Home | History | Annotate | Download | only in openssl
      1 /* Copyright (C) 1995-1998 Eric Young (eay (at) cryptsoft.com)
      2  * All rights reserved.
      3  *
      4  * This package is an SSL implementation written
      5  * by Eric Young (eay (at) cryptsoft.com).
      6  * The implementation was written so as to conform with Netscapes SSL.
      7  *
      8  * This library is free for commercial and non-commercial use as long as
      9  * the following conditions are aheared to.  The following conditions
     10  * apply to all code found in this distribution, be it the RC4, RSA,
     11  * lhash, DES, etc., code; not just the SSL code.  The SSL documentation
     12  * included with this distribution is covered by the same copyright terms
     13  * except that the holder is Tim Hudson (tjh (at) cryptsoft.com).
     14  *
     15  * Copyright remains Eric Young's, and as such any Copyright notices in
     16  * the code are not to be removed.
     17  * If this package is used in a product, Eric Young should be given attribution
     18  * as the author of the parts of the library used.
     19  * This can be in the form of a textual message at program startup or
     20  * in documentation (online or textual) provided with the package.
     21  *
     22  * Redistribution and use in source and binary forms, with or without
     23  * modification, are permitted provided that the following conditions
     24  * are met:
     25  * 1. Redistributions of source code must retain the copyright
     26  *    notice, this list of conditions and the following disclaimer.
     27  * 2. Redistributions in binary form must reproduce the above copyright
     28  *    notice, this list of conditions and the following disclaimer in the
     29  *    documentation and/or other materials provided with the distribution.
     30  * 3. All advertising materials mentioning features or use of this software
     31  *    must display the following acknowledgement:
     32  *    "This product includes cryptographic software written by
     33  *     Eric Young (eay (at) cryptsoft.com)"
     34  *    The word 'cryptographic' can be left out if the rouines from the library
     35  *    being used are not cryptographic related :-).
     36  * 4. If you include any Windows specific code (or a derivative thereof) from
     37  *    the apps directory (application code) you must include an acknowledgement:
     38  *    "This product includes software written by Tim Hudson (tjh (at) cryptsoft.com)"
     39  *
     40  * THIS SOFTWARE IS PROVIDED BY ERIC YOUNG ``AS IS'' AND
     41  * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
     42  * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
     43  * ARE DISCLAIMED.  IN NO EVENT SHALL THE AUTHOR OR CONTRIBUTORS BE LIABLE
     44  * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
     45  * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
     46  * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
     47  * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
     48  * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
     49  * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
     50  * SUCH DAMAGE.
     51  *
     52  * The licence and distribution terms for any publically available version or
     53  * derivative of this code cannot be changed.  i.e. this code cannot simply be
     54  * copied and put under another distribution licence
     55  * [including the GNU Public Licence.]
     56  */
     57 
     58 #ifndef HEADER_ASN1_H
     59 #define HEADER_ASN1_H
     60 
     61 #include <openssl/base.h>
     62 
     63 #include <time.h>
     64 
     65 #include <openssl/bio.h>
     66 #include <openssl/stack.h>
     67 
     68 #include <openssl/bn.h>
     69 
     70 #ifdef  __cplusplus
     71 extern "C" {
     72 #endif
     73 
     74 
     75 /* Legacy ASN.1 library.
     76  *
     77  * This header is part of OpenSSL's ASN.1 implementation. It is retained for
     78  * compatibility but otherwise underdocumented and not actively maintained. Use
     79  * the new |CBS| and |CBB| library in <openssl/bytestring.h> instead. */
     80 
     81 
     82 #define V_ASN1_UNIVERSAL		0x00
     83 #define	V_ASN1_APPLICATION		0x40
     84 #define V_ASN1_CONTEXT_SPECIFIC		0x80
     85 #define V_ASN1_PRIVATE			0xc0
     86 
     87 #define V_ASN1_CONSTRUCTED		0x20
     88 #define V_ASN1_PRIMITIVE_TAG		0x1f
     89 
     90 #define V_ASN1_APP_CHOOSE		-2	/* let the recipient choose */
     91 #define V_ASN1_OTHER			-3	/* used in ASN1_TYPE */
     92 #define V_ASN1_ANY			-4	/* used in ASN1 template code */
     93 
     94 #define V_ASN1_NEG			0x100	/* negative flag */
     95 /* No supported universal tags may exceed this value, to avoid ambiguity with
     96  * V_ASN1_NEG. */
     97 #define V_ASN1_MAX_UNIVERSAL		0xff
     98 
     99 #define V_ASN1_UNDEF			-1
    100 #define V_ASN1_EOC			0
    101 #define V_ASN1_BOOLEAN			1	/**/
    102 #define V_ASN1_INTEGER			2
    103 #define V_ASN1_NEG_INTEGER		(2 | V_ASN1_NEG)
    104 #define V_ASN1_BIT_STRING		3
    105 #define V_ASN1_OCTET_STRING		4
    106 #define V_ASN1_NULL			5
    107 #define V_ASN1_OBJECT			6
    108 #define V_ASN1_OBJECT_DESCRIPTOR	7
    109 #define V_ASN1_EXTERNAL			8
    110 #define V_ASN1_REAL			9
    111 #define V_ASN1_ENUMERATED		10
    112 #define V_ASN1_NEG_ENUMERATED		(10 | V_ASN1_NEG)
    113 #define V_ASN1_UTF8STRING		12
    114 #define V_ASN1_SEQUENCE			16
    115 #define V_ASN1_SET			17
    116 #define V_ASN1_NUMERICSTRING		18	/**/
    117 #define V_ASN1_PRINTABLESTRING		19
    118 #define V_ASN1_T61STRING		20
    119 #define V_ASN1_TELETEXSTRING		20	/* alias */
    120 #define V_ASN1_VIDEOTEXSTRING		21	/**/
    121 #define V_ASN1_IA5STRING		22
    122 #define V_ASN1_UTCTIME			23
    123 #define V_ASN1_GENERALIZEDTIME		24	/**/
    124 #define V_ASN1_GRAPHICSTRING		25	/**/
    125 #define V_ASN1_ISO64STRING		26	/**/
    126 #define V_ASN1_VISIBLESTRING		26	/* alias */
    127 #define V_ASN1_GENERALSTRING		27	/**/
    128 #define V_ASN1_UNIVERSALSTRING		28	/**/
    129 #define V_ASN1_BMPSTRING		30
    130 
    131 /* For use with d2i_ASN1_type_bytes() */
    132 #define B_ASN1_NUMERICSTRING	0x0001
    133 #define B_ASN1_PRINTABLESTRING	0x0002
    134 #define B_ASN1_T61STRING	0x0004
    135 #define B_ASN1_TELETEXSTRING	0x0004
    136 #define B_ASN1_VIDEOTEXSTRING	0x0008
    137 #define B_ASN1_IA5STRING	0x0010
    138 #define B_ASN1_GRAPHICSTRING	0x0020
    139 #define B_ASN1_ISO64STRING	0x0040
    140 #define B_ASN1_VISIBLESTRING	0x0040
    141 #define B_ASN1_GENERALSTRING	0x0080
    142 #define B_ASN1_UNIVERSALSTRING	0x0100
    143 #define B_ASN1_OCTET_STRING	0x0200
    144 #define B_ASN1_BIT_STRING	0x0400
    145 #define B_ASN1_BMPSTRING	0x0800
    146 #define B_ASN1_UNKNOWN		0x1000
    147 #define B_ASN1_UTF8STRING	0x2000
    148 #define B_ASN1_UTCTIME		0x4000
    149 #define B_ASN1_GENERALIZEDTIME	0x8000
