/*
 * Copyright (c) 2023-2024 Huawei Device Co., Ltd.
 * Licensed under the Apache License, Version 2.0 (the "License");
 * you may not use this file except in compliance with the License.
 * You may obtain a copy of the License at
 *
 *    http://www.apache.org/licenses/LICENSE-2.0
 *
 * Unless required by applicable law or agreed to in writing, software
 * distributed under the License is distributed on an "AS IS" BASIS,
 * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
 * See the License for the specific language governing permissions and
 * limitations under the License.
 */

#ifndef X509_CERT_MATCH_PARAMETERS_H
#define X509_CERT_MATCH_PARAMETERS_H

#include <stdbool.h>
#include <stddef.h>
#include <stdint.h>

#include "certificate.h"
#include "cf_blob.h"
#include "cf_type.h"

typedef struct {
    CfGeneralNameType type;
    CfBlob name;
} SubjectAlternaiveNameData;

typedef struct {
    SubjectAlternaiveNameData *data;
    uint32_t count;
} SubAltNameArray;

typedef struct HcfX509CertMatchParams HcfX509CertMatchParams;
struct HcfX509CertMatchParams {
    HcfCertificate *x509Cert;
    CfBlob *validDate;
    CfBlob *issuer;
    CfBlob *keyUsage;
    CfBlob *serialNumber;
    CfBlob *subject;
    CfBlob *publicKey;
    CfBlob *publicKeyAlgID;
    SubAltNameArray *subjectAlternativeNames;
    bool matchAllSubjectAltNames;
    CfBlob *authorityKeyIdentifier;
    int32_t minPathLenConstraint;
    CfArray *extendedKeyUsage;
    CfBlob *nameConstraints;
    CfArray *certPolicy;
    CfBlob *privateKeyValid;
    CfBlob *subjectKeyIdentifier;
};

#endif // X509_CERT_MATCH_PARAMETERS_H