Chunk 8 of CMP contribution to OpenSSL: CMP server and cmp_mock_srv.c for testing
[openssl.git] / include / openssl / crmf.h
1 /*-
2  * Copyright 2007-2019 The OpenSSL Project Authors. All Rights Reserved.
3  * Copyright Nokia 2007-2019
4  * Copyright Siemens AG 2015-2019
5  *
6  * Licensed under the Apache License 2.0 (the "License").  You may not use
7  * this file except in compliance with the License.  You can obtain a copy
8  * in the file LICENSE in the source distribution or at
9  * https://www.openssl.org/source/license.html
10  *
11  * CRMF (RFC 4211) implementation by M. Peylo, M. Viljanen, and D. von Oheimb.
12  */
13
14 #ifndef OPENSSL_CRMF_H
15 # define OPENSSL_CRMF_H
16
17 # include <openssl/opensslconf.h>
18
19 # ifndef OPENSSL_NO_CRMF
20 #  include <openssl/opensslv.h>
21 #  include <openssl/safestack.h>
22 #  include <openssl/crmferr.h>
23 #  include <openssl/x509v3.h> /* for GENERAL_NAME etc. */
24
25 /* explicit #includes not strictly needed since implied by the above: */
26 #  include <openssl/types.h>
27 #  include <openssl/x509.h>
28
29 #  ifdef __cplusplus
30 extern "C" {
31 #  endif
32
33 #  define OSSL_CRMF_POPOPRIVKEY_THISMESSAGE          0
34 #  define OSSL_CRMF_POPOPRIVKEY_SUBSEQUENTMESSAGE    1
35 #  define OSSL_CRMF_POPOPRIVKEY_DHMAC                2
36 #  define OSSL_CRMF_POPOPRIVKEY_AGREEMAC             3
37 #  define OSSL_CRMF_POPOPRIVKEY_ENCRYPTEDKEY         4
38
39 #  define OSSL_CRMF_SUBSEQUENTMESSAGE_ENCRCERT       0
40 #  define OSSL_CRMF_SUBSEQUENTMESSAGE_CHALLENGERESP  1
41
42 typedef struct ossl_crmf_encryptedvalue_st OSSL_CRMF_ENCRYPTEDVALUE;
43 DECLARE_ASN1_FUNCTIONS(OSSL_CRMF_ENCRYPTEDVALUE)
44 typedef struct ossl_crmf_msg_st OSSL_CRMF_MSG;
45 DECLARE_ASN1_FUNCTIONS(OSSL_CRMF_MSG)
46 DEFINE_STACK_OF(OSSL_CRMF_MSG)
47 typedef struct ossl_crmf_attributetypeandvalue_st OSSL_CRMF_ATTRIBUTETYPEANDVALUE;
48 typedef struct ossl_crmf_pbmparameter_st OSSL_CRMF_PBMPARAMETER;
49 DECLARE_ASN1_FUNCTIONS(OSSL_CRMF_PBMPARAMETER)
50 typedef struct ossl_crmf_poposigningkey_st OSSL_CRMF_POPOSIGNINGKEY;
51 typedef struct ossl_crmf_certrequest_st OSSL_CRMF_CERTREQUEST;
52 typedef struct ossl_crmf_certid_st OSSL_CRMF_CERTID;
53 DECLARE_ASN1_FUNCTIONS(OSSL_CRMF_CERTID)
54 DEFINE_STACK_OF(OSSL_CRMF_CERTID)
55
56 typedef struct ossl_crmf_pkipublicationinfo_st OSSL_CRMF_PKIPUBLICATIONINFO;
57 DECLARE_ASN1_FUNCTIONS(OSSL_CRMF_PKIPUBLICATIONINFO)
58 typedef struct ossl_crmf_singlepubinfo_st OSSL_CRMF_SINGLEPUBINFO;
59 DECLARE_ASN1_FUNCTIONS(OSSL_CRMF_SINGLEPUBINFO)
60 typedef struct ossl_crmf_certtemplate_st OSSL_CRMF_CERTTEMPLATE;
61 DECLARE_ASN1_FUNCTIONS(OSSL_CRMF_CERTTEMPLATE)
62 typedef STACK_OF(OSSL_CRMF_MSG) OSSL_CRMF_MSGS;
63 DECLARE_ASN1_FUNCTIONS(OSSL_CRMF_MSGS)
64
65 typedef struct ossl_crmf_optionalvalidity_st OSSL_CRMF_OPTIONALVALIDITY;
66
67 /* crmf_pbm.c */
68 OSSL_CRMF_PBMPARAMETER *OSSL_CRMF_pbmp_new(size_t slen, int owfnid,
69                                            int itercnt, int macnid);
70 int OSSL_CRMF_pbm_new(const OSSL_CRMF_PBMPARAMETER *pbmp,
71                       const unsigned char *msg, size_t msglen,
72                       const unsigned char *sec, size_t seclen,
73                       unsigned char **mac, size_t *maclen);
74
75 /* crmf_lib.c */
76 int OSSL_CRMF_MSG_set1_regCtrl_regToken(OSSL_CRMF_MSG *msg,
77                                         const ASN1_UTF8STRING *tok);
78 int OSSL_CRMF_MSG_set1_regCtrl_authenticator(OSSL_CRMF_MSG *msg,
79                                              const ASN1_UTF8STRING *auth);
