nsspkixt.h

来自「支持SSL v2/v3, TLS, PKCS #5, PKCS #7, PKCS」· C头文件 代码 · 共 2,282 行 · 第 1/4 页

 *
 *  NoticeReference ::= SEQUENCE {
 *       organization     DisplayText,
 *       noticeNumbers    SEQUENCE OF INTEGER }
 *
 */

struct NSSPKIXNoticeReferenceStr;
typedef struct NSSPKIXNoticeReferenceStr NSSPKIXNoticeReference;

/*
 * DisplayText
 *
 * -- fgmr comments --
 *
 * From RFC 2459:
 *
 *  DisplayText ::= CHOICE {
 *       visibleString    VisibleString  (SIZE (1..200)),
 *       bmpString        BMPString      (SIZE (1..200)),
 *       utf8String       UTF8String     (SIZE (1..200)) }
 * 
 */

struct NSSPKIXDisplayTextStr;
typedef struct NSSPKIXDisplayTextStr NSSPKIXDisplayText;

/*
 * PolicyMappings
 *
 * -- fgmr comments --
 *
 * From RFC 2459:
 *
 *  PolicyMappings ::= SEQUENCE SIZE (1..MAX) OF SEQUENCE {
 *       issuerDomainPolicy      CertPolicyId,
 *       subjectDomainPolicy     CertPolicyId }
 *
 */

struct NSSPKIXPolicyMappingsStr;
typedef struct NSSPKIXPolicyMappingsStr NSSPKIXPolicyMappings;

/*
 * policyMapping
 *
 * Helper structure for PolicyMappings
 *
 *                                               SEQUENCE {
 *       issuerDomainPolicy      CertPolicyId,
 *       subjectDomainPolicy     CertPolicyId }
 *
 */

struct NSSPKIXpolicyMappingStr;
typedef struct NSSPKIXpolicyMappingStr NSSPKIXpolicyMapping;

/*
 * GeneralName
 *
 * This structure contains a union of the possible general names,
 * of which there are several.
 *
 * From RFC 2459:
 *
 *  GeneralName ::= CHOICE {
 *       otherName                       [0]     AnotherName,
 *       rfc822Name                      [1]     IA5String,
 *       dNSName                         [2]     IA5String,
 *       x400Address                     [3]     ORAddress,
 *       directoryName                   [4]     Name,
 *       ediPartyName                    [5]     EDIPartyName,
 *       uniformResourceIdentifier       [6]     IA5String,
 *       iPAddress                       [7]     OCTET STRING,
 *       registeredID                    [8]     OBJECT IDENTIFIER }
 *
 */

struct NSSPKIXGeneralNameStr;
typedef struct NSSPKIXGeneralNameStr NSSPKIXGeneralName;

/*
 * GeneralNameChoice
 *
 * This enumerates the possible general name types.
 */

enum NSSPKIXGeneralNameChoiceEnum {
  NSSPKIXGeneralNameChoice_NSSinvalid = -1,
  NSSPKIXGeneralNameChoice_otherName = 0,
  NSSPKIXGeneralNameChoice_rfc822Name = 1,
  NSSPKIXGeneralNameChoice_dNSName = 2,
  NSSPKIXGeneralNameChoice_x400Address = 3,
  NSSPKIXGeneralNameChoice_directoryName = 4,
  NSSPKIXGeneralNameChoice_ediPartyName = 5,
  NSSPKIXGeneralNameChoice_uniformResourceIdentifier = 6,
  NSSPKIXGeneralNameChoice_iPAddress = 7,
  NSSPKIXGeneralNameChoice_registeredID = 8
};
typedef enum NSSPKIXGeneralNameChoiceEnum NSSPKIXGeneralNameChoice;

/*
 * GeneralNames
 *
 * This structure contains a sequence of GeneralName objects.
 *
 * From RFC 2459:
 *
 *  GeneralNames ::= SEQUENCE SIZE (1..MAX) OF GeneralName
 *
 */

struct NSSPKIXGeneralNamesStr;
typedef struct NSSPKIXGeneralNamesStr NSSPKIXGeneralNames;

/*
 * SubjectAltName
 *
 * -- fgmr comments --
 *
 * From RFC 2459:
 *
 *  SubjectAltName ::= GeneralNames
 *
 */

typedef NSSPKIXGeneralNames NSSPKIXSubjectAltName;

