lib/libcrypto/pkcs7/pkcs7.h

   1 /* $OpenBSD: pkcs7.h,v 1.18 2016/12/27 16:12:47 jsing Exp $ */
   2 /* Copyright (C) 1995-1998 Eric Young (eay@cryptsoft.com)
   3  * All rights reserved.
   4  *
   5  * This package is an SSL implementation written
   6  * by Eric Young (eay@cryptsoft.com).
   7  * The implementation was written so as to conform with Netscapes SSL.
   8  *
   9  * This library is free for commercial and non-commercial use as long as
  10  * the following conditions are aheared to.  The following conditions
  11  * apply to all code found in this distribution, be it the RC4, RSA,
  12  * lhash, DES, etc., code; not just the SSL code.  The SSL documentation
  13  * included with this distribution is covered by the same copyright terms
  14  * except that the holder is Tim Hudson (tjh@cryptsoft.com).
  15  *
  16  * Copyright remains Eric Young's, and as such any Copyright notices in
  17  * the code are not to be removed.
  18  * If this package is used in a product, Eric Young should be given attribution
  19  * as the author of the parts of the library used.
  20  * This can be in the form of a textual message at program startup or
  21  * in documentation (online or textual) provided with the package.
  22  *
  23  * Redistribution and use in source and binary forms, with or without
  24  * modification, are permitted provided that the following conditions
  25  * are met:
  26  * 1. Redistributions of source code must retain the copyright
  27  *    notice, this list of conditions and the following disclaimer.
  28  * 2. Redistributions in binary form must reproduce the above copyright
  29  *    notice, this list of conditions and the following disclaimer in the
  30  *    documentation and/or other materials provided with the distribution.
  31  * 3. All advertising materials mentioning features or use of this software
  32  *    must display the following acknowledgement:
  33  *    "This product includes cryptographic software written by
  34  *     Eric Young (eay@cryptsoft.com)"
  35  *    The word 'cryptographic' can be left out if the rouines from the library
  36  *    being used are not cryptographic related :-).
  37  * 4. If you include any Windows specific code (or a derivative thereof) from
  38  *    the apps directory (application code) you must include an acknowledgement:
  39  *    "This product includes software written by Tim Hudson (tjh@cryptsoft.com)"
  40  *
  41  * THIS SOFTWARE IS PROVIDED BY ERIC YOUNG ``AS IS'' AND
  42  * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
  43  * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
  44  * ARE DISCLAIMED.  IN NO EVENT SHALL THE AUTHOR OR CONTRIBUTORS BE LIABLE
  45  * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
  46  * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
  47  * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
  48  * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
  49  * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
  50  * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
  51  * SUCH DAMAGE.
  52  *
  53  * The licence and distribution terms for any publically available version or
  54  * derivative of this code cannot be changed.  i.e. this code cannot simply be
