1/* 2 * OpenVPN -- An application to securely tunnel IP networks 3 * over a single TCP/UDP port, with support for SSL/TLS-based 4 * session authentication and key exchange, 5 * packet encryption, packet authentication, and 6 * packet compression. 7 * 8 * Copyright (C) 2002-2010 OpenVPN Technologies, Inc. <sales@openvpn.net> 9 * 10 * This program is free software; you can redistribute it and/or modify 11 * it under the terms of the GNU General Public License version 2 12 * as published by the Free Software Foundation. 13 * 14 * This program is distributed in the hope that it will be useful, 15 * but WITHOUT ANY WARRANTY; without even the implied warranty of 16 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the 17 * GNU General Public License for more details. 18 * 19 * You should have received a copy of the GNU General Public License 20 * along with this program (see the file COPYING included with this 21 * distribution); if not, write to the Free Software Foundation, Inc., 22 * 59 Temple Place, Suite 330, Boston, MA 02111-1307 USA 23 */ 24 25#ifndef OPENVPN_PKCS11_H 26#define OPENVPN_PKCS11_H 27 28#if defined(ENABLE_PKCS11) 29 30#include "ssl_common.h" 31 32bool 33pkcs11_initialize ( 34 const bool fProtectedAuthentication, 35 const int nPINCachePeriod 36); 37 38void 39pkcs11_terminate (); 40 41void 42pkcs11_forkFixup (); 43 44bool 45pkcs11_addProvider ( 46 const char * const provider, 47 const bool fProtectedAuthentication, 48 const unsigned private_mode, 49 const bool fCertIsPrivate 50); 51 52int 53pkcs11_logout(); 54 55int 56pkcs11_management_id_count (); 57 58bool 59pkcs11_management_id_get ( 60 const int index, 61 char ** id, 62 char **base64 63); 64 65int 66tls_ctx_use_pkcs11 ( 67 struct tls_root_ctx * const ssl_ctx, 68 bool pkcs11_id_management, 69 const char * const pkcs11_id 70); 71 72void 73show_pkcs11_ids ( 74 const char * const provider, 75 bool cert_private 76); 77 78#endif /* ENABLE_PKCS11 */ 79 80#endif /* OPENVPN_PKCS11H_H */ 81