x509.h

Last change on this file was 109052, checked in by vboxsync, 4 weeks ago
openssl-3.4.1: Applied our changes, regenerated files, added missing files and functions. This time with a three way merge. bugref:10890
Property svn:eol-style set to `native` Property svn:keywords set to `Author Date Id Revision`
File size: 71.2 KB

Line
1	/*
2	* WARNING: do not edit!
3	* Generated by Makefile from x509.h.in
4	*
5	* Copyright 1995-2024 The OpenSSL Project Authors. All Rights Reserved.
6	* Copyright (c) 2002, Oracle and/or its affiliates. All rights reserved
7	*
8	* Licensed under the Apache License 2.0 (the "License"). You may not use
9	* this file except in compliance with the License. You can obtain a copy
10	* in the file LICENSE in the source distribution or at
11	* https://www.openssl.org/source/license.html
12	*/
13
14
15
16	#ifndef OPENSSL_X509_H
17	# define OPENSSL_X509_H
18	# pragma once
19
20	# include <openssl/macros.h>
21	# ifndef OPENSSL_NO_DEPRECATED_3_0
22	# define HEADER_X509_H
23	# endif
24
25	# include <openssl/e_os2.h>
26	# include <openssl/types.h>
27	# include <openssl/symhacks.h>
28	# include <openssl/buffer.h>
29	# include <openssl/evp.h>
30	# include <openssl/bio.h>
31	# include <openssl/asn1.h>
32	# include <openssl/safestack.h>
33	# include <openssl/ec.h>
34
35	# ifndef OPENSSL_NO_DEPRECATED_1_1_0
36	# include <openssl/rsa.h>
37	# include <openssl/dsa.h>
38	# include <openssl/dh.h>
39	# endif
40
41	# include <openssl/sha.h>
42	# include <openssl/x509err.h>
43	# ifndef OPENSSL_NO_STDIO
44	# include <stdio.h>
45	# endif
46
47	#ifdef __cplusplus
48	extern "C" {
49	#endif
50
51	/* Needed stacks for types defined in other headers */
52	SKM_DEFINE_STACK_OF_INTERNAL(X509_NAME, X509_NAME, X509_NAME)
53	#define sk_X509_NAME_num(sk) OPENSSL_sk_num(ossl_check_const_X509_NAME_sk_type(sk))
54	#define sk_X509_NAME_value(sk, idx) ((X509_NAME *)OPENSSL_sk_value(ossl_check_const_X509_NAME_sk_type(sk), (idx)))
55	#define sk_X509_NAME_new(cmp) ((STACK_OF(X509_NAME) *)OPENSSL_sk_new(ossl_check_X509_NAME_compfunc_type(cmp)))
56	#define sk_X509_NAME_new_null() ((STACK_OF(X509_NAME) *)OPENSSL_sk_new_null())
57	#define sk_X509_NAME_new_reserve(cmp, n) ((STACK_OF(X509_NAME) *)OPENSSL_sk_new_reserve(ossl_check_X509_NAME_compfunc_type(cmp), (n)))
58	#define sk_X509_NAME_reserve(sk, n) OPENSSL_sk_reserve(ossl_check_X509_NAME_sk_type(sk), (n))
59	#define sk_X509_NAME_free(sk) OPENSSL_sk_free(ossl_check_X509_NAME_sk_type(sk))
60	#define sk_X509_NAME_zero(sk) OPENSSL_sk_zero(ossl_check_X509_NAME_sk_type(sk))
61	#define sk_X509_NAME_delete(sk, i) ((X509_NAME *)OPENSSL_sk_delete(ossl_check_X509_NAME_sk_type(sk), (i)))
62	#define sk_X509_NAME_delete_ptr(sk, ptr) ((X509_NAME *)OPENSSL_sk_delete_ptr(ossl_check_X509_NAME_sk_type(sk), ossl_check_X509_NAME_type(ptr)))
63	#define sk_X509_NAME_push(sk, ptr) OPENSSL_sk_push(ossl_check_X509_NAME_sk_type(sk), ossl_check_X509_NAME_type(ptr))
64	#define sk_X509_NAME_unshift(sk, ptr) OPENSSL_sk_unshift(ossl_check_X509_NAME_sk_type(sk), ossl_check_X509_NAME_type(ptr))
65	#define sk_X509_NAME_pop(sk) ((X509_NAME *)OPENSSL_sk_pop(ossl_check_X509_NAME_sk_type(sk)))
66	#define sk_X509_NAME_shift(sk) ((X509_NAME *)OPENSSL_sk_shift(ossl_check_X509_NAME_sk_type(sk)))
67	#define sk_X509_NAME_pop_free(sk, freefunc) OPENSSL_sk_pop_free(ossl_check_X509_NAME_sk_type(sk),ossl_check_X509_NAME_freefunc_type(freefunc))
68	#define sk_X509_NAME_insert(sk, ptr, idx) OPENSSL_sk_insert(ossl_check_X509_NAME_sk_type(sk), ossl_check_X509_NAME_type(ptr), (idx))
69	#define sk_X509_NAME_set(sk, idx, ptr) ((X509_NAME *)OPENSSL_sk_set(ossl_check_X509_NAME_sk_type(sk), (idx), ossl_check_X509_NAME_type(ptr)))
70	#define sk_X509_NAME_find(sk, ptr) OPENSSL_sk_find(ossl_check_X509_NAME_sk_type(sk), ossl_check_X509_NAME_type(ptr))
71	#define sk_X509_NAME_find_ex(sk, ptr) OPENSSL_sk_find_ex(ossl_check_X509_NAME_sk_type(sk), ossl_check_X509_NAME_type(ptr))
72	#define sk_X509_NAME_find_all(sk, ptr, pnum) OPENSSL_sk_find_all(ossl_check_X509_NAME_sk_type(sk), ossl_check_X509_NAME_type(ptr), pnum)
73	#define sk_X509_NAME_sort(sk) OPENSSL_sk_sort(ossl_check_X509_NAME_sk_type(sk))
74	#define sk_X509_NAME_is_sorted(sk) OPENSSL_sk_is_sorted(ossl_check_const_X509_NAME_sk_type(sk))
75	#define sk_X509_NAME_dup(sk) ((STACK_OF(X509_NAME) *)OPENSSL_sk_dup(ossl_check_const_X509_NAME_sk_type(sk)))
76	#define sk_X509_NAME_deep_copy(sk, copyfunc, freefunc) ((STACK_OF(X509_NAME) *)OPENSSL_sk_deep_copy(ossl_check_const_X509_NAME_sk_type(sk), ossl_check_X509_NAME_copyfunc_type(copyfunc), ossl_check_X509_NAME_freefunc_type(freefunc)))
77	#define sk_X509_NAME_set_cmp_func(sk, cmp) ((sk_X509_NAME_compfunc)OPENSSL_sk_set_cmp_func(ossl_check_X509_NAME_sk_type(sk), ossl_check_X509_NAME_compfunc_type(cmp)))
78	SKM_DEFINE_STACK_OF_INTERNAL(X509, X509, X509)
79	#define sk_X509_num(sk) OPENSSL_sk_num(ossl_check_const_X509_sk_type(sk))
80	#define sk_X509_value(sk, idx) ((X509 *)OPENSSL_sk_value(ossl_check_const_X509_sk_type(sk), (idx)))
81	#define sk_X509_new(cmp) ((STACK_OF(X509) *)OPENSSL_sk_new(ossl_check_X509_compfunc_type(cmp)))
82	#define sk_X509_new_null() ((STACK_OF(X509) *)OPENSSL_sk_new_null())
83	#define sk_X509_new_reserve(cmp, n) ((STACK_OF(X509) *)OPENSSL_sk_new_reserve(ossl_check_X509_compfunc_type(cmp), (n)))
84	#define sk_X509_reserve(sk, n) OPENSSL_sk_reserve(ossl_check_X509_sk_type(sk), (n))
85	#define sk_X509_free(sk) OPENSSL_sk_free(ossl_check_X509_sk_type(sk))
86	#define sk_X509_zero(sk) OPENSSL_sk_zero(ossl_check_X509_sk_type(sk))
87	#define sk_X509_delete(sk, i) ((X509 *)OPENSSL_sk_delete(ossl_check_X509_sk_type(sk), (i)))
88	#define sk_X509_delete_ptr(sk, ptr) ((X509 *)OPENSSL_sk_delete_ptr(ossl_check_X509_sk_type(sk), ossl_check_X509_type(ptr)))
89	#define sk_X509_push(sk, ptr) OPENSSL_sk_push(ossl_check_X509_sk_type(sk), ossl_check_X509_type(ptr))
90	#define sk_X509_unshift(sk, ptr) OPENSSL_sk_unshift(ossl_check_X509_sk_type(sk), ossl_check_X509_type(ptr))
91	#define sk_X509_pop(sk) ((X509 *)OPENSSL_sk_pop(ossl_check_X509_sk_type(sk)))
92	#define sk_X509_shift(sk) ((X509 *)OPENSSL_sk_shift(ossl_check_X509_sk_type(sk)))
93	#define sk_X509_pop_free(sk, freefunc) OPENSSL_sk_pop_free(ossl_check_X509_sk_type(sk),ossl_check_X509_freefunc_type(freefunc))
94	#define sk_X509_insert(sk, ptr, idx) OPENSSL_sk_insert(ossl_check_X509_sk_type(sk), ossl_check_X509_type(ptr), (idx))
95	#define sk_X509_set(sk, idx, ptr) ((X509 *)OPENSSL_sk_set(ossl_check_X509_sk_type(sk), (idx), ossl_check_X509_type(ptr)))
96	#define sk_X509_find(sk, ptr) OPENSSL_sk_find(ossl_check_X509_sk_type(sk), ossl_check_X509_type(ptr))
97	#define sk_X509_find_ex(sk, ptr) OPENSSL_sk_find_ex(ossl_check_X509_sk_type(sk), ossl_check_X509_type(ptr))
98	#define sk_X509_find_all(sk, ptr, pnum) OPENSSL_sk_find_all(ossl_check_X509_sk_type(sk), ossl_check_X509_type(ptr), pnum)
99	#define sk_X509_sort(sk) OPENSSL_sk_sort(ossl_check_X509_sk_type(sk))
100	#define sk_X509_is_sorted(sk) OPENSSL_sk_is_sorted(ossl_check_const_X509_sk_type(sk))
101	#define sk_X509_dup(sk) ((STACK_OF(X509) *)OPENSSL_sk_dup(ossl_check_const_X509_sk_type(sk)))
102	#define sk_X509_deep_copy(sk, copyfunc, freefunc) ((STACK_OF(X509) *)OPENSSL_sk_deep_copy(ossl_check_const_X509_sk_type(sk), ossl_check_X509_copyfunc_type(copyfunc), ossl_check_X509_freefunc_type(freefunc)))
103	#define sk_X509_set_cmp_func(sk, cmp) ((sk_X509_compfunc)OPENSSL_sk_set_cmp_func(ossl_check_X509_sk_type(sk), ossl_check_X509_compfunc_type(cmp)))
104	SKM_DEFINE_STACK_OF_INTERNAL(X509_REVOKED, X509_REVOKED, X509_REVOKED)
105	#define sk_X509_REVOKED_num(sk) OPENSSL_sk_num(ossl_check_const_X509_REVOKED_sk_type(sk))
106	#define sk_X509_REVOKED_value(sk, idx) ((X509_REVOKED *)OPENSSL_sk_value(ossl_check_const_X509_REVOKED_sk_type(sk), (idx)))
107	#define sk_X509_REVOKED_new(cmp) ((STACK_OF(X509_REVOKED) *)OPENSSL_sk_new(ossl_check_X509_REVOKED_compfunc_type(cmp)))
108	#define sk_X509_REVOKED_new_null() ((STACK_OF(X509_REVOKED) *)OPENSSL_sk_new_null())
109	#define sk_X509_REVOKED_new_reserve(cmp, n) ((STACK_OF(X509_REVOKED) *)OPENSSL_sk_new_reserve(ossl_check_X509_REVOKED_compfunc_type(cmp), (n)))
110	#define sk_X509_REVOKED_reserve(sk, n) OPENSSL_sk_reserve(ossl_check_X509_REVOKED_sk_type(sk), (n))
111	#define sk_X509_REVOKED_free(sk) OPENSSL_sk_free(ossl_check_X509_REVOKED_sk_type(sk))
112	#define sk_X509_REVOKED_zero(sk) OPENSSL_sk_zero(ossl_check_X509_REVOKED_sk_type(sk))
113	#define sk_X509_REVOKED_delete(sk, i) ((X509_REVOKED *)OPENSSL_sk_delete(ossl_check_X509_REVOKED_sk_type(sk), (i)))
114	#define sk_X509_REVOKED_delete_ptr(sk, ptr) ((X509_REVOKED *)OPENSSL_sk_delete_ptr(ossl_check_X509_REVOKED_sk_type(sk), ossl_check_X509_REVOKED_type(ptr)))
115	#define sk_X509_REVOKED_push(sk, ptr) OPENSSL_sk_push(ossl_check_X509_REVOKED_sk_type(sk), ossl_check_X509_REVOKED_type(ptr))
116	#define sk_X509_REVOKED_unshift(sk, ptr) OPENSSL_sk_unshift(ossl_check_X509_REVOKED_sk_type(sk), ossl_check_X509_REVOKED_type(ptr))
117	#define sk_X509_REVOKED_pop(sk) ((X509_REVOKED *)OPENSSL_sk_pop(ossl_check_X509_REVOKED_sk_type(sk)))
118	#define sk_X509_REVOKED_shift(sk) ((X509_REVOKED *)OPENSSL_sk_shift(ossl_check_X509_REVOKED_sk_type(sk)))
119	#define sk_X509_REVOKED_pop_free(sk, freefunc) OPENSSL_sk_pop_free(ossl_check_X509_REVOKED_sk_type(sk),ossl_check_X509_REVOKED_freefunc_type(freefunc))
