src/pki/pki.h

   1 /*
   2  * Copyright (C) 2009 Martin Willi
   3  * Hochschule fuer Technik Rapperswil
   4  *
   5  * This program is free software; you can redistribute it and/or modify it
   6  * under the terms of the GNU General Public License as published by the
   7  * Free Software Foundation; either version 2 of the License, or (at your
   8  * option) any later version.  See <http://www.fsf.org/copyleft/gpl.txt>.
   9  *
  10  * This program is distributed in the hope that it will be useful, but
  11  * WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY
  12  * or FITNESS FOR A PARTICULAR PURPOSE.  See the GNU General Public License
  13  * for more details.
  14  */
  15
  16 /**
  17  * @defgroup pki pki
  18  *
  19  * @addtogroup pki
  20  * @{
  21  */
  22
  23 #ifndef PKI_H_
  24 #define PKI_H_
  25
  26 #include "command.h"
  27
  28 #include <library.h>
  29 #include <selectors/traffic_selector.h>
  30 #include <credentials/keys/private_key.h>
  31
  32 /**
  33  * Convert a form string to a encoding type
  34  */
  35 bool get_form(char *form, cred_encoding_type_t *enc, credential_type_t type);
  36
  37 /**
  38  * Calculate start/end lifetime for certificates.
  39  *
  40  * If both nbstr and nastr are given, span is ignored. Otherwise missing
  41  * arguments are calculated, or assumed to be now.
  42  *
  43  * @param format        strptime() format, NULL for default: %d.%m.%y %T
  44  * @param nbstr         string describing notBefore datetime, or NULL
  45  * @param nastr         string describing notAfter datetime, or NULL
  46  * @param span          lifetime span, from notBefore to notAfter
  47  * @param nb            calculated notBefore time
  48  * @param na            calculated notAfter time
  49  * @return                      TRUE of nb/na calculated successfully
  50  */
  51 bool calculate_lifetime(char *format, char *nbstr, char *nastr, time_t span,
  52                                                 time_t *nb, time_t *na);
  53
  54 /**
  55  * Set output file mode appropriate for credential encoding form on Windows
  56  */
  57 void set_file_mode(FILE *stream, cred_encoding_type_t enc);
  58
  59 /**
  60  * Select default digest for signatures with the given key
  61  *
  62  * @param private       private key
  63  * @return                      hash algorithm
  64  */
  65 hash_algorithm_t get_default_digest(private_key_t *private);
  66
  67 /**
  68  * Create a traffic selector from a CIDR or range string.
  69  *
  70  * @param str           input string, either a.b.c.d/e or a.b.c.d-e.f.g.h
  71  * @return                      traffic selector, NULL on error
  72  */
  73 traffic_selector_t* parse_ts(char *str);
  74
  75 #endif /** PKI_H_ @}*/