  55  * copied and put under another distribution licence
  56  * [including the GNU Public Licence.]
  57  */
  58
  59 #ifndef HEADER_PKCS7_H
  60 #define HEADER_PKCS7_H
  61
  62 #include <openssl/opensslconf.h>
  63
  64 #include <openssl/asn1.h>
  65 #include <openssl/bio.h>
  66 #include <openssl/ossl_typ.h>
  67
  68 #ifdef  __cplusplus
  69 extern "C" {
  70 #endif
  71
  72 /*
  73 Encryption_ID           DES-CBC
  74 Digest_ID               MD5
  75 Digest_Encryption_ID    rsaEncryption
  76 Key_Encryption_ID       rsaEncryption
  77 */
  78
  79 typedef struct pkcs7_issuer_and_serial_st {
  80         X509_NAME *issuer;
  81         ASN1_INTEGER *serial;
  82 } PKCS7_ISSUER_AND_SERIAL;
  83
  84 typedef struct pkcs7_signer_info_st {
  85         ASN1_INTEGER                    *version;       /* version 1 */
  86         PKCS7_ISSUER_AND_SERIAL         *issuer_and_serial;
  87         X509_ALGOR                      *digest_alg;
  88         STACK_OF(X509_ATTRIBUTE)        *auth_attr;     /* [ 0 ] */
  89         X509_ALGOR                      *digest_enc_alg;
  90         ASN1_OCTET_STRING               *enc_digest;
  91         STACK_OF(X509_ATTRIBUTE)        *unauth_attr;   /* [ 1 ] */
  92
  93         /* The private key to sign with */
  94         EVP_PKEY                        *pkey;
  95 } PKCS7_SIGNER_INFO;
  96
  97 DECLARE_STACK_OF(PKCS7_SIGNER_INFO)
  98
  99 typedef struct pkcs7_recip_info_st {
 100         ASN1_INTEGER                    *version;       /* version 0 */
 101         PKCS7_ISSUER_AND_SERIAL         *issuer_and_serial;
 102         X509_ALGOR                      *key_enc_algor;
 103         ASN1_OCTET_STRING               *enc_key;
 104         X509                            *cert; /* get the pub-key from this */
 105 } PKCS7_RECIP_INFO;
 106
 107 DECLARE_STACK_OF(PKCS7_RECIP_INFO)
 108
 109 typedef struct pkcs7_signed_st {
 110         ASN1_INTEGER                    *version;       /* version 1 */
 111         STACK_OF(X509_ALGOR)            *md_algs;       /* md used */
 112         STACK_OF(X509)                  *cert;          /* [ 0 ] */
 113         STACK_OF(X509_CRL)              *crl;           /* [ 1 ] */
 114         STACK_OF(PKCS7_SIGNER_INFO)     *signer_info;
 115
 116         struct pkcs7_st                 *contents;
 117 } PKCS7_SIGNED;
 118 /* The above structure is very very similar to PKCS7_SIGN_ENVELOPE.
 119  * How about merging the two */
 120
 121 typedef struct pkcs7_enc_content_st {
 122         ASN1_OBJECT                     *content_type;
 123         X509_ALGOR                      *algorithm;
 124         ASN1_OCTET_STRING               *enc_data;      /* [ 0 ] */
 125         const EVP_CIPHER                *cipher;
 126 } PKCS7_ENC_CONTENT;
 127
 128 typedef struct pkcs7_enveloped_st {
 129         ASN1_INTEGER                    *version;       /* version 0 */
 130         STACK_OF(PKCS7_RECIP_INFO)      *recipientinfo;
 131         PKCS7_ENC_CONTENT               *enc_data;
 132 } PKCS7_ENVELOPE;
 133
 134 typedef struct pkcs7_signedandenveloped_st {
 135         ASN1_INTEGER                    *version;       /* version 1 */
 136         STACK_OF(X509_ALGOR)            *md_algs;       /* md used */
