| pkcs11.h (3.2.10) | | pkcs11.h (3.2.11) | |
| | | | |
| skipping to change at line 97 | | skipping to change at line 97 | |
| void gnutls_pkcs11_obj_set_pin_function(gnutls_pkcs11_obj_t obj, | | void gnutls_pkcs11_obj_set_pin_function(gnutls_pkcs11_obj_t obj, | |
| gnutls_pin_callback_t fn, | | gnutls_pin_callback_t fn, | |
| void *userdata); | | void *userdata); | |
| | | | |
| #define GNUTLS_PKCS11_OBJ_FLAG_LOGIN (1<<0) /* force login in the token
for the operation */ | | #define GNUTLS_PKCS11_OBJ_FLAG_LOGIN (1<<0) /* force login in the token
for the operation */ | |
| #define GNUTLS_PKCS11_OBJ_FLAG_MARK_TRUSTED (1<<1) /* object marked as
trusted */ | | #define GNUTLS_PKCS11_OBJ_FLAG_MARK_TRUSTED (1<<1) /* object marked as
trusted */ | |
| #define GNUTLS_PKCS11_OBJ_FLAG_MARK_SENSITIVE (1<<2) /* object marked as
sensitive (unexportable) */ | | #define GNUTLS_PKCS11_OBJ_FLAG_MARK_SENSITIVE (1<<2) /* object marked as
sensitive (unexportable) */ | |
| #define GNUTLS_PKCS11_OBJ_FLAG_LOGIN_SO (1<<3) /* force login as a security
officer in the token for the operation */ | | #define GNUTLS_PKCS11_OBJ_FLAG_LOGIN_SO (1<<3) /* force login as a security
officer in the token for the operation */ | |
| #define GNUTLS_PKCS11_OBJ_FLAG_MARK_PRIVATE (1<<4) /* marked as private
(requires PIN to access) */ | | #define GNUTLS_PKCS11_OBJ_FLAG_MARK_PRIVATE (1<<4) /* marked as private
(requires PIN to access) */ | |
| #define GNUTLS_PKCS11_OBJ_FLAG_MARK_NOT_PRIVATE (1<<5) /* marked as not pri
vate */ | | #define GNUTLS_PKCS11_OBJ_FLAG_MARK_NOT_PRIVATE (1<<5) /* marked as not pri
vate */ | |
|
| #define GNUTLS_PKCS11_OBJ_FLAG_RETRIEVE_ANY (1<<6) /* No need for the certi | | #define GNUTLS_PKCS11_OBJ_FLAG_RETRIEVE_ANY (1<<6) /* No need for the objec | |
| ficate to be a trusted one */ | | t to be a trusted one */ | |
| #define GNUTLS_PKCS11_OBJ_FLAG_RETRIEVE_TRUSTED (1<<7) /* The certificate m | | #define GNUTLS_PKCS11_OBJ_FLAG_RETRIEVE_TRUSTED (1<<7) /* The object must b | |
| ust be marked as trusted | | e marked as trusted | |
| * in gnutls_pkcs11_crt_is_known() it implies GNUTLS_PKCS11_OBJ_FLAG_
RETRIEVE_COMPARE */ | | * in gnutls_pkcs11_crt_is_known() it implies GNUTLS_PKCS11_OBJ_FLAG_
RETRIEVE_COMPARE */ | |
|
| #define GNUTLS_PKCS11_OBJ_FLAG_RETRIEVE_DISTRUSTED (1<<8) /* The certificat | | #define GNUTLS_PKCS11_OBJ_FLAG_RETRIEVE_DISTRUSTED (1<<8) /* The object mus | |
| e must be marked as distrusted */ | | t be marked as distrusted */ | |
| #define GNUTLS_PKCS11_OBJ_FLAG_COMPARE (1<<9) /* The certificate must be fu | | #define GNUTLS_PKCS11_OBJ_FLAG_COMPARE (1<<9) /* The object must be fully c | |
| lly compared */ | | ompared */ | |
| | | #define GNUTLS_PKCS11_OBJ_FLAG_PRESENT_IN_TRUSTED_MODULE (1<<10) /* The obj | |
