x509v3.h@ 107278

最後變更在這個檔案從107278是 99371,由 vboxsync 提交於 22 月前
openssl-3.1.0: After generating headers and asm (kmk recreate-headers recreate-headers)
檔案大小: 91.8 KB

行
1	/*
2	* WARNING: do not edit!
3	* Generated by Makefile from x509v3.h.in
4	*
5	* Copyright 1999-2023 The OpenSSL Project Authors. All Rights Reserved.
6	*
7	* Licensed under the Apache License 2.0 (the "License"). You may not use
8	* this file except in compliance with the License. You can obtain a copy
9	* in the file LICENSE in the source distribution or at
10	* https://www.openssl.org/source/license.html
11	*/
12
13
14
15	#ifndef OPENSSL_X509V3_H
16	# define OPENSSL_X509V3_H
17	# pragma once
18
19	# include <openssl/macros.h>
20	# ifndef OPENSSL_NO_DEPRECATED_3_0
21	# define HEADER_X509V3_H
22	# endif
23
24	# include <openssl/bio.h>
25	# include <openssl/x509.h>
26	# include <openssl/conf.h>
27	# include <openssl/x509v3err.h>
28	# ifndef OPENSSL_NO_STDIO
29	# include <stdio.h>
30	# endif
31
32	#ifdef __cplusplus
33	extern "C" {
34	#endif
35
36	/* Forward reference */
37	struct v3_ext_method;
38	struct v3_ext_ctx;
39
40	/* Useful typedefs */
41
42	typedef void (X509V3_EXT_NEW)(void);
43	typedef void (X509V3_EXT_FREE) (void );
44	typedef void (X509V3_EXT_D2I)(void , const unsigned char *, long);
45	typedef int (X509V3_EXT_I2D) (const void , unsigned char **);
46	typedef STACK_OF(CONF_VALUE) *
47	(X509V3_EXT_I2V) (const struct v3_ext_method method, void *ext,
48	STACK_OF(CONF_VALUE) *extlist);
49	typedef void (X509V3_EXT_V2I)(const struct v3_ext_method *method,
50	struct v3_ext_ctx *ctx,
51	STACK_OF(CONF_VALUE) *values);
52	typedef char (X509V3_EXT_I2S)(const struct v3_ext_method *method,
53	void *ext);
54	typedef void (X509V3_EXT_S2I)(const struct v3_ext_method *method,
55	struct v3_ext_ctx ctx, const char str);
56	typedef int (X509V3_EXT_I2R) (const struct v3_ext_method method, void *ext,
57	BIO *out, int indent);
58	typedef void (X509V3_EXT_R2I)(const struct v3_ext_method *method,
59	struct v3_ext_ctx ctx, const char str);
60
61	/* V3 extension structure */
62
63	struct v3_ext_method {
64	int ext_nid;
65	int ext_flags;
66	/* If this is set the following four fields are ignored */
67	ASN1_ITEM_EXP *it;
68	/* Old style ASN1 calls */
69	X509V3_EXT_NEW ext_new;
70	X509V3_EXT_FREE ext_free;
71	X509V3_EXT_D2I d2i;
72	X509V3_EXT_I2D i2d;
73	/* The following pair is used for string extensions */
74	X509V3_EXT_I2S i2s;
75	X509V3_EXT_S2I s2i;
76	/* The following pair is used for multi-valued extensions */
77	X509V3_EXT_I2V i2v;
78	X509V3_EXT_V2I v2i;
79	/* The following are used for raw extensions */
80	X509V3_EXT_I2R i2r;
81	X509V3_EXT_R2I r2i;
82	void usr_data; / Any extension specific data */
83	};
84
85	typedef struct X509V3_CONF_METHOD_st {
86	char (get_string) (void db, const char section, const char *value);
87	STACK_OF(CONF_VALUE) (get_section) (void db, const char section);
88	void (free_string) (void db, char *string);
89	void (free_section) (void db, STACK_OF(CONF_VALUE) *section);
90	} X509V3_CONF_METHOD;
91
92	/* Context specific info for producing X509 v3 extensions*/
93	struct v3_ext_ctx {
94	# define X509V3_CTX_TEST 0x1
95	# ifndef OPENSSL_NO_DEPRECATED_3_0
96	# define CTX_TEST X509V3_CTX_TEST
97	# endif
98	# define X509V3_CTX_REPLACE 0x2
99	int flags;
100	X509 *issuer_cert;
101	X509 *subject_cert;
102	X509_REQ *subject_req;
103	X509_CRL *crl;
104	X509V3_CONF_METHOD *db_meth;
105	void *db;
106	EVP_PKEY *issuer_pkey;
107	/* Maybe more here */
108	};
109
110	typedef struct v3_ext_method X509V3_EXT_METHOD;
111
112	SKM_DEFINE_STACK_OF_INTERNAL(X509V3_EXT_METHOD, X509V3_EXT_METHOD, X509V3_EXT_METHOD)
113	#define sk_X509V3_EXT_METHOD_num(sk) OPENSSL_sk_num(ossl_check_const_X509V3_EXT_METHOD_sk_type(sk))
114	#define sk_X509V3_EXT_METHOD_value(sk, idx) ((X509V3_EXT_METHOD *)OPENSSL_sk_value(ossl_check_const_X509V3_EXT_METHOD_sk_type(sk), (idx)))
115	#define sk_X509V3_EXT_METHOD_new(cmp) ((STACK_OF(X509V3_EXT_METHOD) *)OPENSSL_sk_new(ossl_check_X509V3_EXT_METHOD_compfunc_type(cmp)))
116	#define sk_X509V3_EXT_METHOD_new_null() ((STACK_OF(X509V3_EXT_METHOD) *)OPENSSL_sk_new_null())
117	#define sk_X509V3_EXT_METHOD_new_reserve(cmp, n) ((STACK_OF(X509V3_EXT_METHOD) *)OPENSSL_sk_new_reserve(ossl_check_X509V3_EXT_METHOD_compfunc_type(cmp), (n)))
118	#define sk_X509V3_EXT_METHOD_reserve(sk, n) OPENSSL_sk_reserve(ossl_check_X509V3_EXT_METHOD_sk_type(sk), (n))
119	#define sk_X509V3_EXT_METHOD_free(sk) OPENSSL_sk_free(ossl_check_X509V3_EXT_METHOD_sk_type(sk))
120	#define sk_X509V3_EXT_METHOD_zero(sk) OPENSSL_sk_zero(ossl_check_X509V3_EXT_METHOD_sk_type(sk))
121	#define sk_X509V3_EXT_METHOD_delete(sk, i) ((X509V3_EXT_METHOD *)OPENSSL_sk_delete(ossl_check_X509V3_EXT_METHOD_sk_type(sk), (i)))
122	#define sk_X509V3_EXT_METHOD_delete_ptr(sk, ptr) ((X509V3_EXT_METHOD *)OPENSSL_sk_delete_ptr(ossl_check_X509V3_EXT_METHOD_sk_type(sk), ossl_check_X509V3_EXT_METHOD_type(ptr)))
123	#define sk_X509V3_EXT_METHOD_push(sk, ptr) OPENSSL_sk_push(ossl_check_X509V3_EXT_METHOD_sk_type(sk), ossl_check_X509V3_EXT_METHOD_type(ptr))
124	#define sk_X509V3_EXT_METHOD_unshift(sk, ptr) OPENSSL_sk_unshift(ossl_check_X509V3_EXT_METHOD_sk_type(sk), ossl_check_X509V3_EXT_METHOD_type(ptr))
125	#define sk_X509V3_EXT_METHOD_pop(sk) ((X509V3_EXT_METHOD *)OPENSSL_sk_pop(ossl_check_X509V3_EXT_METHOD_sk_type(sk)))
126	#define sk_X509V3_EXT_METHOD_shift(sk) ((X509V3_EXT_METHOD *)OPENSSL_sk_shift(ossl_check_X509V3_EXT_METHOD_sk_type(sk)))
127	#define sk_X509V3_EXT_METHOD_pop_free(sk, freefunc) OPENSSL_sk_pop_free(ossl_check_X509V3_EXT_METHOD_sk_type(sk),ossl_check_X509V3_EXT_METHOD_freefunc_type(freefunc))
128	#define sk_X509V3_EXT_METHOD_insert(sk, ptr, idx) OPENSSL_sk_insert(ossl_check_X509V3_EXT_METHOD_sk_type(sk), ossl_check_X509V3_EXT_METHOD_type(ptr), (idx))
129	#define sk_X509V3_EXT_METHOD_set(sk, idx, ptr) ((X509V3_EXT_METHOD *)OPENSSL_sk_set(ossl_check_X509V3_EXT_METHOD_sk_type(sk), (idx), ossl_check_X509V3_EXT_METHOD_type(ptr)))
130	#define sk_X509V3_EXT_METHOD_find(sk, ptr) OPENSSL_sk_find(ossl_check_X509V3_EXT_METHOD_sk_type(sk), ossl_check_X509V3_EXT_METHOD_type(ptr))
131	#define sk_X509V3_EXT_METHOD_find_ex(sk, ptr) OPENSSL_sk_find_ex(ossl_check_X509V3_EXT_METHOD_sk_type(sk), ossl_check_X509V3_EXT_METHOD_type(ptr))
132	#define sk_X509V3_EXT_METHOD_find_all(sk, ptr, pnum) OPENSSL_sk_find_all(ossl_check_X509V3_EXT_METHOD_sk_type(sk), ossl_check_X509V3_EXT_METHOD_type(ptr), pnum)
133	#define sk_X509V3_EXT_METHOD_sort(sk) OPENSSL_sk_sort(ossl_check_X509V3_EXT_METHOD_sk_type(sk))
134	#define sk_X509V3_EXT_METHOD_is_sorted(sk) OPENSSL_sk_is_sorted(ossl_check_const_X509V3_EXT_METHOD_sk_type(sk))
135	#define sk_X509V3_EXT_METHOD_dup(sk) ((STACK_OF(X509V3_EXT_METHOD) *)OPENSSL_sk_dup(ossl_check_const_X509V3_EXT_METHOD_sk_type(sk)))
136	#define sk_X509V3_EXT_METHOD_deep_copy(sk, copyfunc, freefunc) ((STACK_OF(X509V3_EXT_METHOD) *)OPENSSL_sk_deep_copy(ossl_check_const_X509V3_EXT_METHOD_sk_type(sk), ossl_check_X509V3_EXT_METHOD_copyfunc_type(copyfunc), ossl_check_X509V3_EXT_METHOD_freefunc_type(freefunc)))
137	#define sk_X509V3_EXT_METHOD_set_cmp_func(sk, cmp) ((sk_X509V3_EXT_METHOD_compfunc)OPENSSL_sk_set_cmp_func(ossl_check_X509V3_EXT_METHOD_sk_type(sk), ossl_check_X509V3_EXT_METHOD_compfunc_type(cmp)))
138
139
140	/* ext_flags values */
141	# define X509V3_EXT_DYNAMIC 0x1
142	# define X509V3_EXT_CTX_DEP 0x2
143	# define X509V3_EXT_MULTILINE 0x4
144
145	typedef BIT_STRING_BITNAME ENUMERATED_NAMES;
146
147	typedef struct BASIC_CONSTRAINTS_st {
148	int ca;
149	ASN1_INTEGER *pathlen;
150	} BASIC_CONSTRAINTS;
151
152	typedef struct PKEY_USAGE_PERIOD_st {
153	ASN1_GENERALIZEDTIME *notBefore;
154	ASN1_GENERALIZEDTIME *notAfter;
155	} PKEY_USAGE_PERIOD;
156
157	typedef struct otherName_st {
158	ASN1_OBJECT *type_id;
159	ASN1_TYPE *value;
160	} OTHERNAME;
161
162	typedef struct EDIPartyName_st {
163	ASN1_STRING *nameAssigner;
164	ASN1_STRING *partyName;
165	} EDIPARTYNAME;
166
167	typedef struct GENERAL_NAME_st {
168	# define GEN_OTHERNAME 0
169	# define GEN_EMAIL 1
170	# define GEN_DNS 2
171	# define GEN_X400 3
172	# define GEN_DIRNAME 4
173	# define GEN_EDIPARTY 5
174	# define GEN_URI 6
175	# define GEN_IPADD 7
176	# define GEN_RID 8
177	int type;
178	union {
179	char *ptr;
180	OTHERNAME otherName; / otherName */
181	ASN1_IA5STRING *rfc822Name;
182	ASN1_IA5STRING *dNSName;
183	ASN1_STRING *x400Address;
184	X509_NAME *directoryName;
185	EDIPARTYNAME *ediPartyName;
186	ASN1_IA5STRING *uniformResourceIdentifier;
187	ASN1_OCTET_STRING *iPAddress;
188	ASN1_OBJECT *registeredID;
189	/* Old names */
190	ASN1_OCTET_STRING ip; / iPAddress */
191	X509_NAME dirn; / dirn */
192	ASN1_IA5STRING ia5; / rfc822Name, dNSName,
193	* uniformResourceIdentifier */
194	ASN1_OBJECT rid; / registeredID */
195	ASN1_TYPE other; / x400Address */
196	} d;
197	} GENERAL_NAME;
198
199	typedef struct ACCESS_DESCRIPTION_st {
200	ASN1_OBJECT *method;
201	GENERAL_NAME *location;
202	} ACCESS_DESCRIPTION;
203
204	SKM_DEFINE_STACK_OF_INTERNAL(ACCESS_DESCRIPTION, ACCESS_DESCRIPTION, ACCESS_DESCRIPTION)
205	#define sk_ACCESS_DESCRIPTION_num(sk) OPENSSL_sk_num(ossl_check_const_ACCESS_DESCRIPTION_sk_type(sk))
206	#define sk_ACCESS_DESCRIPTION_value(sk, idx) ((ACCESS_DESCRIPTION *)OPENSSL_sk_value(ossl_check_const_ACCESS_DESCRIPTION_sk_type(sk), (idx)))
207	#define sk_ACCESS_DESCRIPTION_new(cmp) ((STACK_OF(ACCESS_DESCRIPTION) *)OPENSSL_sk_new(ossl_check_ACCESS_DESCRIPTION_compfunc_type(cmp)))
208	#define sk_ACCESS_DESCRIPTION_new_null() ((STACK_OF(ACCESS_DESCRIPTION) *)OPENSSL_sk_new_null())
209	#define sk_ACCESS_DESCRIPTION_new_reserve(cmp, n) ((STACK_OF(ACCESS_DESCRIPTION) *)OPENSSL_sk_new_reserve(ossl_check_ACCESS_DESCRIPTION_compfunc_type(cmp), (n)))
210	#define sk_ACCESS_DESCRIPTION_reserve(sk, n) OPENSSL_sk_reserve(ossl_check_ACCESS_DESCRIPTION_sk_type(sk), (n))
211	#define sk_ACCESS_DESCRIPTION_free(sk) OPENSSL_sk_free(ossl_check_ACCESS_DESCRIPTION_sk_type(sk))
212	#define sk_ACCESS_DESCRIPTION_zero(sk) OPENSSL_sk_zero(ossl_check_ACCESS_DESCRIPTION_sk_type(sk))
213	#define sk_ACCESS_DESCRIPTION_delete(sk, i) ((ACCESS_DESCRIPTION *)OPENSSL_sk_delete(ossl_check_ACCESS_DESCRIPTION_sk_type(sk), (i)))
214	#define sk_ACCESS_DESCRIPTION_delete_ptr(sk, ptr) ((ACCESS_DESCRIPTION *)OPENSSL_sk_delete_ptr(ossl_check_ACCESS_DESCRIPTION_sk_type(sk), ossl_check_ACCESS_DESCRIPTION_type(ptr)))
215	#define sk_ACCESS_DESCRIPTION_push(sk, ptr) OPENSSL_sk_push(ossl_check_ACCESS_DESCRIPTION_sk_type(sk), ossl_check_ACCESS_DESCRIPTION_type(ptr))
216	#define sk_ACCESS_DESCRIPTION_unshift(sk, ptr) OPENSSL_sk_unshift(ossl_check_ACCESS_DESCRIPTION_sk_type(sk), ossl_check_ACCESS_DESCRIPTION_type(ptr))
217	#define sk_ACCESS_DESCRIPTION_pop(sk) ((ACCESS_DESCRIPTION *)OPENSSL_sk_pop(ossl_check_ACCESS_DESCRIPTION_sk_type(sk)))
218	#define sk_ACCESS_DESCRIPTION_shift(sk) ((ACCESS_DESCRIPTION *)OPENSSL_sk_shift(ossl_check_ACCESS_DESCRIPTION_sk_type(sk)))
219	#define sk_ACCESS_DESCRIPTION_pop_free(sk, freefunc) OPENSSL_sk_pop_free(ossl_check_ACCESS_DESCRIPTION_sk_type(sk),ossl_check_ACCESS_DESCRIPTION_freefunc_type(freefunc))
220	#define sk_ACCESS_DESCRIPTION_insert(sk, ptr, idx) OPENSSL_sk_insert(ossl_check_ACCESS_DESCRIPTION_sk_type(sk), ossl_check_ACCESS_DESCRIPTION_type(ptr), (idx))
221	#define sk_ACCESS_DESCRIPTION_set(sk, idx, ptr) ((ACCESS_DESCRIPTION *)OPENSSL_sk_set(ossl_check_ACCESS_DESCRIPTION_sk_type(sk), (idx), ossl_check_ACCESS_DESCRIPTION_type(ptr)))
222	#define sk_ACCESS_DESCRIPTION_find(sk, ptr) OPENSSL_sk_find(ossl_check_ACCESS_DESCRIPTION_sk_type(sk), ossl_check_ACCESS_DESCRIPTION_type(ptr))
223	#define sk_ACCESS_DESCRIPTION_find_ex(sk, ptr) OPENSSL_sk_find_ex(ossl_check_ACCESS_DESCRIPTION_sk_type(sk), ossl_check_ACCESS_DESCRIPTION_type(ptr))
224	#define sk_ACCESS_DESCRIPTION_find_all(sk, ptr, pnum) OPENSSL_sk_find_all(ossl_check_ACCESS_DESCRIPTION_sk_type(sk), ossl_check_ACCESS_DESCRIPTION_type(ptr), pnum)
225	#define sk_ACCESS_DESCRIPTION_sort(sk) OPENSSL_sk_sort(ossl_check_ACCESS_DESCRIPTION_sk_type(sk))
226	#define sk_ACCESS_DESCRIPTION_is_sorted(sk) OPENSSL_sk_is_sorted(ossl_check_const_ACCESS_DESCRIPTION_sk_type(sk))
227	#define sk_ACCESS_DESCRIPTION_dup(sk) ((STACK_OF(ACCESS_DESCRIPTION) *)OPENSSL_sk_dup(ossl_check_const_ACCESS_DESCRIPTION_sk_type(sk)))
228	#define sk_ACCESS_DESCRIPTION_deep_copy(sk, copyfunc, freefunc) ((STACK_OF(ACCESS_DESCRIPTION) *)OPENSSL_sk_deep_copy(ossl_check_const_ACCESS_DESCRIPTION_sk_type(sk), ossl_check_ACCESS_DESCRIPTION_copyfunc_type(copyfunc), ossl_check_ACCESS_DESCRIPTION_freefunc_type(freefunc)))
