cmp.h 40 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268269270271272273274275276277278279280281282283284285286287288289290291292293294295296297298299300301302303304305306307308309310311312313314315316317318319320321322323324325326327328329330331332333334335336337338339340341342343344345346347348349350351352353354355356357358359360361362363364365366367368369370371372373374375376377378379380381382383384385386387388389390391392393394395396397398399400401402403404405406407408409410411412413414415416417418419420421422423424425426427428429430431432433434435436437438439440441442443444445446447448449450451452453454455456457458459460461462463464465466467468469470471472473474475476477478479480481482483484485486487488489490491492493494495496497498499500501502503504505506507508509510511512513514515516517518519520521522523524525526527528529530531532533534535536537538539540541542543544545546547548549550551552553554555556557558559560561562563564565566567568569570571572573574575576577578579580581582583584585586587588589590591592593594595596597
  1. /*
  2. * WARNING: do not edit!
  3. * Generated by Makefile from include/openssl/cmp.h.in
  4. *
  5. * Copyright 2007-2023 The OpenSSL Project Authors. All Rights Reserved.
  6. * Copyright Nokia 2007-2019
  7. * Copyright Siemens AG 2015-2019
  8. *
  9. * Licensed under the Apache License 2.0 (the "License"). You may not use
  10. * this file except in compliance with the License. You can obtain a copy
  11. * in the file LICENSE in the source distribution or at
  12. * https://www.openssl.org/source/license.html
  13. */
  14. #ifndef OPENSSL_CMP_H
  15. # define OPENSSL_CMP_H
  16. # include <openssl/opensslconf.h>
  17. # ifndef OPENSSL_NO_CMP
  18. # include <openssl/crmf.h>
  19. # include <openssl/cmperr.h>
  20. # include <openssl/cmp_util.h>
  21. # include <openssl/http.h>
  22. /* explicit #includes not strictly needed since implied by the above: */
  23. # include <openssl/types.h>
  24. # include <openssl/safestack.h>
  25. # include <openssl/x509.h>
  26. # include <openssl/x509v3.h>
  27. # ifdef __cplusplus
  28. extern "C" {
  29. # endif
  30. # define OSSL_CMP_PVNO 2
  31. /*-
  32. * PKIFailureInfo ::= BIT STRING {
  33. * -- since we can fail in more than one way!
  34. * -- More codes may be added in the future if/when required.
  35. * badAlg (0),
  36. * -- unrecognized or unsupported Algorithm Identifier
  37. * badMessageCheck (1),
  38. * -- integrity check failed (e.g., signature did not verify)
  39. * badRequest (2),
  40. * -- transaction not permitted or supported
  41. * badTime (3),
  42. * -- messageTime was not sufficiently close to the system time,
  43. * -- as defined by local policy
  44. * badCertId (4),
  45. * -- no certificate could be found matching the provided criteria
  46. * badDataFormat (5),
  47. * -- the data submitted has the wrong format
  48. * wrongAuthority (6),
  49. * -- the authority indicated in the request is different from the
  50. * -- one creating the response token
  51. * incorrectData (7),
  52. * -- the requester's data is incorrect (for notary services)
  53. * missingTimeStamp (8),
  54. * -- when the timestamp is missing but should be there
  55. * -- (by policy)
  56. * badPOP (9),
  57. * -- the proof-of-possession failed
  58. * certRevoked (10),
  59. * -- the certificate has already been revoked
  60. * certConfirmed (11),
  61. * -- the certificate has already been confirmed
  62. * wrongIntegrity (12),
  63. * -- invalid integrity, password based instead of signature or
  64. * -- vice versa
  65. * badRecipientNonce (13),
  66. * -- invalid recipient nonce, either missing or wrong value
  67. * timeNotAvailable (14),
  68. * -- the TSA's time source is not available
  69. * unacceptedPolicy (15),
  70. * -- the requested TSA policy is not supported by the TSA.
  71. * unacceptedExtension (16),
  72. * -- the requested extension is not supported by the TSA.
  73. * addInfoNotAvailable (17),
  74. * -- the additional information requested could not be
  75. * -- understood or is not available
  76. * badSenderNonce (18),
  77. * -- invalid sender nonce, either missing or wrong size
  78. * badCertTemplate (19),
  79. * -- invalid cert. template or missing mandatory information
  80. * signerNotTrusted (20),
  81. * -- signer of the message unknown or not trusted
  82. * transactionIdInUse (21),
  83. * -- the transaction identifier is already in use
  84. * unsupportedVersion (22),
  85. * -- the version of the message is not supported
  86. * notAuthorized (23),
  87. * -- the sender was not authorized to make the preceding
  88. * -- request or perform the preceding action
  89. * systemUnavail (24),
  90. * -- the request cannot be handled due to system unavailability
  91. * systemFailure (25),
  92. * -- the request cannot be handled due to system failure
  93. * duplicateCertReq (26)
  94. * -- certificate cannot be issued because a duplicate
  95. * -- certificate already exists
  96. * }
  97. */
  98. # define OSSL_CMP_PKIFAILUREINFO_badAlg 0
  99. # define OSSL_CMP_PKIFAILUREINFO_badMessageCheck 1
  100. # define OSSL_CMP_PKIFAILUREINFO_badRequest 2
  101. # define OSSL_CMP_PKIFAILUREINFO_badTime 3
  102. # define OSSL_CMP_PKIFAILUREINFO_badCertId 4
  103. # define OSSL_CMP_PKIFAILUREINFO_badDataFormat 5
  104. # define OSSL_CMP_PKIFAILUREINFO_wrongAuthority 6