80 int
81 OSSL_CRMF_MSG_PKIPublicationInfo_push0_SinglePubInfo(OSSL_CRMF_PKIPUBLICATIONINFO *pi,
82                                                      OSSL_CRMF_SINGLEPUBINFO *spi);
83 #  define OSSL_CRMF_PUB_METHOD_DONTCARE 0
84 #  define OSSL_CRMF_PUB_METHOD_X500     1
85 #  define OSSL_CRMF_PUB_METHOD_WEB      2
86 #  define OSSL_CRMF_PUB_METHOD_LDAP     3
87 int OSSL_CRMF_MSG_set0_SinglePubInfo(OSSL_CRMF_SINGLEPUBINFO *spi,
88                                      int method, GENERAL_NAME *nm);
89 #  define OSSL_CRMF_PUB_ACTION_DONTPUBLISH   0
90 #  define OSSL_CRMF_PUB_ACTION_PLEASEPUBLISH 1
91 int OSSL_CRMF_MSG_set_PKIPublicationInfo_action(OSSL_CRMF_PKIPUBLICATIONINFO *pi,
92                                                 int action);
93 int OSSL_CRMF_MSG_set1_regCtrl_pkiPublicationInfo(OSSL_CRMF_MSG *msg,
94                                                   const OSSL_CRMF_PKIPUBLICATIONINFO *pi);
95 int OSSL_CRMF_MSG_set1_regCtrl_protocolEncrKey(OSSL_CRMF_MSG *msg,
96                                                const X509_PUBKEY *pubkey);
97 int OSSL_CRMF_MSG_set1_regCtrl_oldCertID(OSSL_CRMF_MSG *msg,
98                                          const OSSL_CRMF_CERTID *cid);
99 OSSL_CRMF_CERTID *OSSL_CRMF_CERTID_gen(const X509_NAME *issuer,
100                                        const ASN1_INTEGER *serial);
101
102 int OSSL_CRMF_MSG_set1_regInfo_utf8Pairs(OSSL_CRMF_MSG *msg,
103                                          const ASN1_UTF8STRING *utf8pairs);
104 int OSSL_CRMF_MSG_set1_regInfo_certReq(OSSL_CRMF_MSG *msg,
105                                        const OSSL_CRMF_CERTREQUEST *cr);
106
107 int OSSL_CRMF_MSG_set_validity(OSSL_CRMF_MSG *crm, time_t from, time_t to);
108 int OSSL_CRMF_MSG_set_certReqId(OSSL_CRMF_MSG *crm, int rid);
109 int OSSL_CRMF_MSG_get_certReqId(const OSSL_CRMF_MSG *crm);
110 int OSSL_CRMF_MSG_set0_extensions(OSSL_CRMF_MSG *crm, X509_EXTENSIONS *exts);
111
112 int OSSL_CRMF_MSG_push0_extension(OSSL_CRMF_MSG *crm, X509_EXTENSION *ext);
113 #  define OSSL_CRMF_POPO_NONE       -1
114 #  define OSSL_CRMF_POPO_RAVERIFIED 0
115 #  define OSSL_CRMF_POPO_SIGNATURE  1
116 #  define OSSL_CRMF_POPO_KEYENC     2
117 #  define OSSL_CRMF_POPO_KEYAGREE   3
118 int OSSL_CRMF_MSG_create_popo(OSSL_CRMF_MSG *crm, EVP_PKEY *pkey,
119                               int dgst, int ppmtd);
120 int OSSL_CRMF_MSGS_verify_popo(const OSSL_CRMF_MSGS *reqs,
121                                int rid, int acceptRAVerified);
122 OSSL_CRMF_CERTTEMPLATE *OSSL_CRMF_MSG_get0_tmpl(const OSSL_CRMF_MSG *crm);
123 ASN1_INTEGER
124 *OSSL_CRMF_CERTTEMPLATE_get0_serialNumber(const OSSL_CRMF_CERTTEMPLATE *tmpl);
125 X509_NAME
126 *OSSL_CRMF_CERTTEMPLATE_get0_issuer(const OSSL_CRMF_CERTTEMPLATE *tmpl);
127 X509_NAME *OSSL_CRMF_CERTID_get0_issuer(const OSSL_CRMF_CERTID *cid);
128 ASN1_INTEGER *OSSL_CRMF_CERTID_get0_serialNumber(const OSSL_CRMF_CERTID *cid);
129 int OSSL_CRMF_CERTTEMPLATE_fill(OSSL_CRMF_CERTTEMPLATE *tmpl,
130                                 EVP_PKEY *pubkey,
131                                 const X509_NAME *subject,
132                                 const X509_NAME *issuer,
133                                 const ASN1_INTEGER *serial);
134 X509
135 *OSSL_CRMF_ENCRYPTEDVALUE_get1_encCert(const OSSL_CRMF_ENCRYPTEDVALUE *ecert,
136                                        EVP_PKEY *pkey);
137
138 #  ifdef __cplusplus
139 }
140 #  endif
141 # endif /* !defined(OPENSSL_NO_CRMF) */
142 #endif /* !defined(OPENSSL_CRMF_H) */