x509v3.h source code [include/openssl/x509v3.h]

1	/*
2	* WARNING: do not edit!
3	* Generated by Makefile from ../include/openssl/x509v3.h.in
4	*
5	* Copyright 1999-2021 The OpenSSL Project Authors. All Rights Reserved.
6	*
7	* Licensed under the Apache License 2.0 (the "License"). You may not use
8	* this file except in compliance with the License. You can obtain a copy
9	* in the file LICENSE in the source distribution or at
10	* https://www.openssl.org/source/license.html
11	*/
12
13
14
15	#ifndef OPENSSL_X509V3_H
16	# define OPENSSL_X509V3_H
17	# pragma once
18
19	# include <openssl/macros.h>
20	# ifndef OPENSSL_NO_DEPRECATED_3_0
21	# define HEADER_X509V3_H
22	# endif
23
24	# include <openssl/bio.h>
25	# include <openssl/x509.h>
26	# include <openssl/conf.h>
27	# include <openssl/x509v3err.h>
28
29	#ifdef __cplusplus
30	extern "C" {
31	#endif
32
33	/ Forward reference /
34	struct v3_ext_method;
35	struct v3_ext_ctx;
36
37	/ Useful typedefs /
38
39	typedef void (X509V3_EXT_NEW)(void);
40	typedef void (X509V3_EXT_FREE) (void* *);
41	typedef void (X509V3_EXT_D2I)(void , const* unsigned char *, long*);
42	typedef int (X509V3_EXT_I2D) (const* void , unsigned* char **);
43	typedef STACK_OF(CONF_VALUE) *
44	(X509V3_EXT_I2V) (const* struct v3_ext_method method, void* *ext,
45	STACK_OF(CONF_VALUE) *extlist);
46	typedef void (X509V3_EXT_V2I)(const struct v3_ext_method *method,
47	struct v3_ext_ctx *ctx,
48	STACK_OF(CONF_VALUE) *values);
49	typedef char (X509V3_EXT_I2S)(const struct v3_ext_method *method,
50	void *ext);
51	typedef void (X509V3_EXT_S2I)(const struct v3_ext_method *method,
52	struct v3_ext_ctx ctx, const* char *str);
53	typedef int (X509V3_EXT_I2R) (const* struct v3_ext_method method, void* *ext,
54	BIO out, int* indent);
55	typedef void (X509V3_EXT_R2I)(const struct v3_ext_method *method,
56	struct v3_ext_ctx ctx, const* char *str);
57
58	/ V3 extension structure /
59
60	struct v3_ext_method {
61	int ext_nid;
62	int ext_flags;
63	/ If this is set the following four fields are ignored /
64	ASN1_ITEM_EXP *it;
65	/ Old style ASN1 calls /
66	X509V3_EXT_NEW ext_new;
67	X509V3_EXT_FREE ext_free;
68	X509V3_EXT_D2I d2i;
69	X509V3_EXT_I2D i2d;
70	/ The following pair is used for string extensions /
71	X509V3_EXT_I2S i2s;
72	X509V3_EXT_S2I s2i;
73	/ The following pair is used for multi-valued extensions /
74	X509V3_EXT_I2V i2v;
75	X509V3_EXT_V2I v2i;
76	/ The following are used for raw extensions /
77	X509V3_EXT_I2R i2r;
78	X509V3_EXT_R2I r2i;
79	void usr_data; /* Any extension specific data /
80	};
81
82	typedef struct X509V3_CONF_METHOD_st {
83	char (get_string) (void db, const* char section, const* char *value);
84	STACK_OF(CONF_VALUE) (get_section) (void db, const* char *section);
85	void (free_string) (void* db, char* *string);
86	void (free_section) (void* db, STACK_OF(CONF_VALUE) section);
87	} X509V3_CONF_METHOD;
88
89	/ Context specific info for producing X509 v3 extensions/
90	struct v3_ext_ctx {
91	# define X509V3_CTX_TEST 0x1
92	# ifndef OPENSSL_NO_DEPRECATED_3_0
93	# define CTX_TEST X509V3_CTX_TEST
94	# endif
95	# define X509V3_CTX_REPLACE 0x2
96	int flags;
97	X509 *issuer_cert;
98	X509 *subject_cert;
99	X509_REQ *subject_req;
100	X509_CRL *crl;
101	X509V3_CONF_METHOD *db_meth;
102	void *db;
103	EVP_PKEY *issuer_pkey;
104	/ Maybe more here /
105	};
106
107	typedef struct v3_ext_method X509V3_EXT_METHOD;
108
109	SKM_DEFINE_STACK_OF_INTERNAL(X509V3_EXT_METHOD, X509V3_EXT_METHOD, X509V3_EXT_METHOD)
110	#define sk_X509V3_EXT_METHOD_num(sk) OPENSSL_sk_num(ossl_check_const_X509V3_EXT_METHOD_sk_type(sk))
111	#define sk_X509V3_EXT_METHOD_value(sk, idx) ((X509V3_EXT_METHOD *)OPENSSL_sk_value(ossl_check_const_X509V3_EXT_METHOD_sk_type(sk), (idx)))
112	#define sk_X509V3_EXT_METHOD_new(cmp) ((STACK_OF(X509V3_EXT_METHOD) *)OPENSSL_sk_new(ossl_check_X509V3_EXT_METHOD_compfunc_type(cmp)))
113	#define sk_X509V3_EXT_METHOD_new_null() ((STACK_OF(X509V3_EXT_METHOD) *)OPENSSL_sk_new_null())
114	#define sk_X509V3_EXT_METHOD_new_reserve(cmp, n) ((STACK_OF(X509V3_EXT_METHOD) *)OPENSSL_sk_new_reserve(ossl_check_X509V3_EXT_METHOD_compfunc_type(cmp), (n)))
115	#define sk_X509V3_EXT_METHOD_reserve(sk, n) OPENSSL_sk_reserve(ossl_check_X509V3_EXT_METHOD_sk_type(sk), (n))
116	#define sk_X509V3_EXT_METHOD_free(sk) OPENSSL_sk_free(ossl_check_X509V3_EXT_METHOD_sk_type(sk))
117	#define sk_X509V3_EXT_METHOD_zero(sk) OPENSSL_sk_zero(ossl_check_X509V3_EXT_METHOD_sk_type(sk))
118	#define sk_X509V3_EXT_METHOD_delete(sk, i) ((X509V3_EXT_METHOD *)OPENSSL_sk_delete(ossl_check_X509V3_EXT_METHOD_sk_type(sk), (i)))
119	#define sk_X509V3_EXT_METHOD_delete_ptr(sk, ptr) ((X509V3_EXT_METHOD *)OPENSSL_sk_delete_ptr(ossl_check_X509V3_EXT_METHOD_sk_type(sk), ossl_check_X509V3_EXT_METHOD_type(ptr)))
120	#define sk_X509V3_EXT_METHOD_push(sk, ptr) OPENSSL_sk_push(ossl_check_X509V3_EXT_METHOD_sk_type(sk), ossl_check_X509V3_EXT_METHOD_type(ptr))
121	#define sk_X509V3_EXT_METHOD_unshift(sk, ptr) OPENSSL_sk_unshift(ossl_check_X509V3_EXT_METHOD_sk_type(sk), ossl_check_X509V3_EXT_METHOD_type(ptr))
122	#define sk_X509V3_EXT_METHOD_pop(sk) ((X509V3_EXT_METHOD *)OPENSSL_sk_pop(ossl_check_X509V3_EXT_METHOD_sk_type(sk)))
123	#define sk_X509V3_EXT_METHOD_shift(sk) ((X509V3_EXT_METHOD *)OPENSSL_sk_shift(ossl_check_X509V3_EXT_METHOD_sk_type(sk)))
124	#define sk_X509V3_EXT_METHOD_pop_free(sk, freefunc) OPENSSL_sk_pop_free(ossl_check_X509V3_EXT_METHOD_sk_type(sk),ossl_check_X509V3_EXT_METHOD_freefunc_type(freefunc))
125	#define sk_X509V3_EXT_METHOD_insert(sk, ptr, idx) OPENSSL_sk_insert(ossl_check_X509V3_EXT_METHOD_sk_type(sk), ossl_check_X509V3_EXT_METHOD_type(ptr), (idx))
126	#define sk_X509V3_EXT_METHOD_set(sk, idx, ptr) ((X509V3_EXT_METHOD *)OPENSSL_sk_set(ossl_check_X509V3_EXT_METHOD_sk_type(sk), (idx), ossl_check_X509V3_EXT_METHOD_type(ptr)))
127	#define sk_X509V3_EXT_METHOD_find(sk, ptr) OPENSSL_sk_find(ossl_check_X509V3_EXT_METHOD_sk_type(sk), ossl_check_X509V3_EXT_METHOD_type(ptr))
128	#define sk_X509V3_EXT_METHOD_find_ex(sk, ptr) OPENSSL_sk_find_ex(ossl_check_X509V3_EXT_METHOD_sk_type(sk), ossl_check_X509V3_EXT_METHOD_type(ptr))
129	#define sk_X509V3_EXT_METHOD_find_all(sk, ptr, pnum) OPENSSL_sk_find_all(ossl_check_X509V3_EXT_METHOD_sk_type(sk), ossl_check_X509V3_EXT_METHOD_type(ptr), pnum)
130	#define sk_X509V3_EXT_METHOD_sort(sk) OPENSSL_sk_sort(ossl_check_X509V3_EXT_METHOD_sk_type(sk))
131	#define sk_X509V3_EXT_METHOD_is_sorted(sk) OPENSSL_sk_is_sorted(ossl_check_const_X509V3_EXT_METHOD_sk_type(sk))
132	#define sk_X509V3_EXT_METHOD_dup(sk) ((STACK_OF(X509V3_EXT_METHOD) *)OPENSSL_sk_dup(ossl_check_const_X509V3_EXT_METHOD_sk_type(sk)))
133	#define sk_X509V3_EXT_METHOD_deep_copy(sk, copyfunc, freefunc) ((STACK_OF(X509V3_EXT_METHOD) *)OPENSSL_sk_deep_copy(ossl_check_const_X509V3_EXT_METHOD_sk_type(sk), ossl_check_X509V3_EXT_METHOD_copyfunc_type(copyfunc), ossl_check_X509V3_EXT_METHOD_freefunc_type(freefunc)))
134	#define sk_X509V3_EXT_METHOD_set_cmp_func(sk, cmp) ((sk_X509V3_EXT_METHOD_compfunc)OPENSSL_sk_set_cmp_func(ossl_check_X509V3_EXT_METHOD_sk_type(sk), ossl_check_X509V3_EXT_METHOD_compfunc_type(cmp)))
135
136
137	/ ext_flags values /
138	# define X509V3_EXT_DYNAMIC 0x1
139	# define X509V3_EXT_CTX_DEP 0x2
140	# define X509V3_EXT_MULTILINE 0x4
141
142	typedef BIT_STRING_BITNAME ENUMERATED_NAMES;
143
144	typedef struct BASIC_CONSTRAINTS_st {
145	int ca;
146	ASN1_INTEGER *pathlen;
147	} BASIC_CONSTRAINTS;
148
149	typedef struct PKEY_USAGE_PERIOD_st {
150	ASN1_GENERALIZEDTIME *notBefore;
151	ASN1_GENERALIZEDTIME *notAfter;
152	} PKEY_USAGE_PERIOD;
153
154	typedef struct otherName_st {
155	ASN1_OBJECT *type_id;
156	ASN1_TYPE *value;
157	} OTHERNAME;
158
159	typedef struct EDIPartyName_st {
160	ASN1_STRING *nameAssigner;
161	ASN1_STRING *partyName;
162	} EDIPARTYNAME;
163
164	typedef struct GENERAL_NAME_st {
165	# define GEN_OTHERNAME 0
166	# define GEN_EMAIL 1
167	# define GEN_DNS 2
168	# define GEN_X400 3
169	# define GEN_DIRNAME 4
170	# define GEN_EDIPARTY 5
171	# define GEN_URI 6
172	# define GEN_IPADD 7
173	# define GEN_RID 8
174	int type;
175	union {
176	char *ptr;
177	OTHERNAME otherName; /* otherName /
178	ASN1_IA5STRING *rfc822Name;
179	ASN1_IA5STRING *dNSName;
180	ASN1_STRING *x400Address;
181	X509_NAME *directoryName;
182	EDIPARTYNAME *ediPartyName;
183	ASN1_IA5STRING *uniformResourceIdentifier;
184	ASN1_OCTET_STRING *iPAddress;
185	ASN1_OBJECT *registeredID;
186	/ Old names /
187	ASN1_OCTET_STRING ip; /* iPAddress /
188	X509_NAME dirn; /* dirn /
189	ASN1_IA5STRING ia5; /* rfc822Name, dNSName,*
190	* uniformResourceIdentifier */
191	ASN1_OBJECT rid; /* registeredID /
192	ASN1_TYPE other; /* x400Address /
193	} d;
194	} GENERAL_NAME;
195
196	typedef struct ACCESS_DESCRIPTION_st {
197	ASN1_OBJECT *method;
198	GENERAL_NAME *location;
199	} ACCESS_DESCRIPTION;
200
201	SKM_DEFINE_STACK_OF_INTERNAL(ACCESS_DESCRIPTION, ACCESS_DESCRIPTION, ACCESS_DESCRIPTION)
202	#define sk_ACCESS_DESCRIPTION_num(sk) OPENSSL_sk_num(ossl_check_const_ACCESS_DESCRIPTION_sk_type(sk))
203	#define sk_ACCESS_DESCRIPTION_value(sk, idx) ((ACCESS_DESCRIPTION *)OPENSSL_sk_value(ossl_check_const_ACCESS_DESCRIPTION_sk_type(sk), (idx)))
204	#define sk_ACCESS_DESCRIPTION_new(cmp) ((STACK_OF(ACCESS_DESCRIPTION) *)OPENSSL_sk_new(ossl_check_ACCESS_DESCRIPTION_compfunc_type(cmp)))
205	#define sk_ACCESS_DESCRIPTION_new_null() ((STACK_OF(ACCESS_DESCRIPTION) *)OPENSSL_sk_new_null())
206	#define sk_ACCESS_DESCRIPTION_new_reserve(cmp, n) ((STACK_OF(ACCESS_DESCRIPTION) *)OPENSSL_sk_new_reserve(ossl_check_ACCESS_DESCRIPTION_compfunc_type(cmp), (n)))
207	#define sk_ACCESS_DESCRIPTION_reserve(sk, n) OPENSSL_sk_reserve(ossl_check_ACCESS_DESCRIPTION_sk_type(sk), (n))
208	#define sk_ACCESS_DESCRIPTION_free(sk) OPENSSL_sk_free(ossl_check_ACCESS_DESCRIPTION_sk_type(sk))
209	#define sk_ACCESS_DESCRIPTION_zero(sk) OPENSSL_sk_zero(ossl_check_ACCESS_DESCRIPTION_sk_type(sk))
210	#define sk_ACCESS_DESCRIPTION_delete(sk, i) ((ACCESS_DESCRIPTION *)OPENSSL_sk_delete(ossl_check_ACCESS_DESCRIPTION_sk_type(sk), (i)))
211	#define sk_ACCESS_DESCRIPTION_delete_ptr(sk, ptr) ((ACCESS_DESCRIPTION *)OPENSSL_sk_delete_ptr(ossl_check_ACCESS_DESCRIPTION_sk_type(sk), ossl_check_ACCESS_DESCRIPTION_type(ptr)))
212	#define sk_ACCESS_DESCRIPTION_push(sk, ptr) OPENSSL_sk_push(ossl_check_ACCESS_DESCRIPTION_sk_type(sk), ossl_check_ACCESS_DESCRIPTION_type(ptr))
213	#define sk_ACCESS_DESCRIPTION_unshift(sk, ptr) OPENSSL_sk_unshift(ossl_check_ACCESS_DESCRIPTION_sk_type(sk), ossl_check_ACCESS_DESCRIPTION_type(ptr))
214	#define sk_ACCESS_DESCRIPTION_pop(sk) ((ACCESS_DESCRIPTION *)OPENSSL_sk_pop(ossl_check_ACCESS_DESCRIPTION_sk_type(sk)))
215	#define sk_ACCESS_DESCRIPTION_shift(sk) ((ACCESS_DESCRIPTION *)OPENSSL_sk_shift(ossl_check_ACCESS_DESCRIPTION_sk_type(sk)))
216	#define sk_ACCESS_DESCRIPTION_pop_free(sk, freefunc) OPENSSL_sk_pop_free(ossl_check_ACCESS_DESCRIPTION_sk_type(sk),ossl_check_ACCESS_DESCRIPTION_freefunc_type(freefunc))
217	#define sk_ACCESS_DESCRIPTION_insert(sk, ptr, idx) OPENSSL_sk_insert(ossl_check_ACCESS_DESCRIPTION_sk_type(sk), ossl_check_ACCESS_DESCRIPTION_type(ptr), (idx))
218	#define sk_ACCESS_DESCRIPTION_set(sk, idx, ptr) ((ACCESS_DESCRIPTION *)OPENSSL_sk_set(ossl_check_ACCESS_DESCRIPTION_sk_type(sk), (idx), ossl_check_ACCESS_DESCRIPTION_type(ptr)))
219	#define sk_ACCESS_DESCRIPTION_find(sk, ptr) OPENSSL_sk_find(ossl_check_ACCESS_DESCRIPTION_sk_type(sk), ossl_check_ACCESS_DESCRIPTION_type(ptr))
220	#define sk_ACCESS_DESCRIPTION_find_ex(sk, ptr) OPENSSL_sk_find_ex(ossl_check_ACCESS_DESCRIPTION_sk_type(sk), ossl_check_ACCESS_DESCRIPTION_type(ptr))
221	#define sk_ACCESS_DESCRIPTION_find_all(sk, ptr, pnum) OPENSSL_sk_find_all(ossl_check_ACCESS_DESCRIPTION_sk_type(sk), ossl_check_ACCESS_DESCRIPTION_type(ptr), pnum)
222	#define sk_ACCESS_DESCRIPTION_sort(sk) OPENSSL_sk_sort(ossl_check_ACCESS_DESCRIPTION_sk_type(sk))
223	#define sk_ACCESS_DESCRIPTION_is_sorted(sk) OPENSSL_sk_is_sorted(ossl_check_const_ACCESS_DESCRIPTION_sk_type(sk))
224	#define sk_ACCESS_DESCRIPTION_dup(sk) ((STACK_OF(ACCESS_DESCRIPTION) *)OPENSSL_sk_dup(ossl_check_const_ACCESS_DESCRIPTION_sk_type(sk)))
225	#define sk_ACCESS_DESCRIPTION_deep_copy(sk, copyfunc, freefunc) ((STACK_OF(ACCESS_DESCRIPTION) *)OPENSSL_sk_deep_copy(ossl_check_const_ACCESS_DESCRIPTION_sk_type(sk), ossl_check_ACCESS_DESCRIPTION_copyfunc_type(copyfunc), ossl_check_ACCESS_DESCRIPTION_freefunc_type(freefunc)))
226	#define sk_ACCESS_DESCRIPTION_set_cmp_func(sk, cmp) ((sk_ACCESS_DESCRIPTION_compfunc)OPENSSL_sk_set_cmp_func(ossl_check_ACCESS_DESCRIPTION_sk_type(sk), ossl_check_ACCESS_DESCRIPTION_compfunc_type(cmp)))
