]> WPIA git - cassiopeia.git/blob - src/X509.h
add: Include support for signing based on a SPKAC request
[cassiopeia.git] / src / X509.h
1 #pragma once
2
3 #include <memory>
4 #include <vector>
5
6 #include <openssl/ssl.h>
7
8 #include "database.h"
9
10 class X509Req {
11 private:
12     std::shared_ptr<EVP_PKEY> pk;
13     std::shared_ptr<X509_REQ> req;
14     std::shared_ptr<NETSCAPE_SPKI> spki;
15     X509Req( X509_REQ* csr );
16     X509Req( std::string spkac );
17 public:
18     static std::shared_ptr<X509Req> parse( std::string filename );
19     static std::shared_ptr<X509Req> parseSPKAC( std::string filename );
20     int verify();
21     std::shared_ptr<EVP_PKEY> getPkey();
22 };
23
24 class X509Cert {
25 private:
26     std::shared_ptr<X509> target;
27 public:
28     X509Cert();
29     void setIssuerNameFrom( std::shared_ptr<X509> ca );
30     void setPubkeyFrom( std::shared_ptr<X509Req> r );
31     void setSerialNumber( int num );
32     void setExtensions( std::shared_ptr<X509> caCert, std::vector<std::shared_ptr<SAN>>& sans );
33     void setTimes( uint32_t before, uint32_t after );
34     std::shared_ptr<SignedCertificate> sign( std::shared_ptr<EVP_PKEY> caKey );
35 };