123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268269270271272273274275276277278279280281282283284285286287288289290291292293294295296297298299300301302303304305306307308309310311312313314315316317318319320321322323324325326327328329330331332333334335336337338339340341342343344345346347348349350351352353354355356357358359360361362363364365366367368369370371372373374375376377378379380381382383384385386387388389390391392393394395396397398399400401402403404405406407408409410411412413414415416417418419420421422423424425426427428429430431432433434435436437438439440441442443444445446447448449450451452453454455456457458459460461462463464465466467468469470471472473474475476477478479480481482483484485 |
- /*
- * Copyright (C) 2010-2012 Free Software Foundation, Inc.
- *
- * Author: Nikos Mavrogiannopoulos
- *
- * This file is part of GnuTLS.
- *
- * The GnuTLS is free software; you can redistribute it and/or
- * modify it under the terms of the GNU Lesser General Public License
- * as published by the Free Software Foundation; either version 2.1 of
- * the License, or (at your option) any later version.
- *
- * This library is distributed in the hope that it will be useful, but
- * WITHOUT ANY WARRANTY; without even the implied warranty of
- * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU
- * Lesser General Public License for more details.
- *
- * You should have received a copy of the GNU Lesser General Public License
- * along with this program. If not, see <http://www.gnu.org/licenses/>
- *
- */
- #ifndef __GNUTLS_PKCS11_H
- #define __GNUTLS_PKCS11_H
- #include <stdarg.h>
- #include <gnutls/gnutls.h>
- #include <gnutls/x509.h>
- /* *INDENT-OFF* */
- #ifdef __cplusplus
- extern "C" {
- #endif
- /* *INDENT-ON* */
- #define GNUTLS_PKCS11_MAX_PIN_LEN 32
- /**
- * gnutls_pkcs11_token_callback_t:
- * @userdata: user-controlled data from gnutls_pkcs11_set_token_function().
- * @label: token label.
- * @retry: retry counter, initially 0.
- *
- * Token callback function. The callback will be used to ask the user
- * to re-insert the token with given (null terminated) label. The
- * callback should return zero if token has been inserted by user and
- * a negative error code otherwise. It might be called multiple times
- * if the token is not detected and the retry counter will be
- * increased.
- *
- * Returns: %GNUTLS_E_SUCCESS (0) on success or a negative error code
- * on error.
- *
- * Since: 2.12.0
- **/
- typedef int (*gnutls_pkcs11_token_callback_t) (void *const
- userdata,
- const char *const
- label, unsigned retry);
- struct gnutls_pkcs11_obj_st;
- typedef struct gnutls_pkcs11_obj_st *gnutls_pkcs11_obj_t;
- #define GNUTLS_PKCS11_FLAG_MANUAL 0 /* Manual loading of libraries */
- #define GNUTLS_PKCS11_FLAG_AUTO 1 /* Automatically load libraries by reading /etc/gnutls/pkcs11.conf */
- /* pkcs11.conf format:
- * load = /lib/xxx-pkcs11.so
- * load = /lib/yyy-pkcs11.so
- */
- int gnutls_pkcs11_init(unsigned int flags,
- const char *deprecated_config_file);
- int gnutls_pkcs11_reinit(void);
- void gnutls_pkcs11_deinit(void);
- void gnutls_pkcs11_set_token_function
- (gnutls_pkcs11_token_callback_t fn, void *userdata);
- void gnutls_pkcs11_set_pin_function(gnutls_pin_callback_t fn,
- void *userdata);
- gnutls_pin_callback_t gnutls_pkcs11_get_pin_function(void
- **userdata);
- int gnutls_pkcs11_add_provider(const char *name, const char *params);
- int gnutls_pkcs11_obj_init(gnutls_pkcs11_obj_t * obj);
- void gnutls_pkcs11_obj_set_pin_function(gnutls_pkcs11_obj_t obj,
- gnutls_pin_callback_t fn,
- void *userdata);
- /**
- * gnutls_pkcs11_obj_flags:
- * @GNUTLS_PKCS11_OBJ_FLAG_LOGIN: Force login in the token for the operation (seek+store).