227	SKM_DEFINE_STACK_OF_INTERNAL(GENERAL_NAME, GENERAL_NAME, GENERAL_NAME)
228	#define sk_GENERAL_NAME_num(sk) OPENSSL_sk_num(ossl_check_const_GENERAL_NAME_sk_type(sk))
229	#define sk_GENERAL_NAME_value(sk, idx) ((GENERAL_NAME *)OPENSSL_sk_value(ossl_check_const_GENERAL_NAME_sk_type(sk), (idx)))
230	#define sk_GENERAL_NAME_new(cmp) ((STACK_OF(GENERAL_NAME) *)OPENSSL_sk_new(ossl_check_GENERAL_NAME_compfunc_type(cmp)))
231	#define sk_GENERAL_NAME_new_null() ((STACK_OF(GENERAL_NAME) *)OPENSSL_sk_new_null())
232	#define sk_GENERAL_NAME_new_reserve(cmp, n) ((STACK_OF(GENERAL_NAME) *)OPENSSL_sk_new_reserve(ossl_check_GENERAL_NAME_compfunc_type(cmp), (n)))
233	#define sk_GENERAL_NAME_reserve(sk, n) OPENSSL_sk_reserve(ossl_check_GENERAL_NAME_sk_type(sk), (n))
234	#define sk_GENERAL_NAME_free(sk) OPENSSL_sk_free(ossl_check_GENERAL_NAME_sk_type(sk))
235	#define sk_GENERAL_NAME_zero(sk) OPENSSL_sk_zero(ossl_check_GENERAL_NAME_sk_type(sk))
236	#define sk_GENERAL_NAME_delete(sk, i) ((GENERAL_NAME *)OPENSSL_sk_delete(ossl_check_GENERAL_NAME_sk_type(sk), (i)))
237	#define sk_GENERAL_NAME_delete_ptr(sk, ptr) ((GENERAL_NAME *)OPENSSL_sk_delete_ptr(ossl_check_GENERAL_NAME_sk_type(sk), ossl_check_GENERAL_NAME_type(ptr)))
238	#define sk_GENERAL_NAME_push(sk, ptr) OPENSSL_sk_push(ossl_check_GENERAL_NAME_sk_type(sk), ossl_check_GENERAL_NAME_type(ptr))
239	#define sk_GENERAL_NAME_unshift(sk, ptr) OPENSSL_sk_unshift(ossl_check_GENERAL_NAME_sk_type(sk), ossl_check_GENERAL_NAME_type(ptr))
240	#define sk_GENERAL_NAME_pop(sk) ((GENERAL_NAME *)OPENSSL_sk_pop(ossl_check_GENERAL_NAME_sk_type(sk)))
241	#define sk_GENERAL_NAME_shift(sk) ((GENERAL_NAME *)OPENSSL_sk_shift(ossl_check_GENERAL_NAME_sk_type(sk)))
242	#define sk_GENERAL_NAME_pop_free(sk, freefunc) OPENSSL_sk_pop_free(ossl_check_GENERAL_NAME_sk_type(sk),ossl_check_GENERAL_NAME_freefunc_type(freefunc))
243	#define sk_GENERAL_NAME_insert(sk, ptr, idx) OPENSSL_sk_insert(ossl_check_GENERAL_NAME_sk_type(sk), ossl_check_GENERAL_NAME_type(ptr), (idx))
244	#define sk_GENERAL_NAME_set(sk, idx, ptr) ((GENERAL_NAME *)OPENSSL_sk_set(ossl_check_GENERAL_NAME_sk_type(sk), (idx), ossl_check_GENERAL_NAME_type(ptr)))
245	#define sk_GENERAL_NAME_find(sk, ptr) OPENSSL_sk_find(ossl_check_GENERAL_NAME_sk_type(sk), ossl_check_GENERAL_NAME_type(ptr))
246	#define sk_GENERAL_NAME_find_ex(sk, ptr) OPENSSL_sk_find_ex(ossl_check_GENERAL_NAME_sk_type(sk), ossl_check_GENERAL_NAME_type(ptr))
247	#define sk_GENERAL_NAME_find_all(sk, ptr, pnum) OPENSSL_sk_find_all(ossl_check_GENERAL_NAME_sk_type(sk), ossl_check_GENERAL_NAME_type(ptr), pnum)
248	#define sk_GENERAL_NAME_sort(sk) OPENSSL_sk_sort(ossl_check_GENERAL_NAME_sk_type(sk))
249	#define sk_GENERAL_NAME_is_sorted(sk) OPENSSL_sk_is_sorted(ossl_check_const_GENERAL_NAME_sk_type(sk))
250	#define sk_GENERAL_NAME_dup(sk) ((STACK_OF(GENERAL_NAME) *)OPENSSL_sk_dup(ossl_check_const_GENERAL_NAME_sk_type(sk)))
251	#define sk_GENERAL_NAME_deep_copy(sk, copyfunc, freefunc) ((STACK_OF(GENERAL_NAME) *)OPENSSL_sk_deep_copy(ossl_check_const_GENERAL_NAME_sk_type(sk), ossl_check_GENERAL_NAME_copyfunc_type(copyfunc), ossl_check_GENERAL_NAME_freefunc_type(freefunc)))
252	#define sk_GENERAL_NAME_set_cmp_func(sk, cmp) ((sk_GENERAL_NAME_compfunc)OPENSSL_sk_set_cmp_func(ossl_check_GENERAL_NAME_sk_type(sk), ossl_check_GENERAL_NAME_compfunc_type(cmp)))
253
254
255	typedef STACK_OF(ACCESS_DESCRIPTION) AUTHORITY_INFO_ACCESS;
256	typedef STACK_OF(ASN1_OBJECT) EXTENDED_KEY_USAGE;
257	typedef STACK_OF(ASN1_INTEGER) TLS_FEATURE;
258	typedef STACK_OF(GENERAL_NAME) GENERAL_NAMES;
259
260	SKM_DEFINE_STACK_OF_INTERNAL(GENERAL_NAMES, GENERAL_NAMES, GENERAL_NAMES)
261	#define sk_GENERAL_NAMES_num(sk) OPENSSL_sk_num(ossl_check_const_GENERAL_NAMES_sk_type(sk))
262	#define sk_GENERAL_NAMES_value(sk, idx) ((GENERAL_NAMES *)OPENSSL_sk_value(ossl_check_const_GENERAL_NAMES_sk_type(sk), (idx)))
263	#define sk_GENERAL_NAMES_new(cmp) ((STACK_OF(GENERAL_NAMES) *)OPENSSL_sk_new(ossl_check_GENERAL_NAMES_compfunc_type(cmp)))
264	#define sk_GENERAL_NAMES_new_null() ((STACK_OF(GENERAL_NAMES) *)OPENSSL_sk_new_null())
265	#define sk_GENERAL_NAMES_new_reserve(cmp, n) ((STACK_OF(GENERAL_NAMES) *)OPENSSL_sk_new_reserve(ossl_check_GENERAL_NAMES_compfunc_type(cmp), (n)))
266	#define sk_GENERAL_NAMES_reserve(sk, n) OPENSSL_sk_reserve(ossl_check_GENERAL_NAMES_sk_type(sk), (n))
267	#define sk_GENERAL_NAMES_free(sk) OPENSSL_sk_free(ossl_check_GENERAL_NAMES_sk_type(sk))
268	#define sk_GENERAL_NAMES_zero(sk) OPENSSL_sk_zero(ossl_check_GENERAL_NAMES_sk_type(sk))
269	#define sk_GENERAL_NAMES_delete(sk, i) ((GENERAL_NAMES *)OPENSSL_sk_delete(ossl_check_GENERAL_NAMES_sk_type(sk), (i)))
270	#define sk_GENERAL_NAMES_delete_ptr(sk, ptr) ((GENERAL_NAMES *)OPENSSL_sk_delete_ptr(ossl_check_GENERAL_NAMES_sk_type(sk), ossl_check_GENERAL_NAMES_type(ptr)))
271	#define sk_GENERAL_NAMES_push(sk, ptr) OPENSSL_sk_push(ossl_check_GENERAL_NAMES_sk_type(sk), ossl_check_GENERAL_NAMES_type(ptr))
272	#define sk_GENERAL_NAMES_unshift(sk, ptr) OPENSSL_sk_unshift(ossl_check_GENERAL_NAMES_sk_type(sk), ossl_check_GENERAL_NAMES_type(ptr))
273	#define sk_GENERAL_NAMES_pop(sk) ((GENERAL_NAMES *)OPENSSL_sk_pop(ossl_check_GENERAL_NAMES_sk_type(sk)))
274	#define sk_GENERAL_NAMES_shift(sk) ((GENERAL_NAMES *)OPENSSL_sk_shift(ossl_check_GENERAL_NAMES_sk_type(sk)))
275	#define sk_GENERAL_NAMES_pop_free(sk, freefunc) OPENSSL_sk_pop_free(ossl_check_GENERAL_NAMES_sk_type(sk),ossl_check_GENERAL_NAMES_freefunc_type(freefunc))
276	#define sk_GENERAL_NAMES_insert(sk, ptr, idx) OPENSSL_sk_insert(ossl_check_GENERAL_NAMES_sk_type(sk), ossl_check_GENERAL_NAMES_type(ptr), (idx))
277	#define sk_GENERAL_NAMES_set(sk, idx, ptr) ((GENERAL_NAMES *)OPENSSL_sk_set(ossl_check_GENERAL_NAMES_sk_type(sk), (idx), ossl_check_GENERAL_NAMES_type(ptr)))
278	#define sk_GENERAL_NAMES_find(sk, ptr) OPENSSL_sk_find(ossl_check_GENERAL_NAMES_sk_type(sk), ossl_check_GENERAL_NAMES_type(ptr))
279	#define sk_GENERAL_NAMES_find_ex(sk, ptr) OPENSSL_sk_find_ex(ossl_check_GENERAL_NAMES_sk_type(sk), ossl_check_GENERAL_NAMES_type(ptr))
280	#define sk_GENERAL_NAMES_find_all(sk, ptr, pnum) OPENSSL_sk_find_all(ossl_check_GENERAL_NAMES_sk_type(sk), ossl_check_GENERAL_NAMES_type(ptr), pnum)
281	#define sk_GENERAL_NAMES_sort(sk) OPENSSL_sk_sort(ossl_check_GENERAL_NAMES_sk_type(sk))
282	#define sk_GENERAL_NAMES_is_sorted(sk) OPENSSL_sk_is_sorted(ossl_check_const_GENERAL_NAMES_sk_type(sk))
283	#define sk_GENERAL_NAMES_dup(sk) ((STACK_OF(GENERAL_NAMES) *)OPENSSL_sk_dup(ossl_check_const_GENERAL_NAMES_sk_type(sk)))
284	#define sk_GENERAL_NAMES_deep_copy(sk, copyfunc, freefunc) ((STACK_OF(GENERAL_NAMES) *)OPENSSL_sk_deep_copy(ossl_check_const_GENERAL_NAMES_sk_type(sk), ossl_check_GENERAL_NAMES_copyfunc_type(copyfunc), ossl_check_GENERAL_NAMES_freefunc_type(freefunc)))
285	#define sk_GENERAL_NAMES_set_cmp_func(sk, cmp) ((sk_GENERAL_NAMES_compfunc)OPENSSL_sk_set_cmp_func(ossl_check_GENERAL_NAMES_sk_type(sk), ossl_check_GENERAL_NAMES_compfunc_type(cmp)))
286
287
288	typedef struct DIST_POINT_NAME_st {
289	int type;
290	union {
291	GENERAL_NAMES *fullname;
292	STACK_OF(X509_NAME_ENTRY) *relativename;
293	} name;
294	/ If relativename then this contains the full distribution point name /
295	X509_NAME *dpname;
296	} DIST_POINT_NAME;
297	/ All existing reasons /
298	# define CRLDP_ALL_REASONS 0x807f
299
300	# define CRL_REASON_NONE -1
301	# define CRL_REASON_UNSPECIFIED 0
302	# define CRL_REASON_KEY_COMPROMISE 1
303	# define CRL_REASON_CA_COMPROMISE 2
304	# define CRL_REASON_AFFILIATION_CHANGED 3
305	# define CRL_REASON_SUPERSEDED 4
306	# define CRL_REASON_CESSATION_OF_OPERATION 5
307	# define CRL_REASON_CERTIFICATE_HOLD 6
308	# define CRL_REASON_REMOVE_FROM_CRL 8
309	# define CRL_REASON_PRIVILEGE_WITHDRAWN 9
310	# define CRL_REASON_AA_COMPROMISE 10
311
312	struct DIST_POINT_st {
313	DIST_POINT_NAME *distpoint;
314	ASN1_BIT_STRING *reasons;
315	GENERAL_NAMES *CRLissuer;
316	int dp_reasons;
317	};
318
319	SKM_DEFINE_STACK_OF_INTERNAL(DIST_POINT, DIST_POINT, DIST_POINT)
320	#define sk_DIST_POINT_num(sk) OPENSSL_sk_num(ossl_check_const_DIST_POINT_sk_type(sk))
321	#define sk_DIST_POINT_value(sk, idx) ((DIST_POINT *)OPENSSL_sk_value(ossl_check_const_DIST_POINT_sk_type(sk), (idx)))
322	#define sk_DIST_POINT_new(cmp) ((STACK_OF(DIST_POINT) *)OPENSSL_sk_new(ossl_check_DIST_POINT_compfunc_type(cmp)))
323	#define sk_DIST_POINT_new_null() ((STACK_OF(DIST_POINT) *)OPENSSL_sk_new_null())
324	#define sk_DIST_POINT_new_reserve(cmp, n) ((STACK_OF(DIST_POINT) *)OPENSSL_sk_new_reserve(ossl_check_DIST_POINT_compfunc_type(cmp), (n)))
325	#define sk_DIST_POINT_reserve(sk, n) OPENSSL_sk_reserve(ossl_check_DIST_POINT_sk_type(sk), (n))
326	#define sk_DIST_POINT_free(sk) OPENSSL_sk_free(ossl_check_DIST_POINT_sk_type(sk))
327	#define sk_DIST_POINT_zero(sk) OPENSSL_sk_zero(ossl_check_DIST_POINT_sk_type(sk))
328	#define sk_DIST_POINT_delete(sk, i) ((DIST_POINT *)OPENSSL_sk_delete(ossl_check_DIST_POINT_sk_type(sk), (i)))
329	#define sk_DIST_POINT_delete_ptr(sk, ptr) ((DIST_POINT *)OPENSSL_sk_delete_ptr(ossl_check_DIST_POINT_sk_type(sk), ossl_check_DIST_POINT_type(ptr)))
330	#define sk_DIST_POINT_push(sk, ptr) OPENSSL_sk_push(ossl_check_DIST_POINT_sk_type(sk), ossl_check_DIST_POINT_type(ptr))
331	#define sk_DIST_POINT_unshift(sk, ptr) OPENSSL_sk_unshift(ossl_check_DIST_POINT_sk_type(sk), ossl_check_DIST_POINT_type(ptr))
332	#define sk_DIST_POINT_pop(sk) ((DIST_POINT *)OPENSSL_sk_pop(ossl_check_DIST_POINT_sk_type(sk)))
333	#define sk_DIST_POINT_shift(sk) ((DIST_POINT *)OPENSSL_sk_shift(ossl_check_DIST_POINT_sk_type(sk)))
334	#define sk_DIST_POINT_pop_free(sk, freefunc) OPENSSL_sk_pop_free(ossl_check_DIST_POINT_sk_type(sk),ossl_check_DIST_POINT_freefunc_type(freefunc))
335	#define sk_DIST_POINT_insert(sk, ptr, idx) OPENSSL_sk_insert(ossl_check_DIST_POINT_sk_type(sk), ossl_check_DIST_POINT_type(ptr), (idx))
336	#define sk_DIST_POINT_set(sk, idx, ptr) ((DIST_POINT *)OPENSSL_sk_set(ossl_check_DIST_POINT_sk_type(sk), (idx), ossl_check_DIST_POINT_type(ptr)))
337	#define sk_DIST_POINT_find(sk, ptr) OPENSSL_sk_find(ossl_check_DIST_POINT_sk_type(sk), ossl_check_DIST_POINT_type(ptr))
338	#define sk_DIST_POINT_find_ex(sk, ptr) OPENSSL_sk_find_ex(ossl_check_DIST_POINT_sk_type(sk), ossl_check_DIST_POINT_type(ptr))
339	#define sk_DIST_POINT_find_all(sk, ptr, pnum) OPENSSL_sk_find_all(ossl_check_DIST_POINT_sk_type(sk), ossl_check_DIST_POINT_type(ptr), pnum)
340	#define sk_DIST_POINT_sort(sk) OPENSSL_sk_sort(ossl_check_DIST_POINT_sk_type(sk))
341	#define sk_DIST_POINT_is_sorted(sk) OPENSSL_sk_is_sorted(ossl_check_const_DIST_POINT_sk_type(sk))
342	#define sk_DIST_POINT_dup(sk) ((STACK_OF(DIST_POINT) *)OPENSSL_sk_dup(ossl_check_const_DIST_POINT_sk_type(sk)))
343	#define sk_DIST_POINT_deep_copy(sk, copyfunc, freefunc) ((STACK_OF(DIST_POINT) *)OPENSSL_sk_deep_copy(ossl_check_const_DIST_POINT_sk_type(sk), ossl_check_DIST_POINT_copyfunc_type(copyfunc), ossl_check_DIST_POINT_freefunc_type(freefunc)))
344	#define sk_DIST_POINT_set_cmp_func(sk, cmp) ((sk_DIST_POINT_compfunc)OPENSSL_sk_set_cmp_func(ossl_check_DIST_POINT_sk_type(sk), ossl_check_DIST_POINT_compfunc_type(cmp)))
345
346
347	typedef STACK_OF(DIST_POINT) CRL_DIST_POINTS;
348
349	struct AUTHORITY_KEYID_st {
350	ASN1_OCTET_STRING *keyid;
351	GENERAL_NAMES *issuer;
352	ASN1_INTEGER *serial;
353	};
354
355	/ Strong extranet structures /
356
357	typedef struct SXNET_ID_st {
358	ASN1_INTEGER *zone;
359	ASN1_OCTET_STRING *user;
360	} SXNETID;
361
362	SKM_DEFINE_STACK_OF_INTERNAL(SXNETID, SXNETID, SXNETID)
363	#define sk_SXNETID_num(sk) OPENSSL_sk_num(ossl_check_const_SXNETID_sk_type(sk))
364	#define sk_SXNETID_value(sk, idx) ((SXNETID *)OPENSSL_sk_value(ossl_check_const_SXNETID_sk_type(sk), (idx)))
365	#define sk_SXNETID_new(cmp) ((STACK_OF(SXNETID) *)OPENSSL_sk_new(ossl_check_SXNETID_compfunc_type(cmp)))
366	#define sk_SXNETID_new_null() ((STACK_OF(SXNETID) *)OPENSSL_sk_new_null())
367	#define sk_SXNETID_new_reserve(cmp, n) ((STACK_OF(SXNETID) *)OPENSSL_sk_new_reserve(ossl_check_SXNETID_compfunc_type(cmp), (n)))
368	#define sk_SXNETID_reserve(sk, n) OPENSSL_sk_reserve(ossl_check_SXNETID_sk_type(sk), (n))
369	#define sk_SXNETID_free(sk) OPENSSL_sk_free(ossl_check_SXNETID_sk_type(sk))
370	#define sk_SXNETID_zero(sk) OPENSSL_sk_zero(ossl_check_SXNETID_sk_type(sk))
371	#define sk_SXNETID_delete(sk, i) ((SXNETID *)OPENSSL_sk_delete(ossl_check_SXNETID_sk_type(sk), (i)))
