File Coverage

/usr/include/openssl/x509v3.h
Criterion Covered Total %
statement 8 9 88.8
branch n/a
condition n/a
subroutine n/a
pod n/a
total 8 9 88.8


line stmt bran cond sub pod time code
1             /*
2             * WARNING: do not edit!
3             * Generated by Makefile from ../include/openssl/x509v3.h.in
4             *
5             * Copyright 1999-2023 The OpenSSL Project Authors. All Rights Reserved.
6             *
7             * Licensed under the Apache License 2.0 (the "License"). You may not use
8             * this file except in compliance with the License. You can obtain a copy
9             * in the file LICENSE in the source distribution or at
10             * https://www.openssl.org/source/license.html
11             */
12              
13              
14              
15             #ifndef OPENSSL_X509V3_H
16             # define OPENSSL_X509V3_H
17             # pragma once
18              
19             # include
20             # ifndef OPENSSL_NO_DEPRECATED_3_0
21             # define HEADER_X509V3_H
22             # endif
23              
24             # include
25             # include
26             # include
27             # include
28              
29             #ifdef __cplusplus
30             extern "C" {
31             #endif
32              
33             /* Forward reference */
34             struct v3_ext_method;
35             struct v3_ext_ctx;
36              
37             /* Useful typedefs */
38              
39             typedef void *(*X509V3_EXT_NEW)(void);
40             typedef void (*X509V3_EXT_FREE) (void *);
41             typedef void *(*X509V3_EXT_D2I)(void *, const unsigned char **, long);
42             typedef int (*X509V3_EXT_I2D) (const void *, unsigned char **);
43             typedef STACK_OF(CONF_VALUE) *
44             (*X509V3_EXT_I2V) (const struct v3_ext_method *method, void *ext,
45             STACK_OF(CONF_VALUE) *extlist);
46             typedef void *(*X509V3_EXT_V2I)(const struct v3_ext_method *method,
47             struct v3_ext_ctx *ctx,
48             STACK_OF(CONF_VALUE) *values);
49             typedef char *(*X509V3_EXT_I2S)(const struct v3_ext_method *method,
50             void *ext);
51             typedef void *(*X509V3_EXT_S2I)(const struct v3_ext_method *method,
52             struct v3_ext_ctx *ctx, const char *str);
53             typedef int (*X509V3_EXT_I2R) (const struct v3_ext_method *method, void *ext,
54             BIO *out, int indent);
55             typedef void *(*X509V3_EXT_R2I)(const struct v3_ext_method *method,
56             struct v3_ext_ctx *ctx, const char *str);
57              
58             /* V3 extension structure */
59              
60             struct v3_ext_method {
61             int ext_nid;
62             int ext_flags;
63             /* If this is set the following four fields are ignored */
64             ASN1_ITEM_EXP *it;
65             /* Old style ASN1 calls */
66             X509V3_EXT_NEW ext_new;
67             X509V3_EXT_FREE ext_free;
68             X509V3_EXT_D2I d2i;
69             X509V3_EXT_I2D i2d;
70             /* The following pair is used for string extensions */
71             X509V3_EXT_I2S i2s;
72             X509V3_EXT_S2I s2i;
73             /* The following pair is used for multi-valued extensions */
74             X509V3_EXT_I2V i2v;
75             X509V3_EXT_V2I v2i;
76             /* The following are used for raw extensions */
77             X509V3_EXT_I2R i2r;
78             X509V3_EXT_R2I r2i;
79             void *usr_data; /* Any extension specific data */
80             };
81              
82             typedef struct X509V3_CONF_METHOD_st {
83             char *(*get_string) (void *db, const char *section, const char *value);
84             STACK_OF(CONF_VALUE) *(*get_section) (void *db, const char *section);
85             void (*free_string) (void *db, char *string);
86             void (*free_section) (void *db, STACK_OF(CONF_VALUE) *section);
87             } X509V3_CONF_METHOD;
88              
89             /* Context specific info for producing X509 v3 extensions*/
90             struct v3_ext_ctx {
91             # define X509V3_CTX_TEST 0x1
92             # ifndef OPENSSL_NO_DEPRECATED_3_0
93             # define CTX_TEST X509V3_CTX_TEST
94             # endif
95             # define X509V3_CTX_REPLACE 0x2
96             int flags;
97             X509 *issuer_cert;
98             X509 *subject_cert;
99             X509_REQ *subject_req;
100             X509_CRL *crl;
101             X509V3_CONF_METHOD *db_meth;
102             void *db;
103             EVP_PKEY *issuer_pkey;
104             /* Maybe more here */
105             };
106              
107             typedef struct v3_ext_method X509V3_EXT_METHOD;
108              
109             SKM_DEFINE_STACK_OF_INTERNAL(X509V3_EXT_METHOD, X509V3_EXT_METHOD, X509V3_EXT_METHOD)
110             #define sk_X509V3_EXT_METHOD_num(sk) OPENSSL_sk_num(ossl_check_const_X509V3_EXT_METHOD_sk_type(sk))
111             #define sk_X509V3_EXT_METHOD_value(sk, idx) ((X509V3_EXT_METHOD *)OPENSSL_sk_value(ossl_check_const_X509V3_EXT_METHOD_sk_type(sk), (idx)))
112             #define sk_X509V3_EXT_METHOD_new(cmp) ((STACK_OF(X509V3_EXT_METHOD) *)OPENSSL_sk_new(ossl_check_X509V3_EXT_METHOD_compfunc_type(cmp)))
113             #define sk_X509V3_EXT_METHOD_new_null() ((STACK_OF(X509V3_EXT_METHOD) *)OPENSSL_sk_new_null())
114             #define sk_X509V3_EXT_METHOD_new_reserve(cmp, n) ((STACK_OF(X509V3_EXT_METHOD) *)OPENSSL_sk_new_reserve(ossl_check_X509V3_EXT_METHOD_compfunc_type(cmp), (n)))
115             #define sk_X509V3_EXT_METHOD_reserve(sk, n) OPENSSL_sk_reserve(ossl_check_X509V3_EXT_METHOD_sk_type(sk), (n))
116             #define sk_X509V3_EXT_METHOD_free(sk) OPENSSL_sk_free(ossl_check_X509V3_EXT_METHOD_sk_type(sk))
117             #define sk_X509V3_EXT_METHOD_zero(sk) OPENSSL_sk_zero(ossl_check_X509V3_EXT_METHOD_sk_type(sk))
118             #define sk_X509V3_EXT_METHOD_delete(sk, i) ((X509V3_EXT_METHOD *)OPENSSL_sk_delete(ossl_check_X509V3_EXT_METHOD_sk_type(sk), (i)))
119             #define sk_X509V3_EXT_METHOD_delete_ptr(sk, ptr) ((X509V3_EXT_METHOD *)OPENSSL_sk_delete_ptr(ossl_check_X509V3_EXT_METHOD_sk_type(sk), ossl_check_X509V3_EXT_METHOD_type(ptr)))
120             #define sk_X509V3_EXT_METHOD_push(sk, ptr) OPENSSL_sk_push(ossl_check_X509V3_EXT_METHOD_sk_type(sk), ossl_check_X509V3_EXT_METHOD_type(ptr))
121             #define sk_X509V3_EXT_METHOD_unshift(sk, ptr) OPENSSL_sk_unshift(ossl_check_X509V3_EXT_METHOD_sk_type(sk), ossl_check_X509V3_EXT_METHOD_type(ptr))
122             #define sk_X509V3_EXT_METHOD_pop(sk) ((X509V3_EXT_METHOD *)OPENSSL_sk_pop(ossl_check_X509V3_EXT_METHOD_sk_type(sk)))
123             #define sk_X509V3_EXT_METHOD_shift(sk) ((X509V3_EXT_METHOD *)OPENSSL_sk_shift(ossl_check_X509V3_EXT_METHOD_sk_type(sk)))
124             #define sk_X509V3_EXT_METHOD_pop_free(sk, freefunc) OPENSSL_sk_pop_free(ossl_check_X509V3_EXT_METHOD_sk_type(sk),ossl_check_X509V3_EXT_METHOD_freefunc_type(freefunc))
125             #define sk_X509V3_EXT_METHOD_insert(sk, ptr, idx) OPENSSL_sk_insert(ossl_check_X509V3_EXT_METHOD_sk_type(sk), ossl_check_X509V3_EXT_METHOD_type(ptr), (idx))
126             #define sk_X509V3_EXT_METHOD_set(sk, idx, ptr) ((X509V3_EXT_METHOD *)OPENSSL_sk_set(ossl_check_X509V3_EXT_METHOD_sk_type(sk), (idx), ossl_check_X509V3_EXT_METHOD_type(ptr)))
127             #define sk_X509V3_EXT_METHOD_find(sk, ptr) OPENSSL_sk_find(ossl_check_X509V3_EXT_METHOD_sk_type(sk), ossl_check_X509V3_EXT_METHOD_type(ptr))
128             #define sk_X509V3_EXT_METHOD_find_ex(sk, ptr) OPENSSL_sk_find_ex(ossl_check_X509V3_EXT_METHOD_sk_type(sk), ossl_check_X509V3_EXT_METHOD_type(ptr))
129             #define sk_X509V3_EXT_METHOD_find_all(sk, ptr, pnum) OPENSSL_sk_find_all(ossl_check_X509V3_EXT_METHOD_sk_type(sk), ossl_check_X509V3_EXT_METHOD_type(ptr), pnum)
130             #define sk_X509V3_EXT_METHOD_sort(sk) OPENSSL_sk_sort(ossl_check_X509V3_EXT_METHOD_sk_type(sk))
131             #define sk_X509V3_EXT_METHOD_is_sorted(sk) OPENSSL_sk_is_sorted(ossl_check_const_X509V3_EXT_METHOD_sk_type(sk))
132             #define sk_X509V3_EXT_METHOD_dup(sk) ((STACK_OF(X509V3_EXT_METHOD) *)OPENSSL_sk_dup(ossl_check_const_X509V3_EXT_METHOD_sk_type(sk)))
133             #define sk_X509V3_EXT_METHOD_deep_copy(sk, copyfunc, freefunc) ((STACK_OF(X509V3_EXT_METHOD) *)OPENSSL_sk_deep_copy(ossl_check_const_X509V3_EXT_METHOD_sk_type(sk), ossl_check_X509V3_EXT_METHOD_copyfunc_type(copyfunc), ossl_check_X509V3_EXT_METHOD_freefunc_type(freefunc)))
134             #define sk_X509V3_EXT_METHOD_set_cmp_func(sk, cmp) ((sk_X509V3_EXT_METHOD_compfunc)OPENSSL_sk_set_cmp_func(ossl_check_X509V3_EXT_METHOD_sk_type(sk), ossl_check_X509V3_EXT_METHOD_compfunc_type(cmp)))
135              
136              
137             /* ext_flags values */
138             # define X509V3_EXT_DYNAMIC 0x1
139             # define X509V3_EXT_CTX_DEP 0x2
140             # define X509V3_EXT_MULTILINE 0x4
141              
142             typedef BIT_STRING_BITNAME ENUMERATED_NAMES;
143              
144             typedef struct BASIC_CONSTRAINTS_st {
145             int ca;
146             ASN1_INTEGER *pathlen;
147             } BASIC_CONSTRAINTS;
148              
149             typedef struct PKEY_USAGE_PERIOD_st {
150             ASN1_GENERALIZEDTIME *notBefore;
151             ASN1_GENERALIZEDTIME *notAfter;
152             } PKEY_USAGE_PERIOD;
153              
154             typedef struct otherName_st {
155             ASN1_OBJECT *type_id;
156             ASN1_TYPE *value;
157             } OTHERNAME;
158              
159             typedef struct EDIPartyName_st {
160             ASN1_STRING *nameAssigner;
161             ASN1_STRING *partyName;
162             } EDIPARTYNAME;
163              
164             typedef struct GENERAL_NAME_st {
165             # define GEN_OTHERNAME 0
166             # define GEN_EMAIL 1
167             # define GEN_DNS 2
168             # define GEN_X400 3
169             # define GEN_DIRNAME 4
170             # define GEN_EDIPARTY 5
171             # define GEN_URI 6
172             # define GEN_IPADD 7
173             # define GEN_RID 8
174             int type;
175             union {
176             char *ptr;
177             OTHERNAME *otherName; /* otherName */
178             ASN1_IA5STRING *rfc822Name;
179             ASN1_IA5STRING *dNSName;
180             ASN1_STRING *x400Address;
181             X509_NAME *directoryName;
182             EDIPARTYNAME *ediPartyName;
183             ASN1_IA5STRING *uniformResourceIdentifier;
184             ASN1_OCTET_STRING *iPAddress;
185             ASN1_OBJECT *registeredID;
186             /* Old names */
187             ASN1_OCTET_STRING *ip; /* iPAddress */
188             X509_NAME *dirn; /* dirn */
189             ASN1_IA5STRING *ia5; /* rfc822Name, dNSName,
190             * uniformResourceIdentifier */
191             ASN1_OBJECT *rid; /* registeredID */
192             ASN1_TYPE *other; /* x400Address */
193             } d;
194             } GENERAL_NAME;
195              
196             typedef struct ACCESS_DESCRIPTION_st {
197             ASN1_OBJECT *method;
198             GENERAL_NAME *location;
199             } ACCESS_DESCRIPTION;
200              
201 0           SKM_DEFINE_STACK_OF_INTERNAL(ACCESS_DESCRIPTION, ACCESS_DESCRIPTION, ACCESS_DESCRIPTION)
202             #define sk_ACCESS_DESCRIPTION_num(sk) OPENSSL_sk_num(ossl_check_const_ACCESS_DESCRIPTION_sk_type(sk))
203             #define sk_ACCESS_DESCRIPTION_value(sk, idx) ((ACCESS_DESCRIPTION *)OPENSSL_sk_value(ossl_check_const_ACCESS_DESCRIPTION_sk_type(sk), (idx)))
204             #define sk_ACCESS_DESCRIPTION_new(cmp) ((STACK_OF(ACCESS_DESCRIPTION) *)OPENSSL_sk_new(ossl_check_ACCESS_DESCRIPTION_compfunc_type(cmp)))
205             #define sk_ACCESS_DESCRIPTION_new_null() ((STACK_OF(ACCESS_DESCRIPTION) *)OPENSSL_sk_new_null())
206             #define sk_ACCESS_DESCRIPTION_new_reserve(cmp, n) ((STACK_OF(ACCESS_DESCRIPTION) *)OPENSSL_sk_new_reserve(ossl_check_ACCESS_DESCRIPTION_compfunc_type(cmp), (n)))
207             #define sk_ACCESS_DESCRIPTION_reserve(sk, n) OPENSSL_sk_reserve(ossl_check_ACCESS_DESCRIPTION_sk_type(sk), (n))
208             #define sk_ACCESS_DESCRIPTION_free(sk) OPENSSL_sk_free(ossl_check_ACCESS_DESCRIPTION_sk_type(sk))
209             #define sk_ACCESS_DESCRIPTION_zero(sk) OPENSSL_sk_zero(ossl_check_ACCESS_DESCRIPTION_sk_type(sk))
210             #define sk_ACCESS_DESCRIPTION_delete(sk, i) ((ACCESS_DESCRIPTION *)OPENSSL_sk_delete(ossl_check_ACCESS_DESCRIPTION_sk_type(sk), (i)))
211             #define sk_ACCESS_DESCRIPTION_delete_ptr(sk, ptr) ((ACCESS_DESCRIPTION *)OPENSSL_sk_delete_ptr(ossl_check_ACCESS_DESCRIPTION_sk_type(sk), ossl_check_ACCESS_DESCRIPTION_type(ptr)))
212             #define sk_ACCESS_DESCRIPTION_push(sk, ptr) OPENSSL_sk_push(ossl_check_ACCESS_DESCRIPTION_sk_type(sk), ossl_check_ACCESS_DESCRIPTION_type(ptr))
213             #define sk_ACCESS_DESCRIPTION_unshift(sk, ptr) OPENSSL_sk_unshift(ossl_check_ACCESS_DESCRIPTION_sk_type(sk), ossl_check_ACCESS_DESCRIPTION_type(ptr))
214             #define sk_ACCESS_DESCRIPTION_pop(sk) ((ACCESS_DESCRIPTION *)OPENSSL_sk_pop(ossl_check_ACCESS_DESCRIPTION_sk_type(sk)))
215             #define sk_ACCESS_DESCRIPTION_shift(sk) ((ACCESS_DESCRIPTION *)OPENSSL_sk_shift(ossl_check_ACCESS_DESCRIPTION_sk_type(sk)))
216             #define sk_ACCESS_DESCRIPTION_pop_free(sk, freefunc) OPENSSL_sk_pop_free(ossl_check_ACCESS_DESCRIPTION_sk_type(sk),ossl_check_ACCESS_DESCRIPTION_freefunc_type(freefunc))
217             #define sk_ACCESS_DESCRIPTION_insert(sk, ptr, idx) OPENSSL_sk_insert(ossl_check_ACCESS_DESCRIPTION_sk_type(sk), ossl_check_ACCESS_DESCRIPTION_type(ptr), (idx))
218             #define sk_ACCESS_DESCRIPTION_set(sk, idx, ptr) ((ACCESS_DESCRIPTION *)OPENSSL_sk_set(ossl_check_ACCESS_DESCRIPTION_sk_type(sk), (idx), ossl_check_ACCESS_DESCRIPTION_type(ptr)))
219             #define sk_ACCESS_DESCRIPTION_find(sk, ptr) OPENSSL_sk_find(ossl_check_ACCESS_DESCRIPTION_sk_type(sk), ossl_check_ACCESS_DESCRIPTION_type(ptr))
220             #define sk_ACCESS_DESCRIPTION_find_ex(sk, ptr) OPENSSL_sk_find_ex(ossl_check_ACCESS_DESCRIPTION_sk_type(sk), ossl_check_ACCESS_DESCRIPTION_type(ptr))
221             #define sk_ACCESS_DESCRIPTION_find_all(sk, ptr, pnum) OPENSSL_sk_find_all(ossl_check_ACCESS_DESCRIPTION_sk_type(sk), ossl_check_ACCESS_DESCRIPTION_type(ptr), pnum)
222             #define sk_ACCESS_DESCRIPTION_sort(sk) OPENSSL_sk_sort(ossl_check_ACCESS_DESCRIPTION_sk_type(sk))
223             #define sk_ACCESS_DESCRIPTION_is_sorted(sk) OPENSSL_sk_is_sorted(ossl_check_const_ACCESS_DESCRIPTION_sk_type(sk))
224             #define sk_ACCESS_DESCRIPTION_dup(sk) ((STACK_OF(ACCESS_DESCRIPTION) *)OPENSSL_sk_dup(ossl_check_const_ACCESS_DESCRIPTION_sk_type(sk)))
