1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
|
/* This Source Code Form is subject to the terms of the Mozilla Public
* License, v. 2.0. If a copy of the MPL was not distributed with this
* file, You can obtain one at http://mozilla.org/MPL/2.0/. */
/*
* pkix_pl_cert.h
*
* Certificate Object Definitions
*
*/
#ifndef _PKIX_PL_CERT_H
#define _PKIX_PL_CERT_H
#include "pkix_pl_common.h"
#ifdef __cplusplus
extern "C" {
#endif
struct PKIX_PL_CertStruct {
CERTCertificate *nssCert; /* Must be the first field. The
* cert_NSSCertFromPKIXCert function in
* lib/certhigh/certvfypkix.c depends on
* this. */
CERTGeneralName *nssSubjAltNames;
PLArenaPool *arenaNameConstraints;
PKIX_PL_X500Name *issuer;
PKIX_PL_X500Name *subject;
PKIX_List *subjAltNames;
PKIX_Boolean subjAltNamesAbsent;
PKIX_PL_OID *publicKeyAlgId;
PKIX_PL_PublicKey *publicKey;
PKIX_PL_BigInt *serialNumber;
PKIX_List *critExtOids;
PKIX_PL_ByteArray *subjKeyId;
PKIX_Boolean subjKeyIdAbsent;
PKIX_PL_ByteArray *authKeyId;
PKIX_Boolean authKeyIdAbsent;
PKIX_List *extKeyUsages;
PKIX_Boolean extKeyUsagesAbsent;
PKIX_PL_CertBasicConstraints *certBasicConstraints;
PKIX_Boolean basicConstraintsAbsent;
PKIX_List *certPolicyInfos;
PKIX_Boolean policyInfoAbsent;
PKIX_Boolean policyMappingsAbsent;
PKIX_List *certPolicyMappings; /* List of PKIX_PL_CertPolicyMap */
PKIX_Boolean policyConstraintsProcessed;
PKIX_Int32 policyConstraintsExplicitPolicySkipCerts;
PKIX_Int32 policyConstraintsInhibitMappingSkipCerts;
PKIX_Boolean inhibitAnyPolicyProcessed;
PKIX_Int32 inhibitAnySkipCerts;
PKIX_PL_CertNameConstraints *nameConstraints;
PKIX_Boolean nameConstraintsAbsent;
PKIX_Boolean cacheFlag;
PKIX_CertStore *store;
PKIX_List *authorityInfoAccess; /* list of PKIX_PL_InfoAccess */
PKIX_List *subjectInfoAccess; /* list of PKIX_PL_InfoAccess */
PKIX_Boolean isUserTrustAnchor;
PKIX_List *crldpList; /* list of CRL DPs based on der in nssCert arena.
* Destruction is needed for pkix object and
* not for undelying der as it is a part
* nssCert arena. */
};
/* see source file for function documentation */
PKIX_Error *
pkix_pl_Cert_RegisterSelf(void *plContext);
PKIX_Error *
pkix_pl_Cert_CreateWithNSSCert(
CERTCertificate *nssCert,
PKIX_PL_Cert **pCert,
void *plContext);
PKIX_Error *
pkix_pl_Cert_CreateToList(
SECItem *derCertItem,
PKIX_List *certList,
void *plContext);
PKIX_Error *
pkix_pl_Cert_CheckSubjectAltNameConstraints(
PKIX_PL_Cert *cert,
PKIX_PL_CertNameConstraints *nameConstraints,
PKIX_Boolean matchAll,
void *plContext);
PKIX_Error *
pkix_pl_Cert_ToString_Helper(
PKIX_PL_Cert *cert,
PKIX_Boolean partialString,
PKIX_PL_String **pString,
void *plContext);
PKIX_Error *
pkix_pl_Cert_CheckExtendedKeyUsage(
PKIX_PL_Cert *cert,
PKIX_UInt32 requiredExtendedKeyUsages,
PKIX_Boolean *pPass,
void *plContext);
#ifdef __cplusplus
}
#endif
#endif /* _PKIX_PL_CERT_H */
|
