. # define XN_FLAG_SEP_COMMA_PLUS (1 << 16)/* RFC2253 ,+ */
  130. # define XN_FLAG_SEP_CPLUS_SPC (2 << 16)/* ,+ spaced: more readable */
  131. # define XN_FLAG_SEP_SPLUS_SPC (3 << 16)/* ;+ spaced */
  132. # define XN_FLAG_SEP_MULTILINE (4 << 16)/* One line per field */
  133. # define XN_FLAG_DN_REV (1 << 20)/* Reverse DN order */
  134. /* How the field name is shown */
  135. # define XN_FLAG_FN_MASK (0x3 << 21)
  136. # define XN_FLAG_FN_SN 0/* Object short name */
  137. # define XN_FLAG_FN_LN (1 << 21)/* Object long name */
  138. # define XN_FLAG_FN_OID (2 << 21)/* Always use OIDs */
  139. # define XN_FLAG_FN_NONE (3 << 21)/* No field names */
  140. # define XN_FLAG_SPC_EQ (1 << 23)/* Put spaces round '=' */
  141. /*
  142. * This determines if we dump fields we don't recognise: RFC2253 requires
  143. * this.
  144. */
  145. # define XN_FLAG_DUMP_UNKNOWN_FIELDS (1 << 24)
  146. # define XN_FLAG_FN_ALIGN (1 << 25)/* Align field names to 20
  147. * characters */
  148. /* Complete set of RFC2253 flags */
  149. # define XN_FLAG_RFC2253 (ASN1_STRFLGS_RFC2253 | \
  150. XN_FLAG_SEP_COMMA_PLUS | \
  151. XN_FLAG_DN_REV | \
  152. XN_FLAG_FN_SN | \
  153. XN_FLAG_DUMP_UNKNOWN_FIELDS)
  154. /* readable oneline form */
  155. # define XN_FLAG_ONELINE (ASN1_STRFLGS_RFC2253 | \
  156. ASN1_STRFLGS_ESC_QUOTE | \
  157. XN_FLAG_SEP_CPLUS_SPC | \
  158. XN_FLAG_SPC_EQ | \
  159. XN_FLAG_FN_SN)
  160. /* readable multiline form */
  161. # define XN_FLAG_MULTILINE (ASN1_STRFLGS_ESC_CTRL | \
  162. ASN1_STRFLGS_ESC_MSB | \
  163. XN_FLAG_SEP_MULTILINE | \
  164. XN_FLAG_SPC_EQ | \
  165. XN_FLAG_FN_LN | \
  166. XN_FLAG_FN_ALIGN)
  167. DEFINE_STACK_OF(X509_REVOKED)
  168. typedef struct X509_crl_info_st X509_CRL_INFO;
  169. DEFINE_STACK_OF(X509_CRL)
  170. typedef struct private_key_st {
  171. int version;
  172. /* The PKCS#8 data types */
  173. X509_ALGOR *enc_algor;
  174. ASN1_OCTET_STRING *enc_pkey; /* encrypted pub key */
  175. /* When decrypted, the following will not be NULL */
  176. EVP_PKEY *dec_pkey;
  177. /* used to encrypt and decrypt */
  178. int key_length;
  179. char *key_data;
  180. int key_free; /* true if we should auto free key_data */
  181. /* expanded version of 'enc_algor' */
  182. EVP_CIPHER_INFO cipher;
  183. } X509_PKEY;
  184. typedef struct X509_info_st {
  185. X509 *x509;
  186. X509_CRL *crl;
  187. X509_PKEY *x_pkey;
  188. EVP_CIPHER_INFO enc_cipher;
  189. int enc_len;
  190. char *enc_data;
  191. } X509_INFO;
  192. DEFINE_STACK_OF(X509_INFO)
  193. /*
  194. * The next 2 structures and their 8 routines are used to manipulate Netscape's
  195. * spki structures - useful if you are writing a CA web page
  196. */
  197. typedef struct Netscape_spkac_st {
  198. X509_PUBKEY *pubkey;
  199. ASN1_IA5STRING *challenge; /* challenge sent in atlas >= PR2 */
  200. } NETSCAPE_SPKAC;
  201. typedef struct Netscape_spki_st {
  202. NETSCAPE_SPKAC *spkac; /* signed public key and challenge */
  203. X509_ALGOR sig_algor;
  204. ASN1_BIT_STRING *signature;
  205. } NETSCAPE_SPKI;
  206. /* Netscape certificate sequence structure */
  207. typedef struct Netscape_certificate_sequence {
  208. ASN1_OBJECT *type;
  209. STACK_OF(X509) *certs;
  210. } NETSCAPE_CERT_SEQUENCE;
  211. /*- Unused (and iv length is wrong)
  212. typedef struct CBCParameter_st
  213. {
  214. unsigned char iv[8];
  215. } CBC_PARAM;
  216. */
  217. /* Password based encryption structure */
  218. typedef struct PBEPARAM_st {
  219. ASN1_OCTET_STRING *salt;
  220. ASN1_INTEGER *iter;
  221. } PBEPARAM;
  222. /* Password based encryption V2 structures */
  223. typedef struct PBE2PARAM_st {
  224. X509_ALGOR *keyfunc;
  225. X509_ALGOR *encryption;
  226. } PBE2PARAM;
  227. typedef struct PBKDF2PARAM_st {
  228. /* Usually OCTET STRING but could be anything */
  229. ASN1_TYPE *salt;
  230. ASN1_INTEGER *iter;
  231. ASN1_INTEGER *keylength;
  232. X509_ALGOR *prf;
  233. } PBKDF2PARAM;
  234. #ifndef OPENSSL_NO_SCRYPT
  235. typedef struct SCRYPT_PARAMS_st {
  236. ASN1_OCTET_STRING *salt;
  237. ASN1_INTEGER *costParameter;
  238. ASN1_INTEGER *blockSize;
  239. ASN1_INTEGER *parallelizationParameter;
  240. ASN1_INTEGER *keyLength;
  241. } SCRYPT_PARAMS;
  242. #endif
  243. #ifdef __cplusplus
  244. }
  245. #endif
  246. # include <openssl/x509_vfy.h>
  247. # include <openssl/pkcs7.h>
  248. #ifdef __cplusplus
  249. extern "C" {
  250. #endif
  251. # define X509_EXT_PACK_UNKNOWN 1
  252. # define X509_EXT_PACK_STRING 2
  253. # define X509_extract_key(x) X509_get_pubkey(x)/*****/
  254. # define X509_REQ_extract_key(a) X509_REQ_get_pubkey(a)
  255. # define X509_name_cmp(a,b) X509_NAME_cmp((a),(b))
  256. void X509_CRL_set_default_method(const X509_CRL_METHOD *meth);