229	#define sk_ACCESS_DESCRIPTION_set_cmp_func(sk, cmp) ((sk_ACCESS_DESCRIPTION_compfunc)OPENSSL_sk_set_cmp_func(ossl_check_ACCESS_DESCRIPTION_sk_type(sk), ossl_check_ACCESS_DESCRIPTION_compfunc_type(cmp)))
230	SKM_DEFINE_STACK_OF_INTERNAL(GENERAL_NAME, GENERAL_NAME, GENERAL_NAME)
231	#define sk_GENERAL_NAME_num(sk) OPENSSL_sk_num(ossl_check_const_GENERAL_NAME_sk_type(sk))
232	#define sk_GENERAL_NAME_value(sk, idx) ((GENERAL_NAME *)OPENSSL_sk_value(ossl_check_const_GENERAL_NAME_sk_type(sk), (idx)))
233	#define sk_GENERAL_NAME_new(cmp) ((STACK_OF(GENERAL_NAME) *)OPENSSL_sk_new(ossl_check_GENERAL_NAME_compfunc_type(cmp)))
234	#define sk_GENERAL_NAME_new_null() ((STACK_OF(GENERAL_NAME) *)OPENSSL_sk_new_null())
235	#define sk_GENERAL_NAME_new_reserve(cmp, n) ((STACK_OF(GENERAL_NAME) *)OPENSSL_sk_new_reserve(ossl_check_GENERAL_NAME_compfunc_type(cmp), (n)))
236	#define sk_GENERAL_NAME_reserve(sk, n) OPENSSL_sk_reserve(ossl_check_GENERAL_NAME_sk_type(sk), (n))
237	#define sk_GENERAL_NAME_free(sk) OPENSSL_sk_free(ossl_check_GENERAL_NAME_sk_type(sk))
238	#define sk_GENERAL_NAME_zero(sk) OPENSSL_sk_zero(ossl_check_GENERAL_NAME_sk_type(sk))
239	#define sk_GENERAL_NAME_delete(sk, i) ((GENERAL_NAME *)OPENSSL_sk_delete(ossl_check_GENERAL_NAME_sk_type(sk), (i)))
240	#define sk_GENERAL_NAME_delete_ptr(sk, ptr) ((GENERAL_NAME *)OPENSSL_sk_delete_ptr(ossl_check_GENERAL_NAME_sk_type(sk), ossl_check_GENERAL_NAME_type(ptr)))
241	#define sk_GENERAL_NAME_push(sk, ptr) OPENSSL_sk_push(ossl_check_GENERAL_NAME_sk_type(sk), ossl_check_GENERAL_NAME_type(ptr))
242	#define sk_GENERAL_NAME_unshift(sk, ptr) OPENSSL_sk_unshift(ossl_check_GENERAL_NAME_sk_type(sk), ossl_check_GENERAL_NAME_type(ptr))
243	#define sk_GENERAL_NAME_pop(sk) ((GENERAL_NAME *)OPENSSL_sk_pop(ossl_check_GENERAL_NAME_sk_type(sk)))
244	#define sk_GENERAL_NAME_shift(sk) ((GENERAL_NAME *)OPENSSL_sk_shift(ossl_check_GENERAL_NAME_sk_type(sk)))
245	#define sk_GENERAL_NAME_pop_free(sk, freefunc) OPENSSL_sk_pop_free(ossl_check_GENERAL_NAME_sk_type(sk),ossl_check_GENERAL_NAME_freefunc_type(freefunc))
246	#define sk_GENERAL_NAME_insert(sk, ptr, idx) OPENSSL_sk_insert(ossl_check_GENERAL_NAME_sk_type(sk), ossl_check_GENERAL_NAME_type(ptr), (idx))
247	#define sk_GENERAL_NAME_set(sk, idx, ptr) ((GENERAL_NAME *)OPENSSL_sk_set(ossl_check_GENERAL_NAME_sk_type(sk), (idx), ossl_check_GENERAL_NAME_type(ptr)))
248	#define sk_GENERAL_NAME_find(sk, ptr) OPENSSL_sk_find(ossl_check_GENERAL_NAME_sk_type(sk), ossl_check_GENERAL_NAME_type(ptr))
249	#define sk_GENERAL_NAME_find_ex(sk, ptr) OPENSSL_sk_find_ex(ossl_check_GENERAL_NAME_sk_type(sk), ossl_check_GENERAL_NAME_type(ptr))
250	#define sk_GENERAL_NAME_find_all(sk, ptr, pnum) OPENSSL_sk_find_all(ossl_check_GENERAL_NAME_sk_type(sk), ossl_check_GENERAL_NAME_type(ptr), pnum)
251	#define sk_GENERAL_NAME_sort(sk) OPENSSL_sk_sort(ossl_check_GENERAL_NAME_sk_type(sk))
252	#define sk_GENERAL_NAME_is_sorted(sk) OPENSSL_sk_is_sorted(ossl_check_const_GENERAL_NAME_sk_type(sk))
253	#define sk_GENERAL_NAME_dup(sk) ((STACK_OF(GENERAL_NAME) *)OPENSSL_sk_dup(ossl_check_const_GENERAL_NAME_sk_type(sk)))
254	#define sk_GENERAL_NAME_deep_copy(sk, copyfunc, freefunc) ((STACK_OF(GENERAL_NAME) *)OPENSSL_sk_deep_copy(ossl_check_const_GENERAL_NAME_sk_type(sk), ossl_check_GENERAL_NAME_copyfunc_type(copyfunc), ossl_check_GENERAL_NAME_freefunc_type(freefunc)))
255	#define sk_GENERAL_NAME_set_cmp_func(sk, cmp) ((sk_GENERAL_NAME_compfunc)OPENSSL_sk_set_cmp_func(ossl_check_GENERAL_NAME_sk_type(sk), ossl_check_GENERAL_NAME_compfunc_type(cmp)))
256
257
258	typedef STACK_OF(ACCESS_DESCRIPTION) AUTHORITY_INFO_ACCESS;
259	typedef STACK_OF(ASN1_OBJECT) EXTENDED_KEY_USAGE;
260	typedef STACK_OF(ASN1_INTEGER) TLS_FEATURE;
261	typedef STACK_OF(GENERAL_NAME) GENERAL_NAMES;
262
263	SKM_DEFINE_STACK_OF_INTERNAL(GENERAL_NAMES, GENERAL_NAMES, GENERAL_NAMES)
264	#define sk_GENERAL_NAMES_num(sk) OPENSSL_sk_num(ossl_check_const_GENERAL_NAMES_sk_type(sk))
265	#define sk_GENERAL_NAMES_value(sk, idx) ((GENERAL_NAMES *)OPENSSL_sk_value(ossl_check_const_GENERAL_NAMES_sk_type(sk), (idx)))
266	#define sk_GENERAL_NAMES_new(cmp) ((STACK_OF(GENERAL_NAMES) *)OPENSSL_sk_new(ossl_check_GENERAL_NAMES_compfunc_type(cmp)))
267	#define sk_GENERAL_NAMES_new_null() ((STACK_OF(GENERAL_NAMES) *)OPENSSL_sk_new_null())
268	#define sk_GENERAL_NAMES_new_reserve(cmp, n) ((STACK_OF(GENERAL_NAMES) *)OPENSSL_sk_new_reserve(ossl_check_GENERAL_NAMES_compfunc_type(cmp), (n)))
269	#define sk_GENERAL_NAMES_reserve(sk, n) OPENSSL_sk_reserve(ossl_check_GENERAL_NAMES_sk_type(sk), (n))
270	#define sk_GENERAL_NAMES_free(sk) OPENSSL_sk_free(ossl_check_GENERAL_NAMES_sk_type(sk))
271	#define sk_GENERAL_NAMES_zero(sk) OPENSSL_sk_zero(ossl_check_GENERAL_NAMES_sk_type(sk))
272	#define sk_GENERAL_NAMES_delete(sk, i) ((GENERAL_NAMES *)OPENSSL_sk_delete(ossl_check_GENERAL_NAMES_sk_type(sk), (i)))
273	#define sk_GENERAL_NAMES_delete_ptr(sk, ptr) ((GENERAL_NAMES *)OPENSSL_sk_delete_ptr(ossl_check_GENERAL_NAMES_sk_type(sk), ossl_check_GENERAL_NAMES_type(ptr)))
274	#define sk_GENERAL_NAMES_push(sk, ptr) OPENSSL_sk_push(ossl_check_GENERAL_NAMES_sk_type(sk), ossl_check_GENERAL_NAMES_type(ptr))
275	#define sk_GENERAL_NAMES_unshift(sk, ptr) OPENSSL_sk_unshift(ossl_check_GENERAL_NAMES_sk_type(sk), ossl_check_GENERAL_NAMES_type(ptr))
276	#define sk_GENERAL_NAMES_pop(sk) ((GENERAL_NAMES *)OPENSSL_sk_pop(ossl_check_GENERAL_NAMES_sk_type(sk)))
277	#define sk_GENERAL_NAMES_shift(sk) ((GENERAL_NAMES *)OPENSSL_sk_shift(ossl_check_GENERAL_NAMES_sk_type(sk)))
278	#define sk_GENERAL_NAMES_pop_free(sk, freefunc) OPENSSL_sk_pop_free(ossl_check_GENERAL_NAMES_sk_type(sk),ossl_check_GENERAL_NAMES_freefunc_type(freefunc))
279	#define sk_GENERAL_NAMES_insert(sk, ptr, idx) OPENSSL_sk_insert(ossl_check_GENERAL_NAMES_sk_type(sk), ossl_check_GENERAL_NAMES_type(ptr), (idx))
280	#define sk_GENERAL_NAMES_set(sk, idx, ptr) ((GENERAL_NAMES *)OPENSSL_sk_set(ossl_check_GENERAL_NAMES_sk_type(sk), (idx), ossl_check_GENERAL_NAMES_type(ptr)))
281	#define sk_GENERAL_NAMES_find(sk, ptr) OPENSSL_sk_find(ossl_check_GENERAL_NAMES_sk_type(sk), ossl_check_GENERAL_NAMES_type(ptr))
282	#define sk_GENERAL_NAMES_find_ex(sk, ptr) OPENSSL_sk_find_ex(ossl_check_GENERAL_NAMES_sk_type(sk), ossl_check_GENERAL_NAMES_type(ptr))
283	#define sk_GENERAL_NAMES_find_all(sk, ptr, pnum) OPENSSL_sk_find_all(ossl_check_GENERAL_NAMES_sk_type(sk), ossl_check_GENERAL_NAMES_type(ptr), pnum)
284	#define sk_GENERAL_NAMES_sort(sk) OPENSSL_sk_sort(ossl_check_GENERAL_NAMES_sk_type(sk))
285	#define sk_GENERAL_NAMES_is_sorted(sk) OPENSSL_sk_is_sorted(ossl_check_const_GENERAL_NAMES_sk_type(sk))
286	#define sk_GENERAL_NAMES_dup(sk) ((STACK_OF(GENERAL_NAMES) *)OPENSSL_sk_dup(ossl_check_const_GENERAL_NAMES_sk_type(sk)))
287	#define sk_GENERAL_NAMES_deep_copy(sk, copyfunc, freefunc) ((STACK_OF(GENERAL_NAMES) *)OPENSSL_sk_deep_copy(ossl_check_const_GENERAL_NAMES_sk_type(sk), ossl_check_GENERAL_NAMES_copyfunc_type(copyfunc), ossl_check_GENERAL_NAMES_freefunc_type(freefunc)))
288	#define sk_GENERAL_NAMES_set_cmp_func(sk, cmp) ((sk_GENERAL_NAMES_compfunc)OPENSSL_sk_set_cmp_func(ossl_check_GENERAL_NAMES_sk_type(sk), ossl_check_GENERAL_NAMES_compfunc_type(cmp)))
289
290
291	typedef struct DIST_POINT_NAME_st {
292	int type;
293	union {
294	GENERAL_NAMES *fullname;
295	STACK_OF(X509_NAME_ENTRY) *relativename;
296	} name;
297	/* If relativename then this contains the full distribution point name */
298	X509_NAME *dpname;
299	} DIST_POINT_NAME;
300	/* All existing reasons */
301	# define CRLDP_ALL_REASONS 0x807f
302
303	# define CRL_REASON_NONE -1
304	# define CRL_REASON_UNSPECIFIED 0
305	# define CRL_REASON_KEY_COMPROMISE 1
306	# define CRL_REASON_CA_COMPROMISE 2
307	# define CRL_REASON_AFFILIATION_CHANGED 3
308	# define CRL_REASON_SUPERSEDED 4
309	# define CRL_REASON_CESSATION_OF_OPERATION 5
310	# define CRL_REASON_CERTIFICATE_HOLD 6
311	# define CRL_REASON_REMOVE_FROM_CRL 8
312	# define CRL_REASON_PRIVILEGE_WITHDRAWN 9
313	# define CRL_REASON_AA_COMPROMISE 10
314
315	struct DIST_POINT_st {
316	DIST_POINT_NAME *distpoint;
317	ASN1_BIT_STRING *reasons;
318	GENERAL_NAMES *CRLissuer;
319	int dp_reasons;
320	};
321
322	SKM_DEFINE_STACK_OF_INTERNAL(DIST_POINT, DIST_POINT, DIST_POINT)
323	#define sk_DIST_POINT_num(sk) OPENSSL_sk_num(ossl_check_const_DIST_POINT_sk_type(sk))
324	#define sk_DIST_POINT_value(sk, idx) ((DIST_POINT *)OPENSSL_sk_value(ossl_check_const_DIST_POINT_sk_type(sk), (idx)))
325	#define sk_DIST_POINT_new(cmp) ((STACK_OF(DIST_POINT) *)OPENSSL_sk_new(ossl_check_DIST_POINT_compfunc_type(cmp)))
326	#define sk_DIST_POINT_new_null() ((STACK_OF(DIST_POINT) *)OPENSSL_sk_new_null())
327	#define sk_DIST_POINT_new_reserve(cmp, n) ((STACK_OF(DIST_POINT) *)OPENSSL_sk_new_reserve(ossl_check_DIST_POINT_compfunc_type(cmp), (n)))
328	#define sk_DIST_POINT_reserve(sk, n) OPENSSL_sk_reserve(ossl_check_DIST_POINT_sk_type(sk), (n))
329	#define sk_DIST_POINT_free(sk) OPENSSL_sk_free(ossl_check_DIST_POINT_sk_type(sk))
330	#define sk_DIST_POINT_zero(sk) OPENSSL_sk_zero(ossl_check_DIST_POINT_sk_type(sk))
331	#define sk_DIST_POINT_delete(sk, i) ((DIST_POINT *)OPENSSL_sk_delete(ossl_check_DIST_POINT_sk_type(sk), (i)))
332	#define sk_DIST_POINT_delete_ptr(sk, ptr) ((DIST_POINT *)OPENSSL_sk_delete_ptr(ossl_check_DIST_POINT_sk_type(sk), ossl_check_DIST_POINT_type(ptr)))
333	#define sk_DIST_POINT_push(sk, ptr) OPENSSL_sk_push(ossl_check_DIST_POINT_sk_type(sk), ossl_check_DIST_POINT_type(ptr))
334	#define sk_DIST_POINT_unshift(sk, ptr) OPENSSL_sk_unshift(ossl_check_DIST_POINT_sk_type(sk), ossl_check_DIST_POINT_type(ptr))
335	#define sk_DIST_POINT_pop(sk) ((DIST_POINT *)OPENSSL_sk_pop(ossl_check_DIST_POINT_sk_type(sk)))
336	#define sk_DIST_POINT_shift(sk) ((DIST_POINT *)OPENSSL_sk_shift(ossl_check_DIST_POINT_sk_type(sk)))
337	#define sk_DIST_POINT_pop_free(sk, freefunc) OPENSSL_sk_pop_free(ossl_check_DIST_POINT_sk_type(sk),ossl_check_DIST_POINT_freefunc_type(freefunc))
338	#define sk_DIST_POINT_insert(sk, ptr, idx) OPENSSL_sk_insert(ossl_check_DIST_POINT_sk_type(sk), ossl_check_DIST_POINT_type(ptr), (idx))
339	#define sk_DIST_POINT_set(sk, idx, ptr) ((DIST_POINT *)OPENSSL_sk_set(ossl_check_DIST_POINT_sk_type(sk), (idx), ossl_check_DIST_POINT_type(ptr)))
340	#define sk_DIST_POINT_find(sk, ptr) OPENSSL_sk_find(ossl_check_DIST_POINT_sk_type(sk), ossl_check_DIST_POINT_type(ptr))
341	#define sk_DIST_POINT_find_ex(sk, ptr) OPENSSL_sk_find_ex(ossl_check_DIST_POINT_sk_type(sk), ossl_check_DIST_POINT_type(ptr))
342	#define sk_DIST_POINT_find_all(sk, ptr, pnum) OPENSSL_sk_find_all(ossl_check_DIST_POINT_sk_type(sk), ossl_check_DIST_POINT_type(ptr), pnum)
343	#define sk_DIST_POINT_sort(sk) OPENSSL_sk_sort(ossl_check_DIST_POINT_sk_type(sk))
344	#define sk_DIST_POINT_is_sorted(sk) OPENSSL_sk_is_sorted(ossl_check_const_DIST_POINT_sk_type(sk))
345	#define sk_DIST_POINT_dup(sk) ((STACK_OF(DIST_POINT) *)OPENSSL_sk_dup(ossl_check_const_DIST_POINT_sk_type(sk)))
346	#define sk_DIST_POINT_deep_copy(sk, copyfunc, freefunc) ((STACK_OF(DIST_POINT) *)OPENSSL_sk_deep_copy(ossl_check_const_DIST_POINT_sk_type(sk), ossl_check_DIST_POINT_copyfunc_type(copyfunc), ossl_check_DIST_POINT_freefunc_type(freefunc)))
347	#define sk_DIST_POINT_set_cmp_func(sk, cmp) ((sk_DIST_POINT_compfunc)OPENSSL_sk_set_cmp_func(ossl_check_DIST_POINT_sk_type(sk), ossl_check_DIST_POINT_compfunc_type(cmp)))
348
349
350	typedef STACK_OF(DIST_POINT) CRL_DIST_POINTS;
351
352	struct AUTHORITY_KEYID_st {
353	ASN1_OCTET_STRING *keyid;
354	GENERAL_NAMES *issuer;
355	ASN1_INTEGER *serial;
356	};
357
358	/* Strong extranet structures */
359
360	typedef struct SXNET_ID_st {
361	ASN1_INTEGER *zone;
362	ASN1_OCTET_STRING *user;
363	} SXNETID;
364
365	SKM_DEFINE_STACK_OF_INTERNAL(SXNETID, SXNETID, SXNETID)
366	#define sk_SXNETID_num(sk) OPENSSL_sk_num(ossl_check_const_SXNETID_sk_type(sk))
367	#define sk_SXNETID_value(sk, idx) ((SXNETID *)OPENSSL_sk_value(ossl_check_const_SXNETID_sk_type(sk), (idx)))
368	#define sk_SXNETID_new(cmp) ((STACK_OF(SXNETID) *)OPENSSL_sk_new(ossl_check_SXNETID_compfunc_type(cmp)))
369	#define sk_SXNETID_new_null() ((STACK_OF(SXNETID) *)OPENSSL_sk_new_null())
370	#define sk_SXNETID_new_reserve(cmp, n) ((STACK_OF(SXNETID) *)OPENSSL_sk_new_reserve(ossl_check_SXNETID_compfunc_type(cmp), (n)))
371	#define sk_SXNETID_reserve(sk, n) OPENSSL_sk_reserve(ossl_check_SXNETID_sk_type(sk), (n))
372	#define sk_SXNETID_free(sk) OPENSSL_sk_free(ossl_check_SXNETID_sk_type(sk))
373	#define sk_SXNETID_zero(sk) OPENSSL_sk_zero(ossl_check_SXNETID_sk_type(sk))
