Allow the construction of chains with custom URLs

1 files changed, 11 insertions, 3 deletions

diff --git a/doc/cha-tokens.texi b/doc/cha-tokens.texi
index 7d76e5b1be..5e4c224337 100644
--- a/doc/cha-tokens.texi
+++ b/doc/cha-tokens.texi
@@ -212,10 +212,17 @@ typedef int (*gnutls_x509_crt_import_url_func)(gnutls_x509_crt_t pkey,
                                                const char *url,
                                                unsigned flags);
 
-/* This callback is optional */
+/* The following callbacks are optional */
+
+/* This is to enable gnutls_pubkey_import_url() */
 typedef int (*gnutls_pubkey_import_url_func)(gnutls_pubkey_t pkey,
-                                             const char *url,
-                                             unsigned flags);
+					     const char *url, unsigned flags);
+
+/* This is to allow constructing a certificate chain. It will be provided
+ * the initial certificate URL and the certificate to find its issuer, and must
+ * return the DER encoding of the issuer's certificate. */
+typedef int (*gnutls_get_raw_issuer_func)(const char *url, gnutls_x509_crt_t crt,
+					  gnutls_datum_t *issuer_der, unsigned flags);
 
 typedef struct custom_url_st @{
         const char *name;
@@ -223,6 +230,7 @@ typedef struct custom_url_st @{
         gnutls_privkey_import_url_func import_key;
         gnutls_x509_crt_import_url_func import_crt;
         gnutls_pubkey_import_url_func import_pubkey;
+	gnutls_get_raw_issuer_func get_issuer;
 @} gnutls_custom_url_st;
 @end example