67 lines
1.9 KiB
C
67 lines
1.9 KiB
C
/*
|
|
* Copyright (C) 2008-2009 Martin Willi
|
|
* Hochschule fuer Technik Rapperswil
|
|
*
|
|
* This program is free software; you can redistribute it and/or modify it
|
|
* under the terms of the GNU General Public License as published by the
|
|
* Free Software Foundation; either version 2 of the License, or (at your
|
|
* option) any later version. See <http://www.fsf.org/copyleft/gpl.txt>.
|
|
*
|
|
* This program is distributed in the hope that it will be useful, but
|
|
* WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY
|
|
* or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License
|
|
* for more details.
|
|
*/
|
|
|
|
/**
|
|
* @defgroup x509_cert x509_cert
|
|
* @{ @ingroup x509_p
|
|
*/
|
|
|
|
#ifndef X509_CERT_H_
|
|
#define X509_CERT_H_
|
|
|
|
typedef struct x509_cert_t x509_cert_t;
|
|
|
|
#include <credentials/builder.h>
|
|
#include <credentials/certificates/x509.h>
|
|
|
|
/**
|
|
* Implementation of x509_t/certificate_t using own ASN1 parser.
|
|
*/
|
|
struct x509_cert_t {
|
|
|
|
/**
|
|
* Implements the x509_t interface
|
|
*/
|
|
x509_t interface;
|
|
};
|
|
|
|
/**
|
|
* Load a X.509 certificate.
|
|
*
|
|
* This function takes a BUILD_BLOB_ASN1_DER.
|
|
*
|
|
* @param type certificate type, CERT_X509 only
|
|
* @param args builder_part_t argument list
|
|
* @return X.509 certificate, NULL on failure
|
|
*/
|
|
x509_cert_t *x509_cert_load(certificate_type_t type, va_list args);
|
|
|
|
/**
|
|
* Generate a X.509 certificate.
|
|
*
|
|
* To issue a self-signed certificate, the function takes:
|
|
* BUILD_SUBJECT, BUILD_SUBJECT_ALTNAMES, BUILD_SIGNING_KEY, BUILD_X509_FLAG,
|
|
* BUILD_NOT_BEFORE_TIME, BUILD_NOT_AFTER_TIME, BUILD_SERIAL, BUILD_DIGEST_ALG.
|
|
* To issue certificates from a CA, additionally pass:
|
|
* BUILD_SIGNING_CERT and BUILD_PUBLIC_KEY.
|
|
*
|
|
* @param type certificate type, CERT_X509 only
|
|
* @param args builder_part_t argument list
|
|
* @return X.509 certificate, NULL on failure
|
|
*/
|
|
x509_cert_t *x509_cert_gen(certificate_type_t type, va_list args);
|
|
|
|
#endif /** X509_CERT_H_ @}*/
|