x509v3.h 31 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268269270271272273274275276277278279280281282283284285286287288289290291292293294295296297298299300301302303304305306307308309310311312313314315316317318319320321322323324325326327328329330331332333334335336337338339340341342343344345346347348349350351352353354355356357358359360361362363364365366367368369370371372373374375376377378379380381382383384385386387388389390391392393394395396397398399400401402403404405406407408409410411412413414415416417418419420421422423424425426427428429430431432433434435436437438439440441442443444445446447448449450451452453454455456457458459460461462463464465466467468469470471472473474475476477478479480481482483484485486487488489490491492493494495496497498499500501502503504505506507508509510511512513514515516517518519520521522523524525526527528529530531532533534535536537538539540541542543544545546547548549550551552553554555556557558559560561562563564565566567568569570571572573574575576577578579580581582583584585586587588589590591592593594595596597598599600601602603604605606607608609610611612613614615616617618619620621622623624625626627628629630631632633634635636637638639640641642643644645646647648649650651652653654655656657658659660661662663664665666667668669670671672673674675676677678679680681682683684685686687688689690691692693694695696697698699700701702703704705706707708709710711712713714715716717718719720721722723724725726727728729730731732733734735736737738739740741742743744745746747748749750751752753754755756757758759760761762763764765766767768769770771772773774775776777778779780781782783784785786787788789790791792793794795796797798799800801802803804805806807808809810811812813814815816817818819820821822823824825826827828829830831832833834835836837838839840841842843844845846847848849850851852853854855856857858859860861862863864865866867868869870871872873874875876877878879880881882883884885886887888889890891892893894895896897898899900901902903904905906907908909910911912913914915916917918919920921922923924925926927928929930931932933934935936937938939940941942943944945946947948949950951952953954955956957958959960961962963964965966967968969970971972973974975
  1. /* x509v3.h */
  2. /* Written by Dr Stephen N Henson (shenson@bigfoot.com) for the OpenSSL
  3. * project 1999.
  4. */
  5. /* ====================================================================
  6. * Copyright (c) 1999-2004 The OpenSSL Project. All rights reserved.
  7. *
  8. * Redistribution and use in source and binary forms, with or without
  9. * modification, are permitted provided that the following conditions
  10. * are met:
  11. *
  12. * 1. Redistributions of source code must retain the above copyright
  13. * notice, this list of conditions and the following disclaimer.
  14. *
  15. * 2. Redistributions in binary form must reproduce the above copyright
  16. * notice, this list of conditions and the following disclaimer in
  17. * the documentation and/or other materials provided with the
  18. * distribution.
  19. *
  20. * 3. All advertising materials mentioning features or use of this
  21. * software must display the following acknowledgment:
  22. * "This product includes software developed by the OpenSSL Project
  23. * for use in the OpenSSL Toolkit. (http://www.OpenSSL.org/)"
  24. *
  25. * 4. The names "OpenSSL Toolkit" and "OpenSSL Project" must not be used to
  26. * endorse or promote products derived from this software without
  27. * prior written permission. For written permission, please contact
  28. * licensing@OpenSSL.org.
  29. *
  30. * 5. Products derived from this software may not be called "OpenSSL"
  31. * nor may "OpenSSL" appear in their names without prior written
  32. * permission of the OpenSSL Project.
  33. *
  34. * 6. Redistributions of any form whatsoever must retain the following
  35. * acknowledgment:
  36. * "This product includes software developed by the OpenSSL Project
  37. * for use in the OpenSSL Toolkit (http://www.OpenSSL.org/)"
  38. *
  39. * THIS SOFTWARE IS PROVIDED BY THE OpenSSL PROJECT ``AS IS'' AND ANY
  40. * EXPRESSED OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
  41. * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR
  42. * PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE OpenSSL PROJECT OR
  43. * ITS CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL,
  44. * SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT
  45. * NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES;
  46. * LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
  47. * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT,
  48. * STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE)
  49. * ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED
  50. * OF THE POSSIBILITY OF SUCH DAMAGE.
  51. * ====================================================================
