path: root/libphobos/libdruntime/core/sys/windows/wincrypt.d

/**
 * Windows API header module
 *
 * Translated from MinGW Windows headers
 *
 * Authors: Stewart Gordon
 * License: $(LINK2 http://www.boost.org/LICENSE_1_0.txt, Boost License 1.0)
 * Source: $(DRUNTIMESRC core/sys/windows/_wincrypt.d)
 */
module core.sys.windows.wincrypt;
version (Windows):
pragma(lib, "advapi32");

version (ANSI) {} else version = Unicode;

import core.sys.windows.w32api, core.sys.windows.winbase, core.sys.windows.windef;

/* FIXME:
 *  Types of some constants
 *  Types of macros
 *  Inits of various "size" and "version" members
 *  Why are some #ifdefs commented out?
 */

const TCHAR[]
    MS_DEF_PROV = "Microsoft Base Cryptographic Provider v1.0",
    MS_ENHANCED_PROV = "Microsoft Enhanced Cryptographic Provider v1.0",
    MS_STRONG_PROV = "Microsoft Strong Cryptographic Provider",
    MS_DEF_RSA_SIG_PROV = "Microsoft RSA Signature Cryptographic Provider",
    MS_DEF_RSA_SCHANNEL_PROV = "Microsoft RSA SChannel Cryptographic Provider",
    MS_DEF_DSS_PROV = "Microsoft Base DSS Cryptographic Provider",
    MS_DEF_DSS_DH_PROV
      = "Microsoft Base DSS and Diffie-Hellman Cryptographic Provider",
    MS_ENH_DSS_DH_PROV
      = "Microsoft Enhanced DSS and Diffie-Hellman Cryptographic Provider",
    MS_DEF_DH_SCHANNEL_PROV = "Microsoft DH SChannel Cryptographic Provider",
    MS_SCARD_PROV = "Microsoft Base Smart Card Crypto Provider";

static if (_WIN32_WINNT > 0x501) {
const TCHAR[] MS_ENH_RSA_AES_PROV
      = "Microsoft Enhanced RSA and AES Cryptographic Provider";
} else static if (_WIN32_WINNT == 0x501) {
const TCHAR[] MS_ENH_RSA_AES_PROV
      = "Microsoft Enhanced RSA and AES Cryptographic Provider (Prototype)";
}

ALG_ID GET_ALG_CLASS(ALG_ID x) { return x & 0xE000; }
ALG_ID GET_ALG_TYPE (ALG_ID x) { return x & 0x1E00; }
ALG_ID GET_ALG_SID  (ALG_ID x) { return x & 0x01FF; }

enum : ALG_ID {
    ALG_CLASS_ANY           = 0,
    ALG_CLASS_SIGNATURE     = 0x2000,
    ALG_CLASS_MSG_ENCRYPT   = 0x4000,
    ALG_CLASS_DATA_ENCRYPT  = 0x6000,
    ALG_CLASS_HASH          = 0x8000,
    ALG_CLASS_KEY_EXCHANGE  = 0xA000,
    ALG_CLASS_ALL           = 0xE000
}

enum : ALG_ID {
    ALG_TYPE_ANY           = 0,
    ALG_TYPE_DSS           = 0x0200,
    ALG_TYPE_RSA           = 0x0400,
    ALG_TYPE_BLOCK         = 0x0600,
    ALG_TYPE_STREAM        = 0x0800,
    ALG_TYPE_DH            = 0x0A00,
    ALG_TYPE_SECURECHANNEL = 0x0C00
}