    150 #define B_ASN1_SEQUENCE		0x10000
    151 
    152 /* For use with ASN1_mbstring_copy() */
    153 #define MBSTRING_FLAG		0x1000
    154 #define MBSTRING_UTF8		(MBSTRING_FLAG)
    155 /* |MBSTRING_ASC| refers to Latin-1, not ASCII. It is used with TeletexString
    156  * which, in turn, is treated as Latin-1 rather than T.61 by OpenSSL and most
    157  * other software. */
    158 #define MBSTRING_ASC		(MBSTRING_FLAG|1)
    159 #define MBSTRING_BMP		(MBSTRING_FLAG|2)
    160 #define MBSTRING_UNIV		(MBSTRING_FLAG|4)
    161 
    162 #define DECLARE_ASN1_SET_OF(type) /* filled in by mkstack.pl */
    163 #define IMPLEMENT_ASN1_SET_OF(type) /* nothing, no longer needed */
    164 
    165 /* These are used internally in the ASN1_OBJECT to keep track of
    166  * whether the names and data need to be free()ed */
    167 #define ASN1_OBJECT_FLAG_DYNAMIC	 0x01	/* internal use */
    168 #define ASN1_OBJECT_FLAG_DYNAMIC_STRINGS 0x04	/* internal use */
    169 #define ASN1_OBJECT_FLAG_DYNAMIC_DATA 	 0x08	/* internal use */
    170 struct asn1_object_st
    171 	{
    172 	const char *sn,*ln;
    173 	int nid;
    174 	int length;
    175 	const unsigned char *data;	/* data remains const after init */
    176 	int flags;	/* Should we free this one */
    177 	};
    178 
    179 DEFINE_STACK_OF(ASN1_OBJECT)
    180 
    181 #define ASN1_STRING_FLAG_BITS_LEFT 0x08 /* Set if 0x07 has bits left value */
    182 /* This indicates that the ASN1_STRING is not a real value but just a place
    183  * holder for the location where indefinite length constructed data should
    184  * be inserted in the memory buffer
    185  */
    186 #define ASN1_STRING_FLAG_NDEF 0x010
    187 
    188 /* This flag is used by ASN1 code to indicate an ASN1_STRING is an MSTRING
    189  * type.
    190  */
    191 #define ASN1_STRING_FLAG_MSTRING 0x040
    192 /* This is the base type that holds just about everything :-) */
    193 struct asn1_string_st
    194 	{
    195 	int length;
    196 	int type;
    197 	unsigned char *data;
    198 	/* The value of the following field depends on the type being
    199 	 * held.  It is mostly being used for BIT_STRING so if the
    200 	 * input data has a non-zero 'unused bits' value, it will be
    201 	 * handled correctly */
    202 	long flags;
    203 	};
    204 
    205 /* ASN1_ENCODING structure: this is used to save the received
    206  * encoding of an ASN1 type. This is useful to get round
    207  * problems with invalid encodings which can break signatures.
    208  */
    209 
    210 typedef struct ASN1_ENCODING_st
    211 	{
    212 	unsigned char *enc;	/* DER encoding */
    213 	long len;		/* Length of encoding */
    214 	int modified;		/* set to 1 if 'enc' is invalid */
    215 	/* alias_only is zero if |enc| owns the buffer that it points to
    216 	 * (although |enc| may still be NULL). If one, |enc| points into a
    217 	 * buffer that is owned elsewhere. */
    218 	unsigned alias_only:1;
    219 	/* alias_only_on_next_parse is one iff the next parsing operation
    220 	 * should avoid taking a copy of the input and rather set
    221 	 * |alias_only|. */
    222 	unsigned alias_only_on_next_parse:1;
    223 	} ASN1_ENCODING;
    224 
    225 #define STABLE_FLAGS_MALLOC	0x01
    226 #define STABLE_NO_MASK		0x02
    227 #define DIRSTRING_TYPE	\
    228  (B_ASN1_PRINTABLESTRING|B_ASN1_T61STRING|B_ASN1_BMPSTRING|B_ASN1_UTF8STRING)
    229 #define PKCS9STRING_TYPE (DIRSTRING_TYPE|B_ASN1_IA5STRING)
    230 
    231 typedef struct asn1_string_table_st {
    232 	int nid;
    233 	long minsize;
    234 	long maxsize;
    235 	unsigned long mask;
    236 	unsigned long flags;
    237 } ASN1_STRING_TABLE;
    238 
    239 /* size limits: this stuff is taken straight from RFC2459 */
    240 
    241 #define ub_name				32768
    242 #define ub_common_name			64
    243 #define ub_locality_name		128
    244 #define ub_state_name			128
    245 #define ub_organization_name		64
    246 #define ub_organization_unit_name	64
    247 #define ub_title			64
    248 #define ub_email_address		128
    249 
    250 /* Declarations for template structures: for full definitions
    251  * see asn1t.h
    252  */
    253 typedef struct ASN1_TEMPLATE_st ASN1_TEMPLATE;
    254 typedef struct ASN1_TLC_st ASN1_TLC;
    255 /* This is just an opaque pointer */
    256 typedef struct ASN1_VALUE_st ASN1_VALUE;
    257 
    258 /* Declare ASN1 functions: the implement macro in in asn1t.h */
    259 
    260 #define DECLARE_ASN1_FUNCTIONS(type) DECLARE_ASN1_FUNCTIONS_name(type, type)
    261 
    262 #define DECLARE_ASN1_ALLOC_FUNCTIONS(type) \
    263 	DECLARE_ASN1_ALLOC_FUNCTIONS_name(type, type)
    264 
    265 #define DECLARE_ASN1_FUNCTIONS_name(type, name) \
    266 	DECLARE_ASN1_ALLOC_FUNCTIONS_name(type, name) \
    267 	DECLARE_ASN1_ENCODE_FUNCTIONS(type, name, name)
    268 
    269 #define DECLARE_ASN1_FUNCTIONS_fname(type, itname, name) \
    270 	DECLARE_ASN1_ALLOC_FUNCTIONS_name(type, name) \
    271 	DECLARE_ASN1_ENCODE_FUNCTIONS(type, itname, name)
    272 
    273 #define	DECLARE_ASN1_ENCODE_FUNCTIONS(type, itname, name) \
    274 	OPENSSL_EXPORT type *d2i_##name(type **a, const unsigned char **in, long len); \
    275 	OPENSSL_EXPORT int i2d_##name(type *a, unsigned char **out); \
    276 	DECLARE_ASN1_ITEM(itname)
    277 
    278 #define	DECLARE_ASN1_ENCODE_FUNCTIONS_const(type, name) \
    279 	OPENSSL_EXPORT type *d2i_##name(type **a, const unsigned char **in, long len); \
    280 	OPENSSL_EXPORT int i2d_##name(const type *a, unsigned char **out); \
    281 	DECLARE_ASN1_ITEM(name)
    282 
    283 #define	DECLARE_ASN1_NDEF_FUNCTION(name) \
    284 	OPENSSL_EXPORT int i2d_##name##_NDEF(name *a, unsigned char **out);
    285 
    286 #define DECLARE_ASN1_FUNCTIONS_const(name) \
    287 	DECLARE_ASN1_ALLOC_FUNCTIONS(name) \
    288 	DECLARE_ASN1_ENCODE_FUNCTIONS_const(name, name)
    289 
    290 #define DECLARE_ASN1_ALLOC_FUNCTIONS_name(type, name) \
    291 	OPENSSL_EXPORT type *name##_new(void); \
    292 	OPENSSL_EXPORT void name##_free(type *a);
    293 
    294 #define DECLARE_ASN1_PRINT_FUNCTION(stname) \
    295 	DECLARE_ASN1_PRINT_FUNCTION_fname(stname, stname)
    296 
    297 #define DECLARE_ASN1_PRINT_FUNCTION_fname(stname, fname) \
    298 	OPENSSL_EXPORT int fname##_print_ctx(BIO *out, stname *x, int indent, \
    299 					 const ASN1_PCTX *pctx);
    300 
    301 typedef void *d2i_of_void(void **, const unsigned char **, long);
    302 typedef int i2d_of_void(const void *, unsigned char **);
    303 
    304 /* The following macros and typedefs allow an ASN1_ITEM
    305  * to be embedded in a structure and referenced. Since
    306  * the ASN1_ITEM pointers need to be globally accessible
    307  * (possibly from shared libraries) they may exist in
    308  * different forms. On platforms that support it the
    309  * ASN1_ITEM structure itself will be globally exported.
