ASN1_BIT_STRING *signature;	int references;	} /* X509_CRL */;DECLARE_STACK_OF(X509_CRL)DECLARE_ASN1_SET_OF(X509_CRL)typedef struct private_key_st	{	int version;	/* The PKCS#8 data types */	X509_ALGOR *enc_algor;	ASN1_OCTET_STRING *enc_pkey;	/* encrypted pub key */	/* When decrypted, the following will not be NULL */	EVP_PKEY *dec_pkey;	/* used to encrypt and decrypt */	int key_length;	char *key_data;	int key_free;	/* true if we should auto free key_data */	/* expanded version of 'enc_algor' */	EVP_CIPHER_INFO cipher;	int references;	} X509_PKEY;#ifndef OPENSSL_NO_EVPtypedef struct X509_info_st	{	X509 *x509;	X509_CRL *crl;	X509_PKEY *x_pkey;	EVP_CIPHER_INFO enc_cipher;	int enc_len;	char *enc_data;	int references;	} X509_INFO;DECLARE_STACK_OF(X509_INFO)#endif/* The next 2 structures and their 8 routines were sent to me by * Pat Richard <patr@x509.com> and are used to manipulate * Netscapes spki structures - useful if you are writing a CA web page */typedef struct Netscape_spkac_st	{	X509_PUBKEY *pubkey;	ASN1_IA5STRING *challenge;	/* challenge sent in atlas >= PR2 */	} NETSCAPE_SPKAC;typedef struct Netscape_spki_st	{	NETSCAPE_SPKAC *spkac;	/* signed public key and challenge */	X509_ALGOR *sig_algor;	ASN1_BIT_STRING *signature;	} NETSCAPE_SPKI;/* Netscape certificate sequence structure */typedef struct Netscape_certificate_sequence	{	ASN1_OBJECT *type;	STACK_OF(X509) *certs;	} NETSCAPE_CERT_SEQUENCE;/* Unused (and iv length is wrong)typedef struct CBCParameter_st	{	unsigned char iv[8];	} CBC_PARAM;*//* Password based encryption structure */typedef struct PBEPARAM_st {ASN1_OCTET_STRING *salt;ASN1_INTEGER *iter;} PBEPARAM;/* Password based encryption V2 structures */typedef struct PBE2PARAM_st {X509_ALGOR *keyfunc;X509_ALGOR *encryption;} PBE2PARAM;typedef struct PBKDF2PARAM_st {ASN1_TYPE *salt;	/* Usually OCTET STRING but could be anything */ASN1_INTEGER *iter;ASN1_INTEGER *keylength;X509_ALGOR *prf;} PBKDF2PARAM;/* PKCS#8 private key info structure */typedef struct pkcs8_priv_key_info_st        {        int broken;     /* Flag for various broken formats */#define PKCS8_OK		0#define PKCS8_NO_OCTET		1#define PKCS8_EMBEDDED_PARAM	2#define PKCS8_NS_DB		3        ASN1_INTEGER *version;        X509_ALGOR *pkeyalg;        ASN1_TYPE *pkey; /* Should be OCTET STRING but some are broken */        STACK_OF(X509_ATTRIBUTE) *attributes;        } PKCS8_PRIV_KEY_INFO;#ifdef  __cplusplus}#endif#include <openssl/x509_vfy.h>#include <openssl/pkcs7.h>#ifdef  __cplusplusextern "C" {#endif#ifdef SSLEAY_MACROS#define X509_verify(a,r) ASN1_verify((int (*)())i2d_X509_CINF,a->sig_alg,\	a->signature,(char *)a->cert_info,r)#define X509_REQ_verify(a,r) ASN1_verify((int (*)())i2d_X509_REQ_INFO, \	a->sig_alg,a->signature,(char *)a->req_info,r)#define X509_CRL_verify(a,r) ASN1_verify((int (*)())i2d_X509_CRL_INFO, \	a->sig_alg, a->signature,(char *)a->crl,r)#define X509_sign(x,pkey,md) \	ASN1_sign((int (*)())i2d_X509_CINF, x->cert_info->signature, \		x->sig_alg, x->signature, (char *)x->cert_info,pkey,md)#define X509_REQ_sign(x,pkey,md) \	ASN1_sign((int (*)())i2d_X509_REQ_INFO,x->sig_alg, NULL, \		x->signature, (char *)x->req_info,pkey,md)#define X509_CRL_sign(x,pkey,md) \	ASN1_sign((int (*)())i2d_X509_CRL_INFO,x->crl->sig_alg,x->sig_alg, \		x->signature, (char *)x->crl,pkey,md)#define NETSCAPE_SPKI_sign(x,pkey,md) \	ASN1_sign((int (*)())i2d_NETSCAPE_SPKAC, x->sig_algor,NULL, \		x->signature, (char *)x->spkac,pkey,md)#define X509_dup(x509) (X509 *)ASN1_dup((int (*)())i2d_X509, \		(char *(*)())d2i_X509,(char *)x509)#define X509_ATTRIBUTE_dup(xa) (X509_ATTRIBUTE *)ASN1_dup(\		(int (*)())i2d_X509_ATTRIBUTE, \		(char *(*)())d2i_X509_ATTRIBUTE,(char *)xa)#define X509_EXTENSION_dup(ex) (X509_EXTENSION *)ASN1_dup( \		(int (*)())i2d_X509_EXTENSION, \		(char *(*)())d2i_X509_EXTENSION,(char *)ex)#define d2i_X509_fp(fp,x509) (X509 *)ASN1_d2i_fp((char *(*)())X509_new, \		(char *(*)())d2i_X509, (fp),(unsigned char **)(x509))#define i2d_X509_fp(fp,x509) ASN1_i2d_fp(i2d_X509,fp,(unsigned char *)x509)#define d2i_X509_bio(bp,x509) (X509 *)ASN1_d2i_bio((char *(*)())X509_new, \		(char *(*)())d2i_X509, (bp),(unsigned char **)(x509))#define i2d_X509_bio(bp,x509) ASN1_i2d_bio(i2d_X509,bp,(unsigned char *)x509)#define X509_CRL_dup(crl) (X509_CRL *)ASN1_dup((int (*)())i2d_X509_CRL, \		(char *(*)())d2i_X509_CRL,(char *)crl)#define d2i_X509_CRL_fp(fp,crl) (X509_CRL *)ASN1_d2i_fp((char *(*)()) \		X509_CRL_new,(char *(*)())d2i_X509_CRL, (fp),\		(unsigned char **)(crl))#define i2d_X509_CRL_fp(fp,crl) ASN1_i2d_fp(i2d_X509_CRL,fp,\		(unsigned char *)crl)#define d2i_X509_CRL_bio(bp,crl) (X509_CRL *)ASN1_d2i_bio((char *(*)()) \		X509_CRL_new,(char *(*)())d2i_X509_CRL, (bp),\		(unsigned char **)(crl))#define i2d_X509_CRL_bio(bp,crl) ASN1_i2d_bio(i2d_X509_CRL,bp,\		(unsigned char *)crl)#define PKCS7_dup(p7) (PKCS7 *)ASN1_dup((int (*)())i2d_PKCS7, \		(char *(*)())d2i_PKCS7,(char *)p7)#define d2i_PKCS7_fp(fp,p7) (PKCS7 *)ASN1_d2i_fp((char *(*)()) \		PKCS7_new,(char *(*)())d2i_PKCS7, (fp),\		(unsigned char **)(p7))#define i2d_PKCS7_fp(fp,p7) ASN1_i2d_fp(i2d_PKCS7,fp,\		(unsigned char *)p7)#define d2i_PKCS7_bio(bp,p7) (PKCS7 *)ASN1_d2i_bio((char *(*)()) \		PKCS7_new,(char *(*)())d2i_PKCS7, (bp),\		(unsigned char **)(p7))#define i2d_PKCS7_bio(bp,p7) ASN1_i2d_bio(i2d_PKCS7,bp,\		(unsigned char *)p7)#define X509_REQ_dup(req) (X509_REQ *)ASN1_dup((int (*)())i2d_X509_REQ, \		(char *(*)())d2i_X509_REQ,(char *)req)#define d2i_X509_REQ_fp(fp,req) (X509_REQ *)ASN1_d2i_fp((char *(*)())\		X509_REQ_new, (char *(*)())d2i_X509_REQ, (fp),\		(unsigned char **)(req))#define i2d_X509_REQ_fp(fp,req) ASN1_i2d_fp(i2d_X509_REQ,fp,\		(unsigned char *)req)#define d2i_X509_REQ_bio(bp,req) (X509_REQ *)ASN1_d2i_bio((char *(*)())\		X509_REQ_new, (char *(*)())d2i_X509_REQ, (bp),\		(unsigned char **)(req))#define i2d_X509_REQ_bio(bp,req) ASN1_i2d_bio(i2d_X509_REQ,bp,\		(unsigned char *)req)#define RSAPublicKey_dup(rsa) (RSA *)ASN1_dup((int (*)())i2d_RSAPublicKey, \		(char *(*)())d2i_RSAPublicKey,(char *)rsa)#define RSAPrivateKey_dup(rsa) (RSA *)ASN1_dup((int (*)())i2d_RSAPrivateKey, \		(char *(*)())d2i_RSAPrivateKey,(char *)rsa)#define d2i_RSAPrivateKey_fp(fp,rsa) (RSA *)ASN1_d2i_fp((char *(*)())\		RSA_new,(char *(*)())d2i_RSAPrivateKey, (fp), \		(unsigned char **)(rsa))#define i2d_RSAPrivateKey_fp(fp,rsa) ASN1_i2d_fp(i2d_RSAPrivateKey,fp, \		(unsigned char *)rsa)#define d2i_RSAPrivateKey_bio(bp,rsa) (RSA *)ASN1_d2i_bio((char *(*)())\		RSA_new,(char *(*)())d2i_RSAPrivateKey, (bp), \		(unsigned char **)(rsa))#define i2d_RSAPrivateKey_bio(bp,rsa) ASN1_i2d_bio(i2d_RSAPrivateKey,bp, \		(unsigned char *)rsa)#define d2i_RSAPublicKey_fp(fp,rsa) (RSA *)ASN1_d2i_fp((char *(*)())\		RSA_new,(char *(*)())d2i_RSAPublicKey, (fp), \		(unsigned char **)(rsa))#define i2d_RSAPublicKey_fp(fp,rsa) ASN1_i2d_fp(i2d_RSAPublicKey,fp, \		(unsigned char *)rsa)#define d2i_RSAPublicKey_bio(bp,rsa) (RSA *)ASN1_d2i_bio((char *(*)())\		RSA_new,(char *(*)())d2i_RSAPublicKey, (bp), \		(unsigned char **)(rsa))#define i2d_RSAPublicKey_bio(bp,rsa) ASN1_i2d_bio(i2d_RSAPublicKey,bp, \		(unsigned char *)rsa)#define d2i_DSAPrivateKey_fp(fp,dsa) (DSA *)ASN1_d2i_fp((char *(*)())\		DSA_new,(char *(*)())d2i_DSAPrivateKey, (fp), \		(unsigned char **)(dsa))#define i2d_DSAPrivateKey_fp(fp,dsa) ASN1_i2d_fp(i2d_DSAPrivateKey,fp, \		(unsigned char *)dsa)#define d2i_DSAPrivateKey_bio(bp,dsa) (DSA *)ASN1_d2i_bio((char *(*)())\		DSA_new,(char *(*)())d2i_DSAPrivateKey, (bp), \		(unsigned char **)(dsa))#define i2d_DSAPrivateKey_bio(bp,dsa) ASN1_i2d_bio(i2d_DSAPrivateKey,bp, \		(unsigned char *)dsa)#define X509_ALGOR_dup(xn) (X509_ALGOR *)ASN1_dup((int (*)())i2d_X509_ALGOR,\		(char *(*)())d2i_X509_ALGOR,(char *)xn)#define X509_NAME_dup(xn) (X509_NAME *)ASN1_dup((int (*)())i2d_X509_NAME, \		(char *(*)())d2i_X509_NAME,(char *)xn)#define X509_NAME_ENTRY_dup(ne) (X509_NAME_ENTRY *)ASN1_dup( \		(int (*)())i2d_X509_NAME_ENTRY, \		(char *(*)())d2i_X509_NAME_ENTRY,\		(char *)ne)#define X509_digest(data,type,md,len) \	ASN1_digest((int (*)())i2d_X509,type,(char *)data,md,len)#define X509_NAME_digest(data,type,md,len) \	ASN1_digest((int (*)())i2d_X509_NAME,type,(char *)data,md,len)#ifndef PKCS7_ISSUER_AND_SERIAL_digest#define PKCS7_ISSUER_AND_SERIAL_digest(data,type,md,len) \	ASN1_digest((int (*)())i2d_PKCS7_ISSUER_AND_SERIAL,type,\		(char *)data,md,len)#endif#endif#define X509_EXT_PACK_UNKNOWN	1#define X509_EXT_PACK_STRING	2#define		X509_get_version(x) ASN1_INTEGER_get((x)->cert_info->version)/* #define	X509_get_serialNumber(x) ((x)->cert_info->serialNumber) */#define		X509_get_notBefore(x) ((x)->cert_info->validity->notBefore)#define		X509_get_notAfter(x) ((x)->cert_info->validity->notAfter)#define		X509_extract_key(x)	X509_get_pubkey(x) /*****/#define		X509_REQ_get_version(x) ASN1_INTEGER_get((x)->req_info->version)#define		X509_REQ_get_subject_name(x) ((x)->req_info->subject)#define		X509_REQ_extract_key(a)	X509_REQ_get_pubkey(a)#define		X509_name_cmp(a,b)	X509_NAME_cmp((a),(b))#define		X509_get_signature_type(x) EVP_PKEY_type(OBJ_obj2nid((x)->sig_alg->algorithm))#define		X509_CRL_get_version(x) ASN1_INTEGER_get((x)->crl->version)#define 	X509_CRL_get_lastUpdate(x) ((x)->crl->lastUpdate)#define 	X509_CRL_get_nextUpdate(x) ((x)->crl->nextUpdate)#define		X509_CRL_get_issuer(x) ((x)->crl->issuer)#define		X509_CRL_get_REVOKED(x) ((x)->crl->revoked)/* This one is only used so that a binary form can output, as in * i2d_X509_NAME(X509_get_X509_PUBKEY(x),&buf) */#define 	X509_get_X509_PUBKEY(x) ((x)->cert_info->key)const char *X509_verify_cert_error_string(long n);#ifndef SSLEAY_MACROS#ifndef OPENSSL_NO_EVPint X509_verify(X509 *a, EVP_PKEY *r);int X509_REQ_verify(X509_REQ *a, EVP_PKEY *r);int X509_CRL_verify(X509_CRL *a, EVP_PKEY *r);int NETSCAPE_SPKI_verify(NETSCAPE_SPKI *a, EVP_PKEY *r);NETSCAPE_SPKI * NETSCAPE_SPKI_b64_decode(const