|
| #define | ST_CTX_CONV SUBTYPE_CTX_CONV |
| |
| #define | ST_CTX_PKC SUBTYPE_CTX_PKC |
| |
| #define | ST_CTX_HASH SUBTYPE_CTX_HASH |
| |
| #define | ST_CTX_MAC SUBTYPE_CTX_MAC |
| |
| #define | ST_CTX_GENERIC SUBTYPE_CTX_GENERIC |
| |
| #define | ST_CTX_ANY |
| |
| #define | ST_CERT_CERT SUBTYPE_CERT_CERT |
| |
| #define | ST_CERT_CERTREQ SUBTYPE_CERT_CERTREQ |
| |
| #define | ST_CERT_REQ_CERT SUBTYPE_CERT_REQ_CERT |
| |
| #define | ST_CERT_REQ_REV SUBTYPE_CERT_REQ_REV |
| |
| #define | ST_CERT_CERTCHAIN SUBTYPE_CERT_CERTCHAIN |
| |
| #define | ST_CERT_ATTRCERT SUBTYPE_CERT_ATTRCERT |
| |
| #define | ST_CERT_CRL SUBTYPE_CERT_CRL |
| |
| #define | ST_CERT_CMSATTR SUBTYPE_CERT_CMSATTR |
| |
| #define | ST_CERT_RTCS_REQ SUBTYPE_CERT_RTCS_REQ |
| |
| #define | ST_CERT_RTCS_RESP SUBTYPE_CERT_RTCS_RESP |
| |
| #define | ST_CERT_OCSP_REQ SUBTYPE_CERT_OCSP_REQ |
| |
| #define | ST_CERT_OCSP_RESP SUBTYPE_CERT_OCSP_RESP |
| |
| #define | ST_CERT_PKIUSER SUBTYPE_CERT_PKIUSER |
| |
| #define | ST_CERT_ANY_CERT |
| |
| #define | ST_CERT_ANY |
| |
| #define | ST_KEYSET_FILE SUBTYPE_KEYSET_FILE |
| |
| #define | ST_KEYSET_FILE_PARTIAL SUBTYPE_KEYSET_FILE_PARTIAL |
| |
| #define | ST_KEYSET_FILE_RO SUBTYPE_KEYSET_FILE_READONLY |
| |
| #define | ST_KEYSET_DBMS SUBTYPE_KEYSET_DBMS |
| |
| #define | ST_KEYSET_DBMS_STORE SUBTYPE_KEYSET_DBMS_STORE |
| |
| #define | ST_KEYSET_HTTP SUBTYPE_KEYSET_HTTP |
| |
| #define | ST_KEYSET_LDAP SUBTYPE_KEYSET_LDAP |
| |
| #define | ST_KEYSET_ANY |
| |
| #define | ST_ENV_ENV SUBTYPE_ENV_ENV |
| |
| #define | ST_ENV_ENV_PGP SUBTYPE_ENV_ENV_PGP |
| |
| #define | ST_ENV_DEENV SUBTYPE_ENV_DEENV |
| |
| #define | ST_ENV_ANY ( ST_ENV_ENV | ST_ENV_ENV_PGP | ST_ENV_DEENV ) |
| |
| #define | ST_DEV_SYSTEM SUBTYPE_DEV_SYSTEM |
| |
| #define | ST_DEV_P11 SUBTYPE_DEV_PKCS11 |
| |
| #define | ST_DEV_CAPI SUBTYPE_DEV_CRYPTOAPI |
| |
| #define | ST_DEV_HW SUBTYPE_DEV_HARDWARE |
| |
| #define | ST_DEV_ANY_STD ( ST_DEV_P11 | ST_DEV_CAPI | ST_DEV_HW ) |
| |
| #define | ST_DEV_ANY ( ST_DEV_ANY_STD | ST_DEV_SYSTEM ) |
| |
| #define | ST_SESS_SSH SUBTYPE_SESSION_SSH |
| |
| #define | ST_SESS_SSH_SVR SUBTYPE_SESSION_SSH_SVR |
| |
| #define | ST_SESS_SSL SUBTYPE_SESSION_SSL |
| |
| #define | ST_SESS_SSL_SVR SUBTYPE_SESSION_SSL_SVR |
| |
| #define | ST_SESS_RTCS SUBTYPE_SESSION_RTCS |
| |
| #define | ST_SESS_RTCS_SVR SUBTYPE_SESSION_RTCS_SVR |
| |
| #define | ST_SESS_OCSP SUBTYPE_SESSION_OCSP |
| |
| #define | ST_SESS_OCSP_SVR SUBTYPE_SESSION_OCSP_SVR |
| |