372	#define sk_SXNETID_delete_ptr(sk, ptr) ((SXNETID *)OPENSSL_sk_delete_ptr(ossl_check_SXNETID_sk_type(sk), ossl_check_SXNETID_type(ptr)))
373	#define sk_SXNETID_push(sk, ptr) OPENSSL_sk_push(ossl_check_SXNETID_sk_type(sk), ossl_check_SXNETID_type(ptr))
374	#define sk_SXNETID_unshift(sk, ptr) OPENSSL_sk_unshift(ossl_check_SXNETID_sk_type(sk), ossl_check_SXNETID_type(ptr))
375	#define sk_SXNETID_pop(sk) ((SXNETID *)OPENSSL_sk_pop(ossl_check_SXNETID_sk_type(sk)))
376	#define sk_SXNETID_shift(sk) ((SXNETID *)OPENSSL_sk_shift(ossl_check_SXNETID_sk_type(sk)))
377	#define sk_SXNETID_pop_free(sk, freefunc) OPENSSL_sk_pop_free(ossl_check_SXNETID_sk_type(sk),ossl_check_SXNETID_freefunc_type(freefunc))
378	#define sk_SXNETID_insert(sk, ptr, idx) OPENSSL_sk_insert(ossl_check_SXNETID_sk_type(sk), ossl_check_SXNETID_type(ptr), (idx))
379	#define sk_SXNETID_set(sk, idx, ptr) ((SXNETID *)OPENSSL_sk_set(ossl_check_SXNETID_sk_type(sk), (idx), ossl_check_SXNETID_type(ptr)))
380	#define sk_SXNETID_find(sk, ptr) OPENSSL_sk_find(ossl_check_SXNETID_sk_type(sk), ossl_check_SXNETID_type(ptr))
381	#define sk_SXNETID_find_ex(sk, ptr) OPENSSL_sk_find_ex(ossl_check_SXNETID_sk_type(sk), ossl_check_SXNETID_type(ptr))
382	#define sk_SXNETID_find_all(sk, ptr, pnum) OPENSSL_sk_find_all(ossl_check_SXNETID_sk_type(sk), ossl_check_SXNETID_type(ptr), pnum)
383	#define sk_SXNETID_sort(sk) OPENSSL_sk_sort(ossl_check_SXNETID_sk_type(sk))
384	#define sk_SXNETID_is_sorted(sk) OPENSSL_sk_is_sorted(ossl_check_const_SXNETID_sk_type(sk))
385	#define sk_SXNETID_dup(sk) ((STACK_OF(SXNETID) *)OPENSSL_sk_dup(ossl_check_const_SXNETID_sk_type(sk)))
386	#define sk_SXNETID_deep_copy(sk, copyfunc, freefunc) ((STACK_OF(SXNETID) *)OPENSSL_sk_deep_copy(ossl_check_const_SXNETID_sk_type(sk), ossl_check_SXNETID_copyfunc_type(copyfunc), ossl_check_SXNETID_freefunc_type(freefunc)))
387	#define sk_SXNETID_set_cmp_func(sk, cmp) ((sk_SXNETID_compfunc)OPENSSL_sk_set_cmp_func(ossl_check_SXNETID_sk_type(sk), ossl_check_SXNETID_compfunc_type(cmp)))
388
389
390
391	typedef struct SXNET_st {
392	ASN1_INTEGER *version;
393	STACK_OF(SXNETID) *ids;
394	} SXNET;
395
396	typedef struct ISSUER_SIGN_TOOL_st {
397	ASN1_UTF8STRING *signTool;
398	ASN1_UTF8STRING *cATool;
399	ASN1_UTF8STRING *signToolCert;
400	ASN1_UTF8STRING *cAToolCert;
401	} ISSUER_SIGN_TOOL;
402
403	typedef struct NOTICEREF_st {
404	ASN1_STRING *organization;
405	STACK_OF(ASN1_INTEGER) *noticenos;
406	} NOTICEREF;
407
408	typedef struct USERNOTICE_st {
409	NOTICEREF *noticeref;
410	ASN1_STRING *exptext;
411	} USERNOTICE;
412
413	typedef struct POLICYQUALINFO_st {
414	ASN1_OBJECT *pqualid;
415	union {
416	ASN1_IA5STRING *cpsuri;
417	USERNOTICE *usernotice;
418	ASN1_TYPE *other;
419	} d;
420	} POLICYQUALINFO;
421
422	SKM_DEFINE_STACK_OF_INTERNAL(POLICYQUALINFO, POLICYQUALINFO, POLICYQUALINFO)
423	#define sk_POLICYQUALINFO_num(sk) OPENSSL_sk_num(ossl_check_const_POLICYQUALINFO_sk_type(sk))
424	#define sk_POLICYQUALINFO_value(sk, idx) ((POLICYQUALINFO *)OPENSSL_sk_value(ossl_check_const_POLICYQUALINFO_sk_type(sk), (idx)))
425	#define sk_POLICYQUALINFO_new(cmp) ((STACK_OF(POLICYQUALINFO) *)OPENSSL_sk_new(ossl_check_POLICYQUALINFO_compfunc_type(cmp)))
426	#define sk_POLICYQUALINFO_new_null() ((STACK_OF(POLICYQUALINFO) *)OPENSSL_sk_new_null())
427	#define sk_POLICYQUALINFO_new_reserve(cmp, n) ((STACK_OF(POLICYQUALINFO) *)OPENSSL_sk_new_reserve(ossl_check_POLICYQUALINFO_compfunc_type(cmp), (n)))
428	#define sk_POLICYQUALINFO_reserve(sk, n) OPENSSL_sk_reserve(ossl_check_POLICYQUALINFO_sk_type(sk), (n))
429	#define sk_POLICYQUALINFO_free(sk) OPENSSL_sk_free(ossl_check_POLICYQUALINFO_sk_type(sk))
430	#define sk_POLICYQUALINFO_zero(sk) OPENSSL_sk_zero(ossl_check_POLICYQUALINFO_sk_type(sk))
431	#define sk_POLICYQUALINFO_delete(sk, i) ((POLICYQUALINFO *)OPENSSL_sk_delete(ossl_check_POLICYQUALINFO_sk_type(sk), (i)))
432	#define sk_POLICYQUALINFO_delete_ptr(sk, ptr) ((POLICYQUALINFO *)OPENSSL_sk_delete_ptr(ossl_check_POLICYQUALINFO_sk_type(sk), ossl_check_POLICYQUALINFO_type(ptr)))
433	#define sk_POLICYQUALINFO_push(sk, ptr) OPENSSL_sk_push(ossl_check_POLICYQUALINFO_sk_type(sk), ossl_check_POLICYQUALINFO_type(ptr))
434	#define sk_POLICYQUALINFO_unshift(sk, ptr) OPENSSL_sk_unshift(ossl_check_POLICYQUALINFO_sk_type(sk), ossl_check_POLICYQUALINFO_type(ptr))
435	#define sk_POLICYQUALINFO_pop(sk) ((POLICYQUALINFO *)OPENSSL_sk_pop(ossl_check_POLICYQUALINFO_sk_type(sk)))
436	#define sk_POLICYQUALINFO_shift(sk) ((POLICYQUALINFO *)OPENSSL_sk_shift(ossl_check_POLICYQUALINFO_sk_type(sk)))
437	#define sk_POLICYQUALINFO_pop_free(sk, freefunc) OPENSSL_sk_pop_free(ossl_check_POLICYQUALINFO_sk_type(sk),ossl_check_POLICYQUALINFO_freefunc_type(freefunc))
438	#define sk_POLICYQUALINFO_insert(sk, ptr, idx) OPENSSL_sk_insert(ossl_check_POLICYQUALINFO_sk_type(sk), ossl_check_POLICYQUALINFO_type(ptr), (idx))
439	#define sk_POLICYQUALINFO_set(sk, idx, ptr) ((POLICYQUALINFO *)OPENSSL_sk_set(ossl_check_POLICYQUALINFO_sk_type(sk), (idx), ossl_check_POLICYQUALINFO_type(ptr)))
440	#define sk_POLICYQUALINFO_find(sk, ptr) OPENSSL_sk_find(ossl_check_POLICYQUALINFO_sk_type(sk), ossl_check_POLICYQUALINFO_type(ptr))
441	#define sk_POLICYQUALINFO_find_ex(sk, ptr) OPENSSL_sk_find_ex(ossl_check_POLICYQUALINFO_sk_type(sk), ossl_check_POLICYQUALINFO_type(ptr))
442	#define sk_POLICYQUALINFO_find_all(sk, ptr, pnum) OPENSSL_sk_find_all(ossl_check_POLICYQUALINFO_sk_type(sk), ossl_check_POLICYQUALINFO_type(ptr), pnum)
443	#define sk_POLICYQUALINFO_sort(sk) OPENSSL_sk_sort(ossl_check_POLICYQUALINFO_sk_type(sk))
444	#define sk_POLICYQUALINFO_is_sorted(sk) OPENSSL_sk_is_sorted(ossl_check_const_POLICYQUALINFO_sk_type(sk))
445	#define sk_POLICYQUALINFO_dup(sk) ((STACK_OF(POLICYQUALINFO) *)OPENSSL_sk_dup(ossl_check_const_POLICYQUALINFO_sk_type(sk)))
446	#define sk_POLICYQUALINFO_deep_copy(sk, copyfunc, freefunc) ((STACK_OF(POLICYQUALINFO) *)OPENSSL_sk_deep_copy(ossl_check_const_POLICYQUALINFO_sk_type(sk), ossl_check_POLICYQUALINFO_copyfunc_type(copyfunc), ossl_check_POLICYQUALINFO_freefunc_type(freefunc)))
447	#define sk_POLICYQUALINFO_set_cmp_func(sk, cmp) ((sk_POLICYQUALINFO_compfunc)OPENSSL_sk_set_cmp_func(ossl_check_POLICYQUALINFO_sk_type(sk), ossl_check_POLICYQUALINFO_compfunc_type(cmp)))
448
449
450
451	typedef struct POLICYINFO_st {
452	ASN1_OBJECT *policyid;
453	STACK_OF(POLICYQUALINFO) *qualifiers;
454	} POLICYINFO;
455
456	SKM_DEFINE_STACK_OF_INTERNAL(POLICYINFO, POLICYINFO, POLICYINFO)
457	#define sk_POLICYINFO_num(sk) OPENSSL_sk_num(ossl_check_const_POLICYINFO_sk_type(sk))
458	#define sk_POLICYINFO_value(sk, idx) ((POLICYINFO *)OPENSSL_sk_value(ossl_check_const_POLICYINFO_sk_type(sk), (idx)))
459	#define sk_POLICYINFO_new(cmp) ((STACK_OF(POLICYINFO) *)OPENSSL_sk_new(ossl_check_POLICYINFO_compfunc_type(cmp)))
460	#define sk_POLICYINFO_new_null() ((STACK_OF(POLICYINFO) *)OPENSSL_sk_new_null())
461	#define sk_POLICYINFO_new_reserve(cmp, n) ((STACK_OF(POLICYINFO) *)OPENSSL_sk_new_reserve(ossl_check_POLICYINFO_compfunc_type(cmp), (n)))
462	#define sk_POLICYINFO_reserve(sk, n) OPENSSL_sk_reserve(ossl_check_POLICYINFO_sk_type(sk), (n))
463	#define sk_POLICYINFO_free(sk) OPENSSL_sk_free(ossl_check_POLICYINFO_sk_type(sk))
464	#define sk_POLICYINFO_zero(sk) OPENSSL_sk_zero(ossl_check_POLICYINFO_sk_type(sk))
465	#define sk_POLICYINFO_delete(sk, i) ((POLICYINFO *)OPENSSL_sk_delete(ossl_check_POLICYINFO_sk_type(sk), (i)))
466	#define sk_POLICYINFO_delete_ptr(sk, ptr) ((POLICYINFO *)OPENSSL_sk_delete_ptr(ossl_check_POLICYINFO_sk_type(sk), ossl_check_POLICYINFO_type(ptr)))
467	#define sk_POLICYINFO_push(sk, ptr) OPENSSL_sk_push(ossl_check_POLICYINFO_sk_type(sk), ossl_check_POLICYINFO_type(ptr))
468	#define sk_POLICYINFO_unshift(sk, ptr) OPENSSL_sk_unshift(ossl_check_POLICYINFO_sk_type(sk), ossl_check_POLICYINFO_type(ptr))
469	#define sk_POLICYINFO_pop(sk) ((POLICYINFO *)OPENSSL_sk_pop(ossl_check_POLICYINFO_sk_type(sk)))
470	#define sk_POLICYINFO_shift(sk) ((POLICYINFO *)OPENSSL_sk_shift(ossl_check_POLICYINFO_sk_type(sk)))
471	#define sk_POLICYINFO_pop_free(sk, freefunc) OPENSSL_sk_pop_free(ossl_check_POLICYINFO_sk_type(sk),ossl_check_POLICYINFO_freefunc_type(freefunc))
472	#define sk_POLICYINFO_insert(sk, ptr, idx) OPENSSL_sk_insert(ossl_check_POLICYINFO_sk_type(sk), ossl_check_POLICYINFO_type(ptr), (idx))
473	#define sk_POLICYINFO_set(sk, idx, ptr) ((POLICYINFO *)OPENSSL_sk_set(ossl_check_POLICYINFO_sk_type(sk), (idx), ossl_check_POLICYINFO_type(ptr)))
474	#define sk_POLICYINFO_find(sk, ptr) OPENSSL_sk_find(ossl_check_POLICYINFO_sk_type(sk), ossl_check_POLICYINFO_type(ptr))
475	#define sk_POLICYINFO_find_ex(sk, ptr) OPENSSL_sk_find_ex(ossl_check_POLICYINFO_sk_type(sk), ossl_check_POLICYINFO_type(ptr))
476	#define sk_POLICYINFO_find_all(sk, ptr, pnum) OPENSSL_sk_find_all(ossl_check_POLICYINFO_sk_type(sk), ossl_check_POLICYINFO_type(ptr), pnum)
477	#define sk_POLICYINFO_sort(sk) OPENSSL_sk_sort(ossl_check_POLICYINFO_sk_type(sk))
478	#define sk_POLICYINFO_is_sorted(sk) OPENSSL_sk_is_sorted(ossl_check_const_POLICYINFO_sk_type(sk))
479	#define sk_POLICYINFO_dup(sk) ((STACK_OF(POLICYINFO) *)OPENSSL_sk_dup(ossl_check_const_POLICYINFO_sk_type(sk)))
480	#define sk_POLICYINFO_deep_copy(sk, copyfunc, freefunc) ((STACK_OF(POLICYINFO) *)OPENSSL_sk_deep_copy(ossl_check_const_POLICYINFO_sk_type(sk), ossl_check_POLICYINFO_copyfunc_type(copyfunc), ossl_check_POLICYINFO_freefunc_type(freefunc)))
481	#define sk_POLICYINFO_set_cmp_func(sk, cmp) ((sk_POLICYINFO_compfunc)OPENSSL_sk_set_cmp_func(ossl_check_POLICYINFO_sk_type(sk), ossl_check_POLICYINFO_compfunc_type(cmp)))
482
483
484	typedef STACK_OF(POLICYINFO) CERTIFICATEPOLICIES;
485
486	typedef struct POLICY_MAPPING_st {
487	ASN1_OBJECT *issuerDomainPolicy;
488	ASN1_OBJECT *subjectDomainPolicy;
489	} POLICY_MAPPING;
490
491	SKM_DEFINE_STACK_OF_INTERNAL(POLICY_MAPPING, POLICY_MAPPING, POLICY_MAPPING)
492	#define sk_POLICY_MAPPING_num(sk) OPENSSL_sk_num(ossl_check_const_POLICY_MAPPING_sk_type(sk))
493	#define sk_POLICY_MAPPING_value(sk, idx) ((POLICY_MAPPING *)OPENSSL_sk_value(ossl_check_const_POLICY_MAPPING_sk_type(sk), (idx)))
494	#define sk_POLICY_MAPPING_new(cmp) ((STACK_OF(POLICY_MAPPING) *)OPENSSL_sk_new(ossl_check_POLICY_MAPPING_compfunc_type(cmp)))
495	#define sk_POLICY_MAPPING_new_null() ((STACK_OF(POLICY_MAPPING) *)OPENSSL_sk_new_null())
496	#define sk_POLICY_MAPPING_new_reserve(cmp, n) ((STACK_OF(POLICY_MAPPING) *)OPENSSL_sk_new_reserve(ossl_check_POLICY_MAPPING_compfunc_type(cmp), (n)))
497	#define sk_POLICY_MAPPING_reserve(sk, n) OPENSSL_sk_reserve(ossl_check_POLICY_MAPPING_sk_type(sk), (n))
498	#define sk_POLICY_MAPPING_free(sk) OPENSSL_sk_free(ossl_check_POLICY_MAPPING_sk_type(sk))
499	#define sk_POLICY_MAPPING_zero(sk) OPENSSL_sk_zero(ossl_check_POLICY_MAPPING_sk_type(sk))
500	#define sk_POLICY_MAPPING_delete(sk, i) ((POLICY_MAPPING *)OPENSSL_sk_delete(ossl_check_POLICY_MAPPING_sk_type(sk), (i)))
501	#define sk_POLICY_MAPPING_delete_ptr(sk, ptr) ((POLICY_MAPPING *)OPENSSL_sk_delete_ptr(ossl_check_POLICY_MAPPING_sk_type(sk), ossl_check_POLICY_MAPPING_type(ptr)))
502	#define sk_POLICY_MAPPING_push(sk, ptr) OPENSSL_sk_push(ossl_check_POLICY_MAPPING_sk_type(sk), ossl_check_POLICY_MAPPING_type(ptr))
503	#define sk_POLICY_MAPPING_unshift(sk, ptr) OPENSSL_sk_unshift(ossl_check_POLICY_MAPPING_sk_type(sk), ossl_check_POLICY_MAPPING_type(ptr))
504	#define sk_POLICY_MAPPING_pop(sk) ((POLICY_MAPPING *)OPENSSL_sk_pop(ossl_check_POLICY_MAPPING_sk_type(sk)))
505	#define sk_POLICY_MAPPING_shift(sk) ((POLICY_MAPPING *)OPENSSL_sk_shift(ossl_check_POLICY_MAPPING_sk_type(sk)))
506	#define sk_POLICY_MAPPING_pop_free(sk, freefunc) OPENSSL_sk_pop_free(ossl_check_POLICY_MAPPING_sk_type(sk),ossl_check_POLICY_MAPPING_freefunc_type(freefunc))
507	#define sk_POLICY_MAPPING_insert(sk, ptr, idx) OPENSSL_sk_insert(ossl_check_POLICY_MAPPING_sk_type(sk), ossl_check_POLICY_MAPPING_type(ptr), (idx))
508	#define sk_POLICY_MAPPING_set(sk, idx, ptr) ((POLICY_MAPPING *)OPENSSL_sk_set(ossl_check_POLICY_MAPPING_sk_type(sk), (idx), ossl_check_POLICY_MAPPING_type(ptr)))
509	#define sk_POLICY_MAPPING_find(sk, ptr) OPENSSL_sk_find(ossl_check_POLICY_MAPPING_sk_type(sk), ossl_check_POLICY_MAPPING_type(ptr))
510	#define sk_POLICY_MAPPING_find_ex(sk, ptr) OPENSSL_sk_find_ex(ossl_check_POLICY_MAPPING_sk_type(sk), ossl_check_POLICY_MAPPING_type(ptr))
511	#define sk_POLICY_MAPPING_find_all(sk, ptr, pnum) OPENSSL_sk_find_all(ossl_check_POLICY_MAPPING_sk_type(sk), ossl_check_POLICY_MAPPING_type(ptr), pnum)
