cmp.h 47 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268269270271272273274275276277278279280281282283284285286287288289290291292293294295296297298299300301302303304305306307308309310311312313314315316317318319320321322323324325326327328329330331332333334335336337338339340341342343344345346347348349350351352353354355356357358359360361362363364365366367368369370371372373374375376377378379380381382383384385386387388389390391392393394395396397398399400401402403404405406407408409410411412413414415416417418419420421422423424425426427428429430431432433434435436437438439440441442443444445446447448449450451452453454455456457458459460461462463464465466467468469470471472473474475476477478479480481482483484485486487488489490491492493494495496497498499500501502503504505506507508509510511512513514515516517518519520521522523524525526527528529530531532533534535536537538539540541542543544545546547548549550551552553554555556557558559560561562563564565566567568569570571572573574575576577578579580581582583584585586587588589590591592593594595596597598599600601602603604605606607608609610611612613614615616617618619620621622623624625626627628629630631632633634635636637638639640641642643644645646647648649650651652653654655656657658659660661662663664665666667668669670671672673674675676677678679680681682683684685686687688689690691692693694695696697698699700701702703704705706707708709710711712713714715716717718719720721722723724725726727728729730731732733734735736737738739740
  1. /*
  2. * WARNING: do not edit!
  3. * Generated by makefile from include\openssl\cmp.h.in
  4. *
  5. * Copyright 2007-2024 The OpenSSL Project Authors. All Rights Reserved.
  6. * Copyright Nokia 2007-2019
  7. * Copyright Siemens AG 2015-2019
  8. *
  9. * Licensed under the Apache License 2.0 (the "License"). You may not use
  10. * this file except in compliance with the License. You can obtain a copy
  11. * in the file LICENSE in the source distribution or at
  12. * https://www.openssl.org/source/license.html
  13. */
  14. /* clang-format off */
  15. /* clang-format on */
  16. #ifndef OPENSSL_CMP_H
  17. #define OPENSSL_CMP_H
  18. #include <openssl/opensslconf.h>
  19. #ifndef OPENSSL_NO_CMP
  20. #include <openssl/crmf.h>
  21. #include <openssl/cmperr.h>
  22. #include <openssl/cmp_util.h>
  23. #include <openssl/http.h>
  24. /* explicit #includes not strictly needed since implied by the above: */
  25. #include <openssl/types.h>
  26. #include <openssl/safestack.h>
  27. #include <openssl/x509.h>
  28. #include <openssl/x509v3.h>
  29. #ifdef __cplusplus
  30. extern "C" {
  31. #endif
  32. #define OSSL_CMP_PVNO_2 2
  33. #define OSSL_CMP_PVNO_3 3
  34. #define OSSL_CMP_PVNO OSSL_CMP_PVNO_2 /* v2 is the default */
  35. /*-
  36. * PKIFailureInfo ::= BIT STRING {
  37. * -- since we can fail in more than one way!
  38. * -- More codes may be added in the future if/when required.
  39. * badAlg (0),
  40. * -- unrecognized or unsupported Algorithm Identifier
  41. * badMessageCheck (1),
  42. * -- integrity check failed (e.g., signature did not verify)
  43. * badRequest (2),
  44. * -- transaction not permitted or supported
  45. * badTime (3),
  46. * -- messageTime was not sufficiently close to the system time,
  47. * -- as defined by local policy
  48. * badCertId (4),
  49. * -- no certificate could be found matching the provided criteria
  50. * badDataFormat (5),
  51. * -- the data submitted has the wrong format
  52. * wrongAuthority (6),
  53. * -- the authority indicated in the request is different from the
  54. * -- one creating the response token
  55. * incorrectData (7),
  56. * -- the requester's data is incorrect (for notary services)
  57. * missingTimeStamp (8),
  58. * -- when the timestamp is missing but should be there
  59. * -- (by policy)
  60. * badPOP (9),
  61. * -- the proof-of-possession failed
  62. * certRevoked (10),
  63. * -- the certificate has already been revoked
  64. * certConfirmed (11),
  65. * -- the certificate has already been confirmed
  66. * wrongIntegrity (12),
  67. * -- invalid integrity, password based instead of signature or
  68. * -- vice versa
  69. * badRecipientNonce (13),
  70. * -- invalid recipient nonce, either missing or wrong value
  71. * timeNotAvailable (14),
  72. * -- the TSA's time source is not available
  73. * unacceptedPolicy (15),
  74. * -- the requested TSA policy is not supported by the TSA.
  75. * unacceptedExtension (16),
  76. * -- the requested extension is not supported by the TSA.
  77. * addInfoNotAvailable (17),
  78. * -- the additional information requested could not be
  79. * -- understood or is not available
  80. * badSenderNonce (18),
  81. * -- invalid sender nonce, either missing or wrong size
  82. * badCertTemplate (19),
  83. * -- invalid cert. template or missing mandatory information
  84. * signerNotTrusted (20),
  85. * -- signer of the message unknown or not trusted
  86. * transactionIdInUse (21),
  87. * -- the transaction identifier is already in use
  88. * unsupportedVersion (22),
  89. * -- the version of the message is not supported
  90. * notAuthorized (23),
  91. * -- the sender was not authorized to make the preceding
  92. * -- request or perform the preceding action
  93. * systemUnavail (24),
  94. * -- the request cannot be handled due to system unavailability
  95. * systemFailure (25),
  96. * -- the request cannot be handled due to system failure
  97. * duplicateCertReq (26)
  98. * -- certificate cannot be issued because a duplicate
  99. * -- certificate already exists
  100. * }
  101. */
  102. #define OSSL_CMP_PKIFAILUREINFO_badAlg 0
  103. #define OSSL_CMP_PKIFAILUREINFO_badMessageCheck 1
  104. #define OSSL_CMP_PKIFAILUREINFO_badRequest 2
  105. #define OSSL_CMP_PKIFAILUREINFO_badTime 3
  106. #define OSSL_CMP_PKIFAILUREINFO_badCertId 4
  107. #define OSSL_CMP_PKIFAILUREINFO_badDataFormat 5
  108. #define OSSL_CMP_PKIFAILUREINFO_wrongAuthority 6
  109. #define OSSL_CMP_PKIFAILUREINFO_incorrectData 7
  110. #define OSSL_CMP_PKIFAILUREINFO_missingTimeStamp 8
  111. #define OSSL_CMP_PKIFAILUREINFO_badPOP 9
  112. #define OSSL_CMP_PKIFAILUREINFO_certRevoked 10
  113. #define OSSL_CMP_PKIFAILUREINFO_certConfirmed 11
  114. #define OSSL_CMP_PKIFAILUREINFO_wrongIntegrity 12
  115. #define OSSL_CMP_PKIFAILUREINFO_badRecipientNonce 13
  116. #define OSSL_CMP_PKIFAILUREINFO_timeNotAvailable 14
  117. #define OSSL_CMP_PKIFAILUREINFO_unacceptedPolicy 15
  118. #define OSSL_CMP_PKIFAILUREINFO_unacceptedExtension 16
  119. #define OSSL_CMP_PKIFAILUREINFO_addInfoNotAvailable 17
  120. #define OSSL_CMP_PKIFAILUREINFO_badSenderNonce 18