  105. # define OSSL_CMP_PKIFAILUREINFO_incorrectData 7
  106. # define OSSL_CMP_PKIFAILUREINFO_missingTimeStamp 8
  107. # define OSSL_CMP_PKIFAILUREINFO_badPOP 9
  108. # define OSSL_CMP_PKIFAILUREINFO_certRevoked 10
  109. # define OSSL_CMP_PKIFAILUREINFO_certConfirmed 11
  110. # define OSSL_CMP_PKIFAILUREINFO_wrongIntegrity 12
  111. # define OSSL_CMP_PKIFAILUREINFO_badRecipientNonce 13
  112. # define OSSL_CMP_PKIFAILUREINFO_timeNotAvailable 14
  113. # define OSSL_CMP_PKIFAILUREINFO_unacceptedPolicy 15
  114. # define OSSL_CMP_PKIFAILUREINFO_unacceptedExtension 16
  115. # define OSSL_CMP_PKIFAILUREINFO_addInfoNotAvailable 17
  116. # define OSSL_CMP_PKIFAILUREINFO_badSenderNonce 18
  117. # define OSSL_CMP_PKIFAILUREINFO_badCertTemplate 19
  118. # define OSSL_CMP_PKIFAILUREINFO_signerNotTrusted 20
  119. # define OSSL_CMP_PKIFAILUREINFO_transactionIdInUse 21
  120. # define OSSL_CMP_PKIFAILUREINFO_unsupportedVersion 22
  121. # define OSSL_CMP_PKIFAILUREINFO_notAuthorized 23
  122. # define OSSL_CMP_PKIFAILUREINFO_systemUnavail 24
  123. # define OSSL_CMP_PKIFAILUREINFO_systemFailure 25
  124. # define OSSL_CMP_PKIFAILUREINFO_duplicateCertReq 26
  125. # define OSSL_CMP_PKIFAILUREINFO_MAX 26
  126. # define OSSL_CMP_PKIFAILUREINFO_MAX_BIT_PATTERN \
  127. ((1 << (OSSL_CMP_PKIFAILUREINFO_MAX + 1)) - 1)
  128. # if OSSL_CMP_PKIFAILUREINFO_MAX_BIT_PATTERN > INT_MAX
  129. # error CMP_PKIFAILUREINFO_MAX bit pattern does not fit in type int
  130. # endif
  131. typedef ASN1_BIT_STRING OSSL_CMP_PKIFAILUREINFO;
  132. # define OSSL_CMP_CTX_FAILINFO_badAlg (1 << 0)
  133. # define OSSL_CMP_CTX_FAILINFO_badMessageCheck (1 << 1)
  134. # define OSSL_CMP_CTX_FAILINFO_badRequest (1 << 2)
  135. # define OSSL_CMP_CTX_FAILINFO_badTime (1 << 3)
  136. # define OSSL_CMP_CTX_FAILINFO_badCertId (1 << 4)
  137. # define OSSL_CMP_CTX_FAILINFO_badDataFormat (1 << 5)
  138. # define OSSL_CMP_CTX_FAILINFO_wrongAuthority (1 << 6)
  139. # define OSSL_CMP_CTX_FAILINFO_incorrectData (1 << 7)
  140. # define OSSL_CMP_CTX_FAILINFO_missingTimeStamp (1 << 8)
  141. # define OSSL_CMP_CTX_FAILINFO_badPOP (1 << 9)
  142. # define OSSL_CMP_CTX_FAILINFO_certRevoked (1 << 10)
  143. # define OSSL_CMP_CTX_FAILINFO_certConfirmed (1 << 11)
  144. # define OSSL_CMP_CTX_FAILINFO_wrongIntegrity (1 << 12)
  145. # define OSSL_CMP_CTX_FAILINFO_badRecipientNonce (1 << 13)
  146. # define OSSL_CMP_CTX_FAILINFO_timeNotAvailable (1 << 14)
  147. # define OSSL_CMP_CTX_FAILINFO_unacceptedPolicy (1 << 15)
  148. # define OSSL_CMP_CTX_FAILINFO_unacceptedExtension (1 << 16)
  149. # define OSSL_CMP_CTX_FAILINFO_addInfoNotAvailable (1 << 17)
  150. # define OSSL_CMP_CTX_FAILINFO_badSenderNonce (1 << 18)
  151. # define OSSL_CMP_CTX_FAILINFO_badCertTemplate (1 << 19)
  152. # define OSSL_CMP_CTX_FAILINFO_signerNotTrusted (1 << 20)
  153. # define OSSL_CMP_CTX_FAILINFO_transactionIdInUse (1 << 21)
  154. # define OSSL_CMP_CTX_FAILINFO_unsupportedVersion (1 << 22)
  155. # define OSSL_CMP_CTX_FAILINFO_notAuthorized (1 << 23)
  156. # define OSSL_CMP_CTX_FAILINFO_systemUnavail (1 << 24)
  157. # define OSSL_CMP_CTX_FAILINFO_systemFailure (1 << 25)
  158. # define OSSL_CMP_CTX_FAILINFO_duplicateCertReq (1 << 26)
  159. /*-
  160. * PKIStatus ::= INTEGER {
  161. * accepted (0),
  162. * -- you got exactly what you asked for
  163. * grantedWithMods (1),
  164. * -- you got something like what you asked for; the
  165. * -- requester is responsible for ascertaining the differences
  166. * rejection (2),
  167. * -- you don't get it, more information elsewhere in the message
  168. * waiting (3),
  169. * -- the request body part has not yet been processed; expect to
  170. * -- hear more later (note: proper handling of this status
  171. * -- response MAY use the polling req/rep PKIMessages specified
  172. * -- in Section 5.3.22; alternatively, polling in the underlying
  173. * -- transport layer MAY have some utility in this regard)
  174. * revocationWarning (4),
  175. * -- this message contains a warning that a revocation is
  176. * -- imminent
  177. * revocationNotification (5),
  178. * -- notification that a revocation has occurred
  179. * keyUpdateWarning (6)
  180. * -- update already done for the oldCertId specified in
  181. * -- CertReqMsg
  182. * }
  183. */
  184. # define OSSL_CMP_PKISTATUS_request -3
  185. # define OSSL_CMP_PKISTATUS_trans -2
  186. # define OSSL_CMP_PKISTATUS_unspecified -1
  187. # define OSSL_CMP_PKISTATUS_accepted 0
  188. # define OSSL_CMP_PKISTATUS_grantedWithMods 1
  189. # define OSSL_CMP_PKISTATUS_rejection 2
  190. # define OSSL_CMP_PKISTATUS_waiting 3
  191. # define OSSL_CMP_PKISTATUS_revocationWarning 4
  192. # define OSSL_CMP_PKISTATUS_revocationNotification 5
  193. # define OSSL_CMP_PKISTATUS_keyUpdateWarning 6
  194. typedef ASN1_INTEGER OSSL_CMP_PKISTATUS;
  195. DECLARE_ASN1_ITEM(OSSL_CMP_PKISTATUS)
  196. # define OSSL_CMP_CERTORENCCERT_CERTIFICATE 0
  197. # define OSSL_CMP_CERTORENCCERT_ENCRYPTEDCERT 1
  198. /* data type declarations */
  199. typedef struct ossl_cmp_ctx_st OSSL_CMP_CTX;
  200. typedef struct ossl_cmp_pkiheader_st OSSL_CMP_PKIHEADER;
  201. DECLARE_ASN1_FUNCTIONS(OSSL_CMP_PKIHEADER)
  202. typedef struct ossl_cmp_msg_st OSSL_CMP_MSG;
  203. DECLARE_ASN1_DUP_FUNCTION(OSSL_CMP_MSG)
  204. DECLARE_ASN1_ENCODE_FUNCTIONS(OSSL_CMP_MSG, OSSL_CMP_MSG, OSSL_CMP_MSG)
