Index: mozilla/security/nss/lib/libpkix/include/pkixt.h |
=================================================================== |
--- mozilla/security/nss/lib/libpkix/include/pkixt.h (revision 191424) |
+++ mozilla/security/nss/lib/libpkix/include/pkixt.h (working copy) |
@@ -1,485 +0,0 @@ |
-/* This Source Code Form is subject to the terms of the Mozilla Public |
- * License, v. 2.0. If a copy of the MPL was not distributed with this |
- * file, You can obtain one at http://mozilla.org/MPL/2.0/. */ |
-/* |
- * This file defines the types in the libpkix API. |
- * XXX Maybe we should specify the API version number in all API header files |
- * |
- */ |
- |
-#ifndef _PKIXT_H |
-#define _PKIXT_H |
- |
-#ifdef __cplusplus |
-extern "C" { |
-#endif |
- |
-#include "secerr.h" |
- |
-/* Types |
- * |
- * This header file provides typedefs for the abstract types used by libpkix. |
- * It also provides several useful macros. |
- * |
- * Note that all these abstract types are typedef'd as opaque structures. This |
- * is intended to discourage the caller from looking at the contents directly, |
- * since the format of the contents may change from one version of the library |
- * to the next. Instead, callers should only access these types using the |
- * functions defined in the public header files. |
- * |
- * An instance of an abstract type defined in this file is called an "object" |
- * here, although C does not have real support for objects. |
- * |
- * Because C does not typically have automatic garbage collection, the caller |
- * is expected to release the reference to any object that they create or that |
- * is returned to them by a libpkix function. The caller should do this by |
- * using the PKIX_PL_Object_DecRef function. Note that the caller should not |
- * release the reference to an object if the object has been passed to a |
- * libpkix function and that function has not returned. |
- * |
- * Please refer to libpkix Programmer's Guide for more details. |
- */ |
- |
-/* Version |
- * |
- * These macros specify the major and minor version of the libpkix API defined |
- * by this header file. |
- */ |
- |
-#define PKIX_MAJOR_VERSION ((PKIX_UInt32) 0) |
-#define PKIX_MINOR_VERSION ((PKIX_UInt32) 3) |
- |
-/* Maximum minor version |
- * |
- * This macro is used to specify that the caller wants the largest minor |
- * version available. |
- */ |
- |
-#define PKIX_MAX_MINOR_VERSION ((PKIX_UInt32) 4000000000) |
- |
-/* Define Cert Store type for database access */ |
-#define PKIX_STORE_TYPE_NONE 0 |
-#define PKIX_STORE_TYPE_PK11 1 |
- |
-/* Portable Code (PC) data types |
- * |
- * These types are used to perform the primary operations of this library: |
- * building and validating chains of X.509 certificates. |
- */ |
- |
-typedef struct PKIX_ErrorStruct PKIX_Error; |
-typedef struct PKIX_ProcessingParamsStruct PKIX_ProcessingParams; |
-typedef struct PKIX_ValidateParamsStruct PKIX_ValidateParams; |
-typedef struct PKIX_ValidateResultStruct PKIX_ValidateResult; |
