1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
|
#ifndef GNUTLS_UI_H
# define GNUTLS_UI_H
typedef enum gnutls_x509_subject_alt_name {
GNUTLS_SAN_DNSNAME = 1, GNUTLS_SAN_RFC822NAME,
GNUTLS_SAN_URI, GNUTLS_SAN_IPADDRESS
} gnutls_x509_subject_alt_name;
# ifdef LIBGNUTLS_VERSION /* These are defined only in gnutls.h */
/* Callback prototypes for the certificate authentication
* callbacks.
*/
typedef int gnutls_certificate_client_select_function(gnutls_session,
const gnutls_datum *
client_cert,
int ncerts,
const gnutls_datum *
req_ca_cert,
int nreqs);
typedef int gnutls_certificate_server_select_function(gnutls_session,
const gnutls_datum *
server_certs,
int ncerts);
struct gnutls_openpgp_key_int;
typedef struct gnutls_openpgp_key_int *gnutls_openpgp_key;
struct gnutls_openpgp_privkey_int;
typedef struct gnutls_openpgp_privkey_int *gnutls_openpgp_privkey;
typedef struct gnutls_retr_st {
gnutls_certificate_type type;
union cert {
gnutls_x509_crt *x509;
gnutls_openpgp_key pgp;
} cert;
uint ncerts; /* one for pgp keys */
union key {
gnutls_x509_privkey x509;
gnutls_openpgp_privkey pgp;
} key;
uint deinit_all_keys; /* if non zero all keys will be deinited */
} gnutls_retr_st;
typedef int gnutls_certificate_client_retrieve_function(gnutls_session,
const gnutls_datum
* req_ca_cert,
int nreqs,
gnutls_retr_st *);
typedef int gnutls_certificate_server_retrieve_function(gnutls_session,
gnutls_retr_st *);
/* Functions that allow AUTH_INFO structures handling
*/
gnutls_credentials_type gnutls_auth_get_type(gnutls_session session);
/* DH */
void gnutls_dh_set_prime_bits(gnutls_session session, int bits);
int gnutls_dh_get_prime_bits(gnutls_session);
int gnutls_dh_get_secret_bits(gnutls_session);
int gnutls_dh_get_peers_public_bits(gnutls_session);
/* RSA */
int gnutls_rsa_export_get_modulus_bits(gnutls_session session);
/* X509PKI */
#include <gnutls/compat8.h>
void gnutls_certificate_client_set_select_function(gnutls_session,
gnutls_certificate_client_select_function
*);
void gnutls_certificate_server_set_select_function(gnutls_session,
gnutls_certificate_server_select_function
*);
void gnutls_certificate_client_set_retrieve_function(gnutls_session,
gnutls_certificate_client_retrieve_function
*);
void gnutls_certificate_server_set_retrieve_function(gnutls_session,
gnutls_certificate_server_retrieve_function
*);
void gnutls_certificate_server_set_request(gnutls_session,
gnutls_certificate_request);
/* X.509 certificate handling functions
*/
int gnutls_pkcs3_extract_dh_params(const gnutls_datum * params,
gnutls_x509_crt_fmt format,
gnutls_datum * prime,
gnutls_datum * generator,
int *prime_bits);
int gnutls_pkcs3_export_dh_params(const gnutls_datum * prime,
const gnutls_datum * generator,
gnutls_x509_crt_fmt format,
unsigned char *params_data,
int *params_data_size);
/* get data from the session
*/
const gnutls_datum *gnutls_certificate_get_peers(gnutls_session,
unsigned int *list_size);
const gnutls_datum *gnutls_certificate_get_ours(gnutls_session session);
time_t gnutls_certificate_activation_time_peers(gnutls_session session);
time_t gnutls_certificate_expiration_time_peers(gnutls_session session);
int gnutls_certificate_client_get_request_status(gnutls_session);
int gnutls_certificate_verify_peers(gnutls_session);
int gnutls_pem_base64_encode(const char *header, const gnutls_datum * data,
char *result, size_t * result_size);
int gnutls_pem_base64_decode(const char *header,
const gnutls_datum * b64_data,
unsigned char *result, size_t * result_size);
int gnutls_pem_base64_encode_alloc(const char *header,
const gnutls_datum * data,
gnutls_datum * result);
int gnutls_pem_base64_decode_alloc(const char *header,
const gnutls_datum * b64_data,
gnutls_datum * result);
/* key_usage will be an OR of the following values:
*/
#define GNUTLS_KEY_DIGITAL_SIGNATURE 128 /* when the key is to be
* used for signing.
*/
#define GNUTLS_KEY_NON_REPUDIATION 64
#define GNUTLS_KEY_KEY_ENCIPHERMENT 32 /* when the key is to be
* used for encryption.
*/
#define GNUTLS_KEY_DATA_ENCIPHERMENT 16
#define GNUTLS_KEY_KEY_AGREEMENT 8
#define GNUTLS_KEY_KEY_CERT_SIGN 4
#define GNUTLS_KEY_CRL_SIGN 2
#define GNUTLS_KEY_ENCIPHER_ONLY 1
#define GNUTLS_KEY_DECIPHER_ONLY 32768
# endif /* LIBGNUTLS_VERSION */
#endif /* GNUTLS_UI_H */
|
