diff options
| author | Laurent Bercot <ska-skaware@skarnet.org> | 2016-11-30 16:00:29 +0000 |
|---|---|---|
| committer | Laurent Bercot <ska-skaware@skarnet.org> | 2016-11-30 16:00:29 +0000 |
| commit | cc08be523a2a647a999dcf82dcce9dee62b4162c (patch) | |
| tree | 235f40d2d5431e383491e74a21d34073cf6ed712 /src/include | |
| parent | 3f78080496cddb11cbe9040efce694e44cfac7fe (diff) | |
| download | s6-networking-cc08be523a2a647a999dcf82dcce9dee62b4162c.tar.xz | |
sbearssl: allow DER-encoded certificates in TA directory
Diffstat (limited to 'src/include')
| -rw-r--r-- | src/include/s6-networking/sbearssl.h | 7 |
1 files changed, 7 insertions, 0 deletions
diff --git a/src/include/s6-networking/sbearssl.h b/src/include/s6-networking/sbearssl.h index d8f9021..dba1742 100644 --- a/src/include/s6-networking/sbearssl.h +++ b/src/include/s6-networking/sbearssl.h @@ -19,10 +19,15 @@ * the filesystem. */ +#define SBEARSSL_MAXSKEYFILESIZE 8192 +#define SBEARSSL_MAXCERTFILESIZE 8192 + /* Utility functions */ extern int sbearssl_isder (unsigned char const *, size_t) ; +extern int sbearssl_x509_minimal_set_tai (br_x509_minimal_context *, tai_t const *) ; +#define sbearssl_x509_minimal_set_tain(ctx, a) sbearssl_x509_minimal_set_tai(ctx, tain_secp(a)) /* Certificates (x509-encoded) */ @@ -38,6 +43,7 @@ extern int sbearssl_cert_from (sbearssl_cert *, br_x509_certificate const *, str extern void sbearssl_cert_to (sbearssl_cert const *, br_x509_certificate *, char *) ; extern int sbearssl_cert_readfile (char const *, genalloc *, stralloc *) ; +extern int sbearssl_cert_readbigpem (char const *, genalloc *, stralloc *) ; /* Private keys */ @@ -179,6 +185,7 @@ extern int sbearssl_ta_from (sbearssl_ta *, br_x509_trust_anchor const *, strall extern void sbearssl_ta_to (sbearssl_ta const *, br_x509_trust_anchor *, char *) ; extern int sbearssl_ta_cert (sbearssl_ta *, sbearssl_cert const *, char const *, stralloc *) ; +extern int sbearssl_ta_certs (genalloc *, stralloc *, sbearssl_cert const *, size_t, char const *) ; extern int sbearssl_ta_readfile (char const *, genalloc *, stralloc *) ; extern int sbearssl_ta_readdir (char const *, genalloc *, stralloc *) ; |