Added a certificate validation hook to the credential manager
[strongswan.git] / src / libstrongswan / credentials / cert_validator.h
1 /*
2 * Copyright (C) 2010 Martin Willi
3 * Copyright (C) 2010 revosec AG
4 *
5 * This program is free software; you can redistribute it and/or modify it
6 * under the terms of the GNU General Public License as published by the
7 * Free Software Foundation; either version 2 of the License, or (at your
8 * option) any later version. See <http://www.fsf.org/copyleft/gpl.txt>.
9 *
10 * This program is distributed in the hope that it will be useful, but
11 * WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY
12 * or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License
13 * for more details.
14 */
15
16 /**
17 * @defgroup cert_validator cert_validator
18 * @{ @ingroup ccredentials
19 */
20
21 #ifndef CERT_VALIDATOR_H_
22 #define CERT_VALIDATOR_H_
23
24 typedef struct cert_validator_t cert_validator_t;
25
26 /**
27 * Certificate validator interface.
28 *
29 * A certificate validator checks constraints or revocation in a certificate
30 * or its issuing CA certificate. The interface allows plugins to do
31 * revocation checking or similar tasks.
32 */
33 struct cert_validator_t {
34
35 /**
36 * Validate a subject certificate in relation to its issuer.
37 *
38 * @param subject subject certificate to check
39 * @param issuer issuer of subject
40 * @param online wheter to do online revocation checking
41 * @param pathlen the current length of the path up to the root CA
42 * @param auth container for resulting authentication info
43 */
44 bool (*validate)(cert_validator_t *this, certificate_t *subject,
45 certificate_t *issuer, bool online, int pathlen,
46 auth_cfg_t *auth);
47 };
48
49 #endif /** CERT_VALIDATOR_H_ @}*/