x509v3.h 37.2 KB
Newer Older
1
/*
R
Rich Salz 已提交
2
 * Copyright 1999-2016 The OpenSSL Project Authors. All Rights Reserved.
3
 *
R
Rich Salz 已提交
4 5 6 7
 * Licensed under the OpenSSL license (the "License").  You may not use
 * this file except in compliance with the License.  You can obtain a copy
 * in the file LICENSE in the source distribution or at
 * https://www.openssl.org/source/license.html
8
 */
R
Rich Salz 已提交
9

10
#ifndef HEADER_X509V3_H
11
# define HEADER_X509V3_H
12

13 14 15
# include <openssl/bio.h>
# include <openssl/x509.h>
# include <openssl/conf.h>
16

17 18 19 20
#ifdef __cplusplus
extern "C" {
#endif

21 22 23 24 25 26
/* Forward reference */
struct v3_ext_method;
struct v3_ext_ctx;

/* Useful typedefs */

27 28 29 30
typedef void *(*X509V3_EXT_NEW)(void);
typedef void (*X509V3_EXT_FREE) (void *);
typedef void *(*X509V3_EXT_D2I)(void *, const unsigned char **, long);
typedef int (*X509V3_EXT_I2D) (void *, unsigned char **);
31
typedef STACK_OF(CONF_VALUE) *
32 33 34 35 36 37 38 39 40 41 42 43 44
    (*X509V3_EXT_I2V) (const struct v3_ext_method *method, void *ext,
                       STACK_OF(CONF_VALUE) *extlist);
typedef void *(*X509V3_EXT_V2I)(const struct v3_ext_method *method,
                                struct v3_ext_ctx *ctx,
                                STACK_OF(CONF_VALUE) *values);
typedef char *(*X509V3_EXT_I2S)(const struct v3_ext_method *method,
                                void *ext);
typedef void *(*X509V3_EXT_S2I)(const struct v3_ext_method *method,
                                struct v3_ext_ctx *ctx, const char *str);
typedef int (*X509V3_EXT_I2R) (const struct v3_ext_method *method, void *ext,
                               BIO *out, int indent);
typedef void *(*X509V3_EXT_R2I)(const struct v3_ext_method *method,
                                struct v3_ext_ctx *ctx, const char *str);
45 46 47 48

/* V3 extension structure */

struct v3_ext_method {
49 50
    int ext_nid;
    int ext_flags;
D
 
Dr. Stephen Henson 已提交
51
/* If this is set the following four fields are ignored */
52
    ASN1_ITEM_EXP *it;
D
 
Dr. Stephen Henson 已提交
53
/* Old style ASN1 calls */
54 55 56 57
    X509V3_EXT_NEW ext_new;
    X509V3_EXT_FREE ext_free;
    X509V3_EXT_D2I d2i;
    X509V3_EXT_I2D i2d;
58
/* The following pair is used for string extensions */
59 60
    X509V3_EXT_I2S i2s;
    X509V3_EXT_S2I s2i;
61
/* The following pair is used for multi-valued extensions */
62 63
    X509V3_EXT_I2V i2v;
    X509V3_EXT_V2I v2i;
64
/* The following are used for raw extensions */
65 66 67
    X509V3_EXT_I2R i2r;
    X509V3_EXT_R2I r2i;
    void *usr_data;             /* Any extension specific data */
68 69
};

70
typedef struct X509V3_CONF_METHOD_st {
F
FdaSilvaYY 已提交
71 72
    char *(*get_string) (void *db, const char *section, const char *value);
    STACK_OF(CONF_VALUE) *(*get_section) (void *db, const char *section);
73 74
    void (*free_string) (void *db, char *string);
    void (*free_section) (void *db, STACK_OF(CONF_VALUE) *section);
75
} X509V3_CONF_METHOD;
76

77
/* Context specific info */
78
struct v3_ext_ctx {
79 80 81 82 83 84 85 86 87
# define CTX_TEST 0x1
# define X509V3_CTX_REPLACE 0x2
    int flags;
    X509 *issuer_cert;
    X509 *subject_cert;
    X509_REQ *subject_req;
    X509_CRL *crl;
    X509V3_CONF_METHOD *db_meth;
    void *db;
88 89 90 91 92
/* Maybe more here */
};

typedef struct v3_ext_method X509V3_EXT_METHOD;

93
DEFINE_STACK_OF(X509V3_EXT_METHOD)
94

95
/* ext_flags values */
96 97 98
# define X509V3_EXT_DYNAMIC      0x1
# define X509V3_EXT_CTX_DEP      0x2
# define X509V3_EXT_MULTILINE    0x4
99

100 101
typedef BIT_STRING_BITNAME ENUMERATED_NAMES;

102
typedef struct BASIC_CONSTRAINTS_st {
103 104
    int ca;
    ASN1_INTEGER *pathlen;
105 106
} BASIC_CONSTRAINTS;

107
typedef struct PKEY_USAGE_PERIOD_st {
108 109
    ASN1_GENERALIZEDTIME *notBefore;
    ASN1_GENERALIZEDTIME *notAfter;
110 111
} PKEY_USAGE_PERIOD;

112
typedef struct otherName_st {
113 114
    ASN1_OBJECT *type_id;
    ASN1_TYPE *value;
115 116
} OTHERNAME;

D
 
Dr. Stephen Henson 已提交
117
typedef struct EDIPartyName_st {
118 119
    ASN1_STRING *nameAssigner;
    ASN1_STRING *partyName;
D
 
Dr. Stephen Henson 已提交
120 121
} EDIPARTYNAME;

122
typedef struct GENERAL_NAME_st {
123 124 125 126 127 128 129 130 131 132 133 134 135 136 137 138 139 140 141 142 143 144 145 146 147 148 149 150 151
# define GEN_OTHERNAME   0
# define GEN_EMAIL       1
# define GEN_DNS         2
# define GEN_X400        3
# define GEN_DIRNAME     4
# define GEN_EDIPARTY    5
# define GEN_URI         6
# define GEN_IPADD       7
# define GEN_RID         8
    int type;
    union {
        char *ptr;
        OTHERNAME *otherName;   /* otherName */
        ASN1_IA5STRING *rfc822Name;
        ASN1_IA5STRING *dNSName;
        ASN1_TYPE *x400Address;
        X509_NAME *directoryName;
        EDIPARTYNAME *ediPartyName;
        ASN1_IA5STRING *uniformResourceIdentifier;
        ASN1_OCTET_STRING *iPAddress;
        ASN1_OBJECT *registeredID;
        /* Old names */
        ASN1_OCTET_STRING *ip;  /* iPAddress */
        X509_NAME *dirn;        /* dirn */
        ASN1_IA5STRING *ia5;    /* rfc822Name, dNSName,
                                 * uniformResourceIdentifier */
        ASN1_OBJECT *rid;       /* registeredID */
        ASN1_TYPE *other;       /* x400Address */
    } d;
152 153
} GENERAL_NAME;

154
typedef struct ACCESS_DESCRIPTION_st {
155 156
    ASN1_OBJECT *method;
    GENERAL_NAME *location;
157 158
} ACCESS_DESCRIPTION;

