cryptoadm.h revision 32e0ab73531b6e6e8957e9ecdbbd42603865f2d0
/*
* CDDL HEADER START
*
* The contents of this file are subject to the terms of the
* Common Development and Distribution License (the "License").
* You may not use this file except in compliance with the License.
*
* You can obtain a copy of the license at usr/src/OPENSOLARIS.LICENSE
* See the License for the specific language governing permissions
* and limitations under the License.
*
* When distributing Covered Code, include this CDDL HEADER in each
* file and include the License file at usr/src/OPENSOLARIS.LICENSE.
* If applicable, add the following below this CDDL HEADER, with the
* fields enclosed by brackets "[]" replaced with your own identifying
* information: Portions Copyright [yyyy] [name of copyright owner]
*
* CDDL HEADER END
*/
/*
*/
#ifndef _CRYPTOADM_H
#define _CRYPTOADM_H
#include <cryptoutil.h>
#include <security/cryptoki.h>
#ifdef __cplusplus
extern "C" {
#endif
#define _PATH_KCFD "/lib/crypto/kcfd"
#define TMPFILE_TEMPLATE "/etc/crypto/admXXXXXX"
#define ERROR_USAGE 2
#define HW_PROVIDER_NCP 1
#define HW_PROVIDER_N2CP 2
#define HW_PROVIDER_N2RNG 3
/*
* Common keywords and delimiters for pkcs11.conf and kcf.conf files are
* defined in usr/lib/libcryptoutil/common/cryptoutil.h. The following is
* the extra keywords and delimiters used in kcf.conf file.
*/
#define SEP_SLASH '/'
#define EF_SUPPORTED "supportedlist="
#define EF_UNLOAD "unload"
#define RANDOM "random"
#define UEF_FRAME_LIB "/usr/lib/libpkcs11.so"
#define ADD_MODE 1
#define DELETE_MODE 2
#define MODIFY_MODE 3
#define REFRESH 1
#define NOT_REFRESH 0
typedef char prov_name_t[MAXNAMELEN];
typedef char mech_name_t[CRYPTO_MAX_MECH_NAME];
typedef struct mechlist {
} mechlist_t;
typedef struct entry {
} entry_t;
typedef struct entrylist {
} entrylist_t;
typedef enum {
} flag_val_t;
extern int errno;
/* adm_util */
extern mechlist_t *create_mech(char *);
extern void free_mechlist(mechlist_t *);
/* adm_kef_util */
extern int fips_update_pkcs11conf(int);
extern void fips_status_pkcs11conf(int *);
extern int check_kernel_for_soft(char *provname,
extern int check_kernel_for_hard(char *provname,
extern int get_mech_count(mechlist_t *);
extern int insert_kcfconf(entry_t *);
extern int split_hw_provname(char *, char *, int *);
extern int update_kcfconf(entry_t *, int);
extern void free_entry(entry_t *);
extern void free_entrylist(entrylist_t *);
extern void print_mechlist(char *, mechlist_t *);
extern uentry_t *getent_uef(char *);
/* adm_uef */
extern int list_policy_for_lib(char *);
extern int install_uef_lib(char *);
extern int uninstall_uef_lib(char *);
extern int print_uef_policy(uentry_t *);
extern void display_verbose_mech_header();
extern void display_mech_info(CK_MECHANISM_INFO *);
extern int display_policy(uentry_t *);
extern int update_pkcs11conf(uentry_t *);
/* adm_kef */
extern int list_mechlist_for_soft(char *provname,
extern int list_mechlist_for_hard(char *);
extern int list_policy_for_soft(char *provname,
extern int list_policy_for_hard(char *provname,
extern int install_kef(char *, mechlist_t *);
extern int uninstall_kef(char *);
extern int unload_kef_soft(char *provname);
extern int refresh(void);
extern int start_daemon(void);
extern int stop_daemon(void);
/* adm_ioctl */
extern int get_dev_info(char *, int, int, mechlist_t **);
extern int get_dev_list(crypto_get_dev_list_t **);
extern int get_soft_list(crypto_get_soft_list_t **);
extern int do_fips_actions(int, int);
/* adm_metaslot */
extern int list_metaslot_policy();
/* adm_hw */
extern int do_fips_hw_actions(int, int);
#ifdef __cplusplus
}
#endif
#endif /* _CRYPTOADM_H */