120	#define sk_X509_REVOKED_insert(sk, ptr, idx) OPENSSL_sk_insert(ossl_check_X509_REVOKED_sk_type(sk), ossl_check_X509_REVOKED_type(ptr), (idx))
121	#define sk_X509_REVOKED_set(sk, idx, ptr) ((X509_REVOKED *)OPENSSL_sk_set(ossl_check_X509_REVOKED_sk_type(sk), (idx), ossl_check_X509_REVOKED_type(ptr)))
122	#define sk_X509_REVOKED_find(sk, ptr) OPENSSL_sk_find(ossl_check_X509_REVOKED_sk_type(sk), ossl_check_X509_REVOKED_type(ptr))
123	#define sk_X509_REVOKED_find_ex(sk, ptr) OPENSSL_sk_find_ex(ossl_check_X509_REVOKED_sk_type(sk), ossl_check_X509_REVOKED_type(ptr))
124	#define sk_X509_REVOKED_find_all(sk, ptr, pnum) OPENSSL_sk_find_all(ossl_check_X509_REVOKED_sk_type(sk), ossl_check_X509_REVOKED_type(ptr), pnum)
125	#define sk_X509_REVOKED_sort(sk) OPENSSL_sk_sort(ossl_check_X509_REVOKED_sk_type(sk))
126	#define sk_X509_REVOKED_is_sorted(sk) OPENSSL_sk_is_sorted(ossl_check_const_X509_REVOKED_sk_type(sk))
127	#define sk_X509_REVOKED_dup(sk) ((STACK_OF(X509_REVOKED) *)OPENSSL_sk_dup(ossl_check_const_X509_REVOKED_sk_type(sk)))
128	#define sk_X509_REVOKED_deep_copy(sk, copyfunc, freefunc) ((STACK_OF(X509_REVOKED) *)OPENSSL_sk_deep_copy(ossl_check_const_X509_REVOKED_sk_type(sk), ossl_check_X509_REVOKED_copyfunc_type(copyfunc), ossl_check_X509_REVOKED_freefunc_type(freefunc)))
129	#define sk_X509_REVOKED_set_cmp_func(sk, cmp) ((sk_X509_REVOKED_compfunc)OPENSSL_sk_set_cmp_func(ossl_check_X509_REVOKED_sk_type(sk), ossl_check_X509_REVOKED_compfunc_type(cmp)))
130	SKM_DEFINE_STACK_OF_INTERNAL(X509_CRL, X509_CRL, X509_CRL)
131	#define sk_X509_CRL_num(sk) OPENSSL_sk_num(ossl_check_const_X509_CRL_sk_type(sk))
132	#define sk_X509_CRL_value(sk, idx) ((X509_CRL *)OPENSSL_sk_value(ossl_check_const_X509_CRL_sk_type(sk), (idx)))
133	#define sk_X509_CRL_new(cmp) ((STACK_OF(X509_CRL) *)OPENSSL_sk_new(ossl_check_X509_CRL_compfunc_type(cmp)))
134	#define sk_X509_CRL_new_null() ((STACK_OF(X509_CRL) *)OPENSSL_sk_new_null())
135	#define sk_X509_CRL_new_reserve(cmp, n) ((STACK_OF(X509_CRL) *)OPENSSL_sk_new_reserve(ossl_check_X509_CRL_compfunc_type(cmp), (n)))
136	#define sk_X509_CRL_reserve(sk, n) OPENSSL_sk_reserve(ossl_check_X509_CRL_sk_type(sk), (n))
137	#define sk_X509_CRL_free(sk) OPENSSL_sk_free(ossl_check_X509_CRL_sk_type(sk))
138	#define sk_X509_CRL_zero(sk) OPENSSL_sk_zero(ossl_check_X509_CRL_sk_type(sk))
139	#define sk_X509_CRL_delete(sk, i) ((X509_CRL *)OPENSSL_sk_delete(ossl_check_X509_CRL_sk_type(sk), (i)))
140	#define sk_X509_CRL_delete_ptr(sk, ptr) ((X509_CRL *)OPENSSL_sk_delete_ptr(ossl_check_X509_CRL_sk_type(sk), ossl_check_X509_CRL_type(ptr)))
141	#define sk_X509_CRL_push(sk, ptr) OPENSSL_sk_push(ossl_check_X509_CRL_sk_type(sk), ossl_check_X509_CRL_type(ptr))
142	#define sk_X509_CRL_unshift(sk, ptr) OPENSSL_sk_unshift(ossl_check_X509_CRL_sk_type(sk), ossl_check_X509_CRL_type(ptr))
143	#define sk_X509_CRL_pop(sk) ((X509_CRL *)OPENSSL_sk_pop(ossl_check_X509_CRL_sk_type(sk)))
144	#define sk_X509_CRL_shift(sk) ((X509_CRL *)OPENSSL_sk_shift(ossl_check_X509_CRL_sk_type(sk)))
145	#define sk_X509_CRL_pop_free(sk, freefunc) OPENSSL_sk_pop_free(ossl_check_X509_CRL_sk_type(sk),ossl_check_X509_CRL_freefunc_type(freefunc))
146	#define sk_X509_CRL_insert(sk, ptr, idx) OPENSSL_sk_insert(ossl_check_X509_CRL_sk_type(sk), ossl_check_X509_CRL_type(ptr), (idx))
147	#define sk_X509_CRL_set(sk, idx, ptr) ((X509_CRL *)OPENSSL_sk_set(ossl_check_X509_CRL_sk_type(sk), (idx), ossl_check_X509_CRL_type(ptr)))
148	#define sk_X509_CRL_find(sk, ptr) OPENSSL_sk_find(ossl_check_X509_CRL_sk_type(sk), ossl_check_X509_CRL_type(ptr))
149	#define sk_X509_CRL_find_ex(sk, ptr) OPENSSL_sk_find_ex(ossl_check_X509_CRL_sk_type(sk), ossl_check_X509_CRL_type(ptr))
150	#define sk_X509_CRL_find_all(sk, ptr, pnum) OPENSSL_sk_find_all(ossl_check_X509_CRL_sk_type(sk), ossl_check_X509_CRL_type(ptr), pnum)
151	#define sk_X509_CRL_sort(sk) OPENSSL_sk_sort(ossl_check_X509_CRL_sk_type(sk))
152	#define sk_X509_CRL_is_sorted(sk) OPENSSL_sk_is_sorted(ossl_check_const_X509_CRL_sk_type(sk))
153	#define sk_X509_CRL_dup(sk) ((STACK_OF(X509_CRL) *)OPENSSL_sk_dup(ossl_check_const_X509_CRL_sk_type(sk)))
154	#define sk_X509_CRL_deep_copy(sk, copyfunc, freefunc) ((STACK_OF(X509_CRL) *)OPENSSL_sk_deep_copy(ossl_check_const_X509_CRL_sk_type(sk), ossl_check_X509_CRL_copyfunc_type(copyfunc), ossl_check_X509_CRL_freefunc_type(freefunc)))
155	#define sk_X509_CRL_set_cmp_func(sk, cmp) ((sk_X509_CRL_compfunc)OPENSSL_sk_set_cmp_func(ossl_check_X509_CRL_sk_type(sk), ossl_check_X509_CRL_compfunc_type(cmp)))
156
157
158	/* Flags for X509_get_signature_info() */
159	/* Signature info is valid */
160	# define X509_SIG_INFO_VALID 0x1
161	/* Signature is suitable for TLS use */
162	# define X509_SIG_INFO_TLS 0x2
163
164	# define X509_FILETYPE_PEM 1
165	# define X509_FILETYPE_ASN1 2
166	# define X509_FILETYPE_DEFAULT 3
167
168	/*-
169	* <https://datatracker.ietf.org/doc/html/rfc5280#section-4.2.1.3>:
170	* The KeyUsage BITSTRING is treated as a little-endian integer, hence bit `0`
171	* is 0x80, while bit `7` is 0x01 (the LSB of the integer value), bit `8` is
172	* then the MSB of the second octet, or 0x8000.
173	*/
174	# define X509v3_KU_DIGITAL_SIGNATURE 0x0080 /* (0) */
175	# define X509v3_KU_NON_REPUDIATION 0x0040 /* (1) */
176	# define X509v3_KU_KEY_ENCIPHERMENT 0x0020 /* (2) */
177	# define X509v3_KU_DATA_ENCIPHERMENT 0x0010 /* (3) */
178	# define X509v3_KU_KEY_AGREEMENT 0x0008 /* (4) */
179	# define X509v3_KU_KEY_CERT_SIGN 0x0004 /* (5) */
180	# define X509v3_KU_CRL_SIGN 0x0002 /* (6) */
181	# define X509v3_KU_ENCIPHER_ONLY 0x0001 /* (7) */
182	# define X509v3_KU_DECIPHER_ONLY 0x8000 /* (8) */
183	# ifndef OPENSSL_NO_DEPRECATED_3_4
184	# define X509v3_KU_UNDEF 0xffff /* vestigial, not used */
185	# endif
186
187	struct X509_algor_st {
188	ASN1_OBJECT *algorithm;
189	ASN1_TYPE *parameter;
190	} /* X509_ALGOR */ ;
191
192	typedef STACK_OF(X509_ALGOR) X509_ALGORS;
193
194	typedef struct X509_val_st {
195	ASN1_TIME *notBefore;
196	ASN1_TIME *notAfter;
197	} X509_VAL;
198
199	typedef struct X509_sig_st X509_SIG;
200
201	typedef struct X509_name_entry_st X509_NAME_ENTRY;
202
203	SKM_DEFINE_STACK_OF_INTERNAL(X509_NAME_ENTRY, X509_NAME_ENTRY, X509_NAME_ENTRY)
204	#define sk_X509_NAME_ENTRY_num(sk) OPENSSL_sk_num(ossl_check_const_X509_NAME_ENTRY_sk_type(sk))
205	#define sk_X509_NAME_ENTRY_value(sk, idx) ((X509_NAME_ENTRY *)OPENSSL_sk_value(ossl_check_const_X509_NAME_ENTRY_sk_type(sk), (idx)))
206	#define sk_X509_NAME_ENTRY_new(cmp) ((STACK_OF(X509_NAME_ENTRY) *)OPENSSL_sk_new(ossl_check_X509_NAME_ENTRY_compfunc_type(cmp)))
207	#define sk_X509_NAME_ENTRY_new_null() ((STACK_OF(X509_NAME_ENTRY) *)OPENSSL_sk_new_null())
208	#define sk_X509_NAME_ENTRY_new_reserve(cmp, n) ((STACK_OF(X509_NAME_ENTRY) *)OPENSSL_sk_new_reserve(ossl_check_X509_NAME_ENTRY_compfunc_type(cmp), (n)))
209	#define sk_X509_NAME_ENTRY_reserve(sk, n) OPENSSL_sk_reserve(ossl_check_X509_NAME_ENTRY_sk_type(sk), (n))
210	#define sk_X509_NAME_ENTRY_free(sk) OPENSSL_sk_free(ossl_check_X509_NAME_ENTRY_sk_type(sk))
211	#define sk_X509_NAME_ENTRY_zero(sk) OPENSSL_sk_zero(ossl_check_X509_NAME_ENTRY_sk_type(sk))
212	#define sk_X509_NAME_ENTRY_delete(sk, i) ((X509_NAME_ENTRY *)OPENSSL_sk_delete(ossl_check_X509_NAME_ENTRY_sk_type(sk), (i)))
213	#define sk_X509_NAME_ENTRY_delete_ptr(sk, ptr) ((X509_NAME_ENTRY *)OPENSSL_sk_delete_ptr(ossl_check_X509_NAME_ENTRY_sk_type(sk), ossl_check_X509_NAME_ENTRY_type(ptr)))
214	#define sk_X509_NAME_ENTRY_push(sk, ptr) OPENSSL_sk_push(ossl_check_X509_NAME_ENTRY_sk_type(sk), ossl_check_X509_NAME_ENTRY_type(ptr))
215	#define sk_X509_NAME_ENTRY_unshift(sk, ptr) OPENSSL_sk_unshift(ossl_check_X509_NAME_ENTRY_sk_type(sk), ossl_check_X509_NAME_ENTRY_type(ptr))
216	#define sk_X509_NAME_ENTRY_pop(sk) ((X509_NAME_ENTRY *)OPENSSL_sk_pop(ossl_check_X509_NAME_ENTRY_sk_type(sk)))
217	#define sk_X509_NAME_ENTRY_shift(sk) ((X509_NAME_ENTRY *)OPENSSL_sk_shift(ossl_check_X509_NAME_ENTRY_sk_type(sk)))
218	#define sk_X509_NAME_ENTRY_pop_free(sk, freefunc) OPENSSL_sk_pop_free(ossl_check_X509_NAME_ENTRY_sk_type(sk),ossl_check_X509_NAME_ENTRY_freefunc_type(freefunc))
219	#define sk_X509_NAME_ENTRY_insert(sk, ptr, idx) OPENSSL_sk_insert(ossl_check_X509_NAME_ENTRY_sk_type(sk), ossl_check_X509_NAME_ENTRY_type(ptr), (idx))
220	#define sk_X509_NAME_ENTRY_set(sk, idx, ptr) ((X509_NAME_ENTRY *)OPENSSL_sk_set(ossl_check_X509_NAME_ENTRY_sk_type(sk), (idx), ossl_check_X509_NAME_ENTRY_type(ptr)))
221	#define sk_X509_NAME_ENTRY_find(sk, ptr) OPENSSL_sk_find(ossl_check_X509_NAME_ENTRY_sk_type(sk), ossl_check_X509_NAME_ENTRY_type(ptr))
222	#define sk_X509_NAME_ENTRY_find_ex(sk, ptr) OPENSSL_sk_find_ex(ossl_check_X509_NAME_ENTRY_sk_type(sk), ossl_check_X509_NAME_ENTRY_type(ptr))
223	#define sk_X509_NAME_ENTRY_find_all(sk, ptr, pnum) OPENSSL_sk_find_all(ossl_check_X509_NAME_ENTRY_sk_type(sk), ossl_check_X509_NAME_ENTRY_type(ptr), pnum)
224	#define sk_X509_NAME_ENTRY_sort(sk) OPENSSL_sk_sort(ossl_check_X509_NAME_ENTRY_sk_type(sk))
225	#define sk_X509_NAME_ENTRY_is_sorted(sk) OPENSSL_sk_is_sorted(ossl_check_const_X509_NAME_ENTRY_sk_type(sk))
226	#define sk_X509_NAME_ENTRY_dup(sk) ((STACK_OF(X509_NAME_ENTRY) *)OPENSSL_sk_dup(ossl_check_const_X509_NAME_ENTRY_sk_type(sk)))
227	#define sk_X509_NAME_ENTRY_deep_copy(sk, copyfunc, freefunc) ((STACK_OF(X509_NAME_ENTRY) *)OPENSSL_sk_deep_copy(ossl_check_const_X509_NAME_ENTRY_sk_type(sk), ossl_check_X509_NAME_ENTRY_copyfunc_type(copyfunc), ossl_check_X509_NAME_ENTRY_freefunc_type(freefunc)))