225             #define sk_ACCESS_DESCRIPTION_deep_copy(sk, copyfunc, freefunc) ((STACK_OF(ACCESS_DESCRIPTION) *)OPENSSL_sk_deep_copy(ossl_check_const_ACCESS_DESCRIPTION_sk_type(sk), ossl_check_ACCESS_DESCRIPTION_copyfunc_type(copyfunc), ossl_check_ACCESS_DESCRIPTION_freefunc_type(freefunc)))
226             #define sk_ACCESS_DESCRIPTION_set_cmp_func(sk, cmp) ((sk_ACCESS_DESCRIPTION_compfunc)OPENSSL_sk_set_cmp_func(ossl_check_ACCESS_DESCRIPTION_sk_type(sk), ossl_check_ACCESS_DESCRIPTION_compfunc_type(cmp)))
227 31           SKM_DEFINE_STACK_OF_INTERNAL(GENERAL_NAME, GENERAL_NAME, GENERAL_NAME)
  3            
  3            
  25            
228             #define sk_GENERAL_NAME_num(sk) OPENSSL_sk_num(ossl_check_const_GENERAL_NAME_sk_type(sk))
229             #define sk_GENERAL_NAME_value(sk, idx) ((GENERAL_NAME *)OPENSSL_sk_value(ossl_check_const_GENERAL_NAME_sk_type(sk), (idx)))
230             #define sk_GENERAL_NAME_new(cmp) ((STACK_OF(GENERAL_NAME) *)OPENSSL_sk_new(ossl_check_GENERAL_NAME_compfunc_type(cmp)))
231             #define sk_GENERAL_NAME_new_null() ((STACK_OF(GENERAL_NAME) *)OPENSSL_sk_new_null())
232             #define sk_GENERAL_NAME_new_reserve(cmp, n) ((STACK_OF(GENERAL_NAME) *)OPENSSL_sk_new_reserve(ossl_check_GENERAL_NAME_compfunc_type(cmp), (n)))
233             #define sk_GENERAL_NAME_reserve(sk, n) OPENSSL_sk_reserve(ossl_check_GENERAL_NAME_sk_type(sk), (n))
234             #define sk_GENERAL_NAME_free(sk) OPENSSL_sk_free(ossl_check_GENERAL_NAME_sk_type(sk))
235             #define sk_GENERAL_NAME_zero(sk) OPENSSL_sk_zero(ossl_check_GENERAL_NAME_sk_type(sk))
236             #define sk_GENERAL_NAME_delete(sk, i) ((GENERAL_NAME *)OPENSSL_sk_delete(ossl_check_GENERAL_NAME_sk_type(sk), (i)))
237             #define sk_GENERAL_NAME_delete_ptr(sk, ptr) ((GENERAL_NAME *)OPENSSL_sk_delete_ptr(ossl_check_GENERAL_NAME_sk_type(sk), ossl_check_GENERAL_NAME_type(ptr)))
238             #define sk_GENERAL_NAME_push(sk, ptr) OPENSSL_sk_push(ossl_check_GENERAL_NAME_sk_type(sk), ossl_check_GENERAL_NAME_type(ptr))
239             #define sk_GENERAL_NAME_unshift(sk, ptr) OPENSSL_sk_unshift(ossl_check_GENERAL_NAME_sk_type(sk), ossl_check_GENERAL_NAME_type(ptr))
240             #define sk_GENERAL_NAME_pop(sk) ((GENERAL_NAME *)OPENSSL_sk_pop(ossl_check_GENERAL_NAME_sk_type(sk)))
241             #define sk_GENERAL_NAME_shift(sk) ((GENERAL_NAME *)OPENSSL_sk_shift(ossl_check_GENERAL_NAME_sk_type(sk)))
242             #define sk_GENERAL_NAME_pop_free(sk, freefunc) OPENSSL_sk_pop_free(ossl_check_GENERAL_NAME_sk_type(sk),ossl_check_GENERAL_NAME_freefunc_type(freefunc))
243             #define sk_GENERAL_NAME_insert(sk, ptr, idx) OPENSSL_sk_insert(ossl_check_GENERAL_NAME_sk_type(sk), ossl_check_GENERAL_NAME_type(ptr), (idx))
244             #define sk_GENERAL_NAME_set(sk, idx, ptr) ((GENERAL_NAME *)OPENSSL_sk_set(ossl_check_GENERAL_NAME_sk_type(sk), (idx), ossl_check_GENERAL_NAME_type(ptr)))
245             #define sk_GENERAL_NAME_find(sk, ptr) OPENSSL_sk_find(ossl_check_GENERAL_NAME_sk_type(sk), ossl_check_GENERAL_NAME_type(ptr))
246             #define sk_GENERAL_NAME_find_ex(sk, ptr) OPENSSL_sk_find_ex(ossl_check_GENERAL_NAME_sk_type(sk), ossl_check_GENERAL_NAME_type(ptr))
247             #define sk_GENERAL_NAME_find_all(sk, ptr, pnum) OPENSSL_sk_find_all(ossl_check_GENERAL_NAME_sk_type(sk), ossl_check_GENERAL_NAME_type(ptr), pnum)
248             #define sk_GENERAL_NAME_sort(sk) OPENSSL_sk_sort(ossl_check_GENERAL_NAME_sk_type(sk))
249             #define sk_GENERAL_NAME_is_sorted(sk) OPENSSL_sk_is_sorted(ossl_check_const_GENERAL_NAME_sk_type(sk))
250             #define sk_GENERAL_NAME_dup(sk) ((STACK_OF(GENERAL_NAME) *)OPENSSL_sk_dup(ossl_check_const_GENERAL_NAME_sk_type(sk)))
251             #define sk_GENERAL_NAME_deep_copy(sk, copyfunc, freefunc) ((STACK_OF(GENERAL_NAME) *)OPENSSL_sk_deep_copy(ossl_check_const_GENERAL_NAME_sk_type(sk), ossl_check_GENERAL_NAME_copyfunc_type(copyfunc), ossl_check_GENERAL_NAME_freefunc_type(freefunc)))
252             #define sk_GENERAL_NAME_set_cmp_func(sk, cmp) ((sk_GENERAL_NAME_compfunc)OPENSSL_sk_set_cmp_func(ossl_check_GENERAL_NAME_sk_type(sk), ossl_check_GENERAL_NAME_compfunc_type(cmp)))
253              
254              
255             typedef STACK_OF(ACCESS_DESCRIPTION) AUTHORITY_INFO_ACCESS;
256             typedef STACK_OF(ASN1_OBJECT) EXTENDED_KEY_USAGE;
257             typedef STACK_OF(ASN1_INTEGER) TLS_FEATURE;
258             typedef STACK_OF(GENERAL_NAME) GENERAL_NAMES;
259              
260             SKM_DEFINE_STACK_OF_INTERNAL(GENERAL_NAMES, GENERAL_NAMES, GENERAL_NAMES)
261             #define sk_GENERAL_NAMES_num(sk) OPENSSL_sk_num(ossl_check_const_GENERAL_NAMES_sk_type(sk))
262             #define sk_GENERAL_NAMES_value(sk, idx) ((GENERAL_NAMES *)OPENSSL_sk_value(ossl_check_const_GENERAL_NAMES_sk_type(sk), (idx)))
263             #define sk_GENERAL_NAMES_new(cmp) ((STACK_OF(GENERAL_NAMES) *)OPENSSL_sk_new(ossl_check_GENERAL_NAMES_compfunc_type(cmp)))
264             #define sk_GENERAL_NAMES_new_null() ((STACK_OF(GENERAL_NAMES) *)OPENSSL_sk_new_null())
265             #define sk_GENERAL_NAMES_new_reserve(cmp, n) ((STACK_OF(GENERAL_NAMES) *)OPENSSL_sk_new_reserve(ossl_check_GENERAL_NAMES_compfunc_type(cmp), (n)))
266             #define sk_GENERAL_NAMES_reserve(sk, n) OPENSSL_sk_reserve(ossl_check_GENERAL_NAMES_sk_type(sk), (n))
267             #define sk_GENERAL_NAMES_free(sk) OPENSSL_sk_free(ossl_check_GENERAL_NAMES_sk_type(sk))
268             #define sk_GENERAL_NAMES_zero(sk) OPENSSL_sk_zero(ossl_check_GENERAL_NAMES_sk_type(sk))
269             #define sk_GENERAL_NAMES_delete(sk, i) ((GENERAL_NAMES *)OPENSSL_sk_delete(ossl_check_GENERAL_NAMES_sk_type(sk), (i)))
270             #define sk_GENERAL_NAMES_delete_ptr(sk, ptr) ((GENERAL_NAMES *)OPENSSL_sk_delete_ptr(ossl_check_GENERAL_NAMES_sk_type(sk), ossl_check_GENERAL_NAMES_type(ptr)))
271             #define sk_GENERAL_NAMES_push(sk, ptr) OPENSSL_sk_push(ossl_check_GENERAL_NAMES_sk_type(sk), ossl_check_GENERAL_NAMES_type(ptr))
272             #define sk_GENERAL_NAMES_unshift(sk, ptr) OPENSSL_sk_unshift(ossl_check_GENERAL_NAMES_sk_type(sk), ossl_check_GENERAL_NAMES_type(ptr))
273             #define sk_GENERAL_NAMES_pop(sk) ((GENERAL_NAMES *)OPENSSL_sk_pop(ossl_check_GENERAL_NAMES_sk_type(sk)))
274             #define sk_GENERAL_NAMES_shift(sk) ((GENERAL_NAMES *)OPENSSL_sk_shift(ossl_check_GENERAL_NAMES_sk_type(sk)))
275             #define sk_GENERAL_NAMES_pop_free(sk, freefunc) OPENSSL_sk_pop_free(ossl_check_GENERAL_NAMES_sk_type(sk),ossl_check_GENERAL_NAMES_freefunc_type(freefunc))
276             #define sk_GENERAL_NAMES_insert(sk, ptr, idx) OPENSSL_sk_insert(ossl_check_GENERAL_NAMES_sk_type(sk), ossl_check_GENERAL_NAMES_type(ptr), (idx))
277             #define sk_GENERAL_NAMES_set(sk, idx, ptr) ((GENERAL_NAMES *)OPENSSL_sk_set(ossl_check_GENERAL_NAMES_sk_type(sk), (idx), ossl_check_GENERAL_NAMES_type(ptr)))
278             #define sk_GENERAL_NAMES_find(sk, ptr) OPENSSL_sk_find(ossl_check_GENERAL_NAMES_sk_type(sk), ossl_check_GENERAL_NAMES_type(ptr))
279             #define sk_GENERAL_NAMES_find_ex(sk, ptr) OPENSSL_sk_find_ex(ossl_check_GENERAL_NAMES_sk_type(sk), ossl_check_GENERAL_NAMES_type(ptr))
280             #define sk_GENERAL_NAMES_find_all(sk, ptr, pnum) OPENSSL_sk_find_all(ossl_check_GENERAL_NAMES_sk_type(sk), ossl_check_GENERAL_NAMES_type(ptr), pnum)
281             #define sk_GENERAL_NAMES_sort(sk) OPENSSL_sk_sort(ossl_check_GENERAL_NAMES_sk_type(sk))
282             #define sk_GENERAL_NAMES_is_sorted(sk) OPENSSL_sk_is_sorted(ossl_check_const_GENERAL_NAMES_sk_type(sk))
283             #define sk_GENERAL_NAMES_dup(sk) ((STACK_OF(GENERAL_NAMES) *)OPENSSL_sk_dup(ossl_check_const_GENERAL_NAMES_sk_type(sk)))
284             #define sk_GENERAL_NAMES_deep_copy(sk, copyfunc, freefunc) ((STACK_OF(GENERAL_NAMES) *)OPENSSL_sk_deep_copy(ossl_check_const_GENERAL_NAMES_sk_type(sk), ossl_check_GENERAL_NAMES_copyfunc_type(copyfunc), ossl_check_GENERAL_NAMES_freefunc_type(freefunc)))
285             #define sk_GENERAL_NAMES_set_cmp_func(sk, cmp) ((sk_GENERAL_NAMES_compfunc)OPENSSL_sk_set_cmp_func(ossl_check_GENERAL_NAMES_sk_type(sk), ossl_check_GENERAL_NAMES_compfunc_type(cmp)))
286              
287              
288             typedef struct DIST_POINT_NAME_st {
289             int type;
290             union {
291             GENERAL_NAMES *fullname;
292             STACK_OF(X509_NAME_ENTRY) *relativename;
293             } name;
294             /* If relativename then this contains the full distribution point name */
295             X509_NAME *dpname;
296             } DIST_POINT_NAME;
297             /* All existing reasons */
298             # define CRLDP_ALL_REASONS 0x807f
299              
300             # define CRL_REASON_NONE -1
301             # define CRL_REASON_UNSPECIFIED 0
302             # define CRL_REASON_KEY_COMPROMISE 1
303             # define CRL_REASON_CA_COMPROMISE 2
304             # define CRL_REASON_AFFILIATION_CHANGED 3
305             # define CRL_REASON_SUPERSEDED 4
306             # define CRL_REASON_CESSATION_OF_OPERATION 5
307             # define CRL_REASON_CERTIFICATE_HOLD 6
308             # define CRL_REASON_REMOVE_FROM_CRL 8
309             # define CRL_REASON_PRIVILEGE_WITHDRAWN 9
310             # define CRL_REASON_AA_COMPROMISE 10
311              
312             struct DIST_POINT_st {
313             DIST_POINT_NAME *distpoint;
314             ASN1_BIT_STRING *reasons;
315             GENERAL_NAMES *CRLissuer;
316             int dp_reasons;
317             };
318              
319 16           SKM_DEFINE_STACK_OF_INTERNAL(DIST_POINT, DIST_POINT, DIST_POINT)
  4            
  4            
  8            
320             #define sk_DIST_POINT_num(sk) OPENSSL_sk_num(ossl_check_const_DIST_POINT_sk_type(sk))
321             #define sk_DIST_POINT_value(sk, idx) ((DIST_POINT *)OPENSSL_sk_value(ossl_check_const_DIST_POINT_sk_type(sk), (idx)))
322             #define sk_DIST_POINT_new(cmp) ((STACK_OF(DIST_POINT) *)OPENSSL_sk_new(ossl_check_DIST_POINT_compfunc_type(cmp)))
323             #define sk_DIST_POINT_new_null() ((STACK_OF(DIST_POINT) *)OPENSSL_sk_new_null())
324             #define sk_DIST_POINT_new_reserve(cmp, n) ((STACK_OF(DIST_POINT) *)OPENSSL_sk_new_reserve(ossl_check_DIST_POINT_compfunc_type(cmp), (n)))
325             #define sk_DIST_POINT_reserve(sk, n) OPENSSL_sk_reserve(ossl_check_DIST_POINT_sk_type(sk), (n))
326             #define sk_DIST_POINT_free(sk) OPENSSL_sk_free(ossl_check_DIST_POINT_sk_type(sk))
327             #define sk_DIST_POINT_zero(sk) OPENSSL_sk_zero(ossl_check_DIST_POINT_sk_type(sk))
328             #define sk_DIST_POINT_delete(sk, i) ((DIST_POINT *)OPENSSL_sk_delete(ossl_check_DIST_POINT_sk_type(sk), (i)))
329             #define sk_DIST_POINT_delete_ptr(sk, ptr) ((DIST_POINT *)OPENSSL_sk_delete_ptr(ossl_check_DIST_POINT_sk_type(sk), ossl_check_DIST_POINT_type(ptr)))
330             #define sk_DIST_POINT_push(sk, ptr) OPENSSL_sk_push(ossl_check_DIST_POINT_sk_type(sk), ossl_check_DIST_POINT_type(ptr))
331             #define sk_DIST_POINT_unshift(sk, ptr) OPENSSL_sk_unshift(ossl_check_DIST_POINT_sk_type(sk), ossl_check_DIST_POINT_type(ptr))
332             #define sk_DIST_POINT_pop(sk) ((DIST_POINT *)OPENSSL_sk_pop(ossl_check_DIST_POINT_sk_type(sk)))
333             #define sk_DIST_POINT_shift(sk) ((DIST_POINT *)OPENSSL_sk_shift(ossl_check_DIST_POINT_sk_type(sk)))
334             #define sk_DIST_POINT_pop_free(sk, freefunc) OPENSSL_sk_pop_free(ossl_check_DIST_POINT_sk_type(sk),ossl_check_DIST_POINT_freefunc_type(freefunc))
335             #define sk_DIST_POINT_insert(sk, ptr, idx) OPENSSL_sk_insert(ossl_check_DIST_POINT_sk_type(sk), ossl_check_DIST_POINT_type(ptr), (idx))
336             #define sk_DIST_POINT_set(sk, idx, ptr) ((DIST_POINT *)OPENSSL_sk_set(ossl_check_DIST_POINT_sk_type(sk), (idx), ossl_check_DIST_POINT_type(ptr)))
337             #define sk_DIST_POINT_find(sk, ptr) OPENSSL_sk_find(ossl_check_DIST_POINT_sk_type(sk), ossl_check_DIST_POINT_type(ptr))
338             #define sk_DIST_POINT_find_ex(sk, ptr) OPENSSL_sk_find_ex(ossl_check_DIST_POINT_sk_type(sk), ossl_check_DIST_POINT_type(ptr))
339             #define sk_DIST_POINT_find_all(sk, ptr, pnum) OPENSSL_sk_find_all(ossl_check_DIST_POINT_sk_type(sk), ossl_check_DIST_POINT_type(ptr), pnum)
340             #define sk_DIST_POINT_sort(sk) OPENSSL_sk_sort(ossl_check_DIST_POINT_sk_type(sk))
341             #define sk_DIST_POINT_is_sorted(sk) OPENSSL_sk_is_sorted(ossl_check_const_DIST_POINT_sk_type(sk))
342             #define sk_DIST_POINT_dup(sk) ((STACK_OF(DIST_POINT) *)OPENSSL_sk_dup(ossl_check_const_DIST_POINT_sk_type(sk)))
343             #define sk_DIST_POINT_deep_copy(sk, copyfunc, freefunc) ((STACK_OF(DIST_POINT) *)OPENSSL_sk_deep_copy(ossl_check_const_DIST_POINT_sk_type(sk), ossl_check_DIST_POINT_copyfunc_type(copyfunc), ossl_check_DIST_POINT_freefunc_type(freefunc)))
344             #define sk_DIST_POINT_set_cmp_func(sk, cmp) ((sk_DIST_POINT_compfunc)OPENSSL_sk_set_cmp_func(ossl_check_DIST_POINT_sk_type(sk), ossl_check_DIST_POINT_compfunc_type(cmp)))
345              
346              
347             typedef STACK_OF(DIST_POINT) CRL_DIST_POINTS;
348              
349             struct AUTHORITY_KEYID_st {
350             ASN1_OCTET_STRING *keyid;
351             GENERAL_NAMES *issuer;
352             ASN1_INTEGER *serial;
353             };
354              
355             /* Strong extranet structures */
356              
357             typedef struct SXNET_ID_st {
358             ASN1_INTEGER *zone;
359             ASN1_OCTET_STRING *user;
360             } SXNETID;
361              
362             SKM_DEFINE_STACK_OF_INTERNAL(SXNETID, SXNETID, SXNETID)
363             #define sk_SXNETID_num(sk) OPENSSL_sk_num(ossl_check_const_SXNETID_sk_type(sk))
364             #define sk_SXNETID_value(sk, idx) ((SXNETID *)OPENSSL_sk_value(ossl_check_const_SXNETID_sk_type(sk), (idx)))
365             #define sk_SXNETID_new(cmp) ((STACK_OF(SXNETID) *)OPENSSL_sk_new(ossl_check_SXNETID_compfunc_type(cmp)))
366             #define sk_SXNETID_new_null() ((STACK_OF(SXNETID) *)OPENSSL_sk_new_null())
367             #define sk_SXNETID_new_reserve(cmp, n) ((STACK_OF(SXNETID) *)OPENSSL_sk_new_reserve(ossl_check_SXNETID_compfunc_type(cmp), (n)))
368             #define sk_SXNETID_reserve(sk, n) OPENSSL_sk_reserve(ossl_check_SXNETID_sk_type(sk), (n))
369             #define sk_SXNETID_free(sk) OPENSSL_sk_free(ossl_check_SXNETID_sk_type(sk))
370             #define sk_SXNETID_zero(sk) OPENSSL_sk_zero(ossl_check_SXNETID_sk_type(sk))
371             #define sk_SXNETID_delete(sk, i) ((SXNETID *)OPENSSL_sk_delete(ossl_check_SXNETID_sk_type(sk), (i)))
372             #define sk_SXNETID_delete_ptr(sk, ptr) ((SXNETID *)OPENSSL_sk_delete_ptr(ossl_check_SXNETID_sk_type(sk), ossl_check_SXNETID_type(ptr)))
373             #define sk_SXNETID_push(sk, ptr) OPENSSL_sk_push(ossl_check_SXNETID_sk_type(sk), ossl_check_SXNETID_type(ptr))
374             #define sk_SXNETID_unshift(sk, ptr) OPENSSL_sk_unshift(ossl_check_SXNETID_sk_type(sk), ossl_check_SXNETID_type(ptr))