 137         STACK_OF(X509)                  *cert;          /* [ 0 ] */
 138         STACK_OF(X509_CRL)              *crl;           /* [ 1 ] */
 139         STACK_OF(PKCS7_SIGNER_INFO)     *signer_info;
 140
 141         PKCS7_ENC_CONTENT               *enc_data;
 142         STACK_OF(PKCS7_RECIP_INFO)      *recipientinfo;
 143 } PKCS7_SIGN_ENVELOPE;
 144
 145 typedef struct pkcs7_digest_st {
 146         ASN1_INTEGER                    *version;       /* version 0 */
 147         X509_ALGOR                      *md;            /* md used */
 148         struct pkcs7_st                 *contents;
 149         ASN1_OCTET_STRING               *digest;
 150 } PKCS7_DIGEST;
 151
 152 typedef struct pkcs7_encrypted_st {
 153         ASN1_INTEGER                    *version;       /* version 0 */
 154         PKCS7_ENC_CONTENT               *enc_data;
 155 } PKCS7_ENCRYPT;
 156
 157 typedef struct pkcs7_st {
 158         /* The following is non NULL if it contains ASN1 encoding of
 159          * this structure */
 160         unsigned char *asn1;
 161         long length;
 162
 163 #define PKCS7_S_HEADER  0
 164 #define PKCS7_S_BODY    1
 165 #define PKCS7_S_TAIL    2
 166         int state; /* used during processing */
 167
 168         int detached;
 169
 170         ASN1_OBJECT *type;
 171         /* content as defined by the type */
 172         /* all encryption/message digests are applied to the 'contents',
 173          * leaving out the 'type' field. */
 174         union   {
 175                 char *ptr;
 176
 177                 /* NID_pkcs7_data */
 178                 ASN1_OCTET_STRING *data;
 179
 180                 /* NID_pkcs7_signed */
 181                 PKCS7_SIGNED *sign;
 182
 183                 /* NID_pkcs7_enveloped */
 184                 PKCS7_ENVELOPE *enveloped;
 185
 186                 /* NID_pkcs7_signedAndEnveloped */
 187                 PKCS7_SIGN_ENVELOPE *signed_and_enveloped;
 188
 189                 /* NID_pkcs7_digest */
 190                 PKCS7_DIGEST *digest;
 191
 192                 /* NID_pkcs7_encrypted */
 193                 PKCS7_ENCRYPT *encrypted;
 194
 195                 /* Anything else */
 196                 ASN1_TYPE *other;
 197         } d;
 198 } PKCS7;
 199
 200 DECLARE_STACK_OF(PKCS7)
 201 DECLARE_PKCS12_STACK_OF(PKCS7)
 202
 203 #define PKCS7_OP_SET_DETACHED_SIGNATURE 1
 204 #define PKCS7_OP_GET_DETACHED_SIGNATURE 2
 205
 206 #define PKCS7_get_signed_attributes(si) ((si)->auth_attr)
 207 #define PKCS7_get_attributes(si)        ((si)->unauth_attr)
 208
 209 #define PKCS7_type_is_signed(a) (OBJ_obj2nid((a)->type) == NID_pkcs7_signed)
 210 #define PKCS7_type_is_encrypted(a) (OBJ_obj2nid((a)->type) == NID_pkcs7_encrypted)
 211 #define PKCS7_type_is_enveloped(a) (OBJ_obj2nid((a)->type) == NID_pkcs7_enveloped)
 212 #define PKCS7_type_is_signedAndEnveloped(a) \
 213                 (OBJ_obj2nid((a)->type) == NID_pkcs7_signedAndEnveloped)
 214 #define PKCS7_type_is_data(a)   (OBJ_obj2nid((a)->type) == NID_pkcs7_data)
 215 #define PKCS7_type_is_digest(a)   (OBJ_obj2nid((a)->type) == NID_pkcs7_digest)
 216 #define PKCS7_type_is_encrypted(a) \
 217                 (OBJ_obj2nid((a)->type) == NID_pkcs7_encrypted)