-typedef struct PKIX_ResourceLimitsStruct PKIX_ResourceLimits; |
-typedef struct PKIX_BuildResultStruct PKIX_BuildResult; |
-typedef struct PKIX_CertStoreStruct PKIX_CertStore; |
-typedef struct PKIX_CertChainCheckerStruct PKIX_CertChainChecker; |
-typedef struct PKIX_RevocationCheckerStruct PKIX_RevocationChecker; |
-typedef struct PKIX_CertSelectorStruct PKIX_CertSelector; |
-typedef struct PKIX_CRLSelectorStruct PKIX_CRLSelector; |
-typedef struct PKIX_ComCertSelParamsStruct PKIX_ComCertSelParams; |
-typedef struct PKIX_ComCRLSelParamsStruct PKIX_ComCRLSelParams; |
-typedef struct PKIX_TrustAnchorStruct PKIX_TrustAnchor; |
-typedef struct PKIX_PolicyNodeStruct PKIX_PolicyNode; |
-typedef struct PKIX_LoggerStruct PKIX_Logger; |
-typedef struct PKIX_ListStruct PKIX_List; |
-typedef struct PKIX_ForwardBuilderStateStruct PKIX_ForwardBuilderState; |
-typedef struct PKIX_DefaultRevocationCheckerStruct |
- PKIX_DefaultRevocationChecker; |
-typedef struct PKIX_VerifyNodeStruct PKIX_VerifyNode; |
- |
-/* Portability Layer (PL) data types |
- * |
- * These types are used are used as portable data types that are defined |
- * consistently across platforms |
- */ |
- |
-typedef struct PKIX_PL_NssContextStruct PKIX_PL_NssContext; |
-typedef struct PKIX_PL_ObjectStruct PKIX_PL_Object; |
-typedef struct PKIX_PL_ByteArrayStruct PKIX_PL_ByteArray; |
-typedef struct PKIX_PL_HashTableStruct PKIX_PL_HashTable; |
-typedef struct PKIX_PL_MutexStruct PKIX_PL_Mutex; |
-typedef struct PKIX_PL_RWLockStruct PKIX_PL_RWLock; |
-typedef struct PKIX_PL_MonitorLockStruct PKIX_PL_MonitorLock; |
-typedef struct PKIX_PL_BigIntStruct PKIX_PL_BigInt; |
-typedef struct PKIX_PL_StringStruct PKIX_PL_String; |
-typedef struct PKIX_PL_OIDStruct PKIX_PL_OID; |
-typedef struct PKIX_PL_CertStruct PKIX_PL_Cert; |
-typedef struct PKIX_PL_GeneralNameStruct PKIX_PL_GeneralName; |
-typedef struct PKIX_PL_X500NameStruct PKIX_PL_X500Name; |
-typedef struct PKIX_PL_PublicKeyStruct PKIX_PL_PublicKey; |
-typedef struct PKIX_PL_DateStruct PKIX_PL_Date; |
-typedef struct PKIX_PL_CertNameConstraintsStruct PKIX_PL_CertNameConstraints; |
-typedef struct PKIX_PL_CertBasicConstraintsStruct PKIX_PL_CertBasicConstraints; |
-typedef struct PKIX_PL_CertPoliciesStruct PKIX_PL_CertPolicies; |
-typedef struct PKIX_PL_CertPolicyInfoStruct PKIX_PL_CertPolicyInfo; |
-typedef struct PKIX_PL_CertPolicyQualifierStruct PKIX_PL_CertPolicyQualifier; |
-typedef struct PKIX_PL_CertPolicyMapStruct PKIX_PL_CertPolicyMap; |
-typedef struct PKIX_PL_CRLStruct PKIX_PL_CRL; |
-typedef struct PKIX_PL_CRLEntryStruct PKIX_PL_CRLEntry; |
-typedef struct PKIX_PL_CollectionCertStoreStruct PKIX_PL_CollectionCertStore; |
-typedef struct PKIX_PL_CollectionCertStoreContext |
- PKIX_PL_CollectionCertStoreContext; |
-typedef struct PKIX_PL_LdapCertStoreContext PKIX_PL_LdapCertStoreContext; |
-typedef struct PKIX_PL_LdapRequestStruct PKIX_PL_LdapRequest; |
-typedef struct PKIX_PL_LdapResponseStruct PKIX_PL_LdapResponse; |
