src/libstrongswan/credentials/sets/cert_cache.h

   1 /*
   2  * Copyright (C) 2008 Martin Willi
   3  * Hochschule fuer Technik Rapperswil
   4  *
   5  * This program is free software; you can redistribute it and/or modify it
   6  * under the terms of the GNU General Public License as published by the
   7  * Free Software Foundation; either version 2 of the License, or (at your
   8  * option) any later version.  See <http://www.fsf.org/copyleft/gpl.txt>.
   9  *
  10  * This program is distributed in the hope that it will be useful, but
  11  * WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY
  12  * or FITNESS FOR A PARTICULAR PURPOSE.  See the GNU General Public License
  13  * for more details.
  14  */
  15
  16 /**
  17  * @defgroup cert_cache cert_cache
  18  * @{ @ingroup sets
  19  */
  20
  21 #ifndef CERT_CACHE_H_
  22 #define CERT_CACHE_H_
  23
  24 #include <credentials/credential_set.h>
  25
  26 typedef struct cert_cache_t cert_cache_t;
  27
  28 /**
  29  * Certificate signature verification and certificate cache.
  30  *
  31  * This cache serves all certificates seen in its issued_by method
  32  * and serves them as untrusted through the credential set interface. Further,
  33  * it caches valid subject-issuer relationships to speed up the issued_by
  34  * method.
  35  */
  36 struct cert_cache_t {
  37
  38         /**
  39          * Implements credential_set_t.
  40          */
  41         credential_set_t set;
  42
  43         /**
  44          * Caching wrapper around certificate_t.issued_by.
  45          *
  46          * @param subject               certificate to verify
  47          * @param issuer                issuing certificate to verify subject
  48          * @return                              TRUE if subject issued by issuer
  49          */
  50         bool (*issued_by)(cert_cache_t *this,
  51                                           certificate_t *subject, certificate_t *issuer);
  52
  53         /**
  54          * Flush the certificate cache.
  55          *
  56          * @param type                  type of certificate to flush, or CERT_ANY
  57          */
  58         void (*flush)(cert_cache_t *this, certificate_type_t type);
  59
  60         /**
  61          * Destroy a cert_cache instance.
  62          */
  63         void (*destroy)(cert_cache_t *this);
  64 };
  65
  66 /**
  67  * Create a cert_cache instance.
  68  */
  69 cert_cache_t *cert_cache_create();
  70
  71 #endif /** CERT_CACHE_H_ @}*/