/usr/include/canl_cred.h is in libcanl-c-dev 2.1.2-1.
This file is owned by root:root, with mode 0o644.
The actual contents of the file can be viewed below.
1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99 100 101 102 103 104 105 106 107 108 109 110 111 112 113 114 115 116 117 118 119 120 121 122 123 | #ifndef _CANL_CRED_H
#define _CANL_CRED_H
#include <canl.h>
#include <openssl/x509.h>
#ifdef __cplusplus
extern "C" {
#endif
typedef void *canl_cred;
typedef enum canl_cert_type {
CANL_EEC,
CANL_RFC,
} canl_cert_type;
typedef struct _creds {
EVP_PKEY *c_key;
STACK_OF(X509) *c_cert_chain;
X509 *c_cert;
long c_lifetime;
STACK_OF(X509_EXTENSION) * c_cert_ext;
canl_cert_type c_type;
X509_REQ *c_req;
} creds;
/* Routines to handle credentials */
canl_err_code CANL_CALLCONV
canl_cred_new(canl_ctx, canl_cred *);
canl_err_code CANL_CALLCONV
canl_cred_free(canl_ctx, canl_cred);
canl_err_code CANL_CALLCONV
canl_ctx_set_cred(canl_ctx, canl_cred);
canl_err_code CANL_CALLCONV
canl_cred_load_priv_key_file(canl_ctx, canl_cred, const char *,
canl_password_callback, void *);
canl_err_code CANL_CALLCONV
canl_cred_load_priv_key(canl_ctx, canl_cred, EVP_PKEY *);
canl_err_code CANL_CALLCONV
canl_cred_save_priv_key(canl_ctx, canl_cred, EVP_PKEY **);
canl_err_code CANL_CALLCONV
canl_cred_load_priv_key_pkcs11(canl_ctx, canl_cred, const char *,
canl_password_callback, void *);
canl_err_code CANL_CALLCONV
canl_cred_load_chain(canl_ctx, canl_cred, STACK_OF(X509) *);
canl_err_code CANL_CALLCONV
canl_cred_load_chain_file(canl_ctx, canl_cred, const char *);
canl_err_code CANL_CALLCONV
canl_cred_load_cert(canl_ctx, canl_cred, X509 *);
canl_err_code CANL_CALLCONV
canl_cred_load_cert_file(canl_ctx, canl_cred, const char *);
canl_err_code CANL_CALLCONV
canl_cred_load_cert_pkcs11(canl_ctx, canl_cred, const char *);
canl_err_code CANL_CALLCONV
canl_cred_set_lifetime(canl_ctx, canl_cred, const long);
canl_err_code CANL_CALLCONV
canl_cred_set_extension(canl_ctx, canl_cred, X509_EXTENSION *);
canl_err_code CANL_CALLCONV
canl_cred_set_cert_type(canl_ctx, canl_cred, const enum canl_cert_type);
canl_err_code CANL_CALLCONV
canl_cred_sign_proxy(canl_ctx, canl_cred, canl_cred);
canl_err_code CANL_CALLCONV
canl_cred_save_proxyfile(canl_ctx, canl_cred, const char *);
canl_err_code CANL_CALLCONV
canl_cred_save_cert(canl_ctx, canl_cred, X509 **);
canl_err_code CANL_CALLCONV
canl_cred_save_chain(canl_ctx, canl_cred, STACK_OF(X509) **);
/* Routines to handle X.509 requests */
canl_err_code CANL_CALLCONV
canl_cred_new_req(canl_ctx, canl_cred, unsigned int);
canl_err_code CANL_CALLCONV
canl_cred_save_req(canl_ctx, canl_cred, X509_REQ **);
canl_err_code CANL_CALLCONV
canl_cred_load_req(canl_ctx, canl_cred, const X509_REQ *);
/* Routines to verify cert. chain */
/* Verify certificate chain, openssl verif. CRL, OCSP, signing policies etc.
*/
canl_err_code CANL_CALLCONV
canl_verify_chain(canl_ctx ctx, X509 *ucert, STACK_OF(X509) *cert_chain,
char *cadir);
/* Verify certificate chain, SKIP openssl verif. part; Check CRL, OCSP,
* signing policies etc. */
canl_err_code CANL_CALLCONV
canl_verify_chain_wo_ossl(canl_ctx ctx, char *cadir,
X509_STORE_CTX *store_ctx);
#if 0
canl_err_code CANL_CALLCONV
canl_req_get_pair(canl_ctx, canl_x509_req, EVP_PKEY **);
#endif
#ifdef __cplusplus
}
#endif
#endif
|