grpc 1.30.1 → 1.32.0.pre1
Sign up to get free protection for your applications and to get access to all the features.
Potentially problematic release.
This version of grpc might be problematic. Click here for more details.
- checksums.yaml +4 -4
- data/Makefile +723 -15910
- data/include/grpc/grpc_security.h +31 -14
- data/include/grpc/grpc_security_constants.h +3 -0
- data/include/grpc/impl/codegen/README.md +22 -0
- data/include/grpc/impl/codegen/grpc_types.h +7 -5
- data/include/grpc/impl/codegen/port_platform.h +6 -33
- data/src/core/ext/filters/client_channel/backend_metric.cc +12 -9
- data/src/core/ext/filters/client_channel/backup_poller.cc +3 -2
- data/src/core/ext/filters/client_channel/client_channel.cc +470 -285
- data/src/core/ext/filters/client_channel/client_channel.h +1 -1
- data/src/core/ext/filters/client_channel/client_channel_channelz.h +0 -3
- data/src/core/ext/filters/client_channel/config_selector.cc +62 -0
- data/src/core/ext/filters/client_channel/config_selector.h +93 -0
- data/src/core/ext/filters/client_channel/global_subchannel_pool.cc +24 -2
- data/src/core/ext/filters/client_channel/health/health_check_client.cc +8 -1
- data/src/core/ext/filters/client_channel/http_connect_handshaker.cc +8 -8
- data/src/core/ext/filters/client_channel/http_proxy.cc +6 -4
- data/src/core/ext/filters/client_channel/lb_policy.h +4 -0
- data/src/core/ext/filters/client_channel/lb_policy/child_policy_handler.cc +6 -4
- data/src/core/ext/filters/client_channel/lb_policy/grpclb/grpclb.cc +59 -36
- data/src/core/ext/filters/client_channel/lb_policy/grpclb/grpclb_balancer_addresses.cc +0 -13
- data/src/core/ext/filters/client_channel/lb_policy/grpclb/grpclb_balancer_addresses.h +0 -3
- data/src/core/ext/filters/client_channel/lb_policy/grpclb/grpclb_channel_secure.cc +1 -37
- data/src/core/ext/filters/client_channel/lb_policy/pick_first/pick_first.cc +19 -13
- data/src/core/ext/filters/client_channel/lb_policy/priority/priority.cc +29 -10
- data/src/core/ext/filters/client_channel/lb_policy/round_robin/round_robin.cc +5 -4
- data/src/core/ext/filters/client_channel/lb_policy/subchannel_list.h +4 -6
- data/src/core/ext/filters/client_channel/lb_policy/weighted_target/weighted_target.cc +23 -13
- data/src/core/ext/filters/client_channel/lb_policy/xds/cds.cc +18 -12
- data/src/core/ext/filters/client_channel/lb_policy/xds/eds.cc +22 -14
- data/src/core/ext/filters/client_channel/lb_policy/xds/lrs.cc +18 -9
- data/src/core/ext/filters/client_channel/lb_policy/xds/xds_routing.cc +385 -78
- data/src/core/ext/filters/client_channel/lb_policy_registry.cc +4 -5
- data/src/core/ext/filters/client_channel/resolver/dns/c_ares/dns_resolver_ares.cc +5 -2
- data/src/core/ext/filters/client_channel/resolver/dns/c_ares/grpc_ares_ev_driver.cc +6 -5
- data/src/core/ext/filters/client_channel/resolver/dns/c_ares/grpc_ares_ev_driver_libuv.cc +8 -6
- data/src/core/ext/filters/client_channel/resolver/dns/c_ares/grpc_ares_ev_driver_posix.cc +9 -7
- data/src/core/ext/filters/client_channel/resolver/dns/c_ares/grpc_ares_ev_driver_windows.cc +7 -5
- data/src/core/ext/filters/client_channel/resolver/dns/c_ares/grpc_ares_wrapper.cc +36 -51
- data/src/core/ext/filters/client_channel/resolver/dns/c_ares/grpc_ares_wrapper_libuv.cc +1 -1
- data/src/core/ext/filters/client_channel/resolver/dns/c_ares/grpc_ares_wrapper_windows.cc +1 -1
- data/src/core/ext/filters/client_channel/resolver/dns/native/dns_resolver.cc +6 -2
- data/src/core/ext/filters/client_channel/resolver/fake/fake_resolver.cc +1 -1
- data/src/core/ext/filters/client_channel/resolver/sockaddr/sockaddr_resolver.cc +1 -1
- data/src/core/ext/filters/client_channel/resolver/xds/xds_resolver.cc +383 -31
- data/src/core/ext/filters/client_channel/resolver_registry.cc +13 -14
- data/src/core/ext/filters/client_channel/resolver_result_parsing.cc +6 -7
- data/src/core/ext/filters/client_channel/resolver_result_parsing.h +0 -1
- data/src/core/ext/filters/client_channel/resolving_lb_policy.cc +38 -32
- data/src/core/ext/filters/client_channel/resolving_lb_policy.h +39 -20
- data/src/core/ext/filters/client_channel/server_address.cc +40 -7
- data/src/core/ext/filters/client_channel/server_address.h +42 -4
- data/src/core/ext/filters/client_channel/service_config_channel_arg_filter.cc +142 -0
- data/src/core/ext/filters/client_channel/subchannel.cc +65 -24
- data/src/core/ext/filters/client_channel/subchannel.h +16 -4
- data/src/core/ext/filters/http/client/http_client_filter.cc +5 -5
- data/src/core/ext/filters/http/http_filters_plugin.cc +2 -1
- data/src/core/ext/filters/http/message_compress/message_decompress_filter.cc +74 -33
- data/src/core/ext/filters/http/message_compress/message_decompress_filter.h +3 -1
- data/src/core/ext/filters/max_age/max_age_filter.cc +2 -1
- data/src/core/ext/filters/message_size/message_size_filter.cc +56 -80
- data/src/core/ext/filters/message_size/message_size_filter.h +6 -0
- data/src/core/ext/transport/chttp2/client/chttp2_connector.cc +87 -31
- data/src/core/ext/transport/chttp2/client/chttp2_connector.h +18 -1
- data/src/core/ext/transport/chttp2/client/secure/secure_channel_create.cc +10 -35
- data/src/core/ext/transport/chttp2/server/chttp2_server.cc +378 -348
- data/src/core/ext/transport/chttp2/server/chttp2_server.h +7 -2
- data/src/core/ext/transport/chttp2/server/insecure/server_chttp2.cc +3 -3
- data/src/core/ext/transport/chttp2/server/insecure/server_chttp2_posix.cc +10 -16
- data/src/core/ext/transport/chttp2/server/secure/server_secure_chttp2.cc +9 -9
- data/src/core/ext/transport/chttp2/transport/chttp2_transport.cc +256 -279
- data/src/core/ext/transport/chttp2/transport/flow_control.cc +23 -28
- data/src/core/ext/transport/chttp2/transport/flow_control.h +14 -16
- data/src/core/ext/transport/chttp2/transport/frame_data.cc +9 -12
- data/src/core/ext/transport/chttp2/transport/frame_goaway.cc +4 -6
- data/src/core/ext/transport/chttp2/transport/frame_ping.cc +5 -6
- data/src/core/ext/transport/chttp2/transport/frame_rst_stream.cc +12 -13
- data/src/core/ext/transport/chttp2/transport/frame_settings.cc +8 -9
- data/src/core/ext/transport/chttp2/transport/frame_window_update.cc +9 -12
- data/src/core/ext/transport/chttp2/transport/hpack_parser.cc +25 -29
- data/src/core/ext/transport/chttp2/transport/hpack_table.cc +13 -17
- data/src/core/ext/transport/chttp2/transport/internal.h +18 -1
- data/src/core/ext/transport/chttp2/transport/parsing.cc +34 -71
- data/src/core/ext/transport/chttp2/transport/writing.cc +15 -19
- data/src/core/ext/transport/inproc/inproc_transport.cc +47 -27
- data/src/core/ext/upb-generated/envoy/annotations/deprecation.upb.h +0 -1
- data/src/core/ext/upb-generated/envoy/annotations/resource.upb.h +3 -4
- data/src/core/ext/upb-generated/envoy/config/accesslog/v3/accesslog.upb.c +224 -0
- data/src/core/ext/upb-generated/envoy/config/accesslog/v3/accesslog.upb.h +700 -0
- data/src/core/ext/upb-generated/envoy/config/cluster/v3/circuit_breaker.upb.c +74 -0
- data/src/core/ext/upb-generated/envoy/config/cluster/v3/circuit_breaker.upb.h +226 -0
- data/src/core/ext/upb-generated/envoy/config/cluster/v3/cluster.upb.c +380 -0
- data/src/core/ext/upb-generated/envoy/config/cluster/v3/cluster.upb.h +1378 -0
- data/src/core/ext/upb-generated/envoy/{api/v2/cluster → config/cluster/v3}/filter.upb.c +8 -8
- data/src/core/ext/upb-generated/envoy/config/cluster/v3/filter.upb.h +69 -0
- data/src/core/ext/upb-generated/envoy/{api/v2/cluster → config/cluster/v3}/outlier_detection.upb.c +8 -8
- data/src/core/ext/upb-generated/envoy/config/cluster/v3/outlier_detection.upb.h +323 -0
- data/src/core/ext/upb-generated/envoy/config/core/v3/address.upb.c +112 -0
- data/src/core/ext/upb-generated/envoy/config/core/v3/address.upb.h +334 -0
- data/src/core/ext/upb-generated/envoy/{api/v2/core → config/core/v3}/backoff.upb.c +8 -8
- data/src/core/ext/upb-generated/envoy/config/core/v3/backoff.upb.h +79 -0
- data/src/core/ext/upb-generated/envoy/config/core/v3/base.upb.c +309 -0
- data/src/core/ext/upb-generated/envoy/config/core/v3/base.upb.h +869 -0
- data/src/core/ext/upb-generated/envoy/config/core/v3/config_source.upb.c +96 -0
- data/src/core/ext/upb-generated/envoy/config/core/v3/config_source.upb.h +328 -0
- data/src/core/ext/upb-generated/envoy/config/core/v3/event_service_config.upb.c +34 -0
- data/src/core/ext/upb-generated/envoy/config/core/v3/event_service_config.upb.h +71 -0
- data/src/core/ext/upb-generated/envoy/config/core/v3/grpc_service.upb.c +195 -0
- data/src/core/ext/upb-generated/envoy/config/core/v3/grpc_service.upb.h +634 -0
- data/src/core/ext/upb-generated/envoy/config/core/v3/health_check.upb.c +170 -0
- data/src/core/ext/upb-generated/envoy/config/core/v3/health_check.upb.h +684 -0
- data/src/core/ext/upb-generated/envoy/{api/v2/core → config/core/v3}/http_uri.upb.c +8 -8
- data/src/core/ext/upb-generated/envoy/config/core/v3/http_uri.upb.h +80 -0
- data/src/core/ext/upb-generated/envoy/config/core/v3/protocol.upb.c +152 -0
- data/src/core/ext/upb-generated/envoy/config/core/v3/protocol.upb.h +536 -0
- data/src/core/ext/upb-generated/envoy/config/core/v3/proxy_protocol.upb.c +28 -0
- data/src/core/ext/upb-generated/envoy/config/core/v3/proxy_protocol.upb.h +58 -0
- data/src/core/ext/upb-generated/envoy/{api/v2/core → config/core/v3}/socket_option.upb.c +6 -6
- data/src/core/ext/upb-generated/envoy/config/core/v3/socket_option.upb.h +88 -0
- data/src/core/ext/upb-generated/envoy/config/endpoint/v3/endpoint.upb.c +91 -0
- data/src/core/ext/upb-generated/envoy/config/endpoint/v3/endpoint.upb.h +220 -0
- data/src/core/ext/upb-generated/envoy/config/endpoint/v3/endpoint_components.upb.c +91 -0
- data/src/core/ext/upb-generated/envoy/config/endpoint/v3/endpoint_components.upb.h +273 -0
- data/src/core/ext/upb-generated/envoy/config/endpoint/v3/load_report.upb.c +112 -0
- data/src/core/ext/upb-generated/envoy/config/endpoint/v3/load_report.upb.h +332 -0
- data/src/core/ext/upb-generated/envoy/config/listener/{v2 → v3}/api_listener.upb.c +8 -8
- data/src/core/ext/upb-generated/envoy/config/listener/v3/api_listener.upb.h +65 -0
- data/src/core/ext/upb-generated/envoy/config/listener/v3/listener.upb.c +108 -0
- data/src/core/ext/upb-generated/envoy/config/listener/v3/listener.upb.h +401 -0
- data/src/core/ext/upb-generated/envoy/config/listener/v3/listener_components.upb.c +138 -0
- data/src/core/ext/upb-generated/envoy/config/listener/v3/listener_components.upb.h +490 -0
- data/src/core/ext/upb-generated/envoy/config/listener/v3/udp_listener_config.upb.c +41 -0
- data/src/core/ext/upb-generated/envoy/config/listener/v3/udp_listener_config.upb.h +94 -0
- data/src/core/ext/upb-generated/envoy/config/rbac/v3/rbac.upb.c +174 -0
- data/src/core/ext/upb-generated/envoy/config/rbac/v3/rbac.upb.h +599 -0
- data/src/core/ext/upb-generated/envoy/config/route/v3/route.upb.c +63 -0
- data/src/core/ext/upb-generated/envoy/config/route/v3/route.upb.h +204 -0
- data/src/core/ext/upb-generated/envoy/config/route/v3/route_components.upb.c +773 -0
- data/src/core/ext/upb-generated/envoy/config/route/v3/route_components.upb.h +2855 -0
- data/src/core/ext/upb-generated/envoy/config/route/v3/scoped_route.upb.c +59 -0
- data/src/core/ext/upb-generated/envoy/config/route/v3/scoped_route.upb.h +135 -0
- data/src/core/ext/upb-generated/envoy/config/trace/v3/http_tracer.upb.c +50 -0
- data/src/core/ext/upb-generated/envoy/config/trace/v3/http_tracer.upb.h +108 -0
- data/src/core/ext/upb-generated/envoy/extensions/filters/network/http_connection_manager/v3/http_connection_manager.upb.c +312 -0
- data/src/core/ext/upb-generated/envoy/extensions/filters/network/http_connection_manager/v3/http_connection_manager.upb.h +1125 -0
- data/src/core/ext/upb-generated/envoy/extensions/transport_sockets/tls/v3/cert.upb.c +20 -0
- data/src/core/ext/upb-generated/envoy/extensions/transport_sockets/tls/v3/cert.upb.h +34 -0
- data/src/core/ext/upb-generated/envoy/extensions/transport_sockets/tls/v3/common.upb.c +111 -0
- data/src/core/ext/upb-generated/envoy/extensions/transport_sockets/tls/v3/common.upb.h +401 -0
- data/src/core/ext/upb-generated/envoy/extensions/transport_sockets/tls/v3/secret.upb.c +72 -0
- data/src/core/ext/upb-generated/envoy/extensions/transport_sockets/tls/v3/secret.upb.h +198 -0
- data/src/core/ext/upb-generated/envoy/extensions/transport_sockets/tls/v3/tls.upb.c +105 -0
- data/src/core/ext/upb-generated/envoy/extensions/transport_sockets/tls/v3/tls.upb.h +388 -0
- data/src/core/ext/upb-generated/envoy/{api/v2 → service/cluster/v3}/cds.upb.c +5 -6
- data/src/core/ext/upb-generated/envoy/service/cluster/v3/cds.upb.h +49 -0
- data/src/core/ext/upb-generated/envoy/service/discovery/{v2 → v3}/ads.upb.c +5 -4
- data/src/core/ext/upb-generated/envoy/service/discovery/v3/ads.upb.h +49 -0
- data/src/core/ext/upb-generated/envoy/service/discovery/v3/discovery.upb.c +129 -0
- data/src/core/ext/upb-generated/envoy/service/discovery/v3/discovery.upb.h +386 -0
- data/src/core/ext/upb-generated/envoy/{api/v2 → service/endpoint/v3}/eds.upb.c +5 -6
- data/src/core/ext/upb-generated/envoy/service/endpoint/v3/eds.upb.h +49 -0
- data/src/core/ext/upb-generated/envoy/{api/v2 → service/listener/v3}/lds.upb.c +5 -6
- data/src/core/ext/upb-generated/envoy/service/listener/v3/lds.upb.h +49 -0
- data/src/core/ext/upb-generated/envoy/service/load_stats/v3/lrs.upb.c +55 -0
- data/src/core/ext/upb-generated/envoy/service/load_stats/v3/lrs.upb.h +136 -0
- data/src/core/ext/upb-generated/envoy/{api/v2 → service/route/v3}/rds.upb.c +5 -6
- data/src/core/ext/upb-generated/envoy/service/route/v3/rds.upb.h +49 -0
- data/src/core/ext/upb-generated/envoy/{api/v2 → service/route/v3}/srds.upb.c +5 -6
- data/src/core/ext/upb-generated/envoy/service/route/v3/srds.upb.h +49 -0
- data/src/core/ext/upb-generated/envoy/type/matcher/v3/metadata.upb.c +47 -0
- data/src/core/ext/upb-generated/envoy/type/matcher/v3/metadata.upb.h +114 -0
- data/src/core/ext/upb-generated/envoy/type/matcher/v3/number.upb.c +35 -0
- data/src/core/ext/upb-generated/envoy/type/matcher/v3/number.upb.h +77 -0
- data/src/core/ext/upb-generated/envoy/type/matcher/v3/path.upb.c +34 -0
- data/src/core/ext/upb-generated/envoy/type/matcher/v3/path.upb.h +71 -0
- data/src/core/ext/upb-generated/envoy/type/matcher/v3/regex.upb.c +64 -0
- data/src/core/ext/upb-generated/envoy/type/matcher/v3/regex.upb.h +145 -0
- data/src/core/ext/upb-generated/envoy/type/matcher/v3/string.upb.c +53 -0
- data/src/core/ext/upb-generated/envoy/type/matcher/v3/string.upb.h +127 -0
- data/src/core/ext/upb-generated/envoy/type/matcher/v3/value.upb.c +63 -0
- data/src/core/ext/upb-generated/envoy/type/matcher/v3/value.upb.h +188 -0
- data/src/core/ext/upb-generated/envoy/type/metadata/v3/metadata.upb.c +88 -0
- data/src/core/ext/upb-generated/envoy/type/metadata/v3/metadata.upb.h +258 -0
- data/src/core/ext/upb-generated/envoy/type/tracing/v3/custom_tag.upb.c +90 -0
- data/src/core/ext/upb-generated/envoy/type/tracing/v3/custom_tag.upb.h +250 -0
- data/src/core/ext/upb-generated/envoy/type/{http.upb.c → v3/http.upb.c} +2 -2
- data/src/core/ext/upb-generated/envoy/type/{http.upb.h → v3/http.upb.h} +8 -9
- data/src/core/ext/upb-generated/envoy/type/{percent.upb.c → v3/percent.upb.c} +9 -8
- data/src/core/ext/upb-generated/envoy/type/v3/percent.upb.h +86 -0
- data/src/core/ext/upb-generated/envoy/type/{range.upb.c → v3/range.upb.c} +12 -11
- data/src/core/ext/upb-generated/envoy/type/v3/range.upb.h +111 -0
- data/src/core/ext/upb-generated/envoy/type/{semantic_version.upb.c → v3/semantic_version.upb.c} +6 -5
- data/src/core/ext/upb-generated/envoy/type/v3/semantic_version.upb.h +61 -0
- data/src/core/ext/upb-generated/gogoproto/gogo.upb.h +0 -1
- data/src/core/ext/upb-generated/google/api/annotations.upb.h +0 -1
- data/src/core/ext/upb-generated/google/api/expr/v1alpha1/syntax.upb.c +234 -0
- data/src/core/ext/upb-generated/google/api/expr/v1alpha1/syntax.upb.h +759 -0
- data/src/core/ext/upb-generated/google/api/http.upb.h +29 -28
- data/src/core/ext/upb-generated/google/protobuf/any.upb.h +5 -6
- data/src/core/ext/upb-generated/google/protobuf/descriptor.upb.c +39 -39
- data/src/core/ext/upb-generated/google/protobuf/descriptor.upb.h +412 -386
- data/src/core/ext/upb-generated/google/protobuf/duration.upb.h +5 -6
- data/src/core/ext/upb-generated/google/protobuf/empty.upb.h +1 -2
- data/src/core/ext/upb-generated/google/protobuf/struct.upb.c +1 -1
- data/src/core/ext/upb-generated/google/protobuf/struct.upb.h +34 -55
- data/src/core/ext/upb-generated/google/protobuf/timestamp.upb.h +5 -6
- data/src/core/ext/upb-generated/google/protobuf/wrappers.upb.h +27 -28
- data/src/core/ext/upb-generated/google/rpc/status.upb.h +8 -8
- data/src/core/ext/upb-generated/src/proto/grpc/gcp/altscontext.upb.c +1 -1
- data/src/core/ext/upb-generated/src/proto/grpc/gcp/altscontext.upb.h +32 -45
- data/src/core/ext/upb-generated/src/proto/grpc/gcp/handshaker.upb.c +4 -4
- data/src/core/ext/upb-generated/src/proto/grpc/gcp/handshaker.upb.h +157 -178
- data/src/core/ext/upb-generated/src/proto/grpc/gcp/transport_security_common.upb.h +14 -13
- data/src/core/ext/upb-generated/src/proto/grpc/health/v1/health.upb.h +6 -7
- data/src/core/ext/upb-generated/src/proto/grpc/lb/v1/load_balancer.upb.h +59 -56
- data/src/core/ext/upb-generated/udpa/annotations/migrate.upb.h +11 -12
- data/src/core/ext/upb-generated/udpa/annotations/sensitive.upb.h +0 -1
- data/src/core/ext/upb-generated/udpa/annotations/status.upb.h +5 -6
- data/src/core/ext/upb-generated/udpa/annotations/versioning.upb.c +27 -0
- data/src/core/ext/upb-generated/udpa/annotations/versioning.upb.h +53 -0
- data/src/core/ext/upb-generated/udpa/data/orca/v1/orca_load_report.upb.c +6 -6
- data/src/core/ext/upb-generated/udpa/data/orca/v1/orca_load_report.upb.h +41 -68
- data/src/core/ext/upb-generated/validate/validate.upb.c +11 -11
- data/src/core/ext/upb-generated/validate/validate.upb.h +537 -536
- data/src/core/ext/xds/xds_api.cc +2388 -0
- data/src/core/ext/{filters/client_channel/xds → xds}/xds_api.h +120 -40
- data/src/core/ext/{filters/client_channel/xds → xds}/xds_bootstrap.cc +56 -25
- data/src/core/ext/{filters/client_channel/xds → xds}/xds_bootstrap.h +8 -3
- data/src/core/ext/{filters/client_channel/xds → xds}/xds_channel.h +4 -4