  205. typedef struct ossl_cmp_certstatus_st OSSL_CMP_CERTSTATUS;
  206. SKM_DEFINE_STACK_OF_INTERNAL(OSSL_CMP_CERTSTATUS, OSSL_CMP_CERTSTATUS, OSSL_CMP_CERTSTATUS)
  207. #define sk_OSSL_CMP_CERTSTATUS_num(sk) OPENSSL_sk_num(ossl_check_const_OSSL_CMP_CERTSTATUS_sk_type(sk))
  208. #define sk_OSSL_CMP_CERTSTATUS_value(sk, idx) ((OSSL_CMP_CERTSTATUS *)OPENSSL_sk_value(ossl_check_const_OSSL_CMP_CERTSTATUS_sk_type(sk), (idx)))
  209. #define sk_OSSL_CMP_CERTSTATUS_new(cmp) ((STACK_OF(OSSL_CMP_CERTSTATUS) *)OPENSSL_sk_new(ossl_check_OSSL_CMP_CERTSTATUS_compfunc_type(cmp)))
  210. #define sk_OSSL_CMP_CERTSTATUS_new_null() ((STACK_OF(OSSL_CMP_CERTSTATUS) *)OPENSSL_sk_new_null())
  211. #define sk_OSSL_CMP_CERTSTATUS_new_reserve(cmp, n) ((STACK_OF(OSSL_CMP_CERTSTATUS) *)OPENSSL_sk_new_reserve(ossl_check_OSSL_CMP_CERTSTATUS_compfunc_type(cmp), (n)))
  212. #define sk_OSSL_CMP_CERTSTATUS_reserve(sk, n) OPENSSL_sk_reserve(ossl_check_OSSL_CMP_CERTSTATUS_sk_type(sk), (n))
  213. #define sk_OSSL_CMP_CERTSTATUS_free(sk) OPENSSL_sk_free(ossl_check_OSSL_CMP_CERTSTATUS_sk_type(sk))
  214. #define sk_OSSL_CMP_CERTSTATUS_zero(sk) OPENSSL_sk_zero(ossl_check_OSSL_CMP_CERTSTATUS_sk_type(sk))
  215. #define sk_OSSL_CMP_CERTSTATUS_delete(sk, i) ((OSSL_CMP_CERTSTATUS *)OPENSSL_sk_delete(ossl_check_OSSL_CMP_CERTSTATUS_sk_type(sk), (i)))
  216. #define sk_OSSL_CMP_CERTSTATUS_delete_ptr(sk, ptr) ((OSSL_CMP_CERTSTATUS *)OPENSSL_sk_delete_ptr(ossl_check_OSSL_CMP_CERTSTATUS_sk_type(sk), ossl_check_OSSL_CMP_CERTSTATUS_type(ptr)))
  217. #define sk_OSSL_CMP_CERTSTATUS_push(sk, ptr) OPENSSL_sk_push(ossl_check_OSSL_CMP_CERTSTATUS_sk_type(sk), ossl_check_OSSL_CMP_CERTSTATUS_type(ptr))
  218. #define sk_OSSL_CMP_CERTSTATUS_unshift(sk, ptr) OPENSSL_sk_unshift(ossl_check_OSSL_CMP_CERTSTATUS_sk_type(sk), ossl_check_OSSL_CMP_CERTSTATUS_type(ptr))
  219. #define sk_OSSL_CMP_CERTSTATUS_pop(sk) ((OSSL_CMP_CERTSTATUS *)OPENSSL_sk_pop(ossl_check_OSSL_CMP_CERTSTATUS_sk_type(sk)))
  220. #define sk_OSSL_CMP_CERTSTATUS_shift(sk) ((OSSL_CMP_CERTSTATUS *)OPENSSL_sk_shift(ossl_check_OSSL_CMP_CERTSTATUS_sk_type(sk)))
  221. #define sk_OSSL_CMP_CERTSTATUS_pop_free(sk, freefunc) OPENSSL_sk_pop_free(ossl_check_OSSL_CMP_CERTSTATUS_sk_type(sk),ossl_check_OSSL_CMP_CERTSTATUS_freefunc_type(freefunc))
  222. #define sk_OSSL_CMP_CERTSTATUS_insert(sk, ptr, idx) OPENSSL_sk_insert(ossl_check_OSSL_CMP_CERTSTATUS_sk_type(sk), ossl_check_OSSL_CMP_CERTSTATUS_type(ptr), (idx))
  223. #define sk_OSSL_CMP_CERTSTATUS_set(sk, idx, ptr) ((OSSL_CMP_CERTSTATUS *)OPENSSL_sk_set(ossl_check_OSSL_CMP_CERTSTATUS_sk_type(sk), (idx), ossl_check_OSSL_CMP_CERTSTATUS_type(ptr)))
  224. #define sk_OSSL_CMP_CERTSTATUS_find(sk, ptr) OPENSSL_sk_find(ossl_check_OSSL_CMP_CERTSTATUS_sk_type(sk), ossl_check_OSSL_CMP_CERTSTATUS_type(ptr))
  225. #define sk_OSSL_CMP_CERTSTATUS_find_ex(sk, ptr) OPENSSL_sk_find_ex(ossl_check_OSSL_CMP_CERTSTATUS_sk_type(sk), ossl_check_OSSL_CMP_CERTSTATUS_type(ptr))
  226. #define sk_OSSL_CMP_CERTSTATUS_find_all(sk, ptr, pnum) OPENSSL_sk_find_all(ossl_check_OSSL_CMP_CERTSTATUS_sk_type(sk), ossl_check_OSSL_CMP_CERTSTATUS_type(ptr), pnum)
  227. #define sk_OSSL_CMP_CERTSTATUS_sort(sk) OPENSSL_sk_sort(ossl_check_OSSL_CMP_CERTSTATUS_sk_type(sk))
  228. #define sk_OSSL_CMP_CERTSTATUS_is_sorted(sk) OPENSSL_sk_is_sorted(ossl_check_const_OSSL_CMP_CERTSTATUS_sk_type(sk))
  229. #define sk_OSSL_CMP_CERTSTATUS_dup(sk) ((STACK_OF(OSSL_CMP_CERTSTATUS) *)OPENSSL_sk_dup(ossl_check_const_OSSL_CMP_CERTSTATUS_sk_type(sk)))
  230. #define sk_OSSL_CMP_CERTSTATUS_deep_copy(sk, copyfunc, freefunc) ((STACK_OF(OSSL_CMP_CERTSTATUS) *)OPENSSL_sk_deep_copy(ossl_check_const_OSSL_CMP_CERTSTATUS_sk_type(sk), ossl_check_OSSL_CMP_CERTSTATUS_copyfunc_type(copyfunc), ossl_check_OSSL_CMP_CERTSTATUS_freefunc_type(freefunc)))
  231. #define sk_OSSL_CMP_CERTSTATUS_set_cmp_func(sk, cmp) ((sk_OSSL_CMP_CERTSTATUS_compfunc)OPENSSL_sk_set_cmp_func(ossl_check_OSSL_CMP_CERTSTATUS_sk_type(sk), ossl_check_OSSL_CMP_CERTSTATUS_compfunc_type(cmp)))
  232. typedef struct ossl_cmp_itav_st OSSL_CMP_ITAV;
  233. DECLARE_ASN1_DUP_FUNCTION(OSSL_CMP_ITAV)
  234. SKM_DEFINE_STACK_OF_INTERNAL(OSSL_CMP_ITAV, OSSL_CMP_ITAV, OSSL_CMP_ITAV)
  235. #define sk_OSSL_CMP_ITAV_num(sk) OPENSSL_sk_num(ossl_check_const_OSSL_CMP_ITAV_sk_type(sk))
  236. #define sk_OSSL_CMP_ITAV_value(sk, idx) ((OSSL_CMP_ITAV *)OPENSSL_sk_value(ossl_check_const_OSSL_CMP_ITAV_sk_type(sk), (idx)))
  237. #define sk_OSSL_CMP_ITAV_new(cmp) ((STACK_OF(OSSL_CMP_ITAV) *)OPENSSL_sk_new(ossl_check_OSSL_CMP_ITAV_compfunc_type(cmp)))
  238. #define sk_OSSL_CMP_ITAV_new_null() ((STACK_OF(OSSL_CMP_ITAV) *)OPENSSL_sk_new_null())
  239. #define sk_OSSL_CMP_ITAV_new_reserve(cmp, n) ((STACK_OF(OSSL_CMP_ITAV) *)OPENSSL_sk_new_reserve(ossl_check_OSSL_CMP_ITAV_compfunc_type(cmp), (n)))
  240. #define sk_OSSL_CMP_ITAV_reserve(sk, n) OPENSSL_sk_reserve(ossl_check_OSSL_CMP_ITAV_sk_type(sk), (n))
  241. #define sk_OSSL_CMP_ITAV_free(sk) OPENSSL_sk_free(ossl_check_OSSL_CMP_ITAV_sk_type(sk))
  242. #define sk_OSSL_CMP_ITAV_zero(sk) OPENSSL_sk_zero(ossl_check_OSSL_CMP_ITAV_sk_type(sk))
  243. #define sk_OSSL_CMP_ITAV_delete(sk, i) ((OSSL_CMP_ITAV *)OPENSSL_sk_delete(ossl_check_OSSL_CMP_ITAV_sk_type(sk), (i)))
  244. #define sk_OSSL_CMP_ITAV_delete_ptr(sk, ptr) ((OSSL_CMP_ITAV *)OPENSSL_sk_delete_ptr(ossl_check_OSSL_CMP_ITAV_sk_type(sk), ossl_check_OSSL_CMP_ITAV_type(ptr)))