375             #define sk_SXNETID_pop(sk) ((SXNETID *)OPENSSL_sk_pop(ossl_check_SXNETID_sk_type(sk)))
376             #define sk_SXNETID_shift(sk) ((SXNETID *)OPENSSL_sk_shift(ossl_check_SXNETID_sk_type(sk)))
377             #define sk_SXNETID_pop_free(sk, freefunc) OPENSSL_sk_pop_free(ossl_check_SXNETID_sk_type(sk),ossl_check_SXNETID_freefunc_type(freefunc))
378             #define sk_SXNETID_insert(sk, ptr, idx) OPENSSL_sk_insert(ossl_check_SXNETID_sk_type(sk), ossl_check_SXNETID_type(ptr), (idx))
379             #define sk_SXNETID_set(sk, idx, ptr) ((SXNETID *)OPENSSL_sk_set(ossl_check_SXNETID_sk_type(sk), (idx), ossl_check_SXNETID_type(ptr)))
380             #define sk_SXNETID_find(sk, ptr) OPENSSL_sk_find(ossl_check_SXNETID_sk_type(sk), ossl_check_SXNETID_type(ptr))
381             #define sk_SXNETID_find_ex(sk, ptr) OPENSSL_sk_find_ex(ossl_check_SXNETID_sk_type(sk), ossl_check_SXNETID_type(ptr))
382             #define sk_SXNETID_find_all(sk, ptr, pnum) OPENSSL_sk_find_all(ossl_check_SXNETID_sk_type(sk), ossl_check_SXNETID_type(ptr), pnum)
383             #define sk_SXNETID_sort(sk) OPENSSL_sk_sort(ossl_check_SXNETID_sk_type(sk))
384             #define sk_SXNETID_is_sorted(sk) OPENSSL_sk_is_sorted(ossl_check_const_SXNETID_sk_type(sk))
385             #define sk_SXNETID_dup(sk) ((STACK_OF(SXNETID) *)OPENSSL_sk_dup(ossl_check_const_SXNETID_sk_type(sk)))
386             #define sk_SXNETID_deep_copy(sk, copyfunc, freefunc) ((STACK_OF(SXNETID) *)OPENSSL_sk_deep_copy(ossl_check_const_SXNETID_sk_type(sk), ossl_check_SXNETID_copyfunc_type(copyfunc), ossl_check_SXNETID_freefunc_type(freefunc)))
387             #define sk_SXNETID_set_cmp_func(sk, cmp) ((sk_SXNETID_compfunc)OPENSSL_sk_set_cmp_func(ossl_check_SXNETID_sk_type(sk), ossl_check_SXNETID_compfunc_type(cmp)))
388              
389              
390              
391             typedef struct SXNET_st {
392             ASN1_INTEGER *version;
393             STACK_OF(SXNETID) *ids;
394             } SXNET;
395              
396             typedef struct ISSUER_SIGN_TOOL_st {
397             ASN1_UTF8STRING *signTool;
398             ASN1_UTF8STRING *cATool;
399             ASN1_UTF8STRING *signToolCert;
400             ASN1_UTF8STRING *cAToolCert;
401             } ISSUER_SIGN_TOOL;
402              
403             typedef struct NOTICEREF_st {
404             ASN1_STRING *organization;
405             STACK_OF(ASN1_INTEGER) *noticenos;
406             } NOTICEREF;
407              
408             typedef struct USERNOTICE_st {
409             NOTICEREF *noticeref;
410             ASN1_STRING *exptext;
411             } USERNOTICE;
412              
413             typedef struct POLICYQUALINFO_st {
414             ASN1_OBJECT *pqualid;
415             union {
416             ASN1_IA5STRING *cpsuri;
417             USERNOTICE *usernotice;
418             ASN1_TYPE *other;
419             } d;
420             } POLICYQUALINFO;
421              
422             SKM_DEFINE_STACK_OF_INTERNAL(POLICYQUALINFO, POLICYQUALINFO, POLICYQUALINFO)
423             #define sk_POLICYQUALINFO_num(sk) OPENSSL_sk_num(ossl_check_const_POLICYQUALINFO_sk_type(sk))
424             #define sk_POLICYQUALINFO_value(sk, idx) ((POLICYQUALINFO *)OPENSSL_sk_value(ossl_check_const_POLICYQUALINFO_sk_type(sk), (idx)))
425             #define sk_POLICYQUALINFO_new(cmp) ((STACK_OF(POLICYQUALINFO) *)OPENSSL_sk_new(ossl_check_POLICYQUALINFO_compfunc_type(cmp)))
426             #define sk_POLICYQUALINFO_new_null() ((STACK_OF(POLICYQUALINFO) *)OPENSSL_sk_new_null())
427             #define sk_POLICYQUALINFO_new_reserve(cmp, n) ((STACK_OF(POLICYQUALINFO) *)OPENSSL_sk_new_reserve(ossl_check_POLICYQUALINFO_compfunc_type(cmp), (n)))
428             #define sk_POLICYQUALINFO_reserve(sk, n) OPENSSL_sk_reserve(ossl_check_POLICYQUALINFO_sk_type(sk), (n))
429             #define sk_POLICYQUALINFO_free(sk) OPENSSL_sk_free(ossl_check_POLICYQUALINFO_sk_type(sk))
430             #define sk_POLICYQUALINFO_zero(sk) OPENSSL_sk_zero(ossl_check_POLICYQUALINFO_sk_type(sk))
431             #define sk_POLICYQUALINFO_delete(sk, i) ((POLICYQUALINFO *)OPENSSL_sk_delete(ossl_check_POLICYQUALINFO_sk_type(sk), (i)))
432             #define sk_POLICYQUALINFO_delete_ptr(sk, ptr) ((POLICYQUALINFO *)OPENSSL_sk_delete_ptr(ossl_check_POLICYQUALINFO_sk_type(sk), ossl_check_POLICYQUALINFO_type(ptr)))
433             #define sk_POLICYQUALINFO_push(sk, ptr) OPENSSL_sk_push(ossl_check_POLICYQUALINFO_sk_type(sk), ossl_check_POLICYQUALINFO_type(ptr))
434             #define sk_POLICYQUALINFO_unshift(sk, ptr) OPENSSL_sk_unshift(ossl_check_POLICYQUALINFO_sk_type(sk), ossl_check_POLICYQUALINFO_type(ptr))
435             #define sk_POLICYQUALINFO_pop(sk) ((POLICYQUALINFO *)OPENSSL_sk_pop(ossl_check_POLICYQUALINFO_sk_type(sk)))
436             #define sk_POLICYQUALINFO_shift(sk) ((POLICYQUALINFO *)OPENSSL_sk_shift(ossl_check_POLICYQUALINFO_sk_type(sk)))
437             #define sk_POLICYQUALINFO_pop_free(sk, freefunc) OPENSSL_sk_pop_free(ossl_check_POLICYQUALINFO_sk_type(sk),ossl_check_POLICYQUALINFO_freefunc_type(freefunc))
438             #define sk_POLICYQUALINFO_insert(sk, ptr, idx) OPENSSL_sk_insert(ossl_check_POLICYQUALINFO_sk_type(sk), ossl_check_POLICYQUALINFO_type(ptr), (idx))
439             #define sk_POLICYQUALINFO_set(sk, idx, ptr) ((POLICYQUALINFO *)OPENSSL_sk_set(ossl_check_POLICYQUALINFO_sk_type(sk), (idx), ossl_check_POLICYQUALINFO_type(ptr)))
440             #define sk_POLICYQUALINFO_find(sk, ptr) OPENSSL_sk_find(ossl_check_POLICYQUALINFO_sk_type(sk), ossl_check_POLICYQUALINFO_type(ptr))
441             #define sk_POLICYQUALINFO_find_ex(sk, ptr) OPENSSL_sk_find_ex(ossl_check_POLICYQUALINFO_sk_type(sk), ossl_check_POLICYQUALINFO_type(ptr))
442             #define sk_POLICYQUALINFO_find_all(sk, ptr, pnum) OPENSSL_sk_find_all(ossl_check_POLICYQUALINFO_sk_type(sk), ossl_check_POLICYQUALINFO_type(ptr), pnum)
443             #define sk_POLICYQUALINFO_sort(sk) OPENSSL_sk_sort(ossl_check_POLICYQUALINFO_sk_type(sk))
444             #define sk_POLICYQUALINFO_is_sorted(sk) OPENSSL_sk_is_sorted(ossl_check_const_POLICYQUALINFO_sk_type(sk))
445             #define sk_POLICYQUALINFO_dup(sk) ((STACK_OF(POLICYQUALINFO) *)OPENSSL_sk_dup(ossl_check_const_POLICYQUALINFO_sk_type(sk)))
446             #define sk_POLICYQUALINFO_deep_copy(sk, copyfunc, freefunc) ((STACK_OF(POLICYQUALINFO) *)OPENSSL_sk_deep_copy(ossl_check_const_POLICYQUALINFO_sk_type(sk), ossl_check_POLICYQUALINFO_copyfunc_type(copyfunc), ossl_check_POLICYQUALINFO_freefunc_type(freefunc)))
447             #define sk_POLICYQUALINFO_set_cmp_func(sk, cmp) ((sk_POLICYQUALINFO_compfunc)OPENSSL_sk_set_cmp_func(ossl_check_POLICYQUALINFO_sk_type(sk), ossl_check_POLICYQUALINFO_compfunc_type(cmp)))
448              
449              
450              
451             typedef struct POLICYINFO_st {
452             ASN1_OBJECT *policyid;
453             STACK_OF(POLICYQUALINFO) *qualifiers;
454             } POLICYINFO;
455              
456             SKM_DEFINE_STACK_OF_INTERNAL(POLICYINFO, POLICYINFO, POLICYINFO)
457             #define sk_POLICYINFO_num(sk) OPENSSL_sk_num(ossl_check_const_POLICYINFO_sk_type(sk))
458             #define sk_POLICYINFO_value(sk, idx) ((POLICYINFO *)OPENSSL_sk_value(ossl_check_const_POLICYINFO_sk_type(sk), (idx)))
459             #define sk_POLICYINFO_new(cmp) ((STACK_OF(POLICYINFO) *)OPENSSL_sk_new(ossl_check_POLICYINFO_compfunc_type(cmp)))
460             #define sk_POLICYINFO_new_null() ((STACK_OF(POLICYINFO) *)OPENSSL_sk_new_null())
461             #define sk_POLICYINFO_new_reserve(cmp, n) ((STACK_OF(POLICYINFO) *)OPENSSL_sk_new_reserve(ossl_check_POLICYINFO_compfunc_type(cmp), (n)))
462             #define sk_POLICYINFO_reserve(sk, n) OPENSSL_sk_reserve(ossl_check_POLICYINFO_sk_type(sk), (n))
463             #define sk_POLICYINFO_free(sk) OPENSSL_sk_free(ossl_check_POLICYINFO_sk_type(sk))
464             #define sk_POLICYINFO_zero(sk) OPENSSL_sk_zero(ossl_check_POLICYINFO_sk_type(sk))
465             #define sk_POLICYINFO_delete(sk, i) ((POLICYINFO *)OPENSSL_sk_delete(ossl_check_POLICYINFO_sk_type(sk), (i)))
466             #define sk_POLICYINFO_delete_ptr(sk, ptr) ((POLICYINFO *)OPENSSL_sk_delete_ptr(ossl_check_POLICYINFO_sk_type(sk), ossl_check_POLICYINFO_type(ptr)))
467             #define sk_POLICYINFO_push(sk, ptr) OPENSSL_sk_push(ossl_check_POLICYINFO_sk_type(sk), ossl_check_POLICYINFO_type(ptr))
468             #define sk_POLICYINFO_unshift(sk, ptr) OPENSSL_sk_unshift(ossl_check_POLICYINFO_sk_type(sk), ossl_check_POLICYINFO_type(ptr))
469             #define sk_POLICYINFO_pop(sk) ((POLICYINFO *)OPENSSL_sk_pop(ossl_check_POLICYINFO_sk_type(sk)))
470             #define sk_POLICYINFO_shift(sk) ((POLICYINFO *)OPENSSL_sk_shift(ossl_check_POLICYINFO_sk_type(sk)))
471             #define sk_POLICYINFO_pop_free(sk, freefunc) OPENSSL_sk_pop_free(ossl_check_POLICYINFO_sk_type(sk),ossl_check_POLICYINFO_freefunc_type(freefunc))
472             #define sk_POLICYINFO_insert(sk, ptr, idx) OPENSSL_sk_insert(ossl_check_POLICYINFO_sk_type(sk), ossl_check_POLICYINFO_type(ptr), (idx))
473             #define sk_POLICYINFO_set(sk, idx, ptr) ((POLICYINFO *)OPENSSL_sk_set(ossl_check_POLICYINFO_sk_type(sk), (idx), ossl_check_POLICYINFO_type(ptr)))
474             #define sk_POLICYINFO_find(sk, ptr) OPENSSL_sk_find(ossl_check_POLICYINFO_sk_type(sk), ossl_check_POLICYINFO_type(ptr))
475             #define sk_POLICYINFO_find_ex(sk, ptr) OPENSSL_sk_find_ex(ossl_check_POLICYINFO_sk_type(sk), ossl_check_POLICYINFO_type(ptr))
476             #define sk_POLICYINFO_find_all(sk, ptr, pnum) OPENSSL_sk_find_all(ossl_check_POLICYINFO_sk_type(sk), ossl_check_POLICYINFO_type(ptr), pnum)
477             #define sk_POLICYINFO_sort(sk) OPENSSL_sk_sort(ossl_check_POLICYINFO_sk_type(sk))
478             #define sk_POLICYINFO_is_sorted(sk) OPENSSL_sk_is_sorted(ossl_check_const_POLICYINFO_sk_type(sk))
479             #define sk_POLICYINFO_dup(sk) ((STACK_OF(POLICYINFO) *)OPENSSL_sk_dup(ossl_check_const_POLICYINFO_sk_type(sk)))
480             #define sk_POLICYINFO_deep_copy(sk, copyfunc, freefunc) ((STACK_OF(POLICYINFO) *)OPENSSL_sk_deep_copy(ossl_check_const_POLICYINFO_sk_type(sk), ossl_check_POLICYINFO_copyfunc_type(copyfunc), ossl_check_POLICYINFO_freefunc_type(freefunc)))
481             #define sk_POLICYINFO_set_cmp_func(sk, cmp) ((sk_POLICYINFO_compfunc)OPENSSL_sk_set_cmp_func(ossl_check_POLICYINFO_sk_type(sk), ossl_check_POLICYINFO_compfunc_type(cmp)))
482              
483              
484             typedef STACK_OF(POLICYINFO) CERTIFICATEPOLICIES;
485              
486             typedef struct POLICY_MAPPING_st {
487             ASN1_OBJECT *issuerDomainPolicy;
488             ASN1_OBJECT *subjectDomainPolicy;
489             } POLICY_MAPPING;
490              
491             SKM_DEFINE_STACK_OF_INTERNAL(POLICY_MAPPING, POLICY_MAPPING, POLICY_MAPPING)
492             #define sk_POLICY_MAPPING_num(sk) OPENSSL_sk_num(ossl_check_const_POLICY_MAPPING_sk_type(sk))
493             #define sk_POLICY_MAPPING_value(sk, idx) ((POLICY_MAPPING *)OPENSSL_sk_value(ossl_check_const_POLICY_MAPPING_sk_type(sk), (idx)))
494             #define sk_POLICY_MAPPING_new(cmp) ((STACK_OF(POLICY_MAPPING) *)OPENSSL_sk_new(ossl_check_POLICY_MAPPING_compfunc_type(cmp)))
495             #define sk_POLICY_MAPPING_new_null() ((STACK_OF(POLICY_MAPPING) *)OPENSSL_sk_new_null())
496             #define sk_POLICY_MAPPING_new_reserve(cmp, n) ((STACK_OF(POLICY_MAPPING) *)OPENSSL_sk_new_reserve(ossl_check_POLICY_MAPPING_compfunc_type(cmp), (n)))
497             #define sk_POLICY_MAPPING_reserve(sk, n) OPENSSL_sk_reserve(ossl_check_POLICY_MAPPING_sk_type(sk), (n))
498             #define sk_POLICY_MAPPING_free(sk) OPENSSL_sk_free(ossl_check_POLICY_MAPPING_sk_type(sk))
499             #define sk_POLICY_MAPPING_zero(sk) OPENSSL_sk_zero(ossl_check_POLICY_MAPPING_sk_type(sk))
500             #define sk_POLICY_MAPPING_delete(sk, i) ((POLICY_MAPPING *)OPENSSL_sk_delete(ossl_check_POLICY_MAPPING_sk_type(sk), (i)))
501             #define sk_POLICY_MAPPING_delete_ptr(sk, ptr) ((POLICY_MAPPING *)OPENSSL_sk_delete_ptr(ossl_check_POLICY_MAPPING_sk_type(sk), ossl_check_POLICY_MAPPING_type(ptr)))
502             #define sk_POLICY_MAPPING_push(sk, ptr) OPENSSL_sk_push(ossl_check_POLICY_MAPPING_sk_type(sk), ossl_check_POLICY_MAPPING_type(ptr))
503             #define sk_POLICY_MAPPING_unshift(sk, ptr) OPENSSL_sk_unshift(ossl_check_POLICY_MAPPING_sk_type(sk), ossl_check_POLICY_MAPPING_type(ptr))
504             #define sk_POLICY_MAPPING_pop(sk) ((POLICY_MAPPING *)OPENSSL_sk_pop(ossl_check_POLICY_MAPPING_sk_type(sk)))
505             #define sk_POLICY_MAPPING_shift(sk) ((POLICY_MAPPING *)OPENSSL_sk_shift(ossl_check_POLICY_MAPPING_sk_type(sk)))
506             #define sk_POLICY_MAPPING_pop_free(sk, freefunc) OPENSSL_sk_pop_free(ossl_check_POLICY_MAPPING_sk_type(sk),ossl_check_POLICY_MAPPING_freefunc_type(freefunc))
507             #define sk_POLICY_MAPPING_insert(sk, ptr, idx) OPENSSL_sk_insert(ossl_check_POLICY_MAPPING_sk_type(sk), ossl_check_POLICY_MAPPING_type(ptr), (idx))
508             #define sk_POLICY_MAPPING_set(sk, idx, ptr) ((POLICY_MAPPING *)OPENSSL_sk_set(ossl_check_POLICY_MAPPING_sk_type(sk), (idx), ossl_check_POLICY_MAPPING_type(ptr)))
509             #define sk_POLICY_MAPPING_find(sk, ptr) OPENSSL_sk_find(ossl_check_POLICY_MAPPING_sk_type(sk), ossl_check_POLICY_MAPPING_type(ptr))
510             #define sk_POLICY_MAPPING_find_ex(sk, ptr) OPENSSL_sk_find_ex(ossl_check_POLICY_MAPPING_sk_type(sk), ossl_check_POLICY_MAPPING_type(ptr))
511             #define sk_POLICY_MAPPING_find_all(sk, ptr, pnum) OPENSSL_sk_find_all(ossl_check_POLICY_MAPPING_sk_type(sk), ossl_check_POLICY_MAPPING_type(ptr), pnum)
512             #define sk_POLICY_MAPPING_sort(sk) OPENSSL_sk_sort(ossl_check_POLICY_MAPPING_sk_type(sk))
513             #define sk_POLICY_MAPPING_is_sorted(sk) OPENSSL_sk_is_sorted(ossl_check_const_POLICY_MAPPING_sk_type(sk))
514             #define sk_POLICY_MAPPING_dup(sk) ((STACK_OF(POLICY_MAPPING) *)OPENSSL_sk_dup(ossl_check_const_POLICY_MAPPING_sk_type(sk)))
515             #define sk_POLICY_MAPPING_deep_copy(sk, copyfunc, freefunc) ((STACK_OF(POLICY_MAPPING) *)OPENSSL_sk_deep_copy(ossl_check_const_POLICY_MAPPING_sk_type(sk), ossl_check_POLICY_MAPPING_copyfunc_type(copyfunc), ossl_check_POLICY_MAPPING_freefunc_type(freefunc)))
516             #define sk_POLICY_MAPPING_set_cmp_func(sk, cmp) ((sk_POLICY_MAPPING_compfunc)OPENSSL_sk_set_cmp_func(ossl_check_POLICY_MAPPING_sk_type(sk), ossl_check_POLICY_MAPPING_compfunc_type(cmp)))
517              
518              
519             typedef STACK_OF(POLICY_MAPPING) POLICY_MAPPINGS;
520              
521             typedef struct GENERAL_SUBTREE_st {
522             GENERAL_NAME *base;
523             ASN1_INTEGER *minimum;
524             ASN1_INTEGER *maximum;
525             } GENERAL_SUBTREE;
526              
527             SKM_DEFINE_STACK_OF_INTERNAL(GENERAL_SUBTREE, GENERAL_SUBTREE, GENERAL_SUBTREE)
528             #define sk_GENERAL_SUBTREE_num(sk) OPENSSL_sk_num(ossl_check_const_GENERAL_SUBTREE_sk_type(sk))