 218
 219 #define PKCS7_type_is_digest(a)   (OBJ_obj2nid((a)->type) == NID_pkcs7_digest)
 220
 221 #define PKCS7_set_detached(p,v) \
 222                 PKCS7_ctrl(p,PKCS7_OP_SET_DETACHED_SIGNATURE,v,NULL)
 223 #define PKCS7_get_detached(p) \
 224                 PKCS7_ctrl(p,PKCS7_OP_GET_DETACHED_SIGNATURE,0,NULL)
 225
 226 #define PKCS7_is_detached(p7) (PKCS7_type_is_signed(p7) && PKCS7_get_detached(p7))
 227
 228 /* S/MIME related flags */
 229
 230 #define PKCS7_TEXT              0x1
 231 #define PKCS7_NOCERTS           0x2
 232 #define PKCS7_NOSIGS            0x4
 233 #define PKCS7_NOCHAIN           0x8
 234 #define PKCS7_NOINTERN          0x10
 235 #define PKCS7_NOVERIFY          0x20
 236 #define PKCS7_DETACHED          0x40
 237 #define PKCS7_BINARY            0x80
 238 #define PKCS7_NOATTR            0x100
 239 #define PKCS7_NOSMIMECAP        0x200
 240 #define PKCS7_NOOLDMIMETYPE     0x400
 241 #define PKCS7_CRLFEOL           0x800
 242 #define PKCS7_STREAM            0x1000
 243 #define PKCS7_NOCRL             0x2000
 244 #define PKCS7_PARTIAL           0x4000
 245 #define PKCS7_REUSE_DIGEST      0x8000
 246
 247 /* Flags: for compatibility with older code */
 248
 249 #define SMIME_TEXT      PKCS7_TEXT
 250 #define SMIME_NOCERTS   PKCS7_NOCERTS
 251 #define SMIME_NOSIGS    PKCS7_NOSIGS
 252 #define SMIME_NOCHAIN   PKCS7_NOCHAIN
 253 #define SMIME_NOINTERN  PKCS7_NOINTERN
 254 #define SMIME_NOVERIFY  PKCS7_NOVERIFY
 255 #define SMIME_DETACHED  PKCS7_DETACHED
 256 #define SMIME_BINARY    PKCS7_BINARY
 257 #define SMIME_NOATTR    PKCS7_NOATTR
 258
 259 PKCS7_ISSUER_AND_SERIAL *PKCS7_ISSUER_AND_SERIAL_new(void);
 260 void PKCS7_ISSUER_AND_SERIAL_free(PKCS7_ISSUER_AND_SERIAL *a);
 261 PKCS7_ISSUER_AND_SERIAL *d2i_PKCS7_ISSUER_AND_SERIAL(PKCS7_ISSUER_AND_SERIAL **a, const unsigned char **in, long len);
 262 int i2d_PKCS7_ISSUER_AND_SERIAL(PKCS7_ISSUER_AND_SERIAL *a, unsigned char **out);
 263 extern const ASN1_ITEM PKCS7_ISSUER_AND_SERIAL_it;
 264
 265 int PKCS7_ISSUER_AND_SERIAL_digest(PKCS7_ISSUER_AND_SERIAL *data,
 266     const EVP_MD *type, unsigned char *md, unsigned int *len);
 267 PKCS7 *d2i_PKCS7_fp(FILE *fp, PKCS7 **p7);
 268 int i2d_PKCS7_fp(FILE *fp, PKCS7 *p7);
 269 PKCS7 *PKCS7_dup(PKCS7 *p7);
 270 PKCS7 *d2i_PKCS7_bio(BIO *bp, PKCS7 **p7);
 271 int i2d_PKCS7_bio(BIO *bp, PKCS7 *p7);
 272 int i2d_PKCS7_bio_stream(BIO *out, PKCS7 *p7, BIO *in, int flags);
 273 int PEM_write_bio_PKCS7_stream(BIO *out, PKCS7 *p7, BIO *in, int flags);
 274
 275 PKCS7_SIGNER_INFO *PKCS7_SIGNER_INFO_new(void);
 276 void PKCS7_SIGNER_INFO_free(PKCS7_SIGNER_INFO *a);
 277 PKCS7_SIGNER_INFO *d2i_PKCS7_SIGNER_INFO(PKCS7_SIGNER_INFO **a, const unsigned char **in, long len);
 278 int i2d_PKCS7_SIGNER_INFO(PKCS7_SIGNER_INFO *a, unsigned char **out);
 279 extern const ASN1_ITEM PKCS7_SIGNER_INFO_it;
 280 PKCS7_RECIP_INFO *PKCS7_RECIP_INFO_new(void);
 281 void PKCS7_RECIP_INFO_free(PKCS7_RECIP_INFO *a);
 282 PKCS7_RECIP_INFO *d2i_PKCS7_RECIP_INFO(PKCS7_RECIP_INFO **a, const unsigned char **in, long len);
 283 int i2d_PKCS7_RECIP_INFO(PKCS7_RECIP_INFO *a, unsigned char **out);
 284 extern const ASN1_ITEM PKCS7_RECIP_INFO_it;
 285 PKCS7_SIGNED *PKCS7_SIGNED_new(void);
 286 void PKCS7_SIGNED_free(PKCS7_SIGNED *a);
