Changeset 104745 in vbox for trunk/include

Timestamp:

May 21, 2024 12:52:09 PM (8 months ago)

Author:

vboxsync

Message:

IPRT,Main: Reworked the newly introduced RTCrX509Certificate_Generate function. It's now called RTCrX509Certificate_GenerateSelfSignedRsa and takes a few more parameters. We still can't read the output it creates. Added a create-self-signed-rsa-cert command to RTSignTool for easy testing. bugref:10310

Location:

trunk/include/iprt

Files:

• crypto/x509.h (modified) (1 diff)
• mangling.h (modified) (1 diff)

trunk/include/iprt/crypto/x509.h

@@ -1213 +1213 @@
 
 /**
- * Generates and signs a certificate.
- */
-RTDECL(int) RTCrX509Certificate_Generate(const char *pszServerCertificate, const char *pszServerPrivateKey);
+ * Generates a self-signed RSA certificate, storing the result as two file.
+ *
+ * @note    The private key will be stored unencrypted!
+ *
+ * @returns IPRT status code.
+ * @param   enmDigestType       The digest type to use when signing.
+ * @param   cBits               The private key size (in bits).
+ * @param   cSecsValidFor       Number of seconds the certificate should be
+ *                              valid for (starting now).
+ * @param   fKeyUsage           Key usage mask: RTCRX509CERT_KEY_USAGE_F_XXX.
+ * @param   fExtKeyUsage        Extended key usage mask: RTCRX509CERT_EKU_F_XXX.
+ * @param   pvSubjectTodo       TODO: Subject name.
+ * @param   pszCertFile         Where to store the certificate (PEM formatting).
+ * @param   pszPrivateKeyFile   Where to store the unencrypted private key (PEM
+ *                              formatting).
+ * @param   pErrInfo            Where to return extended error information.
+ *                              Optional.
+ */
+RTDECL(int) RTCrX509Certificate_GenerateSelfSignedRsa(RTDIGESTTYPE enmDigestType, uint32_t cBits, uint32_t cSecsValidFor,
+                                                      uint32_t fKeyUsage, uint64_t fExtKeyUsage, void *pvSubjectTodo,
+                                                      const char *pszCertFile, const char *pszPrivateKeyFile, PRTERRINFO pErrInfo);
 
 RT_C_DECLS_END

trunk/include/iprt/mangling.h

@@ -4091 +4091 @@
 # define RTCrX509Certificate_VerifySignature            RT_MANGLER(RTCrX509Certificate_VerifySignature)
 # define RTCrX509Certificate_VerifySignatureSelfSigned  RT_MANGLER(RTCrX509Certificate_VerifySignatureSelfSigned)
-# define RTCrX509Certificate_Generate                   RT_MANGLER(RTCrX509Certificate_Generate)
+# define RTCrX509Certificate_GenerateSelfSignedRsa      RT_MANGLER(RTCrX509Certificate_GenerateSelfSignedRsa)
 # define RTCrTafCertPathControls_DecodeAsn1             RT_MANGLER(RTCrTafCertPathControls_DecodeAsn1)
 # define RTCrTafTrustAnchorChoice_DecodeAsn1            RT_MANGLER(RTCrTafTrustAnchorChoice_DecodeAsn1)