  52. *
  53. * This product includes cryptographic software written by Eric Young
  54. * (eay@cryptsoft.com). This product includes software written by Tim
  55. * Hudson (tjh@cryptsoft.com).
  56. *
  57. */
  58. #ifndef HEADER_X509V3_H
  59. #define HEADER_X509V3_H
  60. #include <openssl/bio.h>
  61. #include <openssl/x509.h>
  62. #include <openssl/conf.h>
  63. #ifdef __cplusplus
  64. extern "C" {
  65. #endif
  66. /* Forward reference */
  67. struct v3_ext_method;
  68. struct v3_ext_ctx;
  69. /* Useful typedefs */
  70. typedef void * (*X509V3_EXT_NEW)(void);
  71. typedef void (*X509V3_EXT_FREE)(void *);
  72. typedef void * (*X509V3_EXT_D2I)(void *, const unsigned char ** , long);
  73. typedef int (*X509V3_EXT_I2D)(void *, unsigned char **);
  74. typedef STACK_OF(CONF_VALUE) * (*X509V3_EXT_I2V)(struct v3_ext_method *method, void *ext, STACK_OF(CONF_VALUE) *extlist);
  75. typedef void * (*X509V3_EXT_V2I)(struct v3_ext_method *method, struct v3_ext_ctx *ctx, STACK_OF(CONF_VALUE) *values);
  76. typedef char * (*X509V3_EXT_I2S)(struct v3_ext_method *method, void *ext);
  77. typedef void * (*X509V3_EXT_S2I)(struct v3_ext_method *method, struct v3_ext_ctx *ctx, const char *str);
  78. typedef int (*X509V3_EXT_I2R)(struct v3_ext_method *method, void *ext, BIO *out, int indent);
  79. typedef void * (*X509V3_EXT_R2I)(struct v3_ext_method *method, struct v3_ext_ctx *ctx, const char *str);
  80. /* V3 extension structure */
  81. struct v3_ext_method {
  82. int ext_nid;
  83. int ext_flags;
  84. /* If this is set the following four fields are ignored */
  85. ASN1_ITEM_EXP *it;
  86. /* Old style ASN1 calls */
  87. X509V3_EXT_NEW ext_new;
  88. X509V3_EXT_FREE ext_free;
  89. X509V3_EXT_D2I d2i;
  90. X509V3_EXT_I2D i2d;
  91. /* The following pair is used for string extensions */
  92. X509V3_EXT_I2S i2s;
  93. X509V3_EXT_S2I s2i;
  94. /* The following pair is used for multi-valued extensions */
  95. X509V3_EXT_I2V i2v;
  96. X509V3_EXT_V2I v2i;
  97. /* The following are used for raw extensions */
  98. X509V3_EXT_I2R i2r;
  99. X509V3_EXT_R2I r2i;
  100. void *usr_data; /* Any extension specific data */
  101. };
  102. typedef struct X509V3_CONF_METHOD_st {
  103. char * (*get_string)(void *db, char *section, char *value);
  104. STACK_OF(CONF_VALUE) * (*get_section)(void *db, char *section);
  105. void (*free_string)(void *db, char * string);
  106. void (*free_section)(void *db, STACK_OF(CONF_VALUE) *section);
  107. } X509V3_CONF_METHOD;
  108. /* Context specific info */
  109. struct v3_ext_ctx {
  110. #define CTX_TEST 0x1
  111. int flags;
  112. X509 *issuer_cert;
  113. X509 *subject_cert;
  114. X509_REQ *subject_req;
  115. X509_CRL *crl;
  116. X509V3_CONF_METHOD *db_meth;
  117. void *db;
  118. /* Maybe more here */
  119. };
  120. typedef struct v3_ext_method X509V3_EXT_METHOD;
  121. DECLARE_STACK_OF(X509V3_EXT_METHOD)
  122. /* ext_flags values */
  123. #define X509V3_EXT_DYNAMIC 0x1
  124. #define X509V3_EXT_CTX_DEP 0x2
  125. #define X509V3_EXT_MULTILINE 0x4
  126. typedef BIT_STRING_BITNAME ENUMERATED_NAMES;
  127. typedef struct BASIC_CONSTRAINTS_st {
  128. int ca;
  129. ASN1_INTEGER *pathlen;
  130. } BASIC_CONSTRAINTS;
  131. typedef struct PKEY_USAGE_PERIOD_st {
  132. ASN1_GENERALIZEDTIME *notBefore;
  133. ASN1_GENERALIZEDTIME *notAfter;
  134. } PKEY_USAGE_PERIOD;
  135. typedef struct otherName_st {
  136. ASN1_OBJECT *type_id;
  137. ASN1_TYPE *value;
  138. } OTHERNAME;
  139. typedef struct EDIPartyName_st {
  140. ASN1_STRING *nameAssigner;
  141. ASN1_STRING *partyName;
  142. } EDIPARTYNAME;
  143. typedef struct GENERAL_NAME_st {
  144. #define GEN_OTHERNAME 0
  145. #define GEN_EMAIL 1
  146. #define GEN_DNS 2
  147. #define GEN_X400 3
  148. #define GEN_DIRNAME 4
  149. #define GEN_EDIPARTY 5
  150. #define GEN_URI 6
  151. #define GEN_IPADD 7
  152. #define GEN_RID 8
  153. int type;
  154. union {
  155. char *ptr;
  156. OTHERNAME *otherName; /* otherName */
  157. ASN1_IA5STRING *rfc822Name;
  158. ASN1_IA5STRING *dNSName;
  159. ASN1_TYPE *x400Address;
  160. X509_NAME *directoryName;
  161. EDIPARTYNAME *ediPartyName;
  162. ASN1_IA5STRING *uniformResourceIdentifier;
  163. ASN1_OCTET_STRING *iPAddress;
  164. ASN1_OBJECT *registeredID;
  165. /* Old names */
  166. ASN1_OCTET_STRING *ip; /* iPAddress */
  167. X509_NAME *dirn; /* dirn */
  168. ASN1_IA5STRING *ia5;/* rfc822Name, dNSName, uniformResourceIdentifier */
  169. ASN1_OBJECT *rid; /* registeredID */
  170. ASN1_TYPE *other; /* x400Address */
  171. } d;
  172. } GENERAL_NAME;
  173. typedef STACK_OF(GENERAL_NAME) GENERAL_NAMES;
  174. typedef struct ACCESS_DESCRIPTION_st {
  175. ASN1_OBJECT *method;
  176. GENERAL_NAME *location;
  177. } ACCESS_DESCRIPTION;
  178. typedef STACK_OF(ACCESS_DESCRIPTION) AUTHORITY_INFO_ACCESS;