  121. #define OSSL_CMP_PKIFAILUREINFO_badCertTemplate 19
  122. #define OSSL_CMP_PKIFAILUREINFO_signerNotTrusted 20
  123. #define OSSL_CMP_PKIFAILUREINFO_transactionIdInUse 21
  124. #define OSSL_CMP_PKIFAILUREINFO_unsupportedVersion 22
  125. #define OSSL_CMP_PKIFAILUREINFO_notAuthorized 23
  126. #define OSSL_CMP_PKIFAILUREINFO_systemUnavail 24
  127. #define OSSL_CMP_PKIFAILUREINFO_systemFailure 25
  128. #define OSSL_CMP_PKIFAILUREINFO_duplicateCertReq 26
  129. #define OSSL_CMP_PKIFAILUREINFO_MAX 26
  130. #define OSSL_CMP_PKIFAILUREINFO_MAX_BIT_PATTERN \
  131. ((1 << (OSSL_CMP_PKIFAILUREINFO_MAX + 1)) - 1)
  132. #if OSSL_CMP_PKIFAILUREINFO_MAX_BIT_PATTERN > INT_MAX
  133. #error CMP_PKIFAILUREINFO_MAX bit pattern does not fit in type int
  134. #endif
  135. typedef ASN1_BIT_STRING OSSL_CMP_PKIFAILUREINFO;
  136. #define OSSL_CMP_CTX_FAILINFO_badAlg (1 << 0)
  137. #define OSSL_CMP_CTX_FAILINFO_badMessageCheck (1 << 1)
  138. #define OSSL_CMP_CTX_FAILINFO_badRequest (1 << 2)
  139. #define OSSL_CMP_CTX_FAILINFO_badTime (1 << 3)
  140. #define OSSL_CMP_CTX_FAILINFO_badCertId (1 << 4)
  141. #define OSSL_CMP_CTX_FAILINFO_badDataFormat (1 << 5)
  142. #define OSSL_CMP_CTX_FAILINFO_wrongAuthority (1 << 6)
  143. #define OSSL_CMP_CTX_FAILINFO_incorrectData (1 << 7)
  144. #define OSSL_CMP_CTX_FAILINFO_missingTimeStamp (1 << 8)
  145. #define OSSL_CMP_CTX_FAILINFO_badPOP (1 << 9)
  146. #define OSSL_CMP_CTX_FAILINFO_certRevoked (1 << 10)
  147. #define OSSL_CMP_CTX_FAILINFO_certConfirmed (1 << 11)
  148. #define OSSL_CMP_CTX_FAILINFO_wrongIntegrity (1 << 12)
  149. #define OSSL_CMP_CTX_FAILINFO_badRecipientNonce (1 << 13)
  150. #define OSSL_CMP_CTX_FAILINFO_timeNotAvailable (1 << 14)
  151. #define OSSL_CMP_CTX_FAILINFO_unacceptedPolicy (1 << 15)
  152. #define OSSL_CMP_CTX_FAILINFO_unacceptedExtension (1 << 16)
  153. #define OSSL_CMP_CTX_FAILINFO_addInfoNotAvailable (1 << 17)
  154. #define OSSL_CMP_CTX_FAILINFO_badSenderNonce (1 << 18)
  155. #define OSSL_CMP_CTX_FAILINFO_badCertTemplate (1 << 19)
  156. #define OSSL_CMP_CTX_FAILINFO_signerNotTrusted (1 << 20)
  157. #define OSSL_CMP_CTX_FAILINFO_transactionIdInUse (1 << 21)
  158. #define OSSL_CMP_CTX_FAILINFO_unsupportedVersion (1 << 22)
  159. #define OSSL_CMP_CTX_FAILINFO_notAuthorized (1 << 23)
  160. #define OSSL_CMP_CTX_FAILINFO_systemUnavail (1 << 24)
  161. #define OSSL_CMP_CTX_FAILINFO_systemFailure (1 << 25)
  162. #define OSSL_CMP_CTX_FAILINFO_duplicateCertReq (1 << 26)
  163. /*-
  164. * PKIStatus ::= INTEGER {
  165. * accepted (0),
  166. * -- you got exactly what you asked for
  167. * grantedWithMods (1),
  168. * -- you got something like what you asked for; the
  169. * -- requester is responsible for ascertaining the differences
  170. * rejection (2),
  171. * -- you don't get it, more information elsewhere in the message
  172. * waiting (3),
  173. * -- the request body part has not yet been processed; expect to
  174. * -- hear more later (note: proper handling of this status
  175. * -- response MAY use the polling req/rep PKIMessages specified
  176. * -- in Section 5.3.22; alternatively, polling in the underlying
  177. * -- transport layer MAY have some utility in this regard)
  178. * revocationWarning (4),
  179. * -- this message contains a warning that a revocation is
  180. * -- imminent
  181. * revocationNotification (5),
  182. * -- notification that a revocation has occurred
  183. * keyUpdateWarning (6)
  184. * -- update already done for the oldCertId specified in
  185. * -- CertReqMsg
  186. * }
  187. */
  188. #define OSSL_CMP_PKISTATUS_request -3
  189. #define OSSL_CMP_PKISTATUS_trans -2
  190. #define OSSL_CMP_PKISTATUS_unspecified -1
  191. #define OSSL_CMP_PKISTATUS_accepted 0
  192. #define OSSL_CMP_PKISTATUS_grantedWithMods 1
  193. #define OSSL_CMP_PKISTATUS_rejection 2
  194. #define OSSL_CMP_PKISTATUS_waiting 3
  195. #define OSSL_CMP_PKISTATUS_revocationWarning 4
  196. #define OSSL_CMP_PKISTATUS_revocationNotification 5
  197. #define OSSL_CMP_PKISTATUS_keyUpdateWarning 6
  198. typedef ASN1_INTEGER OSSL_CMP_PKISTATUS;
  199. DECLARE_ASN1_ITEM(OSSL_CMP_PKISTATUS)
  200. #define OSSL_CMP_CERTORENCCERT_CERTIFICATE 0
  201. #define OSSL_CMP_CERTORENCCERT_ENCRYPTEDCERT 1
  202. /* data type declarations */
  203. typedef struct ossl_cmp_ctx_st OSSL_CMP_CTX;
  204. typedef struct ossl_cmp_pkiheader_st OSSL_CMP_PKIHEADER;
  205. DECLARE_ASN1_FUNCTIONS(OSSL_CMP_PKIHEADER)
  206. typedef struct ossl_cmp_msg_st OSSL_CMP_MSG;
  207. DECLARE_ASN1_DUP_FUNCTION(OSSL_CMP_MSG)
  208. DECLARE_ASN1_ENCODE_FUNCTIONS(OSSL_CMP_MSG, OSSL_CMP_MSG, OSSL_CMP_MSG)
  209. typedef struct ossl_cmp_certstatus_st OSSL_CMP_CERTSTATUS;
  210. /* clang-format off */
  211. SKM_DEFINE_STACK_OF_INTERNAL(OSSL_CMP_CERTSTATUS, OSSL_CMP_CERTSTATUS, OSSL_CMP_CERTSTATUS)
  212. #define sk_OSSL_CMP_CERTSTATUS_num(sk) OPENSSL_sk_num(ossl_check_const_OSSL_CMP_CERTSTATUS_sk_type(sk))
  213. #define sk_OSSL_CMP_CERTSTATUS_value(sk, idx) ((OSSL_CMP_CERTSTATUS *)OPENSSL_sk_value(ossl_check_const_OSSL_CMP_CERTSTATUS_sk_type(sk), (idx)))
  214. #define sk_OSSL_CMP_CERTSTATUS_new(cmp) ((STACK_OF(OSSL_CMP_CERTSTATUS) *)OPENSSL_sk_new(ossl_check_OSSL_CMP_CERTSTATUS_compfunc_type(cmp)))
  215. #define sk_OSSL_CMP_CERTSTATUS_new_null() ((STACK_OF(OSSL_CMP_CERTSTATUS) *)OPENSSL_sk_new_null())
  216. #define sk_OSSL_CMP_CERTSTATUS_new_reserve(cmp, n) ((STACK_OF(OSSL_CMP_CERTSTATUS) *)OPENSSL_sk_new_reserve(ossl_check_OSSL_CMP_CERTSTATUS_compfunc_type(cmp), (n)))
  217. #define sk_OSSL_CMP_CERTSTATUS_reserve(sk, n) OPENSSL_sk_reserve(ossl_check_OSSL_CMP_CERTSTATUS_sk_type(sk), (n))
  218. #define sk_OSSL_CMP_CERTSTATUS_free(sk) OPENSSL_sk_free(ossl_check_OSSL_CMP_CERTSTATUS_sk_type(sk))
  219. #define sk_OSSL_CMP_CERTSTATUS_zero(sk) OPENSSL_sk_zero(ossl_check_OSSL_CMP_CERTSTATUS_sk_type(sk))
  220. #define sk_OSSL_CMP_CERTSTATUS_delete(sk, i) ((OSSL_CMP_CERTSTATUS *)OPENSSL_sk_delete(ossl_check_OSSL_CMP_CERTSTATUS_sk_type(sk), (i)))
  221. #define sk_OSSL_CMP_CERTSTATUS_delete_ptr(sk, ptr) ((OSSL_CMP_CERTSTATUS *)OPENSSL_sk_delete_ptr(ossl_check_OSSL_CMP_CERTSTATUS_sk_type(sk), ossl_check_OSSL_CMP_CERTSTATUS_type(ptr)))
  222. #define sk_OSSL_CMP_CERTSTATUS_push(sk, ptr) OPENSSL_sk_push(ossl_check_OSSL_CMP_CERTSTATUS_sk_type(sk), ossl_check_OSSL_CMP_CERTSTATUS_type(ptr))
  223. #define sk_OSSL_CMP_CERTSTATUS_unshift(sk, ptr) OPENSSL_sk_unshift(ossl_check_OSSL_CMP_CERTSTATUS_sk_type(sk), ossl_check_OSSL_CMP_CERTSTATUS_type(ptr))
  224. #define sk_OSSL_CMP_CERTSTATUS_pop(sk) ((OSSL_CMP_CERTSTATUS *)OPENSSL_sk_pop(ossl_check_OSSL_CMP_CERTSTATUS_sk_type(sk)))
