Linux srv25.usacloudserver.us 5.14.0-570.39.1.el9_6.x86_64 #1 SMP PREEMPT_DYNAMIC Thu Sep 4 05:08:52 EDT 2025 x86_64
LiteSpeed
Server IP : 23.137.84.82 & Your IP : 216.73.216.127
Domains :
Cant Read [ /etc/named.conf ]
User : epicgamerzoneco
Terminal
Auto Root
Create File
Create Folder
Localroot Suggester
Backdoor Destroyer
Readme
/
usr /
include /
openssl /
Delete
Unzip
Name
Size
Permission
Date
Action
aes.h
3.66
KB
-rw-r--r--
2025-02-11 21:56
asn1.h
59.68
KB
-rw-r--r--
2025-02-11 21:56
asn1_mac.h
398
B
-rw-r--r--
2025-02-11 21:56
asn1err.h
7.55
KB
-rw-r--r--
2025-02-11 21:56
asn1t.h
35.09
KB
-rw-r--r--
2025-02-11 21:56
async.h
3.42
KB
-rw-r--r--
2025-02-11 21:56
asyncerr.h
842
B
-rw-r--r--
2025-02-11 21:56
bio.h
44.29
KB
-rw-r--r--
2025-02-11 21:56
bioerr.h
3.43
KB
-rw-r--r--
2025-02-11 21:56
blowfish.h
2.63
KB
-rw-r--r--
2025-02-11 21:56
bn.h
23.62
KB
-rw-r--r--
2025-02-11 21:56
bnerr.h
1.9
KB
-rw-r--r--
2025-02-11 21:56
buffer.h
1.62
KB
-rw-r--r--
2025-02-11 21:56
buffererr.h
594
B
-rw-r--r--
2025-02-11 21:56
camellia.h
4.95
KB
-rw-r--r--
2025-02-11 21:56
cast.h
2.02
KB
-rw-r--r--
2025-02-11 21:56
cmac.h
1.57
KB
-rw-r--r--
2025-02-11 21:56
cmp.h
41.79
KB
-rw-r--r--
2025-02-11 21:56
cmp_util.h
1.7
KB
-rw-r--r--
2025-02-11 21:56
cmperr.h
6.27
KB
-rw-r--r--
2025-02-11 21:56
cms.h
34.25
KB
-rw-r--r--
2025-02-11 21:56
cmserr.h
6.57
KB
-rw-r--r--
2025-02-11 21:56
comp.h
1.63
KB
-rw-r--r--
2025-02-11 21:56
comperr.h
1.22
KB
-rw-r--r--
2025-02-11 21:56
conf.h
10.29
KB
-rw-r--r--
2025-02-11 21:56
conf_api.h
1.39
KB
-rw-r--r--
2025-02-11 21:56
conferr.h
2.21
KB
-rw-r--r--
2025-02-11 21:56
configuration-x86_64.h
3.63
KB
-rw-r--r--
2025-02-11 21:56
configuration.h
1.55
KB
-rw-r--r--
2025-02-11 21:56
conftypes.h
1.16
KB
-rw-r--r--
2025-02-11 21:56
core.h
7.99
KB
-rw-r--r--
2025-02-11 21:56
core_dispatch.h
48.97
KB
-rw-r--r--
2025-02-11 21:56
core_names.h
23.1
KB
-rw-r--r--
2025-02-11 21:56
core_object.h
1.1
KB
-rw-r--r--
2025-02-11 21:56
crmf.h
14.39
KB
-rw-r--r--
2025-02-11 21:56
crmferr.h
1.96
KB
-rw-r--r--
2025-02-11 21:56
crypto.h
23.61
KB
-rw-r--r--
2025-02-11 21:56
cryptoerr.h
2.41
KB
-rw-r--r--
2025-02-11 21:56
cryptoerr_legacy.h
78.51
KB
-rw-r--r--
2025-02-11 21:56
ct.h
22.18
KB
-rw-r--r--
2025-02-11 21:56
cterr.h
1.65
KB
-rw-r--r--
2025-02-11 21:56
decoder.h
5.63
KB
-rw-r--r--
2025-02-11 21:56
decodererr.h
791
B
-rw-r--r--
2025-02-11 21:56
des.h
8.33
KB
-rw-r--r--
2025-02-11 21:56
dh.h
14.99
KB
-rw-r--r--
2025-02-11 21:56
dherr.h
2.51
KB
-rw-r--r--
2025-02-11 21:56
dsa.h
12.24
KB
-rw-r--r--
2025-02-11 21:56
dsaerr.h
1.59
KB
-rw-r--r--
2025-02-11 21:56
dtls1.h
1.43
KB
-rw-r--r--
2025-02-11 21:56
e_os2.h
8.62
KB
-rw-r--r--
2025-02-11 21:56
e_ostime.h
1.16
KB
-rw-r--r--
2025-02-11 21:56
ebcdic.h
1.02
KB
-rw-r--r--
2025-02-11 21:56
ec.h
66.84
KB
-rw-r--r--
2025-02-11 21:56
ecdh.h
361
B
-rw-r--r--
2025-02-11 21:56
ecdsa.h
361
B
-rw-r--r--
2025-02-11 21:56
ecerr.h
5.28
KB
-rw-r--r--
2025-02-11 21:56
encoder.h
5.32
KB
-rw-r--r--
2025-02-11 21:56
encodererr.h
791
B
-rw-r--r--
2025-02-11 21:56
engine.h
37.91
KB
-rw-r--r--
2025-02-11 21:56
engineerr.h
2.77
KB
-rw-r--r--
2025-02-11 21:56
err.h
21.71
KB
-rw-r--r--
2025-02-11 21:56
ess.h
8.76
KB
-rw-r--r--
2025-02-11 21:56
esserr.h
1.12
KB
-rw-r--r--
2025-02-11 21:56
evp.h
102.5
KB
-rw-r--r--
2025-02-11 21:56
evperr.h
7.36
KB
-rw-r--r--
2025-02-11 21:56
fips.h
601
B
-rw-r--r--
2025-02-11 21:56
fips_names.h
2.43
KB
-rw-r--r--
2025-02-11 21:56
fipskey.h
1010
B
-rw-r--r--
2025-02-11 21:56
hmac.h
2.09
KB
-rw-r--r--
2025-02-11 21:56
hpke.h
6.82
KB
-rw-r--r--
