RSA BSAFE Micro Edition Suite	Streamlined security for mobile and embedded devices

---

r_cert.h

Go to the documentation of this file.

/* $Id: r_cert.h,v 1.247.4.5 2005/10/27 04:49:42 sparki Exp $ */
/*
 * Copyright (C) 1998-2003 RSA Security Inc. All rights reserved.
 *
 * This work contains proprietary information of RSA Security.
 * Distribution is limited to authorized licensees of RSA
 * Security. Any unauthorized reproduction, distribution or
 * modification of this work is strictly prohibited.
 */

#ifndef HEADER_COMMON_R_CERT_H
#define HEADER_COMMON_R_CERT_H

#ifdef  __cplusplus
extern "C" {
#endif

/* If Rm_ALL_DIRECT is defined then make sure that this module is configured
 * to operate in DIRECT mode.
 */
#if (defined(Rm_ALL_DIRECT) && !defined(Rm_CERT_DIRECT))
#define Rm_CERT_DIRECT
#endif /* defined(Rm_ALL_DIRECT) && !defined(Rm_CERT_DIRECT) */

/* Can't have both TABLE and DIRECT active at the same time. DIRECT is
 * considered to take precedence.
 */
#if (defined(Rm_CERT_TABLE) && defined(Rm_CERT_DIRECT))
#undef Rm_CERT_TABLE
#endif /* defined(Rm_CERT_TABLE) && defined(Rm_CERT_DIRECT) */

/* If FULL is defined then the configurable public API needs access to a
 * 'clean' set of function prototypes. This in an internal switch! It needs
 * to be here because this is the last point in time, after this point no
 * more configuration can be applied.
 */
#ifdef Rm_CERT_FULL

#ifdef Rm_CERT_TABLE
#undef Rm_CERT_TABLE
#endif /* Rm_CERT_TABLE */

#ifdef Rm_CERT_DIRECT
#undef Rm_CERT_DIRECT
#endif /* Rm_CERT_DIRECT */

#endif /* Rm_CERT_FULL */

/* Include all header files needed to make this header file compile, do not
 * worry about TABLE or DIRECT as these headers are only here to make things
 * compile. If TABLE or DIRECT were defined for other modules then this would
 * make it hard for an application to configure according to it's wishes. The
 * internal header file is responsible for making sure the implementation gets
 * correctly configured external headers.
 */
#include "r_lib.h"
#ifndef NO_BIO
#include "bio.h"
#endif /* NO_BIO */
#include "time_mod.h"
#include "r_nid.h"
#include "cryp_mod.h"
#include "r_oid_str.h"
#include "r_format.h"
#ifndef NO_EXT
#include "r_ext.h"
#endif

/*
 * Exported macro constants
 */

/* Defines for implementation identification */
#define R_RES_IMPL_ID_OP           R_RES_IMPL_ID_DEF

/* Defines for Certificate Types known to R_CERT */
#define R_CERT_TYPE_X509              1

#define R_CERT_TYPE_NULL              0

#define R_CERT_TYPE_WTLS              2

/*
 * Indicates a URL certificate type.
 * The string equivalent is <tt>"URL"/"url"</tt>.
 */
#define R_CERT_TYPE_URL               3