  225. #define sk_OSSL_CMP_CERTSTATUS_shift(sk) ((OSSL_CMP_CERTSTATUS *)OPENSSL_sk_shift(ossl_check_OSSL_CMP_CERTSTATUS_sk_type(sk)))
  226. #define sk_OSSL_CMP_CERTSTATUS_pop_free(sk, freefunc) OPENSSL_sk_pop_free(ossl_check_OSSL_CMP_CERTSTATUS_sk_type(sk), ossl_check_OSSL_CMP_CERTSTATUS_freefunc_type(freefunc))
  227. #define sk_OSSL_CMP_CERTSTATUS_insert(sk, ptr, idx) OPENSSL_sk_insert(ossl_check_OSSL_CMP_CERTSTATUS_sk_type(sk), ossl_check_OSSL_CMP_CERTSTATUS_type(ptr), (idx))
  228. #define sk_OSSL_CMP_CERTSTATUS_set(sk, idx, ptr) ((OSSL_CMP_CERTSTATUS *)OPENSSL_sk_set(ossl_check_OSSL_CMP_CERTSTATUS_sk_type(sk), (idx), ossl_check_OSSL_CMP_CERTSTATUS_type(ptr)))
  229. #define sk_OSSL_CMP_CERTSTATUS_find(sk, ptr) OPENSSL_sk_find(ossl_check_OSSL_CMP_CERTSTATUS_sk_type(sk), ossl_check_OSSL_CMP_CERTSTATUS_type(ptr))
  230. #define sk_OSSL_CMP_CERTSTATUS_find_ex(sk, ptr) OPENSSL_sk_find_ex(ossl_check_OSSL_CMP_CERTSTATUS_sk_type(sk), ossl_check_OSSL_CMP_CERTSTATUS_type(ptr))
  231. #define sk_OSSL_CMP_CERTSTATUS_find_all(sk, ptr, pnum) OPENSSL_sk_find_all(ossl_check_OSSL_CMP_CERTSTATUS_sk_type(sk), ossl_check_OSSL_CMP_CERTSTATUS_type(ptr), pnum)
  232. #define sk_OSSL_CMP_CERTSTATUS_sort(sk) OPENSSL_sk_sort(ossl_check_OSSL_CMP_CERTSTATUS_sk_type(sk))
  233. #define sk_OSSL_CMP_CERTSTATUS_is_sorted(sk) OPENSSL_sk_is_sorted(ossl_check_const_OSSL_CMP_CERTSTATUS_sk_type(sk))
  234. #define sk_OSSL_CMP_CERTSTATUS_dup(sk) ((STACK_OF(OSSL_CMP_CERTSTATUS) *)OPENSSL_sk_dup(ossl_check_const_OSSL_CMP_CERTSTATUS_sk_type(sk)))
  235. #define sk_OSSL_CMP_CERTSTATUS_deep_copy(sk, copyfunc, freefunc) ((STACK_OF(OSSL_CMP_CERTSTATUS) *)OPENSSL_sk_deep_copy(ossl_check_const_OSSL_CMP_CERTSTATUS_sk_type(sk), ossl_check_OSSL_CMP_CERTSTATUS_copyfunc_type(copyfunc), ossl_check_OSSL_CMP_CERTSTATUS_freefunc_type(freefunc)))
  236. #define sk_OSSL_CMP_CERTSTATUS_set_cmp_func(sk, cmp) ((sk_OSSL_CMP_CERTSTATUS_compfunc)OPENSSL_sk_set_cmp_func(ossl_check_OSSL_CMP_CERTSTATUS_sk_type(sk), ossl_check_OSSL_CMP_CERTSTATUS_compfunc_type(cmp)))
  237. /* clang-format on */
  238. typedef struct ossl_cmp_itav_st OSSL_CMP_ITAV;
  239. DECLARE_ASN1_DUP_FUNCTION(OSSL_CMP_ITAV)
  240. /* clang-format off */
  241. SKM_DEFINE_STACK_OF_INTERNAL(OSSL_CMP_ITAV, OSSL_CMP_ITAV, OSSL_CMP_ITAV)
  242. #define sk_OSSL_CMP_ITAV_num(sk) OPENSSL_sk_num(ossl_check_const_OSSL_CMP_ITAV_sk_type(sk))
  243. #define sk_OSSL_CMP_ITAV_value(sk, idx) ((OSSL_CMP_ITAV *)OPENSSL_sk_value(ossl_check_const_OSSL_CMP_ITAV_sk_type(sk), (idx)))
  244. #define sk_OSSL_CMP_ITAV_new(cmp) ((STACK_OF(OSSL_CMP_ITAV) *)OPENSSL_sk_new(ossl_check_OSSL_CMP_ITAV_compfunc_type(cmp)))
  245. #define sk_OSSL_CMP_ITAV_new_null() ((STACK_OF(OSSL_CMP_ITAV) *)OPENSSL_sk_new_null())
  246. #define sk_OSSL_CMP_ITAV_new_reserve(cmp, n) ((STACK_OF(OSSL_CMP_ITAV) *)OPENSSL_sk_new_reserve(ossl_check_OSSL_CMP_ITAV_compfunc_type(cmp), (n)))
  247. #define sk_OSSL_CMP_ITAV_reserve(sk, n) OPENSSL_sk_reserve(ossl_check_OSSL_CMP_ITAV_sk_type(sk), (n))
  248. #define sk_OSSL_CMP_ITAV_free(sk) OPENSSL_sk_free(ossl_check_OSSL_CMP_ITAV_sk_type(sk))
  249. #define sk_OSSL_CMP_ITAV_zero(sk) OPENSSL_sk_zero(ossl_check_OSSL_CMP_ITAV_sk_type(sk))
  250. #define sk_OSSL_CMP_ITAV_delete(sk, i) ((OSSL_CMP_ITAV *)OPENSSL_sk_delete(ossl_check_OSSL_CMP_ITAV_sk_type(sk), (i)))
  251. #define sk_OSSL_CMP_ITAV_delete_ptr(sk, ptr) ((OSSL_CMP_ITAV *)OPENSSL_sk_delete_ptr(ossl_check_OSSL_CMP_ITAV_sk_type(sk), ossl_check_OSSL_CMP_ITAV_type(ptr)))
  252. #define sk_OSSL_CMP_ITAV_push(sk, ptr) OPENSSL_sk_push(ossl_check_OSSL_CMP_ITAV_sk_type(sk), ossl_check_OSSL_CMP_ITAV_type(ptr))
  253. #define sk_OSSL_CMP_ITAV_unshift(sk, ptr) OPENSSL_sk_unshift(ossl_check_OSSL_CMP_ITAV_sk_type(sk), ossl_check_OSSL_CMP_ITAV_type(ptr))
  254. #define sk_OSSL_CMP_ITAV_pop(sk) ((OSSL_CMP_ITAV *)OPENSSL_sk_pop(ossl_check_OSSL_CMP_ITAV_sk_type(sk)))
  255. #define sk_OSSL_CMP_ITAV_shift(sk) ((OSSL_CMP_ITAV *)OPENSSL_sk_shift(ossl_check_OSSL_CMP_ITAV_sk_type(sk)))
  256. #define sk_OSSL_CMP_ITAV_pop_free(sk, freefunc) OPENSSL_sk_pop_free(ossl_check_OSSL_CMP_ITAV_sk_type(sk), ossl_check_OSSL_CMP_ITAV_freefunc_type(freefunc))
  257. #define sk_OSSL_CMP_ITAV_insert(sk, ptr, idx) OPENSSL_sk_insert(ossl_check_OSSL_CMP_ITAV_sk_type(sk), ossl_check_OSSL_CMP_ITAV_type(ptr), (idx))
  258. #define sk_OSSL_CMP_ITAV_set(sk, idx, ptr) ((OSSL_CMP_ITAV *)OPENSSL_sk_set(ossl_check_OSSL_CMP_ITAV_sk_type(sk), (idx), ossl_check_OSSL_CMP_ITAV_type(ptr)))
  259. #define sk_OSSL_CMP_ITAV_find(sk, ptr) OPENSSL_sk_find(ossl_check_OSSL_CMP_ITAV_sk_type(sk), ossl_check_OSSL_CMP_ITAV_type(ptr))
  260. #define sk_OSSL_CMP_ITAV_find_ex(sk, ptr) OPENSSL_sk_find_ex(ossl_check_OSSL_CMP_ITAV_sk_type(sk), ossl_check_OSSL_CMP_ITAV_type(ptr))
  261. #define sk_OSSL_CMP_ITAV_find_all(sk, ptr, pnum) OPENSSL_sk_find_all(ossl_check_OSSL_CMP_ITAV_sk_type(sk), ossl_check_OSSL_CMP_ITAV_type(ptr), pnum)
  262. #define sk_OSSL_CMP_ITAV_sort(sk) OPENSSL_sk_sort(ossl_check_OSSL_CMP_ITAV_sk_type(sk))
  263. #define sk_OSSL_CMP_ITAV_is_sorted(sk) OPENSSL_sk_is_sorted(ossl_check_const_OSSL_CMP_ITAV_sk_type(sk))
  264. #define sk_OSSL_CMP_ITAV_dup(sk) ((STACK_OF(OSSL_CMP_ITAV) *)OPENSSL_sk_dup(ossl_check_const_OSSL_CMP_ITAV_sk_type(sk)))
  265. #define sk_OSSL_CMP_ITAV_deep_copy(sk, copyfunc, freefunc) ((STACK_OF(OSSL_CMP_ITAV) *)OPENSSL_sk_deep_copy(ossl_check_const_OSSL_CMP_ITAV_sk_type(sk), ossl_check_OSSL_CMP_ITAV_copyfunc_type(copyfunc), ossl_check_OSSL_CMP_ITAV_freefunc_type(freefunc)))
  266. #define sk_OSSL_CMP_ITAV_set_cmp_func(sk, cmp) ((sk_OSSL_CMP_ITAV_compfunc)OPENSSL_sk_set_cmp_func(ossl_check_OSSL_CMP_ITAV_sk_type(sk), ossl_check_OSSL_CMP_ITAV_compfunc_type(cmp)))
  267. /* clang-format on */
  268. typedef struct ossl_cmp_crlstatus_st OSSL_CMP_CRLSTATUS;
  269. /* clang-format off */
  270. SKM_DEFINE_STACK_OF_INTERNAL(OSSL_CMP_CRLSTATUS, OSSL_CMP_CRLSTATUS, OSSL_CMP_CRLSTATUS)
  271. #define sk_OSSL_CMP_CRLSTATUS_num(sk) OPENSSL_sk_num(ossl_check_const_OSSL_CMP_CRLSTATUS_sk_type(sk))
  272. #define sk_OSSL_CMP_CRLSTATUS_value(sk, idx) ((OSSL_CMP_CRLSTATUS *)OPENSSL_sk_value(ossl_check_const_OSSL_CMP_CRLSTATUS_sk_type(sk), (idx)))
  273. #define sk_OSSL_CMP_CRLSTATUS_new(cmp) ((STACK_OF(OSSL_CMP_CRLSTATUS) *)OPENSSL_sk_new(ossl_check_OSSL_CMP_CRLSTATUS_compfunc_type(cmp)))
  274. #define sk_OSSL_CMP_CRLSTATUS_new_null() ((STACK_OF(OSSL_CMP_CRLSTATUS) *)OPENSSL_sk_new_null())
  275. #define sk_OSSL_CMP_CRLSTATUS_new_reserve(cmp, n) ((STACK_OF(OSSL_CMP_CRLSTATUS) *)OPENSSL_sk_new_reserve(ossl_check_OSSL_CMP_CRLSTATUS_compfunc_type(cmp), (n)))