| #define | ST_SESS_TSP SUBTYPE_SESSION_TSP |
| |
| #define | ST_SESS_TSP_SVR SUBTYPE_SESSION_TSP_SVR |
| |
| #define | ST_SESS_CMP SUBTYPE_SESSION_CMP |
| |
| #define | ST_SESS_CMP_SVR SUBTYPE_SESSION_CMP_SVR |
| |
| #define | ST_SESS_SCEP SUBTYPE_SESSION_SCEP |
| |
| #define | ST_SESS_SCEP_SVR SUBTYPE_SESSION_SCEP_SVR |
| |
| #define | ST_SESS_CERT_SVR SUBTYPE_SESSION_CERT_SVR |
| |
| #define | ST_SESS_ANY_SVR |
| |
| #define | ST_SESS_ANY_CLIENT |
| |
| #define | ST_SESS_ANY_DATA |
| |
| #define | ST_SESS_ANY_REQRESP |
| |
| #define | ST_SESS_ANY_SEC |
| |
| #define | ST_SESS_ANY ( ST_SESS_ANY_CLIENT | ST_SESS_ANY_SVR ) |
| |
| #define | ST_USER_NORMAL SUBTYPE_USER_NORMAL |
| |
| #define | ST_USER_SO SUBTYPE_USER_SO |
| |
| #define | ST_USER_CA SUBTYPE_USER_CA |
| |
| #define | ST_USER_ANY ( ST_USER_NORMAL | ST_USER_SO | ST_USER_CA ) |
| |
| #define | ST_ANY_A ( ST_CTX_ANY | ST_CERT_ANY ) |
| |
| #define | ST_ANY_B ( ST_ENV_ANY | ST_KEYSET_ANY | ST_DEV_ANY ) |
| |
| #define | ST_ANY_C ( ST_SESS_ANY | ST_USER_ANY ) |
| |
| #define | ST_NONE 0 |
| |
| #define | ROUTE_NONE OBJECT_TYPE_NONE, NULL |
| |
| #define | ROUTE(target) ( target ), findTargetType |
| |
| #define | ROUTE_ALT(target, altTarget) ( target ) | ( ( altTarget ) << 8 ), findTargetType |
| |
| #define | ROUTE_ALT2(target, altTarget1, altTarget2) ( target ) | ( ( altTarget1 ) << 8 ) | ( ( altTarget2 ) << 16 ), findTargetType |
| |
| #define | ROUTE_FIXED(target) ( target ), checkTargetType |
| |
| #define | ROUTE_FIXED_ALT(target, altTarget) ( target ) | ( ( altTarget ) << 8 ), checkTargetType |
| |
| #define | ROUTE_IMPLICIT OBJECT_TYPE_LAST, findTargetType |
| |
| #define | ROUTE_SPECIAL(function) OBJECT_TYPE_NONE, ( route##function ) |
| |
| #define | isImplicitRouting(target) ( ( target ) == OBJECT_TYPE_LAST ) |
| |
| #define | isExplicitRouting(target) ( ( target ) == OBJECT_TYPE_NONE ) |
| |
| #define | RANGE_EXT_MARKER ( -1000 )/* Marker to denote extended range value */ |
| |
| #define | RANGE_ANY RANGE_EXT_MARKER, RANGEVAL_ANY |
| |
| #define | RANGE_ALLOWEDVALUES RANGE_EXT_MARKER, RANGEVAL_ALLOWEDVALUES |
| |
| #define | RANGE_SUBRANGES RANGE_EXT_MARKER, RANGEVAL_SUBRANGES |
| |
| #define | RANGE_SUBTYPED RANGE_EXT_MARKER, RANGEVAL_SUBTYPED |
| |
| #define | RANGE(low, high) ( low ), ( high ) |
| |
| #define | RANGE_MAX ( INT_MAX - 128 ) |
| |
| #define | isSpecialRange(attributeACL) ( ( attributeACL )->lowRange == RANGE_EXT_MARKER ) |
| |
| #define | getSpecialRangeType(attributeACL) ( ( attributeACL )->highRange ) |