2025-02-11 21:56
http.h
5.23
KB
-rw-r--r--
2025-02-11 21:56
httperr.h
2.39
KB
-rw-r--r--
2025-02-11 21:56
idea.h
2.94
KB
-rw-r--r--
2025-02-11 21:56
kdf.h
5.65
KB
-rw-r--r--
2025-02-11 21:56
kdferr.h
482
B
-rw-r--r--
2025-02-11 21:56
lhash.h
14.25
KB
-rw-r--r--
2025-02-11 21:56
macros.h
10.49
KB
-rw-r--r--
2025-02-11 21:56
md2.h
1.43
KB
-rw-r--r--
2025-02-11 21:56
md4.h
1.66
KB
-rw-r--r--
2025-02-11 21:56
md5.h
1.66
KB
-rw-r--r--
2025-02-11 21:56
mdc2.h
1.41
KB
-rw-r--r--
2025-02-11 21:56
modes.h
10.53
KB
-rw-r--r--
2025-02-11 21:56
obj_mac.h
237.79
KB
-rw-r--r--
2025-02-11 21:56
objects.h
6.69
KB
-rw-r--r--
2025-02-11 21:56
objectserr.h
782
B
-rw-r--r--
2025-02-11 21:56
ocsp.h
28.66
KB
-rw-r--r--
2025-02-11 21:56
ocsperr.h
2.15
KB
-rw-r--r--
2025-02-11 21:56
opensslconf.h
515
B
-rw-r--r--
2025-02-11 21:56
opensslv.h
3.11
KB
-rw-r--r--
2025-02-11 21:56
ossl_typ.h
562
B
-rw-r--r--
2025-02-11 21:56
param_build.h
2.74
KB
-rw-r--r--
2025-02-11 21:56
params.h
7.16
KB
-rw-r--r--
2025-02-11 21:56
pem.h
25.26
KB
-rw-r--r--
2025-02-11 21:56
pem2.h
531
B
-rw-r--r--
2025-02-11 21:56
pemerr.h
2.57
KB
-rw-r--r--
2025-02-11 21:56
pkcs12.h
19.7
KB
-rw-r--r--
2025-02-11 21:56
pkcs12err.h
1.85
KB
-rw-r--r--
2025-02-11 21:56
pkcs7.h
22.13
KB
-rw-r--r--
2025-02-11 21:56
pkcs7err.h
2.88
KB
-rw-r--r--
2025-02-11 21:56
prov_ssl.h
1.11
KB
-rw-r--r--
2025-02-11 21:56
proverr.h
8.33
KB
-rw-r--r--
2025-02-11 21:56
provider.h
2.67
KB
-rw-r--r--
2025-02-11 21:56
quic.h
849
B
-rw-r--r--
2025-02-11 21:56
rand.h
3.89
KB
-rw-r--r--
2025-02-11 21:56
randerr.h
3.24
KB
-rw-r--r--
2025-02-11 21:56
rc2.h
2.33
KB
-rw-r--r--
2025-02-11 21:56
rc4.h
1.17
KB
-rw-r--r--
2025-02-11 21:56
rc5.h
2.79
KB
-rw-r--r--
2025-02-11 21:56
ripemd.h
1.68
KB
-rw-r--r--
2025-02-11 21:56
rsa.h
27.81
KB
-rw-r--r--
2025-02-11 21:56
rsaerr.h
5.55
KB
-rw-r--r--
2025-02-11 21:56
safestack.h
18.01
KB
-rw-r--r--
2025-02-11 21:56
seed.h
3.87
KB
-rw-r--r--
2025-02-11 21:56
self_test.h
4.05
KB
-rw-r--r--
2025-02-11 21:56
sha.h
4.58
KB
-rw-r--r--
2025-02-11 21:56
srp.h
15.12
KB
-rw-r--r--
2025-02-11 21:56
srtp.h
2.13
KB
-rw-r--r--
2025-02-11 21:56
ssl.h
129.34
KB
-rw-r--r--
2025-02-11 21:56
ssl2.h
658
B
-rw-r--r--
2025-02-11 21:56
ssl3.h
14.8
KB
-rw-r--r--
2025-02-11 21:56
sslerr.h
21.5
KB
-rw-r--r--
2025-02-11 21:56
sslerr_legacy.h
26.37
KB
-rw-r--r--
2025-02-11 21:56
stack.h
3.21
KB
-rw-r--r--
2025-02-11 21:56
store.h
15.1
KB
-rw-r--r--
2025-02-11 21:56
storeerr.h
2.04
KB
-rw-r--r--
2025-02-11 21:56
symhacks.h
1.26
KB
-rw-r--r--
2025-02-11 21:56
thread.h
871
B
-rw-r--r--
2025-02-11 21:56
tls1.h
70.88
KB
-rw-r--r--
2025-02-11 21:56
trace.h
10.49
KB
-rw-r--r--
2025-02-11 21:56
ts.h
19.3
KB
-rw-r--r--
2025-02-11 21:56
tserr.h
3
KB
-rw-r--r--
2025-02-11 21:56
txt_db.h
1.74
KB
-rw-r--r--
2025-02-11 21:56
types.h
7.14
KB
-rw-r--r--
2025-02-11 21:56
ui.h
18.8
KB
-rw-r--r--
2025-02-11 21:56
uierr.h
1.36
KB
-rw-r--r--
2025-02-11 21:56
whrlpool.h
1.81
KB
-rw-r--r--
2025-02-11 21:56
x509.h
70.34
KB
-rw-r--r--
2025-02-11 21:56
x509_vfy.h
51.22
KB
-rw-r--r--
2025-02-11 21:56
x509err.h
3.24
KB
-rw-r--r--
2025-02-11 21:56
x509v3.h
91.86
KB
-rw-r--r--
2025-02-11 21:56
x509v3err.h
4.89
KB
-rw-r--r--
2025-02-11 21:56
Save
Rename