  276. #define sk_OSSL_CMP_CRLSTATUS_reserve(sk, n) OPENSSL_sk_reserve(ossl_check_OSSL_CMP_CRLSTATUS_sk_type(sk), (n))
  277. #define sk_OSSL_CMP_CRLSTATUS_free(sk) OPENSSL_sk_free(ossl_check_OSSL_CMP_CRLSTATUS_sk_type(sk))
  278. #define sk_OSSL_CMP_CRLSTATUS_zero(sk) OPENSSL_sk_zero(ossl_check_OSSL_CMP_CRLSTATUS_sk_type(sk))
  279. #define sk_OSSL_CMP_CRLSTATUS_delete(sk, i) ((OSSL_CMP_CRLSTATUS *)OPENSSL_sk_delete(ossl_check_OSSL_CMP_CRLSTATUS_sk_type(sk), (i)))
  280. #define sk_OSSL_CMP_CRLSTATUS_delete_ptr(sk, ptr) ((OSSL_CMP_CRLSTATUS *)OPENSSL_sk_delete_ptr(ossl_check_OSSL_CMP_CRLSTATUS_sk_type(sk), ossl_check_OSSL_CMP_CRLSTATUS_type(ptr)))
  281. #define sk_OSSL_CMP_CRLSTATUS_push(sk, ptr) OPENSSL_sk_push(ossl_check_OSSL_CMP_CRLSTATUS_sk_type(sk), ossl_check_OSSL_CMP_CRLSTATUS_type(ptr))
  282. #define sk_OSSL_CMP_CRLSTATUS_unshift(sk, ptr) OPENSSL_sk_unshift(ossl_check_OSSL_CMP_CRLSTATUS_sk_type(sk), ossl_check_OSSL_CMP_CRLSTATUS_type(ptr))
  283. #define sk_OSSL_CMP_CRLSTATUS_pop(sk) ((OSSL_CMP_CRLSTATUS *)OPENSSL_sk_pop(ossl_check_OSSL_CMP_CRLSTATUS_sk_type(sk)))
  284. #define sk_OSSL_CMP_CRLSTATUS_shift(sk) ((OSSL_CMP_CRLSTATUS *)OPENSSL_sk_shift(ossl_check_OSSL_CMP_CRLSTATUS_sk_type(sk)))
  285. #define sk_OSSL_CMP_CRLSTATUS_pop_free(sk, freefunc) OPENSSL_sk_pop_free(ossl_check_OSSL_CMP_CRLSTATUS_sk_type(sk), ossl_check_OSSL_CMP_CRLSTATUS_freefunc_type(freefunc))
  286. #define sk_OSSL_CMP_CRLSTATUS_insert(sk, ptr, idx) OPENSSL_sk_insert(ossl_check_OSSL_CMP_CRLSTATUS_sk_type(sk), ossl_check_OSSL_CMP_CRLSTATUS_type(ptr), (idx))
  287. #define sk_OSSL_CMP_CRLSTATUS_set(sk, idx, ptr) ((OSSL_CMP_CRLSTATUS *)OPENSSL_sk_set(ossl_check_OSSL_CMP_CRLSTATUS_sk_type(sk), (idx), ossl_check_OSSL_CMP_CRLSTATUS_type(ptr)))
  288. #define sk_OSSL_CMP_CRLSTATUS_find(sk, ptr) OPENSSL_sk_find(ossl_check_OSSL_CMP_CRLSTATUS_sk_type(sk), ossl_check_OSSL_CMP_CRLSTATUS_type(ptr))
  289. #define sk_OSSL_CMP_CRLSTATUS_find_ex(sk, ptr) OPENSSL_sk_find_ex(ossl_check_OSSL_CMP_CRLSTATUS_sk_type(sk), ossl_check_OSSL_CMP_CRLSTATUS_type(ptr))
  290. #define sk_OSSL_CMP_CRLSTATUS_find_all(sk, ptr, pnum) OPENSSL_sk_find_all(ossl_check_OSSL_CMP_CRLSTATUS_sk_type(sk), ossl_check_OSSL_CMP_CRLSTATUS_type(ptr), pnum)
  291. #define sk_OSSL_CMP_CRLSTATUS_sort(sk) OPENSSL_sk_sort(ossl_check_OSSL_CMP_CRLSTATUS_sk_type(sk))
  292. #define sk_OSSL_CMP_CRLSTATUS_is_sorted(sk) OPENSSL_sk_is_sorted(ossl_check_const_OSSL_CMP_CRLSTATUS_sk_type(sk))
  293. #define sk_OSSL_CMP_CRLSTATUS_dup(sk) ((STACK_OF(OSSL_CMP_CRLSTATUS) *)OPENSSL_sk_dup(ossl_check_const_OSSL_CMP_CRLSTATUS_sk_type(sk)))
  294. #define sk_OSSL_CMP_CRLSTATUS_deep_copy(sk, copyfunc, freefunc) ((STACK_OF(OSSL_CMP_CRLSTATUS) *)OPENSSL_sk_deep_copy(ossl_check_const_OSSL_CMP_CRLSTATUS_sk_type(sk), ossl_check_OSSL_CMP_CRLSTATUS_copyfunc_type(copyfunc), ossl_check_OSSL_CMP_CRLSTATUS_freefunc_type(freefunc)))
  295. #define sk_OSSL_CMP_CRLSTATUS_set_cmp_func(sk, cmp) ((sk_OSSL_CMP_CRLSTATUS_compfunc)OPENSSL_sk_set_cmp_func(ossl_check_OSSL_CMP_CRLSTATUS_sk_type(sk), ossl_check_OSSL_CMP_CRLSTATUS_compfunc_type(cmp)))
  296. /* clang-format on */
  297. typedef OSSL_CRMF_ATTRIBUTETYPEANDVALUE OSSL_CMP_ATAV;
  298. #define OSSL_CMP_ATAV_free OSSL_CRMF_ATTRIBUTETYPEANDVALUE_free
  299. typedef STACK_OF(OSSL_CRMF_ATTRIBUTETYPEANDVALUE) OSSL_CMP_ATAVS;
  300. DECLARE_ASN1_FUNCTIONS(OSSL_CMP_ATAVS)
  301. #define stack_st_OSSL_CMP_ATAV stack_st_OSSL_CRMF_ATTRIBUTETYPEANDVALUE
  302. #define sk_OSSL_CMP_ATAV_num sk_OSSL_CRMF_ATTRIBUTETYPEANDVALUE_num
  303. #define sk_OSSL_CMP_ATAV_value sk_OSSL_CRMF_ATTRIBUTETYPEANDVALUE_value
  304. #define sk_OSSL_CMP_ATAV_push sk_OSSL_CRMF_ATTRIBUTETYPEANDVALUE_push
  305. #define sk_OSSL_CMP_ATAV_pop_free sk_OSSL_CRMF_ATTRIBUTETYPEANDVALUE_pop_free
  306. typedef struct ossl_cmp_revrepcontent_st OSSL_CMP_REVREPCONTENT;
  307. typedef struct ossl_cmp_pkisi_st OSSL_CMP_PKISI;
  308. DECLARE_ASN1_FUNCTIONS(OSSL_CMP_PKISI)
  309. DECLARE_ASN1_DUP_FUNCTION(OSSL_CMP_PKISI)
  310. /* clang-format off */
  311. SKM_DEFINE_STACK_OF_INTERNAL(OSSL_CMP_PKISI, OSSL_CMP_PKISI, OSSL_CMP_PKISI)
  312. #define sk_OSSL_CMP_PKISI_num(sk) OPENSSL_sk_num(ossl_check_const_OSSL_CMP_PKISI_sk_type(sk))
  313. #define sk_OSSL_CMP_PKISI_value(sk, idx) ((OSSL_CMP_PKISI *)OPENSSL_sk_value(ossl_check_const_OSSL_CMP_PKISI_sk_type(sk), (idx)))
  314. #define sk_OSSL_CMP_PKISI_new(cmp) ((STACK_OF(OSSL_CMP_PKISI) *)OPENSSL_sk_new(ossl_check_OSSL_CMP_PKISI_compfunc_type(cmp)))
  315. #define sk_OSSL_CMP_PKISI_new_null() ((STACK_OF(OSSL_CMP_PKISI) *)OPENSSL_sk_new_null())
  316. #define sk_OSSL_CMP_PKISI_new_reserve(cmp, n) ((STACK_OF(OSSL_CMP_PKISI) *)OPENSSL_sk_new_reserve(ossl_check_OSSL_CMP_PKISI_compfunc_type(cmp), (n)))
  317. #define sk_OSSL_CMP_PKISI_reserve(sk, n) OPENSSL_sk_reserve(ossl_check_OSSL_CMP_PKISI_sk_type(sk), (n))
  318. #define sk_OSSL_CMP_PKISI_free(sk) OPENSSL_sk_free(ossl_check_OSSL_CMP_PKISI_sk_type(sk))
  319. #define sk_OSSL_CMP_PKISI_zero(sk) OPENSSL_sk_zero(ossl_check_OSSL_CMP_PKISI_sk_type(sk))
  320. #define sk_OSSL_CMP_PKISI_delete(sk, i) ((OSSL_CMP_PKISI *)OPENSSL_sk_delete(ossl_check_OSSL_CMP_PKISI_sk_type(sk), (i)))
  321. #define sk_OSSL_CMP_PKISI_delete_ptr(sk, ptr) ((OSSL_CMP_PKISI *)OPENSSL_sk_delete_ptr(ossl_check_OSSL_CMP_PKISI_sk_type(sk), ossl_check_OSSL_CMP_PKISI_type(ptr)))
  322. #define sk_OSSL_CMP_PKISI_push(sk, ptr) OPENSSL_sk_push(ossl_check_OSSL_CMP_PKISI_sk_type(sk), ossl_check_OSSL_CMP_PKISI_type(ptr))
  323. #define sk_OSSL_CMP_PKISI_unshift(sk, ptr) OPENSSL_sk_unshift(ossl_check_OSSL_CMP_PKISI_sk_type(sk), ossl_check_OSSL_CMP_PKISI_type(ptr))
  324. #define sk_OSSL_CMP_PKISI_pop(sk) ((OSSL_CMP_PKISI *)OPENSSL_sk_pop(ossl_check_OSSL_CMP_PKISI_sk_type(sk)))
  325. #define sk_OSSL_CMP_PKISI_shift(sk) ((OSSL_CMP_PKISI *)OPENSSL_sk_shift(ossl_check_OSSL_CMP_PKISI_sk_type(sk)))
  326. #define sk_OSSL_CMP_PKISI_pop_free(sk, freefunc) OPENSSL_sk_pop_free(ossl_check_OSSL_CMP_PKISI_sk_type(sk), ossl_check_OSSL_CMP_PKISI_freefunc_type(freefunc))
  327. #define sk_OSSL_CMP_PKISI_insert(sk, ptr, idx) OPENSSL_sk_insert(ossl_check_OSSL_CMP_PKISI_sk_type(sk), ossl_check_OSSL_CMP_PKISI_type(ptr), (idx))
  328. #define sk_OSSL_CMP_PKISI_set(sk, idx, ptr) ((OSSL_CMP_PKISI *)OPENSSL_sk_set(ossl_check_OSSL_CMP_PKISI_sk_type(sk), (idx), ossl_check_OSSL_CMP_PKISI_type(ptr)))
  329. #define sk_OSSL_CMP_PKISI_find(sk, ptr) OPENSSL_sk_find(ossl_check_OSSL_CMP_PKISI_sk_type(sk), ossl_check_OSSL_CMP_PKISI_type(ptr))
  330. #define sk_OSSL_CMP_PKISI_find_ex(sk, ptr) OPENSSL_sk_find_ex(ossl_check_OSSL_CMP_PKISI_sk_type(sk), ossl_check_OSSL_CMP_PKISI_type(ptr))