228	#define sk_X509_NAME_ENTRY_set_cmp_func(sk, cmp) ((sk_X509_NAME_ENTRY_compfunc)OPENSSL_sk_set_cmp_func(ossl_check_X509_NAME_ENTRY_sk_type(sk), ossl_check_X509_NAME_ENTRY_compfunc_type(cmp)))
229
230
231	# define X509_EX_V_NETSCAPE_HACK 0x8000
232	# define X509_EX_V_INIT 0x0001
233	typedef struct X509_extension_st X509_EXTENSION;
234	SKM_DEFINE_STACK_OF_INTERNAL(X509_EXTENSION, X509_EXTENSION, X509_EXTENSION)
235	#define sk_X509_EXTENSION_num(sk) OPENSSL_sk_num(ossl_check_const_X509_EXTENSION_sk_type(sk))
236	#define sk_X509_EXTENSION_value(sk, idx) ((X509_EXTENSION *)OPENSSL_sk_value(ossl_check_const_X509_EXTENSION_sk_type(sk), (idx)))
237	#define sk_X509_EXTENSION_new(cmp) ((STACK_OF(X509_EXTENSION) *)OPENSSL_sk_new(ossl_check_X509_EXTENSION_compfunc_type(cmp)))
238	#define sk_X509_EXTENSION_new_null() ((STACK_OF(X509_EXTENSION) *)OPENSSL_sk_new_null())
239	#define sk_X509_EXTENSION_new_reserve(cmp, n) ((STACK_OF(X509_EXTENSION) *)OPENSSL_sk_new_reserve(ossl_check_X509_EXTENSION_compfunc_type(cmp), (n)))
240	#define sk_X509_EXTENSION_reserve(sk, n) OPENSSL_sk_reserve(ossl_check_X509_EXTENSION_sk_type(sk), (n))
241	#define sk_X509_EXTENSION_free(sk) OPENSSL_sk_free(ossl_check_X509_EXTENSION_sk_type(sk))
242	#define sk_X509_EXTENSION_zero(sk) OPENSSL_sk_zero(ossl_check_X509_EXTENSION_sk_type(sk))
243	#define sk_X509_EXTENSION_delete(sk, i) ((X509_EXTENSION *)OPENSSL_sk_delete(ossl_check_X509_EXTENSION_sk_type(sk), (i)))
244	#define sk_X509_EXTENSION_delete_ptr(sk, ptr) ((X509_EXTENSION *)OPENSSL_sk_delete_ptr(ossl_check_X509_EXTENSION_sk_type(sk), ossl_check_X509_EXTENSION_type(ptr)))
245	#define sk_X509_EXTENSION_push(sk, ptr) OPENSSL_sk_push(ossl_check_X509_EXTENSION_sk_type(sk), ossl_check_X509_EXTENSION_type(ptr))
246	#define sk_X509_EXTENSION_unshift(sk, ptr) OPENSSL_sk_unshift(ossl_check_X509_EXTENSION_sk_type(sk), ossl_check_X509_EXTENSION_type(ptr))
247	#define sk_X509_EXTENSION_pop(sk) ((X509_EXTENSION *)OPENSSL_sk_pop(ossl_check_X509_EXTENSION_sk_type(sk)))
248	#define sk_X509_EXTENSION_shift(sk) ((X509_EXTENSION *)OPENSSL_sk_shift(ossl_check_X509_EXTENSION_sk_type(sk)))
249	#define sk_X509_EXTENSION_pop_free(sk, freefunc) OPENSSL_sk_pop_free(ossl_check_X509_EXTENSION_sk_type(sk),ossl_check_X509_EXTENSION_freefunc_type(freefunc))
250	#define sk_X509_EXTENSION_insert(sk, ptr, idx) OPENSSL_sk_insert(ossl_check_X509_EXTENSION_sk_type(sk), ossl_check_X509_EXTENSION_type(ptr), (idx))
251	#define sk_X509_EXTENSION_set(sk, idx, ptr) ((X509_EXTENSION *)OPENSSL_sk_set(ossl_check_X509_EXTENSION_sk_type(sk), (idx), ossl_check_X509_EXTENSION_type(ptr)))
252	#define sk_X509_EXTENSION_find(sk, ptr) OPENSSL_sk_find(ossl_check_X509_EXTENSION_sk_type(sk), ossl_check_X509_EXTENSION_type(ptr))
253	#define sk_X509_EXTENSION_find_ex(sk, ptr) OPENSSL_sk_find_ex(ossl_check_X509_EXTENSION_sk_type(sk), ossl_check_X509_EXTENSION_type(ptr))
254	#define sk_X509_EXTENSION_find_all(sk, ptr, pnum) OPENSSL_sk_find_all(ossl_check_X509_EXTENSION_sk_type(sk), ossl_check_X509_EXTENSION_type(ptr), pnum)
255	#define sk_X509_EXTENSION_sort(sk) OPENSSL_sk_sort(ossl_check_X509_EXTENSION_sk_type(sk))
256	#define sk_X509_EXTENSION_is_sorted(sk) OPENSSL_sk_is_sorted(ossl_check_const_X509_EXTENSION_sk_type(sk))
257	#define sk_X509_EXTENSION_dup(sk) ((STACK_OF(X509_EXTENSION) *)OPENSSL_sk_dup(ossl_check_const_X509_EXTENSION_sk_type(sk)))
258	#define sk_X509_EXTENSION_deep_copy(sk, copyfunc, freefunc) ((STACK_OF(X509_EXTENSION) *)OPENSSL_sk_deep_copy(ossl_check_const_X509_EXTENSION_sk_type(sk), ossl_check_X509_EXTENSION_copyfunc_type(copyfunc), ossl_check_X509_EXTENSION_freefunc_type(freefunc)))
259	#define sk_X509_EXTENSION_set_cmp_func(sk, cmp) ((sk_X509_EXTENSION_compfunc)OPENSSL_sk_set_cmp_func(ossl_check_X509_EXTENSION_sk_type(sk), ossl_check_X509_EXTENSION_compfunc_type(cmp)))
260
261	typedef STACK_OF(X509_EXTENSION) X509_EXTENSIONS;
262	typedef struct x509_attributes_st X509_ATTRIBUTE;
263	SKM_DEFINE_STACK_OF_INTERNAL(X509_ATTRIBUTE, X509_ATTRIBUTE, X509_ATTRIBUTE)
264	#define sk_X509_ATTRIBUTE_num(sk) OPENSSL_sk_num(ossl_check_const_X509_ATTRIBUTE_sk_type(sk))
265	#define sk_X509_ATTRIBUTE_value(sk, idx) ((X509_ATTRIBUTE *)OPENSSL_sk_value(ossl_check_const_X509_ATTRIBUTE_sk_type(sk), (idx)))
266	#define sk_X509_ATTRIBUTE_new(cmp) ((STACK_OF(X509_ATTRIBUTE) *)OPENSSL_sk_new(ossl_check_X509_ATTRIBUTE_compfunc_type(cmp)))
267	#define sk_X509_ATTRIBUTE_new_null() ((STACK_OF(X509_ATTRIBUTE) *)OPENSSL_sk_new_null())
268	#define sk_X509_ATTRIBUTE_new_reserve(cmp, n) ((STACK_OF(X509_ATTRIBUTE) *)OPENSSL_sk_new_reserve(ossl_check_X509_ATTRIBUTE_compfunc_type(cmp), (n)))
269	#define sk_X509_ATTRIBUTE_reserve(sk, n) OPENSSL_sk_reserve(ossl_check_X509_ATTRIBUTE_sk_type(sk), (n))
270	#define sk_X509_ATTRIBUTE_free(sk) OPENSSL_sk_free(ossl_check_X509_ATTRIBUTE_sk_type(sk))
271	#define sk_X509_ATTRIBUTE_zero(sk) OPENSSL_sk_zero(ossl_check_X509_ATTRIBUTE_sk_type(sk))
272	#define sk_X509_ATTRIBUTE_delete(sk, i) ((X509_ATTRIBUTE *)OPENSSL_sk_delete(ossl_check_X509_ATTRIBUTE_sk_type(sk), (i)))
273	#define sk_X509_ATTRIBUTE_delete_ptr(sk, ptr) ((X509_ATTRIBUTE *)OPENSSL_sk_delete_ptr(ossl_check_X509_ATTRIBUTE_sk_type(sk), ossl_check_X509_ATTRIBUTE_type(ptr)))
274	#define sk_X509_ATTRIBUTE_push(sk, ptr) OPENSSL_sk_push(ossl_check_X509_ATTRIBUTE_sk_type(sk), ossl_check_X509_ATTRIBUTE_type(ptr))
275	#define sk_X509_ATTRIBUTE_unshift(sk, ptr) OPENSSL_sk_unshift(ossl_check_X509_ATTRIBUTE_sk_type(sk), ossl_check_X509_ATTRIBUTE_type(ptr))
276	#define sk_X509_ATTRIBUTE_pop(sk) ((X509_ATTRIBUTE *)OPENSSL_sk_pop(ossl_check_X509_ATTRIBUTE_sk_type(sk)))
277	#define sk_X509_ATTRIBUTE_shift(sk) ((X509_ATTRIBUTE *)OPENSSL_sk_shift(ossl_check_X509_ATTRIBUTE_sk_type(sk)))
278	#define sk_X509_ATTRIBUTE_pop_free(sk, freefunc) OPENSSL_sk_pop_free(ossl_check_X509_ATTRIBUTE_sk_type(sk),ossl_check_X509_ATTRIBUTE_freefunc_type(freefunc))
279	#define sk_X509_ATTRIBUTE_insert(sk, ptr, idx) OPENSSL_sk_insert(ossl_check_X509_ATTRIBUTE_sk_type(sk), ossl_check_X509_ATTRIBUTE_type(ptr), (idx))
280	#define sk_X509_ATTRIBUTE_set(sk, idx, ptr) ((X509_ATTRIBUTE *)OPENSSL_sk_set(ossl_check_X509_ATTRIBUTE_sk_type(sk), (idx), ossl_check_X509_ATTRIBUTE_type(ptr)))
281	#define sk_X509_ATTRIBUTE_find(sk, ptr) OPENSSL_sk_find(ossl_check_X509_ATTRIBUTE_sk_type(sk), ossl_check_X509_ATTRIBUTE_type(ptr))
282	#define sk_X509_ATTRIBUTE_find_ex(sk, ptr) OPENSSL_sk_find_ex(ossl_check_X509_ATTRIBUTE_sk_type(sk), ossl_check_X509_ATTRIBUTE_type(ptr))
283	#define sk_X509_ATTRIBUTE_find_all(sk, ptr, pnum) OPENSSL_sk_find_all(ossl_check_X509_ATTRIBUTE_sk_type(sk), ossl_check_X509_ATTRIBUTE_type(ptr), pnum)
284	#define sk_X509_ATTRIBUTE_sort(sk) OPENSSL_sk_sort(ossl_check_X509_ATTRIBUTE_sk_type(sk))
285	#define sk_X509_ATTRIBUTE_is_sorted(sk) OPENSSL_sk_is_sorted(ossl_check_const_X509_ATTRIBUTE_sk_type(sk))
286	#define sk_X509_ATTRIBUTE_dup(sk) ((STACK_OF(X509_ATTRIBUTE) *)OPENSSL_sk_dup(ossl_check_const_X509_ATTRIBUTE_sk_type(sk)))
287	#define sk_X509_ATTRIBUTE_deep_copy(sk, copyfunc, freefunc) ((STACK_OF(X509_ATTRIBUTE) *)OPENSSL_sk_deep_copy(ossl_check_const_X509_ATTRIBUTE_sk_type(sk), ossl_check_X509_ATTRIBUTE_copyfunc_type(copyfunc), ossl_check_X509_ATTRIBUTE_freefunc_type(freefunc)))
288	#define sk_X509_ATTRIBUTE_set_cmp_func(sk, cmp) ((sk_X509_ATTRIBUTE_compfunc)OPENSSL_sk_set_cmp_func(ossl_check_X509_ATTRIBUTE_sk_type(sk), ossl_check_X509_ATTRIBUTE_compfunc_type(cmp)))
289
290	typedef struct X509_req_info_st X509_REQ_INFO;
291	typedef struct X509_req_st X509_REQ;
292	typedef struct x509_cert_aux_st X509_CERT_AUX;
293	typedef struct x509_cinf_st X509_CINF;
294
295	/* Flags for X509_print_ex() */
296
297	# define X509_FLAG_COMPAT 0
298	# define X509_FLAG_NO_HEADER 1L
299	# define X509_FLAG_NO_VERSION (1L << 1)
300	# define X509_FLAG_NO_SERIAL (1L << 2)
301	# define X509_FLAG_NO_SIGNAME (1L << 3)
302	# define X509_FLAG_NO_ISSUER (1L << 4)
303	# define X509_FLAG_NO_VALIDITY (1L << 5)
304	# define X509_FLAG_NO_SUBJECT (1L << 6)
305	# define X509_FLAG_NO_PUBKEY (1L << 7)
306	# define X509_FLAG_NO_EXTENSIONS (1L << 8)
307	# define X509_FLAG_NO_SIGDUMP (1L << 9)
308	# define X509_FLAG_NO_AUX (1L << 10)
309	# define X509_FLAG_NO_ATTRIBUTES (1L << 11)
310	# define X509_FLAG_NO_IDS (1L << 12)
311	# define X509_FLAG_EXTENSIONS_ONLY_KID (1L << 13)
312
313	/* Flags specific to X509_NAME_print_ex() */
314
315	/* The field separator information */
316
317	# define XN_FLAG_SEP_MASK (0xf << 16)
318
319	# define XN_FLAG_COMPAT 0/* Traditional; use old X509_NAME_print */
320	# define XN_FLAG_SEP_COMMA_PLUS (1 << 16)/* RFC2253 ,+ */
321	# define XN_FLAG_SEP_CPLUS_SPC (2 << 16)/* ,+ spaced: more readable */
322	# define XN_FLAG_SEP_SPLUS_SPC (3 << 16)/* ;+ spaced */
323	# define XN_FLAG_SEP_MULTILINE (4 << 16)/* One line per field */
324
325	# define XN_FLAG_DN_REV (1 << 20)/* Reverse DN order */
326
327	/* How the field name is shown */
328
329	# define XN_FLAG_FN_MASK (0x3 << 21)
330
331	# define XN_FLAG_FN_SN 0/* Object short name */
332	# define XN_FLAG_FN_LN (1 << 21)/* Object long name */
333	# define XN_FLAG_FN_OID (2 << 21)/* Always use OIDs */
334	# define XN_FLAG_FN_NONE (3 << 21)/* No field names */
335
336	# define XN_FLAG_SPC_EQ (1 << 23)/* Put spaces round '=' */
337
338	/*
339	* This determines if we dump fields we don't recognise: RFC2253 requires
340	* this.