    310  * Other platforms will export a function that returns
    311  * an ASN1_ITEM pointer.
    312  *
    313  * To handle both cases transparently the macros below
    314  * should be used instead of hard coding an ASN1_ITEM
    315  * pointer in a structure.
    316  *
    317  * The structure will look like this:
    318  *
    319  * typedef struct SOMETHING_st {
    320  *      ...
    321  *      ASN1_ITEM_EXP *iptr;
    322  *      ...
    323  * } SOMETHING;
    324  *
    325  * It would be initialised as e.g.:
    326  *
    327  * SOMETHING somevar = {...,ASN1_ITEM_ref(X509),...};
    328  *
    329  * and the actual pointer extracted with:
    330  *
    331  * const ASN1_ITEM *it = ASN1_ITEM_ptr(somevar.iptr);
    332  *
    333  * Finally an ASN1_ITEM pointer can be extracted from an
    334  * appropriate reference with: ASN1_ITEM_rptr(X509). This
    335  * would be used when a function takes an ASN1_ITEM * argument.
    336  *
    337  */
    338 
    339 /* ASN1_ITEM pointer exported type */
    340 typedef const ASN1_ITEM ASN1_ITEM_EXP;
    341 
    342 /* Macro to obtain ASN1_ITEM pointer from exported type */
    343 #define ASN1_ITEM_ptr(iptr) (iptr)
    344 
    345 /* Macro to include ASN1_ITEM pointer from base type */
    346 #define ASN1_ITEM_ref(iptr) (&(iptr##_it))
    347 
    348 #define ASN1_ITEM_rptr(ref) (&(ref##_it))
    349 
    350 #define DECLARE_ASN1_ITEM(name) \
    351 	extern OPENSSL_EXPORT const ASN1_ITEM name##_it;
    352 
    353 /* Parameters used by ASN1_STRING_print_ex() */
    354 
    355 /* These determine which characters to escape:
    356  * RFC2253 special characters, control characters and
    357  * MSB set characters
    358  */
    359 
    360 #define ASN1_STRFLGS_ESC_2253		1
    361 #define ASN1_STRFLGS_ESC_CTRL		2
    362 #define ASN1_STRFLGS_ESC_MSB		4
    363 
    364 
    365 /* This flag determines how we do escaping: normally
    366  * RC2253 backslash only, set this to use backslash and
    367  * quote.
    368  */
    369 
    370 #define ASN1_STRFLGS_ESC_QUOTE		8
    371 
    372 
    373 /* These three flags are internal use only. */
    374 
    375 /* Character is a valid PrintableString character */
    376 #define CHARTYPE_PRINTABLESTRING	0x10
    377 /* Character needs escaping if it is the first character */
    378 #define CHARTYPE_FIRST_ESC_2253		0x20
    379 /* Character needs escaping if it is the last character */
    380 #define CHARTYPE_LAST_ESC_2253		0x40
    381 
    382 /* NB the internal flags are safely reused below by flags
    383  * handled at the top level.
    384  */
    385 
    386 /* If this is set we convert all character strings
    387  * to UTF8 first
    388  */
    389 
    390 #define ASN1_STRFLGS_UTF8_CONVERT	0x10
    391 
    392 /* If this is set we don't attempt to interpret content:
    393  * just assume all strings are 1 byte per character. This
    394  * will produce some pretty odd looking output!
    395  */
    396 
    397 #define ASN1_STRFLGS_IGNORE_TYPE	0x20
    398 
    399 /* If this is set we include the string type in the output */
    400 #define ASN1_STRFLGS_SHOW_TYPE		0x40
    401 
    402 /* This determines which strings to display and which to
    403  * 'dump' (hex dump of content octets or DER encoding). We can
    404  * only dump non character strings or everything. If we
    405  * don't dump 'unknown' they are interpreted as character
    406  * strings with 1 octet per character and are subject to
    407  * the usual escaping options.
    408  */
    409 
    410 #define ASN1_STRFLGS_DUMP_ALL		0x80
    411 #define ASN1_STRFLGS_DUMP_UNKNOWN	0x100
    412 
    413 /* These determine what 'dumping' does, we can dump the
    414  * content octets or the DER encoding: both use the
    415  * RFC2253 #XXXXX notation.
    416  */
    417 
    418 #define ASN1_STRFLGS_DUMP_DER		0x200
    419 
    420 /* All the string flags consistent with RFC2253,
    421  * escaping control characters isn't essential in
    422  * RFC2253 but it is advisable anyway.