  331. #define sk_OSSL_CMP_PKISI_find_all(sk, ptr, pnum) OPENSSL_sk_find_all(ossl_check_OSSL_CMP_PKISI_sk_type(sk), ossl_check_OSSL_CMP_PKISI_type(ptr), pnum)
  332. #define sk_OSSL_CMP_PKISI_sort(sk) OPENSSL_sk_sort(ossl_check_OSSL_CMP_PKISI_sk_type(sk))
  333. #define sk_OSSL_CMP_PKISI_is_sorted(sk) OPENSSL_sk_is_sorted(ossl_check_const_OSSL_CMP_PKISI_sk_type(sk))
  334. #define sk_OSSL_CMP_PKISI_dup(sk) ((STACK_OF(OSSL_CMP_PKISI) *)OPENSSL_sk_dup(ossl_check_const_OSSL_CMP_PKISI_sk_type(sk)))
  335. #define sk_OSSL_CMP_PKISI_deep_copy(sk, copyfunc, freefunc) ((STACK_OF(OSSL_CMP_PKISI) *)OPENSSL_sk_deep_copy(ossl_check_const_OSSL_CMP_PKISI_sk_type(sk), ossl_check_OSSL_CMP_PKISI_copyfunc_type(copyfunc), ossl_check_OSSL_CMP_PKISI_freefunc_type(freefunc)))
  336. #define sk_OSSL_CMP_PKISI_set_cmp_func(sk, cmp) ((sk_OSSL_CMP_PKISI_compfunc)OPENSSL_sk_set_cmp_func(ossl_check_OSSL_CMP_PKISI_sk_type(sk), ossl_check_OSSL_CMP_PKISI_compfunc_type(cmp)))
  337. /* clang-format on */
  338. typedef struct ossl_cmp_certrepmessage_st OSSL_CMP_CERTREPMESSAGE;
  339. /* clang-format off */
  340. SKM_DEFINE_STACK_OF_INTERNAL(OSSL_CMP_CERTREPMESSAGE, OSSL_CMP_CERTREPMESSAGE, OSSL_CMP_CERTREPMESSAGE)
  341. #define sk_OSSL_CMP_CERTREPMESSAGE_num(sk) OPENSSL_sk_num(ossl_check_const_OSSL_CMP_CERTREPMESSAGE_sk_type(sk))
  342. #define sk_OSSL_CMP_CERTREPMESSAGE_value(sk, idx) ((OSSL_CMP_CERTREPMESSAGE *)OPENSSL_sk_value(ossl_check_const_OSSL_CMP_CERTREPMESSAGE_sk_type(sk), (idx)))
  343. #define sk_OSSL_CMP_CERTREPMESSAGE_new(cmp) ((STACK_OF(OSSL_CMP_CERTREPMESSAGE) *)OPENSSL_sk_new(ossl_check_OSSL_CMP_CERTREPMESSAGE_compfunc_type(cmp)))
  344. #define sk_OSSL_CMP_CERTREPMESSAGE_new_null() ((STACK_OF(OSSL_CMP_CERTREPMESSAGE) *)OPENSSL_sk_new_null())
  345. #define sk_OSSL_CMP_CERTREPMESSAGE_new_reserve(cmp, n) ((STACK_OF(OSSL_CMP_CERTREPMESSAGE) *)OPENSSL_sk_new_reserve(ossl_check_OSSL_CMP_CERTREPMESSAGE_compfunc_type(cmp), (n)))
  346. #define sk_OSSL_CMP_CERTREPMESSAGE_reserve(sk, n) OPENSSL_sk_reserve(ossl_check_OSSL_CMP_CERTREPMESSAGE_sk_type(sk), (n))
  347. #define sk_OSSL_CMP_CERTREPMESSAGE_free(sk) OPENSSL_sk_free(ossl_check_OSSL_CMP_CERTREPMESSAGE_sk_type(sk))
  348. #define sk_OSSL_CMP_CERTREPMESSAGE_zero(sk) OPENSSL_sk_zero(ossl_check_OSSL_CMP_CERTREPMESSAGE_sk_type(sk))
  349. #define sk_OSSL_CMP_CERTREPMESSAGE_delete(sk, i) ((OSSL_CMP_CERTREPMESSAGE *)OPENSSL_sk_delete(ossl_check_OSSL_CMP_CERTREPMESSAGE_sk_type(sk), (i)))
  350. #define sk_OSSL_CMP_CERTREPMESSAGE_delete_ptr(sk, ptr) ((OSSL_CMP_CERTREPMESSAGE *)OPENSSL_sk_delete_ptr(ossl_check_OSSL_CMP_CERTREPMESSAGE_sk_type(sk), ossl_check_OSSL_CMP_CERTREPMESSAGE_type(ptr)))
  351. #define sk_OSSL_CMP_CERTREPMESSAGE_push(sk, ptr) OPENSSL_sk_push(ossl_check_OSSL_CMP_CERTREPMESSAGE_sk_type(sk), ossl_check_OSSL_CMP_CERTREPMESSAGE_type(ptr))
  352. #define sk_OSSL_CMP_CERTREPMESSAGE_unshift(sk, ptr) OPENSSL_sk_unshift(ossl_check_OSSL_CMP_CERTREPMESSAGE_sk_type(sk), ossl_check_OSSL_CMP_CERTREPMESSAGE_type(ptr))
  353. #define sk_OSSL_CMP_CERTREPMESSAGE_pop(sk) ((OSSL_CMP_CERTREPMESSAGE *)OPENSSL_sk_pop(ossl_check_OSSL_CMP_CERTREPMESSAGE_sk_type(sk)))
  354. #define sk_OSSL_CMP_CERTREPMESSAGE_shift(sk) ((OSSL_CMP_CERTREPMESSAGE *)OPENSSL_sk_shift(ossl_check_OSSL_CMP_CERTREPMESSAGE_sk_type(sk)))
  355. #define sk_OSSL_CMP_CERTREPMESSAGE_pop_free(sk, freefunc) OPENSSL_sk_pop_free(ossl_check_OSSL_CMP_CERTREPMESSAGE_sk_type(sk), ossl_check_OSSL_CMP_CERTREPMESSAGE_freefunc_type(freefunc))
  356. #define sk_OSSL_CMP_CERTREPMESSAGE_insert(sk, ptr, idx) OPENSSL_sk_insert(ossl_check_OSSL_CMP_CERTREPMESSAGE_sk_type(sk), ossl_check_OSSL_CMP_CERTREPMESSAGE_type(ptr), (idx))
  357. #define sk_OSSL_CMP_CERTREPMESSAGE_set(sk, idx, ptr) ((OSSL_CMP_CERTREPMESSAGE *)OPENSSL_sk_set(ossl_check_OSSL_CMP_CERTREPMESSAGE_sk_type(sk), (idx), ossl_check_OSSL_CMP_CERTREPMESSAGE_type(ptr)))
  358. #define sk_OSSL_CMP_CERTREPMESSAGE_find(sk, ptr) OPENSSL_sk_find(ossl_check_OSSL_CMP_CERTREPMESSAGE_sk_type(sk), ossl_check_OSSL_CMP_CERTREPMESSAGE_type(ptr))
  359. #define sk_OSSL_CMP_CERTREPMESSAGE_find_ex(sk, ptr) OPENSSL_sk_find_ex(ossl_check_OSSL_CMP_CERTREPMESSAGE_sk_type(sk), ossl_check_OSSL_CMP_CERTREPMESSAGE_type(ptr))
  360. #define sk_OSSL_CMP_CERTREPMESSAGE_find_all(sk, ptr, pnum) OPENSSL_sk_find_all(ossl_check_OSSL_CMP_CERTREPMESSAGE_sk_type(sk), ossl_check_OSSL_CMP_CERTREPMESSAGE_type(ptr), pnum)
  361. #define sk_OSSL_CMP_CERTREPMESSAGE_sort(sk) OPENSSL_sk_sort(ossl_check_OSSL_CMP_CERTREPMESSAGE_sk_type(sk))
  362. #define sk_OSSL_CMP_CERTREPMESSAGE_is_sorted(sk) OPENSSL_sk_is_sorted(ossl_check_const_OSSL_CMP_CERTREPMESSAGE_sk_type(sk))
  363. #define sk_OSSL_CMP_CERTREPMESSAGE_dup(sk) ((STACK_OF(OSSL_CMP_CERTREPMESSAGE) *)OPENSSL_sk_dup(ossl_check_const_OSSL_CMP_CERTREPMESSAGE_sk_type(sk)))
  364. #define sk_OSSL_CMP_CERTREPMESSAGE_deep_copy(sk, copyfunc, freefunc) ((STACK_OF(OSSL_CMP_CERTREPMESSAGE) *)OPENSSL_sk_deep_copy(ossl_check_const_OSSL_CMP_CERTREPMESSAGE_sk_type(sk), ossl_check_OSSL_CMP_CERTREPMESSAGE_copyfunc_type(copyfunc), ossl_check_OSSL_CMP_CERTREPMESSAGE_freefunc_type(freefunc)))
  365. #define sk_OSSL_CMP_CERTREPMESSAGE_set_cmp_func(sk, cmp) ((sk_OSSL_CMP_CERTREPMESSAGE_compfunc)OPENSSL_sk_set_cmp_func(ossl_check_OSSL_CMP_CERTREPMESSAGE_sk_type(sk), ossl_check_OSSL_CMP_CERTREPMESSAGE_compfunc_type(cmp)))
  366. /* clang-format on */
  367. typedef struct ossl_cmp_pollrep_st OSSL_CMP_POLLREP;
  368. typedef STACK_OF(OSSL_CMP_POLLREP) OSSL_CMP_POLLREPCONTENT;
  369. typedef struct ossl_cmp_certresponse_st OSSL_CMP_CERTRESPONSE;
  370. /* clang-format off */
  371. SKM_DEFINE_STACK_OF_INTERNAL(OSSL_CMP_CERTRESPONSE, OSSL_CMP_CERTRESPONSE, OSSL_CMP_CERTRESPONSE)
  372. #define sk_OSSL_CMP_CERTRESPONSE_num(sk) OPENSSL_sk_num(ossl_check_const_OSSL_CMP_CERTRESPONSE_sk_type(sk))
  373. #define sk_OSSL_CMP_CERTRESPONSE_value(sk, idx) ((OSSL_CMP_CERTRESPONSE *)OPENSSL_sk_value(ossl_check_const_OSSL_CMP_CERTRESPONSE_sk_type(sk), (idx)))
  374. #define sk_OSSL_CMP_CERTRESPONSE_new(cmp) ((STACK_OF(OSSL_CMP_CERTRESPONSE) *)OPENSSL_sk_new(ossl_check_OSSL_CMP_CERTRESPONSE_compfunc_type(cmp)))
  375. #define sk_OSSL_CMP_CERTRESPONSE_new_null() ((STACK_OF(OSSL_CMP_CERTRESPONSE) *)OPENSSL_sk_new_null())
  376. #define sk_OSSL_CMP_CERTRESPONSE_new_reserve(cmp, n) ((STACK_OF(OSSL_CMP_CERTRESPONSE) *)OPENSSL_sk_new_reserve(ossl_check_OSSL_CMP_CERTRESPONSE_compfunc_type(cmp), (n)))
  377. #define sk_OSSL_CMP_CERTRESPONSE_reserve(sk, n) OPENSSL_sk_reserve(ossl_check_OSSL_CMP_CERTRESPONSE_sk_type(sk), (n))
  378. #define sk_OSSL_CMP_CERTRESPONSE_free(sk) OPENSSL_sk_free(ossl_check_OSSL_CMP_CERTRESPONSE_sk_type(sk))