D
 
Dr. Stephen Henson 已提交
159 160 161 162
typedef STACK_OF(ACCESS_DESCRIPTION) AUTHORITY_INFO_ACCESS;

typedef STACK_OF(ASN1_OBJECT) EXTENDED_KEY_USAGE;

163 164
typedef STACK_OF(ASN1_INTEGER) TLS_FEATURE;

165
DEFINE_STACK_OF(GENERAL_NAME)
166
typedef STACK_OF(GENERAL_NAME) GENERAL_NAMES;
167
DEFINE_STACK_OF(GENERAL_NAMES)
168

169
DEFINE_STACK_OF(ACCESS_DESCRIPTION)
170

171
typedef struct DIST_POINT_NAME_st {
172 173 174 175 176
    int type;
    union {
        GENERAL_NAMES *fullname;
        STACK_OF(X509_NAME_ENTRY) *relativename;
    } name;
177
/* If relativename then this contains the full distribution point name */
178
    X509_NAME *dpname;
179
} DIST_POINT_NAME;
180
/* All existing reasons */
181 182 183 184 185 186 187 188 189 190 191 192 193
# define CRLDP_ALL_REASONS       0x807f

# define CRL_REASON_NONE                         -1
# define CRL_REASON_UNSPECIFIED                  0
# define CRL_REASON_KEY_COMPROMISE               1
# define CRL_REASON_CA_COMPROMISE                2
# define CRL_REASON_AFFILIATION_CHANGED          3
# define CRL_REASON_SUPERSEDED                   4
# define CRL_REASON_CESSATION_OF_OPERATION       5
# define CRL_REASON_CERTIFICATE_HOLD             6
# define CRL_REASON_REMOVE_FROM_CRL              8
# define CRL_REASON_PRIVILEGE_WITHDRAWN          9
# define CRL_REASON_AA_COMPROMISE                10
194

195
struct DIST_POINT_st {
196 197 198 199
    DIST_POINT_NAME *distpoint;
    ASN1_BIT_STRING *reasons;
    GENERAL_NAMES *CRLissuer;
    int dp_reasons;
200
};
201

D
 
Dr. Stephen Henson 已提交
202 203
typedef STACK_OF(DIST_POINT) CRL_DIST_POINTS;

204
DEFINE_STACK_OF(DIST_POINT)
205

206
struct AUTHORITY_KEYID_st {
207 208 209
    ASN1_OCTET_STRING *keyid;
    GENERAL_NAMES *issuer;
    ASN1_INTEGER *serial;
210
};
211

212
/* Strong extranet structures */
213

214
typedef struct SXNET_ID_st {
215 216
    ASN1_INTEGER *zone;
    ASN1_OCTET_STRING *user;
217
} SXNETID;
218

219
DEFINE_STACK_OF(SXNETID)
B
Ben Laurie 已提交
220 221

typedef struct SXNET_st {
222 223
    ASN1_INTEGER *version;
    STACK_OF(SXNETID) *ids;
B
Ben Laurie 已提交
224 225
} SXNET;

226
typedef struct NOTICEREF_st {
227 228
    ASN1_STRING *organization;
    STACK_OF(ASN1_INTEGER) *noticenos;
229 230 231
} NOTICEREF;

typedef struct USERNOTICE_st {
232 233
    NOTICEREF *noticeref;
    ASN1_STRING *exptext;
234 235 236
} USERNOTICE;

typedef struct POLICYQUALINFO_st {
237 238 239 240 241 242
    ASN1_OBJECT *pqualid;
    union {
        ASN1_IA5STRING *cpsuri;
        USERNOTICE *usernotice;
        ASN1_TYPE *other;
    } d;
243 244
} POLICYQUALINFO;

245
DEFINE_STACK_OF(POLICYQUALINFO)
246 247

typedef struct POLICYINFO_st {
248 249
    ASN1_OBJECT *policyid;
    STACK_OF(POLICYQUALINFO) *qualifiers;
250 251
} POLICYINFO;

D
 
Dr. Stephen Henson 已提交
252 253
typedef STACK_OF(POLICYINFO) CERTIFICATEPOLICIES;

254
DEFINE_STACK_OF(POLICYINFO)
255

D
Dr. Stephen Henson 已提交
256
typedef struct POLICY_MAPPING_st {
257 258
    ASN1_OBJECT *issuerDomainPolicy;
    ASN1_OBJECT *subjectDomainPolicy;
D
Dr. Stephen Henson 已提交
259 260
} POLICY_MAPPING;

261
DEFINE_STACK_OF(POLICY_MAPPING)
D
Dr. Stephen Henson 已提交
262 263 264

typedef STACK_OF(POLICY_MAPPING) POLICY_MAPPINGS;

265
typedef struct GENERAL_SUBTREE_st {
266 267 268
    GENERAL_NAME *base;
    ASN1_INTEGER *minimum;
    ASN1_INTEGER *maximum;
269 270
} GENERAL_SUBTREE;

271
DEFINE_STACK_OF(GENERAL_SUBTREE)
272

273
struct NAME_CONSTRAINTS_st {
274 275
    STACK_OF(GENERAL_SUBTREE) *permittedSubtrees;
    STACK_OF(GENERAL_SUBTREE) *excludedSubtrees;
276
};
277

278
typedef struct POLICY_CONSTRAINTS_st {
279 280
    ASN1_INTEGER *requireExplicitPolicy;
    ASN1_INTEGER *inhibitPolicyMapping;
281 282
} POLICY_CONSTRAINTS;

283
/* Proxy certificate structures, see RFC 3820 */
284 285 286 287 288 289 290 291 292
typedef struct PROXY_POLICY_st {
    ASN1_OBJECT *policyLanguage;
    ASN1_OCTET_STRING *policy;
} PROXY_POLICY;

typedef struct PROXY_CERT_INFO_EXTENSION_st {
    ASN1_INTEGER *pcPathLengthConstraint;
    PROXY_POLICY *proxyPolicy;
} PROXY_CERT_INFO_EXTENSION;
293 294 295 296

DECLARE_ASN1_FUNCTIONS(PROXY_POLICY)
DECLARE_ASN1_FUNCTIONS(PROXY_CERT_INFO_EXTENSION)

297 298 299 300 301 302 303 304
struct ISSUING_DIST_POINT_st {
    DIST_POINT_NAME *distpoint;
    int onlyuser;
    int onlyCA;
    ASN1_BIT_STRING *onlysomereasons;
    int indirectCRL;
    int onlyattr;
};
305

306 307
/* Values in idp_flags field */
/* IDP present */
308
# define IDP_PRESENT     0x1
309
/* IDP values inconsistent */
310
# define IDP_INVALID     0x2
311
/* onlyuser true */
312
# define IDP_ONLYUSER    0x4
313
/* onlyCA true */
314
# define IDP_ONLYCA      0x8
315
/* onlyattr true */
316
# define IDP_ONLYATTR    0x10
317
/* indirectCRL true */
318
# define IDP_INDIRECT    0x20
319
/* onlysomereasons present */
320
# define IDP_REASONS     0x40
321

322
# define X509V3_conf_err(val) ERR_add_error_data(6, "section:", val->section, \
323 324
",name:", val->name, ",value:", val->value);