/* Note: R_PKEY_TYPE values are also part of this list */

#define  R_CERT_CTX_INFO_R_LIB_CTX   0

#define  R_CERT_CTX_INFO_CERT_TYPE   1

#define R_CERT_CTX_INFO_R_CR_CTX     2

#define R_CERT_CTX_INFO_R_PKEY_CTX   3

#define R_CERT_INFO_BASE                   PK_OBJECT_ID_BASE

#define R_CERT_INFO_VERSION                 PK_CERT_VER

#define R_CERT_INFO_SERIAL_NUMBER           PK_CERT_SERIAL

#define R_CERT_INFO_ISSUER                  PK_CERT_ISSUER

#define R_CERT_INFO_NOT_BEFORE              PK_CERT_NOT_BEFORE

#define R_CERT_INFO_NOT_AFTER               PK_CERT_NOT_AFTER

#define R_CERT_INFO_SUBJECT                 PK_CERT_SUBJECT

#define R_CERT_INFO_PUBLIC_KEY              PK_CERT_PUBKEY

#define R_CERT_INFO_ISSUER_UNIQUE_ID        PK_CERT_ISSUER_ATTRS

#define R_CERT_INFO_SUBJECT_UNIQUE_ID       PK_CERT_SUBJECT_ATTRS

#define R_CERT_INFO_EXTENSIONS              PK_CERT_EXTENSIONS

#define R_CERT_INFO_KEY_USAGE               R_EXT_ID_KEY_USAGE


#define R_CERT_INFO_KEY_USAGE_INT           (R_CERT_INFO_BASE + 16)

#define R_CERT_INFO_EXTENDED_KEY_USAGE      R_EXT_ID_EXT_KEY_USAGE

#define R_CERT_INFO_AUTH_INFO_ACCESS        R_EXT_ID_AUTH_INFO_ACCESS

#define R_CERT_INFO_BASIC_CONSTRAINTS       R_EXT_ID_BASIC_CONSTRAINTS

#define R_CERT_INFO_AUTHORITY_KEY_ID        R_EXT_ID_AUTHORITY_KEY_ID

#define R_CERT_INFO_SUBJECT_KEY_ID          R_EXT_ID_SUBJECT_KEY_ID

#define R_CERT_INFO_SUBJECT_ALT_NAME            R_EXT_ID_SUBJECT_ALT_NAME

#define R_CERT_INFO_SUBJECT_DNS_NAME            R_EXT_INFO_SAN_DNS_NAME

#define R_CERT_INFO_SUBJECT_IP_ADDRESS          R_EXT_INFO_SAN_IP_ADDRESS

#define R_CERT_INFO_SUBJECT_RFC822_NAME         R_EXT_INFO_SAN_RFC822_NAME

#define R_CERT_INFO_ISSUER_ALT_NAME             R_EXT_ID_ISSUER_ALT_NAME

#define R_CERT_INFO_ISSUER_DNS_NAME            R_EXT_INFO_IAN_DNS_NAME

#define R_CERT_INFO_ISSUER_IP_ADDRESS          R_EXT_INFO_IAN_IP_ADDRESS

#define R_CERT_INFO_ISSUER_RFC822_NAME         R_EXT_INFO_IAN_RFC822_NAME


#define R_CERT_INFO_EXTENSION_COUNT         R_CERT_INFO_BASE

#define R_CERT_INFO_EXTENSION               (R_CERT_INFO_BASE + 1)

#define R_CERT_INFO_EXTENSION_BY_OID        (R_CERT_INFO_BASE + 2)

#define R_CERT_INFO_TO_BE_SIGNED            PK_CERT_BODY

#define R_CERT_INFO_BINARY                  PK_CERT_ALL

#define R_CERT_INFO_SIGNATURE               PK_CERT_SIGNATURE

#define R_CERT_INFO_INTERNAL_SIG_INFO       PK_CERT_SIG_INFO

#define R_CERT_INFO_ALL                     (R_CERT_INFO_BASE + 3)

#define R_CERT_INFO_TYPE                    (R_CERT_INFO_BASE + 4)

#define R_CERT_INFO_R_CERT_CTX              (R_CERT_INFO_BASE + 5)

#define R_CERT_INFO_VERSION_STRING          (R_CERT_INFO_BASE + 6)

#define R_CERT_INFO_SIGNATURE_TYPE          (R_CERT_INFO_BASE + 7)

#define R_CERT_INFO_SIGNATURE_DIGEST_TYPE   (R_CERT_INFO_BASE + 8)

#define R_CERT_INFO_R_PKEY                  (R_CERT_INFO_BASE + 9)

#define R_CERT_INFO_ISSUER_R_CERT_NAME      (R_CERT_INFO_BASE + 10)

#define R_CERT_INFO_SUBJECT_R_CERT_NAME     (R_CERT_INFO_BASE + 11)

#define R_CERT_INFO_PARAMETERS              (R_CERT_INFO_BASE + 12)

#define R_CERT_INFO_END_PARAMETERS          0x0000

#define R_CERT_INFO_METHOD                  (R_CERT_INFO_BASE + 13)