  257. X509_CRL_METHOD *X509_CRL_METHOD_new(int (*crl_init) (X509_CRL *crl),
  258. int (*crl_free) (X509_CRL *crl),
  259. int (*crl_lookup) (X509_CRL *crl,
  260. X509_REVOKED **ret,
  261. ASN1_INTEGER *ser,
  262. X509_NAME *issuer),
  263. int (*crl_verify) (X509_CRL *crl,
  264. EVP_PKEY *pk));
  265. void X509_CRL_METHOD_free(X509_CRL_METHOD *m);
  266. void X509_CRL_set_meth_data(X509_CRL *crl, void *dat);
  267. void *X509_CRL_get_meth_data(X509_CRL *crl);
  268. const char *X509_verify_cert_error_string(long n);
  269. int X509_verify(X509 *a, EVP_PKEY *r);
  270. int X509_REQ_verify(X509_REQ *a, EVP_PKEY *r);
  271. int X509_CRL_verify(X509_CRL *a, EVP_PKEY *r);
  272. int NETSCAPE_SPKI_verify(NETSCAPE_SPKI *a, EVP_PKEY *r);
  273. NETSCAPE_SPKI *NETSCAPE_SPKI_b64_decode(const char *str, int len);
  274. char *NETSCAPE_SPKI_b64_encode(NETSCAPE_SPKI *x);
  275. EVP_PKEY *NETSCAPE_SPKI_get_pubkey(NETSCAPE_SPKI *x);
  276. int NETSCAPE_SPKI_set_pubkey(NETSCAPE_SPKI *x, EVP_PKEY *pkey);
  277. int NETSCAPE_SPKI_print(BIO *out, NETSCAPE_SPKI *spki);
  278. int X509_signature_dump(BIO *bp, const ASN1_STRING *sig, int indent);
  279. int X509_signature_print(BIO *bp, const X509_ALGOR *alg,
  280. const ASN1_STRING *sig);
  281. int X509_sign(X509 *x, EVP_PKEY *pkey, const EVP_MD *md);
  282. int X509_sign_ctx(X509 *x, EVP_MD_CTX *ctx);
  283. # ifndef OPENSSL_NO_OCSP
  284. int X509_http_nbio(OCSP_REQ_CTX *rctx, X509 **pcert);
  285. # endif
  286. int X509_REQ_sign(X509_REQ *x, EVP_PKEY *pkey, const EVP_MD *md);
  287. int X509_REQ_sign_ctx(X509_REQ *x, EVP_MD_CTX *ctx);
  288. int X509_CRL_sign(X509_CRL *x, EVP_PKEY *pkey, const EVP_MD *md);
  289. int X509_CRL_sign_ctx(X509_CRL *x, EVP_MD_CTX *ctx);
  290. # ifndef OPENSSL_NO_OCSP
  291. int X509_CRL_http_nbio(OCSP_REQ_CTX *rctx, X509_CRL **pcrl);
  292. # endif
  293. int NETSCAPE_SPKI_sign(NETSCAPE_SPKI *x, EVP_PKEY *pkey, const EVP_MD *md);
  294. int X509_pubkey_digest(const X509 *data, const EVP_MD *type,
  295. unsigned char *md, unsigned int *len);
  296. int X509_digest(const X509 *data, const EVP_MD *type,
  297. unsigned char *md, unsigned int *len);
  298. int X509_CRL_digest(const X509_CRL *data, const EVP_MD *type,
  299. unsigned char *md, unsigned int *len);
  300. int X509_REQ_digest(const X509_REQ *data, const EVP_MD *type,
  301. unsigned char *md, unsigned int *len);
  302. int X509_NAME_digest(const X509_NAME *data, const EVP_MD *type,
  303. unsigned char *md, unsigned int *len);
  304. # ifndef OPENSSL_NO_STDIO
  305. X509 *d2i_X509_fp(FILE *fp, X509 **x509);
  306. int i2d_X509_fp(FILE *fp, X509 *x509);
  307. X509_CRL *d2i_X509_CRL_fp(FILE *fp, X509_CRL **crl);
  308. int i2d_X509_CRL_fp(FILE *fp, X509_CRL *crl);
  309. X509_REQ *d2i_X509_REQ_fp(FILE *fp, X509_REQ **req);
  310. int i2d_X509_REQ_fp(FILE *fp, X509_REQ *req);
  311. # ifndef OPENSSL_NO_RSA
  312. RSA *d2i_RSAPrivateKey_fp(FILE *fp, RSA **rsa);
  313. int i2d_RSAPrivateKey_fp(FILE *fp, RSA *rsa);
  314. RSA *d2i_RSAPublicKey_fp(FILE *fp, RSA **rsa);
  315. int i2d_RSAPublicKey_fp(FILE *fp, RSA *rsa);
  316. RSA *d2i_RSA_PUBKEY_fp(FILE *fp, RSA **rsa);
  317. int i2d_RSA_PUBKEY_fp(FILE *fp, RSA *rsa);
  318. # endif
  319. # ifndef OPENSSL_NO_DSA
  320. DSA *d2i_DSA_PUBKEY_fp(FILE *fp, DSA **dsa);
  321. int i2d_DSA_PUBKEY_fp(FILE *fp, DSA *dsa);
  322. DSA *d2i_DSAPrivateKey_fp(FILE *fp, DSA **dsa);
  323. int i2d_DSAPrivateKey_fp(FILE *fp, DSA *dsa);
  324. # endif
  325. # ifndef OPENSSL_NO_EC
  326. EC_KEY *d2i_EC_PUBKEY_fp(FILE *fp, EC_KEY **eckey);
  327. int i2d_EC_PUBKEY_fp(FILE *fp, EC_KEY *eckey);
  328. EC_KEY *d2i_ECPrivateKey_fp(FILE *fp, EC_KEY **eckey);
  329. int i2d_ECPrivateKey_fp(FILE *fp, EC_KEY *eckey);
  330. # endif
  331. X509_SIG *d2i_PKCS8_fp(FILE *fp, X509_SIG **p8);
  332. int i2d_PKCS8_fp(FILE *fp, X509_SIG *p8);
  333. PKCS8_PRIV_KEY_INFO *d2i_PKCS8_PRIV_KEY_INFO_fp(FILE *fp,
  334. PKCS8_PRIV_KEY_INFO **p8inf);
  335. int i2d_PKCS8_PRIV_KEY_INFO_fp(FILE *fp, PKCS8_PRIV_KEY_INFO *p8inf);
  336. int i2d_PKCS8PrivateKeyInfo_fp(FILE *fp, EVP_PKEY *key);
  337. int i2d_PrivateKey_fp(FILE *fp, EVP_PKEY *pkey);
  338. EVP_PKEY *d2i_PrivateKey_fp(FILE *fp, EVP_PKEY **a);
  339. int i2d_PUBKEY_fp(FILE *fp, EVP_PKEY *pkey);
  340. EVP_PKEY *d2i_PUBKEY_fp(FILE *fp, EVP_PKEY **a);
  341. # endif
  342. X509 *d2i_X509_bio(BIO *bp, X509 **x509);
  343. int i2d_X509_bio(BIO *bp, X509 *x509);
  344. X509_CRL *d2i_X509_CRL_bio(BIO *bp, X509_CRL **crl);
  345. int i2d_X509_CRL_bio(BIO *bp, X509_CRL *crl);
  346. X509_REQ *d2i_X509_REQ_bio(BIO *bp, X509_REQ **req);
  347. int i2d_X509_REQ_bio(BIO *bp, X509_REQ *req);
  348. # ifndef OPENSSL_NO_RSA
  349. RSA *d2i_RSAPrivateKey_bio(BIO *bp, RSA **rsa);
  350. int i2d_RSAPrivateKey_bio(BIO *bp, RSA *rsa);