  379. #define sk_OSSL_CMP_CERTRESPONSE_zero(sk) OPENSSL_sk_zero(ossl_check_OSSL_CMP_CERTRESPONSE_sk_type(sk))
  380. #define sk_OSSL_CMP_CERTRESPONSE_delete(sk, i) ((OSSL_CMP_CERTRESPONSE *)OPENSSL_sk_delete(ossl_check_OSSL_CMP_CERTRESPONSE_sk_type(sk), (i)))
  381. #define sk_OSSL_CMP_CERTRESPONSE_delete_ptr(sk, ptr) ((OSSL_CMP_CERTRESPONSE *)OPENSSL_sk_delete_ptr(ossl_check_OSSL_CMP_CERTRESPONSE_sk_type(sk), ossl_check_OSSL_CMP_CERTRESPONSE_type(ptr)))
  382. #define sk_OSSL_CMP_CERTRESPONSE_push(sk, ptr) OPENSSL_sk_push(ossl_check_OSSL_CMP_CERTRESPONSE_sk_type(sk), ossl_check_OSSL_CMP_CERTRESPONSE_type(ptr))
  383. #define sk_OSSL_CMP_CERTRESPONSE_unshift(sk, ptr) OPENSSL_sk_unshift(ossl_check_OSSL_CMP_CERTRESPONSE_sk_type(sk), ossl_check_OSSL_CMP_CERTRESPONSE_type(ptr))
  384. #define sk_OSSL_CMP_CERTRESPONSE_pop(sk) ((OSSL_CMP_CERTRESPONSE *)OPENSSL_sk_pop(ossl_check_OSSL_CMP_CERTRESPONSE_sk_type(sk)))
  385. #define sk_OSSL_CMP_CERTRESPONSE_shift(sk) ((OSSL_CMP_CERTRESPONSE *)OPENSSL_sk_shift(ossl_check_OSSL_CMP_CERTRESPONSE_sk_type(sk)))
  386. #define sk_OSSL_CMP_CERTRESPONSE_pop_free(sk, freefunc) OPENSSL_sk_pop_free(ossl_check_OSSL_CMP_CERTRESPONSE_sk_type(sk), ossl_check_OSSL_CMP_CERTRESPONSE_freefunc_type(freefunc))
  387. #define sk_OSSL_CMP_CERTRESPONSE_insert(sk, ptr, idx) OPENSSL_sk_insert(ossl_check_OSSL_CMP_CERTRESPONSE_sk_type(sk), ossl_check_OSSL_CMP_CERTRESPONSE_type(ptr), (idx))
  388. #define sk_OSSL_CMP_CERTRESPONSE_set(sk, idx, ptr) ((OSSL_CMP_CERTRESPONSE *)OPENSSL_sk_set(ossl_check_OSSL_CMP_CERTRESPONSE_sk_type(sk), (idx), ossl_check_OSSL_CMP_CERTRESPONSE_type(ptr)))
  389. #define sk_OSSL_CMP_CERTRESPONSE_find(sk, ptr) OPENSSL_sk_find(ossl_check_OSSL_CMP_CERTRESPONSE_sk_type(sk), ossl_check_OSSL_CMP_CERTRESPONSE_type(ptr))
  390. #define sk_OSSL_CMP_CERTRESPONSE_find_ex(sk, ptr) OPENSSL_sk_find_ex(ossl_check_OSSL_CMP_CERTRESPONSE_sk_type(sk), ossl_check_OSSL_CMP_CERTRESPONSE_type(ptr))
  391. #define sk_OSSL_CMP_CERTRESPONSE_find_all(sk, ptr, pnum) OPENSSL_sk_find_all(ossl_check_OSSL_CMP_CERTRESPONSE_sk_type(sk), ossl_check_OSSL_CMP_CERTRESPONSE_type(ptr), pnum)
  392. #define sk_OSSL_CMP_CERTRESPONSE_sort(sk) OPENSSL_sk_sort(ossl_check_OSSL_CMP_CERTRESPONSE_sk_type(sk))
  393. #define sk_OSSL_CMP_CERTRESPONSE_is_sorted(sk) OPENSSL_sk_is_sorted(ossl_check_const_OSSL_CMP_CERTRESPONSE_sk_type(sk))
  394. #define sk_OSSL_CMP_CERTRESPONSE_dup(sk) ((STACK_OF(OSSL_CMP_CERTRESPONSE) *)OPENSSL_sk_dup(ossl_check_const_OSSL_CMP_CERTRESPONSE_sk_type(sk)))
  395. #define sk_OSSL_CMP_CERTRESPONSE_deep_copy(sk, copyfunc, freefunc) ((STACK_OF(OSSL_CMP_CERTRESPONSE) *)OPENSSL_sk_deep_copy(ossl_check_const_OSSL_CMP_CERTRESPONSE_sk_type(sk), ossl_check_OSSL_CMP_CERTRESPONSE_copyfunc_type(copyfunc), ossl_check_OSSL_CMP_CERTRESPONSE_freefunc_type(freefunc)))
  396. #define sk_OSSL_CMP_CERTRESPONSE_set_cmp_func(sk, cmp) ((sk_OSSL_CMP_CERTRESPONSE_compfunc)OPENSSL_sk_set_cmp_func(ossl_check_OSSL_CMP_CERTRESPONSE_sk_type(sk), ossl_check_OSSL_CMP_CERTRESPONSE_compfunc_type(cmp)))
  397. /* clang-format on */
  398. typedef STACK_OF(ASN1_UTF8STRING) OSSL_CMP_PKIFREETEXT;
  399. /*
  400. * function DECLARATIONS
  401. */
  402. /* from cmp_asn.c */
  403. OSSL_CMP_ITAV *OSSL_CMP_ITAV_create(ASN1_OBJECT *type, ASN1_TYPE *value);
  404. void OSSL_CMP_ITAV_set0(OSSL_CMP_ITAV *itav, ASN1_OBJECT *type,
  405. ASN1_TYPE *value);
  406. ASN1_OBJECT *OSSL_CMP_ITAV_get0_type(const OSSL_CMP_ITAV *itav);
  407. ASN1_TYPE *OSSL_CMP_ITAV_get0_value(const OSSL_CMP_ITAV *itav);
  408. int OSSL_CMP_ITAV_push0_stack_item(STACK_OF(OSSL_CMP_ITAV) **sk_p,
  409. OSSL_CMP_ITAV *itav);
  410. void OSSL_CMP_ITAV_free(OSSL_CMP_ITAV *itav);
  411. OSSL_CMP_ITAV *OSSL_CMP_ITAV_new0_certProfile(STACK_OF(ASN1_UTF8STRING)
  412. *certProfile);
  413. int OSSL_CMP_ITAV_get0_certProfile(const OSSL_CMP_ITAV *itav,
  414. STACK_OF(ASN1_UTF8STRING) **out);
  415. OSSL_CMP_ITAV *OSSL_CMP_ITAV_new_caCerts(const STACK_OF(X509) *caCerts);
  416. int OSSL_CMP_ITAV_get0_caCerts(const OSSL_CMP_ITAV *itav, STACK_OF(X509) **out);
  417. OSSL_CMP_ITAV *OSSL_CMP_ITAV_new_rootCaCert(const X509 *rootCaCert);
  418. int OSSL_CMP_ITAV_get0_rootCaCert(const OSSL_CMP_ITAV *itav, X509 **out);
  419. OSSL_CMP_ITAV *OSSL_CMP_ITAV_new_rootCaKeyUpdate(const X509 *newWithNew,
  420. const X509 *newWithOld,
  421. const X509 *oldWithNew);
  422. int OSSL_CMP_ITAV_get0_rootCaKeyUpdate(const OSSL_CMP_ITAV *itav,
  423. X509 **newWithNew,
  424. X509 **newWithOld,
  425. X509 **oldWithNew);
  426. OSSL_CMP_CRLSTATUS *OSSL_CMP_CRLSTATUS_create(const X509_CRL *crl,
  427. const X509 *cert, int only_DN);
  428. OSSL_CMP_CRLSTATUS *OSSL_CMP_CRLSTATUS_new1(const DIST_POINT_NAME *dpn,
  429. const GENERAL_NAMES *issuer,
  430. const ASN1_TIME *thisUpdate);
  431. int OSSL_CMP_CRLSTATUS_get0(const OSSL_CMP_CRLSTATUS *crlstatus,
  432. DIST_POINT_NAME **dpn, GENERAL_NAMES **issuer,
  433. ASN1_TIME **thisUpdate);
  434. void OSSL_CMP_CRLSTATUS_free(OSSL_CMP_CRLSTATUS *crlstatus);
  435. OSSL_CMP_ITAV
  436. *OSSL_CMP_ITAV_new0_crlStatusList(STACK_OF(OSSL_CMP_CRLSTATUS) *crlStatusList);
  437. int OSSL_CMP_ITAV_get0_crlStatusList(const OSSL_CMP_ITAV *itav,
  438. STACK_OF(OSSL_CMP_CRLSTATUS) **out);
  439. OSSL_CMP_ITAV *OSSL_CMP_ITAV_new_crls(const X509_CRL *crls);
  440. int OSSL_CMP_ITAV_get0_crls(const OSSL_CMP_ITAV *it, STACK_OF(X509_CRL) **out);
  441. OSSL_CMP_ITAV
  442. *OSSL_CMP_ITAV_new0_certReqTemplate(OSSL_CRMF_CERTTEMPLATE *certTemplate,
  443. OSSL_CMP_ATAVS *keySpec);
  444. int OSSL_CMP_ITAV_get1_certReqTemplate(const OSSL_CMP_ITAV *itav,
  445. OSSL_CRMF_CERTTEMPLATE **certTemplate,
  446. OSSL_CMP_ATAVS **keySpec);
  447. OSSL_CMP_ATAV *OSSL_CMP_ATAV_create(ASN1_OBJECT *type, ASN1_TYPE *value);
  448. void OSSL_CMP_ATAV_set0(OSSL_CMP_ATAV *itav, ASN1_OBJECT *type,
  449. ASN1_TYPE *value);
  450. ASN1_OBJECT *OSSL_CMP_ATAV_get0_type(const OSSL_CMP_ATAV *itav);
  451. ASN1_TYPE *OSSL_CMP_ATAV_get0_value(const OSSL_CMP_ATAV *itav);
  452. OSSL_CMP_ATAV *OSSL_CMP_ATAV_new_algId(const X509_ALGOR *alg);
  453. X509_ALGOR *OSSL_CMP_ATAV_get0_algId(const OSSL_CMP_ATAV *atav);
  454. OSSL_CMP_ATAV *OSSL_CMP_ATAV_new_rsaKeyLen(int len);
  455. int OSSL_CMP_ATAV_get_rsaKeyLen(const OSSL_CMP_ATAV *atav);
  456. int OSSL_CMP_ATAV_push1(OSSL_CMP_ATAVS **sk_p, const OSSL_CMP_ATAV *atav);
  457. void OSSL_CMP_MSG_free(OSSL_CMP_MSG *msg);
  458. /* from cmp_ctx.c */
  459. OSSL_CMP_CTX *OSSL_CMP_CTX_new(OSSL_LIB_CTX *libctx, const char *propq);
  460. void OSSL_CMP_CTX_free(OSSL_CMP_CTX *ctx);
  461. int OSSL_CMP_CTX_reinit(OSSL_CMP_CTX *ctx);
  462. OSSL_LIB_CTX *OSSL_CMP_CTX_get0_libctx(const OSSL_CMP_CTX *ctx);