enum : ALG_ID {
    ALG_SID_ANY          =  0,
    ALG_SID_RSA_ANY      =  0,
    ALG_SID_RSA_PKCS,
    ALG_SID_RSA_MSATWORK,
    ALG_SID_RSA_ENTRUST,
    ALG_SID_RSA_PGP,  // =  4
    ALG_SID_DSS_ANY      =  0,
    ALG_SID_DSS_PKCS,
    ALG_SID_DSS_DMS,  // =  2
    ALG_SID_DES          =  1,
    ALG_SID_3DES         =  3,
    ALG_SID_DESX,
    ALG_SID_IDEA,
    ALG_SID_CAST,
    ALG_SID_SAFERSK64,
    ALG_SID_SAFERSK128,
    ALG_SID_3DES_112,
    ALG_SID_SKIPJACK,
    ALG_SID_TEK,
    ALG_SID_CYLINK_MEK,
    ALG_SID_RC5,      // = 13
    ALG_SID_RC2          =  2,
    ALG_SID_RC4          =  1,
    ALG_SID_SEAL         =  2,
    ALG_SID_MD2          =  1,
    ALG_SID_MD4,
    ALG_SID_MD5,
    ALG_SID_SHA,
    ALG_SID_MAC,
    ALG_SID_RIPEMD,
    ALG_SID_RIPEMD160,
    ALG_SID_SSL3SHAMD5,
    ALG_SID_HMAC,
    ALG_SID_TLS1PRF,  // = 10
    ALG_SID_AES_128      = 14,
    ALG_SID_AES_192,
    ALG_SID_AES_256,
    ALG_SID_AES,      // = 17
    ALG_SID_EXAMPLE      = 80
}

enum : ALG_ID {
    CALG_MD2        = ALG_CLASS_HASH | ALG_TYPE_ANY | ALG_SID_MD2,
    CALG_MD4        = ALG_CLASS_HASH | ALG_TYPE_ANY | ALG_SID_MD4,
    CALG_MD5        = ALG_CLASS_HASH | ALG_TYPE_ANY | ALG_SID_MD5,
    CALG_SHA        = ALG_CLASS_HASH | ALG_TYPE_ANY | ALG_SID_SHA,
    CALG_SHA1       = CALG_SHA,
    CALG_MAC        = ALG_CLASS_HASH | ALG_TYPE_ANY | ALG_SID_MAC,
    CALG_3DES       = ALG_CLASS_DATA_ENCRYPT | ALG_TYPE_BLOCK | 3,
    CALG_CYLINK_MEK = ALG_CLASS_DATA_ENCRYPT | ALG_TYPE_BLOCK | 12,
    CALG_SKIPJACK   = ALG_CLASS_DATA_ENCRYPT | ALG_TYPE_BLOCK | 10,
    CALG_KEA_KEYX   = ALG_CLASS_KEY_EXCHANGE | ALG_TYPE_STREAM | ALG_TYPE_DSS | 4,
    CALG_RSA_SIGN   = ALG_CLASS_SIGNATURE | ALG_TYPE_RSA | ALG_SID_RSA_ANY,
    CALG_DSS_SIGN   = ALG_CLASS_SIGNATURE | ALG_TYPE_DSS | ALG_SID_DSS_ANY,
    CALG_RSA_KEYX   = ALG_CLASS_KEY_EXCHANGE | ALG_TYPE_RSA | ALG_SID_RSA_ANY,
    CALG_DES        = ALG_CLASS_DATA_ENCRYPT | ALG_TYPE_BLOCK | ALG_SID_DES,
    CALG_RC2        = ALG_CLASS_DATA_ENCRYPT | ALG_TYPE_BLOCK | ALG_SID_RC2,
    CALG_RC4        = ALG_CLASS_DATA_ENCRYPT | ALG_TYPE_STREAM | ALG_SID_RC4,
    CALG_SEAL       = ALG_CLASS_DATA_ENCRYPT | ALG_TYPE_STREAM | ALG_SID_SEAL,
    CALG_DH_EPHEM   = ALG_CLASS_KEY_EXCHANGE | ALG_TYPE_STREAM | ALG_TYPE_DSS
                      | ALG_SID_DSS_DMS,
    CALG_DESX       = ALG_CLASS_DATA_ENCRYPT | ALG_TYPE_BLOCK | ALG_SID_DESX,
// is undefined ALG_CLASS_DHASH in MinGW - presuming typo
    CALG_TLS1PRF    = ALG_CLASS_HASH | ALG_TYPE_ANY | ALG_SID_TLS1PRF,
    CALG_AES_128    = ALG_CLASS_DATA_ENCRYPT | ALG_TYPE_BLOCK | ALG_SID_AES_128,
    CALG_AES_192    = ALG_CLASS_DATA_ENCRYPT | ALG_TYPE_BLOCK | ALG_SID_AES_192,
    CALG_AES_256    = ALG_CLASS_DATA_ENCRYPT | ALG_TYPE_BLOCK | ALG_SID_AES_256,
    CALG_AES        = ALG_CLASS_DATA_ENCRYPT | ALG_TYPE_BLOCK | ALG_SID_AES,
}

