diff options
Diffstat (limited to 'src/charon/credentials/credential_manager.h')
-rw-r--r-- | src/charon/credentials/credential_manager.h | 24 |
1 files changed, 14 insertions, 10 deletions
diff --git a/src/charon/credentials/credential_manager.h b/src/charon/credentials/credential_manager.h index ca22f98a2..9f9d6136f 100644 --- a/src/charon/credentials/credential_manager.h +++ b/src/charon/credentials/credential_manager.h @@ -144,20 +144,24 @@ struct credential_manager_t { */ private_key_t* (*get_private)(credential_manager_t *this, key_type_t type, identification_t *id, auth_info_t *auth); + /** - * Get a public key to verify a signature. + * Create an enumerator over trusted public keys. * - * The get_public() method gets a trusted public key to verify a signature - * of id. The auth parameter contains additional authentication infos, - * e.g. peer and intermediate certificates. + * This method gets a an enumerator over trusted public keys to verify a + * signature created by id. The auth parameter contains additional + * authentication infos, e.g. peer and intermediate certificates. + * The resulting enumerator enumerates over public_key_t *, auth_info_t *, + * where the auth info contains gained privileges for the authorization + * process. * - * @param type type of key to get - * @param id identification the key belongs to - * @param auth auth_info helper, including certificates to verify key - * @return public_key_t, NULL if none found + * @param type type of the key to get + * @param id owner of the key, signer of the signature + * @param auth authentication infos + * @return enumerator */ - public_key_t* (*get_public)(credential_manager_t *this, key_type_t type, - identification_t *id, auth_info_t *auth); + enumerator_t* (*create_public_enumerator)(credential_manager_t *this, + key_type_t type, identification_t *id, auth_info_t *auth); /** * Flush the certificate cache. |