  463. const char *OSSL_CMP_CTX_get0_propq(const OSSL_CMP_CTX *ctx);
  464. /* CMP general options: */
  465. #define OSSL_CMP_OPT_LOG_VERBOSITY 0
  466. /* CMP transfer options: */
  467. #define OSSL_CMP_OPT_KEEP_ALIVE 10
  468. #define OSSL_CMP_OPT_MSG_TIMEOUT 11
  469. #define OSSL_CMP_OPT_TOTAL_TIMEOUT 12
  470. #define OSSL_CMP_OPT_USE_TLS 13
  471. /* CMP request options: */
  472. #define OSSL_CMP_OPT_VALIDITY_DAYS 20
  473. #define OSSL_CMP_OPT_SUBJECTALTNAME_NODEFAULT 21
  474. #define OSSL_CMP_OPT_SUBJECTALTNAME_CRITICAL 22
  475. #define OSSL_CMP_OPT_POLICIES_CRITICAL 23
  476. #define OSSL_CMP_OPT_POPO_METHOD 24
  477. #define OSSL_CMP_OPT_IMPLICIT_CONFIRM 25
  478. #define OSSL_CMP_OPT_DISABLE_CONFIRM 26
  479. #define OSSL_CMP_OPT_REVOCATION_REASON 27
  480. /* CMP protection options: */
  481. #define OSSL_CMP_OPT_UNPROTECTED_SEND 30
  482. #define OSSL_CMP_OPT_UNPROTECTED_ERRORS 31
  483. #define OSSL_CMP_OPT_OWF_ALGNID 32
  484. #define OSSL_CMP_OPT_MAC_ALGNID 33
  485. #define OSSL_CMP_OPT_DIGEST_ALGNID 34
  486. #define OSSL_CMP_OPT_IGNORE_KEYUSAGE 35
  487. #define OSSL_CMP_OPT_PERMIT_TA_IN_EXTRACERTS_FOR_IR 36
  488. #define OSSL_CMP_OPT_NO_CACHE_EXTRACERTS 37
  489. int OSSL_CMP_CTX_set_option(OSSL_CMP_CTX *ctx, int opt, int val);
  490. int OSSL_CMP_CTX_get_option(const OSSL_CMP_CTX *ctx, int opt);
  491. /* CMP-specific callback for logging and outputting the error queue: */
  492. int OSSL_CMP_CTX_set_log_cb(OSSL_CMP_CTX *ctx, OSSL_CMP_log_cb_t cb);
  493. #define OSSL_CMP_CTX_set_log_verbosity(ctx, level) \
  494. OSSL_CMP_CTX_set_option(ctx, OSSL_CMP_OPT_LOG_VERBOSITY, level)
  495. void OSSL_CMP_CTX_print_errors(const OSSL_CMP_CTX *ctx);
  496. /* message transfer: */
  497. int OSSL_CMP_CTX_set1_serverPath(OSSL_CMP_CTX *ctx, const char *path);
  498. int OSSL_CMP_CTX_set1_server(OSSL_CMP_CTX *ctx, const char *address);
  499. int OSSL_CMP_CTX_set_serverPort(OSSL_CMP_CTX *ctx, int port);
  500. int OSSL_CMP_CTX_set1_proxy(OSSL_CMP_CTX *ctx, const char *name);
  501. int OSSL_CMP_CTX_set1_no_proxy(OSSL_CMP_CTX *ctx, const char *names);
  502. #ifndef OPENSSL_NO_HTTP
  503. int OSSL_CMP_CTX_set_http_cb(OSSL_CMP_CTX *ctx, OSSL_HTTP_bio_cb_t cb);
  504. int OSSL_CMP_CTX_set_http_cb_arg(OSSL_CMP_CTX *ctx, void *arg);
  505. void *OSSL_CMP_CTX_get_http_cb_arg(const OSSL_CMP_CTX *ctx);
  506. #endif
  507. typedef OSSL_CMP_MSG *(*OSSL_CMP_transfer_cb_t)(OSSL_CMP_CTX *ctx,
  508. const OSSL_CMP_MSG *req);
  509. int OSSL_CMP_CTX_set_transfer_cb(OSSL_CMP_CTX *ctx, OSSL_CMP_transfer_cb_t cb);
  510. int OSSL_CMP_CTX_set_transfer_cb_arg(OSSL_CMP_CTX *ctx, void *arg);
  511. void *OSSL_CMP_CTX_get_transfer_cb_arg(const OSSL_CMP_CTX *ctx);
  512. /* server authentication: */
  513. int OSSL_CMP_CTX_set1_srvCert(OSSL_CMP_CTX *ctx, X509 *cert);
  514. int OSSL_CMP_CTX_set1_expected_sender(OSSL_CMP_CTX *ctx, const X509_NAME *name);
  515. int OSSL_CMP_CTX_set0_trustedStore(OSSL_CMP_CTX *ctx, X509_STORE *store);
  516. #define OSSL_CMP_CTX_set0_trusted OSSL_CMP_CTX_set0_trustedStore
  517. X509_STORE *OSSL_CMP_CTX_get0_trustedStore(const OSSL_CMP_CTX *ctx);
  518. #define OSSL_CMP_CTX_get0_trusted OSSL_CMP_CTX_get0_trustedStore
  519. int OSSL_CMP_CTX_set1_untrusted(OSSL_CMP_CTX *ctx, STACK_OF(X509) *certs);
  520. STACK_OF(X509) *OSSL_CMP_CTX_get0_untrusted(const OSSL_CMP_CTX *ctx);
  521. /* client authentication: */
  522. int OSSL_CMP_CTX_set1_cert(OSSL_CMP_CTX *ctx, X509 *cert);
  523. int OSSL_CMP_CTX_build_cert_chain(OSSL_CMP_CTX *ctx, X509_STORE *own_trusted,
  524. STACK_OF(X509) *candidates);
  525. int OSSL_CMP_CTX_set1_pkey(OSSL_CMP_CTX *ctx, EVP_PKEY *pkey);
  526. int OSSL_CMP_CTX_set1_referenceValue(OSSL_CMP_CTX *ctx,
  527. const unsigned char *ref, int len);
  528. int OSSL_CMP_CTX_set1_secretValue(OSSL_CMP_CTX *ctx,
  529. const unsigned char *sec, int len);
  530. /* CMP message header and extra certificates: */
  531. int OSSL_CMP_CTX_set1_recipient(OSSL_CMP_CTX *ctx, const X509_NAME *name);
  532. int OSSL_CMP_CTX_push0_geninfo_ITAV(OSSL_CMP_CTX *ctx, OSSL_CMP_ITAV *itav);
  533. int OSSL_CMP_CTX_reset_geninfo_ITAVs(OSSL_CMP_CTX *ctx);
  534. STACK_OF(OSSL_CMP_ITAV)
  535. *OSSL_CMP_CTX_get0_geninfo_ITAVs(const OSSL_CMP_CTX *ctx);
  536. int OSSL_CMP_CTX_set1_extraCertsOut(OSSL_CMP_CTX *ctx,
  537. STACK_OF(X509) *extraCertsOut);
  538. /* certificate template: */
  539. int OSSL_CMP_CTX_set0_newPkey(OSSL_CMP_CTX *ctx, int priv, EVP_PKEY *pkey);
  540. EVP_PKEY *OSSL_CMP_CTX_get0_newPkey(const OSSL_CMP_CTX *ctx, int priv);
  541. int OSSL_CMP_CTX_set1_issuer(OSSL_CMP_CTX *ctx, const X509_NAME *name);
  542. int OSSL_CMP_CTX_set1_serialNumber(OSSL_CMP_CTX *ctx, const ASN1_INTEGER *sn);
  543. int OSSL_CMP_CTX_set1_subjectName(OSSL_CMP_CTX *ctx, const X509_NAME *name);
  544. int OSSL_CMP_CTX_push1_subjectAltName(OSSL_CMP_CTX *ctx,
  545. const GENERAL_NAME *name);
  546. int OSSL_CMP_CTX_set0_reqExtensions(OSSL_CMP_CTX *ctx, X509_EXTENSIONS *exts);
  547. int OSSL_CMP_CTX_reqExtensions_have_SAN(OSSL_CMP_CTX *ctx);
  548. int OSSL_CMP_CTX_push0_policy(OSSL_CMP_CTX *ctx, POLICYINFO *pinfo);
  549. int OSSL_CMP_CTX_set1_oldCert(OSSL_CMP_CTX *ctx, X509 *cert);
  550. int OSSL_CMP_CTX_set1_p10CSR(OSSL_CMP_CTX *ctx, const X509_REQ *csr);
  551. /* misc body contents: */
  552. int OSSL_CMP_CTX_push0_genm_ITAV(OSSL_CMP_CTX *ctx, OSSL_CMP_ITAV *itav);
  553. /* certificate confirmation: */
  554. typedef int (*OSSL_CMP_certConf_cb_t)(OSSL_CMP_CTX *ctx, X509 *cert,
  555. int fail_info, const char **txt);
  556. int OSSL_CMP_certConf_cb(OSSL_CMP_CTX *ctx, X509 *cert, int fail_info,
  557. const char **text);
  558. int OSSL_CMP_CTX_set_certConf_cb(OSSL_CMP_CTX *ctx, OSSL_CMP_certConf_cb_t cb);
  559. int OSSL_CMP_CTX_set_certConf_cb_arg(OSSL_CMP_CTX *ctx, void *arg);
  560. void *OSSL_CMP_CTX_get_certConf_cb_arg(const OSSL_CMP_CTX *ctx);
  561. /* result fetching: */
  562. int OSSL_CMP_CTX_get_status(const OSSL_CMP_CTX *ctx);
  563. OSSL_CMP_PKIFREETEXT *OSSL_CMP_CTX_get0_statusString(const OSSL_CMP_CTX *ctx);
  564. int OSSL_CMP_CTX_get_failInfoCode(const OSSL_CMP_CTX *ctx);
  565. #define OSSL_CMP_PKISI_BUFLEN 1024
  566. X509 *OSSL_CMP_CTX_get0_validatedSrvCert(const OSSL_CMP_CTX *ctx);
  567. X509 *OSSL_CMP_CTX_get0_newCert(const OSSL_CMP_CTX *ctx);
  568. STACK_OF(X509) *OSSL_CMP_CTX_get1_newChain(const OSSL_CMP_CTX *ctx);
  569. STACK_OF(X509) *OSSL_CMP_CTX_get1_caPubs(const OSSL_CMP_CTX *ctx);
  570. STACK_OF(X509) *OSSL_CMP_CTX_get1_extraCertsIn(const OSSL_CMP_CTX *ctx);
  571. int OSSL_CMP_CTX_set1_transactionID(OSSL_CMP_CTX *ctx,
  572. const ASN1_OCTET_STRING *id);