 287 PKCS7_SIGNED *d2i_PKCS7_SIGNED(PKCS7_SIGNED **a, const unsigned char **in, long len);
 288 int i2d_PKCS7_SIGNED(PKCS7_SIGNED *a, unsigned char **out);
 289 extern const ASN1_ITEM PKCS7_SIGNED_it;
 290 PKCS7_ENC_CONTENT *PKCS7_ENC_CONTENT_new(void);
 291 void PKCS7_ENC_CONTENT_free(PKCS7_ENC_CONTENT *a);
 292 PKCS7_ENC_CONTENT *d2i_PKCS7_ENC_CONTENT(PKCS7_ENC_CONTENT **a, const unsigned char **in, long len);
 293 int i2d_PKCS7_ENC_CONTENT(PKCS7_ENC_CONTENT *a, unsigned char **out);
 294 extern const ASN1_ITEM PKCS7_ENC_CONTENT_it;
 295 PKCS7_ENVELOPE *PKCS7_ENVELOPE_new(void);
 296 void PKCS7_ENVELOPE_free(PKCS7_ENVELOPE *a);
 297 PKCS7_ENVELOPE *d2i_PKCS7_ENVELOPE(PKCS7_ENVELOPE **a, const unsigned char **in, long len);
 298 int i2d_PKCS7_ENVELOPE(PKCS7_ENVELOPE *a, unsigned char **out);
 299 extern const ASN1_ITEM PKCS7_ENVELOPE_it;
 300 PKCS7_SIGN_ENVELOPE *PKCS7_SIGN_ENVELOPE_new(void);
 301 void PKCS7_SIGN_ENVELOPE_free(PKCS7_SIGN_ENVELOPE *a);
 302 PKCS7_SIGN_ENVELOPE *d2i_PKCS7_SIGN_ENVELOPE(PKCS7_SIGN_ENVELOPE **a, const unsigned char **in, long len);
 303 int i2d_PKCS7_SIGN_ENVELOPE(PKCS7_SIGN_ENVELOPE *a, unsigned char **out);
 304 extern const ASN1_ITEM PKCS7_SIGN_ENVELOPE_it;
 305 PKCS7_DIGEST *PKCS7_DIGEST_new(void);
 306 void PKCS7_DIGEST_free(PKCS7_DIGEST *a);
 307 PKCS7_DIGEST *d2i_PKCS7_DIGEST(PKCS7_DIGEST **a, const unsigned char **in, long len);
 308 int i2d_PKCS7_DIGEST(PKCS7_DIGEST *a, unsigned char **out);
 309 extern const ASN1_ITEM PKCS7_DIGEST_it;
 310 PKCS7_ENCRYPT *PKCS7_ENCRYPT_new(void);
 311 void PKCS7_ENCRYPT_free(PKCS7_ENCRYPT *a);
 312 PKCS7_ENCRYPT *d2i_PKCS7_ENCRYPT(PKCS7_ENCRYPT **a, const unsigned char **in, long len);
 313 int i2d_PKCS7_ENCRYPT(PKCS7_ENCRYPT *a, unsigned char **out);
 314 extern const ASN1_ITEM PKCS7_ENCRYPT_it;
 315 PKCS7 *PKCS7_new(void);
 316 void PKCS7_free(PKCS7 *a);
 317 PKCS7 *d2i_PKCS7(PKCS7 **a, const unsigned char **in, long len);
 318 int i2d_PKCS7(PKCS7 *a, unsigned char **out);
 319 extern const ASN1_ITEM PKCS7_it;
 320
 321 extern const ASN1_ITEM PKCS7_ATTR_SIGN_it;
 322 extern const ASN1_ITEM PKCS7_ATTR_VERIFY_it;
 323
 324 int i2d_PKCS7_NDEF(PKCS7 *a, unsigned char **out);
 325 int PKCS7_print_ctx(BIO *out, PKCS7 *x, int indent, const ASN1_PCTX *pctx);
 326
 327 long PKCS7_ctrl(PKCS7 *p7, int cmd, long larg, char *parg);
 328
 329 int PKCS7_set_type(PKCS7 *p7, int type);
 330 int PKCS7_set0_type_other(PKCS7 *p7, int type, ASN1_TYPE *other);
 331 int PKCS7_set_content(PKCS7 *p7, PKCS7 *p7_data);
 332 int PKCS7_SIGNER_INFO_set(PKCS7_SIGNER_INFO *p7i, X509 *x509, EVP_PKEY *pkey,
 333     const EVP_MD *dgst);
 334 int PKCS7_SIGNER_INFO_sign(PKCS7_SIGNER_INFO *si);
 335 int PKCS7_add_signer(PKCS7 *p7, PKCS7_SIGNER_INFO *p7i);
 336 int PKCS7_add_certificate(PKCS7 *p7, X509 *x509);
 337 int PKCS7_add_crl(PKCS7 *p7, X509_CRL *x509);
 338 int PKCS7_content_new(PKCS7 *p7, int nid);
 339 int PKCS7_dataVerify(X509_STORE *cert_store, X509_STORE_CTX *ctx,
 340     BIO *bio, PKCS7 *p7, PKCS7_SIGNER_INFO *si);
 341 int PKCS7_signatureVerify(BIO *bio, PKCS7 *p7, PKCS7_SIGNER_INFO *si,
 342     X509 *x509);
 343
 344 BIO *PKCS7_dataInit(PKCS7 *p7, BIO *bio);
 345 int PKCS7_dataFinal(PKCS7 *p7, BIO *bio);
