mirror of
https://github.com/xcat2/xNBA.git
synced 2026-03-26 00:03:28 +00:00
bdb69d587e
The Cryptographic Message Syntax (PKCS#7) provides a format for encapsulating digital signatures of arbitrary binary blobs. A signature can be generated using openssl cms -sign -in <file to sign> -binary -noattr \ -signer <signer>.crt -inkey <signer>.key -certfile <CA>.crt \ -outform DER -out <signature> Signed-off-by: Michael Brown <mcb30@ipxe.org>
51 lines
1.1 KiB
C
51 lines
1.1 KiB
C
#ifndef _IPXE_CMS_H
|
|
#define _IPXE_CMS_H
|
|
|
|
/** @file
|
|
*
|
|
* Cryptographic Message Syntax (PKCS #7)
|
|
*
|
|
*/
|
|
|
|
FILE_LICENCE ( GPL2_OR_LATER );
|
|
|
|
#include <time.h>
|
|
#include <ipxe/asn1.h>
|
|
#include <ipxe/crypto.h>
|
|
#include <ipxe/x509.h>
|
|
#include <ipxe/uaccess.h>
|
|
|
|
/** CMS signer information */
|
|
struct cms_signer_info {
|
|
/** Issuer name */
|
|
struct asn1_cursor issuer;
|
|
/** Serial number */
|
|
struct asn1_cursor serial;
|
|
/** Digest algorithm */
|
|
struct digest_algorithm *digest;
|
|
/** Public-key algorithm */
|
|
struct pubkey_algorithm *pubkey;
|
|
/** Signature */
|
|
const void *signature;
|
|
/** Length of signature */
|
|
size_t signature_len;
|
|
};
|
|
|
|
/** A CMS signature */
|
|
struct cms_signature {
|
|
/** Raw certificate list */
|
|
struct asn1_cursor certificates;
|
|
/** Signer information
|
|
*
|
|
* We currently use only the first signer information block.
|
|
*/
|
|
struct cms_signer_info info;
|
|
};
|
|
|
|
extern int cms_parse ( struct cms_signature *sig, const void *data,
|
|
size_t len );
|
|
extern int cms_verify ( struct cms_signature *sig, userptr_t data, size_t len,
|
|
const char *name, time_t time, struct x509_root *root );
|
|
|
|
#endif /* _IPXE_CMS_H */
|