  245. #define sk_OSSL_CMP_ITAV_push(sk, ptr) OPENSSL_sk_push(ossl_check_OSSL_CMP_ITAV_sk_type(sk), ossl_check_OSSL_CMP_ITAV_type(ptr))
  246. #define sk_OSSL_CMP_ITAV_unshift(sk, ptr) OPENSSL_sk_unshift(ossl_check_OSSL_CMP_ITAV_sk_type(sk), ossl_check_OSSL_CMP_ITAV_type(ptr))
  247. #define sk_OSSL_CMP_ITAV_pop(sk) ((OSSL_CMP_ITAV *)OPENSSL_sk_pop(ossl_check_OSSL_CMP_ITAV_sk_type(sk)))
  248. #define sk_OSSL_CMP_ITAV_shift(sk) ((OSSL_CMP_ITAV *)OPENSSL_sk_shift(ossl_check_OSSL_CMP_ITAV_sk_type(sk)))
  249. #define sk_OSSL_CMP_ITAV_pop_free(sk, freefunc) OPENSSL_sk_pop_free(ossl_check_OSSL_CMP_ITAV_sk_type(sk),ossl_check_OSSL_CMP_ITAV_freefunc_type(freefunc))
  250. #define sk_OSSL_CMP_ITAV_insert(sk, ptr, idx) OPENSSL_sk_insert(ossl_check_OSSL_CMP_ITAV_sk_type(sk), ossl_check_OSSL_CMP_ITAV_type(ptr), (idx))
  251. #define sk_OSSL_CMP_ITAV_set(sk, idx, ptr) ((OSSL_CMP_ITAV *)OPENSSL_sk_set(ossl_check_OSSL_CMP_ITAV_sk_type(sk), (idx), ossl_check_OSSL_CMP_ITAV_type(ptr)))
  252. #define sk_OSSL_CMP_ITAV_find(sk, ptr) OPENSSL_sk_find(ossl_check_OSSL_CMP_ITAV_sk_type(sk), ossl_check_OSSL_CMP_ITAV_type(ptr))
  253. #define sk_OSSL_CMP_ITAV_find_ex(sk, ptr) OPENSSL_sk_find_ex(ossl_check_OSSL_CMP_ITAV_sk_type(sk), ossl_check_OSSL_CMP_ITAV_type(ptr))
  254. #define sk_OSSL_CMP_ITAV_find_all(sk, ptr, pnum) OPENSSL_sk_find_all(ossl_check_OSSL_CMP_ITAV_sk_type(sk), ossl_check_OSSL_CMP_ITAV_type(ptr), pnum)
  255. #define sk_OSSL_CMP_ITAV_sort(sk) OPENSSL_sk_sort(ossl_check_OSSL_CMP_ITAV_sk_type(sk))
  256. #define sk_OSSL_CMP_ITAV_is_sorted(sk) OPENSSL_sk_is_sorted(ossl_check_const_OSSL_CMP_ITAV_sk_type(sk))
  257. #define sk_OSSL_CMP_ITAV_dup(sk) ((STACK_OF(OSSL_CMP_ITAV) *)OPENSSL_sk_dup(ossl_check_const_OSSL_CMP_ITAV_sk_type(sk)))
  258. #define sk_OSSL_CMP_ITAV_deep_copy(sk, copyfunc, freefunc) ((STACK_OF(OSSL_CMP_ITAV) *)OPENSSL_sk_deep_copy(ossl_check_const_OSSL_CMP_ITAV_sk_type(sk), ossl_check_OSSL_CMP_ITAV_copyfunc_type(copyfunc), ossl_check_OSSL_CMP_ITAV_freefunc_type(freefunc)))
  259. #define sk_OSSL_CMP_ITAV_set_cmp_func(sk, cmp) ((sk_OSSL_CMP_ITAV_compfunc)OPENSSL_sk_set_cmp_func(ossl_check_OSSL_CMP_ITAV_sk_type(sk), ossl_check_OSSL_CMP_ITAV_compfunc_type(cmp)))
  260. typedef struct ossl_cmp_revrepcontent_st OSSL_CMP_REVREPCONTENT;
  261. typedef struct ossl_cmp_pkisi_st OSSL_CMP_PKISI;
  262. DECLARE_ASN1_FUNCTIONS(OSSL_CMP_PKISI)
  263. DECLARE_ASN1_DUP_FUNCTION(OSSL_CMP_PKISI)
  264. SKM_DEFINE_STACK_OF_INTERNAL(OSSL_CMP_PKISI, OSSL_CMP_PKISI, OSSL_CMP_PKISI)
  265. #define sk_OSSL_CMP_PKISI_num(sk) OPENSSL_sk_num(ossl_check_const_OSSL_CMP_PKISI_sk_type(sk))
  266. #define sk_OSSL_CMP_PKISI_value(sk, idx) ((OSSL_CMP_PKISI *)OPENSSL_sk_value(ossl_check_const_OSSL_CMP_PKISI_sk_type(sk), (idx)))
  267. #define sk_OSSL_CMP_PKISI_new(cmp) ((STACK_OF(OSSL_CMP_PKISI) *)OPENSSL_sk_new(ossl_check_OSSL_CMP_PKISI_compfunc_type(cmp)))
  268. #define sk_OSSL_CMP_PKISI_new_null() ((STACK_OF(OSSL_CMP_PKISI) *)OPENSSL_sk_new_null())
  269. #define sk_OSSL_CMP_PKISI_new_reserve(cmp, n) ((STACK_OF(OSSL_CMP_PKISI) *)OPENSSL_sk_new_reserve(ossl_check_OSSL_CMP_PKISI_compfunc_type(cmp), (n)))
  270. #define sk_OSSL_CMP_PKISI_reserve(sk, n) OPENSSL_sk_reserve(ossl_check_OSSL_CMP_PKISI_sk_type(sk), (n))
  271. #define sk_OSSL_CMP_PKISI_free(sk) OPENSSL_sk_free(ossl_check_OSSL_CMP_PKISI_sk_type(sk))
  272. #define sk_OSSL_CMP_PKISI_zero(sk) OPENSSL_sk_zero(ossl_check_OSSL_CMP_PKISI_sk_type(sk))
  273. #define sk_OSSL_CMP_PKISI_delete(sk, i) ((OSSL_CMP_PKISI *)OPENSSL_sk_delete(ossl_check_OSSL_CMP_PKISI_sk_type(sk), (i)))
  274. #define sk_OSSL_CMP_PKISI_delete_ptr(sk, ptr) ((OSSL_CMP_PKISI *)OPENSSL_sk_delete_ptr(ossl_check_OSSL_CMP_PKISI_sk_type(sk), ossl_check_OSSL_CMP_PKISI_type(ptr)))
  275. #define sk_OSSL_CMP_PKISI_push(sk, ptr) OPENSSL_sk_push(ossl_check_OSSL_CMP_PKISI_sk_type(sk), ossl_check_OSSL_CMP_PKISI_type(ptr))
  276. #define sk_OSSL_CMP_PKISI_unshift(sk, ptr) OPENSSL_sk_unshift(ossl_check_OSSL_CMP_PKISI_sk_type(sk), ossl_check_OSSL_CMP_PKISI_type(ptr))
  277. #define sk_OSSL_CMP_PKISI_pop(sk) ((OSSL_CMP_PKISI *)OPENSSL_sk_pop(ossl_check_OSSL_CMP_PKISI_sk_type(sk)))
  278. #define sk_OSSL_CMP_PKISI_shift(sk) ((OSSL_CMP_PKISI *)OPENSSL_sk_shift(ossl_check_OSSL_CMP_PKISI_sk_type(sk)))
  279. #define sk_OSSL_CMP_PKISI_pop_free(sk, freefunc) OPENSSL_sk_pop_free(ossl_check_OSSL_CMP_PKISI_sk_type(sk),ossl_check_OSSL_CMP_PKISI_freefunc_type(freefunc))
  280. #define sk_OSSL_CMP_PKISI_insert(sk, ptr, idx) OPENSSL_sk_insert(ossl_check_OSSL_CMP_PKISI_sk_type(sk), ossl_check_OSSL_CMP_PKISI_type(ptr), (idx))
  281. #define sk_OSSL_CMP_PKISI_set(sk, idx, ptr) ((OSSL_CMP_PKISI *)OPENSSL_sk_set(ossl_check_OSSL_CMP_PKISI_sk_type(sk), (idx), ossl_check_OSSL_CMP_PKISI_type(ptr)))
  282. #define sk_OSSL_CMP_PKISI_find(sk, ptr) OPENSSL_sk_find(ossl_check_OSSL_CMP_PKISI_sk_type(sk), ossl_check_OSSL_CMP_PKISI_type(ptr))
  283. #define sk_OSSL_CMP_PKISI_find_ex(sk, ptr) OPENSSL_sk_find_ex(ossl_check_OSSL_CMP_PKISI_sk_type(sk), ossl_check_OSSL_CMP_PKISI_type(ptr))
  284. #define sk_OSSL_CMP_PKISI_find_all(sk, ptr, pnum) OPENSSL_sk_find_all(ossl_check_OSSL_CMP_PKISI_sk_type(sk), ossl_check_OSSL_CMP_PKISI_type(ptr), pnum)
  285. #define sk_OSSL_CMP_PKISI_sort(sk) OPENSSL_sk_sort(ossl_check_OSSL_CMP_PKISI_sk_type(sk))
  286. #define sk_OSSL_CMP_PKISI_is_sorted(sk) OPENSSL_sk_is_sorted(ossl_check_const_OSSL_CMP_PKISI_sk_type(sk))