/*
 * AnotherName
 *
 * -- fgmr comments --
 *
 * From RFC 2459:
 *
 *  AnotherName ::= SEQUENCE {
 *       type-id    OBJECT IDENTIFIER,
 *       value      [0] EXPLICIT ANY DEFINED BY type-id }
 *
 */

struct NSSPKIXAnotherNameStr;
typedef struct NSSPKIXAnotherNameStr NSSPKIXAnotherName;

/*
 * EDIPartyName
 *
 * -- fgmr comments --
 *
 * From RFC 2459:
 *
 *
 *  EDIPartyName ::= SEQUENCE {
 *       nameAssigner            [0]     DirectoryString OPTIONAL,
 *       partyName               [1]     DirectoryString }
 *
 */

struct NSSPKIXEDIPartyNameStr;
typedef struct NSSPKIXEDIPartyNameStr NSSPKIXEDIPartyName;

/*
 * IssuerAltName
 *
 * -- fgmr comments --
 *
 * From RFC 2459:
 *
 *  IssuerAltName ::= GeneralNames
 *
 */

typedef NSSPKIXGeneralNames NSSPKIXIssuerAltName;

/*
 * SubjectDirectoryAttributes
 *
 * -- fgmr comments --
 *
 * From RFC 2459:
 *
 *  SubjectDirectoryAttributes ::= SEQUENCE SIZE (1..MAX) OF Attribute
 *
 */

struct NSSPKIXSubjectDirectoryAttributesStr;
typedef struct NSSPKIXSubjectDirectoryAttributesStr NSSPKIXSubjectDirectoryAttributes;

/*
 * BasicConstraints
 *
 * -- fgmr comments --
 *
 * From RFC 2459:
 *
 *  BasicConstraints ::= SEQUENCE {
 *       cA                      BOOLEAN DEFAULT FALSE,
 *       pathLenConstraint       INTEGER (0..MAX) OPTIONAL }
 *
 */

struct NSSPKIXBasicConstraintsStr;
typedef struct NSSPKIXBasicConstraintsStr NSSPKIXBasicConstraints;

/*
 * NameConstraints
 *
 * -- fgmr comments --
 *
 * From RFC 2459:
 *
 *  NameConstraints ::= SEQUENCE {
 *       permittedSubtrees       [0]     GeneralSubtrees OPTIONAL,
 *       excludedSubtrees        [1]     GeneralSubtrees OPTIONAL }
 *
 */

struct NSSPKIXNameConstraintsStr;
typedef struct NSSPKIXNameConstraintsStr NSSPKIXNameConstraints;

/*
 * GeneralSubtrees
 *
 * -- fgmr comments --
 *
 * From RFC 2459:
 *
 *  GeneralSubtrees ::= SEQUENCE SIZE (1..MAX) OF GeneralSubtree
 *
 */

struct NSSPKIXGeneralSubtreesStr;
typedef struct NSSPKIXGeneralSubtreesStr NSSPKIXGeneralSubtrees;

/*
 * GeneralSubtree
 *
 * -- fgmr comments --
 *
 * From RFC 2459:
 *
 *  GeneralSubtree ::= SEQUENCE {
 *       base                    GeneralName,
 *       minimum         [0]     BaseDistance DEFAULT 0,
 *       maximum         [1]     BaseDistance OPTIONAL }
 *
 */

struct NSSPKIXGeneralSubtreeStr;
typedef struct NSSPKIXGeneralSubtreeStr NSSPKIXGeneralSubtree;

/*
 * BaseDistance
 *
 * -- fgmr comments --
 *
 * From RFC 2459:
 *
 *  BaseDistance ::= INTEGER (0..MAX)
 *
 */

typedef PRInt32 NSSPKIXBaseDistance;

/*
 * PolicyConstraints
 *
 * -- fgmr comments --
 *
 * From RFC 2459:
 *
 *  PolicyConstraints ::= SEQUENCE {
 *       requireExplicitPolicy           [0] SkipCerts OPTIONAL,
 *       inhibitPolicyMapping            [1] SkipCerts OPTIONAL }
 * 
 */

struct NSSPKIXPolicyConstraintsStr;
typedef NSSPKIXPolicyConstraintsStr NSSPKIXPolicyConstraints;