341	*/
342
343	# define XN_FLAG_DUMP_UNKNOWN_FIELDS (1 << 24)
344
345	# define XN_FLAG_FN_ALIGN (1 << 25)/* Align field names to 20
346	* characters */
347
348	/* Complete set of RFC2253 flags */
349
350	# define XN_FLAG_RFC2253 (ASN1_STRFLGS_RFC2253 \| \
351	XN_FLAG_SEP_COMMA_PLUS \| \
352	XN_FLAG_DN_REV \| \
353	XN_FLAG_FN_SN \| \
354	XN_FLAG_DUMP_UNKNOWN_FIELDS)
355
356	/* readable oneline form */
357
358	# define XN_FLAG_ONELINE (ASN1_STRFLGS_RFC2253 \| \
359	ASN1_STRFLGS_ESC_QUOTE \| \
360	XN_FLAG_SEP_CPLUS_SPC \| \
361	XN_FLAG_SPC_EQ \| \
362	XN_FLAG_FN_SN)
363
364	/* readable multiline form */
365
366	# define XN_FLAG_MULTILINE (ASN1_STRFLGS_ESC_CTRL \| \
367	ASN1_STRFLGS_ESC_MSB \| \
368	XN_FLAG_SEP_MULTILINE \| \
369	XN_FLAG_SPC_EQ \| \
370	XN_FLAG_FN_LN \| \
371	XN_FLAG_FN_ALIGN)
372
373	typedef struct X509_crl_info_st X509_CRL_INFO;
374
375	typedef struct private_key_st {
376	int version;
377	/* The PKCS#8 data types */
378	X509_ALGOR *enc_algor;
379	ASN1_OCTET_STRING enc_pkey; / encrypted pub key */
380	/* When decrypted, the following will not be NULL */
381	EVP_PKEY *dec_pkey;
382	/* used to encrypt and decrypt */
383	int key_length;
384	char *key_data;
385	int key_free; /* true if we should auto free key_data */
386	/* expanded version of 'enc_algor' */
387	EVP_CIPHER_INFO cipher;
388	} X509_PKEY;
389
390	typedef struct X509_info_st {
391	X509 *x509;
392	X509_CRL *crl;
393	X509_PKEY *x_pkey;
394	EVP_CIPHER_INFO enc_cipher;
395	int enc_len;
396	char *enc_data;
397	} X509_INFO;
398	SKM_DEFINE_STACK_OF_INTERNAL(X509_INFO, X509_INFO, X509_INFO)
399	#define sk_X509_INFO_num(sk) OPENSSL_sk_num(ossl_check_const_X509_INFO_sk_type(sk))
400	#define sk_X509_INFO_value(sk, idx) ((X509_INFO *)OPENSSL_sk_value(ossl_check_const_X509_INFO_sk_type(sk), (idx)))
401	#define sk_X509_INFO_new(cmp) ((STACK_OF(X509_INFO) *)OPENSSL_sk_new(ossl_check_X509_INFO_compfunc_type(cmp)))
402	#define sk_X509_INFO_new_null() ((STACK_OF(X509_INFO) *)OPENSSL_sk_new_null())
403	#define sk_X509_INFO_new_reserve(cmp, n) ((STACK_OF(X509_INFO) *)OPENSSL_sk_new_reserve(ossl_check_X509_INFO_compfunc_type(cmp), (n)))
404	#define sk_X509_INFO_reserve(sk, n) OPENSSL_sk_reserve(ossl_check_X509_INFO_sk_type(sk), (n))
405	#define sk_X509_INFO_free(sk) OPENSSL_sk_free(ossl_check_X509_INFO_sk_type(sk))
406	#define sk_X509_INFO_zero(sk) OPENSSL_sk_zero(ossl_check_X509_INFO_sk_type(sk))
407	#define sk_X509_INFO_delete(sk, i) ((X509_INFO *)OPENSSL_sk_delete(ossl_check_X509_INFO_sk_type(sk), (i)))
408	#define sk_X509_INFO_delete_ptr(sk, ptr) ((X509_INFO *)OPENSSL_sk_delete_ptr(ossl_check_X509_INFO_sk_type(sk), ossl_check_X509_INFO_type(ptr)))
409	#define sk_X509_INFO_push(sk, ptr) OPENSSL_sk_push(ossl_check_X509_INFO_sk_type(sk), ossl_check_X509_INFO_type(ptr))
410	#define sk_X509_INFO_unshift(sk, ptr) OPENSSL_sk_unshift(ossl_check_X509_INFO_sk_type(sk), ossl_check_X509_INFO_type(ptr))
411	#define sk_X509_INFO_pop(sk) ((X509_INFO *)OPENSSL_sk_pop(ossl_check_X509_INFO_sk_type(sk)))
412	#define sk_X509_INFO_shift(sk) ((X509_INFO *)OPENSSL_sk_shift(ossl_check_X509_INFO_sk_type(sk)))
413	#define sk_X509_INFO_pop_free(sk, freefunc) OPENSSL_sk_pop_free(ossl_check_X509_INFO_sk_type(sk),ossl_check_X509_INFO_freefunc_type(freefunc))
414	#define sk_X509_INFO_insert(sk, ptr, idx) OPENSSL_sk_insert(ossl_check_X509_INFO_sk_type(sk), ossl_check_X509_INFO_type(ptr), (idx))
415	#define sk_X509_INFO_set(sk, idx, ptr) ((X509_INFO *)OPENSSL_sk_set(ossl_check_X509_INFO_sk_type(sk), (idx), ossl_check_X509_INFO_type(ptr)))
416	#define sk_X509_INFO_find(sk, ptr) OPENSSL_sk_find(ossl_check_X509_INFO_sk_type(sk), ossl_check_X509_INFO_type(ptr))
417	#define sk_X509_INFO_find_ex(sk, ptr) OPENSSL_sk_find_ex(ossl_check_X509_INFO_sk_type(sk), ossl_check_X509_INFO_type(ptr))
418	#define sk_X509_INFO_find_all(sk, ptr, pnum) OPENSSL_sk_find_all(ossl_check_X509_INFO_sk_type(sk), ossl_check_X509_INFO_type(ptr), pnum)
419	#define sk_X509_INFO_sort(sk) OPENSSL_sk_sort(ossl_check_X509_INFO_sk_type(sk))
420	#define sk_X509_INFO_is_sorted(sk) OPENSSL_sk_is_sorted(ossl_check_const_X509_INFO_sk_type(sk))
421	#define sk_X509_INFO_dup(sk) ((STACK_OF(X509_INFO) *)OPENSSL_sk_dup(ossl_check_const_X509_INFO_sk_type(sk)))
422	#define sk_X509_INFO_deep_copy(sk, copyfunc, freefunc) ((STACK_OF(X509_INFO) *)OPENSSL_sk_deep_copy(ossl_check_const_X509_INFO_sk_type(sk), ossl_check_X509_INFO_copyfunc_type(copyfunc), ossl_check_X509_INFO_freefunc_type(freefunc)))
423	#define sk_X509_INFO_set_cmp_func(sk, cmp) ((sk_X509_INFO_compfunc)OPENSSL_sk_set_cmp_func(ossl_check_X509_INFO_sk_type(sk), ossl_check_X509_INFO_compfunc_type(cmp)))
424
425
426	/*
427	* The next 2 structures and their 8 routines are used to manipulate Netscape's
428	* spki structures - useful if you are writing a CA web page
429	*/
430	typedef struct Netscape_spkac_st {
431	X509_PUBKEY *pubkey;
432	ASN1_IA5STRING challenge; / challenge sent in atlas >= PR2 */
433	} NETSCAPE_SPKAC;
434
435	typedef struct Netscape_spki_st {
436	NETSCAPE_SPKAC spkac; / signed public key and challenge */
437	X509_ALGOR sig_algor;
438	ASN1_BIT_STRING *signature;
439	} NETSCAPE_SPKI;
440
441	/* Netscape certificate sequence structure */
442	typedef struct Netscape_certificate_sequence {
443	ASN1_OBJECT *type;
444	STACK_OF(X509) *certs;
445	} NETSCAPE_CERT_SEQUENCE;
446
447	/*- Unused (and iv length is wrong)
448	typedef struct CBCParameter_st
449	{
450	unsigned char iv[8];
451	} CBC_PARAM;
452	*/
453
454	/* Password based encryption structure */
455
456	typedef struct PBEPARAM_st {
457	ASN1_OCTET_STRING *salt;
458	ASN1_INTEGER *iter;
459	} PBEPARAM;
460
461	/* Password based encryption V2 structures */
462
463	typedef struct PBE2PARAM_st {
464	X509_ALGOR *keyfunc;
465	X509_ALGOR *encryption;
466	} PBE2PARAM;
467
468	typedef struct PBKDF2PARAM_st {
469	/* Usually OCTET STRING but could be anything */
470	ASN1_TYPE *salt;
471	ASN1_INTEGER *iter;
472	ASN1_INTEGER *keylength;
473	X509_ALGOR *prf;
474	} PBKDF2PARAM;
475
476	typedef struct {
477	X509_ALGOR *keyDerivationFunc;
478	X509_ALGOR *messageAuthScheme;
479	} PBMAC1PARAM;
480
481	# ifndef OPENSSL_NO_SCRYPT
482	typedef struct SCRYPT_PARAMS_st {
483	ASN1_OCTET_STRING *salt;
484	ASN1_INTEGER *costParameter;
485	ASN1_INTEGER *blockSize;
486	ASN1_INTEGER *parallelizationParameter;
487	ASN1_INTEGER *keyLength;
488	} SCRYPT_PARAMS;
489	# endif
490
491	#ifdef __cplusplus
492	}
493	#endif
494
495	# include <openssl/x509_vfy.h>
496	# include <openssl/pkcs7.h>
497
498	#ifdef __cplusplus
499	extern "C" {
500	#endif
501
502	# define X509_EXT_PACK_UNKNOWN 1
503	# define X509_EXT_PACK_STRING 2
504
505	# define X509_extract_key(x) X509_get_pubkey(x)/*****/
506	# define X509_REQ_extract_key(a) X509_REQ_get_pubkey(a)
507	# define X509_name_cmp(a,b) X509_NAME_cmp((a),(b))
508
509	void X509_CRL_set_default_method(const X509_CRL_METHOD *meth);
510	X509_CRL_METHOD X509_CRL_METHOD_new(int (crl_init) (X509_CRL *crl),
511	int (crl_free) (X509_CRL crl),
512	int (crl_lookup) (X509_CRL crl,
513	X509_REVOKED **ret,
514	const
515	ASN1_INTEGER *serial,
516	const
517	X509_NAME *issuer),
518	int (crl_verify) (X509_CRL crl,
519	EVP_PKEY *pk));
520	void X509_CRL_METHOD_free(X509_CRL_METHOD *m);
521
522	void X509_CRL_set_meth_data(X509_CRL crl, void dat);
523	void X509_CRL_get_meth_data(X509_CRL crl);
524
525	const char *X509_verify_cert_error_string(long n);
526
527	int X509_verify(X509 a, EVP_PKEY r);
528	int X509_self_signed(X509 *cert, int verify_signature);
529
530	int X509_REQ_verify_ex(X509_REQ a, EVP_PKEY r, OSSL_LIB_CTX *libctx,
531	const char *propq);
532	int X509_REQ_verify(X509_REQ a, EVP_PKEY r);
533	int X509_CRL_verify(X509_CRL a, EVP_PKEY r);
534	int NETSCAPE_SPKI_verify(NETSCAPE_SPKI a, EVP_PKEY r);
535
536	NETSCAPE_SPKI NETSCAPE_SPKI_b64_decode(const char str, int len);