512	#define sk_POLICY_MAPPING_sort(sk) OPENSSL_sk_sort(ossl_check_POLICY_MAPPING_sk_type(sk))
513	#define sk_POLICY_MAPPING_is_sorted(sk) OPENSSL_sk_is_sorted(ossl_check_const_POLICY_MAPPING_sk_type(sk))
514	#define sk_POLICY_MAPPING_dup(sk) ((STACK_OF(POLICY_MAPPING) *)OPENSSL_sk_dup(ossl_check_const_POLICY_MAPPING_sk_type(sk)))
515	#define sk_POLICY_MAPPING_deep_copy(sk, copyfunc, freefunc) ((STACK_OF(POLICY_MAPPING) *)OPENSSL_sk_deep_copy(ossl_check_const_POLICY_MAPPING_sk_type(sk), ossl_check_POLICY_MAPPING_copyfunc_type(copyfunc), ossl_check_POLICY_MAPPING_freefunc_type(freefunc)))
516	#define sk_POLICY_MAPPING_set_cmp_func(sk, cmp) ((sk_POLICY_MAPPING_compfunc)OPENSSL_sk_set_cmp_func(ossl_check_POLICY_MAPPING_sk_type(sk), ossl_check_POLICY_MAPPING_compfunc_type(cmp)))
517
518
519	typedef STACK_OF(POLICY_MAPPING) POLICY_MAPPINGS;
520
521	typedef struct GENERAL_SUBTREE_st {
522	GENERAL_NAME *base;
523	ASN1_INTEGER *minimum;
524	ASN1_INTEGER *maximum;
525	} GENERAL_SUBTREE;
526
527	SKM_DEFINE_STACK_OF_INTERNAL(GENERAL_SUBTREE, GENERAL_SUBTREE, GENERAL_SUBTREE)
528	#define sk_GENERAL_SUBTREE_num(sk) OPENSSL_sk_num(ossl_check_const_GENERAL_SUBTREE_sk_type(sk))
529	#define sk_GENERAL_SUBTREE_value(sk, idx) ((GENERAL_SUBTREE *)OPENSSL_sk_value(ossl_check_const_GENERAL_SUBTREE_sk_type(sk), (idx)))
530	#define sk_GENERAL_SUBTREE_new(cmp) ((STACK_OF(GENERAL_SUBTREE) *)OPENSSL_sk_new(ossl_check_GENERAL_SUBTREE_compfunc_type(cmp)))
531	#define sk_GENERAL_SUBTREE_new_null() ((STACK_OF(GENERAL_SUBTREE) *)OPENSSL_sk_new_null())
532	#define sk_GENERAL_SUBTREE_new_reserve(cmp, n) ((STACK_OF(GENERAL_SUBTREE) *)OPENSSL_sk_new_reserve(ossl_check_GENERAL_SUBTREE_compfunc_type(cmp), (n)))
533	#define sk_GENERAL_SUBTREE_reserve(sk, n) OPENSSL_sk_reserve(ossl_check_GENERAL_SUBTREE_sk_type(sk), (n))
534	#define sk_GENERAL_SUBTREE_free(sk) OPENSSL_sk_free(ossl_check_GENERAL_SUBTREE_sk_type(sk))
535	#define sk_GENERAL_SUBTREE_zero(sk) OPENSSL_sk_zero(ossl_check_GENERAL_SUBTREE_sk_type(sk))
536	#define sk_GENERAL_SUBTREE_delete(sk, i) ((GENERAL_SUBTREE *)OPENSSL_sk_delete(ossl_check_GENERAL_SUBTREE_sk_type(sk), (i)))
537	#define sk_GENERAL_SUBTREE_delete_ptr(sk, ptr) ((GENERAL_SUBTREE *)OPENSSL_sk_delete_ptr(ossl_check_GENERAL_SUBTREE_sk_type(sk), ossl_check_GENERAL_SUBTREE_type(ptr)))
538	#define sk_GENERAL_SUBTREE_push(sk, ptr) OPENSSL_sk_push(ossl_check_GENERAL_SUBTREE_sk_type(sk), ossl_check_GENERAL_SUBTREE_type(ptr))
539	#define sk_GENERAL_SUBTREE_unshift(sk, ptr) OPENSSL_sk_unshift(ossl_check_GENERAL_SUBTREE_sk_type(sk), ossl_check_GENERAL_SUBTREE_type(ptr))
540	#define sk_GENERAL_SUBTREE_pop(sk) ((GENERAL_SUBTREE *)OPENSSL_sk_pop(ossl_check_GENERAL_SUBTREE_sk_type(sk)))
541	#define sk_GENERAL_SUBTREE_shift(sk) ((GENERAL_SUBTREE *)OPENSSL_sk_shift(ossl_check_GENERAL_SUBTREE_sk_type(sk)))
542	#define sk_GENERAL_SUBTREE_pop_free(sk, freefunc) OPENSSL_sk_pop_free(ossl_check_GENERAL_SUBTREE_sk_type(sk),ossl_check_GENERAL_SUBTREE_freefunc_type(freefunc))
543	#define sk_GENERAL_SUBTREE_insert(sk, ptr, idx) OPENSSL_sk_insert(ossl_check_GENERAL_SUBTREE_sk_type(sk), ossl_check_GENERAL_SUBTREE_type(ptr), (idx))
544	#define sk_GENERAL_SUBTREE_set(sk, idx, ptr) ((GENERAL_SUBTREE *)OPENSSL_sk_set(ossl_check_GENERAL_SUBTREE_sk_type(sk), (idx), ossl_check_GENERAL_SUBTREE_type(ptr)))
545	#define sk_GENERAL_SUBTREE_find(sk, ptr) OPENSSL_sk_find(ossl_check_GENERAL_SUBTREE_sk_type(sk), ossl_check_GENERAL_SUBTREE_type(ptr))
546	#define sk_GENERAL_SUBTREE_find_ex(sk, ptr) OPENSSL_sk_find_ex(ossl_check_GENERAL_SUBTREE_sk_type(sk), ossl_check_GENERAL_SUBTREE_type(ptr))
547	#define sk_GENERAL_SUBTREE_find_all(sk, ptr, pnum) OPENSSL_sk_find_all(ossl_check_GENERAL_SUBTREE_sk_type(sk), ossl_check_GENERAL_SUBTREE_type(ptr), pnum)
548	#define sk_GENERAL_SUBTREE_sort(sk) OPENSSL_sk_sort(ossl_check_GENERAL_SUBTREE_sk_type(sk))
549	#define sk_GENERAL_SUBTREE_is_sorted(sk) OPENSSL_sk_is_sorted(ossl_check_const_GENERAL_SUBTREE_sk_type(sk))
550	#define sk_GENERAL_SUBTREE_dup(sk) ((STACK_OF(GENERAL_SUBTREE) *)OPENSSL_sk_dup(ossl_check_const_GENERAL_SUBTREE_sk_type(sk)))
551	#define sk_GENERAL_SUBTREE_deep_copy(sk, copyfunc, freefunc) ((STACK_OF(GENERAL_SUBTREE) *)OPENSSL_sk_deep_copy(ossl_check_const_GENERAL_SUBTREE_sk_type(sk), ossl_check_GENERAL_SUBTREE_copyfunc_type(copyfunc), ossl_check_GENERAL_SUBTREE_freefunc_type(freefunc)))
552	#define sk_GENERAL_SUBTREE_set_cmp_func(sk, cmp) ((sk_GENERAL_SUBTREE_compfunc)OPENSSL_sk_set_cmp_func(ossl_check_GENERAL_SUBTREE_sk_type(sk), ossl_check_GENERAL_SUBTREE_compfunc_type(cmp)))
553
554
555	struct NAME_CONSTRAINTS_st {
556	STACK_OF(GENERAL_SUBTREE) *permittedSubtrees;
557	STACK_OF(GENERAL_SUBTREE) *excludedSubtrees;
558	};
559
560	typedef struct POLICY_CONSTRAINTS_st {
561	ASN1_INTEGER *requireExplicitPolicy;
562	ASN1_INTEGER *inhibitPolicyMapping;
563	} POLICY_CONSTRAINTS;
564
565	/ Proxy certificate structures, see RFC 3820 /
566	typedef struct PROXY_POLICY_st {
567	ASN1_OBJECT *policyLanguage;
568	ASN1_OCTET_STRING *policy;
569	} PROXY_POLICY;
570
571	typedef struct PROXY_CERT_INFO_EXTENSION_st {
572	ASN1_INTEGER *pcPathLengthConstraint;
573	PROXY_POLICY *proxyPolicy;
574	} PROXY_CERT_INFO_EXTENSION;
575
576	DECLARE_ASN1_FUNCTIONS(PROXY_POLICY)
577	DECLARE_ASN1_FUNCTIONS(PROXY_CERT_INFO_EXTENSION)
578
579	struct ISSUING_DIST_POINT_st {
580	DIST_POINT_NAME *distpoint;
581	int onlyuser;
582	int onlyCA;
583	ASN1_BIT_STRING *onlysomereasons;
584	int indirectCRL;
585	int onlyattr;
586	};
587
588	/ Values in idp_flags field /
589	/ IDP present /
590	# define IDP_PRESENT 0x1
591	/ IDP values inconsistent /
592	# define IDP_INVALID 0x2
593	/ onlyuser true /
594	# define IDP_ONLYUSER 0x4
595	/ onlyCA true /
596	# define IDP_ONLYCA 0x8
597	/ onlyattr true /
598	# define IDP_ONLYATTR 0x10
599	/ indirectCRL true /
600	# define IDP_INDIRECT 0x20
601	/ onlysomereasons present /
602	# define IDP_REASONS 0x40
603
604	# define X509V3_conf_err(val) ERR_add_error_data(6, \
605	"section:", (val)->section, \
606	",name:", (val)->name, ",value:", (val)->value)
607
608	# define X509V3_set_ctx_test(ctx) \
609	X509V3_set_ctx(ctx, NULL, NULL, NULL, NULL, X509V3_CTX_TEST)
610	# define X509V3_set_ctx_nodb(ctx) (ctx)->db = NULL;
611
612	# define EXT_BITSTRING(nid, table) { nid, 0, ASN1_ITEM_ref(ASN1_BIT_STRING), \
613	0,0,0,0, \
614	0,0, \
615	(X509V3_EXT_I2V)i2v_ASN1_BIT_STRING, \
616	(X509V3_EXT_V2I)v2i_ASN1_BIT_STRING, \
617	NULL, NULL, \
618	table}
619
620	# define EXT_IA5STRING(nid) { nid, 0, ASN1_ITEM_ref(ASN1_IA5STRING), \
621	0,0,0,0, \
622	(X509V3_EXT_I2S)i2s_ASN1_IA5STRING, \
623	(X509V3_EXT_S2I)s2i_ASN1_IA5STRING, \
624	0,0,0,0, \
625	NULL}
626
627	#define EXT_UTF8STRING(nid) { nid, 0, ASN1_ITEM_ref(ASN1_UTF8STRING), \
628	0,0,0,0, \
629	(X509V3_EXT_I2S)i2s_ASN1_UTF8STRING, \
630	(X509V3_EXT_S2I)s2i_ASN1_UTF8STRING, \
631	0,0,0,0, \
632	NULL}
633
634	# define EXT_END { -1, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0}
635
636	/ X509_PURPOSE stuff /
637
638	# define EXFLAG_BCONS 0x1
639	# define EXFLAG_KUSAGE 0x2
640	# define EXFLAG_XKUSAGE 0x4
641	# define EXFLAG_NSCERT 0x8
642
643	# define EXFLAG_CA 0x10
644	# define EXFLAG_SI 0x20 /* self-issued, maybe not self-signed */
645	# define EXFLAG_V1 0x40
646	# define EXFLAG_INVALID 0x80
647	/ EXFLAG_SET is set to indicate that some values have been precomputed /
648	# define EXFLAG_SET 0x100
649	# define EXFLAG_CRITICAL 0x200
650	# define EXFLAG_PROXY 0x400
651
652	# define EXFLAG_INVALID_POLICY 0x800
653	# define EXFLAG_FRESHEST 0x1000
654	# define EXFLAG_SS 0x2000 /* cert is apparently self-signed */
655
656	# define EXFLAG_BCONS_CRITICAL 0x10000
657	# define EXFLAG_AKID_CRITICAL 0x20000
658	# define EXFLAG_SKID_CRITICAL 0x40000
659	# define EXFLAG_SAN_CRITICAL 0x80000
660	# define EXFLAG_NO_FINGERPRINT 0x100000
661
662	# define KU_DIGITAL_SIGNATURE 0x0080
663	# define KU_NON_REPUDIATION 0x0040
664	# define KU_KEY_ENCIPHERMENT 0x0020
665	# define KU_DATA_ENCIPHERMENT 0x0010
666	# define KU_KEY_AGREEMENT 0x0008
667	# define KU_KEY_CERT_SIGN 0x0004
668	# define KU_CRL_SIGN 0x0002
669	# define KU_ENCIPHER_ONLY 0x0001
670	# define KU_DECIPHER_ONLY 0x8000
671
672	# define NS_SSL_CLIENT 0x80
673	# define NS_SSL_SERVER 0x40
674	# define NS_SMIME 0x20
675	# define NS_OBJSIGN 0x10
676	# define NS_SSL_CA 0x04
677	# define NS_SMIME_CA 0x02
678	# define NS_OBJSIGN_CA 0x01
679	# define NS_ANY_CA (NS_SSL_CA\|NS_SMIME_CA\|NS_OBJSIGN_CA)
680
681	# define XKU_SSL_SERVER 0x1
682	# define XKU_SSL_CLIENT 0x2
683	# define XKU_SMIME 0x4
684	# define XKU_CODE_SIGN 0x8
685	# define XKU_SGC 0x10 /* Netscape or MS Server-Gated Crypto */
686	# define XKU_OCSP_SIGN 0x20
687	# define XKU_TIMESTAMP 0x40
688	# define XKU_DVCS 0x80
689	# define XKU_ANYEKU 0x100
690
691	# define X509_PURPOSE_DYNAMIC 0x1
692	# define X509_PURPOSE_DYNAMIC_NAME 0x2
693
694	typedef struct x509_purpose_st {
695	int purpose;
696	int trust; / Default trust ID /
697	int flags;
698	int (check_purpose) (const* struct x509_purpose_st , const* X509 , int*);
699	char *name;
700	char *sname;
701	void *usr_data;
702	} X509_PURPOSE;
703
704	SKM_DEFINE_STACK_OF_INTERNAL(X509_PURPOSE, X509_PURPOSE, X509_PURPOSE)
705	#define sk_X509_PURPOSE_num(sk) OPENSSL_sk_num(ossl_check_const_X509_PURPOSE_sk_type(sk))
706	#define sk_X509_PURPOSE_value(sk, idx) ((X509_PURPOSE *)OPENSSL_sk_value(ossl_check_const_X509_PURPOSE_sk_type(sk), (idx)))
707	#define sk_X509_PURPOSE_new(cmp) ((STACK_OF(X509_PURPOSE) *)OPENSSL_sk_new(ossl_check_X509_PURPOSE_compfunc_type(cmp)))
708	#define sk_X509_PURPOSE_new_null() ((STACK_OF(X509_PURPOSE) *)OPENSSL_sk_new_null())
709	#define sk_X509_PURPOSE_new_reserve(cmp, n) ((STACK_OF(X509_PURPOSE) *)OPENSSL_sk_new_reserve(ossl_check_X509_PURPOSE_compfunc_type(cmp), (n)))
710	#define sk_X509_PURPOSE_reserve(sk, n) OPENSSL_sk_reserve(ossl_check_X509_PURPOSE_sk_type(sk), (n))
711	#define sk_X509_PURPOSE_free(sk) OPENSSL_sk_free(ossl_check_X509_PURPOSE_sk_type(sk))
712	#define sk_X509_PURPOSE_zero(sk) OPENSSL_sk_zero(ossl_check_X509_PURPOSE_sk_type(sk))
713	#define sk_X509_PURPOSE_delete(sk, i) ((X509_PURPOSE *)OPENSSL_sk_delete(ossl_check_X509_PURPOSE_sk_type(sk), (i)))
714	#define sk_X509_PURPOSE_delete_ptr(sk, ptr) ((X509_PURPOSE *)OPENSSL_sk_delete_ptr(ossl_check_X509_PURPOSE_sk_type(sk), ossl_check_X509_PURPOSE_type(ptr)))
715	#define sk_X509_PURPOSE_push(sk, ptr) OPENSSL_sk_push(ossl_check_X509_PURPOSE_sk_type(sk), ossl_check_X509_PURPOSE_type(ptr))
716	#define sk_X509_PURPOSE_unshift(sk, ptr) OPENSSL_sk_unshift(ossl_check_X509_PURPOSE_sk_type(sk), ossl_check_X509_PURPOSE_type(ptr))
717	#define sk_X509_PURPOSE_pop(sk) ((X509_PURPOSE *)OPENSSL_sk_pop(ossl_check_X509_PURPOSE_sk_type(sk)))
718	#define sk_X509_PURPOSE_shift(sk) ((X509_PURPOSE *)OPENSSL_sk_shift(ossl_check_X509_PURPOSE_sk_type(sk)))
719	#define sk_X509_PURPOSE_pop_free(sk, freefunc) OPENSSL_sk_pop_free(ossl_check_X509_PURPOSE_sk_type(sk),ossl_check_X509_PURPOSE_freefunc_type(freefunc))
720	#define sk_X509_PURPOSE_insert(sk, ptr, idx) OPENSSL_sk_insert(ossl_check_X509_PURPOSE_sk_type(sk), ossl_check_X509_PURPOSE_type(ptr), (idx))
721	#define sk_X509_PURPOSE_set(sk, idx, ptr) ((X509_PURPOSE *)OPENSSL_sk_set(ossl_check_X509_PURPOSE_sk_type(sk), (idx), ossl_check_X509_PURPOSE_type(ptr)))
722	#define sk_X509_PURPOSE_find(sk, ptr) OPENSSL_sk_find(ossl_check_X509_PURPOSE_sk_type(sk), ossl_check_X509_PURPOSE_type(ptr))
723	#define sk_X509_PURPOSE_find_ex(sk, ptr) OPENSSL_sk_find_ex(ossl_check_X509_PURPOSE_sk_type(sk), ossl_check_X509_PURPOSE_type(ptr))
724	#define sk_X509_PURPOSE_find_all(sk, ptr, pnum) OPENSSL_sk_find_all(ossl_check_X509_PURPOSE_sk_type(sk), ossl_check_X509_PURPOSE_type(ptr), pnum)
725	#define sk_X509_PURPOSE_sort(sk) OPENSSL_sk_sort(ossl_check_X509_PURPOSE_sk_type(sk))
726	#define sk_X509_PURPOSE_is_sorted(sk) OPENSSL_sk_is_sorted(ossl_check_const_X509_PURPOSE_sk_type(sk))
727	#define sk_X509_PURPOSE_dup(sk) ((STACK_OF(X509_PURPOSE) *)OPENSSL_sk_dup(ossl_check_const_X509_PURPOSE_sk_type(sk)))
728	#define sk_X509_PURPOSE_deep_copy(sk, copyfunc, freefunc) ((STACK_OF(X509_PURPOSE) *)OPENSSL_sk_deep_copy(ossl_check_const_X509_PURPOSE_sk_type(sk), ossl_check_X509_PURPOSE_copyfunc_type(copyfunc), ossl_check_X509_PURPOSE_freefunc_type(freefunc)))
729	#define sk_X509_PURPOSE_set_cmp_func(sk, cmp) ((sk_X509_PURPOSE_compfunc)OPENSSL_sk_set_cmp_func(ossl_check_X509_PURPOSE_sk_type(sk), ossl_check_X509_PURPOSE_compfunc_type(cmp)))
730
731
732
733	# define X509_PURPOSE_SSL_CLIENT 1
734	# define X509_PURPOSE_SSL_SERVER 2
