#ifndef CKCAPI_H #define CKCAPI_H #ifndef ASSERT #include "assert.h" #define ASSERT assert #endif #define WIN32_LEAN_AND_MEAN #define _WIN32_WINNT 0x400 #include #define CRYPTOKI_EXPORTS #include "pkcs11/cryptoki.h" #include "ckcapi-util.h" struct _CkCapiObject; struct _CkCapiSession; typedef struct _CkCapiObject CkCapiObject; typedef struct _CkCapiSession CkCapiSession; /* Represents 'any' class in searches */ #define CKO_ANY CK_INVALID_HANDLE /* ------------------------------------------------------------------ * cryptoki-capi.c */ #define DBG(args) \ ckcapi_debug args void ckcapi_debug(const char* msg, ...); void ckcapi_lock_global(void); void ckcapi_unlock_global(void); CK_RV ckcapi_winerr_to_ckr (DWORD werr); CK_RV ckcapi_return_data(CK_VOID_PTR dst, CK_ULONG_PTR dlen, CK_VOID_PTR src, DWORD slen); /* object data ------------------- */ typedef CK_RV (*CkCapiGetAttribute)(void* obj, CK_ATTRIBUTE_TYPE type, CK_VOID_PTR data, CK_ULONG_PTR len); typedef void (*CkCapiRelease)(void* value); typedef struct _CkCapiObjectDataVtable { CkCapiGetAttribute get_bool; CkCapiGetAttribute get_ulong; CkCapiGetAttribute get_bytes; CkCapiGetAttribute get_date; CkCapiRelease release; } CkCapiObjectDataVtable; typedef struct _CkCapiObjectData { CK_OBJECT_HANDLE object; void* data; CkCapiObjectDataVtable data_funcs; } CkCapiObjectData; /* ------------------------------------------------------------------ * cryptoki-capi-session.c */ /* For operation_type in CkCapiSession */ enum { OPERATION_NONE = 0, OPERATION_FIND = 1, }; typedef void (*CkCapiSessionCancel) (struct _CkCapiSession* sess); typedef struct _CkCapiSession { CK_ULONG id; /* Unique ID for this session */ int in_call; /* Whether this session is use in PKCS#11 function */ int operation_type; /* Whether an operation is happening or not */ void* operation_data; /* Data for this operation */ CkCapiSessionCancel operation_cancel; /* Callback to cancel operation when necessary */ CkCapiHash* object_data; CK_NOTIFY notify_callback; /* Application specified callback */ CK_VOID_PTR user_data; /* Argument for above */ int refs; /* Reference count */ HANDLE mutex; /* Mutex for protecting this structure */ } CkCapiSession; #define DBGS(sess, msg) \ ckcapi_debug("S%d: %s", (sess) ? (sess)->id : 0, (msg)) CkCapiSession* ckcapi_session_create(void); void ckcapi_session_destroy(CkCapiSession* sess); CK_RV ckcapi_session_register(CkCapiSession* sess); CK_RV ckcapi_session_get_lock_ref(CK_ULONG id, int remove, CkCapiSession **sess); void ckcapi_session_unref_unlock(CkCapiSession* sess); void ckcapi_session_close_all(); CK_RV ckcapi_session_find_init (CkCapiSession* sess, CK_ATTRIBUTE_PTR templ, CK_ULONG count); CK_RV ckcapi_session_find (CkCapiSession* sess, CK_OBJECT_HANDLE_PTR objects, CK_ULONG max_object_count, CK_ULONG_PTR object_count); CK_RV ckcapi_session_find_final (CkCapiSession* sess); CK_RV ckcapi_session_get_object_data (CkCapiSession* sess, CkCapiObject* obj, CkCapiObjectData** objdata); CK_RV ckcapi_session_get_object_data_for (CkCapiSession* sess, CK_OBJECT_HANDLE hand, CkCapiObjectData** objdata); CK_RV ckcapi_session_set_object_data (CkCapiSession* sess, CkCapiObject* obj, const CkCapiObjectData* objdata); void ckcapi_session_clear_object_data (CkCapiSession* sess, CkCapiObject* obj); typedef void (*CkCapiEnumObjectData)(CkCapiSession* sess, CkCapiObject* obj, CkCapiObjectData* data, void* arg); void