1 /*
2  * Copyright (c) 2015, ARM Limited and Contributors. All rights reserved.
3  *
4  * Redistribution and use in source and binary forms, with or without
5  * modification, are permitted provided that the following conditions are met:
6  *
7  * Redistributions of source code must retain the above copyright notice, this
8  * list of conditions and the following disclaimer.
9  *
10  * Redistributions in binary form must reproduce the above copyright notice,
11  * this list of conditions and the following disclaimer in the documentation
12  * and/or other materials provided with the distribution.
13  *
14  * Neither the name of ARM nor the names of its contributors may be used
15  * to endorse or promote products derived from this software without specific
16  * prior written permission.
17  *
18  * THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS "AS IS"
19  * AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
20  * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
21  * ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT HOLDER OR CONTRIBUTORS BE
22  * LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR
23  * CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF
24  * SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS
25  * INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN
26  * CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE)
27  * ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE
28  * POSSIBILITY OF SUCH DAMAGE.
29  */
30 
31 #ifndef EXT_H_
32 #define EXT_H_
33 
34 #include <openssl/x509v3.h>
35 
36 /*
37  * This structure contains the relevant information to create the extensions
38  * to be included in the certificates. This extensions will be used to
39  * establish the chain of trust.
40  */
41 typedef struct ext_s {
42 	const char *oid;	/* OID of the extension */
43 	const char *sn;		/* Short name */
44 	const char *ln;		/* Long description */
45 	int type;		/* OpenSSL ASN1 type of the extension data.
46 				 * Supported types are:
47 				 *   - V_ASN1_INTEGER
48 				 *   - V_ASN1_OCTET_STRING
49 				 */
50 	int alias;		/* In case OpenSSL provides an standard
51 				 * extension of the same type, add the new
52 				 * extension as an alias of this one
53 				 */
54 
55 	X509V3_EXT_METHOD method; /* This field may be used to define a custom
56 				   * function to print the contents of the
57 				   * extension */
58 } ext_t;
59 
60 enum {
61 	EXT_NON_CRIT = 0,
62 	EXT_CRIT = !EXT_NON_CRIT,
63 };
64 
65 int ext_init(ext_t *tbb_ext);
66 X509_EXTENSION *ext_new_hash(int nid, int crit, unsigned char *buf, size_t len);
67 X509_EXTENSION *ext_new_nvcounter(int nid, int crit, int value);
68 X509_EXTENSION *ext_new_key(int nid, int crit, EVP_PKEY *k);
69 
70 #endif /* EXT_H_ */
71