1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
|
#ifndef GNUTLS_UI_H
# define GNUTLS_UI_H
/* Extra definitions */
#define GNUTLS_X509_CN_SIZE 256
#define GNUTLS_X509_C_SIZE 3
#define GNUTLS_X509_O_SIZE 256
#define GNUTLS_X509_OU_SIZE 256
#define GNUTLS_X509_L_SIZE 256
#define GNUTLS_X509_S_SIZE 256
#define GNUTLS_X509_EMAIL_SIZE 256
typedef struct {
char common_name[GNUTLS_X509_CN_SIZE];
char country[GNUTLS_X509_C_SIZE];
char organization[GNUTLS_X509_O_SIZE];
char organizational_unit_name[GNUTLS_X509_OU_SIZE];
char locality_name[GNUTLS_X509_L_SIZE];
char state_or_province_name[GNUTLS_X509_S_SIZE];
char email[GNUTLS_X509_EMAIL_SIZE];
} gnutls_DN;
/* For key Usage, test as:
* if (st.keyUsage & X509KEY_DIGITAL_SIGNATURE) ...
*/
#define GNUTLS_X509KEY_DIGITAL_SIGNATURE 256
#define GNUTLS_X509KEY_NON_REPUDIATION 128
#define GNUTLS_X509KEY_KEY_ENCIPHERMENT 64
#define GNUTLS_X509KEY_DATA_ENCIPHERMENT 32
#define GNUTLS_X509KEY_KEY_AGREEMENT 16
#define GNUTLS_X509KEY_KEY_CERT_SIGN 8
#define GNUTLS_X509KEY_CRL_SIGN 4
#define GNUTLS_X509KEY_ENCIPHER_ONLY 2
#define GNUTLS_X509KEY_DECIPHER_ONLY 1
# ifdef LIBGNUTLS_VERSION /* These are defined only in gnutls.h */
typedef int x509pki_client_cert_callback_func(GNUTLS_STATE, const gnutls_datum *, int, const gnutls_datum *, int);
typedef int x509pki_server_cert_callback_func(GNUTLS_STATE, const gnutls_datum *, int);
/* Functions that allow AUTH_INFO structures handling
*/
CredType gnutls_auth_get_type( GNUTLS_STATE state);
/* SRP */
const char* gnutls_srp_server_get_username( GNUTLS_STATE state);
/* ANON */
int gnutls_dh_get_dha_bits( GNUTLS_STATE state);
#define gnutls_anon_server_get_dh_bits gnutls_dh_get_dha_bits
#define gnutls_anon_client_get_dh_bits gnutls_dh_get_dha_bits
void gnutls_dh_set_dhe_bits( GNUTLS_STATE state, int bits);
int gnutls_dh_get_dhe_bits( GNUTLS_STATE);
#define gnutls_x509pki_set_dh_bits gnutls_dh_set_dhe_bits
#define gnutls_x509pki_get_dh_bits gnutls_dh_get_dhe_bits
/* X509PKI */
void gnutls_x509pki_set_client_cert_callback( GNUTLS_X509PKI_CREDENTIALS, x509pki_client_cert_callback_func *);
void gnutls_x509pki_set_server_cert_callback( GNUTLS_X509PKI_CREDENTIALS, x509pki_server_cert_callback_func *);
void gnutls_x509pki_server_set_cert_request( GNUTLS_STATE, CertificateRequest);
/* X.509 certificate handling functions */
int gnutls_x509pki_extract_dn( const gnutls_datum*, gnutls_DN*);
int gnutls_x509pki_extract_certificate_dn( const gnutls_datum*, gnutls_DN*);
int gnutls_x509pki_extract_certificate_issuer_dn( const gnutls_datum*, gnutls_DN *);
int gnutls_x509pki_extract_certificate_version( const gnutls_datum*);
int gnutls_x509pki_extract_certificate_serial(const gnutls_datum * cert, char* result, int* result_size);
time_t gnutls_x509pki_extract_certificate_activation_time( const gnutls_datum*);
time_t gnutls_x509pki_extract_certificate_expiration_time( const gnutls_datum*);
int gnutls_x509pki_extract_subject_dns_name( const gnutls_datum*, char*, int*);
int gnutls_x509pki_verify_certificate( const gnutls_datum* cert_list, int cert_list_length, const gnutls_datum * CA_list, int CA_list_length, const gnutls_datum* CRL_list, int CRL_list_length);
/* get data from the state */
const gnutls_datum* gnutls_x509pki_get_peer_certificate_list( GNUTLS_STATE, int* list_size);
int gnutls_x509pki_get_certificate_request_status( GNUTLS_STATE);
int gnutls_x509pki_get_peer_certificate_status( GNUTLS_STATE);
#define gnutls_x509pki_server_get_dh_bits gnutls_x509pki_get_dh_bits
#define gnutls_x509pki_client_get_dh_bits gnutls_x509pki_get_dh_bits
#define gnutls_x509pki_server_get_peer_certificate_status gnutls_x509pki_get_peer_certificate_status
#define gnutls_x509pki_server_get_peer_certificate_list gnutls_x509pki_get_peer_certificate_list
#define gnutls_x509pki_client_get_peer_certificate_status gnutls_x509pki_get_peer_certificate_status
#define gnutls_x509pki_client_get_peer_certificate_list gnutls_x509pki_get_peer_certificate_list
int gnutls_b64_encode_fmt( const char* msg, const gnutls_datum *data, char* result, int* result_size);
int gnutls_b64_decode_fmt( const gnutls_datum *b64_data, char* result, int* result_size);
# endif /* LIBGNUTLS_VERSION */
#endif /* GNUTLS_UI_H */
|