  287. #define sk_OSSL_CMP_PKISI_dup(sk) ((STACK_OF(OSSL_CMP_PKISI) *)OPENSSL_sk_dup(ossl_check_const_OSSL_CMP_PKISI_sk_type(sk)))
  288. #define sk_OSSL_CMP_PKISI_deep_copy(sk, copyfunc, freefunc) ((STACK_OF(OSSL_CMP_PKISI) *)OPENSSL_sk_deep_copy(ossl_check_const_OSSL_CMP_PKISI_sk_type(sk), ossl_check_OSSL_CMP_PKISI_copyfunc_type(copyfunc), ossl_check_OSSL_CMP_PKISI_freefunc_type(freefunc)))
  289. #define sk_OSSL_CMP_PKISI_set_cmp_func(sk, cmp) ((sk_OSSL_CMP_PKISI_compfunc)OPENSSL_sk_set_cmp_func(ossl_check_OSSL_CMP_PKISI_sk_type(sk), ossl_check_OSSL_CMP_PKISI_compfunc_type(cmp)))
  290. typedef struct ossl_cmp_certrepmessage_st OSSL_CMP_CERTREPMESSAGE;
  291. SKM_DEFINE_STACK_OF_INTERNAL(OSSL_CMP_CERTREPMESSAGE, OSSL_CMP_CERTREPMESSAGE, OSSL_CMP_CERTREPMESSAGE)
  292. #define sk_OSSL_CMP_CERTREPMESSAGE_num(sk) OPENSSL_sk_num(ossl_check_const_OSSL_CMP_CERTREPMESSAGE_sk_type(sk))
  293. #define sk_OSSL_CMP_CERTREPMESSAGE_value(sk, idx) ((OSSL_CMP_CERTREPMESSAGE *)OPENSSL_sk_value(ossl_check_const_OSSL_CMP_CERTREPMESSAGE_sk_type(sk), (idx)))
  294. #define sk_OSSL_CMP_CERTREPMESSAGE_new(cmp) ((STACK_OF(OSSL_CMP_CERTREPMESSAGE) *)OPENSSL_sk_new(ossl_check_OSSL_CMP_CERTREPMESSAGE_compfunc_type(cmp)))
  295. #define sk_OSSL_CMP_CERTREPMESSAGE_new_null() ((STACK_OF(OSSL_CMP_CERTREPMESSAGE) *)OPENSSL_sk_new_null())
  296. #define sk_OSSL_CMP_CERTREPMESSAGE_new_reserve(cmp, n) ((STACK_OF(OSSL_CMP_CERTREPMESSAGE) *)OPENSSL_sk_new_reserve(ossl_check_OSSL_CMP_CERTREPMESSAGE_compfunc_type(cmp), (n)))
  297. #define sk_OSSL_CMP_CERTREPMESSAGE_reserve(sk, n) OPENSSL_sk_reserve(ossl_check_OSSL_CMP_CERTREPMESSAGE_sk_type(sk), (n))
  298. #define sk_OSSL_CMP_CERTREPMESSAGE_free(sk) OPENSSL_sk_free(ossl_check_OSSL_CMP_CERTREPMESSAGE_sk_type(sk))
  299. #define sk_OSSL_CMP_CERTREPMESSAGE_zero(sk) OPENSSL_sk_zero(ossl_check_OSSL_CMP_CERTREPMESSAGE_sk_type(sk))
  300. #define sk_OSSL_CMP_CERTREPMESSAGE_delete(sk, i) ((OSSL_CMP_CERTREPMESSAGE *)OPENSSL_sk_delete(ossl_check_OSSL_CMP_CERTREPMESSAGE_sk_type(sk), (i)))
  301. #define sk_OSSL_CMP_CERTREPMESSAGE_delete_ptr(sk, ptr) ((OSSL_CMP_CERTREPMESSAGE *)OPENSSL_sk_delete_ptr(ossl_check_OSSL_CMP_CERTREPMESSAGE_sk_type(sk), ossl_check_OSSL_CMP_CERTREPMESSAGE_type(ptr)))
  302. #define sk_OSSL_CMP_CERTREPMESSAGE_push(sk, ptr) OPENSSL_sk_push(ossl_check_OSSL_CMP_CERTREPMESSAGE_sk_type(sk), ossl_check_OSSL_CMP_CERTREPMESSAGE_type(ptr))
  303. #define sk_OSSL_CMP_CERTREPMESSAGE_unshift(sk, ptr) OPENSSL_sk_unshift(ossl_check_OSSL_CMP_CERTREPMESSAGE_sk_type(sk), ossl_check_OSSL_CMP_CERTREPMESSAGE_type(ptr))
  304. #define sk_OSSL_CMP_CERTREPMESSAGE_pop(sk) ((OSSL_CMP_CERTREPMESSAGE *)OPENSSL_sk_pop(ossl_check_OSSL_CMP_CERTREPMESSAGE_sk_type(sk)))
  305. #define sk_OSSL_CMP_CERTREPMESSAGE_shift(sk) ((OSSL_CMP_CERTREPMESSAGE *)OPENSSL_sk_shift(ossl_check_OSSL_CMP_CERTREPMESSAGE_sk_type(sk)))
  306. #define sk_OSSL_CMP_CERTREPMESSAGE_pop_free(sk, freefunc) OPENSSL_sk_pop_free(ossl_check_OSSL_CMP_CERTREPMESSAGE_sk_type(sk),ossl_check_OSSL_CMP_CERTREPMESSAGE_freefunc_type(freefunc))
  307. #define sk_OSSL_CMP_CERTREPMESSAGE_insert(sk, ptr, idx) OPENSSL_sk_insert(ossl_check_OSSL_CMP_CERTREPMESSAGE_sk_type(sk), ossl_check_OSSL_CMP_CERTREPMESSAGE_type(ptr), (idx))
  308. #define sk_OSSL_CMP_CERTREPMESSAGE_set(sk, idx, ptr) ((OSSL_CMP_CERTREPMESSAGE *)OPENSSL_sk_set(ossl_check_OSSL_CMP_CERTREPMESSAGE_sk_type(sk), (idx), ossl_check_OSSL_CMP_CERTREPMESSAGE_type(ptr)))
  309. #define sk_OSSL_CMP_CERTREPMESSAGE_find(sk, ptr) OPENSSL_sk_find(ossl_check_OSSL_CMP_CERTREPMESSAGE_sk_type(sk), ossl_check_OSSL_CMP_CERTREPMESSAGE_type(ptr))
  310. #define sk_OSSL_CMP_CERTREPMESSAGE_find_ex(sk, ptr) OPENSSL_sk_find_ex(ossl_check_OSSL_CMP_CERTREPMESSAGE_sk_type(sk), ossl_check_OSSL_CMP_CERTREPMESSAGE_type(ptr))
  311. #define sk_OSSL_CMP_CERTREPMESSAGE_find_all(sk, ptr, pnum) OPENSSL_sk_find_all(ossl_check_OSSL_CMP_CERTREPMESSAGE_sk_type(sk), ossl_check_OSSL_CMP_CERTREPMESSAGE_type(ptr), pnum)
  312. #define sk_OSSL_CMP_CERTREPMESSAGE_sort(sk) OPENSSL_sk_sort(ossl_check_OSSL_CMP_CERTREPMESSAGE_sk_type(sk))
  313. #define sk_OSSL_CMP_CERTREPMESSAGE_is_sorted(sk) OPENSSL_sk_is_sorted(ossl_check_const_OSSL_CMP_CERTREPMESSAGE_sk_type(sk))
  314. #define sk_OSSL_CMP_CERTREPMESSAGE_dup(sk) ((STACK_OF(OSSL_CMP_CERTREPMESSAGE) *)OPENSSL_sk_dup(ossl_check_const_OSSL_CMP_CERTREPMESSAGE_sk_type(sk)))
  315. #define sk_OSSL_CMP_CERTREPMESSAGE_deep_copy(sk, copyfunc, freefunc) ((STACK_OF(OSSL_CMP_CERTREPMESSAGE) *)OPENSSL_sk_deep_copy(ossl_check_const_OSSL_CMP_CERTREPMESSAGE_sk_type(sk), ossl_check_OSSL_CMP_CERTREPMESSAGE_copyfunc_type(copyfunc), ossl_check_OSSL_CMP_CERTREPMESSAGE_freefunc_type(freefunc)))
  316. #define sk_OSSL_CMP_CERTREPMESSAGE_set_cmp_func(sk, cmp) ((sk_OSSL_CMP_CERTREPMESSAGE_compfunc)OPENSSL_sk_set_cmp_func(ossl_check_OSSL_CMP_CERTREPMESSAGE_sk_type(sk), ossl_check_OSSL_CMP_CERTREPMESSAGE_compfunc_type(cmp)))
  317. typedef struct ossl_cmp_pollrep_st OSSL_CMP_POLLREP;
  318. typedef STACK_OF(OSSL_CMP_POLLREP) OSSL_CMP_POLLREPCONTENT;
  319. typedef struct ossl_cmp_certresponse_st OSSL_CMP_CERTRESPONSE;
  320. SKM_DEFINE_STACK_OF_INTERNAL(OSSL_CMP_CERTRESPONSE, OSSL_CMP_CERTRESPONSE, OSSL_CMP_CERTRESPONSE)
  321. #define sk_OSSL_CMP_CERTRESPONSE_num(sk) OPENSSL_sk_num(ossl_check_const_OSSL_CMP_CERTRESPONSE_sk_type(sk))