    423  */
    424 
    425 #define ASN1_STRFLGS_RFC2253	(ASN1_STRFLGS_ESC_2253 | \
    426 				ASN1_STRFLGS_ESC_CTRL | \
    427 				ASN1_STRFLGS_ESC_MSB | \
    428 				ASN1_STRFLGS_UTF8_CONVERT | \
    429 				ASN1_STRFLGS_DUMP_UNKNOWN | \
    430 				ASN1_STRFLGS_DUMP_DER)
    431 
    432 DEFINE_STACK_OF(ASN1_INTEGER)
    433 DECLARE_ASN1_SET_OF(ASN1_INTEGER)
    434 
    435 struct asn1_type_st
    436 	{
    437 	int type;
    438 	union	{
    439 		char *ptr;
    440 		ASN1_BOOLEAN		boolean;
    441 		ASN1_STRING *		asn1_string;
    442 		ASN1_OBJECT *		object;
    443 		ASN1_INTEGER *		integer;
    444 		ASN1_ENUMERATED *	enumerated;
    445 		ASN1_BIT_STRING *	bit_string;
    446 		ASN1_OCTET_STRING *	octet_string;
    447 		ASN1_PRINTABLESTRING *	printablestring;
    448 		ASN1_T61STRING *	t61string;
    449 		ASN1_IA5STRING *	ia5string;
    450 		ASN1_GENERALSTRING *	generalstring;
    451 		ASN1_BMPSTRING *	bmpstring;
    452 		ASN1_UNIVERSALSTRING *	universalstring;
    453 		ASN1_UTCTIME *		utctime;
    454 		ASN1_GENERALIZEDTIME *	generalizedtime;
    455 		ASN1_VISIBLESTRING *	visiblestring;
    456 		ASN1_UTF8STRING *	utf8string;
    457 		/* set and sequence are left complete and still
    458 		 * contain the set or sequence bytes */
    459 		ASN1_STRING *		set;
    460 		ASN1_STRING *		sequence;
    461 		ASN1_VALUE *		asn1_value;
    462 		} value;
    463     };
    464 
    465 DEFINE_STACK_OF(ASN1_TYPE)
    466 DECLARE_ASN1_SET_OF(ASN1_TYPE)
    467 
    468 typedef STACK_OF(ASN1_TYPE) ASN1_SEQUENCE_ANY;
    469 
    470 DECLARE_ASN1_ENCODE_FUNCTIONS_const(ASN1_SEQUENCE_ANY, ASN1_SEQUENCE_ANY)
    471 DECLARE_ASN1_ENCODE_FUNCTIONS_const(ASN1_SEQUENCE_ANY, ASN1_SET_ANY)
    472 
    473 struct X509_algor_st
    474        {
    475        ASN1_OBJECT *algorithm;
    476        ASN1_TYPE *parameter;
    477        } /* X509_ALGOR */;
    478 
    479 DECLARE_ASN1_FUNCTIONS(X509_ALGOR)
    480 
    481 /* This is used to contain a list of bit names */
    482 typedef struct BIT_STRING_BITNAME_st {
    483 	int bitnum;
    484 	const char *lname;
    485 	const char *sname;
    486 } BIT_STRING_BITNAME;
    487 
    488 
    489 #define M_ASN1_STRING_length(x)	((x)->length)
    490 #define M_ASN1_STRING_length_set(x, n)	((x)->length = (n))
    491 #define M_ASN1_STRING_type(x)	((x)->type)
    492 #define M_ASN1_STRING_data(x)	((x)->data)
    493 
    494 /* Macros for string operations */
    495 #define M_ASN1_BIT_STRING_new()	(ASN1_BIT_STRING *)\
    496 		ASN1_STRING_type_new(V_ASN1_BIT_STRING)
    497 #define M_ASN1_BIT_STRING_free(a)	ASN1_STRING_free((ASN1_STRING *)a)
    498 #define M_ASN1_BIT_STRING_dup(a) (ASN1_BIT_STRING *)\
    499 		ASN1_STRING_dup((const ASN1_STRING *)a)
    500 #define M_ASN1_BIT_STRING_cmp(a,b) ASN1_STRING_cmp(\
    501 		(const ASN1_STRING *)a,(const ASN1_STRING *)b)
    502 #define M_ASN1_BIT_STRING_set(a,b,c) ASN1_STRING_set((ASN1_STRING *)a,b,c)
    503 
    504 #define M_ASN1_INTEGER_new()	(ASN1_INTEGER *)\
    505 		ASN1_STRING_type_new(V_ASN1_INTEGER)
    506 #define M_ASN1_INTEGER_free(a)		ASN1_STRING_free((ASN1_STRING *)a)
    507 #define M_ASN1_INTEGER_dup(a) (ASN1_INTEGER *)\
    508 		ASN1_STRING_dup((const ASN1_STRING *)a)
    509 #define M_ASN1_INTEGER_cmp(a,b)	ASN1_STRING_cmp(\
    510 		(const ASN1_STRING *)a,(const ASN1_STRING *)b)
    511 
    512 #define M_ASN1_ENUMERATED_new()	(ASN1_ENUMERATED *)\
    513 		ASN1_STRING_type_new(V_ASN1_ENUMERATED)
    514 #define M_ASN1_ENUMERATED_free(a)	ASN1_STRING_free((ASN1_STRING *)a)
    515 #define M_ASN1_ENUMERATED_dup(a) (ASN1_ENUMERATED *)\
    516 		ASN1_STRING_dup((const ASN1_STRING *)a)
    517 #define M_ASN1_ENUMERATED_cmp(a,b)	ASN1_STRING_cmp(\
    518 		(const ASN1_STRING *)a,(const ASN1_STRING *)b)
    519 
    520 #define M_ASN1_OCTET_STRING_new()	(ASN1_OCTET_STRING *)\
    521 		ASN1_STRING_type_new(V_ASN1_OCTET_STRING)
    522 #define M_ASN1_OCTET_STRING_free(a)	ASN1_STRING_free((ASN1_STRING *)a)
    523 #define M_ASN1_OCTET_STRING_dup(a) (ASN1_OCTET_STRING *)\
    524 		ASN1_STRING_dup((const ASN1_STRING *)a)
    525 #define M_ASN1_OCTET_STRING_cmp(a,b) ASN1_STRING_cmp(\
    526 		(const ASN1_STRING *)a,(const ASN1_STRING *)b)
    527 #define M_ASN1_OCTET_STRING_set(a,b,c)	ASN1_STRING_set((ASN1_STRING *)a,b,c)
    528 #define M_ASN1_OCTET_STRING_print(a,b)	ASN1_STRING_print(a,(ASN1_STRING *)b)
    529 
    530 #define B_ASN1_TIME \
    531 			B_ASN1_UTCTIME | \
    532 			B_ASN1_GENERALIZEDTIME
    533 
    534 #define B_ASN1_PRINTABLE \
    535 			B_ASN1_NUMERICSTRING| \
    536 			B_ASN1_PRINTABLESTRING| \
    537 			B_ASN1_T61STRING| \
    538 			B_ASN1_IA5STRING| \
    539 			B_ASN1_BIT_STRING| \
    540 			B_ASN1_UNIVERSALSTRING|\
    541 			B_ASN1_BMPSTRING|\
    542 			B_ASN1_UTF8STRING|\
    543 			B_ASN1_SEQUENCE|\
    544 			B_ASN1_UNKNOWN
    545 