374	#define sk_SXNETID_delete(sk, i) ((SXNETID *)OPENSSL_sk_delete(ossl_check_SXNETID_sk_type(sk), (i)))
375	#define sk_SXNETID_delete_ptr(sk, ptr) ((SXNETID *)OPENSSL_sk_delete_ptr(ossl_check_SXNETID_sk_type(sk), ossl_check_SXNETID_type(ptr)))
376	#define sk_SXNETID_push(sk, ptr) OPENSSL_sk_push(ossl_check_SXNETID_sk_type(sk), ossl_check_SXNETID_type(ptr))
377	#define sk_SXNETID_unshift(sk, ptr) OPENSSL_sk_unshift(ossl_check_SXNETID_sk_type(sk), ossl_check_SXNETID_type(ptr))
378	#define sk_SXNETID_pop(sk) ((SXNETID *)OPENSSL_sk_pop(ossl_check_SXNETID_sk_type(sk)))
379	#define sk_SXNETID_shift(sk) ((SXNETID *)OPENSSL_sk_shift(ossl_check_SXNETID_sk_type(sk)))
380	#define sk_SXNETID_pop_free(sk, freefunc) OPENSSL_sk_pop_free(ossl_check_SXNETID_sk_type(sk),ossl_check_SXNETID_freefunc_type(freefunc))
381	#define sk_SXNETID_insert(sk, ptr, idx) OPENSSL_sk_insert(ossl_check_SXNETID_sk_type(sk), ossl_check_SXNETID_type(ptr), (idx))
382	#define sk_SXNETID_set(sk, idx, ptr) ((SXNETID *)OPENSSL_sk_set(ossl_check_SXNETID_sk_type(sk), (idx), ossl_check_SXNETID_type(ptr)))
383	#define sk_SXNETID_find(sk, ptr) OPENSSL_sk_find(ossl_check_SXNETID_sk_type(sk), ossl_check_SXNETID_type(ptr))
384	#define sk_SXNETID_find_ex(sk, ptr) OPENSSL_sk_find_ex(ossl_check_SXNETID_sk_type(sk), ossl_check_SXNETID_type(ptr))
385	#define sk_SXNETID_find_all(sk, ptr, pnum) OPENSSL_sk_find_all(ossl_check_SXNETID_sk_type(sk), ossl_check_SXNETID_type(ptr), pnum)
386	#define sk_SXNETID_sort(sk) OPENSSL_sk_sort(ossl_check_SXNETID_sk_type(sk))
387	#define sk_SXNETID_is_sorted(sk) OPENSSL_sk_is_sorted(ossl_check_const_SXNETID_sk_type(sk))
388	#define sk_SXNETID_dup(sk) ((STACK_OF(SXNETID) *)OPENSSL_sk_dup(ossl_check_const_SXNETID_sk_type(sk)))
389	#define sk_SXNETID_deep_copy(sk, copyfunc, freefunc) ((STACK_OF(SXNETID) *)OPENSSL_sk_deep_copy(ossl_check_const_SXNETID_sk_type(sk), ossl_check_SXNETID_copyfunc_type(copyfunc), ossl_check_SXNETID_freefunc_type(freefunc)))
390	#define sk_SXNETID_set_cmp_func(sk, cmp) ((sk_SXNETID_compfunc)OPENSSL_sk_set_cmp_func(ossl_check_SXNETID_sk_type(sk), ossl_check_SXNETID_compfunc_type(cmp)))
391
392
393
394	typedef struct SXNET_st {
395	ASN1_INTEGER *version;
396	STACK_OF(SXNETID) *ids;
397	} SXNET;
398
399	typedef struct ISSUER_SIGN_TOOL_st {
400	ASN1_UTF8STRING *signTool;
401	ASN1_UTF8STRING *cATool;
402	ASN1_UTF8STRING *signToolCert;
403	ASN1_UTF8STRING *cAToolCert;
404	} ISSUER_SIGN_TOOL;
405
406	typedef struct NOTICEREF_st {
407	ASN1_STRING *organization;
408	STACK_OF(ASN1_INTEGER) *noticenos;
409	} NOTICEREF;
410
411	typedef struct USERNOTICE_st {
412	NOTICEREF *noticeref;
413	ASN1_STRING *exptext;
414	} USERNOTICE;
415
416	typedef struct POLICYQUALINFO_st {
417	ASN1_OBJECT *pqualid;
418	union {
419	ASN1_IA5STRING *cpsuri;
420	USERNOTICE *usernotice;
421	ASN1_TYPE *other;
422	} d;
423	} POLICYQUALINFO;
424
425	SKM_DEFINE_STACK_OF_INTERNAL(POLICYQUALINFO, POLICYQUALINFO, POLICYQUALINFO)
426	#define sk_POLICYQUALINFO_num(sk) OPENSSL_sk_num(ossl_check_const_POLICYQUALINFO_sk_type(sk))
427	#define sk_POLICYQUALINFO_value(sk, idx) ((POLICYQUALINFO *)OPENSSL_sk_value(ossl_check_const_POLICYQUALINFO_sk_type(sk), (idx)))
428	#define sk_POLICYQUALINFO_new(cmp) ((STACK_OF(POLICYQUALINFO) *)OPENSSL_sk_new(ossl_check_POLICYQUALINFO_compfunc_type(cmp)))
429	#define sk_POLICYQUALINFO_new_null() ((STACK_OF(POLICYQUALINFO) *)OPENSSL_sk_new_null())
430	#define sk_POLICYQUALINFO_new_reserve(cmp, n) ((STACK_OF(POLICYQUALINFO) *)OPENSSL_sk_new_reserve(ossl_check_POLICYQUALINFO_compfunc_type(cmp), (n)))
431	#define sk_POLICYQUALINFO_reserve(sk, n) OPENSSL_sk_reserve(ossl_check_POLICYQUALINFO_sk_type(sk), (n))
432	#define sk_POLICYQUALINFO_free(sk) OPENSSL_sk_free(ossl_check_POLICYQUALINFO_sk_type(sk))
433	#define sk_POLICYQUALINFO_zero(sk) OPENSSL_sk_zero(ossl_check_POLICYQUALINFO_sk_type(sk))
434	#define sk_POLICYQUALINFO_delete(sk, i) ((POLICYQUALINFO *)OPENSSL_sk_delete(ossl_check_POLICYQUALINFO_sk_type(sk), (i)))
435	#define sk_POLICYQUALINFO_delete_ptr(sk, ptr) ((POLICYQUALINFO *)OPENSSL_sk_delete_ptr(ossl_check_POLICYQUALINFO_sk_type(sk), ossl_check_POLICYQUALINFO_type(ptr)))
436	#define sk_POLICYQUALINFO_push(sk, ptr) OPENSSL_sk_push(ossl_check_POLICYQUALINFO_sk_type(sk), ossl_check_POLICYQUALINFO_type(ptr))
437	#define sk_POLICYQUALINFO_unshift(sk, ptr) OPENSSL_sk_unshift(ossl_check_POLICYQUALINFO_sk_type(sk), ossl_check_POLICYQUALINFO_type(ptr))
438	#define sk_POLICYQUALINFO_pop(sk) ((POLICYQUALINFO *)OPENSSL_sk_pop(ossl_check_POLICYQUALINFO_sk_type(sk)))
439	#define sk_POLICYQUALINFO_shift(sk) ((POLICYQUALINFO *)OPENSSL_sk_shift(ossl_check_POLICYQUALINFO_sk_type(sk)))
440	#define sk_POLICYQUALINFO_pop_free(sk, freefunc) OPENSSL_sk_pop_free(ossl_check_POLICYQUALINFO_sk_type(sk),ossl_check_POLICYQUALINFO_freefunc_type(freefunc))
441	#define sk_POLICYQUALINFO_insert(sk, ptr, idx) OPENSSL_sk_insert(ossl_check_POLICYQUALINFO_sk_type(sk), ossl_check_POLICYQUALINFO_type(ptr), (idx))
442	#define sk_POLICYQUALINFO_set(sk, idx, ptr) ((POLICYQUALINFO *)OPENSSL_sk_set(ossl_check_POLICYQUALINFO_sk_type(sk), (idx), ossl_check_POLICYQUALINFO_type(ptr)))
443	#define sk_POLICYQUALINFO_find(sk, ptr) OPENSSL_sk_find(ossl_check_POLICYQUALINFO_sk_type(sk), ossl_check_POLICYQUALINFO_type(ptr))
444	#define sk_POLICYQUALINFO_find_ex(sk, ptr) OPENSSL_sk_find_ex(ossl_check_POLICYQUALINFO_sk_type(sk), ossl_check_POLICYQUALINFO_type(ptr))
445	#define sk_POLICYQUALINFO_find_all(sk, ptr, pnum) OPENSSL_sk_find_all(ossl_check_POLICYQUALINFO_sk_type(sk), ossl_check_POLICYQUALINFO_type(ptr), pnum)
446	#define sk_POLICYQUALINFO_sort(sk) OPENSSL_sk_sort(ossl_check_POLICYQUALINFO_sk_type(sk))
447	#define sk_POLICYQUALINFO_is_sorted(sk) OPENSSL_sk_is_sorted(ossl_check_const_POLICYQUALINFO_sk_type(sk))
448	#define sk_POLICYQUALINFO_dup(sk) ((STACK_OF(POLICYQUALINFO) *)OPENSSL_sk_dup(ossl_check_const_POLICYQUALINFO_sk_type(sk)))
449	#define sk_POLICYQUALINFO_deep_copy(sk, copyfunc, freefunc) ((STACK_OF(POLICYQUALINFO) *)OPENSSL_sk_deep_copy(ossl_check_const_POLICYQUALINFO_sk_type(sk), ossl_check_POLICYQUALINFO_copyfunc_type(copyfunc), ossl_check_POLICYQUALINFO_freefunc_type(freefunc)))
450	#define sk_POLICYQUALINFO_set_cmp_func(sk, cmp) ((sk_POLICYQUALINFO_compfunc)OPENSSL_sk_set_cmp_func(ossl_check_POLICYQUALINFO_sk_type(sk), ossl_check_POLICYQUALINFO_compfunc_type(cmp)))
451
452
453
454	typedef struct POLICYINFO_st {
455	ASN1_OBJECT *policyid;
456	STACK_OF(POLICYQUALINFO) *qualifiers;
457	} POLICYINFO;
458
459	SKM_DEFINE_STACK_OF_INTERNAL(POLICYINFO, POLICYINFO, POLICYINFO)
460	#define sk_POLICYINFO_num(sk) OPENSSL_sk_num(ossl_check_const_POLICYINFO_sk_type(sk))
461	#define sk_POLICYINFO_value(sk, idx) ((POLICYINFO *)OPENSSL_sk_value(ossl_check_const_POLICYINFO_sk_type(sk), (idx)))
462	#define sk_POLICYINFO_new(cmp) ((STACK_OF(POLICYINFO) *)OPENSSL_sk_new(ossl_check_POLICYINFO_compfunc_type(cmp)))
463	#define sk_POLICYINFO_new_null() ((STACK_OF(POLICYINFO) *)OPENSSL_sk_new_null())
464	#define sk_POLICYINFO_new_reserve(cmp, n) ((STACK_OF(POLICYINFO) *)OPENSSL_sk_new_reserve(ossl_check_POLICYINFO_compfunc_type(cmp), (n)))
465	#define sk_POLICYINFO_reserve(sk, n) OPENSSL_sk_reserve(ossl_check_POLICYINFO_sk_type(sk), (n))
466	#define sk_POLICYINFO_free(sk) OPENSSL_sk_free(ossl_check_POLICYINFO_sk_type(sk))
467	#define sk_POLICYINFO_zero(sk) OPENSSL_sk_zero(ossl_check_POLICYINFO_sk_type(sk))
468	#define sk_POLICYINFO_delete(sk, i) ((POLICYINFO *)OPENSSL_sk_delete(ossl_check_POLICYINFO_sk_type(sk), (i)))
469	#define sk_POLICYINFO_delete_ptr(sk, ptr) ((POLICYINFO *)OPENSSL_sk_delete_ptr(ossl_check_POLICYINFO_sk_type(sk), ossl_check_POLICYINFO_type(ptr)))
470	#define sk_POLICYINFO_push(sk, ptr) OPENSSL_sk_push(ossl_check_POLICYINFO_sk_type(sk), ossl_check_POLICYINFO_type(ptr))
471	#define sk_POLICYINFO_unshift(sk, ptr) OPENSSL_sk_unshift(ossl_check_POLICYINFO_sk_type(sk), ossl_check_POLICYINFO_type(ptr))
472	#define sk_POLICYINFO_pop(sk) ((POLICYINFO *)OPENSSL_sk_pop(ossl_check_POLICYINFO_sk_type(sk)))
473	#define sk_POLICYINFO_shift(sk) ((POLICYINFO *)OPENSSL_sk_shift(ossl_check_POLICYINFO_sk_type(sk)))
474	#define sk_POLICYINFO_pop_free(sk, freefunc) OPENSSL_sk_pop_free(ossl_check_POLICYINFO_sk_type(sk),ossl_check_POLICYINFO_freefunc_type(freefunc))
475	#define sk_POLICYINFO_insert(sk, ptr, idx) OPENSSL_sk_insert(ossl_check_POLICYINFO_sk_type(sk), ossl_check_POLICYINFO_type(ptr), (idx))
476	#define sk_POLICYINFO_set(sk, idx, ptr) ((POLICYINFO *)OPENSSL_sk_set(ossl_check_POLICYINFO_sk_type(sk), (idx), ossl_check_POLICYINFO_type(ptr)))
477	#define sk_POLICYINFO_find(sk, ptr) OPENSSL_sk_find(ossl_check_POLICYINFO_sk_type(sk), ossl_check_POLICYINFO_type(ptr))
478	#define sk_POLICYINFO_find_ex(sk, ptr) OPENSSL_sk_find_ex(ossl_check_POLICYINFO_sk_type(sk), ossl_check_POLICYINFO_type(ptr))
479	#define sk_POLICYINFO_find_all(sk, ptr, pnum) OPENSSL_sk_find_all(ossl_check_POLICYINFO_sk_type(sk), ossl_check_POLICYINFO_type(ptr), pnum)
480	#define sk_POLICYINFO_sort(sk) OPENSSL_sk_sort(ossl_check_POLICYINFO_sk_type(sk))
481	#define sk_POLICYINFO_is_sorted(sk) OPENSSL_sk_is_sorted(ossl_check_const_POLICYINFO_sk_type(sk))
482	#define sk_POLICYINFO_dup(sk) ((STACK_OF(POLICYINFO) *)OPENSSL_sk_dup(ossl_check_const_POLICYINFO_sk_type(sk)))
483	#define sk_POLICYINFO_deep_copy(sk, copyfunc, freefunc) ((STACK_OF(POLICYINFO) *)OPENSSL_sk_deep_copy(ossl_check_const_POLICYINFO_sk_type(sk), ossl_check_POLICYINFO_copyfunc_type(copyfunc), ossl_check_POLICYINFO_freefunc_type(freefunc)))
484	#define sk_POLICYINFO_set_cmp_func(sk, cmp) ((sk_POLICYINFO_compfunc)OPENSSL_sk_set_cmp_func(ossl_check_POLICYINFO_sk_type(sk), ossl_check_POLICYINFO_compfunc_type(cmp)))
485
486
487	typedef STACK_OF(POLICYINFO) CERTIFICATEPOLICIES;
488
489	typedef struct POLICY_MAPPING_st {
490	ASN1_OBJECT *issuerDomainPolicy;
491	ASN1_OBJECT *subjectDomainPolicy;
492	} POLICY_MAPPING;
493
494	SKM_DEFINE_STACK_OF_INTERNAL(POLICY_MAPPING, POLICY_MAPPING, POLICY_MAPPING)
495	#define sk_POLICY_MAPPING_num(sk) OPENSSL_sk_num(ossl_check_const_POLICY_MAPPING_sk_type(sk))
496	#define sk_POLICY_MAPPING_value(sk, idx) ((POLICY_MAPPING *)OPENSSL_sk_value(ossl_check_const_POLICY_MAPPING_sk_type(sk), (idx)))
497	#define sk_POLICY_MAPPING_new(cmp) ((STACK_OF(POLICY_MAPPING) *)OPENSSL_sk_new(ossl_check_POLICY_MAPPING_compfunc_type(cmp)))
498	#define sk_POLICY_MAPPING_new_null() ((STACK_OF(POLICY_MAPPING) *)OPENSSL_sk_new_null())
499	#define sk_POLICY_MAPPING_new_reserve(cmp, n) ((STACK_OF(POLICY_MAPPING) *)OPENSSL_sk_new_reserve(ossl_check_POLICY_MAPPING_compfunc_type(cmp), (n)))
500	#define sk_POLICY_MAPPING_reserve(sk, n) OPENSSL_sk_reserve(ossl_check_POLICY_MAPPING_sk_type(sk), (n))
501	#define sk_POLICY_MAPPING_free(sk) OPENSSL_sk_free(ossl_check_POLICY_MAPPING_sk_type(sk))
502	#define sk_POLICY_MAPPING_zero(sk) OPENSSL_sk_zero(ossl_check_POLICY_MAPPING_sk_type(sk))
503	#define sk_POLICY_MAPPING_delete(sk, i) ((POLICY_MAPPING *)OPENSSL_sk_delete(ossl_check_POLICY_MAPPING_sk_type(sk), (i)))
504	#define sk_POLICY_MAPPING_delete_ptr(sk, ptr) ((POLICY_MAPPING *)OPENSSL_sk_delete_ptr(ossl_check_POLICY_MAPPING_sk_type(sk), ossl_check_POLICY_MAPPING_type(ptr)))
505	#define sk_POLICY_MAPPING_push(sk, ptr) OPENSSL_sk_push(ossl_check_POLICY_MAPPING_sk_type(sk), ossl_check_POLICY_MAPPING_type(ptr))
506	#define sk_POLICY_MAPPING_unshift(sk, ptr) OPENSSL_sk_unshift(ossl_check_POLICY_MAPPING_sk_type(sk), ossl_check_POLICY_MAPPING_type(ptr))
507	#define sk_POLICY_MAPPING_pop(sk) ((POLICY_MAPPING *)OPENSSL_sk_pop(ossl_check_POLICY_MAPPING_sk_type(sk)))
508	#define sk_POLICY_MAPPING_shift(sk) ((POLICY_MAPPING *)OPENSSL_sk_shift(ossl_check_POLICY_MAPPING_sk_type(sk)))
509	#define sk_POLICY_MAPPING_pop_free(sk, freefunc) OPENSSL_sk_pop_free(ossl_check_POLICY_MAPPING_sk_type(sk),ossl_check_POLICY_MAPPING_freefunc_type(freefunc))
510	#define sk_POLICY_MAPPING_insert(sk, ptr, idx) OPENSSL_sk_insert(ossl_check_POLICY_MAPPING_sk_type(sk), ossl_check_POLICY_MAPPING_type(ptr), (idx))
511	#define sk_POLICY_MAPPING_set(sk, idx, ptr) ((POLICY_MAPPING *)OPENSSL_sk_set(ossl_check_POLICY_MAPPING_sk_type(sk), (idx), ossl_check_POLICY_MAPPING_type(ptr)))
512	#define sk_POLICY_MAPPING_find(sk, ptr) OPENSSL_sk_find(ossl_check_POLICY_MAPPING_sk_type(sk), ossl_check_POLICY_MAPPING_type(ptr))
513	#define sk_POLICY_MAPPING_find_ex(sk, ptr) OPENSSL_sk_find_ex(ossl_check_POLICY_MAPPING_sk_type(sk), ossl_check_POLICY_MAPPING_type(ptr))
514	#define sk_POLICY_MAPPING_find_all(sk, ptr, pnum) OPENSSL_sk_find_all(ossl_check_POLICY_MAPPING_sk_type(sk), ossl_check_POLICY_MAPPING_type(ptr), pnum)
