/* * Copyright (c) 2004 Apple Computer, Inc. All Rights Reserved. * * @APPLE_LICENSE_HEADER_START@ * * This file contains Original Code and/or Modifications of Original Code * as defined in and that are subject to the Apple Public Source License * Version 2.0 (the 'License'). You may not use this file except in * compliance with the License. Please obtain a copy of the License at * http://www.opensource.apple.com/apsl/ and read it before using this * file. * * The Original Code and all software distributed under the License are * distributed on an 'AS IS' basis, WITHOUT WARRANTY OF ANY KIND, EITHER * EXPRESS OR IMPLIED, AND APPLE HEREBY DISCLAIMS ALL SUCH WARRANTIES, * INCLUDING WITHOUT LIMITATION, ANY WARRANTIES OF MERCHANTABILITY, * FITNESS FOR A PARTICULAR PURPOSE, QUIET ENJOYMENT OR NON-INFRINGEMENT. * Please see the License for the specific language governing rights and * limitations under the License. * * @APPLE_LICENSE_HEADER_END@ */ /* * tpOcspCertVfy.h - OCSP cert verification routines */ #ifndef _TP_OCSP_CERT_VFY_H_ #define _TP_OCSP_CERT_VFY_H_ #include "TPCertInfo.h" #include "tpCrlVerify.h" #include <security_asn1/SecNssCoder.h> #include <security_ocspd/ocspResponse.h> #ifdef __cplusplus> extern "C" { #endif /* * Verify an OCSP response in the form of a pre-decoded OCSPResponse. Does * signature verification as well as cert chain verification. Sometimes we can * verify if we don't know the issuer; sometimes we can. */ typedef enum { ORS_Unknown, // unable to verify one way or another ORS_Good, // known to be good ORS_Bad // known to be bad } OcspRespStatus; OcspRespStatus tpVerifyOcspResp( TPVerifyContext &vfyCtx, SecNssCoder &coder, TPCertInfo *issuer, // issuer of the related cert, may be issuer of // reply OCSPResponse &ocspResp, CSSM_RETURN &cssmErr); // possible per-cert error #ifdef __cplusplus } #endif #endif /* _TP_OCSP_CERT_VFY_H_ */