    546 #define B_ASN1_DIRECTORYSTRING \
    547 			B_ASN1_PRINTABLESTRING| \
    548 			B_ASN1_TELETEXSTRING|\
    549 			B_ASN1_BMPSTRING|\
    550 			B_ASN1_UNIVERSALSTRING|\
    551 			B_ASN1_UTF8STRING
    552 
    553 #define B_ASN1_DISPLAYTEXT \
    554 			B_ASN1_IA5STRING| \
    555 			B_ASN1_VISIBLESTRING| \
    556 			B_ASN1_BMPSTRING|\
    557 			B_ASN1_UTF8STRING
    558 
    559 #define M_ASN1_PRINTABLE_new()	ASN1_STRING_type_new(V_ASN1_T61STRING)
    560 #define M_ASN1_PRINTABLE_free(a)	ASN1_STRING_free((ASN1_STRING *)a)
    561 
    562 #define M_DIRECTORYSTRING_new() ASN1_STRING_type_new(V_ASN1_PRINTABLESTRING)
    563 #define M_DIRECTORYSTRING_free(a)	ASN1_STRING_free((ASN1_STRING *)a)
    564 
    565 #define M_DISPLAYTEXT_new() ASN1_STRING_type_new(V_ASN1_VISIBLESTRING)
    566 #define M_DISPLAYTEXT_free(a) ASN1_STRING_free((ASN1_STRING *)a)
    567 
    568 #define M_ASN1_PRINTABLESTRING_new() (ASN1_PRINTABLESTRING *)\
    569 		ASN1_STRING_type_new(V_ASN1_PRINTABLESTRING)
    570 #define M_ASN1_PRINTABLESTRING_free(a)	ASN1_STRING_free((ASN1_STRING *)a)
    571 
    572 #define M_ASN1_T61STRING_new()	(ASN1_T61STRING *)\
    573 		ASN1_STRING_type_new(V_ASN1_T61STRING)
    574 #define M_ASN1_T61STRING_free(a)	ASN1_STRING_free((ASN1_STRING *)a)
    575 
    576 #define M_ASN1_IA5STRING_new()	(ASN1_IA5STRING *)\
    577 		ASN1_STRING_type_new(V_ASN1_IA5STRING)
    578 #define M_ASN1_IA5STRING_free(a)	ASN1_STRING_free((ASN1_STRING *)a)
    579 #define M_ASN1_IA5STRING_dup(a)	\
    580 		(ASN1_IA5STRING *)ASN1_STRING_dup((const ASN1_STRING *)a)
    581 
    582 #define M_ASN1_UTCTIME_new()	(ASN1_UTCTIME *)\
    583 		ASN1_STRING_type_new(V_ASN1_UTCTIME)
    584 #define M_ASN1_UTCTIME_free(a)	ASN1_STRING_free((ASN1_STRING *)a)
    585 #define M_ASN1_UTCTIME_dup(a) (ASN1_UTCTIME *)\
    586 		ASN1_STRING_dup((const ASN1_STRING *)a)
    587 
    588 #define M_ASN1_GENERALIZEDTIME_new()	(ASN1_GENERALIZEDTIME *)\
    589 		ASN1_STRING_type_new(V_ASN1_GENERALIZEDTIME)
    590 #define M_ASN1_GENERALIZEDTIME_free(a)	ASN1_STRING_free((ASN1_STRING *)a)
    591 #define M_ASN1_GENERALIZEDTIME_dup(a) (ASN1_GENERALIZEDTIME *)ASN1_STRING_dup(\
    592 	(const ASN1_STRING *)a)
    593 
    594 #define M_ASN1_TIME_new()	(ASN1_TIME *)\
    595 		ASN1_STRING_type_new(V_ASN1_UTCTIME)
    596 #define M_ASN1_TIME_free(a)	ASN1_STRING_free((ASN1_STRING *)a)
    597 #define M_ASN1_TIME_dup(a) (ASN1_TIME *)\
    598 	ASN1_STRING_dup((const ASN1_STRING *)a)
    599 
    600 #define M_ASN1_GENERALSTRING_new()	(ASN1_GENERALSTRING *)\
    601 		ASN1_STRING_type_new(V_ASN1_GENERALSTRING)
    602 #define M_ASN1_GENERALSTRING_free(a)	ASN1_STRING_free((ASN1_STRING *)a)
    603 
    604 #define M_ASN1_UNIVERSALSTRING_new()	(ASN1_UNIVERSALSTRING *)\
    605 		ASN1_STRING_type_new(V_ASN1_UNIVERSALSTRING)
    606 #define M_ASN1_UNIVERSALSTRING_free(a)	ASN1_STRING_free((ASN1_STRING *)a)
    607 
    608 #define M_ASN1_BMPSTRING_new()	(ASN1_BMPSTRING *)\
    609 		ASN1_STRING_type_new(V_ASN1_BMPSTRING)
    610 #define M_ASN1_BMPSTRING_free(a)	ASN1_STRING_free((ASN1_STRING *)a)
    611 
    612 #define M_ASN1_VISIBLESTRING_new()	(ASN1_VISIBLESTRING *)\
    613 		ASN1_STRING_type_new(V_ASN1_VISIBLESTRING)
    614 #define M_ASN1_VISIBLESTRING_free(a)	ASN1_STRING_free((ASN1_STRING *)a)
    615 
    616 #define M_ASN1_UTF8STRING_new()	(ASN1_UTF8STRING *)\
    617 		ASN1_STRING_type_new(V_ASN1_UTF8STRING)
    618 #define M_ASN1_UTF8STRING_free(a)	ASN1_STRING_free((ASN1_STRING *)a)
    619 
    620 DECLARE_ASN1_FUNCTIONS_fname(ASN1_TYPE, ASN1_ANY, ASN1_TYPE)
    621 
    622 OPENSSL_EXPORT int ASN1_TYPE_get(ASN1_TYPE *a);
    623 OPENSSL_EXPORT void ASN1_TYPE_set(ASN1_TYPE *a, int type, void *value);
    624 OPENSSL_EXPORT int ASN1_TYPE_set1(ASN1_TYPE *a, int type, const void *value);
    625 OPENSSL_EXPORT int ASN1_TYPE_cmp(const ASN1_TYPE *a, const ASN1_TYPE *b);
    626 
    627 OPENSSL_EXPORT ASN1_OBJECT *	ASN1_OBJECT_new(void );
    628 OPENSSL_EXPORT void		ASN1_OBJECT_free(ASN1_OBJECT *a);
    629 OPENSSL_EXPORT int		i2d_ASN1_OBJECT(ASN1_OBJECT *a,unsigned char **pp);
    630 OPENSSL_EXPORT ASN1_OBJECT *	c2i_ASN1_OBJECT(ASN1_OBJECT **a,const unsigned char **pp,
    631 						long length);
    632 OPENSSL_EXPORT ASN1_OBJECT *	d2i_ASN1_OBJECT(ASN1_OBJECT **a,const unsigned char **pp,
    633 						long length);
    634 
    635 DECLARE_ASN1_ITEM(ASN1_OBJECT)
    636 
    637 DECLARE_ASN1_SET_OF(ASN1_OBJECT)
    638 
    639 OPENSSL_EXPORT ASN1_STRING *	ASN1_STRING_new(void);
    640 OPENSSL_EXPORT void		ASN1_STRING_free(ASN1_STRING *a);
    641 OPENSSL_EXPORT int		ASN1_STRING_copy(ASN1_STRING *dst, const ASN1_STRING *str);
    642 OPENSSL_EXPORT ASN1_STRING *	ASN1_STRING_dup(const ASN1_STRING *a);
    643 OPENSSL_EXPORT ASN1_STRING *	ASN1_STRING_type_new(int type );