735	# define X509_PURPOSE_NS_SSL_SERVER 3
736	# define X509_PURPOSE_SMIME_SIGN 4
737	# define X509_PURPOSE_SMIME_ENCRYPT 5
738	# define X509_PURPOSE_CRL_SIGN 6
739	# define X509_PURPOSE_ANY 7
740	# define X509_PURPOSE_OCSP_HELPER 8
741	# define X509_PURPOSE_TIMESTAMP_SIGN 9
742
743	# define X509_PURPOSE_MIN 1
744	# define X509_PURPOSE_MAX 9
745
746	/ Flags for X509V3_EXT_print() /
747
748	# define X509V3_EXT_UNKNOWN_MASK (0xfL << 16)
749	/ Return error for unknown extensions /
750	# define X509V3_EXT_DEFAULT 0
751	/ Print error for unknown extensions /
752	# define X509V3_EXT_ERROR_UNKNOWN (1L << 16)
753	/ ASN1 parse unknown extensions /
754	# define X509V3_EXT_PARSE_UNKNOWN (2L << 16)
755	/ BIO_dump unknown extensions /
756	# define X509V3_EXT_DUMP_UNKNOWN (3L << 16)
757
758	/ Flags for X509V3_add1_i2d /
759
760	# define X509V3_ADD_OP_MASK 0xfL
761	# define X509V3_ADD_DEFAULT 0L
762	# define X509V3_ADD_APPEND 1L
763	# define X509V3_ADD_REPLACE 2L
764	# define X509V3_ADD_REPLACE_EXISTING 3L
765	# define X509V3_ADD_KEEP_EXISTING 4L
766	# define X509V3_ADD_DELETE 5L
767	# define X509V3_ADD_SILENT 0x10
768
769	DECLARE_ASN1_FUNCTIONS(BASIC_CONSTRAINTS)
770
771	DECLARE_ASN1_FUNCTIONS(SXNET)
772	DECLARE_ASN1_FUNCTIONS(SXNETID)
773
774	DECLARE_ASN1_FUNCTIONS(ISSUER_SIGN_TOOL)
775
776	int SXNET_add_id_asc(SXNET *psx, const* char zone, const* char user, int* userlen);
777	int SXNET_add_id_ulong(SXNET *psx, unsigned* long lzone, const char *user,
778	int userlen);
779	int SXNET_add_id_INTEGER(SXNET *psx, ASN1_INTEGER izone, const char *user,
780	int userlen);
781
782	ASN1_OCTET_STRING SXNET_get_id_asc(SXNET sx, const char *zone);
783	ASN1_OCTET_STRING SXNET_get_id_ulong(SXNET sx, unsigned long lzone);
784	ASN1_OCTET_STRING SXNET_get_id_INTEGER(SXNET sx, ASN1_INTEGER *zone);
785
786	DECLARE_ASN1_FUNCTIONS(AUTHORITY_KEYID)
787
788	DECLARE_ASN1_FUNCTIONS(PKEY_USAGE_PERIOD)
789
790	DECLARE_ASN1_FUNCTIONS(GENERAL_NAME)
791	DECLARE_ASN1_DUP_FUNCTION(GENERAL_NAME)
792	int GENERAL_NAME_cmp(GENERAL_NAME a, GENERAL_NAME b);
793
794	ASN1_BIT_STRING v2i_ASN1_BIT_STRING(X509V3_EXT_METHOD method,
795	X509V3_CTX *ctx,
796	STACK_OF(CONF_VALUE) *nval);
797	STACK_OF(CONF_VALUE) i2v_ASN1_BIT_STRING(X509V3_EXT_METHOD method,
798	ASN1_BIT_STRING *bits,
799	STACK_OF(CONF_VALUE) *extlist);
800	char i2s_ASN1_IA5STRING(X509V3_EXT_METHOD method, ASN1_IA5STRING *ia5);
801	ASN1_IA5STRING s2i_ASN1_IA5STRING(X509V3_EXT_METHOD method,
802	X509V3_CTX ctx, const* char *str);
803	char i2s_ASN1_UTF8STRING(X509V3_EXT_METHOD method, ASN1_UTF8STRING *utf8);
804	ASN1_UTF8STRING s2i_ASN1_UTF8STRING(X509V3_EXT_METHOD method,
805	X509V3_CTX ctx, const* char *str);
806
807	STACK_OF(CONF_VALUE) i2v_GENERAL_NAME(X509V3_EXT_METHOD method,
808	GENERAL_NAME *gen,
809	STACK_OF(CONF_VALUE) *ret);
810	int GENERAL_NAME_print(BIO out, GENERAL_NAME gen);
811
812	DECLARE_ASN1_FUNCTIONS(GENERAL_NAMES)
813
814	STACK_OF(CONF_VALUE) i2v_GENERAL_NAMES(X509V3_EXT_METHOD method,
815	GENERAL_NAMES *gen,
816	STACK_OF(CONF_VALUE) *extlist);
817	GENERAL_NAMES v2i_GENERAL_NAMES(const* X509V3_EXT_METHOD *method,
818	X509V3_CTX ctx, STACK_OF(CONF_VALUE) nval);
819
820	DECLARE_ASN1_FUNCTIONS(OTHERNAME)
821	DECLARE_ASN1_FUNCTIONS(EDIPARTYNAME)
822	int OTHERNAME_cmp(OTHERNAME a, OTHERNAME b);
823	void GENERAL_NAME_set0_value(GENERAL_NAME a, int* type, void *value);
824	void GENERAL_NAME_get0_value(const* GENERAL_NAME a, int* *ptype);
825	int GENERAL_NAME_set0_othername(GENERAL_NAME *gen,
826	ASN1_OBJECT oid, ASN1_TYPE value);
827	int GENERAL_NAME_get0_otherName(const GENERAL_NAME *gen,
828	ASN1_OBJECT poid, ASN1_TYPE pvalue);
829
830	char i2s_ASN1_OCTET_STRING(X509V3_EXT_METHOD method,
831	const ASN1_OCTET_STRING *ia5);
832	ASN1_OCTET_STRING s2i_ASN1_OCTET_STRING(X509V3_EXT_METHOD method,
833	X509V3_CTX ctx, const* char *str);
834
835	DECLARE_ASN1_FUNCTIONS(EXTENDED_KEY_USAGE)
836	int i2a_ACCESS_DESCRIPTION(BIO bp, const* ACCESS_DESCRIPTION *a);
837
838	DECLARE_ASN1_ALLOC_FUNCTIONS(TLS_FEATURE)
839
840	DECLARE_ASN1_FUNCTIONS(CERTIFICATEPOLICIES)
841	DECLARE_ASN1_FUNCTIONS(POLICYINFO)
842	DECLARE_ASN1_FUNCTIONS(POLICYQUALINFO)
843	DECLARE_ASN1_FUNCTIONS(USERNOTICE)
844	DECLARE_ASN1_FUNCTIONS(NOTICEREF)
845
846	DECLARE_ASN1_FUNCTIONS(CRL_DIST_POINTS)
847	DECLARE_ASN1_FUNCTIONS(DIST_POINT)
848	DECLARE_ASN1_FUNCTIONS(DIST_POINT_NAME)
849	DECLARE_ASN1_FUNCTIONS(ISSUING_DIST_POINT)
850
851	int DIST_POINT_set_dpname(DIST_POINT_NAME dpn, const* X509_NAME *iname);
852
853	int NAME_CONSTRAINTS_check(X509 x, NAME_CONSTRAINTS nc);
854	int NAME_CONSTRAINTS_check_CN(X509 x, NAME_CONSTRAINTS nc);
855
856	DECLARE_ASN1_FUNCTIONS(ACCESS_DESCRIPTION)
857	DECLARE_ASN1_FUNCTIONS(AUTHORITY_INFO_ACCESS)
858
859	DECLARE_ASN1_ITEM(POLICY_MAPPING)
860	DECLARE_ASN1_ALLOC_FUNCTIONS(POLICY_MAPPING)
861	DECLARE_ASN1_ITEM(POLICY_MAPPINGS)
862
863	DECLARE_ASN1_ITEM(GENERAL_SUBTREE)
864	DECLARE_ASN1_ALLOC_FUNCTIONS(GENERAL_SUBTREE)
865
866	DECLARE_ASN1_ITEM(NAME_CONSTRAINTS)
867	DECLARE_ASN1_ALLOC_FUNCTIONS(NAME_CONSTRAINTS)
868
869	DECLARE_ASN1_ALLOC_FUNCTIONS(POLICY_CONSTRAINTS)
870	DECLARE_ASN1_ITEM(POLICY_CONSTRAINTS)
871
872	GENERAL_NAME a2i_GENERAL_NAME(GENERAL_NAME out,
873	const X509V3_EXT_METHOD *method,
874	X509V3_CTX ctx, int* gen_type,
875	const char value, int* is_nc);
876
877	# ifdef OPENSSL_CONF_H
878	GENERAL_NAME v2i_GENERAL_NAME(const* X509V3_EXT_METHOD *method,
879	X509V3_CTX ctx, CONF_VALUE cnf);
880	GENERAL_NAME v2i_GENERAL_NAME_ex(GENERAL_NAME out,
881	const X509V3_EXT_METHOD *method,
882	X509V3_CTX ctx, CONF_VALUE cnf,
883	int is_nc);
884
885	void X509V3_conf_free(CONF_VALUE *val);
886
887	X509_EXTENSION X509V3_EXT_nconf_nid(CONF conf, X509V3_CTX ctx, int* ext_nid,
888	const char *value);
889	X509_EXTENSION X509V3_EXT_nconf(CONF conf, X509V3_CTX ctx, const* char *name,
890	const char *value);
891	int X509V3_EXT_add_nconf_sk(CONF conf, X509V3_CTX ctx, const char *section,
892	STACK_OF(X509_EXTENSION) **sk);
893	int X509V3_EXT_add_nconf(CONF conf, X509V3_CTX ctx, const char *section,
894	X509 *cert);
895	int X509V3_EXT_REQ_add_nconf(CONF conf, X509V3_CTX ctx, const char *section,
896	X509_REQ *req);
897	int X509V3_EXT_CRL_add_nconf(CONF conf, X509V3_CTX ctx, const char *section,
898	X509_CRL *crl);
899
900	X509_EXTENSION X509V3_EXT_conf_nid(LHASH_OF(CONF_VALUE) conf,
901	X509V3_CTX ctx, int* ext_nid,
902	const char *value);
903	X509_EXTENSION X509V3_EXT_conf(LHASH_OF(CONF_VALUE) conf, X509V3_CTX *ctx,
904	const char name, const* char *value);
905	int X509V3_EXT_add_conf(LHASH_OF(CONF_VALUE) conf, X509V3_CTX ctx,
906	const char section, X509 cert);
907	int X509V3_EXT_REQ_add_conf(LHASH_OF(CONF_VALUE) conf, X509V3_CTX ctx,
908	const char section, X509_REQ req);
909	int X509V3_EXT_CRL_add_conf(LHASH_OF(CONF_VALUE) conf, X509V3_CTX ctx,
910	const char section, X509_CRL crl);
911
912	int X509V3_add_value_bool_nf(const char name, int* asn1_bool,
913	STACK_OF(CONF_VALUE) **extlist);
914	int X509V3_get_value_bool(const CONF_VALUE value, int* *asn1_bool);
915	int X509V3_get_value_int(const CONF_VALUE value, ASN1_INTEGER *aint);
916	void X509V3_set_nconf(X509V3_CTX ctx, CONF conf);
917	void X509V3_set_conf_lhash(X509V3_CTX ctx, LHASH_OF(CONF_VALUE) lhash);
918	# endif
919
920	char X509V3_get_string(X509V3_CTX ctx, const char name, const* char *section);
921	STACK_OF(CONF_VALUE) X509V3_get_section(X509V3_CTX ctx, const char *section);
922	void X509V3_string_free(X509V3_CTX ctx, char* *str);
923	void X509V3_section_free(X509V3_CTX ctx, STACK_OF(CONF_VALUE) section);
924	void X509V3_set_ctx(X509V3_CTX ctx, X509 issuer, X509 *subject,
925	X509_REQ req, X509_CRL crl, int flags);
926	/ For API backward compatibility, this is separate from X509V3_set_ctx(): /
927	int X509V3_set_issuer_pkey(X509V3_CTX ctx, EVP_PKEY pkey);
928
929	int X509V3_add_value(const char name, const* char *value,
930	STACK_OF(CONF_VALUE) **extlist);
931	int X509V3_add_value_uchar(const char name, const* unsigned char *value,
932	STACK_OF(CONF_VALUE) **extlist);
933	int X509V3_add_value_bool(const char name, int* asn1_bool,
934	STACK_OF(CONF_VALUE) **extlist);
935	int X509V3_add_value_int(const char name, const* ASN1_INTEGER *aint,
936	STACK_OF(CONF_VALUE) **extlist);
937	char i2s_ASN1_INTEGER(X509V3_EXT_METHOD meth, const ASN1_INTEGER *aint);
938	ASN1_INTEGER s2i_ASN1_INTEGER(X509V3_EXT_METHOD meth, const char *value);
939	char i2s_ASN1_ENUMERATED(X509V3_EXT_METHOD meth, const ASN1_ENUMERATED *aint);
940	char i2s_ASN1_ENUMERATED_TABLE(X509V3_EXT_METHOD meth,
941	const ASN1_ENUMERATED *aint);
942	int X509V3_EXT_add(X509V3_EXT_METHOD *ext);
943	int X509V3_EXT_add_list(X509V3_EXT_METHOD *extlist);
944	int X509V3_EXT_add_alias(int nid_to, int nid_from);
945	void X509V3_EXT_cleanup(void);
946
947	const X509V3_EXT_METHOD X509V3_EXT_get(X509_EXTENSION ext);
948	const X509V3_EXT_METHOD X509V3_EXT_get_nid(int* nid);
949	int X509V3_add_standard_extensions(void);
950	STACK_OF(CONF_VALUE) X509V3_parse_list(const* char *line);
951	void X509V3_EXT_d2i(X509_EXTENSION ext);
952	void X509V3_get_d2i(const* STACK_OF(X509_EXTENSION) x, int* nid, int *crit,
953	int *idx);
954
955	X509_EXTENSION X509V3_EXT_i2d(int* ext_nid, int crit, void *ext_struc);
956	int X509V3_add1_i2d(STACK_OF(X509_EXTENSION) *x, int* nid, void *value,
957	int crit, unsigned long flags);
958
959	#ifndef OPENSSL_NO_DEPRECATED_1_1_0
960	/ The new declarations are in crypto.h, but the old ones were here. /
961	# define hex_to_string OPENSSL_buf2hexstr
962	# define string_to_hex OPENSSL_hexstr2buf
963	#endif
964
965	void X509V3_EXT_val_prn(BIO out, STACK_OF(CONF_VALUE) val, int indent,
966	int ml);
967	int X509V3_EXT_print(BIO out, X509_EXTENSION ext, unsigned long flag,
968	int indent);
969	#ifndef OPENSSL_NO_STDIO
970	int X509V3_EXT_print_fp(FILE out, X509_EXTENSION ext, int flag, int indent);
971	#endif
972	int X509V3_extensions_print(BIO out, const* char *title,
973	const STACK_OF(X509_EXTENSION) *exts,
974	unsigned long flag, int indent);
975
976	int X509_check_ca(X509 *x);
977	int X509_check_purpose(X509 x, int* id, int ca);
978	int X509_supported_extension(X509_EXTENSION *ex);
979	int X509_PURPOSE_set(int p, int* purpose);
980	int X509_check_issued(X509 issuer, X509 subject);
981	int X509_check_akid(const X509 issuer, const* AUTHORITY_KEYID *akid);
982	void X509_set_proxy_flag(X509 *x);
983	void X509_set_proxy_pathlen(X509 x, long* l);
984	long X509_get_proxy_pathlen(X509 *x);
985
986	uint32_t X509_get_extension_flags(X509 *x);
987	uint32_t X509_get_key_usage(X509 *x);
988	uint32_t X509_get_extended_key_usage(X509 *x);
989	const ASN1_OCTET_STRING X509_get0_subject_key_id(X509 x);
990	const ASN1_OCTET_STRING X509_get0_authority_key_id(X509 x);
991	const GENERAL_NAMES X509_get0_authority_issuer(X509 x);
992	const ASN1_INTEGER X509_get0_authority_serial(X509 x);
993
994	int X509_PURPOSE_get_count(void);
995	X509_PURPOSE X509_PURPOSE_get0(int* idx);
996	int X509_PURPOSE_get_by_sname(const char *sname);
997	int X509_PURPOSE_get_by_id(int id);
998	int X509_PURPOSE_add(int id, int trust, int flags,
999	int (ck) (const* X509_PURPOSE , const* X509 , int*),
1000	const char name, const* char sname, void* *arg);
1001	char X509_PURPOSE_get0_name(const* X509_PURPOSE *xp);
1002	char X509_PURPOSE_get0_sname(const* X509_PURPOSE *xp);
1003	int X509_PURPOSE_get_trust(const X509_PURPOSE *xp);
1004	void X509_PURPOSE_cleanup(void);
1005	int X509_PURPOSE_get_id(const X509_PURPOSE *);
1006
1007	STACK_OF(OPENSSL_STRING) X509_get1_email(X509 x);
1008	STACK_OF(OPENSSL_STRING) X509_REQ_get1_email(X509_REQ x);
1009	void X509_email_free(STACK_OF(OPENSSL_STRING) *sk);
1010	STACK_OF(OPENSSL_STRING) X509_get1_ocsp(X509 x);
1011	/ Flags for X509_check_* functions /
1012
1013	/*
1014	* Always check subject name for host match even if subject alt names present
1015	*/
1016	# define X509_CHECK_FLAG_ALWAYS_CHECK_SUBJECT 0x1
1017	/ Disable wildcard matching for dnsName fields and common name. /
1018	# define X509_CHECK_FLAG_NO_WILDCARDS 0x2
1019	/ Wildcards must not match a partial label. /
1020	# define X509_CHECK_FLAG_NO_PARTIAL_WILDCARDS 0x4
1021	/ Allow (non-partial) wildcards to match multiple labels. /
1022	# define X509_CHECK_FLAG_MULTI_LABEL_WILDCARDS 0x8
1023	/ Constraint verifier subdomain patterns to match a single labels. /
1024	# define X509_CHECK_FLAG_SINGLE_LABEL_SUBDOMAINS 0x10
1025	/ Never check the subject CN /
1026	# define X509_CHECK_FLAG_NEVER_CHECK_SUBJECT 0x20
1027	/*
1028	* Match reference identifiers starting with "." to any sub-domain.
