Reece Wilson
033f7e2453
[+] Aurora::Crypto::X509::GenerateCertificate [*] Fix lazily copied gen1 RSA code [+] Aurora::Crypto::ECC::EECCCurve::eCurveSECP256R1 [+] Aurora::Crypto::ECC::EECCCurve::eCurveSECP256K1 [+] Aurora::Crypto::ECC::EECCCurve::eCurveSECP384R1 [+] Aurora::Crypto::ECC::EECCCurve::eCurveSECP521R1 [*] Unfuck ECC interop [*] Tls pinning: use mbedtls_ssl_conf_verify for tls1.3 (when mbedtls is in a better state)
72 lines
2.2 KiB
C++
72 lines
2.2 KiB
C++
/***
|
|
Copyright (C) 2021 J Reece Wilson (a/k/a "Reece"). All rights reserved.
|
|
|
|
File: X509.hpp
|
|
Date: 2021-6-11
|
|
Author: Reece
|
|
***/
|
|
#pragma once
|
|
|
|
#include "ESignatureAlgorithm.hpp"
|
|
#include "EExtendedUsage.hpp"
|
|
|
|
namespace Aurora::Crypto::X509
|
|
{
|
|
// yes, these structure completely disregards the principles of the x509 structure and the rationales behind certain extensions
|
|
// however, this is not intended to be a grandiose TLS stack
|
|
//
|
|
// PKSC#1 and #8, and x509 extensions (ie: rfc5280 key-ids, v3 exts) are not supported in our deps
|
|
// we had to reimplement them ourselves >:(
|
|
// lets worry about the more important issues
|
|
|
|
struct CertName
|
|
{
|
|
AU_COPY_MOVE_DEF(CertName);
|
|
AuString commonName; // Tbs
|
|
|
|
AuString department; // Tbs
|
|
AuString organization; // Tbs
|
|
AuString state; // Tbs
|
|
AuString countryCode; // Tbs
|
|
|
|
AuString name; // Tbs
|
|
AuString email; // Tbs
|
|
AuString title; // Tbs
|
|
};
|
|
|
|
struct DecodedCertificate
|
|
{
|
|
AU_COPY_MOVE_DEF(DecodedCertificate);
|
|
// TODO:
|
|
//SignatureAlgorithm signature;
|
|
struct Issuer : CertName
|
|
{
|
|
AU_COPY_MOVE_DEF(Issuer);
|
|
Memory::ByteBuffer id;
|
|
} issuer;
|
|
struct Subject : CertName
|
|
{
|
|
AU_COPY_MOVE_DEF(Subject);
|
|
Memory::ByteBuffer id;
|
|
} subject;
|
|
struct Vaildity // Tbs
|
|
{ // Tbs
|
|
AU_COPY_MOVE_DEF(Vaildity);
|
|
AuUInt issued; // Tbs
|
|
AuUInt expire; // Tbs
|
|
} validity; // Tbs
|
|
AuList<AuUInt8> serialNumber; // Tbs
|
|
AuList<AuUInt8> algorithmOid; // Tbs
|
|
// TODO: usage // extension
|
|
AuList<AuString> AIAs;
|
|
// TODO: AuString CRL;
|
|
// TODO: AuList<String> subjectNames;
|
|
Hashing::EHashType digest;
|
|
AuList<EExtendedUsage> usage;
|
|
};
|
|
|
|
AUKN_SYM bool Decode(const Certificate &der, DecodedCertificate &out);
|
|
AUKN_SYM bool Validate(const Certificate &der, const Certificate &parentDer);
|
|
}
|
|
|
|
#include "GenerateCertificate.hpp" |