lib/hx509/cert.c

39  * @page page_cert The basic certificate
42  * hx509_cert object is representing one X509/PKIX certificate and
46  * page_keyset), but its also possible to create a certificate
207  * Allocate and init an hx509 certificate object from the decoded
208  * certificate `c��.
251  * Just like hx509_cert_init(), but instead of a decode certificate
253  * DER/BER encoded certificate.
255  * If the memory region doesn't contain just the certificate and
260  * @param ptr pointer to memory region containing encoded certificate.
262  * @param cert a return pointer to a hx509 certificate object, will
282 	hx509_set_error_string(context, 0, ret, "Failed to decode certificate");
288 			       "Extra data after certificate");
319  * Free reference to the hx509 certificate object, if the refcounter
363  * Add a reference to a hx509 certificate object.
365  * @param cert a pointer to an hx509 certificate object.
475  * use. Used to check certificate in the past and future time. If not
499  * Set the maximum depth of the certificate chain that the path
503  * @param max_depth maxium depth of the certificate chain, include
733  * certificate. On error the
739  * @param cert a hx509 certificate object.
932      * subject certificate nor the parent.
1012     q.certificate = _hx509_get_cert(cert);
1074 				   "Subjectless certificate missing AuthKeyID");
1081 				   "Subjectless certificate missing keyIdentifier "
1132 			       "certificate with subject: '%s'", str);
1218  * Find path by looking up issuer for the top certificate and continue
1219  * until an anchor certificate is found or max limit is found. A
1220  * certificate never included twice in the path.
1227  * The path includes a path from the top certificate to the anchor
1228  * certificate.
1273 				   "certificate chain");
1329  * Compare to hx509 certificate object, useful for sorting.
1331  * @param p a hx509 certificate object.
1332  * @param q a hx509 certificate object.
1347  * Return the name of the issuer of the hx509 certificate.
1349  * @param p a hx509 certificate object.
1365  * Return the name of the subject of the hx509 certificate.
1367  * @param p a hx509 certificate object.
1383  * Return the name of the base subject of the hx509 certificate. If
1384  * the certiicate is a verified proxy certificate, the this function
1385  * return the base certificate (root of the proxy chain). If the proxy
1386  * certificate is not verified with the base certificate
1390  * @param c a hx509 certificate object.
1408 			       "Proxy certificate have not been "
1416  * Get serial number of the certificate.
1418  * @param p a hx509 certificate object.
1433  * Get notBefore time of the certificate.
1435  * @param p a hx509 certificate object.
1449  * Get notAfter time of the certificate.
1451  * @param p a hx509 certificate object.
1465  * Get the SubjectPublicKeyInfo structure from the hx509 certificate.
1468  * @param p a hx509 certificate object.
1489  * Get the AlgorithmIdentifier from the hx509 certificate.
1492  * @param p a hx509 certificate object.
1540  * @param p a hx509 certificate
1544  * error code HX509_EXTENSION_NOT_FOUND is returned if the certificate
1560  * @param p a hx509 certificate
1564  * error code HX509_EXTENSION_NOT_FOUND is returned if the certificate
1870 	 * subjectName of the certificate if the certificate have a
1923 				       "certificate didn't match any "
1938 				       "certificate included in excluded "
1958  * Build and verify the path for the certificate to the trust anchor
1960  * certificate, the pool and the trust anchors.
1964  * @param cert the certificate to build the path from.
2012      * Calculate the path from the certificate user presented to the
2022      * Check CA and proxy certificate chain from the top of the
2023      * certificate chain. Also check certificate is valid with respect
2045 	 * on what type of certificate this is.
2056 				       "Key usage missing from CA certificate");
2084 					   "Proxy certificate chain "
2095 					   "Proxy certificate have explicity "
2104 					   "Proxy certificate have explicity "
2110 		 * The subject name of the proxy certificate should be
2340 	    /* take next certificate in chain */
2352 				   "Failed to verify signature of certificate");
2357 	 * before the creation date of the certificate, do this for
2361 	 * Skip the leaf certificate for now...
2385  * Verify a signature made using the private key of an certificate.
2388  * @param signer the certificate that made the signature.
2432  * Verify that the certificate is allowed to be used for the hostname
2436  * @param cert the certificate to match with
2578  * Get an external attribute for the certificate, examples are
2581  * @param cert hx509 certificate object to search
2585  * certificate is referenced.
2601  * Set the friendly name on the certificate.
2603  * @param cert The certificate to set the friendly name on
2623  * Get friendly name of the certificate.
2628  * only valid as long as the certificate is referenced.
2957 	_hx509_Certificate_cmp(q->certificate, c) != 0)
3143     "match certificate",
3252  * Check the extended key usage on the hx509 certificate.
3344  * Encodes the hx509 certificate as a DER encode binary.
3347  * @param c the certificate to encode.
3348  * @param os the encode certificate, set to NULL, 0 on case of
3540     ret = hx509_env_add_binding(context, env, "certificate", envcert);
3552  * Print a simple representation of a certificate
3555  * @param cert certificate to print