Index: mozilla/security/nss/lib/certhigh/ocspi.h |
=================================================================== |
--- mozilla/security/nss/lib/certhigh/ocspi.h (revision 191424) |
+++ mozilla/security/nss/lib/certhigh/ocspi.h (working copy) |
@@ -1,140 +0,0 @@ |
-/* This Source Code Form is subject to the terms of the Mozilla Public |
- * License, v. 2.0. If a copy of the MPL was not distributed with this |
- * file, You can obtain one at http://mozilla.org/MPL/2.0/. */ |
-/* |
- * ocspi.h - NSS internal interfaces to OCSP code |
- * |
- * $Id: ocspi.h,v 1.13 2012/12/12 19:29:40 wtc%google.com Exp $ |
- */ |
- |
-#ifndef _OCSPI_H_ |
-#define _OCSPI_H_ |
- |
-SECStatus OCSP_InitGlobal(void); |
-SECStatus OCSP_ShutdownGlobal(void); |
- |
-ocspResponseData * |
-ocsp_GetResponseData(CERTOCSPResponse *response, SECItem **tbsResponseDataDER); |
- |
-ocspSignature * |
-ocsp_GetResponseSignature(CERTOCSPResponse *response); |
- |
-PRBool |
-ocsp_CertIsOCSPDefaultResponder(CERTCertDBHandle *handle, CERTCertificate *cert); |
- |
-CERTCertificate * |
-ocsp_GetSignerCertificate(CERTCertDBHandle *handle, ocspResponseData *tbsData, |
- ocspSignature *signature, CERTCertificate *issuer); |
- |
-SECStatus |
-ocsp_VerifyResponseSignature(CERTCertificate *signerCert, |
- ocspSignature *signature, |
- SECItem *tbsResponseDataDER, |
- void *pwArg); |
- |
-CERTOCSPRequest * |
-cert_CreateSingleCertOCSPRequest(CERTOCSPCertID *certID, |
- CERTCertificate *singleCert, |
- int64 time, |
- PRBool addServiceLocator, |
- CERTCertificate *signerCert); |
- |
-SECStatus |
-ocsp_GetCachedOCSPResponseStatusIfFresh(CERTOCSPCertID *certID, |
- int64 time, |
- PRBool ignoreOcspFailureMode, |
- SECStatus *rvOcsp, |
- SECErrorCodes *missingResponseError); |
- |
-/* |
- * FUNCTION: cert_ProcessOCSPResponse |
- * Same behavior and basic parameters as CERT_GetOCSPStatusForCertID. |
- * In addition it can update the OCSP cache (using information |
- * available internally to this function). |
- * INPUTS: |
- * CERTCertDBHandle *handle |
- * certificate DB of the cert that is being checked |
- * CERTOCSPResponse *response |
- * the OCSP response we want to retrieve status from. |
- * CERTOCSPCertID *certID |
- * the ID we want to look for from the response. |
- * CERTCertificate *signerCert |
- * the certificate that was used to sign the OCSP response. |
- * must be obtained via a call to CERT_VerifyOCSPResponseSignature. |
- * int64 time |
- * The time at which we're checking the status for. |
- * PRBool *certIDWasConsumed |
- * In and Out parameter. |
- * If certIDWasConsumed is NULL on input, |
- * this function might produce a deep copy of cert ID |
- * for storing it in the cache. |
- * If out value is true, ownership of parameter certID was |
- * transferred to the OCSP cache. |
- * SECStatus *cacheUpdateStatus |
- * This optional out parameter will contain the result |
- * of the cache update operation (if requested). |
- * RETURN: |
- * The return value is not influenced by the cache operation, |
- * it matches the documentation for CERT_CheckOCSPStatus |
- */ |
- |
-SECStatus |
-cert_ProcessOCSPResponse(CERTCertDBHandle *handle, |
- CERTOCSPResponse *response, |
- CERTOCSPCertID *certID, |
- CERTCertificate *signerCert, |
- int64 time, |
- PRBool *certIDWasConsumed, |
- SECStatus *cacheUpdateStatus); |
- |
-/* |
- * FUNCTION: cert_RememberOCSPProcessingFailure |
- * If an application notices a failure during OCSP processing, |
- * it should finally call this function. The failure will be recorded |
- * in the OCSP cache in order to avoid repetitive failures. |
- * INPUTS: |
- * CERTOCSPCertID *certID |
- * the ID that was used for the failed OCSP processing |
- * PRBool *certIDWasConsumed |
- * Out parameter, if set to true, ownership of parameter certID was |
- * transferred to the OCSP cache. |
- * RETURN: |
- * Status of the cache update operation. |
- */ |
- |
-SECStatus |
-cert_RememberOCSPProcessingFailure(CERTOCSPCertID *certID, |
- PRBool *certIDWasConsumed); |
- |
-/* |
- * FUNCTION: ocsp_GetResponderLocation |
- * Check ocspx context for user-designated responder URI first. If not |
- * found, checks cert AIA extension. |
- * INPUTS: |
- * CERTCertDBHandle *handle |
- * certificate DB of the cert that is being checked |
- * CERTCertificate *cert |
- * The certificate being examined. |
- * PRBool *certIDWasConsumed |
- * Out parameter, if set to true, URI of default responder is |
- * returned. |
- * RETURN: |
- * Responder URI. |
- */ |
-char * |
-ocsp_GetResponderLocation(CERTCertDBHandle *handle, |
- CERTCertificate *cert, |
- PRBool canUseDefaultLocation, |
- PRBool *isDefault); |
- |
-/* FUNCTION: ocsp_FetchingFailureIsVerificationFailure |
- * The function checks the global ocsp settings and |
- * tells how to treat an ocsp response fetching failure. |
- * RETURNS: |
- * if PR_TRUE is returned, then treat fetching as a |
- * revoked cert status. |
- */ |
-PRBool |
-ocsp_FetchingFailureIsVerificationFailure(void); |
- |
-#endif /* _OCSPI_H_ */ |