strongswan/src/libstrongswan/plugins/x509/x509_cert.h

67 lines
1.9 KiB
C

/*
* Copyright (C) 2008-2009 Martin Willi
* HSR Hochschule fuer Technik Rapperswil
*
* This program is free software; you can redistribute it and/or modify it
* under the terms of the GNU General Public License as published by the
* Free Software Foundation; either version 2 of the License, or (at your
* option) any later version. See <http://www.fsf.org/copyleft/gpl.txt>.
*
* This program is distributed in the hope that it will be useful, but
* WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY
* or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License
* for more details.
*/
/**
* @defgroup x509_cert x509_cert
* @{ @ingroup x509_p
*/
#ifndef X509_CERT_H_
#define X509_CERT_H_
typedef struct x509_cert_t x509_cert_t;
#include <credentials/builder.h>
#include <credentials/certificates/x509.h>
/**
* Implementation of x509_t/certificate_t using own ASN1 parser.
*/
struct x509_cert_t {
/**
* Implements the x509_t interface
*/
x509_t interface;
};
/**
* Load a X.509 certificate.
*
* This function takes a BUILD_BLOB_ASN1_DER.
*
* @param type certificate type, CERT_X509 only
* @param args builder_part_t argument list
* @return X.509 certificate, NULL on failure
*/
x509_cert_t *x509_cert_load(certificate_type_t type, va_list args);
/**
* Generate a X.509 certificate.
*
* To issue a self-signed certificate, the function takes:
* BUILD_SUBJECT, BUILD_SUBJECT_ALTNAMES, BUILD_SIGNING_KEY, BUILD_X509_FLAG,
* BUILD_NOT_BEFORE_TIME, BUILD_NOT_AFTER_TIME, BUILD_SERIAL, BUILD_DIGEST_ALG.
* To issue certificates from a CA, additionally pass:
* BUILD_SIGNING_CERT and BUILD_PUBLIC_KEY.
*
* @param type certificate type, CERT_X509 only
* @param args builder_part_t argument list
* @return X.509 certificate, NULL on failure
*/
x509_cert_t *x509_cert_gen(certificate_type_t type, va_list args);
#endif /** X509_CERT_H_ @}*/