325 326 327
# define X509V3_set_ctx_test(ctx) \
                        X509V3_set_ctx(ctx, NULL, NULL, NULL, NULL, CTX_TEST)
# define X509V3_set_ctx_nodb(ctx) (ctx)->db = NULL;
328

329 330 331 332 333 334 335
# define EXT_BITSTRING(nid, table) { nid, 0, ASN1_ITEM_ref(ASN1_BIT_STRING), \
                        0,0,0,0, \
                        0,0, \
                        (X509V3_EXT_I2V)i2v_ASN1_BIT_STRING, \
                        (X509V3_EXT_V2I)v2i_ASN1_BIT_STRING, \
                        NULL, NULL, \
                        table}
336

337 338 339 340 341 342
# define EXT_IA5STRING(nid) { nid, 0, ASN1_ITEM_ref(ASN1_IA5STRING), \
                        0,0,0,0, \
                        (X509V3_EXT_I2S)i2s_ASN1_IA5STRING, \
                        (X509V3_EXT_S2I)s2i_ASN1_IA5STRING, \
                        0,0,0,0, \
                        NULL}
343

344
# define EXT_END { -1, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0}
345 346 347

/* X509_PURPOSE stuff */

348 349 350 351
# define EXFLAG_BCONS            0x1
# define EXFLAG_KUSAGE           0x2
# define EXFLAG_XKUSAGE          0x4
# define EXFLAG_NSCERT           0x8
352

353
# define EXFLAG_CA               0x10
D
Dr. Stephen Henson 已提交
354
/* Really self issued not necessarily self signed */
355 356 357 358 359 360 361 362 363
# define EXFLAG_SI               0x20
# define EXFLAG_V1               0x40
# define EXFLAG_INVALID          0x80
# define EXFLAG_SET              0x100
# define EXFLAG_CRITICAL         0x200
# define EXFLAG_PROXY            0x400

# define EXFLAG_INVALID_POLICY   0x800
# define EXFLAG_FRESHEST         0x1000
364
/* Self signed */
365 366 367 368 369 370 371 372 373 374 375 376 377 378 379 380 381 382 383 384 385 386 387 388 389 390 391 392 393 394 395 396 397
# define EXFLAG_SS               0x2000

# define KU_DIGITAL_SIGNATURE    0x0080
# define KU_NON_REPUDIATION      0x0040
# define KU_KEY_ENCIPHERMENT     0x0020
# define KU_DATA_ENCIPHERMENT    0x0010
# define KU_KEY_AGREEMENT        0x0008
# define KU_KEY_CERT_SIGN        0x0004
# define KU_CRL_SIGN             0x0002
# define KU_ENCIPHER_ONLY        0x0001
# define KU_DECIPHER_ONLY        0x8000

# define NS_SSL_CLIENT           0x80
# define NS_SSL_SERVER           0x40
# define NS_SMIME                0x20
# define NS_OBJSIGN              0x10
# define NS_SSL_CA               0x04
# define NS_SMIME_CA             0x02
# define NS_OBJSIGN_CA           0x01
# define NS_ANY_CA               (NS_SSL_CA|NS_SMIME_CA|NS_OBJSIGN_CA)

# define XKU_SSL_SERVER          0x1
# define XKU_SSL_CLIENT          0x2
# define XKU_SMIME               0x4
# define XKU_CODE_SIGN           0x8
# define XKU_SGC                 0x10
# define XKU_OCSP_SIGN           0x20
# define XKU_TIMESTAMP           0x40
# define XKU_DVCS                0x80
# define XKU_ANYEKU              0x100

# define X509_PURPOSE_DYNAMIC    0x1
# define X509_PURPOSE_DYNAMIC_NAME       0x2
398

399
typedef struct x509_purpose_st {
400 401 402 403 404 405 406
    int purpose;
    int trust;                  /* Default trust ID */
    int flags;
    int (*check_purpose) (const struct x509_purpose_st *, const X509 *, int);
    char *name;
    char *sname;
    void *usr_data;
407 408
} X509_PURPOSE;

409 410 411 412 413 414 415 416 417
# define X509_PURPOSE_SSL_CLIENT         1
# define X509_PURPOSE_SSL_SERVER         2
# define X509_PURPOSE_NS_SSL_SERVER      3
# define X509_PURPOSE_SMIME_SIGN         4
# define X509_PURPOSE_SMIME_ENCRYPT      5
# define X509_PURPOSE_CRL_SIGN           6
# define X509_PURPOSE_ANY                7
# define X509_PURPOSE_OCSP_HELPER        8
# define X509_PURPOSE_TIMESTAMP_SIGN     9
418

419 420
# define X509_PURPOSE_MIN                1
# define X509_PURPOSE_MAX                9
421

422 423
/* Flags for X509V3_EXT_print() */

424
# define X509V3_EXT_UNKNOWN_MASK         (0xfL << 16)
425
/* Return error for unknown extensions */
426
# define X509V3_EXT_DEFAULT              0
427
/* Print error for unknown extensions */
428
# define X509V3_EXT_ERROR_UNKNOWN        (1L << 16)
429
/* ASN1 parse unknown extensions */
430
# define X509V3_EXT_PARSE_UNKNOWN        (2L << 16)
431
/* BIO_dump unknown extensions */
432
# define X509V3_EXT_DUMP_UNKNOWN         (3L << 16)
433

434 435
/* Flags for X509V3_add1_i2d */

436 437 438 439 440 441 442 443
# define X509V3_ADD_OP_MASK              0xfL
# define X509V3_ADD_DEFAULT              0L
# define X509V3_ADD_APPEND               1L
# define X509V3_ADD_REPLACE              2L
# define X509V3_ADD_REPLACE_EXISTING     3L
# define X509V3_ADD_KEEP_EXISTING        4L
# define X509V3_ADD_DELETE               5L
# define X509V3_ADD_SILENT               0x10
444

445
DEFINE_STACK_OF(X509_PURPOSE)
446

D
 
Dr. Stephen Henson 已提交
447
DECLARE_ASN1_FUNCTIONS(BASIC_CONSTRAINTS)
448

D
 
Dr. Stephen Henson 已提交
449 450
DECLARE_ASN1_FUNCTIONS(SXNET)
DECLARE_ASN1_FUNCTIONS(SXNETID)
451

F
FdaSilvaYY 已提交
452 453
int SXNET_add_id_asc(SXNET **psx, const char *zone, const char *user, int userlen);
int SXNET_add_id_ulong(SXNET **psx, unsigned long lzone, const char *user,
454
                       int userlen);
F
FdaSilvaYY 已提交
455
int SXNET_add_id_INTEGER(SXNET **psx, ASN1_INTEGER *izone, const char *user,
456
                         int userlen);
457

F
FdaSilvaYY 已提交
458
ASN1_OCTET_STRING *SXNET_get_id_asc(SXNET *sx, const char *zone);
459 460 461
ASN1_OCTET_STRING *SXNET_get_id_ulong(SXNET *sx, unsigned long lzone);
ASN1_OCTET_STRING *SXNET_get_id_INTEGER(SXNET *sx, ASN1_INTEGER *zone);

