cv_cert.h

Go to the documentation of this file.

/*
 * Copyright (c) 2010-2012 Dominik Oepen and Frank Morgner
 *
 * This file is part of OpenPACE.
 *
 * OpenPACE is free software: you can redistribute it and/or modify it under
 * the terms of the GNU General Public License as published by the Free
 * Software Foundation, either version 3 of the License, or (at your option)
 * any later version.
 *
 * OpenPACE is distributed in the hope that it will be useful, but WITHOUT ANY
 * WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS
 * FOR A PARTICULAR PURPOSE.  See the GNU General Public License for more
 * details.
 *
 * You should have received a copy of the GNU General Public License along with
 * OpenPACE.  If not, see <http://www.gnu.org/licenses/>.
 *
 * Additional permission under GNU GPL version 3 section 7
 *
 * If you modify this Program, or any covered work, by linking or combining it
 * with OpenSSL (or a modified version of that library), containing
 * parts covered by the terms of OpenSSL's license, the licensors of
 * this Program grant you additional permission to convey the resulting work.
 * Corresponding Source for a non-source form of such a combination shall include
 * the source code for the parts of OpenSSL used as well as that of the
 * covered work.
 *
 * If you modify this Program, or any covered work, by linking or combining it
 * with OpenSC (or a modified version of that library), containing
 * parts covered by the terms of OpenSC's license, the licensors of
 * this Program grant you additional permission to convey the resulting work. 
 * Corresponding Source for a non-source form of such a combination shall include
 * the source code for the parts of OpenSC used as well as that of the
 * covered work.
 */
 
#ifndef CVC_CERT_H_
#define CVC_CERT_H_
 
#ifdef __cplusplus
extern "C" {
#endif
 
#include <eac/objects.h>
#include <openssl/asn1.h>
#include <openssl/asn1t.h>
#include <openssl/bio.h>
 
struct eac_ctx;
 
#ifndef ASN1_APP_IMP
 
#define ASN1_APP_IMP(stname, field, type, tag) ASN1_EX_TYPE(ASN1_TFLG_IMPTAG|ASN1_TFLG_APPLICATION, tag, stname, field, type)
#endif
#ifndef ASN1_APP_IMP_OPT
 
#define ASN1_APP_IMP_OPT(stname, field, type, tag) ASN1_EX_TYPE(ASN1_TFLG_IMPTAG|ASN1_TFLG_APPLICATION|ASN1_TFLG_OPTIONAL, tag, stname, field, type)
#endif
#ifndef ASN1_APP_EXP_OPT
 
#define ASN1_APP_EXP_OPT(stname, field, type, tag) ASN1_EX_TYPE(ASN1_TFLG_EXPTAG|ASN1_TFLG_APPLICATION|ASN1_TFLG_OPTIONAL, tag, stname, field, type)
#endif
#ifndef ASN1_APP_IMP_SEQUENCE_OF_OPT
#define ASN1_APP_IMP_SEQUENCE_OF_OPT(stname, field, type, tag) \
    ASN1_EX_TYPE(ASN1_TFLG_SEQUENCE_OF|ASN1_TFLG_IMPTAG|ASN1_TFLG_APPLICATION|ASN1_TFLG_OPTIONAL, tag, stname, field, type)
#endif
 
enum cvc_terminal_role {
    CVC_Terminal = 0,
    CVC_DocVer, /* XXX Ugly */
    CVC_DV,
    CVC_CVCA
};
 
/* Number of bits and bytes of the relative authorization field in the CHAT.
 * See TR-03110 pp. 85 */
#define EAC_AT_CHAT_BYTES 5
#define EAC_AT_CHAT_BITS 38
#define EAC_IS_CHAT_BYTES 1
#define EAC_IS_CHAT_BITS 6
#define EAC_ST_CHAT_BYTES 1
#define EAC_ST_CHAT_BITS 6
 
typedef struct cvc_chat_seq_st {
    ASN1_OBJECT *terminal_type;
    ASN1_OCTET_STRING *relative_authorization;
} CVC_CHAT_SEQ;
typedef CVC_CHAT_SEQ CVC_CHAT;
DECLARE_ASN1_FUNCTIONS(CVC_CHAT)
 