/* TYPE in an R_TITEM rather than as a raw int pointer */
#define R_CERT_INFO_CERT_TYPE               (R_CERT_INFO_BASE + 14)

#define R_CERT_KEY_USAGE                    (R_CERT_INFO_BASE + 15)


#define R_CERT_INFO_DELETE                  PK_SHARED_ID_DELETE_ITEM

#define R_CERT_INFO_HW_LABEL                PK_SHARED_ID_LABEL

#define R_CERT_INFO_HW_ID                   PK_SHARED_ID_HW_ID

#define R_CERT_INFO_HW_MODIFIABLE           PK_SHARED_ID_MODIFIABLE

#define R_CERT_INFO_HW_PRIVATE               PK_SHARED_ID_PRIVATE

#define R_CERT_INFO_PURPOSE                  PK_SHARED_ID_PURPOSE

#define R_CERT_INFO_R_HW_OBJ                 PK_SHARED_ID_R_HW_OBJ_CERT

#define R_CERT_INFO_HW_CERT_CATEGORY         PK_SHARED_ID_CERT_CATEGORY

#define R_CERT_INFO_HW_HASH_SUB_PUBKEY       PK_SHARED_ID_HASH_SUB_PUBKEY

#define R_CERT_INFO_HW_HASH_ISS_PUBKEY       PK_SHARED_ID_HASH_ISS_PUBKEY

#define R_CERT_INFO_HW_URL                   PK_SHARED_ID_URL

#define R_CERT_INFO_HW_JAVA_MIDP_SEC_DOM     PK_SHARED_ID_JAVA_MIDP_SEC_DOM

#define R_CERT_INFO_HW_TRUSTED               PK_SHARED_ID_TRUSTED

#define R_CERT_INFO_LOCATION                 PK_SHARED_ID_LOCATION

/* Indicates that the certificate is binary encoded. */
#define R_CERT_FORMAT_BINARY            R_FORMAT_BINARY

/* Indicates that the certificate is text format encoded. */
#define R_CERT_FORMAT_TEXT              R_FORMAT_TEXT

/* Indicates that the certificate is Privacy Enhanced Mail (PEM) encoded. */
#define R_CERT_FORMAT_PEM               R_FORMAT_PEM

/* Indicates that the certificate is in a C code function format. */
#define R_CERT_FORMAT_CODE_BINARY       R_FORMAT_CODE_BINARY

/* Indicates that the certificate is in a C code fields format. */
#define R_CERT_FORMAT_CODE_FIELDS       R_FORMAT_CODE_FIELDS

/* Indicates that the certificate is in a C code data format. */
#define R_CERT_FORMAT_CODE_HEX          R_FORMAT_CODE_HEX

/* Indicates that the certificate is in a plain hexadecimal Bytes format. */
#define R_CERT_FORMAT_HEX               R_FORMAT_HEX

/* Backwards compatibility macro for R_CERT_FORMAT_from_string */
#define R_CERT_FORMAT_from_string(str, fmt)       \
    R_FORMAT_from_string((str), (fmt))

/* Backwards compatibility macro for R_CERT_FORMAT_to_string */
#define R_CERT_FORMAT_to_string(fmt, max, str)    \
    R_FORMAT_to_string((fmt), (max), (str))