-typedef struct PKIX_PL_LdapDefaultClientStruct PKIX_PL_LdapDefaultClient; |
-typedef struct PKIX_PL_SocketStruct PKIX_PL_Socket; |
-typedef struct PKIX_PL_InfoAccessStruct PKIX_PL_InfoAccess; |
-typedef struct PKIX_PL_AIAMgrStruct PKIX_PL_AIAMgr; |
-typedef struct PKIX_PL_OcspCertIDStruct PKIX_PL_OcspCertID; |
-typedef struct PKIX_PL_OcspRequestStruct PKIX_PL_OcspRequest; |
-typedef struct PKIX_PL_OcspResponseStruct PKIX_PL_OcspResponse; |
-typedef struct PKIX_PL_HttpClientStruct PKIX_PL_HttpClient; |
-typedef struct PKIX_PL_HttpDefaultClientStruct PKIX_PL_HttpDefaultClient; |
-typedef struct PKIX_PL_HttpCertStoreContextStruct PKIX_PL_HttpCertStoreContext; |
- |
-/* Primitive types |
- * |
- * In order to guarantee desired behavior as well as platform-independence, we |
- * typedef these types depending on the platform. XXX This needs more work! |
- */ |
- |
-/* XXX Try compiling these files (and maybe the whole libpkix-nss) on Win32. |
- * We don't know what type is at least 32 bits long. ISO C probably requires |
- * at least 32 bits for long. we could default to that and only list platforms |
- * where that's not true. |
- * |
- * #elif |
- * #error |
- * #endif |
- */ |
- |
-/* currently, int is 32 bits on all our supported platforms */ |
- |
-typedef unsigned int PKIX_UInt32; |
-typedef int PKIX_Int32; |
- |
-typedef int PKIX_Boolean; |
- |
-/* Object Types |
- * |
- * Every reference-counted PKIX_PL_Object is associated with an integer type. |
- */ |
-#define PKIX_TYPES \ |
- TYPEMACRO(AIAMGR), \ |
- TYPEMACRO(BASICCONSTRAINTSCHECKERSTATE), \ |
- TYPEMACRO(BIGINT), \ |
- TYPEMACRO(BUILDRESULT), \ |
- TYPEMACRO(BYTEARRAY), \ |
- TYPEMACRO(CERT), \ |
- TYPEMACRO(CERTBASICCONSTRAINTS), \ |
- TYPEMACRO(CERTCHAINCHECKER), \ |
- TYPEMACRO(CERTNAMECONSTRAINTS), \ |
- TYPEMACRO(CERTNAMECONSTRAINTSCHECKERSTATE), \ |
- TYPEMACRO(CERTPOLICYCHECKERSTATE), \ |
- TYPEMACRO(CERTPOLICYINFO), \ |
- TYPEMACRO(CERTPOLICYMAP), \ |
- TYPEMACRO(CERTPOLICYNODE), \ |
- TYPEMACRO(CERTPOLICYQUALIFIER), \ |
- TYPEMACRO(CERTSELECTOR), \ |
- TYPEMACRO(CERTSTORE), \ |
- TYPEMACRO(COLLECTIONCERTSTORECONTEXT), \ |
- TYPEMACRO(COMCERTSELPARAMS), \ |
- TYPEMACRO(COMCRLSELPARAMS), \ |
- TYPEMACRO(CRL), \ |
- TYPEMACRO(CRLDP), \ |
- TYPEMACRO(CRLENTRY), \ |
- TYPEMACRO(CRLSELECTOR), \ |
- TYPEMACRO(DATE), \ |
- TYPEMACRO(CRLCHECKER), \ |
- TYPEMACRO(EKUCHECKER), \ |
- TYPEMACRO(ERROR), \ |
- TYPEMACRO(FORWARDBUILDERSTATE), \ |
- TYPEMACRO(GENERALNAME), \ |
- TYPEMACRO(HASHTABLE), \ |
- TYPEMACRO(HTTPCERTSTORECONTEXT), \ |
- TYPEMACRO(HTTPDEFAULTCLIENT), \ |
- TYPEMACRO(INFOACCESS), \ |
- TYPEMACRO(LDAPDEFAULTCLIENT), \ |
- TYPEMACRO(LDAPREQUEST), \ |
- TYPEMACRO(LDAPRESPONSE), \ |
- TYPEMACRO(LIST), \ |
- TYPEMACRO(LOGGER), \ |
- TYPEMACRO(MONITORLOCK), \ |
- TYPEMACRO(MUTEX), \ |
- TYPEMACRO(OBJECT), \ |
- TYPEMACRO(OCSPCERTID), \ |
- TYPEMACRO(OCSPCHECKER), \ |
- TYPEMACRO(OCSPREQUEST), \ |
- TYPEMACRO(OCSPRESPONSE), \ |
- TYPEMACRO(OID), \ |