D
 
Dr. Stephen Henson 已提交
462 463 464 465 466
DECLARE_ASN1_FUNCTIONS(AUTHORITY_KEYID)

DECLARE_ASN1_FUNCTIONS(PKEY_USAGE_PERIOD)

DECLARE_ASN1_FUNCTIONS(GENERAL_NAME)
467 468 469
GENERAL_NAME *GENERAL_NAME_dup(GENERAL_NAME *a);
int GENERAL_NAME_cmp(GENERAL_NAME *a, GENERAL_NAME *b);

470
ASN1_BIT_STRING *v2i_ASN1_BIT_STRING(X509V3_EXT_METHOD *method,
471 472
                                     X509V3_CTX *ctx,
                                     STACK_OF(CONF_VALUE) *nval);
473
STACK_OF(CONF_VALUE) *i2v_ASN1_BIT_STRING(X509V3_EXT_METHOD *method,
474 475 476
                                          ASN1_BIT_STRING *bits,
                                          STACK_OF(CONF_VALUE) *extlist);
char *i2s_ASN1_IA5STRING(X509V3_EXT_METHOD *method, ASN1_IA5STRING *ia5);
477
ASN1_IA5STRING *s2i_ASN1_IA5STRING(X509V3_EXT_METHOD *method,
F
FdaSilvaYY 已提交
478
                                   X509V3_CTX *ctx, const char *str);
479

480 481 482
STACK_OF(CONF_VALUE) *i2v_GENERAL_NAME(X509V3_EXT_METHOD *method,
                                       GENERAL_NAME *gen,
                                       STACK_OF(CONF_VALUE) *ret);
483
int GENERAL_NAME_print(BIO *out, GENERAL_NAME *gen);
484

D
 
Dr. Stephen Henson 已提交
485
DECLARE_ASN1_FUNCTIONS(GENERAL_NAMES)
486

487
STACK_OF(CONF_VALUE) *i2v_GENERAL_NAMES(X509V3_EXT_METHOD *method,
488 489
                                        GENERAL_NAMES *gen,
                                        STACK_OF(CONF_VALUE) *extlist);
490
GENERAL_NAMES *v2i_GENERAL_NAMES(const X509V3_EXT_METHOD *method,
491
                                 X509V3_CTX *ctx, STACK_OF(CONF_VALUE) *nval);
492

D
 
Dr. Stephen Henson 已提交
493 494
DECLARE_ASN1_FUNCTIONS(OTHERNAME)
DECLARE_ASN1_FUNCTIONS(EDIPARTYNAME)
495
int OTHERNAME_cmp(OTHERNAME *a, OTHERNAME *b);
D
Dr. Stephen Henson 已提交
496 497 498
void GENERAL_NAME_set0_value(GENERAL_NAME *a, int type, void *value);
void *GENERAL_NAME_get0_value(GENERAL_NAME *a, int *ptype);
int GENERAL_NAME_set0_othername(GENERAL_NAME *gen,
499 500 501
                                ASN1_OBJECT *oid, ASN1_TYPE *value);
int GENERAL_NAME_get0_otherName(GENERAL_NAME *gen,
                                ASN1_OBJECT **poid, ASN1_TYPE **pvalue);
502

503 504 505 506
char *i2s_ASN1_OCTET_STRING(X509V3_EXT_METHOD *method,
                            ASN1_OCTET_STRING *ia5);
ASN1_OCTET_STRING *s2i_ASN1_OCTET_STRING(X509V3_EXT_METHOD *method,
                                         X509V3_CTX *ctx, char *str);
507

D
 
Dr. Stephen Henson 已提交
508
DECLARE_ASN1_FUNCTIONS(EXTENDED_KEY_USAGE)
509
int i2a_ACCESS_DESCRIPTION(BIO *bp, ACCESS_DESCRIPTION *a);
510

511 512
DECLARE_ASN1_ALLOC_FUNCTIONS(TLS_FEATURE)

D
 
Dr. Stephen Henson 已提交
513 514 515 516 517
DECLARE_ASN1_FUNCTIONS(CERTIFICATEPOLICIES)
DECLARE_ASN1_FUNCTIONS(POLICYINFO)
DECLARE_ASN1_FUNCTIONS(POLICYQUALINFO)
DECLARE_ASN1_FUNCTIONS(USERNOTICE)
DECLARE_ASN1_FUNCTIONS(NOTICEREF)
518

D
 
Dr. Stephen Henson 已提交
519 520 521
DECLARE_ASN1_FUNCTIONS(CRL_DIST_POINTS)
DECLARE_ASN1_FUNCTIONS(DIST_POINT)
DECLARE_ASN1_FUNCTIONS(DIST_POINT_NAME)
522
DECLARE_ASN1_FUNCTIONS(ISSUING_DIST_POINT)
523

524 525
int DIST_POINT_set_dpname(DIST_POINT_NAME *dpn, X509_NAME *iname);

526
int NAME_CONSTRAINTS_check(X509 *x, NAME_CONSTRAINTS *nc);
527
int NAME_CONSTRAINTS_check_CN(X509 *x, NAME_CONSTRAINTS *nc);
528

D
 
Dr. Stephen Henson 已提交
529 530
DECLARE_ASN1_FUNCTIONS(ACCESS_DESCRIPTION)
DECLARE_ASN1_FUNCTIONS(AUTHORITY_INFO_ACCESS)
531

D
Dr. Stephen Henson 已提交
532
DECLARE_ASN1_ITEM(POLICY_MAPPING)
533
DECLARE_ASN1_ALLOC_FUNCTIONS(POLICY_MAPPING)
D
Dr. Stephen Henson 已提交
534 535
DECLARE_ASN1_ITEM(POLICY_MAPPINGS)

536 537 538 539 540 541
DECLARE_ASN1_ITEM(GENERAL_SUBTREE)
DECLARE_ASN1_ALLOC_FUNCTIONS(GENERAL_SUBTREE)

DECLARE_ASN1_ITEM(NAME_CONSTRAINTS)
DECLARE_ASN1_ALLOC_FUNCTIONS(NAME_CONSTRAINTS)

542 543 544
DECLARE_ASN1_ALLOC_FUNCTIONS(POLICY_CONSTRAINTS)
DECLARE_ASN1_ITEM(POLICY_CONSTRAINTS)

545
GENERAL_NAME *a2i_GENERAL_NAME(GENERAL_NAME *out,
546
                               const X509V3_EXT_METHOD *method,
F
FdaSilvaYY 已提交
547
                               X509V3_CTX *ctx, int gen_type,
548
                               const char *value, int is_nc);
549

550 551 552
# ifdef HEADER_CONF_H
GENERAL_NAME *v2i_GENERAL_NAME(const X509V3_EXT_METHOD *method,
                               X509V3_CTX *ctx, CONF_VALUE *cnf);
553
GENERAL_NAME *v2i_GENERAL_NAME_ex(GENERAL_NAME *out,
554 555 556
                                  const X509V3_EXT_METHOD *method,
                                  X509V3_CTX *ctx, CONF_VALUE *cnf,
                                  int is_nc);
557
void X509V3_conf_free(CONF_VALUE *val);
D
 
