ipsec-332.100.1.tar.gz

[apple/ipsec.git] / ipsec-tools / racoon / crypto_cssm.h

diff --git a/ipsec-tools/racoon/crypto_cssm.h b/ipsec-tools/racoon/crypto_cssm.h
index 615277051d89f6f0dca83759b60fcc66d52fa8c9..2b2c5cef73bde23224d69e864a377341581de541 100644 (file)
--- a/ipsec-tools/racoon/crypto_cssm.h
+++ b/ipsec-tools/racoon/crypto_cssm.h
@@ -30,12 +30,18 @@
  */
 
 #include "vmbuf.h"
+#include <CoreFoundation/CoreFoundation.h>
+#include <Security/SecBase.h>
 
 
-extern int crypto_cssm_check_x509cert(vchar_t *cert);
+extern cert_status_t crypto_cssm_check_x509cert_dates (SecCertificateRef certificateRef);
+extern int crypto_cssm_check_x509cert (cert_t *hostcert, cert_t *certchain, CFStringRef hostname, SecKeyRef *publicKeyRef);
+extern int crypto_cssm_verify_x509sign(SecKeyRef publicKeyRef, vchar_t *hash, vchar_t *signature, Boolean useSHA1);
+extern SecCertificateRef crypto_cssm_x509cert_CreateSecCertificateRef (vchar_t *cert);
 extern vchar_t* crypto_cssm_getsign(CFDataRef persistentCertRef, vchar_t* hash);
-extern vchar_t* crypto_cssm_get_x509cert(CFDataRef persistentCertRef);
-
+extern vchar_t* crypto_cssm_get_x509cert(CFDataRef persistentCertRef, cert_status_t *certStatus);
+extern const char *GetSecurityErrorString(OSStatus err);
+extern CFDataRef crypto_cssm_CopySubjectSequence(SecCertificateRef certRef);
 
 #endif /* __CRYPTO_CSSM_H__ */