- * @GNUTLS_PKCS11_OBJ_FLAG_MARK_TRUSTED: object marked as trusted (seek+store).
- * @GNUTLS_PKCS11_OBJ_FLAG_MARK_SENSITIVE: object marked as sensitive -unexportable (store).
- * @GNUTLS_PKCS11_OBJ_FLAG_LOGIN_SO: force login as a security officer in the token for the operation (seek+store).
- * @GNUTLS_PKCS11_OBJ_FLAG_MARK_PRIVATE: marked as private -requires PIN to access (store).
- * @GNUTLS_PKCS11_OBJ_FLAG_MARK_NOT_PRIVATE: marked as not private (store).
- * @GNUTLS_PKCS11_OBJ_FLAG_RETRIEVE_ANY: When retrieving an object, do not set any requirements (store).
- * @GNUTLS_PKCS11_OBJ_FLAG_RETRIEVE_TRUSTED: When retrieving an object, only retrieve the marked as trusted (alias to %GNUTLS_PKCS11_OBJ_FLAG_MARK_TRUSTED).
- * In gnutls_pkcs11_crt_is_known() it implies %GNUTLS_PKCS11_OBJ_FLAG_RETRIEVE_COMPARE if %GNUTLS_PKCS11_OBJ_FLAG_COMPARE_KEY is not given.
- * @GNUTLS_PKCS11_OBJ_FLAG_MARK_DISTRUSTED: When writing an object, mark it as distrusted (store).
- * @GNUTLS_PKCS11_OBJ_FLAG_RETRIEVE_DISTRUSTED: When retrieving an object, only retrieve the marked as distrusted (seek).
- * @GNUTLS_PKCS11_OBJ_FLAG_COMPARE: When checking an object's presence, fully compare it before returning any result (seek).
- * @GNUTLS_PKCS11_OBJ_FLAG_COMPARE_KEY: When checking an object's presence, compare the key before returning any result (seek).
- * @GNUTLS_PKCS11_OBJ_FLAG_PRESENT_IN_TRUSTED_MODULE: The object must be present in a marked as trusted module (seek).
- * @GNUTLS_PKCS11_OBJ_FLAG_MARK_CA: Mark the object as a CA (seek+store).
- * @GNUTLS_PKCS11_OBJ_FLAG_MARK_KEY_WRAP: Mark the generated key pair as wrapping and unwrapping keys (store).
- * @GNUTLS_PKCS11_OBJ_FLAG_OVERWRITE_TRUSTMOD_EXT: When an issuer is requested, override its extensions with the ones present in the trust module (seek).
- * @GNUTLS_PKCS11_OBJ_FLAG_MARK_ALWAYS_AUTH: Mark the key pair as requiring authentication (pin entry) before every operation (seek+store).
- * @GNUTLS_PKCS11_OBJ_FLAG_MARK_EXTRACTABLE: Mark the key pair as being extractable (store).
- * @GNUTLS_PKCS11_OBJ_FLAG_NEVER_EXTRACTABLE: If set, the object was never marked as extractable (store).
- * @GNUTLS_PKCS11_OBJ_FLAG_CRT: When searching, restrict to certificates only (seek).
- * @GNUTLS_PKCS11_OBJ_FLAG_PUBKEY: When searching, restrict to public key objects only (seek).
- * @GNUTLS_PKCS11_OBJ_FLAG_PRIVKEY: When searching, restrict to private key objects only (seek).
- * @GNUTLS_PKCS11_OBJ_FLAG_NO_STORE_PUBKEY: When generating a keypair don't store the public key (store).
- *
- * Enumeration of different PKCS #11 object flags. Some flags are used
- * to mark objects when storing, while others are also used while seeking
- * or retrieving objects.