  351. RSA *d2i_RSAPublicKey_bio(BIO *bp, RSA **rsa);
  352. int i2d_RSAPublicKey_bio(BIO *bp, RSA *rsa);
  353. RSA *d2i_RSA_PUBKEY_bio(BIO *bp, RSA **rsa);
  354. int i2d_RSA_PUBKEY_bio(BIO *bp, RSA *rsa);
  355. # endif
  356. # ifndef OPENSSL_NO_DSA
  357. DSA *d2i_DSA_PUBKEY_bio(BIO *bp, DSA **dsa);
  358. int i2d_DSA_PUBKEY_bio(BIO *bp, DSA *dsa);
  359. DSA *d2i_DSAPrivateKey_bio(BIO *bp, DSA **dsa);
  360. int i2d_DSAPrivateKey_bio(BIO *bp, DSA *dsa);
  361. # endif
  362. # ifndef OPENSSL_NO_EC
  363. EC_KEY *d2i_EC_PUBKEY_bio(BIO *bp, EC_KEY **eckey);
  364. int i2d_EC_PUBKEY_bio(BIO *bp, EC_KEY *eckey);
  365. EC_KEY *d2i_ECPrivateKey_bio(BIO *bp, EC_KEY **eckey);
  366. int i2d_ECPrivateKey_bio(BIO *bp, EC_KEY *eckey);
  367. # endif
  368. X509_SIG *d2i_PKCS8_bio(BIO *bp, X509_SIG **p8);
  369. int i2d_PKCS8_bio(BIO *bp, X509_SIG *p8);
  370. PKCS8_PRIV_KEY_INFO *d2i_PKCS8_PRIV_KEY_INFO_bio(BIO *bp,
  371. PKCS8_PRIV_KEY_INFO **p8inf);
  372. int i2d_PKCS8_PRIV_KEY_INFO_bio(BIO *bp, PKCS8_PRIV_KEY_INFO *p8inf);
  373. int i2d_PKCS8PrivateKeyInfo_bio(BIO *bp, EVP_PKEY *key);
  374. int i2d_PrivateKey_bio(BIO *bp, EVP_PKEY *pkey);
  375. EVP_PKEY *d2i_PrivateKey_bio(BIO *bp, EVP_PKEY **a);
  376. int i2d_PUBKEY_bio(BIO *bp, EVP_PKEY *pkey);
  377. EVP_PKEY *d2i_PUBKEY_bio(BIO *bp, EVP_PKEY **a);
  378. X509 *X509_dup(X509 *x509);
  379. X509_ATTRIBUTE *X509_ATTRIBUTE_dup(X509_ATTRIBUTE *xa);
  380. X509_EXTENSION *X509_EXTENSION_dup(X509_EXTENSION *ex);
  381. X509_CRL *X509_CRL_dup(X509_CRL *crl);
  382. X509_REVOKED *X509_REVOKED_dup(X509_REVOKED *rev);
  383. X509_REQ *X509_REQ_dup(X509_REQ *req);
  384. X509_ALGOR *X509_ALGOR_dup(X509_ALGOR *xn);
  385. int X509_ALGOR_set0(X509_ALGOR *alg, ASN1_OBJECT *aobj, int ptype,
  386. void *pval);
  387. void X509_ALGOR_get0(const ASN1_OBJECT **paobj, int *pptype,
  388. const void **ppval, const X509_ALGOR *algor);
  389. void X509_ALGOR_set_md(X509_ALGOR *alg, const EVP_MD *md);
  390. int X509_ALGOR_cmp(const X509_ALGOR *a, const X509_ALGOR *b);
  391. int X509_ALGOR_copy(X509_ALGOR *dest, const X509_ALGOR *src);
  392. X509_NAME *X509_NAME_dup(X509_NAME *xn);
  393. X509_NAME_ENTRY *X509_NAME_ENTRY_dup(X509_NAME_ENTRY *ne);
  394. int X509_cmp_time(const ASN1_TIME *s, time_t *t);
  395. int X509_cmp_current_time(const ASN1_TIME *s);
  396. ASN1_TIME *X509_time_adj(ASN1_TIME *s, long adj, time_t *t);
  397. ASN1_TIME *X509_time_adj_ex(ASN1_TIME *s,
  398. int offset_day, long offset_sec, time_t *t);
  399. ASN1_TIME *X509_gmtime_adj(ASN1_TIME *s, long adj);
  400. const char *X509_get_default_cert_area(void);
  401. const char *X509_get_default_cert_dir(void);
  402. const char *X509_get_default_cert_file(void);
  403. const char *X509_get_default_cert_dir_env(void);
  404. const char *X509_get_default_cert_file_env(void);
  405. const char *X509_get_default_private_dir(void);
  406. X509_REQ *X509_to_X509_REQ(X509 *x, EVP_PKEY *pkey, const EVP_MD *md);
  407. X509 *X509_REQ_to_X509(X509_REQ *r, int days, EVP_PKEY *pkey);
  408. DECLARE_ASN1_FUNCTIONS(X509_ALGOR)
  409. DECLARE_ASN1_ENCODE_FUNCTIONS(X509_ALGORS, X509_ALGORS, X509_ALGORS)
  410. DECLARE_ASN1_FUNCTIONS(X509_VAL)
  411. DECLARE_ASN1_FUNCTIONS(X509_PUBKEY)
  412. int X509_PUBKEY_set(X509_PUBKEY **x, EVP_PKEY *pkey);
  413. EVP_PKEY *X509_PUBKEY_get0(X509_PUBKEY *key);
  414. EVP_PKEY *X509_PUBKEY_get(X509_PUBKEY *key);
  415. int X509_get_pubkey_parameters(EVP_PKEY *pkey, STACK_OF(X509) *chain);
  416. long X509_get_pathlen(X509 *x);
  417. int i2d_PUBKEY(EVP_PKEY *a, unsigned char **pp);
  418. EVP_PKEY *d2i_PUBKEY(EVP_PKEY **a, const unsigned char **pp, long length);
  419. # ifndef OPENSSL_NO_RSA
  420. int i2d_RSA_PUBKEY(RSA *a, unsigned char **pp);
  421. RSA *d2i_RSA_PUBKEY(RSA **a, const unsigned char **pp, long length);
  422. # endif
  423. # ifndef OPENSSL_NO_DSA
  424. int i2d_DSA_PUBKEY(DSA *a, unsigned char **pp);
  425. DSA *d2i_DSA_PUBKEY(DSA **a, const unsigned char **pp, long length);
  426. # endif
  427. # ifndef OPENSSL_NO_EC
  428. int i2d_EC_PUBKEY(EC_KEY *a, unsigned char **pp);
  429. EC_KEY *d2i_EC_PUBKEY(EC_KEY **a, const unsigned char **pp, long length);
  430. # endif
  431. DECLARE_ASN1_FUNCTIONS(X509_SIG)
  432. void X509_SIG_get0(const X509_SIG *sig, const X509_ALGOR **palg,
  433. const ASN1_OCTET_STRING **pdigest);
  434. void X509_SIG_getm(X509_SIG *sig, X509_ALGOR **palg,
  435. ASN1_OCTET_STRING **pdigest);
  436. DECLARE_ASN1_FUNCTIONS(X509_REQ_INFO)
  437. DECLARE_ASN1_FUNCTIONS(X509_REQ)
  438. DECLARE_ASN1_FUNCTIONS(X509_ATTRIBUTE)
  439. X509_ATTRIBUTE *X509_ATTRIBUTE_create(int nid, int atrtype, void *value);
  440. DECLARE_ASN1_FUNCTIONS(X509_EXTENSION)
  441. DECLARE_ASN1_ENCODE_FUNCTIONS(X509_EXTENSIONS, X509_EXTENSIONS, X509_EXTENSIONS)
