1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
|
/***************************************************************************
openssl_cert.h - description
-------------------
begin : Tue May 14 2002
copyright : (C) 2002 by ARRL
author : Jon Bloom
email : jbloom@arrl.org
revision : $Id: openssl_cert.h,v 1.9 2005/02/26 11:03:38 ke3z Exp $
***************************************************************************/
#ifndef OPENSSL_CERT_H
#define OPENSSL_CERT_H
/** \file
* OpenSSL X509 certificate interface functions.
*/
#include "openssl/x509.h"
#undef CLIENT_STATIC
#ifndef LOTW_SERVER
#define CLIENT_STATIC static
#else
#define CLIENT_STATIC
#endif
typedef STACK_OF(X509) TQSL_X509_STACK;
typedef struct {
char *name_buf;
int name_buf_size;
char *value_buf;
int value_buf_size;
} TQSL_X509_NAME_ITEM;
namespace tqsllib {
typedef enum { ROOTCERT = 0, CACERT, USERCERT } certtype;
int tqsl_import_cert(const char *cert, certtype type, int(*cb)(int, const char *, void *), void *);
} // namespace
#if defined(LOTW_SERVER) || defined(OPENSSL_CERT_SOURCE)
#ifdef __cplusplus
extern "C" {
#endif
/// Loads a stack of certificates from the caller-supplied BIO
/** See the OpenSSL documentation for background on BIO operations.
*
* Returns a pointer to an OpenSSL X509 stack, as used by
* tqsl_ssl_verify_cert()
*/
CLIENT_STATIC TQSL_X509_STACK *tqsl_ssl_load_certs_from_BIO(BIO *in);
/// Loads a stack of certificates from a file
/** See tqsl_ssl_load_certs_from_BIO()
*/
CLIENT_STATIC TQSL_X509_STACK *tqsl_ssl_load_certs_from_file(const char *filename);
/// Verifies a certificate using stacks of certificates
/** The user supplies the X509 certificate to verify (the test certificate)
* along with two stacks of certificates. The \c cacerts stack is a list
* of certificates, one of which was used to sign the test certificate.
* The \c rootcerts are considered "trusted." One of them must have been used
* to sign either the test certificate itself or the CA cert that signed
* the test certificate.
*
* Returns NULL if the test certificate is valid, othewise returns an error message.
*/
CLIENT_STATIC const char *tqsl_ssl_verify_cert(X509 *cert, TQSL_X509_STACK *cacerts, TQSL_X509_STACK *rootcerts, int purpose,
int (*cb)(int ok, X509_STORE_CTX *ctx), TQSL_X509_STACK **chain = 0);
/// Get the number of name entries in an X509 name object
CLIENT_STATIC int tqsl_get_name_count(X509_NAME *name);
/// Retrieve a name entry from an X509 name object by index
CLIENT_STATIC int tqsl_get_name_index(X509_NAME *name, int index, TQSL_X509_NAME_ITEM *name_item);
/// Retrieve a name entry from an X509 name object by name
CLIENT_STATIC int tqsl_get_name_entry(X509_NAME *name, const char *obj_name, TQSL_X509_NAME_ITEM *name_item);
/// Get the number of name entries in an X509 cert's subject name
CLIENT_STATIC int tqsl_cert_get_subject_name_count(X509 *cert);
/// Retrieve a name entry from an X509 cert's subject name by index
CLIENT_STATIC int tqsl_cert_get_subject_name_index(X509 *cert, int index, TQSL_X509_NAME_ITEM *name_item);
/// Retrieve a name entry from an X509 cert's subject name by name
CLIENT_STATIC int tqsl_cert_get_subject_name_entry(X509 *cert, const char *obj_name, TQSL_X509_NAME_ITEM *name_item);
/// Retrieve a name entry date from an X509 cert's subject name by name
CLIENT_STATIC int tqsl_cert_get_subject_date(X509 *cert, const char *obj_name, tQSL_Date *date);
/// Convert an ASN date
CLIENT_STATIC int tqsl_get_asn1_date(ASN1_TIME *tm, tQSL_Date *date);
/// Filter a list (stack) of certs based on (optional) call sign, qso date and issuer criteria
/** Returns a (possibly empty) stack of certificates that match the criteria. Returns NULL
* on error.
*
* The returned stack contains \em copies of the certs from the input stack. The input
* stack is not altered.
*/
CLIENT_STATIC TQSL_X509_STACK *tqsl_filter_cert_list(TQSL_X509_STACK *sk, const char *callsign,
int dxcc, const tQSL_Date *date, const TQSL_PROVIDER *issuer, int isvalid);
CLIENT_STATIC EVP_PKEY *tqsl_new_rsa_key(int nbits);
CLIENT_STATIC int tqsl_store_cert(const char *pem, X509 *cert, const char *certfile,
int type, int (*cb)(int, const char *, void *), void *);
CLIENT_STATIC int tqsl_write_adif_field(FILE *fp, const char *fieldname, char type, const unsigned char *value, int len);
#ifdef __cplusplus
}
#endif
#endif /* defined(LOTW_SERVER) || defined(OPENSSL_CERT_SOURCE) */
#endif /* OPENSSL_CERT_H */
|
