/home/dko/projects/mobilec/trunk/src/security/xyssl-0.7/include/xyssl/x509.h

Go to the documentation of this file.

#ifndef _X509_H
#define _X509_H

#ifdef __cplusplus
extern "C" {
#endif

#include "rsa.h"

#define ERR_ASN1_OUT_OF_DATA                    0x0014
#define ERR_ASN1_UNEXPECTED_TAG                 0x0016
#define ERR_ASN1_INVALID_LENGTH                 0x0018
#define ERR_ASN1_LENGTH_MISMATCH                0x001A
#define ERR_ASN1_INVALID_DATA                   0x001C

#define ERR_X509_FEATURE_UNAVAILABLE            0x0020
#define ERR_X509_CERT_INVALID_PEM               0x0040
#define ERR_X509_CERT_INVALID_FORMAT            0x0060
#define ERR_X509_CERT_INVALID_VERSION           0x0080
#define ERR_X509_CERT_INVALID_SERIAL            0x00A0
#define ERR_X509_CERT_INVALID_ALG               0x00C0
#define ERR_X509_CERT_INVALID_NAME              0x00E0
#define ERR_X509_CERT_INVALID_DATE              0x0100
#define ERR_X509_CERT_INVALID_PUBKEY            0x0120
#define ERR_X509_CERT_INVALID_SIGNATURE         0x0140
#define ERR_X509_CERT_INVALID_EXTENSIONS        0x0160
#define ERR_X509_CERT_UNKNOWN_VERSION           0x0180
#define ERR_X509_CERT_UNKNOWN_SIG_ALG           0x01A0
#define ERR_X509_CERT_UNKNOWN_PK_ALG            0x01C0
#define ERR_X509_CERT_SIG_MISMATCH              0x01E0
#define ERR_X509_KEY_INVALID_PEM                0x0200
#define ERR_X509_KEY_INVALID_VERSION            0x0220
#define ERR_X509_KEY_INVALID_FORMAT             0x0240
#define ERR_X509_KEY_INVALID_ENC_IV             0x0260
#define ERR_X509_KEY_UNKNOWN_ENC_ALG            0x0280
#define ERR_X509_KEY_PASSWORD_REQUIRED          0x02A0
#define ERR_X509_KEY_PASSWORD_MISMATCH          0x02C0
#define ERR_X509_SIG_VERIFY_FAILED              0x02E0

#define BADCERT_HAS_EXPIRED             1
#define BADCERT_CN_MISMATCH             2
#define BADCERT_NOT_TRUSTED             4

/*
 * DER constants
 */
#define ASN1_BOOLEAN                 0x01
#define ASN1_INTEGER                 0x02
#define ASN1_BIT_STRING              0x03
#define ASN1_OCTET_STRING            0x04
#define ASN1_NULL                    0x05
#define ASN1_OID                     0x06
#define ASN1_UTF8_STRING             0x0C
#define ASN1_SEQUENCE                0x10
#define ASN1_SET                     0x11
#define ASN1_PRINTABLE_STRING        0x13
#define ASN1_T61_STRING              0x14
#define ASN1_IA5_STRING              0x16
#define ASN1_UTC_TIME                0x17
#define ASN1_UNIVERSAL_STRING        0x1C
#define ASN1_BMP_STRING              0x1E
#define ASN1_PRIMITIVE               0x00
#define ASN1_CONSTRUCTED             0x20
#define ASN1_CONTEXT_SPECIFIC        0x80

/*
 * various object identifiers
 */
#define X520_COMMON_NAME                3
#define X520_COUNTRY                    6
#define X520_LOCALITY                   7
#define X520_STATE                      8
#define X520_ORGANIZATION              10
#define X520_ORG_UNIT                  11
#define PKCS9_EMAIL                     1

#define OID_X520                "\x55\x04"
#define OID_PKCS1               "\x2A\x86\x48\x86\xF7\x0D\x01\x01"
#define OID_PKCS1_RSA           "\x2A\x86\x48\x86\xF7\x0D\x01\x01\x01"
#define OID_PKCS9               "\x2A\x86\x48\x86\xF7\x0D\x01\x09"

typedef struct _x509_buf
{
    int tag;
    int len;
    unsigned char *p;
}
x509_buf;

typedef struct _x509_name
{
    x509_buf oid;
    x509_buf val;
    struct _x509_name *next;
}
x509_name;

typedef struct _x509_time
{
    int year, mon, day;
    int hour, min, sec;
}
x509_time;

typedef struct _x509_cert
{
    x509_buf raw;
    x509_buf tbs;

    int version;
    x509_buf serial;
    x509_buf sig_oid1;

    x509_buf issuer_raw;
    x509_buf subject_raw;

    x509_name issuer;
    x509_name subject;

    x509_time valid_from;
    x509_time valid_to;

    x509_buf pk_oid;
    rsa_context rsa;

    x509_buf issuer_id;
    x509_buf subject_id;
    x509_buf v3_ext;

    int ca_istrue;
    int max_pathlen;

    x509_buf sig_oid2;
    x509_buf sig;

    struct _x509_cert *next; 
}
x509_cert;

int x509_add_certs( x509_cert *chain, unsigned char *buf, int buflen );

int x509_read_crtfile( x509_cert *chain, char *path );

int x509_parse_key( rsa_context *rsa, unsigned char *buf, int buflen,
                                      unsigned char *pwd, int pwdlen );

int x509_read_keyfile( rsa_context *rsa, char *path, char *password );

int x509_dn_gets( char *buf, char *end, x509_name *dn );

char *x509_cert_info( x509_cert *crt );

int x509_is_cert_expired( x509_cert *crt );

int x509_verify_cert( x509_cert *crt, x509_cert *trust_ca,
                      char *cn, int *flags );

void x509_free_cert( x509_cert *crt );

int x509_self_test( int verbose );

#ifdef __cplusplus
}
#endif

#endif /* x509.h */

---