OSX/libsecurity_ocspd/common/ocspdUtils.h

   1 /*
   2  * Copyright (c) 2000,2002,2011,2014 Apple Inc. All Rights Reserved.
   3  *
   4  * @APPLE_LICENSE_HEADER_START@
   5  *
   6  * This file contains Original Code and/or Modifications of Original Code
   7  * as defined in and that are subject to the Apple Public Source License
   8  * Version 2.0 (the 'License'). You may not use this file except in
   9  * compliance with the License. Please obtain a copy of the License at
  10  * http://www.opensource.apple.com/apsl/ and read it before using this
  11  * file.
  12  *
  13  * The Original Code and all software distributed under the License are
  14  * distributed on an 'AS IS' basis, WITHOUT WARRANTY OF ANY KIND, EITHER
  15  * EXPRESS OR IMPLIED, AND APPLE HEREBY DISCLAIMS ALL SUCH WARRANTIES,
  16  * INCLUDING WITHOUT LIMITATION, ANY WARRANTIES OF MERCHANTABILITY,
  17  * FITNESS FOR A PARTICULAR PURPOSE, QUIET ENJOYMENT OR NON-INFRINGEMENT.
  18  * Please see the License for the specific language governing rights and
  19  * limitations under the License.
  20  *
  21  * @APPLE_LICENSE_HEADER_END@
  22  */
  23
  24 /*
  25  * ocspUtils.h - common utilities for OCSPD
  26  */
  27 #ifndef _OCSPD_UTILS_H_
  28 #define _OCSPD_UTILS_H_
  29
  30 #ifdef  __cplusplus
  31 extern "C" {
  32 #endif
  33
  34 #include <CommonCrypto/CommonDigest.h>
  35 #include <Security/cssmtype.h>
  36 #include <Security/SecAsn1Coder.h>
  37 #include <CoreFoundation/CoreFoundation.h>
  38
  39 /*
  40  * Compare two CSSM_DATAs, return CSSM_TRUE if identical.
  41  */
  42 CSSM_BOOL ocspdCompareCssmData(
  43         const CSSM_DATA *data1,
  44         const CSSM_DATA *data2);
  45
  46 /*
  47  * Parse a GeneralizedTime string into a CFAbsoluteTime. Returns NULL_TIME on
  48  * parse error. Fractional parts of a second are discarded.
  49  */
  50 #define NULL_TIME       0.0
  51
  52 CFAbsoluteTime genTimeToCFAbsTime(
  53         const CSSM_DATA *strData);
  54
  55 /*
  56  * Convert CFAbsoluteTime to generalized time string, GMT format (4 digit year,
  57  * trailing 'Z'). Caller allocated the output which is GENERAL_TIME_STRLEN bytes plus
  58  * a NULL.
  59  */
  60 #define GENERAL_TIME_STRLEN     15              /* NOT including trailing NULL */
  61
  62 void cfAbsTimeToGgenTime(
  63         CFAbsoluteTime          absTime,
  64         char                            *genTime);
  65
  66 #define OCSPD_MAX_DIGEST_LEN            CC_SHA256_DIGEST_LENGTH
  67
  68 void ocspdSha1(
  69         const void              *data,
  70         CC_LONG                 len,
  71         unsigned char   *md);                   // allocd by caller, CC_SHA1_DIGEST_LENGTH bytes
  72 void ocspdMD5(
  73         const void              *data,
  74         CC_LONG                 len,
  75         unsigned char   *md);                   // allocd by caller, CC_MD5_DIGEST_LENGTH bytes
  76 void ocspdMD4(
  77         const void              *data,
  78         CC_LONG                 len,
  79         unsigned char   *md);                   // allocd by caller, CC_MD4_DIGEST_LENGTH bytes
  80 void ocspdSHA256(
  81         const void              *data,
  82         CC_LONG                 len,
  83         unsigned char   *md);                   // allocd by caller, CC_SHA256_DIGEST_LENGTH bytes
  84
  85 /*
  86  * How many items in a NULL-terminated array of pointers?
  87  */
  88 unsigned ocspdArraySize(
  89         const void **array);
  90
  91 /*
  92  * Fill out a CSSM_DATA with the subset of public key bytes from the given
  93  * CSSM_KEY_PTR which should be hashed to produce the issuerKeyHash field
  94  * of a CertID in an OCSP request.
  95  */
  96 CSSM_RETURN ocspdGetPublicKeyBytes(
  97         SecAsn1CoderRef coder,
  98         CSSM_KEY_PTR publicKey,
  99         CSSM_DATA &publicKeyBytes); // filled out by this function
 100
 101
 102 #define CFRELEASE(cf)   \
 103         if(cf != NULL) {        \
 104                 CFRelease(cf);  \
 105         }
 106
 107 #ifdef  __cplusplus
 108 }
 109 #endif
 110
 111 #endif  /* _OCSPD_UTILS_H_ */