  442. DECLARE_ASN1_FUNCTIONS(X509_NAME_ENTRY)
  443. DECLARE_ASN1_FUNCTIONS(X509_NAME)
  444. int X509_NAME_set(X509_NAME **xn, X509_NAME *name);
  445. DECLARE_ASN1_FUNCTIONS(X509_CINF)
  446. DECLARE_ASN1_FUNCTIONS(X509)
  447. DECLARE_ASN1_FUNCTIONS(X509_CERT_AUX)
  448. #define X509_get_ex_new_index(l, p, newf, dupf, freef) \
  449. CRYPTO_get_ex_new_index(CRYPTO_EX_INDEX_X509, l, p, newf, dupf, freef)
  450. int X509_set_ex_data(X509 *r, int idx, void *arg);
  451. void *X509_get_ex_data(X509 *r, int idx);
  452. int i2d_X509_AUX(X509 *a, unsigned char **pp);
  453. X509 *d2i_X509_AUX(X509 **a, const unsigned char **pp, long length);
  454. int i2d_re_X509_tbs(X509 *x, unsigned char **pp);
  455. int X509_SIG_INFO_get(const X509_SIG_INFO *siginf, int *mdnid, int *pknid,
  456. int *secbits, uint32_t *flags);
  457. void X509_SIG_INFO_set(X509_SIG_INFO *siginf, int mdnid, int pknid,
  458. int secbits, uint32_t flags);
  459. int X509_get_signature_info(X509 *x, int *mdnid, int *pknid, int *secbits,
  460. uint32_t *flags);
  461. void X509_get0_signature(const ASN1_BIT_STRING **psig,
  462. const X509_ALGOR **palg, const X509 *x);
  463. int X509_get_signature_nid(const X509 *x);
  464. int X509_trusted(const X509 *x);
  465. int X509_alias_set1(X509 *x, const unsigned char *name, int len);
  466. int X509_keyid_set1(X509 *x, const unsigned char *id, int len);
  467. unsigned char *X509_alias_get0(X509 *x, int *len);
  468. unsigned char *X509_keyid_get0(X509 *x, int *len);
  469. int (*X509_TRUST_set_default(int (*trust) (int, X509 *, int))) (int, X509 *,
  470. int);
  471. int X509_TRUST_set(int *t, int trust);
  472. int X509_add1_trust_object(X509 *x, const ASN1_OBJECT *obj);
  473. int X509_add1_reject_object(X509 *x, const ASN1_OBJECT *obj);
  474. void X509_trust_clear(X509 *x);
  475. void X509_reject_clear(X509 *x);
  476. STACK_OF(ASN1_OBJECT) *X509_get0_trust_objects(X509 *x);
  477. STACK_OF(ASN1_OBJECT) *X509_get0_reject_objects(X509 *x);
  478. DECLARE_ASN1_FUNCTIONS(X509_REVOKED)
  479. DECLARE_ASN1_FUNCTIONS(X509_CRL_INFO)
  480. DECLARE_ASN1_FUNCTIONS(X509_CRL)
  481. int X509_CRL_add0_revoked(X509_CRL *crl, X509_REVOKED *rev);
  482. int X509_CRL_get0_by_serial(X509_CRL *crl,
  483. X509_REVOKED **ret, ASN1_INTEGER *serial);
  484. int X509_CRL_get0_by_cert(X509_CRL *crl, X509_REVOKED **ret, X509 *x);
  485. X509_PKEY *X509_PKEY_new(void);
  486. void X509_PKEY_free(X509_PKEY *a);
  487. DECLARE_ASN1_FUNCTIONS(NETSCAPE_SPKI)
  488. DECLARE_ASN1_FUNCTIONS(NETSCAPE_SPKAC)
  489. DECLARE_ASN1_FUNCTIONS(NETSCAPE_CERT_SEQUENCE)
  490. X509_INFO *X509_INFO_new(void);
  491. void X509_INFO_free(X509_INFO *a);
  492. char *X509_NAME_oneline(const X509_NAME *a, char *buf, int size);
  493. int ASN1_verify(i2d_of_void *i2d, X509_ALGOR *algor1,
  494. ASN1_BIT_STRING *signature, char *data, EVP_PKEY *pkey);
  495. int ASN1_digest(i2d_of_void *i2d, const EVP_MD *type, char *data,
  496. unsigned char *md, unsigned int *len);
  497. int ASN1_sign(i2d_of_void *i2d, X509_ALGOR *algor1,
  498. X509_ALGOR *algor2, ASN1_BIT_STRING *signature,
  499. char *data, EVP_PKEY *pkey, const EVP_MD *type);
  500. int ASN1_item_digest(const ASN1_ITEM *it, const EVP_MD *type, void *data,
  501. unsigned char *md, unsigned int *len);
  502. int ASN1_item_verify(const ASN1_ITEM *it, X509_ALGOR *algor1,
  503. ASN1_BIT_STRING *signature, void *data, EVP_PKEY *pkey);
  504. int ASN1_item_sign(const ASN1_ITEM *it, X509_ALGOR *algor1,
  505. X509_ALGOR *algor2, ASN1_BIT_STRING *signature, void *data,
  506. EVP_PKEY *pkey, const EVP_MD *type);
  507. int ASN1_item_sign_ctx(const ASN1_ITEM *it, X509_ALGOR *algor1,
  508. X509_ALGOR *algor2, ASN1_BIT_STRING *signature,
  509. void *asn, EVP_MD_CTX *ctx);
  510. long X509_get_version(const X509 *x);
  511. int X509_set_version(X509 *x, long version);
  512. int X509_set_serialNumber(X509 *x, ASN1_INTEGER *serial);
  513. ASN1_INTEGER *X509_get_serialNumber(X509 *x);
  514. const ASN1_INTEGER *X509_get0_serialNumber(const X509 *x);
  515. int X509_set_issuer_name(X509 *x, X509_NAME *name);
  516. X509_NAME *X509_get_issuer_name(const X509 *a);
  517. int X509_set_subject_name(X509 *x, X509_NAME *name);
  518. X509_NAME *X509_get_subject_name(const X509 *a);
  519. const ASN1_TIME * X509_get0_notBefore(const X509 *x);
  520. ASN1_TIME *X509_getm_notBefore(const X509 *x);
  521. int X509_set1_notBefore(X509 *x, const ASN1_TIME *tm);
  522. const ASN1_TIME *X509_get0_notAfter(const X509 *x);
  523. ASN1_TIME *X509_getm_notAfter(const X509 *x);
  524. int X509_set1_notAfter(X509 *x, const ASN1_TIME *tm);
  525. int X509_set_pubkey(X509 *x, EVP_PKEY *pkey);
  526. int X509_up_ref(X509 *x);
  527. int X509_get_signature_type(const X509 *x);