Dr. Stephen Henson 已提交
558

559
X509_EXTENSION *X509V3_EXT_nconf_nid(CONF *conf, X509V3_CTX *ctx, int ext_nid,
F
FdaSilvaYY 已提交
560 561 562 563
                                     const char *value);
X509_EXTENSION *X509V3_EXT_nconf(CONF *conf, X509V3_CTX *ctx, const char *name,
                                 const char *value);
int X509V3_EXT_add_nconf_sk(CONF *conf, X509V3_CTX *ctx, const char *section,
564
                            STACK_OF(X509_EXTENSION) **sk);
F
FdaSilvaYY 已提交
565
int X509V3_EXT_add_nconf(CONF *conf, X509V3_CTX *ctx, const char *section,
566
                         X509 *cert);
F
FdaSilvaYY 已提交
567
int X509V3_EXT_REQ_add_nconf(CONF *conf, X509V3_CTX *ctx, const char *section,
568
                             X509_REQ *req);
F
FdaSilvaYY 已提交
569
int X509V3_EXT_CRL_add_nconf(CONF *conf, X509V3_CTX *ctx, const char *section,
570 571 572 573
                             X509_CRL *crl);

X509_EXTENSION *X509V3_EXT_conf_nid(LHASH_OF(CONF_VALUE) *conf,
                                    X509V3_CTX *ctx, int ext_nid,
F
FdaSilvaYY 已提交
574
                                    const char *value);
B
Ben Laurie 已提交
575
X509_EXTENSION *X509V3_EXT_conf(LHASH_OF(CONF_VALUE) *conf, X509V3_CTX *ctx,
F
FdaSilvaYY 已提交
576
                                const char *name, const char *value);
B
Ben Laurie 已提交
577
int X509V3_EXT_add_conf(LHASH_OF(CONF_VALUE) *conf, X509V3_CTX *ctx,
F
FdaSilvaYY 已提交
578
                        const char *section, X509 *cert);
B
Ben Laurie 已提交
579
int X509V3_EXT_REQ_add_conf(LHASH_OF(CONF_VALUE) *conf, X509V3_CTX *ctx,
F
FdaSilvaYY 已提交
580
                            const char *section, X509_REQ *req);
B
Ben Laurie 已提交
581
int X509V3_EXT_CRL_add_conf(LHASH_OF(CONF_VALUE) *conf, X509V3_CTX *ctx,
F
FdaSilvaYY 已提交
582
                            const char *section, X509_CRL *crl);
D
 
Dr. Stephen Henson 已提交
583

584
int X509V3_add_value_bool_nf(const char *name, int asn1_bool,
585
                             STACK_OF(CONF_VALUE) **extlist);
586 587
int X509V3_get_value_bool(CONF_VALUE *value, int *asn1_bool);
int X509V3_get_value_int(CONF_VALUE *value, ASN1_INTEGER **aint);
D
 
Dr. Stephen Henson 已提交
588
void X509V3_set_nconf(X509V3_CTX *ctx, CONF *conf);
B
Ben Laurie 已提交
589
void X509V3_set_conf_lhash(X509V3_CTX *ctx, LHASH_OF(CONF_VALUE) *lhash);
590
# endif
591

592 593
char *X509V3_get_string(X509V3_CTX *ctx, const char *name, const char *section);
STACK_OF(CONF_VALUE) *X509V3_get_section(X509V3_CTX *ctx, const char *section);
594
void X509V3_string_free(X509V3_CTX *ctx, char *str);
595
void X509V3_section_free(X509V3_CTX *ctx, STACK_OF(CONF_VALUE) *section);
596
void X509V3_set_ctx(X509V3_CTX *ctx, X509 *issuer, X509 *subject,
597
                    X509_REQ *req, X509_CRL *crl, int flags);
598

599
int X509V3_add_value(const char *name, const char *value,
600
                     STACK_OF(CONF_VALUE) **extlist);
B
Ben Laurie 已提交
601
int X509V3_add_value_uchar(const char *name, const unsigned char *value,
602
                           STACK_OF(CONF_VALUE) **extlist);
603
int X509V3_add_value_bool(const char *name, int asn1_bool,
604
                          STACK_OF(CONF_VALUE) **extlist);
605
int X509V3_add_value_int(const char *name, ASN1_INTEGER *aint,
606
                         STACK_OF(CONF_VALUE) **extlist);
607
char *i2s_ASN1_INTEGER(X509V3_EXT_METHOD *meth, const ASN1_INTEGER *aint);
F
FdaSilvaYY 已提交
608
ASN1_INTEGER *s2i_ASN1_INTEGER(X509V3_EXT_METHOD *meth, const char *value);
609 610 611
char *i2s_ASN1_ENUMERATED(X509V3_EXT_METHOD *meth, ASN1_ENUMERATED *aint);
char *i2s_ASN1_ENUMERATED_TABLE(X509V3_EXT_METHOD *meth,
                                ASN1_ENUMERATED *aint);
612
int X509V3_EXT_add(X509V3_EXT_METHOD *ext);
613
int X509V3_EXT_add_list(X509V3_EXT_METHOD *extlist);
614 615 616
int X509V3_EXT_add_alias(int nid_to, int nid_from);
void X509V3_EXT_cleanup(void);

617 618
const X509V3_EXT_METHOD *X509V3_EXT_get(X509_EXTENSION *ext);
const X509V3_EXT_METHOD *X509V3_EXT_get_nid(int nid);
619
int X509V3_add_standard_extensions(void);
D
 
Dr. Stephen Henson 已提交
620
STACK_OF(CONF_VALUE) *X509V3_parse_list(const char *line);
621
void *X509V3_EXT_d2i(X509_EXTENSION *ext);
622
void *X509V3_get_d2i(const STACK_OF(X509_EXTENSION) *x, int nid, int *crit,
623
                     int *idx);
624

625
X509_EXTENSION *X509V3_EXT_i2d(int ext_nid, int crit, void *ext_struc);
626 627
int X509V3_add1_i2d(STACK_OF(X509_EXTENSION) **x, int nid, void *value,
                    int crit, unsigned long flags);
628

629
#if OPENSSL_API_COMPAT < 0x10100000L
630 631 632 633
/* The new declarations are in crypto.h, but the old ones were here. */
# define hex_to_string OPENSSL_buf2hexstr
# define string_to_hex OPENSSL_hexstr2buf
#endif
634

635
void X509V3_EXT_val_prn(BIO *out, STACK_OF(CONF_VALUE) *val, int indent,
636 637 638
                        int ml);
int X509V3_EXT_print(BIO *out, X509_EXTENSION *ext, unsigned long flag,
                     int indent);
D
David Woodhouse 已提交
639
#ifndef OPENSSL_NO_STDIO
640
int X509V3_EXT_print_fp(FILE *out, X509_EXTENSION *ext, int flag, int indent);
D
David Woodhouse 已提交
641
#endif
642 643 644
int X509V3_extensions_print(BIO *out, char *title,
                            STACK_OF(X509_EXTENSION) *exts,
                            unsigned long flag, int indent);
645

646
int X509_check_ca(X509 *x);
647
int X509_check_purpose(X509 *x, int id, int ca);
D
 