1029	* This is a non-public flag, turned on implicitly when the subject
1030	* reference identity is a DNS name.
1031	*/
1032	# define _X509_CHECK_FLAG_DOT_SUBDOMAINS 0x8000
1033
1034	int X509_check_host(X509 x, const* char *chk, size_t chklen,
1035	unsigned int flags, char **peername);
1036	int X509_check_email(X509 x, const* char *chk, size_t chklen,
1037	unsigned int flags);
1038	int X509_check_ip(X509 x, const* unsigned char *chk, size_t chklen,
1039	unsigned int flags);
1040	int X509_check_ip_asc(X509 x, const* char ipasc, unsigned* int flags);
1041
1042	ASN1_OCTET_STRING a2i_IPADDRESS(const* char *ipasc);
1043	ASN1_OCTET_STRING a2i_IPADDRESS_NC(const* char *ipasc);
1044	int X509V3_NAME_from_section(X509_NAME nm, STACK_OF(CONF_VALUE) dn_sk,
1045	unsigned long chtype);
1046
1047	void X509_POLICY_NODE_print(BIO out, X509_POLICY_NODE node, int indent);
1048	SKM_DEFINE_STACK_OF_INTERNAL(X509_POLICY_NODE, X509_POLICY_NODE, X509_POLICY_NODE)
1049	#define sk_X509_POLICY_NODE_num(sk) OPENSSL_sk_num(ossl_check_const_X509_POLICY_NODE_sk_type(sk))
1050	#define sk_X509_POLICY_NODE_value(sk, idx) ((X509_POLICY_NODE *)OPENSSL_sk_value(ossl_check_const_X509_POLICY_NODE_sk_type(sk), (idx)))
1051	#define sk_X509_POLICY_NODE_new(cmp) ((STACK_OF(X509_POLICY_NODE) *)OPENSSL_sk_new(ossl_check_X509_POLICY_NODE_compfunc_type(cmp)))
1052	#define sk_X509_POLICY_NODE_new_null() ((STACK_OF(X509_POLICY_NODE) *)OPENSSL_sk_new_null())
1053	#define sk_X509_POLICY_NODE_new_reserve(cmp, n) ((STACK_OF(X509_POLICY_NODE) *)OPENSSL_sk_new_reserve(ossl_check_X509_POLICY_NODE_compfunc_type(cmp), (n)))
1054	#define sk_X509_POLICY_NODE_reserve(sk, n) OPENSSL_sk_reserve(ossl_check_X509_POLICY_NODE_sk_type(sk), (n))
1055	#define sk_X509_POLICY_NODE_free(sk) OPENSSL_sk_free(ossl_check_X509_POLICY_NODE_sk_type(sk))
1056	#define sk_X509_POLICY_NODE_zero(sk) OPENSSL_sk_zero(ossl_check_X509_POLICY_NODE_sk_type(sk))
1057	#define sk_X509_POLICY_NODE_delete(sk, i) ((X509_POLICY_NODE *)OPENSSL_sk_delete(ossl_check_X509_POLICY_NODE_sk_type(sk), (i)))
1058	#define sk_X509_POLICY_NODE_delete_ptr(sk, ptr) ((X509_POLICY_NODE *)OPENSSL_sk_delete_ptr(ossl_check_X509_POLICY_NODE_sk_type(sk), ossl_check_X509_POLICY_NODE_type(ptr)))
1059	#define sk_X509_POLICY_NODE_push(sk, ptr) OPENSSL_sk_push(ossl_check_X509_POLICY_NODE_sk_type(sk), ossl_check_X509_POLICY_NODE_type(ptr))
1060	#define sk_X509_POLICY_NODE_unshift(sk, ptr) OPENSSL_sk_unshift(ossl_check_X509_POLICY_NODE_sk_type(sk), ossl_check_X509_POLICY_NODE_type(ptr))
1061	#define sk_X509_POLICY_NODE_pop(sk) ((X509_POLICY_NODE *)OPENSSL_sk_pop(ossl_check_X509_POLICY_NODE_sk_type(sk)))
1062	#define sk_X509_POLICY_NODE_shift(sk) ((X509_POLICY_NODE *)OPENSSL_sk_shift(ossl_check_X509_POLICY_NODE_sk_type(sk)))
1063	#define sk_X509_POLICY_NODE_pop_free(sk, freefunc) OPENSSL_sk_pop_free(ossl_check_X509_POLICY_NODE_sk_type(sk),ossl_check_X509_POLICY_NODE_freefunc_type(freefunc))
1064	#define sk_X509_POLICY_NODE_insert(sk, ptr, idx) OPENSSL_sk_insert(ossl_check_X509_POLICY_NODE_sk_type(sk), ossl_check_X509_POLICY_NODE_type(ptr), (idx))
1065	#define sk_X509_POLICY_NODE_set(sk, idx, ptr) ((X509_POLICY_NODE *)OPENSSL_sk_set(ossl_check_X509_POLICY_NODE_sk_type(sk), (idx), ossl_check_X509_POLICY_NODE_type(ptr)))
1066	#define sk_X509_POLICY_NODE_find(sk, ptr) OPENSSL_sk_find(ossl_check_X509_POLICY_NODE_sk_type(sk), ossl_check_X509_POLICY_NODE_type(ptr))
1067	#define sk_X509_POLICY_NODE_find_ex(sk, ptr) OPENSSL_sk_find_ex(ossl_check_X509_POLICY_NODE_sk_type(sk), ossl_check_X509_POLICY_NODE_type(ptr))
1068	#define sk_X509_POLICY_NODE_find_all(sk, ptr, pnum) OPENSSL_sk_find_all(ossl_check_X509_POLICY_NODE_sk_type(sk), ossl_check_X509_POLICY_NODE_type(ptr), pnum)
1069	#define sk_X509_POLICY_NODE_sort(sk) OPENSSL_sk_sort(ossl_check_X509_POLICY_NODE_sk_type(sk))
1070	#define sk_X509_POLICY_NODE_is_sorted(sk) OPENSSL_sk_is_sorted(ossl_check_const_X509_POLICY_NODE_sk_type(sk))
1071	#define sk_X509_POLICY_NODE_dup(sk) ((STACK_OF(X509_POLICY_NODE) *)OPENSSL_sk_dup(ossl_check_const_X509_POLICY_NODE_sk_type(sk)))
1072	#define sk_X509_POLICY_NODE_deep_copy(sk, copyfunc, freefunc) ((STACK_OF(X509_POLICY_NODE) *)OPENSSL_sk_deep_copy(ossl_check_const_X509_POLICY_NODE_sk_type(sk), ossl_check_X509_POLICY_NODE_copyfunc_type(copyfunc), ossl_check_X509_POLICY_NODE_freefunc_type(freefunc)))
1073	#define sk_X509_POLICY_NODE_set_cmp_func(sk, cmp) ((sk_X509_POLICY_NODE_compfunc)OPENSSL_sk_set_cmp_func(ossl_check_X509_POLICY_NODE_sk_type(sk), ossl_check_X509_POLICY_NODE_compfunc_type(cmp)))
1074
1075
1076
1077	#ifndef OPENSSL_NO_RFC3779
1078	typedef struct ASRange_st {
1079	ASN1_INTEGER min, max;
1080	} ASRange;
1081
1082	# define ASIdOrRange_id 0
1083	# define ASIdOrRange_range 1
1084
1085	typedef struct ASIdOrRange_st {
1086	int type;
1087	union {
1088	ASN1_INTEGER *id;
1089	ASRange *range;
1090	} u;
1091	} ASIdOrRange;
1092
1093	SKM_DEFINE_STACK_OF_INTERNAL(ASIdOrRange, ASIdOrRange, ASIdOrRange)
1094	#define sk_ASIdOrRange_num(sk) OPENSSL_sk_num(ossl_check_const_ASIdOrRange_sk_type(sk))
1095	#define sk_ASIdOrRange_value(sk, idx) ((ASIdOrRange *)OPENSSL_sk_value(ossl_check_const_ASIdOrRange_sk_type(sk), (idx)))
1096	#define sk_ASIdOrRange_new(cmp) ((STACK_OF(ASIdOrRange) *)OPENSSL_sk_new(ossl_check_ASIdOrRange_compfunc_type(cmp)))
1097	#define sk_ASIdOrRange_new_null() ((STACK_OF(ASIdOrRange) *)OPENSSL_sk_new_null())
1098	#define sk_ASIdOrRange_new_reserve(cmp, n) ((STACK_OF(ASIdOrRange) *)OPENSSL_sk_new_reserve(ossl_check_ASIdOrRange_compfunc_type(cmp), (n)))
1099	#define sk_ASIdOrRange_reserve(sk, n) OPENSSL_sk_reserve(ossl_check_ASIdOrRange_sk_type(sk), (n))
1100	#define sk_ASIdOrRange_free(sk) OPENSSL_sk_free(ossl_check_ASIdOrRange_sk_type(sk))
1101	#define sk_ASIdOrRange_zero(sk) OPENSSL_sk_zero(ossl_check_ASIdOrRange_sk_type(sk))
1102	#define sk_ASIdOrRange_delete(sk, i) ((ASIdOrRange *)OPENSSL_sk_delete(ossl_check_ASIdOrRange_sk_type(sk), (i)))
1103	#define sk_ASIdOrRange_delete_ptr(sk, ptr) ((ASIdOrRange *)OPENSSL_sk_delete_ptr(ossl_check_ASIdOrRange_sk_type(sk), ossl_check_ASIdOrRange_type(ptr)))
1104	#define sk_ASIdOrRange_push(sk, ptr) OPENSSL_sk_push(ossl_check_ASIdOrRange_sk_type(sk), ossl_check_ASIdOrRange_type(ptr))
1105	#define sk_ASIdOrRange_unshift(sk, ptr) OPENSSL_sk_unshift(ossl_check_ASIdOrRange_sk_type(sk), ossl_check_ASIdOrRange_type(ptr))
1106	#define sk_ASIdOrRange_pop(sk) ((ASIdOrRange *)OPENSSL_sk_pop(ossl_check_ASIdOrRange_sk_type(sk)))
1107	#define sk_ASIdOrRange_shift(sk) ((ASIdOrRange *)OPENSSL_sk_shift(ossl_check_ASIdOrRange_sk_type(sk)))
1108	#define sk_ASIdOrRange_pop_free(sk, freefunc) OPENSSL_sk_pop_free(ossl_check_ASIdOrRange_sk_type(sk),ossl_check_ASIdOrRange_freefunc_type(freefunc))
1109	#define sk_ASIdOrRange_insert(sk, ptr, idx) OPENSSL_sk_insert(ossl_check_ASIdOrRange_sk_type(sk), ossl_check_ASIdOrRange_type(ptr), (idx))
1110	#define sk_ASIdOrRange_set(sk, idx, ptr) ((ASIdOrRange *)OPENSSL_sk_set(ossl_check_ASIdOrRange_sk_type(sk), (idx), ossl_check_ASIdOrRange_type(ptr)))
1111	#define sk_ASIdOrRange_find(sk, ptr) OPENSSL_sk_find(ossl_check_ASIdOrRange_sk_type(sk), ossl_check_ASIdOrRange_type(ptr))
1112	#define sk_ASIdOrRange_find_ex(sk, ptr) OPENSSL_sk_find_ex(ossl_check_ASIdOrRange_sk_type(sk), ossl_check_ASIdOrRange_type(ptr))
1113	#define sk_ASIdOrRange_find_all(sk, ptr, pnum) OPENSSL_sk_find_all(ossl_check_ASIdOrRange_sk_type(sk), ossl_check_ASIdOrRange_type(ptr), pnum)
1114	#define sk_ASIdOrRange_sort(sk) OPENSSL_sk_sort(ossl_check_ASIdOrRange_sk_type(sk))
1115	#define sk_ASIdOrRange_is_sorted(sk) OPENSSL_sk_is_sorted(ossl_check_const_ASIdOrRange_sk_type(sk))
1116	#define sk_ASIdOrRange_dup(sk) ((STACK_OF(ASIdOrRange) *)OPENSSL_sk_dup(ossl_check_const_ASIdOrRange_sk_type(sk)))
1117	#define sk_ASIdOrRange_deep_copy(sk, copyfunc, freefunc) ((STACK_OF(ASIdOrRange) *)OPENSSL_sk_deep_copy(ossl_check_const_ASIdOrRange_sk_type(sk), ossl_check_ASIdOrRange_copyfunc_type(copyfunc), ossl_check_ASIdOrRange_freefunc_type(freefunc)))
1118	#define sk_ASIdOrRange_set_cmp_func(sk, cmp) ((sk_ASIdOrRange_compfunc)OPENSSL_sk_set_cmp_func(ossl_check_ASIdOrRange_sk_type(sk), ossl_check_ASIdOrRange_compfunc_type(cmp)))
1119
1120
1121	typedef STACK_OF(ASIdOrRange) ASIdOrRanges;
1122
1123	# define ASIdentifierChoice_inherit 0
1124	# define ASIdentifierChoice_asIdsOrRanges 1
1125
1126	typedef struct ASIdentifierChoice_st {
1127	int type;
1128	union {
1129	ASN1_NULL *inherit;
1130	ASIdOrRanges *asIdsOrRanges;
1131	} u;
1132	} ASIdentifierChoice;
1133
1134	typedef struct ASIdentifiers_st {
1135	ASIdentifierChoice asnum, rdi;
1136	} ASIdentifiers;
1137
1138	DECLARE_ASN1_FUNCTIONS(ASRange)
1139	DECLARE_ASN1_FUNCTIONS(ASIdOrRange)
1140	DECLARE_ASN1_FUNCTIONS(ASIdentifierChoice)
1141	DECLARE_ASN1_FUNCTIONS(ASIdentifiers)
1142
1143	typedef struct IPAddressRange_st {
1144	ASN1_BIT_STRING min, max;
1145	} IPAddressRange;
1146
1147	# define IPAddressOrRange_addressPrefix 0
1148	# define IPAddressOrRange_addressRange 1
1149
1150	typedef struct IPAddressOrRange_st {
1151	int type;
1152	union {
1153	ASN1_BIT_STRING *addressPrefix;
1154	IPAddressRange *addressRange;
1155	} u;
1156	} IPAddressOrRange;
1157
1158	SKM_DEFINE_STACK_OF_INTERNAL(IPAddressOrRange, IPAddressOrRange, IPAddressOrRange)
1159	#define sk_IPAddressOrRange_num(sk) OPENSSL_sk_num(ossl_check_const_IPAddressOrRange_sk_type(sk))
1160	#define sk_IPAddressOrRange_value(sk, idx) ((IPAddressOrRange *)OPENSSL_sk_value(ossl_check_const_IPAddressOrRange_sk_type(sk), (idx)))
1161	#define sk_IPAddressOrRange_new(cmp) ((STACK_OF(IPAddressOrRange) *)OPENSSL_sk_new(ossl_check_IPAddressOrRange_compfunc_type(cmp)))
