Return to ocsp_response.h CVS log

Up to [ELWIX - Embedded LightWeight unIX -] / embedaddon / strongswan / src / libstrongswan / credentials / certificates

Annotation of embedaddon/strongswan/src/libstrongswan/credentials/certificates/ocsp_response.h, revision 1.1

1.1     ! misho       1: /*
        !             2:  * Copyright (C) 2019 Tobias Brunner
        !             3:  * Copyright (C) 2008 Martin Willi
        !             4:  * HSR Hochschule fuer Technik Rapperswil
        !             5:  *
        !             6:  * This program is free software; you can redistribute it and/or modify it
        !             7:  * under the terms of the GNU General Public License as published by the
        !             8:  * Free Software Foundation; either version 2 of the License, or (at your
        !             9:  * option) any later version.  See <http://www.fsf.org/copyleft/gpl.txt>.
        !            10:  *
        !            11:  * This program is distributed in the hope that it will be useful, but
        !            12:  * WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY
        !            13:  * or FITNESS FOR A PARTICULAR PURPOSE.  See the GNU General Public License
        !            14:  * for more details.
        !            15:  */
        !            16: 
        !            17: /**
        !            18:  * @defgroup ocsp_response ocsp_response
        !            19:  * @{ @ingroup certificates
        !            20:  */
        !            21: 
        !            22: #ifndef OCSP_RESPONSE_H_
        !            23: #define OCSP_RESPONSE_H_
        !            24: 
        !            25: #include <credentials/certificates/x509.h>
        !            26: #include <credentials/certificates/crl.h>
        !            27: 
        !            28: typedef struct ocsp_response_t ocsp_response_t;
        !            29: typedef enum ocsp_status_t ocsp_status_t;
        !            30: 
        !            31: /**
        !            32:  * OCSP response status
        !            33:  */
        !            34: enum ocsp_status_t {
        !            35:        OCSP_SUCCESSFUL                 = 0,
        !            36:        OCSP_MALFORMEDREQUEST   = 1,
        !            37:        OCSP_INTERNALERROR              = 2,
        !            38:        OCSP_TRYLATER                   = 3,
        !            39:        OCSP_SIGREQUIRED                = 5,
        !            40:        OCSP_UNAUTHORIZED               = 6,
        !            41: };
        !            42: 
        !            43: /**
        !            44:  * enum names for ocsp_status_t
        !            45:  */
        !            46: extern enum_name_t *ocsp_status_names;
        !            47: 
        !            48: /**
        !            49:  * OCSP response message.
        !            50:  */
        !            51: struct ocsp_response_t {
        !            52: 
        !            53:        /**
        !            54:         * Implements certificate_t interface
        !            55:         */
        !            56:        certificate_t certificate;
        !            57: 
        !            58:        /**
        !            59:         * Get the nonce received with this OCSP response.
        !            60:         *
        !            61:         * @return                                      nonce in the response (internal data)
        !            62:         */
        !            63:        chunk_t (*get_nonce)(ocsp_response_t *this);
        !            64: 
        !            65:        /**
        !            66:         * Check the status of a certificate by this OCSP response.
        !            67:         *
        !            68:         * @param subject                       certificate to check status
        !            69:         * @param issuer                        issuer certificate of subject
        !            70:         * @param revocation_time       receives time of revocation, if revoked
        !            71:         * @param revocation_reason     receives reason of revocation, if revoked
        !            72:         * @param this_update           creation time of revocation list
        !            73:         * @param next_update           expected time of next revocation list
        !            74:         * @return                                      certificate revocation status
        !            75:         */
        !            76:        cert_validation_t (*get_status)(ocsp_response_t *this,
        !            77:                                                                        x509_t *subject, x509_t *issuer,
        !            78:                                                                        time_t *revocation_time,
        !            79:                                                                        crl_reason_t *revocation_reason,
        !            80:                                                                        time_t *this_update, time_t *next_update);
        !            81: 
        !            82:        /**
        !            83:         * Create an enumerator over the contained certificates.
        !            84:         *
        !            85:         * @return                                      enumerator over certificate_t*
        !            86:         */
        !            87:        enumerator_t* (*create_cert_enumerator)(ocsp_response_t *this);
        !            88: 
        !            89:        /**
        !            90:         * Create an enumerator over the contained responses.
        !            91:         *
        !            92:         * @return                                      enumerator over major response fields
        !            93:         */
        !            94:        enumerator_t* (*create_response_enumerator)(ocsp_response_t *this);
        !            95: };
        !            96: 
        !            97: #endif /** OCSP_RESPONSE_H_ @}*/