/* * WARNING: do not edit! * Generated by Makefile from include/openssl/ct.h.in * * Copyright 2016-2020 The OpenSSL Project Authors. All Rights Reserved. * * Licensed under the Apache License 2.0 (the "License"). You may not use * this file except in compliance with the License. You can obtain a copy * in the file LICENSE in the source distribution or at * https://www.openssl.org/source/license.html */ #ifndef OPENSSL_CT_H # define OPENSSL_CT_H # pragma once # include <openssl/macros.h> # ifndef OPENSSL_NO_DEPRECATED_3_0 # define HEADER_CT_H # endif # include <openssl/opensslconf.h> # ifndef OPENSSL_NO_CT # include <openssl/types.h> # include <openssl/safestack.h> # include <openssl/x509.h> # include <openssl/cterr.h> # ifdef __cplusplus extern "C" { # endif /* Minimum RSA key size, from RFC6962 */ # define SCT_MIN_RSA_BITS 2048 /* All hashes are SHA256 in v1 of Certificate Transparency */ # define CT_V1_HASHLEN SHA256_DIGEST_LENGTH SKM_DEFINE_STACK_OF_INTERNAL(SCT, SCT, SCT) #define sk_SCT_num(sk) OPENSSL_sk_num(ossl_check_const_SCT_sk_type(sk)) #define sk_SCT_value(sk, idx) ((SCT *)OPENSSL_sk_value(ossl_check_const_SCT_sk_type(sk), (idx))) #define sk_SCT_new(cmp) ((STACK_OF(SCT) *)OPENSSL_sk_new(ossl_check_SCT_compfunc_type(cmp))) #define sk_SCT_new_null() ((STACK_OF(SCT) *)OPENSSL_sk_new_null()) #define sk_SCT_new_reserve(cmp, n) ((STACK_OF(SCT) *)OPENSSL_sk_new_reserve(ossl_check_SCT_compfunc_type(cmp), (n))) #define sk_SCT_reserve(sk, n) OPENSSL_sk_reserve(ossl_check_SCT_sk_type(sk), (n)) #define sk_SCT_free(sk) OPENSSL_sk_free(ossl_check_SCT_sk_type(sk)) #define sk_SCT_zero(sk) OPENSSL_sk_zero(ossl_check_SCT_sk_type(sk)) #define sk_SCT_delete(sk, i) ((SCT *)OPENSSL_sk_delete(ossl_check_SCT_sk_type(sk), (i))) #define sk_SCT_delete_ptr(sk, ptr) ((SCT *)OPENSSL_sk_delete_ptr(ossl_check_SCT_sk_type(sk), ossl_check_SCT_type(ptr))) #define sk_SCT_push(sk, ptr) OPENSSL_sk_push(ossl_check_SCT_sk_type(sk), ossl_check_SCT_type(ptr)) #define sk_SCT_unshift(sk, ptr) OPENSSL_sk_unshift(ossl_check_SCT_sk_type(sk), ossl_check_SCT_type(ptr)) #define sk_SCT_pop(sk) ((SCT *)OPENSSL_sk_pop(ossl_check_SCT_sk_type(sk))) #define sk_SCT_shift(sk) ((SCT *)OPENSSL_sk_shift(ossl_check_SCT_sk_type(sk))) #define sk_SCT_pop_free(sk, freefunc) OPENSSL_sk_pop_free(ossl_check_SCT_sk_type(sk),ossl_check_SCT_freefunc_type(freefunc)) #define sk_SCT_insert(sk, ptr, idx) OPENSSL_sk_insert(ossl_check_SCT_sk_type(sk), ossl_check_SCT_type(ptr), (idx)) #define sk_SCT_set(sk, idx, ptr) ((SCT *)OPENSSL_sk_set(ossl_check_SCT_sk_type(sk), (idx), ossl_check_SCT_type(ptr))) #define sk_SCT_find(sk, ptr) OPENSSL_sk_find(ossl_check_SCT_sk_type(sk), ossl_check_SCT_type(ptr)) #define sk_SCT_find_ex(sk, ptr) OPENSSL_sk_find_ex(ossl_check_SCT_sk_type(sk), ossl_check_SCT_type(ptr)) #define sk_SCT_find_all(sk, ptr, pnum) OPENSSL_sk_find_all(ossl_check_SCT_sk_type(sk), ossl_check_SCT_type(ptr), pnum) #define sk_SCT_sort(sk) OPENSSL_sk_sort(ossl_check_SCT_sk_type(sk)) #define sk_SCT_is_sorted(sk) OPENSSL_sk_is_sorted(ossl_check_const_SCT_sk_type(sk)) #define sk_SCT_dup(sk) ((STACK_OF(SCT) *)OPENSSL_sk_dup(ossl_check_const_SCT_sk_type(sk))) #define sk_SCT_deep_copy(sk, copyfunc, freefunc) ((STACK_OF(SCT) *)OPENSSL_sk_deep_copy(ossl_check_const_SCT_sk_type(sk), ossl_check_SCT_copyfunc_type(copyfunc), ossl_check_SCT_freefunc_type(freefunc))) #define sk_SCT_set_cmp_func(sk, cmp) ((sk_SCT_compfunc)OPENSSL_sk_set_cmp_func(ossl_check_SCT_sk_type(sk), ossl_check_SCT_compfunc_type(cmp))) SKM_DEFINE_STACK_OF_INTERNAL(CTLOG, CTLOG, CTLOG) #define sk_CTLOG_num(sk) OPENSSL_sk_num(ossl_check_const_CTLOG_sk_type(sk)) #define sk_CTLOG_value(sk, idx) ((CTLOG *)OPENSSL_sk_value(ossl_check_const_CTLOG_sk_type(sk), (idx))) #define sk_CTLOG_new(cmp) ((STACK_OF(CTLOG) *)OPENSSL_sk_new(ossl_check_CTLOG_compfunc_type(cmp))) #define sk_CTLOG_new_null() ((STACK_OF(CTLOG) *)OPENSSL_sk_new_null()) #define sk_CTLOG_new_reserve(cmp, n) ((STACK_OF(CTLOG) *)OPENSSL_sk_new_reserve(ossl_check_CTLOG_compfunc_type(cmp), (n))) #define sk_CTLOG_reserve(sk, n) OPENSSL_sk_reserve(ossl_check_CTLOG_sk_type(sk), (n)) #define sk_CTLOG_free(sk) OPENSSL_sk_free(ossl_check_CTLOG_sk_type(sk)) #define sk_CTLOG_zero(sk) OPENSSL_sk_zero(ossl_check_CTLOG_sk_type(sk)) #define sk_CTLOG_delete(sk, i) ((CTLOG *)OPENSSL_sk_delete(ossl_check_CTLOG_sk_type(sk), (i))) #define sk_CTLOG_delete_ptr(sk, ptr) ((CTLOG *)OPENSSL_sk_delete_ptr(ossl_check_CTLOG_sk_type(sk), ossl_check_CTLOG_type(ptr))) #define sk_CTLOG_push(sk, ptr) OPENSSL_sk_push(ossl_check_CTLOG_sk_type(sk), ossl_check_CTLOG_type(ptr)) #define sk_CTLOG_unshift(sk, ptr) OPENSSL_sk_unshift(ossl_check_CTLOG_sk_type(sk), ossl_check_CTLOG_type(ptr)) #define sk_CTLOG_pop(sk) ((CTLOG *)OPENSSL_sk_pop(ossl_check_CTLOG_sk_type(sk))) #define sk_CTLOG_shift(sk) ((CTLOG *)OPENSSL_sk_shift(ossl_check_CTLOG_sk_type(sk))) #define sk_CTLOG_pop_free(sk, freefunc) OPENSSL_sk_pop_free(ossl_check_CTLOG_sk_type(sk),ossl_check_CTLOG_freefunc_type(freefunc)) #define sk_CTLOG_insert(sk, ptr, idx) OPENSSL_sk_insert(ossl_check_CTLOG_sk_type(sk), ossl_check_CTLOG_type(ptr), (idx)) #define sk_CTLOG_set(sk, idx, ptr) ((CTLOG *)OPENSSL_sk_set(ossl_check_CTLOG_sk_type(sk), (idx), ossl_check_CTLOG_type(ptr))) #define sk_CTLOG_find(sk, ptr) OPENSSL_sk_find(ossl_check_CTLOG_sk_type(sk), ossl_check_CTLOG_type(ptr)) #define sk_CTLOG_find_ex(sk, ptr) OPENSSL_sk_find_ex(ossl_check_CTLOG_sk_type(sk), ossl_check_CTLOG_type(ptr)) #define sk_CTLOG_find_all(sk, ptr, pnum) OPENSSL_sk_find_all(ossl_check_CTLOG_sk_type(sk), ossl_check_CTLOG_type(ptr), pnum) #define sk_CTLOG_sort(sk) OPENSSL_sk_sort(ossl_check_CTLOG_sk_type(sk)) #define sk_CTLOG_is_sorted(sk) OPENSSL_sk_is_sorted(ossl_check_const_CTLOG_sk_type(sk)) #define sk_CTLOG_dup(sk) ((STACK_OF(CTLOG) *)OPENSSL_sk_dup(ossl_check_const_CTLOG_sk_type(sk))) #define sk_CTLOG_deep_copy(sk, copyfunc, freefunc) ((STACK_OF(CTLOG) *)OPENSSL_sk_deep_copy(ossl_check_const_CTLOG_sk_type(sk), ossl_check_CTLOG_copyfunc_type(copyfunc), ossl_check_CTLOG_freefunc_type(freefunc))) #define sk_CTLOG_set_cmp_func(sk, cmp) ((sk_CTLOG_compfunc)OPENSSL_sk_set_cmp_func(ossl_check_CTLOG_sk_type(sk), ossl_check_CTLOG_compfunc_type(cmp))) typedef enum { CT_LOG_ENTRY_TYPE_NOT_SET = -1, CT_LOG_ENTRY_TYPE_X509 = 0, CT_LOG_ENTRY_TYPE_PRECERT = 1 } ct_log_entry_type_t; typedef enum { SCT_VERSION_NOT_SET = -1, SCT_VERSION_V1 = 0 } sct_version_t; typedef enum { SCT_SOURCE_UNKNOWN, SCT_SOURCE_TLS_EXTENSION, SCT_SOURCE_X509V3_EXTENSION, SCT_SOURCE_OCSP_STAPLED_RESPONSE } sct_source_t; typedef enum { SCT_VALIDATION_STATUS_NOT_SET, SCT_VALIDATION_STATUS_UNKNOWN_LOG, SCT_VALIDATION_STATUS_VALID, SCT_VALIDATION_STATUS_INVALID, SCT_VALIDATION_STATUS_UNVERIFIED, SCT_VALIDATION_STATUS_UNKNOWN_VERSION } sct_validation_status_t; /****************************************** * CT policy evaluation context functions * ******************************************/ /* * Creates a new, empty policy evaluation context associated with the given * library context and property query string. * The caller is responsible for calling CT_POLICY_EVAL_CTX_free when finished * with the CT_POLICY_EVAL_CTX. */ CT_POLICY_EVAL_CTX *CT_POLICY_EVAL_CTX_new_ex(OSSL_LIB_CTX *libctx, const char *propq); /* * The same as CT_POLICY_EVAL_CTX_new_ex() but the default library * context and property query string is used. */ CT_POLICY_EVAL_CTX *CT_POLICY_EVAL_CTX_new(void); /* Deletes a policy evaluation context and anything it owns. */ void CT_POLICY_EVAL_CTX_free(CT_POLICY_EVAL_CTX *ctx); /* Gets the peer certificate that the SCTs are for */ X509* CT_POLICY_EVAL_CTX_get0_cert(const CT_POLICY_EVAL_CTX *ctx); /* * Sets the certificate associated with the received SCTs. * Increments the reference count of cert. * Returns 1 on success, 0 otherwise. */ int CT_POLICY_EVAL_CTX_set1_cert(CT_POLICY_EVAL_CTX *ctx, X509 *cert); /* Gets the issuer of the aforementioned certificate */ X509* CT_POLICY_EVAL_CTX_get0_issuer(const CT_POLICY_EVAL_CTX *ctx); /* * Sets the issuer of the certificate associated with the received SCTs. * Increments the reference count of issuer. * Returns 1 on success, 0 otherwise. */ int CT_POLICY_EVAL_CTX_set1_issuer(CT_POLICY_EVAL_CTX *ctx, X509 *issuer); /* Gets the CT logs that are trusted sources of SCTs */ const CTLOG_STORE *CT_POLICY_EVAL_CTX_get0_log_store(const CT_POLICY_EVAL_CTX *ctx); /* Sets the log store that is in use. It must outlive the CT_POLICY_EVAL_CTX. */ void CT_POLICY_EVAL_CTX_set_shared_CTLOG_STORE(CT_POLICY_EVAL_CTX *ctx, CTLOG_STORE *log_store); /* * Gets the time, in milliseconds since the Unix epoch, that will be used as the * current time when checking whether an SCT was issued in the future. * Such SCTs will fail validation, as required by RFC6962. */ uint64_t CT_POLICY_EVAL_CTX_get_time(const CT_POLICY_EVAL_CTX *ctx); /* * Sets the time to evaluate SCTs against, in milliseconds since the Unix epoch. * If an SCT's timestamp is after this time, it will be interpreted as having * been issued in the future. RFC6962 states that "TLS clients MUST reject SCTs * whose timestamp is in the future", so an SCT will not validate in this case. */ void CT_POLICY_EVAL_CTX_set_time(CT_POLICY_EVAL_CTX *ctx, uint64_t time_in_ms); /***************** * SCT functions * *****************/ /* * Creates a new, blank SCT. * The caller is responsible for calling SCT_free when finished with the SCT. */ SCT *SCT_new(void); /* * Creates a new SCT from some base64-encoded strings. * The caller is responsible for calling SCT_free when finished with the SCT. */ SCT *SCT_new_from_base64(unsigned char version, const char *logid_base64, ct_log_entry_type_t entry_type, uint64_t timestamp, const char *extensions_base64, const char *signature_base64); /* * Frees the SCT and the underlying data structures. */ void SCT_free(SCT *sct); /* * Free a stack of SCTs, and the underlying SCTs themselves. * Intended to be compatible with X509V3_EXT_FREE. */ void SCT_LIST_free(STACK_OF(SCT) *a); /* * Returns the version of the SCT. */ sct_version_t SCT_get_version(const SCT *sct); /* * Set the version of an SCT. * Returns 1 on success, 0 if the version is unrecognized. */ __owur int SCT_set_version(SCT *sct, sct_version_t version); /* * Returns the log entry type of the SCT. */ ct_log_entry_type_t SCT_get_log_entry_type(const SCT *sct); /* * Set the log entry type of an SCT. * Returns 1 on success, 0 otherwise. */ __owur int SCT_set_log_entry_type(SCT *sct, ct_log_entry_type_t entry_type); /* * Gets the ID of the log that an SCT came from. * Ownership of the log ID remains with the SCT. * Returns the length of the log ID. */ size_t SCT_get0_log_id(const SCT *sct, unsigned char **log_id); /* * Set the log ID of an SCT to point directly to the *log_id specified. * The SCT takes ownership of the specified pointer. * Returns 1 on success, 0 otherwise. */ __owur int SCT_set0_log_id(SCT *sct, unsigned char *log_id, size_t log_id_len); /* * Set the log ID of an SCT. * This makes a copy of the log_id. * Returns 1 on success, 0 otherwise. */ __owur int SCT_set1_log_id(SCT *sct, const unsigned char *log_id, size_t log_id_len); /* * Returns the timestamp for the SCT (epoch time in milliseconds). */ uint64_t SCT_get_timestamp(const SCT *sct); /* * Set the timestamp of an SCT (epoch time in milliseconds). */ void SCT_set_timestamp(SCT *sct, uint64_t timestamp); /* * Return the NID for the signature used by the SCT. * For CT v1, this will be either NID_sha256WithRSAEncryption or * NID_ecdsa_with_SHA256 (or NID_undef if incorrect/unset). */ int SCT_get_signature_nid(const SCT *sct); /* * Set the signature type of an SCT * For CT v1, this should be either NID_sha256WithRSAEncryption or * NID_ecdsa_with_SHA256. * Returns 1 on success, 0 otherwise. */ __owur int SCT_set_signature_nid(SCT *sct, int nid); /* * Set *ext to point to the extension data for the SCT. ext must not be NULL. * The SCT retains ownership of this pointer. * Returns length of the data pointed to. */ size_t SCT_get0_extensions(const SCT *sct, unsigned char **ext); /* * Set the extensions of an SCT to point directly to the *ext specified. * The SCT takes ownership of the specified pointer. */ void SCT_set0_extensions(SCT *sct, unsigned char *ext, size_t ext_len); /* * Set the extensions of an SCT. * This takes a copy of the ext. * Returns 1 on success, 0 otherwise. */ __owur int SCT_set1_extensions(SCT *sct, const unsigned char *ext, size_t ext_len); /* * Set *sig to point to the signature for the SCT. sig must not be NULL. * The SCT retains ownership of this pointer. * Returns length of the data pointed to. */ size_t SCT_get0_signature(const SCT *sct, unsigned char **sig); /* * Set the signature of an SCT to point directly to the *sig specified. * The SCT takes ownership of the specified pointer. */ void SCT_set0_signature(SCT *sct, unsigned char *sig, size_t sig_len); /* * Set the signature of an SCT to be a copy of the *sig specified. * Returns 1 on success, 0 otherwise. */ __owur int SCT_set1_signature(SCT *sct, const unsigned char *sig, size_t sig_len); /* * The origin of this SCT, e.g. TLS extension, OCSP response, etc. */ sct_source_t SCT_get_source(const SCT *sct); /* * Set the origin of this SCT, e.g. TLS extension, OCSP response, etc. * Returns 1 on success, 0 otherwise. */ __owur int SCT_set_source(SCT *sct, sct_source_t source); /* * Returns a text string describing the validation status of |sct|. */ const char *SCT_validation_status_string(const SCT *sct); /* * Pretty-prints an |sct| to |out|. * It will be indented by the number of spaces specified by |indent|. * If |logs| is not NULL, it will be used to lookup the CT log that the SCT came * from, so that the log name can be printed. */ void SCT_print(const SCT *sct, BIO *out, int indent, const CTLOG_STORE *logs); /* * Pretty-prints an |sct_list| to |out|. * It will be indented by the number of spaces specified by |indent|. * SCTs will be delimited by |separator|. * If |logs| is not NULL, it will be used to lookup the CT log that each SCT * came from, so that the log names can be printed. */ void SCT_LIST_print(const STACK_OF(SCT) *sct_list, BIO *out, int indent, const char *separator, const CTLOG_STORE *logs); /* * Gets the last result of validating this SCT. * If it has not been validated yet, returns SCT_VALIDATION_STATUS_NOT_SET. */ sct_validation_status_t SCT_get_validation_status(const SCT *sct); /* * Validates the given SCT with the provided context. * Sets the "validation_status" field of the SCT. * Returns 1 if the SCT is valid and the signature verifies. * Returns 0 if the SCT is invalid or could not be verified. * Returns -1 if an error occurs. */ __owur int SCT_validate(SCT *sct, const CT_POLICY_EVAL_CTX *ctx); /* * Validates the given list of SCTs with the provided context. * Sets the "validation_status" field of each SCT. * Returns 1 if there are no invalid SCTs and all signatures verify. * Returns 0 if at least one SCT is invalid or could not be verified. * Returns a negative integer if an error occurs. */ __owur int SCT_LIST_validate(const STACK_OF(SCT) *scts, CT_POLICY_EVAL_CTX *ctx); /********************************* * SCT parsing and serialization * *********************************/ /* * Serialize (to TLS format) a stack of SCTs and return the length. * "a" must not be NULL. * If "pp" is NULL, just return the length of what would have been serialized. * If "pp" is not NULL and "*pp" is null, function will allocate a new pointer * for data that caller is responsible for freeing (only if function returns * successfully). * If "pp" is NULL and "*pp" is not NULL, caller is responsible for ensuring * that "*pp" is large enough to accept all of the serialized data. * Returns < 0 on error, >= 0 indicating bytes written (or would have been) * on success. */ __owur int i2o_SCT_LIST(const STACK_OF(SCT) *a, unsigned char **pp); /* * Convert TLS format SCT list to a stack of SCTs. * If "a" or "*a" is NULL, a new stack will be created that the caller is * responsible for freeing (by calling SCT_LIST_free). * "**pp" and "*pp" must not be NULL. * Upon success, "*pp" will point to after the last bytes read, and a stack * will be returned. * Upon failure, a NULL pointer will be returned, and the position of "*pp" is * not defined. */ STACK_OF(SCT) *o2i_SCT_LIST(STACK_OF(SCT) **a, const unsigned char **pp, size_t len); /* * Serialize (to DER format) a stack of SCTs and return the length. * "a" must not be NULL. * If "pp" is NULL, just returns the length of what would have been serialized. * If "pp" is not NULL and "*pp" is null, function will allocate a new pointer * for data that caller is responsible for freeing (only if function returns * successfully). * If "pp" is NULL and "*pp" is not NULL, caller is responsible for ensuring * that "*pp" is large enough to accept all of the serialized data. * Returns < 0 on error, >= 0 indicating bytes written (or would have been) * on success. */ __owur int i2d_SCT_LIST(const STACK_OF(SCT) *a, unsigned char **pp); /* * Parses an SCT list in DER format and returns it. * If "a" or "*a" is NULL, a new stack will be created that the caller is * responsible for freeing (by calling SCT_LIST_free). * "**pp" and "*pp" must not be NULL. * Upon success, "*pp" will point to after the last bytes read, and a stack * will be returned. * Upon failure, a NULL pointer will be returned, and the position of "*pp" is * not defined. */ STACK_OF(SCT) *d2i_SCT_LIST(STACK_OF(SCT) **a, const unsigned char **pp, long len); /* * Serialize (to TLS format) an |sct| and write it to |out|. * If |out| is null, no SCT will be output but the length will still be returned. * If |out| points to a null pointer, a string will be allocated to hold the * TLS-format SCT. It is the responsibility of the caller to free it. * If |out| points to an allocated string, the TLS-format SCT will be written * to it. * The length of the SCT in TLS format will be returned. */ __owur int i2o_SCT(const SCT *sct, unsigned char **out); /* * Parses an SCT in TLS format and returns it. * If |psct| is not null, it will end up pointing to the parsed SCT. If it * already points to a non-null pointer, the pointer will be free'd. * |in| should be a pointer to a string containing the TLS-format SCT. * |in| will be advanced to the end of the SCT if parsing succeeds. * |len| should be the length of the SCT in |in|. * Returns NULL if an error occurs. * If the SCT is an unsupported version, only the SCT's 'sct' and 'sct_len' * fields will be populated (with |in| and |len| respectively). */ SCT *o2i_SCT(SCT **psct, const unsigned char **in, size_t len); /******************** * CT log functions * ********************/ /* * Creates a new CT log instance with the given |public_key| and |name| and * associates it with the give library context |libctx| and property query * string |propq|. * Takes ownership of |public_key| but copies |name|. * Returns NULL if malloc fails or if |public_key| cannot be converted to DER. * Should be deleted by the caller using CTLOG_free when no longer needed. */ CTLOG *CTLOG_new_ex(EVP_PKEY *public_key, const char *name, OSSL_LIB_CTX *libctx, const char *propq); /* * The same as CTLOG_new_ex except that the default library context and * property query string are used. */ CTLOG *CTLOG_new(EVP_PKEY *public_key, const char *name); /* * Creates a new CTLOG instance with the base64-encoded SubjectPublicKeyInfo DER * in |pkey_base64| and associated with the given library context |libctx| and * property query string |propq|. The |name| is a string to help users identify * this log. * Returns 1 on success, 0 on failure. * Should be deleted by the caller using CTLOG_free when no longer needed. */ int CTLOG_new_from_base64_ex(CTLOG **ct_log, const char *pkey_base64, const char *name, OSSL_LIB_CTX *libctx, const char *propq); /* * The same as CTLOG_new_from_base64_ex() except that the default * library context and property query string are used. * Returns 1 on success, 0 on failure. */ int CTLOG_new_from_base64(CTLOG ** ct_log, const char *pkey_base64, const char *name); /* * Deletes a CT log instance and its fields. */ void CTLOG_free(CTLOG *log); /* Gets the name of the CT log */ const char *CTLOG_get0_name(const CTLOG *log); /* Gets the ID of the CT log */ void CTLOG_get0_log_id(const CTLOG *log, const uint8_t **log_id, size_t *log_id_len); /* Gets the public key of the CT log */ EVP_PKEY *CTLOG_get0_public_key(const CTLOG *log); /************************** * CT log store functions * **************************/ /* * Creates a new CT log store and associates it with the given libctx and * property query string. * Should be deleted by the caller using CTLOG_STORE_free when no longer needed. */ CTLOG_STORE *CTLOG_STORE_new_ex(OSSL_LIB_CTX *libctx, const char *propq); /* * Same as CTLOG_STORE_new_ex except that the default libctx and * property query string are used. * Should be deleted by the caller using CTLOG_STORE_free when no longer needed. */ CTLOG_STORE *CTLOG_STORE_new(void); /* * Deletes a CT log store and all of the CT log instances held within. */ void CTLOG_STORE_free(CTLOG_STORE *store); /* * Finds a CT log in the store based on its log ID. * Returns the CT log, or NULL if no match is found. */ const CTLOG *CTLOG_STORE_get0_log_by_id(const CTLOG_STORE *store, const uint8_t *log_id, size_t log_id_len); /* * Loads a CT log list into a |store| from a |file|. * Returns 1 if loading is successful, or 0 otherwise. */ __owur int CTLOG_STORE_load_file(CTLOG_STORE *store, const char *file); /* * Loads the default CT log list into a |store|. * Returns 1 if loading is successful, or 0 otherwise. */ __owur int CTLOG_STORE_load_default_file(CTLOG_STORE *store); # ifdef __cplusplus } # endif # endif #endif