- data/src/core/ext/{filters/client_channel/xds → xds}/xds_channel_args.h +3 -3
- data/src/core/ext/{filters/client_channel/xds → xds}/xds_channel_secure.cc +2 -5
- data/src/core/ext/{filters/client_channel/xds → xds}/xds_client.cc +94 -347
- data/src/core/ext/{filters/client_channel/xds → xds}/xds_client.h +12 -45
- data/src/core/ext/{filters/client_channel/xds → xds}/xds_client_stats.cc +2 -2
- data/src/core/ext/{filters/client_channel/xds → xds}/xds_client_stats.h +13 -13
- data/src/core/lib/channel/channel_trace.cc +2 -6
- data/src/core/lib/channel/channelz.cc +19 -30
- data/src/core/lib/channel/channelz.h +1 -1
- data/src/core/lib/channel/channelz_registry.cc +3 -1
- data/src/core/lib/gpr/log_linux.cc +6 -8
- data/src/core/lib/gpr/log_posix.cc +6 -8
- data/src/core/lib/gpr/string.cc +10 -9
- data/src/core/lib/gpr/string.h +4 -2
- data/src/core/lib/gpr/sync_posix.cc +2 -8
- data/src/core/lib/gprpp/global_config_env.cc +8 -6
- data/src/core/lib/http/httpcli.cc +13 -10
- data/src/core/lib/http/httpcli_security_connector.cc +5 -5
- data/src/core/lib/iomgr/cfstream_handle.cc +1 -0
- data/src/core/lib/iomgr/endpoint.cc +5 -1
- data/src/core/lib/iomgr/endpoint.h +7 -3
- data/src/core/lib/iomgr/endpoint_cfstream.cc +32 -11
- data/src/core/lib/iomgr/endpoint_pair_posix.cc +10 -10
- data/src/core/lib/iomgr/error_cfstream.cc +9 -8
- data/src/core/lib/iomgr/ev_epoll1_linux.cc +5 -6
- data/src/core/lib/iomgr/ev_epollex_linux.cc +15 -21
- data/src/core/lib/iomgr/ev_poll_posix.cc +6 -5
- data/src/core/lib/iomgr/is_epollexclusive_available.cc +14 -0
- data/src/core/{ext/filters/client_channel → lib/iomgr}/parse_address.cc +1 -1
- data/src/core/{ext/filters/client_channel → lib/iomgr}/parse_address.h +3 -3
- data/src/core/lib/iomgr/port.h +1 -21
- data/src/core/lib/iomgr/resolve_address_custom.cc +13 -18
- data/src/core/lib/iomgr/resolve_address_windows.cc +8 -8
- data/src/core/lib/iomgr/resource_quota.cc +34 -31
- data/src/core/lib/iomgr/sockaddr_utils.cc +9 -6
- data/src/core/lib/iomgr/sockaddr_utils.h +3 -2
- data/src/core/lib/iomgr/socket_utils_common_posix.cc +95 -55
- data/src/core/lib/iomgr/socket_windows.cc +4 -5
- data/src/core/lib/iomgr/tcp_client_cfstream.cc +9 -11
- data/src/core/lib/iomgr/tcp_client_custom.cc +6 -9
- data/src/core/lib/iomgr/tcp_client_posix.cc +27 -36
- data/src/core/lib/iomgr/tcp_client_windows.cc +9 -9
- data/src/core/lib/iomgr/tcp_custom.cc +33 -17
- data/src/core/lib/iomgr/tcp_custom.h +1 -1
- data/src/core/lib/iomgr/tcp_posix.cc +31 -13
- data/src/core/lib/iomgr/tcp_server.cc +3 -4
- data/src/core/lib/iomgr/tcp_server.h +7 -5
- data/src/core/lib/iomgr/tcp_server_custom.cc +6 -14
- data/src/core/lib/iomgr/tcp_server_posix.cc +34 -41
- data/src/core/lib/iomgr/tcp_server_utils_posix.h +3 -4
- data/src/core/lib/iomgr/tcp_server_utils_posix_common.cc +5 -7
- data/src/core/lib/iomgr/tcp_server_utils_posix_ifaddrs.cc +4 -9
- data/src/core/lib/iomgr/tcp_server_windows.cc +16 -16
- data/src/core/lib/iomgr/tcp_windows.cc +26 -10
- data/src/core/lib/iomgr/timer_generic.cc +13 -12
- data/src/core/lib/iomgr/udp_server.cc +24 -23
- data/src/core/lib/iomgr/udp_server.h +5 -2
- data/src/core/lib/iomgr/unix_sockets_posix.cc +9 -14
- data/src/core/lib/iomgr/unix_sockets_posix.h +3 -1
- data/src/core/lib/iomgr/unix_sockets_posix_noop.cc +5 -2
- data/src/core/lib/json/json_reader.cc +20 -21
- data/src/core/lib/security/authorization/authorization_engine.cc +177 -0
- data/src/core/lib/security/authorization/authorization_engine.h +84 -0
- data/src/core/lib/security/authorization/evaluate_args.cc +153 -0
- data/src/core/lib/security/authorization/evaluate_args.h +59 -0
- data/src/core/lib/security/authorization/mock_cel/activation.h +57 -0
- data/src/core/lib/security/authorization/mock_cel/cel_expr_builder_factory.h +42 -0
- data/src/core/lib/security/authorization/mock_cel/cel_expression.h +68 -0
- data/src/core/lib/security/authorization/mock_cel/cel_value.h +93 -0
- data/src/core/lib/security/authorization/mock_cel/evaluator_core.h +67 -0
- data/src/core/lib/security/authorization/mock_cel/flat_expr_builder.h +56 -0
- data/src/core/lib/security/authorization/mock_cel/statusor.h +50 -0
- data/src/core/lib/security/credentials/credentials.h +5 -3
- data/src/core/lib/security/credentials/google_default/credentials_generic.cc +8 -6
- data/src/core/lib/security/credentials/google_default/google_default_credentials.cc +64 -43
- data/src/core/lib/security/credentials/jwt/jwt_credentials.cc +7 -4
- data/src/core/lib/security/credentials/oauth2/oauth2_credentials.cc +19 -28
- data/src/core/lib/security/credentials/plugin/plugin_credentials.cc +6 -6
- data/src/core/lib/security/credentials/ssl/ssl_credentials.cc +20 -0
- data/src/core/lib/security/credentials/ssl/ssl_credentials.h +10 -0
- data/src/core/lib/security/credentials/tls/grpc_tls_credentials_options.h +10 -0
- data/src/core/lib/security/security_connector/fake/fake_security_connector.cc +11 -12
- data/src/core/lib/security/security_connector/security_connector.cc +2 -0
- data/src/core/lib/security/security_connector/security_connector.h +1 -1
- data/src/core/lib/security/security_connector/ssl/ssl_security_connector.cc +18 -11
- data/src/core/lib/security/security_connector/ssl/ssl_security_connector.h +5 -0
- data/src/core/lib/security/security_connector/ssl_utils.cc +44 -23
- data/src/core/lib/security/security_connector/ssl_utils.h +6 -2
- data/src/core/lib/security/security_connector/tls/tls_security_connector.cc +27 -24
- data/src/core/lib/security/transport/client_auth_filter.cc +10 -9
- data/src/core/lib/security/transport/secure_endpoint.cc +7 -1
- data/src/core/lib/security/util/json_util.cc +12 -13
- data/src/core/lib/slice/slice.cc +38 -1
- data/src/core/lib/slice/slice_internal.h +1 -0
- data/src/core/lib/surface/call.cc +52 -53
- data/src/core/lib/surface/call.h +2 -1
- data/src/core/lib/surface/channel.cc +28 -20
- data/src/core/lib/surface/channel.h +12 -2
- data/src/core/lib/surface/completion_queue.cc +0 -5
- data/src/core/lib/surface/init.cc +1 -1
- data/src/core/lib/surface/server.cc +1102 -1347
- data/src/core/lib/surface/server.h +369 -71
- data/src/core/lib/surface/version.cc +2 -2
- data/src/core/lib/transport/authority_override.cc +38 -0
- data/src/core/lib/transport/authority_override.h +32 -0
- data/src/core/lib/transport/connectivity_state.cc +18 -13
- data/src/core/lib/transport/connectivity_state.h +18 -6
- data/src/core/lib/transport/error_utils.cc +13 -0
- data/src/core/lib/transport/error_utils.h +6 -0
- data/src/core/lib/transport/static_metadata.cc +295 -276
- data/src/core/lib/transport/static_metadata.h +80 -73
- data/src/core/lib/transport/transport.h +13 -0
- data/src/core/lib/uri/uri_parser.cc +30 -35
- data/src/core/lib/uri/uri_parser.h +3 -1
- data/src/core/plugin_registry/grpc_plugin_registry.cc +4 -0
- data/src/core/tsi/alts/handshaker/alts_handshaker_client.cc +23 -13
- data/src/core/tsi/alts/handshaker/alts_tsi_handshaker.cc +24 -0
- data/src/core/tsi/alts/handshaker/transport_security_common_api.cc +2 -0
- data/src/core/tsi/ssl_transport_security.cc +102 -11
- data/src/core/tsi/ssl_transport_security.h +14 -2
- data/src/core/tsi/transport_security_interface.h +5 -0
- data/src/ruby/bin/math_services_pb.rb +4 -4
- data/src/ruby/ext/grpc/extconf.rb +5 -2
- data/src/ruby/ext/grpc/rb_call.c +3 -2
- data/src/ruby/ext/grpc/rb_call.h +4 -0
- data/src/ruby/ext/grpc/rb_call_credentials.c +54 -10
- data/src/ruby/ext/grpc/rb_channel_credentials.c +9 -0
- data/src/ruby/ext/grpc/rb_grpc_imports.generated.c +2 -2
- data/src/ruby/ext/grpc/rb_grpc_imports.generated.h +4 -4
- data/src/ruby/lib/grpc/generic/client_stub.rb +1 -1
- data/src/ruby/lib/grpc/generic/interceptors.rb +1 -1
- data/src/ruby/lib/grpc/version.rb +1 -1
- data/src/ruby/pb/grpc/health/v1/health_services_pb.rb +2 -2
- data/src/ruby/pb/src/proto/grpc/testing/messages_pb.rb +5 -0
- data/src/ruby/pb/src/proto/grpc/testing/test_services_pb.rb +28 -12
- data/src/ruby/spec/channel_credentials_spec.rb +10 -0
- data/src/ruby/spec/generic/active_call_spec.rb +19 -8
- data/src/ruby/spec/pb/codegen/grpc/testing/package_options_import2.proto +23 -0
- data/src/ruby/spec/pb/codegen/grpc/testing/package_options_ruby_style.proto +2 -0
- data/src/ruby/spec/pb/codegen/grpc/testing/same_package_service_name.proto +27 -0
- data/src/ruby/spec/pb/codegen/grpc/testing/same_ruby_package_service_name.proto +29 -0
- data/src/ruby/spec/pb/codegen/package_option_spec.rb +25 -1
- data/src/ruby/spec/user_agent_spec.rb +74 -0
- data/third_party/abseil-cpp/absl/algorithm/container.h +1727 -0
- data/third_party/abseil-cpp/absl/base/internal/direct_mmap.h +161 -0
- data/third_party/abseil-cpp/absl/base/internal/exponential_biased.cc +93 -0
- data/third_party/abseil-cpp/absl/base/internal/exponential_biased.h +130 -0
- data/third_party/abseil-cpp/absl/base/internal/low_level_alloc.cc +620 -0
- data/third_party/abseil-cpp/absl/base/internal/low_level_alloc.h +126 -0
- data/third_party/abseil-cpp/absl/container/fixed_array.h +515 -0
- data/third_party/abseil-cpp/absl/container/flat_hash_set.h +503 -0
- data/third_party/abseil-cpp/absl/container/internal/common.h +202 -0
- data/third_party/abseil-cpp/absl/container/internal/container_memory.h +440 -0
- data/third_party/abseil-cpp/absl/container/internal/hash_function_defaults.h +146 -0
- data/third_party/abseil-cpp/absl/container/internal/hash_policy_traits.h +191 -0
- data/third_party/abseil-cpp/absl/container/internal/hashtable_debug_hooks.h +85 -0
- data/third_party/abseil-cpp/absl/container/internal/hashtablez_sampler.cc +269 -0
- data/third_party/abseil-cpp/absl/container/internal/hashtablez_sampler.h +297 -0
- data/third_party/abseil-cpp/absl/container/internal/hashtablez_sampler_force_weak_definition.cc +30 -0
- data/third_party/abseil-cpp/absl/container/internal/have_sse.h +49 -0
- data/third_party/abseil-cpp/absl/container/internal/layout.h +741 -0
- data/third_party/abseil-cpp/absl/container/internal/raw_hash_set.cc +48 -0
- data/third_party/abseil-cpp/absl/container/internal/raw_hash_set.h +1882 -0
- data/third_party/abseil-cpp/absl/debugging/internal/address_is_readable.cc +138 -0
- data/third_party/abseil-cpp/absl/debugging/internal/address_is_readable.h +32 -0
- data/third_party/abseil-cpp/absl/debugging/internal/demangle.cc +1895 -0
- data/third_party/abseil-cpp/absl/debugging/internal/demangle.h +71 -0
- data/third_party/abseil-cpp/absl/debugging/internal/elf_mem_image.cc +382 -0
- data/third_party/abseil-cpp/absl/debugging/internal/elf_mem_image.h +134 -0
- data/third_party/abseil-cpp/absl/debugging/internal/stacktrace_aarch64-inl.inc +192 -0
- data/third_party/abseil-cpp/absl/debugging/internal/stacktrace_arm-inl.inc +125 -0
- data/third_party/abseil-cpp/absl/debugging/internal/stacktrace_config.h +70 -0
- data/third_party/abseil-cpp/absl/debugging/internal/stacktrace_generic-inl.inc +99 -0
- data/third_party/abseil-cpp/absl/debugging/internal/stacktrace_powerpc-inl.inc +248 -0
- data/third_party/abseil-cpp/absl/debugging/internal/stacktrace_unimplemented-inl.inc +24 -0
- data/third_party/abseil-cpp/absl/debugging/internal/stacktrace_win32-inl.inc +85 -0
- data/third_party/abseil-cpp/absl/debugging/internal/stacktrace_x86-inl.inc +346 -0
- data/third_party/abseil-cpp/absl/debugging/internal/symbolize.h +128 -0
- data/third_party/abseil-cpp/absl/debugging/internal/vdso_support.cc +194 -0
- data/third_party/abseil-cpp/absl/debugging/internal/vdso_support.h +158 -0
- data/third_party/abseil-cpp/absl/debugging/stacktrace.cc +140 -0
- data/third_party/abseil-cpp/absl/debugging/stacktrace.h +231 -0
- data/third_party/abseil-cpp/absl/debugging/symbolize.cc +25 -0
- data/third_party/abseil-cpp/absl/debugging/symbolize.h +99 -0
- data/third_party/abseil-cpp/absl/debugging/symbolize_elf.inc +1480 -0
- data/third_party/abseil-cpp/absl/debugging/symbolize_unimplemented.inc +40 -0
- data/third_party/abseil-cpp/absl/debugging/symbolize_win32.inc +81 -0
- data/third_party/abseil-cpp/absl/functional/function_ref.h +139 -0
- data/third_party/abseil-cpp/absl/functional/internal/function_ref.h +106 -0
- data/third_party/abseil-cpp/absl/hash/hash.h +324 -0
- data/third_party/abseil-cpp/absl/hash/internal/city.cc +346 -0
- data/third_party/abseil-cpp/absl/hash/internal/city.h +96 -0
- data/third_party/abseil-cpp/absl/hash/internal/hash.cc +55 -0
- data/third_party/abseil-cpp/absl/hash/internal/hash.h +988 -0
- data/third_party/abseil-cpp/absl/status/status.cc +447 -0
- data/third_party/abseil-cpp/absl/status/status.h +428 -0
- data/third_party/abseil-cpp/absl/status/status_payload_printer.cc +43 -0
- data/third_party/abseil-cpp/absl/status/status_payload_printer.h +51 -0
- data/third_party/abseil-cpp/absl/strings/cord.cc +2019 -0
- data/third_party/abseil-cpp/absl/strings/cord.h +1121 -0
- data/third_party/abseil-cpp/absl/strings/internal/cord_internal.h +151 -0
- data/third_party/abseil-cpp/absl/synchronization/barrier.cc +52 -0
- data/third_party/abseil-cpp/absl/synchronization/barrier.h +79 -0
- data/third_party/abseil-cpp/absl/synchronization/blocking_counter.cc +57 -0
- data/third_party/abseil-cpp/absl/synchronization/blocking_counter.h +99 -0
- data/third_party/abseil-cpp/absl/synchronization/internal/create_thread_identity.cc +140 -0
- data/third_party/abseil-cpp/absl/synchronization/internal/create_thread_identity.h +60 -0
- data/third_party/abseil-cpp/absl/synchronization/internal/graphcycles.cc +697 -0
- data/third_party/abseil-cpp/absl/synchronization/internal/graphcycles.h +141 -0
- data/third_party/abseil-cpp/absl/synchronization/internal/kernel_timeout.h +155 -0
- data/third_party/abseil-cpp/absl/synchronization/internal/mutex_nonprod.inc +261 -0
- data/third_party/abseil-cpp/absl/synchronization/internal/per_thread_sem.cc +106 -0
- data/third_party/abseil-cpp/absl/synchronization/internal/per_thread_sem.h +115 -0
- data/third_party/abseil-cpp/absl/synchronization/internal/waiter.cc +484 -0
- data/third_party/abseil-cpp/absl/synchronization/internal/waiter.h +159 -0
- data/third_party/abseil-cpp/absl/synchronization/mutex.cc +2728 -0
- data/third_party/abseil-cpp/absl/synchronization/mutex.h +1056 -0
- data/third_party/abseil-cpp/absl/synchronization/notification.cc +78 -0
- data/third_party/abseil-cpp/absl/synchronization/notification.h +123 -0
- data/third_party/abseil-cpp/absl/types/bad_variant_access.cc +64 -0
- data/third_party/abseil-cpp/absl/types/bad_variant_access.h +82 -0
- data/third_party/abseil-cpp/absl/types/internal/variant.h +1646 -0
- data/third_party/abseil-cpp/absl/types/variant.h +861 -0
- data/third_party/boringssl-with-bazel/err_data.c +266 -254
- data/third_party/boringssl-with-bazel/src/crypto/asn1/a_bitstr.c +3 -3
- data/third_party/boringssl-with-bazel/src/crypto/asn1/a_enum.c +3 -3
- data/third_party/boringssl-with-bazel/src/crypto/asn1/a_int.c +1 -1
- data/third_party/boringssl-with-bazel/src/crypto/asn1/a_object.c +3 -3
- data/third_party/boringssl-with-bazel/src/crypto/asn1/a_time.c +2 -2
- data/third_party/boringssl-with-bazel/src/crypto/asn1/a_type.c +1 -1
- data/third_party/boringssl-with-bazel/src/crypto/asn1/asn1_lib.c +1 -1
- data/third_party/boringssl-with-bazel/src/crypto/asn1/asn_pack.c +1 -1
- data/third_party/boringssl-with-bazel/src/crypto/asn1/f_enum.c +1 -1
- data/third_party/boringssl-with-bazel/src/crypto/asn1/f_int.c +1 -1
- data/third_party/boringssl-with-bazel/src/crypto/asn1/f_string.c +1 -1
- data/third_party/boringssl-with-bazel/src/crypto/cipher_extra/tls_cbc.c +1 -0
- data/third_party/boringssl-with-bazel/src/crypto/ec_extra/hash_to_curve.c +12 -52
- data/third_party/boringssl-with-bazel/src/crypto/ec_extra/internal.h +0 -22
- data/third_party/boringssl-with-bazel/src/crypto/evp/evp_asn1.c +159 -0
- data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/aes/mode_wrappers.c +17 -1
- data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/bn/internal.h +11 -1
- data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/ec/internal.h +2 -1
- data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/ec/p224-64.c +13 -11
- data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/ec/p256-x86_64.c +24 -23
- data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/ec/p256.c +20 -16
- data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/ec/simple_mul.c +2 -2
- data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/ec/util.c +3 -3
- data/third_party/boringssl-with-bazel/src/crypto/fipsmodule/self_check/self_check.c +62 -0
- data/third_party/boringssl-with-bazel/src/crypto/hpke/hpke.c +456 -0
- data/third_party/boringssl-with-bazel/src/crypto/hpke/internal.h +192 -0
- data/third_party/boringssl-with-bazel/src/crypto/mem.c +29 -15
- data/third_party/boringssl-with-bazel/src/crypto/pkcs8/internal.h +7 -0
- data/third_party/boringssl-with-bazel/src/crypto/pkcs8/pkcs8_x509.c +36 -5
- data/third_party/boringssl-with-bazel/src/crypto/trust_token/internal.h +0 -29
- data/third_party/boringssl-with-bazel/src/crypto/trust_token/pmbtoken.c +116 -363
- data/third_party/boringssl-with-bazel/src/crypto/trust_token/trust_token.c +7 -45
- data/third_party/boringssl-with-bazel/src/crypto/x509/a_strex.c +4 -4
- data/third_party/boringssl-with-bazel/src/crypto/x509/algorithm.c +8 -0
- data/third_party/boringssl-with-bazel/src/crypto/x509/asn1_gen.c +4 -4
- data/third_party/boringssl-with-bazel/src/crypto/x509/x509.c +0 -67
- data/third_party/boringssl-with-bazel/src/crypto/x509/x509_cmp.c +13 -6
- data/third_party/boringssl-with-bazel/src/crypto/x509/x509_req.c +10 -0
- data/third_party/boringssl-with-bazel/src/crypto/x509/x509_set.c +41 -0
- data/third_party/boringssl-with-bazel/src/crypto/x509/x509_trs.c +4 -1
- data/third_party/boringssl-with-bazel/src/crypto/x509/x509_vfy.c +28 -9
- data/third_party/boringssl-with-bazel/src/crypto/x509/x509cset.c +25 -0
- data/third_party/boringssl-with-bazel/src/crypto/x509/x_crl.c +35 -13
- data/third_party/boringssl-with-bazel/src/crypto/x509/x_pubkey.c +0 -154
- data/third_party/boringssl-with-bazel/src/crypto/x509/x_sig.c +20 -0
- data/third_party/boringssl-with-bazel/src/crypto/x509/x_x509.c +28 -6
- data/third_party/boringssl-with-bazel/src/crypto/x509v3/internal.h +5 -0
- data/third_party/boringssl-with-bazel/src/crypto/x509v3/v3_purp.c +74 -35
- data/third_party/boringssl-with-bazel/src/include/openssl/aes.h +16 -4
