xref: /rk3399_ARM-atf/tools/cert_create/include/cert.h (revision 6f97162237603eb6e5c497e5ba903512bdd428a9)
1*6f971622SJuan Castillo /*
2*6f971622SJuan Castillo  * Copyright (c) 2015, ARM Limited and Contributors. All rights reserved.
3*6f971622SJuan Castillo  *
4*6f971622SJuan Castillo  * Redistribution and use in source and binary forms, with or without
5*6f971622SJuan Castillo  * modification, are permitted provided that the following conditions are met:
6*6f971622SJuan Castillo  *
7*6f971622SJuan Castillo  * Redistributions of source code must retain the above copyright notice, this
8*6f971622SJuan Castillo  * list of conditions and the following disclaimer.
9*6f971622SJuan Castillo  *
10*6f971622SJuan Castillo  * Redistributions in binary form must reproduce the above copyright notice,
11*6f971622SJuan Castillo  * this list of conditions and the following disclaimer in the documentation
12*6f971622SJuan Castillo  * and/or other materials provided with the distribution.
13*6f971622SJuan Castillo  *
14*6f971622SJuan Castillo  * Neither the name of ARM nor the names of its contributors may be used
15*6f971622SJuan Castillo  * to endorse or promote products derived from this software without specific
16*6f971622SJuan Castillo  * prior written permission.
17*6f971622SJuan Castillo  *
18*6f971622SJuan Castillo  * THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS "AS IS"
19*6f971622SJuan Castillo  * AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
20*6f971622SJuan Castillo  * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
21*6f971622SJuan Castillo  * ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT HOLDER OR CONTRIBUTORS BE
22*6f971622SJuan Castillo  * LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR
23*6f971622SJuan Castillo  * CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF
24*6f971622SJuan Castillo  * SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS
25*6f971622SJuan Castillo  * INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN
26*6f971622SJuan Castillo  * CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE)
27*6f971622SJuan Castillo  * ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE
28*6f971622SJuan Castillo  * POSSIBILITY OF SUCH DAMAGE.
29*6f971622SJuan Castillo  */
30*6f971622SJuan Castillo 
31*6f971622SJuan Castillo #ifndef CERT_H_
32*6f971622SJuan Castillo #define CERT_H_
33*6f971622SJuan Castillo 
34*6f971622SJuan Castillo #include <openssl/ossl_typ.h>
35*6f971622SJuan Castillo #include <openssl/x509.h>
36*6f971622SJuan Castillo #include "key.h"
37*6f971622SJuan Castillo 
38*6f971622SJuan Castillo /*
39*6f971622SJuan Castillo  * This structure contains information related to the generation of the
40*6f971622SJuan Castillo  * certificates. All these fields must be known and specified at build time
41*6f971622SJuan Castillo  * except for the file name, which is picked up from the command line at
42*6f971622SJuan Castillo  * run time.
43*6f971622SJuan Castillo  *
44*6f971622SJuan Castillo  * One instance of this structure must be created for each of the certificates
45*6f971622SJuan Castillo  * present in the chain of trust.
46*6f971622SJuan Castillo  *
47*6f971622SJuan Castillo  * If the issuer points to this same instance, the generated certificate will
48*6f971622SJuan Castillo  * be self-signed.
49*6f971622SJuan Castillo  */
50*6f971622SJuan Castillo typedef struct cert_s cert_t;
51*6f971622SJuan Castillo struct cert_s {
52*6f971622SJuan Castillo 	int id;			/* Unique identifier */
53*6f971622SJuan Castillo 
54*6f971622SJuan Castillo 	const char *fn;		/* Filename to save the certificate */
55*6f971622SJuan Castillo 	const char *bin;	/* Image associated to this certificate */
56*6f971622SJuan Castillo 
57*6f971622SJuan Castillo 	const char *cn;		/* Subject CN (Company Name) */
58*6f971622SJuan Castillo 
59*6f971622SJuan Castillo 	X509 *x;		/* X509 certificate container */
60*6f971622SJuan Castillo 	key_t *key;		/* Key to be signed */
61*6f971622SJuan Castillo 
62*6f971622SJuan Castillo 	cert_t *issuer;		/* Issuer certificate */
63*6f971622SJuan Castillo };
64*6f971622SJuan Castillo 
65*6f971622SJuan Castillo int cert_add_ext(X509 *issuer, X509 *subject, int nid, char *value);
66*6f971622SJuan Castillo 
67*6f971622SJuan Castillo int cert_new(cert_t *cert, int days, int ca, STACK_OF(X509_EXTENSION) * sk);
68*6f971622SJuan Castillo 
69*6f971622SJuan Castillo #endif /* CERT_H_ */
70