Mirror of BoringSSL (grpc依赖)
https://boringssl.googlesource.com/boringssl
You can not select more than 25 topics
Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
58 lines
2.5 KiB
58 lines
2.5 KiB
/* Copyright (c) 2017, Google Inc. |
|
* |
|
* Permission to use, copy, modify, and/or distribute this software for any |
|
* purpose with or without fee is hereby granted, provided that the above |
|
* copyright notice and this permission notice appear in all copies. |
|
* |
|
* THE SOFTWARE IS PROVIDED "AS IS" AND THE AUTHOR DISCLAIMS ALL WARRANTIES |
|
* WITH REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF |
|
* MERCHANTABILITY AND FITNESS. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR ANY |
|
* SPECIAL, DIRECT, INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES |
|
* WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR PROFITS, WHETHER IN AN ACTION |
|
* OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF OR IN |
|
* CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE. */ |
|
|
|
#ifndef OPENSSL_HEADER_PKCS7_INTERNAL_H |
|
#define OPENSSL_HEADER_PKCS7_INTERNAL_H |
|
|
|
#include <openssl/base.h> |
|
|
|
#if defined(__cplusplus) |
|
extern "C" { |
|
#endif |
|
|
|
|
|
// pkcs7_parse_header reads the non-certificate/non-CRL prefix of a PKCS#7 |
|
// SignedData blob from |cbs| and sets |*out| to point to the rest of the |
|
// input. If the input is in BER format, then |*der_bytes| will be set to a |
|
// pointer that needs to be freed by the caller once they have finished |
|
// processing |*out| (which will be pointing into |*der_bytes|). |
|
// |
|
// It returns one on success or zero on error. On error, |*der_bytes| is |
|
// NULL. |
|
int pkcs7_parse_header(uint8_t **der_bytes, CBS *out, CBS *cbs); |
|
|
|
// pkcs7_add_signed_data writes a PKCS#7, SignedData structure to |out|. While |
|
// doing so it makes callbacks to let the caller fill in parts of the structure. |
|
// All callbacks are ignored if NULL and return one on success or zero on error. |
|
// |
|
// digest_algos_cb: may write AlgorithmIdentifiers into the given CBB, which |
|
// is a SET of digest algorithms. |
|
// cert_crl_cb: may write the |certificates| or |crls| fields. |
|
// (See https://datatracker.ietf.org/doc/html/rfc2315#section-9.1) |
|
// signer_infos_cb: may write the contents of the |signerInfos| field. |
|
// (See https://datatracker.ietf.org/doc/html/rfc2315#section-9.1) |
|
// |
|
// pkcs7_add_signed_data returns one on success or zero on error. |
|
int pkcs7_add_signed_data(CBB *out, |
|
int (*digest_algos_cb)(CBB *out, const void *arg), |
|
int (*cert_crl_cb)(CBB *out, const void *arg), |
|
int (*signer_infos_cb)(CBB *out, const void *arg), |
|
const void *arg); |
|
|
|
|
|
#if defined(__cplusplus) |
|
} // extern C |
|
#endif |
|
|
|
#endif // OPENSSL_HEADER_PKCS7_INTERNAL_H
|
|
|