- */
- typedef enum gnutls_pkcs11_obj_flags {
- GNUTLS_PKCS11_OBJ_FLAG_LOGIN = (1<<0),
- GNUTLS_PKCS11_OBJ_FLAG_MARK_TRUSTED = (1<<1),
- GNUTLS_PKCS11_OBJ_FLAG_MARK_SENSITIVE = (1<<2),
- GNUTLS_PKCS11_OBJ_FLAG_LOGIN_SO = (1<<3),
- GNUTLS_PKCS11_OBJ_FLAG_MARK_PRIVATE = (1<<4),
- GNUTLS_PKCS11_OBJ_FLAG_MARK_NOT_PRIVATE = (1<<5),
- GNUTLS_PKCS11_OBJ_FLAG_RETRIEVE_ANY = (1<<6),
- GNUTLS_PKCS11_OBJ_FLAG_RETRIEVE_TRUSTED = GNUTLS_PKCS11_OBJ_FLAG_MARK_TRUSTED,
- GNUTLS_PKCS11_OBJ_FLAG_MARK_DISTRUSTED = (1<<8),
- GNUTLS_PKCS11_OBJ_FLAG_RETRIEVE_DISTRUSTED = GNUTLS_PKCS11_OBJ_FLAG_MARK_DISTRUSTED,
- GNUTLS_PKCS11_OBJ_FLAG_COMPARE = (1<<9),
- GNUTLS_PKCS11_OBJ_FLAG_PRESENT_IN_TRUSTED_MODULE = (1<<10),
- GNUTLS_PKCS11_OBJ_FLAG_MARK_CA = (1<<11),
- GNUTLS_PKCS11_OBJ_FLAG_MARK_KEY_WRAP = (1<<12),
- GNUTLS_PKCS11_OBJ_FLAG_COMPARE_KEY = (1<<13),
- GNUTLS_PKCS11_OBJ_FLAG_OVERWRITE_TRUSTMOD_EXT = (1<<14),
- GNUTLS_PKCS11_OBJ_FLAG_MARK_ALWAYS_AUTH = (1<<15),
- GNUTLS_PKCS11_OBJ_FLAG_MARK_EXTRACTABLE = (1<<16),
- GNUTLS_PKCS11_OBJ_FLAG_NEVER_EXTRACTABLE = (1<<17),
- GNUTLS_PKCS11_OBJ_FLAG_CRT = (1<<18),
- GNUTLS_PKCS11_OBJ_FLAG_WITH_PRIVKEY = (1<<19),
- GNUTLS_PKCS11_OBJ_FLAG_PUBKEY = (1<<20),
- GNUTLS_PKCS11_OBJ_FLAG_NO_STORE_PUBKEY = GNUTLS_PKCS11_OBJ_FLAG_PUBKEY,
- GNUTLS_PKCS11_OBJ_FLAG_PRIVKEY = (1<<21),
- /* flags 1<<29 and later are reserved - see pkcs11_int.h */
- } gnutls_pkcs11_obj_flags;
- #define gnutls_pkcs11_obj_attr_t gnutls_pkcs11_obj_flags
- /**
- * gnutls_pkcs11_url_type_t:
- * @GNUTLS_PKCS11_URL_GENERIC: A generic-purpose URL.
- * @GNUTLS_PKCS11_URL_LIB: A URL that specifies the library used as well.
- * @GNUTLS_PKCS11_URL_LIB_VERSION: A URL that specifies the library and its version.
- *
- * Enumeration of different URL extraction flags.