515	#define sk_POLICY_MAPPING_sort(sk) OPENSSL_sk_sort(ossl_check_POLICY_MAPPING_sk_type(sk))
516	#define sk_POLICY_MAPPING_is_sorted(sk) OPENSSL_sk_is_sorted(ossl_check_const_POLICY_MAPPING_sk_type(sk))
517	#define sk_POLICY_MAPPING_dup(sk) ((STACK_OF(POLICY_MAPPING) *)OPENSSL_sk_dup(ossl_check_const_POLICY_MAPPING_sk_type(sk)))
518	#define sk_POLICY_MAPPING_deep_copy(sk, copyfunc, freefunc) ((STACK_OF(POLICY_MAPPING) *)OPENSSL_sk_deep_copy(ossl_check_const_POLICY_MAPPING_sk_type(sk), ossl_check_POLICY_MAPPING_copyfunc_type(copyfunc), ossl_check_POLICY_MAPPING_freefunc_type(freefunc)))
519	#define sk_POLICY_MAPPING_set_cmp_func(sk, cmp) ((sk_POLICY_MAPPING_compfunc)OPENSSL_sk_set_cmp_func(ossl_check_POLICY_MAPPING_sk_type(sk), ossl_check_POLICY_MAPPING_compfunc_type(cmp)))
520
521
522	typedef STACK_OF(POLICY_MAPPING) POLICY_MAPPINGS;
523
524	typedef struct GENERAL_SUBTREE_st {
525	GENERAL_NAME *base;
526	ASN1_INTEGER *minimum;
527	ASN1_INTEGER *maximum;
528	} GENERAL_SUBTREE;
529
530	SKM_DEFINE_STACK_OF_INTERNAL(GENERAL_SUBTREE, GENERAL_SUBTREE, GENERAL_SUBTREE)
531	#define sk_GENERAL_SUBTREE_num(sk) OPENSSL_sk_num(ossl_check_const_GENERAL_SUBTREE_sk_type(sk))
532	#define sk_GENERAL_SUBTREE_value(sk, idx) ((GENERAL_SUBTREE *)OPENSSL_sk_value(ossl_check_const_GENERAL_SUBTREE_sk_type(sk), (idx)))
533	#define sk_GENERAL_SUBTREE_new(cmp) ((STACK_OF(GENERAL_SUBTREE) *)OPENSSL_sk_new(ossl_check_GENERAL_SUBTREE_compfunc_type(cmp)))
534	#define sk_GENERAL_SUBTREE_new_null() ((STACK_OF(GENERAL_SUBTREE) *)OPENSSL_sk_new_null())
535	#define sk_GENERAL_SUBTREE_new_reserve(cmp, n) ((STACK_OF(GENERAL_SUBTREE) *)OPENSSL_sk_new_reserve(ossl_check_GENERAL_SUBTREE_compfunc_type(cmp), (n)))
536	#define sk_GENERAL_SUBTREE_reserve(sk, n) OPENSSL_sk_reserve(ossl_check_GENERAL_SUBTREE_sk_type(sk), (n))
537	#define sk_GENERAL_SUBTREE_free(sk) OPENSSL_sk_free(ossl_check_GENERAL_SUBTREE_sk_type(sk))
538	#define sk_GENERAL_SUBTREE_zero(sk) OPENSSL_sk_zero(ossl_check_GENERAL_SUBTREE_sk_type(sk))
539	#define sk_GENERAL_SUBTREE_delete(sk, i) ((GENERAL_SUBTREE *)OPENSSL_sk_delete(ossl_check_GENERAL_SUBTREE_sk_type(sk), (i)))
540	#define sk_GENERAL_SUBTREE_delete_ptr(sk, ptr) ((GENERAL_SUBTREE *)OPENSSL_sk_delete_ptr(ossl_check_GENERAL_SUBTREE_sk_type(sk), ossl_check_GENERAL_SUBTREE_type(ptr)))
541	#define sk_GENERAL_SUBTREE_push(sk, ptr) OPENSSL_sk_push(ossl_check_GENERAL_SUBTREE_sk_type(sk), ossl_check_GENERAL_SUBTREE_type(ptr))
542	#define sk_GENERAL_SUBTREE_unshift(sk, ptr) OPENSSL_sk_unshift(ossl_check_GENERAL_SUBTREE_sk_type(sk), ossl_check_GENERAL_SUBTREE_type(ptr))
543	#define sk_GENERAL_SUBTREE_pop(sk) ((GENERAL_SUBTREE *)OPENSSL_sk_pop(ossl_check_GENERAL_SUBTREE_sk_type(sk)))
544	#define sk_GENERAL_SUBTREE_shift(sk) ((GENERAL_SUBTREE *)OPENSSL_sk_shift(ossl_check_GENERAL_SUBTREE_sk_type(sk)))
545	#define sk_GENERAL_SUBTREE_pop_free(sk, freefunc) OPENSSL_sk_pop_free(ossl_check_GENERAL_SUBTREE_sk_type(sk),ossl_check_GENERAL_SUBTREE_freefunc_type(freefunc))
546	#define sk_GENERAL_SUBTREE_insert(sk, ptr, idx) OPENSSL_sk_insert(ossl_check_GENERAL_SUBTREE_sk_type(sk), ossl_check_GENERAL_SUBTREE_type(ptr), (idx))
547	#define sk_GENERAL_SUBTREE_set(sk, idx, ptr) ((GENERAL_SUBTREE *)OPENSSL_sk_set(ossl_check_GENERAL_SUBTREE_sk_type(sk), (idx), ossl_check_GENERAL_SUBTREE_type(ptr)))
548	#define sk_GENERAL_SUBTREE_find(sk, ptr) OPENSSL_sk_find(ossl_check_GENERAL_SUBTREE_sk_type(sk), ossl_check_GENERAL_SUBTREE_type(ptr))
549	#define sk_GENERAL_SUBTREE_find_ex(sk, ptr) OPENSSL_sk_find_ex(ossl_check_GENERAL_SUBTREE_sk_type(sk), ossl_check_GENERAL_SUBTREE_type(ptr))
550	#define sk_GENERAL_SUBTREE_find_all(sk, ptr, pnum) OPENSSL_sk_find_all(ossl_check_GENERAL_SUBTREE_sk_type(sk), ossl_check_GENERAL_SUBTREE_type(ptr), pnum)
551	#define sk_GENERAL_SUBTREE_sort(sk) OPENSSL_sk_sort(ossl_check_GENERAL_SUBTREE_sk_type(sk))
552	#define sk_GENERAL_SUBTREE_is_sorted(sk) OPENSSL_sk_is_sorted(ossl_check_const_GENERAL_SUBTREE_sk_type(sk))
553	#define sk_GENERAL_SUBTREE_dup(sk) ((STACK_OF(GENERAL_SUBTREE) *)OPENSSL_sk_dup(ossl_check_const_GENERAL_SUBTREE_sk_type(sk)))
554	#define sk_GENERAL_SUBTREE_deep_copy(sk, copyfunc, freefunc) ((STACK_OF(GENERAL_SUBTREE) *)OPENSSL_sk_deep_copy(ossl_check_const_GENERAL_SUBTREE_sk_type(sk), ossl_check_GENERAL_SUBTREE_copyfunc_type(copyfunc), ossl_check_GENERAL_SUBTREE_freefunc_type(freefunc)))
555	#define sk_GENERAL_SUBTREE_set_cmp_func(sk, cmp) ((sk_GENERAL_SUBTREE_compfunc)OPENSSL_sk_set_cmp_func(ossl_check_GENERAL_SUBTREE_sk_type(sk), ossl_check_GENERAL_SUBTREE_compfunc_type(cmp)))
556
557
558	struct NAME_CONSTRAINTS_st {
559	STACK_OF(GENERAL_SUBTREE) *permittedSubtrees;
560	STACK_OF(GENERAL_SUBTREE) *excludedSubtrees;
561	};
562
563	typedef struct POLICY_CONSTRAINTS_st {
564	ASN1_INTEGER *requireExplicitPolicy;
565	ASN1_INTEGER *inhibitPolicyMapping;
566	} POLICY_CONSTRAINTS;
567
568	/* Proxy certificate structures, see RFC 3820 */
569	typedef struct PROXY_POLICY_st {
570	ASN1_OBJECT *policyLanguage;
571	ASN1_OCTET_STRING *policy;
572	} PROXY_POLICY;
573
574	typedef struct PROXY_CERT_INFO_EXTENSION_st {
575	ASN1_INTEGER *pcPathLengthConstraint;
576	PROXY_POLICY *proxyPolicy;
577	} PROXY_CERT_INFO_EXTENSION;
578
579	DECLARE_ASN1_FUNCTIONS(PROXY_POLICY)
580	DECLARE_ASN1_FUNCTIONS(PROXY_CERT_INFO_EXTENSION)
581
582	struct ISSUING_DIST_POINT_st {
583	DIST_POINT_NAME *distpoint;
584	int onlyuser;
585	int onlyCA;
586	ASN1_BIT_STRING *onlysomereasons;
587	int indirectCRL;
588	int onlyattr;
589	};
590
591	/* Values in idp_flags field */
592	/* IDP present */
593	# define IDP_PRESENT 0x1
594	/* IDP values inconsistent */
595	# define IDP_INVALID 0x2
596	/* onlyuser true */
597	# define IDP_ONLYUSER 0x4
598	/* onlyCA true */
599	# define IDP_ONLYCA 0x8
600	/* onlyattr true */
601	# define IDP_ONLYATTR 0x10
602	/* indirectCRL true */
603	# define IDP_INDIRECT 0x20
604	/* onlysomereasons present */
605	# define IDP_REASONS 0x40
606
607	# define X509V3_conf_err(val) ERR_add_error_data(6, \
608	"section:", (val)->section, \
609	",name:", (val)->name, ",value:", (val)->value)
610
611	# define X509V3_set_ctx_test(ctx) \
612	X509V3_set_ctx(ctx, NULL, NULL, NULL, NULL, X509V3_CTX_TEST)
613	# define X509V3_set_ctx_nodb(ctx) (ctx)->db = NULL;
614
615	# define EXT_BITSTRING(nid, table) { nid, 0, ASN1_ITEM_ref(ASN1_BIT_STRING), \
616	0,0,0,0, \
617	0,0, \
618	(X509V3_EXT_I2V)i2v_ASN1_BIT_STRING, \
619	(X509V3_EXT_V2I)v2i_ASN1_BIT_STRING, \
620	NULL, NULL, \
621	table}
622
623	# define EXT_IA5STRING(nid) { nid, 0, ASN1_ITEM_ref(ASN1_IA5STRING), \
624	0,0,0,0, \
625	(X509V3_EXT_I2S)i2s_ASN1_IA5STRING, \
626	(X509V3_EXT_S2I)s2i_ASN1_IA5STRING, \
627	0,0,0,0, \
628	NULL}
629
630	#define EXT_UTF8STRING(nid) { nid, 0, ASN1_ITEM_ref(ASN1_UTF8STRING), \
631	0,0,0,0, \
632	(X509V3_EXT_I2S)i2s_ASN1_UTF8STRING, \
633	(X509V3_EXT_S2I)s2i_ASN1_UTF8STRING, \
634	0,0,0,0, \
635	NULL}
636
637	# define EXT_END { -1, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0}
638
639	/* X509_PURPOSE stuff */
640
641	# define EXFLAG_BCONS 0x1
642	# define EXFLAG_KUSAGE 0x2
643	# define EXFLAG_XKUSAGE 0x4
644	# define EXFLAG_NSCERT 0x8
645
646	# define EXFLAG_CA 0x10
647	# define EXFLAG_SI 0x20 /* self-issued, maybe not self-signed */
648	# define EXFLAG_V1 0x40
649	# define EXFLAG_INVALID 0x80
650	/* EXFLAG_SET is set to indicate that some values have been precomputed */
651	# define EXFLAG_SET 0x100
652	# define EXFLAG_CRITICAL 0x200
653	# define EXFLAG_PROXY 0x400
654
655	# define EXFLAG_INVALID_POLICY 0x800
656	# define EXFLAG_FRESHEST 0x1000
657	# define EXFLAG_SS 0x2000 /* cert is apparently self-signed */
658
659	# define EXFLAG_BCONS_CRITICAL 0x10000
660	# define EXFLAG_AKID_CRITICAL 0x20000
661	# define EXFLAG_SKID_CRITICAL 0x40000
662	# define EXFLAG_SAN_CRITICAL 0x80000
663	# define EXFLAG_NO_FINGERPRINT 0x100000
664
665	# define KU_DIGITAL_SIGNATURE 0x0080
666	# define KU_NON_REPUDIATION 0x0040
667	# define KU_KEY_ENCIPHERMENT 0x0020
668	# define KU_DATA_ENCIPHERMENT 0x0010
669	# define KU_KEY_AGREEMENT 0x0008
670	# define KU_KEY_CERT_SIGN 0x0004
671	# define KU_CRL_SIGN 0x0002
672	# define KU_ENCIPHER_ONLY 0x0001
673	# define KU_DECIPHER_ONLY 0x8000
674
675	# define NS_SSL_CLIENT 0x80
676	# define NS_SSL_SERVER 0x40
677	# define NS_SMIME 0x20
678	# define NS_OBJSIGN 0x10
679	# define NS_SSL_CA 0x04
680	# define NS_SMIME_CA 0x02
681	# define NS_OBJSIGN_CA 0x01
682	# define NS_ANY_CA (NS_SSL_CA\|NS_SMIME_CA\|NS_OBJSIGN_CA)
683
684	# define XKU_SSL_SERVER 0x1
685	# define XKU_SSL_CLIENT 0x2
686	# define XKU_SMIME 0x4
687	# define XKU_CODE_SIGN 0x8
688	# define XKU_SGC 0x10 /* Netscape or MS Server-Gated Crypto */
689	# define XKU_OCSP_SIGN 0x20
690	# define XKU_TIMESTAMP 0x40
691	# define XKU_DVCS 0x80
692	# define XKU_ANYEKU 0x100
693
694	# define X509_PURPOSE_DYNAMIC 0x1
695	# define X509_PURPOSE_DYNAMIC_NAME 0x2
696
697	typedef struct x509_purpose_st {
698	int purpose;
699	int trust; /* Default trust ID */
700	int flags;
701	int (check_purpose) (const struct x509_purpose_st , const X509 *, int);
702	char *name;
703	char *sname;
704	void *usr_data;
705	} X509_PURPOSE;
706
707	SKM_DEFINE_STACK_OF_INTERNAL(X509_PURPOSE, X509_PURPOSE, X509_PURPOSE)
708	#define sk_X509_PURPOSE_num(sk) OPENSSL_sk_num(ossl_check_const_X509_PURPOSE_sk_type(sk))
709	#define sk_X509_PURPOSE_value(sk, idx) ((X509_PURPOSE *)OPENSSL_sk_value(ossl_check_const_X509_PURPOSE_sk_type(sk), (idx)))
710	#define sk_X509_PURPOSE_new(cmp) ((STACK_OF(X509_PURPOSE) *)OPENSSL_sk_new(ossl_check_X509_PURPOSE_compfunc_type(cmp)))
711	#define sk_X509_PURPOSE_new_null() ((STACK_OF(X509_PURPOSE) *)OPENSSL_sk_new_null())
712	#define sk_X509_PURPOSE_new_reserve(cmp, n) ((STACK_OF(X509_PURPOSE) *)OPENSSL_sk_new_reserve(ossl_check_X509_PURPOSE_compfunc_type(cmp), (n)))
713	#define sk_X509_PURPOSE_reserve(sk, n) OPENSSL_sk_reserve(ossl_check_X509_PURPOSE_sk_type(sk), (n))
714	#define sk_X509_PURPOSE_free(sk) OPENSSL_sk_free(ossl_check_X509_PURPOSE_sk_type(sk))
715	#define sk_X509_PURPOSE_zero(sk) OPENSSL_sk_zero(ossl_check_X509_PURPOSE_sk_type(sk))
716	#define sk_X509_PURPOSE_delete(sk, i) ((X509_PURPOSE *)OPENSSL_sk_delete(ossl_check_X509_PURPOSE_sk_type(sk), (i)))
717	#define sk_X509_PURPOSE_delete_ptr(sk, ptr) ((X509_PURPOSE *)OPENSSL_sk_delete_ptr(ossl_check_X509_PURPOSE_sk_type(sk), ossl_check_X509_PURPOSE_type(ptr)))
718	#define sk_X509_PURPOSE_push(sk, ptr) OPENSSL_sk_push(ossl_check_X509_PURPOSE_sk_type(sk), ossl_check_X509_PURPOSE_type(ptr))
719	#define sk_X509_PURPOSE_unshift(sk, ptr) OPENSSL_sk_unshift(ossl_check_X509_PURPOSE_sk_type(sk), ossl_check_X509_PURPOSE_type(ptr))
720	#define sk_X509_PURPOSE_pop(sk) ((X509_PURPOSE *)OPENSSL_sk_pop(ossl_check_X509_PURPOSE_sk_type(sk)))
721	#define sk_X509_PURPOSE_shift(sk) ((X509_PURPOSE *)OPENSSL_sk_shift(ossl_check_X509_PURPOSE_sk_type(sk)))
722	#define sk_X509_PURPOSE_pop_free(sk, freefunc) OPENSSL_sk_pop_free(ossl_check_X509_PURPOSE_sk_type(sk),ossl_check_X509_PURPOSE_freefunc_type(freefunc))
723	#define sk_X509_PURPOSE_insert(sk, ptr, idx) OPENSSL_sk_insert(ossl_check_X509_PURPOSE_sk_type(sk), ossl_check_X509_PURPOSE_type(ptr), (idx))
724	#define sk_X509_PURPOSE_set(sk, idx, ptr) ((X509_PURPOSE *)OPENSSL_sk_set(ossl_check_X509_PURPOSE_sk_type(sk), (idx), ossl_check_X509_PURPOSE_type(ptr)))
725	#define sk_X509_PURPOSE_find(sk, ptr) OPENSSL_sk_find(ossl_check_X509_PURPOSE_sk_type(sk), ossl_check_X509_PURPOSE_type(ptr))
726	#define sk_X509_PURPOSE_find_ex(sk, ptr) OPENSSL_sk_find_ex(ossl_check_X509_PURPOSE_sk_type(sk), ossl_check_X509_PURPOSE_type(ptr))
727	#define sk_X509_PURPOSE_find_all(sk, ptr, pnum) OPENSSL_sk_find_all(ossl_check_X509_PURPOSE_sk_type(sk), ossl_check_X509_PURPOSE_type(ptr), pnum)
728	#define sk_X509_PURPOSE_sort(sk) OPENSSL_sk_sort(ossl_check_X509_PURPOSE_sk_type(sk))
729	#define sk_X509_PURPOSE_is_sorted(sk) OPENSSL_sk_is_sorted(ossl_check_const_X509_PURPOSE_sk_type(sk))
730	#define sk_X509_PURPOSE_dup(sk) ((STACK_OF(X509_PURPOSE) *)OPENSSL_sk_dup(ossl_check_const_X509_PURPOSE_sk_type(sk)))
731	#define sk_X509_PURPOSE_deep_copy(sk, copyfunc, freefunc) ((STACK_OF(X509_PURPOSE) *)OPENSSL_sk_deep_copy(ossl_check_const_X509_PURPOSE_sk_type(sk), ossl_check_X509_PURPOSE_copyfunc_type(copyfunc), ossl_check_X509_PURPOSE_freefunc_type(freefunc)))
732	#define sk_X509_PURPOSE_set_cmp_func(sk, cmp) ((sk_X509_PURPOSE_compfunc)OPENSSL_sk_set_cmp_func(ossl_check_X509_PURPOSE_sk_type(sk), ossl_check_X509_PURPOSE_compfunc_type(cmp)))
733
734
735