529             #define sk_GENERAL_SUBTREE_value(sk, idx) ((GENERAL_SUBTREE *)OPENSSL_sk_value(ossl_check_const_GENERAL_SUBTREE_sk_type(sk), (idx)))
530             #define sk_GENERAL_SUBTREE_new(cmp) ((STACK_OF(GENERAL_SUBTREE) *)OPENSSL_sk_new(ossl_check_GENERAL_SUBTREE_compfunc_type(cmp)))
531             #define sk_GENERAL_SUBTREE_new_null() ((STACK_OF(GENERAL_SUBTREE) *)OPENSSL_sk_new_null())
532             #define sk_GENERAL_SUBTREE_new_reserve(cmp, n) ((STACK_OF(GENERAL_SUBTREE) *)OPENSSL_sk_new_reserve(ossl_check_GENERAL_SUBTREE_compfunc_type(cmp), (n)))
533             #define sk_GENERAL_SUBTREE_reserve(sk, n) OPENSSL_sk_reserve(ossl_check_GENERAL_SUBTREE_sk_type(sk), (n))
534             #define sk_GENERAL_SUBTREE_free(sk) OPENSSL_sk_free(ossl_check_GENERAL_SUBTREE_sk_type(sk))
535             #define sk_GENERAL_SUBTREE_zero(sk) OPENSSL_sk_zero(ossl_check_GENERAL_SUBTREE_sk_type(sk))
536             #define sk_GENERAL_SUBTREE_delete(sk, i) ((GENERAL_SUBTREE *)OPENSSL_sk_delete(ossl_check_GENERAL_SUBTREE_sk_type(sk), (i)))
537             #define sk_GENERAL_SUBTREE_delete_ptr(sk, ptr) ((GENERAL_SUBTREE *)OPENSSL_sk_delete_ptr(ossl_check_GENERAL_SUBTREE_sk_type(sk), ossl_check_GENERAL_SUBTREE_type(ptr)))
538             #define sk_GENERAL_SUBTREE_push(sk, ptr) OPENSSL_sk_push(ossl_check_GENERAL_SUBTREE_sk_type(sk), ossl_check_GENERAL_SUBTREE_type(ptr))
539             #define sk_GENERAL_SUBTREE_unshift(sk, ptr) OPENSSL_sk_unshift(ossl_check_GENERAL_SUBTREE_sk_type(sk), ossl_check_GENERAL_SUBTREE_type(ptr))
540             #define sk_GENERAL_SUBTREE_pop(sk) ((GENERAL_SUBTREE *)OPENSSL_sk_pop(ossl_check_GENERAL_SUBTREE_sk_type(sk)))
541             #define sk_GENERAL_SUBTREE_shift(sk) ((GENERAL_SUBTREE *)OPENSSL_sk_shift(ossl_check_GENERAL_SUBTREE_sk_type(sk)))
542             #define sk_GENERAL_SUBTREE_pop_free(sk, freefunc) OPENSSL_sk_pop_free(ossl_check_GENERAL_SUBTREE_sk_type(sk),ossl_check_GENERAL_SUBTREE_freefunc_type(freefunc))
543             #define sk_GENERAL_SUBTREE_insert(sk, ptr, idx) OPENSSL_sk_insert(ossl_check_GENERAL_SUBTREE_sk_type(sk), ossl_check_GENERAL_SUBTREE_type(ptr), (idx))
544             #define sk_GENERAL_SUBTREE_set(sk, idx, ptr) ((GENERAL_SUBTREE *)OPENSSL_sk_set(ossl_check_GENERAL_SUBTREE_sk_type(sk), (idx), ossl_check_GENERAL_SUBTREE_type(ptr)))
545             #define sk_GENERAL_SUBTREE_find(sk, ptr) OPENSSL_sk_find(ossl_check_GENERAL_SUBTREE_sk_type(sk), ossl_check_GENERAL_SUBTREE_type(ptr))
546             #define sk_GENERAL_SUBTREE_find_ex(sk, ptr) OPENSSL_sk_find_ex(ossl_check_GENERAL_SUBTREE_sk_type(sk), ossl_check_GENERAL_SUBTREE_type(ptr))
547             #define sk_GENERAL_SUBTREE_find_all(sk, ptr, pnum) OPENSSL_sk_find_all(ossl_check_GENERAL_SUBTREE_sk_type(sk), ossl_check_GENERAL_SUBTREE_type(ptr), pnum)
548             #define sk_GENERAL_SUBTREE_sort(sk) OPENSSL_sk_sort(ossl_check_GENERAL_SUBTREE_sk_type(sk))
549             #define sk_GENERAL_SUBTREE_is_sorted(sk) OPENSSL_sk_is_sorted(ossl_check_const_GENERAL_SUBTREE_sk_type(sk))
550             #define sk_GENERAL_SUBTREE_dup(sk) ((STACK_OF(GENERAL_SUBTREE) *)OPENSSL_sk_dup(ossl_check_const_GENERAL_SUBTREE_sk_type(sk)))
551             #define sk_GENERAL_SUBTREE_deep_copy(sk, copyfunc, freefunc) ((STACK_OF(GENERAL_SUBTREE) *)OPENSSL_sk_deep_copy(ossl_check_const_GENERAL_SUBTREE_sk_type(sk), ossl_check_GENERAL_SUBTREE_copyfunc_type(copyfunc), ossl_check_GENERAL_SUBTREE_freefunc_type(freefunc)))
552             #define sk_GENERAL_SUBTREE_set_cmp_func(sk, cmp) ((sk_GENERAL_SUBTREE_compfunc)OPENSSL_sk_set_cmp_func(ossl_check_GENERAL_SUBTREE_sk_type(sk), ossl_check_GENERAL_SUBTREE_compfunc_type(cmp)))
553              
554              
555             struct NAME_CONSTRAINTS_st {
556             STACK_OF(GENERAL_SUBTREE) *permittedSubtrees;
557             STACK_OF(GENERAL_SUBTREE) *excludedSubtrees;
558             };
559              
560             typedef struct POLICY_CONSTRAINTS_st {
561             ASN1_INTEGER *requireExplicitPolicy;
562             ASN1_INTEGER *inhibitPolicyMapping;
563             } POLICY_CONSTRAINTS;
564              
565             /* Proxy certificate structures, see RFC 3820 */
566             typedef struct PROXY_POLICY_st {
567             ASN1_OBJECT *policyLanguage;
568             ASN1_OCTET_STRING *policy;
569             } PROXY_POLICY;
570              
571             typedef struct PROXY_CERT_INFO_EXTENSION_st {
572             ASN1_INTEGER *pcPathLengthConstraint;
573             PROXY_POLICY *proxyPolicy;
574             } PROXY_CERT_INFO_EXTENSION;
575              
576             DECLARE_ASN1_FUNCTIONS(PROXY_POLICY)
577             DECLARE_ASN1_FUNCTIONS(PROXY_CERT_INFO_EXTENSION)
578              
579             struct ISSUING_DIST_POINT_st {
580             DIST_POINT_NAME *distpoint;
581             int onlyuser;
582             int onlyCA;
583             ASN1_BIT_STRING *onlysomereasons;
584             int indirectCRL;
585             int onlyattr;
586             };
587              
588             /* Values in idp_flags field */
589             /* IDP present */
590             # define IDP_PRESENT 0x1
591             /* IDP values inconsistent */
592             # define IDP_INVALID 0x2
593             /* onlyuser true */
594             # define IDP_ONLYUSER 0x4
595             /* onlyCA true */
596             # define IDP_ONLYCA 0x8
597             /* onlyattr true */
598             # define IDP_ONLYATTR 0x10
599             /* indirectCRL true */
600             # define IDP_INDIRECT 0x20
601             /* onlysomereasons present */
602             # define IDP_REASONS 0x40
603              
604             # define X509V3_conf_err(val) ERR_add_error_data(6, \
605             "section:", (val)->section, \
606             ",name:", (val)->name, ",value:", (val)->value)
607              
608             # define X509V3_set_ctx_test(ctx) \
609             X509V3_set_ctx(ctx, NULL, NULL, NULL, NULL, X509V3_CTX_TEST)
610             # define X509V3_set_ctx_nodb(ctx) (ctx)->db = NULL;
611              
612             # define EXT_BITSTRING(nid, table) { nid, 0, ASN1_ITEM_ref(ASN1_BIT_STRING), \
613             0,0,0,0, \
614             0,0, \
615             (X509V3_EXT_I2V)i2v_ASN1_BIT_STRING, \
616             (X509V3_EXT_V2I)v2i_ASN1_BIT_STRING, \
617             NULL, NULL, \
618             table}
619              
620             # define EXT_IA5STRING(nid) { nid, 0, ASN1_ITEM_ref(ASN1_IA5STRING), \
621             0,0,0,0, \
622             (X509V3_EXT_I2S)i2s_ASN1_IA5STRING, \
623             (X509V3_EXT_S2I)s2i_ASN1_IA5STRING, \
624             0,0,0,0, \
625             NULL}
626              
627             #define EXT_UTF8STRING(nid) { nid, 0, ASN1_ITEM_ref(ASN1_UTF8STRING), \
628             0,0,0,0, \
629             (X509V3_EXT_I2S)i2s_ASN1_UTF8STRING, \
630             (X509V3_EXT_S2I)s2i_ASN1_UTF8STRING, \
631             0,0,0,0, \
632             NULL}
633              
634             # define EXT_END { -1, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0}
635              
636             /* X509_PURPOSE stuff */
637              
638             # define EXFLAG_BCONS 0x1
639             # define EXFLAG_KUSAGE 0x2
640             # define EXFLAG_XKUSAGE 0x4
641             # define EXFLAG_NSCERT 0x8
642              
643             # define EXFLAG_CA 0x10
644             # define EXFLAG_SI 0x20 /* self-issued, maybe not self-signed */
645             # define EXFLAG_V1 0x40
646             # define EXFLAG_INVALID 0x80
647             /* EXFLAG_SET is set to indicate that some values have been precomputed */
648             # define EXFLAG_SET 0x100
649             # define EXFLAG_CRITICAL 0x200
650             # define EXFLAG_PROXY 0x400
651              
652             # define EXFLAG_INVALID_POLICY 0x800
653             # define EXFLAG_FRESHEST 0x1000
654             # define EXFLAG_SS 0x2000 /* cert is apparently self-signed */
655              
656             # define EXFLAG_BCONS_CRITICAL 0x10000
657             # define EXFLAG_AKID_CRITICAL 0x20000
658             # define EXFLAG_SKID_CRITICAL 0x40000
659             # define EXFLAG_SAN_CRITICAL 0x80000
660             # define EXFLAG_NO_FINGERPRINT 0x100000
661              
662             # define KU_DIGITAL_SIGNATURE 0x0080
663             # define KU_NON_REPUDIATION 0x0040
664             # define KU_KEY_ENCIPHERMENT 0x0020
665             # define KU_DATA_ENCIPHERMENT 0x0010
666             # define KU_KEY_AGREEMENT 0x0008
667             # define KU_KEY_CERT_SIGN 0x0004
668             # define KU_CRL_SIGN 0x0002
669             # define KU_ENCIPHER_ONLY 0x0001
670             # define KU_DECIPHER_ONLY 0x8000
671              
672             # define NS_SSL_CLIENT 0x80
673             # define NS_SSL_SERVER 0x40
674             # define NS_SMIME 0x20
675             # define NS_OBJSIGN 0x10
676             # define NS_SSL_CA 0x04
677             # define NS_SMIME_CA 0x02
678             # define NS_OBJSIGN_CA 0x01
679             # define NS_ANY_CA (NS_SSL_CA|NS_SMIME_CA|NS_OBJSIGN_CA)
680              
681             # define XKU_SSL_SERVER 0x1
682             # define XKU_SSL_CLIENT 0x2
683             # define XKU_SMIME 0x4
684             # define XKU_CODE_SIGN 0x8
685             # define XKU_SGC 0x10 /* Netscape or MS Server-Gated Crypto */
686             # define XKU_OCSP_SIGN 0x20
687             # define XKU_TIMESTAMP 0x40
688             # define XKU_DVCS 0x80
689             # define XKU_ANYEKU 0x100
690              
691             # define X509_PURPOSE_DYNAMIC 0x1
692             # define X509_PURPOSE_DYNAMIC_NAME 0x2
693              
694             typedef struct x509_purpose_st {
695             int purpose;
696             int trust; /* Default trust ID */
697             int flags;
698             int (*check_purpose) (const struct x509_purpose_st *, const X509 *, int);
699             char *name;
700             char *sname;
701             void *usr_data;
702             } X509_PURPOSE;
703              
704             SKM_DEFINE_STACK_OF_INTERNAL(X509_PURPOSE, X509_PURPOSE, X509_PURPOSE)
705             #define sk_X509_PURPOSE_num(sk) OPENSSL_sk_num(ossl_check_const_X509_PURPOSE_sk_type(sk))
706             #define sk_X509_PURPOSE_value(sk, idx) ((X509_PURPOSE *)OPENSSL_sk_value(ossl_check_const_X509_PURPOSE_sk_type(sk), (idx)))
707             #define sk_X509_PURPOSE_new(cmp) ((STACK_OF(X509_PURPOSE) *)OPENSSL_sk_new(ossl_check_X509_PURPOSE_compfunc_type(cmp)))
708             #define sk_X509_PURPOSE_new_null() ((STACK_OF(X509_PURPOSE) *)OPENSSL_sk_new_null())
709             #define sk_X509_PURPOSE_new_reserve(cmp, n) ((STACK_OF(X509_PURPOSE) *)OPENSSL_sk_new_reserve(ossl_check_X509_PURPOSE_compfunc_type(cmp), (n)))
710             #define sk_X509_PURPOSE_reserve(sk, n) OPENSSL_sk_reserve(ossl_check_X509_PURPOSE_sk_type(sk), (n))
711             #define sk_X509_PURPOSE_free(sk) OPENSSL_sk_free(ossl_check_X509_PURPOSE_sk_type(sk))
712             #define sk_X509_PURPOSE_zero(sk) OPENSSL_sk_zero(ossl_check_X509_PURPOSE_sk_type(sk))
713             #define sk_X509_PURPOSE_delete(sk, i) ((X509_PURPOSE *)OPENSSL_sk_delete(ossl_check_X509_PURPOSE_sk_type(sk), (i)))
714             #define sk_X509_PURPOSE_delete_ptr(sk, ptr) ((X509_PURPOSE *)OPENSSL_sk_delete_ptr(ossl_check_X509_PURPOSE_sk_type(sk), ossl_check_X509_PURPOSE_type(ptr)))
715             #define sk_X509_PURPOSE_push(sk, ptr) OPENSSL_sk_push(ossl_check_X509_PURPOSE_sk_type(sk), ossl_check_X509_PURPOSE_type(ptr))
716             #define sk_X509_PURPOSE_unshift(sk, ptr) OPENSSL_sk_unshift(ossl_check_X509_PURPOSE_sk_type(sk), ossl_check_X509_PURPOSE_type(ptr))
717             #define sk_X509_PURPOSE_pop(sk) ((X509_PURPOSE *)OPENSSL_sk_pop(ossl_check_X509_PURPOSE_sk_type(sk)))
718             #define sk_X509_PURPOSE_shift(sk) ((X509_PURPOSE *)OPENSSL_sk_shift(ossl_check_X509_PURPOSE_sk_type(sk)))
719             #define sk_X509_PURPOSE_pop_free(sk, freefunc) OPENSSL_sk_pop_free(ossl_check_X509_PURPOSE_sk_type(sk),ossl_check_X509_PURPOSE_freefunc_type(freefunc))
720             #define sk_X509_PURPOSE_insert(sk, ptr, idx) OPENSSL_sk_insert(ossl_check_X509_PURPOSE_sk_type(sk), ossl_check_X509_PURPOSE_type(ptr), (idx))
721             #define sk_X509_PURPOSE_set(sk, idx, ptr) ((X509_PURPOSE *)OPENSSL_sk_set(ossl_check_X509_PURPOSE_sk_type(sk), (idx), ossl_check_X509_PURPOSE_type(ptr)))
722             #define sk_X509_PURPOSE_find(sk, ptr) OPENSSL_sk_find(ossl_check_X509_PURPOSE_sk_type(sk), ossl_check_X509_PURPOSE_type(ptr))
723             #define sk_X509_PURPOSE_find_ex(sk, ptr) OPENSSL_sk_find_ex(ossl_check_X509_PURPOSE_sk_type(sk), ossl_check_X509_PURPOSE_type(ptr))
724             #define sk_X509_PURPOSE_find_all(sk, ptr, pnum) OPENSSL_sk_find_all(ossl_check_X509_PURPOSE_sk_type(sk), ossl_check_X509_PURPOSE_type(ptr), pnum)
725             #define sk_X509_PURPOSE_sort(sk) OPENSSL_sk_sort(ossl_check_X509_PURPOSE_sk_type(sk))
726             #define sk_X509_PURPOSE_is_sorted(sk) OPENSSL_sk_is_sorted(ossl_check_const_X509_PURPOSE_sk_type(sk))
727             #define sk_X509_PURPOSE_dup(sk) ((STACK_OF(X509_PURPOSE) *)OPENSSL_sk_dup(ossl_check_const_X509_PURPOSE_sk_type(sk)))
728             #define sk_X509_PURPOSE_deep_copy(sk, copyfunc, freefunc) ((STACK_OF(X509_PURPOSE) *)OPENSSL_sk_deep_copy(ossl_check_const_X509_PURPOSE_sk_type(sk), ossl_check_X509_PURPOSE_copyfunc_type(copyfunc), ossl_check_X509_PURPOSE_freefunc_type(freefunc)))
729             #define sk_X509_PURPOSE_set_cmp_func(sk, cmp) ((sk_X509_PURPOSE_compfunc)OPENSSL_sk_set_cmp_func(ossl_check_X509_PURPOSE_sk_type(sk), ossl_check_X509_PURPOSE_compfunc_type(cmp)))
730              
731              
732              
733             # define X509_PURPOSE_SSL_CLIENT 1
734             # define X509_PURPOSE_SSL_SERVER 2
735             # define X509_PURPOSE_NS_SSL_SERVER 3
736             # define X509_PURPOSE_SMIME_SIGN 4
737             # define X509_PURPOSE_SMIME_ENCRYPT 5
738             # define X509_PURPOSE_CRL_SIGN 6
739             # define X509_PURPOSE_ANY 7
740             # define X509_PURPOSE_OCSP_HELPER 8
741             # define X509_PURPOSE_TIMESTAMP_SIGN 9
742              
743             # define X509_PURPOSE_MIN 1
744             # define X509_PURPOSE_MAX 9
745              
746             /* Flags for X509V3_EXT_print() */
747              
748             # define X509V3_EXT_UNKNOWN_MASK (0xfL << 16)
749             /* Return error for unknown extensions */
750             # define X509V3_EXT_DEFAULT 0
751             /* Print error for unknown extensions */
752             # define X509V3_EXT_ERROR_UNKNOWN (1L << 16)
753             /* ASN1 parse unknown extensions */
754             # define X509V3_EXT_PARSE_UNKNOWN (2L << 16)
755             /* BIO_dump unknown extensions */
756             # define X509V3_EXT_DUMP_UNKNOWN (3L << 16)
757              
758             /* Flags for X509V3_add1_i2d */
759              
760             # define X509V3_ADD_OP_MASK 0xfL