#define R_CERT_NAME_INFO_TYPE            1

#define R_CERT_NAME_INFO_R_CERT_CTX      2

#define R_CERT_NAME_INFO_ENTRY_COUNT    10

#define R_CERT_NAME_INFO_ENTRY          11

#define R_CERT_NAME_INFO_HASH           80

#define R_CERT_NAME_INFO_STRING_LENGTH  81

#define R_CERT_NAME_ENTRY_INFO_TYPE     1

#define R_CERT_NAME_ENTRY_INFO_DATA     2

#define R_CERT_NAME_ENTRY_INFO_DEPTH   10

#define R_CERT_NAME_ENTRY_TYPE_COMMON_NAME          NID_commonName

#define R_CERT_NAME_ENTRY_TYPE_COUNTRY              NID_countryName

#define R_CERT_NAME_ENTRY_TYPE_LOCALITY             NID_localityName

#define R_CERT_NAME_ENTRY_TYPE_STREET               NID_street

#define R_CERT_NAME_ENTRY_TYPE_STATE_PROVINCE       NID_stateOrProvinceName

#define R_CERT_NAME_ENTRY_TYPE_ORGANIZATION         NID_organizationName

#define R_CERT_NAME_ENTRY_TYPE_ORGANIZATIONAL_UNIT  NID_organizationalUnitName

#define R_CERT_NAME_ENTRY_TYPE_GIVEN_NAME           NID_givenName

#define R_CERT_NAME_ENTRY_TYPE_SURNAME              NID_surname

#define R_CERT_NAME_ENTRY_TYPE_INITIALS             NID_initials

#define R_CERT_NAME_ENTRY_TYPE_UNIQUE_ID            NID_uniqueIdentifier

#define R_CERT_NAME_ENTRY_TYPE_SERIAL_NUMBER        NID_serialNumber

#define R_CERT_NAME_ENTRY_TYPE_TITLE                NID_title

#define R_CERT_NAME_ENTRY_TYPE_DESCRIPTION          NID_description

#define R_CERT_NAME_ENTRY_TYPE_EMAIL_ADDRESS        NID_pkcs9_emailAddress

#define R_CERT_NAME_ENTRY_TYPE_DOMAIN_COMPONENT     NID_domainComponent

#define R_CERT_NAME_ENTRY_TYPE_GENERATION_QUALIFIER NID_generationQualifier

#define R_CERT_NAME_ENTRY_TYPE_DN_QUALIFIER         NID_dnQualifier

#define R_CERT_NAME_ENTRY_TYPE_USER_ID              NID_userID

/*
 * @defgroup CERT_SECTION Certificate Sections
 * This section outlines the sections of the method table that group
 * certificate handling functionality. R_CERT_METHOD_merge() can be
 * used to combine sections.
 * @ingroup CERT_IDENTIFIER
 * @{
 */

/* Sections are parts of an R_CERT implementation which are optional to
 * provide - R_CERT_METHOD_merge can be used to combine sections of two
 * implementation
 */
#define R_CERT_SECTION_CRYPTO      0x0001

#define R_CERT_SECTION_STORE       0x0002

#define R_CERT_SECTION_NAME        0x0004

#define R_CERT_SECTION_BIO         0x0008

/*
 * @}
 */

/* Time related definitions */
#define R_CERT_TIME_STRING_LENGTH      20

/* Certificate Currency states */
#define R_CERT_TIME_NOT_YET_CURRENT     1

#define R_CERT_TIME_CURRENT             2

#define R_CERT_TIME_EXPIRED             3

/* Defines to check if a keyUsage extension is set */
#define R_CERT_KEY_USAGE_DIGITAL_SIGNATURE   0x0080

#define R_CERT_KEY_USAGE_NON_REPUDIATION     0x0040

#define R_CERT_KEY_USAGE_KEY_ENCIPHERMENT    0x0020

#define R_CERT_KEY_USAGE_DATA_ENCIPHERMENT   0x0010

#define R_CERT_KEY_USAGE_KEY_AGREEMENT       0x0008

#define R_CERT_KEY_USAGE_KEY_CERT_SIGN       0x0004

#define R_CERT_KEY_USAGE_CRL_SIGN            0x0002

#define R_CERT_KEY_USAGE_ENCIPHER_ONLY       0x0001

#define R_CERT_KEY_USAGE_DECIPHER_ONLY       0x8000

#define R_CERT_AIA_LOCATION_TYPE_DIR_NAME    0x00

#define R_CERT_AIA_LOCATION_TYPE_RFC822NAME  0x01

#define R_CERT_AIA_LOCATION_TYPE_URI         0x02

#define R_CERT_CHECK_FLAG_VERSION            0x1000

#define R_CERT_CHECK_FLAG_EXTENSIONS         0x2000

#define R_CERT_CHECK_FLAG_ALL                0xF000

/*
 * @defgroup CERT_NAME_STRING_FORMAT Certificate Name String Formats
 * This section details the different string formats that a certificate name
 * can be encoded in.
 * @{
 */