- */
- typedef enum {
- GNUTLS_PKCS11_URL_GENERIC, /* URL specifies the object on token level */
- GNUTLS_PKCS11_URL_LIB, /* URL specifies the object on module level */
- GNUTLS_PKCS11_URL_LIB_VERSION /* URL specifies the object on module and version level */
- } gnutls_pkcs11_url_type_t;
- int gnutls_pkcs11_obj_import_url(gnutls_pkcs11_obj_t obj,
- const char *url, unsigned int flags
- /* GNUTLS_PKCS11_OBJ_FLAG_* */ );
- int gnutls_pkcs11_obj_export_url(gnutls_pkcs11_obj_t obj,
- gnutls_pkcs11_url_type_t detailed,
- char **url);
- void gnutls_pkcs11_obj_deinit(gnutls_pkcs11_obj_t obj);
- int gnutls_pkcs11_obj_export(gnutls_pkcs11_obj_t obj,
- void *output_data, size_t * output_data_size);
- int gnutls_pkcs11_obj_export2(gnutls_pkcs11_obj_t obj,
- gnutls_datum_t * out);
- int gnutls_pkcs11_obj_export3(gnutls_pkcs11_obj_t obj, gnutls_x509_crt_fmt_t fmt,
- gnutls_datum_t * out);
- int gnutls_pkcs11_get_raw_issuer(const char *url, gnutls_x509_crt_t cert,
- gnutls_datum_t * issuer,
- gnutls_x509_crt_fmt_t fmt,
- unsigned int flags);
- int gnutls_pkcs11_get_raw_issuer_by_dn (const char *url, const gnutls_datum_t *dn,
- gnutls_datum_t *issuer,
- gnutls_x509_crt_fmt_t fmt,
- unsigned int flags);
- int gnutls_pkcs11_get_raw_issuer_by_subject_key_id (const char *url,
- const gnutls_datum_t *dn,
- const gnutls_datum_t *spki,
- gnutls_datum_t *issuer,
- gnutls_x509_crt_fmt_t fmt,
- unsigned int flags);
- unsigned gnutls_pkcs11_crt_is_known(const char *url, gnutls_x509_crt_t cert,
- unsigned int flags);
- #if 0
- /* for documentation */
- int gnutls_pkcs11_copy_x509_crt(const char *token_url,
- gnutls_x509_crt_t crt,
- const char *label, unsigned int flags
- /* GNUTLS_PKCS11_OBJ_FLAG_* */ );
- int gnutls_pkcs11_copy_x509_privkey(const char *token_url,
- gnutls_x509_privkey_t key,
- const char *label,
- unsigned int key_usage,
- unsigned int flags);
- int
- gnutls_pkcs11_privkey_generate2(const char *url, gnutls_pk_algorithm_t pk,
- unsigned int bits, const char *label,
- gnutls_x509_crt_fmt_t fmt,
- gnutls_datum_t * pubkey,
- unsigned int flags);
- int
- gnutls_pkcs11_privkey_generate(const char *url, gnutls_pk_algorithm_t pk,
- unsigned int bits, const char *label,
- unsigned int flags);
- #endif
- int
- gnutls_pkcs11_copy_pubkey(const char *token_url,
- gnutls_pubkey_t crt, const char *label,
- const gnutls_datum_t *cid,
- unsigned int key_usage, unsigned int flags);
- #define gnutls_pkcs11_copy_x509_crt(url, crt, label, flags) \
- gnutls_pkcs11_copy_x509_crt2(url, crt, label, NULL, flags)
- int gnutls_pkcs11_copy_x509_crt2(const char *token_url,
- gnutls_x509_crt_t crt,
- const char *label,
- const gnutls_datum_t *id,
- unsigned int flags /* GNUTLS_PKCS11_OBJ_FLAG_* */);
- #define gnutls_pkcs11_copy_x509_privkey(url, key, label, usage, flags) \
- gnutls_pkcs11_copy_x509_privkey2(url, key, label, NULL, usage, flags)
- int gnutls_pkcs11_copy_x509_privkey2(const char *token_url,
- gnutls_x509_privkey_t key,
- const char *label,
- const gnutls_datum_t *cid,
- unsigned int key_usage
- /*GNUTLS_KEY_* */ ,
- unsigned int flags
- /* GNUTLS_PKCS11_OBJ_FLAG_* */
- );
- int gnutls_pkcs11_delete_url(const char *object_url, unsigned int flags
- /* GNUTLS_PKCS11_OBJ_FLAG_* */ );
- int gnutls_pkcs11_copy_secret_key(const char *token_url,
- gnutls_datum_t * key,
- const char *label, unsigned int key_usage
- /* GNUTLS_KEY_* */ ,
- unsigned int flags
- /* GNUTLS_PKCS11_OBJ_FLAG_* */ );
- /**
- * gnutls_pkcs11_obj_info_t:
- * @GNUTLS_PKCS11_OBJ_ID_HEX: The object ID in hex. Null-terminated text.
- * @GNUTLS_PKCS11_OBJ_LABEL: The object label. Null-terminated text.
