1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
|
/*************************************************
* X.509 Certificate Authority Header File *
* (C) 1999-2008 Jack Lloyd *
*************************************************/
#ifndef BOTAN_X509_CA_H__
#define BOTAN_X509_CA_H__
#include <botan/x509cert.h>
#include <botan/x509_crl.h>
#include <botan/x509_ext.h>
#include <botan/pkcs8.h>
#include <botan/pkcs10.h>
#include <botan/pubkey.h>
namespace Botan {
/*************************************************
* X.509 Certificate Authority *
*************************************************/
class X509_CA
{
public:
X509_Certificate sign_request(const PKCS10_Request& req,
const X509_Time& not_before,
const X509_Time& not_after);
X509_Certificate ca_certificate() const;
X509_CRL new_crl(u32bit = 0) const;
X509_CRL update_crl(const X509_CRL&, const std::vector<CRL_Entry>&,
u32bit = 0) const;
static X509_Certificate make_cert(PK_Signer*, const AlgorithmIdentifier&,
const MemoryRegion<byte>&,
const X509_Time&, const X509_Time&,
const X509_DN&, const X509_DN&,
const Extensions&);
X509_CA(const X509_Certificate&, const Private_Key&);
~X509_CA();
private:
X509_CA(const X509_CA&) {}
X509_CA& operator=(const X509_CA&) { return (*this); }
X509_CRL make_crl(const std::vector<CRL_Entry>&, u32bit, u32bit) const;
AlgorithmIdentifier ca_sig_algo;
X509_Certificate cert;
PK_Signer* signer;
};
/*************************************************
* Choose a signing format for the key *
*************************************************/
PK_Signer* choose_sig_format(const Private_Key&, AlgorithmIdentifier&);
}
#endif
|