    644 OPENSSL_EXPORT int 		ASN1_STRING_cmp(const ASN1_STRING *a, const ASN1_STRING *b);
    645   /* Since this is used to store all sorts of things, via macros, for now, make
    646      its data void * */
    647 OPENSSL_EXPORT int 		ASN1_STRING_set(ASN1_STRING *str, const void *data, int len);
    648 OPENSSL_EXPORT void		ASN1_STRING_set0(ASN1_STRING *str, void *data, int len);
    649 OPENSSL_EXPORT int ASN1_STRING_length(const ASN1_STRING *x);
    650 OPENSSL_EXPORT void ASN1_STRING_length_set(ASN1_STRING *x, int n);
    651 OPENSSL_EXPORT int ASN1_STRING_type(ASN1_STRING *x);
    652 OPENSSL_EXPORT unsigned char * ASN1_STRING_data(ASN1_STRING *x);
    653 OPENSSL_EXPORT const unsigned char *ASN1_STRING_get0_data(const ASN1_STRING *x);
    654 
    655 DECLARE_ASN1_FUNCTIONS(ASN1_BIT_STRING)
    656 OPENSSL_EXPORT int		i2c_ASN1_BIT_STRING(ASN1_BIT_STRING *a,unsigned char **pp);
    657 OPENSSL_EXPORT ASN1_BIT_STRING *c2i_ASN1_BIT_STRING(ASN1_BIT_STRING **a,const unsigned char **pp, long length);
    658 OPENSSL_EXPORT int		ASN1_BIT_STRING_set(ASN1_BIT_STRING *a, unsigned char *d, int length );
    659 OPENSSL_EXPORT int		ASN1_BIT_STRING_set_bit(ASN1_BIT_STRING *a, int n, int value);
    660 OPENSSL_EXPORT int		ASN1_BIT_STRING_get_bit(ASN1_BIT_STRING *a, int n);
    661 OPENSSL_EXPORT int            ASN1_BIT_STRING_check(ASN1_BIT_STRING *a, unsigned char *flags, int flags_len);
    662 
    663 OPENSSL_EXPORT int		i2d_ASN1_BOOLEAN(int a,unsigned char **pp);
    664 OPENSSL_EXPORT int 		d2i_ASN1_BOOLEAN(int *a,const unsigned char **pp,long length);
    665 
    666 DECLARE_ASN1_FUNCTIONS(ASN1_INTEGER)
    667 OPENSSL_EXPORT int		i2c_ASN1_INTEGER(ASN1_INTEGER *a,unsigned char **pp);
    668 OPENSSL_EXPORT ASN1_INTEGER *c2i_ASN1_INTEGER(ASN1_INTEGER **a,const unsigned char **pp, long length);
    669 OPENSSL_EXPORT ASN1_INTEGER *	ASN1_INTEGER_dup(const ASN1_INTEGER *x);
    670 OPENSSL_EXPORT int ASN1_INTEGER_cmp(const ASN1_INTEGER *x, const ASN1_INTEGER *y);
    671 
    672 DECLARE_ASN1_FUNCTIONS(ASN1_ENUMERATED)
    673 
    674 OPENSSL_EXPORT int ASN1_UTCTIME_check(const ASN1_UTCTIME *a);
    675 OPENSSL_EXPORT ASN1_UTCTIME *ASN1_UTCTIME_set(ASN1_UTCTIME *s,time_t t);
    676 OPENSSL_EXPORT ASN1_UTCTIME *ASN1_UTCTIME_adj(ASN1_UTCTIME *s, time_t t, int offset_day, long offset_sec);
    677 OPENSSL_EXPORT int ASN1_UTCTIME_set_string(ASN1_UTCTIME *s, const char *str);
    678 OPENSSL_EXPORT int ASN1_UTCTIME_cmp_time_t(const ASN1_UTCTIME *s, time_t t);
    679 #if 0
    680 time_t ASN1_UTCTIME_get(const ASN1_UTCTIME *s);
    681 #endif
    682 
    683 OPENSSL_EXPORT int ASN1_GENERALIZEDTIME_check(const ASN1_GENERALIZEDTIME *a);
    684 OPENSSL_EXPORT ASN1_GENERALIZEDTIME *ASN1_GENERALIZEDTIME_set(ASN1_GENERALIZEDTIME *s,time_t t);
    685 OPENSSL_EXPORT ASN1_GENERALIZEDTIME *ASN1_GENERALIZEDTIME_adj(ASN1_GENERALIZEDTIME *s, time_t t, int offset_day, long offset_sec);
    686 OPENSSL_EXPORT int ASN1_GENERALIZEDTIME_set_string(ASN1_GENERALIZEDTIME *s, const char *str);
    687 OPENSSL_EXPORT int ASN1_TIME_diff(int *pday, int *psec, const ASN1_TIME *from, const ASN1_TIME *to);
    688 
    689 DECLARE_ASN1_FUNCTIONS(ASN1_OCTET_STRING)
    690 OPENSSL_EXPORT ASN1_OCTET_STRING *	ASN1_OCTET_STRING_dup(const ASN1_OCTET_STRING *a);
    691 OPENSSL_EXPORT int 	ASN1_OCTET_STRING_cmp(const ASN1_OCTET_STRING *a, const ASN1_OCTET_STRING *b);
    692 OPENSSL_EXPORT int 	ASN1_OCTET_STRING_set(ASN1_OCTET_STRING *str, const unsigned char *data, int len);
    693 
    694 DECLARE_ASN1_FUNCTIONS(ASN1_VISIBLESTRING)
    695 DECLARE_ASN1_FUNCTIONS(ASN1_UNIVERSALSTRING)
    696 DECLARE_ASN1_FUNCTIONS(ASN1_UTF8STRING)
    697 DECLARE_ASN1_FUNCTIONS(ASN1_NULL)
    698 DECLARE_ASN1_FUNCTIONS(ASN1_BMPSTRING)
    699 
    700 DECLARE_ASN1_FUNCTIONS_name(ASN1_STRING, ASN1_PRINTABLE)
    701 
    702 DECLARE_ASN1_FUNCTIONS_name(ASN1_STRING, DIRECTORYSTRING)
    703 DECLARE_ASN1_FUNCTIONS_name(ASN1_STRING, DISPLAYTEXT)
    704 DECLARE_ASN1_FUNCTIONS(ASN1_PRINTABLESTRING)
    705 DECLARE_ASN1_FUNCTIONS(ASN1_T61STRING)
    706 DECLARE_ASN1_FUNCTIONS(ASN1_IA5STRING)
    707 DECLARE_ASN1_FUNCTIONS(ASN1_GENERALSTRING)
    708 DECLARE_ASN1_FUNCTIONS(ASN1_UTCTIME)
    709 DECLARE_ASN1_FUNCTIONS(ASN1_GENERALIZEDTIME)
    710 DECLARE_ASN1_FUNCTIONS(ASN1_TIME)
    711 
    712 DECLARE_ASN1_ITEM(ASN1_OCTET_STRING_NDEF)
    713 
    714 OPENSSL_EXPORT ASN1_TIME *ASN1_TIME_set(ASN1_TIME *s,time_t t);
    715 OPENSSL_EXPORT ASN1_TIME *ASN1_TIME_adj(ASN1_TIME *s,time_t t, int offset_day, long offset_sec);
    716 OPENSSL_EXPORT int ASN1_TIME_check(ASN1_TIME *t);
    717 OPENSSL_EXPORT ASN1_GENERALIZEDTIME *ASN1_TIME_to_generalizedtime(ASN1_TIME *t, ASN1_GENERALIZEDTIME **out);
    718 OPENSSL_EXPORT int ASN1_TIME_set_string(ASN1_TIME *s, const char *str);
    719 
    720 OPENSSL_EXPORT int i2a_ASN1_INTEGER(BIO *bp, ASN1_INTEGER *a);