761             # define X509V3_ADD_DEFAULT 0L
762             # define X509V3_ADD_APPEND 1L
763             # define X509V3_ADD_REPLACE 2L
764             # define X509V3_ADD_REPLACE_EXISTING 3L
765             # define X509V3_ADD_KEEP_EXISTING 4L
766             # define X509V3_ADD_DELETE 5L
767             # define X509V3_ADD_SILENT 0x10
768              
769             DECLARE_ASN1_FUNCTIONS(BASIC_CONSTRAINTS)
770              
771             DECLARE_ASN1_FUNCTIONS(SXNET)
772             DECLARE_ASN1_FUNCTIONS(SXNETID)
773              
774             DECLARE_ASN1_FUNCTIONS(ISSUER_SIGN_TOOL)
775              
776             int SXNET_add_id_asc(SXNET **psx, const char *zone, const char *user, int userlen);
777             int SXNET_add_id_ulong(SXNET **psx, unsigned long lzone, const char *user,
778             int userlen);
779             int SXNET_add_id_INTEGER(SXNET **psx, ASN1_INTEGER *izone, const char *user,
780             int userlen);
781              
782             ASN1_OCTET_STRING *SXNET_get_id_asc(SXNET *sx, const char *zone);
783             ASN1_OCTET_STRING *SXNET_get_id_ulong(SXNET *sx, unsigned long lzone);
784             ASN1_OCTET_STRING *SXNET_get_id_INTEGER(SXNET *sx, ASN1_INTEGER *zone);
785              
786             DECLARE_ASN1_FUNCTIONS(AUTHORITY_KEYID)
787              
788             DECLARE_ASN1_FUNCTIONS(PKEY_USAGE_PERIOD)
789              
790             DECLARE_ASN1_FUNCTIONS(GENERAL_NAME)
791             DECLARE_ASN1_DUP_FUNCTION(GENERAL_NAME)
792             int GENERAL_NAME_cmp(GENERAL_NAME *a, GENERAL_NAME *b);
793              
794             ASN1_BIT_STRING *v2i_ASN1_BIT_STRING(X509V3_EXT_METHOD *method,
795             X509V3_CTX *ctx,
796             STACK_OF(CONF_VALUE) *nval);
797             STACK_OF(CONF_VALUE) *i2v_ASN1_BIT_STRING(X509V3_EXT_METHOD *method,
798             ASN1_BIT_STRING *bits,
799             STACK_OF(CONF_VALUE) *extlist);
800             char *i2s_ASN1_IA5STRING(X509V3_EXT_METHOD *method, ASN1_IA5STRING *ia5);
801             ASN1_IA5STRING *s2i_ASN1_IA5STRING(X509V3_EXT_METHOD *method,
802             X509V3_CTX *ctx, const char *str);
803             char *i2s_ASN1_UTF8STRING(X509V3_EXT_METHOD *method, ASN1_UTF8STRING *utf8);
804             ASN1_UTF8STRING *s2i_ASN1_UTF8STRING(X509V3_EXT_METHOD *method,
805             X509V3_CTX *ctx, const char *str);
806              
807             STACK_OF(CONF_VALUE) *i2v_GENERAL_NAME(X509V3_EXT_METHOD *method,
808             GENERAL_NAME *gen,
809             STACK_OF(CONF_VALUE) *ret);
810             int GENERAL_NAME_print(BIO *out, GENERAL_NAME *gen);
811              
812             DECLARE_ASN1_FUNCTIONS(GENERAL_NAMES)
813              
814             STACK_OF(CONF_VALUE) *i2v_GENERAL_NAMES(X509V3_EXT_METHOD *method,
815             GENERAL_NAMES *gen,
816             STACK_OF(CONF_VALUE) *extlist);
817             GENERAL_NAMES *v2i_GENERAL_NAMES(const X509V3_EXT_METHOD *method,
818             X509V3_CTX *ctx, STACK_OF(CONF_VALUE) *nval);
819              
820             DECLARE_ASN1_FUNCTIONS(OTHERNAME)
821             DECLARE_ASN1_FUNCTIONS(EDIPARTYNAME)
822             int OTHERNAME_cmp(OTHERNAME *a, OTHERNAME *b);
823             void GENERAL_NAME_set0_value(GENERAL_NAME *a, int type, void *value);
824             void *GENERAL_NAME_get0_value(const GENERAL_NAME *a, int *ptype);
825             int GENERAL_NAME_set0_othername(GENERAL_NAME *gen,
826             ASN1_OBJECT *oid, ASN1_TYPE *value);
827             int GENERAL_NAME_get0_otherName(const GENERAL_NAME *gen,
828             ASN1_OBJECT **poid, ASN1_TYPE **pvalue);
829              
830             char *i2s_ASN1_OCTET_STRING(X509V3_EXT_METHOD *method,
831             const ASN1_OCTET_STRING *ia5);
832             ASN1_OCTET_STRING *s2i_ASN1_OCTET_STRING(X509V3_EXT_METHOD *method,
833             X509V3_CTX *ctx, const char *str);
834              
835             DECLARE_ASN1_FUNCTIONS(EXTENDED_KEY_USAGE)
836             int i2a_ACCESS_DESCRIPTION(BIO *bp, const ACCESS_DESCRIPTION *a);
837              
838             DECLARE_ASN1_ALLOC_FUNCTIONS(TLS_FEATURE)
839              
840             DECLARE_ASN1_FUNCTIONS(CERTIFICATEPOLICIES)
841             DECLARE_ASN1_FUNCTIONS(POLICYINFO)
842             DECLARE_ASN1_FUNCTIONS(POLICYQUALINFO)
843             DECLARE_ASN1_FUNCTIONS(USERNOTICE)
844             DECLARE_ASN1_FUNCTIONS(NOTICEREF)
845              
846             DECLARE_ASN1_FUNCTIONS(CRL_DIST_POINTS)
847             DECLARE_ASN1_FUNCTIONS(DIST_POINT)
848             DECLARE_ASN1_FUNCTIONS(DIST_POINT_NAME)
849             DECLARE_ASN1_FUNCTIONS(ISSUING_DIST_POINT)
850              
851             int DIST_POINT_set_dpname(DIST_POINT_NAME *dpn, const X509_NAME *iname);
852              
853             int NAME_CONSTRAINTS_check(X509 *x, NAME_CONSTRAINTS *nc);
854             int NAME_CONSTRAINTS_check_CN(X509 *x, NAME_CONSTRAINTS *nc);
855              
856             DECLARE_ASN1_FUNCTIONS(ACCESS_DESCRIPTION)
857             DECLARE_ASN1_FUNCTIONS(AUTHORITY_INFO_ACCESS)
858              
859             DECLARE_ASN1_ITEM(POLICY_MAPPING)
860             DECLARE_ASN1_ALLOC_FUNCTIONS(POLICY_MAPPING)
861             DECLARE_ASN1_ITEM(POLICY_MAPPINGS)
862              
863             DECLARE_ASN1_ITEM(GENERAL_SUBTREE)
864             DECLARE_ASN1_ALLOC_FUNCTIONS(GENERAL_SUBTREE)
865              
866             DECLARE_ASN1_ITEM(NAME_CONSTRAINTS)
867             DECLARE_ASN1_ALLOC_FUNCTIONS(NAME_CONSTRAINTS)
868              
869             DECLARE_ASN1_ALLOC_FUNCTIONS(POLICY_CONSTRAINTS)
870             DECLARE_ASN1_ITEM(POLICY_CONSTRAINTS)
871              
872             GENERAL_NAME *a2i_GENERAL_NAME(GENERAL_NAME *out,
873             const X509V3_EXT_METHOD *method,
874             X509V3_CTX *ctx, int gen_type,
875             const char *value, int is_nc);
876              
877             # ifdef OPENSSL_CONF_H
878             GENERAL_NAME *v2i_GENERAL_NAME(const X509V3_EXT_METHOD *method,
879             X509V3_CTX *ctx, CONF_VALUE *cnf);
880             GENERAL_NAME *v2i_GENERAL_NAME_ex(GENERAL_NAME *out,
881             const X509V3_EXT_METHOD *method,
882             X509V3_CTX *ctx, CONF_VALUE *cnf,
883             int is_nc);
884              
885             void X509V3_conf_free(CONF_VALUE *val);
886              
887             X509_EXTENSION *X509V3_EXT_nconf_nid(CONF *conf, X509V3_CTX *ctx, int ext_nid,
888             const char *value);
889             X509_EXTENSION *X509V3_EXT_nconf(CONF *conf, X509V3_CTX *ctx, const char *name,
890             const char *value);
891             int X509V3_EXT_add_nconf_sk(CONF *conf, X509V3_CTX *ctx, const char *section,
892             STACK_OF(X509_EXTENSION) **sk);
893             int X509V3_EXT_add_nconf(CONF *conf, X509V3_CTX *ctx, const char *section,
894             X509 *cert);
895             int X509V3_EXT_REQ_add_nconf(CONF *conf, X509V3_CTX *ctx, const char *section,
896             X509_REQ *req);
897             int X509V3_EXT_CRL_add_nconf(CONF *conf, X509V3_CTX *ctx, const char *section,
898             X509_CRL *crl);
899              
900             X509_EXTENSION *X509V3_EXT_conf_nid(LHASH_OF(CONF_VALUE) *conf,
901             X509V3_CTX *ctx, int ext_nid,
902             const char *value);
903             X509_EXTENSION *X509V3_EXT_conf(LHASH_OF(CONF_VALUE) *conf, X509V3_CTX *ctx,
904             const char *name, const char *value);
905             int X509V3_EXT_add_conf(LHASH_OF(CONF_VALUE) *conf, X509V3_CTX *ctx,
906             const char *section, X509 *cert);
907             int X509V3_EXT_REQ_add_conf(LHASH_OF(CONF_VALUE) *conf, X509V3_CTX *ctx,
908             const char *section, X509_REQ *req);
909             int X509V3_EXT_CRL_add_conf(LHASH_OF(CONF_VALUE) *conf, X509V3_CTX *ctx,
910             const char *section, X509_CRL *crl);
911              
912             int X509V3_add_value_bool_nf(const char *name, int asn1_bool,
913             STACK_OF(CONF_VALUE) **extlist);
914             int X509V3_get_value_bool(const CONF_VALUE *value, int *asn1_bool);
915             int X509V3_get_value_int(const CONF_VALUE *value, ASN1_INTEGER **aint);
916             void X509V3_set_nconf(X509V3_CTX *ctx, CONF *conf);
917             void X509V3_set_conf_lhash(X509V3_CTX *ctx, LHASH_OF(CONF_VALUE) *lhash);
918             # endif
919              
920             char *X509V3_get_string(X509V3_CTX *ctx, const char *name, const char *section);
921             STACK_OF(CONF_VALUE) *X509V3_get_section(X509V3_CTX *ctx, const char *section);
922             void X509V3_string_free(X509V3_CTX *ctx, char *str);
923             void X509V3_section_free(X509V3_CTX *ctx, STACK_OF(CONF_VALUE) *section);
924             void X509V3_set_ctx(X509V3_CTX *ctx, X509 *issuer, X509 *subject,
925             X509_REQ *req, X509_CRL *crl, int flags);
926             /* For API backward compatibility, this is separate from X509V3_set_ctx(): */
927             int X509V3_set_issuer_pkey(X509V3_CTX *ctx, EVP_PKEY *pkey);
928              
929             int X509V3_add_value(const char *name, const char *value,
930             STACK_OF(CONF_VALUE) **extlist);
931             int X509V3_add_value_uchar(const char *name, const unsigned char *value,
932             STACK_OF(CONF_VALUE) **extlist);
933             int X509V3_add_value_bool(const char *name, int asn1_bool,
934             STACK_OF(CONF_VALUE) **extlist);
935             int X509V3_add_value_int(const char *name, const ASN1_INTEGER *aint,
936             STACK_OF(CONF_VALUE) **extlist);
937             char *i2s_ASN1_INTEGER(X509V3_EXT_METHOD *meth, const ASN1_INTEGER *aint);
938             ASN1_INTEGER *s2i_ASN1_INTEGER(X509V3_EXT_METHOD *meth, const char *value);
939             char *i2s_ASN1_ENUMERATED(X509V3_EXT_METHOD *meth, const ASN1_ENUMERATED *aint);
940             char *i2s_ASN1_ENUMERATED_TABLE(X509V3_EXT_METHOD *meth,
941             const ASN1_ENUMERATED *aint);
942             int X509V3_EXT_add(X509V3_EXT_METHOD *ext);
943             int X509V3_EXT_add_list(X509V3_EXT_METHOD *extlist);
944             int X509V3_EXT_add_alias(int nid_to, int nid_from);
945             void X509V3_EXT_cleanup(void);
946              
947             const X509V3_EXT_METHOD *X509V3_EXT_get(X509_EXTENSION *ext);
948             const X509V3_EXT_METHOD *X509V3_EXT_get_nid(int nid);
949             int X509V3_add_standard_extensions(void);
950             STACK_OF(CONF_VALUE) *X509V3_parse_list(const char *line);
951             void *X509V3_EXT_d2i(X509_EXTENSION *ext);
952             void *X509V3_get_d2i(const STACK_OF(X509_EXTENSION) *x, int nid, int *crit,
953             int *idx);
954              
955             X509_EXTENSION *X509V3_EXT_i2d(int ext_nid, int crit, void *ext_struc);
956             int X509V3_add1_i2d(STACK_OF(X509_EXTENSION) **x, int nid, void *value,
957             int crit, unsigned long flags);
958              
959             #ifndef OPENSSL_NO_DEPRECATED_1_1_0
960             /* The new declarations are in crypto.h, but the old ones were here. */
961             # define hex_to_string OPENSSL_buf2hexstr
962             # define string_to_hex OPENSSL_hexstr2buf
963             #endif
964              
965             void X509V3_EXT_val_prn(BIO *out, STACK_OF(CONF_VALUE) *val, int indent,
966             int ml);
967             int X509V3_EXT_print(BIO *out, X509_EXTENSION *ext, unsigned long flag,
968             int indent);
969             #ifndef OPENSSL_NO_STDIO
970             int X509V3_EXT_print_fp(FILE *out, X509_EXTENSION *ext, int flag, int indent);
971             #endif
972             int X509V3_extensions_print(BIO *out, const char *title,
973             const STACK_OF(X509_EXTENSION) *exts,
974             unsigned long flag, int indent);
975              
976             int X509_check_ca(X509 *x);
977             int X509_check_purpose(X509 *x, int id, int ca);
978             int X509_supported_extension(X509_EXTENSION *ex);
979             int X509_PURPOSE_set(int *p, int purpose);
980             int X509_check_issued(X509 *issuer, X509 *subject);
981             int X509_check_akid(const X509 *issuer, const AUTHORITY_KEYID *akid);
982             void X509_set_proxy_flag(X509 *x);
983             void X509_set_proxy_pathlen(X509 *x, long l);
984             long X509_get_proxy_pathlen(X509 *x);
985              
986             uint32_t X509_get_extension_flags(X509 *x);
987             uint32_t X509_get_key_usage(X509 *x);
988             uint32_t X509_get_extended_key_usage(X509 *x);
989             const ASN1_OCTET_STRING *X509_get0_subject_key_id(X509 *x);
990             const ASN1_OCTET_STRING *X509_get0_authority_key_id(X509 *x);
991             const GENERAL_NAMES *X509_get0_authority_issuer(X509 *x);
992             const ASN1_INTEGER *X509_get0_authority_serial(X509 *x);
993              
994             int X509_PURPOSE_get_count(void);
995             X509_PURPOSE *X509_PURPOSE_get0(int idx);
996             int X509_PURPOSE_get_by_sname(const char *sname);
997             int X509_PURPOSE_get_by_id(int id);
998             int X509_PURPOSE_add(int id, int trust, int flags,
999             int (*ck) (const X509_PURPOSE *, const X509 *, int),
1000             const char *name, const char *sname, void *arg);
1001             char *X509_PURPOSE_get0_name(const X509_PURPOSE *xp);
1002             char *X509_PURPOSE_get0_sname(const X509_PURPOSE *xp);
1003             int X509_PURPOSE_get_trust(const X509_PURPOSE *xp);
1004             void X509_PURPOSE_cleanup(void);
1005             int X509_PURPOSE_get_id(const X509_PURPOSE *);
1006              
1007             STACK_OF(OPENSSL_STRING) *X509_get1_email(X509 *x);
1008             STACK_OF(OPENSSL_STRING) *X509_REQ_get1_email(X509_REQ *x);
1009             void X509_email_free(STACK_OF(OPENSSL_STRING) *sk);
1010             STACK_OF(OPENSSL_STRING) *X509_get1_ocsp(X509 *x);
1011             /* Flags for X509_check_* functions */
1012              
1013             /*
1014             * Always check subject name for host match even if subject alt names present
1015             */
1016             # define X509_CHECK_FLAG_ALWAYS_CHECK_SUBJECT 0x1
1017             /* Disable wildcard matching for dnsName fields and common name. */
1018             # define X509_CHECK_FLAG_NO_WILDCARDS 0x2
1019             /* Wildcards must not match a partial label. */
1020             # define X509_CHECK_FLAG_NO_PARTIAL_WILDCARDS 0x4
1021             /* Allow (non-partial) wildcards to match multiple labels. */
1022             # define X509_CHECK_FLAG_MULTI_LABEL_WILDCARDS 0x8
1023             /* Constraint verifier subdomain patterns to match a single labels. */
1024             # define X509_CHECK_FLAG_SINGLE_LABEL_SUBDOMAINS 0x10
1025             /* Never check the subject CN */
1026             # define X509_CHECK_FLAG_NEVER_CHECK_SUBJECT 0x20
1027             /*
1028             * Match reference identifiers starting with "." to any sub-domain.
