landing new smart card cache, bug 135429

1 files changed, 66 insertions, 0 deletions

diff --git a/security/nss/lib/pki/pkim.h b/security/nss/lib/pki/pkim.h
index d928d24e5..16ac87f3c 100644
--- a/security/nss/lib/pki/pkim.h
+++ b/security/nss/lib/pki/pkim.h
@@ -194,6 +194,13 @@ nssTrustDomain_FindCertificatesByID
   NSSArena *arenaOpt
 );
 
+NSS_EXTERN NSSCRL **
+nssTrustDomain_FindCRLsBySubject
+(
+  NSSTrustDomain *td,
+  NSSDER *subject
+);
+
 /* module-private nsspki methods */
 
 NSS_EXTERN NSSCryptoContext *
@@ -243,12 +250,43 @@ nssTrust_Create
   nssPKIObject *object
 );
 
+NSS_EXTERN NSSCRL *
+nssCRL_Create
+(
+  nssPKIObject *object
+);
+
+NSS_EXTERN NSSCRL *
+nssCRL_AddRef
+(
+  NSSCRL *crl
+);
+
+NSS_EXTERN PRStatus
+nssCRL_Destroy
+(
+  NSSCRL *crl
+);
+
+NSS_EXTERN PRStatus
+nssCRL_DeleteStoredObject
+(
+  NSSCRL *crl,
+  NSSCallback *uhh
+);
+
 NSS_EXTERN NSSPrivateKey *
 nssPrivateKey_Create
 (
   nssPKIObject *o
 );
 
+NSS_EXTERN NSSDER *
+nssCRL_GetEncoding
+(
+  NSSCRL *crl
+);
+
 NSS_EXTERN NSSPublicKey *
 nssPublicKey_Create
 (
@@ -320,6 +358,12 @@ nssCertificateArray_Traverse
   void *arg
 );
 
+NSS_EXTERN void
+nssCRLArray_Destroy
+(
+  NSSCRL **crls
+);
+
 /* nssPKIObjectCollection
  *
  * This is a handy way to group objects together and perform operations
@@ -348,6 +392,7 @@ nssCertificateArray_Traverse
  * Back to type-specific methods.
  *
  * nssPKIObjectCollection_GetCertificates
+ * nssPKIObjectCollection_GetCRLs
  * nssPKIObjectCollection_GetPrivateKeys
  * nssPKIObjectCollection_GetPublicKeys
  */
@@ -364,6 +409,18 @@ nssCertificateCollection_Create
   NSSCertificate **certsOpt
 );
 
+/* nssCRLCollection_Create
+ *
+ * Create a collection of CRLs/KRLs in the specified trust domain.
+ * Optionally provide a starting set of CRLs.
+ */
+NSS_EXTERN nssPKIObjectCollection *
+nssCRLCollection_Create
+(
+  NSSTrustDomain *td,
+  NSSCRL **crlsOpt
+);
+
 /* nssPrivateKeyCollection_Create
  *
  * Create a collection of private keys in the specified trust domain.
@@ -452,6 +509,15 @@ nssPKIObjectCollection_GetCertificates
   NSSArena *arenaOpt
 );
 
+NSS_EXTERN NSSCRL **
+nssPKIObjectCollection_GetCRLs
+(
+  nssPKIObjectCollection *collection,
+  NSSCRL **rvOpt,
+  PRUint32 maximumOpt,
+  NSSArena *arenaOpt
+);
+
 NSS_EXTERN NSSPrivateKey **
 nssPKIObjectCollection_GetPrivateKeys
 (