537	char NETSCAPE_SPKI_b64_encode(NETSCAPE_SPKI x);
538	EVP_PKEY NETSCAPE_SPKI_get_pubkey(NETSCAPE_SPKI x);
539	int NETSCAPE_SPKI_set_pubkey(NETSCAPE_SPKI x, EVP_PKEY pkey);
540
541	int NETSCAPE_SPKI_print(BIO out, NETSCAPE_SPKI spki);
542
543	int X509_signature_dump(BIO bp, const ASN1_STRING sig, int indent);
544	int X509_signature_print(BIO bp, const X509_ALGOR alg,
545	const ASN1_STRING *sig);
546
547	int X509_sign(X509 x, EVP_PKEY pkey, const EVP_MD *md);
548	int X509_sign_ctx(X509 x, EVP_MD_CTX ctx);
549	int X509_REQ_sign(X509_REQ x, EVP_PKEY pkey, const EVP_MD *md);
550	int X509_REQ_sign_ctx(X509_REQ x, EVP_MD_CTX ctx);
551	int X509_CRL_sign(X509_CRL x, EVP_PKEY pkey, const EVP_MD *md);
552	int X509_CRL_sign_ctx(X509_CRL x, EVP_MD_CTX ctx);
553	int NETSCAPE_SPKI_sign(NETSCAPE_SPKI x, EVP_PKEY pkey, const EVP_MD *md);
554
555	int X509_pubkey_digest(const X509 data, const EVP_MD type,
556	unsigned char md, unsigned int len);
557	int X509_digest(const X509 data, const EVP_MD type,
558	unsigned char md, unsigned int len);
559	ASN1_OCTET_STRING X509_digest_sig(const X509 cert,
560	EVP_MD *md_used, int md_is_fallback);
561	int X509_CRL_digest(const X509_CRL data, const EVP_MD type,
562	unsigned char md, unsigned int len);
563	int X509_REQ_digest(const X509_REQ data, const EVP_MD type,
564	unsigned char md, unsigned int len);
565	int X509_NAME_digest(const X509_NAME data, const EVP_MD type,
566	unsigned char md, unsigned int len);
567
568	X509 X509_load_http(const char url, BIO bio, BIO rbio, int timeout);
569	X509_CRL X509_CRL_load_http(const char url, BIO bio, BIO rbio, int timeout);
570	# ifndef OPENSSL_NO_DEPRECATED_3_0
571	# include <openssl/http.h> /* OSSL_HTTP_REQ_CTX_nbio_d2i */
572	# define X509_http_nbio(rctx, pcert) \
573	OSSL_HTTP_REQ_CTX_nbio_d2i(rctx, pcert, ASN1_ITEM_rptr(X509))
574	# define X509_CRL_http_nbio(rctx, pcrl) \
575	OSSL_HTTP_REQ_CTX_nbio_d2i(rctx, pcrl, ASN1_ITEM_rptr(X509_CRL))
576	# endif
577
578	# ifndef OPENSSL_NO_STDIO
579	X509 d2i_X509_fp(FILE fp, X509 **x509);
580	int i2d_X509_fp(FILE fp, const X509 x509);
581	X509_CRL d2i_X509_CRL_fp(FILE fp, X509_CRL **crl);
582	int i2d_X509_CRL_fp(FILE fp, const X509_CRL crl);
583	X509_REQ d2i_X509_REQ_fp(FILE fp, X509_REQ **req);
584	int i2d_X509_REQ_fp(FILE fp, const X509_REQ req);
585	# ifndef OPENSSL_NO_DEPRECATED_3_0
586	OSSL_DEPRECATEDIN_3_0 RSA d2i_RSAPrivateKey_fp(FILE fp, RSA **rsa);
587	OSSL_DEPRECATEDIN_3_0 int i2d_RSAPrivateKey_fp(FILE fp, const RSA rsa);
588	OSSL_DEPRECATEDIN_3_0 RSA d2i_RSAPublicKey_fp(FILE fp, RSA **rsa);
589	OSSL_DEPRECATEDIN_3_0 int i2d_RSAPublicKey_fp(FILE fp, const RSA rsa);
590	OSSL_DEPRECATEDIN_3_0 RSA d2i_RSA_PUBKEY_fp(FILE fp, RSA **rsa);
591	OSSL_DEPRECATEDIN_3_0 int i2d_RSA_PUBKEY_fp(FILE fp, const RSA rsa);
592	# endif
593	# ifndef OPENSSL_NO_DEPRECATED_3_0
594	# ifndef OPENSSL_NO_DSA
595	OSSL_DEPRECATEDIN_3_0 DSA d2i_DSA_PUBKEY_fp(FILE fp, DSA **dsa);
596	OSSL_DEPRECATEDIN_3_0 int i2d_DSA_PUBKEY_fp(FILE fp, const DSA dsa);
597	OSSL_DEPRECATEDIN_3_0 DSA d2i_DSAPrivateKey_fp(FILE fp, DSA **dsa);
598	OSSL_DEPRECATEDIN_3_0 int i2d_DSAPrivateKey_fp(FILE fp, const DSA dsa);
599	# endif
600	# endif
601	# ifndef OPENSSL_NO_DEPRECATED_3_0
602	# ifndef OPENSSL_NO_EC
603	OSSL_DEPRECATEDIN_3_0 EC_KEY d2i_EC_PUBKEY_fp(FILE fp, EC_KEY **eckey);
604	OSSL_DEPRECATEDIN_3_0 int i2d_EC_PUBKEY_fp(FILE fp, const EC_KEY eckey);
605	OSSL_DEPRECATEDIN_3_0 EC_KEY d2i_ECPrivateKey_fp(FILE fp, EC_KEY **eckey);
606	OSSL_DEPRECATEDIN_3_0 int i2d_ECPrivateKey_fp(FILE fp, const EC_KEY eckey);
607	# endif /* OPENSSL_NO_EC */
608	# endif /* OPENSSL_NO_DEPRECATED_3_0 */
609	X509_SIG d2i_PKCS8_fp(FILE fp, X509_SIG **p8);
610	int i2d_PKCS8_fp(FILE fp, const X509_SIG p8);
611	X509_PUBKEY d2i_X509_PUBKEY_fp(FILE fp, X509_PUBKEY **xpk);
612	int i2d_X509_PUBKEY_fp(FILE fp, const X509_PUBKEY xpk);
613	PKCS8_PRIV_KEY_INFO d2i_PKCS8_PRIV_KEY_INFO_fp(FILE fp,
614	PKCS8_PRIV_KEY_INFO **p8inf);
615	int i2d_PKCS8_PRIV_KEY_INFO_fp(FILE fp, const PKCS8_PRIV_KEY_INFO p8inf);
616	int i2d_PKCS8PrivateKeyInfo_fp(FILE fp, const EVP_PKEY key);
617	int i2d_PrivateKey_fp(FILE fp, const EVP_PKEY pkey);
618	EVP_PKEY d2i_PrivateKey_ex_fp(FILE fp, EVP_PKEY *a, OSSL_LIB_CTX libctx,
619	const char *propq);
620	EVP_PKEY d2i_PrivateKey_fp(FILE fp, EVP_PKEY **a);
621	int i2d_PUBKEY_fp(FILE fp, const EVP_PKEY pkey);
622	EVP_PKEY d2i_PUBKEY_ex_fp(FILE fp, EVP_PKEY *a, OSSL_LIB_CTX libctx,
623	const char *propq);
624	EVP_PKEY d2i_PUBKEY_fp(FILE fp, EVP_PKEY **a);
625	# endif
626
627	X509 d2i_X509_bio(BIO bp, X509 **x509);
628	int i2d_X509_bio(BIO bp, const X509 x509);
629	X509_CRL d2i_X509_CRL_bio(BIO bp, X509_CRL **crl);
630	int i2d_X509_CRL_bio(BIO bp, const X509_CRL crl);
631	X509_REQ d2i_X509_REQ_bio(BIO bp, X509_REQ **req);
632	int i2d_X509_REQ_bio(BIO bp, const X509_REQ req);
633	# ifndef OPENSSL_NO_DEPRECATED_3_0
634	OSSL_DEPRECATEDIN_3_0 RSA d2i_RSAPrivateKey_bio(BIO bp, RSA **rsa);
635	OSSL_DEPRECATEDIN_3_0 int i2d_RSAPrivateKey_bio(BIO bp, const RSA rsa);
636	OSSL_DEPRECATEDIN_3_0 RSA d2i_RSAPublicKey_bio(BIO bp, RSA **rsa);
637	OSSL_DEPRECATEDIN_3_0 int i2d_RSAPublicKey_bio(BIO bp, const RSA rsa);
638	OSSL_DEPRECATEDIN_3_0 RSA d2i_RSA_PUBKEY_bio(BIO bp, RSA **rsa);
639	OSSL_DEPRECATEDIN_3_0 int i2d_RSA_PUBKEY_bio(BIO bp, const RSA rsa);
640	# endif
641	# ifndef OPENSSL_NO_DEPRECATED_3_0
642	# ifndef OPENSSL_NO_DSA
643	OSSL_DEPRECATEDIN_3_0 DSA d2i_DSA_PUBKEY_bio(BIO bp, DSA **dsa);
644	OSSL_DEPRECATEDIN_3_0 int i2d_DSA_PUBKEY_bio(BIO bp, const DSA dsa);
645	OSSL_DEPRECATEDIN_3_0 DSA d2i_DSAPrivateKey_bio(BIO bp, DSA **dsa);
646	OSSL_DEPRECATEDIN_3_0 int i2d_DSAPrivateKey_bio(BIO bp, const DSA dsa);
647	# endif
648	# endif
649
650	# ifndef OPENSSL_NO_DEPRECATED_3_0
651	# ifndef OPENSSL_NO_EC
652	OSSL_DEPRECATEDIN_3_0 EC_KEY d2i_EC_PUBKEY_bio(BIO bp, EC_KEY **eckey);
653	OSSL_DEPRECATEDIN_3_0 int i2d_EC_PUBKEY_bio(BIO bp, const EC_KEY eckey);
654	OSSL_DEPRECATEDIN_3_0 EC_KEY d2i_ECPrivateKey_bio(BIO bp, EC_KEY **eckey);
655	OSSL_DEPRECATEDIN_3_0 int i2d_ECPrivateKey_bio(BIO bp, const EC_KEY eckey);
656	# endif /* OPENSSL_NO_EC */
657	# endif /* OPENSSL_NO_DEPRECATED_3_0 */
658
659	X509_SIG d2i_PKCS8_bio(BIO bp, X509_SIG **p8);
660	int i2d_PKCS8_bio(BIO bp, const X509_SIG p8);
661	X509_PUBKEY d2i_X509_PUBKEY_bio(BIO bp, X509_PUBKEY **xpk);
662	int i2d_X509_PUBKEY_bio(BIO bp, const X509_PUBKEY xpk);
663	PKCS8_PRIV_KEY_INFO d2i_PKCS8_PRIV_KEY_INFO_bio(BIO bp,
664	PKCS8_PRIV_KEY_INFO **p8inf);
665	int i2d_PKCS8_PRIV_KEY_INFO_bio(BIO bp, const PKCS8_PRIV_KEY_INFO p8inf);
666	int i2d_PKCS8PrivateKeyInfo_bio(BIO bp, const EVP_PKEY key);
667	int i2d_PrivateKey_bio(BIO bp, const EVP_PKEY pkey);
668	EVP_PKEY d2i_PrivateKey_ex_bio(BIO bp, EVP_PKEY *a, OSSL_LIB_CTX libctx,
669	const char *propq);
670	EVP_PKEY d2i_PrivateKey_bio(BIO bp, EVP_PKEY **a);
671	int i2d_PUBKEY_bio(BIO bp, const EVP_PKEY pkey);
672	EVP_PKEY d2i_PUBKEY_ex_bio(BIO bp, EVP_PKEY *a, OSSL_LIB_CTX libctx,
673	const char *propq);
674	EVP_PKEY d2i_PUBKEY_bio(BIO bp, EVP_PKEY **a);
675
676	DECLARE_ASN1_DUP_FUNCTION(X509)
677	DECLARE_ASN1_DUP_FUNCTION(X509_ALGOR)
678	DECLARE_ASN1_DUP_FUNCTION(X509_ATTRIBUTE)
679	DECLARE_ASN1_DUP_FUNCTION(X509_CRL)
680	DECLARE_ASN1_DUP_FUNCTION(X509_EXTENSION)
681	DECLARE_ASN1_DUP_FUNCTION(X509_PUBKEY)
682	DECLARE_ASN1_DUP_FUNCTION(X509_REQ)
683	DECLARE_ASN1_DUP_FUNCTION(X509_REVOKED)
684	int X509_ALGOR_set0(X509_ALGOR alg, ASN1_OBJECT aobj, int ptype,
685	void *pval);
686	void X509_ALGOR_get0(const ASN1_OBJECT *paobj, int pptype,
687	const void *ppval, const X509_ALGOR algor);
688	void X509_ALGOR_set_md(X509_ALGOR alg, const EVP_MD md);
689	int X509_ALGOR_cmp(const X509_ALGOR a, const X509_ALGOR b);
690	int X509_ALGOR_copy(X509_ALGOR dest, const X509_ALGOR src);
691
692	DECLARE_ASN1_DUP_FUNCTION(X509_NAME)
693	DECLARE_ASN1_DUP_FUNCTION(X509_NAME_ENTRY)
694
