aegis_certman.h

Go to the documentation of this file.

/* -*- mode:c++; tab-width:4; c-basic-offset:4; -*-
 *
 * This file is part of maemo-security-certman
 *
 * Copyright (C) 2010 Nokia Corporation and/or its subsidiary(-ies).
 *
 * Contact: Juhani Mäkelä <ext-juhani.3.makela@nokia.com>
 *
 * This library is free software; you can redistribute it and/or
 * modify it under the terms of the GNU Lesser General Public License
 * version 2.1 as published by the Free Software Foundation.
 *
 * This library is distributed in the hope that it will be useful, but
 * WITHOUT ANY WARRANTY; without even the implied warranty of
 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU
 * Lesser General Public License for more details.
 *
 * You should have received a copy of the GNU Lesser General Public
 * License along with this library; if not, write to the Free Software
 * Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA
 * 02110-1301 USA
 *
 */

#ifndef AEGIS_CERTMAN_H
#define AEGIS_CERTMAN_H

#include <openssl/x509.h>
#include <openssl/x509v3.h>
#include <openssl/sha.h>
#include "aegis_common.h"

#ifdef  __cplusplus
extern "C" {
#endif

    #define AEGIS_CERTMAN_DOMAIN_PRIVATE 0
    
    #define AEGIS_CERTMAN_DOMAIN_SHARED 1
    
    typedef void* domain_handle;

    #define AEGIS_CERTMAN_DOMAIN_NONE (void*)(0)

    #define AEGIS_KEY_ID_LEN SHA_DIGEST_LENGTH

    typedef unsigned char aegis_key_id [AEGIS_KEY_ID_LEN];

    #define AEGIS_KEY_ID_STR_LEN 2*SHA_DIGEST_LENGTH + 1

    int aegis_certman_key_id_to_str(aegis_key_id key_id,
                                    char* to_buf,
                                    unsigned max_len);

    int aegis_certman_str_to_key_id(char* from_str,
                                    aegis_key_id key_id);




    int aegis_certman_open(X509_STORE** my_cert_store);

    int aegis_certman_collect(const char* domain, 
                              int shared, 
                              X509_STORE* my_cert_store);

    int aegis_certman_close(X509_STORE* my_cert_store);




    int aegis_certman_iterate_domains(int flags,
                                      aegis_callback* cb_func,
                                      void* ctx);

    int aegis_certman_set_credentials(const char* token_name);

    int aegis_certman_open_domain(const char* domain_name, 
                                  int flags, 
                                  domain_handle* handle);

    int aegis_certman_iterate_certs(domain_handle the_domain, 
                                    int cb_func(int, X509*, void*), 
                                    void* ctx);


    int aegis_certman_load_cert(domain_handle the_domain, 
                                aegis_key_id with_id, 
                                X509** cert);

    int aegis_certman_add_cert(domain_handle to_domain, X509* cert);

    int aegis_certman_add_certs(domain_handle to_domain, 
                                char* cert_files[], 
                                unsigned count);

    int aegis_certman_rm_cert(domain_handle from_domain, aegis_key_id key_id);

    int aegis_certman_nbrof_certs(domain_handle in_domain);

    int aegis_certman_close_domain(domain_handle handle);

    int aegis_certman_domain_changed(domain_handle the_domain);

    int aegis_certman_get_key_id(X509* of_cert, aegis_key_id to_this);

    int aegis_certman_store_key(aegis_key_id with_id, 
                                EVP_PKEY* the_key, 
                                char* with_passwd);

    int aegis_certman_retrieve_key(aegis_key_id with_id, 
                                   EVP_PKEY** the_key, 
                                   char* with_passwd);

    int aegis_certman_iterate_keys(aegis_callback* cb_func, void* ctx);

    int aegis_certman_get_nickname(X509* of_cert, 
                                   char* to_buf, 
                                   unsigned buf_len);

    /*
     * TODO: Document
     */
    int aegis_certman_has_private_key(X509* cert);
    int aegis_certman_has_private_key_by_id(aegis_key_id key_id);

    int aegis_certman_gui_check_certificate(X509 *cert, long timeout);

    int aegis_certman_gui_get_private_key(aegis_key_id with_id, 
                                          const char* with_credentials, 
                                          long timeout, 
                                          EVP_PKEY** the_key);

    int aegis_certman_gui_get_private_key_async(aegis_key_id with_id,
                                      const char* with_credentials,
                                      long timeout,
                                      void (*notify)(void *, int, EVP_PKEY *),
                                      void* state);

    int aegis_certman_gui_check_certificate_async(X509 *cert,
                                      long timeout,
                                      void (*notify)(void*, int),
                                      void* state);

    void aegis_certman_gui_poll(long wait);


#ifdef  __cplusplus
} // extern "C"
#endif

#endif