enum {
    CRYPT_VERIFYCONTEXT = 0xF0000000,
}

enum {
    CRYPT_NEWKEYSET = 8,
    CRYPT_DELETEKEYSET = 16,
    CRYPT_MACHINE_KEYSET = 32,
    CRYPT_SILENT = 64,
}

enum {
    CRYPT_EXPORTABLE = 1,
    CRYPT_USER_PROTECTED = 2,
    CRYPT_CREATE_SALT = 4,
    CRYPT_UPDATE_KEY = 8,
}

enum {
    SIMPLEBLOB = 1,
    PUBLICKEYBLOB = 6,
    PRIVATEKEYBLOB = 7,
    PLAINTEXTKEYBLOB = 8,
    OPAQUEKEYBLOB = 9,
    PUBLICKEYBLOBEX = 10,
    SYMMETRICWRAPKEYBLOB = 11,
}

enum {
    AT_KEYEXCHANGE = 1,
    AT_SIGNATURE = 2,
}

enum {
    CRYPT_USERDATA = 1,
}

enum {
    PKCS5_PADDING = 1,
}

enum {
    CRYPT_MODE_CBC = 1,
    CRYPT_MODE_ECB = 2,
    CRYPT_MODE_OFB = 3,
    CRYPT_MODE_CFB = 4,
    CRYPT_MODE_CTS = 5,
    CRYPT_MODE_CBCI = 6,
    CRYPT_MODE_CFBP = 7,
    CRYPT_MODE_OFBP = 8,
    CRYPT_MODE_CBCOFM = 9,
    CRYPT_MODE_CBCOFMI = 10,
}

enum {
    CRYPT_ENCRYPT = 1,
    CRYPT_DECRYPT = 2,
    CRYPT_EXPORT = 4,
    CRYPT_READ = 8,
    CRYPT_WRITE = 16,
    CRYPT_MAC = 32,
}

enum {
    HP_ALGID = 1,
    HP_HASHVAL = 2,
    HP_HASHSIZE = 4,
    HP_HMAC_INFO = 5,
}

enum {
    CRYPT_FAILED = FALSE,
    CRYPT_SUCCEED = TRUE,
}

bool RCRYPT_SUCCEEDED(BOOL r) { return r==CRYPT_SUCCEED; }
bool RCRYPT_FAILED(BOOL r) { return r==CRYPT_FAILED; }