- * @GNUTLS_PKCS11_OBJ_TOKEN_LABEL: The token's label. Null-terminated text.
- * @GNUTLS_PKCS11_OBJ_TOKEN_SERIAL: The token's serial number. Null-terminated text.
- * @GNUTLS_PKCS11_OBJ_TOKEN_MANUFACTURER: The token's manufacturer. Null-terminated text.
- * @GNUTLS_PKCS11_OBJ_TOKEN_MODEL: The token's model. Null-terminated text.
- * @GNUTLS_PKCS11_OBJ_ID: The object ID. Raw bytes.
- * @GNUTLS_PKCS11_OBJ_LIBRARY_VERSION: The library's version. Null-terminated text.
- * @GNUTLS_PKCS11_OBJ_LIBRARY_DESCRIPTION: The library's description. Null-terminated text.
- * @GNUTLS_PKCS11_OBJ_LIBRARY_MANUFACTURER: The library's manufacturer name. Null-terminated text.
- *
- * Enumeration of several object information types.
- */
- typedef enum {
- GNUTLS_PKCS11_OBJ_ID_HEX = 1,
- GNUTLS_PKCS11_OBJ_LABEL,
- GNUTLS_PKCS11_OBJ_TOKEN_LABEL,
- GNUTLS_PKCS11_OBJ_TOKEN_SERIAL,
- GNUTLS_PKCS11_OBJ_TOKEN_MANUFACTURER,
- GNUTLS_PKCS11_OBJ_TOKEN_MODEL,
- GNUTLS_PKCS11_OBJ_ID,
- /* the pkcs11 provider library info */
- GNUTLS_PKCS11_OBJ_LIBRARY_VERSION,
- GNUTLS_PKCS11_OBJ_LIBRARY_DESCRIPTION,
- GNUTLS_PKCS11_OBJ_LIBRARY_MANUFACTURER
- } gnutls_pkcs11_obj_info_t;
- int gnutls_pkcs11_obj_get_info(gnutls_pkcs11_obj_t obj,
- gnutls_pkcs11_obj_info_t itype,
- void *output, size_t * output_size);
- int gnutls_pkcs11_obj_set_info(gnutls_pkcs11_obj_t obj,
- gnutls_pkcs11_obj_info_t itype,
- const void *data, size_t data_size,
- unsigned flags);
- #define GNUTLS_PKCS11_OBJ_ATTR_CRT_ALL GNUTLS_PKCS11_OBJ_FLAG_CRT
- #define GNUTLS_PKCS11_OBJ_ATTR_MATCH 0 /* always match the given URL */
- #define GNUTLS_PKCS11_OBJ_ATTR_ALL 0 /* match everything! */
- #define GNUTLS_PKCS11_OBJ_ATTR_CRT_TRUSTED (GNUTLS_PKCS11_OBJ_FLAG_CRT|GNUTLS_PKCS11_OBJ_FLAG_MARK_TRUSTED)
- #define GNUTLS_PKCS11_OBJ_ATTR_CRT_WITH_PRIVKEY (GNUTLS_PKCS11_OBJ_FLAG_CRT|GNUTLS_PKCS11_OBJ_FLAG_WITH_PRIVKEY)
- #define GNUTLS_PKCS11_OBJ_ATTR_CRT_TRUSTED_CA (GNUTLS_PKCS11_OBJ_FLAG_CRT|GNUTLS_PKCS11_OBJ_FLAG_MARK_CA|GNUTLS_PKCS11_OBJ_FLAG_MARK_TRUSTED)
- #define GNUTLS_PKCS11_OBJ_ATTR_PUBKEY GNUTLS_PKCS11_OBJ_FLAG_PUBKEY
- #define GNUTLS_PKCS11_OBJ_ATTR_PRIVKEY GNUTLS_PKCS11_OBJ_FLAG_PRIVKEY
- /**
- * gnutls_pkcs11_token_info_t:
- * @GNUTLS_PKCS11_TOKEN_LABEL: The token's label (string)
- * @GNUTLS_PKCS11_TOKEN_SERIAL: The token's serial number (string)
- * @GNUTLS_PKCS11_TOKEN_MANUFACTURER: The token's manufacturer (string)
- * @GNUTLS_PKCS11_TOKEN_MODEL: The token's model (string)
- * @GNUTLS_PKCS11_TOKEN_MODNAME: The token's module name (string - since 3.4.3)
- *
- * Enumeration of types for retrieving token information.