  528. # if OPENSSL_API_COMPAT < 0x10100000L
  529. # define X509_get_notBefore X509_getm_notBefore
  530. # define X509_get_notAfter X509_getm_notAfter
  531. # define X509_set_notBefore X509_set1_notBefore
  532. # define X509_set_notAfter X509_set1_notAfter
  533. #endif
  534. /*
  535. * This one is only used so that a binary form can output, as in
  536. * i2d_X509_PUBKEY(X509_get_X509_PUBKEY(x), &buf)
  537. */
  538. X509_PUBKEY *X509_get_X509_PUBKEY(const X509 *x);
  539. const STACK_OF(X509_EXTENSION) *X509_get0_extensions(const X509 *x);
  540. void X509_get0_uids(const X509 *x, const ASN1_BIT_STRING **piuid,
  541. const ASN1_BIT_STRING **psuid);
  542. const X509_ALGOR *X509_get0_tbs_sigalg(const X509 *x);
  543. EVP_PKEY *X509_get0_pubkey(const X509 *x);
  544. EVP_PKEY *X509_get_pubkey(X509 *x);
  545. ASN1_BIT_STRING *X509_get0_pubkey_bitstr(const X509 *x);
  546. int X509_certificate_type(const X509 *x, const EVP_PKEY *pubkey);
  547. long X509_REQ_get_version(const X509_REQ *req);
  548. int X509_REQ_set_version(X509_REQ *x, long version);
  549. X509_NAME *X509_REQ_get_subject_name(const X509_REQ *req);
  550. int X509_REQ_set_subject_name(X509_REQ *req, X509_NAME *name);
  551. void X509_REQ_get0_signature(const X509_REQ *req, const ASN1_BIT_STRING **psig,
  552. const X509_ALGOR **palg);
  553. void X509_REQ_set0_signature(X509_REQ *req, ASN1_BIT_STRING *psig);
  554. int X509_REQ_set1_signature_algo(X509_REQ *req, X509_ALGOR *palg);
  555. int X509_REQ_get_signature_nid(const X509_REQ *req);
  556. int i2d_re_X509_REQ_tbs(X509_REQ *req, unsigned char **pp);
  557. int X509_REQ_set_pubkey(X509_REQ *x, EVP_PKEY *pkey);
  558. EVP_PKEY *X509_REQ_get_pubkey(X509_REQ *req);
  559. EVP_PKEY *X509_REQ_get0_pubkey(X509_REQ *req);
  560. X509_PUBKEY *X509_REQ_get_X509_PUBKEY(X509_REQ *req);
  561. int X509_REQ_extension_nid(int nid);
  562. int *X509_REQ_get_extension_nids(void);
  563. void X509_REQ_set_extension_nids(int *nids);
  564. STACK_OF(X509_EXTENSION) *X509_REQ_get_extensions(X509_REQ *req);
  565. int X509_REQ_add_extensions_nid(X509_REQ *req, STACK_OF(X509_EXTENSION) *exts,
  566. int nid);
  567. int X509_REQ_add_extensions(X509_REQ *req, STACK_OF(X509_EXTENSION) *exts);
  568. int X509_REQ_get_attr_count(const X509_REQ *req);
  569. int X509_REQ_get_attr_by_NID(const X509_REQ *req, int nid, int lastpos);
  570. int X509_REQ_get_attr_by_OBJ(const X509_REQ *req, const ASN1_OBJECT *obj,
  571. int lastpos);
  572. X509_ATTRIBUTE *X509_REQ_get_attr(const X509_REQ *req, int loc);
  573. X509_ATTRIBUTE *X509_REQ_delete_attr(X509_REQ *req, int loc);
  574. int X509_REQ_add1_attr(X509_REQ *req, X509_ATTRIBUTE *attr);
  575. int X509_REQ_add1_attr_by_OBJ(X509_REQ *req,
  576. const ASN1_OBJECT *obj, int type,
  577. const unsigned char *bytes, int len);
  578. int X509_REQ_add1_attr_by_NID(X509_REQ *req,
  579. int nid, int type,
  580. const unsigned char *bytes, int len);
  581. int X509_REQ_add1_attr_by_txt(X509_REQ *req,
  582. const char *attrname, int type,
  583. const unsigned char *bytes, int len);
  584. int X509_CRL_set_version(X509_CRL *x, long version);
  585. int X509_CRL_set_issuer_name(X509_CRL *x, X509_NAME *name);
  586. int X509_CRL_set1_lastUpdate(X509_CRL *x, const ASN1_TIME *tm);
  587. int X509_CRL_set1_nextUpdate(X509_CRL *x, const ASN1_TIME *tm);
  588. int X509_CRL_sort(X509_CRL *crl);
  589. int X509_CRL_up_ref(X509_CRL *crl);
  590. # if OPENSSL_API_COMPAT < 0x10100000L
  591. # define X509_CRL_set_lastUpdate X509_CRL_set1_lastUpdate
  592. # define X509_CRL_set_nextUpdate X509_CRL_set1_nextUpdate
  593. #endif
  594. long X509_CRL_get_version(const X509_CRL *crl);
  595. const ASN1_TIME *X509_CRL_get0_lastUpdate(const X509_CRL *crl);
  596. const ASN1_TIME *X509_CRL_get0_nextUpdate(const X509_CRL *crl);
  597. DEPRECATEDIN_1_1_0(ASN1_TIME *X509_CRL_get_lastUpdate(X509_CRL *crl))
  598. DEPRECATEDIN_1_1_0(ASN1_TIME *X509_CRL_get_nextUpdate(X509_CRL *crl))
  599. X509_NAME *X509_CRL_get_issuer(const X509_CRL *crl);
  600. const STACK_OF(X509_EXTENSION) *X509_CRL_get0_extensions(const X509_CRL *crl);
  601. STACK_OF(X509_REVOKED) *X509_CRL_get_REVOKED(X509_CRL *crl);
  602. void X509_CRL_get0_signature(const X509_CRL *crl, const ASN1_BIT_STRING **psig,
  603. const X509_ALGOR **palg);
  604. int X509_CRL_get_signature_nid(const X509_CRL *crl);
  605. int i2d_re_X509_CRL_tbs(X509_CRL *req, unsigned char **pp);
  606. const ASN1_INTEGER *X509_REVOKED_get0_serialNumber(const X509_REVOKED *x);
  607. int X509_REVOKED_set_serialNumber(X509_REVOKED *x, ASN1_INTEGER *serial);
  608. const ASN1_TIME *X509_REVOKED_get0_revocationDate(const X509_REVOKED *x);
  609. int X509_REVOKED_set_revocationDate(X509_REVOKED *r, ASN1_TIME *tm);
  610. const STACK_OF(X509_EXTENSION) *
