wolf SSL / wolfSSL

wolfSSL SSL/TLS library, support up to TLS1.3

Dependents:   CyaSSL-Twitter-OAuth4Tw Example-client-tls-cert TwitterReader TweetTest ... more

wolfssl/ocsp.h@16:8e0d178b1d1e, 2020-06-04 (annotated)

Committer:
wolfSSL
Date:
Thu Jun 04 23:57:22 2020 +0000
Revision:
16:8e0d178b1d1e
Parent:
15:117db924cf7c 
wolfSSL 4.4.0

Who changed what in which revision?

UserRevisionLine numberNew contents of line
wolfSSL 15:117db924cf7c 1 /* ocsp.h
wolfSSL 15:117db924cf7c 2 *
wolfSSL 16:8e0d178b1d1e 3 * Copyright (C) 2006-2020 wolfSSL Inc.
wolfSSL 15:117db924cf7c 4 *
wolfSSL 15:117db924cf7c 5 * This file is part of wolfSSL.
wolfSSL 15:117db924cf7c 6 *
wolfSSL 15:117db924cf7c 7 * wolfSSL is free software; you can redistribute it and/or modify
wolfSSL 15:117db924cf7c 8 * it under the terms of the GNU General Public License as published by
wolfSSL 15:117db924cf7c 9 * the Free Software Foundation; either version 2 of the License, or
wolfSSL 15:117db924cf7c 10 * (at your option) any later version.
wolfSSL 15:117db924cf7c 11 *
wolfSSL 15:117db924cf7c 12 * wolfSSL is distributed in the hope that it will be useful,
wolfSSL 15:117db924cf7c 13 * but WITHOUT ANY WARRANTY; without even the implied warranty of
wolfSSL 15:117db924cf7c 14 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
wolfSSL 15:117db924cf7c 15 * GNU General Public License for more details.
wolfSSL 15:117db924cf7c 16 *
wolfSSL 15:117db924cf7c 17 * You should have received a copy of the GNU General Public License
wolfSSL 15:117db924cf7c 18 * along with this program; if not, write to the Free Software
wolfSSL 15:117db924cf7c 19 * Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA 02110-1335, USA
wolfSSL 15:117db924cf7c 20 */
wolfSSL 15:117db924cf7c 21
wolfSSL 15:117db924cf7c 22
wolfSSL 15:117db924cf7c 23
wolfSSL 15:117db924cf7c 24 /* wolfSSL OCSP API */
wolfSSL 15:117db924cf7c 25
wolfSSL 15:117db924cf7c 26 #ifndef WOLFSSL_OCSP_H
wolfSSL 15:117db924cf7c 27 #define WOLFSSL_OCSP_H
wolfSSL 15:117db924cf7c 28
wolfSSL 15:117db924cf7c 29 #ifdef HAVE_OCSP
wolfSSL 15:117db924cf7c 30
wolfSSL 15:117db924cf7c 31 #include <wolfssl/ssl.h>
wolfSSL 15:117db924cf7c 32 #include <wolfssl/wolfcrypt/asn.h>
wolfSSL 15:117db924cf7c 33
wolfSSL 15:117db924cf7c 34 #ifdef __cplusplus
wolfSSL 15:117db924cf7c 35 extern "C" {
wolfSSL 15:117db924cf7c 36 #endif
wolfSSL 15:117db924cf7c 37
wolfSSL 15:117db924cf7c 38 typedef struct WOLFSSL_OCSP WOLFSSL_OCSP;
wolfSSL 15:117db924cf7c 39
wolfSSL 16:8e0d178b1d1e 40 #if defined(OPENSSL_ALL) || defined(OPENSSL_EXTRA) || defined(WOLFSSL_NGINX) ||\
wolfSSL 16:8e0d178b1d1e 41 defined(WOLFSSL_HAPROXY)
wolfSSL 15:117db924cf7c 42 typedef struct OcspResponse WOLFSSL_OCSP_BASICRESP;
wolfSSL 15:117db924cf7c 43
wolfSSL 15:117db924cf7c 44 typedef struct OcspRequest WOLFSSL_OCSP_CERTID;
wolfSSL 15:117db924cf7c 45
wolfSSL 15:117db924cf7c 46 typedef struct OcspRequest WOLFSSL_OCSP_ONEREQ;
wolfSSL 16:8e0d178b1d1e 47