  179. typedef STACK_OF(ASN1_OBJECT) EXTENDED_KEY_USAGE;
  180. DECLARE_STACK_OF(GENERAL_NAME)
  181. DECLARE_ASN1_SET_OF(GENERAL_NAME)
  182. DECLARE_STACK_OF(ACCESS_DESCRIPTION)
  183. DECLARE_ASN1_SET_OF(ACCESS_DESCRIPTION)
  184. typedef struct DIST_POINT_NAME_st {
  185. int type;
  186. union {
  187. GENERAL_NAMES *fullname;
  188. STACK_OF(X509_NAME_ENTRY) *relativename;
  189. } name;
  190. } DIST_POINT_NAME;
  191. struct DIST_POINT_st {
  192. DIST_POINT_NAME *distpoint;
  193. ASN1_BIT_STRING *reasons;
  194. GENERAL_NAMES *CRLissuer;
  195. };
  196. typedef STACK_OF(DIST_POINT) CRL_DIST_POINTS;
  197. DECLARE_STACK_OF(DIST_POINT)
  198. DECLARE_ASN1_SET_OF(DIST_POINT)
  199. struct AUTHORITY_KEYID_st {
  200. ASN1_OCTET_STRING *keyid;
  201. GENERAL_NAMES *issuer;
  202. ASN1_INTEGER *serial;
  203. };
  204. /* Strong extranet structures */
  205. typedef struct SXNET_ID_st {
  206. ASN1_INTEGER *zone;
  207. ASN1_OCTET_STRING *user;
  208. } SXNETID;
  209. DECLARE_STACK_OF(SXNETID)
  210. DECLARE_ASN1_SET_OF(SXNETID)
  211. typedef struct SXNET_st {
  212. ASN1_INTEGER *version;
  213. STACK_OF(SXNETID) *ids;
  214. } SXNET;
  215. typedef struct NOTICEREF_st {
  216. ASN1_STRING *organization;
  217. STACK_OF(ASN1_INTEGER) *noticenos;
  218. } NOTICEREF;
  219. typedef struct USERNOTICE_st {
  220. NOTICEREF *noticeref;
  221. ASN1_STRING *exptext;
  222. } USERNOTICE;
  223. typedef struct POLICYQUALINFO_st {
  224. ASN1_OBJECT *pqualid;
  225. union {
  226. ASN1_IA5STRING *cpsuri;
  227. USERNOTICE *usernotice;
  228. ASN1_TYPE *other;
  229. } d;
  230. } POLICYQUALINFO;
  231. DECLARE_STACK_OF(POLICYQUALINFO)
  232. DECLARE_ASN1_SET_OF(POLICYQUALINFO)
  233. typedef struct POLICYINFO_st {
  234. ASN1_OBJECT *policyid;
  235. STACK_OF(POLICYQUALINFO) *qualifiers;
  236. } POLICYINFO;
  237. typedef STACK_OF(POLICYINFO) CERTIFICATEPOLICIES;
  238. DECLARE_STACK_OF(POLICYINFO)
  239. DECLARE_ASN1_SET_OF(POLICYINFO)
  240. typedef struct POLICY_MAPPING_st {
  241. ASN1_OBJECT *issuerDomainPolicy;
  242. ASN1_OBJECT *subjectDomainPolicy;
  243. } POLICY_MAPPING;
  244. DECLARE_STACK_OF(POLICY_MAPPING)
  245. typedef STACK_OF(POLICY_MAPPING) POLICY_MAPPINGS;
  246. typedef struct GENERAL_SUBTREE_st {
  247. GENERAL_NAME *base;
  248. ASN1_INTEGER *minimum;
  249. ASN1_INTEGER *maximum;
  250. } GENERAL_SUBTREE;
  251. DECLARE_STACK_OF(GENERAL_SUBTREE)
  252. typedef struct NAME_CONSTRAINTS_st {
  253. STACK_OF(GENERAL_SUBTREE) *permittedSubtrees;
  254. STACK_OF(GENERAL_SUBTREE) *excludedSubtrees;
  255. } NAME_CONSTRAINTS;
  256. typedef struct POLICY_CONSTRAINTS_st {
  257. ASN1_INTEGER *requireExplicitPolicy;
  258. ASN1_INTEGER *inhibitPolicyMapping;
  259. } POLICY_CONSTRAINTS;
  260. /* Proxy certificate structures, see RFC 3820 */
  261. typedef struct PROXY_POLICY_st
  262. {
  263. ASN1_OBJECT *policyLanguage;
  264. ASN1_OCTET_STRING *policy;
  265. } PROXY_POLICY;
  266. typedef struct PROXY_CERT_INFO_EXTENSION_st
  267. {
  268. ASN1_INTEGER *pcPathLengthConstraint;
  269. PROXY_POLICY *proxyPolicy;
  270. } PROXY_CERT_INFO_EXTENSION;
  271. DECLARE_ASN1_FUNCTIONS(PROXY_POLICY)
  272. DECLARE_ASN1_FUNCTIONS(PROXY_CERT_INFO_EXTENSION)
  273. struct ISSUING_DIST_POINT_st
  274. {
  275. DIST_POINT_NAME *distpoint;
  276. int onlyuser;
  277. int onlyCA;
  278. ASN1_BIT_STRING *onlysomereasons;
  279. int indirectCRL;
  280. int onlyattr;
  281. };
  282. /* Values in idp_flags field */
  283. /* IDP present */
  284. #define IDP_PRESENT 0x1
  285. /* IDP values inconsistent */
  286. #define IDP_INVALID 0x2
  287. /* onlyuser true */
  288. #define IDP_ONLYUSER 0x4
  289. /* onlyCA true */
  290. #define IDP_ONLYCA 0x8
  291. /* onlyattr true */
  292. #define IDP_ONLYATTR 0x10
  293. /* indirectCRL true */
  294. #define IDP_INDIRECT 0x20
  295. /* onlysomereasons present */
  296. #define IDP_REASONS 0x40
  297. #define X509V3_conf_err(val) ERR_add_error_data(6, "section:", val->section, \
  298. ",name:", val->name, ",value:", val->value);
  299. #define X509V3_set_ctx_test(ctx) \
  300. X509V3_set_ctx(ctx, NULL, NULL, NULL, NULL, CTX_TEST)
  301. #define X509V3_set_ctx_nodb(ctx) (ctx)->db = NULL;
  302. #define EXT_BITSTRING(nid, table) { nid, 0, ASN1_ITEM_ref(ASN1_BIT_STRING), \
  303. 0,0,0,0, \
  304. 0,0, \
  305. (X509V3_EXT_I2V)i2v_ASN1_BIT_STRING, \
  306. (X509V3_EXT_V2I)v2i_ASN1_BIT_STRING, \
  307. NULL, NULL, \
  308. table}
  309. #define EXT_IA5STRING(nid) { nid, 0, ASN1_ITEM_ref(ASN1_IA5STRING), \
  310. 0,0,0,0, \
  311. (X509V3_EXT_I2S)i2s_ASN1_IA5STRING, \
  312. (X509V3_EXT_S2I)s2i_ASN1_IA5STRING, \
  313. 0,0,0,0, \
  314. NULL}
  315. #define EXT_END { -1, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0}
  316. /* X509_PURPOSE stuff */
  317. #define EXFLAG_BCONS 0x1
  318. #define EXFLAG_KUSAGE 0x2