enum {
    PP_ENUMALGS = 1,
    PP_ENUMCONTAINERS = 2,
    PP_IMPTYPE = 3,
    PP_NAME = 4,
    PP_VERSION = 5,
    PP_CONTAINER = 6,
    PP_CHANGE_PASSWORD  = 7,
    PP_KEYSET_SEC_DESCR = 8,
    PP_CERTCHAIN    = 9,
    PP_KEY_TYPE_SUBTYPE = 10,
    PP_PROVTYPE = 16,
    PP_KEYSTORAGE   = 17,
    PP_APPLI_CERT   = 18,
    PP_SYM_KEYSIZE  = 19,
    PP_SESSION_KEYSIZE  = 20,
    PP_UI_PROMPT    = 21,
    PP_ENUMALGS_EX  = 22,
    PP_ENUMMANDROOTS = 25,
    PP_ENUMELECTROOTS = 26,
    PP_KEYSET_TYPE = 27,
    PP_ADMIN_PIN = 31,
    PP_KEYEXCHANGE_PIN = 32,
    PP_SIGNATURE_PIN = 33,
    PP_SIG_KEYSIZE_INC = 34,
    PP_KEYX_KEYSIZE_INC = 35,
    PP_UNIQUE_CONTAINER = 36,
    PP_SGC_INFO = 37,
    PP_USE_HARDWARE_RNG = 38,
    PP_KEYSPEC = 39,
    PP_ENUMEX_SIGNING_PROT = 40,
}

enum {
    CRYPT_FIRST = 1,
    CRYPT_NEXT = 2,
}

enum {
    CRYPT_IMPL_HARDWARE = 1,
    CRYPT_IMPL_SOFTWARE = 2,
    CRYPT_IMPL_MIXED = 3,
    CRYPT_IMPL_UNKNOWN = 4,
}

enum {
    PROV_RSA_FULL = 1,
    PROV_RSA_SIG = 2,
    PROV_DSS = 3,
    PROV_FORTEZZA = 4,
    PROV_MS_MAIL = 5,
    PROV_SSL = 6,
    PROV_STT_MER = 7,
    PROV_STT_ACQ = 8,
    PROV_STT_BRND = 9,
    PROV_STT_ROOT = 10,
    PROV_STT_ISS = 11,
    PROV_RSA_SCHANNEL = 12,
    PROV_DSS_DH = 13,
    PROV_EC_ECDSA_SIG = 14,
    PROV_EC_ECNRA_SIG = 15,
    PROV_EC_ECDSA_FULL = 16,
    PROV_EC_ECNRA_FULL = 17,
    PROV_DH_SCHANNEL = 18,
    PROV_SPYRUS_LYNKS = 20,
    PROV_RNG = 21,
    PROV_INTEL_SEC = 22,
    PROV_RSA_AES = 24,
    MAXUIDLEN = 64,
}

enum {
    CUR_BLOB_VERSION = 2,
}

enum {
    X509_ASN_ENCODING = 1,
    PKCS_7_ASN_ENCODING  = 65536,
}

enum {
    CERT_V1 = 0,
    CERT_V2 = 1,
    CERT_V3 = 2,
}

enum {
    CERT_E_CHAINING = (-2146762486),
    CERT_E_CN_NO_MATCH = (-2146762481),
    CERT_E_EXPIRED = (-2146762495),
    CERT_E_PURPOSE = (-2146762490),
    CERT_E_REVOCATION_FAILURE = (-2146762482),
    CERT_E_REVOKED = (-2146762484),
    CERT_E_ROLE = (-2146762493),
    CERT_E_UNTRUSTEDROOT = (-2146762487),
    CERT_E_UNTRUSTEDTESTROOT = (-2146762483),
    CERT_E_VALIDITYPERIODNESTING = (-2146762494),
    CERT_E_WRONG_USAGE = (-2146762480),
    CERT_E_PATHLENCONST = (-2146762492),
    CERT_E_CRITICAL = (-2146762491),
    CERT_E_ISSUERCHAINING = (-2146762489),
    CERT_E_MALFORMED = (-2146762488),
    CRYPT_E_REVOCATION_OFFLINE = (-2146885613),
    CRYPT_E_REVOKED = (-2146885616),
    TRUST_E_BASIC_CONSTRAINTS = (-2146869223),
    TRUST_E_CERT_SIGNATURE = (-2146869244),
    TRUST_E_FAIL = (-2146762485),
}

