blob: 3dfe6b5d6f0b90433d9aefb2a627d70068f4d928 [file] [log] [blame]
David Howellsc26fd692012-09-24 17:11:48 +01001/* X.509 certificate parser internal definitions
2 *
3 * Copyright (C) 2012 Red Hat, Inc. All Rights Reserved.
4 * Written by David Howells (dhowells@redhat.com)
5 *
6 * This program is free software; you can redistribute it and/or
7 * modify it under the terms of the GNU General Public Licence
8 * as published by the Free Software Foundation; either version
9 * 2 of the Licence, or (at your option) any later version.
10 */
11
David Howells57be4a72013-08-30 16:16:34 +010012#include <linux/time.h>
David Howellsc26fd692012-09-24 17:11:48 +010013#include <crypto/public_key.h>
14
15struct x509_certificate {
16 struct x509_certificate *next;
David Howells84aabd42014-07-01 16:40:19 +010017 struct x509_certificate *signer; /* Certificate that signed this one */
David Howellsc26fd692012-09-24 17:11:48 +010018 struct public_key *pub; /* Public key details */
David Howells84aabd42014-07-01 16:40:19 +010019 struct public_key_signature sig; /* Signature parameters */
David Howellsc26fd692012-09-24 17:11:48 +010020 char *issuer; /* Name of certificate issuer */
21 char *subject; /* Name of certificate subject */
Dmitry Kasatkin8dd60982014-10-06 16:52:12 +010022 struct asymmetric_key_id *id; /* Serial number + issuer */
23 struct asymmetric_key_id *skid; /* Subject + subjectKeyId (optional) */
24 struct asymmetric_key_id *authority; /* Authority key identifier (optional) */
David Howellsa5752d12012-10-02 14:36:16 +010025 struct tm valid_from;
26 struct tm valid_to;
David Howellsc26fd692012-09-24 17:11:48 +010027 const void *tbs; /* Signed data */
David Howellsb426beb2013-08-30 16:18:02 +010028 unsigned tbs_size; /* Size of signed data */
29 unsigned raw_sig_size; /* Size of sigature */
30 const void *raw_sig; /* Signature data */
David Howells84aabd42014-07-01 16:40:19 +010031 const void *raw_serial; /* Raw serial number in ASN.1 */
32 unsigned raw_serial_size;
33 unsigned raw_issuer_size;
34 const void *raw_issuer; /* Raw issuer name in ASN.1 */
35 const void *raw_subject; /* Raw subject name in ASN.1 */
36 unsigned raw_subject_size;
David Howellsdd2f6c42014-10-03 16:17:02 +010037 unsigned raw_skid_size;
38 const void *raw_skid; /* Raw subjectKeyId in ASN.1 */
David Howells84aabd42014-07-01 16:40:19 +010039 unsigned index;
40 bool seen; /* Infinite recursion prevention */
41 bool verified;
42 bool trusted;
David Howells41559422014-09-16 17:36:15 +010043 bool unsupported_crypto; /* T if can't be verified due to missing crypto */
David Howellsc26fd692012-09-24 17:11:48 +010044};
45
46/*
47 * x509_cert_parser.c
48 */
49extern void x509_free_certificate(struct x509_certificate *cert);
50extern struct x509_certificate *x509_cert_parse(const void *data, size_t datalen);
David Howellsb426beb2013-08-30 16:18:02 +010051
52/*
53 * x509_public_key.c
54 */
55extern int x509_get_sig_params(struct x509_certificate *cert);
56extern int x509_check_signature(const struct public_key *pub,
57 struct x509_certificate *cert);