 
typedef struct cvc_pubkey_st {
    ASN1_OBJECT *oid;
    ASN1_OCTET_STRING *cont1;
    ASN1_OCTET_STRING *cont2;
    ASN1_OCTET_STRING *cont3;
    ASN1_OCTET_STRING *cont4;
    ASN1_OCTET_STRING *cont5;
    ASN1_OCTET_STRING *cont6;
    ASN1_OCTET_STRING *cont7;
} CVC_PUBKEY_BODY;
typedef CVC_PUBKEY_BODY CVC_PUBKEY;
DECLARE_ASN1_FUNCTIONS(CVC_PUBKEY)
DECLARE_ASN1_ITEM(CVC_PUBKEY)
 
 
typedef struct cvc_discretionary_data_template_seq_st {
    ASN1_OBJECT *type;
    ASN1_OCTET_STRING *discretionary_data1;
    ASN1_OCTET_STRING *discretionary_data2;
    ASN1_OCTET_STRING *discretionary_data3;
} CVC_DISCRETIONARY_DATA_TEMPLATE_SEQ;
typedef CVC_DISCRETIONARY_DATA_TEMPLATE_SEQ CVC_DISCRETIONARY_DATA_TEMPLATE;
DECLARE_ASN1_FUNCTIONS(CVC_DISCRETIONARY_DATA_TEMPLATE)
DECLARE_ASN1_ITEM(CVC_DISCRETIONARY_DATA_TEMPLATE)
 
 
 
typedef struct cvc_cert_body_seq_st {
    ASN1_INTEGER *certificate_profile_identifier;
    ASN1_UTF8STRING *certificate_authority_reference;
    CVC_PUBKEY *public_key;
    ASN1_UTF8STRING *certificate_holder_reference;
    CVC_CHAT *chat;
    ASN1_OCTET_STRING *certificate_effective_date;
    ASN1_OCTET_STRING *certificate_expiration_date;
    STACK_OF(CVC_DISCRETIONARY_DATA_TEMPLATE) *certificate_extensions;
} CVC_CERT_BODY_SEQ;
typedef CVC_CERT_BODY_SEQ CVC_CERT_BODY;
DECLARE_ASN1_FUNCTIONS(CVC_CERT_BODY)
DECLARE_ASN1_ITEM(CVC_CERT_BODY)
 
 
typedef struct cvc_cert_seq_st {
    CVC_CERT_BODY *body;
    ASN1_OCTET_STRING *signature;
} CVC_CERT_SEQ;
typedef CVC_CERT_SEQ CVC_CERT;
 
typedef struct cvc_commcert_seq_st {
    STACK_OF(ASN1_OCTET_STRING) *values;
} CVC_COMMCERT_SEQ;
 typedef struct cvc_certificate_description_st {
    ASN1_OBJECT *descriptionType;
    ASN1_UTF8STRING *issuerName;
    ASN1_PRINTABLESTRING *issuerURL;
    ASN1_UTF8STRING *subjectName;
    ASN1_PRINTABLESTRING *subjectURL;
    ASN1_OCTET_STRING *termsOfUsage;
    ASN1_PRINTABLESTRING *redirectURL;
    CVC_COMMCERT_SEQ *commCertificates;
} CVC_CERTIFICATE_DESCRIPTION;
DECLARE_ASN1_FUNCTIONS(CVC_CERTIFICATE_DESCRIPTION)
 
 
 
typedef struct cvc_cert_request_body_seq_st {
    ASN1_INTEGER *certificate_profile_identifier;
    ASN1_UTF8STRING *certificate_authority_reference;
    CVC_PUBKEY *public_key;
    ASN1_UTF8STRING *certificate_holder_reference;
    STACK_OF(CVC_DISCRETIONARY_DATA_TEMPLATE) *certificate_extensions;
} CVC_CERT_REQUEST_BODY_SEQ;
typedef CVC_CERT_REQUEST_BODY_SEQ CVC_CERT_REQUEST_BODY;
DECLARE_ASN1_FUNCTIONS(CVC_CERT_REQUEST_BODY)
 