1029             * This is a non-public flag, turned on implicitly when the subject
1030             * reference identity is a DNS name.
1031             */
1032             # define _X509_CHECK_FLAG_DOT_SUBDOMAINS 0x8000
1033              
1034             int X509_check_host(X509 *x, const char *chk, size_t chklen,
1035             unsigned int flags, char **peername);
1036             int X509_check_email(X509 *x, const char *chk, size_t chklen,
1037             unsigned int flags);
1038             int X509_check_ip(X509 *x, const unsigned char *chk, size_t chklen,
1039             unsigned int flags);
1040             int X509_check_ip_asc(X509 *x, const char *ipasc, unsigned int flags);
1041              
1042             ASN1_OCTET_STRING *a2i_IPADDRESS(const char *ipasc);
1043             ASN1_OCTET_STRING *a2i_IPADDRESS_NC(const char *ipasc);
1044             int X509V3_NAME_from_section(X509_NAME *nm, STACK_OF(CONF_VALUE) *dn_sk,
1045             unsigned long chtype);
1046              
1047             void X509_POLICY_NODE_print(BIO *out, X509_POLICY_NODE *node, int indent);
1048             SKM_DEFINE_STACK_OF_INTERNAL(X509_POLICY_NODE, X509_POLICY_NODE, X509_POLICY_NODE)
1049             #define sk_X509_POLICY_NODE_num(sk) OPENSSL_sk_num(ossl_check_const_X509_POLICY_NODE_sk_type(sk))
1050             #define sk_X509_POLICY_NODE_value(sk, idx) ((X509_POLICY_NODE *)OPENSSL_sk_value(ossl_check_const_X509_POLICY_NODE_sk_type(sk), (idx)))
1051             #define sk_X509_POLICY_NODE_new(cmp) ((STACK_OF(X509_POLICY_NODE) *)OPENSSL_sk_new(ossl_check_X509_POLICY_NODE_compfunc_type(cmp)))
1052             #define sk_X509_POLICY_NODE_new_null() ((STACK_OF(X509_POLICY_NODE) *)OPENSSL_sk_new_null())
1053             #define sk_X509_POLICY_NODE_new_reserve(cmp, n) ((STACK_OF(X509_POLICY_NODE) *)OPENSSL_sk_new_reserve(ossl_check_X509_POLICY_NODE_compfunc_type(cmp), (n)))
1054             #define sk_X509_POLICY_NODE_reserve(sk, n) OPENSSL_sk_reserve(ossl_check_X509_POLICY_NODE_sk_type(sk), (n))
1055             #define sk_X509_POLICY_NODE_free(sk) OPENSSL_sk_free(ossl_check_X509_POLICY_NODE_sk_type(sk))
1056             #define sk_X509_POLICY_NODE_zero(sk) OPENSSL_sk_zero(ossl_check_X509_POLICY_NODE_sk_type(sk))
1057             #define sk_X509_POLICY_NODE_delete(sk, i) ((X509_POLICY_NODE *)OPENSSL_sk_delete(ossl_check_X509_POLICY_NODE_sk_type(sk), (i)))
1058             #define sk_X509_POLICY_NODE_delete_ptr(sk, ptr) ((X509_POLICY_NODE *)OPENSSL_sk_delete_ptr(ossl_check_X509_POLICY_NODE_sk_type(sk), ossl_check_X509_POLICY_NODE_type(ptr)))
1059             #define sk_X509_POLICY_NODE_push(sk, ptr) OPENSSL_sk_push(ossl_check_X509_POLICY_NODE_sk_type(sk), ossl_check_X509_POLICY_NODE_type(ptr))
1060             #define sk_X509_POLICY_NODE_unshift(sk, ptr) OPENSSL_sk_unshift(ossl_check_X509_POLICY_NODE_sk_type(sk), ossl_check_X509_POLICY_NODE_type(ptr))
1061             #define sk_X509_POLICY_NODE_pop(sk) ((X509_POLICY_NODE *)OPENSSL_sk_pop(ossl_check_X509_POLICY_NODE_sk_type(sk)))
1062             #define sk_X509_POLICY_NODE_shift(sk) ((X509_POLICY_NODE *)OPENSSL_sk_shift(ossl_check_X509_POLICY_NODE_sk_type(sk)))
1063             #define sk_X509_POLICY_NODE_pop_free(sk, freefunc) OPENSSL_sk_pop_free(ossl_check_X509_POLICY_NODE_sk_type(sk),ossl_check_X509_POLICY_NODE_freefunc_type(freefunc))
1064             #define sk_X509_POLICY_NODE_insert(sk, ptr, idx) OPENSSL_sk_insert(ossl_check_X509_POLICY_NODE_sk_type(sk), ossl_check_X509_POLICY_NODE_type(ptr), (idx))
1065             #define sk_X509_POLICY_NODE_set(sk, idx, ptr) ((X509_POLICY_NODE *)OPENSSL_sk_set(ossl_check_X509_POLICY_NODE_sk_type(sk), (idx), ossl_check_X509_POLICY_NODE_type(ptr)))
1066             #define sk_X509_POLICY_NODE_find(sk, ptr) OPENSSL_sk_find(ossl_check_X509_POLICY_NODE_sk_type(sk), ossl_check_X509_POLICY_NODE_type(ptr))
1067             #define sk_X509_POLICY_NODE_find_ex(sk, ptr) OPENSSL_sk_find_ex(ossl_check_X509_POLICY_NODE_sk_type(sk), ossl_check_X509_POLICY_NODE_type(ptr))
1068             #define sk_X509_POLICY_NODE_find_all(sk, ptr, pnum) OPENSSL_sk_find_all(ossl_check_X509_POLICY_NODE_sk_type(sk), ossl_check_X509_POLICY_NODE_type(ptr), pnum)
1069             #define sk_X509_POLICY_NODE_sort(sk) OPENSSL_sk_sort(ossl_check_X509_POLICY_NODE_sk_type(sk))
1070             #define sk_X509_POLICY_NODE_is_sorted(sk) OPENSSL_sk_is_sorted(ossl_check_const_X509_POLICY_NODE_sk_type(sk))
1071             #define sk_X509_POLICY_NODE_dup(sk) ((STACK_OF(X509_POLICY_NODE) *)OPENSSL_sk_dup(ossl_check_const_X509_POLICY_NODE_sk_type(sk)))
1072             #define sk_X509_POLICY_NODE_deep_copy(sk, copyfunc, freefunc) ((STACK_OF(X509_POLICY_NODE) *)OPENSSL_sk_deep_copy(ossl_check_const_X509_POLICY_NODE_sk_type(sk), ossl_check_X509_POLICY_NODE_copyfunc_type(copyfunc), ossl_check_X509_POLICY_NODE_freefunc_type(freefunc)))
1073             #define sk_X509_POLICY_NODE_set_cmp_func(sk, cmp) ((sk_X509_POLICY_NODE_compfunc)OPENSSL_sk_set_cmp_func(ossl_check_X509_POLICY_NODE_sk_type(sk), ossl_check_X509_POLICY_NODE_compfunc_type(cmp)))
1074              
1075              
1076              
1077             #ifndef OPENSSL_NO_RFC3779
1078             typedef struct ASRange_st {
1079             ASN1_INTEGER *min, *max;
1080             } ASRange;
1081              
1082             # define ASIdOrRange_id 0
1083             # define ASIdOrRange_range 1
1084              
1085             typedef struct ASIdOrRange_st {
1086             int type;
1087             union {
1088             ASN1_INTEGER *id;
1089             ASRange *range;
1090             } u;
1091             } ASIdOrRange;
1092              
1093             SKM_DEFINE_STACK_OF_INTERNAL(ASIdOrRange, ASIdOrRange, ASIdOrRange)
1094             #define sk_ASIdOrRange_num(sk) OPENSSL_sk_num(ossl_check_const_ASIdOrRange_sk_type(sk))
1095             #define sk_ASIdOrRange_value(sk, idx) ((ASIdOrRange *)OPENSSL_sk_value(ossl_check_const_ASIdOrRange_sk_type(sk), (idx)))
1096             #define sk_ASIdOrRange_new(cmp) ((STACK_OF(ASIdOrRange) *)OPENSSL_sk_new(ossl_check_ASIdOrRange_compfunc_type(cmp)))
1097             #define sk_ASIdOrRange_new_null() ((STACK_OF(ASIdOrRange) *)OPENSSL_sk_new_null())
1098             #define sk_ASIdOrRange_new_reserve(cmp, n) ((STACK_OF(ASIdOrRange) *)OPENSSL_sk_new_reserve(ossl_check_ASIdOrRange_compfunc_type(cmp), (n)))
1099             #define sk_ASIdOrRange_reserve(sk, n) OPENSSL_sk_reserve(ossl_check_ASIdOrRange_sk_type(sk), (n))
1100             #define sk_ASIdOrRange_free(sk) OPENSSL_sk_free(ossl_check_ASIdOrRange_sk_type(sk))
1101             #define sk_ASIdOrRange_zero(sk) OPENSSL_sk_zero(ossl_check_ASIdOrRange_sk_type(sk))
1102             #define sk_ASIdOrRange_delete(sk, i) ((ASIdOrRange *)OPENSSL_sk_delete(ossl_check_ASIdOrRange_sk_type(sk), (i)))
1103             #define sk_ASIdOrRange_delete_ptr(sk, ptr) ((ASIdOrRange *)OPENSSL_sk_delete_ptr(ossl_check_ASIdOrRange_sk_type(sk), ossl_check_ASIdOrRange_type(ptr)))
1104             #define sk_ASIdOrRange_push(sk, ptr) OPENSSL_sk_push(ossl_check_ASIdOrRange_sk_type(sk), ossl_check_ASIdOrRange_type(ptr))
1105             #define sk_ASIdOrRange_unshift(sk, ptr) OPENSSL_sk_unshift(ossl_check_ASIdOrRange_sk_type(sk), ossl_check_ASIdOrRange_type(ptr))
1106             #define sk_ASIdOrRange_pop(sk) ((ASIdOrRange *)OPENSSL_sk_pop(ossl_check_ASIdOrRange_sk_type(sk)))
1107             #define sk_ASIdOrRange_shift(sk) ((ASIdOrRange *)OPENSSL_sk_shift(ossl_check_ASIdOrRange_sk_type(sk)))
1108             #define sk_ASIdOrRange_pop_free(sk, freefunc) OPENSSL_sk_pop_free(ossl_check_ASIdOrRange_sk_type(sk),ossl_check_ASIdOrRange_freefunc_type(freefunc))
1109             #define sk_ASIdOrRange_insert(sk, ptr, idx) OPENSSL_sk_insert(ossl_check_ASIdOrRange_sk_type(sk), ossl_check_ASIdOrRange_type(ptr), (idx))
1110             #define sk_ASIdOrRange_set(sk, idx, ptr) ((ASIdOrRange *)OPENSSL_sk_set(ossl_check_ASIdOrRange_sk_type(sk), (idx), ossl_check_ASIdOrRange_type(ptr)))
1111             #define sk_ASIdOrRange_find(sk, ptr) OPENSSL_sk_find(ossl_check_ASIdOrRange_sk_type(sk), ossl_check_ASIdOrRange_type(ptr))
1112             #define sk_ASIdOrRange_find_ex(sk, ptr) OPENSSL_sk_find_ex(ossl_check_ASIdOrRange_sk_type(sk), ossl_check_ASIdOrRange_type(ptr))
1113             #define sk_ASIdOrRange_find_all(sk, ptr, pnum) OPENSSL_sk_find_all(ossl_check_ASIdOrRange_sk_type(sk), ossl_check_ASIdOrRange_type(ptr), pnum)
1114             #define sk_ASIdOrRange_sort(sk) OPENSSL_sk_sort(ossl_check_ASIdOrRange_sk_type(sk))
1115             #define sk_ASIdOrRange_is_sorted(sk) OPENSSL_sk_is_sorted(ossl_check_const_ASIdOrRange_sk_type(sk))
1116             #define sk_ASIdOrRange_dup(sk) ((STACK_OF(ASIdOrRange) *)OPENSSL_sk_dup(ossl_check_const_ASIdOrRange_sk_type(sk)))
1117             #define sk_ASIdOrRange_deep_copy(sk, copyfunc, freefunc) ((STACK_OF(ASIdOrRange) *)OPENSSL_sk_deep_copy(ossl_check_const_ASIdOrRange_sk_type(sk), ossl_check_ASIdOrRange_copyfunc_type(copyfunc), ossl_check_ASIdOrRange_freefunc_type(freefunc)))
1118             #define sk_ASIdOrRange_set_cmp_func(sk, cmp) ((sk_ASIdOrRange_compfunc)OPENSSL_sk_set_cmp_func(ossl_check_ASIdOrRange_sk_type(sk), ossl_check_ASIdOrRange_compfunc_type(cmp)))
1119              
1120              
1121             typedef STACK_OF(ASIdOrRange) ASIdOrRanges;
1122              
1123             # define ASIdentifierChoice_inherit 0
1124             # define ASIdentifierChoice_asIdsOrRanges 1
1125              
1126             typedef struct ASIdentifierChoice_st {
1127             int type;
1128             union {
1129             ASN1_NULL *inherit;
1130             ASIdOrRanges *asIdsOrRanges;
1131             } u;
1132             } ASIdentifierChoice;
1133              
1134             typedef struct ASIdentifiers_st {
1135             ASIdentifierChoice *asnum, *rdi;
1136             } ASIdentifiers;
1137              
1138             DECLARE_ASN1_FUNCTIONS(ASRange)
1139             DECLARE_ASN1_FUNCTIONS(ASIdOrRange)
1140             DECLARE_ASN1_FUNCTIONS(ASIdentifierChoice)
1141             DECLARE_ASN1_FUNCTIONS(ASIdentifiers)
1142              
1143             typedef struct IPAddressRange_st {
1144             ASN1_BIT_STRING *min, *max;
1145             } IPAddressRange;
1146              
1147             # define IPAddressOrRange_addressPrefix 0
1148             # define IPAddressOrRange_addressRange 1
1149              
1150             typedef struct IPAddressOrRange_st {
1151             int type;
1152             union {
1153             ASN1_BIT_STRING *addressPrefix;
1154             IPAddressRange *addressRange;
1155             } u;
1156             } IPAddressOrRange;
1157              
1158             SKM_DEFINE_STACK_OF_INTERNAL(IPAddressOrRange, IPAddressOrRange, IPAddressOrRange)
1159             #define sk_IPAddressOrRange_num(sk) OPENSSL_sk_num(ossl_check_const_IPAddressOrRange_sk_type(sk))
1160             #define sk_IPAddressOrRange_value(sk, idx) ((IPAddressOrRange *)OPENSSL_sk_value(ossl_check_const_IPAddressOrRange_sk_type(sk), (idx)))
1161             #define sk_IPAddressOrRange_new(cmp) ((STACK_OF(IPAddressOrRange) *)OPENSSL_sk_new(ossl_check_IPAddressOrRange_compfunc_type(cmp)))