- TYPEMACRO(REVOCATIONCHECKER), \ |
- TYPEMACRO(PROCESSINGPARAMS), \ |
- TYPEMACRO(PUBLICKEY), \ |
- TYPEMACRO(RESOURCELIMITS), \ |
- TYPEMACRO(RWLOCK), \ |
- TYPEMACRO(SIGNATURECHECKERSTATE), \ |
- TYPEMACRO(SOCKET), \ |
- TYPEMACRO(STRING), \ |
- TYPEMACRO(TARGETCERTCHECKERSTATE), \ |
- TYPEMACRO(TRUSTANCHOR), \ |
- TYPEMACRO(VALIDATEPARAMS), \ |
- TYPEMACRO(VALIDATERESULT), \ |
- TYPEMACRO(VERIFYNODE), \ |
- TYPEMACRO(X500NAME) |
- |
-#define TYPEMACRO(type) PKIX_ ## type ## _TYPE |
- |
-typedef enum { /* Now invoke all those TYPEMACROs to assign the numbers */ |
- PKIX_TYPES, |
- PKIX_NUMTYPES /* This gets PKIX_NUMTYPES defined as the total number */ |
-} PKIX_TYPENUM; |
- |
- |
-#ifdef PKIX_USER_OBJECT_TYPE |
- |
-/* User Define Object Types |
- * |
- * User may define their own object types offset from PKIX_USER_OBJECT_TYPE |
- */ |
-#define PKIX_USER_OBJECT_TYPEBASE 1000 |
- |
-#endif /* PKIX_USER_OBJECT_TYPE */ |
- |
-/* Error Codes |
- * |
- * This list is used to define a set of PKIX_Error exception class numbers. |
- * ERRMACRO is redefined to produce a corresponding set of |
- * strings in the table "const char *PKIX_ERRORCLASSNAMES[PKIX_NUMERRORCLASSES]" in |
- * pkix_error.c. For example, since the fifth ERRMACRO entry is MUTEX, then |
- * PKIX_MUTEX_ERROR is defined in pkixt.h as 4, and PKIX_ERRORCLASSNAMES[4] is |
- * initialized in pkix_error.c with the value "MUTEX". |
- */ |
-#define PKIX_ERRORCLASSES \ |
- ERRMACRO(AIAMGR), \ |
- ERRMACRO(BASICCONSTRAINTSCHECKERSTATE), \ |
- ERRMACRO(BIGINT), \ |
- ERRMACRO(BUILD), \ |
- ERRMACRO(BUILDRESULT), \ |
- ERRMACRO(BYTEARRAY), \ |
- ERRMACRO(CERT), \ |
- ERRMACRO(CERTBASICCONSTRAINTS), \ |
- ERRMACRO(CERTCHAINCHECKER), \ |
- ERRMACRO(CERTNAMECONSTRAINTS), \ |
- ERRMACRO(CERTNAMECONSTRAINTSCHECKERSTATE), \ |
- ERRMACRO(CERTPOLICYCHECKERSTATE), \ |
- ERRMACRO(CERTPOLICYINFO), \ |
- ERRMACRO(CERTPOLICYMAP), \ |
- ERRMACRO(CERTPOLICYNODE), \ |
- ERRMACRO(CERTPOLICYQUALIFIER), \ |
- ERRMACRO(CERTSELECTOR), \ |
- ERRMACRO(CERTSTORE), \ |
- ERRMACRO(CERTVFYPKIX), \ |
- ERRMACRO(COLLECTIONCERTSTORECONTEXT), \ |
- ERRMACRO(COMCERTSELPARAMS), \ |
- ERRMACRO(COMCRLSELPARAMS), \ |
- ERRMACRO(CONTEXT), \ |
- ERRMACRO(CRL), \ |
- ERRMACRO(CRLDP), \ |
- ERRMACRO(CRLENTRY), \ |
- ERRMACRO(CRLSELECTOR), \ |
- ERRMACRO(CRLCHECKER), \ |
- ERRMACRO(DATE), \ |
- ERRMACRO(EKUCHECKER), \ |
- ERRMACRO(ERROR), \ |
- ERRMACRO(FATAL), \ |
- ERRMACRO(FORWARDBUILDERSTATE), \ |
- ERRMACRO(GENERALNAME), \ |
- ERRMACRO(HASHTABLE), \ |
- ERRMACRO(HTTPCERTSTORECONTEXT), \ |
- ERRMACRO(HTTPDEFAULTCLIENT), \ |
- ERRMACRO(INFOACCESS), \ |
- ERRMACRO(LDAPCLIENT), \ |
- ERRMACRO(LDAPDEFAULTCLIENT), \ |
- ERRMACRO(LDAPREQUEST), \ |
- ERRMACRO(LDAPRESPONSE), \ |
- ERRMACRO(LIFECYCLE), \ |
- ERRMACRO(LIST), \ |
- ERRMACRO(LOGGER), \ |
- ERRMACRO(MEM), \ |
- ERRMACRO(MONITORLOCK), \ |
- ERRMACRO(MUTEX), \ |
- ERRMACRO(OBJECT), \ |
- ERRMACRO(OCSPCERTID), \ |
- ERRMACRO(OCSPCHECKER), \ |
- ERRMACRO(OCSPREQUEST), \ |
