tls13subcerts.h - mozsearch

Enable keyboard shortcuts

/* -*- Mode: C; tab-width: 8; indent-tabs-mode: nil; c-basic-offset: 4 -*- */

/*

 * This file is PRIVATE to SSL.

 * This Source Code Form is subject to the terms of the Mozilla Public

 * License, v. 2.0. If a copy of the MPL was not distributed with this

 * file, You can obtain one at http://mozilla.org/MPL/2.0/. */

#ifndef __tls13subcerts_h_

#define __tls13subcerts_h_

struct sslDelegatedCredentialStr {

    /* The number of seconds for which the delegated credential (DC) is valid

     * following the notBefore parameter of the delegation certificate.

*/

    PRUint32 validTime;

    /* The signature algorithm of the DC public key. This expected to the same

     * as CertificateVerify.scheme.

*/

    SSLSignatureScheme expectedCertVerifyAlg;

    /* The DER-encoded SubjectPublicKeyInfo, the DC public key.

*/

    SECItem derSpki;

    /* The decoded SubjectPublicKeyInfo parsed from |derSpki|. */

    CERTSubjectPublicKeyInfo *spki;

    /* The signature algorithm used to verify the DC signature. */

    SSLSignatureScheme alg;

    /* The DC signature. */

    SECItem signature;

};

SECStatus tls13_ReadDelegatedCredential(PRUint8 *b,

                                        PRUint32 length,

                                        sslDelegatedCredential **dcp);

void tls13_DestroyDelegatedCredential(sslDelegatedCredential *dc);

PRBool tls13_IsVerifyingWithDelegatedCredential(const sslSocket *ss);

PRBool tls13_IsSigningWithDelegatedCredential(const sslSocket *ss);

SECStatus tls13_MaybeSetDelegatedCredential(sslSocket *ss);

SECStatus tls13_VerifyDelegatedCredential(sslSocket *ss,

                                          sslDelegatedCredential *dc);

SECStatus SSLExp_DelegateCredential(const CERTCertificate *cert,

                                    const SECKEYPrivateKey *certPriv,

                                    const SECKEYPublicKey *dcPub,

                                    SSLSignatureScheme dcCertVerifyAlg,

                                    PRUint32 dcValidFor,

                                    PRTime now,

                                    SECItem *out);

#endif