1162	#define sk_IPAddressOrRange_new_null() ((STACK_OF(IPAddressOrRange) *)OPENSSL_sk_new_null())
1163	#define sk_IPAddressOrRange_new_reserve(cmp, n) ((STACK_OF(IPAddressOrRange) *)OPENSSL_sk_new_reserve(ossl_check_IPAddressOrRange_compfunc_type(cmp), (n)))
1164	#define sk_IPAddressOrRange_reserve(sk, n) OPENSSL_sk_reserve(ossl_check_IPAddressOrRange_sk_type(sk), (n))
1165	#define sk_IPAddressOrRange_free(sk) OPENSSL_sk_free(ossl_check_IPAddressOrRange_sk_type(sk))
1166	#define sk_IPAddressOrRange_zero(sk) OPENSSL_sk_zero(ossl_check_IPAddressOrRange_sk_type(sk))
1167	#define sk_IPAddressOrRange_delete(sk, i) ((IPAddressOrRange *)OPENSSL_sk_delete(ossl_check_IPAddressOrRange_sk_type(sk), (i)))
1168	#define sk_IPAddressOrRange_delete_ptr(sk, ptr) ((IPAddressOrRange *)OPENSSL_sk_delete_ptr(ossl_check_IPAddressOrRange_sk_type(sk), ossl_check_IPAddressOrRange_type(ptr)))
1169	#define sk_IPAddressOrRange_push(sk, ptr) OPENSSL_sk_push(ossl_check_IPAddressOrRange_sk_type(sk), ossl_check_IPAddressOrRange_type(ptr))
1170	#define sk_IPAddressOrRange_unshift(sk, ptr) OPENSSL_sk_unshift(ossl_check_IPAddressOrRange_sk_type(sk), ossl_check_IPAddressOrRange_type(ptr))
1171	#define sk_IPAddressOrRange_pop(sk) ((IPAddressOrRange *)OPENSSL_sk_pop(ossl_check_IPAddressOrRange_sk_type(sk)))
1172	#define sk_IPAddressOrRange_shift(sk) ((IPAddressOrRange *)OPENSSL_sk_shift(ossl_check_IPAddressOrRange_sk_type(sk)))
1173	#define sk_IPAddressOrRange_pop_free(sk, freefunc) OPENSSL_sk_pop_free(ossl_check_IPAddressOrRange_sk_type(sk),ossl_check_IPAddressOrRange_freefunc_type(freefunc))
1174	#define sk_IPAddressOrRange_insert(sk, ptr, idx) OPENSSL_sk_insert(ossl_check_IPAddressOrRange_sk_type(sk), ossl_check_IPAddressOrRange_type(ptr), (idx))
1175	#define sk_IPAddressOrRange_set(sk, idx, ptr) ((IPAddressOrRange *)OPENSSL_sk_set(ossl_check_IPAddressOrRange_sk_type(sk), (idx), ossl_check_IPAddressOrRange_type(ptr)))
1176	#define sk_IPAddressOrRange_find(sk, ptr) OPENSSL_sk_find(ossl_check_IPAddressOrRange_sk_type(sk), ossl_check_IPAddressOrRange_type(ptr))
1177	#define sk_IPAddressOrRange_find_ex(sk, ptr) OPENSSL_sk_find_ex(ossl_check_IPAddressOrRange_sk_type(sk), ossl_check_IPAddressOrRange_type(ptr))
1178	#define sk_IPAddressOrRange_find_all(sk, ptr, pnum) OPENSSL_sk_find_all(ossl_check_IPAddressOrRange_sk_type(sk), ossl_check_IPAddressOrRange_type(ptr), pnum)
1179	#define sk_IPAddressOrRange_sort(sk) OPENSSL_sk_sort(ossl_check_IPAddressOrRange_sk_type(sk))
1180	#define sk_IPAddressOrRange_is_sorted(sk) OPENSSL_sk_is_sorted(ossl_check_const_IPAddressOrRange_sk_type(sk))
1181	#define sk_IPAddressOrRange_dup(sk) ((STACK_OF(IPAddressOrRange) *)OPENSSL_sk_dup(ossl_check_const_IPAddressOrRange_sk_type(sk)))
1182	#define sk_IPAddressOrRange_deep_copy(sk, copyfunc, freefunc) ((STACK_OF(IPAddressOrRange) *)OPENSSL_sk_deep_copy(ossl_check_const_IPAddressOrRange_sk_type(sk), ossl_check_IPAddressOrRange_copyfunc_type(copyfunc), ossl_check_IPAddressOrRange_freefunc_type(freefunc)))
1183	#define sk_IPAddressOrRange_set_cmp_func(sk, cmp) ((sk_IPAddressOrRange_compfunc)OPENSSL_sk_set_cmp_func(ossl_check_IPAddressOrRange_sk_type(sk), ossl_check_IPAddressOrRange_compfunc_type(cmp)))
1184
1185
1186	typedef STACK_OF(IPAddressOrRange) IPAddressOrRanges;
1187
1188	# define IPAddressChoice_inherit 0
1189	# define IPAddressChoice_addressesOrRanges 1
1190
1191	typedef struct IPAddressChoice_st {
1192	int type;
1193	union {
1194	ASN1_NULL *inherit;
1195	IPAddressOrRanges *addressesOrRanges;
1196	} u;
1197	} IPAddressChoice;
1198
1199	typedef struct IPAddressFamily_st {
1200	ASN1_OCTET_STRING *addressFamily;
1201	IPAddressChoice *ipAddressChoice;
1202	} IPAddressFamily;
1203
1204	SKM_DEFINE_STACK_OF_INTERNAL(IPAddressFamily, IPAddressFamily, IPAddressFamily)
1205	#define sk_IPAddressFamily_num(sk) OPENSSL_sk_num(ossl_check_const_IPAddressFamily_sk_type(sk))
1206	#define sk_IPAddressFamily_value(sk, idx) ((IPAddressFamily *)OPENSSL_sk_value(ossl_check_const_IPAddressFamily_sk_type(sk), (idx)))
1207	#define sk_IPAddressFamily_new(cmp) ((STACK_OF(IPAddressFamily) *)OPENSSL_sk_new(ossl_check_IPAddressFamily_compfunc_type(cmp)))
1208	#define sk_IPAddressFamily_new_null() ((STACK_OF(IPAddressFamily) *)OPENSSL_sk_new_null())
1209	#define sk_IPAddressFamily_new_reserve(cmp, n) ((STACK_OF(IPAddressFamily) *)OPENSSL_sk_new_reserve(ossl_check_IPAddressFamily_compfunc_type(cmp), (n)))
1210	#define sk_IPAddressFamily_reserve(sk, n) OPENSSL_sk_reserve(ossl_check_IPAddressFamily_sk_type(sk), (n))
1211	#define sk_IPAddressFamily_free(sk) OPENSSL_sk_free(ossl_check_IPAddressFamily_sk_type(sk))
1212	#define sk_IPAddressFamily_zero(sk) OPENSSL_sk_zero(ossl_check_IPAddressFamily_sk_type(sk))
1213	#define sk_IPAddressFamily_delete(sk, i) ((IPAddressFamily *)OPENSSL_sk_delete(ossl_check_IPAddressFamily_sk_type(sk), (i)))
1214	#define sk_IPAddressFamily_delete_ptr(sk, ptr) ((IPAddressFamily *)OPENSSL_sk_delete_ptr(ossl_check_IPAddressFamily_sk_type(sk), ossl_check_IPAddressFamily_type(ptr)))
1215	#define sk_IPAddressFamily_push(sk, ptr) OPENSSL_sk_push(ossl_check_IPAddressFamily_sk_type(sk), ossl_check_IPAddressFamily_type(ptr))
1216	#define sk_IPAddressFamily_unshift(sk, ptr) OPENSSL_sk_unshift(ossl_check_IPAddressFamily_sk_type(sk), ossl_check_IPAddressFamily_type(ptr))
1217	#define sk_IPAddressFamily_pop(sk) ((IPAddressFamily *)OPENSSL_sk_pop(ossl_check_IPAddressFamily_sk_type(sk)))
1218	#define sk_IPAddressFamily_shift(sk) ((IPAddressFamily *)OPENSSL_sk_shift(ossl_check_IPAddressFamily_sk_type(sk)))
1219	#define sk_IPAddressFamily_pop_free(sk, freefunc) OPENSSL_sk_pop_free(ossl_check_IPAddressFamily_sk_type(sk),ossl_check_IPAddressFamily_freefunc_type(freefunc))
1220	#define sk_IPAddressFamily_insert(sk, ptr, idx) OPENSSL_sk_insert(ossl_check_IPAddressFamily_sk_type(sk), ossl_check_IPAddressFamily_type(ptr), (idx))
1221	#define sk_IPAddressFamily_set(sk, idx, ptr) ((IPAddressFamily *)OPENSSL_sk_set(ossl_check_IPAddressFamily_sk_type(sk), (idx), ossl_check_IPAddressFamily_type(ptr)))
1222	#define sk_IPAddressFamily_find(sk, ptr) OPENSSL_sk_find(ossl_check_IPAddressFamily_sk_type(sk), ossl_check_IPAddressFamily_type(ptr))
1223	#define sk_IPAddressFamily_find_ex(sk, ptr) OPENSSL_sk_find_ex(ossl_check_IPAddressFamily_sk_type(sk), ossl_check_IPAddressFamily_type(ptr))
1224	#define sk_IPAddressFamily_find_all(sk, ptr, pnum) OPENSSL_sk_find_all(ossl_check_IPAddressFamily_sk_type(sk), ossl_check_IPAddressFamily_type(ptr), pnum)
1225	#define sk_IPAddressFamily_sort(sk) OPENSSL_sk_sort(ossl_check_IPAddressFamily_sk_type(sk))
1226	#define sk_IPAddressFamily_is_sorted(sk) OPENSSL_sk_is_sorted(ossl_check_const_IPAddressFamily_sk_type(sk))
1227	#define sk_IPAddressFamily_dup(sk) ((STACK_OF(IPAddressFamily) *)OPENSSL_sk_dup(ossl_check_const_IPAddressFamily_sk_type(sk)))
1228	#define sk_IPAddressFamily_deep_copy(sk, copyfunc, freefunc) ((STACK_OF(IPAddressFamily) *)OPENSSL_sk_deep_copy(ossl_check_const_IPAddressFamily_sk_type(sk), ossl_check_IPAddressFamily_copyfunc_type(copyfunc), ossl_check_IPAddressFamily_freefunc_type(freefunc)))
1229	#define sk_IPAddressFamily_set_cmp_func(sk, cmp) ((sk_IPAddressFamily_compfunc)OPENSSL_sk_set_cmp_func(ossl_check_IPAddressFamily_sk_type(sk), ossl_check_IPAddressFamily_compfunc_type(cmp)))
1230
1231
1232
1233	typedef STACK_OF(IPAddressFamily) IPAddrBlocks;
1234
1235	DECLARE_ASN1_FUNCTIONS(IPAddressRange)
1236	DECLARE_ASN1_FUNCTIONS(IPAddressOrRange)
1237	DECLARE_ASN1_FUNCTIONS(IPAddressChoice)
1238	DECLARE_ASN1_FUNCTIONS(IPAddressFamily)
1239
1240	/*
1241	* API tag for elements of the ASIdentifer SEQUENCE.
1242	*/
1243	# define V3_ASID_ASNUM 0
1244	# define V3_ASID_RDI 1
1245
1246	/*
1247	* AFI values, assigned by IANA. It'd be nice to make the AFI
1248	* handling code totally generic, but there are too many little things
1249	* that would need to be defined for other address families for it to
1250	* be worth the trouble.
1251	*/
1252	# define IANA_AFI_IPV4 1
1253	# define IANA_AFI_IPV6 2
1254
1255	/*
1256	* Utilities to construct and extract values from RFC3779 extensions,
1257	* since some of the encodings (particularly for IP address prefixes
1258	* and ranges) are a bit tedious to work with directly.
1259	*/
1260	int X509v3_asid_add_inherit(ASIdentifiers asid, int* which);
1261	int X509v3_asid_add_id_or_range(ASIdentifiers asid, int* which,
1262	ASN1_INTEGER min, ASN1_INTEGER max);
1263	int X509v3_addr_add_inherit(IPAddrBlocks *addr,
1264	const unsigned afi, const unsigned *safi);
1265	int X509v3_addr_add_prefix(IPAddrBlocks *addr,
1266	const unsigned afi, const unsigned *safi,
1267	unsigned char a, const* int prefixlen);
1268	int X509v3_addr_add_range(IPAddrBlocks *addr,
1269	const unsigned afi, const unsigned *safi,
1270	unsigned char min, unsigned* char *max);
1271	unsigned X509v3_addr_get_afi(const IPAddressFamily *f);
1272	int X509v3_addr_get_range(IPAddressOrRange aor, const* unsigned afi,
1273	unsigned char min, unsigned* char *max,
1274	const int length);
1275
1276	/*
1277	* Canonical forms.
1278	*/
1279	int X509v3_asid_is_canonical(ASIdentifiers *asid);
1280	int X509v3_addr_is_canonical(IPAddrBlocks *addr);
1281	int X509v3_asid_canonize(ASIdentifiers *asid);
1282	int X509v3_addr_canonize(IPAddrBlocks *addr);
1283
1284	/*
1285	* Tests for inheritance and containment.
1286	*/
1287	int X509v3_asid_inherits(ASIdentifiers *asid);
1288	int X509v3_addr_inherits(IPAddrBlocks *addr);
1289	int X509v3_asid_subset(ASIdentifiers a, ASIdentifiers b);
1290	int X509v3_addr_subset(IPAddrBlocks a, IPAddrBlocks b);
1291
1292	/*
1293	* Check whether RFC 3779 extensions nest properly in chains.