  322. #define sk_OSSL_CMP_CERTRESPONSE_value(sk, idx) ((OSSL_CMP_CERTRESPONSE *)OPENSSL_sk_value(ossl_check_const_OSSL_CMP_CERTRESPONSE_sk_type(sk), (idx)))
  323. #define sk_OSSL_CMP_CERTRESPONSE_new(cmp) ((STACK_OF(OSSL_CMP_CERTRESPONSE) *)OPENSSL_sk_new(ossl_check_OSSL_CMP_CERTRESPONSE_compfunc_type(cmp)))
  324. #define sk_OSSL_CMP_CERTRESPONSE_new_null() ((STACK_OF(OSSL_CMP_CERTRESPONSE) *)OPENSSL_sk_new_null())
  325. #define sk_OSSL_CMP_CERTRESPONSE_new_reserve(cmp, n) ((STACK_OF(OSSL_CMP_CERTRESPONSE) *)OPENSSL_sk_new_reserve(ossl_check_OSSL_CMP_CERTRESPONSE_compfunc_type(cmp), (n)))
  326. #define sk_OSSL_CMP_CERTRESPONSE_reserve(sk, n) OPENSSL_sk_reserve(ossl_check_OSSL_CMP_CERTRESPONSE_sk_type(sk), (n))
  327. #define sk_OSSL_CMP_CERTRESPONSE_free(sk) OPENSSL_sk_free(ossl_check_OSSL_CMP_CERTRESPONSE_sk_type(sk))
  328. #define sk_OSSL_CMP_CERTRESPONSE_zero(sk) OPENSSL_sk_zero(ossl_check_OSSL_CMP_CERTRESPONSE_sk_type(sk))
  329. #define sk_OSSL_CMP_CERTRESPONSE_delete(sk, i) ((OSSL_CMP_CERTRESPONSE *)OPENSSL_sk_delete(ossl_check_OSSL_CMP_CERTRESPONSE_sk_type(sk), (i)))
  330. #define sk_OSSL_CMP_CERTRESPONSE_delete_ptr(sk, ptr) ((OSSL_CMP_CERTRESPONSE *)OPENSSL_sk_delete_ptr(ossl_check_OSSL_CMP_CERTRESPONSE_sk_type(sk), ossl_check_OSSL_CMP_CERTRESPONSE_type(ptr)))
  331. #define sk_OSSL_CMP_CERTRESPONSE_push(sk, ptr) OPENSSL_sk_push(ossl_check_OSSL_CMP_CERTRESPONSE_sk_type(sk), ossl_check_OSSL_CMP_CERTRESPONSE_type(ptr))
  332. #define sk_OSSL_CMP_CERTRESPONSE_unshift(sk, ptr) OPENSSL_sk_unshift(ossl_check_OSSL_CMP_CERTRESPONSE_sk_type(sk), ossl_check_OSSL_CMP_CERTRESPONSE_type(ptr))
  333. #define sk_OSSL_CMP_CERTRESPONSE_pop(sk) ((OSSL_CMP_CERTRESPONSE *)OPENSSL_sk_pop(ossl_check_OSSL_CMP_CERTRESPONSE_sk_type(sk)))
  334. #define sk_OSSL_CMP_CERTRESPONSE_shift(sk) ((OSSL_CMP_CERTRESPONSE *)OPENSSL_sk_shift(ossl_check_OSSL_CMP_CERTRESPONSE_sk_type(sk)))
  335. #define sk_OSSL_CMP_CERTRESPONSE_pop_free(sk, freefunc) OPENSSL_sk_pop_free(ossl_check_OSSL_CMP_CERTRESPONSE_sk_type(sk),ossl_check_OSSL_CMP_CERTRESPONSE_freefunc_type(freefunc))
  336. #define sk_OSSL_CMP_CERTRESPONSE_insert(sk, ptr, idx) OPENSSL_sk_insert(ossl_check_OSSL_CMP_CERTRESPONSE_sk_type(sk), ossl_check_OSSL_CMP_CERTRESPONSE_type(ptr), (idx))
  337. #define sk_OSSL_CMP_CERTRESPONSE_set(sk, idx, ptr) ((OSSL_CMP_CERTRESPONSE *)OPENSSL_sk_set(ossl_check_OSSL_CMP_CERTRESPONSE_sk_type(sk), (idx), ossl_check_OSSL_CMP_CERTRESPONSE_type(ptr)))
  338. #define sk_OSSL_CMP_CERTRESPONSE_find(sk, ptr) OPENSSL_sk_find(ossl_check_OSSL_CMP_CERTRESPONSE_sk_type(sk), ossl_check_OSSL_CMP_CERTRESPONSE_type(ptr))
  339. #define sk_OSSL_CMP_CERTRESPONSE_find_ex(sk, ptr) OPENSSL_sk_find_ex(ossl_check_OSSL_CMP_CERTRESPONSE_sk_type(sk), ossl_check_OSSL_CMP_CERTRESPONSE_type(ptr))
  340. #define sk_OSSL_CMP_CERTRESPONSE_find_all(sk, ptr, pnum) OPENSSL_sk_find_all(ossl_check_OSSL_CMP_CERTRESPONSE_sk_type(sk), ossl_check_OSSL_CMP_CERTRESPONSE_type(ptr), pnum)
  341. #define sk_OSSL_CMP_CERTRESPONSE_sort(sk) OPENSSL_sk_sort(ossl_check_OSSL_CMP_CERTRESPONSE_sk_type(sk))
  342. #define sk_OSSL_CMP_CERTRESPONSE_is_sorted(sk) OPENSSL_sk_is_sorted(ossl_check_const_OSSL_CMP_CERTRESPONSE_sk_type(sk))
  343. #define sk_OSSL_CMP_CERTRESPONSE_dup(sk) ((STACK_OF(OSSL_CMP_CERTRESPONSE) *)OPENSSL_sk_dup(ossl_check_const_OSSL_CMP_CERTRESPONSE_sk_type(sk)))
  344. #define sk_OSSL_CMP_CERTRESPONSE_deep_copy(sk, copyfunc, freefunc) ((STACK_OF(OSSL_CMP_CERTRESPONSE) *)OPENSSL_sk_deep_copy(ossl_check_const_OSSL_CMP_CERTRESPONSE_sk_type(sk), ossl_check_OSSL_CMP_CERTRESPONSE_copyfunc_type(copyfunc), ossl_check_OSSL_CMP_CERTRESPONSE_freefunc_type(freefunc)))
  345. #define sk_OSSL_CMP_CERTRESPONSE_set_cmp_func(sk, cmp) ((sk_OSSL_CMP_CERTRESPONSE_compfunc)OPENSSL_sk_set_cmp_func(ossl_check_OSSL_CMP_CERTRESPONSE_sk_type(sk), ossl_check_OSSL_CMP_CERTRESPONSE_compfunc_type(cmp)))
  346. typedef STACK_OF(ASN1_UTF8STRING) OSSL_CMP_PKIFREETEXT;
  347. /*
  348. * function DECLARATIONS
  349. */
  350. /* from cmp_asn.c */
  351. OSSL_CMP_ITAV *OSSL_CMP_ITAV_create(ASN1_OBJECT *type, ASN1_TYPE *value);
  352. void OSSL_CMP_ITAV_set0(OSSL_CMP_ITAV *itav, ASN1_OBJECT *type,
  353. ASN1_TYPE *value);
  354. ASN1_OBJECT *OSSL_CMP_ITAV_get0_type(const OSSL_CMP_ITAV *itav);
  355. ASN1_TYPE *OSSL_CMP_ITAV_get0_value(const OSSL_CMP_ITAV *itav);
  356. int OSSL_CMP_ITAV_push0_stack_item(STACK_OF(OSSL_CMP_ITAV) **itav_sk_p,
  357. OSSL_CMP_ITAV *itav);
  358. void OSSL_CMP_ITAV_free(OSSL_CMP_ITAV *itav);
  359. void OSSL_CMP_MSG_free(OSSL_CMP_MSG *msg);
  360. /* from cmp_ctx.c */
  361. OSSL_CMP_CTX *OSSL_CMP_CTX_new(OSSL_LIB_CTX *libctx, const char *propq);
  362. void OSSL_CMP_CTX_free(OSSL_CMP_CTX *ctx);
  363. int OSSL_CMP_CTX_reinit(OSSL_CMP_CTX *ctx);
  364. /* CMP general options: */
  365. # define OSSL_CMP_OPT_LOG_VERBOSITY 0
  366. /* CMP transfer options: */
  367. # define OSSL_CMP_OPT_KEEP_ALIVE 10
  368. # define OSSL_CMP_OPT_MSG_TIMEOUT 11
  369. # define OSSL_CMP_OPT_TOTAL_TIMEOUT 12
  370. /* CMP request options: */
  371. # define OSSL_CMP_OPT_VALIDITY_DAYS 20
  372. # define OSSL_CMP_OPT_SUBJECTALTNAME_NODEFAULT 21
  373. # define OSSL_CMP_OPT_SUBJECTALTNAME_CRITICAL 22
  374. # define OSSL_CMP_OPT_POLICIES_CRITICAL 23
  375. # define OSSL_CMP_OPT_POPO_METHOD 24
  376. # define OSSL_CMP_OPT_IMPLICIT_CONFIRM 25
  377. # define OSSL_CMP_OPT_DISABLE_CONFIRM 26
  378. # define OSSL_CMP_OPT_REVOCATION_REASON 27