736	# define X509_PURPOSE_SSL_CLIENT 1
737	# define X509_PURPOSE_SSL_SERVER 2
738	# define X509_PURPOSE_NS_SSL_SERVER 3
739	# define X509_PURPOSE_SMIME_SIGN 4
740	# define X509_PURPOSE_SMIME_ENCRYPT 5
741	# define X509_PURPOSE_CRL_SIGN 6
742	# define X509_PURPOSE_ANY 7
743	# define X509_PURPOSE_OCSP_HELPER 8
744	# define X509_PURPOSE_TIMESTAMP_SIGN 9
745
746	# define X509_PURPOSE_MIN 1
747	# define X509_PURPOSE_MAX 9
748
749	/* Flags for X509V3_EXT_print() */
750
751	# define X509V3_EXT_UNKNOWN_MASK (0xfL << 16)
752	/* Return error for unknown extensions */
753	# define X509V3_EXT_DEFAULT 0
754	/* Print error for unknown extensions */
755	# define X509V3_EXT_ERROR_UNKNOWN (1L << 16)
756	/* ASN1 parse unknown extensions */
757	# define X509V3_EXT_PARSE_UNKNOWN (2L << 16)
758	/* BIO_dump unknown extensions */
759	# define X509V3_EXT_DUMP_UNKNOWN (3L << 16)
760
761	/* Flags for X509V3_add1_i2d */
762
763	# define X509V3_ADD_OP_MASK 0xfL
764	# define X509V3_ADD_DEFAULT 0L
765	# define X509V3_ADD_APPEND 1L
766	# define X509V3_ADD_REPLACE 2L
767	# define X509V3_ADD_REPLACE_EXISTING 3L
768	# define X509V3_ADD_KEEP_EXISTING 4L
769	# define X509V3_ADD_DELETE 5L
770	# define X509V3_ADD_SILENT 0x10
771
772	DECLARE_ASN1_FUNCTIONS(BASIC_CONSTRAINTS)
773
774	DECLARE_ASN1_FUNCTIONS(SXNET)
775	DECLARE_ASN1_FUNCTIONS(SXNETID)
776
777	DECLARE_ASN1_FUNCTIONS(ISSUER_SIGN_TOOL)
778
779	int SXNET_add_id_asc(SXNET *psx, const char zone, const char *user, int userlen);
780	int SXNET_add_id_ulong(SXNET *psx, unsigned long lzone, const char user,
781	int userlen);
782	int SXNET_add_id_INTEGER(SXNET *psx, ASN1_INTEGER izone, const char *user,
783	int userlen);
784
785	ASN1_OCTET_STRING SXNET_get_id_asc(SXNET sx, const char *zone);
786	ASN1_OCTET_STRING SXNET_get_id_ulong(SXNET sx, unsigned long lzone);
787	ASN1_OCTET_STRING SXNET_get_id_INTEGER(SXNET sx, ASN1_INTEGER *zone);
788
789	DECLARE_ASN1_FUNCTIONS(AUTHORITY_KEYID)
790
791	DECLARE_ASN1_FUNCTIONS(PKEY_USAGE_PERIOD)
792
793	DECLARE_ASN1_FUNCTIONS(GENERAL_NAME)
794	DECLARE_ASN1_DUP_FUNCTION(GENERAL_NAME)
795	int GENERAL_NAME_cmp(GENERAL_NAME a, GENERAL_NAME b);
796
797	ASN1_BIT_STRING v2i_ASN1_BIT_STRING(X509V3_EXT_METHOD method,
798	X509V3_CTX *ctx,
799	STACK_OF(CONF_VALUE) *nval);
800	STACK_OF(CONF_VALUE) i2v_ASN1_BIT_STRING(X509V3_EXT_METHOD method,
801	ASN1_BIT_STRING *bits,
802	STACK_OF(CONF_VALUE) *extlist);
803	char i2s_ASN1_IA5STRING(X509V3_EXT_METHOD method, ASN1_IA5STRING *ia5);
804	ASN1_IA5STRING s2i_ASN1_IA5STRING(X509V3_EXT_METHOD method,
805	X509V3_CTX ctx, const char str);
806	char i2s_ASN1_UTF8STRING(X509V3_EXT_METHOD method, ASN1_UTF8STRING *utf8);
807	ASN1_UTF8STRING s2i_ASN1_UTF8STRING(X509V3_EXT_METHOD method,
808	X509V3_CTX ctx, const char str);
809
810	STACK_OF(CONF_VALUE) i2v_GENERAL_NAME(X509V3_EXT_METHOD method,
811	GENERAL_NAME *gen,
812	STACK_OF(CONF_VALUE) *ret);
813	int GENERAL_NAME_print(BIO out, GENERAL_NAME gen);
814
815	DECLARE_ASN1_FUNCTIONS(GENERAL_NAMES)
816
817	STACK_OF(CONF_VALUE) i2v_GENERAL_NAMES(X509V3_EXT_METHOD method,
818	GENERAL_NAMES *gen,
819	STACK_OF(CONF_VALUE) *extlist);
820	GENERAL_NAMES v2i_GENERAL_NAMES(const X509V3_EXT_METHOD method,
821	X509V3_CTX ctx, STACK_OF(CONF_VALUE) nval);
822
823	DECLARE_ASN1_FUNCTIONS(OTHERNAME)
824	DECLARE_ASN1_FUNCTIONS(EDIPARTYNAME)
825	int OTHERNAME_cmp(OTHERNAME a, OTHERNAME b);
826	void GENERAL_NAME_set0_value(GENERAL_NAME a, int type, void value);
827	void GENERAL_NAME_get0_value(const GENERAL_NAME a, int *ptype);
828	int GENERAL_NAME_set0_othername(GENERAL_NAME *gen,
829	ASN1_OBJECT oid, ASN1_TYPE value);
830	int GENERAL_NAME_get0_otherName(const GENERAL_NAME *gen,
831	ASN1_OBJECT poid, ASN1_TYPE pvalue);
832
833	char i2s_ASN1_OCTET_STRING(X509V3_EXT_METHOD method,
834	const ASN1_OCTET_STRING *ia5);
835	ASN1_OCTET_STRING s2i_ASN1_OCTET_STRING(X509V3_EXT_METHOD method,
836	X509V3_CTX ctx, const char str);
837
838	DECLARE_ASN1_FUNCTIONS(EXTENDED_KEY_USAGE)
839	int i2a_ACCESS_DESCRIPTION(BIO bp, const ACCESS_DESCRIPTION a);
840
841	DECLARE_ASN1_ALLOC_FUNCTIONS(TLS_FEATURE)
842
843	DECLARE_ASN1_FUNCTIONS(CERTIFICATEPOLICIES)
844	DECLARE_ASN1_FUNCTIONS(POLICYINFO)
845	DECLARE_ASN1_FUNCTIONS(POLICYQUALINFO)
846	DECLARE_ASN1_FUNCTIONS(USERNOTICE)
847	DECLARE_ASN1_FUNCTIONS(NOTICEREF)
848
849	DECLARE_ASN1_FUNCTIONS(CRL_DIST_POINTS)
850	DECLARE_ASN1_FUNCTIONS(DIST_POINT)
851	DECLARE_ASN1_FUNCTIONS(DIST_POINT_NAME)
852	DECLARE_ASN1_FUNCTIONS(ISSUING_DIST_POINT)
853
854	int DIST_POINT_set_dpname(DIST_POINT_NAME dpn, const X509_NAME iname);
855
856	int NAME_CONSTRAINTS_check(X509 x, NAME_CONSTRAINTS nc);
857	int NAME_CONSTRAINTS_check_CN(X509 x, NAME_CONSTRAINTS nc);
858
859	DECLARE_ASN1_FUNCTIONS(ACCESS_DESCRIPTION)
860	DECLARE_ASN1_FUNCTIONS(AUTHORITY_INFO_ACCESS)
861
862	DECLARE_ASN1_ITEM(POLICY_MAPPING)
863	DECLARE_ASN1_ALLOC_FUNCTIONS(POLICY_MAPPING)
864	DECLARE_ASN1_ITEM(POLICY_MAPPINGS)
865
866	DECLARE_ASN1_ITEM(GENERAL_SUBTREE)
867	DECLARE_ASN1_ALLOC_FUNCTIONS(GENERAL_SUBTREE)
868
869	DECLARE_ASN1_ITEM(NAME_CONSTRAINTS)
870	DECLARE_ASN1_ALLOC_FUNCTIONS(NAME_CONSTRAINTS)
871
872	DECLARE_ASN1_ALLOC_FUNCTIONS(POLICY_CONSTRAINTS)
873	DECLARE_ASN1_ITEM(POLICY_CONSTRAINTS)
874
875	GENERAL_NAME a2i_GENERAL_NAME(GENERAL_NAME out,
876	const X509V3_EXT_METHOD *method,
877	X509V3_CTX *ctx, int gen_type,
878	const char *value, int is_nc);
879
880	# ifdef OPENSSL_CONF_H
881	GENERAL_NAME v2i_GENERAL_NAME(const X509V3_EXT_METHOD method,
882	X509V3_CTX ctx, CONF_VALUE cnf);
883	GENERAL_NAME v2i_GENERAL_NAME_ex(GENERAL_NAME out,
884	const X509V3_EXT_METHOD *method,
885	X509V3_CTX ctx, CONF_VALUE cnf,
886	int is_nc);
887
888	void X509V3_conf_free(CONF_VALUE *val);
889
890	X509_EXTENSION X509V3_EXT_nconf_nid(CONF conf, X509V3_CTX *ctx, int ext_nid,
891	const char *value);
892	X509_EXTENSION X509V3_EXT_nconf(CONF conf, X509V3_CTX ctx, const char name,
893	const char *value);
894	int X509V3_EXT_add_nconf_sk(CONF conf, X509V3_CTX ctx, const char *section,
895	STACK_OF(X509_EXTENSION) **sk);
896	int X509V3_EXT_add_nconf(CONF conf, X509V3_CTX ctx, const char *section,
897	X509 *cert);
898	int X509V3_EXT_REQ_add_nconf(CONF conf, X509V3_CTX ctx, const char *section,
899	X509_REQ *req);
900	int X509V3_EXT_CRL_add_nconf(CONF conf, X509V3_CTX ctx, const char *section,
901	X509_CRL *crl);
902
903	X509_EXTENSION X509V3_EXT_conf_nid(LHASH_OF(CONF_VALUE) conf,
904	X509V3_CTX *ctx, int ext_nid,
905	const char *value);
906	X509_EXTENSION X509V3_EXT_conf(LHASH_OF(CONF_VALUE) conf, X509V3_CTX *ctx,
907	const char name, const char value);
908	int X509V3_EXT_add_conf(LHASH_OF(CONF_VALUE) conf, X509V3_CTX ctx,
909	const char section, X509 cert);
910	int X509V3_EXT_REQ_add_conf(LHASH_OF(CONF_VALUE) conf, X509V3_CTX ctx,
911	const char section, X509_REQ req);
912	int X509V3_EXT_CRL_add_conf(LHASH_OF(CONF_VALUE) conf, X509V3_CTX ctx,
913	const char section, X509_CRL crl);
914
915	int X509V3_add_value_bool_nf(const char *name, int asn1_bool,
916	STACK_OF(CONF_VALUE) **extlist);
917	int X509V3_get_value_bool(const CONF_VALUE value, int asn1_bool);
918	int X509V3_get_value_int(const CONF_VALUE value, ASN1_INTEGER *aint);
919	void X509V3_set_nconf(X509V3_CTX ctx, CONF conf);
920	void X509V3_set_conf_lhash(X509V3_CTX ctx, LHASH_OF(CONF_VALUE) lhash);
921	# endif
922
923	char X509V3_get_string(X509V3_CTX ctx, const char name, const char section);
924	STACK_OF(CONF_VALUE) X509V3_get_section(X509V3_CTX ctx, const char *section);
925	void X509V3_string_free(X509V3_CTX ctx, char str);
926	void X509V3_section_free(X509V3_CTX ctx, STACK_OF(CONF_VALUE) section);
927	void X509V3_set_ctx(X509V3_CTX ctx, X509 issuer, X509 *subject,
928	X509_REQ req, X509_CRL crl, int flags);
929	/* For API backward compatibility, this is separate from X509V3_set_ctx(): */
930	int X509V3_set_issuer_pkey(X509V3_CTX ctx, EVP_PKEY pkey);
931
932	int X509V3_add_value(const char name, const char value,
933	STACK_OF(CONF_VALUE) **extlist);
934	int X509V3_add_value_uchar(const char name, const unsigned char value,
935	STACK_OF(CONF_VALUE) **extlist);
936	int X509V3_add_value_bool(const char *name, int asn1_bool,
937	STACK_OF(CONF_VALUE) **extlist);
938	int X509V3_add_value_int(const char name, const ASN1_INTEGER aint,
939	STACK_OF(CONF_VALUE) **extlist);
940	char i2s_ASN1_INTEGER(X509V3_EXT_METHOD meth, const ASN1_INTEGER *aint);
941	ASN1_INTEGER s2i_ASN1_INTEGER(X509V3_EXT_METHOD meth, const char *value);
942	char i2s_ASN1_ENUMERATED(X509V3_EXT_METHOD meth, const ASN1_ENUMERATED *aint);
943	char i2s_ASN1_ENUMERATED_TABLE(X509V3_EXT_METHOD meth,
944	const ASN1_ENUMERATED *aint);
945	int X509V3_EXT_add(X509V3_EXT_METHOD *ext);
946	int X509V3_EXT_add_list(X509V3_EXT_METHOD *extlist);
947	int X509V3_EXT_add_alias(int nid_to, int nid_from);
948	void X509V3_EXT_cleanup(void);
949
950	const X509V3_EXT_METHOD X509V3_EXT_get(X509_EXTENSION ext);
951	const X509V3_EXT_METHOD *X509V3_EXT_get_nid(int nid);
952	int X509V3_add_standard_extensions(void);
953	STACK_OF(CONF_VALUE) X509V3_parse_list(const char line);
954	void X509V3_EXT_d2i(X509_EXTENSION ext);
955	void X509V3_get_d2i(const STACK_OF(X509_EXTENSION) x, int nid, int *crit,
956	int *idx);
957
958	X509_EXTENSION X509V3_EXT_i2d(int ext_nid, int crit, void ext_struc);
959	int X509V3_add1_i2d(STACK_OF(X509_EXTENSION) *x, int nid, void value,
960	int crit, unsigned long flags);
961
962	#ifndef OPENSSL_NO_DEPRECATED_1_1_0
963	/* The new declarations are in crypto.h, but the old ones were here. */
964	# define hex_to_string OPENSSL_buf2hexstr
965	# define string_to_hex OPENSSL_hexstr2buf
966	#endif
967
968	void X509V3_EXT_val_prn(BIO out, STACK_OF(CONF_VALUE) val, int indent,
969	int ml);
970	int X509V3_EXT_print(BIO out, X509_EXTENSION ext, unsigned long flag,
971	int indent);
972	#ifndef OPENSSL_NO_STDIO
973	int X509V3_EXT_print_fp(FILE out, X509_EXTENSION ext, int flag, int indent);
974	#endif
975	int X509V3_extensions_print(BIO out, const char title,
976	const STACK_OF(X509_EXTENSION) *exts,
977	unsigned long flag, int indent);
978
979	int X509_check_ca(X509 *x);
980	int X509_check_purpose(X509 *x, int id, int ca);
981	int X509_supported_extension(X509_EXTENSION *ex);
982	int X509_PURPOSE_set(int *p, int purpose);
983	int X509_check_issued(X509 issuer, X509 subject);
984	int X509_check_akid(const X509 issuer, const AUTHORITY_KEYID akid);
985	void X509_set_proxy_flag(X509 *x);
986	void X509_set_proxy_pathlen(X509 *x, long l);
987	long X509_get_proxy_pathlen(X509 *x);
988
989	uint32_t X509_get_extension_flags(X509 *x);
990	uint32_t X509_get_key_usage(X509 *x);
991	uint32_t X509_get_extended_key_usage(X509 *x);
992	const ASN1_OCTET_STRING X509_get0_subject_key_id(X509 x);
993	const ASN1_OCTET_STRING X509_get0_authority_key_id(X509 x);
994	const GENERAL_NAMES X509_get0_authority_issuer(X509 x);
995	const ASN1_INTEGER X509_get0_authority_serial(X509 x);
996
997	int X509_PURPOSE_get_count(void);
998	X509_PURPOSE *X509_PURPOSE_get0(int idx);
999	int X509_PURPOSE_get_by_sname(const char *sname);
1000	int X509_PURPOSE_get_by_id(int id);
1001	int X509_PURPOSE_add(int id, int trust, int flags,
1002	int (ck) (const X509_PURPOSE , const X509 *, int),
1003	const char name, const char sname, void *arg);
1004	char X509_PURPOSE_get0_name(const X509_PURPOSE xp);
1005	char X509_PURPOSE_get0_sname(const X509_PURPOSE xp);
1006	int X509_PURPOSE_get_trust(const X509_PURPOSE *xp);
1007	void X509_PURPOSE_cleanup(void);
1008	int X509_PURPOSE_get_id(const X509_PURPOSE *);
1009
1010	STACK_OF(OPENSSL_STRING) X509_get1_email(X509 x);
1011	STACK_OF(OPENSSL_STRING) X509_REQ_get1_email(X509_REQ x);
1012	void X509_email_free(STACK_OF(OPENSSL_STRING) *sk);
1013	STACK_OF(OPENSSL_STRING) X509_get1_ocsp(X509 x);
1014	/* Flags for X509_check_* functions */
1015
1016	/*
1017	* Always check subject name for host match even if subject alt names present
1018	*/
1019	# define X509_CHECK_FLAG_ALWAYS_CHECK_SUBJECT 0x1
1020	/* Disable wildcard matching for dnsName fields and common name. */
1021	# define X509_CHECK_FLAG_NO_WILDCARDS 0x2
1022	/* Wildcards must not match a partial label. */
1023	# define X509_CHECK_FLAG_NO_PARTIAL_WILDCARDS 0x4
1024	/* Allow (non-partial) wildcards to match multiple labels. */
1025	# define X509_CHECK_FLAG_MULTI_LABEL_WILDCARDS 0x8
1026	/* Constraint verifier subdomain patterns to match a single labels. */
1027	# define X509_CHECK_FLAG_SINGLE_LABEL_SUBDOMAINS 0x10
1028	/* Never check the subject CN */
1029	# define X509_CHECK_FLAG_NEVER_CHECK_SUBJECT 0x20
1030	/*
1031	* Match reference identifiers starting with "." to any sub-domain.