/* The default string format for the certificate type. */
#define R_CERT_NAME_STRING_FORMAT_DEFAULT       1

/*
 * The MIDLET string format as defined in the Java Specification Request (JSR)
 * 118 for a Mobile Information Device (MID).
 */
#define R_CERT_NAME_STRING_FORMAT_MIDLET        2

/*
 * @}
 */

typedef unsigned int R_CERT_CTRL;

#define R_CERT_CTRL_INC_REFERENCE            1

/*
 * Exported types
 */

/*
 * there are opaque data types for those things for which can
 * switch the implementation routines - hence they don't really have
 * a known type as this is able to be changed at runtime
 *
 */
#ifndef HEADER_COMMON_R_CERT_TYPEDEF_DEF
#define HEADER_COMMON_R_CERT_TYPEDEF_DEF

typedef struct r_cert_st                 R_CERT;
#endif /* HEADER_COMMON_R_CERT_TYPEDEF_DEF */

typedef struct r_cert_items_st           R_CERT_ITEMS;

typedef struct r_cert_name_st            R_CERT_NAME;

typedef struct r_cert_name_entry_st      R_CERT_NAME_ENTRY;

/* there is a context which holds a method and other things that are needed
 * for the runtime glue between routines
 */
#ifndef HEADER_COMMON_R_CERT_CTX_TYPEDEF_DEF
#define HEADER_COMMON_R_CERT_CTX_TYPEDEF_DEF

typedef struct r_cert_ctx_st R_CERT_CTX;
#endif /* HEADER_COMMON_R_CERT_CTX_TYPEDEF_DEF */

typedef int R_CERT_TYPE;

typedef int R_CERT_CTX_INFO;

typedef int R_CERT_INFO;

typedef int R_CERT_NAME_INFO;

typedef int R_CERT_NAME_TYPE;

typedef int R_CERT_NAME_ENTRY_INFO;

#ifndef HEADER_COMMON_R_CERT_NAME_ENTRY_TYPEDEF_DEF
#define HEADER_COMMON_R_CERT_NAME_ENTRY_TYPEDEF_DEF

typedef int R_CERT_NAME_ENTRY_TYPE;
#endif /* HEADER_COMMON_R_CERT_NAME_ENTRY_TYPEDEF_DEF */

typedef int R_CERT_TIME_VALIDITY;

#ifndef HEADER_COMMON_R_PKEY_TYPEDEF_DEF
#define HEADER_COMMON_R_PKEY_TYPEDEF_DEF

typedef void R_PKEY;
#endif /* HEADER_COMMON_R_PKEY_TYPEDEF_DEF */

#ifndef HEADER_COMMON_R_PKEY_CTX_TYPEDEF_DEF
#define HEADER_COMMON_R_PKEY_CTX_TYPEDEF_DEF

typedef struct r_cert_ctx_st R_PKEY_CTX;
#endif /* HEADER_COMMON_R_PKEY_CTX_TYPEDEF_DEF */

/* there is a method table (which encapsulates the functions that implement
 * the handling of all certificate related functions for a particular type
 * of certificate)
 */
#ifndef HEADER_COMMON_R_CERT_METHOD_TYPEDEF_DEF
#define HEADER_COMMON_R_CERT_METHOD_TYPEDEF_DEF

typedef struct r_cert_method_st R_CERT_METHOD;
typedef struct r_cert_name_funcs_st R_NAME_METHOD;
#endif /* HEADER_COMMON_R_CERT_METHOD_TYPEDEF_DEF */


/*
 * Prints certificate details.
 *
 * @param   bio        [In]  The #BIO to which the output is printed.
 * @param   cert       [In]  The certificate to print.
 * @param   format     [In]  The format of the output data.
 * @param   format_arg [In]  The format argument.
 *
 * @see     R_CERT_get_print_func().
 */
#ifndef NO_BIO
typedef int  R_CDECL R_CERT_PRINT_FUNC_T(BIO *bio, R_CERT *cert,
    int format, char *format_arg);
#else /* !NO_BIO */
typedef int  R_CDECL R_CERT_PRINT_FUNC_T(void *bio, R_CERT *cert,
    int format, char *format_arg);
#endif /* NO_BIO */