  379. /* CMP protection options: */
  380. # define OSSL_CMP_OPT_UNPROTECTED_SEND 30
  381. # define OSSL_CMP_OPT_UNPROTECTED_ERRORS 31
  382. # define OSSL_CMP_OPT_OWF_ALGNID 32
  383. # define OSSL_CMP_OPT_MAC_ALGNID 33
  384. # define OSSL_CMP_OPT_DIGEST_ALGNID 34
  385. # define OSSL_CMP_OPT_IGNORE_KEYUSAGE 35
  386. # define OSSL_CMP_OPT_PERMIT_TA_IN_EXTRACERTS_FOR_IR 36
  387. int OSSL_CMP_CTX_set_option(OSSL_CMP_CTX *ctx, int opt, int val);
  388. int OSSL_CMP_CTX_get_option(const OSSL_CMP_CTX *ctx, int opt);
  389. /* CMP-specific callback for logging and outputting the error queue: */
  390. int OSSL_CMP_CTX_set_log_cb(OSSL_CMP_CTX *ctx, OSSL_CMP_log_cb_t cb);
  391. # define OSSL_CMP_CTX_set_log_verbosity(ctx, level) \
  392. OSSL_CMP_CTX_set_option(ctx, OSSL_CMP_OPT_LOG_VERBOSITY, level)
  393. void OSSL_CMP_CTX_print_errors(const OSSL_CMP_CTX *ctx);
  394. /* message transfer: */
  395. int OSSL_CMP_CTX_set1_serverPath(OSSL_CMP_CTX *ctx, const char *path);
  396. int OSSL_CMP_CTX_set1_server(OSSL_CMP_CTX *ctx, const char *address);
  397. int OSSL_CMP_CTX_set_serverPort(OSSL_CMP_CTX *ctx, int port);
  398. int OSSL_CMP_CTX_set1_proxy(OSSL_CMP_CTX *ctx, const char *name);
  399. int OSSL_CMP_CTX_set1_no_proxy(OSSL_CMP_CTX *ctx, const char *names);
  400. int OSSL_CMP_CTX_set_http_cb(OSSL_CMP_CTX *ctx, OSSL_HTTP_bio_cb_t cb);
  401. int OSSL_CMP_CTX_set_http_cb_arg(OSSL_CMP_CTX *ctx, void *arg);
  402. void *OSSL_CMP_CTX_get_http_cb_arg(const OSSL_CMP_CTX *ctx);
  403. typedef OSSL_CMP_MSG *(*OSSL_CMP_transfer_cb_t) (OSSL_CMP_CTX *ctx,
  404. const OSSL_CMP_MSG *req);
  405. int OSSL_CMP_CTX_set_transfer_cb(OSSL_CMP_CTX *ctx, OSSL_CMP_transfer_cb_t cb);
  406. int OSSL_CMP_CTX_set_transfer_cb_arg(OSSL_CMP_CTX *ctx, void *arg);
  407. void *OSSL_CMP_CTX_get_transfer_cb_arg(const OSSL_CMP_CTX *ctx);
  408. /* server authentication: */
  409. int OSSL_CMP_CTX_set1_srvCert(OSSL_CMP_CTX *ctx, X509 *cert);
  410. int OSSL_CMP_CTX_set1_expected_sender(OSSL_CMP_CTX *ctx, const X509_NAME *name);
  411. int OSSL_CMP_CTX_set0_trustedStore(OSSL_CMP_CTX *ctx, X509_STORE *store);
  412. X509_STORE *OSSL_CMP_CTX_get0_trustedStore(const OSSL_CMP_CTX *ctx);
  413. int OSSL_CMP_CTX_set1_untrusted(OSSL_CMP_CTX *ctx, STACK_OF(X509) *certs);
  414. STACK_OF(X509) *OSSL_CMP_CTX_get0_untrusted(const OSSL_CMP_CTX *ctx);
  415. /* client authentication: */
  416. int OSSL_CMP_CTX_set1_cert(OSSL_CMP_CTX *ctx, X509 *cert);
  417. int OSSL_CMP_CTX_build_cert_chain(OSSL_CMP_CTX *ctx, X509_STORE *own_trusted,
  418. STACK_OF(X509) *candidates);
  419. int OSSL_CMP_CTX_set1_pkey(OSSL_CMP_CTX *ctx, EVP_PKEY *pkey);
  420. int OSSL_CMP_CTX_set1_referenceValue(OSSL_CMP_CTX *ctx,
  421. const unsigned char *ref, int len);
  422. int OSSL_CMP_CTX_set1_secretValue(OSSL_CMP_CTX *ctx,
  423. const unsigned char *sec, int len);
  424. /* CMP message header and extra certificates: */
  425. int OSSL_CMP_CTX_set1_recipient(OSSL_CMP_CTX *ctx, const X509_NAME *name);
  426. int OSSL_CMP_CTX_push0_geninfo_ITAV(OSSL_CMP_CTX *ctx, OSSL_CMP_ITAV *itav);
  427. int OSSL_CMP_CTX_reset_geninfo_ITAVs(OSSL_CMP_CTX *ctx);
  428. int OSSL_CMP_CTX_set1_extraCertsOut(OSSL_CMP_CTX *ctx,
  429. STACK_OF(X509) *extraCertsOut);
  430. /* certificate template: */
  431. int OSSL_CMP_CTX_set0_newPkey(OSSL_CMP_CTX *ctx, int priv, EVP_PKEY *pkey);
  432. EVP_PKEY *OSSL_CMP_CTX_get0_newPkey(const OSSL_CMP_CTX *ctx, int priv);
  433. int OSSL_CMP_CTX_set1_issuer(OSSL_CMP_CTX *ctx, const X509_NAME *name);
  434. int OSSL_CMP_CTX_set1_subjectName(OSSL_CMP_CTX *ctx, const X509_NAME *name);
  435. int OSSL_CMP_CTX_push1_subjectAltName(OSSL_CMP_CTX *ctx,
  436. const GENERAL_NAME *name);
  437. int OSSL_CMP_CTX_set0_reqExtensions(OSSL_CMP_CTX *ctx, X509_EXTENSIONS *exts);
  438. int OSSL_CMP_CTX_reqExtensions_have_SAN(OSSL_CMP_CTX *ctx);
  439. int OSSL_CMP_CTX_push0_policy(OSSL_CMP_CTX *ctx, POLICYINFO *pinfo);
  440. int OSSL_CMP_CTX_set1_oldCert(OSSL_CMP_CTX *ctx, X509 *cert);
  441. int OSSL_CMP_CTX_set1_p10CSR(OSSL_CMP_CTX *ctx, const X509_REQ *csr);
  442. /* misc body contents: */
  443. int OSSL_CMP_CTX_push0_genm_ITAV(OSSL_CMP_CTX *ctx, OSSL_CMP_ITAV *itav);
  444. /* certificate confirmation: */
  445. typedef int (*OSSL_CMP_certConf_cb_t) (OSSL_CMP_CTX *ctx, X509 *cert,
  446. int fail_info, const char **txt);
  447. int OSSL_CMP_certConf_cb(OSSL_CMP_CTX *ctx, X509 *cert, int fail_info,
  448. const char **text);
  449. int OSSL_CMP_CTX_set_certConf_cb(OSSL_CMP_CTX *ctx, OSSL_CMP_certConf_cb_t cb);
  450. int OSSL_CMP_CTX_set_certConf_cb_arg(OSSL_CMP_CTX *ctx, void *arg);
  451. void *OSSL_CMP_CTX_get_certConf_cb_arg(const OSSL_CMP_CTX *ctx);
  452. /* result fetching: */
  453. int OSSL_CMP_CTX_get_status(const OSSL_CMP_CTX *ctx);
  454. OSSL_CMP_PKIFREETEXT *OSSL_CMP_CTX_get0_statusString(const OSSL_CMP_CTX *ctx);
  455. int OSSL_CMP_CTX_get_failInfoCode(const OSSL_CMP_CTX *ctx);
  456. # define OSSL_CMP_PKISI_BUFLEN 1024
  457. X509 *OSSL_CMP_CTX_get0_newCert(const OSSL_CMP_CTX *ctx);
  458. STACK_OF(X509) *OSSL_CMP_CTX_get1_newChain(const OSSL_CMP_CTX *ctx);
  459. STACK_OF(X509) *OSSL_CMP_CTX_get1_caPubs(const OSSL_CMP_CTX *ctx);
  460. STACK_OF(X509) *OSSL_CMP_CTX_get1_extraCertsIn(const OSSL_CMP_CTX *ctx);
  461. int OSSL_CMP_CTX_set1_transactionID(OSSL_CMP_CTX *ctx,
  462. const ASN1_OCTET_STRING *id);