- data/third_party/boringssl-with-bazel/src/include/openssl/arm_arch.h +52 -0
- data/third_party/boringssl-with-bazel/src/include/openssl/asn1.h +22 -22
- data/third_party/boringssl-with-bazel/src/include/openssl/base.h +2 -2
- data/third_party/boringssl-with-bazel/src/include/openssl/evp.h +69 -0
- data/third_party/boringssl-with-bazel/src/include/openssl/ssl.h +72 -23
- data/third_party/boringssl-with-bazel/src/include/openssl/tls1.h +2 -3
- data/third_party/boringssl-with-bazel/src/include/openssl/trust_token.h +1 -10
- data/third_party/boringssl-with-bazel/src/include/openssl/x509.h +800 -715
- data/third_party/boringssl-with-bazel/src/ssl/handoff.cc +3 -3
- data/third_party/boringssl-with-bazel/src/ssl/handshake.cc +9 -2
- data/third_party/boringssl-with-bazel/src/ssl/handshake_client.cc +2 -2
- data/third_party/boringssl-with-bazel/src/ssl/handshake_server.cc +9 -0
- data/third_party/boringssl-with-bazel/src/ssl/internal.h +21 -14
- data/third_party/boringssl-with-bazel/src/ssl/ssl_asn1.cc +7 -7
- data/third_party/boringssl-with-bazel/src/ssl/ssl_cert.cc +3 -6
- data/third_party/boringssl-with-bazel/src/ssl/ssl_lib.cc +38 -0
- data/third_party/boringssl-with-bazel/src/ssl/ssl_session.cc +4 -24
- data/third_party/boringssl-with-bazel/src/ssl/ssl_versions.cc +5 -5
- data/third_party/boringssl-with-bazel/src/ssl/t1_enc.cc +45 -24
- data/third_party/boringssl-with-bazel/src/ssl/t1_lib.cc +34 -9
- data/third_party/boringssl-with-bazel/src/ssl/tls13_client.cc +31 -21
- data/third_party/boringssl-with-bazel/src/ssl/tls13_server.cc +17 -9
- data/third_party/boringssl-with-bazel/src/ssl/tls_record.cc +5 -3
- data/third_party/re2/re2/bitmap256.h +117 -0
- data/third_party/re2/re2/bitstate.cc +385 -0
- data/third_party/re2/re2/compile.cc +1279 -0
- data/third_party/re2/re2/dfa.cc +2130 -0
- data/third_party/re2/re2/filtered_re2.cc +121 -0
- data/third_party/re2/re2/filtered_re2.h +109 -0
- data/third_party/re2/re2/mimics_pcre.cc +197 -0
- data/third_party/re2/re2/nfa.cc +713 -0
- data/third_party/re2/re2/onepass.cc +623 -0
- data/third_party/re2/re2/parse.cc +2464 -0
- data/third_party/re2/re2/perl_groups.cc +119 -0
- data/third_party/re2/re2/pod_array.h +55 -0
- data/third_party/re2/re2/prefilter.cc +710 -0
- data/third_party/re2/re2/prefilter.h +108 -0
- data/third_party/re2/re2/prefilter_tree.cc +407 -0
- data/third_party/re2/re2/prefilter_tree.h +139 -0
- data/third_party/re2/re2/prog.cc +988 -0
- data/third_party/re2/re2/prog.h +436 -0
- data/third_party/re2/re2/re2.cc +1362 -0
- data/third_party/re2/re2/re2.h +1002 -0
- data/third_party/re2/re2/regexp.cc +980 -0
- data/third_party/re2/re2/regexp.h +659 -0
- data/third_party/re2/re2/set.cc +154 -0
- data/third_party/re2/re2/set.h +80 -0
- data/third_party/re2/re2/simplify.cc +657 -0
- data/third_party/re2/re2/sparse_array.h +392 -0
- data/third_party/re2/re2/sparse_set.h +264 -0
- data/third_party/re2/re2/stringpiece.cc +65 -0
- data/third_party/re2/re2/stringpiece.h +210 -0
- data/third_party/re2/re2/tostring.cc +351 -0
- data/third_party/re2/re2/unicode_casefold.cc +582 -0
- data/third_party/re2/re2/unicode_casefold.h +78 -0
- data/third_party/re2/re2/unicode_groups.cc +6269 -0
- data/third_party/re2/re2/unicode_groups.h +67 -0
- data/third_party/re2/re2/walker-inl.h +246 -0
- data/third_party/re2/util/benchmark.h +156 -0
- data/third_party/re2/util/flags.h +26 -0
- data/third_party/re2/util/logging.h +109 -0
- data/third_party/re2/util/malloc_counter.h +19 -0
- data/third_party/re2/util/mix.h +41 -0
- data/third_party/re2/util/mutex.h +148 -0
- data/third_party/re2/util/pcre.cc +1025 -0
- data/third_party/re2/util/pcre.h +681 -0
- data/third_party/re2/util/rune.cc +260 -0
- data/third_party/re2/util/strutil.cc +149 -0
- data/third_party/re2/util/strutil.h +21 -0
- data/third_party/re2/util/test.h +50 -0
- data/third_party/re2/util/utf.h +44 -0
- data/third_party/re2/util/util.h +42 -0
- data/third_party/upb/upb/decode.c +517 -505
- data/third_party/upb/upb/encode.c +165 -123
- data/third_party/upb/upb/msg.c +130 -64
- data/third_party/upb/upb/msg.h +418 -14
- data/third_party/upb/upb/port_def.inc +35 -6
- data/third_party/upb/upb/port_undef.inc +8 -1
- data/third_party/upb/upb/table.c +53 -86
- data/third_party/upb/upb/table.int.h +11 -52
- data/third_party/upb/upb/upb.c +151 -125
- data/third_party/upb/upb/upb.h +91 -147
- data/third_party/upb/upb/upb.hpp +88 -0
- metadata +310 -148
- data/src/core/ext/filters/client_channel/xds/xds_api.cc +0 -1906
- data/src/core/ext/upb-generated/envoy/api/v2/auth/cert.upb.c +0 -21
- data/src/core/ext/upb-generated/envoy/api/v2/auth/cert.upb.h +0 -35
- data/src/core/ext/upb-generated/envoy/api/v2/auth/common.upb.c +0 -114
- data/src/core/ext/upb-generated/envoy/api/v2/auth/common.upb.h +0 -418
- data/src/core/ext/upb-generated/envoy/api/v2/auth/secret.upb.c +0 -72
- data/src/core/ext/upb-generated/envoy/api/v2/auth/secret.upb.h +0 -197
- data/src/core/ext/upb-generated/envoy/api/v2/auth/tls.upb.c +0 -105
- data/src/core/ext/upb-generated/envoy/api/v2/auth/tls.upb.h +0 -378
- data/src/core/ext/upb-generated/envoy/api/v2/cds.upb.h +0 -53
- data/src/core/ext/upb-generated/envoy/api/v2/cluster.upb.c +0 -403
- data/src/core/ext/upb-generated/envoy/api/v2/cluster.upb.h +0 -1447
- data/src/core/ext/upb-generated/envoy/api/v2/cluster/circuit_breaker.upb.c +0 -74
- data/src/core/ext/upb-generated/envoy/api/v2/cluster/circuit_breaker.upb.h +0 -218
- data/src/core/ext/upb-generated/envoy/api/v2/cluster/filter.upb.h +0 -69
- data/src/core/ext/upb-generated/envoy/api/v2/cluster/outlier_detection.upb.h +0 -305
- data/src/core/ext/upb-generated/envoy/api/v2/core/address.upb.c +0 -112
- data/src/core/ext/upb-generated/envoy/api/v2/core/address.upb.h +0 -328
- data/src/core/ext/upb-generated/envoy/api/v2/core/backoff.upb.h +0 -78
- data/src/core/ext/upb-generated/envoy/api/v2/core/base.upb.c +0 -313
- data/src/core/ext/upb-generated/envoy/api/v2/core/base.upb.h +0 -897
- data/src/core/ext/upb-generated/envoy/api/v2/core/config_source.upb.c +0 -96
- data/src/core/ext/upb-generated/envoy/api/v2/core/config_source.upb.h +0 -322
- data/src/core/ext/upb-generated/envoy/api/v2/core/event_service_config.upb.c +0 -34
- data/src/core/ext/upb-generated/envoy/api/v2/core/event_service_config.upb.h +0 -72
- data/src/core/ext/upb-generated/envoy/api/v2/core/grpc_service.upb.c +0 -197
- data/src/core/ext/upb-generated/envoy/api/v2/core/grpc_service.upb.h +0 -642
- data/src/core/ext/upb-generated/envoy/api/v2/core/health_check.upb.c +0 -172
- data/src/core/ext/upb-generated/envoy/api/v2/core/health_check.upb.h +0 -673
- data/src/core/ext/upb-generated/envoy/api/v2/core/http_uri.upb.h +0 -80
- data/src/core/ext/upb-generated/envoy/api/v2/core/protocol.upb.c +0 -152
- data/src/core/ext/upb-generated/envoy/api/v2/core/protocol.upb.h +0 -518
- data/src/core/ext/upb-generated/envoy/api/v2/core/socket_option.upb.h +0 -89
- data/src/core/ext/upb-generated/envoy/api/v2/discovery.upb.c +0 -129
- data/src/core/ext/upb-generated/envoy/api/v2/discovery.upb.h +0 -392
- data/src/core/ext/upb-generated/envoy/api/v2/eds.upb.h +0 -53
- data/src/core/ext/upb-generated/envoy/api/v2/endpoint.upb.c +0 -92
- data/src/core/ext/upb-generated/envoy/api/v2/endpoint.upb.h +0 -240
- data/src/core/ext/upb-generated/envoy/api/v2/endpoint/endpoint.upb.c +0 -18
- data/src/core/ext/upb-generated/envoy/api/v2/endpoint/endpoint.upb.h +0 -33
- data/src/core/ext/upb-generated/envoy/api/v2/endpoint/endpoint_components.upb.c +0 -91
- data/src/core/ext/upb-generated/envoy/api/v2/endpoint/endpoint_components.upb.h +0 -266
- data/src/core/ext/upb-generated/envoy/api/v2/endpoint/load_report.upb.c +0 -112
- data/src/core/ext/upb-generated/envoy/api/v2/endpoint/load_report.upb.h +0 -324
- data/src/core/ext/upb-generated/envoy/api/v2/lds.upb.h +0 -53
- data/src/core/ext/upb-generated/envoy/api/v2/listener.upb.c +0 -109
- data/src/core/ext/upb-generated/envoy/api/v2/listener.upb.h +0 -399
- data/src/core/ext/upb-generated/envoy/api/v2/listener/listener.upb.c +0 -18
- data/src/core/ext/upb-generated/envoy/api/v2/listener/listener.upb.h +0 -33
- data/src/core/ext/upb-generated/envoy/api/v2/listener/listener_components.upb.c +0 -145
- data/src/core/ext/upb-generated/envoy/api/v2/listener/listener_components.upb.h +0 -527
- data/src/core/ext/upb-generated/envoy/api/v2/listener/udp_listener_config.upb.c +0 -43
- data/src/core/ext/upb-generated/envoy/api/v2/listener/udp_listener_config.upb.h +0 -112
- data/src/core/ext/upb-generated/envoy/api/v2/rds.upb.h +0 -53
- data/src/core/ext/upb-generated/envoy/api/v2/route.upb.c +0 -63
- data/src/core/ext/upb-generated/envoy/api/v2/route.upb.h +0 -199
- data/src/core/ext/upb-generated/envoy/api/v2/route/route.upb.c +0 -18
- data/src/core/ext/upb-generated/envoy/api/v2/route/route.upb.h +0 -33
- data/src/core/ext/upb-generated/envoy/api/v2/route/route_components.upb.c +0 -815
- data/src/core/ext/upb-generated/envoy/api/v2/route/route_components.upb.h +0 -3032
- data/src/core/ext/upb-generated/envoy/api/v2/scoped_route.upb.c +0 -59
- data/src/core/ext/upb-generated/envoy/api/v2/scoped_route.upb.h +0 -134
- data/src/core/ext/upb-generated/envoy/api/v2/srds.upb.h +0 -53
- data/src/core/ext/upb-generated/envoy/config/filter/accesslog/v2/accesslog.upb.c +0 -228
- data/src/core/ext/upb-generated/envoy/config/filter/accesslog/v2/accesslog.upb.h +0 -725
- data/src/core/ext/upb-generated/envoy/config/filter/network/http_connection_manager/v2/http_connection_manager.upb.c +0 -316
- data/src/core/ext/upb-generated/envoy/config/filter/network/http_connection_manager/v2/http_connection_manager.upb.h +0 -1132
- data/src/core/ext/upb-generated/envoy/config/listener/v2/api_listener.upb.h +0 -65
- data/src/core/ext/upb-generated/envoy/config/trace/v2/http_tracer.upb.c +0 -51
- data/src/core/ext/upb-generated/envoy/config/trace/v2/http_tracer.upb.h +0 -125
- data/src/core/ext/upb-generated/envoy/service/discovery/v2/ads.upb.h +0 -50
- data/src/core/ext/upb-generated/envoy/service/load_stats/v2/lrs.upb.c +0 -54
- data/src/core/ext/upb-generated/envoy/service/load_stats/v2/lrs.upb.h +0 -134
- data/src/core/ext/upb-generated/envoy/type/matcher/regex.upb.c +0 -63
- data/src/core/ext/upb-generated/envoy/type/matcher/regex.upb.h +0 -144
- data/src/core/ext/upb-generated/envoy/type/matcher/string.upb.c +0 -53
- data/src/core/ext/upb-generated/envoy/type/matcher/string.upb.h +0 -133
- data/src/core/ext/upb-generated/envoy/type/metadata/v2/metadata.upb.c +0 -88
- data/src/core/ext/upb-generated/envoy/type/metadata/v2/metadata.upb.h +0 -258
- data/src/core/ext/upb-generated/envoy/type/percent.upb.h +0 -87
- data/src/core/ext/upb-generated/envoy/type/range.upb.h +0 -112
- data/src/core/ext/upb-generated/envoy/type/semantic_version.upb.h +0 -62
- data/src/core/ext/upb-generated/envoy/type/tracing/v2/custom_tag.upb.c +0 -89
- data/src/core/ext/upb-generated/envoy/type/tracing/v2/custom_tag.upb.h +0 -249
- data/src/core/lib/security/transport/target_authority_table.cc +0 -75
- data/src/core/lib/security/transport/target_authority_table.h +0 -40
- data/src/core/lib/slice/slice_hash_table.h +0 -199
- data/src/core/lib/slice/slice_weak_hash_table.h +0 -102
- data/third_party/upb/upb/generated_util.h +0 -105
@@ -232,9 +232,8 @@ extern "C" {
|
|
232
232
|
// ExtensionType value from RFC5746
|
233
233
|
#define TLSEXT_TYPE_renegotiate 0xff01
|
234
234
|
|
235
|
-
// ExtensionType value from draft-ietf-tls-subcerts.
|
236
|
-
|
237
|
-
#define TLSEXT_TYPE_delegated_credential 0xff02
|
235
|
+
// ExtensionType value from draft-ietf-tls-subcerts.
|
236
|
+
#define TLSEXT_TYPE_delegated_credential 0x22
|
238
237
|
|
239
238
|
// ExtensionType value from RFC6962
|
240
239
|
#define TLSEXT_TYPE_certificate_timestamp 18
|
@@ -36,13 +36,8 @@ extern "C" {
|
|
36
36
|
//
|
37
37
|
// WARNING: This API is unstable and subject to change.
|
38
38
|
|
39
|
-
// TRUST_TOKEN_experiment_v0 is an experimental Trust Tokens protocol using
|
40
|
-
// PMBTokens and P-521.
|
41
|
-
OPENSSL_EXPORT const TRUST_TOKEN_METHOD *TRUST_TOKEN_experiment_v0(void);
|
42
|
-
|
43
39
|
// TRUST_TOKEN_experiment_v1 is an experimental Trust Tokens protocol using
|
44
|
-
// PMBTokens and P-384.
|
45
|
-
// be used yet.
|
40
|
+
// PMBTokens and P-384.
|
46
41
|
OPENSSL_EXPORT const TRUST_TOKEN_METHOD *TRUST_TOKEN_experiment_v1(void);
|
47
42
|
|
48
43
|
// trust_token_st represents a single-use token for the Trust Token protocol.
|
@@ -234,9 +229,6 @@ OPENSSL_EXPORT int TRUST_TOKEN_ISSUER_issue(
|
|
234
229
|
// returning the SRR to the client. If the value has been reused, the caller
|
235
230
|
// must discard the SRR and report an error to the caller. Returning an SRR with
|
236
231
|
// replayed values allows an attacker to double-spend tokens.
|
237
|
-
//
|
238
|
-
// The private metadata construction in |TRUST_TOKEN_experiment_v0| does not
|
239
|
-
// keep the value secret and should not be used when secrecy is required.
|
240
232
|
OPENSSL_EXPORT int TRUST_TOKEN_ISSUER_redeem(
|
241
233
|
const TRUST_TOKEN_ISSUER *ctx, uint8_t **out, size_t *out_len,
|
242
234
|
TRUST_TOKEN **out_token, uint8_t **out_client_data,
|
@@ -246,7 +238,6 @@ OPENSSL_EXPORT int TRUST_TOKEN_ISSUER_redeem(
|
|
246
238
|
// TRUST_TOKEN_decode_private_metadata decodes |encrypted_bit| using the
|
247
239
|
// private metadata key specified by a |key| buffer of length |key_len| and the
|
248
240
|
// nonce by a |nonce| buffer of length |nonce_len|. The nonce in
|
249
|
-
// |TRUST_TOKEN_experiment_v0| is the client-data field of the SRR. The nonce in
|
250
241
|
// |TRUST_TOKEN_experiment_v1| is the token-hash field of the SRR. |*out_value|
|
251
242
|
// is set to the decrypted value, either zero or one. It returns one on success
|
252
243
|
// and zero on error.
|
@@ -4,21 +4,21 @@
|
|
4
4
|
* This package is an SSL implementation written
|
5
5
|
* by Eric Young (eay@cryptsoft.com).
|
6
6
|
* The implementation was written so as to conform with Netscapes SSL.
|
7
|
-
*
|
7
|
+
*
|
8
8
|
* This library is free for commercial and non-commercial use as long as
|
9
9
|
* the following conditions are aheared to. The following conditions
|
10
10
|
* apply to all code found in this distribution, be it the RC4, RSA,
|
11
11
|
* lhash, DES, etc., code; not just the SSL code. The SSL documentation
|
12
12
|
* included with this distribution is covered by the same copyright terms
|
13
13
|
* except that the holder is Tim Hudson (tjh@cryptsoft.com).
|
14
|
-
*
|
14
|
+
*
|
15
15
|
* Copyright remains Eric Young's, and as such any Copyright notices in
|
16
16
|
* the code are not to be removed.
|
17
17
|
* If this package is used in a product, Eric Young should be given attribution
|
18
18
|
* as the author of the parts of the library used.
|
19
19
|
* This can be in the form of a textual message at program startup or
|
20
20
|
* in documentation (online or textual) provided with the package.
|
21
|
-
*
|
21
|
+
*
|
22
22
|
* Redistribution and use in source and binary forms, with or without
|
23
23
|
* modification, are permitted provided that the following conditions
|
24
24
|
* are met:
|
@@ -33,10 +33,10 @@
|
|
33
33
|
* Eric Young (eay@cryptsoft.com)"
|
34
34
|
* The word 'cryptographic' can be left out if the rouines from the library
|
35
35
|
* being used are not cryptographic related :-).
|
36
|
-
* 4. If you include any Windows specific code (or a derivative thereof) from
|
36
|
+
* 4. If you include any Windows specific code (or a derivative thereof) from
|
37
37
|
* the apps directory (application code) you must include an acknowledgement:
|
38
38
|
* "This product includes software written by Tim Hudson (tjh@cryptsoft.com)"
|
39
|
-
*
|
39
|
+
*
|
40
40
|
* THIS SOFTWARE IS PROVIDED BY ERIC YOUNG ``AS IS'' AND
|
41
41
|
* ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
|
42
42
|
* IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
|
@@ -48,7 +48,7 @@
|
|
48
48
|
* LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
|
49
49
|
* OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
|
50
50
|
* SUCH DAMAGE.
|
51
|
-
*
|
51
|
+
*
|
52
52
|
* The licence and distribution terms for any publically available version or
|
53
53
|
* derivative of this code cannot be changed. i.e. this code cannot simply be
|
54
54
|
* copied and put under another distribution licence
|
@@ -56,25 +56,22 @@
|
|
56
56
|
*/
|
57
57
|
/* ====================================================================
|
58
58
|
* Copyright 2002 Sun Microsystems, Inc. ALL RIGHTS RESERVED.
|
59
|
-
* ECDH support in OpenSSL originally developed by
|
59
|
+
* ECDH support in OpenSSL originally developed by
|
60
60
|
* SUN MICROSYSTEMS, INC., and contributed to the OpenSSL project.
|
61
61
|
*/
|
62
62
|
|
63
63
|
#ifndef HEADER_X509_H
|
64
64
|
#define HEADER_X509_H
|
65
65
|
|
66
|
-
#include <openssl/base.h>
|
67
|
-
|
68
|
-
#include <time.h>
|
69
|
-
|
70
66
|
#include <openssl/asn1.h>
|
67
|
+
#include <openssl/base.h>
|
71
68
|
#include <openssl/bio.h>
|
72
69
|
#include <openssl/cipher.h>
|
73
70
|
#include <openssl/dh.h>
|
74
71
|
#include <openssl/dsa.h>
|
72
|
+
#include <openssl/ec.h>
|
75
73
|
#include <openssl/ecdh.h>
|
76
74
|
#include <openssl/ecdsa.h>
|
77
|
-
#include <openssl/ec.h>
|
78
75
|
#include <openssl/evp.h>
|
79
76
|
#include <openssl/obj.h>
|
80
77
|
#include <openssl/pkcs7.h>
|
@@ -83,482 +80,511 @@
|
|
83
80
|
#include <openssl/sha.h>
|
84
81
|
#include <openssl/stack.h>
|
85
82
|
#include <openssl/thread.h>
|
83
|
+
#include <time.h>
|
86
84
|
|
87
|
-
#ifdef
|
85
|
+
#ifdef __cplusplus
|
88
86
|
extern "C" {
|
89
87
|
#endif
|
90
88
|
|
91
89
|
|
92
|
-
|
93
|
-
|
94
|
-
|
95
|
-
|
96
|
-
|
97
|
-
|
98
|
-
|
99
|
-
|
100
|
-
#define X509_FILETYPE_PEM
|
101
|
-
#define X509_FILETYPE_ASN1
|
102
|
-
#define X509_FILETYPE_DEFAULT
|
103
|
-
|
104
|
-
#define X509v3_KU_DIGITAL_SIGNATURE
|
105
|
-
#define X509v3_KU_NON_REPUDIATION
|
106
|
-
#define X509v3_KU_KEY_ENCIPHERMENT
|
107
|
-
#define X509v3_KU_DATA_ENCIPHERMENT
|
108
|
-
#define X509v3_KU_KEY_AGREEMENT
|
109
|
-
#define X509v3_KU_KEY_CERT_SIGN
|
110
|
-
#define X509v3_KU_CRL_SIGN
|
111
|
-
#define X509v3_KU_ENCIPHER_ONLY
|
112
|
-
#define X509v3_KU_DECIPHER_ONLY
|
113
|
-
#define X509v3_KU_UNDEF
|
90
|
+
// Legacy X.509 library.