1032	* This is a non-public flag, turned on implicitly when the subject
1033	* reference identity is a DNS name.
1034	*/
1035	# define _X509_CHECK_FLAG_DOT_SUBDOMAINS 0x8000
1036
1037	int X509_check_host(X509 x, const char chk, size_t chklen,
1038	unsigned int flags, char **peername);
1039	int X509_check_email(X509 x, const char chk, size_t chklen,
1040	unsigned int flags);
1041	int X509_check_ip(X509 x, const unsigned char chk, size_t chklen,
1042	unsigned int flags);
1043	int X509_check_ip_asc(X509 x, const char ipasc, unsigned int flags);
1044
1045	ASN1_OCTET_STRING a2i_IPADDRESS(const char ipasc);
1046	ASN1_OCTET_STRING a2i_IPADDRESS_NC(const char ipasc);
1047	int X509V3_NAME_from_section(X509_NAME nm, STACK_OF(CONF_VALUE) dn_sk,
1048	unsigned long chtype);
1049
1050	void X509_POLICY_NODE_print(BIO out, X509_POLICY_NODE node, int indent);
1051	SKM_DEFINE_STACK_OF_INTERNAL(X509_POLICY_NODE, X509_POLICY_NODE, X509_POLICY_NODE)
1052	#define sk_X509_POLICY_NODE_num(sk) OPENSSL_sk_num(ossl_check_const_X509_POLICY_NODE_sk_type(sk))
1053	#define sk_X509_POLICY_NODE_value(sk, idx) ((X509_POLICY_NODE *)OPENSSL_sk_value(ossl_check_const_X509_POLICY_NODE_sk_type(sk), (idx)))
1054	#define sk_X509_POLICY_NODE_new(cmp) ((STACK_OF(X509_POLICY_NODE) *)OPENSSL_sk_new(ossl_check_X509_POLICY_NODE_compfunc_type(cmp)))
1055	#define sk_X509_POLICY_NODE_new_null() ((STACK_OF(X509_POLICY_NODE) *)OPENSSL_sk_new_null())
1056	#define sk_X509_POLICY_NODE_new_reserve(cmp, n) ((STACK_OF(X509_POLICY_NODE) *)OPENSSL_sk_new_reserve(ossl_check_X509_POLICY_NODE_compfunc_type(cmp), (n)))
1057	#define sk_X509_POLICY_NODE_reserve(sk, n) OPENSSL_sk_reserve(ossl_check_X509_POLICY_NODE_sk_type(sk), (n))
1058	#define sk_X509_POLICY_NODE_free(sk) OPENSSL_sk_free(ossl_check_X509_POLICY_NODE_sk_type(sk))
1059	#define sk_X509_POLICY_NODE_zero(sk) OPENSSL_sk_zero(ossl_check_X509_POLICY_NODE_sk_type(sk))
1060	#define sk_X509_POLICY_NODE_delete(sk, i) ((X509_POLICY_NODE *)OPENSSL_sk_delete(ossl_check_X509_POLICY_NODE_sk_type(sk), (i)))
1061	#define sk_X509_POLICY_NODE_delete_ptr(sk, ptr) ((X509_POLICY_NODE *)OPENSSL_sk_delete_ptr(ossl_check_X509_POLICY_NODE_sk_type(sk), ossl_check_X509_POLICY_NODE_type(ptr)))
1062	#define sk_X509_POLICY_NODE_push(sk, ptr) OPENSSL_sk_push(ossl_check_X509_POLICY_NODE_sk_type(sk), ossl_check_X509_POLICY_NODE_type(ptr))
1063	#define sk_X509_POLICY_NODE_unshift(sk, ptr) OPENSSL_sk_unshift(ossl_check_X509_POLICY_NODE_sk_type(sk), ossl_check_X509_POLICY_NODE_type(ptr))
1064	#define sk_X509_POLICY_NODE_pop(sk) ((X509_POLICY_NODE *)OPENSSL_sk_pop(ossl_check_X509_POLICY_NODE_sk_type(sk)))
1065	#define sk_X509_POLICY_NODE_shift(sk) ((X509_POLICY_NODE *)OPENSSL_sk_shift(ossl_check_X509_POLICY_NODE_sk_type(sk)))
1066	#define sk_X509_POLICY_NODE_pop_free(sk, freefunc) OPENSSL_sk_pop_free(ossl_check_X509_POLICY_NODE_sk_type(sk),ossl_check_X509_POLICY_NODE_freefunc_type(freefunc))
1067	#define sk_X509_POLICY_NODE_insert(sk, ptr, idx) OPENSSL_sk_insert(ossl_check_X509_POLICY_NODE_sk_type(sk), ossl_check_X509_POLICY_NODE_type(ptr), (idx))
1068	#define sk_X509_POLICY_NODE_set(sk, idx, ptr) ((X509_POLICY_NODE *)OPENSSL_sk_set(ossl_check_X509_POLICY_NODE_sk_type(sk), (idx), ossl_check_X509_POLICY_NODE_type(ptr)))
1069	#define sk_X509_POLICY_NODE_find(sk, ptr) OPENSSL_sk_find(ossl_check_X509_POLICY_NODE_sk_type(sk), ossl_check_X509_POLICY_NODE_type(ptr))
1070	#define sk_X509_POLICY_NODE_find_ex(sk, ptr) OPENSSL_sk_find_ex(ossl_check_X509_POLICY_NODE_sk_type(sk), ossl_check_X509_POLICY_NODE_type(ptr))
1071	#define sk_X509_POLICY_NODE_find_all(sk, ptr, pnum) OPENSSL_sk_find_all(ossl_check_X509_POLICY_NODE_sk_type(sk), ossl_check_X509_POLICY_NODE_type(ptr), pnum)
1072	#define sk_X509_POLICY_NODE_sort(sk) OPENSSL_sk_sort(ossl_check_X509_POLICY_NODE_sk_type(sk))
1073	#define sk_X509_POLICY_NODE_is_sorted(sk) OPENSSL_sk_is_sorted(ossl_check_const_X509_POLICY_NODE_sk_type(sk))
1074	#define sk_X509_POLICY_NODE_dup(sk) ((STACK_OF(X509_POLICY_NODE) *)OPENSSL_sk_dup(ossl_check_const_X509_POLICY_NODE_sk_type(sk)))
1075	#define sk_X509_POLICY_NODE_deep_copy(sk, copyfunc, freefunc) ((STACK_OF(X509_POLICY_NODE) *)OPENSSL_sk_deep_copy(ossl_check_const_X509_POLICY_NODE_sk_type(sk), ossl_check_X509_POLICY_NODE_copyfunc_type(copyfunc), ossl_check_X509_POLICY_NODE_freefunc_type(freefunc)))
1076	#define sk_X509_POLICY_NODE_set_cmp_func(sk, cmp) ((sk_X509_POLICY_NODE_compfunc)OPENSSL_sk_set_cmp_func(ossl_check_X509_POLICY_NODE_sk_type(sk), ossl_check_X509_POLICY_NODE_compfunc_type(cmp)))
1077
1078
1079
1080	#ifndef OPENSSL_NO_RFC3779
1081	typedef struct ASRange_st {
1082	ASN1_INTEGER min, max;
1083	} ASRange;
1084
1085	# define ASIdOrRange_id 0
1086	# define ASIdOrRange_range 1
1087
1088	typedef struct ASIdOrRange_st {
1089	int type;
1090	union {
1091	ASN1_INTEGER *id;
1092	ASRange *range;
1093	} u;
1094	} ASIdOrRange;
1095
1096	SKM_DEFINE_STACK_OF_INTERNAL(ASIdOrRange, ASIdOrRange, ASIdOrRange)
1097	#define sk_ASIdOrRange_num(sk) OPENSSL_sk_num(ossl_check_const_ASIdOrRange_sk_type(sk))
1098	#define sk_ASIdOrRange_value(sk, idx) ((ASIdOrRange *)OPENSSL_sk_value(ossl_check_const_ASIdOrRange_sk_type(sk), (idx)))
1099	#define sk_ASIdOrRange_new(cmp) ((STACK_OF(ASIdOrRange) *)OPENSSL_sk_new(ossl_check_ASIdOrRange_compfunc_type(cmp)))
1100	#define sk_ASIdOrRange_new_null() ((STACK_OF(ASIdOrRange) *)OPENSSL_sk_new_null())
1101	#define sk_ASIdOrRange_new_reserve(cmp, n) ((STACK_OF(ASIdOrRange) *)OPENSSL_sk_new_reserve(ossl_check_ASIdOrRange_compfunc_type(cmp), (n)))
1102	#define sk_ASIdOrRange_reserve(sk, n) OPENSSL_sk_reserve(ossl_check_ASIdOrRange_sk_type(sk), (n))
1103	#define sk_ASIdOrRange_free(sk) OPENSSL_sk_free(ossl_check_ASIdOrRange_sk_type(sk))
1104	#define sk_ASIdOrRange_zero(sk) OPENSSL_sk_zero(ossl_check_ASIdOrRange_sk_type(sk))
1105	#define sk_ASIdOrRange_delete(sk, i) ((ASIdOrRange *)OPENSSL_sk_delete(ossl_check_ASIdOrRange_sk_type(sk), (i)))
1106	#define sk_ASIdOrRange_delete_ptr(sk, ptr) ((ASIdOrRange *)OPENSSL_sk_delete_ptr(ossl_check_ASIdOrRange_sk_type(sk), ossl_check_ASIdOrRange_type(ptr)))
1107	#define sk_ASIdOrRange_push(sk, ptr) OPENSSL_sk_push(ossl_check_ASIdOrRange_sk_type(sk), ossl_check_ASIdOrRange_type(ptr))
1108	#define sk_ASIdOrRange_unshift(sk, ptr) OPENSSL_sk_unshift(ossl_check_ASIdOrRange_sk_type(sk), ossl_check_ASIdOrRange_type(ptr))
1109	#define sk_ASIdOrRange_pop(sk) ((ASIdOrRange *)OPENSSL_sk_pop(ossl_check_ASIdOrRange_sk_type(sk)))
1110	#define sk_ASIdOrRange_shift(sk) ((ASIdOrRange *)OPENSSL_sk_shift(ossl_check_ASIdOrRange_sk_type(sk)))
1111	#define sk_ASIdOrRange_pop_free(sk, freefunc) OPENSSL_sk_pop_free(ossl_check_ASIdOrRange_sk_type(sk),ossl_check_ASIdOrRange_freefunc_type(freefunc))
1112	#define sk_ASIdOrRange_insert(sk, ptr, idx) OPENSSL_sk_insert(ossl_check_ASIdOrRange_sk_type(sk), ossl_check_ASIdOrRange_type(ptr), (idx))
1113	#define sk_ASIdOrRange_set(sk, idx, ptr) ((ASIdOrRange *)OPENSSL_sk_set(ossl_check_ASIdOrRange_sk_type(sk), (idx), ossl_check_ASIdOrRange_type(ptr)))
1114	#define sk_ASIdOrRange_find(sk, ptr) OPENSSL_sk_find(ossl_check_ASIdOrRange_sk_type(sk), ossl_check_ASIdOrRange_type(ptr))
1115	#define sk_ASIdOrRange_find_ex(sk, ptr) OPENSSL_sk_find_ex(ossl_check_ASIdOrRange_sk_type(sk), ossl_check_ASIdOrRange_type(ptr))
1116	#define sk_ASIdOrRange_find_all(sk, ptr, pnum) OPENSSL_sk_find_all(ossl_check_ASIdOrRange_sk_type(sk), ossl_check_ASIdOrRange_type(ptr), pnum)
1117	#define sk_ASIdOrRange_sort(sk) OPENSSL_sk_sort(ossl_check_ASIdOrRange_sk_type(sk))
1118	#define sk_ASIdOrRange_is_sorted(sk) OPENSSL_sk_is_sorted(ossl_check_const_ASIdOrRange_sk_type(sk))
1119	#define sk_ASIdOrRange_dup(sk) ((STACK_OF(ASIdOrRange) *)OPENSSL_sk_dup(ossl_check_const_ASIdOrRange_sk_type(sk)))
1120	#define sk_ASIdOrRange_deep_copy(sk, copyfunc, freefunc) ((STACK_OF(ASIdOrRange) *)OPENSSL_sk_deep_copy(ossl_check_const_ASIdOrRange_sk_type(sk), ossl_check_ASIdOrRange_copyfunc_type(copyfunc), ossl_check_ASIdOrRange_freefunc_type(freefunc)))
1121	#define sk_ASIdOrRange_set_cmp_func(sk, cmp) ((sk_ASIdOrRange_compfunc)OPENSSL_sk_set_cmp_func(ossl_check_ASIdOrRange_sk_type(sk), ossl_check_ASIdOrRange_compfunc_type(cmp)))
1122
1123
1124	typedef STACK_OF(ASIdOrRange) ASIdOrRanges;
1125
1126	# define ASIdentifierChoice_inherit 0
1127	# define ASIdentifierChoice_asIdsOrRanges 1
1128
1129	typedef struct ASIdentifierChoice_st {
1130	int type;
1131	union {
1132	ASN1_NULL *inherit;
1133	ASIdOrRanges *asIdsOrRanges;
1134	} u;
1135	} ASIdentifierChoice;
1136
1137	typedef struct ASIdentifiers_st {
1138	ASIdentifierChoice asnum, rdi;
1139	} ASIdentifiers;
1140
1141	DECLARE_ASN1_FUNCTIONS(ASRange)
1142	DECLARE_ASN1_FUNCTIONS(ASIdOrRange)
1143	DECLARE_ASN1_FUNCTIONS(ASIdentifierChoice)
1144	DECLARE_ASN1_FUNCTIONS(ASIdentifiers)
1145
1146	typedef struct IPAddressRange_st {
1147	ASN1_BIT_STRING min, max;
1148	} IPAddressRange;
1149
1150	# define IPAddressOrRange_addressPrefix 0
1151	# define IPAddressOrRange_addressRange 1
1152
1153	typedef struct IPAddressOrRange_st {
1154	int type;
1155	union {
1156	ASN1_BIT_STRING *addressPrefix;
1157	IPAddressRange *addressRange;
1158	} u;
1159	} IPAddressOrRange;
1160
1161	SKM_DEFINE_STACK_OF_INTERNAL(IPAddressOrRange, IPAddressOrRange, IPAddressOrRange)
1162	#define sk_IPAddressOrRange_num(sk) OPENSSL_sk_num(ossl_check_const_IPAddressOrRange_sk_type(sk))
1163	#define sk_IPAddressOrRange_value(sk, idx) ((IPAddressOrRange *)OPENSSL_sk_value(ossl_check_const_IPAddressOrRange_sk_type(sk), (idx)))
1164	#define sk_IPAddressOrRange_new(cmp) ((STACK_OF(IPAddressOrRange) *)OPENSSL_sk_new(ossl_check_IPAddressOrRange_compfunc_type(cmp)))