 346 BIO *PKCS7_dataDecode(PKCS7 *p7, EVP_PKEY *pkey, BIO *in_bio, X509 *pcert);
 347
 348
 349 PKCS7_SIGNER_INFO *PKCS7_add_signature(PKCS7 *p7, X509 *x509,
 350     EVP_PKEY *pkey, const EVP_MD *dgst);
 351 X509 *PKCS7_cert_from_signer_info(PKCS7 *p7, PKCS7_SIGNER_INFO *si);
 352 int PKCS7_set_digest(PKCS7 *p7, const EVP_MD *md);
 353 STACK_OF(PKCS7_SIGNER_INFO) *PKCS7_get_signer_info(PKCS7 *p7);
 354
 355 PKCS7_RECIP_INFO *PKCS7_add_recipient(PKCS7 *p7, X509 *x509);
 356 void PKCS7_SIGNER_INFO_get0_algs(PKCS7_SIGNER_INFO *si, EVP_PKEY **pk,
 357     X509_ALGOR **pdig, X509_ALGOR **psig);
 358 void PKCS7_RECIP_INFO_get0_alg(PKCS7_RECIP_INFO *ri, X509_ALGOR **penc);
 359 int PKCS7_add_recipient_info(PKCS7 *p7, PKCS7_RECIP_INFO *ri);
 360 int PKCS7_RECIP_INFO_set(PKCS7_RECIP_INFO *p7i, X509 *x509);
 361 int PKCS7_set_cipher(PKCS7 *p7, const EVP_CIPHER *cipher);
 362 int PKCS7_stream(unsigned char ***boundary, PKCS7 *p7);
 363
 364 PKCS7_ISSUER_AND_SERIAL *PKCS7_get_issuer_and_serial(PKCS7 *p7, int idx);
 365 ASN1_OCTET_STRING *PKCS7_digest_from_attributes(STACK_OF(X509_ATTRIBUTE) *sk);
 366 int PKCS7_add_signed_attribute(PKCS7_SIGNER_INFO *p7si, int nid, int type,
 367     void *data);
 368 int PKCS7_add_attribute (PKCS7_SIGNER_INFO *p7si, int nid, int atrtype,
 369     void *value);
 370 ASN1_TYPE *PKCS7_get_attribute(PKCS7_SIGNER_INFO *si, int nid);
 371 ASN1_TYPE *PKCS7_get_signed_attribute(PKCS7_SIGNER_INFO *si, int nid);
 372 int PKCS7_set_signed_attributes(PKCS7_SIGNER_INFO *p7si,
 373     STACK_OF(X509_ATTRIBUTE) *sk);
 374 int PKCS7_set_attributes(PKCS7_SIGNER_INFO *p7si, STACK_OF(X509_ATTRIBUTE) *sk);
 375
 376
 377 PKCS7 *PKCS7_sign(X509 *signcert, EVP_PKEY *pkey, STACK_OF(X509) *certs,
 378     BIO *data, int flags);
 379
 380 PKCS7_SIGNER_INFO *PKCS7_sign_add_signer(PKCS7 *p7,
 381     X509 *signcert, EVP_PKEY *pkey, const EVP_MD *md,
 382     int flags);
 383
 384 int PKCS7_final(PKCS7 *p7, BIO *data, int flags);
 385 int PKCS7_verify(PKCS7 *p7, STACK_OF(X509) *certs, X509_STORE *store,
 386     BIO *indata, BIO *out, int flags);
 387 STACK_OF(X509) *PKCS7_get0_signers(PKCS7 *p7, STACK_OF(X509) *certs, int flags);
 388 PKCS7 *PKCS7_encrypt(STACK_OF(X509) *certs, BIO *in, const EVP_CIPHER *cipher,
 389     int flags);
 390 int PKCS7_decrypt(PKCS7 *p7, EVP_PKEY *pkey, X509 *cert, BIO *data, int flags);
 391
 392 int PKCS7_add_attrib_smimecap(PKCS7_SIGNER_INFO *si,
 393     STACK_OF(X509_ALGOR) *cap);
 394 STACK_OF(X509_ALGOR) *PKCS7_get_smimecap(PKCS7_SIGNER_INFO *si);
 395 int PKCS7_simple_smimecap(STACK_OF(X509_ALGOR) *sk, int nid, int arg);
 396
 397 int PKCS7_add_attrib_content_type(PKCS7_SIGNER_INFO *si, ASN1_OBJECT *coid);
 398 int PKCS7_add0_attrib_signing_time(PKCS7_SIGNER_INFO *si, ASN1_TIME *t);
 399 int PKCS7_add1_attrib_digest(PKCS7_SIGNER_INFO *si,
 400     const unsigned char *md, int mdlen);
 401
 402 int SMIME_write_PKCS7(BIO *bio, PKCS7 *p7, BIO *data, int flags);
 403 PKCS7 *SMIME_read_PKCS7(BIO *bio, BIO **bcont);
 404
 405 BIO *BIO_new_PKCS7(BIO *out, PKCS7 *p7);
 406
 407
 408 /* BEGIN ERROR CODES */
 409 /* The following lines are auto generated by the script mkerr.pl. Any changes
 410  * made after this point may be overwritten when the script is next run.