  319. #define EXFLAG_XKUSAGE 0x4
  320. #define EXFLAG_NSCERT 0x8
  321. #define EXFLAG_CA 0x10
  322. #define EXFLAG_SS 0x20
  323. #define EXFLAG_V1 0x40
  324. #define EXFLAG_INVALID 0x80
  325. #define EXFLAG_SET 0x100
  326. #define EXFLAG_CRITICAL 0x200
  327. #define EXFLAG_PROXY 0x400
  328. #define EXFLAG_INVALID_POLICY 0x400
  329. #define KU_DIGITAL_SIGNATURE 0x0080
  330. #define KU_NON_REPUDIATION 0x0040
  331. #define KU_KEY_ENCIPHERMENT 0x0020
  332. #define KU_DATA_ENCIPHERMENT 0x0010
  333. #define KU_KEY_AGREEMENT 0x0008
  334. #define KU_KEY_CERT_SIGN 0x0004
  335. #define KU_CRL_SIGN 0x0002
  336. #define KU_ENCIPHER_ONLY 0x0001
  337. #define KU_DECIPHER_ONLY 0x8000
  338. #define NS_SSL_CLIENT 0x80
  339. #define NS_SSL_SERVER 0x40
  340. #define NS_SMIME 0x20
  341. #define NS_OBJSIGN 0x10
  342. #define NS_SSL_CA 0x04
  343. #define NS_SMIME_CA 0x02
  344. #define NS_OBJSIGN_CA 0x01
  345. #define NS_ANY_CA (NS_SSL_CA|NS_SMIME_CA|NS_OBJSIGN_CA)
  346. #define XKU_SSL_SERVER 0x1
  347. #define XKU_SSL_CLIENT 0x2
  348. #define XKU_SMIME 0x4
  349. #define XKU_CODE_SIGN 0x8
  350. #define XKU_SGC 0x10
  351. #define XKU_OCSP_SIGN 0x20
  352. #define XKU_TIMESTAMP 0x40
  353. #define XKU_DVCS 0x80
  354. #define X509_PURPOSE_DYNAMIC 0x1
  355. #define X509_PURPOSE_DYNAMIC_NAME 0x2
  356. typedef struct x509_purpose_st {
  357. int purpose;
  358. int trust; /* Default trust ID */
  359. int flags;
  360. int (*check_purpose)(const struct x509_purpose_st *,
  361. const X509 *, int);
  362. char *name;
  363. char *sname;
  364. void *usr_data;
  365. } X509_PURPOSE;
  366. #define X509_PURPOSE_SSL_CLIENT 1
  367. #define X509_PURPOSE_SSL_SERVER 2
  368. #define X509_PURPOSE_NS_SSL_SERVER 3
  369. #define X509_PURPOSE_SMIME_SIGN 4
  370. #define X509_PURPOSE_SMIME_ENCRYPT 5
  371. #define X509_PURPOSE_CRL_SIGN 6
  372. #define X509_PURPOSE_ANY 7
  373. #define X509_PURPOSE_OCSP_HELPER 8
  374. #define X509_PURPOSE_TIMESTAMP_SIGN 9
  375. #define X509_PURPOSE_MIN 1
  376. #define X509_PURPOSE_MAX 9
  377. /* Flags for X509V3_EXT_print() */
  378. #define X509V3_EXT_UNKNOWN_MASK (0xfL << 16)
  379. /* Return error for unknown extensions */
  380. #define X509V3_EXT_DEFAULT 0
  381. /* Print error for unknown extensions */
  382. #define X509V3_EXT_ERROR_UNKNOWN (1L << 16)
  383. /* ASN1 parse unknown extensions */
  384. #define X509V3_EXT_PARSE_UNKNOWN (2L << 16)
  385. /* BIO_dump unknown extensions */
  386. #define X509V3_EXT_DUMP_UNKNOWN (3L << 16)
  387. /* Flags for X509V3_add1_i2d */
  388. #define X509V3_ADD_OP_MASK 0xfL
  389. #define X509V3_ADD_DEFAULT 0L
  390. #define X509V3_ADD_APPEND 1L
  391. #define X509V3_ADD_REPLACE 2L
  392. #define X509V3_ADD_REPLACE_EXISTING 3L
  393. #define X509V3_ADD_KEEP_EXISTING 4L
  394. #define X509V3_ADD_DELETE 5L
  395. #define X509V3_ADD_SILENT 0x10
  396. DECLARE_STACK_OF(X509_PURPOSE)
  397. DECLARE_ASN1_FUNCTIONS(BASIC_CONSTRAINTS)
  398. DECLARE_ASN1_FUNCTIONS(SXNET)
  399. DECLARE_ASN1_FUNCTIONS(SXNETID)
  400. int SXNET_add_id_asc(SXNET **psx, char *zone, char *user, int userlen);
  401. int SXNET_add_id_ulong(SXNET **psx, unsigned long lzone, char *user, int userlen);
  402. int SXNET_add_id_INTEGER(SXNET **psx, ASN1_INTEGER *izone, char *user, int userlen);
  403. ASN1_OCTET_STRING *SXNET_get_id_asc(SXNET *sx, char *zone);
  404. ASN1_OCTET_STRING *SXNET_get_id_ulong(SXNET *sx, unsigned long lzone);
  405. ASN1_OCTET_STRING *SXNET_get_id_INTEGER(SXNET *sx, ASN1_INTEGER *zone);
  406. DECLARE_ASN1_FUNCTIONS(AUTHORITY_KEYID)
  407. DECLARE_ASN1_FUNCTIONS(PKEY_USAGE_PERIOD)
  408. DECLARE_ASN1_FUNCTIONS(GENERAL_NAME)
  409. GENERAL_NAME *GENERAL_NAME_dup(GENERAL_NAME *a);
  410. int GENERAL_NAME_cmp(GENERAL_NAME *a, GENERAL_NAME *b);
  411. ASN1_BIT_STRING *v2i_ASN1_BIT_STRING(X509V3_EXT_METHOD *method,
  412. X509V3_CTX *ctx, STACK_OF(CONF_VALUE) *nval);
  413. STACK_OF(CONF_VALUE) *i2v_ASN1_BIT_STRING(X509V3_EXT_METHOD *method,
  414. ASN1_BIT_STRING *bits,
  415. STACK_OF(CONF_VALUE) *extlist);
  416. STACK_OF(CONF_VALUE) *i2v_GENERAL_NAME(X509V3_EXT_METHOD *method, GENERAL_NAME *gen, STACK_OF(CONF_VALUE) *ret);
  417. int GENERAL_NAME_print(BIO *out, GENERAL_NAME *gen);
  418. DECLARE_ASN1_FUNCTIONS(GENERAL_NAMES)
  419. STACK_OF(CONF_VALUE) *i2v_GENERAL_NAMES(X509V3_EXT_METHOD *method,
  420. GENERAL_NAMES *gen, STACK_OF(CONF_VALUE) *extlist);
  421. GENERAL_NAMES *v2i_GENERAL_NAMES(X509V3_EXT_METHOD *method,
  422. X509V3_CTX *ctx, STACK_OF(CONF_VALUE) *nval);
  423. DECLARE_ASN1_FUNCTIONS(OTHERNAME)
  424. DECLARE_ASN1_FUNCTIONS(EDIPARTYNAME)
  425. int OTHERNAME_cmp(OTHERNAME *a, OTHERNAME *b);
  426. void GENERAL_NAME_set0_value(GENERAL_NAME *a, int type, void *value);
  427. void *GENERAL_NAME_get0_value(GENERAL_NAME *a, int *ptype);
  428. int GENERAL_NAME_set0_othername(GENERAL_NAME *gen,