- ERRMACRO(OCSPRESPONSE), \ |
- ERRMACRO(OID), \ |
- ERRMACRO(PROCESSINGPARAMS), \ |
- ERRMACRO(PUBLICKEY), \ |
- ERRMACRO(RESOURCELIMITS), \ |
- ERRMACRO(REVOCATIONMETHOD), \ |
- ERRMACRO(REVOCATIONCHECKER), \ |
- ERRMACRO(RWLOCK), \ |
- ERRMACRO(SIGNATURECHECKERSTATE), \ |
- ERRMACRO(SOCKET), \ |
- ERRMACRO(STRING), \ |
- ERRMACRO(TARGETCERTCHECKERSTATE), \ |
- ERRMACRO(TRUSTANCHOR), \ |
- ERRMACRO(USERDEFINEDMODULES), \ |
- ERRMACRO(VALIDATE), \ |
- ERRMACRO(VALIDATEPARAMS), \ |
- ERRMACRO(VALIDATERESULT), \ |
- ERRMACRO(VERIFYNODE), \ |
- ERRMACRO(X500NAME) |
- |
-#define ERRMACRO(type) PKIX_ ## type ## _ERROR |
- |
-typedef enum { /* Now invoke all those ERRMACROs to assign the numbers */ |
- PKIX_ERRORCLASSES, |
- PKIX_NUMERRORCLASSES /* This gets PKIX_NUMERRORCLASSES defined as the total number */ |
-} PKIX_ERRORCLASS; |
- |
-/* Now define error strings (for internationalization) */ |
- |
-#define PKIX_ERRORENTRY(name,desc,plerr) PKIX_ ## name |
- |
-/* Define all the error numbers */ |
-typedef enum { |
-#include "pkix_errorstrings.h" |
-, PKIX_NUMERRORCODES |
-} PKIX_ERRORCODE; |
- |
-extern const char * const PKIX_ErrorText[]; |
- |
-/* String Formats |
- * |
- * These formats specify supported encoding formats for Strings. |
- */ |
- |
-#define PKIX_ESCASCII 0 |
-#define PKIX_UTF8 1 |
-#define PKIX_UTF16 2 |
-#define PKIX_UTF8_NULL_TERM 3 |
-#define PKIX_ESCASCII_DEBUG 4 |
- |
-/* Name Types |
- * |
- * These types specify supported formats for GeneralNames. |
- */ |
- |
-#define PKIX_OTHER_NAME 1 |
-#define PKIX_RFC822_NAME 2 |
-#define PKIX_DNS_NAME 3 |
-#define PKIX_X400_ADDRESS 4 |
-#define PKIX_DIRECTORY_NAME 5 |
-#define PKIX_EDIPARTY_NAME 6 |
-#define PKIX_URI_NAME 7 |
-#define PKIX_IP_NAME 8 |
-#define PKIX_OID_NAME 9 |
- |
-/* Key Usages |
- * |
- * These types specify supported Key Usages |
- */ |
- |
-#define PKIX_DIGITAL_SIGNATURE 0x001 |
-#define PKIX_NON_REPUDIATION 0x002 |
-#define PKIX_KEY_ENCIPHERMENT 0x004 |
-#define PKIX_DATA_ENCIPHERMENT 0x008 |
-#define PKIX_KEY_AGREEMENT 0x010 |
-#define PKIX_KEY_CERT_SIGN 0x020 |
-#define PKIX_CRL_SIGN 0x040 |
-#define PKIX_ENCIPHER_ONLY 0x080 |
-#define PKIX_DECIPHER_ONLY 0x100 |
- |
-/* Reason Flags |
- * |
- * These macros specify supported Reason Flags |
- */ |
- |
-#define PKIX_UNUSED 0x001 |
-#define PKIX_KEY_COMPROMISE 0x002 |
-#define PKIX_CA_COMPROMISE 0x004 |
-#define PKIX_AFFILIATION_CHANGED 0x008 |
-#define PKIX_SUPERSEDED 0x010 |
-#define PKIX_CESSATION_OF_OPERATION 0x020 |
-#define PKIX_CERTIFICATE_HOLD 0x040 |
-#define PKIX_PRIVILEGE_WITHDRAWN 0x080 |
-#define PKIX_AA_COMPROMISE 0x100 |
- |
-/* Boolean values |
- * |
- * These macros specify the Boolean values of TRUE and FALSE |
- * XXX Is it the case that any non-zero value is actually considered TRUE |
- * and this is just a convenient mnemonic macro? |
- */ |
- |
-#define PKIX_TRUE ((PKIX_Boolean) 1) |
-#define PKIX_FALSE ((PKIX_Boolean) 0) |
- |
-/* |
- * Define constants for basic constraints selector |
