/* This Source Code Form is subject to the terms of the Mozilla Public
* License, v. 2.0. If a copy of the MPL was not distributed with this
* file, You can obtain one at http://mozilla.org/MPL/2.0/. */
/*
* pkix_pl_cert.h
*
* Certificate Object Definitions
*
*/
#ifndef _PKIX_PL_CERT_H
#define _PKIX_PL_CERT_H
#include "pkix_pl_common.h"
#ifdef __cplusplus
extern "C" {
#endif
struct PKIX_PL_CertStruct {
CERTCertificate *nssCert;
/* Must be the first field. The
* cert_NSSCertFromPKIXCert function in
* lib/certhigh/certvfypkix.c depends on
* this. */
CERTGeneralName *nssSubjAltNames;
PLArenaPool *arenaNameConstraints;
PKIX_PL_X500Name *issuer;
PKIX_PL_X500Name *subject;
PKIX_List *subjAltNames;
PKIX_Boolean subjAltNamesAbsent;
PKIX_PL_OID *publicKeyAlgId;
PKIX_PL_PublicKey *publicKey;
PKIX_PL_BigInt *serialNumber;
PKIX_List *critExtOids;
PKIX_PL_ByteArray *subjKeyId;
PKIX_Boolean subjKeyIdAbsent;
PKIX_PL_ByteArray *authKeyId;
PKIX_Boolean authKeyIdAbsent;
PKIX_List *extKeyUsages;
PKIX_Boolean extKeyUsagesAbsent;
PKIX_PL_CertBasicConstraints *certBasicConstraints;
PKIX_Boolean basicConstraintsAbsent;
PKIX_List *certPolicyInfos;
PKIX_Boolean policyInfoAbsent;
PKIX_Boolean policyMappingsAbsent;
PKIX_List *certPolicyMappings;
/* List of PKIX_PL_CertPolicyMap */
PKIX_Boolean policyConstraintsProcessed;
PKIX_Int32 policyConstraintsExplicitPolicySkipCerts;
PKIX_Int32 policyConstraintsInhibitMappingSkipCerts;
PKIX_Boolean inhibitAnyPolicyProcessed;
PKIX_Int32 inhibitAnySkipCerts;
PKIX_PL_CertNameConstraints *nameConstraints;
PKIX_Boolean nameConstraintsAbsent;
PKIX_Boolean cacheFlag;
PKIX_CertStore *store;
PKIX_List *authorityInfoAccess;
/* list of PKIX_PL_InfoAccess */
PKIX_List *subjectInfoAccess;
/* list of PKIX_PL_InfoAccess */
PKIX_Boolean isUserTrustAnchor;
PKIX_List *crldpList;
/* list of CRL DPs based on der in nssCert arena.
* Destruction is needed for pkix object and
* not for undelying der as it is a part
* nssCert arena. */
};
/* see source file for function documentation */
PKIX_Error *
pkix_pl_Cert_RegisterSelf(
void *plContext);
PKIX_Error *
pkix_pl_Cert_CreateWithNSSCert(
CERTCertificate *nssCert,
PKIX_PL_Cert **pCert,
void *plContext);
PKIX_Error *
pkix_pl_Cert_CreateToList(
SECItem *derCertItem,
PKIX_List *certList,
void *plContext);
PKIX_Error *
pkix_pl_Cert_CheckSubjectAltNameConstraints(
PKIX_PL_Cert *cert,
PKIX_PL_CertNameConstraints *nameConstraints,
PKIX_Boolean matchAll,
void *plContext);
PKIX_Error *
pkix_pl_Cert_ToString_Helper(
PKIX_PL_Cert *cert,
PKIX_Boolean partialString,
PKIX_PL_String **pString,
void *plContext);
PKIX_Error *
pkix_pl_Cert_CheckExtendedKeyUsage(
PKIX_PL_Cert *cert,
PKIX_UInt32 requiredExtendedKeyUsages,
PKIX_Boolean *pPass,
void *plContext);
#ifdef __cplusplus
}
#endif
#endif /* _PKIX_PL_CERT_H */