1162             #define sk_IPAddressOrRange_new_null() ((STACK_OF(IPAddressOrRange) *)OPENSSL_sk_new_null())
1163             #define sk_IPAddressOrRange_new_reserve(cmp, n) ((STACK_OF(IPAddressOrRange) *)OPENSSL_sk_new_reserve(ossl_check_IPAddressOrRange_compfunc_type(cmp), (n)))
1164             #define sk_IPAddressOrRange_reserve(sk, n) OPENSSL_sk_reserve(ossl_check_IPAddressOrRange_sk_type(sk), (n))
1165             #define sk_IPAddressOrRange_free(sk) OPENSSL_sk_free(ossl_check_IPAddressOrRange_sk_type(sk))
1166             #define sk_IPAddressOrRange_zero(sk) OPENSSL_sk_zero(ossl_check_IPAddressOrRange_sk_type(sk))
1167             #define sk_IPAddressOrRange_delete(sk, i) ((IPAddressOrRange *)OPENSSL_sk_delete(ossl_check_IPAddressOrRange_sk_type(sk), (i)))
1168             #define sk_IPAddressOrRange_delete_ptr(sk, ptr) ((IPAddressOrRange *)OPENSSL_sk_delete_ptr(ossl_check_IPAddressOrRange_sk_type(sk), ossl_check_IPAddressOrRange_type(ptr)))
1169             #define sk_IPAddressOrRange_push(sk, ptr) OPENSSL_sk_push(ossl_check_IPAddressOrRange_sk_type(sk), ossl_check_IPAddressOrRange_type(ptr))
1170             #define sk_IPAddressOrRange_unshift(sk, ptr) OPENSSL_sk_unshift(ossl_check_IPAddressOrRange_sk_type(sk), ossl_check_IPAddressOrRange_type(ptr))
1171             #define sk_IPAddressOrRange_pop(sk) ((IPAddressOrRange *)OPENSSL_sk_pop(ossl_check_IPAddressOrRange_sk_type(sk)))
1172             #define sk_IPAddressOrRange_shift(sk) ((IPAddressOrRange *)OPENSSL_sk_shift(ossl_check_IPAddressOrRange_sk_type(sk)))
1173             #define sk_IPAddressOrRange_pop_free(sk, freefunc) OPENSSL_sk_pop_free(ossl_check_IPAddressOrRange_sk_type(sk),ossl_check_IPAddressOrRange_freefunc_type(freefunc))
1174             #define sk_IPAddressOrRange_insert(sk, ptr, idx) OPENSSL_sk_insert(ossl_check_IPAddressOrRange_sk_type(sk), ossl_check_IPAddressOrRange_type(ptr), (idx))
1175             #define sk_IPAddressOrRange_set(sk, idx, ptr) ((IPAddressOrRange *)OPENSSL_sk_set(ossl_check_IPAddressOrRange_sk_type(sk), (idx), ossl_check_IPAddressOrRange_type(ptr)))
1176             #define sk_IPAddressOrRange_find(sk, ptr) OPENSSL_sk_find(ossl_check_IPAddressOrRange_sk_type(sk), ossl_check_IPAddressOrRange_type(ptr))
1177             #define sk_IPAddressOrRange_find_ex(sk, ptr) OPENSSL_sk_find_ex(ossl_check_IPAddressOrRange_sk_type(sk), ossl_check_IPAddressOrRange_type(ptr))
1178             #define sk_IPAddressOrRange_find_all(sk, ptr, pnum) OPENSSL_sk_find_all(ossl_check_IPAddressOrRange_sk_type(sk), ossl_check_IPAddressOrRange_type(ptr), pnum)
1179             #define sk_IPAddressOrRange_sort(sk) OPENSSL_sk_sort(ossl_check_IPAddressOrRange_sk_type(sk))
1180             #define sk_IPAddressOrRange_is_sorted(sk) OPENSSL_sk_is_sorted(ossl_check_const_IPAddressOrRange_sk_type(sk))
1181             #define sk_IPAddressOrRange_dup(sk) ((STACK_OF(IPAddressOrRange) *)OPENSSL_sk_dup(ossl_check_const_IPAddressOrRange_sk_type(sk)))
1182             #define sk_IPAddressOrRange_deep_copy(sk, copyfunc, freefunc) ((STACK_OF(IPAddressOrRange) *)OPENSSL_sk_deep_copy(ossl_check_const_IPAddressOrRange_sk_type(sk), ossl_check_IPAddressOrRange_copyfunc_type(copyfunc), ossl_check_IPAddressOrRange_freefunc_type(freefunc)))
1183             #define sk_IPAddressOrRange_set_cmp_func(sk, cmp) ((sk_IPAddressOrRange_compfunc)OPENSSL_sk_set_cmp_func(ossl_check_IPAddressOrRange_sk_type(sk), ossl_check_IPAddressOrRange_compfunc_type(cmp)))
1184              
1185              
1186             typedef STACK_OF(IPAddressOrRange) IPAddressOrRanges;
1187              
1188             # define IPAddressChoice_inherit 0
1189             # define IPAddressChoice_addressesOrRanges 1
1190              
1191             typedef struct IPAddressChoice_st {
1192             int type;
1193             union {
1194             ASN1_NULL *inherit;
1195             IPAddressOrRanges *addressesOrRanges;
1196             } u;
1197             } IPAddressChoice;
1198              
1199             typedef struct IPAddressFamily_st {
1200             ASN1_OCTET_STRING *addressFamily;
1201             IPAddressChoice *ipAddressChoice;
1202             } IPAddressFamily;
1203              
1204             SKM_DEFINE_STACK_OF_INTERNAL(IPAddressFamily, IPAddressFamily, IPAddressFamily)
1205             #define sk_IPAddressFamily_num(sk) OPENSSL_sk_num(ossl_check_const_IPAddressFamily_sk_type(sk))
1206             #define sk_IPAddressFamily_value(sk, idx) ((IPAddressFamily *)OPENSSL_sk_value(ossl_check_const_IPAddressFamily_sk_type(sk), (idx)))
1207             #define sk_IPAddressFamily_new(cmp) ((STACK_OF(IPAddressFamily) *)OPENSSL_sk_new(ossl_check_IPAddressFamily_compfunc_type(cmp)))
1208             #define sk_IPAddressFamily_new_null() ((STACK_OF(IPAddressFamily) *)OPENSSL_sk_new_null())
1209             #define sk_IPAddressFamily_new_reserve(cmp, n) ((STACK_OF(IPAddressFamily) *)OPENSSL_sk_new_reserve(ossl_check_IPAddressFamily_compfunc_type(cmp), (n)))
1210             #define sk_IPAddressFamily_reserve(sk, n) OPENSSL_sk_reserve(ossl_check_IPAddressFamily_sk_type(sk), (n))
1211             #define sk_IPAddressFamily_free(sk) OPENSSL_sk_free(ossl_check_IPAddressFamily_sk_type(sk))
1212             #define sk_IPAddressFamily_zero(sk) OPENSSL_sk_zero(ossl_check_IPAddressFamily_sk_type(sk))
1213             #define sk_IPAddressFamily_delete(sk, i) ((IPAddressFamily *)OPENSSL_sk_delete(ossl_check_IPAddressFamily_sk_type(sk), (i)))
1214             #define sk_IPAddressFamily_delete_ptr(sk, ptr) ((IPAddressFamily *)OPENSSL_sk_delete_ptr(ossl_check_IPAddressFamily_sk_type(sk), ossl_check_IPAddressFamily_type(ptr)))
1215             #define sk_IPAddressFamily_push(sk, ptr) OPENSSL_sk_push(ossl_check_IPAddressFamily_sk_type(sk), ossl_check_IPAddressFamily_type(ptr))
1216             #define sk_IPAddressFamily_unshift(sk, ptr) OPENSSL_sk_unshift(ossl_check_IPAddressFamily_sk_type(sk), ossl_check_IPAddressFamily_type(ptr))
1217             #define sk_IPAddressFamily_pop(sk) ((IPAddressFamily *)OPENSSL_sk_pop(ossl_check_IPAddressFamily_sk_type(sk)))
1218             #define sk_IPAddressFamily_shift(sk) ((IPAddressFamily *)OPENSSL_sk_shift(ossl_check_IPAddressFamily_sk_type(sk)))
1219             #define sk_IPAddressFamily_pop_free(sk, freefunc) OPENSSL_sk_pop_free(ossl_check_IPAddressFamily_sk_type(sk),ossl_check_IPAddressFamily_freefunc_type(freefunc))
1220             #define sk_IPAddressFamily_insert(sk, ptr, idx) OPENSSL_sk_insert(ossl_check_IPAddressFamily_sk_type(sk), ossl_check_IPAddressFamily_type(ptr), (idx))
1221             #define sk_IPAddressFamily_set(sk, idx, ptr) ((IPAddressFamily *)OPENSSL_sk_set(ossl_check_IPAddressFamily_sk_type(sk), (idx), ossl_check_IPAddressFamily_type(ptr)))
1222             #define sk_IPAddressFamily_find(sk, ptr) OPENSSL_sk_find(ossl_check_IPAddressFamily_sk_type(sk), ossl_check_IPAddressFamily_type(ptr))
1223             #define sk_IPAddressFamily_find_ex(sk, ptr) OPENSSL_sk_find_ex(ossl_check_IPAddressFamily_sk_type(sk), ossl_check_IPAddressFamily_type(ptr))
1224             #define sk_IPAddressFamily_find_all(sk, ptr, pnum) OPENSSL_sk_find_all(ossl_check_IPAddressFamily_sk_type(sk), ossl_check_IPAddressFamily_type(ptr), pnum)
1225             #define sk_IPAddressFamily_sort(sk) OPENSSL_sk_sort(ossl_check_IPAddressFamily_sk_type(sk))
1226             #define sk_IPAddressFamily_is_sorted(sk) OPENSSL_sk_is_sorted(ossl_check_const_IPAddressFamily_sk_type(sk))
1227             #define sk_IPAddressFamily_dup(sk) ((STACK_OF(IPAddressFamily) *)OPENSSL_sk_dup(ossl_check_const_IPAddressFamily_sk_type(sk)))
1228             #define sk_IPAddressFamily_deep_copy(sk, copyfunc, freefunc) ((STACK_OF(IPAddressFamily) *)OPENSSL_sk_deep_copy(ossl_check_const_IPAddressFamily_sk_type(sk), ossl_check_IPAddressFamily_copyfunc_type(copyfunc), ossl_check_IPAddressFamily_freefunc_type(freefunc)))
1229             #define sk_IPAddressFamily_set_cmp_func(sk, cmp) ((sk_IPAddressFamily_compfunc)OPENSSL_sk_set_cmp_func(ossl_check_IPAddressFamily_sk_type(sk), ossl_check_IPAddressFamily_compfunc_type(cmp)))
1230              
1231              
1232              
1233             typedef STACK_OF(IPAddressFamily) IPAddrBlocks;
1234              
1235             DECLARE_ASN1_FUNCTIONS(IPAddressRange)
1236             DECLARE_ASN1_FUNCTIONS(IPAddressOrRange)
1237             DECLARE_ASN1_FUNCTIONS(IPAddressChoice)
1238             DECLARE_ASN1_FUNCTIONS(IPAddressFamily)
1239              
1240             /*
1241             * API tag for elements of the ASIdentifer SEQUENCE.
1242             */
1243             # define V3_ASID_ASNUM 0
1244             # define V3_ASID_RDI 1
1245              
1246             /*
1247             * AFI values, assigned by IANA. It'd be nice to make the AFI
1248             * handling code totally generic, but there are too many little things
1249             * that would need to be defined for other address families for it to
1250             * be worth the trouble.
1251             */
1252             # define IANA_AFI_IPV4 1
1253             # define IANA_AFI_IPV6 2
1254              
1255             /*
1256             * Utilities to construct and extract values from RFC3779 extensions,
1257             * since some of the encodings (particularly for IP address prefixes
1258             * and ranges) are a bit tedious to work with directly.
1259             */
1260             int X509v3_asid_add_inherit(ASIdentifiers *asid, int which);
1261             int X509v3_asid_add_id_or_range(ASIdentifiers *asid, int which,
1262             ASN1_INTEGER *min, ASN1_INTEGER *max);
1263             int X509v3_addr_add_inherit(IPAddrBlocks *addr,
1264             const unsigned afi, const unsigned *safi);
1265             int X509v3_addr_add_prefix(IPAddrBlocks *addr,
1266             const unsigned afi, const unsigned *safi,
1267             unsigned char *a, const int prefixlen);
1268             int X509v3_addr_add_range(IPAddrBlocks *addr,
1269             const unsigned afi, const unsigned *safi,
1270             unsigned char *min, unsigned char *max);
1271             unsigned X509v3_addr_get_afi(const IPAddressFamily *f);
1272             int X509v3_addr_get_range(IPAddressOrRange *aor, const unsigned afi,
1273             unsigned char *min, unsigned char *max,
1274             const int length);
1275              
1276             /*
1277             * Canonical forms.
1278             */
1279             int X509v3_asid_is_canonical(ASIdentifiers *asid);
1280             int X509v3_addr_is_canonical(IPAddrBlocks *addr);
1281             int X509v3_asid_canonize(ASIdentifiers *asid);
1282             int X509v3_addr_canonize(IPAddrBlocks *addr);
1283              
1284             /*
1285             * Tests for inheritance and containment.
1286             */
1287             int X509v3_asid_inherits(ASIdentifiers *asid);
1288             int X509v3_addr_inherits(IPAddrBlocks *addr);
1289             int X509v3_asid_subset(ASIdentifiers *a, ASIdentifiers *b);
1290             int X509v3_addr_subset(IPAddrBlocks *a, IPAddrBlocks *b);
1291              
1292             /*
1293             * Check whether RFC 3779 extensions nest properly in chains.
