46 lines
1.5 KiB
C
46 lines
1.5 KiB
C
/* Support of X.509 attribute certificates
|
|
* Copyright (C) 2002 Ueli Galizzi, Ariane Seiler
|
|
* Copyright (C) 2003 Martin Berner, Lukas Suter
|
|
* Copyright (C) 2009 Andreas Steffen
|
|
|
|
*
|
|
* This program is free software; you can redistribute it and/or modify it
|
|
* under the terms of the GNU General Public License as published by the
|
|
* Free Software Foundation; either version 2 of the License, or (at your
|
|
* option) any later version. See <http://www.fsf.org/copyleft/gpl.txt>.
|
|
*
|
|
* This program is distributed in the hope that it will be useful, but
|
|
* WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY
|
|
* or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License
|
|
* for more details.
|
|
*/
|
|
|
|
#ifndef _AC_H
|
|
#define _AC_H
|
|
|
|
#include <time.h>
|
|
|
|
#include <credentials/certificates/certificate.h>
|
|
#include <credentials/ietf_attributes/ietf_attributes.h>
|
|
|
|
/* access structure for an X.509 attribute certificate */
|
|
|
|
typedef struct x509acert x509acert_t;
|
|
|
|
struct x509acert {
|
|
certificate_t *ac;
|
|
x509acert_t *next;
|
|
time_t installed;
|
|
};
|
|
|
|
extern bool verify_x509acert(x509acert_t *ac, bool strict);
|
|
extern bool match_group_membership(ietf_attributes_t *peer_attributes, char *conn,
|
|
ietf_attributes_t *conn_attributes);
|
|
extern x509acert_t* get_x509acert(chunk_t issuer, chunk_t serial);
|
|
extern void load_acerts(void);
|
|
extern void free_acert(x509acert_t *ac);
|
|
extern void free_acerts(void);
|
|
extern void list_acerts(bool utc);
|
|
|
|
#endif /* _AH_H */
|