|
91
|
+
//
|
92
|
+
// This header is part of OpenSSL's X.509 implementation. It is retained for
|
93
|
+
// compatibility but otherwise underdocumented and not actively maintained. In
|
94
|
+
// the future, a replacement library will be available. Meanwhile, minimize
|
95
|
+
// dependencies on this header where possible.
|
96
|
+
|
97
|
+
|
98
|
+
#define X509_FILETYPE_PEM 1
|
99
|
+
#define X509_FILETYPE_ASN1 2
|
100
|
+
#define X509_FILETYPE_DEFAULT 3
|
101
|
+
|
102
|
+
#define X509v3_KU_DIGITAL_SIGNATURE 0x0080
|
103
|
+
#define X509v3_KU_NON_REPUDIATION 0x0040
|
104
|
+
#define X509v3_KU_KEY_ENCIPHERMENT 0x0020
|
105
|
+
#define X509v3_KU_DATA_ENCIPHERMENT 0x0010
|
106
|
+
#define X509v3_KU_KEY_AGREEMENT 0x0008
|
107
|
+
#define X509v3_KU_KEY_CERT_SIGN 0x0004
|
108
|
+
#define X509v3_KU_CRL_SIGN 0x0002
|
109
|
+
#define X509v3_KU_ENCIPHER_ONLY 0x0001
|
110
|
+
#define X509v3_KU_DECIPHER_ONLY 0x8000
|
111
|
+
#define X509v3_KU_UNDEF 0xffff
|
114
112
|
|
115
113
|
DEFINE_STACK_OF(X509_ALGOR)
|
116
114
|
DECLARE_ASN1_SET_OF(X509_ALGOR)
|
117
115
|
|
118
116
|
typedef STACK_OF(X509_ALGOR) X509_ALGORS;
|
119
117
|
|
120
|
-
struct X509_val_st
|
121
|
-
|
122
|
-
|
123
|
-
|
124
|
-
|
125
|
-
|
126
|
-
|
127
|
-
|
128
|
-
|
129
|
-
|
130
|
-
|
131
|
-
|
132
|
-
|
133
|
-
|
134
|
-
|
135
|
-
|
136
|
-
|
137
|
-
|
138
|
-
|
139
|
-
|
140
|
-
|
141
|
-
|
142
|
-
ASN1_STRING *value;
|
143
|
-
int set;
|
144
|
-
int size; /* temp variable */
|
145
|
-
} /* X509_NAME_ENTRY */;
|
118
|
+
struct X509_val_st {
|
119
|
+
ASN1_TIME *notBefore;
|
120
|
+
ASN1_TIME *notAfter;
|
121
|
+
} /* X509_VAL */;
|
122
|
+
|
123
|
+
struct X509_pubkey_st {
|
124
|
+
X509_ALGOR *algor;
|
125
|
+
ASN1_BIT_STRING *public_key;
|
126
|
+
EVP_PKEY *pkey;
|
127
|
+
};
|
128
|
+
|
129
|
+
struct X509_sig_st {
|
130
|
+
X509_ALGOR *algor;
|
131
|
+
ASN1_OCTET_STRING *digest;
|
132
|
+
} /* X509_SIG */;
|
133
|
+
|
134
|
+
struct X509_name_entry_st {
|
135
|
+
ASN1_OBJECT *object;
|
136
|
+
ASN1_STRING *value;
|
137
|
+
int set;
|
138
|
+
int size; // temp variable
|
139
|
+
} /* X509_NAME_ENTRY */;
|
146
140
|
|
147
141
|
DEFINE_STACK_OF(X509_NAME_ENTRY)
|
148
142
|
DECLARE_ASN1_SET_OF(X509_NAME_ENTRY)
|
149
143
|
|
150
|
-
|
151
|
-
struct X509_name_st
|
152
|
-
|
153
|
-
|
154
|
-
|
155
|
-
|
156
|
-
|
157
|
-
|
158
|
-
|
159
|
-
} /* X509_NAME */;
|
144
|
+
// we always keep X509_NAMEs in 2 forms.
|
145
|
+
struct X509_name_st {
|
146
|
+
STACK_OF(X509_NAME_ENTRY) * entries;
|
147
|
+
int modified; // true if 'bytes' needs to be built
|
148
|
+
BUF_MEM *bytes;
|
149
|
+
// unsigned long hash; Keep the hash around for lookups
|
150
|
+
unsigned char *canon_enc;
|
151
|
+
int canon_enclen;
|
152
|
+
} /* X509_NAME */;
|
160
153
|
|
161
154
|
DEFINE_STACK_OF(X509_NAME)
|
162
155
|
|
163
|
-
struct X509_extension_st
|
164
|
-
|
165
|
-
|
166
|
-
|
167
|
-
|
168
|
-
} /* X509_EXTENSION */;
|
156
|
+
struct X509_extension_st {
|
157
|
+
ASN1_OBJECT *object;
|
158
|
+
ASN1_BOOLEAN critical;
|
159
|
+
ASN1_OCTET_STRING *value;
|
160
|
+
} /* X509_EXTENSION */;
|
169
161
|
|
170
162
|
typedef STACK_OF(X509_EXTENSION) X509_EXTENSIONS;
|
171
163
|
|
172
164
|
DEFINE_STACK_OF(X509_EXTENSION)
|
173
165
|
DECLARE_ASN1_SET_OF(X509_EXTENSION)
|
174
166
|
|
175
|
-
|
176
|
-
struct x509_attributes_st
|
177
|
-
|
178
|
-
|
179
|
-
|
180
|
-
|
181
|
-
|
182
|
-
/*
|
183
|
-
|
184
|
-
|
185
|
-
} /* X509_ATTRIBUTE */;
|
167
|
+
// a sequence of these are used
|
168
|
+
struct x509_attributes_st {
|
169
|
+
ASN1_OBJECT *object;
|
170
|
+
int single; // 0 for a set, 1 for a single item (which is wrong)
|
171
|
+
union {
|
172
|
+
char *ptr;
|
173
|
+
/* 0 */ STACK_OF(ASN1_TYPE) * set;
|
174
|
+
/* 1 */ ASN1_TYPE *single;
|
175
|
+
} value;
|
176
|
+
} /* X509_ATTRIBUTE */;
|
186
177
|
|
187
178
|
DEFINE_STACK_OF(X509_ATTRIBUTE)
|
188
179
|
DECLARE_ASN1_SET_OF(X509_ATTRIBUTE)
|
189
180
|
|
190
181
|
|
191
|
-
struct X509_req_info_st
|
192
|
-
|
193
|
-
|
194
|
-
|
195
|
-
|
196
|
-
|
197
|
-
|
198
|
-
|
199
|
-
|
200
|
-
|
201
|
-
|
202
|
-
|
203
|
-
|
204
|
-
|
205
|
-
|
206
|
-
|
207
|
-
|
208
|
-
|
209
|
-
|
210
|
-
|
211
|
-
|
212
|
-
|
213
|
-
|
214
|
-
|
215
|
-
|
216
|
-
|
217
|
-
|
218
|
-
|
219
|
-
|
220
|
-
|
221
|
-
|
222
|
-
|
223
|
-
|
224
|
-
|
225
|
-
|
226
|
-
|
227
|
-
*
|
228
|
-
|
229
|
-
|
230
|
-
|
231
|
-
|
232
|
-
|
233
|
-
STACK_OF(ASN1_OBJECT) *reject; /* rejected uses */
|
234
|
-
ASN1_UTF8STRING *alias; /* "friendly name" */
|
235
|
-
ASN1_OCTET_STRING *keyid; /* key id of private key */
|
236
|
-
STACK_OF(X509_ALGOR) *other; /* other unspecified info */
|
237
|
-
} /* X509_CERT_AUX */;
|
182
|
+
struct X509_req_info_st {
|
183
|
+
ASN1_ENCODING enc;
|
184
|
+
ASN1_INTEGER *version;
|
185
|
+
X509_NAME *subject;
|
186
|
+
X509_PUBKEY *pubkey;
|
187
|
+
// d=2 hl=2 l= 0 cons: cont: 00
|
188
|
+
STACK_OF(X509_ATTRIBUTE) * attributes; // [ 0 ]
|
189
|
+
} /* X509_REQ_INFO */;
|
190
|
+
|
191
|
+
struct X509_req_st {
|
192
|
+
X509_REQ_INFO *req_info;
|
193
|
+
X509_ALGOR *sig_alg;
|
194
|
+
ASN1_BIT_STRING *signature;
|
195
|
+
CRYPTO_refcount_t references;
|
196
|
+
} /* X509_REQ */;
|
197
|
+
|
198
|
+
struct x509_cinf_st {
|
199
|
+
ASN1_INTEGER *version; // [ 0 ] default of v1
|
200
|
+
ASN1_INTEGER *serialNumber;
|
201
|
+
X509_ALGOR *signature;
|
202
|
+
X509_NAME *issuer;
|
203
|
+
X509_VAL *validity;
|
204
|
+
X509_NAME *subject;
|
205
|
+
X509_PUBKEY *key;
|
206
|
+
ASN1_BIT_STRING *issuerUID; // [ 1 ] optional in v2
|
207
|
+
ASN1_BIT_STRING *subjectUID; // [ 2 ] optional in v2
|
208
|
+
STACK_OF(X509_EXTENSION) * extensions; // [ 3 ] optional in v3
|
209
|
+
ASN1_ENCODING enc;
|
210
|
+
} /* X509_CINF */;
|
211
|
+
|
212
|
+
// This stuff is certificate "auxiliary info"
|
213
|
+
// it contains details which are useful in certificate
|
214
|
+
// stores and databases. When used this is tagged onto
|
215
|
+
// the end of the certificate itself
|
216
|
+
|
217
|
+
struct x509_cert_aux_st {
|
218
|
+
STACK_OF(ASN1_OBJECT) * trust; // trusted uses
|
219
|
+
STACK_OF(ASN1_OBJECT) * reject; // rejected uses
|
220
|
+
ASN1_UTF8STRING *alias; // "friendly name"
|
221
|
+
ASN1_OCTET_STRING *keyid; // key id of private key
|
222
|
+
STACK_OF(X509_ALGOR) * other; // other unspecified info
|
223
|
+
} /* X509_CERT_AUX */;
|
238
224
|
|
239
225
|
DECLARE_STACK_OF(DIST_POINT)
|
240
226
|
DECLARE_STACK_OF(GENERAL_NAME)
|
241
227
|
|
242
|
-
struct x509_st
|
243
|
-
|
244
|
-
|
245
|
-
|
246
|
-
|
247
|
-
|
248
|
-
|
249
|
-
|
250
|
-
|
251
|
-
|
252
|
-
|
253
|
-
|
254
|
-
|
255
|
-
|
256
|
-
|
257
|
-
|
258
|
-
|
259
|
-
|
260
|
-
|
261
|
-
|
262
|
-
|
263
|
-
|
264
|
-
|
265
|
-
|
266
|
-
CRYPTO_MUTEX lock;
|
267
|
-
} /* X509 */;
|
228
|
+
struct x509_st {
|
229
|
+
X509_CINF *cert_info;
|
230
|
+
X509_ALGOR *sig_alg;
|
231
|
+
ASN1_BIT_STRING *signature;
|
232
|
+
CRYPTO_refcount_t references;
|
233
|
+
CRYPTO_EX_DATA ex_data;
|
234
|
+
// These contain copies of various extension values
|
235
|
+
long ex_pathlen;
|
236
|
+
long ex_pcpathlen;
|
237
|
+
unsigned long ex_flags;
|
238
|
+
unsigned long ex_kusage;
|
239
|
+
unsigned long ex_xkusage;
|
240
|
+
unsigned long ex_nscert;
|
241
|
+
ASN1_OCTET_STRING *skid;
|
242
|
+
AUTHORITY_KEYID *akid;
|
243
|
+
X509_POLICY_CACHE *policy_cache;
|
244
|
+
STACK_OF(DIST_POINT) * crldp;
|
245
|
+
STACK_OF(GENERAL_NAME) * altname;
|
246
|
+
NAME_CONSTRAINTS *nc;
|
247
|
+
unsigned char sha1_hash[SHA_DIGEST_LENGTH];
|
248
|
+
X509_CERT_AUX *aux;
|
249
|
+
CRYPTO_BUFFER *buf;
|
250
|
+
CRYPTO_MUTEX lock;
|
251
|
+
} /* X509 */;
|
268
252
|
|
269
253
|
DEFINE_STACK_OF(X509)
|
270
254
|
DECLARE_ASN1_SET_OF(X509)
|
271
255
|
|
272
|
-
|
256
|
+
// This is used for a table of trust checking functions
|
273
257
|
|
274
258
|
struct x509_trust_st {
|
275
|
-
|
276
|
-
|
277
|
-
|
278
|
-
|
279
|
-
|
280
|
-
|
259
|
+
int trust;
|
260
|
+
int flags;
|
261
|
+
int (*check_trust)(struct x509_trust_st *, X509 *, int);
|
262
|
+
char *name;
|
263
|
+
int arg1;
|
264
|
+
void *arg2;
|
281
265
|
} /* X509_TRUST */;
|
282
266
|
|
283
267
|
DEFINE_STACK_OF(X509_TRUST)
|
284
268
|
|
285
|
-
|
269
|
+
// standard trust ids
|
286
270
|
|
287
|
-
#define X509_TRUST_DEFAULT
|
271
|
+
#define X509_TRUST_DEFAULT (-1) // Only valid in purpose settings
|
288
272
|
|
289
|
-
#define X509_TRUST_COMPAT
|
290
|
-
#define X509_TRUST_SSL_CLIENT
|
291
|
-
#define X509_TRUST_SSL_SERVER
|
292
|
-
#define X509_TRUST_EMAIL
|
293
|
-
#define X509_TRUST_OBJECT_SIGN
|
294
|
-
#define X509_TRUST_OCSP_SIGN
|
295
|
-
#define X509_TRUST_OCSP_REQUEST
|
296
|
-
#define X509_TRUST_TSA
|
273
|
+
#define X509_TRUST_COMPAT 1
|
274
|
+
#define X509_TRUST_SSL_CLIENT 2
|
275
|
+
#define X509_TRUST_SSL_SERVER 3
|
276
|
+
#define X509_TRUST_EMAIL 4
|
277
|
+
#define X509_TRUST_OBJECT_SIGN 5
|
278
|
+
#define X509_TRUST_OCSP_SIGN 6
|
279
|
+
#define X509_TRUST_OCSP_REQUEST 7
|
280
|
+
#define X509_TRUST_TSA 8
|
297
281
|
|
298
|
-
|
299
|
-
#define X509_TRUST_MIN
|
300
|
-
#define X509_TRUST_MAX
|
282
|
+
// Keep these up to date!
|
283
|
+
#define X509_TRUST_MIN 1
|
284
|
+
#define X509_TRUST_MAX 8
|
301
285
|
|
302
286
|
|
303
|
-
|
304
|
-
#define
|
305
|
-
#define
|
287
|
+
// trust_flags values
|
288
|
+
#define X509_TRUST_DYNAMIC 1
|
289
|
+
#define X509_TRUST_DYNAMIC_NAME 2
|
306
290
|
|
307
|
-
|
291
|
+
// check_trust return codes
|
308
292
|
|
309
|
-
#define X509_TRUST_TRUSTED
|
310
|
-
#define X509_TRUST_REJECTED
|
311
|
-
#define X509_TRUST_UNTRUSTED
|
293
|
+
#define X509_TRUST_TRUSTED 1
|
294
|
+
#define X509_TRUST_REJECTED 2
|
295
|
+
#define X509_TRUST_UNTRUSTED 3
|
312
296
|
|
313
|
-
|
297
|
+
// Flags for X509_print_ex()
|
314
298
|
|
315
|
-
#define
|
316
|
-
#define
|
317
|
-
#define
|
318
|
-
#define
|
319
|
-
#define
|
320
|
-
#define
|
321
|
-
#define
|
322
|
-
#define
|
323
|
-
#define
|
324
|
-
#define
|
325
|
-
#define
|
326
|
-
#define
|
327
|
-
#define
|
328
|
-
#define
|
299
|
+
#define X509_FLAG_COMPAT 0
|
300
|
+
#define X509_FLAG_NO_HEADER 1L
|
301
|
+
#define X509_FLAG_NO_VERSION (1L << 1)
|
302
|
+
#define X509_FLAG_NO_SERIAL (1L << 2)
|
303
|
+
#define X509_FLAG_NO_SIGNAME (1L << 3)
|
304
|
+
#define X509_FLAG_NO_ISSUER (1L << 4)
|
305
|
+
#define X509_FLAG_NO_VALIDITY (1L << 5)
|
306
|
+
#define X509_FLAG_NO_SUBJECT (1L << 6)
|
307
|
+
#define X509_FLAG_NO_PUBKEY (1L << 7)
|
308
|
+
#define X509_FLAG_NO_EXTENSIONS (1L << 8)
|
309
|
+
#define X509_FLAG_NO_SIGDUMP (1L << 9)
|
310
|
+
#define X509_FLAG_NO_AUX (1L << 10)
|
311
|
+
#define X509_FLAG_NO_ATTRIBUTES (1L << 11)
|
312
|
+
#define X509_FLAG_NO_IDS (1L << 12)
|
329
313
|
|
330
|
-
|
314
|
+
// Flags specific to X509_NAME_print_ex()
|
331
315
|
|
332
|
-
|
316
|
+
// The field separator information
|
333
317
|
|
334
|
-
#define XN_FLAG_SEP_MASK
|
318
|
+
#define XN_FLAG_SEP_MASK (0xf << 16)
|
335
319
|
|
336
|
-
#define XN_FLAG_COMPAT
|
337
|
-
#define XN_FLAG_SEP_COMMA_PLUS
|
338
|
-
#define XN_FLAG_SEP_CPLUS_SPC
|
339
|
-
#define XN_FLAG_SEP_SPLUS_SPC
|
340
|
-
#define XN_FLAG_SEP_MULTILINE
|
320
|
+
#define XN_FLAG_COMPAT 0 // Traditional SSLeay: use old X509_NAME_print
|
321
|
+
#define XN_FLAG_SEP_COMMA_PLUS (1 << 16) // RFC2253 ,+
|
322
|
+
#define XN_FLAG_SEP_CPLUS_SPC (2 << 16) // ,+ spaced: more readable
|
323
|
+
#define XN_FLAG_SEP_SPLUS_SPC (3 << 16) // ;+ spaced
|
324
|
+
#define XN_FLAG_SEP_MULTILINE (4 << 16) // One line per field
|
341
325
|
|
342
|
-
#define XN_FLAG_DN_REV
|
326
|
+
#define XN_FLAG_DN_REV (1 << 20) // Reverse DN order
|
343
327
|
|
344
|
-
|
328
|
+
// How the field name is shown
|
345
329
|
|
346
|
-
#define XN_FLAG_FN_MASK
|
330
|
+
#define XN_FLAG_FN_MASK (0x3 << 21)
|
347
331
|
|
348
|
-
#define XN_FLAG_FN_SN
|
349
|
-
#define XN_FLAG_FN_LN
|
350
|
-
#define XN_FLAG_FN_OID
|
351
|
-
#define XN_FLAG_FN_NONE
|
332
|
+
#define XN_FLAG_FN_SN 0 // Object short name
|
333
|
+
#define XN_FLAG_FN_LN (1 << 21) // Object long name
|
334
|
+
#define XN_FLAG_FN_OID (2 << 21) // Always use OIDs
|
335
|
+
#define XN_FLAG_FN_NONE (3 << 21) // No field names
|
352
336
|
|
353
|
-
#define XN_FLAG_SPC_EQ
|
337
|
+
#define XN_FLAG_SPC_EQ (1 << 23) // Put spaces round '='
|
354
338
|
|
355
|
-
|
356
|
-
|
357
|
-
*/
|
339
|
+
// This determines if we dump fields we don't recognise:
|
340
|
+
// RFC2253 requires this.