| | | ect must be present in a marked as trusted module */ | |
| | | | |
| /** | | /** | |
| * gnutls_pkcs11_url_type_t: | | * gnutls_pkcs11_url_type_t: | |
| * @GNUTLS_PKCS11_URL_GENERIC: A generic-purpose URL. | | * @GNUTLS_PKCS11_URL_GENERIC: A generic-purpose URL. | |
| * @GNUTLS_PKCS11_URL_LIB: A URL that specifies the library used as well. | | * @GNUTLS_PKCS11_URL_LIB: A URL that specifies the library used as well. | |
| * @GNUTLS_PKCS11_URL_LIB_VERSION: A URL that specifies the library and its
version. | | * @GNUTLS_PKCS11_URL_LIB_VERSION: A URL that specifies the library and its
version. | |
| * | | * | |
| * Enumeration of different URL extraction flags. | | * Enumeration of different URL extraction flags. | |
| */ | | */ | |
| typedef enum { | | typedef enum { | |
| | | | |
| skipping to change at line 217 | | skipping to change at line 218 | |
| GNUTLS_PKCS11_OBJ_ATTR_CRT_TRUSTED, /* certificates marked as tr
usted */ | | GNUTLS_PKCS11_OBJ_ATTR_CRT_TRUSTED, /* certificates marked as tr
usted */ | |
| GNUTLS_PKCS11_OBJ_ATTR_CRT_WITH_PRIVKEY, /* certificates with
corresponding private key */ | | GNUTLS_PKCS11_OBJ_ATTR_CRT_WITH_PRIVKEY, /* certificates with
corresponding private key */ | |
| GNUTLS_PKCS11_OBJ_ATTR_PUBKEY, /* public keys */ | | GNUTLS_PKCS11_OBJ_ATTR_PUBKEY, /* public keys */ | |
| GNUTLS_PKCS11_OBJ_ATTR_PRIVKEY, /* private keys */ | | GNUTLS_PKCS11_OBJ_ATTR_PRIVKEY, /* private keys */ | |
| GNUTLS_PKCS11_OBJ_ATTR_ALL, /* everything! */ | | GNUTLS_PKCS11_OBJ_ATTR_ALL, /* everything! */ | |
| GNUTLS_PKCS11_OBJ_ATTR_CRT_TRUSTED_CA, /* CAs */ | | GNUTLS_PKCS11_OBJ_ATTR_CRT_TRUSTED_CA, /* CAs */ | |
| } gnutls_pkcs11_obj_attr_t; | | } gnutls_pkcs11_obj_attr_t; | |
| | | | |
| /** | | /** | |
| * gnutls_pkcs11_token_info_t: | | * gnutls_pkcs11_token_info_t: | |
|
| * @GNUTLS_PKCS11_TOKEN_LABEL: The token's label | | * @GNUTLS_PKCS11_TOKEN_LABEL: The token's label (string) | |
| * @GNUTLS_PKCS11_TOKEN_SERIAL: The token's serial number | | * @GNUTLS_PKCS11_TOKEN_SERIAL: The token's serial number (string) | |
| * @GNUTLS_PKCS11_TOKEN_MANUFACTURER: The token's manufacturer | | * @GNUTLS_PKCS11_TOKEN_MANUFACTURER: The token's manufacturer (string) | |
| * @GNUTLS_PKCS11_TOKEN_MODEL: The token's model | | * @GNUTLS_PKCS11_TOKEN_MODEL: The token's model (string) | |
| | | * @GNUTLS_PKCS11_TOKEN_TRUSTED: Whether the token is marked as trusted in | |
| | | p11-kit (unsigned int) | |
| * | | * | |
| * Enumeration of types for retrieving token information. | | * Enumeration of types for retrieving token information. | |
| */ | | */ | |
| typedef enum { | | typedef enum { | |
| GNUTLS_PKCS11_TOKEN_LABEL, | | GNUTLS_PKCS11_TOKEN_LABEL, | |
