Security-57031.1.35.tar.gz

[apple/security.git] / sec / securityd / SecOCSPResponse.h

diff --git a/sec/securityd/SecOCSPResponse.h b/sec/securityd/SecOCSPResponse.h
deleted file mode 100644 (file)
index ebd02d5..0000000
--- a/sec/securityd/SecOCSPResponse.h
+++ /dev/null
@@ -1,156 +0,0 @@
-/*
- * Copyright (c) 2009 Apple Inc. All Rights Reserved.
- *
- * @APPLE_LICENSE_HEADER_START@
- *
- * This file contains Original Code and/or Modifications of Original Code
- * as defined in and that are subject to the Apple Public Source License
- * Version 2.0 (the 'License'). You may not use this file except in
- * compliance with the License. Please obtain a copy of the License at
- * http://www.opensource.apple.com/apsl/ and read it before using this
- * file.
- *
- * The Original Code and all software distributed under the License are
- * distributed on an 'AS IS' basis, WITHOUT WARRANTY OF ANY KIND, EITHER
- * EXPRESS OR IMPLIED, AND APPLE HEREBY DISCLAIMS ALL SUCH WARRANTIES,
- * INCLUDING WITHOUT LIMITATION, ANY WARRANTIES OF MERCHANTABILITY,
- * FITNESS FOR A PARTICULAR PURPOSE, QUIET ENJOYMENT OR NON-INFRINGEMENT.
- * Please see the License for the specific language governing rights and
- * limitations under the License.
- *
- * @APPLE_LICENSE_HEADER_END@
- */
-
-/*!
-       @header SecOCSPResponse
-       The functions and data types in SecOCSPResponse implement ocsp response
-    decoding and verification.
-*/
-
-#ifndef _SECURITY_SECOCSPRESPONSE_H_
-#define _SECURITY_SECOCSPRESPONSE_H_
-
-#include <Security/SecAsn1Coder.h>
-#include <CoreFoundation/CFArray.h>
-#include <CoreFoundation/CFData.h>
-#include <CoreFoundation/CFDate.h>
-#include <securityd/SecOCSPRequest.h>
-#include <security_asn1/ocspTemplates.h>
-#include <Security/SecCertificatePath.h>
-
-__BEGIN_DECLS
-
-typedef enum {
-       kSecOCSPBad = -2,
-       kSecOCSPUnknown = -1,
-       kSecOCSPSuccess = 0,
-       kSecOCSPMalformedRequest = 1,
-       kSecOCSPInternalError = 2,
-       kSecOCSPTryLater = 3,
-       kSecOCSPUnused = 4,
-       kSecOCSPSigRequired = 5,
-       kSecOCSPUnauthorized = 6
-} SecOCSPResponseStatus;
-
-enum {
-    kSecRevocationReasonUnrevoked               = -2,
-    kSecRevocationReasonUndetermined            = -1,
-    kSecRevocationReasonUnspecified             = 0,
-    kSecRevocationReasonKeyCompromise           = 1,
-    kSecRevocationReasonCACompromise            = 2,
-    kSecRevocationReasonAffiliationChanged      = 3,
-    kSecRevocationReasonSuperseded              = 4,
-    kSecRevocationReasonCessationOfOperation    = 5,
-    kSecRevocationReasonCertificateHold         = 6,
-    /*         -- value 7 is not used */
-    kSecRevocationReasonRemoveFromCRL           = 8,
-    kSecRevocationReasonPrivilegeWithdrawn      = 9,
-    kSecRevocationReasonAACompromise            = 10
-};
-typedef int32_t SecRevocationReason;
-
-
-/*!
-       @typedef SecOCSPResponseRef
-       @abstract Object used for ocsp response decoding.
-*/
-typedef struct __SecOCSPResponse *SecOCSPResponseRef;
-
-struct __SecOCSPResponse {
-        CFDataRef data;
-        SecAsn1CoderRef coder;
-        SecOCSPResponseStatus responseStatus;
-        CFDataRef nonce;
-        CFAbsoluteTime producedAt;
-        CFAbsoluteTime latestNextUpdate;
-        CFAbsoluteTime expireTime;
-        CFAbsoluteTime verifyTime;
-        SecAsn1OCSPBasicResponse basicResponse;
-        SecAsn1OCSPResponseData responseData;
-        SecAsn1OCSPResponderIDTag responderIdTag;
-        SecAsn1OCSPResponderID responderID;
-};
-
-typedef struct __SecOCSPSingleResponse *SecOCSPSingleResponseRef;
-
-struct __SecOCSPSingleResponse {
-    SecAsn1OCSPCertStatusTag certStatus;
-    CFAbsoluteTime thisUpdate;
-    CFAbsoluteTime nextUpdate;         /* may be NULL_TIME */
-    CFAbsoluteTime revokedTime;                /* != NULL_TIME for certStatus == CS_Revoked */
-    SecRevocationReason crlReason;
-    //OCSPExtensions *extensions;
-};
-
-/*!
-       @function SecOCSPResponseCreate
-       @abstract Returns a SecOCSPResponseRef from a BER encoded ocsp response.
-       @param berResponse The BER encoded ocsp response.
-       @result A SecOCSPResponseRef.
-*/
-SecOCSPResponseRef SecOCSPResponseCreate(CFDataRef ocspResponse,
-    CFTimeInterval maxAge);
-
-CFDataRef SecOCSPResponseGetData(SecOCSPResponseRef this);
-
-SecOCSPResponseStatus SecOCSPGetResponseStatus(SecOCSPResponseRef ocspResponse);
-
-CFAbsoluteTime SecOCSPResponseGetExpirationTime(SecOCSPResponseRef ocspResponse);
-
-CFDataRef SecOCSPResponseGetNonce(SecOCSPResponseRef ocspResponse);
-
-CFAbsoluteTime SecOCSPResponseProducedAt(SecOCSPResponseRef ocspResponse);
-
-CFAbsoluteTime SecOCSPResponseVerifyTime(SecOCSPResponseRef ocspResponse);
-
-/*!
-       @function SecOCSPResponseCopySigners
-       @abstract Returns an array of signers.
-       @param ocspResponse A SecOCSPResponseRef.
-       @result The passed in SecOCSPResponseRef is deallocated
-*/
-CFArrayRef SecOCSPResponseCopySigners(SecOCSPResponseRef ocspResponse);
-
-/*!
-       @function SecOCSPResponseFinalize
-       @abstract Frees a SecOCSPResponseRef.
-       @param ocspResponse The BER encoded ocsp response.
-       @result A SecOCSPResponseRef.
-*/
-void SecOCSPResponseFinalize(SecOCSPResponseRef ocspResponse);
-
-SecOCSPSingleResponseRef SecOCSPResponseCopySingleResponse(
-    SecOCSPResponseRef ocspResponse, SecOCSPRequestRef request);
-
-void SecOCSPSingleResponseDestroy(SecOCSPSingleResponseRef this);
-
-/* Returns the SecCertificatePathRef who's leaf signed this ocspResponse if
-   we can find one and NULL if we can't find a valid signer. The issuerPath
-   contains the cert chain from the anchor to the certificate that issued the
-   leaf certificate for which this ocspResponse is supposed to be valid. */
-SecCertificatePathRef SecOCSPResponseCopySigner(SecOCSPResponseRef this,
-    SecCertificatePathRef issuerPath);
-
-__END_DECLS
-
-#endif /* !_SECURITY_SECOCSPRESPONSE_H_ */