wolfSSL 16:8e0d178b1d1e 48 typedef struct OcspRequest WOLFSSL_OCSP_REQUEST;
wolfSSL 15:117db924cf7c 49 #endif
wolfSSL 15:117db924cf7c 50
wolfSSL 15:117db924cf7c 51 WOLFSSL_LOCAL int InitOCSP(WOLFSSL_OCSP*, WOLFSSL_CERT_MANAGER*);
wolfSSL 15:117db924cf7c 52 WOLFSSL_LOCAL void FreeOCSP(WOLFSSL_OCSP*, int dynamic);
wolfSSL 15:117db924cf7c 53
wolfSSL 15:117db924cf7c 54 WOLFSSL_LOCAL int CheckCertOCSP(WOLFSSL_OCSP*, DecodedCert*,
wolfSSL 15:117db924cf7c 55 WOLFSSL_BUFFER_INFO* responseBuffer);
wolfSSL 15:117db924cf7c 56 WOLFSSL_LOCAL int CheckCertOCSP_ex(WOLFSSL_OCSP*, DecodedCert*,
wolfSSL 15:117db924cf7c 57 WOLFSSL_BUFFER_INFO* responseBuffer, WOLFSSL* ssl);
wolfSSL 15:117db924cf7c 58 WOLFSSL_LOCAL int CheckOcspRequest(WOLFSSL_OCSP* ocsp,
wolfSSL 15:117db924cf7c 59 OcspRequest* ocspRequest, WOLFSSL_BUFFER_INFO* responseBuffer);
wolfSSL 16:8e0d178b1d1e 60 WOLFSSL_LOCAL int CheckOcspResponse(WOLFSSL_OCSP *ocsp, byte *response, int responseSz,
wolfSSL 16:8e0d178b1d1e 61 WOLFSSL_BUFFER_INFO *responseBuffer, CertStatus *status,
wolfSSL 16:8e0d178b1d1e 62 OcspEntry *entry, OcspRequest *ocspRequest);
wolfSSL 15:117db924cf7c 63
wolfSSL 16:8e0d178b1d1e 64 #if defined(OPENSSL_ALL) || defined(WOLFSSL_NGINX) || defined(WOLFSSL_HAPROXY) || \
wolfSSL 16:8e0d178b1d1e 65 defined(WOLFSSL_APACHE_HTTPD)
wolfSSL 16:8e0d178b1d1e 66
wolfSSL 16:8e0d178b1d1e 67 WOLFSSL_API int wolfSSL_OCSP_resp_find_status(WOLFSSL_OCSP_BASICRESP *bs,
wolfSSL 16:8e0d178b1d1e 68 WOLFSSL_OCSP_CERTID *id, int *status, int *reason,
wolfSSL 16:8e0d178b1d1e 69 WOLFSSL_ASN1_TIME **revtime, WOLFSSL_ASN1_TIME **thisupd,
wolfSSL 16:8e0d178b1d1e 70 WOLFSSL_ASN1_TIME **nextupd);
wolfSSL 15:117db924cf7c 71 WOLFSSL_API const char *wolfSSL_OCSP_cert_status_str(long s);
wolfSSL 15:117db924cf7c 72 WOLFSSL_API int wolfSSL_OCSP_check_validity(WOLFSSL_ASN1_TIME* thisupd,
wolfSSL 15:117db924cf7c 73 WOLFSSL_ASN1_TIME* nextupd, long sec, long maxsec);
wolfSSL 15:117db924cf7c 74
wolfSSL 15:117db924cf7c 75 WOLFSSL_API void wolfSSL_OCSP_CERTID_free(WOLFSSL_OCSP_CERTID* certId);
wolfSSL 15:117db924cf7c 76 WOLFSSL_API WOLFSSL_OCSP_CERTID* wolfSSL_OCSP_cert_to_id(
wolfSSL 15:117db924cf7c 77 const WOLFSSL_EVP_MD *dgst, const WOLFSSL_X509 *subject,
wolfSSL 15:117db924cf7c 78 const WOLFSSL_X509 *issuer);
wolfSSL 15:117db924cf7c 79
wolfSSL 15:117db924cf7c 80 WOLFSSL_API void wolfSSL_OCSP_BASICRESP_free(WOLFSSL_OCSP_BASICRESP* basicResponse);
wolfSSL 15:117db924cf7c 81 WOLFSSL_API int wolfSSL_OCSP_basic_verify(WOLFSSL_OCSP_BASICRESP *bs,
wolfSSL 15:117db924cf7c 82 WOLF_STACK_OF(WOLFSSL_X509) *certs, WOLFSSL_X509_STORE *st, unsigned long flags);
wolfSSL 15:117db924cf7c 83
wolfSSL 15:117db924cf7c 84 WOLFSSL_API void wolfSSL_OCSP_RESPONSE_free(OcspResponse* response);
wolfSSL 15:117db924cf7c 85 WOLFSSL_API OcspResponse* wolfSSL_d2i_OCSP_RESPONSE_bio(WOLFSSL_BIO* bio,
wolfSSL 15:117db924cf7c 86 OcspResponse** response);