enum {
    CERT_TRUST_NO_ERROR = 0,
    CERT_TRUST_IS_NOT_TIME_VALID = 1,
    CERT_TRUST_IS_NOT_TIME_NESTED = 2,
    CERT_TRUST_IS_REVOKED = 4,
    CERT_TRUST_IS_NOT_SIGNATURE_VALID = 8,
    CERT_TRUST_IS_NOT_VALID_FOR_USAGE = 16,
    CERT_TRUST_IS_UNTRUSTED_ROOT = 32,
    CERT_TRUST_REVOCATION_STATUS_UNKNOWN = 64,
    CERT_TRUST_IS_CYCLIC = 128,
    CERT_TRUST_IS_PARTIAL_CHAIN = 65536,
    CERT_TRUST_CTL_IS_NOT_TIME_VALID = 131072,
    CERT_TRUST_CTL_IS_NOT_SIGNATURE_VALID = 262144,
    CERT_TRUST_CTL_IS_NOT_VALID_FOR_USAGE = 524288,
}

enum {
    CERT_TRUST_HAS_EXACT_MATCH_ISSUER = 1,
    CERT_TRUST_HAS_KEY_MATCH_ISSUER = 2,
    CERT_TRUST_HAS_NAME_MATCH_ISSUER = 4,
    CERT_TRUST_IS_SELF_SIGNED = 8,
    CERT_TRUST_IS_COMPLEX_CHAIN = 65536,
}

enum {
    CERT_CHAIN_POLICY_BASE              = cast(LPCSTR) 1,
    CERT_CHAIN_POLICY_AUTHENTICODE      = cast(LPCSTR) 2,
    CERT_CHAIN_POLICY_AUTHENTICODE_TS   = cast(LPCSTR) 3,
    CERT_CHAIN_POLICY_SSL               = cast(LPCSTR) 4,
    CERT_CHAIN_POLICY_BASIC_CONSTRAINTS = cast(LPCSTR) 5,
    CERT_CHAIN_POLICY_NT_AUTH           = cast(LPCSTR) 6,
}

enum {
    USAGE_MATCH_TYPE_AND = 0,
    USAGE_MATCH_TYPE_OR = 1,
}

enum {
    CERT_SIMPLE_NAME_STR = 1,
    CERT_OID_NAME_STR = 2,
    CERT_X500_NAME_STR = 3,
}
enum {
    CERT_NAME_STR_SEMICOLON_FLAG = 1073741824,
    CERT_NAME_STR_CRLF_FLAG = 134217728,
    CERT_NAME_STR_NO_PLUS_FLAG = 536870912,
    CERT_NAME_STR_NO_QUOTING_FLAG = 268435456,
    CERT_NAME_STR_REVERSE_FLAG = 33554432,
    CERT_NAME_STR_ENABLE_T61_UNICODE_FLAG = 131072,
}

enum {
    CERT_FIND_ANY = 0,
    CERT_FIND_CERT_ID = 1048576,
    CERT_FIND_CTL_USAGE = 655360,
    CERT_FIND_ENHKEY_USAGE = 655360,
    CERT_FIND_EXISTING = 851968,
    CERT_FIND_HASH = 65536,
    CERT_FIND_ISSUER_ATTR = 196612,
    CERT_FIND_ISSUER_NAME = 131076,
    CERT_FIND_ISSUER_OF = 786432,
    CERT_FIND_KEY_IDENTIFIER = 983040,
    CERT_FIND_KEY_SPEC = 589824,
    CERT_FIND_MD5_HASH = 262144,
    CERT_FIND_PROPERTY = 327680,
    CERT_FIND_PUBLIC_KEY = 393216,
    CERT_FIND_SHA1_HASH = 65536,
    CERT_FIND_SIGNATURE_HASH = 917504,
    CERT_FIND_SUBJECT_ATTR = 196615,
    CERT_FIND_SUBJECT_CERT = 720896,
    CERT_FIND_SUBJECT_NAME = 131079,
    CERT_FIND_SUBJECT_STR_A = 458759,
    CERT_FIND_SUBJECT_STR_W = 524295,
    CERT_FIND_ISSUER_STR_A = 458756,
    CERT_FIND_ISSUER_STR_W = 524292,
}

