/usr/include/validator/val_dane.h is in libval-dev 2.0-4.
This file is owned by root:root, with mode 0o644.
The actual contents of the file can be viewed below.
1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99 100 101 102 103 104 105 106 107 108 109 110 111 112 113 114 115 116 117 118 119 120 121 122 | /*
* Copyright 2005-2013 SPARTA, Inc. All rights reserved.
* See the COPYING file distributed with this software for details.
*/
#ifndef VAL_DANE_H
#define VAL_DANE_H
#include <stdio.h>
#include <stdarg.h>
#include <stddef.h>
#include <openssl/bn.h>
#include <openssl/sha.h>
#ifdef HAVE_CRYPTO_SHA2_H /* netbsd */
#include <crypto/sha2.h>
#endif
#include <openssl/x509.h>
#include <openssl/evp.h>
#include <openssl/ssl.h>
#ifdef __cplusplus
extern "C" {
#endif
/*
* DANE usage types
*/
#define DANE_USE_CA_CONSTRAINT 0
#define DANE_USE_SVC_CONSTRAINT 1
#define DANE_USE_TA_ASSERTION 2
#define DANE_USE_DOMAIN_ISSUED 3
/*
* DANE usage types
*/
#define DANE_SEL_FULLCERT 0
#define DANE_SEL_PUBKEY 1
/*
* DANE matching types
*/
#define DANE_MATCH_EXACT 0
#define DANE_MATCH_SHA256 1
#define DANE_MATCH_SHA512 2
/*
* DANE parameters
*/
#define DANE_PARAM_PROTO_TCP 0
#define DANE_PARAM_PROTO_UDP 1
#define DANE_PARAM_PROTO_SCTP 2
#define DANE_PARAM_PROTO_STR_TCP "tcp"
#define DANE_PARAM_PROTO_STR_UDP "udp"
#define DANE_PARAM_PROTO_STR_SCTP "sctp"
/*
* DANE specific return codes
*/
#define VAL_DANE_NOERROR 0
#define VAL_DANE_CANCELLED 1
#define VAL_DANE_INTERNAL_ERROR 2
#define VAL_DANE_NOTVALIDATED 3
#define VAL_DANE_IGNORE_TLSA 4
#define VAL_DANE_MALFORMED_TLSA 5
#define VAL_DANE_CHECK_FAILED 6
/*
* These are the parameters that the user would supply
* to control the manner in which DANE validation is performed.
*/
struct val_daneparams {
int port;
int proto;
};
/*
* The DANE record details are returned in the following structure
*/
struct val_danestatus {
long ttl;
int usage;
int selector;
int type;
size_t datalen;
unsigned char *data;
struct val_danestatus *next;
};
typedef int (*val_dane_callback)(void *callback_data,
int retval,
struct val_danestatus **res);
/*
* Prototypes
*/
const char *p_dane_error(int rc);
void val_free_dane(struct val_danestatus *dres);
int val_dane_submit(val_context_t *context,
const char *name,
struct val_daneparams *params,
val_dane_callback callback,
void *callback_data,
val_async_status **status);
int val_getdaneinfo(val_context_t *context,
const char *name,
struct val_daneparams
*params,
struct val_danestatus **dres);
int val_dane_match(val_context_t *ctx,
struct val_danestatus *dane_cur,
const unsigned char *data,
int len);
int val_dane_check(val_context_t *context,
SSL *con,
struct val_danestatus *danestatus,
int *do_pathval);
#ifdef __cplusplus
} /* extern "C" */
#endif
#endif /* VAL_DANE_H */
|