lc_x509_generator.h

Go to the documentation of this file.

/*
 * Copyright (C) 2024 - 2025, Stephan Mueller <smueller@chronox.de>
 *
 * License: see LICENSE file in root directory
 *
 * THIS SOFTWARE IS PROVIDED ``AS IS'' AND ANY EXPRESS OR IMPLIED
 * WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES
 * OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE, ALL OF
 * WHICH ARE HEREBY DISCLAIMED.  IN NO EVENT SHALL THE AUTHOR BE
 * LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR
 * CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT
 * OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR
 * BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF
 * LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT
 * (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE
 * USE OF THIS SOFTWARE, EVEN IF NOT ADVISED OF THE POSSIBILITY OF SUCH
 * DAMAGE.
 */
 
#ifndef LC_X509_GENERATOR_H
#define LC_X509_GENERATOR_H
 
#include "lc_x509_common.h"
 
#ifdef __cplusplus
extern "C" {
#endif


int lc_x509_cert_encode(const struct lc_x509_certificate *x509, uint8_t *data,
                        size_t *avail_datalen);

int lc_x509_sk_encode(const struct lc_x509_key_data *gendata, uint8_t *data,
                      size_t *avail_datalen);

int lc_x509_get_signature_size_from_sk(size_t *siglen,
                                       const struct lc_x509_key_data *keys);

int lc_x509_get_signature_size_from_cert(
        size_t *siglen, const struct lc_x509_certificate *cert);

int lc_x509_signature_gen(uint8_t *sig_data, size_t *siglen,
                          const struct lc_x509_key_data *keys, const uint8_t *m,
                          size_t mlen, const struct lc_hash *prehash_algo);

int lc_x509_keypair_gen(struct lc_x509_certificate *cert,
                        struct lc_x509_key_data *keys,
                        enum lc_sig_types create_keypair_algo);

int lc_x509_keypair_load(struct lc_x509_certificate *cert,
                         const struct lc_x509_key_data *keys);

int lc_x509_cert_set_signer(struct lc_x509_certificate *signed_x509,
                            const struct lc_x509_key_data *signer_key_data,
                            const struct lc_x509_certificate *signer_x509);

int lc_x509_cert_set_eku(struct lc_x509_certificate *cert, const char *name);

int lc_x509_cert_set_eku_val(struct lc_x509_certificate *cert, uint16_t val);

int lc_x509_cert_set_keyusage(struct lc_x509_certificate *cert,
                              const char *name);

int lc_x509_cert_set_keyusage_val(struct lc_x509_certificate *cert,
                                  uint16_t val);

int lc_x509_cert_set_ca(struct lc_x509_certificate *cert);

int lc_x509_cert_set_san_dns(struct lc_x509_certificate *cert,
                             const char *san_dns_name);

int lc_x509_cert_set_san_ip(struct lc_x509_certificate *cert,
                            const uint8_t *san_ip, size_t san_ip_len);

int lc_x509_enc_san_ip(struct lc_x509_certificate *cert, char *ip_name,
                       uint8_t *ip, size_t *ip_len);

int lc_x509_cert_set_skid(struct lc_x509_certificate *cert, const uint8_t *skid,
                          size_t skidlen);

int lc_x509_cert_set_akid(struct lc_x509_certificate *cert, const uint8_t *akid,
                          size_t akidlen);

int lc_x509_cert_set_valid_from(struct lc_x509_certificate *cert,
                                time64_t time_since_epoch);

int lc_x509_cert_set_valid_to(struct lc_x509_certificate *cert,
                              time64_t time_since_epoch);

int lc_x509_cert_set_subject_cn(struct lc_x509_certificate *cert,
                                const char *string, size_t len);

int lc_x509_cert_set_subject_email(struct lc_x509_certificate *cert,
                                   const char *string, size_t len);

int lc_x509_cert_set_subject_ou(struct lc_x509_certificate *cert,
                                const char *string, size_t len);

int lc_x509_cert_set_subject_o(struct lc_x509_certificate *cert,
                               const char *string, size_t len);

int lc_x509_cert_set_subject_st(struct lc_x509_certificate *cert,
                                const char *string, size_t len);

int lc_x509_cert_set_subject_c(struct lc_x509_certificate *cert,
                               const char *string, size_t len);

int lc_x509_cert_set_issuer_cn(struct lc_x509_certificate *cert,
                               const char *string, size_t len);

int lc_x509_cert_set_issuer_email(struct lc_x509_certificate *cert,
                                  const char *string, size_t len);

int lc_x509_cert_set_issuer_ou(struct lc_x509_certificate *cert,
                               const char *string, size_t len);

int lc_x509_cert_set_issuer_o(struct lc_x509_certificate *cert,
                              const char *string, size_t len);

int lc_x509_cert_set_issuer_st(struct lc_x509_certificate *cert,
                               const char *string, size_t len);

int lc_x509_cert_set_issuer_c(struct lc_x509_certificate *cert,
                              const char *string, size_t len);

int lc_x509_cert_set_serial(struct lc_x509_certificate *cert,
                            const uint8_t *serial, size_t serial_len);

int lc_x509_pkey_name_to_algorithm(const char *name,
                                   enum lc_sig_types *pkey_algo);

int lc_x509_name_to_hash(const char *hash_name,
                         const struct lc_hash **hash_algo);

int lc_x509_hash_to_name(const struct lc_hash *hash_algo,
                         const char **hash_name);
int lc_x509_name_to_keyusage(const char *name, uint16_t *keyusage);

int lc_x509_name_to_eku(const char *name, uint16_t *eku);
 
#ifdef __cplusplus
}
#endif
 
#endif /* LC_X509_GENERATOR_H */