695	int X509_cmp_time(const ASN1_TIME s, time_t t);
696	int X509_cmp_current_time(const ASN1_TIME *s);
697	int X509_cmp_timeframe(const X509_VERIFY_PARAM *vpm,
698	const ASN1_TIME start, const ASN1_TIME end);
699	ASN1_TIME X509_time_adj(ASN1_TIME s, long adj, time_t *t);
700	ASN1_TIME X509_time_adj_ex(ASN1_TIME s,
701	int offset_day, long offset_sec, time_t *t);
702	ASN1_TIME X509_gmtime_adj(ASN1_TIME s, long adj);
703
704	const char *X509_get_default_cert_area(void);
705	const char *X509_get_default_cert_dir(void);
706	const char *X509_get_default_cert_file(void);
707	const char *X509_get_default_cert_dir_env(void);
708	const char *X509_get_default_cert_file_env(void);
709	const char *X509_get_default_private_dir(void);
710
711	X509_REQ X509_to_X509_REQ(X509 x, EVP_PKEY pkey, const EVP_MD md);
712	X509 X509_REQ_to_X509(X509_REQ r, int days, EVP_PKEY *pkey);
713
714	DECLARE_ASN1_FUNCTIONS(X509_ALGOR)
715	DECLARE_ASN1_ENCODE_FUNCTIONS(X509_ALGORS, X509_ALGORS, X509_ALGORS)
716	DECLARE_ASN1_FUNCTIONS(X509_VAL)
717
718	DECLARE_ASN1_FUNCTIONS(X509_PUBKEY)
719
720	X509_PUBKEY X509_PUBKEY_new_ex(OSSL_LIB_CTX libctx, const char *propq);
721	int X509_PUBKEY_set(X509_PUBKEY *x, EVP_PKEY pkey);
722	EVP_PKEY X509_PUBKEY_get0(const X509_PUBKEY key);
723	EVP_PKEY X509_PUBKEY_get(const X509_PUBKEY key);
724	int X509_get_pubkey_parameters(EVP_PKEY pkey, STACK_OF(X509) chain);
725	long X509_get_pathlen(X509 *x);
726	DECLARE_ASN1_ENCODE_FUNCTIONS_only(EVP_PKEY, PUBKEY)
727	EVP_PKEY d2i_PUBKEY_ex(EVP_PKEY a, const unsigned char *pp, long length,
728	OSSL_LIB_CTX libctx, const char propq);
729	# ifndef OPENSSL_NO_DEPRECATED_3_0
730	DECLARE_ASN1_ENCODE_FUNCTIONS_only_attr(OSSL_DEPRECATEDIN_3_0,RSA, RSA_PUBKEY)
731	# endif
732	# ifndef OPENSSL_NO_DEPRECATED_3_0
733	# ifndef OPENSSL_NO_DSA
734	DECLARE_ASN1_ENCODE_FUNCTIONS_only_attr(OSSL_DEPRECATEDIN_3_0,DSA, DSA_PUBKEY)
735	# endif
736	# endif
737	# ifndef OPENSSL_NO_DEPRECATED_3_0
738	# ifndef OPENSSL_NO_EC
739	DECLARE_ASN1_ENCODE_FUNCTIONS_only_attr(OSSL_DEPRECATEDIN_3_0, EC_KEY, EC_PUBKEY)
740	# endif
741	# endif
742
743	DECLARE_ASN1_FUNCTIONS(X509_SIG)
744	void X509_SIG_get0(const X509_SIG sig, const X509_ALGOR *palg,
745	const ASN1_OCTET_STRING **pdigest);
746	void X509_SIG_getm(X509_SIG sig, X509_ALGOR *palg,
747	ASN1_OCTET_STRING **pdigest);
748
749	DECLARE_ASN1_FUNCTIONS(X509_REQ_INFO)
750	DECLARE_ASN1_FUNCTIONS(X509_REQ)
751	X509_REQ X509_REQ_new_ex(OSSL_LIB_CTX libctx, const char *propq);
752
753	DECLARE_ASN1_FUNCTIONS(X509_ATTRIBUTE)
754	X509_ATTRIBUTE X509_ATTRIBUTE_create(int nid, int atrtype, void value);
755
756	DECLARE_ASN1_FUNCTIONS(X509_EXTENSION)
757	DECLARE_ASN1_ENCODE_FUNCTIONS(X509_EXTENSIONS, X509_EXTENSIONS, X509_EXTENSIONS)
758
759	DECLARE_ASN1_FUNCTIONS(X509_NAME_ENTRY)
760
761	DECLARE_ASN1_FUNCTIONS(X509_NAME)
762
763	int X509_NAME_set(X509_NAME *xn, const X509_NAME name);
764
765	DECLARE_ASN1_FUNCTIONS(X509_CINF)
766	DECLARE_ASN1_FUNCTIONS(X509)
767	X509 X509_new_ex(OSSL_LIB_CTX libctx, const char *propq);
768	DECLARE_ASN1_FUNCTIONS(X509_CERT_AUX)
769
770	#define X509_get_ex_new_index(l, p, newf, dupf, freef) \
771	CRYPTO_get_ex_new_index(CRYPTO_EX_INDEX_X509, l, p, newf, dupf, freef)
772	int X509_set_ex_data(X509 r, int idx, void arg);
773	void X509_get_ex_data(const X509 r, int idx);
774	DECLARE_ASN1_ENCODE_FUNCTIONS_only(X509,X509_AUX)
775
776	int i2d_re_X509_tbs(X509 x, unsigned char *pp);
777
778	int X509_SIG_INFO_get(const X509_SIG_INFO siginf, int mdnid, int *pknid,
779	int secbits, uint32_t flags);
780	void X509_SIG_INFO_set(X509_SIG_INFO *siginf, int mdnid, int pknid,
781	int secbits, uint32_t flags);
782
783	int X509_get_signature_info(X509 x, int mdnid, int pknid, int secbits,
784	uint32_t *flags);
785
786	void X509_get0_signature(const ASN1_BIT_STRING **psig,
787	const X509_ALGOR *palg, const X509 x);
788	int X509_get_signature_nid(const X509 *x);
789
790	void X509_set0_distinguishing_id(X509 x, ASN1_OCTET_STRING d_id);
791	ASN1_OCTET_STRING X509_get0_distinguishing_id(X509 x);
792	void X509_REQ_set0_distinguishing_id(X509_REQ x, ASN1_OCTET_STRING d_id);
793	ASN1_OCTET_STRING X509_REQ_get0_distinguishing_id(X509_REQ x);
794
795	int X509_alias_set1(X509 x, const unsigned char name, int len);
796	int X509_keyid_set1(X509 x, const unsigned char id, int len);
797	unsigned char X509_alias_get0(X509 x, int *len);
798	unsigned char X509_keyid_get0(X509 x, int *len);
799
800	DECLARE_ASN1_FUNCTIONS(X509_REVOKED)
801	DECLARE_ASN1_FUNCTIONS(X509_CRL_INFO)
802	DECLARE_ASN1_FUNCTIONS(X509_CRL)
803	X509_CRL X509_CRL_new_ex(OSSL_LIB_CTX libctx, const char *propq);
804
805	int X509_CRL_add0_revoked(X509_CRL crl, X509_REVOKED rev);
806	int X509_CRL_get0_by_serial(X509_CRL *crl,
807	X509_REVOKED *ret, const ASN1_INTEGER serial);
808	int X509_CRL_get0_by_cert(X509_CRL crl, X509_REVOKED ret, X509 x);
809
810	X509_PKEY *X509_PKEY_new(void);
811	void X509_PKEY_free(X509_PKEY *a);
812
813	DECLARE_ASN1_FUNCTIONS(NETSCAPE_SPKI)
814	DECLARE_ASN1_FUNCTIONS(NETSCAPE_SPKAC)
815	DECLARE_ASN1_FUNCTIONS(NETSCAPE_CERT_SEQUENCE)
816
817	X509_INFO *X509_INFO_new(void);
818	void X509_INFO_free(X509_INFO *a);
819	char X509_NAME_oneline(const X509_NAME a, char *buf, int size);
820
821	#ifndef OPENSSL_NO_DEPRECATED_3_0
822	OSSL_DEPRECATEDIN_3_0
823	int ASN1_verify(i2d_of_void i2d, X509_ALGOR algor1,
824	ASN1_BIT_STRING signature, char data, EVP_PKEY *pkey);
825	OSSL_DEPRECATEDIN_3_0
826	int ASN1_digest(i2d_of_void i2d, const EVP_MD type, char *data,
827	unsigned char md, unsigned int len);
828	OSSL_DEPRECATEDIN_3_0
829	int ASN1_sign(i2d_of_void i2d, X509_ALGOR algor1, X509_ALGOR *algor2,
830	ASN1_BIT_STRING signature, char data, EVP_PKEY *pkey,
831	const EVP_MD *type);
832	#endif
833	int ASN1_item_digest(const ASN1_ITEM it, const EVP_MD type, void *data,
834	unsigned char md, unsigned int len);
835	int ASN1_item_verify(const ASN1_ITEM it, const X509_ALGOR alg,
836	const ASN1_BIT_STRING signature, const void data,
837	EVP_PKEY *pkey);
838	int ASN1_item_verify_ctx(const ASN1_ITEM it, const X509_ALGOR alg,
839	const ASN1_BIT_STRING signature, const void data,
840	EVP_MD_CTX *ctx);
841	int ASN1_item_sign(const ASN1_ITEM it, X509_ALGOR algor1, X509_ALGOR *algor2,
842	ASN1_BIT_STRING signature, const void data,
843	EVP_PKEY pkey, const EVP_MD md);
844	int ASN1_item_sign_ctx(const ASN1_ITEM it, X509_ALGOR algor1,
845	X509_ALGOR algor2, ASN1_BIT_STRING signature,
846	const void data, EVP_MD_CTX ctx);
847
848	#define X509_VERSION_1 0
849	#define X509_VERSION_2 1
850	#define X509_VERSION_3 2
851
852	long X509_get_version(const X509 *x);
853	int X509_set_version(X509 *x, long version);
854	int X509_set_serialNumber(X509 x, ASN1_INTEGER serial);
855	ASN1_INTEGER X509_get_serialNumber(X509 x);
856	const ASN1_INTEGER X509_get0_serialNumber(const X509 x);
857	int X509_set_issuer_name(X509 x, const X509_NAME name);
858	X509_NAME X509_get_issuer_name(const X509 a);
859	int X509_set_subject_name(X509 x, const X509_NAME name);
860	X509_NAME X509_get_subject_name(const X509 a);
861	const ASN1_TIME * X509_get0_notBefore(const X509 *x);
862	ASN1_TIME X509_getm_notBefore(const X509 x);
863	int X509_set1_notBefore(X509 x, const ASN1_TIME tm);
864	const ASN1_TIME X509_get0_notAfter(const X509 x);
865	ASN1_TIME X509_getm_notAfter(const X509 x);
866	int X509_set1_notAfter(X509 x, const ASN1_TIME tm);
867	int X509_set_pubkey(X509 x, EVP_PKEY pkey);
868	int X509_up_ref(X509 *x);
869	int X509_get_signature_type(const X509 *x);
870
871	# ifndef OPENSSL_NO_DEPRECATED_1_1_0
872	# define X509_get_notBefore X509_getm_notBefore
873	# define X509_get_notAfter X509_getm_notAfter
874	# define X509_set_notBefore X509_set1_notBefore
875	# define X509_set_notAfter X509_set1_notAfter
876	#endif
877
878
879	/*
880	* This one is only used so that a binary form can output, as in