- * (see comments in pkix_certsel.h) |
- */ |
- |
-#define PKIX_CERTSEL_ENDENTITY_MIN_PATHLENGTH (-2) |
-#define PKIX_CERTSEL_ALL_MATCH_MIN_PATHLENGTH (-1) |
- |
-/* |
- * PKIX_ALLOC_ERROR is a special error object hard-coded into the pkix_error.o |
- * object file. It is thrown if system memory cannot be allocated or may be |
- * thrown for other unrecoverable errors. PKIX_ALLOC_ERROR is immutable. |
- * IncRef, DecRef and all Settor functions cannot be called. |
- * XXX Does anyone actually need to know about this? |
- * XXX Why no DecRef? Would be good to handle it the same. |
- */ |
- |
-PKIX_Error* PKIX_ALLOC_ERROR(void); |
- |
-/* |
- * In a CertBasicConstraints extension, if the CA flag is set, |
- * indicating the certificate refers to a Certification |
- * Authority, then the pathLen field indicates how many intermediate |
- * certificates (not counting self-signed ones) can exist in a valid |
- * chain following this certificate. If the pathLen has the value |
- * of this constant, then the length of the chain is unlimited |
- */ |
-#define PKIX_UNLIMITED_PATH_CONSTRAINT ((PKIX_Int32) -1) |
- |
-/* |
- * Define Certificate Extension hard-coded OID's |
- */ |
-#define PKIX_UNKNOWN_OID SEC_OID_UNKNOWN |
-#define PKIX_CERTKEYUSAGE_OID SEC_OID_X509_KEY_USAGE |
-#define PKIX_CERTSUBJALTNAME_OID SEC_OID_X509_SUBJECT_ALT_NAME |
-#define PKIX_BASICCONSTRAINTS_OID SEC_OID_X509_BASIC_CONSTRAINTS |
-#define PKIX_CRLREASONCODE_OID SEC_OID_X509_REASON_CODE |
-#define PKIX_NAMECONSTRAINTS_OID SEC_OID_X509_NAME_CONSTRAINTS |
-#define PKIX_CERTIFICATEPOLICIES_OID SEC_OID_X509_CERTIFICATE_POLICIES |
-#define PKIX_CERTIFICATEPOLICIES_ANYPOLICY_OID SEC_OID_X509_ANY_POLICY |
-#define PKIX_POLICYMAPPINGS_OID SEC_OID_X509_POLICY_MAPPINGS |
-#define PKIX_POLICYCONSTRAINTS_OID SEC_OID_X509_POLICY_CONSTRAINTS |
-#define PKIX_EXTENDEDKEYUSAGE_OID SEC_OID_X509_EXT_KEY_USAGE |
-#define PKIX_INHIBITANYPOLICY_OID SEC_OID_X509_INHIBIT_ANY_POLICY |
-#define PKIX_NSCERTTYPE_OID SEC_OID_NS_CERT_EXT_CERT_TYPE |
-#define PKIX_KEY_USAGE_SERVER_AUTH_OID SEC_OID_EXT_KEY_USAGE_SERVER_AUTH |
-#define PKIX_KEY_USAGE_CLIENT_AUTH_OID SEC_OID_EXT_KEY_USAGE_CLIENT_AUTH |
-#define PKIX_KEY_USAGE_CODE_SIGN_OID SEC_OID_EXT_KEY_USAGE_CODE_SIGN |
-#define PKIX_KEY_USAGE_EMAIL_PROTECT_OID SEC_OID_EXT_KEY_USAGE_EMAIL_PROTECT |
-#define PKIX_KEY_USAGE_TIME_STAMP_OID SEC_OID_EXT_KEY_USAGE_TIME_STAMP |
-#define PKIX_KEY_USAGE_OCSP_RESPONDER_OID SEC_OID_OCSP_RESPONDER |
- |
- |
-/* Available revocation method types. */ |
-typedef enum PKIX_RevocationMethodTypeEnum { |
- PKIX_RevocationMethod_CRL = 0, |
- PKIX_RevocationMethod_OCSP, |
- PKIX_RevocationMethod_MAX |
-} PKIX_RevocationMethodType; |
- |
-/* A set of statuses revocation checker operates on */ |
-typedef enum PKIX_RevocationStatusEnum { |
- PKIX_RevStatus_NoInfo = 0, |
- PKIX_RevStatus_Revoked, |
- PKIX_RevStatus_Success |
-} PKIX_RevocationStatus; |
- |
- |
-#ifdef __cplusplus |
-} |
-#endif |
- |
-#endif /* _PKIXT_H */ |