  429. ASN1_OBJECT *oid, ASN1_TYPE *value);
  430. int GENERAL_NAME_get0_otherName(GENERAL_NAME *gen,
  431. ASN1_OBJECT **poid, ASN1_TYPE **pvalue);
  432. char *i2s_ASN1_OCTET_STRING(X509V3_EXT_METHOD *method, ASN1_OCTET_STRING *ia5);
  433. ASN1_OCTET_STRING *s2i_ASN1_OCTET_STRING(X509V3_EXT_METHOD *method, X509V3_CTX *ctx, char *str);
  434. DECLARE_ASN1_FUNCTIONS(EXTENDED_KEY_USAGE)
  435. int i2a_ACCESS_DESCRIPTION(BIO *bp, ACCESS_DESCRIPTION* a);
  436. DECLARE_ASN1_FUNCTIONS(CERTIFICATEPOLICIES)
  437. DECLARE_ASN1_FUNCTIONS(POLICYINFO)
  438. DECLARE_ASN1_FUNCTIONS(POLICYQUALINFO)
  439. DECLARE_ASN1_FUNCTIONS(USERNOTICE)
  440. DECLARE_ASN1_FUNCTIONS(NOTICEREF)
  441. DECLARE_ASN1_FUNCTIONS(CRL_DIST_POINTS)
  442. DECLARE_ASN1_FUNCTIONS(DIST_POINT)
  443. DECLARE_ASN1_FUNCTIONS(DIST_POINT_NAME)
  444. DECLARE_ASN1_FUNCTIONS(ISSUING_DIST_POINT)
  445. DECLARE_ASN1_FUNCTIONS(ACCESS_DESCRIPTION)
  446. DECLARE_ASN1_FUNCTIONS(AUTHORITY_INFO_ACCESS)
  447. DECLARE_ASN1_ITEM(POLICY_MAPPING)
  448. DECLARE_ASN1_ALLOC_FUNCTIONS(POLICY_MAPPING)
  449. DECLARE_ASN1_ITEM(POLICY_MAPPINGS)
  450. DECLARE_ASN1_ITEM(GENERAL_SUBTREE)
  451. DECLARE_ASN1_ALLOC_FUNCTIONS(GENERAL_SUBTREE)
  452. DECLARE_ASN1_ITEM(NAME_CONSTRAINTS)
  453. DECLARE_ASN1_ALLOC_FUNCTIONS(NAME_CONSTRAINTS)
  454. DECLARE_ASN1_ALLOC_FUNCTIONS(POLICY_CONSTRAINTS)
  455. DECLARE_ASN1_ITEM(POLICY_CONSTRAINTS)
  456. GENERAL_NAME *a2i_GENERAL_NAME(GENERAL_NAME *out,
  457. X509V3_EXT_METHOD *method, X509V3_CTX *ctx,
  458. int gen_type, char *value, int is_nc);
  459. #ifdef HEADER_CONF_H
  460. GENERAL_NAME *v2i_GENERAL_NAME(X509V3_EXT_METHOD *method, X509V3_CTX *ctx,
  461. CONF_VALUE *cnf);
  462. GENERAL_NAME *v2i_GENERAL_NAME_ex(GENERAL_NAME *out, X509V3_EXT_METHOD *method,
  463. X509V3_CTX *ctx, CONF_VALUE *cnf, int is_nc);
  464. void X509V3_conf_free(CONF_VALUE *val);
  465. X509_EXTENSION *X509V3_EXT_nconf_nid(CONF *conf, X509V3_CTX *ctx, int ext_nid, char *value);
  466. X509_EXTENSION *X509V3_EXT_nconf(CONF *conf, X509V3_CTX *ctx, char *name, char *value);
  467. int X509V3_EXT_add_nconf_sk(CONF *conf, X509V3_CTX *ctx, char *section, STACK_OF(X509_EXTENSION) **sk);
  468. int X509V3_EXT_add_nconf(CONF *conf, X509V3_CTX *ctx, char *section, X509 *cert);
  469. int X509V3_EXT_REQ_add_nconf(CONF *conf, X509V3_CTX *ctx, char *section, X509_REQ *req);
  470. int X509V3_EXT_CRL_add_nconf(CONF *conf, X509V3_CTX *ctx, char *section, X509_CRL *crl);
  471. X509_EXTENSION *X509V3_EXT_conf_nid(LHASH_OF(CONF_VALUE) *conf, X509V3_CTX *ctx,
  472. int ext_nid, char *value);
  473. X509_EXTENSION *X509V3_EXT_conf(LHASH_OF(CONF_VALUE) *conf, X509V3_CTX *ctx,
  474. char *name, char *value);
  475. int X509V3_EXT_add_conf(LHASH_OF(CONF_VALUE) *conf, X509V3_CTX *ctx,
  476. char *section, X509 *cert);
  477. int X509V3_EXT_REQ_add_conf(LHASH_OF(CONF_VALUE) *conf, X509V3_CTX *ctx,
  478. char *section, X509_REQ *req);
  479. int X509V3_EXT_CRL_add_conf(LHASH_OF(CONF_VALUE) *conf, X509V3_CTX *ctx,
  480. char *section, X509_CRL *crl);
  481. int X509V3_add_value_bool_nf(char *name, int asn1_bool,
  482. STACK_OF(CONF_VALUE) **extlist);
  483. int X509V3_get_value_bool(CONF_VALUE *value, int *asn1_bool);
  484. int X509V3_get_value_int(CONF_VALUE *value, ASN1_INTEGER **aint);
  485. void X509V3_set_nconf(X509V3_CTX *ctx, CONF *conf);
  486. void X509V3_set_conf_lhash(X509V3_CTX *ctx, LHASH_OF(CONF_VALUE) *lhash);
  487. #endif
  488. char * X509V3_get_string(X509V3_CTX *ctx, char *name, char *section);
  489. STACK_OF(CONF_VALUE) * X509V3_get_section(X509V3_CTX *ctx, char *section);
  490. void X509V3_string_free(X509V3_CTX *ctx, char *str);
  491. void X509V3_section_free( X509V3_CTX *ctx, STACK_OF(CONF_VALUE) *section);
  492. void X509V3_set_ctx(X509V3_CTX *ctx, X509 *issuer, X509 *subject,
  493. X509_REQ *req, X509_CRL *crl, int flags);
  494. int X509V3_add_value(const char *name, const char *value,
  495. STACK_OF(CONF_VALUE) **extlist);
  496. int X509V3_add_value_uchar(const char *name, const unsigned char *value,
  497. STACK_OF(CONF_VALUE) **extlist);
  498. int X509V3_add_value_bool(const char *name, int asn1_bool,
  499. STACK_OF(CONF_VALUE) **extlist);
  500. int X509V3_add_value_int(const char *name, ASN1_INTEGER *aint,
  501. STACK_OF(CONF_VALUE) **extlist);
  502. char * i2s_ASN1_INTEGER(X509V3_EXT_METHOD *meth, ASN1_INTEGER *aint);
  503. ASN1_INTEGER * s2i_ASN1_INTEGER(X509V3_EXT_METHOD *meth, char *value);
  504. char * i2s_ASN1_ENUMERATED(X509V3_EXT_METHOD *meth, ASN1_ENUMERATED *aint);
  505. char * i2s_ASN1_ENUMERATED_TABLE(X509V3_EXT_METHOD *meth, ASN1_ENUMERATED *aint);
  506. int X509V3_EXT_add(X509V3_EXT_METHOD *ext);
  507. int X509V3_EXT_add_list(X509V3_EXT_METHOD *extlist);
  508. int X509V3_EXT_add_alias(int nid_to, int nid_from);
  509. void X509V3_EXT_cleanup(void);
  510. X509V3_EXT_METHOD *X509V3_EXT_get(X509_EXTENSION *ext);
