| /** |
| * @copyright |
| * ==================================================================== |
| * Licensed to the Apache Software Foundation (ASF) under one |
| * or more contributor license agreements. See the NOTICE file |
| * distributed with this work for additional information |
| * regarding copyright ownership. The ASF licenses this file |
| * to you under the Apache License, Version 2.0 (the |
| * "License"); you may not use this file except in compliance |
| * with the License. You may obtain a copy of the License at |
| * |
| * http://www.apache.org/licenses/LICENSE-2.0 |
| * |
| * Unless required by applicable law or agreed to in writing, |
| * software distributed under the License is distributed on an |
| * "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY |
| * KIND, either express or implied. See the License for the |
| * specific language governing permissions and limitations |
| * under the License. |
| * ==================================================================== |
| * @endcopyright |
| * |
| * @file svn_cert.h |
| * @brief Implementation of certificate validation functions |
| */ |
| |
| #ifndef SVN_CERT_H |
| #define SVN_CERT_H |
| |
| #include <apr.h> |
| |
| #include "svn_types.h" |
| #include "svn_string.h" |
| |
| #ifdef __cplusplus |
| extern "C" { |
| #endif /* __cplusplus */ |
| |
| |
| /* Return TRUE iff @a pattern matches @a hostname as defined |
| * by the matching rules of RFC 6125. In the context of RFC |
| * 6125 the pattern is the domain name portion of the presented |
| * identifier (which comes from the Common Name or a DNSName |
| * portion of the subjectAltName of an X.509 certificate) and |
| * the hostname is the source domain (i.e. the host portion |
| * of the URI the user entered). |
| * |
| * @note With respect to wildcards we only support matching |
| * wildcards in the left-most label and as the only character |
| * in the left-most label (i.e. we support RFC 6125 ยง 6.4.3 |
| * Rule 1 and 2 but not the optional Rule 3). This may change |
| * in the future. |
| * |
| * @note Subversion does not at current support internationalized |
| * domain names. Both values are presumed to be in NR-LDH label |
| * or A-label form (see RFC 5890 for the definition). |
| * |
| * @since New in 1.9. |
| */ |
| svn_boolean_t |
| svn_cert__match_dns_identity(svn_string_t *pattern, svn_string_t *hostname); |
| |
| |
| #ifdef __cplusplus |
| } |
| #endif /* __cplusplus */ |
| |
| #endif /* SVN_CERT_H */ |