  463. int OSSL_CMP_CTX_set1_senderNonce(OSSL_CMP_CTX *ctx,
  464. const ASN1_OCTET_STRING *nonce);
  465. /* from cmp_status.c */
  466. char *OSSL_CMP_CTX_snprint_PKIStatus(const OSSL_CMP_CTX *ctx, char *buf,
  467. size_t bufsize);
  468. char *OSSL_CMP_snprint_PKIStatusInfo(const OSSL_CMP_PKISI *statusInfo,
  469. char *buf, size_t bufsize);
  470. OSSL_CMP_PKISI *
  471. OSSL_CMP_STATUSINFO_new(int status, int fail_info, const char *text);
  472. /* from cmp_hdr.c */
  473. ASN1_OCTET_STRING *OSSL_CMP_HDR_get0_transactionID(const
  474. OSSL_CMP_PKIHEADER *hdr);
  475. ASN1_OCTET_STRING *OSSL_CMP_HDR_get0_recipNonce(const OSSL_CMP_PKIHEADER *hdr);
  476. /* from cmp_msg.c */
  477. OSSL_CMP_PKIHEADER *OSSL_CMP_MSG_get0_header(const OSSL_CMP_MSG *msg);
  478. int OSSL_CMP_MSG_get_bodytype(const OSSL_CMP_MSG *msg);
  479. int OSSL_CMP_MSG_update_transactionID(OSSL_CMP_CTX *ctx, OSSL_CMP_MSG *msg);
  480. int OSSL_CMP_MSG_update_recipNonce(OSSL_CMP_CTX *ctx, OSSL_CMP_MSG *msg);
  481. OSSL_CRMF_MSG *OSSL_CMP_CTX_setup_CRM(OSSL_CMP_CTX *ctx, int for_KUR, int rid);
  482. OSSL_CMP_MSG *OSSL_CMP_MSG_read(const char *file, OSSL_LIB_CTX *libctx,
  483. const char *propq);
  484. int OSSL_CMP_MSG_write(const char *file, const OSSL_CMP_MSG *msg);
  485. OSSL_CMP_MSG *d2i_OSSL_CMP_MSG_bio(BIO *bio, OSSL_CMP_MSG **msg);
  486. int i2d_OSSL_CMP_MSG_bio(BIO *bio, const OSSL_CMP_MSG *msg);
  487. /* from cmp_vfy.c */
  488. int OSSL_CMP_validate_msg(OSSL_CMP_CTX *ctx, const OSSL_CMP_MSG *msg);
  489. int OSSL_CMP_validate_cert_path(const OSSL_CMP_CTX *ctx,
  490. X509_STORE *trusted_store, X509 *cert);
  491. /* from cmp_http.c */
  492. OSSL_CMP_MSG *OSSL_CMP_MSG_http_perform(OSSL_CMP_CTX *ctx,
  493. const OSSL_CMP_MSG *req);
  494. /* from cmp_server.c */
  495. typedef struct ossl_cmp_srv_ctx_st OSSL_CMP_SRV_CTX;
  496. OSSL_CMP_MSG *OSSL_CMP_SRV_process_request(OSSL_CMP_SRV_CTX *srv_ctx,
  497. const OSSL_CMP_MSG *req);
  498. OSSL_CMP_MSG * OSSL_CMP_CTX_server_perform(OSSL_CMP_CTX *client_ctx,
  499. const OSSL_CMP_MSG *req);
  500. OSSL_CMP_SRV_CTX *OSSL_CMP_SRV_CTX_new(OSSL_LIB_CTX *libctx, const char *propq);
  501. void OSSL_CMP_SRV_CTX_free(OSSL_CMP_SRV_CTX *srv_ctx);
  502. typedef OSSL_CMP_PKISI *(*OSSL_CMP_SRV_cert_request_cb_t)
  503. (OSSL_CMP_SRV_CTX *srv_ctx, const OSSL_CMP_MSG *req, int certReqId,
  504. const OSSL_CRMF_MSG *crm, const X509_REQ *p10cr,
  505. X509 **certOut, STACK_OF(X509) **chainOut, STACK_OF(X509) **caPubs);
  506. typedef OSSL_CMP_PKISI *(*OSSL_CMP_SRV_rr_cb_t)(OSSL_CMP_SRV_CTX *srv_ctx,
  507. const OSSL_CMP_MSG *req,
  508. const X509_NAME *issuer,
  509. const ASN1_INTEGER *serial);
  510. typedef int (*OSSL_CMP_SRV_genm_cb_t)(OSSL_CMP_SRV_CTX *srv_ctx,
  511. const OSSL_CMP_MSG *req,
  512. const STACK_OF(OSSL_CMP_ITAV) *in,
  513. STACK_OF(OSSL_CMP_ITAV) **out);
  514. typedef void (*OSSL_CMP_SRV_error_cb_t)(OSSL_CMP_SRV_CTX *srv_ctx,
  515. const OSSL_CMP_MSG *req,
  516. const OSSL_CMP_PKISI *statusInfo,
  517. const ASN1_INTEGER *errorCode,
  518. const OSSL_CMP_PKIFREETEXT *errDetails);
  519. typedef int (*OSSL_CMP_SRV_certConf_cb_t)(OSSL_CMP_SRV_CTX *srv_ctx,
  520. const OSSL_CMP_MSG *req,
  521. int certReqId,
  522. const ASN1_OCTET_STRING *certHash,
  523. const OSSL_CMP_PKISI *si);
  524. typedef int (*OSSL_CMP_SRV_pollReq_cb_t)(OSSL_CMP_SRV_CTX *srv_ctx,
  525. const OSSL_CMP_MSG *req, int certReqId,
  526. OSSL_CMP_MSG **certReq,
  527. int64_t *check_after);
  528. int OSSL_CMP_SRV_CTX_init(OSSL_CMP_SRV_CTX *srv_ctx, void *custom_ctx,
  529. OSSL_CMP_SRV_cert_request_cb_t process_cert_request,
  530. OSSL_CMP_SRV_rr_cb_t process_rr,
  531. OSSL_CMP_SRV_genm_cb_t process_genm,
  532. OSSL_CMP_SRV_error_cb_t process_error,
  533. OSSL_CMP_SRV_certConf_cb_t process_certConf,
  534. OSSL_CMP_SRV_pollReq_cb_t process_pollReq);
  535. OSSL_CMP_CTX *OSSL_CMP_SRV_CTX_get0_cmp_ctx(const OSSL_CMP_SRV_CTX *srv_ctx);
  536. void *OSSL_CMP_SRV_CTX_get0_custom_ctx(const OSSL_CMP_SRV_CTX *srv_ctx);
  537. int OSSL_CMP_SRV_CTX_set_send_unprotected_errors(OSSL_CMP_SRV_CTX *srv_ctx,
  538. int val);
  539. int OSSL_CMP_SRV_CTX_set_accept_unprotected(OSSL_CMP_SRV_CTX *srv_ctx, int val);
  540. int OSSL_CMP_SRV_CTX_set_accept_raverified(OSSL_CMP_SRV_CTX *srv_ctx, int val);
  541. int OSSL_CMP_SRV_CTX_set_grant_implicit_confirm(OSSL_CMP_SRV_CTX *srv_ctx,
  542. int val);
  543. /* from cmp_client.c */
  544. X509 *OSSL_CMP_exec_certreq(OSSL_CMP_CTX *ctx, int req_type,
  545. const OSSL_CRMF_MSG *crm);
  546. # define OSSL_CMP_IR 0
  547. # define OSSL_CMP_CR 2
  548. # define OSSL_CMP_P10CR 4
  549. # define OSSL_CMP_KUR 7
  550. # define OSSL_CMP_exec_IR_ses(ctx) \
  551. OSSL_CMP_exec_certreq(ctx, OSSL_CMP_IR, NULL)
  552. # define OSSL_CMP_exec_CR_ses(ctx) \
  553. OSSL_CMP_exec_certreq(ctx, OSSL_CMP_CR, NULL)
  554. # define OSSL_CMP_exec_P10CR_ses(ctx) \
  555. OSSL_CMP_exec_certreq(ctx, OSSL_CMP_P10CR, NULL)
  556. # define OSSL_CMP_exec_KUR_ses(ctx) \
  557. OSSL_CMP_exec_certreq(ctx, OSSL_CMP_KUR, NULL)
  558. int OSSL_CMP_try_certreq(OSSL_CMP_CTX *ctx, int req_type,
  559. const OSSL_CRMF_MSG *crm, int *checkAfter);
  560. int OSSL_CMP_exec_RR_ses(OSSL_CMP_CTX *ctx);
  561. STACK_OF(OSSL_CMP_ITAV) *OSSL_CMP_exec_GENM_ses(OSSL_CMP_CTX *ctx);
  562. # ifdef __cplusplus
  563. }
  564. # endif
  565. # endif /* !defined(OPENSSL_NO_CMP) */
  566. #endif /* !defined(OPENSSL_CMP_H) */