|
358
341
|
|
359
342
|
#define XN_FLAG_DUMP_UNKNOWN_FIELDS (1 << 24)
|
360
343
|
|
361
|
-
#define XN_FLAG_FN_ALIGN
|
362
|
-
|
363
|
-
|
364
|
-
|
365
|
-
#define XN_FLAG_RFC2253
|
366
|
-
|
367
|
-
|
368
|
-
|
369
|
-
|
370
|
-
|
371
|
-
|
372
|
-
|
373
|
-
|
374
|
-
|
375
|
-
|
376
|
-
|
377
|
-
|
378
|
-
|
379
|
-
|
380
|
-
|
381
|
-
|
382
|
-
|
383
|
-
|
384
|
-
|
385
|
-
|
386
|
-
|
387
|
-
|
388
|
-
|
389
|
-
|
390
|
-
|
391
|
-
ASN1_TIME *revocationDate;
|
392
|
-
STACK_OF(X509_EXTENSION) /* optional */ *extensions;
|
393
|
-
/* Set up if indirect CRL */
|
394
|
-
STACK_OF(GENERAL_NAME) *issuer;
|
395
|
-
/* Revocation reason */
|
396
|
-
int reason;
|
397
|
-
int sequence; /* load sequence */
|
398
|
-
};
|
344
|
+
#define XN_FLAG_FN_ALIGN (1 << 25) // Align field names to 20 characters
|
345
|
+
|
346
|
+
// Complete set of RFC2253 flags
|
347
|
+
|
348
|
+
#define XN_FLAG_RFC2253 \
|
349
|
+
(ASN1_STRFLGS_RFC2253 | XN_FLAG_SEP_COMMA_PLUS | XN_FLAG_DN_REV | \
|
350
|
+
XN_FLAG_FN_SN | XN_FLAG_DUMP_UNKNOWN_FIELDS)
|
351
|
+
|
352
|
+
// readable oneline form
|
353
|
+
|
354
|
+
#define XN_FLAG_ONELINE \
|
355
|
+
(ASN1_STRFLGS_RFC2253 | ASN1_STRFLGS_ESC_QUOTE | XN_FLAG_SEP_CPLUS_SPC | \
|
356
|
+
XN_FLAG_SPC_EQ | XN_FLAG_FN_SN)
|
357
|
+
|
358
|
+
// readable multiline form
|
359
|
+
|
360
|
+
#define XN_FLAG_MULTILINE \
|
361
|
+
(ASN1_STRFLGS_ESC_CTRL | ASN1_STRFLGS_ESC_MSB | XN_FLAG_SEP_MULTILINE | \
|
362
|
+
XN_FLAG_SPC_EQ | XN_FLAG_FN_LN | XN_FLAG_FN_ALIGN)
|
363
|
+
|
364
|
+
struct x509_revoked_st {
|
365
|
+
ASN1_INTEGER *serialNumber;
|
366
|
+
ASN1_TIME *revocationDate;
|
367
|
+
STACK_OF(X509_EXTENSION) /* optional */ * extensions;
|
368
|
+
// Set up if indirect CRL
|
369
|
+
STACK_OF(GENERAL_NAME) * issuer;
|
370
|
+
// Revocation reason
|
371
|
+
int reason;
|
372
|
+
int sequence; // load sequence
|
373
|
+
};
|
399
374
|
|
400
375
|
DEFINE_STACK_OF(X509_REVOKED)
|
401
376
|
DECLARE_ASN1_SET_OF(X509_REVOKED)
|
402
377
|
|
403
|
-
struct X509_crl_info_st
|
404
|
-
|
405
|
-
|
406
|
-
|
407
|
-
|
408
|
-
|
409
|
-
|
410
|
-
|
411
|
-
|
412
|
-
|
413
|
-
} /* X509_CRL_INFO */;
|
378
|
+
struct X509_crl_info_st {
|
379
|
+
ASN1_INTEGER *version;
|
380
|
+
X509_ALGOR *sig_alg;
|
381
|
+
X509_NAME *issuer;
|
382
|
+
ASN1_TIME *lastUpdate;
|
383
|
+
ASN1_TIME *nextUpdate;
|
384
|
+
STACK_OF(X509_REVOKED) * revoked;
|
385
|
+
STACK_OF(X509_EXTENSION) /* [0] */ * extensions;
|
386
|
+
ASN1_ENCODING enc;
|
387
|
+
} /* X509_CRL_INFO */;
|
414
388
|
|
415
389
|
DECLARE_STACK_OF(GENERAL_NAMES)
|
416
390
|
|
417
|
-
struct X509_crl_st
|
418
|
-
|
419
|
-
|
420
|
-
|
421
|
-
|
422
|
-
|
423
|
-
|
424
|
-
|
425
|
-
|
426
|
-
|
427
|
-
|
428
|
-
|
429
|
-
|
430
|
-
|
431
|
-
|
432
|
-
|
433
|
-
|
434
|
-
|
435
|
-
|
436
|
-
|
437
|
-
|
438
|
-
} /* X509_CRL */;
|
391
|
+
struct X509_crl_st {
|
392
|
+
// actual signature
|
393
|
+
X509_CRL_INFO *crl;
|
394
|
+
X509_ALGOR *sig_alg;
|
395
|
+
ASN1_BIT_STRING *signature;
|
396
|
+
CRYPTO_refcount_t references;
|
397
|
+
int flags;
|
398
|
+
// Copies of various extensions
|
399
|
+
AUTHORITY_KEYID *akid;
|
400
|
+
ISSUING_DIST_POINT *idp;
|
401
|
+
// Convenient breakdown of IDP
|
402
|
+
int idp_flags;
|
403
|
+
int idp_reasons;
|
404
|
+
// CRL and base CRL numbers for delta processing
|
405
|
+
ASN1_INTEGER *crl_number;
|
406
|
+
ASN1_INTEGER *base_crl_number;
|
407
|
+
unsigned char sha1_hash[SHA_DIGEST_LENGTH];
|
408
|
+
STACK_OF(GENERAL_NAMES) * issuers;
|
409
|
+
const X509_CRL_METHOD *meth;
|
410
|
+
void *meth_data;
|
411
|
+
} /* X509_CRL */;
|
439
412
|
|
440
413
|
DEFINE_STACK_OF(X509_CRL)
|
441
414
|
DECLARE_ASN1_SET_OF(X509_CRL)
|
442
415
|
|
443
|
-
struct private_key_st
|
444
|
-
|
445
|
-
|
446
|
-
|
447
|
-
|
448
|
-
ASN1_OCTET_STRING *enc_pkey; /* encrypted pub key */
|
416
|
+
struct private_key_st {
|
417
|
+
int version;
|
418
|
+
// The PKCS#8 data types
|
419
|
+
X509_ALGOR *enc_algor;
|
420
|
+
ASN1_OCTET_STRING *enc_pkey; // encrypted pub key
|
449
421
|
|
450
|
-
|
451
|
-
|
422
|
+
// When decrypted, the following will not be NULL
|
423
|
+
EVP_PKEY *dec_pkey;
|
452
424
|
|
453
|
-
|
454
|
-
|
455
|
-
|
456
|
-
|
425
|
+
// used to encrypt and decrypt
|
426
|
+
int key_length;
|
427
|
+
char *key_data;
|
428
|
+
int key_free; // true if we should auto free key_data
|
457
429
|
|
458
|
-
|
459
|
-
|
460
|
-
|
430
|
+
// expanded version of 'enc_algor'
|
431
|
+
EVP_CIPHER_INFO cipher;
|
432
|
+
} /* X509_PKEY */;
|
461
433
|
|
462
434
|
#ifndef OPENSSL_NO_EVP
|
463
|
-
struct X509_info_st
|
464
|
-
|
465
|
-
|
466
|
-
|
467
|
-
X509_PKEY *x_pkey;
|
435
|
+
struct X509_info_st {
|
436
|
+
X509 *x509;
|
437
|
+
X509_CRL *crl;
|
438
|
+
X509_PKEY *x_pkey;
|
468
439
|
|
469
|
-
|
470
|
-
|
471
|
-
|
440
|
+
EVP_CIPHER_INFO enc_cipher;
|
441
|
+
int enc_len;
|
442
|
+
char *enc_data;
|
472
443
|
|
473
|
-
|
444
|
+
} /* X509_INFO */;
|
474
445
|
|
475
446
|
DEFINE_STACK_OF(X509_INFO)
|
476
447
|
#endif
|
477
448
|
|
478
|
-
|
479
|
-
|
480
|
-
|
481
|
-
|
482
|
-
|
483
|
-
|
484
|
-
|
485
|
-
|
486
|
-
|
487
|
-
|
488
|
-
|
489
|
-
|
490
|
-
|
491
|
-
|
492
|
-
|
493
|
-
} /* NETSCAPE_SPKI */;
|
494
|
-
|
495
|
-
/* PKCS#8 private key info structure */
|
496
|
-
|
497
|
-
struct pkcs8_priv_key_info_st
|
498
|
-
{
|
499
|
-
int broken; /* Flag for various broken formats */
|
500
|
-
#define PKCS8_OK 0
|
501
|
-
#define PKCS8_NO_OCTET 1
|
502
|
-
#define PKCS8_EMBEDDED_PARAM 2
|
503
|
-
#define PKCS8_NS_DB 3
|
504
|
-
#define PKCS8_NEG_PRIVKEY 4
|
505
|
-
ASN1_INTEGER *version;
|
506
|
-
X509_ALGOR *pkeyalg;
|
507
|
-
ASN1_TYPE *pkey; /* Should be OCTET STRING but some are broken */
|
508
|
-
STACK_OF(X509_ATTRIBUTE) *attributes;
|
509
|
-
};
|
510
|
-
|
511
|
-
#ifdef __cplusplus
|
449
|
+
// The next 2 structures and their 8 routines were sent to me by
|
450
|
+
// Pat Richard <patr@x509.com> and are used to manipulate
|
451
|
+
// Netscapes spki structures - useful if you are writing a CA web page
|
452
|
+
struct Netscape_spkac_st {
|
453
|
+
X509_PUBKEY *pubkey;
|
454
|
+
ASN1_IA5STRING *challenge; // challenge sent in atlas >= PR2
|
455
|
+
} /* NETSCAPE_SPKAC */;
|
456
|
+
|
457
|
+
struct Netscape_spki_st {
|
458
|
+
NETSCAPE_SPKAC *spkac; // signed public key and challenge
|
459
|
+
X509_ALGOR *sig_algor;
|
460
|
+
ASN1_BIT_STRING *signature;
|
461
|
+
} /* NETSCAPE_SPKI */;
|
462
|
+
|
463
|
+
#ifdef __cplusplus
|
512
464
|
}
|
513
465
|
#endif
|
514
466
|
|
515
467
|
#include <openssl/x509_vfy.h>
|
516
468
|
|
517
|
-
#ifdef
|
469
|
+
#ifdef __cplusplus
|
518
470
|
extern "C" {
|
519
471
|
#endif
|
520
472
|
|
521
|
-
|
522
|
-
|
523
|
-
|
524
|
-
|
525
|
-
|
526
|
-
|
527
|
-
|
528
|
-
|
529
|
-
|
530
|
-
|
531
|
-
|
532
|
-
|
533
|
-
|
534
|
-
const
|
535
|
-
|
536
|
-
|
537
|
-
|
538
|
-
|
539
|
-
|
540
|
-
|
541
|
-
|
542
|
-
|
543
|
-
|
544
|
-
|
473
|
+
// X509_get_version returns the numerical value of |x509|'s version. That is,
|
474
|
+
// it returns zero for X.509v1, one for X.509v2, and two for X.509v3. Unknown
|
475
|
+
// versions are rejected by the parser, but a manually-created |X509| object may
|
476
|
+
// encode invalid versions. In that case, the function will return the invalid
|
477
|
+
// version, or -1 on overflow.
|
478
|
+
OPENSSL_EXPORT long X509_get_version(const X509 *x509);
|
479
|
+
|
480
|
+
// X509_get_notBefore returns |x509|'s notBefore value. Note this function is
|
481
|
+
// not const-correct for legacy reasons. Use |X509_get0_notBefore| or
|
482
|
+
// |X509_getm_notBefore| instead.
|
483
|
+
OPENSSL_EXPORT ASN1_TIME *X509_get_notBefore(const X509 *x509);
|
484
|
+
|
485
|
+
// X509_get_notAfter returns |x509|'s notAfter value. Note this function is not
|
486
|
+
// const-correct for legacy reasons. Use |X509_get0_notAfter| or
|
487
|
+
// |X509_getm_notAfter| instead.
|
488
|
+
OPENSSL_EXPORT ASN1_TIME *X509_get_notAfter(const X509 *x509);
|
489
|
+
|
490
|
+
// X509_get_cert_info returns |x509|'s TBSCertificate structure. Note this
|
491
|
+
// function is not const-correct for legacy reasons.
|
492
|
+
//
|
493
|
+
// This function is deprecated and may be removed in the future. It is not
|
494
|
+
// present in OpenSSL and constrains some improvements to the library.
|
495
|
+
OPENSSL_EXPORT X509_CINF *X509_get_cert_info(const X509 *x509);
|
496
|
+
|
497
|
+
// X509_extract_key is a legacy alias to |X509_get_pubkey|. Use
|
498
|
+
// |X509_get_pubkey| instead.
|
499
|
+
#define X509_extract_key(x) X509_get_pubkey(x)
|
500
|
+
|
501
|
+
// X509_REQ_get_version returns the numerical value of |req|'s version. That is,
|
502
|
+
// it returns zero for a v1 request. If |req| is invalid, it may return another
|
503
|
+
// value, or -1 on overflow.
|
504
|
+
OPENSSL_EXPORT long X509_REQ_get_version(const X509_REQ *req);
|
505
|
+
|
506
|
+
// X509_REQ_get_subject_name returns |req|'s subject name. Note this function is
|
507
|
+
// not const-correct for legacy reasons.
|
508
|
+
OPENSSL_EXPORT X509_NAME *X509_REQ_get_subject_name(const X509_REQ *req);
|
509
|
+
|
510
|
+
// X509_REQ_extract_key is a legacy alias for |X509_REQ_get_pubkey|.
|
511
|
+
#define X509_REQ_extract_key(a) X509_REQ_get_pubkey(a)
|
512
|
+
|
513
|
+
// X509_name_cmp is a legacy alias for |X509_NAME_cmp|.
|
514
|
+
#define X509_name_cmp(a, b) X509_NAME_cmp((a), (b))
|
515
|
+
|
516
|
+
// X509_REQ_get_version returns the numerical value of |crl|'s version. That is,
|
517
|
+
// it returns zero for a v1 CRL and one for a v2 CRL. If |crl| is invalid, it
|
518
|
+
// may return another value, or -1 on overflow.
|
519
|
+
OPENSSL_EXPORT long X509_CRL_get_version(const X509_CRL *crl);
|
520
|
+
|
521
|
+
// X509_CRL_get0_lastUpdate returns |crl|'s lastUpdate time.
|
522
|
+
OPENSSL_EXPORT const ASN1_TIME *X509_CRL_get0_lastUpdate(const X509_CRL *crl);
|
523
|
+
|
524
|
+
// X509_CRL_get0_lastUpdate returns |crl|'s nextUpdate time.
|
525
|
+
OPENSSL_EXPORT const ASN1_TIME *X509_CRL_get0_nextUpdate(const X509_CRL *crl);
|
526
|
+
|
527
|
+
// X509_CRL_get_lastUpdate returns a mutable pointer to |crl|'s lastUpdate time.
|
528
|
+
// Use |X509_CRL_get0_lastUpdate| or |X509_CRL_set_lastUpdate| instead.
|
529
|
+
OPENSSL_EXPORT ASN1_TIME *X509_CRL_get_lastUpdate(X509_CRL *crl);
|
530
|
+
|
531
|
+
// X509_CRL_get_nextUpdate returns a mutable pointer to |crl|'s nextUpdate time.
|
532
|
+
// Use |X509_CRL_get0_nextUpdate| or |X509_CRL_set_nextUpdate| instead.
|
533
|
+
OPENSSL_EXPORT ASN1_TIME *X509_CRL_get_nextUpdate(X509_CRL *crl);
|
534
|
+
|
535
|
+
// X509_CRL_get_issuer returns |crl|'s issuer name. Note this function is not
|
536
|
+
// const-correct for legacy reasons.
|
537
|
+
OPENSSL_EXPORT X509_NAME *X509_CRL_get_issuer(const X509_CRL *crl);
|
538
|
+
|
539
|
+
// X509_CRL_get_REVOKED returns the list of revoked certificates in |crl|.
|
540
|
+
//
|
541
|
+
// TOOD(davidben): This function was originally a macro, without clear const
|
542
|
+
// semantics. It should take a const input and give const output, but the latter
|
543
|
+
// would break existing callers. For now, we match upstream.
|
544
|
+
OPENSSL_EXPORT STACK_OF(X509_REVOKED) *X509_CRL_get_REVOKED(X509_CRL *crl);
|
545
|
+
|
546
|
+
// X509_CINF_set_modified marks |cinf| as modified so that changes will be
|
547
|
+
// reflected in serializing the structure.
|
548
|
+
//
|
549
|
+
// This function is deprecated and may be removed in the future. It is not
|
550
|
+
// present in OpenSSL and constrains some improvements to the library.
|
551
|
+
OPENSSL_EXPORT void X509_CINF_set_modified(X509_CINF *cinf);
|
552
|
+
|
553
|
+
// X509_CINF_get_signature returns the signature algorithm in |cinf|. Note this
|
554
|
+
// isn't the signature itself, but the extra copy of the signature algorithm
|
555
|
+
// in the TBSCertificate.
|
556
|
+
//
|
557
|
+
// This function is deprecated and may be removed in the future. It is not
|
558
|
+
// present in OpenSSL and constrains some improvements to the library. Use
|
559
|
+
// |X509_get0_tbs_sigalg| instead.
|
560
|
+
OPENSSL_EXPORT const X509_ALGOR *X509_CINF_get_signature(const X509_CINF *cinf);
|
561
|
+
|
562
|
+
// X509_SIG_get0 sets |*out_alg| and |*out_digest| to non-owning pointers to
|
563
|
+
// |sig|'s algorithm and digest fields, respectively. Either |out_alg| and
|
564
|
+
// |out_digest| may be NULL to skip those fields.
|
565
|
+
OPENSSL_EXPORT void X509_SIG_get0(const X509_SIG *sig,
|
566
|
+
const X509_ALGOR **out_alg,
|
567
|
+
const ASN1_OCTET_STRING **out_digest);
|
568
|
+
|
569
|
+
// X509_SIG_getm behaves like |X509_SIG_get0| but returns mutable pointers.
|
570
|
+
OPENSSL_EXPORT void X509_SIG_getm(X509_SIG *sig, X509_ALGOR **out_alg,
|
571
|
+
ASN1_OCTET_STRING **out_digest);
|
545
572
|
|
546
573
|
OPENSSL_EXPORT void X509_CRL_set_default_method(const X509_CRL_METHOD *meth);
|
547
574
|
OPENSSL_EXPORT X509_CRL_METHOD *X509_CRL_METHOD_new(
|
548
|
-
|
549
|
-
|
550
|
-
|
551
|
-
|
552
|
-
int (*crl_verify)(X509_CRL *crl, EVP_PKEY *pk));
|
575
|
+
int (*crl_init)(X509_CRL *crl), int (*crl_free)(X509_CRL *crl),
|
576
|
+
int (*crl_lookup)(X509_CRL *crl, X509_REVOKED **ret, ASN1_INTEGER *ser,
|
577
|
+
X509_NAME *issuer),
|
578
|
+
int (*crl_verify)(X509_CRL *crl, EVP_PKEY *pk));
|
553
579
|
OPENSSL_EXPORT void X509_CRL_METHOD_free(X509_CRL_METHOD *m);
|
554
580
|
|
555
581
|
OPENSSL_EXPORT void X509_CRL_set_meth_data(X509_CRL *crl, void *dat);
|
556
582
|
OPENSSL_EXPORT void *X509_CRL_get_meth_data(X509_CRL *crl);
|
557
583
|
|
558
|
-
|
559
|
-
|
560
|
-
|
561
|
-
|
584
|
+
// X509_get_X509_PUBKEY returns the public key of |x509|. Note this function is
|
585
|
+
// not const-correct for legacy reasons. Callers should not modify the returned
|
586
|
+
// object.
|
587
|
+
OPENSSL_EXPORT X509_PUBKEY *X509_get_X509_PUBKEY(const X509 *x509);
|
562
588
|
|
563
589
|
OPENSSL_EXPORT const char *X509_verify_cert_error_string(long n);
|
564
590
|
|
@@ -569,14 +595,16 @@ OPENSSL_EXPORT int X509_REQ_verify(X509_REQ *a, EVP_PKEY *r);
|
|
569
595
|
OPENSSL_EXPORT int X509_CRL_verify(X509_CRL *a, EVP_PKEY *r);
|
570
596
|
OPENSSL_EXPORT int NETSCAPE_SPKI_verify(NETSCAPE_SPKI *a, EVP_PKEY *r);
|
571
597
|
|
572
|
-
OPENSSL_EXPORT NETSCAPE_SPKI *
|
573
|
-
|
598
|
+
OPENSSL_EXPORT NETSCAPE_SPKI *NETSCAPE_SPKI_b64_decode(const char *str,
|
599
|
+
int len);
|
600
|
+
OPENSSL_EXPORT char *NETSCAPE_SPKI_b64_encode(NETSCAPE_SPKI *x);
|
574
601
|
OPENSSL_EXPORT EVP_PKEY *NETSCAPE_SPKI_get_pubkey(NETSCAPE_SPKI *x);
|
575
602
|
OPENSSL_EXPORT int NETSCAPE_SPKI_set_pubkey(NETSCAPE_SPKI *x, EVP_PKEY *pkey);
|
576
603
|
|
577
604
|
OPENSSL_EXPORT int NETSCAPE_SPKI_print(BIO *out, NETSCAPE_SPKI *spki);
|
578
605
|
|
579
|
-
OPENSSL_EXPORT int X509_signature_dump(BIO *bp,const ASN1_STRING *sig,
|
606
|
+
OPENSSL_EXPORT int X509_signature_dump(BIO *bp, const ASN1_STRING *sig,
|
607
|
+
int indent);
|
580
608
|
OPENSSL_EXPORT int X509_signature_print(BIO *bp, const X509_ALGOR *alg,
|
581
609
|
const ASN1_STRING *sig);
|
582
610
|
|
@@ -586,39 +614,40 @@ OPENSSL_EXPORT int X509_REQ_sign(X509_REQ *x, EVP_PKEY *pkey, const EVP_MD *md);
|
|
586
614
|
OPENSSL_EXPORT int X509_REQ_sign_ctx(X509_REQ *x, EVP_MD_CTX *ctx);
|
587
615
|
OPENSSL_EXPORT int X509_CRL_sign(X509_CRL *x, EVP_PKEY *pkey, const EVP_MD *md);
|
588
616
|
OPENSSL_EXPORT int X509_CRL_sign_ctx(X509_CRL *x, EVP_MD_CTX *ctx);
|
589
|
-
OPENSSL_EXPORT int NETSCAPE_SPKI_sign(NETSCAPE_SPKI *x, EVP_PKEY *pkey,
|
590
|
-
|
591
|
-
|
592
|
-
|
593
|
-
|
594
|
-
|
595
|
-
|
596
|
-
|
597
|
-
|
598
|
-
|
599
|
-
|
600
|
-
|
617
|
+
OPENSSL_EXPORT int NETSCAPE_SPKI_sign(NETSCAPE_SPKI *x, EVP_PKEY *pkey,
|
618
|
+
const EVP_MD *md);
|
619
|
+
|
620
|
+
OPENSSL_EXPORT int X509_pubkey_digest(const X509 *data, const EVP_MD *type,
|
621
|
+
unsigned char *md, unsigned int *len);
|
622
|
+
OPENSSL_EXPORT int X509_digest(const X509 *data, const EVP_MD *type,
|
623
|
+
unsigned char *md, unsigned int *len);
|
624
|
+
OPENSSL_EXPORT int X509_CRL_digest(const X509_CRL *data, const EVP_MD *type,
|
625
|
+
unsigned char *md, unsigned int *len);
|
626
|
+
OPENSSL_EXPORT int X509_REQ_digest(const X509_REQ *data, const EVP_MD *type,
|
627
|
+
unsigned char *md, unsigned int *len);
|
628
|
+
OPENSSL_EXPORT int X509_NAME_digest(const X509_NAME *data, const EVP_MD *type,
|
629
|
+
unsigned char *md, unsigned int *len);
|
601
630
|
#endif
|
602
631
|
|
603
|
-
|
604
|
-
|
605
|
-
|
606
|
-
|
632
|
+
// X509_parse_from_buffer parses an X.509 structure from |buf| and returns a
|
633
|
+
// fresh X509 or NULL on error. There must not be any trailing data in |buf|.
|
634
|
+
// The returned structure (if any) holds a reference to |buf| rather than
|
635
|
+
// copying parts of it as a normal |d2i_X509| call would do.