enum {
    CERT_FIND_OR_ENHKEY_USAGE_FLAG = 16,
    CERT_FIND_OPTIONAL_ENHKEY_USAGE_FLAG  = 1,
    CERT_FIND_NO_ENHKEY_USAGE_FLAG  = 8,
    CERT_FIND_VALID_ENHKEY_USAGE_FLAG  = 32,
    CERT_FIND_EXT_ONLY_ENHKEY_USAGE_FLAG  = 2,
}

enum {
    CERT_CASE_INSENSITIVE_IS_RDN_ATTRS_FLAG  = 2,
    CERT_UNICODE_IS_RDN_ATTRS_FLAG = 1,
    CERT_CHAIN_FIND_BY_ISSUER = 1,
}

enum {
    CERT_CHAIN_FIND_BY_ISSUER_COMPARE_KEY_FLAG = 1,
    CERT_CHAIN_FIND_BY_ISSUER_COMPLEX_CHAIN_FLAG = 2,
    CERT_CHAIN_FIND_BY_ISSUER_CACHE_ONLY_URL_FLAG = 4,
    CERT_CHAIN_FIND_BY_ISSUER_LOCAL_MACHINE_FLAG = 8,
    CERT_CHAIN_FIND_BY_ISSUER_NO_KEY_FLAG = 16384,
    CERT_CHAIN_FIND_BY_ISSUER_CACHE_ONLY_FLAG = 32768,
}

enum {
    CERT_STORE_PROV_SYSTEM = 10,
    CERT_SYSTEM_STORE_LOCAL_MACHINE = 131072,
}

enum {
    szOID_PKIX_KP_SERVER_AUTH = "4235600",
    szOID_SERVER_GATED_CRYPTO = "4235658",
    szOID_SGC_NETSCAPE = "2.16.840.1.113730.4.1",
    szOID_PKIX_KP_CLIENT_AUTH = "1.3.6.1.5.5.7.3.2",
}

enum {
    CRYPT_NOHASHOID = 0x00000001,
    CRYPT_NO_SALT = 0x10,
    CRYPT_PREGEN = 0x40,
}

enum {
    CRYPT_RECIPIENT = 0x10,
    CRYPT_INITIATOR = 0x40,
    CRYPT_ONLINE = 0x80,
    CRYPT_SF = 0x100,
    CRYPT_CREATE_IV = 0x200,
    CRYPT_KEK = 0x400,
    CRYPT_DATA_KEY = 0x800,
    CRYPT_VOLATILE = 0x1000,
    CRYPT_SGCKEY = 0x2000,
}

enum {
    KP_IV               = 0x00000001,
    KP_SALT             = 0x00000002,
    KP_PADDING          = 0x00000003,
    KP_MODE             = 0x00000004,
    KP_MODE_BITS        = 0x00000005,
    KP_PERMISSIONS      = 0x00000006,
    KP_ALGID            = 0x00000007,
    KP_BLOCKLEN         = 0x00000008,
    KP_KEYLEN           = 0x00000009,
    KP_SALT_EX          = 0x0000000a,
    KP_P                = 0x0000000b,
    KP_G                = 0x0000000c,
    KP_Q                = 0x0000000d,
    KP_X                = 0x0000000e,
    KP_Y                = 0x0000000f,
    KP_RA               = 0x00000010,
    KP_RB               = 0x00000011,
    KP_INFO             = 0x00000012,
    KP_EFFECTIVE_KEYLEN = 0x00000013,
    KP_SCHANNEL_ALG     = 0x00000014,
    KP_PUB_PARAMS       = 0x00000027,
}