 411  */
 412 void ERR_load_PKCS7_strings(void);
 413
 414 /* Error codes for the PKCS7 functions. */
 415
 416 /* Function codes. */
 417 #define PKCS7_F_B64_READ_PKCS7                           120
 418 #define PKCS7_F_B64_WRITE_PKCS7                          121
 419 #define PKCS7_F_DO_PKCS7_SIGNED_ATTRIB                   136
 420 #define PKCS7_F_I2D_PKCS7_BIO_STREAM                     140
 421 #define PKCS7_F_PKCS7_ADD0_ATTRIB_SIGNING_TIME           135
 422 #define PKCS7_F_PKCS7_ADD_ATTRIB_SMIMECAP                118
 423 #define PKCS7_F_PKCS7_ADD_CERTIFICATE                    100
 424 #define PKCS7_F_PKCS7_ADD_CRL                            101
 425 #define PKCS7_F_PKCS7_ADD_RECIPIENT_INFO                 102
 426 #define PKCS7_F_PKCS7_ADD_SIGNATURE                      131
 427 #define PKCS7_F_PKCS7_ADD_SIGNER                         103
 428 #define PKCS7_F_PKCS7_BIO_ADD_DIGEST                     125
 429 #define PKCS7_F_PKCS7_COPY_EXISTING_DIGEST               138
 430 #define PKCS7_F_PKCS7_CTRL                               104
 431 #define PKCS7_F_PKCS7_DATADECODE                         112
 432 #define PKCS7_F_PKCS7_DATAFINAL                          128
 433 #define PKCS7_F_PKCS7_DATAINIT                           105
 434 #define PKCS7_F_PKCS7_DATASIGN                           106
 435 #define PKCS7_F_PKCS7_DATAVERIFY                         107
 436 #define PKCS7_F_PKCS7_DECRYPT                            114
 437 #define PKCS7_F_PKCS7_DECRYPT_RINFO                      133
 438 #define PKCS7_F_PKCS7_ENCODE_RINFO                       132
 439 #define PKCS7_F_PKCS7_ENCRYPT                            115
 440 #define PKCS7_F_PKCS7_FINAL                              134
 441 #define PKCS7_F_PKCS7_FIND_DIGEST                        127
 442 #define PKCS7_F_PKCS7_GET0_SIGNERS                       124
 443 #define PKCS7_F_PKCS7_RECIP_INFO_SET                     130
 444 #define PKCS7_F_PKCS7_SET_CIPHER                         108
 445 #define PKCS7_F_PKCS7_SET_CONTENT                        109
 446 #define PKCS7_F_PKCS7_SET_DIGEST                         126
 447 #define PKCS7_F_PKCS7_SET_TYPE                           110
 448 #define PKCS7_F_PKCS7_SIGN                               116
 449 #define PKCS7_F_PKCS7_SIGNATUREVERIFY                    113
 450 #define PKCS7_F_PKCS7_SIGNER_INFO_SET                    129
 451 #define PKCS7_F_PKCS7_SIGNER_INFO_SIGN                   139
 452 #define PKCS7_F_PKCS7_SIGN_ADD_SIGNER                    137
 453 #define PKCS7_F_PKCS7_SIMPLE_SMIMECAP                    119
 454 #define PKCS7_F_PKCS7_VERIFY                             117
 455 #define PKCS7_F_SMIME_READ_PKCS7                         122
 456 #define PKCS7_F_SMIME_TEXT                               123
 457
 458 /* Reason codes. */
 459 #define PKCS7_R_CERTIFICATE_VERIFY_ERROR                 117
 460 #define PKCS7_R_CIPHER_HAS_NO_OBJECT_IDENTIFIER          144
 461 #define PKCS7_R_CIPHER_NOT_INITIALIZED                   116
 462 #define PKCS7_R_CONTENT_AND_DATA_PRESENT                 118
 463 #define PKCS7_R_CTRL_ERROR                               152
 464 #define PKCS7_R_DECODE_ERROR                             130