Dr. Stephen Henson 已提交
648
int X509_supported_extension(X509_EXTENSION *ex);
D
 
Dr. Stephen Henson 已提交
649
int X509_PURPOSE_set(int *p, int purpose);
650
int X509_check_issued(X509 *issuer, X509 *subject);
651
int X509_check_akid(X509 *issuer, AUTHORITY_KEYID *akid);
652
void X509_set_proxy_flag(X509 *x);
653 654 655 656

uint32_t X509_get_extension_flags(X509 *x);
uint32_t X509_get_key_usage(X509 *x);
uint32_t X509_get_extended_key_usage(X509 *x);
657
const ASN1_OCTET_STRING *X509_get0_subject_key_id(X509 *x);
658

659
int X509_PURPOSE_get_count(void);
660
X509_PURPOSE *X509_PURPOSE_get0(int idx);
661
int X509_PURPOSE_get_by_sname(const char *sname);
662
int X509_PURPOSE_get_by_id(int id);
663
int X509_PURPOSE_add(int id, int trust, int flags,
664
                     int (*ck) (const X509_PURPOSE *, const X509 *, int),
665 666 667 668
                     const char *name, const char *sname, void *arg);
char *X509_PURPOSE_get0_name(const X509_PURPOSE *xp);
char *X509_PURPOSE_get0_sname(const X509_PURPOSE *xp);
int X509_PURPOSE_get_trust(const X509_PURPOSE *xp);
669
void X509_PURPOSE_cleanup(void);
670
int X509_PURPOSE_get_id(const X509_PURPOSE *);
671

D
Dr. Stephen Henson 已提交
672 673 674 675
STACK_OF(OPENSSL_STRING) *X509_get1_email(X509 *x);
STACK_OF(OPENSSL_STRING) *X509_REQ_get1_email(X509_REQ *x);
void X509_email_free(STACK_OF(OPENSSL_STRING) *sk);
STACK_OF(OPENSSL_STRING) *X509_get1_ocsp(X509 *x);
676 677
/* Flags for X509_check_* functions */

678 679 680 681
/*
 * Always check subject name for host match even if subject alt names present
 */
# define X509_CHECK_FLAG_ALWAYS_CHECK_SUBJECT    0x1
V
Viktor Dukhovni 已提交
682
/* Disable wildcard matching for dnsName fields and common name. */
683
# define X509_CHECK_FLAG_NO_WILDCARDS    0x2
V
Viktor Dukhovni 已提交
684
/* Wildcards must not match a partial label. */
685
# define X509_CHECK_FLAG_NO_PARTIAL_WILDCARDS 0x4
V
Viktor Dukhovni 已提交
686
/* Allow (non-partial) wildcards to match multiple labels. */
687
# define X509_CHECK_FLAG_MULTI_LABEL_WILDCARDS 0x8
688
/* Constraint verifier subdomain patterns to match a single labels. */
689
# define X509_CHECK_FLAG_SINGLE_LABEL_SUBDOMAINS 0x10
690 691
/* Never check the subject CN */
# define X509_CHECK_FLAG_NEVER_CHECK_SUBJECT    0x20
692 693 694 695 696
/*
 * Match reference identifiers starting with "." to any sub-domain.
 * This is a non-public flag, turned on implicitly when the subject
 * reference identity is a DNS name.
 */
697
# define _X509_CHECK_FLAG_DOT_SUBDOMAINS 0x8000
698

699
int X509_check_host(X509 *x, const char *chk, size_t chklen,
700
                    unsigned int flags, char **peername);
701
int X509_check_email(X509 *x, const char *chk, size_t chklen,
702
                     unsigned int flags);
703
int X509_check_ip(X509 *x, const unsigned char *chk, size_t chklen,
704
                  unsigned int flags);
705
int X509_check_ip_asc(X509 *x, const char *ipasc, unsigned int flags);
706

707
ASN1_OCTET_STRING *a2i_IPADDRESS(const char *ipasc);
708
ASN1_OCTET_STRING *a2i_IPADDRESS_NC(const char *ipasc);
M
Matt Caswell 已提交
709
int X509V3_NAME_from_section(X509_NAME *nm, STACK_OF(CONF_VALUE) *dn_sk,
710
                             unsigned long chtype);
711

712
void X509_POLICY_NODE_print(BIO *out, X509_POLICY_NODE *node, int indent);
713
DEFINE_STACK_OF(X509_POLICY_NODE)
714

715
#ifndef OPENSSL_NO_RFC3779
B
Ben Laurie 已提交
716
typedef struct ASRange_st {
717
    ASN1_INTEGER *min, *max;
B
Ben Laurie 已提交
718 719
} ASRange;

R
Rich Salz 已提交
720 721
# define ASIdOrRange_id          0
# define ASIdOrRange_range       1
B
Ben Laurie 已提交
722 723

typedef struct ASIdOrRange_st {
724 725 726 727 728
    int type;
    union {
        ASN1_INTEGER *id;
        ASRange *range;
    } u;
B
Ben Laurie 已提交
729 730 731
} ASIdOrRange;

typedef STACK_OF(ASIdOrRange) ASIdOrRanges;
732
DEFINE_STACK_OF(ASIdOrRange)
B
Ben Laurie 已提交
733

R
Rich Salz 已提交
734 735
# define ASIdentifierChoice_inherit              0
# define ASIdentifierChoice_asIdsOrRanges        1
B
Ben Laurie 已提交
736 737

typedef struct ASIdentifierChoice_st {
738 739 740 741 742
    int type;
    union {
        ASN1_NULL *inherit;
        ASIdOrRanges *asIdsOrRanges;
    } u;
B
Ben Laurie 已提交
743 744 745
} ASIdentifierChoice;

typedef struct ASIdentifiers_st {
746
    ASIdentifierChoice *asnum, *rdi;
B
Ben Laurie 已提交
747 748 749 750 751 752 753 754
} ASIdentifiers;

DECLARE_ASN1_FUNCTIONS(ASRange)
DECLARE_ASN1_FUNCTIONS(ASIdOrRange)
DECLARE_ASN1_FUNCTIONS(ASIdentifierChoice)
DECLARE_ASN1_FUNCTIONS(ASIdentifiers)

typedef struct IPAddressRange_st {
755
    ASN1_BIT_STRING *min, *max;
B
Ben Laurie 已提交
756 757
} IPAddressRange;

R
Rich Salz 已提交
758 759
# define IPAddressOrRange_addressPrefix  0
# define IPAddressOrRange_addressRange   1
B
Ben Laurie 已提交
760 761

typedef struct IPAddressOrRange_st {
762 763 764 765 766
    int type;
    union {
        ASN1_BIT_STRING *addressPrefix;
        IPAddressRange *addressRange;
    } u;
B
Ben Laurie 已提交
767 768 769
} IPAddressOrRange;

typedef STACK_OF(IPAddressOrRange) IPAddressOrRanges;
770
DEFINE_STACK_OF(IPAddressOrRange)
B
Ben Laurie 已提交
771