| |
| #define | getSpecialRangeInfo(attributeACL) ( ( attributeACL )->extendedInfo ) |
| |
| #define | ATTRIBUTE_FLAG_NONE 0x00 |
| |
| #define | ATTRIBUTE_FLAG_PROPERTY 0x01 |
| |
| #define | ATTRIBUTE_FLAG_TRIGGER 0x02 |
| |
| #define | ATTRIBUTE_FLAG_LAST 0x04 |
| |
| #define | ACL_FLAG_NONE 0x00 |
| |
| #define | ACL_FLAG_LOW_STATE 0x01 |
| |
| #define | ACL_FLAG_HIGH_STATE 0x02 |
| |
| #define | ACL_FLAG_ANY_STATE 0x03 |
| |
| #define | ACL_FLAG_ROUTE_TO_CTX 0x04 |
| |
| #define | ACL_FLAG_ROUTE_TO_CERT 0x08 |
| |
| #define | ACL_FLAG_STATE_MASK 0x03 |
| |
| #define | checkObjectState(flags, objectHandle) |
| |
| #define | MKACL_B(attribute, subTypeA, subTypeB, subTypeC, access, routing) |
| |
| #define | MKACL_N(attribute, subTypeA, subTypeB, subTypeC, access, routing, range) |
| |
| #define | MKACL_S(attribute, subTypeA, subTypeB, subTypeC, access, routing, range) |
| |
| #define | MKACL_WCS(attribute, subTypeA, subTypeB, subTypeC, access, routing, range) |
| |
| #define | MKACL_O(attribute, subTypeA, subTypeB, subTypeC, access, routing, type) |
| |
| #define | MKACL_T(attribute, subTypeA, subTypeB, subTypeC, access, routing) |
| |
| #define | MKACL_X(attribute, subTypeA, subTypeB, subTypeC, access, routing, subACL) |
| |
| #define | MKACL_B_EX(attribute, subTypeA, subTypeB, subTypeC, access, flags, routing) |
| |
| #define | MKACL_N_EX(attribute, subTypeA, subTypeB, subTypeC, access, flags, routing, range) |
| |
| #define | MKACL_S_EX(attribute, subTypeA, subTypeB, subTypeC, access, flags, routing, range) |
| |
| #define | MKACL_O_EX(attribute, subTypeA, subTypeB, subTypeC, access, flags, routing, type) |
| |
| #define | MKACL_X_EX(attribute, subTypeA, subTypeB, subTypeC, access, flags, routing, subACL) |
| |
| #define | MKACL(attribute, valueType, subTypeA, subTypeB, subTypeC, access, flags, routing, range) |
| |
| #define | MKACL_EX(attribute, valueType, subTypeA, subTypeB, subTypeC, access, flags, routing, range, allowed) |
| |
| #define | MKACL_END() |
| |
| #define | MKACL_END_SUBACL() |
| |
| #define | MKACL_S_ALT(attribute, subTypeA, subTypeB, subTypeC, access, routing, range) |
| |
| #define | MK_KEYACL(itemType, keysetRWDSubType, keysetFNQSubType, objectSubType, keyIDs, flags, idUseFlags, pwUseFlags) |
| |
| #define | MK_KEYACL_RWD(itemType, keysetR_SubType, keysetW_SubType, keysetD_SubType, keysetFN_SubType, keysetQ_SubType, objectSubType, keyIDs, flags, idUseFlags, pwUseFlags) |
| |