|
607
636
|
OPENSSL_EXPORT X509 *X509_parse_from_buffer(CRYPTO_BUFFER *buf);
|
608
637
|
|
609
638
|
#ifndef OPENSSL_NO_FP_API
|
610
639
|
OPENSSL_EXPORT X509 *d2i_X509_fp(FILE *fp, X509 **x509);
|
611
|
-
OPENSSL_EXPORT int i2d_X509_fp(FILE *fp,X509 *x509);
|
612
|
-
OPENSSL_EXPORT X509_CRL *d2i_X509_CRL_fp(FILE *fp,X509_CRL **crl);
|
613
|
-
OPENSSL_EXPORT int i2d_X509_CRL_fp(FILE *fp,X509_CRL *crl);
|
614
|
-
OPENSSL_EXPORT X509_REQ *d2i_X509_REQ_fp(FILE *fp,X509_REQ **req);
|
615
|
-
OPENSSL_EXPORT int i2d_X509_REQ_fp(FILE *fp,X509_REQ *req);
|
616
|
-
OPENSSL_EXPORT RSA *d2i_RSAPrivateKey_fp(FILE *fp,RSA **rsa);
|
617
|
-
OPENSSL_EXPORT int i2d_RSAPrivateKey_fp(FILE *fp,RSA *rsa);
|
618
|
-
OPENSSL_EXPORT RSA *d2i_RSAPublicKey_fp(FILE *fp,RSA **rsa);
|
619
|
-
OPENSSL_EXPORT int i2d_RSAPublicKey_fp(FILE *fp,RSA *rsa);
|
620
|
-
OPENSSL_EXPORT RSA *d2i_RSA_PUBKEY_fp(FILE *fp,RSA **rsa);
|
621
|
-
OPENSSL_EXPORT int i2d_RSA_PUBKEY_fp(FILE *fp,RSA *rsa);
|
640
|
+
OPENSSL_EXPORT int i2d_X509_fp(FILE *fp, X509 *x509);
|
641
|
+
OPENSSL_EXPORT X509_CRL *d2i_X509_CRL_fp(FILE *fp, X509_CRL **crl);
|
642
|
+
OPENSSL_EXPORT int i2d_X509_CRL_fp(FILE *fp, X509_CRL *crl);
|
643
|
+
OPENSSL_EXPORT X509_REQ *d2i_X509_REQ_fp(FILE *fp, X509_REQ **req);
|
644
|
+
OPENSSL_EXPORT int i2d_X509_REQ_fp(FILE *fp, X509_REQ *req);
|
645
|
+
OPENSSL_EXPORT RSA *d2i_RSAPrivateKey_fp(FILE *fp, RSA **rsa);
|
646
|
+
OPENSSL_EXPORT int i2d_RSAPrivateKey_fp(FILE *fp, RSA *rsa);
|
647
|
+
OPENSSL_EXPORT RSA *d2i_RSAPublicKey_fp(FILE *fp, RSA **rsa);
|
648
|
+
OPENSSL_EXPORT int i2d_RSAPublicKey_fp(FILE *fp, RSA *rsa);
|
649
|
+
OPENSSL_EXPORT RSA *d2i_RSA_PUBKEY_fp(FILE *fp, RSA **rsa);
|
650
|
+
OPENSSL_EXPORT int i2d_RSA_PUBKEY_fp(FILE *fp, RSA *rsa);
|
622
651
|
#ifndef OPENSSL_NO_DSA
|
623
652
|
OPENSSL_EXPORT DSA *d2i_DSA_PUBKEY_fp(FILE *fp, DSA **dsa);
|
624
653
|
OPENSSL_EXPORT int i2d_DSA_PUBKEY_fp(FILE *fp, DSA *dsa);
|
@@ -626,14 +655,15 @@ OPENSSL_EXPORT DSA *d2i_DSAPrivateKey_fp(FILE *fp, DSA **dsa);
|
|
626
655
|
OPENSSL_EXPORT int i2d_DSAPrivateKey_fp(FILE *fp, DSA *dsa);
|
627
656
|
#endif
|
628
657
|
OPENSSL_EXPORT EC_KEY *d2i_EC_PUBKEY_fp(FILE *fp, EC_KEY **eckey);
|
629
|
-
OPENSSL_EXPORT int
|
658
|
+
OPENSSL_EXPORT int i2d_EC_PUBKEY_fp(FILE *fp, EC_KEY *eckey);
|
630
659
|
OPENSSL_EXPORT EC_KEY *d2i_ECPrivateKey_fp(FILE *fp, EC_KEY **eckey);
|
631
|
-
OPENSSL_EXPORT int
|
632
|
-
OPENSSL_EXPORT X509_SIG *d2i_PKCS8_fp(FILE *fp,X509_SIG **p8);
|
633
|
-
OPENSSL_EXPORT int i2d_PKCS8_fp(FILE *fp,X509_SIG *p8);
|
634
|
-
OPENSSL_EXPORT PKCS8_PRIV_KEY_INFO *d2i_PKCS8_PRIV_KEY_INFO_fp(
|
635
|
-
|
636
|
-
OPENSSL_EXPORT int i2d_PKCS8_PRIV_KEY_INFO_fp(FILE *fp,
|
660
|
+
OPENSSL_EXPORT int i2d_ECPrivateKey_fp(FILE *fp, EC_KEY *eckey);
|
661
|
+
OPENSSL_EXPORT X509_SIG *d2i_PKCS8_fp(FILE *fp, X509_SIG **p8);
|
662
|
+
OPENSSL_EXPORT int i2d_PKCS8_fp(FILE *fp, X509_SIG *p8);
|
663
|
+
OPENSSL_EXPORT PKCS8_PRIV_KEY_INFO *d2i_PKCS8_PRIV_KEY_INFO_fp(
|
664
|
+
FILE *fp, PKCS8_PRIV_KEY_INFO **p8inf);
|
665
|
+
OPENSSL_EXPORT int i2d_PKCS8_PRIV_KEY_INFO_fp(FILE *fp,
|
666
|
+
PKCS8_PRIV_KEY_INFO *p8inf);
|
637
667
|
OPENSSL_EXPORT int i2d_PKCS8PrivateKeyInfo_fp(FILE *fp, EVP_PKEY *key);
|
638
668
|
OPENSSL_EXPORT int i2d_PrivateKey_fp(FILE *fp, EVP_PKEY *pkey);
|
639
669
|
OPENSSL_EXPORT EVP_PKEY *d2i_PrivateKey_fp(FILE *fp, EVP_PKEY **a);
|
@@ -641,18 +671,18 @@ OPENSSL_EXPORT int i2d_PUBKEY_fp(FILE *fp, EVP_PKEY *pkey);
|
|
641
671
|
OPENSSL_EXPORT EVP_PKEY *d2i_PUBKEY_fp(FILE *fp, EVP_PKEY **a);
|
642
672
|
#endif
|
643
673
|
|
644
|
-
OPENSSL_EXPORT X509 *d2i_X509_bio(BIO *bp,X509 **x509);
|
645
|
-
OPENSSL_EXPORT int i2d_X509_bio(BIO *bp,X509 *x509);
|
646
|
-
OPENSSL_EXPORT X509_CRL *d2i_X509_CRL_bio(BIO *bp,X509_CRL **crl);
|
647
|
-
OPENSSL_EXPORT int i2d_X509_CRL_bio(BIO *bp,X509_CRL *crl);
|
648
|
-
OPENSSL_EXPORT X509_REQ *d2i_X509_REQ_bio(BIO *bp,X509_REQ **req);
|
649
|
-
OPENSSL_EXPORT int i2d_X509_REQ_bio(BIO *bp,X509_REQ *req);
|
650
|
-
OPENSSL_EXPORT RSA *d2i_RSAPrivateKey_bio(BIO *bp,RSA **rsa);
|
651
|
-
OPENSSL_EXPORT int i2d_RSAPrivateKey_bio(BIO *bp,RSA *rsa);
|
652
|
-
OPENSSL_EXPORT RSA *d2i_RSAPublicKey_bio(BIO *bp,RSA **rsa);
|
653
|
-
OPENSSL_EXPORT int i2d_RSAPublicKey_bio(BIO *bp,RSA *rsa);
|
654
|
-
OPENSSL_EXPORT RSA *d2i_RSA_PUBKEY_bio(BIO *bp,RSA **rsa);
|
655
|
-
OPENSSL_EXPORT int i2d_RSA_PUBKEY_bio(BIO *bp,RSA *rsa);
|
674
|
+
OPENSSL_EXPORT X509 *d2i_X509_bio(BIO *bp, X509 **x509);
|
675
|
+
OPENSSL_EXPORT int i2d_X509_bio(BIO *bp, X509 *x509);
|
676
|
+
OPENSSL_EXPORT X509_CRL *d2i_X509_CRL_bio(BIO *bp, X509_CRL **crl);
|
677
|
+
OPENSSL_EXPORT int i2d_X509_CRL_bio(BIO *bp, X509_CRL *crl);
|
678
|
+
OPENSSL_EXPORT X509_REQ *d2i_X509_REQ_bio(BIO *bp, X509_REQ **req);
|
679
|
+
OPENSSL_EXPORT int i2d_X509_REQ_bio(BIO *bp, X509_REQ *req);
|
680
|
+
OPENSSL_EXPORT RSA *d2i_RSAPrivateKey_bio(BIO *bp, RSA **rsa);
|
681
|
+
OPENSSL_EXPORT int i2d_RSAPrivateKey_bio(BIO *bp, RSA *rsa);
|
682
|
+
OPENSSL_EXPORT RSA *d2i_RSAPublicKey_bio(BIO *bp, RSA **rsa);
|
683
|
+
OPENSSL_EXPORT int i2d_RSAPublicKey_bio(BIO *bp, RSA *rsa);
|
684
|
+
OPENSSL_EXPORT RSA *d2i_RSA_PUBKEY_bio(BIO *bp, RSA **rsa);
|
685
|
+
OPENSSL_EXPORT int i2d_RSA_PUBKEY_bio(BIO *bp, RSA *rsa);
|
656
686
|
#ifndef OPENSSL_NO_DSA
|
657
687
|
OPENSSL_EXPORT DSA *d2i_DSA_PUBKEY_bio(BIO *bp, DSA **dsa);
|
658
688
|
OPENSSL_EXPORT int i2d_DSA_PUBKEY_bio(BIO *bp, DSA *dsa);
|
@@ -660,14 +690,15 @@ OPENSSL_EXPORT DSA *d2i_DSAPrivateKey_bio(BIO *bp, DSA **dsa);
|
|
660
690
|
OPENSSL_EXPORT int i2d_DSAPrivateKey_bio(BIO *bp, DSA *dsa);
|
661
691
|
#endif
|
662
692
|
OPENSSL_EXPORT EC_KEY *d2i_EC_PUBKEY_bio(BIO *bp, EC_KEY **eckey);
|
663
|
-
OPENSSL_EXPORT int
|
693
|
+
OPENSSL_EXPORT int i2d_EC_PUBKEY_bio(BIO *bp, EC_KEY *eckey);
|
664
694
|
OPENSSL_EXPORT EC_KEY *d2i_ECPrivateKey_bio(BIO *bp, EC_KEY **eckey);
|
665
|
-
OPENSSL_EXPORT int
|
666
|
-
OPENSSL_EXPORT X509_SIG *d2i_PKCS8_bio(BIO *bp,X509_SIG **p8);
|
667
|
-
OPENSSL_EXPORT int i2d_PKCS8_bio(BIO *bp,X509_SIG *p8);
|
668
|
-
OPENSSL_EXPORT PKCS8_PRIV_KEY_INFO *d2i_PKCS8_PRIV_KEY_INFO_bio(
|
669
|
-
|
670
|
-
OPENSSL_EXPORT int i2d_PKCS8_PRIV_KEY_INFO_bio(BIO *bp,
|
695
|
+
OPENSSL_EXPORT int i2d_ECPrivateKey_bio(BIO *bp, EC_KEY *eckey);
|
696
|
+
OPENSSL_EXPORT X509_SIG *d2i_PKCS8_bio(BIO *bp, X509_SIG **p8);
|
697
|
+
OPENSSL_EXPORT int i2d_PKCS8_bio(BIO *bp, X509_SIG *p8);
|
698
|
+
OPENSSL_EXPORT PKCS8_PRIV_KEY_INFO *d2i_PKCS8_PRIV_KEY_INFO_bio(
|
699
|
+
BIO *bp, PKCS8_PRIV_KEY_INFO **p8inf);
|
700
|
+
OPENSSL_EXPORT int i2d_PKCS8_PRIV_KEY_INFO_bio(BIO *bp,
|
701
|
+
PKCS8_PRIV_KEY_INFO *p8inf);
|
671
702
|
OPENSSL_EXPORT int i2d_PKCS8PrivateKeyInfo_bio(BIO *bp, EVP_PKEY *key);
|
672
703
|
OPENSSL_EXPORT int i2d_PrivateKey_bio(BIO *bp, EVP_PKEY *pkey);
|
673
704
|
OPENSSL_EXPORT EVP_PKEY *d2i_PrivateKey_bio(BIO *bp, EVP_PKEY **a);
|
@@ -683,7 +714,8 @@ OPENSSL_EXPORT X509_CRL *X509_CRL_dup(X509_CRL *crl);
|
|
683
714
|
OPENSSL_EXPORT X509_REVOKED *X509_REVOKED_dup(X509_REVOKED *rev);
|
684
715
|
OPENSSL_EXPORT X509_REQ *X509_REQ_dup(X509_REQ *req);
|
685
716
|
OPENSSL_EXPORT X509_ALGOR *X509_ALGOR_dup(X509_ALGOR *xn);
|
686
|
-
OPENSSL_EXPORT int X509_ALGOR_set0(X509_ALGOR *alg, const ASN1_OBJECT *aobj,
|
717
|
+
OPENSSL_EXPORT int X509_ALGOR_set0(X509_ALGOR *alg, const ASN1_OBJECT *aobj,
|
718
|
+
int ptype, void *pval);
|
687
719
|
OPENSSL_EXPORT void X509_ALGOR_get0(const ASN1_OBJECT **paobj, int *pptype,
|
688
720
|
const void **ppval,
|
689
721
|
const X509_ALGOR *algor);
|
@@ -697,50 +729,39 @@ OPENSSL_EXPORT int X509_NAME_ENTRY_set(const X509_NAME_ENTRY *ne);
|
|
697
729
|
OPENSSL_EXPORT int X509_NAME_get0_der(X509_NAME *nm, const unsigned char **pder,
|
698
730
|
size_t *pderlen);
|
699
731
|
|
700
|
-
OPENSSL_EXPORT int
|
701
|
-
OPENSSL_EXPORT int
|
702
|
-
OPENSSL_EXPORT ASN1_TIME *
|
703
|
-
OPENSSL_EXPORT ASN1_TIME *
|
704
|
-
|
732
|
+
OPENSSL_EXPORT int X509_cmp_time(const ASN1_TIME *s, time_t *t);
|
733
|
+
OPENSSL_EXPORT int X509_cmp_current_time(const ASN1_TIME *s);
|
734
|
+
OPENSSL_EXPORT ASN1_TIME *X509_time_adj(ASN1_TIME *s, long adj, time_t *t);
|
735
|
+
OPENSSL_EXPORT ASN1_TIME *X509_time_adj_ex(ASN1_TIME *s, int offset_day,
|
736
|
+
long offset_sec, time_t *t);
|
737
|
+
OPENSSL_EXPORT ASN1_TIME *X509_gmtime_adj(ASN1_TIME *s, long adj);
|
705
738
|
|
706
|
-
OPENSSL_EXPORT const char *
|
707
|
-
OPENSSL_EXPORT const char *
|
708
|
-
OPENSSL_EXPORT const char *
|
709
|
-
OPENSSL_EXPORT const char *
|
710
|
-
OPENSSL_EXPORT const char *
|
711
|
-
OPENSSL_EXPORT const char *
|
739
|
+
OPENSSL_EXPORT const char *X509_get_default_cert_area(void);
|
740
|
+
OPENSSL_EXPORT const char *X509_get_default_cert_dir(void);
|
741
|
+
OPENSSL_EXPORT const char *X509_get_default_cert_file(void);
|
742
|
+
OPENSSL_EXPORT const char *X509_get_default_cert_dir_env(void);
|
743
|
+
OPENSSL_EXPORT const char *X509_get_default_cert_file_env(void);
|
744
|
+
OPENSSL_EXPORT const char *X509_get_default_private_dir(void);
|
712
745
|
|
713
|
-
OPENSSL_EXPORT X509_REQ *
|
714
|
-
|
746
|
+
OPENSSL_EXPORT X509_REQ *X509_to_X509_REQ(X509 *x, EVP_PKEY *pkey,
|
747
|
+
const EVP_MD *md);
|
748
|
+
OPENSSL_EXPORT X509 *X509_REQ_to_X509(X509_REQ *r, int days, EVP_PKEY *pkey);
|
715
749
|
|
716
750
|
DECLARE_ASN1_ENCODE_FUNCTIONS(X509_ALGORS, X509_ALGORS, X509_ALGORS)
|
717
751
|
DECLARE_ASN1_FUNCTIONS(X509_VAL)
|
718
752
|
|
719
753
|
DECLARE_ASN1_FUNCTIONS(X509_PUBKEY)
|
720
754
|
|
721
|
-
OPENSSL_EXPORT int
|
722
|
-
OPENSSL_EXPORT EVP_PKEY *
|
723
|
-
OPENSSL_EXPORT int i2d_PUBKEY(const EVP_PKEY *a,unsigned char **pp);
|
724
|
-
OPENSSL_EXPORT EVP_PKEY * d2i_PUBKEY(EVP_PKEY **a,const unsigned char **pp,
|
725
|
-
long length);
|
726
|
-
OPENSSL_EXPORT int i2d_RSA_PUBKEY(const RSA *a,unsigned char **pp);
|
727
|
-
OPENSSL_EXPORT RSA * d2i_RSA_PUBKEY(RSA **a,const unsigned char **pp,
|
728
|
-
long length);
|
729
|
-
#ifndef OPENSSL_NO_DSA
|
730
|
-
OPENSSL_EXPORT int i2d_DSA_PUBKEY(const DSA *a,unsigned char **pp);
|
731
|
-
OPENSSL_EXPORT DSA * d2i_DSA_PUBKEY(DSA **a,const unsigned char **pp,
|
732
|
-
long length);
|
733
|
-
#endif
|
734
|
-
OPENSSL_EXPORT int i2d_EC_PUBKEY(const EC_KEY *a, unsigned char **pp);
|
735
|
-
OPENSSL_EXPORT EC_KEY *d2i_EC_PUBKEY(EC_KEY **a, const unsigned char **pp,
|
736
|
-
long length);
|
755
|
+
OPENSSL_EXPORT int X509_PUBKEY_set(X509_PUBKEY **x, EVP_PKEY *pkey);
|
756
|
+
OPENSSL_EXPORT EVP_PKEY *X509_PUBKEY_get(X509_PUBKEY *key);
|
737
757
|
|
738
758
|
DECLARE_ASN1_FUNCTIONS(X509_SIG)
|
739
759
|
DECLARE_ASN1_FUNCTIONS(X509_REQ_INFO)
|
740
760
|
DECLARE_ASN1_FUNCTIONS(X509_REQ)
|
741
761
|
|
742
762
|
DECLARE_ASN1_FUNCTIONS(X509_ATTRIBUTE)
|
743
|
-
OPENSSL_EXPORT X509_ATTRIBUTE *X509_ATTRIBUTE_create(int nid, int atrtype,
|
763
|
+
OPENSSL_EXPORT X509_ATTRIBUTE *X509_ATTRIBUTE_create(int nid, int atrtype,
|
764
|
+
void *value);
|
744
765
|
|
745
766
|
DECLARE_ASN1_FUNCTIONS(X509_EXTENSION)
|
746
767
|
DECLARE_ASN1_ENCODE_FUNCTIONS(X509_EXTENSIONS, X509_EXTENSIONS, X509_EXTENSIONS)
|
@@ -749,22 +770,25 @@ DECLARE_ASN1_FUNCTIONS(X509_NAME_ENTRY)
|
|
749
770
|
|
750
771
|
DECLARE_ASN1_FUNCTIONS(X509_NAME)
|
751
772
|
|
752
|
-
OPENSSL_EXPORT int
|
773
|
+
OPENSSL_EXPORT int X509_NAME_set(X509_NAME **xn, X509_NAME *name);
|
753
774
|
|
754
775
|
DECLARE_ASN1_FUNCTIONS(X509_CINF)
|
755
776
|
|
756
777
|
DECLARE_ASN1_FUNCTIONS(X509)
|
757
778
|
DECLARE_ASN1_FUNCTIONS(X509_CERT_AUX)
|
758
779
|
|
759
|
-
|
780
|
+
// X509_up_ref adds one to the reference count of |x| and returns one.