R
Rich Salz 已提交
772 773
# define IPAddressChoice_inherit                 0
# define IPAddressChoice_addressesOrRanges       1
B
Ben Laurie 已提交
774 775

typedef struct IPAddressChoice_st {
776 777 778 779 780
    int type;
    union {
        ASN1_NULL *inherit;
        IPAddressOrRanges *addressesOrRanges;
    } u;
B
Ben Laurie 已提交
781 782 783
} IPAddressChoice;

typedef struct IPAddressFamily_st {
784 785
    ASN1_OCTET_STRING *addressFamily;
    IPAddressChoice *ipAddressChoice;
B
Ben Laurie 已提交
786 787 788
} IPAddressFamily;

typedef STACK_OF(IPAddressFamily) IPAddrBlocks;
789
DEFINE_STACK_OF(IPAddressFamily)
B
Ben Laurie 已提交
790 791 792 793 794 795 796 797 798

DECLARE_ASN1_FUNCTIONS(IPAddressRange)
DECLARE_ASN1_FUNCTIONS(IPAddressOrRange)
DECLARE_ASN1_FUNCTIONS(IPAddressChoice)
DECLARE_ASN1_FUNCTIONS(IPAddressFamily)

/*
 * API tag for elements of the ASIdentifer SEQUENCE.
 */
R
Rich Salz 已提交
799 800
# define V3_ASID_ASNUM   0
# define V3_ASID_RDI     1
B
Ben Laurie 已提交
801 802 803 804 805 806 807

/*
 * AFI values, assigned by IANA.  It'd be nice to make the AFI
 * handling code totally generic, but there are too many little things
 * that would need to be defined for other address families for it to
 * be worth the trouble.
 */
R
Rich Salz 已提交
808 809
# define IANA_AFI_IPV4   1
# define IANA_AFI_IPV6   2
B
Ben Laurie 已提交
810 811 812 813 814 815

/*
 * Utilities to construct and extract values from RFC3779 extensions,
 * since some of the encodings (particularly for IP address prefixes
 * and ranges) are a bit tedious to work with directly.
 */
R
Rich Salz 已提交
816 817 818 819 820 821 822 823 824 825 826 827 828 829 830
int X509v3_asid_add_inherit(ASIdentifiers *asid, int which);
int X509v3_asid_add_id_or_range(ASIdentifiers *asid, int which,
                                ASN1_INTEGER *min, ASN1_INTEGER *max);
int X509v3_addr_add_inherit(IPAddrBlocks *addr,
                            const unsigned afi, const unsigned *safi);
int X509v3_addr_add_prefix(IPAddrBlocks *addr,
                           const unsigned afi, const unsigned *safi,
                           unsigned char *a, const int prefixlen);
int X509v3_addr_add_range(IPAddrBlocks *addr,
                          const unsigned afi, const unsigned *safi,
                          unsigned char *min, unsigned char *max);
unsigned X509v3_addr_get_afi(const IPAddressFamily *f);
int X509v3_addr_get_range(IPAddressOrRange *aor, const unsigned afi,
                          unsigned char *min, unsigned char *max,
                          const int length);
B
Ben Laurie 已提交
831 832 833 834

/*
 * Canonical forms.
 */
R
Rich Salz 已提交
835 836 837 838
int X509v3_asid_is_canonical(ASIdentifiers *asid);
int X509v3_addr_is_canonical(IPAddrBlocks *addr);
int X509v3_asid_canonize(ASIdentifiers *asid);
int X509v3_addr_canonize(IPAddrBlocks *addr);
B
Ben Laurie 已提交
839 840 841 842

/*
 * Tests for inheritance and containment.
 */
R
Rich Salz 已提交
843 844 845 846
int X509v3_asid_inherits(ASIdentifiers *asid);
int X509v3_addr_inherits(IPAddrBlocks *addr);
int X509v3_asid_subset(ASIdentifiers *a, ASIdentifiers *b);
int X509v3_addr_subset(IPAddrBlocks *a, IPAddrBlocks *b);
B
Ben Laurie 已提交
847 848 849 850

/*
 * Check whether RFC 3779 extensions nest properly in chains.
 */
R
Rich Salz 已提交
851 852 853 854 855 856 857
int X509v3_asid_validate_path(X509_STORE_CTX *);
int X509v3_addr_validate_path(X509_STORE_CTX *);
int X509v3_asid_validate_resource_set(STACK_OF(X509) *chain,
                                      ASIdentifiers *ext,
                                      int allow_inheritance);
int X509v3_addr_validate_resource_set(STACK_OF(X509) *chain,
                                      IPAddrBlocks *ext, int allow_inheritance);
B
Ben Laurie 已提交
858

859
#endif                         /* OPENSSL_NO_RFC3779 */
R
Rich Salz 已提交
860

861
/* BEGIN ERROR CODES */
862 863
/*
 * The following lines are auto generated by the script mkerr.pl. Any changes
864 865
 * made after this point may be overwritten when the script is next run.
 */
R
Rich Salz 已提交
866

867
int ERR_load_X509V3_strings(void);
868

869 870 871
/* Error codes for the X509V3 functions. */

/* Function codes. */
872
# define X509V3_F_A2I_GENERAL_NAME                        164
R
Rich Salz 已提交
873
# define X509V3_F_ADDR_VALIDATE_PATH_INTERNAL             166
874 875 876 877 878 879 880 881 882 883 884 885 886 887 888 889 890 891 892 893 894 895 896 897 898 899 900 901 902 903 904 905 906 907 908 909 910 911 912 913 914 915 916 917
# define X509V3_F_ASIDENTIFIERCHOICE_CANONIZE             161
# define X509V3_F_ASIDENTIFIERCHOICE_IS_CANONICAL         162
# define X509V3_F_COPY_EMAIL                              122
# define X509V3_F_COPY_ISSUER                             123
# define X509V3_F_DO_DIRNAME                              144
# define X509V3_F_DO_EXT_I2D                              135
# define X509V3_F_DO_EXT_NCONF                            151
# define X509V3_F_GNAMES_FROM_SECTNAME                    156
# define X509V3_F_I2S_ASN1_ENUMERATED                     121
# define X509V3_F_I2S_ASN1_IA5STRING                      149
# define X509V3_F_I2S_ASN1_INTEGER                        120
# define X509V3_F_I2V_AUTHORITY_INFO_ACCESS               138
# define X509V3_F_NOTICE_SECTION                          132
# define X509V3_F_NREF_NOS                                133
# define X509V3_F_POLICY_SECTION                          131
# define X509V3_F_PROCESS_PCI_VALUE                       150
# define X509V3_F_R2I_CERTPOL                             130
# define X509V3_F_R2I_PCI                                 155
# define X509V3_F_S2I_ASN1_IA5STRING                      100
# define X509V3_F_S2I_ASN1_INTEGER                        108
# define X509V3_F_S2I_ASN1_OCTET_STRING                   112
# define X509V3_F_S2I_SKEY_ID                             115
# define X509V3_F_SET_DIST_POINT_NAME                     158
# define X509V3_F_SXNET_ADD_ID_ASC                        125
# define X509V3_F_SXNET_ADD_ID_INTEGER                    126
# define X509V3_F_SXNET_ADD_ID_ULONG                      127
# define X509V3_F_SXNET_GET_ID_ASC                        128
# define X509V3_F_SXNET_GET_ID_ULONG                      129
# define X509V3_F_V2I_ASIDENTIFIERS                       163
# define X509V3_F_V2I_ASN1_BIT_STRING                     101
# define X509V3_F_V2I_AUTHORITY_INFO_ACCESS               139
# define X509V3_F_V2I_AUTHORITY_KEYID                     119
# define X509V3_F_V2I_BASIC_CONSTRAINTS                   102
# define X509V3_F_V2I_CRLD                                134
# define X509V3_F_V2I_EXTENDED_KEY_USAGE                  103
# define X509V3_F_V2I_GENERAL_NAMES                       118
# define X509V3_F_V2I_GENERAL_NAME_EX                     117
# define X509V3_F_V2I_IDP                                 157
# define X509V3_F_V2I_IPADDRBLOCKS                        159
# define X509V3_F_V2I_ISSUER_ALT                          153
# define X509V3_F_V2I_NAME_CONSTRAINTS                    147
# define X509V3_F_V2I_POLICY_CONSTRAINTS                  146
# define X509V3_F_V2I_POLICY_MAPPINGS                     145
# define X509V3_F_V2I_SUBJECT_ALT                         154
918
# define X509V3_F_V2I_TLS_FEATURE                         165
919 920 921 922 923 924 925 926 927 928 929 930 931
# define X509V3_F_V3_GENERIC_EXTENSION                    116
# define X509V3_F_X509V3_ADD1_I2D                         140
# define X509V3_F_X509V3_ADD_VALUE                        105
# define X509V3_F_X509V3_EXT_ADD                          104
# define X509V3_F_X509V3_EXT_ADD_ALIAS                    106
# define X509V3_F_X509V3_EXT_I2D                          136
# define X509V3_F_X509V3_EXT_NCONF                        152
# define X509V3_F_X509V3_GET_SECTION                      142
# define X509V3_F_X509V3_GET_STRING                       143
# define X509V3_F_X509V3_GET_VALUE_BOOL                   110
# define X509V3_F_X509V3_PARSE_LIST                       109
# define X509V3_F_X509_PURPOSE_ADD                        137
# define X509V3_F_X509_PURPOSE_SET                        141
932 933