| #define | MK_KEYACL_EX(itemType, keysetR_SubType, keysetW_SubType, keysetD_SubType, keysetFN_SubType, keysetQ_SubType, objectSubType, keyIDs, flags, idUseFlags, pwUseFlags, specificKeysetType, specificObjectType) |
| |
| #define | MKACP_B() { PARAM_VALUE_BOOLEAN, 0, 0, 0, 0, 0, 0 } |
| |
| #define | MKACP_N(min, max) { PARAM_VALUE_NUMERIC, min, max, 0, 0, 0, 0 } |
| |
| #define | MKACP_S(minLen, maxLen) { PARAM_VALUE_STRING, minLen, maxLen, 0, 0, 0, 0 } |
| |
| #define | MKACP_S_OPT(minLen, maxLen) { PARAM_VALUE_STRING_OPT, minLen, maxLen, 0, 0, 0, 0 } |
| |
| #define | MKACP_S_NONE() { PARAM_VALUE_STRING_NONE, 0, 0, 0, 0, 0, 0 } |
| |
| #define | MKACP_O(subTypeA, flags) { PARAM_VALUE_OBJECT, 0, 0, subTypeA, ST_NONE, ST_NONE, flags } |
| |
| #define | MKACP_UNUSED() { PARAM_VALUE_UNUSED, 0, 0, 0, 0, 0, 0 } |
| |
| #define | MKACP_END() { PARAM_VALUE_NONE, 0, 0, 0, 0, 0 } |
| |
| #define | paramInfo(parentACL, paramNo) parentACL->paramACL[ paramNo ] |
| |
| #define | objectST(objectHandle) objectTable[ objectHandle ].subType |
| |
| #define | checkParamNumeric(paramACL, value) |
| |
| #define | checkParamString(paramACL, data, dataLen) |
| |
| #define | checkParamObject(paramACL, objectHandle) |
| |
| #define | MK_CMPACL_S(objSTA, lowRange, highRange) |
| |
| #define | MK_CMPACL_O(objSTA, pObjSTA) |
| |
| #define | MK_CMPACL_END() |
| |
| #define | MK_CHKACL(action, objSTA) action, { objSTA, ST_NONE, ST_NONE, ACL_FLAG_HIGH_STATE }, NULL |
| |
| #define | MK_CHKACL_EX(action, objSTA, objSTB, flags) action, { objSTA, objSTB, ST_NONE, flags } |
| |
| #define | MK_CHKACL_EXT(action, objSTA, extACL) action, { objSTA, ST_NONE, ST_NONE, ACL_FLAG_HIGH_STATE }, extACL |
| |
| #define | MK_CHKACL_END() MESSAGE_NONE, { ST_NONE, ST_NONE, ST_NONE, ACL_FLAG_NONE } |
| |
| #define | MK_CHKACL_ALT(depObj, depObjSTA, fdCheck) depObj, { depObjSTA, ST_NONE, ST_NONE, ACL_FLAG_HIGH_STATE }, fdCheck |
| |
| #define | MK_CHKACL_ALT_END() |
| |
| #define | MK_DEPACL(objType, objSTA, objSTB, objSTC, dObjType, dObjSTA, dObjSTB, dObjSTC) { objType, objSTA, objSTB, objSTC, dObjType, dObjSTA, dObjSTB, dObjSTC, DEP_FLAG_NONE } |
| |
| #define | MK_DEPACL_EX(objType, objSTA, objSTB, objSTC, dObjType, dObjSTA, dObjSTB, dObjSTC, flags) { objType, objSTA, objSTB, objSTC, dObjType, dObjSTA, dObjSTB, dObjSTC, flags } |
| |
| #define | MK_DEPACL_END() { OBJECT_TYPE_NONE, 0, 0, 0, OBJECT_TYPE_NONE, 0, 0, 0, DEP_FLAG_NONE } |
| |
| #define | DEP_FLAG_NONE 0x00 /* No dependency flag */ |
| |
| #define | DEP_FLAG_UPDATEDEP 0x01 /* Update dependent object */ |
| |