881	* i2d_X509_PUBKEY(X509_get_X509_PUBKEY(x), &buf)
882	*/
883	X509_PUBKEY X509_get_X509_PUBKEY(const X509 x);
884	const STACK_OF(X509_EXTENSION) X509_get0_extensions(const X509 x);
885	void X509_get0_uids(const X509 x, const ASN1_BIT_STRING *piuid,
886	const ASN1_BIT_STRING **psuid);
887	const X509_ALGOR X509_get0_tbs_sigalg(const X509 x);
888
889	EVP_PKEY X509_get0_pubkey(const X509 x);
890	EVP_PKEY X509_get_pubkey(X509 x);
891	ASN1_BIT_STRING X509_get0_pubkey_bitstr(const X509 x);
892
893	#define X509_REQ_VERSION_1 0
894
895	long X509_REQ_get_version(const X509_REQ *req);
896	int X509_REQ_set_version(X509_REQ *x, long version);
897	X509_NAME X509_REQ_get_subject_name(const X509_REQ req);
898	int X509_REQ_set_subject_name(X509_REQ req, const X509_NAME name);
899	void X509_REQ_get0_signature(const X509_REQ req, const ASN1_BIT_STRING *psig,
900	const X509_ALGOR **palg);
901	void X509_REQ_set0_signature(X509_REQ req, ASN1_BIT_STRING psig);
902	int X509_REQ_set1_signature_algo(X509_REQ req, X509_ALGOR palg);
903	int X509_REQ_get_signature_nid(const X509_REQ *req);
904	int i2d_re_X509_REQ_tbs(X509_REQ req, unsigned char *pp);
905	int X509_REQ_set_pubkey(X509_REQ x, EVP_PKEY pkey);
906	EVP_PKEY X509_REQ_get_pubkey(X509_REQ req);
907	EVP_PKEY X509_REQ_get0_pubkey(const X509_REQ req);
908	X509_PUBKEY X509_REQ_get_X509_PUBKEY(X509_REQ req);
909	int X509_REQ_extension_nid(int nid);
910	int *X509_REQ_get_extension_nids(void);
911	void X509_REQ_set_extension_nids(int *nids);
912	STACK_OF(X509_EXTENSION) X509_REQ_get_extensions(OSSL_FUTURE_CONST X509_REQ req);
913	int X509_REQ_add_extensions_nid(X509_REQ *req,
914	const STACK_OF(X509_EXTENSION) *exts, int nid);
915	int X509_REQ_add_extensions(X509_REQ req, const STACK_OF(X509_EXTENSION) ext);
916	int X509_REQ_get_attr_count(const X509_REQ *req);
917	int X509_REQ_get_attr_by_NID(const X509_REQ *req, int nid, int lastpos);
918	int X509_REQ_get_attr_by_OBJ(const X509_REQ req, const ASN1_OBJECT obj,
919	int lastpos);
920	X509_ATTRIBUTE X509_REQ_get_attr(const X509_REQ req, int loc);
921	X509_ATTRIBUTE X509_REQ_delete_attr(X509_REQ req, int loc);
922	int X509_REQ_add1_attr(X509_REQ req, X509_ATTRIBUTE attr);
923	int X509_REQ_add1_attr_by_OBJ(X509_REQ *req,
924	const ASN1_OBJECT *obj, int type,
925	const unsigned char *bytes, int len);
926	int X509_REQ_add1_attr_by_NID(X509_REQ *req,
927	int nid, int type,
928	const unsigned char *bytes, int len);
929	int X509_REQ_add1_attr_by_txt(X509_REQ *req,
930	const char *attrname, int type,
931	const unsigned char *bytes, int len);
932
933	#define X509_CRL_VERSION_1 0
934	#define X509_CRL_VERSION_2 1
935
936	int X509_CRL_set_version(X509_CRL *x, long version);
937	int X509_CRL_set_issuer_name(X509_CRL x, const X509_NAME name);
938	int X509_CRL_set1_lastUpdate(X509_CRL x, const ASN1_TIME tm);
939	int X509_CRL_set1_nextUpdate(X509_CRL x, const ASN1_TIME tm);
940	int X509_CRL_sort(X509_CRL *crl);
941	int X509_CRL_up_ref(X509_CRL *crl);
942
943	# ifndef OPENSSL_NO_DEPRECATED_1_1_0
944	# define X509_CRL_set_lastUpdate X509_CRL_set1_lastUpdate
945	# define X509_CRL_set_nextUpdate X509_CRL_set1_nextUpdate
946	#endif
947
948	long X509_CRL_get_version(const X509_CRL *crl);
949	const ASN1_TIME X509_CRL_get0_lastUpdate(const X509_CRL crl);
950	const ASN1_TIME X509_CRL_get0_nextUpdate(const X509_CRL crl);
951	#ifndef OPENSSL_NO_DEPRECATED_1_1_0
952	OSSL_DEPRECATEDIN_1_1_0 ASN1_TIME X509_CRL_get_lastUpdate(X509_CRL crl);
953	OSSL_DEPRECATEDIN_1_1_0 ASN1_TIME X509_CRL_get_nextUpdate(X509_CRL crl);
954	#endif
955	X509_NAME X509_CRL_get_issuer(const X509_CRL crl);
956	const STACK_OF(X509_EXTENSION) X509_CRL_get0_extensions(const X509_CRL crl);
957	STACK_OF(X509_REVOKED) X509_CRL_get_REVOKED(X509_CRL crl);
958	void X509_CRL_get0_signature(const X509_CRL crl, const ASN1_BIT_STRING *psig,
959	const X509_ALGOR **palg);
960	int X509_CRL_get_signature_nid(const X509_CRL *crl);
961	int i2d_re_X509_CRL_tbs(X509_CRL req, unsigned char *pp);
962
963	const ASN1_INTEGER X509_REVOKED_get0_serialNumber(const X509_REVOKED x);
964	int X509_REVOKED_set_serialNumber(X509_REVOKED x, ASN1_INTEGER serial);
965	const ASN1_TIME X509_REVOKED_get0_revocationDate(const X509_REVOKED x);
966	int X509_REVOKED_set_revocationDate(X509_REVOKED r, ASN1_TIME tm);
967	const STACK_OF(X509_EXTENSION) *
968	X509_REVOKED_get0_extensions(const X509_REVOKED *r);
969
970	X509_CRL X509_CRL_diff(X509_CRL base, X509_CRL *newer,
971	EVP_PKEY skey, const EVP_MD md, unsigned int flags);
972
973	int X509_REQ_check_private_key(const X509_REQ req, EVP_PKEY pkey);
974
975	int X509_check_private_key(const X509 cert, const EVP_PKEY pkey);
976	int X509_chain_check_suiteb(int *perror_depth,
977	X509 x, STACK_OF(X509) chain,
978	unsigned long flags);
979	int X509_CRL_check_suiteb(X509_CRL crl, EVP_PKEY pk, unsigned long flags);
980	void OSSL_STACK_OF_X509_free(STACK_OF(X509) *certs);
981	STACK_OF(X509) X509_chain_up_ref(STACK_OF(X509) chain);
982
983	int X509_issuer_and_serial_cmp(const X509 a, const X509 b);
984	unsigned long X509_issuer_and_serial_hash(X509 *a);
985
986	int X509_issuer_name_cmp(const X509 a, const X509 b);
987	unsigned long X509_issuer_name_hash(X509 *a);
988
989	int X509_subject_name_cmp(const X509 a, const X509 b);
990	unsigned long X509_subject_name_hash(X509 *x);
991
992	# ifndef OPENSSL_NO_MD5
993	unsigned long X509_issuer_name_hash_old(X509 *a);
994	unsigned long X509_subject_name_hash_old(X509 *x);
995	# endif
996
997	# define X509_ADD_FLAG_DEFAULT 0
998	# define X509_ADD_FLAG_UP_REF 0x1
999	# define X509_ADD_FLAG_PREPEND 0x2
1000	# define X509_ADD_FLAG_NO_DUP 0x4
1001	# define X509_ADD_FLAG_NO_SS 0x8
1002	int X509_add_cert(STACK_OF(X509) sk, X509 cert, int flags);
1003	int X509_add_certs(STACK_OF(X509) sk, STACK_OF(X509) certs, int flags);
1004
1005	int X509_cmp(const X509 a, const X509 b);
1006	int X509_NAME_cmp(const X509_NAME a, const X509_NAME b);
1007	#ifndef OPENSSL_NO_DEPRECATED_3_0
1008	# define X509_NAME_hash(x) X509_NAME_hash_ex(x, NULL, NULL, NULL)
1009	OSSL_DEPRECATEDIN_3_0 int X509_certificate_type(const X509 *x,
1010	const EVP_PKEY *pubkey);
1011	#endif
1012	unsigned long X509_NAME_hash_ex(const X509_NAME x, OSSL_LIB_CTX libctx,
1013	const char propq, int ok);
1014	unsigned long X509_NAME_hash_old(const X509_NAME *x);
1015
1016	int X509_CRL_cmp(const X509_CRL a, const X509_CRL b);
1017	int X509_CRL_match(const X509_CRL a, const X509_CRL b);
1018	int X509_aux_print(BIO out, X509 x, int indent);
1019	# ifndef OPENSSL_NO_STDIO
1020	int X509_print_ex_fp(FILE bp, X509 x, unsigned long nmflag,
1021	unsigned long cflag);
1022	int X509_print_fp(FILE bp, X509 x);
1023	int X509_CRL_print_fp(FILE bp, X509_CRL x);
1024	int X509_REQ_print_fp(FILE bp, X509_REQ req);
1025	int X509_NAME_print_ex_fp(FILE fp, const X509_NAME nm, int indent,
1026	unsigned long flags);
1027	# endif
1028
1029	int X509_NAME_print(BIO bp, const X509_NAME name, int obase);
1030	int X509_NAME_print_ex(BIO out, const X509_NAME nm, int indent,
1031	unsigned long flags);
1032	int X509_print_ex(BIO bp, X509 x, unsigned long nmflag,
1033	unsigned long cflag);
1034	int X509_print(BIO bp, X509 x);
1035	int X509_ocspid_print(BIO bp, X509 x);
1036	int X509_CRL_print_ex(BIO out, X509_CRL x, unsigned long nmflag);
1037	int X509_CRL_print(BIO bp, X509_CRL x);
1038	int X509_REQ_print_ex(BIO bp, X509_REQ x, unsigned long nmflag,
1039	unsigned long cflag);
1040	int X509_REQ_print(BIO bp, X509_REQ req);
1041
1042	int X509_NAME_entry_count(const X509_NAME *name);
1043	int X509_NAME_get_text_by_NID(const X509_NAME *name, int nid,
1044	char *buf, int len);
1045	int X509_NAME_get_text_by_OBJ(const X509_NAME name, const ASN1_OBJECT obj,
1046	char *buf, int len);
1047
1048	/*
1049	* NOTE: you should be passing -1, not 0 as lastpos. The functions that use
1050	* lastpos, search after that position on.