- */
- typedef enum {
- GNUTLS_PKCS11_TOKEN_LABEL,
- GNUTLS_PKCS11_TOKEN_SERIAL,
- GNUTLS_PKCS11_TOKEN_MANUFACTURER,
- GNUTLS_PKCS11_TOKEN_MODEL,
- GNUTLS_PKCS11_TOKEN_MODNAME
- } gnutls_pkcs11_token_info_t;
- /**
- * gnutls_pkcs11_obj_type_t:
- * @GNUTLS_PKCS11_OBJ_UNKNOWN: Unknown PKCS11 object.
- * @GNUTLS_PKCS11_OBJ_X509_CRT: X.509 certificate.
- * @GNUTLS_PKCS11_OBJ_PUBKEY: Public key.
- * @GNUTLS_PKCS11_OBJ_PRIVKEY: Private key.
- * @GNUTLS_PKCS11_OBJ_SECRET_KEY: Secret key.
- * @GNUTLS_PKCS11_OBJ_DATA: Data object.
- * @GNUTLS_PKCS11_OBJ_X509_CRT_EXTENSION: X.509 certificate extension (supported by p11-kit trust module only).
- *
- * Enumeration of object types.
- */
- typedef enum {
- GNUTLS_PKCS11_OBJ_UNKNOWN,
- GNUTLS_PKCS11_OBJ_X509_CRT,
- GNUTLS_PKCS11_OBJ_PUBKEY,
- GNUTLS_PKCS11_OBJ_PRIVKEY,
- GNUTLS_PKCS11_OBJ_SECRET_KEY,
- GNUTLS_PKCS11_OBJ_DATA,
- GNUTLS_PKCS11_OBJ_X509_CRT_EXTENSION
- } gnutls_pkcs11_obj_type_t;
- int
- gnutls_pkcs11_token_init(const char *token_url,
- const char *so_pin, const char *label);
- int
- gnutls_pkcs11_token_get_mechanism(const char *url,
- unsigned int idx,
- unsigned long *mechanism);
- unsigned
- gnutls_pkcs11_token_check_mechanism(const char *url,
- unsigned long mechanism,
- void *ptr, unsigned psize, unsigned flags);
- int gnutls_pkcs11_token_set_pin(const char *token_url, const char *oldpin, const char *newpin, unsigned int flags /*gnutls_pin_flag_t */);
- int gnutls_pkcs11_token_get_url(unsigned int seq,
- gnutls_pkcs11_url_type_t detailed,
- char **url);
- int gnutls_pkcs11_token_get_info(const char *url,
- gnutls_pkcs11_token_info_t ttype,
- void *output, size_t * output_size);
- #define GNUTLS_PKCS11_TOKEN_HW 1
- #define GNUTLS_PKCS11_TOKEN_TRUSTED (1<<1) /* p11-kit trusted */
- int gnutls_pkcs11_token_get_flags(const char *url, unsigned int *flags);
- #define gnutls_pkcs11_obj_list_import_url(p_list, n_list, url, attrs, flags) gnutls_pkcs11_obj_list_import_url3(p_list, n_list, url, attrs|flags)
- #define gnutls_pkcs11_obj_list_import_url2(p_list, n_list, url, attrs, flags) gnutls_pkcs11_obj_list_import_url4(p_list, n_list, url, attrs|flags)
- int gnutls_pkcs11_obj_list_import_url3(gnutls_pkcs11_obj_t * p_list,
- unsigned int *const n_list,
- const char *url,
- unsigned int flags
- /* GNUTLS_PKCS11_OBJ_FLAG_* */
- );
- int
- gnutls_pkcs11_obj_list_import_url4(gnutls_pkcs11_obj_t ** p_list,
- unsigned int *n_list,
- const char *url,
- unsigned int flags
- /* GNUTLS_PKCS11_OBJ_FLAG_* */
- );
- int gnutls_x509_crt_import_pkcs11(gnutls_x509_crt_t crt,
- gnutls_pkcs11_obj_t pkcs11_crt);
- gnutls_pkcs11_obj_type_t