  573. int OSSL_CMP_CTX_set1_senderNonce(OSSL_CMP_CTX *ctx,
  574. const ASN1_OCTET_STRING *nonce);
  575. /* from cmp_status.c */
  576. char *OSSL_CMP_CTX_snprint_PKIStatus(const OSSL_CMP_CTX *ctx, char *buf,
  577. size_t bufsize);
  578. char *OSSL_CMP_snprint_PKIStatusInfo(const OSSL_CMP_PKISI *statusInfo,
  579. char *buf, size_t bufsize);
  580. OSSL_CMP_PKISI *
  581. OSSL_CMP_STATUSINFO_new(int status, int fail_info, const char *text);
  582. /* from cmp_hdr.c */
  583. ASN1_OCTET_STRING *OSSL_CMP_HDR_get0_transactionID(const OSSL_CMP_PKIHEADER *hdr);
  584. ASN1_OCTET_STRING *OSSL_CMP_HDR_get0_recipNonce(const OSSL_CMP_PKIHEADER *hdr);
  585. STACK_OF(OSSL_CMP_ITAV)
  586. *OSSL_CMP_HDR_get0_geninfo_ITAVs(const OSSL_CMP_PKIHEADER *hdr);
  587. /* from cmp_msg.c */
  588. OSSL_CMP_PKIHEADER *OSSL_CMP_MSG_get0_header(const OSSL_CMP_MSG *msg);
  589. int OSSL_CMP_MSG_get_bodytype(const OSSL_CMP_MSG *msg);
  590. X509_PUBKEY *OSSL_CMP_MSG_get0_certreq_publickey(const OSSL_CMP_MSG *msg);
  591. int OSSL_CMP_MSG_update_transactionID(OSSL_CMP_CTX *ctx, OSSL_CMP_MSG *msg);
  592. int OSSL_CMP_MSG_update_recipNonce(OSSL_CMP_CTX *ctx, OSSL_CMP_MSG *msg);
  593. OSSL_CRMF_MSG *OSSL_CMP_CTX_setup_CRM(OSSL_CMP_CTX *ctx, int for_KUR, int rid);
  594. OSSL_CMP_MSG *OSSL_CMP_MSG_read(const char *file, OSSL_LIB_CTX *libctx,
  595. const char *propq);
  596. int OSSL_CMP_MSG_write(const char *file, const OSSL_CMP_MSG *msg);
  597. OSSL_CMP_MSG *d2i_OSSL_CMP_MSG_bio(BIO *bio, OSSL_CMP_MSG **msg);
  598. int i2d_OSSL_CMP_MSG_bio(BIO *bio, const OSSL_CMP_MSG *msg);
  599. /* from cmp_vfy.c */
  600. int OSSL_CMP_validate_msg(OSSL_CMP_CTX *ctx, const OSSL_CMP_MSG *msg);
  601. int OSSL_CMP_validate_cert_path(const OSSL_CMP_CTX *ctx,
  602. X509_STORE *trusted_store, X509 *cert);
  603. /* from cmp_http.c */
  604. #ifndef OPENSSL_NO_HTTP
  605. OSSL_CMP_MSG *OSSL_CMP_MSG_http_perform(OSSL_CMP_CTX *ctx,
  606. const OSSL_CMP_MSG *req);
  607. #endif
  608. /* from cmp_server.c */
  609. typedef struct ossl_cmp_srv_ctx_st OSSL_CMP_SRV_CTX;
  610. OSSL_CMP_MSG *OSSL_CMP_SRV_process_request(OSSL_CMP_SRV_CTX *srv_ctx,
  611. const OSSL_CMP_MSG *req);
  612. OSSL_CMP_MSG *OSSL_CMP_CTX_server_perform(OSSL_CMP_CTX *client_ctx,
  613. const OSSL_CMP_MSG *req);
  614. OSSL_CMP_SRV_CTX *OSSL_CMP_SRV_CTX_new(OSSL_LIB_CTX *libctx, const char *propq);
  615. void OSSL_CMP_SRV_CTX_free(OSSL_CMP_SRV_CTX *srv_ctx);
  616. typedef OSSL_CMP_PKISI *(*OSSL_CMP_SRV_cert_request_cb_t)(OSSL_CMP_SRV_CTX *srv_ctx, const OSSL_CMP_MSG *req, int certReqId,
  617. const OSSL_CRMF_MSG *crm, const X509_REQ *p10cr,
  618. X509 **certOut, STACK_OF(X509) **chainOut, STACK_OF(X509) **caPubs);
  619. typedef OSSL_CMP_PKISI *(*OSSL_CMP_SRV_rr_cb_t)(OSSL_CMP_SRV_CTX *srv_ctx,
  620. const OSSL_CMP_MSG *req,
  621. const X509_NAME *issuer,
  622. const ASN1_INTEGER *serial);
  623. typedef int (*OSSL_CMP_SRV_genm_cb_t)(OSSL_CMP_SRV_CTX *srv_ctx,
  624. const OSSL_CMP_MSG *req,
  625. const STACK_OF(OSSL_CMP_ITAV) *in,
  626. STACK_OF(OSSL_CMP_ITAV) **out);
  627. typedef void (*OSSL_CMP_SRV_error_cb_t)(OSSL_CMP_SRV_CTX *srv_ctx,
  628. const OSSL_CMP_MSG *req,
  629. const OSSL_CMP_PKISI *statusInfo,
  630. const ASN1_INTEGER *errorCode,
  631. const OSSL_CMP_PKIFREETEXT *errDetails);
  632. typedef int (*OSSL_CMP_SRV_certConf_cb_t)(OSSL_CMP_SRV_CTX *srv_ctx,
  633. const OSSL_CMP_MSG *req,
  634. int certReqId,
  635. const ASN1_OCTET_STRING *certHash,
  636. const OSSL_CMP_PKISI *si);
  637. typedef int (*OSSL_CMP_SRV_pollReq_cb_t)(OSSL_CMP_SRV_CTX *srv_ctx,
  638. const OSSL_CMP_MSG *req, int certReqId,
  639. OSSL_CMP_MSG **certReq,
  640. int64_t *check_after);
  641. int OSSL_CMP_SRV_CTX_init(OSSL_CMP_SRV_CTX *srv_ctx, void *custom_ctx,
  642. OSSL_CMP_SRV_cert_request_cb_t process_cert_request,
  643. OSSL_CMP_SRV_rr_cb_t process_rr,
  644. OSSL_CMP_SRV_genm_cb_t process_genm,
  645. OSSL_CMP_SRV_error_cb_t process_error,
  646. OSSL_CMP_SRV_certConf_cb_t process_certConf,
  647. OSSL_CMP_SRV_pollReq_cb_t process_pollReq);
  648. typedef int (*OSSL_CMP_SRV_delayed_delivery_cb_t)(OSSL_CMP_SRV_CTX *srv_ctx,
  649. const OSSL_CMP_MSG *req);
  650. typedef int (*OSSL_CMP_SRV_clean_transaction_cb_t)(OSSL_CMP_SRV_CTX *srv_ctx,
  651. const ASN1_OCTET_STRING *id);
  652. int OSSL_CMP_SRV_CTX_init_trans(OSSL_CMP_SRV_CTX *srv_ctx,
  653. OSSL_CMP_SRV_delayed_delivery_cb_t delay,
  654. OSSL_CMP_SRV_clean_transaction_cb_t clean);
  655. OSSL_CMP_CTX *OSSL_CMP_SRV_CTX_get0_cmp_ctx(const OSSL_CMP_SRV_CTX *srv_ctx);
  656. void *OSSL_CMP_SRV_CTX_get0_custom_ctx(const OSSL_CMP_SRV_CTX *srv_ctx);
  657. int OSSL_CMP_SRV_CTX_set_send_unprotected_errors(OSSL_CMP_SRV_CTX *srv_ctx,
  658. int val);
  659. int OSSL_CMP_SRV_CTX_set_accept_unprotected(OSSL_CMP_SRV_CTX *srv_ctx, int val);
  660. int OSSL_CMP_SRV_CTX_set_accept_raverified(OSSL_CMP_SRV_CTX *srv_ctx, int val);
  661. int OSSL_CMP_SRV_CTX_set_grant_implicit_confirm(OSSL_CMP_SRV_CTX *srv_ctx,
  662. int val);
  663. /* from cmp_client.c */
  664. X509 *OSSL_CMP_exec_certreq(OSSL_CMP_CTX *ctx, int req_type,
  665. const OSSL_CRMF_MSG *crm);
  666. #define OSSL_CMP_IR 0
  667. #define OSSL_CMP_CR 2
  668. #define OSSL_CMP_P10CR 4
  669. #define OSSL_CMP_KUR 7
  670. #define OSSL_CMP_GENM 21
  671. #define OSSL_CMP_ERROR 23
  672. #define OSSL_CMP_exec_IR_ses(ctx) \
  673. OSSL_CMP_exec_certreq(ctx, OSSL_CMP_IR, NULL)
  674. #define OSSL_CMP_exec_CR_ses(ctx) \
  675. OSSL_CMP_exec_certreq(ctx, OSSL_CMP_CR, NULL)
  676. #define OSSL_CMP_exec_P10CR_ses(ctx) \
  677. OSSL_CMP_exec_certreq(ctx, OSSL_CMP_P10CR, NULL)
  678. #define OSSL_CMP_exec_KUR_ses(ctx) \
  679. OSSL_CMP_exec_certreq(ctx, OSSL_CMP_KUR, NULL)
  680. int OSSL_CMP_try_certreq(OSSL_CMP_CTX *ctx, int req_type,
  681. const OSSL_CRMF_MSG *crm, int *checkAfter);
  682. int OSSL_CMP_exec_RR_ses(OSSL_CMP_CTX *ctx);
  683. STACK_OF(OSSL_CMP_ITAV) *OSSL_CMP_exec_GENM_ses(OSSL_CMP_CTX *ctx);
  684. /* from cmp_genm.c */
  685. int OSSL_CMP_get1_caCerts(OSSL_CMP_CTX *ctx, STACK_OF(X509) **out);
  686. int OSSL_CMP_get1_rootCaKeyUpdate(OSSL_CMP_CTX *ctx,
  687. const X509 *oldWithOld, X509 **newWithNew,
  688. X509 **newWithOld, X509 **oldWithNew);
  689. int OSSL_CMP_get1_crlUpdate(OSSL_CMP_CTX *ctx, const X509 *crlcert,
  690. const X509_CRL *last_crl,
  691. X509_CRL **crl);
  692. int OSSL_CMP_get1_certReqTemplate(OSSL_CMP_CTX *ctx,
  693. OSSL_CRMF_CERTTEMPLATE **certTemplate,
  694. OSSL_CMP_ATAVS **keySpec);
  695. #ifdef __cplusplus
  696. }
  697. #endif
  698. #endif /* !defined(OPENSSL_NO_CMP) */
  699. #endif /* !defined(OPENSSL_CMP_H) */