sopc_pki.h

Go to the documentation of this file.

/*
 * Licensed to Systerel under one or more contributor license
 * agreements. See the NOTICE file distributed with this work
 * for additional information regarding copyright ownership.
 * Systerel licenses this file to you under the Apache
 * License, Version 2.0 (the "License"); you may not use this
 * file except in compliance with the License. You may obtain
 * a copy of the License at
 *
 *   http://www.apache.org/licenses/LICENSE-2.0
 *
 * Unless required by applicable law or agreed to in writing,
 * software distributed under the License is distributed on an
 * "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY
 * KIND, either express or implied.  See the License for the
 * specific language governing permissions and limitations
 * under the License.
 */
 
#ifndef SOPC_PKI_H_
#define SOPC_PKI_H_
 
#include "sopc_crypto_decl.h"
#include "sopc_crypto_provider.h"
#include "sopc_key_manager.h"
 
#define SOPC_CertificateValidationError_Invalid 0x80120000
#define SOPC_CertificateValidationError_TimeInvalid 0x80140000
#define SOPC_CertificateValidationError_IssuerTimeInvalid 0x80150000
#define SOPC_CertificateValidationError_HostNameInvalid 0x80160000
#define SOPC_CertificateValidationError_UriInvalid 0x80170000
#define SOPC_CertificateValidationError_UseNotAllowed 0x80180000
#define SOPC_CertificateValidationError_IssuerUseNotAllowed 0x80190000
#define SOPC_CertificateValidationError_Untrusted 0x801A0000
#define SOPC_CertificateValidationError_RevocationUnknown 0x801B0000
#define SOPC_CertificateValidationError_IssuerRevocationUnknown 0x801C0000
#define SOPC_CertificateValidationError_Revoked 0x801D0000
#define SOPC_CertificateValidationError_IssuerRevoked 0x801E0000
#define SOPC_CertificateValidationError_ChainIncomplete 0x810D0000
#define SOPC_CertificateValidationError_Unkown 0x80000000
 
typedef void (*SOPC_PKIProvider_Free_Func)(SOPC_PKIProvider* pPKI);
 
typedef SOPC_ReturnStatus (*SOPC_FnValidateCertificate)(const struct SOPC_PKIProvider* pPKI,
                                                        const SOPC_CertificateList* pToValidate,
                                                        uint32_t* error);
 
struct SOPC_PKIProvider
{
    const SOPC_PKIProvider_Free_Func pFnFree;
 
    const SOPC_FnValidateCertificate pFnValidateCertificate;
 
    void* pTrustedIssuerRootsList;
    void* pTrustedIssuerLinksList;
    void* pUntrustedIssuerRootsList;
    void* pUntrustedIssuerLinksList;
    void* pIssuedCertsList;
    void* pCertRevocList;
    void* pUserData;
};
 
void SOPC_PKIProvider_Free(SOPC_PKIProvider** ppPKI);
 
#endif /* SOPC_PKI_H_ */