1294             */
1295             int X509v3_asid_validate_path(X509_STORE_CTX *);
1296             int X509v3_addr_validate_path(X509_STORE_CTX *);
1297             int X509v3_asid_validate_resource_set(STACK_OF(X509) *chain,
1298             ASIdentifiers *ext,
1299             int allow_inheritance);
1300             int X509v3_addr_validate_resource_set(STACK_OF(X509) *chain,
1301             IPAddrBlocks *ext, int allow_inheritance);
1302              
1303             #endif /* OPENSSL_NO_RFC3779 */
1304              
1305             SKM_DEFINE_STACK_OF_INTERNAL(ASN1_STRING, ASN1_STRING, ASN1_STRING)
1306             #define sk_ASN1_STRING_num(sk) OPENSSL_sk_num(ossl_check_const_ASN1_STRING_sk_type(sk))
1307             #define sk_ASN1_STRING_value(sk, idx) ((ASN1_STRING *)OPENSSL_sk_value(ossl_check_const_ASN1_STRING_sk_type(sk), (idx)))
1308             #define sk_ASN1_STRING_new(cmp) ((STACK_OF(ASN1_STRING) *)OPENSSL_sk_new(ossl_check_ASN1_STRING_compfunc_type(cmp)))
1309             #define sk_ASN1_STRING_new_null() ((STACK_OF(ASN1_STRING) *)OPENSSL_sk_new_null())
1310             #define sk_ASN1_STRING_new_reserve(cmp, n) ((STACK_OF(ASN1_STRING) *)OPENSSL_sk_new_reserve(ossl_check_ASN1_STRING_compfunc_type(cmp), (n)))
1311             #define sk_ASN1_STRING_reserve(sk, n) OPENSSL_sk_reserve(ossl_check_ASN1_STRING_sk_type(sk), (n))
1312             #define sk_ASN1_STRING_free(sk) OPENSSL_sk_free(ossl_check_ASN1_STRING_sk_type(sk))
1313             #define sk_ASN1_STRING_zero(sk) OPENSSL_sk_zero(ossl_check_ASN1_STRING_sk_type(sk))
1314             #define sk_ASN1_STRING_delete(sk, i) ((ASN1_STRING *)OPENSSL_sk_delete(ossl_check_ASN1_STRING_sk_type(sk), (i)))
1315             #define sk_ASN1_STRING_delete_ptr(sk, ptr) ((ASN1_STRING *)OPENSSL_sk_delete_ptr(ossl_check_ASN1_STRING_sk_type(sk), ossl_check_ASN1_STRING_type(ptr)))
1316             #define sk_ASN1_STRING_push(sk, ptr) OPENSSL_sk_push(ossl_check_ASN1_STRING_sk_type(sk), ossl_check_ASN1_STRING_type(ptr))
1317             #define sk_ASN1_STRING_unshift(sk, ptr) OPENSSL_sk_unshift(ossl_check_ASN1_STRING_sk_type(sk), ossl_check_ASN1_STRING_type(ptr))
1318             #define sk_ASN1_STRING_pop(sk) ((ASN1_STRING *)OPENSSL_sk_pop(ossl_check_ASN1_STRING_sk_type(sk)))
1319             #define sk_ASN1_STRING_shift(sk) ((ASN1_STRING *)OPENSSL_sk_shift(ossl_check_ASN1_STRING_sk_type(sk)))
1320             #define sk_ASN1_STRING_pop_free(sk, freefunc) OPENSSL_sk_pop_free(ossl_check_ASN1_STRING_sk_type(sk),ossl_check_ASN1_STRING_freefunc_type(freefunc))
1321             #define sk_ASN1_STRING_insert(sk, ptr, idx) OPENSSL_sk_insert(ossl_check_ASN1_STRING_sk_type(sk), ossl_check_ASN1_STRING_type(ptr), (idx))
1322             #define sk_ASN1_STRING_set(sk, idx, ptr) ((ASN1_STRING *)OPENSSL_sk_set(ossl_check_ASN1_STRING_sk_type(sk), (idx), ossl_check_ASN1_STRING_type(ptr)))
1323             #define sk_ASN1_STRING_find(sk, ptr) OPENSSL_sk_find(ossl_check_ASN1_STRING_sk_type(sk), ossl_check_ASN1_STRING_type(ptr))
1324             #define sk_ASN1_STRING_find_ex(sk, ptr) OPENSSL_sk_find_ex(ossl_check_ASN1_STRING_sk_type(sk), ossl_check_ASN1_STRING_type(ptr))
1325             #define sk_ASN1_STRING_find_all(sk, ptr, pnum) OPENSSL_sk_find_all(ossl_check_ASN1_STRING_sk_type(sk), ossl_check_ASN1_STRING_type(ptr), pnum)
1326             #define sk_ASN1_STRING_sort(sk) OPENSSL_sk_sort(ossl_check_ASN1_STRING_sk_type(sk))
1327             #define sk_ASN1_STRING_is_sorted(sk) OPENSSL_sk_is_sorted(ossl_check_const_ASN1_STRING_sk_type(sk))
1328             #define sk_ASN1_STRING_dup(sk) ((STACK_OF(ASN1_STRING) *)OPENSSL_sk_dup(ossl_check_const_ASN1_STRING_sk_type(sk)))
1329             #define sk_ASN1_STRING_deep_copy(sk, copyfunc, freefunc) ((STACK_OF(ASN1_STRING) *)OPENSSL_sk_deep_copy(ossl_check_const_ASN1_STRING_sk_type(sk), ossl_check_ASN1_STRING_copyfunc_type(copyfunc), ossl_check_ASN1_STRING_freefunc_type(freefunc)))
1330             #define sk_ASN1_STRING_set_cmp_func(sk, cmp) ((sk_ASN1_STRING_compfunc)OPENSSL_sk_set_cmp_func(ossl_check_ASN1_STRING_sk_type(sk), ossl_check_ASN1_STRING_compfunc_type(cmp)))
1331              
1332              
1333             /*
1334             * Admission Syntax
1335             */
1336             typedef struct NamingAuthority_st NAMING_AUTHORITY;
1337             typedef struct ProfessionInfo_st PROFESSION_INFO;
1338             typedef struct Admissions_st ADMISSIONS;
1339             typedef struct AdmissionSyntax_st ADMISSION_SYNTAX;
1340             DECLARE_ASN1_FUNCTIONS(NAMING_AUTHORITY)
1341             DECLARE_ASN1_FUNCTIONS(PROFESSION_INFO)
1342             DECLARE_ASN1_FUNCTIONS(ADMISSIONS)
1343             DECLARE_ASN1_FUNCTIONS(ADMISSION_SYNTAX)
1344             SKM_DEFINE_STACK_OF_INTERNAL(PROFESSION_INFO, PROFESSION_INFO, PROFESSION_INFO)
1345             #define sk_PROFESSION_INFO_num(sk) OPENSSL_sk_num(ossl_check_const_PROFESSION_INFO_sk_type(sk))
1346             #define sk_PROFESSION_INFO_value(sk, idx) ((PROFESSION_INFO *)OPENSSL_sk_value(ossl_check_const_PROFESSION_INFO_sk_type(sk), (idx)))
1347             #define sk_PROFESSION_INFO_new(cmp) ((STACK_OF(PROFESSION_INFO) *)OPENSSL_sk_new(ossl_check_PROFESSION_INFO_compfunc_type(cmp)))
1348             #define sk_PROFESSION_INFO_new_null() ((STACK_OF(PROFESSION_INFO) *)OPENSSL_sk_new_null())
1349             #define sk_PROFESSION_INFO_new_reserve(cmp, n) ((STACK_OF(PROFESSION_INFO) *)OPENSSL_sk_new_reserve(ossl_check_PROFESSION_INFO_compfunc_type(cmp), (n)))
1350             #define sk_PROFESSION_INFO_reserve(sk, n) OPENSSL_sk_reserve(ossl_check_PROFESSION_INFO_sk_type(sk), (n))
1351             #define sk_PROFESSION_INFO_free(sk) OPENSSL_sk_free(ossl_check_PROFESSION_INFO_sk_type(sk))
1352             #define sk_PROFESSION_INFO_zero(sk) OPENSSL_sk_zero(ossl_check_PROFESSION_INFO_sk_type(sk))
1353             #define sk_PROFESSION_INFO_delete(sk, i) ((PROFESSION_INFO *)OPENSSL_sk_delete(ossl_check_PROFESSION_INFO_sk_type(sk), (i)))
1354             #define sk_PROFESSION_INFO_delete_ptr(sk, ptr) ((PROFESSION_INFO *)OPENSSL_sk_delete_ptr(ossl_check_PROFESSION_INFO_sk_type(sk), ossl_check_PROFESSION_INFO_type(ptr)))
1355             #define sk_PROFESSION_INFO_push(sk, ptr) OPENSSL_sk_push(ossl_check_PROFESSION_INFO_sk_type(sk), ossl_check_PROFESSION_INFO_type(ptr))
1356             #define sk_PROFESSION_INFO_unshift(sk, ptr) OPENSSL_sk_unshift(ossl_check_PROFESSION_INFO_sk_type(sk), ossl_check_PROFESSION_INFO_type(ptr))
1357             #define sk_PROFESSION_INFO_pop(sk) ((PROFESSION_INFO *)OPENSSL_sk_pop(ossl_check_PROFESSION_INFO_sk_type(sk)))
1358             #define sk_PROFESSION_INFO_shift(sk) ((PROFESSION_INFO *)OPENSSL_sk_shift(ossl_check_PROFESSION_INFO_sk_type(sk)))
1359             #define sk_PROFESSION_INFO_pop_free(sk, freefunc) OPENSSL_sk_pop_free(ossl_check_PROFESSION_INFO_sk_type(sk),ossl_check_PROFESSION_INFO_freefunc_type(freefunc))
1360             #define sk_PROFESSION_INFO_insert(sk, ptr, idx) OPENSSL_sk_insert(ossl_check_PROFESSION_INFO_sk_type(sk), ossl_check_PROFESSION_INFO_type(ptr), (idx))
1361             #define sk_PROFESSION_INFO_set(sk, idx, ptr) ((PROFESSION_INFO *)OPENSSL_sk_set(ossl_check_PROFESSION_INFO_sk_type(sk), (idx), ossl_check_PROFESSION_INFO_type(ptr)))
1362             #define sk_PROFESSION_INFO_find(sk, ptr) OPENSSL_sk_find(ossl_check_PROFESSION_INFO_sk_type(sk), ossl_check_PROFESSION_INFO_type(ptr))
1363             #define sk_PROFESSION_INFO_find_ex(sk, ptr) OPENSSL_sk_find_ex(ossl_check_PROFESSION_INFO_sk_type(sk), ossl_check_PROFESSION_INFO_type(ptr))
1364             #define sk_PROFESSION_INFO_find_all(sk, ptr, pnum) OPENSSL_sk_find_all(ossl_check_PROFESSION_INFO_sk_type(sk), ossl_check_PROFESSION_INFO_type(ptr), pnum)
1365             #define sk_PROFESSION_INFO_sort(sk) OPENSSL_sk_sort(ossl_check_PROFESSION_INFO_sk_type(sk))
1366             #define sk_PROFESSION_INFO_is_sorted(sk) OPENSSL_sk_is_sorted(ossl_check_const_PROFESSION_INFO_sk_type(sk))
1367             #define sk_PROFESSION_INFO_dup(sk) ((STACK_OF(PROFESSION_INFO) *)OPENSSL_sk_dup(ossl_check_const_PROFESSION_INFO_sk_type(sk)))
1368             #define sk_PROFESSION_INFO_deep_copy(sk, copyfunc, freefunc) ((STACK_OF(PROFESSION_INFO) *)OPENSSL_sk_deep_copy(ossl_check_const_PROFESSION_INFO_sk_type(sk), ossl_check_PROFESSION_INFO_copyfunc_type(copyfunc), ossl_check_PROFESSION_INFO_freefunc_type(freefunc)))
1369             #define sk_PROFESSION_INFO_set_cmp_func(sk, cmp) ((sk_PROFESSION_INFO_compfunc)OPENSSL_sk_set_cmp_func(ossl_check_PROFESSION_INFO_sk_type(sk), ossl_check_PROFESSION_INFO_compfunc_type(cmp)))
1370             SKM_DEFINE_STACK_OF_INTERNAL(ADMISSIONS, ADMISSIONS, ADMISSIONS)
1371             #define sk_ADMISSIONS_num(sk) OPENSSL_sk_num(ossl_check_const_ADMISSIONS_sk_type(sk))
1372             #define sk_ADMISSIONS_value(sk, idx) ((ADMISSIONS *)OPENSSL_sk_value(ossl_check_const_ADMISSIONS_sk_type(sk), (idx)))
1373             #define sk_ADMISSIONS_new(cmp) ((STACK_OF(ADMISSIONS) *)OPENSSL_sk_new(ossl_check_ADMISSIONS_compfunc_type(cmp)))
1374             #define sk_ADMISSIONS_new_null() ((STACK_OF(ADMISSIONS) *)OPENSSL_sk_new_null())
1375             #define sk_ADMISSIONS_new_reserve(cmp, n) ((STACK_OF(ADMISSIONS) *)OPENSSL_sk_new_reserve(ossl_check_ADMISSIONS_compfunc_type(cmp), (n)))
1376             #define sk_ADMISSIONS_reserve(sk, n) OPENSSL_sk_reserve(ossl_check_ADMISSIONS_sk_type(sk), (n))
1377             #define sk_ADMISSIONS_free(sk) OPENSSL_sk_free(ossl_check_ADMISSIONS_sk_type(sk))
1378             #define sk_ADMISSIONS_zero(sk) OPENSSL_sk_zero(ossl_check_ADMISSIONS_sk_type(sk))
1379             #define sk_ADMISSIONS_delete(sk, i) ((ADMISSIONS *)OPENSSL_sk_delete(ossl_check_ADMISSIONS_sk_type(sk), (i)))
1380             #define sk_ADMISSIONS_delete_ptr(sk, ptr) ((ADMISSIONS *)OPENSSL_sk_delete_ptr(ossl_check_ADMISSIONS_sk_type(sk), ossl_check_ADMISSIONS_type(ptr)))
1381             #define sk_ADMISSIONS_push(sk, ptr) OPENSSL_sk_push(ossl_check_ADMISSIONS_sk_type(sk), ossl_check_ADMISSIONS_type(ptr))
1382             #define sk_ADMISSIONS_unshift(sk, ptr) OPENSSL_sk_unshift(ossl_check_ADMISSIONS_sk_type(sk), ossl_check_ADMISSIONS_type(ptr))
1383             #define sk_ADMISSIONS_pop(sk) ((ADMISSIONS *)OPENSSL_sk_pop(ossl_check_ADMISSIONS_sk_type(sk)))
1384             #define sk_ADMISSIONS_shift(sk) ((ADMISSIONS *)OPENSSL_sk_shift(ossl_check_ADMISSIONS_sk_type(sk)))
1385             #define sk_ADMISSIONS_pop_free(sk, freefunc) OPENSSL_sk_pop_free(ossl_check_ADMISSIONS_sk_type(sk),ossl_check_ADMISSIONS_freefunc_type(freefunc))
1386             #define sk_ADMISSIONS_insert(sk, ptr, idx) OPENSSL_sk_insert(ossl_check_ADMISSIONS_sk_type(sk), ossl_check_ADMISSIONS_type(ptr), (idx))
1387             #define sk_ADMISSIONS_set(sk, idx, ptr) ((ADMISSIONS *)OPENSSL_sk_set(ossl_check_ADMISSIONS_sk_type(sk), (idx), ossl_check_ADMISSIONS_type(ptr)))
1388             #define sk_ADMISSIONS_find(sk, ptr) OPENSSL_sk_find(ossl_check_ADMISSIONS_sk_type(sk), ossl_check_ADMISSIONS_type(ptr))
1389             #define sk_ADMISSIONS_find_ex(sk, ptr) OPENSSL_sk_find_ex(ossl_check_ADMISSIONS_sk_type(sk), ossl_check_ADMISSIONS_type(ptr))
1390             #define sk_ADMISSIONS_find_all(sk, ptr, pnum) OPENSSL_sk_find_all(ossl_check_ADMISSIONS_sk_type(sk), ossl_check_ADMISSIONS_type(ptr), pnum)
1391             #define sk_ADMISSIONS_sort(sk) OPENSSL_sk_sort(ossl_check_ADMISSIONS_sk_type(sk))
1392             #define sk_ADMISSIONS_is_sorted(sk) OPENSSL_sk_is_sorted(ossl_check_const_ADMISSIONS_sk_type(sk))
1393             #define sk_ADMISSIONS_dup(sk) ((STACK_OF(ADMISSIONS) *)OPENSSL_sk_dup(ossl_check_const_ADMISSIONS_sk_type(sk)))
1394             #define sk_ADMISSIONS_deep_copy(sk, copyfunc, freefunc) ((STACK_OF(ADMISSIONS) *)OPENSSL_sk_deep_copy(ossl_check_const_ADMISSIONS_sk_type(sk), ossl_check_ADMISSIONS_copyfunc_type(copyfunc), ossl_check_ADMISSIONS_freefunc_type(freefunc)))
1395             #define sk_ADMISSIONS_set_cmp_func(sk, cmp) ((sk_ADMISSIONS_compfunc)OPENSSL_sk_set_cmp_func(ossl_check_ADMISSIONS_sk_type(sk), ossl_check_ADMISSIONS_compfunc_type(cmp)))
1396              
1397             typedef STACK_OF(PROFESSION_INFO) PROFESSION_INFOS;
1398              
1399             const ASN1_OBJECT *NAMING_AUTHORITY_get0_authorityId(
1400             const NAMING_AUTHORITY *n);
1401             const ASN1_IA5STRING *NAMING_AUTHORITY_get0_authorityURL(
1402             const NAMING_AUTHORITY *n);
1403             const ASN1_STRING *NAMING_AUTHORITY_get0_authorityText(
1404             const NAMING_AUTHORITY *n);
1405             void NAMING_AUTHORITY_set0_authorityId(NAMING_AUTHORITY *n,
1406             ASN1_OBJECT* namingAuthorityId);
1407             void NAMING_AUTHORITY_set0_authorityURL(NAMING_AUTHORITY *n,
1408             ASN1_IA5STRING* namingAuthorityUrl);
1409             void NAMING_AUTHORITY_set0_authorityText(NAMING_AUTHORITY *n,
1410             ASN1_STRING* namingAuthorityText);
1411              
1412             const GENERAL_NAME *ADMISSION_SYNTAX_get0_admissionAuthority(
1413             const ADMISSION_SYNTAX *as);
1414             void ADMISSION_SYNTAX_set0_admissionAuthority(
1415             ADMISSION_SYNTAX *as, GENERAL_NAME *aa);
1416             const STACK_OF(ADMISSIONS) *ADMISSION_SYNTAX_get0_contentsOfAdmissions(
1417             const ADMISSION_SYNTAX *as);
1418             void ADMISSION_SYNTAX_set0_contentsOfAdmissions(
1419             ADMISSION_SYNTAX *as, STACK_OF(ADMISSIONS) *a);
1420             const GENERAL_NAME *ADMISSIONS_get0_admissionAuthority(const ADMISSIONS *a);
1421             void ADMISSIONS_set0_admissionAuthority(ADMISSIONS *a, GENERAL_NAME *aa);
1422             const NAMING_AUTHORITY *ADMISSIONS_get0_namingAuthority(const ADMISSIONS *a);
1423             void ADMISSIONS_set0_namingAuthority(ADMISSIONS *a, NAMING_AUTHORITY *na);
1424             const PROFESSION_INFOS *ADMISSIONS_get0_professionInfos(const ADMISSIONS *a);
1425             void ADMISSIONS_set0_professionInfos(ADMISSIONS *a, PROFESSION_INFOS *pi);
1426             const ASN1_OCTET_STRING *PROFESSION_INFO_get0_addProfessionInfo(
1427             const PROFESSION_INFO *pi);
1428             void PROFESSION_INFO_set0_addProfessionInfo(
1429             PROFESSION_INFO *pi, ASN1_OCTET_STRING *aos);
1430             const NAMING_AUTHORITY *PROFESSION_INFO_get0_namingAuthority(
1431             const PROFESSION_INFO *pi);
1432             void PROFESSION_INFO_set0_namingAuthority(
1433             PROFESSION_INFO *pi, NAMING_AUTHORITY *na);
1434             const STACK_OF(ASN1_STRING) *PROFESSION_INFO_get0_professionItems(
1435             const PROFESSION_INFO *pi);
1436             void PROFESSION_INFO_set0_professionItems(
1437             PROFESSION_INFO *pi, STACK_OF(ASN1_STRING) *as);
1438             const STACK_OF(ASN1_OBJECT) *PROFESSION_INFO_get0_professionOIDs(
1439             const PROFESSION_INFO *pi);
1440             void PROFESSION_INFO_set0_professionOIDs(
1441             PROFESSION_INFO *pi, STACK_OF(ASN1_OBJECT) *po);
1442             const ASN1_PRINTABLESTRING *PROFESSION_INFO_get0_registrationNumber(
1443             const PROFESSION_INFO *pi);
1444             void PROFESSION_INFO_set0_registrationNumber(
1445             PROFESSION_INFO *pi, ASN1_PRINTABLESTRING *rn);
1446              
1447             # ifdef __cplusplus
1448             }
1449             # endif
1450             #endif