1165	#define sk_IPAddressOrRange_new_null() ((STACK_OF(IPAddressOrRange) *)OPENSSL_sk_new_null())
1166	#define sk_IPAddressOrRange_new_reserve(cmp, n) ((STACK_OF(IPAddressOrRange) *)OPENSSL_sk_new_reserve(ossl_check_IPAddressOrRange_compfunc_type(cmp), (n)))
1167	#define sk_IPAddressOrRange_reserve(sk, n) OPENSSL_sk_reserve(ossl_check_IPAddressOrRange_sk_type(sk), (n))
1168	#define sk_IPAddressOrRange_free(sk) OPENSSL_sk_free(ossl_check_IPAddressOrRange_sk_type(sk))
1169	#define sk_IPAddressOrRange_zero(sk) OPENSSL_sk_zero(ossl_check_IPAddressOrRange_sk_type(sk))
1170	#define sk_IPAddressOrRange_delete(sk, i) ((IPAddressOrRange *)OPENSSL_sk_delete(ossl_check_IPAddressOrRange_sk_type(sk), (i)))
1171	#define sk_IPAddressOrRange_delete_ptr(sk, ptr) ((IPAddressOrRange *)OPENSSL_sk_delete_ptr(ossl_check_IPAddressOrRange_sk_type(sk), ossl_check_IPAddressOrRange_type(ptr)))
1172	#define sk_IPAddressOrRange_push(sk, ptr) OPENSSL_sk_push(ossl_check_IPAddressOrRange_sk_type(sk), ossl_check_IPAddressOrRange_type(ptr))
1173	#define sk_IPAddressOrRange_unshift(sk, ptr) OPENSSL_sk_unshift(ossl_check_IPAddressOrRange_sk_type(sk), ossl_check_IPAddressOrRange_type(ptr))
1174	#define sk_IPAddressOrRange_pop(sk) ((IPAddressOrRange *)OPENSSL_sk_pop(ossl_check_IPAddressOrRange_sk_type(sk)))
1175	#define sk_IPAddressOrRange_shift(sk) ((IPAddressOrRange *)OPENSSL_sk_shift(ossl_check_IPAddressOrRange_sk_type(sk)))
1176	#define sk_IPAddressOrRange_pop_free(sk, freefunc) OPENSSL_sk_pop_free(ossl_check_IPAddressOrRange_sk_type(sk),ossl_check_IPAddressOrRange_freefunc_type(freefunc))
1177	#define sk_IPAddressOrRange_insert(sk, ptr, idx) OPENSSL_sk_insert(ossl_check_IPAddressOrRange_sk_type(sk), ossl_check_IPAddressOrRange_type(ptr), (idx))
1178	#define sk_IPAddressOrRange_set(sk, idx, ptr) ((IPAddressOrRange *)OPENSSL_sk_set(ossl_check_IPAddressOrRange_sk_type(sk), (idx), ossl_check_IPAddressOrRange_type(ptr)))
1179	#define sk_IPAddressOrRange_find(sk, ptr) OPENSSL_sk_find(ossl_check_IPAddressOrRange_sk_type(sk), ossl_check_IPAddressOrRange_type(ptr))
1180	#define sk_IPAddressOrRange_find_ex(sk, ptr) OPENSSL_sk_find_ex(ossl_check_IPAddressOrRange_sk_type(sk), ossl_check_IPAddressOrRange_type(ptr))
1181	#define sk_IPAddressOrRange_find_all(sk, ptr, pnum) OPENSSL_sk_find_all(ossl_check_IPAddressOrRange_sk_type(sk), ossl_check_IPAddressOrRange_type(ptr), pnum)
1182	#define sk_IPAddressOrRange_sort(sk) OPENSSL_sk_sort(ossl_check_IPAddressOrRange_sk_type(sk))
1183	#define sk_IPAddressOrRange_is_sorted(sk) OPENSSL_sk_is_sorted(ossl_check_const_IPAddressOrRange_sk_type(sk))
1184	#define sk_IPAddressOrRange_dup(sk) ((STACK_OF(IPAddressOrRange) *)OPENSSL_sk_dup(ossl_check_const_IPAddressOrRange_sk_type(sk)))
1185	#define sk_IPAddressOrRange_deep_copy(sk, copyfunc, freefunc) ((STACK_OF(IPAddressOrRange) *)OPENSSL_sk_deep_copy(ossl_check_const_IPAddressOrRange_sk_type(sk), ossl_check_IPAddressOrRange_copyfunc_type(copyfunc), ossl_check_IPAddressOrRange_freefunc_type(freefunc)))
1186	#define sk_IPAddressOrRange_set_cmp_func(sk, cmp) ((sk_IPAddressOrRange_compfunc)OPENSSL_sk_set_cmp_func(ossl_check_IPAddressOrRange_sk_type(sk), ossl_check_IPAddressOrRange_compfunc_type(cmp)))
1187
1188
1189	typedef STACK_OF(IPAddressOrRange) IPAddressOrRanges;
1190
1191	# define IPAddressChoice_inherit 0
1192	# define IPAddressChoice_addressesOrRanges 1
1193
1194	typedef struct IPAddressChoice_st {
1195	int type;
1196	union {
1197	ASN1_NULL *inherit;
1198	IPAddressOrRanges *addressesOrRanges;
1199	} u;
1200	} IPAddressChoice;
1201
1202	typedef struct IPAddressFamily_st {
1203	ASN1_OCTET_STRING *addressFamily;
1204	IPAddressChoice *ipAddressChoice;
1205	} IPAddressFamily;
1206
1207	SKM_DEFINE_STACK_OF_INTERNAL(IPAddressFamily, IPAddressFamily, IPAddressFamily)
1208	#define sk_IPAddressFamily_num(sk) OPENSSL_sk_num(ossl_check_const_IPAddressFamily_sk_type(sk))
1209	#define sk_IPAddressFamily_value(sk, idx) ((IPAddressFamily *)OPENSSL_sk_value(ossl_check_const_IPAddressFamily_sk_type(sk), (idx)))
1210	#define sk_IPAddressFamily_new(cmp) ((STACK_OF(IPAddressFamily) *)OPENSSL_sk_new(ossl_check_IPAddressFamily_compfunc_type(cmp)))
1211	#define sk_IPAddressFamily_new_null() ((STACK_OF(IPAddressFamily) *)OPENSSL_sk_new_null())
1212	#define sk_IPAddressFamily_new_reserve(cmp, n) ((STACK_OF(IPAddressFamily) *)OPENSSL_sk_new_reserve(ossl_check_IPAddressFamily_compfunc_type(cmp), (n)))
1213	#define sk_IPAddressFamily_reserve(sk, n) OPENSSL_sk_reserve(ossl_check_IPAddressFamily_sk_type(sk), (n))
1214	#define sk_IPAddressFamily_free(sk) OPENSSL_sk_free(ossl_check_IPAddressFamily_sk_type(sk))
1215	#define sk_IPAddressFamily_zero(sk) OPENSSL_sk_zero(ossl_check_IPAddressFamily_sk_type(sk))
1216	#define sk_IPAddressFamily_delete(sk, i) ((IPAddressFamily *)OPENSSL_sk_delete(ossl_check_IPAddressFamily_sk_type(sk), (i)))
1217	#define sk_IPAddressFamily_delete_ptr(sk, ptr) ((IPAddressFamily *)OPENSSL_sk_delete_ptr(ossl_check_IPAddressFamily_sk_type(sk), ossl_check_IPAddressFamily_type(ptr)))
1218	#define sk_IPAddressFamily_push(sk, ptr) OPENSSL_sk_push(ossl_check_IPAddressFamily_sk_type(sk), ossl_check_IPAddressFamily_type(ptr))
1219	#define sk_IPAddressFamily_unshift(sk, ptr) OPENSSL_sk_unshift(ossl_check_IPAddressFamily_sk_type(sk), ossl_check_IPAddressFamily_type(ptr))
1220	#define sk_IPAddressFamily_pop(sk) ((IPAddressFamily *)OPENSSL_sk_pop(ossl_check_IPAddressFamily_sk_type(sk)))
1221	#define sk_IPAddressFamily_shift(sk) ((IPAddressFamily *)OPENSSL_sk_shift(ossl_check_IPAddressFamily_sk_type(sk)))
1222	#define sk_IPAddressFamily_pop_free(sk, freefunc) OPENSSL_sk_pop_free(ossl_check_IPAddressFamily_sk_type(sk),ossl_check_IPAddressFamily_freefunc_type(freefunc))
1223	#define sk_IPAddressFamily_insert(sk, ptr, idx) OPENSSL_sk_insert(ossl_check_IPAddressFamily_sk_type(sk), ossl_check_IPAddressFamily_type(ptr), (idx))
1224	#define sk_IPAddressFamily_set(sk, idx, ptr) ((IPAddressFamily *)OPENSSL_sk_set(ossl_check_IPAddressFamily_sk_type(sk), (idx), ossl_check_IPAddressFamily_type(ptr)))
1225	#define sk_IPAddressFamily_find(sk, ptr) OPENSSL_sk_find(ossl_check_IPAddressFamily_sk_type(sk), ossl_check_IPAddressFamily_type(ptr))
1226	#define sk_IPAddressFamily_find_ex(sk, ptr) OPENSSL_sk_find_ex(ossl_check_IPAddressFamily_sk_type(sk), ossl_check_IPAddressFamily_type(ptr))
1227	#define sk_IPAddressFamily_find_all(sk, ptr, pnum) OPENSSL_sk_find_all(ossl_check_IPAddressFamily_sk_type(sk), ossl_check_IPAddressFamily_type(ptr), pnum)
1228	#define sk_IPAddressFamily_sort(sk) OPENSSL_sk_sort(ossl_check_IPAddressFamily_sk_type(sk))
1229	#define sk_IPAddressFamily_is_sorted(sk) OPENSSL_sk_is_sorted(ossl_check_const_IPAddressFamily_sk_type(sk))
1230	#define sk_IPAddressFamily_dup(sk) ((STACK_OF(IPAddressFamily) *)OPENSSL_sk_dup(ossl_check_const_IPAddressFamily_sk_type(sk)))
1231	#define sk_IPAddressFamily_deep_copy(sk, copyfunc, freefunc) ((STACK_OF(IPAddressFamily) *)OPENSSL_sk_deep_copy(ossl_check_const_IPAddressFamily_sk_type(sk), ossl_check_IPAddressFamily_copyfunc_type(copyfunc), ossl_check_IPAddressFamily_freefunc_type(freefunc)))
1232	#define sk_IPAddressFamily_set_cmp_func(sk, cmp) ((sk_IPAddressFamily_compfunc)OPENSSL_sk_set_cmp_func(ossl_check_IPAddressFamily_sk_type(sk), ossl_check_IPAddressFamily_compfunc_type(cmp)))
1233
1234
1235
1236	typedef STACK_OF(IPAddressFamily) IPAddrBlocks;
1237
1238	DECLARE_ASN1_FUNCTIONS(IPAddressRange)
1239	DECLARE_ASN1_FUNCTIONS(IPAddressOrRange)
1240	DECLARE_ASN1_FUNCTIONS(IPAddressChoice)
1241	DECLARE_ASN1_FUNCTIONS(IPAddressFamily)
1242
1243	/*
1244	* API tag for elements of the ASIdentifer SEQUENCE.
1245	*/
1246	# define V3_ASID_ASNUM 0
1247	# define V3_ASID_RDI 1
1248
1249	/*
1250	* AFI values, assigned by IANA. It'd be nice to make the AFI
1251	* handling code totally generic, but there are too many little things
1252	* that would need to be defined for other address families for it to
1253	* be worth the trouble.
1254	*/
1255	# define IANA_AFI_IPV4 1
1256	# define IANA_AFI_IPV6 2
1257
1258	/*
1259	* Utilities to construct and extract values from RFC3779 extensions,
1260	* since some of the encodings (particularly for IP address prefixes
1261	* and ranges) are a bit tedious to work with directly.
1262	*/
1263	int X509v3_asid_add_inherit(ASIdentifiers *asid, int which);
1264	int X509v3_asid_add_id_or_range(ASIdentifiers *asid, int which,
1265	ASN1_INTEGER min, ASN1_INTEGER max);
1266	int X509v3_addr_add_inherit(IPAddrBlocks *addr,
1267	const unsigned afi, const unsigned *safi);
1268	int X509v3_addr_add_prefix(IPAddrBlocks *addr,
1269	const unsigned afi, const unsigned *safi,
1270	unsigned char *a, const int prefixlen);
1271	int X509v3_addr_add_range(IPAddrBlocks *addr,
1272	const unsigned afi, const unsigned *safi,
1273	unsigned char min, unsigned char max);
1274	unsigned X509v3_addr_get_afi(const IPAddressFamily *f);
1275	int X509v3_addr_get_range(IPAddressOrRange *aor, const unsigned afi,
1276	unsigned char min, unsigned char max,
1277	const int length);
1278
1279	/*
1280	* Canonical forms.
1281	*/
1282	int X509v3_asid_is_canonical(ASIdentifiers *asid);
1283	int X509v3_addr_is_canonical(IPAddrBlocks *addr);
1284	int X509v3_asid_canonize(ASIdentifiers *asid);
1285	int X509v3_addr_canonize(IPAddrBlocks *addr);
1286
1287	/*
1288	* Tests for inheritance and containment.
1289	*/
1290	int X509v3_asid_inherits(ASIdentifiers *asid);
1291	int X509v3_addr_inherits(IPAddrBlocks *addr);
1292	int X509v3_asid_subset(ASIdentifiers a, ASIdentifiers b);
1293	int X509v3_addr_subset(IPAddrBlocks a, IPAddrBlocks b);
1294
1295	/*
1296	* Check whether RFC 3779 extensions nest properly in chains.