  611. X509_REVOKED_get0_extensions(const X509_REVOKED *r);
  612. X509_CRL *X509_CRL_diff(X509_CRL *base, X509_CRL *newer,
  613. EVP_PKEY *skey, const EVP_MD *md, unsigned int flags);
  614. int X509_REQ_check_private_key(X509_REQ *x509, EVP_PKEY *pkey);
  615. int X509_check_private_key(const X509 *x509, const EVP_PKEY *pkey);
  616. int X509_chain_check_suiteb(int *perror_depth,
  617. X509 *x, STACK_OF(X509) *chain,
  618. unsigned long flags);
  619. int X509_CRL_check_suiteb(X509_CRL *crl, EVP_PKEY *pk, unsigned long flags);
  620. STACK_OF(X509) *X509_chain_up_ref(STACK_OF(X509) *chain);
  621. int X509_issuer_and_serial_cmp(const X509 *a, const X509 *b);
  622. unsigned long X509_issuer_and_serial_hash(X509 *a);
  623. int X509_issuer_name_cmp(const X509 *a, const X509 *b);
  624. unsigned long X509_issuer_name_hash(X509 *a);
  625. int X509_subject_name_cmp(const X509 *a, const X509 *b);
  626. unsigned long X509_subject_name_hash(X509 *x);
  627. # ifndef OPENSSL_NO_MD5
  628. unsigned long X509_issuer_name_hash_old(X509 *a);
  629. unsigned long X509_subject_name_hash_old(X509 *x);
  630. # endif
  631. int X509_cmp(const X509 *a, const X509 *b);
  632. int X509_NAME_cmp(const X509_NAME *a, const X509_NAME *b);
  633. unsigned long X509_NAME_hash(X509_NAME *x);
  634. unsigned long X509_NAME_hash_old(X509_NAME *x);
  635. int X509_CRL_cmp(const X509_CRL *a, const X509_CRL *b);
  636. int X509_CRL_match(const X509_CRL *a, const X509_CRL *b);
  637. int X509_aux_print(BIO *out, X509 *x, int indent);
  638. # ifndef OPENSSL_NO_STDIO
  639. int X509_print_ex_fp(FILE *bp, X509 *x, unsigned long nmflag,
  640. unsigned long cflag);
  641. int X509_print_fp(FILE *bp, X509 *x);
  642. int X509_CRL_print_fp(FILE *bp, X509_CRL *x);
  643. int X509_REQ_print_fp(FILE *bp, X509_REQ *req);
  644. int X509_NAME_print_ex_fp(FILE *fp, const X509_NAME *nm, int indent,
  645. unsigned long flags);
  646. # endif
  647. int X509_NAME_print(BIO *bp, const X509_NAME *name, int obase);
  648. int X509_NAME_print_ex(BIO *out, const X509_NAME *nm, int indent,
  649. unsigned long flags);
  650. int X509_print_ex(BIO *bp, X509 *x, unsigned long nmflag,
  651. unsigned long cflag);
  652. int X509_print(BIO *bp, X509 *x);
  653. int X509_ocspid_print(BIO *bp, X509 *x);
  654. int X509_CRL_print_ex(BIO *out, X509_CRL *x, unsigned long nmflag);
  655. int X509_CRL_print(BIO *bp, X509_CRL *x);
  656. int X509_REQ_print_ex(BIO *bp, X509_REQ *x, unsigned long nmflag,
  657. unsigned long cflag);
  658. int X509_REQ_print(BIO *bp, X509_REQ *req);
  659. int X509_NAME_entry_count(const X509_NAME *name);
  660. int X509_NAME_get_text_by_NID(X509_NAME *name, int nid, char *buf, int len);
  661. int X509_NAME_get_text_by_OBJ(X509_NAME *name, const ASN1_OBJECT *obj,
  662. char *buf, int len);
  663. /*
  664. * NOTE: you should be passing -1, not 0 as lastpos. The functions that use
  665. * lastpos, search after that position on.
  666. */
  667. int X509_NAME_get_index_by_NID(X509_NAME *name, int nid, int lastpos);
  668. int X509_NAME_get_index_by_OBJ(X509_NAME *name, const ASN1_OBJECT *obj,
  669. int lastpos);
  670. X509_NAME_ENTRY *X509_NAME_get_entry(const X509_NAME *name, int loc);
  671. X509_NAME_ENTRY *X509_NAME_delete_entry(X509_NAME *name, int loc);
  672. int X509_NAME_add_entry(X509_NAME *name, const X509_NAME_ENTRY *ne,
  673. int loc, int set);
  674. int X509_NAME_add_entry_by_OBJ(X509_NAME *name, const ASN1_OBJECT *obj, int type,
  675. const unsigned char *bytes, int len, int loc,
  676. int set);
  677. int X509_NAME_add_entry_by_NID(X509_NAME *name, int nid, int type,
  678. const unsigned char *bytes, int len, int loc,
  679. int set);
  680. X509_NAME_ENTRY *X509_NAME_ENTRY_create_by_txt(X509_NAME_ENTRY **ne,
  681. const char *field, int type,
  682. const unsigned char *bytes,
  683. int len);
  684. X509_NAME_ENTRY *X509_NAME_ENTRY_create_by_NID(X509_NAME_ENTRY **ne, int nid,
  685. int type,
  686. const unsigned char *bytes,
  687. int len);
  688. int X509_NAME_add_entry_by_txt(X509_NAME *name, const char *field, int type,
  689. const unsigned char *bytes, int len, int loc,
  690. int set);
  691. X509_NAME_ENTRY *X509_NAME_ENTRY_create_by_OBJ(X509_NAME_ENTRY **ne,
  692. const ASN1_OBJECT *obj, int type,
  693. const unsigned char *bytes,
  694. int len);
  695. int X509_NAME_ENTRY_set_object(X509_NAME_ENTRY *ne, const ASN1_OBJECT *obj);
  696. int X509_NAME_ENTRY_set_data(X509_NAME_ENTRY *ne, int type,
  697. const unsigned char *bytes, int len);
  698. ASN1_OBJECT *X509_NAME_ENTRY_get_object(const X509_NAME_ENTRY *ne);
  699. ASN1_STRING * X509_NAME_ENTRY_get_data(const X509_NAME_ENTRY *ne);
  700. int X509_NAME_ENTRY_set(const X509_NAME_ENTRY *ne);
  701. int X509_NAME_get0_der(X509_NAME *nm, const unsigned char **pder,
  702. size_t *pderlen);
  703. int X509v3_get_ext_count(const STACK_OF(X509_EXTENSION) *x);
  704. int X509v3_get_ext_by_NID(const STACK_OF(X509_EXTENSION) *x,
  705. int nid, int lastpos);
  706. int X509v3_get_ext_by_OBJ(const STACK_OF(X509_EXTENSION) *x,
  707. const ASN1_OBJECT *obj, int lastpos);
  708. int X509v3_get_ext_by_critical(const STACK_OF(X509_EXTENSION) *x,
  709. int crit, int lastpos);
  710. X509_EXTENSION *X509v3_get_ext(const STACK_OF(X509_EXTENSION) *x, int loc);
  711. X509_EXTENSION *X509v3_delete_ext(STACK_OF(X509_EXTENSION) *x, int loc);
  712. STACK_OF(X509_EXTENSION) *X509v3_add_ext(STACK_OF(X509_EXTENSION) **x,
  713. X509_EXTENSION *ex, int loc);
  714. int X509_get_ext_count(const X509 *x);
  715. int X509_get_ext_by_NID(const X509 *x, int nid, int lastpos);
  716. int X509_get_ext_by_OBJ(const X509 *x, const ASN1_OBJECT *obj, int lastpos);
  717. int X509_get_ext_by_critical(const X509 *x, int crit, int lastpos);
  718. X509_EXTENSION *X509_get_ext(const X509 *x, int loc);
  719. X509_EXTENSION *X509_delete_ext(X509 *x, int loc);
  720. int X509_add_ext(X509 *x, X509_EXTENSION *ex, int loc);
  721. void *X509_get_ext_d2i(const X509 *x, int nid, int *crit, int *idx);
  722. int X509_add1_ext_i2d(X509 *x, int nid, void *value, int crit,
  723. unsigned long flags);
  724. int X509_CRL_get_ext_count(const X509_CRL *x);
  725. int X509_CRL_get_ext_by_NID(const X509_CRL *x, int nid, int lastpos);
  726. int X509_CRL_get_ext_by_OBJ(const X509_CRL *x, const ASN1_OBJECT *obj,
  727. int lastpos);
  728. int X509_CRL_get_ext_by_critical(const X509_CRL *x, int crit, int lastpos);
  729. X509_EXTENSION *X509_CRL_get_ext(const X509_CRL *x, int loc);
  730. X509_EXTENSION *X509_CRL_delete_ext(X509_CRL *x, int loc);
  731. int X509_CRL_add_ext(X509_CRL *x, X509_EXTENSION *ex, int loc);
  732. void *X509_CRL_get_ext_d2i(const X509_CRL *x, int nid, int *crit, int *idx);
  733. int X509_CRL_add1_ext_i2d(X509_CRL *x, int nid, void *value, int crit,
  734. unsigned long flags);
  735. int X509_REVOKED_get_ext_count(const X509_REVOKED *x);
  736. int X509_REVOKED_get_ext_by_NID(const X509_REVOKED *x, int nid, int lastpos);
  737. int X509_REVOKED_get_ext_by_OBJ(const X509_REVOKED *x, const ASN1_OBJECT *obj,
  738. int lastpos);
  739. int X509_REVOKED_get_ext_by_critical(const X509_REVOKED *x, int crit,
  740. int lastpos);
  741. X509_EXTENSION *X509_REVOKED_get_ext(const X509_REVOKED *x, int loc);
  742. X509_EXTENSION *X509_REVOKED_delete_ext(X509_REVOKED *x, int loc);
  743. int X509_REVOKED_add_ext(X509_REVOKED *x, X509_EXTENSION *ex, int loc);
  744. void *X509_REVOKED_get_ext_d2i(const X509_REVOKED *x, int nid, int *crit,
  745. int *idx);
  746. int X509_REVOKED_add1_ext_i2d(X509_REVOKED *x, int nid, void *value, int crit,
  747. unsigned long flags);
  748. X509_EXTENSION *X509_EXTENSION_create_by_NID(X509_EXTENSION **ex,
  749. int nid, int crit,
  750. ASN1_OCTET_STRING *data);
  751. X509_EXTENSION *X509_EXTENSION_create_by_OBJ(X509_EXTENSION **ex,
  752. const ASN1_OBJECT *obj, int crit,
  753. ASN1_OCTET_STRING *data);
  754. int X509_EXTENSION_set_object(X509_EXTENSION *ex, const ASN1_OBJECT *obj);
  755. int X509_EXTENSION_set_critical(X509_EXTENSION *ex, int crit);
  756. int X509_EXTENSION_set_data(X509_EXTENSION *ex, ASN1_OCTET_STRING *data);
  757. ASN1_OBJECT *X509_EXTENSION_get_object(X509_EXTENSION *ex);
  758. ASN1_OCTET_STRING *X509_EXTENSION_get_data(X509_EXTENSION *ne);
  759. int X509_EXTENSION_get_critical(const X509_EXTENSION *ex);
  760. int X509at_get_attr_count(const STACK_OF(X509_ATTRIBUTE) *x);
  761. int X509at_get_attr_by_NID(const STACK_OF(X509_ATTRIBUTE) *x, int nid,
  762. int lastpos);
  763. int X509at_get_attr_by_OBJ(const STACK_OF(X509_ATTRIBUTE) *sk,
  764. const ASN1_OBJECT *obj, int lastpos);
  765. X509_ATTRIBUTE *X509at_get_attr(const STACK_OF(X509_ATTRIBUTE) *x, int loc);
  766. X509_ATTRIBUTE *X509at_delete_attr(STACK_OF(X509_ATTRIBUTE) *x, int loc);
  767. STACK_OF(X509_ATTRIBUTE) *X509at_add1_attr(STACK_OF(X509_ATTRIBUTE) **x,
  768. X509_ATTRIBUTE *attr);
  769. STACK_OF(X509_ATTRIBUTE) *X509at_add1_attr_by_OBJ(STACK_OF(X509_ATTRIBUTE)
  770. **x, const ASN1_OBJECT *obj,
  771. int type,
  772. const unsigned char *bytes,
  773. int len);
  774. STACK_OF(X509_ATTRIBUTE) *X509at_add1_attr_by_NID(STACK_OF(X509_ATTRIBUTE)
  775. **x, int nid, int type,
  776. const unsigned char *bytes,
  777. int len);
  778. STACK_OF(X509_ATTRIBUTE) *X509at_add1_attr_by_txt(STACK_OF(X509_ATTRIBUTE)
  779. **x, const char *attrname,
  780. int type,
  781. const unsigned char *bytes,
  782. int len);
  783. void *X509at_get0_data_by_OBJ(const STACK_OF(X509_ATTRIBUTE) *x,
  784. const ASN1_OBJECT *obj, int lastpos, int type);