- gnutls_pkcs11_obj_get_type(gnutls_pkcs11_obj_t obj);
- const char *gnutls_pkcs11_type_get_name(gnutls_pkcs11_obj_type_t type);
- int
- gnutls_pkcs11_obj_get_exts(gnutls_pkcs11_obj_t obj,
- struct gnutls_x509_ext_st **exts, unsigned int *exts_size,
- unsigned int flags);
- int
- gnutls_pkcs11_obj_get_flags(gnutls_pkcs11_obj_t obj, unsigned int *oflags);
- char *gnutls_pkcs11_obj_flags_get_str(unsigned int flags);
- int gnutls_x509_crt_list_import_pkcs11(gnutls_x509_crt_t * certs,
- unsigned int cert_max,
- gnutls_pkcs11_obj_t *
- const objs, unsigned int flags
- /* must be zero */ );
- /* private key functions...*/
- int gnutls_pkcs11_privkey_init(gnutls_pkcs11_privkey_t * key);
- int
- gnutls_pkcs11_privkey_cpy(gnutls_pkcs11_privkey_t dst,
- gnutls_pkcs11_privkey_t src);
- void gnutls_pkcs11_privkey_set_pin_function(gnutls_pkcs11_privkey_t
- key,
- gnutls_pin_callback_t
- fn, void *userdata);
- void gnutls_pkcs11_privkey_deinit(gnutls_pkcs11_privkey_t key);
- int gnutls_pkcs11_privkey_get_pk_algorithm(gnutls_pkcs11_privkey_t
- key, unsigned int *bits);
- int gnutls_pkcs11_privkey_get_info(gnutls_pkcs11_privkey_t pkey,
- gnutls_pkcs11_obj_info_t itype,
- void *output, size_t * output_size);
- int gnutls_pkcs11_privkey_import_url(gnutls_pkcs11_privkey_t pkey,
- const char *url, unsigned int flags);
- int gnutls_pkcs11_privkey_export_url(gnutls_pkcs11_privkey_t key,
- gnutls_pkcs11_url_type_t
- detailed, char **url);
- unsigned gnutls_pkcs11_privkey_status(gnutls_pkcs11_privkey_t key);
- #define gnutls_pkcs11_privkey_generate(url, pk, bits, label, flags) \
- gnutls_pkcs11_privkey_generate3(url, pk, bits, label, NULL, 0, NULL, 0, flags)
- #define gnutls_pkcs11_privkey_generate2(url, pk, bits, label, fmt, pubkey, flags) \
- gnutls_pkcs11_privkey_generate3(url, pk, bits, label, NULL, fmt, pubkey, 0, flags)
- int
- gnutls_pkcs11_privkey_generate3(const char *url,
- gnutls_pk_algorithm_t pk,
- unsigned int bits,
- const char *label,
- const gnutls_datum_t *cid,
- gnutls_x509_crt_fmt_t fmt,
- gnutls_datum_t * pubkey,
- unsigned int key_usage,
- unsigned int flags);
- int
- gnutls_pkcs11_privkey_export_pubkey(gnutls_pkcs11_privkey_t pkey,
- gnutls_x509_crt_fmt_t fmt,
- gnutls_datum_t * pubkey,
- unsigned int flags);
- int
- gnutls_pkcs11_token_get_random(const char *token_url,
- void *data, size_t len);
- int
- gnutls_pkcs11_copy_attached_extension(const char *token_url,
- gnutls_x509_crt_t crt,
- gnutls_datum_t *data,
- const char *label,
- unsigned int flags);
- #define gnutls_x509_crt_import_pkcs11_url gnutls_x509_crt_import_url
- /* *INDENT-OFF* */
- #ifdef __cplusplus
- }
- #endif
- /* *INDENT-ON* */
- #endif
|