| GNUTLS_PKCS11_TOKEN_SERIAL, | | GNUTLS_PKCS11_TOKEN_SERIAL, | |
| GNUTLS_PKCS11_TOKEN_MANUFACTURER, | | GNUTLS_PKCS11_TOKEN_MANUFACTURER, | |
|
| GNUTLS_PKCS11_TOKEN_MODEL | | GNUTLS_PKCS11_TOKEN_MODEL, | |
| } gnutls_pkcs11_token_info_t; | | } gnutls_pkcs11_token_info_t; | |
| | | | |
| /** | | /** | |
| * gnutls_pkcs11_obj_type_t: | | * gnutls_pkcs11_obj_type_t: | |
| * @GNUTLS_PKCS11_OBJ_UNKNOWN: Unknown PKCS11 object. | | * @GNUTLS_PKCS11_OBJ_UNKNOWN: Unknown PKCS11 object. | |
| * @GNUTLS_PKCS11_OBJ_X509_CRT: X.509 certificate. | | * @GNUTLS_PKCS11_OBJ_X509_CRT: X.509 certificate. | |
| * @GNUTLS_PKCS11_OBJ_PUBKEY: Public key. | | * @GNUTLS_PKCS11_OBJ_PUBKEY: Public key. | |
| * @GNUTLS_PKCS11_OBJ_PRIVKEY: Private key. | | * @GNUTLS_PKCS11_OBJ_PRIVKEY: Private key. | |
| * @GNUTLS_PKCS11_OBJ_SECRET_KEY: Secret key. | | * @GNUTLS_PKCS11_OBJ_SECRET_KEY: Secret key. | |
| * @GNUTLS_PKCS11_OBJ_DATA: Data object. | | * @GNUTLS_PKCS11_OBJ_DATA: Data object. | |
| | | | |
| skipping to change at line 270 | | skipping to change at line 272 | |
| int gnutls_pkcs11_token_set_pin(const char *token_url, const char *oldpin,
const char *newpin, unsigned int flags /*gnutls_pin_flag_t */); | | int gnutls_pkcs11_token_set_pin(const char *token_url, const char *oldpin,
const char *newpin, unsigned int flags /*gnutls_pin_flag_t */); | |
| | | | |
| int gnutls_pkcs11_token_get_url(unsigned int seq, | | int gnutls_pkcs11_token_get_url(unsigned int seq, | |
| gnutls_pkcs11_url_type_t detailed, | | gnutls_pkcs11_url_type_t detailed, | |
| char **url); | | char **url); | |
| int gnutls_pkcs11_token_get_info(const char *url, | | int gnutls_pkcs11_token_get_info(const char *url, | |
| gnutls_pkcs11_token_info_t ttype, | | gnutls_pkcs11_token_info_t ttype, | |
| void *output, size_t * output_size); | | void *output, size_t * output_size); | |
| | | | |
| #define GNUTLS_PKCS11_TOKEN_HW 1 | | #define GNUTLS_PKCS11_TOKEN_HW 1 | |
|
| | | #define GNUTLS_PKCS11_TOKEN_TRUSTED (1<<1) /* p11-kit trusted */ | |
| int gnutls_pkcs11_token_get_flags(const char *url, unsigned int *flags); | | int gnutls_pkcs11_token_get_flags(const char *url, unsigned int *flags); | |
| | | | |
| int gnutls_pkcs11_obj_list_import_url(gnutls_pkcs11_obj_t * p_list, | | int gnutls_pkcs11_obj_list_import_url(gnutls_pkcs11_obj_t * p_list, | |
| unsigned int *const n_list, | | unsigned int *const n_list, | |
| const char *url, | | const char *url, | |
| gnutls_pkcs11_obj_attr_t | | gnutls_pkcs11_obj_attr_t | |
| attrs, unsigned int flags | | attrs, unsigned int flags | |
| /* GNUTLS_PKCS11_OBJ_FLAG_* */ | | /* GNUTLS_PKCS11_OBJ_FLAG_* */ | |
| ); | | ); | |
| | | | |
| | | | |
End of changes. 5 change blocks. |
| 13 lines changed or deleted | | 18 lines changed or added | |
|