 
typedef struct cvc_cert_request_seq_st {
    CVC_CERT_REQUEST_BODY *body;
    ASN1_OCTET_STRING *inner_signature;
} CVC_CERT_REQUEST_SEQ;
typedef CVC_CERT_REQUEST_SEQ CVC_CERT_REQUEST;
DECLARE_ASN1_FUNCTIONS(CVC_CERT_REQUEST)
 
 
typedef struct cvc_cert_authentication_request_seq_st {
    CVC_CERT_REQUEST *request;
    ASN1_UTF8STRING *certificate_authority_reference;
    ASN1_OCTET_STRING *outer_signature;
} CVC_CERT_AUTHENTICATION_REQUEST_SEQ;
typedef CVC_CERT_AUTHENTICATION_REQUEST_SEQ CVC_CERT_AUTHENTICATION_REQUEST;
DECLARE_ASN1_FUNCTIONS(CVC_CERT_AUTHENTICATION_REQUEST)
 
 
CVC_CERT *CVC_d2i_CVC_CERT(CVC_CERT **cert, const unsigned char **in, long len);
 
int i2d_CVC_CERT(
#if OPENSSL_VERSION_NUMBER >= 0x30000000L
  const
#endif
  CVC_CERT *a, unsigned char **out);
 
#define CVC_CERT_dup(x) ASN1_dup_of(CVC_CERT, i2d_CVC_CERT, CVC_d2i_CVC_CERT, x)
 
#define CVC_PUBKEY_dup(x) ASN1_dup_of(CVC_PUBKEY, i2d_CVC_PUBKEY, d2i_CVC_PUBKEY, x)
 
#define CVC_CHAT_dup(x) ASN1_dup_of(CVC_CHAT, i2d_CVC_CHAT, d2i_CVC_CHAT, x)
 
CVC_CERT *CVC_CERT_new(void);
void CVC_CERT_free(CVC_CERT *a);
 
CVC_CERT *d2i_CVC_CERT_bio(BIO *bp, CVC_CERT **cvc);
 
EVP_PKEY *
CVC_pubkey2pkey(const CVC_CERT *cert, BN_CTX *bn_ctx, EVP_PKEY *out);
 
CVC_PUBKEY *
CVC_pkey2pubkey(int all_parameters, int protocol, EVP_PKEY *key,
        BN_CTX *bn_ctx, CVC_PUBKEY *out);
 
 
 
int certificate_description_print(BIO *bio,
        const CVC_CERTIFICATE_DESCRIPTION *desc, int indent);
 
int
cvc_chat_print(BIO *bio, const CVC_CHAT *chat, int indent);
 
int
cvc_chat_print_authorizations(BIO *bio, const CVC_CHAT *chat, int indent);
 
int
CVC_print(BIO *bio, const CVC_CERT *cv, int indent);
 
int certificate_request_print(BIO *bio,
        const CVC_CERT_REQUEST *request, int indent);
 
int certificate_authentication_request_print(BIO *bio,
        const CVC_CERT_AUTHENTICATION_REQUEST *authentication, int indent);
 
const CVC_CHAT *
cvc_get_chat(const CVC_CERT *cvc);
 
enum cvc_terminal_role
CVC_get_role(const CVC_CHAT *chat);
 
short
CVC_get_profile_identifier(const CVC_CERT *cert);
char *
CVC_get_car(const CVC_CERT *cert);
char *
CVC_get_chr(const CVC_CERT *cert);
char *
CVC_get_effective_date(const CVC_CERT *cert);
char *
CVC_get_expiration_date(const CVC_CERT *cert);
 
int
CVC_verify_signature(const CVC_CERT *cert, int protocol, EVP_PKEY *key);
 
int
CVC_verify_request_signature(const CVC_CERT_REQUEST *request);
 
int
CVC_verify_authentication_request_signatures(struct eac_ctx *ctx,
        const CVC_CERT_AUTHENTICATION_REQUEST *authentication);
 
int
CVC_check_description(const CVC_CERT *cv, const unsigned char *cert_desc_in,
        const unsigned int cert_desc_in_len);
 
BUF_MEM *CVC_hash_description(const CVC_CERT *cv,
        const unsigned char *cert_desc, size_t cert_desc_len);
 
#ifdef __cplusplus
}
#endif
#endif /* CVC_CERT_H_ */