|
760
781
|
OPENSSL_EXPORT int X509_up_ref(X509 *x);
|
761
782
|
|
762
|
-
OPENSSL_EXPORT int X509_get_ex_new_index(long argl, void *argp,
|
763
|
-
|
783
|
+
OPENSSL_EXPORT int X509_get_ex_new_index(long argl, void *argp,
|
784
|
+
CRYPTO_EX_unused *unused,
|
785
|
+
CRYPTO_EX_dup *dup_unused,
|
786
|
+
CRYPTO_EX_free *free_func);
|
764
787
|
OPENSSL_EXPORT int X509_set_ex_data(X509 *r, int idx, void *arg);
|
765
788
|
OPENSSL_EXPORT void *X509_get_ex_data(X509 *r, int idx);
|
766
|
-
OPENSSL_EXPORT int
|
767
|
-
OPENSSL_EXPORT X509 *
|
789
|
+
OPENSSL_EXPORT int i2d_X509_AUX(X509 *a, unsigned char **pp);
|
790
|
+
OPENSSL_EXPORT X509 *d2i_X509_AUX(X509 **a, const unsigned char **pp,
|
791
|
+
long length);
|
768
792
|
|
769
793
|
OPENSSL_EXPORT int i2d_re_X509_tbs(X509 *x, unsigned char **pp);
|
770
794
|
|
@@ -774,9 +798,11 @@ OPENSSL_EXPORT int X509_get_signature_nid(const X509 *x);
|
|
774
798
|
|
775
799
|
OPENSSL_EXPORT int X509_alias_set1(X509 *x, unsigned char *name, int len);
|
776
800
|
OPENSSL_EXPORT int X509_keyid_set1(X509 *x, unsigned char *id, int len);
|
777
|
-
OPENSSL_EXPORT unsigned char *
|
778
|
-
OPENSSL_EXPORT unsigned char *
|
779
|
-
OPENSSL_EXPORT int (*X509_TRUST_set_default(int (*trust)(int
|
801
|
+
OPENSSL_EXPORT unsigned char *X509_alias_get0(X509 *x, int *len);
|
802
|
+
OPENSSL_EXPORT unsigned char *X509_keyid_get0(X509 *x, int *len);
|
803
|
+
OPENSSL_EXPORT int (*X509_TRUST_set_default(int (*trust)(int, X509 *,
|
804
|
+
int)))(int, X509 *,
|
805
|
+
int);
|
780
806
|
OPENSSL_EXPORT int X509_TRUST_set(int *t, int trust);
|
781
807
|
OPENSSL_EXPORT int X509_add1_trust_object(X509 *x, ASN1_OBJECT *obj);
|
782
808
|
OPENSSL_EXPORT int X509_add1_reject_object(X509 *x, ASN1_OBJECT *obj);
|
@@ -788,90 +814,100 @@ DECLARE_ASN1_FUNCTIONS(X509_CRL_INFO)
|
|
788
814
|
DECLARE_ASN1_FUNCTIONS(X509_CRL)
|
789
815
|
|
790
816
|
OPENSSL_EXPORT int X509_CRL_add0_revoked(X509_CRL *crl, X509_REVOKED *rev);
|
791
|
-
OPENSSL_EXPORT int X509_CRL_get0_by_serial(X509_CRL *crl,
|
792
|
-
|
793
|
-
OPENSSL_EXPORT int X509_CRL_get0_by_cert(X509_CRL *crl, X509_REVOKED **ret,
|
817
|
+
OPENSSL_EXPORT int X509_CRL_get0_by_serial(X509_CRL *crl, X509_REVOKED **ret,
|
818
|
+
ASN1_INTEGER *serial);
|
819
|
+
OPENSSL_EXPORT int X509_CRL_get0_by_cert(X509_CRL *crl, X509_REVOKED **ret,
|
820
|
+
X509 *x);
|
794
821
|
|
795
|
-
OPENSSL_EXPORT X509_PKEY *
|
796
|
-
OPENSSL_EXPORT void
|
822
|
+
OPENSSL_EXPORT X509_PKEY *X509_PKEY_new(void);
|
823
|
+
OPENSSL_EXPORT void X509_PKEY_free(X509_PKEY *a);
|
797
824
|
|
798
825
|
DECLARE_ASN1_FUNCTIONS(NETSCAPE_SPKI)
|
799
826
|
DECLARE_ASN1_FUNCTIONS(NETSCAPE_SPKAC)
|
800
827
|
|
801
828
|
#ifndef OPENSSL_NO_EVP
|
802
|
-
OPENSSL_EXPORT X509_INFO *
|
803
|
-
OPENSSL_EXPORT void
|
804
|
-
OPENSSL_EXPORT char *
|
829
|
+
OPENSSL_EXPORT X509_INFO *X509_INFO_new(void);
|
830
|
+
OPENSSL_EXPORT void X509_INFO_free(X509_INFO *a);
|
831
|
+
OPENSSL_EXPORT char *X509_NAME_oneline(X509_NAME *a, char *buf, int size);
|
805
832
|
|
806
|
-
OPENSSL_EXPORT int ASN1_digest(i2d_of_void *i2d,const EVP_MD *type,char *data,
|
807
|
-
|
833
|
+
OPENSSL_EXPORT int ASN1_digest(i2d_of_void *i2d, const EVP_MD *type, char *data,
|
834
|
+
unsigned char *md, unsigned int *len);
|
808
835
|
|
809
|
-
OPENSSL_EXPORT int ASN1_item_digest(const ASN1_ITEM *it,const EVP_MD *type,
|
810
|
-
|
836
|
+
OPENSSL_EXPORT int ASN1_item_digest(const ASN1_ITEM *it, const EVP_MD *type,
|
837
|
+
void *data, unsigned char *md,
|
838
|
+
unsigned int *len);
|
811
839
|
|
812
840
|
OPENSSL_EXPORT int ASN1_item_verify(const ASN1_ITEM *it, X509_ALGOR *algor1,
|
813
|
-
|
814
|
-
|
815
|
-
|
816
|
-
|
817
|
-
|
818
|
-
|
819
|
-
|
820
|
-
|
841
|
+
ASN1_BIT_STRING *signature, void *data,
|
842
|
+
EVP_PKEY *pkey);
|
843
|
+
|
844
|
+
OPENSSL_EXPORT int ASN1_item_sign(const ASN1_ITEM *it, X509_ALGOR *algor1,
|
845
|
+
X509_ALGOR *algor2,
|
846
|
+
ASN1_BIT_STRING *signature, void *data,
|
847
|
+
EVP_PKEY *pkey, const EVP_MD *type);
|
848
|
+
OPENSSL_EXPORT int ASN1_item_sign_ctx(const ASN1_ITEM *it, X509_ALGOR *algor1,
|
849
|
+
X509_ALGOR *algor2,
|
850
|
+
ASN1_BIT_STRING *signature, void *asn,
|
851
|
+
EVP_MD_CTX *ctx);
|
821
852
|
#endif
|
822
853
|
|
823
|
-
OPENSSL_EXPORT int
|
824
|
-
OPENSSL_EXPORT int
|
825
|
-
OPENSSL_EXPORT ASN1_INTEGER *
|
826
|
-
OPENSSL_EXPORT int
|
827
|
-
OPENSSL_EXPORT X509_NAME *
|
828
|
-
OPENSSL_EXPORT int
|
829
|
-
OPENSSL_EXPORT X509_NAME *
|
830
|
-
OPENSSL_EXPORT int
|
854
|
+
OPENSSL_EXPORT int X509_set_version(X509 *x, long version);
|
855
|
+
OPENSSL_EXPORT int X509_set_serialNumber(X509 *x, ASN1_INTEGER *serial);
|
856
|
+
OPENSSL_EXPORT ASN1_INTEGER *X509_get_serialNumber(X509 *x);
|
857
|
+
OPENSSL_EXPORT int X509_set_issuer_name(X509 *x, X509_NAME *name);
|
858
|
+
OPENSSL_EXPORT X509_NAME *X509_get_issuer_name(X509 *a);
|
859
|
+
OPENSSL_EXPORT int X509_set_subject_name(X509 *x, X509_NAME *name);
|
860
|
+
OPENSSL_EXPORT X509_NAME *X509_get_subject_name(X509 *a);
|
861
|
+
OPENSSL_EXPORT int X509_set_notBefore(X509 *x, const ASN1_TIME *tm);
|
831
862
|
OPENSSL_EXPORT const ASN1_TIME *X509_get0_notBefore(const X509 *x);
|
832
863
|
OPENSSL_EXPORT ASN1_TIME *X509_getm_notBefore(X509 *x);
|
833
|
-
OPENSSL_EXPORT int
|
864
|
+
OPENSSL_EXPORT int X509_set_notAfter(X509 *x, const ASN1_TIME *tm);
|
834
865
|
OPENSSL_EXPORT const ASN1_TIME *X509_get0_notAfter(const X509 *x);
|
835
866
|
OPENSSL_EXPORT ASN1_TIME *X509_getm_notAfter(X509 *x);
|
836
|
-
OPENSSL_EXPORT int
|
837
|
-
OPENSSL_EXPORT EVP_PKEY *
|
838
|
-
OPENSSL_EXPORT ASN1_BIT_STRING *
|
839
|
-
OPENSSL_EXPORT STACK_OF(X509_EXTENSION) *X509_get0_extensions(const X509 *x);
|
867
|
+
OPENSSL_EXPORT int X509_set_pubkey(X509 *x, EVP_PKEY *pkey);
|
868
|
+
OPENSSL_EXPORT EVP_PKEY *X509_get_pubkey(X509 *x);
|
869
|
+
OPENSSL_EXPORT ASN1_BIT_STRING *X509_get0_pubkey_bitstr(const X509 *x);
|
870
|
+
OPENSSL_EXPORT STACK_OF(X509_EXTENSION) * X509_get0_extensions(const X509 *x);
|
840
871
|
OPENSSL_EXPORT const X509_ALGOR *X509_get0_tbs_sigalg(const X509 *x);
|
841
872
|
|
842
|
-
OPENSSL_EXPORT int
|
843
|
-
OPENSSL_EXPORT int
|
873
|
+
OPENSSL_EXPORT int X509_REQ_set_version(X509_REQ *x, long version);
|
874
|
+
OPENSSL_EXPORT int X509_REQ_set_subject_name(X509_REQ *req, X509_NAME *name);
|
844
875
|
OPENSSL_EXPORT void X509_REQ_get0_signature(const X509_REQ *req,
|
845
876
|
const ASN1_BIT_STRING **psig,
|
846
877
|
const X509_ALGOR **palg);
|
847
878
|
OPENSSL_EXPORT int X509_REQ_get_signature_nid(const X509_REQ *req);
|
848
879
|
OPENSSL_EXPORT int i2d_re_X509_REQ_tbs(X509_REQ *req, unsigned char **pp);
|
849
|
-
OPENSSL_EXPORT int
|
850
|
-
OPENSSL_EXPORT EVP_PKEY *
|
851
|
-
OPENSSL_EXPORT int
|
852
|
-
OPENSSL_EXPORT const int *
|
853
|
-
OPENSSL_EXPORT void
|
854
|
-
OPENSSL_EXPORT STACK_OF(X509_EXTENSION) *
|
855
|
-
|
856
|
-
|
857
|
-
|
880
|
+
OPENSSL_EXPORT int X509_REQ_set_pubkey(X509_REQ *x, EVP_PKEY *pkey);
|
881
|
+
OPENSSL_EXPORT EVP_PKEY *X509_REQ_get_pubkey(X509_REQ *req);
|
882
|
+
OPENSSL_EXPORT int X509_REQ_extension_nid(int nid);
|
883
|
+
OPENSSL_EXPORT const int *X509_REQ_get_extension_nids(void);
|
884
|
+
OPENSSL_EXPORT void X509_REQ_set_extension_nids(const int *nids);
|
885
|
+
OPENSSL_EXPORT STACK_OF(X509_EXTENSION) *
|
886
|
+
X509_REQ_get_extensions(X509_REQ *req);
|
887
|
+
OPENSSL_EXPORT int X509_REQ_add_extensions_nid(X509_REQ *req,
|
888
|
+
STACK_OF(X509_EXTENSION) * exts,
|
889
|
+
int nid);
|
890
|
+
OPENSSL_EXPORT int X509_REQ_add_extensions(X509_REQ *req,
|
891
|
+
STACK_OF(X509_EXTENSION) * exts);
|
858
892
|
OPENSSL_EXPORT int X509_REQ_get_attr_count(const X509_REQ *req);
|
859
893
|
OPENSSL_EXPORT int X509_REQ_get_attr_by_NID(const X509_REQ *req, int nid,
|
860
|
-
|
861
|
-
OPENSSL_EXPORT int X509_REQ_get_attr_by_OBJ(const X509_REQ *req,
|
862
|
-
|
894
|
+
int lastpos);
|
895
|
+
OPENSSL_EXPORT int X509_REQ_get_attr_by_OBJ(const X509_REQ *req,
|
896
|
+
ASN1_OBJECT *obj, int lastpos);
|
863
897
|
OPENSSL_EXPORT X509_ATTRIBUTE *X509_REQ_get_attr(const X509_REQ *req, int loc);
|
864
898
|
OPENSSL_EXPORT X509_ATTRIBUTE *X509_REQ_delete_attr(X509_REQ *req, int loc);
|
865
899
|
OPENSSL_EXPORT int X509_REQ_add1_attr(X509_REQ *req, X509_ATTRIBUTE *attr);
|
866
900
|
OPENSSL_EXPORT int X509_REQ_add1_attr_by_OBJ(X509_REQ *req,
|
867
|
-
|
868
|
-
|
869
|
-
|
870
|
-
|
871
|
-
|
901
|
+
const ASN1_OBJECT *obj, int type,
|
902
|
+
const unsigned char *bytes,
|
903
|
+
int len);
|
904
|
+
OPENSSL_EXPORT int X509_REQ_add1_attr_by_NID(X509_REQ *req, int nid, int type,
|
905
|
+
const unsigned char *bytes,
|
906
|
+
int len);
|
872
907
|
OPENSSL_EXPORT int X509_REQ_add1_attr_by_txt(X509_REQ *req,
|
873
|
-
|
874
|
-
|
908
|
+
const char *attrname, int type,
|
909
|
+
const unsigned char *bytes,
|
910
|
+
int len);
|
875
911
|
|
876
912
|
OPENSSL_EXPORT int X509_CRL_set_version(X509_CRL *x, long version);
|
877
913
|
OPENSSL_EXPORT int X509_CRL_set_issuer_name(X509_CRL *x, X509_NAME *name);
|
@@ -888,225 +924,271 @@ OPENSSL_EXPORT int i2d_re_X509_CRL_tbs(X509_CRL *req, unsigned char **pp);
|
|
888
924
|
|
889
925
|
OPENSSL_EXPORT const ASN1_INTEGER *X509_REVOKED_get0_serialNumber(
|
890
926
|
const X509_REVOKED *x);
|
891
|
-
OPENSSL_EXPORT int X509_REVOKED_set_serialNumber(X509_REVOKED *x,
|
927
|
+
OPENSSL_EXPORT int X509_REVOKED_set_serialNumber(X509_REVOKED *x,
|
928
|
+
ASN1_INTEGER *serial);
|
892
929
|
OPENSSL_EXPORT const ASN1_TIME *X509_REVOKED_get0_revocationDate(
|
893
930
|
const X509_REVOKED *x);
|
894
|
-
OPENSSL_EXPORT int X509_REVOKED_set_revocationDate(X509_REVOKED *r,
|
931
|
+
OPENSSL_EXPORT int X509_REVOKED_set_revocationDate(X509_REVOKED *r,
|
932
|
+
ASN1_TIME *tm);
|
895
933
|
|
896
934
|
OPENSSL_EXPORT X509_CRL *X509_CRL_diff(X509_CRL *base, X509_CRL *newer,
|
897
|
-
|
935
|
+
EVP_PKEY *skey, const EVP_MD *md,
|
936
|
+
unsigned int flags);
|
898
937
|
|
899
|
-
OPENSSL_EXPORT int
|
938
|
+
OPENSSL_EXPORT int X509_REQ_check_private_key(X509_REQ *x509, EVP_PKEY *pkey);
|
900
939
|
|
901
|
-
OPENSSL_EXPORT int
|
902
|
-
OPENSSL_EXPORT int
|
903
|
-
|
904
|
-
|
905
|
-
OPENSSL_EXPORT int
|
906
|
-
|
907
|
-
OPENSSL_EXPORT STACK_OF(X509) *X509_chain_up_ref(STACK_OF(X509) *chain);
|
940
|
+
OPENSSL_EXPORT int X509_check_private_key(X509 *x509, const EVP_PKEY *pkey);
|
941
|
+
OPENSSL_EXPORT int X509_chain_check_suiteb(int *perror_depth, X509 *x,
|
942
|
+
STACK_OF(X509) * chain,
|
943
|
+
unsigned long flags);
|
944
|
+
OPENSSL_EXPORT int X509_CRL_check_suiteb(X509_CRL *crl, EVP_PKEY *pk,
|
945
|
+
unsigned long flags);
|
946
|
+
OPENSSL_EXPORT STACK_OF(X509) * X509_chain_up_ref(STACK_OF(X509) * chain);
|
908
947
|
|
909
|
-
OPENSSL_EXPORT int
|
910
|
-
OPENSSL_EXPORT unsigned long
|
948
|
+
OPENSSL_EXPORT int X509_issuer_and_serial_cmp(const X509 *a, const X509 *b);
|
949
|
+
OPENSSL_EXPORT unsigned long X509_issuer_and_serial_hash(X509 *a);
|
911
950
|
|
912
|
-
OPENSSL_EXPORT int
|
913
|
-
OPENSSL_EXPORT unsigned long
|
951
|
+
OPENSSL_EXPORT int X509_issuer_name_cmp(const X509 *a, const X509 *b);
|
952
|
+
OPENSSL_EXPORT unsigned long X509_issuer_name_hash(X509 *a);
|
914
953
|
|
915
|
-
OPENSSL_EXPORT int
|
916
|
-
OPENSSL_EXPORT unsigned long
|
954
|
+
OPENSSL_EXPORT int X509_subject_name_cmp(const X509 *a, const X509 *b);
|
955
|
+
OPENSSL_EXPORT unsigned long X509_subject_name_hash(X509 *x);
|
917
956
|
|
918
|
-
OPENSSL_EXPORT unsigned long
|
919
|
-
OPENSSL_EXPORT unsigned long
|
957
|
+
OPENSSL_EXPORT unsigned long X509_issuer_name_hash_old(X509 *a);
|
958
|
+
OPENSSL_EXPORT unsigned long X509_subject_name_hash_old(X509 *x);
|
920
959
|
|
921
|
-
OPENSSL_EXPORT int
|
922
|
-
OPENSSL_EXPORT int
|
923
|
-
OPENSSL_EXPORT unsigned long
|
924
|
-
OPENSSL_EXPORT unsigned long
|
960
|
+
OPENSSL_EXPORT int X509_cmp(const X509 *a, const X509 *b);
|
961
|
+
OPENSSL_EXPORT int X509_NAME_cmp(const X509_NAME *a, const X509_NAME *b);
|
962
|
+
OPENSSL_EXPORT unsigned long X509_NAME_hash(X509_NAME *x);
|
963
|
+
OPENSSL_EXPORT unsigned long X509_NAME_hash_old(X509_NAME *x);
|
925
964
|
|
926
|
-
OPENSSL_EXPORT int
|
927
|
-
OPENSSL_EXPORT int
|
965
|
+
OPENSSL_EXPORT int X509_CRL_cmp(const X509_CRL *a, const X509_CRL *b);
|
966
|
+
OPENSSL_EXPORT int X509_CRL_match(const X509_CRL *a, const X509_CRL *b);
|
928
967
|
#ifndef OPENSSL_NO_FP_API
|
929
|
-
OPENSSL_EXPORT int
|
930
|
-
|
931
|
-
OPENSSL_EXPORT int
|
932
|
-
OPENSSL_EXPORT int
|
933
|
-
OPENSSL_EXPORT int
|
968
|
+
OPENSSL_EXPORT int X509_print_ex_fp(FILE *bp, X509 *x, unsigned long nmflag,
|
969
|
+
unsigned long cflag);
|
970
|
+
OPENSSL_EXPORT int X509_print_fp(FILE *bp, X509 *x);
|
971
|
+
OPENSSL_EXPORT int X509_CRL_print_fp(FILE *bp, X509_CRL *x);
|
972
|
+
OPENSSL_EXPORT int X509_REQ_print_fp(FILE *bp, X509_REQ *req);
|
973
|
+
OPENSSL_EXPORT int X509_NAME_print_ex_fp(FILE *fp, X509_NAME *nm, int indent,
|
974
|
+
unsigned long flags);
|
934
975
|
#endif
|
935
976
|
|
936
|
-
OPENSSL_EXPORT int
|
937
|
-
OPENSSL_EXPORT int X509_NAME_print_ex(BIO *out, X509_NAME *nm, int indent,
|
938
|
-
|
939
|
-
OPENSSL_EXPORT int
|
940
|
-
|
941
|
-
OPENSSL_EXPORT int
|
942
|
-
OPENSSL_EXPORT int
|
943
|
-
OPENSSL_EXPORT int
|
944
|
-
OPENSSL_EXPORT int
|
945
|
-
|
946
|
-
|
947
|
-
OPENSSL_EXPORT int
|
948
|
-
|
949
|
-
OPENSSL_EXPORT int
|
950
|
-
|
951
|
-
|
952
|
-
|
953
|
-
*
|
954
|
-
|
955
|
-
|
956
|
-
|
977
|
+
OPENSSL_EXPORT int X509_NAME_print(BIO *bp, X509_NAME *name, int obase);
|
978
|
+
OPENSSL_EXPORT int X509_NAME_print_ex(BIO *out, X509_NAME *nm, int indent,
|
979
|
+
unsigned long flags);
|
980
|
+
OPENSSL_EXPORT int X509_print_ex(BIO *bp, X509 *x, unsigned long nmflag,
|
981
|
+
unsigned long cflag);
|
982
|
+
OPENSSL_EXPORT int X509_print(BIO *bp, X509 *x);
|
983
|
+
OPENSSL_EXPORT int X509_ocspid_print(BIO *bp, X509 *x);
|
984
|
+
OPENSSL_EXPORT int X509_CERT_AUX_print(BIO *bp, X509_CERT_AUX *x, int indent);
|
985
|
+
OPENSSL_EXPORT int X509_CRL_print(BIO *bp, X509_CRL *x);
|
986
|
+
OPENSSL_EXPORT int X509_REQ_print_ex(BIO *bp, X509_REQ *x, unsigned long nmflag,
|
987
|
+
unsigned long cflag);
|
988
|
+
OPENSSL_EXPORT int X509_REQ_print(BIO *bp, X509_REQ *req);
|
989
|
+
|
990
|
+
OPENSSL_EXPORT int X509_NAME_entry_count(X509_NAME *name);
|
991
|
+
OPENSSL_EXPORT int X509_NAME_get_text_by_NID(X509_NAME *name, int nid,
|
992
|
+
char *buf, int len);
|
993
|
+
OPENSSL_EXPORT int X509_NAME_get_text_by_OBJ(X509_NAME *name,
|
994
|
+
const ASN1_OBJECT *obj, char *buf,
|
995
|
+
int len);
|
996
|
+
|
997
|
+
// NOTE: you should be passsing -1, not 0 as lastpos. The functions that use
|
998
|
+
// lastpos, search after that position on.