ckcapi_session_enum_object_data (CkCapiSession* sess, CkCapiEnumObjectData enum_func, void* arg); /* ------------------------------------------------------------------ * ckcapi-object.c */ /* Used internally to guarantee uniqueness between object types */ enum { OBJECT_CERT = 1, OBJECT_BUILTIN = 2, OBJECT_TRUST = 3 }; typedef CK_RV (*CkCapiPurge)(struct _CkCapiObject* obj); typedef CK_RV (*CkCapiLoadData)(CkCapiSession* sess, struct _CkCapiObject* obj, CkCapiObjectData* objdata); typedef struct _CkCapiObjectVtable { CkCapiLoadData load_data; CkCapiRelease release; } CkCapiObjectVtable; /* * Each object has a unique key which guarantees that we're * not loading the same objects over and over again. * Usually these are contiguous members of a struct. These * macros help calculate the address and length of such a * unique key */ /* The unique key starts at the address of the starting struct member */ #define UNIQUE_KEY_AT(obj, mem) \ (void*)(&((obj->mem))) /* Calculates key length between first and last struct members */ #define UNIQUE_KEY_LEN(obj, first, last) \ UNIQUE_KEY_VAR_LEN(obj, first, last, sizeof(obj->last)) /* Calcs key len between first and a certain num of bytes past last struct member */ #define UNIQUE_KEY_VAR_LEN(obj, first, last, len) \ ((((char*)&((obj->last))) - ((char*)&((obj->first)))) + (len)) struct _CkCapiObject { CK_OBJECT_HANDLE id; // These items must remain together in the structure CkCapiObjectVtable obj_funcs; void* unique_key; size_t unique_len; }; #define DBGO(obj, msg) \ ckcapi_debug("O%d: %s", (obj) ? (obj)->id : 0, (msg)) #define DBGOD(objdata, msg) \ ckcapi_debug("O%d: %s", (objdata) ? (objdata)->obj : 0, (msg)) CK_OBJECT_HANDLE ckcapi_object_get_max_handle (void); CkCapiObject* ckcapi_object_lookup (CkCapiSession* sess, CK_OBJECT_HANDLE obj); CK_RV ckcapi_object_register (CkCapiSession* sess, CkCapiObject* obj); void ckcapi_object_clear_all (void); CK_BBOOL ckcapi_object_data_match (CkCapiObjectData* objdata, CK_ATTRIBUTE_PTR matches, CK_ULONG count); CK_BBOOL ckcapi_object_data_match_attr (CkCapiObjectData* objdata, CK_ATTRIBUTE_PTR match); CK_RV ckcapi_object_data_get_attrs (CkCapiObjectData* objdata, CK_ATTRIBUTE_PTR attrs, CK_ULONG count); /* ------------------------------------------------------------------- * ckcapi-cert.c */ CK_RV ckcapi_cert_find (CkCapiSession* sess, CK_OBJECT_CLASS cls, CK_ATTRIBUTE_PTR match, CK_ULONG count, CkCapiArray* arr); CK_RV ckcapi_cert_find_specific (CkCapiSession* sess, CK_OBJECT_CLASS cls, CK_ATTRIBUTE_PTR issuer, CK_ATTRIBUTE_PTR serial, CK_OBJECT_HANDLE_PTR obj); /* Called by trust stuff */ CK_RV ckcapi_cert_get_bytes_attribute (void* cert, CK_ATTRIBUTE_TYPE type, CK_VOID_PTR data, CK_ULONG_PTR len); /* ------------------------------------------------------------------- * ckcapi-builtin.c */ CK_RV ckcapi_builtin_find (CkCapiSession* sess, CK_OBJECT_CLASS cls, CK_ATTRIBUTE_PTR match, CK_ULONG count, CkCapiArray* arr); /* ------------------------------------------------------------------- * ckcapi-trust.c */ CK_RV ckcapi_trust_find (CkCapiSession* sess, CK_OBJECT_CLASS cls, CK_ATTRIBUTE_PTR match, CK_ULONG count, CkCapiArray* arr); CK_RV ckcapi_trust_find_specific (CkCapiSession* sess, CK_OBJECT_CLASS cls, CK_ATTRIBUTE_PTR issuer, CK_ATTRIBUTE_PTR serial, CK_OBJECT_HANDLE_PTR obj); #endif /* CRYPTOKI_CAPI_H */