  511. X509V3_EXT_METHOD *X509V3_EXT_get_nid(int nid);
  512. int X509V3_add_standard_extensions(void);
  513. STACK_OF(CONF_VALUE) *X509V3_parse_list(const char *line);
  514. void *X509V3_EXT_d2i(X509_EXTENSION *ext);
  515. void *X509V3_get_d2i(STACK_OF(X509_EXTENSION) *x, int nid, int *crit, int *idx);
  516. X509_EXTENSION *X509V3_EXT_i2d(int ext_nid, int crit, void *ext_struc);
  517. int X509V3_add1_i2d(STACK_OF(X509_EXTENSION) **x, int nid, void *value, int crit, unsigned long flags);
  518. char *hex_to_string(const unsigned char *buffer, long len);
  519. unsigned char *string_to_hex(const char *str, long *len);
  520. int name_cmp(const char *name, const char *cmp);
  521. void X509V3_EXT_val_prn(BIO *out, STACK_OF(CONF_VALUE) *val, int indent,
  522. int ml);
  523. int X509V3_EXT_print(BIO *out, X509_EXTENSION *ext, unsigned long flag, int indent);
  524. int X509V3_EXT_print_fp(FILE *out, X509_EXTENSION *ext, int flag, int indent);
  525. int X509V3_extensions_print(BIO *out, char *title, STACK_OF(X509_EXTENSION) *exts, unsigned long flag, int indent);
  526. int X509_check_ca(X509 *x);
  527. int X509_check_purpose(X509 *x, int id, int ca);
  528. int X509_supported_extension(X509_EXTENSION *ex);
  529. int X509_PURPOSE_set(int *p, int purpose);
  530. int X509_check_issued(X509 *issuer, X509 *subject);
  531. int X509_check_akid(X509 *issuer, AUTHORITY_KEYID *akid);
  532. int X509_PURPOSE_get_count(void);
  533. X509_PURPOSE * X509_PURPOSE_get0(int idx);
  534. int X509_PURPOSE_get_by_sname(char *sname);
  535. int X509_PURPOSE_get_by_id(int id);
  536. int X509_PURPOSE_add(int id, int trust, int flags,
  537. int (*ck)(const X509_PURPOSE *, const X509 *, int),
  538. char *name, char *sname, void *arg);
  539. char *X509_PURPOSE_get0_name(X509_PURPOSE *xp);
  540. char *X509_PURPOSE_get0_sname(X509_PURPOSE *xp);
  541. int X509_PURPOSE_get_trust(X509_PURPOSE *xp);
  542. void X509_PURPOSE_cleanup(void);
  543. int X509_PURPOSE_get_id(X509_PURPOSE *);
  544. STACK *X509_get1_email(X509 *x);
  545. STACK *X509_REQ_get1_email(X509_REQ *x);
  546. void X509_email_free(STACK *sk);
  547. STACK *X509_get1_ocsp(X509 *x);
  548. ASN1_OCTET_STRING *a2i_IPADDRESS(const char *ipasc);
  549. ASN1_OCTET_STRING *a2i_IPADDRESS_NC(const char *ipasc);
  550. int a2i_ipadd(unsigned char *ipout, const char *ipasc);
  551. int X509V3_NAME_from_section(X509_NAME *nm, STACK_OF(CONF_VALUE)*dn_sk,
  552. unsigned long chtype);
  553. void X509_POLICY_NODE_print(BIO *out, X509_POLICY_NODE *node, int indent);
  554. DECLARE_STACK_OF(X509_POLICY_NODE)
  555. #ifndef OPENSSL_NO_RFC3779
  556. typedef struct ASRange_st {
  557. ASN1_INTEGER *min, *max;
  558. } ASRange;
  559. #define ASIdOrRange_id 0
  560. #define ASIdOrRange_range 1
  561. typedef struct ASIdOrRange_st {
  562. int type;
  563. union {
  564. ASN1_INTEGER *id;
  565. ASRange *range;
  566. } u;
  567. } ASIdOrRange;
  568. typedef STACK_OF(ASIdOrRange) ASIdOrRanges;
  569. DECLARE_STACK_OF(ASIdOrRange)
  570. #define ASIdentifierChoice_inherit 0
  571. #define ASIdentifierChoice_asIdsOrRanges 1
  572. typedef struct ASIdentifierChoice_st {
  573. int type;
  574. union {
  575. ASN1_NULL *inherit;
  576. ASIdOrRanges *asIdsOrRanges;
  577. } u;
  578. } ASIdentifierChoice;
  579. typedef struct ASIdentifiers_st {
  580. ASIdentifierChoice *asnum, *rdi;
  581. } ASIdentifiers;
  582. DECLARE_ASN1_FUNCTIONS(ASRange)
  583. DECLARE_ASN1_FUNCTIONS(ASIdOrRange)
  584. DECLARE_ASN1_FUNCTIONS(ASIdentifierChoice)
  585. DECLARE_ASN1_FUNCTIONS(ASIdentifiers)
  586. typedef struct IPAddressRange_st {
  587. ASN1_BIT_STRING *min, *max;
  588. } IPAddressRange;
  589. #define IPAddressOrRange_addressPrefix 0
  590. #define IPAddressOrRange_addressRange 1
  591. typedef struct IPAddressOrRange_st {
  592. int type;
  593. union {
  594. ASN1_BIT_STRING *addressPrefix;
  595. IPAddressRange *addressRange;
  596. } u;
  597. } IPAddressOrRange;
  598. typedef STACK_OF(IPAddressOrRange) IPAddressOrRanges;
  599. DECLARE_STACK_OF(IPAddressOrRange)
  600. #define IPAddressChoice_inherit 0
  601. #define IPAddressChoice_addressesOrRanges 1
  602. typedef struct IPAddressChoice_st {
  603. int type;
  604. union {
  605. ASN1_NULL *inherit;
  606. IPAddressOrRanges *addressesOrRanges;
  607. } u;
  608. } IPAddressChoice;
  609. typedef struct IPAddressFamily_st {
  610. ASN1_OCTET_STRING *addressFamily;
  611. IPAddressChoice *ipAddressChoice;
  612. } IPAddressFamily;
  613. typedef STACK_OF(IPAddressFamily) IPAddrBlocks;
  614. DECLARE_STACK_OF(IPAddressFamily)
  615. DECLARE_ASN1_FUNCTIONS(IPAddressRange)
  616. DECLARE_ASN1_FUNCTIONS(IPAddressOrRange)
  617. DECLARE_ASN1_FUNCTIONS(IPAddressChoice)
  618. DECLARE_ASN1_FUNCTIONS(IPAddressFamily)
  619. /*
  620. * API tag for elements of the ASIdentifer SEQUENCE.