/* Reason codes. */
934 935 936 937 938 939 940 941 942 943 944 945 946 947 948 949 950 951 952 953 954 955 956 957
# define X509V3_R_BAD_IP_ADDRESS                          118
# define X509V3_R_BAD_OBJECT                              119
# define X509V3_R_BN_DEC2BN_ERROR                         100
# define X509V3_R_BN_TO_ASN1_INTEGER_ERROR                101
# define X509V3_R_DIRNAME_ERROR                           149
# define X509V3_R_DISTPOINT_ALREADY_SET                   160
# define X509V3_R_DUPLICATE_ZONE_ID                       133
# define X509V3_R_ERROR_CONVERTING_ZONE                   131
# define X509V3_R_ERROR_CREATING_EXTENSION                144
# define X509V3_R_ERROR_IN_EXTENSION                      128
# define X509V3_R_EXPECTED_A_SECTION_NAME                 137
# define X509V3_R_EXTENSION_EXISTS                        145
# define X509V3_R_EXTENSION_NAME_ERROR                    115
# define X509V3_R_EXTENSION_NOT_FOUND                     102
# define X509V3_R_EXTENSION_SETTING_NOT_SUPPORTED         103
# define X509V3_R_EXTENSION_VALUE_ERROR                   116
# define X509V3_R_ILLEGAL_EMPTY_EXTENSION                 151
# define X509V3_R_INCORRECT_POLICY_SYNTAX_TAG             152
# define X509V3_R_INVALID_ASNUMBER                        162
# define X509V3_R_INVALID_ASRANGE                         163
# define X509V3_R_INVALID_BOOLEAN_STRING                  104
# define X509V3_R_INVALID_EXTENSION_STRING                105
# define X509V3_R_INVALID_INHERITANCE                     165
# define X509V3_R_INVALID_IPADDRESS                       166
R
Rich Salz 已提交
958
# define X509V3_R_INVALID_MULTIPLE_RDNS                   161
959 960 961 962 963 964 965 966 967 968 969 970 971 972 973 974 975 976 977 978 979 980 981 982 983 984 985 986 987 988 989 990 991 992 993 994 995 996 997 998
# define X509V3_R_INVALID_NAME                            106
# define X509V3_R_INVALID_NULL_ARGUMENT                   107
# define X509V3_R_INVALID_NULL_NAME                       108
# define X509V3_R_INVALID_NULL_VALUE                      109
# define X509V3_R_INVALID_NUMBER                          140
# define X509V3_R_INVALID_NUMBERS                         141
# define X509V3_R_INVALID_OBJECT_IDENTIFIER               110
# define X509V3_R_INVALID_OPTION                          138
# define X509V3_R_INVALID_POLICY_IDENTIFIER               134
# define X509V3_R_INVALID_PROXY_POLICY_SETTING            153
# define X509V3_R_INVALID_PURPOSE                         146
# define X509V3_R_INVALID_SAFI                            164
# define X509V3_R_INVALID_SECTION                         135
# define X509V3_R_INVALID_SYNTAX                          143
# define X509V3_R_ISSUER_DECODE_ERROR                     126
# define X509V3_R_MISSING_VALUE                           124
# define X509V3_R_NEED_ORGANIZATION_AND_NUMBERS           142
# define X509V3_R_NO_CONFIG_DATABASE                      136
# define X509V3_R_NO_ISSUER_CERTIFICATE                   121
# define X509V3_R_NO_ISSUER_DETAILS                       127
# define X509V3_R_NO_POLICY_IDENTIFIER                    139
# define X509V3_R_NO_PROXY_CERT_POLICY_LANGUAGE_DEFINED   154
# define X509V3_R_NO_PUBLIC_KEY                           114
# define X509V3_R_NO_SUBJECT_DETAILS                      125
# define X509V3_R_OPERATION_NOT_DEFINED                   148
# define X509V3_R_OTHERNAME_ERROR                         147
# define X509V3_R_POLICY_LANGUAGE_ALREADY_DEFINED         155
# define X509V3_R_POLICY_PATH_LENGTH                      156
# define X509V3_R_POLICY_PATH_LENGTH_ALREADY_DEFINED      157
# define X509V3_R_POLICY_WHEN_PROXY_LANGUAGE_REQUIRES_NO_POLICY 159
# define X509V3_R_SECTION_NOT_FOUND                       150
# define X509V3_R_UNABLE_TO_GET_ISSUER_DETAILS            122
# define X509V3_R_UNABLE_TO_GET_ISSUER_KEYID              123
# define X509V3_R_UNKNOWN_BIT_STRING_ARGUMENT             111
# define X509V3_R_UNKNOWN_EXTENSION                       129
# define X509V3_R_UNKNOWN_EXTENSION_NAME                  130
# define X509V3_R_UNKNOWN_OPTION                          120
# define X509V3_R_UNSUPPORTED_OPTION                      117
# define X509V3_R_UNSUPPORTED_TYPE                        167
# define X509V3_R_USER_TOO_LONG                           132
999

R
Rich Salz 已提交
1000
# ifdef  __cplusplus
1001
}
R
Rich Salz 已提交
1002
# endif
1003
#endif