  785. X509_ATTRIBUTE *X509_ATTRIBUTE_create_by_NID(X509_ATTRIBUTE **attr, int nid,
  786. int atrtype, const void *data,
  787. int len);
  788. X509_ATTRIBUTE *X509_ATTRIBUTE_create_by_OBJ(X509_ATTRIBUTE **attr,
  789. const ASN1_OBJECT *obj,
  790. int atrtype, const void *data,
  791. int len);
  792. X509_ATTRIBUTE *X509_ATTRIBUTE_create_by_txt(X509_ATTRIBUTE **attr,
  793. const char *atrname, int type,
  794. const unsigned char *bytes,
  795. int len);
  796. int X509_ATTRIBUTE_set1_object(X509_ATTRIBUTE *attr, const ASN1_OBJECT *obj);
  797. int X509_ATTRIBUTE_set1_data(X509_ATTRIBUTE *attr, int attrtype,
  798. const void *data, int len);
  799. void *X509_ATTRIBUTE_get0_data(X509_ATTRIBUTE *attr, int idx, int atrtype,
  800. void *data);
  801. int X509_ATTRIBUTE_count(const X509_ATTRIBUTE *attr);
  802. ASN1_OBJECT *X509_ATTRIBUTE_get0_object(X509_ATTRIBUTE *attr);
  803. ASN1_TYPE *X509_ATTRIBUTE_get0_type(X509_ATTRIBUTE *attr, int idx);
  804. int EVP_PKEY_get_attr_count(const EVP_PKEY *key);
  805. int EVP_PKEY_get_attr_by_NID(const EVP_PKEY *key, int nid, int lastpos);
  806. int EVP_PKEY_get_attr_by_OBJ(const EVP_PKEY *key, const ASN1_OBJECT *obj,
  807. int lastpos);
  808. X509_ATTRIBUTE *EVP_PKEY_get_attr(const EVP_PKEY *key, int loc);
  809. X509_ATTRIBUTE *EVP_PKEY_delete_attr(EVP_PKEY *key, int loc);
  810. int EVP_PKEY_add1_attr(EVP_PKEY *key, X509_ATTRIBUTE *attr);
  811. int EVP_PKEY_add1_attr_by_OBJ(EVP_PKEY *key,
  812. const ASN1_OBJECT *obj, int type,
  813. const unsigned char *bytes, int len);
  814. int EVP_PKEY_add1_attr_by_NID(EVP_PKEY *key,
  815. int nid, int type,
  816. const unsigned char *bytes, int len);
  817. int EVP_PKEY_add1_attr_by_txt(EVP_PKEY *key,
  818. const char *attrname, int type,
  819. const unsigned char *bytes, int len);
  820. int X509_verify_cert(X509_STORE_CTX *ctx);
  821. /* lookup a cert from a X509 STACK */
  822. X509 *X509_find_by_issuer_and_serial(STACK_OF(X509) *sk, X509_NAME *name,
  823. ASN1_INTEGER *serial);
  824. X509 *X509_find_by_subject(STACK_OF(X509) *sk, X509_NAME *name);
  825. DECLARE_ASN1_FUNCTIONS(PBEPARAM)
  826. DECLARE_ASN1_FUNCTIONS(PBE2PARAM)
  827. DECLARE_ASN1_FUNCTIONS(PBKDF2PARAM)
  828. #ifndef OPENSSL_NO_SCRYPT
  829. DECLARE_ASN1_FUNCTIONS(SCRYPT_PARAMS)
  830. #endif
  831. int PKCS5_pbe_set0_algor(X509_ALGOR *algor, int alg, int iter,
  832. const unsigned char *salt, int saltlen);
  833. X509_ALGOR *PKCS5_pbe_set(int alg, int iter,
  834. const unsigned char *salt, int saltlen);
  835. X509_ALGOR *PKCS5_pbe2_set(const EVP_CIPHER *cipher, int iter,
  836. unsigned char *salt, int saltlen);
  837. X509_ALGOR *PKCS5_pbe2_set_iv(const EVP_CIPHER *cipher, int iter,
  838. unsigned char *salt, int saltlen,
  839. unsigned char *aiv, int prf_nid);
  840. #ifndef OPENSSL_NO_SCRYPT
  841. X509_ALGOR *PKCS5_pbe2_set_scrypt(const EVP_CIPHER *cipher,
  842. const unsigned char *salt, int saltlen,
  843. unsigned char *aiv, uint64_t N, uint64_t r,
  844. uint64_t p);
  845. #endif
  846. X509_ALGOR *PKCS5_pbkdf2_set(int iter, unsigned char *salt, int saltlen,
  847. int prf_nid, int keylen);
  848. /* PKCS#8 utilities */
  849. DECLARE_ASN1_FUNCTIONS(PKCS8_PRIV_KEY_INFO)
  850. EVP_PKEY *EVP_PKCS82PKEY(const PKCS8_PRIV_KEY_INFO *p8);
  851. PKCS8_PRIV_KEY_INFO *EVP_PKEY2PKCS8(EVP_PKEY *pkey);
  852. int PKCS8_pkey_set0(PKCS8_PRIV_KEY_INFO *priv, ASN1_OBJECT *aobj,
  853. int version, int ptype, void *pval,
  854. unsigned char *penc, int penclen);
  855. int PKCS8_pkey_get0(const ASN1_OBJECT **ppkalg,
  856. const unsigned char **pk, int *ppklen,
  857. const X509_ALGOR **pa, const PKCS8_PRIV_KEY_INFO *p8);
  858. const STACK_OF(X509_ATTRIBUTE) *
  859. PKCS8_pkey_get0_attrs(const PKCS8_PRIV_KEY_INFO *p8);
  860. int PKCS8_pkey_add1_attr_by_NID(PKCS8_PRIV_KEY_INFO *p8, int nid, int type,
  861. const unsigned char *bytes, int len);
  862. int X509_PUBKEY_set0_param(X509_PUBKEY *pub, ASN1_OBJECT *aobj,
  863. int ptype, void *pval,
  864. unsigned char *penc, int penclen);
  865. int X509_PUBKEY_get0_param(ASN1_OBJECT **ppkalg,
  866. const unsigned char **pk, int *ppklen,
  867. X509_ALGOR **pa, X509_PUBKEY *pub);
  868. int X509_check_trust(X509 *x, int id, int flags);
  869. int X509_TRUST_get_count(void);
  870. X509_TRUST *X509_TRUST_get0(int idx);
  871. int X509_TRUST_get_by_id(int id);
  872. int X509_TRUST_add(int id, int flags, int (*ck) (X509_TRUST *, X509 *, int),
  873. const char *name, int arg1, void *arg2);
  874. void X509_TRUST_cleanup(void);
  875. int X509_TRUST_get_flags(const X509_TRUST *xp);
  876. char *X509_TRUST_get0_name(const X509_TRUST *xp);
  877. int X509_TRUST_get_trust(const X509_TRUST *xp);
  878. # ifdef __cplusplus
  879. }
  880. # endif
  881. #endif