  621. */
  622. #define V3_ASID_ASNUM 0
  623. #define V3_ASID_RDI 1
  624. /*
  625. * AFI values, assigned by IANA. It'd be nice to make the AFI
  626. * handling code totally generic, but there are too many little things
  627. * that would need to be defined for other address families for it to
  628. * be worth the trouble.
  629. */
  630. #define IANA_AFI_IPV4 1
  631. #define IANA_AFI_IPV6 2
  632. /*
  633. * Utilities to construct and extract values from RFC3779 extensions,
  634. * since some of the encodings (particularly for IP address prefixes
  635. * and ranges) are a bit tedious to work with directly.
  636. */
  637. int v3_asid_add_inherit(ASIdentifiers *asid, int which);
  638. int v3_asid_add_id_or_range(ASIdentifiers *asid, int which,
  639. ASN1_INTEGER *min, ASN1_INTEGER *max);
  640. int v3_addr_add_inherit(IPAddrBlocks *addr,
  641. const unsigned afi, const unsigned *safi);
  642. int v3_addr_add_prefix(IPAddrBlocks *addr,
  643. const unsigned afi, const unsigned *safi,
  644. unsigned char *a, const int prefixlen);
  645. int v3_addr_add_range(IPAddrBlocks *addr,
  646. const unsigned afi, const unsigned *safi,
  647. unsigned char *min, unsigned char *max);
  648. unsigned v3_addr_get_afi(const IPAddressFamily *f);
  649. int v3_addr_get_range(IPAddressOrRange *aor, const unsigned afi,
  650. unsigned char *min, unsigned char *max,
  651. const int length);
  652. /*
  653. * Canonical forms.
  654. */
  655. int v3_asid_is_canonical(ASIdentifiers *asid);
  656. int v3_addr_is_canonical(IPAddrBlocks *addr);
  657. int v3_asid_canonize(ASIdentifiers *asid);
  658. int v3_addr_canonize(IPAddrBlocks *addr);
  659. /*
  660. * Tests for inheritance and containment.
  661. */
  662. int v3_asid_inherits(ASIdentifiers *asid);
  663. int v3_addr_inherits(IPAddrBlocks *addr);
  664. int v3_asid_subset(ASIdentifiers *a, ASIdentifiers *b);
  665. int v3_addr_subset(IPAddrBlocks *a, IPAddrBlocks *b);
  666. /*
  667. * Check whether RFC 3779 extensions nest properly in chains.
  668. */
  669. int v3_asid_validate_path(X509_STORE_CTX *);
  670. int v3_addr_validate_path(X509_STORE_CTX *);
  671. int v3_asid_validate_resource_set(STACK_OF(X509) *chain,
  672. ASIdentifiers *ext,
  673. int allow_inheritance);
  674. int v3_addr_validate_resource_set(STACK_OF(X509) *chain,
  675. IPAddrBlocks *ext,
  676. int allow_inheritance);
  677. #endif /* OPENSSL_NO_RFC3779 */
  678. /* BEGIN ERROR CODES */
  679. /* The following lines are auto generated by the script mkerr.pl. Any changes
  680. * made after this point may be overwritten when the script is next run.
  681. */
  682. void ERR_load_X509V3_strings(void);
  683. /* Error codes for the X509V3 functions. */
  684. /* Function codes. */
  685. #define X509V3_F_A2I_GENERAL_NAME 164
  686. #define X509V3_F_ASIDENTIFIERCHOICE_CANONIZE 161
  687. #define X509V3_F_ASIDENTIFIERCHOICE_IS_CANONICAL 162
  688. #define X509V3_F_COPY_EMAIL 122
  689. #define X509V3_F_COPY_ISSUER 123
  690. #define X509V3_F_DO_DIRNAME 144
  691. #define X509V3_F_DO_EXT_CONF 124
  692. #define X509V3_F_DO_EXT_I2D 135
  693. #define X509V3_F_DO_EXT_NCONF 151
  694. #define X509V3_F_DO_I2V_NAME_CONSTRAINTS 148
  695. #define X509V3_F_GNAMES_FROM_SECTNAME 156
  696. #define X509V3_F_HEX_TO_STRING 111
  697. #define X509V3_F_I2S_ASN1_ENUMERATED 121
  698. #define X509V3_F_I2S_ASN1_IA5STRING 149
  699. #define X509V3_F_I2S_ASN1_INTEGER 120
  700. #define X509V3_F_I2V_AUTHORITY_INFO_ACCESS 138
  701. #define X509V3_F_NOTICE_SECTION 132
  702. #define X509V3_F_NREF_NOS 133
  703. #define X509V3_F_POLICY_SECTION 131
  704. #define X509V3_F_PROCESS_PCI_VALUE 150
  705. #define X509V3_F_R2I_CERTPOL 130
  706. #define X509V3_F_R2I_PCI 155
  707. #define X509V3_F_S2I_ASN1_IA5STRING 100
  708. #define X509V3_F_S2I_ASN1_INTEGER 108
  709. #define X509V3_F_S2I_ASN1_OCTET_STRING 112
  710. #define X509V3_F_S2I_ASN1_SKEY_ID 114
  711. #define X509V3_F_S2I_SKEY_ID 115
  712. #define X509V3_F_SET_DIST_POINT_NAME 158
  713. #define X509V3_F_STRING_TO_HEX 113
  714. #define X509V3_F_SXNET_ADD_ID_ASC 125
  715. #define X509V3_F_SXNET_ADD_ID_INTEGER 126
  716. #define X509V3_F_SXNET_ADD_ID_ULONG 127
  717. #define X509V3_F_SXNET_GET_ID_ASC 128
  718. #define X509V3_F_SXNET_GET_ID_ULONG 129
  719. #define X509V3_F_V2I_ASIDENTIFIERS 163
  720. #define X509V3_F_V2I_ASN1_BIT_STRING 101
  721. #define X509V3_F_V2I_AUTHORITY_INFO_ACCESS 139
  722. #define X509V3_F_V2I_AUTHORITY_KEYID 119
  723. #define X509V3_F_V2I_BASIC_CONSTRAINTS 102
  724. #define X509V3_F_V2I_CRLD 134