    721 OPENSSL_EXPORT int i2a_ASN1_ENUMERATED(BIO *bp, ASN1_ENUMERATED *a);
    722 OPENSSL_EXPORT int i2a_ASN1_OBJECT(BIO *bp,ASN1_OBJECT *a);
    723 OPENSSL_EXPORT int i2a_ASN1_STRING(BIO *bp, ASN1_STRING *a, int type);
    724 OPENSSL_EXPORT int i2t_ASN1_OBJECT(char *buf,int buf_len,ASN1_OBJECT *a);
    725 
    726 OPENSSL_EXPORT ASN1_OBJECT *ASN1_OBJECT_create(int nid, unsigned char *data,int len, const char *sn, const char *ln);
    727 
    728 OPENSSL_EXPORT int ASN1_INTEGER_set(ASN1_INTEGER *a, long v);
    729 OPENSSL_EXPORT int ASN1_INTEGER_set_uint64(ASN1_INTEGER *out, uint64_t v);
    730 OPENSSL_EXPORT long ASN1_INTEGER_get(const ASN1_INTEGER *a);
    731 OPENSSL_EXPORT ASN1_INTEGER *BN_to_ASN1_INTEGER(const BIGNUM *bn, ASN1_INTEGER *ai);
    732 OPENSSL_EXPORT BIGNUM *ASN1_INTEGER_to_BN(const ASN1_INTEGER *ai,BIGNUM *bn);
    733 
    734 OPENSSL_EXPORT int ASN1_ENUMERATED_set(ASN1_ENUMERATED *a, long v);
    735 OPENSSL_EXPORT long ASN1_ENUMERATED_get(ASN1_ENUMERATED *a);
    736 OPENSSL_EXPORT ASN1_ENUMERATED *BN_to_ASN1_ENUMERATED(BIGNUM *bn, ASN1_ENUMERATED *ai);
    737 OPENSSL_EXPORT BIGNUM *ASN1_ENUMERATED_to_BN(ASN1_ENUMERATED *ai,BIGNUM *bn);
    738 
    739 /* General */
    740 /* given a string, return the correct type, max is the maximum length */
    741 OPENSSL_EXPORT int ASN1_PRINTABLE_type(const unsigned char *s, int max);
    742 
    743 OPENSSL_EXPORT unsigned long ASN1_tag2bit(int tag);
    744 
    745 /* SPECIALS */
    746 OPENSSL_EXPORT int ASN1_get_object(const unsigned char **pp, long *plength, int *ptag, int *pclass, long omax);
    747 OPENSSL_EXPORT void ASN1_put_object(unsigned char **pp, int constructed, int length, int tag, int xclass);
    748 OPENSSL_EXPORT int ASN1_put_eoc(unsigned char **pp);
    749 OPENSSL_EXPORT int ASN1_object_size(int constructed, int length, int tag);
    750 
    751 OPENSSL_EXPORT void *ASN1_item_dup(const ASN1_ITEM *it, void *x);
    752 
    753 #ifndef OPENSSL_NO_FP_API
    754 OPENSSL_EXPORT void *ASN1_item_d2i_fp(const ASN1_ITEM *it, FILE *in, void *x);
    755 OPENSSL_EXPORT int ASN1_item_i2d_fp(const ASN1_ITEM *it, FILE *out, void *x);
    756 OPENSSL_EXPORT int ASN1_STRING_print_ex_fp(FILE *fp, ASN1_STRING *str, unsigned long flags);
    757 #endif
    758 
    759 OPENSSL_EXPORT int ASN1_STRING_to_UTF8(unsigned char **out, ASN1_STRING *in);
    760 
    761 OPENSSL_EXPORT void *ASN1_item_d2i_bio(const ASN1_ITEM *it, BIO *in, void *x);
    762 OPENSSL_EXPORT int ASN1_item_i2d_bio(const ASN1_ITEM *it, BIO *out, void *x);
    763 OPENSSL_EXPORT int ASN1_UTCTIME_print(BIO *fp, const ASN1_UTCTIME *a);
    764 OPENSSL_EXPORT int ASN1_GENERALIZEDTIME_print(BIO *fp, const ASN1_GENERALIZEDTIME *a);
    765 OPENSSL_EXPORT int ASN1_TIME_print(BIO *fp, const ASN1_TIME *a);
    766 OPENSSL_EXPORT int ASN1_STRING_print(BIO *bp, const ASN1_STRING *v);
    767 OPENSSL_EXPORT int ASN1_STRING_print_ex(BIO *out, ASN1_STRING *str, unsigned long flags);
    768 OPENSSL_EXPORT const char *ASN1_tag2str(int tag);
    769 
    770 /* Used to load and write netscape format cert */
    771 
    772 OPENSSL_EXPORT void *ASN1_item_unpack(ASN1_STRING *oct, const ASN1_ITEM *it);
    773 
    774 OPENSSL_EXPORT ASN1_STRING *ASN1_item_pack(void *obj, const ASN1_ITEM *it, ASN1_OCTET_STRING **oct);
    775 
    776 OPENSSL_EXPORT void ASN1_STRING_set_default_mask(unsigned long mask);
    777 OPENSSL_EXPORT int ASN1_STRING_set_default_mask_asc(const char *p);
    778 OPENSSL_EXPORT unsigned long ASN1_STRING_get_default_mask(void);
    779 OPENSSL_EXPORT int ASN1_mbstring_copy(ASN1_STRING **out, const unsigned char *in, int len, int inform, unsigned long mask);
    780 OPENSSL_EXPORT int ASN1_mbstring_ncopy(ASN1_STRING **out, const unsigned char *in, int len, int inform, unsigned long mask, long minsize, long maxsize);
    781 
    782 OPENSSL_EXPORT ASN1_STRING *ASN1_STRING_set_by_NID(ASN1_STRING **out, const unsigned char *in, int inlen, int inform, int nid);
    783 OPENSSL_EXPORT ASN1_STRING_TABLE *ASN1_STRING_TABLE_get(int nid);
    784 OPENSSL_EXPORT int ASN1_STRING_TABLE_add(int, long, long, unsigned long, unsigned long);
    785 OPENSSL_EXPORT void ASN1_STRING_TABLE_cleanup(void);
    786 
    787 /* ASN1 template functions */
    788 
    789 /* Old API compatible functions */
    790 OPENSSL_EXPORT ASN1_VALUE *ASN1_item_new(const ASN1_ITEM *it);
    791 OPENSSL_EXPORT void ASN1_item_free(ASN1_VALUE *val, const ASN1_ITEM *it);
    792 OPENSSL_EXPORT ASN1_VALUE * ASN1_item_d2i(ASN1_VALUE **val, const unsigned char **in, long len, const ASN1_ITEM *it);
    793 OPENSSL_EXPORT int ASN1_item_i2d(ASN1_VALUE *val, unsigned char **out, const ASN1_ITEM *it);
    794 OPENSSL_EXPORT int ASN1_item_ndef_i2d(ASN1_VALUE *val, unsigned char **out, const ASN1_ITEM *it);
    795 
    796 OPENSSL_EXPORT ASN1_TYPE *ASN1_generate_nconf(char *str, CONF *nconf);
