Return to cert_cache.h CVS log

Up to [ELWIX - Embedded LightWeight unIX -] / embedaddon / strongswan / src / libstrongswan / credentials / sets

Annotation of embedaddon/strongswan/src/libstrongswan/credentials/sets/cert_cache.h, revision 1.1

1.1     ! misho       1: /*
        !             2:  * Copyright (C) 2008 Martin Willi
        !             3:  * HSR Hochschule fuer Technik Rapperswil
        !             4:  *
        !             5:  * This program is free software; you can redistribute it and/or modify it
        !             6:  * under the terms of the GNU General Public License as published by the
        !             7:  * Free Software Foundation; either version 2 of the License, or (at your
        !             8:  * option) any later version.  See <http://www.fsf.org/copyleft/gpl.txt>.
        !             9:  *
        !            10:  * This program is distributed in the hope that it will be useful, but
        !            11:  * WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY
        !            12:  * or FITNESS FOR A PARTICULAR PURPOSE.  See the GNU General Public License
        !            13:  * for more details.
        !            14:  */
        !            15: 
        !            16: /**
        !            17:  * @defgroup cert_cache cert_cache
        !            18:  * @{ @ingroup sets
        !            19:  */
        !            20: 
        !            21: #ifndef CERT_CACHE_H_
        !            22: #define CERT_CACHE_H_
        !            23: 
        !            24: #include <credentials/credential_set.h>
        !            25: 
        !            26: typedef struct cert_cache_t cert_cache_t;
        !            27: 
        !            28: /**
        !            29:  * Certificate signature verification and certificate cache.
        !            30:  *
        !            31:  * This cache serves all certificates seen in its issued_by method
        !            32:  * and serves them as untrusted through the credential set interface. Further,
        !            33:  * it caches valid subject-issuer relationships to speed up the issued_by
        !            34:  * method.
        !            35:  */
        !            36: struct cert_cache_t {
        !            37: 
        !            38:        /**
        !            39:         * Implements credential_set_t.
        !            40:         */
        !            41:        credential_set_t set;
        !            42: 
        !            43:        /**
        !            44:         * Caching wrapper around certificate_t.issued_by.
        !            45:         *
        !            46:         * @param subject               certificate to verify
        !            47:         * @param issuer                issuing certificate to verify subject
        !            48:         * @param scheme                receives used signature scheme and parameters, if
        !            49:         *                                              given (allocated)
        !            50:         * @return                              TRUE if subject issued by issuer
        !            51:         */
        !            52:        bool (*issued_by)(cert_cache_t *this,
        !            53:                                          certificate_t *subject, certificate_t *issuer,
        !            54:                                          signature_params_t **scheme);
        !            55: 
        !            56:        /**
        !            57:         * Flush the certificate cache.
        !            58:         *
        !            59:         * @param type                  type of certificate to flush, or CERT_ANY
        !            60:         */
        !            61:        void (*flush)(cert_cache_t *this, certificate_type_t type);
        !            62: 
        !            63:        /**
        !            64:         * Destroy a cert_cache instance.
        !            65:         */
        !            66:        void (*destroy)(cert_cache_t *this);
        !            67: };
        !            68: 
        !            69: /**
        !            70:  * Create a cert_cache instance.
        !            71:  */
        !            72: cert_cache_t *cert_cache_create();
        !            73: 
        !            74: #endif /** CERT_CACHE_H_ @}*/