  725. #define X509V3_F_V2I_EXTENDED_KEY_USAGE 103
  726. #define X509V3_F_V2I_GENERAL_NAMES 118
  727. #define X509V3_F_V2I_GENERAL_NAME_EX 117
  728. #define X509V3_F_V2I_IDP 157
  729. #define X509V3_F_V2I_IPADDRBLOCKS 159
  730. #define X509V3_F_V2I_ISSUER_ALT 153
  731. #define X509V3_F_V2I_NAME_CONSTRAINTS 147
  732. #define X509V3_F_V2I_POLICY_CONSTRAINTS 146
  733. #define X509V3_F_V2I_POLICY_MAPPINGS 145
  734. #define X509V3_F_V2I_SUBJECT_ALT 154
  735. #define X509V3_F_V3_ADDR_VALIDATE_PATH_INTERNAL 160
  736. #define X509V3_F_V3_GENERIC_EXTENSION 116
  737. #define X509V3_F_X509V3_ADD1_I2D 140
  738. #define X509V3_F_X509V3_ADD_VALUE 105
  739. #define X509V3_F_X509V3_EXT_ADD 104
  740. #define X509V3_F_X509V3_EXT_ADD_ALIAS 106
  741. #define X509V3_F_X509V3_EXT_CONF 107
  742. #define X509V3_F_X509V3_EXT_I2D 136
  743. #define X509V3_F_X509V3_EXT_NCONF 152
  744. #define X509V3_F_X509V3_GET_SECTION 142
  745. #define X509V3_F_X509V3_GET_STRING 143
  746. #define X509V3_F_X509V3_GET_VALUE_BOOL 110
  747. #define X509V3_F_X509V3_PARSE_LIST 109
  748. #define X509V3_F_X509_PURPOSE_ADD 137
  749. #define X509V3_F_X509_PURPOSE_SET 141
  750. /* Reason codes. */
  751. #define X509V3_R_BAD_IP_ADDRESS 118
  752. #define X509V3_R_BAD_OBJECT 119
  753. #define X509V3_R_BN_DEC2BN_ERROR 100
  754. #define X509V3_R_BN_TO_ASN1_INTEGER_ERROR 101
  755. #define X509V3_R_DIRNAME_ERROR 149
  756. #define X509V3_R_DISTPOINT_ALREADY_SET 160
  757. #define X509V3_R_DUPLICATE_ZONE_ID 133
  758. #define X509V3_R_ERROR_CONVERTING_ZONE 131
  759. #define X509V3_R_ERROR_CREATING_EXTENSION 144
  760. #define X509V3_R_ERROR_IN_EXTENSION 128
  761. #define X509V3_R_EXPECTED_A_SECTION_NAME 137
  762. #define X509V3_R_EXTENSION_EXISTS 145
  763. #define X509V3_R_EXTENSION_NAME_ERROR 115
  764. #define X509V3_R_EXTENSION_NOT_FOUND 102
  765. #define X509V3_R_EXTENSION_SETTING_NOT_SUPPORTED 103
  766. #define X509V3_R_EXTENSION_VALUE_ERROR 116
  767. #define X509V3_R_ILLEGAL_EMPTY_EXTENSION 151
  768. #define X509V3_R_ILLEGAL_HEX_DIGIT 113
  769. #define X509V3_R_INCORRECT_POLICY_SYNTAX_TAG 152
  770. #define X509V3_R_INVAID_MULTIPLE_RDNS 161
  771. #define X509V3_R_INVALID_ASNUMBER 162
  772. #define X509V3_R_INVALID_ASRANGE 163
  773. #define X509V3_R_INVALID_BOOLEAN_STRING 104
  774. #define X509V3_R_INVALID_EXTENSION_STRING 105
  775. #define X509V3_R_INVALID_INHERITANCE 165
  776. #define X509V3_R_INVALID_IPADDRESS 166
  777. #define X509V3_R_INVALID_NAME 106
  778. #define X509V3_R_INVALID_NULL_ARGUMENT 107
  779. #define X509V3_R_INVALID_NULL_NAME 108
  780. #define X509V3_R_INVALID_NULL_VALUE 109
  781. #define X509V3_R_INVALID_NUMBER 140
  782. #define X509V3_R_INVALID_NUMBERS 141
  783. #define X509V3_R_INVALID_OBJECT_IDENTIFIER 110
  784. #define X509V3_R_INVALID_OPTION 138
  785. #define X509V3_R_INVALID_POLICY_IDENTIFIER 134
  786. #define X509V3_R_INVALID_PROXY_POLICY_SETTING 153
  787. #define X509V3_R_INVALID_PURPOSE 146
  788. #define X509V3_R_INVALID_SAFI 164
  789. #define X509V3_R_INVALID_SECTION 135
  790. #define X509V3_R_INVALID_SYNTAX 143
  791. #define X509V3_R_ISSUER_DECODE_ERROR 126
  792. #define X509V3_R_MISSING_VALUE 124
  793. #define X509V3_R_NEED_ORGANIZATION_AND_NUMBERS 142
  794. #define X509V3_R_NO_CONFIG_DATABASE 136
  795. #define X509V3_R_NO_ISSUER_CERTIFICATE 121
  796. #define X509V3_R_NO_ISSUER_DETAILS 127
  797. #define X509V3_R_NO_POLICY_IDENTIFIER 139
  798. #define X509V3_R_NO_PROXY_CERT_POLICY_LANGUAGE_DEFINED 154
  799. #define X509V3_R_NO_PUBLIC_KEY 114
  800. #define X509V3_R_NO_SUBJECT_DETAILS 125
  801. #define X509V3_R_ODD_NUMBER_OF_DIGITS 112
  802. #define X509V3_R_OPERATION_NOT_DEFINED 148
  803. #define X509V3_R_OTHERNAME_ERROR 147
  804. #define X509V3_R_POLICY_LANGUAGE_ALREADTY_DEFINED 155
  805. #define X509V3_R_POLICY_PATH_LENGTH 156
  806. #define X509V3_R_POLICY_PATH_LENGTH_ALREADTY_DEFINED 157
  807. #define X509V3_R_POLICY_SYNTAX_NOT_CURRENTLY_SUPPORTED 158
  808. #define X509V3_R_POLICY_WHEN_PROXY_LANGUAGE_REQUIRES_NO_POLICY 159
  809. #define X509V3_R_SECTION_NOT_FOUND 150
  810. #define X509V3_R_UNABLE_TO_GET_ISSUER_DETAILS 122
  811. #define X509V3_R_UNABLE_TO_GET_ISSUER_KEYID 123
  812. #define X509V3_R_UNKNOWN_BIT_STRING_ARGUMENT 111
  813. #define X509V3_R_UNKNOWN_EXTENSION 129
  814. #define X509V3_R_UNKNOWN_EXTENSION_NAME 130
  815. #define X509V3_R_UNKNOWN_OPTION 120
  816. #define X509V3_R_UNSUPPORTED_OPTION 117
  817. #define X509V3_R_UNSUPPORTED_TYPE 167
  818. #define X509V3_R_USER_TOO_LONG 132
  819. #ifdef __cplusplus
  820. }
  821. #endif
  822. #endif