/*
 * Exported functions
 */


#if defined(Rm_CERT_TABLE) || defined (Rm_CERT_DIRECT)

/* Include the extension header when building a small application */
#include "rx_cert.h"

#endif /* defined(Rm_CERT_TABLE) && defined(Rm_CERT_DIRECT) */

#ifndef Rm_CERT_DIRECT

int R_CDECL R_CERT_CTX_new(R_LIB_CTX *lib_ctx, R_RES_FLAG flag, R_CERT_TYPE certtype,
    R_CERT_CTX **cert_ctx);

#endif /* !Rm_CERT_DIRECT */

#if !defined(Rm_CERT_TABLE) && !defined(Rm_CERT_DIRECT)

int R_CDECL R_CERT_CTX_free(R_CERT_CTX *cert_ctx);

int R_CDECL R_CERT_CTX_get_info(R_CERT_CTX *cert_ctx, int info_id, void *value);
int R_CDECL R_CERT_CTX_set_info(R_CERT_CTX *cert_ctx, int info_id, void *value);

int R_CDECL R_CERT_new(R_CERT_CTX *cert_ctx, R_CERT_TYPE type, R_CERT **cert);
int R_CDECL R_CERT_free(R_CERT *cert);

int R_CDECL R_CERT_from_binary(R_CERT_CTX *cert_ctx, R_FLAG_SHARE flag,
    R_CERT_TYPE type, unsigned int max_buf_len, const unsigned char *buf,
    unsigned int *consumed_len, R_CERT **cert);

int R_CDECL R_CERT_to_binary(R_CERT *cert, unsigned int max_buf_len, unsigned char *buf,
    unsigned int *outlen);

#define R_CERT_reference_inc(cert)      R_CERT_inc_reference(cert)

int R_CDECL R_CERT_inc_reference(R_CERT *cert);
int R_CDECL R_CERT_dup(R_CERT *cert, R_FLAG_SHARE flag, R_CERT **dup);
int R_CDECL R_CERT_time_to_R_TIME(R_CERT *cert, R_TITEM *time_data, R_TIME *r_time);

/*
 * the get_*_info functions return references to the underlying binary
 * data for use by those routines that do not need to pull apart the
 * certificates in order to work with them and can simply extract the
 * mandatory pieces to work with
 */
int R_CDECL R_CERT_get_info(R_CERT *cert, R_CERT_INFO info_id, void *value);
int R_CDECL R_CERT_set_info(R_CERT *cert, R_CERT_INFO info_id, void *value);

/* Public key functions */
int R_CDECL R_CERT_public_key_to_R_PKEY(R_CERT *cert, R_FLAG_SHARE flag,
    R_PKEY **pkey);

/* Crypto-related functions */
int R_CDECL R_CERT_sign(R_CERT *cert, R_PKEY *pkey, int sig_type);
int R_CDECL R_CERT_verify(R_CERT *cert, R_PKEY *pkey, int *verified);
#endif /* !defined(Rm_CERT_TABLE) && !defined(Rm_CERT_DIRECT) */

#ifndef Rm_CERT_DIRECT

#ifndef NO_BIO
int R_CDECL R_CERT_print(R_CERT *cert, R_FORMAT format, char *format_arg, BIO *bio);
#endif

#endif /* !Rm_CERT_DIRECT */

int R_CDECL R_CERT_compare_cb(R_CERT *cert1, R_CERT *cert2);
int R_CDECL R_CERT_is_equal(R_CERT *cert1, R_CERT *cert2);

int R_CDECL R_CERT_is_info_present(R_CERT *cert, R_CERT_INFO info_id);
int R_CDECL R_CERT_is_info_critical(R_CERT *cert, R_CERT_INFO info_id);

int R_CDECL R_CERT_subject_name_compare_cb(R_CERT *cert1, R_CERT *cert2);
int R_CDECL R_CERT_subject_name_is_equal(R_CERT *cert1, R_CERT *cert2);

int R_CDECL R_CERT_subject_name_to_string(R_CERT *cert, unsigned int max_str_len,
    char *str);