1297	*/
1298	int X509v3_asid_validate_path(X509_STORE_CTX *);
1299	int X509v3_addr_validate_path(X509_STORE_CTX *);
1300	int X509v3_asid_validate_resource_set(STACK_OF(X509) *chain,
1301	ASIdentifiers *ext,
1302	int allow_inheritance);
1303	int X509v3_addr_validate_resource_set(STACK_OF(X509) *chain,
1304	IPAddrBlocks *ext, int allow_inheritance);
1305
1306	#endif /* OPENSSL_NO_RFC3779 */
1307
1308	SKM_DEFINE_STACK_OF_INTERNAL(ASN1_STRING, ASN1_STRING, ASN1_STRING)
1309	#define sk_ASN1_STRING_num(sk) OPENSSL_sk_num(ossl_check_const_ASN1_STRING_sk_type(sk))
1310	#define sk_ASN1_STRING_value(sk, idx) ((ASN1_STRING *)OPENSSL_sk_value(ossl_check_const_ASN1_STRING_sk_type(sk), (idx)))
1311	#define sk_ASN1_STRING_new(cmp) ((STACK_OF(ASN1_STRING) *)OPENSSL_sk_new(ossl_check_ASN1_STRING_compfunc_type(cmp)))
1312	#define sk_ASN1_STRING_new_null() ((STACK_OF(ASN1_STRING) *)OPENSSL_sk_new_null())
1313	#define sk_ASN1_STRING_new_reserve(cmp, n) ((STACK_OF(ASN1_STRING) *)OPENSSL_sk_new_reserve(ossl_check_ASN1_STRING_compfunc_type(cmp), (n)))
1314	#define sk_ASN1_STRING_reserve(sk, n) OPENSSL_sk_reserve(ossl_check_ASN1_STRING_sk_type(sk), (n))
1315	#define sk_ASN1_STRING_free(sk) OPENSSL_sk_free(ossl_check_ASN1_STRING_sk_type(sk))
1316	#define sk_ASN1_STRING_zero(sk) OPENSSL_sk_zero(ossl_check_ASN1_STRING_sk_type(sk))
1317	#define sk_ASN1_STRING_delete(sk, i) ((ASN1_STRING *)OPENSSL_sk_delete(ossl_check_ASN1_STRING_sk_type(sk), (i)))
1318	#define sk_ASN1_STRING_delete_ptr(sk, ptr) ((ASN1_STRING *)OPENSSL_sk_delete_ptr(ossl_check_ASN1_STRING_sk_type(sk), ossl_check_ASN1_STRING_type(ptr)))
1319	#define sk_ASN1_STRING_push(sk, ptr) OPENSSL_sk_push(ossl_check_ASN1_STRING_sk_type(sk), ossl_check_ASN1_STRING_type(ptr))
1320	#define sk_ASN1_STRING_unshift(sk, ptr) OPENSSL_sk_unshift(ossl_check_ASN1_STRING_sk_type(sk), ossl_check_ASN1_STRING_type(ptr))
1321	#define sk_ASN1_STRING_pop(sk) ((ASN1_STRING *)OPENSSL_sk_pop(ossl_check_ASN1_STRING_sk_type(sk)))
1322	#define sk_ASN1_STRING_shift(sk) ((ASN1_STRING *)OPENSSL_sk_shift(ossl_check_ASN1_STRING_sk_type(sk)))
1323	#define sk_ASN1_STRING_pop_free(sk, freefunc) OPENSSL_sk_pop_free(ossl_check_ASN1_STRING_sk_type(sk),ossl_check_ASN1_STRING_freefunc_type(freefunc))
1324	#define sk_ASN1_STRING_insert(sk, ptr, idx) OPENSSL_sk_insert(ossl_check_ASN1_STRING_sk_type(sk), ossl_check_ASN1_STRING_type(ptr), (idx))
1325	#define sk_ASN1_STRING_set(sk, idx, ptr) ((ASN1_STRING *)OPENSSL_sk_set(ossl_check_ASN1_STRING_sk_type(sk), (idx), ossl_check_ASN1_STRING_type(ptr)))
1326	#define sk_ASN1_STRING_find(sk, ptr) OPENSSL_sk_find(ossl_check_ASN1_STRING_sk_type(sk), ossl_check_ASN1_STRING_type(ptr))
1327	#define sk_ASN1_STRING_find_ex(sk, ptr) OPENSSL_sk_find_ex(ossl_check_ASN1_STRING_sk_type(sk), ossl_check_ASN1_STRING_type(ptr))
1328	#define sk_ASN1_STRING_find_all(sk, ptr, pnum) OPENSSL_sk_find_all(ossl_check_ASN1_STRING_sk_type(sk), ossl_check_ASN1_STRING_type(ptr), pnum)
1329	#define sk_ASN1_STRING_sort(sk) OPENSSL_sk_sort(ossl_check_ASN1_STRING_sk_type(sk))
1330	#define sk_ASN1_STRING_is_sorted(sk) OPENSSL_sk_is_sorted(ossl_check_const_ASN1_STRING_sk_type(sk))
1331	#define sk_ASN1_STRING_dup(sk) ((STACK_OF(ASN1_STRING) *)OPENSSL_sk_dup(ossl_check_const_ASN1_STRING_sk_type(sk)))
1332	#define sk_ASN1_STRING_deep_copy(sk, copyfunc, freefunc) ((STACK_OF(ASN1_STRING) *)OPENSSL_sk_deep_copy(ossl_check_const_ASN1_STRING_sk_type(sk), ossl_check_ASN1_STRING_copyfunc_type(copyfunc), ossl_check_ASN1_STRING_freefunc_type(freefunc)))
1333	#define sk_ASN1_STRING_set_cmp_func(sk, cmp) ((sk_ASN1_STRING_compfunc)OPENSSL_sk_set_cmp_func(ossl_check_ASN1_STRING_sk_type(sk), ossl_check_ASN1_STRING_compfunc_type(cmp)))
1334
1335
1336	/*
1337	* Admission Syntax
1338	*/
1339	typedef struct NamingAuthority_st NAMING_AUTHORITY;
1340	typedef struct ProfessionInfo_st PROFESSION_INFO;
1341	typedef struct Admissions_st ADMISSIONS;
1342	typedef struct AdmissionSyntax_st ADMISSION_SYNTAX;
1343	DECLARE_ASN1_FUNCTIONS(NAMING_AUTHORITY)
1344	DECLARE_ASN1_FUNCTIONS(PROFESSION_INFO)
1345	DECLARE_ASN1_FUNCTIONS(ADMISSIONS)
1346	DECLARE_ASN1_FUNCTIONS(ADMISSION_SYNTAX)
1347	SKM_DEFINE_STACK_OF_INTERNAL(PROFESSION_INFO, PROFESSION_INFO, PROFESSION_INFO)
1348	#define sk_PROFESSION_INFO_num(sk) OPENSSL_sk_num(ossl_check_const_PROFESSION_INFO_sk_type(sk))
1349	#define sk_PROFESSION_INFO_value(sk, idx) ((PROFESSION_INFO *)OPENSSL_sk_value(ossl_check_const_PROFESSION_INFO_sk_type(sk), (idx)))
1350	#define sk_PROFESSION_INFO_new(cmp) ((STACK_OF(PROFESSION_INFO) *)OPENSSL_sk_new(ossl_check_PROFESSION_INFO_compfunc_type(cmp)))
1351	#define sk_PROFESSION_INFO_new_null() ((STACK_OF(PROFESSION_INFO) *)OPENSSL_sk_new_null())
1352	#define sk_PROFESSION_INFO_new_reserve(cmp, n) ((STACK_OF(PROFESSION_INFO) *)OPENSSL_sk_new_reserve(ossl_check_PROFESSION_INFO_compfunc_type(cmp), (n)))
1353	#define sk_PROFESSION_INFO_reserve(sk, n) OPENSSL_sk_reserve(ossl_check_PROFESSION_INFO_sk_type(sk), (n))
1354	#define sk_PROFESSION_INFO_free(sk) OPENSSL_sk_free(ossl_check_PROFESSION_INFO_sk_type(sk))
1355	#define sk_PROFESSION_INFO_zero(sk) OPENSSL_sk_zero(ossl_check_PROFESSION_INFO_sk_type(sk))
1356	#define sk_PROFESSION_INFO_delete(sk, i) ((PROFESSION_INFO *)OPENSSL_sk_delete(ossl_check_PROFESSION_INFO_sk_type(sk), (i)))
1357	#define sk_PROFESSION_INFO_delete_ptr(sk, ptr) ((PROFESSION_INFO *)OPENSSL_sk_delete_ptr(ossl_check_PROFESSION_INFO_sk_type(sk), ossl_check_PROFESSION_INFO_type(ptr)))
1358	#define sk_PROFESSION_INFO_push(sk, ptr) OPENSSL_sk_push(ossl_check_PROFESSION_INFO_sk_type(sk), ossl_check_PROFESSION_INFO_type(ptr))
1359	#define sk_PROFESSION_INFO_unshift(sk, ptr) OPENSSL_sk_unshift(ossl_check_PROFESSION_INFO_sk_type(sk), ossl_check_PROFESSION_INFO_type(ptr))
1360	#define sk_PROFESSION_INFO_pop(sk) ((PROFESSION_INFO *)OPENSSL_sk_pop(ossl_check_PROFESSION_INFO_sk_type(sk)))
1361	#define sk_PROFESSION_INFO_shift(sk) ((PROFESSION_INFO *)OPENSSL_sk_shift(ossl_check_PROFESSION_INFO_sk_type(sk)))
1362	#define sk_PROFESSION_INFO_pop_free(sk, freefunc) OPENSSL_sk_pop_free(ossl_check_PROFESSION_INFO_sk_type(sk),ossl_check_PROFESSION_INFO_freefunc_type(freefunc))
1363	#define sk_PROFESSION_INFO_insert(sk, ptr, idx) OPENSSL_sk_insert(ossl_check_PROFESSION_INFO_sk_type(sk), ossl_check_PROFESSION_INFO_type(ptr), (idx))
1364	#define sk_PROFESSION_INFO_set(sk, idx, ptr) ((PROFESSION_INFO *)OPENSSL_sk_set(ossl_check_PROFESSION_INFO_sk_type(sk), (idx), ossl_check_PROFESSION_INFO_type(ptr)))
1365	#define sk_PROFESSION_INFO_find(sk, ptr) OPENSSL_sk_find(ossl_check_PROFESSION_INFO_sk_type(sk), ossl_check_PROFESSION_INFO_type(ptr))
1366	#define sk_PROFESSION_INFO_find_ex(sk, ptr) OPENSSL_sk_find_ex(ossl_check_PROFESSION_INFO_sk_type(sk), ossl_check_PROFESSION_INFO_type(ptr))
1367	#define sk_PROFESSION_INFO_find_all(sk, ptr, pnum) OPENSSL_sk_find_all(ossl_check_PROFESSION_INFO_sk_type(sk), ossl_check_PROFESSION_INFO_type(ptr), pnum)
1368	#define sk_PROFESSION_INFO_sort(sk) OPENSSL_sk_sort(ossl_check_PROFESSION_INFO_sk_type(sk))
1369	#define sk_PROFESSION_INFO_is_sorted(sk) OPENSSL_sk_is_sorted(ossl_check_const_PROFESSION_INFO_sk_type(sk))
1370	#define sk_PROFESSION_INFO_dup(sk) ((STACK_OF(PROFESSION_INFO) *)OPENSSL_sk_dup(ossl_check_const_PROFESSION_INFO_sk_type(sk)))
1371	#define sk_PROFESSION_INFO_deep_copy(sk, copyfunc, freefunc) ((STACK_OF(PROFESSION_INFO) *)OPENSSL_sk_deep_copy(ossl_check_const_PROFESSION_INFO_sk_type(sk), ossl_check_PROFESSION_INFO_copyfunc_type(copyfunc), ossl_check_PROFESSION_INFO_freefunc_type(freefunc)))
1372	#define sk_PROFESSION_INFO_set_cmp_func(sk, cmp) ((sk_PROFESSION_INFO_compfunc)OPENSSL_sk_set_cmp_func(ossl_check_PROFESSION_INFO_sk_type(sk), ossl_check_PROFESSION_INFO_compfunc_type(cmp)))
1373	SKM_DEFINE_STACK_OF_INTERNAL(ADMISSIONS, ADMISSIONS, ADMISSIONS)
1374	#define sk_ADMISSIONS_num(sk) OPENSSL_sk_num(ossl_check_const_ADMISSIONS_sk_type(sk))
1375	#define sk_ADMISSIONS_value(sk, idx) ((ADMISSIONS *)OPENSSL_sk_value(ossl_check_const_ADMISSIONS_sk_type(sk), (idx)))
1376	#define sk_ADMISSIONS_new(cmp) ((STACK_OF(ADMISSIONS) *)OPENSSL_sk_new(ossl_check_ADMISSIONS_compfunc_type(cmp)))
1377	#define sk_ADMISSIONS_new_null() ((STACK_OF(ADMISSIONS) *)OPENSSL_sk_new_null())
1378	#define sk_ADMISSIONS_new_reserve(cmp, n) ((STACK_OF(ADMISSIONS) *)OPENSSL_sk_new_reserve(ossl_check_ADMISSIONS_compfunc_type(cmp), (n)))
1379	#define sk_ADMISSIONS_reserve(sk, n) OPENSSL_sk_reserve(ossl_check_ADMISSIONS_sk_type(sk), (n))
1380	#define sk_ADMISSIONS_free(sk) OPENSSL_sk_free(ossl_check_ADMISSIONS_sk_type(sk))
1381	#define sk_ADMISSIONS_zero(sk) OPENSSL_sk_zero(ossl_check_ADMISSIONS_sk_type(sk))
1382	#define sk_ADMISSIONS_delete(sk, i) ((ADMISSIONS *)OPENSSL_sk_delete(ossl_check_ADMISSIONS_sk_type(sk), (i)))
1383	#define sk_ADMISSIONS_delete_ptr(sk, ptr) ((ADMISSIONS *)OPENSSL_sk_delete_ptr(ossl_check_ADMISSIONS_sk_type(sk), ossl_check_ADMISSIONS_type(ptr)))
1384	#define sk_ADMISSIONS_push(sk, ptr) OPENSSL_sk_push(ossl_check_ADMISSIONS_sk_type(sk), ossl_check_ADMISSIONS_type(ptr))
1385	#define sk_ADMISSIONS_unshift(sk, ptr) OPENSSL_sk_unshift(ossl_check_ADMISSIONS_sk_type(sk), ossl_check_ADMISSIONS_type(ptr))
1386	#define sk_ADMISSIONS_pop(sk) ((ADMISSIONS *)OPENSSL_sk_pop(ossl_check_ADMISSIONS_sk_type(sk)))
1387	#define sk_ADMISSIONS_shift(sk) ((ADMISSIONS *)OPENSSL_sk_shift(ossl_check_ADMISSIONS_sk_type(sk)))
1388	#define sk_ADMISSIONS_pop_free(sk, freefunc) OPENSSL_sk_pop_free(ossl_check_ADMISSIONS_sk_type(sk),ossl_check_ADMISSIONS_freefunc_type(freefunc))
1389	#define sk_ADMISSIONS_insert(sk, ptr, idx) OPENSSL_sk_insert(ossl_check_ADMISSIONS_sk_type(sk), ossl_check_ADMISSIONS_type(ptr), (idx))
1390	#define sk_ADMISSIONS_set(sk, idx, ptr) ((ADMISSIONS *)OPENSSL_sk_set(ossl_check_ADMISSIONS_sk_type(sk), (idx), ossl_check_ADMISSIONS_type(ptr)))
1391	#define sk_ADMISSIONS_find(sk, ptr) OPENSSL_sk_find(ossl_check_ADMISSIONS_sk_type(sk), ossl_check_ADMISSIONS_type(ptr))
1392	#define sk_ADMISSIONS_find_ex(sk, ptr) OPENSSL_sk_find_ex(ossl_check_ADMISSIONS_sk_type(sk), ossl_check_ADMISSIONS_type(ptr))
1393	#define sk_ADMISSIONS_find_all(sk, ptr, pnum) OPENSSL_sk_find_all(ossl_check_ADMISSIONS_sk_type(sk), ossl_check_ADMISSIONS_type(ptr), pnum)
1394	#define sk_ADMISSIONS_sort(sk) OPENSSL_sk_sort(ossl_check_ADMISSIONS_sk_type(sk))
1395	#define sk_ADMISSIONS_is_sorted(sk) OPENSSL_sk_is_sorted(ossl_check_const_ADMISSIONS_sk_type(sk))
1396	#define sk_ADMISSIONS_dup(sk) ((STACK_OF(ADMISSIONS) *)OPENSSL_sk_dup(ossl_check_const_ADMISSIONS_sk_type(sk)))
1397	#define sk_ADMISSIONS_deep_copy(sk, copyfunc, freefunc) ((STACK_OF(ADMISSIONS) *)OPENSSL_sk_deep_copy(ossl_check_const_ADMISSIONS_sk_type(sk), ossl_check_ADMISSIONS_copyfunc_type(copyfunc), ossl_check_ADMISSIONS_freefunc_type(freefunc)))
1398	#define sk_ADMISSIONS_set_cmp_func(sk, cmp) ((sk_ADMISSIONS_compfunc)OPENSSL_sk_set_cmp_func(ossl_check_ADMISSIONS_sk_type(sk), ossl_check_ADMISSIONS_compfunc_type(cmp)))
1399
1400	typedef STACK_OF(PROFESSION_INFO) PROFESSION_INFOS;
1401
1402	const ASN1_OBJECT *NAMING_AUTHORITY_get0_authorityId(
1403	const NAMING_AUTHORITY *n);
1404	const ASN1_IA5STRING *NAMING_AUTHORITY_get0_authorityURL(
1405	const NAMING_AUTHORITY *n);
1406	const ASN1_STRING *NAMING_AUTHORITY_get0_authorityText(
1407	const NAMING_AUTHORITY *n);
1408	void NAMING_AUTHORITY_set0_authorityId(NAMING_AUTHORITY *n,
1409	ASN1_OBJECT* namingAuthorityId);
1410	void NAMING_AUTHORITY_set0_authorityURL(NAMING_AUTHORITY *n,
1411	ASN1_IA5STRING* namingAuthorityUrl);
1412	void NAMING_AUTHORITY_set0_authorityText(NAMING_AUTHORITY *n,
1413	ASN1_STRING* namingAuthorityText);
1414
1415	const GENERAL_NAME *ADMISSION_SYNTAX_get0_admissionAuthority(
1416	const ADMISSION_SYNTAX *as);
1417	void ADMISSION_SYNTAX_set0_admissionAuthority(
1418	ADMISSION_SYNTAX as, GENERAL_NAME aa);
1419	const STACK_OF(ADMISSIONS) *ADMISSION_SYNTAX_get0_contentsOfAdmissions(
1420	const ADMISSION_SYNTAX *as);
1421	void ADMISSION_SYNTAX_set0_contentsOfAdmissions(
1422	ADMISSION_SYNTAX as, STACK_OF(ADMISSIONS) a);
1423	const GENERAL_NAME ADMISSIONS_get0_admissionAuthority(const ADMISSIONS a);
1424	void ADMISSIONS_set0_admissionAuthority(ADMISSIONS a, GENERAL_NAME aa);
1425	const NAMING_AUTHORITY ADMISSIONS_get0_namingAuthority(const ADMISSIONS a);
1426	void ADMISSIONS_set0_namingAuthority(ADMISSIONS a, NAMING_AUTHORITY na);
1427	const PROFESSION_INFOS ADMISSIONS_get0_professionInfos(const ADMISSIONS a);
1428	void ADMISSIONS_set0_professionInfos(ADMISSIONS a, PROFESSION_INFOS pi);
1429	const ASN1_OCTET_STRING *PROFESSION_INFO_get0_addProfessionInfo(
1430	const PROFESSION_INFO *pi);
1431	void PROFESSION_INFO_set0_addProfessionInfo(
1432	PROFESSION_INFO pi, ASN1_OCTET_STRING aos);
1433	const NAMING_AUTHORITY *PROFESSION_INFO_get0_namingAuthority(
1434	const PROFESSION_INFO *pi);
1435	void PROFESSION_INFO_set0_namingAuthority(
1436	PROFESSION_INFO pi, NAMING_AUTHORITY na);
1437	const STACK_OF(ASN1_STRING) *PROFESSION_INFO_get0_professionItems(
1438	const PROFESSION_INFO *pi);
1439	void PROFESSION_INFO_set0_professionItems(
1440	PROFESSION_INFO pi, STACK_OF(ASN1_STRING) as);
1441	const STACK_OF(ASN1_OBJECT) *PROFESSION_INFO_get0_professionOIDs(
1442	const PROFESSION_INFO *pi);
1443	void PROFESSION_INFO_set0_professionOIDs(
1444	PROFESSION_INFO pi, STACK_OF(ASN1_OBJECT) po);
1445	const ASN1_PRINTABLESTRING *PROFESSION_INFO_get0_registrationNumber(
1446	const PROFESSION_INFO *pi);
1447	void PROFESSION_INFO_set0_registrationNumber(
1448	PROFESSION_INFO pi, ASN1_PRINTABLESTRING rn);
1449
1450	# ifdef __cplusplus
1451	}
1452	# endif
1453	#endif

注意: 瀏覽 TracBrowser 來幫助您使用儲存庫瀏覽器

source: vbox/trunk/src/libs/openssl-3.1.7/gen-includes/openssl/x509v3.h@ 107278

以其他格式下載: