diff options
Diffstat (limited to 'security/nss/lib/softoken/pcert.h')
| -rw-r--r-- | security/nss/lib/softoken/pcert.h | 234 |
1 files changed, 0 insertions, 234 deletions
diff --git a/security/nss/lib/softoken/pcert.h b/security/nss/lib/softoken/pcert.h deleted file mode 100644 index bcd94bc34..000000000 --- a/security/nss/lib/softoken/pcert.h +++ /dev/null @@ -1,234 +0,0 @@ -/* - * The contents of this file are subject to the Mozilla Public - * License Version 1.1 (the "License"); you may not use this file - * except in compliance with the License. You may obtain a copy of - * the License at http://www.mozilla.org/MPL/ - * - * Software distributed under the License is distributed on an "AS - * IS" basis, WITHOUT WARRANTY OF ANY KIND, either express or - * implied. See the License for the specific language governing - * rights and limitations under the License. - * - * The Original Code is the Netscape security libraries. - * - * The Initial Developer of the Original Code is Netscape - * Communications Corporation. Portions created by Netscape are - * Copyright (C) 1994-2000 Netscape Communications Corporation. All - * Rights Reserved. - * - * Contributor(s): - * - * Alternatively, the contents of this file may be used under the - * terms of the GNU General Public License Version 2 or later (the - * "GPL"), in which case the provisions of the GPL are applicable - * instead of those above. If you wish to allow use of your - * version of this file only under the terms of the GPL and not to - * allow others to use your version of this file under the MPL, - * indicate your decision by deleting the provisions above and - * replace them with the notice and other provisions required by - * the GPL. If you do not delete the provisions above, a recipient - * may use your version of this file under either the MPL or the - * GPL. - */ - -#ifndef _PCERTDB_H_ -#define _PCERTDB_H_ - -#include "plarena.h" -#include "prlong.h" -#include "pcertt.h" - -SEC_BEGIN_PROTOS - -/* -** Add a DER encoded certificate to the permanent database. -** "derCert" is the DER encoded certificate. -** "nickname" is the nickname to use for the cert -** "trust" is the trust parameters for the cert -*/ -SECStatus nsslowcert_AddPermCert(NSSLOWCERTCertDBHandle *handle, - NSSLOWCERTCertificate *cert, - char *nickname, NSSLOWCERTCertTrust *trust); -SECStatus nsslowcert_AddPermNickname(NSSLOWCERTCertDBHandle *dbhandle, - NSSLOWCERTCertificate *cert, char *nickname); - -SECStatus nsslowcert_DeletePermCertificate(NSSLOWCERTCertificate *cert); - -typedef SECStatus (PR_CALLBACK * PermCertCallback)(NSSLOWCERTCertificate *cert, - SECItem *k, void *pdata); -/* -** Traverse the entire permanent database, and pass the certs off to a -** user supplied function. -** "certfunc" is the user function to call for each certificate -** "udata" is the user's data, which is passed through to "certfunc" -*/ -SECStatus -nsslowcert_TraversePermCerts(NSSLOWCERTCertDBHandle *handle, - PermCertCallback certfunc, - void *udata ); - -PRBool -nsslowcert_CertDBKeyConflict(SECItem *derCert, NSSLOWCERTCertDBHandle *handle); - -SECItem * -nsslowcert_FindCrlByKey(NSSLOWCERTCertDBHandle *handle, SECItem *crlKey, - char **urlp, PRBool isKRL); - -SECStatus -nsslowcert_DeletePermCRL(NSSLOWCERTCertDBHandle *handle,SECItem *derName, - PRBool isKRL); -SECStatus -nsslowcert_AddCrl(NSSLOWCERTCertDBHandle *handle, SECItem *derCrl , - SECItem *derKey, char *url, PRBool isKRL); - -NSSLOWCERTCertDBHandle *nsslowcert_GetDefaultCertDB(); -NSSLOWKEYPublicKey *nsslowcert_ExtractPublicKey(NSSLOWCERTCertificate *); - -NSSLOWCERTCertificate * -nsslowcert_NewTempCertificate(NSSLOWCERTCertDBHandle *handle, SECItem *derCert, - char *nickname, PRBool isperm, PRBool copyDER); -NSSLOWCERTCertificate * -nsslowcert_DupCertificate(NSSLOWCERTCertificate *cert); -void nsslowcert_DestroyCertificate(NSSLOWCERTCertificate *cert); -void nsslowcert_DestroyTrust(NSSLOWCERTTrust *Trust); - -/* - * Lookup a certificate in the databases without locking - * "certKey" is the database key to look for - * - * XXX - this should be internal, but pkcs 11 needs to call it during a - * traversal. - */ -NSSLOWCERTCertificate * -nsslowcert_FindCertByKey(NSSLOWCERTCertDBHandle *handle, SECItem *certKey); - -/* - * Lookup trust for a certificate in the databases without locking - * "certKey" is the database key to look for - * - * XXX - this should be internal, but pkcs 11 needs to call it during a - * traversal. - */ -NSSLOWCERTTrust * -nsslowcert_FindTrustByKey(NSSLOWCERTCertDBHandle *handle, SECItem *certKey); - -/* -** Generate a certificate key from the issuer and serialnumber, then look it -** up in the database. Return the cert if found. -** "issuerAndSN" is the issuer and serial number to look for -*/ -extern NSSLOWCERTCertificate * -nsslowcert_FindCertByIssuerAndSN (NSSLOWCERTCertDBHandle *handle, NSSLOWCERTIssuerAndSN *issuerAndSN); - -/* -** Generate a certificate key from the issuer and serialnumber, then look it -** up in the database. Return the cert if found. -** "issuerAndSN" is the issuer and serial number to look for -*/ -extern NSSLOWCERTTrust * -nsslowcert_FindTrustByIssuerAndSN (NSSLOWCERTCertDBHandle *handle, NSSLOWCERTIssuerAndSN *issuerAndSN); - -/* -** Find a certificate in the database by a DER encoded certificate -** "derCert" is the DER encoded certificate -*/ -extern NSSLOWCERTCertificate * -nsslowcert_FindCertByDERCert(NSSLOWCERTCertDBHandle *handle, SECItem *derCert); - -/* convert an email address to lower case */ -char *nsslowcert_FixupEmailAddr(char *emailAddr); - -/* -** Decode a DER encoded certificate into an NSSLOWCERTCertificate structure -** "derSignedCert" is the DER encoded signed certificate -** "copyDER" is true if the DER should be copied, false if the -** existing copy should be referenced -** "nickname" is the nickname to use in the database. If it is NULL -** then a temporary nickname is generated. -*/ -extern NSSLOWCERTCertificate * -nsslowcert_DecodeDERCertificate (SECItem *derSignedCert, char *nickname); - -SECStatus -nsslowcert_KeyFromDERCert(PRArenaPool *arena, SECItem *derCert, SECItem *key); - -certDBEntrySMime * -nsslowcert_ReadDBSMimeEntry(NSSLOWCERTCertDBHandle *certHandle, - char *emailAddr); -void -nsslowcert_DestroyDBEntry(certDBEntry *entry); - -SECStatus -nsslowcert_OpenCertDB(NSSLOWCERTCertDBHandle *handle, PRBool readOnly, - const char *domain, const char *prefix, - NSSLOWCERTDBNameFunc namecb, void *cbarg, PRBool openVolatile); - -void -nsslowcert_ClosePermCertDB(NSSLOWCERTCertDBHandle *handle); - -/* - * is certa newer than certb? If one is expired, pick the other one. - */ -PRBool -nsslowcert_IsNewer(NSSLOWCERTCertificate *certa, NSSLOWCERTCertificate *certb); - - -SECStatus -nsslowcert_TraverseDBEntries(NSSLOWCERTCertDBHandle *handle, - certDBEntryType type, - SECStatus (* callback)(SECItem *data, SECItem *key, - certDBEntryType type, void *pdata), - void *udata ); -SECStatus -nsslowcert_TraversePermCertsForSubject(NSSLOWCERTCertDBHandle *handle, - SECItem *derSubject, - NSSLOWCERTCertCallback cb, void *cbarg); -int -nsslowcert_NumPermCertsForSubject(NSSLOWCERTCertDBHandle *handle, - SECItem *derSubject); -SECStatus -nsslowcert_TraversePermCertsForNickname(NSSLOWCERTCertDBHandle *handle, - char *nickname, NSSLOWCERTCertCallback cb, void *cbarg); - -int -nsslowcert_NumPermCertsForNickname(NSSLOWCERTCertDBHandle *handle, - char *nickname); -SECStatus -nsslowcert_GetCertTrust(NSSLOWCERTCertificate *cert, - NSSLOWCERTCertTrust *trust); - -SECStatus -nsslowcert_SaveSMimeProfile(NSSLOWCERTCertDBHandle *dbhandle, char *emailAddr, - SECItem *derSubject, SECItem *emailProfile, SECItem *profileTime); - -/* - * Change the trust attributes of a certificate and make them permanent - * in the database. - */ -SECStatus -nsslowcert_ChangeCertTrust(NSSLOWCERTCertDBHandle *handle, - NSSLOWCERTCertificate *cert, NSSLOWCERTCertTrust *trust); - -PRBool -nsslowcert_hasTrust(NSSLOWCERTCertTrust *trust); - -void -nsslowcert_DestroyGlobalLocks(void); - -void -pkcs11_freeNickname(char *nickname, char *space); - -char * -pkcs11_copyNickname(char *nickname, char *space, int spaceLen); - -void -pkcs11_freeStaticData(unsigned char *data, unsigned char *space); - -unsigned char * -pkcs11_copyStaticData(unsigned char *data, int datalen, unsigned char *space, - int spaceLen); -NSSLOWCERTCertificate * -nsslowcert_CreateCert(void); -SEC_END_PROTOS - - #endif /* _PCERTDB_H_ */ |