int R_CDECL R_CERT_issuer_name_to_string(R_CERT *cert, unsigned int max_str_len,
    char *str);

int R_CDECL R_CERT_not_after_to_R_TIME(R_CERT *cert, R_TIME *not_after_time);
int R_CDECL R_CERT_not_after_from_R_TIME(R_CERT *cert, R_TIME *not_after_time);

int R_CDECL R_CERT_not_before_to_R_TIME(R_CERT *cert, R_TIME *not_before_time);
int R_CDECL R_CERT_not_before_from_R_TIME(R_CERT *cert, R_TIME *not_before_time);

int R_CDECL R_CERT_not_after_to_binary(R_CERT *cert, unsigned int max_buf_len,
    unsigned char *buf, unsigned int *out_len);

int R_CDECL R_CERT_not_before_to_binary(R_CERT *cert, unsigned int max_buf_len,
    unsigned char *buf, unsigned int *out_len);

int R_CDECL R_CERT_not_after_to_string(R_CERT *cert, unsigned int max_buf_len,
    char *str);
int R_CDECL R_CERT_not_before_to_string(R_CERT *cert, unsigned int max_buf_len,
    char *str);

#ifndef NO_BIO
int R_CDECL R_CERT_read(R_CERT_CTX *cert_ctx, BIO *bio, R_CERT_TYPE type,
    R_FORMAT format, R_CERT **cert);
#endif /* !NO_BIO */

int R_CDECL R_CERT_read_file(R_CERT_CTX *cert_ctx, char *filename, R_CERT_TYPE type,
    R_FORMAT format, R_CERT **cert);

#ifndef NO_BIO
int R_CDECL R_CERT_write(R_CERT *cert, BIO *bio, R_FORMAT format, void *format_arg);
#endif /* NO_BIO */

int R_CDECL R_CERT_write_file(R_CERT *cert, char *filename, R_FORMAT format,
    void *format_arg);

int R_CDECL R_CERT_TYPE_from_string(char *str, R_CERT_TYPE *type);
int R_CDECL R_CERT_TYPE_to_string(R_CERT_TYPE type, unsigned int max_str_len,
    char *str);
int R_CDECL R_CERT_TYPE_to_PEM_header(R_CERT_TYPE type, unsigned int max_str_len,
    char *str);

int R_CDECL R_CERT_fingerprint(R_CERT *cert, int md_type, unsigned int max_buf_len,
    unsigned char *buf, unsigned int *out_len);
int R_CDECL R_CERT_is_matching_private_key(R_CERT *cert, R_PKEY *pkey);

int R_CDECL R_CERT_digest(R_CERT *cert, R_CERT_INFO part, int md_type,
    unsigned int max_buf_len, unsigned char *out_buf, unsigned int *out_len);
int R_CDECL R_CERT_time_validity(R_CERT *cert, int *validity);

int R_CDECL R_CERT_issuer_name_to_R_CERT_NAME(R_CERT *cert, R_FLAG_SHARE flag,
    R_CERT_NAME **issuer);
int R_CDECL R_CERT_subject_name_to_R_CERT_NAME(R_CERT *cert, R_FLAG_SHARE flag,
    R_CERT_NAME **subject);

int R_CDECL R_CERT_check(R_CERT *cert, unsigned int check_flag);

#if !defined(Rm_CERT_TABLE) && !defined(Rm_CERT_DIRECT)

int R_CDECL R_CERT_NAME_new(R_CERT_CTX *cert_ctx, R_CERT_NAME **name);
int R_CDECL R_CERT_NAME_free(R_CERT_NAME *name);
int R_CDECL R_CERT_NAME_dup(R_CERT_NAME *name, R_FLAG_SHARE flag,
    R_CERT_NAME **dup_name);

int R_CDECL R_CERT_NAME_from_binary(R_CERT_CTX *cert_ctx, R_FLAG_SHARE flag,
    unsigned int max_buf_len, const unsigned char *buf,
    unsigned int *consumed_len, R_CERT_NAME **name);
int R_CDECL R_CERT_NAME_to_binary(R_CERT_NAME *name, unsigned int max_buf_len,
    unsigned char *buf, unsigned int *out_len);