    797 OPENSSL_EXPORT ASN1_TYPE *ASN1_generate_v3(char *str, X509V3_CTX *cnf);
    798 
    799 
    800 #ifdef  __cplusplus
    801 }
    802 
    803 extern "C++" {
    804 
    805 BSSL_NAMESPACE_BEGIN
    806 
    807 BORINGSSL_MAKE_DELETER(ASN1_OBJECT, ASN1_OBJECT_free)
    808 BORINGSSL_MAKE_DELETER(ASN1_STRING, ASN1_STRING_free)
    809 BORINGSSL_MAKE_DELETER(ASN1_TYPE, ASN1_TYPE_free)
    810 
    811 BSSL_NAMESPACE_END
    812 
    813 }  /* extern C++ */
    814 
    815 #endif
    816 
    817 #define ASN1_R_ASN1_LENGTH_MISMATCH 100
    818 #define ASN1_R_AUX_ERROR 101
    819 #define ASN1_R_BAD_GET_ASN1_OBJECT_CALL 102
    820 #define ASN1_R_BAD_OBJECT_HEADER 103
    821 #define ASN1_R_BMPSTRING_IS_WRONG_LENGTH 104
    822 #define ASN1_R_BN_LIB 105
    823 #define ASN1_R_BOOLEAN_IS_WRONG_LENGTH 106
    824 #define ASN1_R_BUFFER_TOO_SMALL 107
    825 #define ASN1_R_CONTEXT_NOT_INITIALISED 108
    826 #define ASN1_R_DECODE_ERROR 109
    827 #define ASN1_R_DEPTH_EXCEEDED 110
    828 #define ASN1_R_DIGEST_AND_KEY_TYPE_NOT_SUPPORTED 111
    829 #define ASN1_R_ENCODE_ERROR 112
    830 #define ASN1_R_ERROR_GETTING_TIME 113
    831 #define ASN1_R_EXPECTING_AN_ASN1_SEQUENCE 114
    832 #define ASN1_R_EXPECTING_AN_INTEGER 115
    833 #define ASN1_R_EXPECTING_AN_OBJECT 116
    834 #define ASN1_R_EXPECTING_A_BOOLEAN 117
    835 #define ASN1_R_EXPECTING_A_TIME 118
    836 #define ASN1_R_EXPLICIT_LENGTH_MISMATCH 119
    837 #define ASN1_R_EXPLICIT_TAG_NOT_CONSTRUCTED 120
    838 #define ASN1_R_FIELD_MISSING 121
    839 #define ASN1_R_FIRST_NUM_TOO_LARGE 122
    840 #define ASN1_R_HEADER_TOO_LONG 123
    841 #define ASN1_R_ILLEGAL_BITSTRING_FORMAT 124
    842 #define ASN1_R_ILLEGAL_BOOLEAN 125
    843 #define ASN1_R_ILLEGAL_CHARACTERS 126
    844 #define ASN1_R_ILLEGAL_FORMAT 127
    845 #define ASN1_R_ILLEGAL_HEX 128
    846 #define ASN1_R_ILLEGAL_IMPLICIT_TAG 129
    847 #define ASN1_R_ILLEGAL_INTEGER 130
    848 #define ASN1_R_ILLEGAL_NESTED_TAGGING 131
    849 #define ASN1_R_ILLEGAL_NULL 132
    850 #define ASN1_R_ILLEGAL_NULL_VALUE 133
    851 #define ASN1_R_ILLEGAL_OBJECT 134
    852 #define ASN1_R_ILLEGAL_OPTIONAL_ANY 135
    853 #define ASN1_R_ILLEGAL_OPTIONS_ON_ITEM_TEMPLATE 136
    854 #define ASN1_R_ILLEGAL_TAGGED_ANY 137
    855 #define ASN1_R_ILLEGAL_TIME_VALUE 138
    856 #define ASN1_R_INTEGER_NOT_ASCII_FORMAT 139
    857 #define ASN1_R_INTEGER_TOO_LARGE_FOR_LONG 140
    858 #define ASN1_R_INVALID_BIT_STRING_BITS_LEFT 141
    859 #define ASN1_R_INVALID_BMPSTRING 142
    860 #define ASN1_R_INVALID_DIGIT 143
    861 #define ASN1_R_INVALID_MODIFIER 144
    862 #define ASN1_R_INVALID_NUMBER 145
    863 #define ASN1_R_INVALID_OBJECT_ENCODING 146
    864 #define ASN1_R_INVALID_SEPARATOR 147
    865 #define ASN1_R_INVALID_TIME_FORMAT 148
    866 #define ASN1_R_INVALID_UNIVERSALSTRING 149
    867 #define ASN1_R_INVALID_UTF8STRING 150
    868 #define ASN1_R_LIST_ERROR 151
    869 #define ASN1_R_MISSING_ASN1_EOS 152
    870 #define ASN1_R_MISSING_EOC 153
    871 #define ASN1_R_MISSING_SECOND_NUMBER 154
    872 #define ASN1_R_MISSING_VALUE 155
    873 #define ASN1_R_MSTRING_NOT_UNIVERSAL 156
    874 #define ASN1_R_MSTRING_WRONG_TAG 157
    875 #define ASN1_R_NESTED_ASN1_ERROR 158
    876 #define ASN1_R_NESTED_ASN1_STRING 159
    877 #define ASN1_R_NON_HEX_CHARACTERS 160
    878 #define ASN1_R_NOT_ASCII_FORMAT 161
    879 #define ASN1_R_NOT_ENOUGH_DATA 162
    880 #define ASN1_R_NO_MATCHING_CHOICE_TYPE 163
    881 #define ASN1_R_NULL_IS_WRONG_LENGTH 164
    882 #define ASN1_R_OBJECT_NOT_ASCII_FORMAT 165
    883 #define ASN1_R_ODD_NUMBER_OF_CHARS 166
    884 #define ASN1_R_SECOND_NUMBER_TOO_LARGE 167
    885 #define ASN1_R_SEQUENCE_LENGTH_MISMATCH 168
    886 #define ASN1_R_SEQUENCE_NOT_CONSTRUCTED 169
    887 #define ASN1_R_SEQUENCE_OR_SET_NEEDS_CONFIG 170
    888 #define ASN1_R_SHORT_LINE 171
    889 #define ASN1_R_STREAMING_NOT_SUPPORTED 172
    890 #define ASN1_R_STRING_TOO_LONG 173
    891 #define ASN1_R_STRING_TOO_SHORT 174
    892 #define ASN1_R_TAG_VALUE_TOO_HIGH 175
    893 #define ASN1_R_TIME_NOT_ASCII_FORMAT 176
    894 #define ASN1_R_TOO_LONG 177
    895 #define ASN1_R_TYPE_NOT_CONSTRUCTED 178
    896 #define ASN1_R_TYPE_NOT_PRIMITIVE 179
    897 #define ASN1_R_UNEXPECTED_EOC 180
    898 #define ASN1_R_UNIVERSALSTRING_IS_WRONG_LENGTH 181
    899 #define ASN1_R_UNKNOWN_FORMAT 182
    900 #define ASN1_R_UNKNOWN_MESSAGE_DIGEST_ALGORITHM 183
    901 #define ASN1_R_UNKNOWN_SIGNATURE_ALGORITHM 184
    902 #define ASN1_R_UNKNOWN_TAG 185
    903 #define ASN1_R_UNSUPPORTED_ANY_DEFINED_BY_TYPE 186
    904 #define ASN1_R_UNSUPPORTED_PUBLIC_KEY_TYPE 187
    905 #define ASN1_R_UNSUPPORTED_TYPE 188
    906 #define ASN1_R_WRONG_PUBLIC_KEY_TYPE 189
    907 #define ASN1_R_WRONG_TAG 190
    908 #define ASN1_R_WRONG_TYPE 191
    909 #define ASN1_R_NESTED_TOO_DEEP 192
    910 
    911 #endif
    912