1051	*/
1052	int X509_NAME_get_index_by_NID(const X509_NAME *name, int nid, int lastpos);
1053	int X509_NAME_get_index_by_OBJ(const X509_NAME name, const ASN1_OBJECT obj,
1054	int lastpos);
1055	X509_NAME_ENTRY X509_NAME_get_entry(const X509_NAME name, int loc);
1056	X509_NAME_ENTRY X509_NAME_delete_entry(X509_NAME name, int loc);
1057	int X509_NAME_add_entry(X509_NAME name, const X509_NAME_ENTRY ne,
1058	int loc, int set);
1059	int X509_NAME_add_entry_by_OBJ(X509_NAME name, const ASN1_OBJECT obj, int type,
1060	const unsigned char *bytes, int len, int loc,
1061	int set);
1062	int X509_NAME_add_entry_by_NID(X509_NAME *name, int nid, int type,
1063	const unsigned char *bytes, int len, int loc,
1064	int set);
1065	X509_NAME_ENTRY X509_NAME_ENTRY_create_by_txt(X509_NAME_ENTRY *ne,
1066	const char *field, int type,
1067	const unsigned char *bytes,
1068	int len);
1069	X509_NAME_ENTRY X509_NAME_ENTRY_create_by_NID(X509_NAME_ENTRY *ne, int nid,
1070	int type,
1071	const unsigned char *bytes,
1072	int len);
1073	int X509_NAME_add_entry_by_txt(X509_NAME name, const char field, int type,
1074	const unsigned char *bytes, int len, int loc,
1075	int set);
1076	X509_NAME_ENTRY X509_NAME_ENTRY_create_by_OBJ(X509_NAME_ENTRY *ne,
1077	const ASN1_OBJECT *obj, int type,
1078	const unsigned char *bytes,
1079	int len);
1080	int X509_NAME_ENTRY_set_object(X509_NAME_ENTRY ne, const ASN1_OBJECT obj);
1081	int X509_NAME_ENTRY_set_data(X509_NAME_ENTRY *ne, int type,
1082	const unsigned char *bytes, int len);
1083	ASN1_OBJECT X509_NAME_ENTRY_get_object(const X509_NAME_ENTRY ne);
1084	ASN1_STRING * X509_NAME_ENTRY_get_data(const X509_NAME_ENTRY *ne);
1085	int X509_NAME_ENTRY_set(const X509_NAME_ENTRY *ne);
1086
1087	int X509_NAME_get0_der(const X509_NAME nm, const unsigned char *pder,
1088	size_t *pderlen);
1089
1090	int X509v3_get_ext_count(const STACK_OF(X509_EXTENSION) *x);
1091	int X509v3_get_ext_by_NID(const STACK_OF(X509_EXTENSION) *x,
1092	int nid, int lastpos);
1093	int X509v3_get_ext_by_OBJ(const STACK_OF(X509_EXTENSION) *x,
1094	const ASN1_OBJECT *obj, int lastpos);
1095	int X509v3_get_ext_by_critical(const STACK_OF(X509_EXTENSION) *x,
1096	int crit, int lastpos);
1097	X509_EXTENSION X509v3_get_ext(const STACK_OF(X509_EXTENSION) x, int loc);
1098	X509_EXTENSION X509v3_delete_ext(STACK_OF(X509_EXTENSION) x, int loc);
1099	STACK_OF(X509_EXTENSION) X509v3_add_ext(STACK_OF(X509_EXTENSION) *x,
1100	X509_EXTENSION *ex, int loc);
1101	STACK_OF(X509_EXTENSION) X509v3_add_extensions(STACK_OF(X509_EXTENSION) *target,
1102	const STACK_OF(X509_EXTENSION) *exts);
1103
1104	int X509_get_ext_count(const X509 *x);
1105	int X509_get_ext_by_NID(const X509 *x, int nid, int lastpos);
1106	int X509_get_ext_by_OBJ(const X509 x, const ASN1_OBJECT obj, int lastpos);
1107	int X509_get_ext_by_critical(const X509 *x, int crit, int lastpos);
1108	X509_EXTENSION X509_get_ext(const X509 x, int loc);
1109	X509_EXTENSION X509_delete_ext(X509 x, int loc);
1110	int X509_add_ext(X509 x, X509_EXTENSION ex, int loc);
1111	void X509_get_ext_d2i(const X509 x, int nid, int crit, int idx);
1112	int X509_add1_ext_i2d(X509 x, int nid, void value, int crit,
1113	unsigned long flags);
1114
1115	int X509_CRL_get_ext_count(const X509_CRL *x);
1116	int X509_CRL_get_ext_by_NID(const X509_CRL *x, int nid, int lastpos);
1117	int X509_CRL_get_ext_by_OBJ(const X509_CRL x, const ASN1_OBJECT obj,
1118	int lastpos);
1119	int X509_CRL_get_ext_by_critical(const X509_CRL *x, int crit, int lastpos);
1120	X509_EXTENSION X509_CRL_get_ext(const X509_CRL x, int loc);
1121	X509_EXTENSION X509_CRL_delete_ext(X509_CRL x, int loc);
1122	int X509_CRL_add_ext(X509_CRL x, X509_EXTENSION ex, int loc);
1123	void X509_CRL_get_ext_d2i(const X509_CRL x, int nid, int crit, int idx);
1124	int X509_CRL_add1_ext_i2d(X509_CRL x, int nid, void value, int crit,
1125	unsigned long flags);
1126
1127	int X509_REVOKED_get_ext_count(const X509_REVOKED *x);
1128	int X509_REVOKED_get_ext_by_NID(const X509_REVOKED *x, int nid, int lastpos);
1129	int X509_REVOKED_get_ext_by_OBJ(const X509_REVOKED x, const ASN1_OBJECT obj,
1130	int lastpos);
1131	int X509_REVOKED_get_ext_by_critical(const X509_REVOKED *x, int crit,
1132	int lastpos);
1133	X509_EXTENSION X509_REVOKED_get_ext(const X509_REVOKED x, int loc);
1134	X509_EXTENSION X509_REVOKED_delete_ext(X509_REVOKED x, int loc);
1135	int X509_REVOKED_add_ext(X509_REVOKED x, X509_EXTENSION ex, int loc);
1136	void X509_REVOKED_get_ext_d2i(const X509_REVOKED x, int nid, int *crit,
1137	int *idx);
1138	int X509_REVOKED_add1_ext_i2d(X509_REVOKED x, int nid, void value, int crit,
1139	unsigned long flags);
1140
1141	X509_EXTENSION X509_EXTENSION_create_by_NID(X509_EXTENSION *ex,
1142	int nid, int crit,
1143	ASN1_OCTET_STRING *data);
1144	X509_EXTENSION X509_EXTENSION_create_by_OBJ(X509_EXTENSION *ex,
1145	const ASN1_OBJECT *obj, int crit,
1146	ASN1_OCTET_STRING *data);
1147	int X509_EXTENSION_set_object(X509_EXTENSION ex, const ASN1_OBJECT obj);
1148	int X509_EXTENSION_set_critical(X509_EXTENSION *ex, int crit);
1149	int X509_EXTENSION_set_data(X509_EXTENSION ex, ASN1_OCTET_STRING data);
1150	ASN1_OBJECT X509_EXTENSION_get_object(X509_EXTENSION ex);
1151	ASN1_OCTET_STRING X509_EXTENSION_get_data(X509_EXTENSION ne);
1152	int X509_EXTENSION_get_critical(const X509_EXTENSION *ex);
1153
1154	int X509at_get_attr_count(const STACK_OF(X509_ATTRIBUTE) *x);
1155	int X509at_get_attr_by_NID(const STACK_OF(X509_ATTRIBUTE) *x, int nid,
1156	int lastpos);
1157	int X509at_get_attr_by_OBJ(const STACK_OF(X509_ATTRIBUTE) *sk,
1158	const ASN1_OBJECT *obj, int lastpos);
1159	X509_ATTRIBUTE X509at_get_attr(const STACK_OF(X509_ATTRIBUTE) x, int loc);
1160	X509_ATTRIBUTE X509at_delete_attr(STACK_OF(X509_ATTRIBUTE) x, int loc);
1161	STACK_OF(X509_ATTRIBUTE) X509at_add1_attr(STACK_OF(X509_ATTRIBUTE) *x,
1162	X509_ATTRIBUTE *attr);
1163	STACK_OF(X509_ATTRIBUTE) *X509at_add1_attr_by_OBJ(STACK_OF(X509_ATTRIBUTE)
1164	*x, const ASN1_OBJECT obj,
1165	int type,
1166	const unsigned char *bytes,
1167	int len);
1168	STACK_OF(X509_ATTRIBUTE) *X509at_add1_attr_by_NID(STACK_OF(X509_ATTRIBUTE)
1169	**x, int nid, int type,
1170	const unsigned char *bytes,
1171	int len);
1172	STACK_OF(X509_ATTRIBUTE) *X509at_add1_attr_by_txt(STACK_OF(X509_ATTRIBUTE)
1173	*x, const char attrname,
1174	int type,
1175	const unsigned char *bytes,
1176	int len);
1177	void X509at_get0_data_by_OBJ(const STACK_OF(X509_ATTRIBUTE) x,
1178	const ASN1_OBJECT *obj, int lastpos, int type);
1179	X509_ATTRIBUTE X509_ATTRIBUTE_create_by_NID(X509_ATTRIBUTE *attr, int nid,
1180	int atrtype, const void *data,
1181	int len);
1182	X509_ATTRIBUTE X509_ATTRIBUTE_create_by_OBJ(X509_ATTRIBUTE *attr,
1183	const ASN1_OBJECT *obj,
1184	int atrtype, const void *data,
1185	int len);
1186	X509_ATTRIBUTE X509_ATTRIBUTE_create_by_txt(X509_ATTRIBUTE *attr,
1187	const char *atrname, int type,
1188	const unsigned char *bytes,
1189	int len);
1190	int X509_ATTRIBUTE_set1_object(X509_ATTRIBUTE attr, const ASN1_OBJECT obj);
1191	int X509_ATTRIBUTE_set1_data(X509_ATTRIBUTE *attr, int attrtype,
1192	const void *data, int len);
1193	void X509_ATTRIBUTE_get0_data(X509_ATTRIBUTE attr, int idx, int atrtype,
1194	void *data);
1195	int X509_ATTRIBUTE_count(const X509_ATTRIBUTE *attr);
1196	ASN1_OBJECT X509_ATTRIBUTE_get0_object(X509_ATTRIBUTE attr);
1197	ASN1_TYPE X509_ATTRIBUTE_get0_type(X509_ATTRIBUTE attr, int idx);
1198
1199	int EVP_PKEY_get_attr_count(const EVP_PKEY *key);
1200	int EVP_PKEY_get_attr_by_NID(const EVP_PKEY *key, int nid, int lastpos);
1201	int EVP_PKEY_get_attr_by_OBJ(const EVP_PKEY key, const ASN1_OBJECT obj,
1202	int lastpos);
1203	X509_ATTRIBUTE EVP_PKEY_get_attr(const EVP_PKEY key, int loc);
1204	X509_ATTRIBUTE EVP_PKEY_delete_attr(EVP_PKEY key, int loc);
1205	int EVP_PKEY_add1_attr(EVP_PKEY key, X509_ATTRIBUTE attr);
1206	int EVP_PKEY_add1_attr_by_OBJ(EVP_PKEY *key,
1207	const ASN1_OBJECT *obj, int type,
1208	const unsigned char *bytes, int len);
1209	int EVP_PKEY_add1_attr_by_NID(EVP_PKEY *key,
1210	int nid, int type,
1211	const unsigned char *bytes, int len);
1212	int EVP_PKEY_add1_attr_by_txt(EVP_PKEY *key,
1213	const char *attrname, int type,
1214	const unsigned char *bytes, int len);
1215
1216	/* lookup a cert from a X509 STACK */
1217	X509 X509_find_by_issuer_and_serial(STACK_OF(X509) sk, const X509_NAME *name,
1218	const ASN1_INTEGER *serial);
1219	X509 X509_find_by_subject(STACK_OF(X509) sk, const X509_NAME *name);
1220
1221	DECLARE_ASN1_FUNCTIONS(PBEPARAM)
1222	DECLARE_ASN1_FUNCTIONS(PBE2PARAM)
1223	DECLARE_ASN1_FUNCTIONS(PBKDF2PARAM)
1224	DECLARE_ASN1_FUNCTIONS(PBMAC1PARAM)
1225	# ifndef OPENSSL_NO_SCRYPT
1226	DECLARE_ASN1_FUNCTIONS(SCRYPT_PARAMS)
1227	# endif
1228
1229	int PKCS5_pbe_set0_algor(X509_ALGOR *algor, int alg, int iter,
1230	const unsigned char *salt, int saltlen);
1231	int PKCS5_pbe_set0_algor_ex(X509_ALGOR *algor, int alg, int iter,
1232	const unsigned char *salt, int saltlen,
1233	OSSL_LIB_CTX *libctx);
1234
1235	X509_ALGOR *PKCS5_pbe_set(int alg, int iter,
1236	const unsigned char *salt, int saltlen);
1237	X509_ALGOR *PKCS5_pbe_set_ex(int alg, int iter,
1238	const unsigned char *salt, int saltlen,
1239	OSSL_LIB_CTX *libctx);
1240
1241	X509_ALGOR PKCS5_pbe2_set(const EVP_CIPHER cipher, int iter,
1242	unsigned char *salt, int saltlen);
1243	X509_ALGOR PKCS5_pbe2_set_iv(const EVP_CIPHER cipher, int iter,
1244	unsigned char *salt, int saltlen,
1245	unsigned char *aiv, int prf_nid);
1246	X509_ALGOR PKCS5_pbe2_set_iv_ex(const EVP_CIPHER cipher, int iter,
1247	unsigned char *salt, int saltlen,
1248	unsigned char *aiv, int prf_nid,
1249	OSSL_LIB_CTX *libctx);
1250
1251	#ifndef OPENSSL_NO_SCRYPT
1252	X509_ALGOR PKCS5_pbe2_set_scrypt(const EVP_CIPHER cipher,
1253	const unsigned char *salt, int saltlen,
1254	unsigned char *aiv, uint64_t N, uint64_t r,
1255	uint64_t p);
1256	#endif
1257
1258	X509_ALGOR PKCS5_pbkdf2_set(int iter, unsigned char salt, int saltlen,
1259	int prf_nid, int keylen);
1260	X509_ALGOR PKCS5_pbkdf2_set_ex(int iter, unsigned char salt, int saltlen,
1261	int prf_nid, int keylen,
1262	OSSL_LIB_CTX *libctx);
1263
1264	PBKDF2PARAM PBMAC1_get1_pbkdf2_param(const X509_ALGOR macalg);
1265	/* PKCS#8 utilities */
1266
1267	DECLARE_ASN1_FUNCTIONS(PKCS8_PRIV_KEY_INFO)
1268
1269	EVP_PKEY EVP_PKCS82PKEY(const PKCS8_PRIV_KEY_INFO p8);
1270	EVP_PKEY EVP_PKCS82PKEY_ex(const PKCS8_PRIV_KEY_INFO p8, OSSL_LIB_CTX *libctx,
1271	const char *propq);
1272	PKCS8_PRIV_KEY_INFO EVP_PKEY2PKCS8(const EVP_PKEY pkey);
1273
1274	int PKCS8_pkey_set0(PKCS8_PRIV_KEY_INFO priv, ASN1_OBJECT aobj,
1275	int version, int ptype, void *pval,
1276	unsigned char *penc, int penclen);
1277	int PKCS8_pkey_get0(const ASN1_OBJECT **ppkalg,
1278	const unsigned char *pk, int ppklen,
1279	const X509_ALGOR *pa, const PKCS8_PRIV_KEY_INFO p8);
1280
1281	const STACK_OF(X509_ATTRIBUTE) *
1282	PKCS8_pkey_get0_attrs(const PKCS8_PRIV_KEY_INFO *p8);
1283	int PKCS8_pkey_add1_attr(PKCS8_PRIV_KEY_INFO p8, X509_ATTRIBUTE attr);
1284	int PKCS8_pkey_add1_attr_by_NID(PKCS8_PRIV_KEY_INFO *p8, int nid, int type,
1285	const unsigned char *bytes, int len);
1286	int PKCS8_pkey_add1_attr_by_OBJ(PKCS8_PRIV_KEY_INFO p8, const ASN1_OBJECT obj,
1287	int type, const unsigned char *bytes, int len);
1288
1289
1290	void X509_PUBKEY_set0_public_key(X509_PUBKEY *pub,
1291	unsigned char *penc, int penclen);
1292	int X509_PUBKEY_set0_param(X509_PUBKEY pub, ASN1_OBJECT aobj,
1293	int ptype, void *pval,
1294	unsigned char *penc, int penclen);
1295	int X509_PUBKEY_get0_param(ASN1_OBJECT **ppkalg,
1296	const unsigned char *pk, int ppklen,
1297	X509_ALGOR *pa, const X509_PUBKEY pub);
1298	int X509_PUBKEY_eq(const X509_PUBKEY a, const X509_PUBKEY b);
1299
1300	# ifdef __cplusplus
1301	}
1302	# endif
1303	#endif

Note: See TracBrowser for help on using the repository browser.

source: vbox/trunk/src/libs/openssl-3.4.1/gen-includes/openssl/x509.h

Download in other formats: