47 lines
2.2 KiB
C
47 lines
2.2 KiB
C
/* This Source Code Form is subject to the terms of the Mozilla Public
|
|
* License, v. 2.0. If a copy of the MPL was not distributed with this
|
|
* file, You can obtain one at http://mozilla.org/MPL/2.0/.
|
|
*/
|
|
|
|
#ifndef mozilla_pkix_pkixc_h
|
|
#define mozilla_pkix_pkixc_h
|
|
|
|
#include "prerror.h"
|
|
#include "stdint.h"
|
|
|
|
// VerifyCertificateChain will attempt to build a verified certificate chain
|
|
// starting from the 0th certificate in the given array to the indicated trust
|
|
// anchor. It returns true on success and false otherwise. No particular key
|
|
// usage is required, and no particular policy is required. The code signing
|
|
// extended key usage is required. No revocation checking is performed. RSA
|
|
// keys must be at least 2048 bits long, and EC keys must be from one of the
|
|
// curves secp256r1, secp384r1, or secp521r1. Only SHA256, SHA384, and SHA512
|
|
// are acceptable digest algorithms. When doing name checking, the subject
|
|
// common name field is ignored.
|
|
// certificate is an array of pointers to certificates.
|
|
// certificateLengths is an array of the lengths of each certificate.
|
|
// numCertificates indicates how many certificates are in certificates.
|
|
// secondsSinceEpoch indicates the time at which the certificate chain must be
|
|
// valid, in seconds since the epoch.
|
|
// rootSHA256Hash identifies a trust anchor by the SHA256 hash of its contents.
|
|
// It must be an array of 32 bytes.
|
|
// hostname is a doman name for which the end-entity certificate must be valid.
|
|
// error will be set if and only if the return value is false. Its value may
|
|
// indicate why verification failed.
|
|
|
|
#ifdef __cplusplus
|
|
extern "C" {
|
|
#endif
|
|
bool VerifyCodeSigningCertificateChain(const uint8_t** certificates,
|
|
const uint16_t* certificateLengths,
|
|
size_t numCertificates,
|
|
uint64_t secondsSinceEpoch,
|
|
const uint8_t* rootSHA256Hash,
|
|
const uint8_t* hostname,
|
|
size_t hostnameLength,
|
|
/* out */ PRErrorCode* error);
|
|
#ifdef __cplusplus
|
|
}
|
|
#endif
|
|
|
|
#endif // mozilla_pkix_pkixc_h
|