char *str, int len);char * NETSCAPE_SPKI_b64_encode(NETSCAPE_SPKI *x);EVP_PKEY *NETSCAPE_SPKI_get_pubkey(NETSCAPE_SPKI *x);int NETSCAPE_SPKI_set_pubkey(NETSCAPE_SPKI *x, EVP_PKEY *pkey);int NETSCAPE_SPKI_print(BIO *out, NETSCAPE_SPKI *spki);int X509_signature_print(BIO *bp,X509_ALGOR *alg, ASN1_STRING *sig);int X509_sign(X509 *x, EVP_PKEY *pkey, const EVP_MD *md);int X509_REQ_sign(X509_REQ *x, EVP_PKEY *pkey, const EVP_MD *md);int X509_CRL_sign(X509_CRL *x, EVP_PKEY *pkey, const EVP_MD *md);int NETSCAPE_SPKI_sign(NETSCAPE_SPKI *x, EVP_PKEY *pkey, const EVP_MD *md);int X509_pubkey_digest(const X509 *data,const EVP_MD *type,		unsigned char *md, unsigned int *len);int X509_digest(const X509 *data,const EVP_MD *type,		unsigned char *md, unsigned int *len);int X509_CRL_digest(const X509_CRL *data,const EVP_MD *type,		unsigned char *md, unsigned int *len);int X509_REQ_digest(const X509_REQ *data,const EVP_MD *type,		unsigned char *md, unsigned int *len);int X509_NAME_digest(const X509_NAME *data,const EVP_MD *type,		unsigned char *md, unsigned int *len);#endif#ifndef OPENSSL_NO_FP_APIX509 *d2i_X509_fp(FILE *fp, X509 **x509);int i2d_X509_fp(FILE *fp,X509 *x509);X509_CRL *d2i_X509_CRL_fp(FILE *fp,X509_CRL **crl);int i2d_X509_CRL_fp(FILE *fp,X509_CRL *crl);X509_REQ *d2i_X509_REQ_fp(FILE *fp,X509_REQ **req);int i2d_X509_REQ_fp(FILE *fp,X509_REQ *req);#ifndef OPENSSL_NO_RSARSA *d2i_RSAPrivateKey_fp(FILE *fp,RSA **rsa);int i2d_RSAPrivateKey_fp(FILE *fp,RSA *rsa);RSA *d2i_RSAPublicKey_fp(FILE *fp,RSA **rsa);int i2d_RSAPublicKey_fp(FILE *fp,RSA *rsa);RSA *d2i_RSA_PUBKEY_fp(FILE *fp,RSA **rsa);int i2d_RSA_PUBKEY_fp(FILE *fp,RSA *rsa);#endif#ifndef OPENSSL_NO_DSADSA *d2i_DSA_PUBKEY_fp(FILE *fp, DSA **dsa);int i2d_DSA_PUBKEY_fp(FILE *fp, DSA *dsa);DSA *d2i_DSAPrivateKey_fp(FILE *fp, DSA **dsa);int i2d_DSAPrivateKey_fp(FILE *fp, DSA *dsa);#endifX509_SIG *d2i_PKCS8_fp(FILE *fp,X509_SIG **p8);int i2d_PKCS8_fp(FILE *fp,X509_SIG *p8);PKCS8_PRIV_KEY_INFO *d2i_PKCS8_PRIV_KEY_INFO_fp(FILE *fp,						PKCS8_PRIV_KEY_INFO **p8inf);int i2d_PKCS8_PRIV_KEY_INFO_fp(FILE *fp,PKCS8_PRIV_KEY_INFO *p8inf);int i2d_PKCS8PrivateKeyInfo_fp(FILE *fp, EVP_PKEY *key);int i2d_PrivateKey_fp(FILE *fp, EVP_PKEY *pkey);EVP_PKEY *d2i_PrivateKey_fp(FILE *fp, EVP_PKEY **a);int i2d_PUBKEY_fp(FILE *fp, EVP_PKEY *pkey);EVP_PKEY *d2i_PUBKEY_fp(FILE *fp, EVP_PKEY **a);#endif#ifndef OPENSSL_NO_BIOX509 *d2i_X509_bio(BIO *bp,X509 **x509);int i2d_X509_bio(BIO *bp,X509 *x509);X509_CRL *d2i_X509_CRL_bio(BIO *bp,X509_CRL **crl);int i2d_X509_CRL_bio(BIO *bp,X509_CRL *crl);X509_REQ *d2i_X509_REQ_bio(BIO *bp,X509_REQ **req);int i2d_X509_REQ_bio(BIO *bp,X509_REQ *req);#ifndef OPENSSL_NO_RSARSA *d2i_RSAPrivateKey_bio(BIO *bp,RSA **rsa);int i2d_RSAPrivateKey_bio(BIO *bp,RSA *rsa);RSA *d2i_RSAPublicKey_bio(BIO *bp,RSA **rsa);int i2d_RSAPublicKey_bio(BIO *bp,RSA *rsa);RSA *d2i_RSA_PUBKEY_bio(BIO *bp,RSA **rsa);int i2d_RSA_PUBKEY_bio(BIO *bp,RSA *rsa);#endif#ifndef OPENSSL_NO_DSADSA *d2i_DSA_PUBKEY_bio(BIO *bp, DSA **dsa);int i2d_DSA_PUBKEY_bio(BIO *bp, DSA *dsa);DSA *d2i_DSAPrivateKey_bio(BIO *bp, DSA **dsa);int i2d_DSAPrivateKey_bio(BIO *bp, DSA *dsa);#endifX509_SIG *d2i_PKCS8_bio(BIO *bp,X509_SIG **p8);int i2d_PKCS8_bio(BIO *bp,X509_SIG *p8);PKCS8_PRIV_KEY_INFO *d2i_PKCS8_PRIV_KEY_INFO_bio(BIO *bp,						PKCS8_PRIV_KEY_INFO **p8inf);int i2d_PKCS8_PRIV_KEY_INFO_bio(BIO *bp,PKCS8_PRIV_KEY_INFO *p8inf);int i2d_PKCS8PrivateKeyInfo_bio(BIO *bp, EVP_PKEY *key);int i2d_PrivateKey_bio(BIO *bp, EVP_PKEY *pkey);EVP_PKEY *d2i_PrivateKey_bio(BIO *bp, EVP_PKEY **a);int i2d_PUBKEY_bio(BIO *bp, EVP_PKEY *pkey);EVP_PKEY *d2i_PUBKEY_bio(BIO *bp, EVP_PKEY **a);#endifX509 *X509_dup(X509 *x509);X509_ATTRIBUTE *X509_ATTRIBUTE_dup(X509_ATTRIBUTE *xa);X509_EXTENSION *X509_EXTENSION_dup(X509_EXTENSION *ex);X509_CRL *X509_CRL_dup(X509_CRL *crl);X509_REQ *X509_REQ_dup(X509_REQ *req);X509_ALGOR *X509_ALGOR_dup(X509_ALGOR *xn);X509_NAME *X509_NAME_dup(X509_NAME *xn);X509_NAME_ENTRY *X509_NAME_ENTRY_dup(X509_NAME_ENTRY *ne);#endif /* !SSLEAY_MACROS */int		X509_cmp_time(ASN1_TIME *s, time_t *t);int		X509_cmp_current_time(ASN1_TIME *s);ASN1_TIME *	X509_time_adj(ASN1_TIME *s, long adj, time_t *t);ASN1_TIME *	X509_gmtime_adj(ASN1_TIME *s, long adj);const char *	X509_get_default_cert_area(void );const char *	X509_get_default_cert_dir(void );const char *	X509_get_default_cert_file(void );const char *	X509_get_default_cert_dir_env(void );const char *	X509_get_default_cert_file_env(void );const char *	X509_get_default_private_dir(void );X509_REQ *	X509_to_X509_REQ(X509 *x, EVP_PKEY *pkey, const EVP_MD *md);X509 *		X509_REQ_to_X509(X509_REQ *r, int days,EVP_PKEY *pkey);DECLARE_ASN1_FUNCTIONS(X509_ALGOR)DECLARE_ASN1_FUNCTIONS(X509_VAL)DECLARE_ASN1_FUNCTIONS(X509_PUBKEY)int		X509_PUBKEY_set(X509_PUBKEY **x, EVP_PKEY *pkey);EVP_PKEY *	X509_PUBKEY_get(X509_PUBKEY *key);int		X509_get_pubkey_parameters(EVP_PKEY *pkey,					   STACK_OF(X509) *chain);