 465 #define PKCS7_R_DECRYPTED_KEY_IS_WRONG_LENGTH            100
 466 #define PKCS7_R_DECRYPT_ERROR                            119
 467 #define PKCS7_R_DIGEST_FAILURE                           101
 468 #define PKCS7_R_ENCRYPTION_CTRL_FAILURE                  149
 469 #define PKCS7_R_ENCRYPTION_NOT_SUPPORTED_FOR_THIS_KEY_TYPE 150
 470 #define PKCS7_R_ERROR_ADDING_RECIPIENT                   120
 471 #define PKCS7_R_ERROR_SETTING_CIPHER                     121
 472 #define PKCS7_R_INVALID_MIME_TYPE                        131
 473 #define PKCS7_R_INVALID_NULL_POINTER                     143
 474 #define PKCS7_R_MIME_NO_CONTENT_TYPE                     132
 475 #define PKCS7_R_MIME_PARSE_ERROR                         133
 476 #define PKCS7_R_MIME_SIG_PARSE_ERROR                     134
 477 #define PKCS7_R_MISSING_CERIPEND_INFO                    103
 478 #define PKCS7_R_NO_CONTENT                               122
 479 #define PKCS7_R_NO_CONTENT_TYPE                          135
 480 #define PKCS7_R_NO_DEFAULT_DIGEST                        151
 481 #define PKCS7_R_NO_MATCHING_DIGEST_TYPE_FOUND            154
 482 #define PKCS7_R_NO_MULTIPART_BODY_FAILURE                136
 483 #define PKCS7_R_NO_MULTIPART_BOUNDARY                    137
 484 #define PKCS7_R_NO_RECIPIENT_MATCHES_CERTIFICATE         115
 485 #define PKCS7_R_NO_RECIPIENT_MATCHES_KEY                 146
 486 #define PKCS7_R_NO_SIGNATURES_ON_DATA                    123
 487 #define PKCS7_R_NO_SIGNERS                               142
 488 #define PKCS7_R_NO_SIG_CONTENT_TYPE                      138
 489 #define PKCS7_R_OPERATION_NOT_SUPPORTED_ON_THIS_TYPE     104
 490 #define PKCS7_R_PKCS7_ADD_SIGNATURE_ERROR                124
 491 #define PKCS7_R_PKCS7_ADD_SIGNER_ERROR                   153
 492 #define PKCS7_R_PKCS7_DATAFINAL                          126
 493 #define PKCS7_R_PKCS7_DATAFINAL_ERROR                    125
 494 #define PKCS7_R_PKCS7_DATASIGN                           145
 495 #define PKCS7_R_PKCS7_PARSE_ERROR                        139
 496 #define PKCS7_R_PKCS7_SIG_PARSE_ERROR                    140
 497 #define PKCS7_R_PRIVATE_KEY_DOES_NOT_MATCH_CERTIFICATE   127
 498 #define PKCS7_R_SIGNATURE_FAILURE                        105
 499 #define PKCS7_R_SIGNER_CERTIFICATE_NOT_FOUND             128
 500 #define PKCS7_R_SIGNING_CTRL_FAILURE                     147
 501 #define PKCS7_R_SIGNING_NOT_SUPPORTED_FOR_THIS_KEY_TYPE  148
 502 #define PKCS7_R_SIG_INVALID_MIME_TYPE                    141
 503 #define PKCS7_R_SMIME_TEXT_ERROR                         129
 504 #define PKCS7_R_UNABLE_TO_FIND_CERTIFICATE               106
 505 #define PKCS7_R_UNABLE_TO_FIND_MEM_BIO                   107
 506 #define PKCS7_R_UNABLE_TO_FIND_MESSAGE_DIGEST            108
 507 #define PKCS7_R_UNKNOWN_DIGEST_TYPE                      109
 508 #define PKCS7_R_UNKNOWN_OPERATION                        110
 509 #define PKCS7_R_UNSUPPORTED_CIPHER_TYPE                  111
 510 #define PKCS7_R_UNSUPPORTED_CONTENT_TYPE                 112
 511 #define PKCS7_R_WRONG_CONTENT_TYPE                       113
 512 #define PKCS7_R_WRONG_PKCS7_TYPE                         114
 513
 514 #ifdef  __cplusplus
 515 }
 516 #endif
 517 #endif