|
999
|
+
OPENSSL_EXPORT int X509_NAME_get_index_by_NID(X509_NAME *name, int nid,
|
1000
|
+
int lastpos);
|
1001
|
+
OPENSSL_EXPORT int X509_NAME_get_index_by_OBJ(X509_NAME *name,
|
1002
|
+
const ASN1_OBJECT *obj,
|
1003
|
+
int lastpos);
|
957
1004
|
OPENSSL_EXPORT X509_NAME_ENTRY *X509_NAME_get_entry(X509_NAME *name, int loc);
|
958
|
-
OPENSSL_EXPORT X509_NAME_ENTRY *X509_NAME_delete_entry(X509_NAME *name,
|
959
|
-
|
960
|
-
|
961
|
-
|
962
|
-
|
963
|
-
|
964
|
-
|
965
|
-
|
966
|
-
|
967
|
-
|
968
|
-
|
969
|
-
|
970
|
-
|
971
|
-
|
972
|
-
|
973
|
-
|
974
|
-
|
975
|
-
|
976
|
-
OPENSSL_EXPORT int
|
977
|
-
|
978
|
-
|
979
|
-
|
980
|
-
|
981
|
-
|
982
|
-
|
983
|
-
|
984
|
-
|
985
|
-
|
986
|
-
|
987
|
-
|
988
|
-
OPENSSL_EXPORT
|
989
|
-
OPENSSL_EXPORT
|
990
|
-
|
991
|
-
|
992
|
-
|
993
|
-
|
994
|
-
OPENSSL_EXPORT int
|
995
|
-
|
996
|
-
OPENSSL_EXPORT int
|
1005
|
+
OPENSSL_EXPORT X509_NAME_ENTRY *X509_NAME_delete_entry(X509_NAME *name,
|
1006
|
+
int loc);
|
1007
|
+
OPENSSL_EXPORT int X509_NAME_add_entry(X509_NAME *name, X509_NAME_ENTRY *ne,
|
1008
|
+
int loc, int set);
|
1009
|
+
OPENSSL_EXPORT int X509_NAME_add_entry_by_OBJ(X509_NAME *name, ASN1_OBJECT *obj,
|
1010
|
+
int type,
|
1011
|
+
const unsigned char *bytes,
|
1012
|
+
int len, int loc, int set);
|
1013
|
+
OPENSSL_EXPORT int X509_NAME_add_entry_by_NID(X509_NAME *name, int nid,
|
1014
|
+
int type,
|
1015
|
+
const unsigned char *bytes,
|
1016
|
+
int len, int loc, int set);
|
1017
|
+
OPENSSL_EXPORT X509_NAME_ENTRY *X509_NAME_ENTRY_create_by_txt(
|
1018
|
+
X509_NAME_ENTRY **ne, const char *field, int type,
|
1019
|
+
const unsigned char *bytes, int len);
|
1020
|
+
OPENSSL_EXPORT X509_NAME_ENTRY *X509_NAME_ENTRY_create_by_NID(
|
1021
|
+
X509_NAME_ENTRY **ne, int nid, int type, const unsigned char *bytes,
|
1022
|
+
int len);
|
1023
|
+
OPENSSL_EXPORT int X509_NAME_add_entry_by_txt(X509_NAME *name,
|
1024
|
+
const char *field, int type,
|
1025
|
+
const unsigned char *bytes,
|
1026
|
+
int len, int loc, int set);
|
1027
|
+
OPENSSL_EXPORT X509_NAME_ENTRY *X509_NAME_ENTRY_create_by_OBJ(
|
1028
|
+
X509_NAME_ENTRY **ne, const ASN1_OBJECT *obj, int type,
|
1029
|
+
const unsigned char *bytes, int len);
|
1030
|
+
OPENSSL_EXPORT int X509_NAME_ENTRY_set_object(X509_NAME_ENTRY *ne,
|
1031
|
+
const ASN1_OBJECT *obj);
|
1032
|
+
OPENSSL_EXPORT int X509_NAME_ENTRY_set_data(X509_NAME_ENTRY *ne, int type,
|
1033
|
+
const unsigned char *bytes,
|
1034
|
+
int len);
|
1035
|
+
OPENSSL_EXPORT ASN1_OBJECT *X509_NAME_ENTRY_get_object(X509_NAME_ENTRY *ne);
|
1036
|
+
OPENSSL_EXPORT ASN1_STRING *X509_NAME_ENTRY_get_data(X509_NAME_ENTRY *ne);
|
1037
|
+
|
1038
|
+
OPENSSL_EXPORT int X509v3_get_ext_count(const STACK_OF(X509_EXTENSION) * x);
|
1039
|
+
OPENSSL_EXPORT int X509v3_get_ext_by_NID(const STACK_OF(X509_EXTENSION) * x,
|
1040
|
+
int nid, int lastpos);
|
1041
|
+
OPENSSL_EXPORT int X509v3_get_ext_by_OBJ(const STACK_OF(X509_EXTENSION) * x,
|
1042
|
+
const ASN1_OBJECT *obj, int lastpos);
|
1043
|
+
OPENSSL_EXPORT int X509v3_get_ext_by_critical(const STACK_OF(X509_EXTENSION) *
|
1044
|
+
x,
|
1045
|
+
int crit, int lastpos);
|
1046
|
+
OPENSSL_EXPORT X509_EXTENSION *X509v3_get_ext(const STACK_OF(X509_EXTENSION) *
|
1047
|
+
x,
|
1048
|
+
int loc);
|
1049
|
+
OPENSSL_EXPORT X509_EXTENSION *X509v3_delete_ext(STACK_OF(X509_EXTENSION) * x,
|
1050
|
+
int loc);
|
1051
|
+
OPENSSL_EXPORT STACK_OF(X509_EXTENSION) *
|
1052
|
+
X509v3_add_ext(STACK_OF(X509_EXTENSION) * *x, X509_EXTENSION *ex, int loc);
|
1053
|
+
|
1054
|
+
OPENSSL_EXPORT int X509_get_ext_count(X509 *x);
|
1055
|
+
OPENSSL_EXPORT int X509_get_ext_by_NID(X509 *x, int nid, int lastpos);
|
1056
|
+
OPENSSL_EXPORT int X509_get_ext_by_OBJ(X509 *x, ASN1_OBJECT *obj, int lastpos);
|
1057
|
+
OPENSSL_EXPORT int X509_get_ext_by_critical(X509 *x, int crit, int lastpos);
|
997
1058
|
OPENSSL_EXPORT X509_EXTENSION *X509_get_ext(X509 *x, int loc);
|
998
1059
|
OPENSSL_EXPORT X509_EXTENSION *X509_delete_ext(X509 *x, int loc);
|
999
|
-
OPENSSL_EXPORT int
|
1000
|
-
OPENSSL_EXPORT void
|
1001
|
-
OPENSSL_EXPORT int
|
1002
|
-
|
1003
|
-
|
1004
|
-
OPENSSL_EXPORT int
|
1005
|
-
OPENSSL_EXPORT int
|
1006
|
-
OPENSSL_EXPORT int
|
1007
|
-
|
1060
|
+
OPENSSL_EXPORT int X509_add_ext(X509 *x, X509_EXTENSION *ex, int loc);
|
1061
|
+
OPENSSL_EXPORT void *X509_get_ext_d2i(X509 *x, int nid, int *crit, int *idx);
|
1062
|
+
OPENSSL_EXPORT int X509_add1_ext_i2d(X509 *x, int nid, void *value, int crit,
|
1063
|
+
unsigned long flags);
|
1064
|
+
|
1065
|
+
OPENSSL_EXPORT int X509_CRL_get_ext_count(X509_CRL *x);
|
1066
|
+
OPENSSL_EXPORT int X509_CRL_get_ext_by_NID(X509_CRL *x, int nid, int lastpos);
|
1067
|
+
OPENSSL_EXPORT int X509_CRL_get_ext_by_OBJ(X509_CRL *x, ASN1_OBJECT *obj,
|
1068
|
+
int lastpos);
|
1069
|
+
OPENSSL_EXPORT int X509_CRL_get_ext_by_critical(X509_CRL *x, int crit,
|
1070
|
+
int lastpos);
|
1008
1071
|
OPENSSL_EXPORT X509_EXTENSION *X509_CRL_get_ext(X509_CRL *x, int loc);
|
1009
1072
|
OPENSSL_EXPORT X509_EXTENSION *X509_CRL_delete_ext(X509_CRL *x, int loc);
|
1010
|
-
OPENSSL_EXPORT int
|
1011
|
-
OPENSSL_EXPORT void
|
1012
|
-
|
1013
|
-
|
1014
|
-
|
1015
|
-
|
1016
|
-
OPENSSL_EXPORT int
|
1017
|
-
OPENSSL_EXPORT int
|
1018
|
-
|
1073
|
+
OPENSSL_EXPORT int X509_CRL_add_ext(X509_CRL *x, X509_EXTENSION *ex, int loc);
|
1074
|
+
OPENSSL_EXPORT void *X509_CRL_get_ext_d2i(X509_CRL *x, int nid, int *crit,
|
1075
|
+
int *idx);
|
1076
|
+
OPENSSL_EXPORT int X509_CRL_add1_ext_i2d(X509_CRL *x, int nid, void *value,
|
1077
|
+
int crit, unsigned long flags);
|
1078
|
+
|
1079
|
+
OPENSSL_EXPORT int X509_REVOKED_get_ext_count(X509_REVOKED *x);
|
1080
|
+
OPENSSL_EXPORT int X509_REVOKED_get_ext_by_NID(X509_REVOKED *x, int nid,
|
1081
|
+
int lastpos);
|
1082
|
+
OPENSSL_EXPORT int X509_REVOKED_get_ext_by_OBJ(X509_REVOKED *x,
|
1083
|
+
ASN1_OBJECT *obj, int lastpos);
|
1084
|
+
OPENSSL_EXPORT int X509_REVOKED_get_ext_by_critical(X509_REVOKED *x, int crit,
|
1085
|
+
int lastpos);
|
1019
1086
|
OPENSSL_EXPORT X509_EXTENSION *X509_REVOKED_get_ext(X509_REVOKED *x, int loc);
|
1020
|
-
OPENSSL_EXPORT X509_EXTENSION *X509_REVOKED_delete_ext(X509_REVOKED *x,
|
1021
|
-
|
1022
|
-
OPENSSL_EXPORT
|
1023
|
-
|
1024
|
-
|
1025
|
-
|
1026
|
-
OPENSSL_EXPORT
|
1027
|
-
|
1028
|
-
|
1029
|
-
|
1030
|
-
OPENSSL_EXPORT
|
1031
|
-
|
1032
|
-
OPENSSL_EXPORT
|
1033
|
-
|
1034
|
-
|
1087
|
+
OPENSSL_EXPORT X509_EXTENSION *X509_REVOKED_delete_ext(X509_REVOKED *x,
|
1088
|
+
int loc);
|
1089
|
+
OPENSSL_EXPORT int X509_REVOKED_add_ext(X509_REVOKED *x, X509_EXTENSION *ex,
|
1090
|
+
int loc);
|
1091
|
+
OPENSSL_EXPORT void *X509_REVOKED_get_ext_d2i(X509_REVOKED *x, int nid,
|
1092
|
+
int *crit, int *idx);
|
1093
|
+
OPENSSL_EXPORT int X509_REVOKED_add1_ext_i2d(X509_REVOKED *x, int nid,
|
1094
|
+
void *value, int crit,
|
1095
|
+
unsigned long flags);
|
1096
|
+
|
1097
|
+
OPENSSL_EXPORT X509_EXTENSION *X509_EXTENSION_create_by_NID(
|
1098
|
+
X509_EXTENSION **ex, int nid, int crit, ASN1_OCTET_STRING *data);
|
1099
|
+
OPENSSL_EXPORT X509_EXTENSION *X509_EXTENSION_create_by_OBJ(
|
1100
|
+
X509_EXTENSION **ex, const ASN1_OBJECT *obj, int crit,
|
1101
|
+
ASN1_OCTET_STRING *data);
|
1102
|
+
OPENSSL_EXPORT int X509_EXTENSION_set_object(X509_EXTENSION *ex,
|
1103
|
+
const ASN1_OBJECT *obj);
|
1104
|
+
OPENSSL_EXPORT int X509_EXTENSION_set_critical(X509_EXTENSION *ex, int crit);
|
1105
|
+
OPENSSL_EXPORT int X509_EXTENSION_set_data(X509_EXTENSION *ex,
|
1106
|
+
ASN1_OCTET_STRING *data);
|
1107
|
+
OPENSSL_EXPORT ASN1_OBJECT *X509_EXTENSION_get_object(X509_EXTENSION *ex);
|
1035
1108
|
OPENSSL_EXPORT ASN1_OCTET_STRING *X509_EXTENSION_get_data(X509_EXTENSION *ne);
|
1036
|
-
OPENSSL_EXPORT int
|
1037
|
-
|
1038
|
-
OPENSSL_EXPORT int X509at_get_attr_count(const STACK_OF(X509_ATTRIBUTE) *x);
|
1039
|
-
OPENSSL_EXPORT int X509at_get_attr_by_NID(const STACK_OF(X509_ATTRIBUTE) *x,
|
1040
|
-
|
1041
|
-
OPENSSL_EXPORT int X509at_get_attr_by_OBJ(const STACK_OF(X509_ATTRIBUTE) *sk,
|
1042
|
-
|
1043
|
-
OPENSSL_EXPORT X509_ATTRIBUTE *X509at_get_attr(const STACK_OF(X509_ATTRIBUTE) *
|
1044
|
-
|
1045
|
-
|
1046
|
-
|
1047
|
-
|
1048
|
-
|
1049
|
-
|
1050
|
-
OPENSSL_EXPORT STACK_OF(X509_ATTRIBUTE) *
|
1051
|
-
|
1052
|
-
|
1053
|
-
|
1054
|
-
|
1055
|
-
|
1056
|
-
|
1057
|
-
|
1058
|
-
|
1059
|
-
|
1060
|
-
OPENSSL_EXPORT
|
1061
|
-
|
1062
|
-
|
1063
|
-
|
1064
|
-
|
1065
|
-
OPENSSL_EXPORT
|
1109
|
+
OPENSSL_EXPORT int X509_EXTENSION_get_critical(X509_EXTENSION *ex);
|
1110
|
+
|
1111
|
+
OPENSSL_EXPORT int X509at_get_attr_count(const STACK_OF(X509_ATTRIBUTE) * x);
|
1112
|
+
OPENSSL_EXPORT int X509at_get_attr_by_NID(const STACK_OF(X509_ATTRIBUTE) * x,
|
1113
|
+
int nid, int lastpos);
|
1114
|
+
OPENSSL_EXPORT int X509at_get_attr_by_OBJ(const STACK_OF(X509_ATTRIBUTE) * sk,
|
1115
|
+
const ASN1_OBJECT *obj, int lastpos);
|
1116
|
+
OPENSSL_EXPORT X509_ATTRIBUTE *X509at_get_attr(const STACK_OF(X509_ATTRIBUTE) *
|
1117
|
+
x,
|
1118
|
+
int loc);
|
1119
|
+
OPENSSL_EXPORT X509_ATTRIBUTE *X509at_delete_attr(STACK_OF(X509_ATTRIBUTE) * x,
|
1120
|
+
int loc);
|
1121
|
+
OPENSSL_EXPORT STACK_OF(X509_ATTRIBUTE) *
|
1122
|
+
X509at_add1_attr(STACK_OF(X509_ATTRIBUTE) * *x, X509_ATTRIBUTE *attr);
|
1123
|
+
OPENSSL_EXPORT STACK_OF(X509_ATTRIBUTE) *
|
1124
|
+
X509at_add1_attr_by_OBJ(STACK_OF(X509_ATTRIBUTE) * *x,
|
1125
|
+
const ASN1_OBJECT *obj, int type,
|
1126
|
+
const unsigned char *bytes, int len);
|
1127
|
+
OPENSSL_EXPORT STACK_OF(X509_ATTRIBUTE) *
|
1128
|
+
X509at_add1_attr_by_NID(STACK_OF(X509_ATTRIBUTE) * *x, int nid, int type,
|
1129
|
+
const unsigned char *bytes, int len);
|
1130
|
+
OPENSSL_EXPORT STACK_OF(X509_ATTRIBUTE) *
|
1131
|
+
X509at_add1_attr_by_txt(STACK_OF(X509_ATTRIBUTE) * *x, const char *attrname,
|
1132
|
+
int type, const unsigned char *bytes, int len);
|
1133
|
+
OPENSSL_EXPORT void *X509at_get0_data_by_OBJ(STACK_OF(X509_ATTRIBUTE) * x,
|
1134
|
+
ASN1_OBJECT *obj, int lastpos,
|
1135
|
+
int type);
|
1136
|
+
OPENSSL_EXPORT X509_ATTRIBUTE *X509_ATTRIBUTE_create_by_NID(
|
1137
|
+
X509_ATTRIBUTE **attr, int nid, int atrtype, const void *data, int len);
|
1138
|
+
OPENSSL_EXPORT X509_ATTRIBUTE *X509_ATTRIBUTE_create_by_OBJ(
|
1139
|
+
X509_ATTRIBUTE **attr, const ASN1_OBJECT *obj, int atrtype,
|
1140
|
+
const void *data, int len);
|
1141
|
+
OPENSSL_EXPORT X509_ATTRIBUTE *X509_ATTRIBUTE_create_by_txt(
|
1142
|
+
X509_ATTRIBUTE **attr, const char *atrname, int type,
|
1143
|
+
const unsigned char *bytes, int len);
|
1144
|
+
OPENSSL_EXPORT int X509_ATTRIBUTE_set1_object(X509_ATTRIBUTE *attr,
|
1145
|
+
const ASN1_OBJECT *obj);
|
1146
|
+
OPENSSL_EXPORT int X509_ATTRIBUTE_set1_data(X509_ATTRIBUTE *attr, int attrtype,
|
1147
|
+
const void *data, int len);
|
1066
1148
|
OPENSSL_EXPORT void *X509_ATTRIBUTE_get0_data(X509_ATTRIBUTE *attr, int idx,
|
1067
|
-
|
1149
|
+
int atrtype, void *data);
|
1068
1150
|
OPENSSL_EXPORT int X509_ATTRIBUTE_count(X509_ATTRIBUTE *attr);
|
1069
1151
|
OPENSSL_EXPORT ASN1_OBJECT *X509_ATTRIBUTE_get0_object(X509_ATTRIBUTE *attr);
|
1070
|
-
OPENSSL_EXPORT ASN1_TYPE *X509_ATTRIBUTE_get0_type(X509_ATTRIBUTE *attr,
|
1152
|
+
OPENSSL_EXPORT ASN1_TYPE *X509_ATTRIBUTE_get0_type(X509_ATTRIBUTE *attr,
|
1153
|
+
int idx);
|
1071
1154
|
|
1072
|
-
OPENSSL_EXPORT int
|
1155
|
+
OPENSSL_EXPORT int X509_verify_cert(X509_STORE_CTX *ctx);
|
1073
1156
|
|
1074
|
-
|
1075
|
-
OPENSSL_EXPORT X509 *X509_find_by_issuer_and_serial(STACK_OF(X509) *sk,
|
1076
|
-
|
1077
|
-
|
1157
|
+
// lookup a cert from a X509 STACK
|
1158
|
+
OPENSSL_EXPORT X509 *X509_find_by_issuer_and_serial(STACK_OF(X509) * sk,
|
1159
|
+
X509_NAME *name,
|
1160
|
+
ASN1_INTEGER *serial);
|
1161
|
+
OPENSSL_EXPORT X509 *X509_find_by_subject(STACK_OF(X509) * sk, X509_NAME *name);
|
1078
1162
|
|
1079
|
-
|
1163
|
+
// PKCS#8 utilities
|
1080
1164
|
|
1081
1165
|
DECLARE_ASN1_FUNCTIONS(PKCS8_PRIV_KEY_INFO)
|
1082
1166
|
|
1083
1167
|
OPENSSL_EXPORT EVP_PKEY *EVP_PKCS82PKEY(PKCS8_PRIV_KEY_INFO *p8);
|
1084
1168
|
OPENSSL_EXPORT PKCS8_PRIV_KEY_INFO *EVP_PKEY2PKCS8(EVP_PKEY *pkey);
|
1085
|
-
OPENSSL_EXPORT PKCS8_PRIV_KEY_INFO *EVP_PKEY2PKCS8_broken(EVP_PKEY *pkey, int broken);
|
1086
|
-
OPENSSL_EXPORT PKCS8_PRIV_KEY_INFO *PKCS8_set_broken(PKCS8_PRIV_KEY_INFO *p8, int broken);
|
1087
1169
|
|
1088
1170
|
OPENSSL_EXPORT int PKCS8_pkey_set0(PKCS8_PRIV_KEY_INFO *priv, ASN1_OBJECT *aobj,
|
1089
|
-
|
1090
|
-
|
1171
|
+
int version, int ptype, void *pval,
|
1172
|
+
unsigned char *penc, int penclen);
|
1091
1173
|
OPENSSL_EXPORT int PKCS8_pkey_get0(ASN1_OBJECT **ppkalg,
|
1092
|
-
|
1093
|
-
|
1094
|
-
PKCS8_PRIV_KEY_INFO *p8);
|
1174
|
+
const unsigned char **pk, int *ppklen,
|
1175
|
+
X509_ALGOR **pa, PKCS8_PRIV_KEY_INFO *p8);
|
1095
1176
|
|
1096
|
-
OPENSSL_EXPORT int X509_PUBKEY_set0_param(X509_PUBKEY *pub,
|
1097
|
-
|
1098
|
-
|
1177
|
+
OPENSSL_EXPORT int X509_PUBKEY_set0_param(X509_PUBKEY *pub,
|
1178
|
+
const ASN1_OBJECT *aobj, int ptype,
|
1179
|
+
void *pval, unsigned char *penc,
|
1180
|
+
int penclen);
|
1099
1181
|
OPENSSL_EXPORT int X509_PUBKEY_get0_param(ASN1_OBJECT **ppkalg,
|
1100
|
-
|
1101
|
-
|
1102
|
-
X509_PUBKEY *pub);
|
1182
|
+
const unsigned char **pk, int *ppklen,
|
1183
|
+
X509_ALGOR **pa, X509_PUBKEY *pub);
|
1103
1184
|
|
1104
1185
|
OPENSSL_EXPORT int X509_check_trust(X509 *x, int id, int flags);
|
1105
1186
|
OPENSSL_EXPORT int X509_TRUST_get_count(void);
|
1106
|
-
OPENSSL_EXPORT X509_TRUST *
|
1187
|
+
OPENSSL_EXPORT X509_TRUST *X509_TRUST_get0(int idx);
|
1107
1188
|
OPENSSL_EXPORT int X509_TRUST_get_by_id(int id);
|
1108
|
-
OPENSSL_EXPORT int X509_TRUST_add(int id, int flags,
|
1109
|
-
|
1189
|
+
OPENSSL_EXPORT int X509_TRUST_add(int id, int flags,
|
1190
|
+
int (*ck)(X509_TRUST *, X509 *, int),
|
1191
|
+
char *name, int arg1, void *arg2);
|
1110
1192
|
OPENSSL_EXPORT void X509_TRUST_cleanup(void);
|
1111
1193
|
OPENSSL_EXPORT int X509_TRUST_get_flags(X509_TRUST *xp);
|
1112
1194
|
OPENSSL_EXPORT char *X509_TRUST_get0_name(X509_TRUST *xp);
|
@@ -1124,7 +1206,7 @@ DECLARE_ASN1_FUNCTIONS(RSA_PSS_PARAMS)
|
|
1124
1206
|
|
1125
1207
|
|
1126
1208
|
|
1127
|
-
#ifdef
|
1209
|
+
#ifdef __cplusplus
|
1128
1210
|
}
|
1129
1211
|
#endif
|
1130
1212
|
|
@@ -1162,8 +1244,8 @@ using ScopedX509_STORE_CTX =
|
|
1162
1244
|
|
1163
1245
|
BSSL_NAMESPACE_END
|
1164
1246
|
|
1165
|
-
}
|
1166
|
-
#endif
|
1247
|
+
} // extern C++
|
1248
|
+
#endif // !BORINGSSL_NO_CXX
|
1167
1249
|
|
1168
1250
|
#define X509_R_AKID_MISMATCH 100
|
1169
1251
|
#define X509_R_BAD_PKCS7_VERSION 101
|
@@ -1203,5 +1285,8 @@ BSSL_NAMESPACE_END
|
|
1203
1285
|
#define X509_R_NAME_TOO_LONG 135
|
1204
1286
|
#define X509_R_INVALID_PARAMETER 136
|
1205
1287
|
#define X509_R_SIGNATURE_ALGORITHM_MISMATCH 137
|
1288
|
+
#define X509_R_DELTA_CRL_WITHOUT_CRL_NUMBER 138
|
1289
|
+
#define X509_R_INVALID_FIELD_FOR_VERSION 139
|
1290
|
+
#define X509_R_INVALID_VERSION 140
|
1206
1291
|
|
1207
1292
|
#endif
|