wolfSSL 15:117db924cf7c 87 WOLFSSL_API OcspResponse* wolfSSL_d2i_OCSP_RESPONSE(OcspResponse** response,
wolfSSL 15:117db924cf7c 88 const unsigned char** data, int len);
wolfSSL 15:117db924cf7c 89 WOLFSSL_API int wolfSSL_i2d_OCSP_RESPONSE(OcspResponse* response,
wolfSSL 15:117db924cf7c 90 unsigned char** data);
wolfSSL 15:117db924cf7c 91 WOLFSSL_API int wolfSSL_OCSP_response_status(OcspResponse *response);
wolfSSL 15:117db924cf7c 92 WOLFSSL_API const char *wolfSSL_OCSP_response_status_str(long s);
wolfSSL 15:117db924cf7c 93 WOLFSSL_API WOLFSSL_OCSP_BASICRESP* wolfSSL_OCSP_response_get1_basic(
wolfSSL 15:117db924cf7c 94 OcspResponse* response);
wolfSSL 15:117db924cf7c 95
wolfSSL 15:117db924cf7c 96 WOLFSSL_API OcspRequest* wolfSSL_OCSP_REQUEST_new(void);
wolfSSL 15:117db924cf7c 97 WOLFSSL_API void wolfSSL_OCSP_REQUEST_free(OcspRequest* request);
wolfSSL 15:117db924cf7c 98 WOLFSSL_API int wolfSSL_i2d_OCSP_REQUEST(OcspRequest* request,
wolfSSL 15:117db924cf7c 99 unsigned char** data);
wolfSSL 15:117db924cf7c 100 WOLFSSL_API WOLFSSL_OCSP_ONEREQ* wolfSSL_OCSP_request_add0_id(OcspRequest *req,
wolfSSL 15:117db924cf7c 101 WOLFSSL_OCSP_CERTID *cid);
wolfSSL 16:8e0d178b1d1e 102 WOLFSSL_API WOLFSSL_OCSP_CERTID* wolfSSL_OCSP_CERTID_dup(WOLFSSL_OCSP_CERTID*);
wolfSSL 16:8e0d178b1d1e 103 WOLFSSL_API int wolfSSL_i2d_OCSP_REQUEST_bio(WOLFSSL_BIO* out,
wolfSSL 16:8e0d178b1d1e 104 WOLFSSL_OCSP_REQUEST *req);
wolfSSL 15:117db924cf7c 105
wolfSSL 15:117db924cf7c 106 #endif
wolfSSL 16:8e0d178b1d1e 107 #ifdef OPENSSL_EXTRA
wolfSSL 16:8e0d178b1d1e 108 WOLFSSL_API int wolfSSL_OCSP_REQUEST_add_ext(OcspRequest* req,
wolfSSL 16:8e0d178b1d1e 109 WOLFSSL_X509_EXTENSION* ext, int idx);
wolfSSL 16:8e0d178b1d1e 110 WOLFSSL_API OcspResponse* wolfSSL_OCSP_response_create(int status,
wolfSSL 16:8e0d178b1d1e 111 WOLFSSL_OCSP_BASICRESP* bs);
wolfSSL 16:8e0d178b1d1e 112 WOLFSSL_API const char* wolfSSL_OCSP_crl_reason_str(long s);
wolfSSL 16:8e0d178b1d1e 113
wolfSSL 16:8e0d178b1d1e 114 WOLFSSL_API int wolfSSL_OCSP_id_get0_info(WOLFSSL_ASN1_STRING**,
wolfSSL 16:8e0d178b1d1e 115 WOLFSSL_ASN1_OBJECT**, WOLFSSL_ASN1_STRING**,
wolfSSL 16:8e0d178b1d1e 116 WOLFSSL_ASN1_INTEGER**, WOLFSSL_OCSP_CERTID*);
wolfSSL 16:8e0d178b1d1e 117
wolfSSL 16:8e0d178b1d1e 118 WOLFSSL_API int wolfSSL_OCSP_request_add1_nonce(OcspRequest* req,
wolfSSL 16:8e0d178b1d1e 119 unsigned char* val, int sz);
wolfSSL 16:8e0d178b1d1e 120 WOLFSSL_API int wolfSSL_OCSP_check_nonce(OcspRequest* req,
wolfSSL 16:8e0d178b1d1e 121 WOLFSSL_OCSP_BASICRESP* bs);
wolfSSL 16:8e0d178b1d1e 122 #endif
wolfSSL 15:117db924cf7c 123
wolfSSL 15:117db924cf7c 124
wolfSSL 15:117db924cf7c 125 #ifdef __cplusplus
wolfSSL 15:117db924cf7c 126 } /* extern "C" */
wolfSSL 15:117db924cf7c 127 #endif
wolfSSL 15:117db924cf7c 128
wolfSSL 15:117db924cf7c 129
wolfSSL 15:117db924cf7c 130 #endif /* HAVE_OCSP */
wolfSSL 15:117db924cf7c 131 #endif /* WOLFSSL_OCSP_H */
wolfSSL 15:117db924cf7c 132
wolfSSL 15:117db924cf7c 133
wolfSSL 15:117db924cf7c 134