/*
 * SkipCerts
 *
 * -- fgmr comments --
 *
 * From RFC 2459:
 *
 *  SkipCerts ::= INTEGER (0..MAX)
 *
 */

typedef NSSItem NSSPKIXSkipCerts;

/*
 * CRLDistPointsSyntax
 *
 * -- fgmr comments --
 *
 * From RFC 2459:
 *
 *  CRLDistPointsSyntax ::= SEQUENCE SIZE (1..MAX) OF DistributionPoint
 *
 */

struct NSSPKIXCRLDistPointsSyntaxStr;
typedef struct NSSPKIXCRLDistPointsSyntaxStr NSSPKIXCRLDistPointsSyntax;

/*
 * DistributionPoint
 *
 * -- fgmr comments --
 *
 * From RFC 2459:
 *
 *  DistributionPoint ::= SEQUENCE {
 *       distributionPoint       [0]     DistributionPointName OPTIONAL,
 *       reasons                 [1]     ReasonFlags OPTIONAL,
 *       cRLIssuer               [2]     GeneralNames OPTIONAL }
 *
 */

struct NSSPKIXDistributionPointStr;
typedef struct NSSPKIXDistributionPointStr NSSPKIXDistributionPoint;

/*
 * DistributionPointName
 *
 * -- fgmr comments --
 *
 * From RFC 2459:
 *
 *  DistributionPointName ::= CHOICE {
 *       fullName                [0]     GeneralNames,
 *       nameRelativeToCRLIssuer [1]     RelativeDistinguishedName }
 *
 */

struct NSSPKIXDistributionPointNameStr;
typedef struct NSSPKIXDistributionPointNameStr NSSPKIXDistributionPointName;

/*
 * DistributionPointNameChoice
 *
 * -- fgmr comments --
 *
 */

enum NSSPKIXDistributionPointNameChoiceEnum {
  NSSDistributionPointNameChoice_NSSinvalid = -1,
  NSSDistributionPointNameChoice_FullName = 0,
  NSSDistributionPointNameChoice_NameRelativeToCRLIssuer = 1
};
typedef enum NSSPKIXDistributionPointNameChoiceEnum NSSPKIXDistributionPointNameChoice;

/*
 * ReasonFlags
 *
 * -- fgmr comments --
 *
 * From RFC 2459:
 *
 *  ReasonFlags ::= BIT STRING {
 *       unused                  (0),
 *       keyCompromise           (1),
 *       cACompromise            (2),
 *       affiliationChanged      (3),
 *       superseded              (4),
 *       cessationOfOperation    (5),
 *       certificateHold         (6) }
 *
 */

struct NSSPKIXReasonFlagsStr;
typedef struct NSSPKIXReasonFlagsStr NSSPKIXReasonFlags;

/*
 * ReasonFlagsMask
 *
 * -- fgmr comments --
 *
 */

typedef PRInt32 NSSPKIXReasonFlagsMask;
const NSSPKIXReasonFlagsMask NSSPKIXReasonFlagsMask_NSSinvalid          =  -1;
const NSSPKIXReasonFlagsMask NSSPKIXReasonFlagsMask_KeyCompromise       =  0x02;
const NSSPKIXReasonFlagsMask NSSPKIXReasonFlagsMask_CACompromise        =  0x04;
const NSSPKIXReasonFlagsMask NSSPKIXReasonFlagsMask_AffiliationChanged  =  0x08;
const NSSPKIXReasonFlagsMask NSSPKIXReasonFlagsMask_Superseded          =  0x10;
const NSSPKIXReasonFlagsMask NSSPKIXReasonFlagsMask_CessationOfOperation=  0x20;
const NSSPKIXReasonFlagsMask NSSPKIXReasonFlagsMask_CertificateHold     =  0x40;

/*
 * ExtKeyUsageSyntax
 *
 * -- fgmr comments --
 *
 * From RFC 2459:
 *
 *  ExtKeyUsageSyntax ::= SEQUENCE SIZE (1..MAX) OF KeyPurposeId
 *
 */

struct NSSPKIXExtKeyUsageSyntaxStr;
typedef struct NSSPKIXExtKeyUsageSyntaxStr NSSPKIXExtKeyUsageSyntax;

/*
 * KeyPurposeId
 *
 * -- fgmr comments --
 *
 * From RFC 2459:
 *
 *  KeyPurposeId ::= OBJECT IDENTIFIER
 *
 */

typedef NSSOID NSSPKIXKeyPurposeId;

/*
 * AuthorityInfoAccessSyntax
 *
 * -- fgmr comments --
 *
 * From RFC 2459:
 *
 *  AuthorityInfoAccessSyntax  ::=
 *          SEQUENCE SIZE (1..MAX) OF AccessDescription
 *
 */

struct NSSPKIXAuthorityInfoAccessSyntaxStr;
typedef struct NSSPKIXAuthorityInfoAccessSyntaxStr NSSPKIXAuthorityInfoAccessSyntax;

/*
 * AccessDescription
 *
 * -- fgmr comments --
 *
 * From RFC 2459:
 *
 *  AccessDescription  ::=  SEQUENCE {
 *          accessMethod          OBJECT IDENTIFIER,
 *          accessLocation        GeneralName  }
 *
 */

struct NSSPKIXAccessDescriptionStr;
typedef struct NSSPKIXAccessDescriptionStr NSSPKIXAccessDescription;

/*
 * CRLNumber
 *
 * -- fgmr comments --
 *
 * From RFC 2459:
 *
 *  CRLNumber ::= INTEGER (0..MAX)
 *
 */

typedef NSSItem NSSPKIXCRLNumber;

/*
 * IssuingDistributionPoint
 *
 * -- fgmr comments --
 *
 * From RFC 2459:
 *
 *  IssuingDistributionPoint ::= SEQUENCE {
 *       distributionPoint       [0] DistributionPointName OPTIONAL,
 *       onlyContainsUserCerts   [1] BOOLEAN DEFAULT FALSE,
 *       onlyContainsCACerts     [2] BOOLEAN DEFAULT FALSE,
 *       onlySomeReasons         [3] ReasonFlags OPTIONAL,
 *       indirectCRL             [4] BOOLEAN DEFAULT FALSE }
 *
 */

struct NSSPKIXIssuingDistributionPointStr;
typedef struct NSSPKIXIssuingDistributionPointStr NSSPKIXIssuingDistributionPoint;

/*
 * BaseCRLNumber
 *
 * -- fgmr comments --
 *
 * From RFC 2459:
 *
 *  BaseCRLNumber ::= CRLNumber
 *
 */

typedef NSSPKIXCRLNumber NSSPKIXBaseCRLNumber;

/*
 * CRLReason
 *
 * -- fgmr comments --
 *
 * From RFC 2459:
 *
 *  CRLReason ::= ENUMERATED {
 *       unspecified             (0),
 *       keyCompromise           (1),
 *       cACompromise            (2),
 *       affiliationChanged      (3),
 *       superseded              (4),
 *       cessationOfOperation    (5),
 *       certificateHold         (6),
 *       removeFromCRL           (8) }
 * 
 */

enum NSSPKIXCRLReasonEnum {
  NSSPKIXCRLReasonEnum_NSSinvalid = -1,
  NSSPKIXCRLReasonEnum_unspecified = 0,
  NSSPKIXCRLReasonEnum_keyCompromise = 1,
  NSSPKIXCRLReasonEnum_cACompromise = 2,
  NSSPKIXCRLReasonEnum_affiliationChanged = 3,
  NSSPKIXCRLReasonEnum_superseded = 4,
  NSSPKIXCRLReasonEnum_cessationOfOperation = 5,
  NSSPKIXCRLReasonEnum_certificateHold = 6,
  NSSPKIXCRLReasonEnum_removeFromCRL = 8
};
typedef enum NSSPKIXCRLReasonEnum NSSPKIXCRLReason;

/*
 * CertificateIssuer
 *
 * -- fgmr comments --
 *
 * From RFC 2459:
 *
 *  CertificateIssuer ::= GeneralNames
 *
 */

typedef NSSPKIXGeneralNames NSSPKIXCertificateIssuer;

/*
 * HoldInstructionCode
 *
 * -- fgmr comments --
 *
 * From RFC 2459:
 *
 *  HoldInstructionCode ::= OBJECT IDENTIFIER
 *
 */

typedef NSSOID NSSPKIXHoldInstructionCode;

/*
 * InvalidityDate
 *
 * -- fgmr comments --
 *
 * From RFC 2459:
 *
 *  InvalidityDate ::=  GeneralizedTime
 *
 */

typedef PRTime NSSPKIXInvalidityDate;

PR_END_EXTERN_C

#endif /* NSSPKIXT_H */