1294	*/
1295	int X509v3_asid_validate_path(X509_STORE_CTX *);
1296	int X509v3_addr_validate_path(X509_STORE_CTX *);
1297	int X509v3_asid_validate_resource_set(STACK_OF(X509) *chain,
1298	ASIdentifiers *ext,
1299	int allow_inheritance);
1300	int X509v3_addr_validate_resource_set(STACK_OF(X509) *chain,
1301	IPAddrBlocks ext, int* allow_inheritance);
1302
1303	#endif /* OPENSSL_NO_RFC3779 */
1304
1305	SKM_DEFINE_STACK_OF_INTERNAL(ASN1_STRING, ASN1_STRING, ASN1_STRING)
1306	#define sk_ASN1_STRING_num(sk) OPENSSL_sk_num(ossl_check_const_ASN1_STRING_sk_type(sk))
1307	#define sk_ASN1_STRING_value(sk, idx) ((ASN1_STRING *)OPENSSL_sk_value(ossl_check_const_ASN1_STRING_sk_type(sk), (idx)))
1308	#define sk_ASN1_STRING_new(cmp) ((STACK_OF(ASN1_STRING) *)OPENSSL_sk_new(ossl_check_ASN1_STRING_compfunc_type(cmp)))
1309	#define sk_ASN1_STRING_new_null() ((STACK_OF(ASN1_STRING) *)OPENSSL_sk_new_null())
1310	#define sk_ASN1_STRING_new_reserve(cmp, n) ((STACK_OF(ASN1_STRING) *)OPENSSL_sk_new_reserve(ossl_check_ASN1_STRING_compfunc_type(cmp), (n)))
1311	#define sk_ASN1_STRING_reserve(sk, n) OPENSSL_sk_reserve(ossl_check_ASN1_STRING_sk_type(sk), (n))
1312	#define sk_ASN1_STRING_free(sk) OPENSSL_sk_free(ossl_check_ASN1_STRING_sk_type(sk))
1313	#define sk_ASN1_STRING_zero(sk) OPENSSL_sk_zero(ossl_check_ASN1_STRING_sk_type(sk))
1314	#define sk_ASN1_STRING_delete(sk, i) ((ASN1_STRING *)OPENSSL_sk_delete(ossl_check_ASN1_STRING_sk_type(sk), (i)))
1315	#define sk_ASN1_STRING_delete_ptr(sk, ptr) ((ASN1_STRING *)OPENSSL_sk_delete_ptr(ossl_check_ASN1_STRING_sk_type(sk), ossl_check_ASN1_STRING_type(ptr)))
1316	#define sk_ASN1_STRING_push(sk, ptr) OPENSSL_sk_push(ossl_check_ASN1_STRING_sk_type(sk), ossl_check_ASN1_STRING_type(ptr))
1317	#define sk_ASN1_STRING_unshift(sk, ptr) OPENSSL_sk_unshift(ossl_check_ASN1_STRING_sk_type(sk), ossl_check_ASN1_STRING_type(ptr))
1318	#define sk_ASN1_STRING_pop(sk) ((ASN1_STRING *)OPENSSL_sk_pop(ossl_check_ASN1_STRING_sk_type(sk)))
1319	#define sk_ASN1_STRING_shift(sk) ((ASN1_STRING *)OPENSSL_sk_shift(ossl_check_ASN1_STRING_sk_type(sk)))
1320	#define sk_ASN1_STRING_pop_free(sk, freefunc) OPENSSL_sk_pop_free(ossl_check_ASN1_STRING_sk_type(sk),ossl_check_ASN1_STRING_freefunc_type(freefunc))
1321	#define sk_ASN1_STRING_insert(sk, ptr, idx) OPENSSL_sk_insert(ossl_check_ASN1_STRING_sk_type(sk), ossl_check_ASN1_STRING_type(ptr), (idx))
1322	#define sk_ASN1_STRING_set(sk, idx, ptr) ((ASN1_STRING *)OPENSSL_sk_set(ossl_check_ASN1_STRING_sk_type(sk), (idx), ossl_check_ASN1_STRING_type(ptr)))
1323	#define sk_ASN1_STRING_find(sk, ptr) OPENSSL_sk_find(ossl_check_ASN1_STRING_sk_type(sk), ossl_check_ASN1_STRING_type(ptr))
1324	#define sk_ASN1_STRING_find_ex(sk, ptr) OPENSSL_sk_find_ex(ossl_check_ASN1_STRING_sk_type(sk), ossl_check_ASN1_STRING_type(ptr))
1325	#define sk_ASN1_STRING_find_all(sk, ptr, pnum) OPENSSL_sk_find_all(ossl_check_ASN1_STRING_sk_type(sk), ossl_check_ASN1_STRING_type(ptr), pnum)
1326	#define sk_ASN1_STRING_sort(sk) OPENSSL_sk_sort(ossl_check_ASN1_STRING_sk_type(sk))
1327	#define sk_ASN1_STRING_is_sorted(sk) OPENSSL_sk_is_sorted(ossl_check_const_ASN1_STRING_sk_type(sk))
1328	#define sk_ASN1_STRING_dup(sk) ((STACK_OF(ASN1_STRING) *)OPENSSL_sk_dup(ossl_check_const_ASN1_STRING_sk_type(sk)))
1329	#define sk_ASN1_STRING_deep_copy(sk, copyfunc, freefunc) ((STACK_OF(ASN1_STRING) *)OPENSSL_sk_deep_copy(ossl_check_const_ASN1_STRING_sk_type(sk), ossl_check_ASN1_STRING_copyfunc_type(copyfunc), ossl_check_ASN1_STRING_freefunc_type(freefunc)))
1330	#define sk_ASN1_STRING_set_cmp_func(sk, cmp) ((sk_ASN1_STRING_compfunc)OPENSSL_sk_set_cmp_func(ossl_check_ASN1_STRING_sk_type(sk), ossl_check_ASN1_STRING_compfunc_type(cmp)))
1331
1332
1333	/*
1334	* Admission Syntax
1335	*/
1336	typedef struct NamingAuthority_st NAMING_AUTHORITY;
1337	typedef struct ProfessionInfo_st PROFESSION_INFO;
1338	typedef struct Admissions_st ADMISSIONS;
1339	typedef struct AdmissionSyntax_st ADMISSION_SYNTAX;
1340	DECLARE_ASN1_FUNCTIONS(NAMING_AUTHORITY)
1341	DECLARE_ASN1_FUNCTIONS(PROFESSION_INFO)
1342	DECLARE_ASN1_FUNCTIONS(ADMISSIONS)
1343	DECLARE_ASN1_FUNCTIONS(ADMISSION_SYNTAX)
1344	SKM_DEFINE_STACK_OF_INTERNAL(PROFESSION_INFO, PROFESSION_INFO, PROFESSION_INFO)
1345	#define sk_PROFESSION_INFO_num(sk) OPENSSL_sk_num(ossl_check_const_PROFESSION_INFO_sk_type(sk))
1346	#define sk_PROFESSION_INFO_value(sk, idx) ((PROFESSION_INFO *)OPENSSL_sk_value(ossl_check_const_PROFESSION_INFO_sk_type(sk), (idx)))
1347	#define sk_PROFESSION_INFO_new(cmp) ((STACK_OF(PROFESSION_INFO) *)OPENSSL_sk_new(ossl_check_PROFESSION_INFO_compfunc_type(cmp)))
1348	#define sk_PROFESSION_INFO_new_null() ((STACK_OF(PROFESSION_INFO) *)OPENSSL_sk_new_null())
1349	#define sk_PROFESSION_INFO_new_reserve(cmp, n) ((STACK_OF(PROFESSION_INFO) *)OPENSSL_sk_new_reserve(ossl_check_PROFESSION_INFO_compfunc_type(cmp), (n)))
1350	#define sk_PROFESSION_INFO_reserve(sk, n) OPENSSL_sk_reserve(ossl_check_PROFESSION_INFO_sk_type(sk), (n))
1351	#define sk_PROFESSION_INFO_free(sk) OPENSSL_sk_free(ossl_check_PROFESSION_INFO_sk_type(sk))
1352	#define sk_PROFESSION_INFO_zero(sk) OPENSSL_sk_zero(ossl_check_PROFESSION_INFO_sk_type(sk))
1353	#define sk_PROFESSION_INFO_delete(sk, i) ((PROFESSION_INFO *)OPENSSL_sk_delete(ossl_check_PROFESSION_INFO_sk_type(sk), (i)))
1354	#define sk_PROFESSION_INFO_delete_ptr(sk, ptr) ((PROFESSION_INFO *)OPENSSL_sk_delete_ptr(ossl_check_PROFESSION_INFO_sk_type(sk), ossl_check_PROFESSION_INFO_type(ptr)))
1355	#define sk_PROFESSION_INFO_push(sk, ptr) OPENSSL_sk_push(ossl_check_PROFESSION_INFO_sk_type(sk), ossl_check_PROFESSION_INFO_type(ptr))
1356	#define sk_PROFESSION_INFO_unshift(sk, ptr) OPENSSL_sk_unshift(ossl_check_PROFESSION_INFO_sk_type(sk), ossl_check_PROFESSION_INFO_type(ptr))
1357	#define sk_PROFESSION_INFO_pop(sk) ((PROFESSION_INFO *)OPENSSL_sk_pop(ossl_check_PROFESSION_INFO_sk_type(sk)))
1358	#define sk_PROFESSION_INFO_shift(sk) ((PROFESSION_INFO *)OPENSSL_sk_shift(ossl_check_PROFESSION_INFO_sk_type(sk)))
1359	#define sk_PROFESSION_INFO_pop_free(sk, freefunc) OPENSSL_sk_pop_free(ossl_check_PROFESSION_INFO_sk_type(sk),ossl_check_PROFESSION_INFO_freefunc_type(freefunc))
1360	#define sk_PROFESSION_INFO_insert(sk, ptr, idx) OPENSSL_sk_insert(ossl_check_PROFESSION_INFO_sk_type(sk), ossl_check_PROFESSION_INFO_type(ptr), (idx))
1361	#define sk_PROFESSION_INFO_set(sk, idx, ptr) ((PROFESSION_INFO *)OPENSSL_sk_set(ossl_check_PROFESSION_INFO_sk_type(sk), (idx), ossl_check_PROFESSION_INFO_type(ptr)))
1362	#define sk_PROFESSION_INFO_find(sk, ptr) OPENSSL_sk_find(ossl_check_PROFESSION_INFO_sk_type(sk), ossl_check_PROFESSION_INFO_type(ptr))
1363	#define sk_PROFESSION_INFO_find_ex(sk, ptr) OPENSSL_sk_find_ex(ossl_check_PROFESSION_INFO_sk_type(sk), ossl_check_PROFESSION_INFO_type(ptr))
1364	#define sk_PROFESSION_INFO_find_all(sk, ptr, pnum) OPENSSL_sk_find_all(ossl_check_PROFESSION_INFO_sk_type(sk), ossl_check_PROFESSION_INFO_type(ptr), pnum)
1365	#define sk_PROFESSION_INFO_sort(sk) OPENSSL_sk_sort(ossl_check_PROFESSION_INFO_sk_type(sk))
1366	#define sk_PROFESSION_INFO_is_sorted(sk) OPENSSL_sk_is_sorted(ossl_check_const_PROFESSION_INFO_sk_type(sk))
1367	#define sk_PROFESSION_INFO_dup(sk) ((STACK_OF(PROFESSION_INFO) *)OPENSSL_sk_dup(ossl_check_const_PROFESSION_INFO_sk_type(sk)))
1368	#define sk_PROFESSION_INFO_deep_copy(sk, copyfunc, freefunc) ((STACK_OF(PROFESSION_INFO) *)OPENSSL_sk_deep_copy(ossl_check_const_PROFESSION_INFO_sk_type(sk), ossl_check_PROFESSION_INFO_copyfunc_type(copyfunc), ossl_check_PROFESSION_INFO_freefunc_type(freefunc)))
1369	#define sk_PROFESSION_INFO_set_cmp_func(sk, cmp) ((sk_PROFESSION_INFO_compfunc)OPENSSL_sk_set_cmp_func(ossl_check_PROFESSION_INFO_sk_type(sk), ossl_check_PROFESSION_INFO_compfunc_type(cmp)))
1370	SKM_DEFINE_STACK_OF_INTERNAL(ADMISSIONS, ADMISSIONS, ADMISSIONS)
1371	#define sk_ADMISSIONS_num(sk) OPENSSL_sk_num(ossl_check_const_ADMISSIONS_sk_type(sk))
1372	#define sk_ADMISSIONS_value(sk, idx) ((ADMISSIONS *)OPENSSL_sk_value(ossl_check_const_ADMISSIONS_sk_type(sk), (idx)))
1373	#define sk_ADMISSIONS_new(cmp) ((STACK_OF(ADMISSIONS) *)OPENSSL_sk_new(ossl_check_ADMISSIONS_compfunc_type(cmp)))
1374	#define sk_ADMISSIONS_new_null() ((STACK_OF(ADMISSIONS) *)OPENSSL_sk_new_null())
1375	#define sk_ADMISSIONS_new_reserve(cmp, n) ((STACK_OF(ADMISSIONS) *)OPENSSL_sk_new_reserve(ossl_check_ADMISSIONS_compfunc_type(cmp), (n)))
1376	#define sk_ADMISSIONS_reserve(sk, n) OPENSSL_sk_reserve(ossl_check_ADMISSIONS_sk_type(sk), (n))
1377	#define sk_ADMISSIONS_free(sk) OPENSSL_sk_free(ossl_check_ADMISSIONS_sk_type(sk))
1378	#define sk_ADMISSIONS_zero(sk) OPENSSL_sk_zero(ossl_check_ADMISSIONS_sk_type(sk))
1379	#define sk_ADMISSIONS_delete(sk, i) ((ADMISSIONS *)OPENSSL_sk_delete(ossl_check_ADMISSIONS_sk_type(sk), (i)))
1380	#define sk_ADMISSIONS_delete_ptr(sk, ptr) ((ADMISSIONS *)OPENSSL_sk_delete_ptr(ossl_check_ADMISSIONS_sk_type(sk), ossl_check_ADMISSIONS_type(ptr)))
1381	#define sk_ADMISSIONS_push(sk, ptr) OPENSSL_sk_push(ossl_check_ADMISSIONS_sk_type(sk), ossl_check_ADMISSIONS_type(ptr))
1382	#define sk_ADMISSIONS_unshift(sk, ptr) OPENSSL_sk_unshift(ossl_check_ADMISSIONS_sk_type(sk), ossl_check_ADMISSIONS_type(ptr))
1383	#define sk_ADMISSIONS_pop(sk) ((ADMISSIONS *)OPENSSL_sk_pop(ossl_check_ADMISSIONS_sk_type(sk)))
1384	#define sk_ADMISSIONS_shift(sk) ((ADMISSIONS *)OPENSSL_sk_shift(ossl_check_ADMISSIONS_sk_type(sk)))
1385	#define sk_ADMISSIONS_pop_free(sk, freefunc) OPENSSL_sk_pop_free(ossl_check_ADMISSIONS_sk_type(sk),ossl_check_ADMISSIONS_freefunc_type(freefunc))
1386	#define sk_ADMISSIONS_insert(sk, ptr, idx) OPENSSL_sk_insert(ossl_check_ADMISSIONS_sk_type(sk), ossl_check_ADMISSIONS_type(ptr), (idx))
1387	#define sk_ADMISSIONS_set(sk, idx, ptr) ((ADMISSIONS *)OPENSSL_sk_set(ossl_check_ADMISSIONS_sk_type(sk), (idx), ossl_check_ADMISSIONS_type(ptr)))
1388	#define sk_ADMISSIONS_find(sk, ptr) OPENSSL_sk_find(ossl_check_ADMISSIONS_sk_type(sk), ossl_check_ADMISSIONS_type(ptr))
1389	#define sk_ADMISSIONS_find_ex(sk, ptr) OPENSSL_sk_find_ex(ossl_check_ADMISSIONS_sk_type(sk), ossl_check_ADMISSIONS_type(ptr))
1390	#define sk_ADMISSIONS_find_all(sk, ptr, pnum) OPENSSL_sk_find_all(ossl_check_ADMISSIONS_sk_type(sk), ossl_check_ADMISSIONS_type(ptr), pnum)
1391	#define sk_ADMISSIONS_sort(sk) OPENSSL_sk_sort(ossl_check_ADMISSIONS_sk_type(sk))
1392	#define sk_ADMISSIONS_is_sorted(sk) OPENSSL_sk_is_sorted(ossl_check_const_ADMISSIONS_sk_type(sk))
1393	#define sk_ADMISSIONS_dup(sk) ((STACK_OF(ADMISSIONS) *)OPENSSL_sk_dup(ossl_check_const_ADMISSIONS_sk_type(sk)))
1394	#define sk_ADMISSIONS_deep_copy(sk, copyfunc, freefunc) ((STACK_OF(ADMISSIONS) *)OPENSSL_sk_deep_copy(ossl_check_const_ADMISSIONS_sk_type(sk), ossl_check_ADMISSIONS_copyfunc_type(copyfunc), ossl_check_ADMISSIONS_freefunc_type(freefunc)))
1395	#define sk_ADMISSIONS_set_cmp_func(sk, cmp) ((sk_ADMISSIONS_compfunc)OPENSSL_sk_set_cmp_func(ossl_check_ADMISSIONS_sk_type(sk), ossl_check_ADMISSIONS_compfunc_type(cmp)))
1396
1397	typedef STACK_OF(PROFESSION_INFO) PROFESSION_INFOS;
1398
1399	const ASN1_OBJECT *NAMING_AUTHORITY_get0_authorityId(
1400	const NAMING_AUTHORITY *n);
1401	const ASN1_IA5STRING *NAMING_AUTHORITY_get0_authorityURL(
1402	const NAMING_AUTHORITY *n);
1403	const ASN1_STRING *NAMING_AUTHORITY_get0_authorityText(
1404	const NAMING_AUTHORITY *n);
1405	void NAMING_AUTHORITY_set0_authorityId(NAMING_AUTHORITY *n,
1406	ASN1_OBJECT* namingAuthorityId);
1407	void NAMING_AUTHORITY_set0_authorityURL(NAMING_AUTHORITY *n,
1408	ASN1_IA5STRING* namingAuthorityUrl);
1409	void NAMING_AUTHORITY_set0_authorityText(NAMING_AUTHORITY *n,
1410	ASN1_STRING* namingAuthorityText);
1411
1412	const GENERAL_NAME *ADMISSION_SYNTAX_get0_admissionAuthority(
1413	const ADMISSION_SYNTAX *as);
1414	void ADMISSION_SYNTAX_set0_admissionAuthority(
1415	ADMISSION_SYNTAX as, GENERAL_NAME aa);
1416	const STACK_OF(ADMISSIONS) *ADMISSION_SYNTAX_get0_contentsOfAdmissions(
1417	const ADMISSION_SYNTAX *as);
1418	void ADMISSION_SYNTAX_set0_contentsOfAdmissions(
1419	ADMISSION_SYNTAX as, STACK_OF(ADMISSIONS) a);
1420	const GENERAL_NAME ADMISSIONS_get0_admissionAuthority(const* ADMISSIONS *a);
1421	void ADMISSIONS_set0_admissionAuthority(ADMISSIONS a, GENERAL_NAME aa);
1422	const NAMING_AUTHORITY ADMISSIONS_get0_namingAuthority(const* ADMISSIONS *a);
1423	void ADMISSIONS_set0_namingAuthority(ADMISSIONS a, NAMING_AUTHORITY na);
1424	const PROFESSION_INFOS ADMISSIONS_get0_professionInfos(const* ADMISSIONS *a);
1425	void ADMISSIONS_set0_professionInfos(ADMISSIONS a, PROFESSION_INFOS pi);
1426	const ASN1_OCTET_STRING *PROFESSION_INFO_get0_addProfessionInfo(
1427	const PROFESSION_INFO *pi);
1428	void PROFESSION_INFO_set0_addProfessionInfo(
1429	PROFESSION_INFO pi, ASN1_OCTET_STRING aos);
1430	const NAMING_AUTHORITY *PROFESSION_INFO_get0_namingAuthority(
1431	const PROFESSION_INFO *pi);
1432	void PROFESSION_INFO_set0_namingAuthority(
1433	PROFESSION_INFO pi, NAMING_AUTHORITY na);
1434	const STACK_OF(ASN1_STRING) *PROFESSION_INFO_get0_professionItems(
1435	const PROFESSION_INFO *pi);
1436	void PROFESSION_INFO_set0_professionItems(
1437	PROFESSION_INFO pi, STACK_OF(ASN1_STRING) as);
1438	const STACK_OF(ASN1_OBJECT) *PROFESSION_INFO_get0_professionOIDs(
1439	const PROFESSION_INFO *pi);
1440	void PROFESSION_INFO_set0_professionOIDs(
1441	PROFESSION_INFO pi, STACK_OF(ASN1_OBJECT) po);
1442	const ASN1_PRINTABLESTRING *PROFESSION_INFO_get0_registrationNumber(
1443	const PROFESSION_INFO *pi);
1444	void PROFESSION_INFO_set0_registrationNumber(
1445	PROFESSION_INFO pi, ASN1_PRINTABLESTRING rn);
1446
1447	# ifdef __cplusplus
1448	}
1449	# endif
1450	#endif
1451

source code of include/openssl/x509v3.h