Commit 6f4d71ff authored by Dr. Stephen Henson's avatar Dr. Stephen Henson
Browse files

make X509_VERIFY_PARAM opaque 



Reviewed-by: default avatarRich Salz <rsalz@openssl.org>
parent 169692d7

crypto/x509/x509_lcl.h

+18 −0
Original line number Diff line number Diff line
@@ -57,6 +57,24 @@ 
 *

 */



/*

 * This structure holds all parameters associated with a verify operation by

 * including an X509_VERIFY_PARAM structure in related structures the

 * parameters used can be customized

 */



struct X509_VERIFY_PARAM_st {

    char *name;

    time_t check_time;          /* Time to use */

    unsigned long inh_flags;    /* Inheritance flags */

    unsigned long flags;        /* Various verify flags */

    int purpose;                /* purpose to check untrusted certificates */

    int trust;                  /* trust setting to check */

    int depth;                  /* Verify depth */

    STACK_OF(ASN1_OBJECT) *policies; /* Permissible policies */

    X509_VERIFY_PARAM_ID *id;   /* opaque ID data */

};



/* internal only structure to hold additional X509_VERIFY_PARAM data */



struct X509_VERIFY_PARAM_ID_st {

include/openssl/x509_vfy.h

+1 −18
Original line number Diff line number Diff line
@@ -145,24 +145,7 @@ typedef struct x509_lookup_method_st { 
} X509_LOOKUP_METHOD;



typedef struct X509_VERIFY_PARAM_ID_st X509_VERIFY_PARAM_ID;



/*

 * This structure hold all parameters associated with a verify operation by

 * including an X509_VERIFY_PARAM structure in related structures the

 * parameters used can be customized

 */



typedef struct X509_VERIFY_PARAM_st {

    char *name;

    time_t check_time;          /* Time to use */

    unsigned long inh_flags;    /* Inheritance flags */

    unsigned long flags;        /* Various verify flags */

    int purpose;                /* purpose to check untrusted certificates */

    int trust;                  /* trust setting to check */

    int depth;                  /* Verify depth */

    STACK_OF(ASN1_OBJECT) *policies; /* Permissible policies */

    X509_VERIFY_PARAM_ID *id;   /* opaque ID data */

} X509_VERIFY_PARAM;

typedef struct X509_VERIFY_PARAM_st X509_VERIFY_PARAM;



DECLARE_STACK_OF(X509_VERIFY_PARAM)