int R_CDECL R_CERT_NAME_to_string(R_CERT_NAME *name, unsigned int max_str_len,
    char *str);
int R_CDECL R_CERT_NAME_to_MID_string(R_CERT_NAME *name, unsigned int max_str_len,
    R_UTF8 str);
int R_CDECL R_CERT_NAME_from_string(R_CERT_CTX *cert_ctx, char *str,
    R_CERT_NAME **name);

int R_CDECL R_CERT_NAME_get_info(R_CERT_NAME *name, R_CERT_NAME_INFO info_id,
    void *value);
int R_CDECL R_CERT_NAME_set_info(R_CERT_NAME *name, R_CERT_NAME_INFO info_id,
    void *value);

#endif /* !defined(Rm_CERT_TABLE) && !defined(Rm_CERT_DIRECT) */


int R_CDECL R_OID_from_R_CERT_NAME_ENTRY_TYPE(R_LIB_CTX *lib_ctx,
                                      R_CERT_NAME_ENTRY_TYPE type,
                                      R_OID **oid);
int R_CDECL R_CERT_NAME_entry_to_R_CERT_NAME_ENTRY(R_CERT_NAME *name,
    R_FLAG_SHARE flag, R_CERT_NAME_ENTRY_TYPE type, int index,
    R_CERT_NAME_ENTRY **entry);

int R_CDECL R_OID_to_R_CERT_NAME_ENTRY_TYPE(R_OID *oid, R_CERT_NAME_ENTRY_TYPE *type);

int R_CDECL R_CERT_NAME_compare_cb(R_CERT_NAME *name1, R_CERT_NAME *name2);
int R_CDECL R_CERT_NAME_is_equal(R_CERT_NAME *name1, R_CERT_NAME *name2);

#if !defined(Rm_CERT_TABLE) && !defined(Rm_CERT_DIRECT)

int R_CDECL R_CERT_NAME_ENTRY_new(R_CERT_NAME *name, R_CERT_NAME_ENTRY **entry);
int R_CDECL R_CERT_NAME_ENTRY_free(R_CERT_NAME_ENTRY *entry);
int R_CDECL R_CERT_NAME_ENTRY_get_info(R_CERT_NAME_ENTRY *entry,
    R_CERT_NAME_ENTRY_INFO info_id, void *value);
int R_CDECL R_CERT_NAME_ENTRY_set_info(R_CERT_NAME_ENTRY *entry,
    R_CERT_NAME_ENTRY_INFO info_id, void *value);

#endif /* !defined(Rm_CERT_TABLE) && !defined(Rm_CERT_DIRECT) */


#ifndef NO_EXT
int R_CDECL R_CERT_test_key_usage(R_CERT *cert, int bits);
int R_CDECL R_CERT_test_extended_key_usage(R_CERT *cert, R_OID **oid,
    unsigned int count);
int R_CDECL R_CERT_key_usage_to_string(R_CERT *cert, char *separator,
    unsigned int max_str_len, char *str);
int R_CDECL R_CERT_extended_key_usage_to_string(R_CERT *cert, char *separator,
    unsigned int max_str_len, char *str);
#endif /* !NO_EXT */

#ifndef NO_EXT
int R_CDECL R_CERT_get_authority_info_access(R_CERT *cert,
    unsigned char *method, unsigned int method_len, R_TITEM *titem);
int R_CDECL R_CERT_authority_info_access_to_string(R_CERT *cert,
    char *separator, unsigned int max_str_len, char *str);
#endif /* !NO_EXT */

#ifndef NO_EXT
int R_CDECL R_CERT_crl_point_get_count(R_CERT *cert, int *count);
int R_CDECL R_CERT_crl_point_get_types(R_CERT *cert, int index,
    int *name_types);
int R_CDECL R_CERT_crl_point_get_info(R_CERT *cert, int index, int name_type,
    void *point, int reasons, void *issuer);
#endif /* !NO_EXT */

#ifdef  __cplusplus
}
#endif
#endif /* HEADER_COMMON_R_CERT_H */

---

Copyright (c) 1999-2005 RSA Security Inc. All rights reserved. 072-001001-2100-001-000 - 2.1