blob: bffb06bfe94227a8eb886428728e0cddb573dcea (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
|
#ifndef _IPXE_CMS_H
#define _IPXE_CMS_H
/** @file
*
* Cryptographic Message Syntax (PKCS #7)
*
*/
FILE_LICENCE ( GPL2_OR_LATER_OR_UBDL );
#include <time.h>
#include <ipxe/asn1.h>
#include <ipxe/crypto.h>
#include <ipxe/x509.h>
#include <ipxe/refcnt.h>
#include <ipxe/uaccess.h>
struct image;
struct cms_message;
/** A CMS message type */
struct cms_type {
/** Name */
const char *name;
/** Object identifier */
struct asn1_cursor oid;
/** Parse content
*
* @v cms CMS message
* @v raw ASN.1 cursor
* @ret rc Return status code
*/
int ( * parse ) ( struct cms_message *cms,
const struct asn1_cursor *raw );
};
/** CMS participant information */
struct cms_participant {
/** List of participant information blocks */
struct list_head list;
/** Certificate chain */
struct x509_chain *chain;
/** Digest algorithm (for signature messages) */
struct digest_algorithm *digest;
/** Public-key algorithm */
struct pubkey_algorithm *pubkey;
/** Signature or key value */
struct asn1_cursor value;
};
/** A CMS message */
struct cms_message {
/** Reference count */
struct refcnt refcnt;
/** Raw ASN.1 data */
struct asn1_cursor *raw;
/** Message type */
struct cms_type *type;
/** List of all certificates (for signature messages) */
struct x509_chain *certificates;
/** List of participant information blocks */
struct list_head participants;
};
/**
* Get reference to CMS message
*
* @v cms CMS message
* @ret cms CMS message
*/
static inline __attribute__ (( always_inline )) struct cms_message *
cms_get ( struct cms_message *cms ) {
ref_get ( &cms->refcnt );
return cms;
}
/**
* Drop reference to CMS message
*
* @v cms CMS message
*/
static inline __attribute__ (( always_inline )) void
cms_put ( struct cms_message *cms ) {
ref_put ( &cms->refcnt );
}
/**
* Check if CMS message is a signature message
*
* @v cms CMS message
* @ret is_signature Message is a signature message
*/
static inline __attribute__ (( always_inline )) int
cms_is_signature ( struct cms_message *cms ) {
/* CMS signatures include an optional CertificateSet */
return ( cms->certificates != NULL );
}
extern int cms_message ( struct image *image, struct cms_message **cms );
extern int cms_verify ( struct cms_message *cms, struct image *image,
const char *name, time_t time, struct x509_chain *store,
struct x509_root *root );
#endif /* _IPXE_CMS_H */
|