enum {
    CRYPT_FLAG_PCT1    = 0x0001,
    CRYPT_FLAG_SSL2    = 0x0002,
    CRYPT_FLAG_SSL3    = 0x0004,
    CRYPT_FLAG_TLS1    = 0x0008,
    CRYPT_FLAG_IPSEC   = 0x0010,
    CRYPT_FLAG_SIGNING = 0x0020,
}

enum {
    SCHANNEL_MAC_KEY    = 0x00000000,
    SCHANNEL_ENC_KEY    = 0x00000001,
}

enum {
    INTERNATIONAL_USAGE = 0x00000001,
}


alias UINT ALG_ID;
alias ULONG_PTR HCRYPTPROV, HCRYPTKEY, HCRYPTHASH;
alias PVOID HCERTSTORE, HCRYPTMSG, HCERTCHAINENGINE;

struct VTableProvStruc {
    FARPROC FuncVerifyImage;
}
alias VTableProvStruc* PVTableProvStruc;

struct _CRYPTOAPI_BLOB {
    DWORD cbData;
    BYTE* pbData;
}
alias _CRYPTOAPI_BLOB CRYPT_INTEGER_BLOB, CRYPT_UINT_BLOB,
  CRYPT_OBJID_BLOB, CERT_NAME_BLOB, CERT_RDN_VALUE_BLOB, CERT_BLOB,
  CRL_BLOB, DATA_BLOB, CRYPT_DATA_BLOB, CRYPT_HASH_BLOB,
  CRYPT_DIGEST_BLOB, CRYPT_DER_BLOB, CRYPT_ATTR_BLOB;
alias _CRYPTOAPI_BLOB* PCRYPT_INTEGER_BLOB, PCRYPT_UINT_BLOB,
  PCRYPT_OBJID_BLOB, PCERT_NAME_BLOB, PCERT_RDN_VALUE_BLOB, PCERT_BLOB,
  PCRL_BLOB, PDATA_BLOB, PCRYPT_DATA_BLOB, PCRYPT_HASH_BLOB,
  PCRYPT_DIGEST_BLOB, PCRYPT_DER_BLOB, PCRYPT_ATTR_BLOB;

// not described in SDK; has the same layout as HTTPSPolicyCallbackData
struct SSL_EXTRA_CERT_CHAIN_POLICY_PARA {
    DWORD  cbStruct;
    DWORD  dwAuthType;
    DWORD  fdwChecks;
    LPWSTR pwszServerName;
}
alias SSL_EXTRA_CERT_CHAIN_POLICY_PARA HTTPSPolicyCallbackData;
alias SSL_EXTRA_CERT_CHAIN_POLICY_PARA* PSSL_EXTRA_CERT_CHAIN_POLICY_PARA,
  PHTTPSPolicyCallbackData;

/* #if (_WIN32_WINNT>=0x500) */
struct CERT_CHAIN_POLICY_PARA {
    DWORD cbSize = CERT_CHAIN_POLICY_PARA.sizeof;
    DWORD dwFlags;
    void* pvExtraPolicyPara;
}
alias CERT_CHAIN_POLICY_PARA* PCERT_CHAIN_POLICY_PARA;

struct CERT_CHAIN_POLICY_STATUS {
    DWORD cbSize = CERT_CHAIN_POLICY_STATUS.sizeof;
    DWORD dwError;
    LONG  lChainIndex;
    LONG  lElementIndex;
    void* pvExtraPolicyStatus;
}
alias CERT_CHAIN_POLICY_STATUS* PCERT_CHAIN_POLICY_STATUS;
/* #endif */

struct CRYPT_ALGORITHM_IDENTIFIER {
    LPSTR pszObjId;
    CRYPT_OBJID_BLOB Parameters;
}
alias CRYPT_ALGORITHM_IDENTIFIER* PCRYPT_ALGORITHM_IDENTIFIER;

struct CRYPT_BIT_BLOB {
    DWORD cbData;
    BYTE* pbData;
    DWORD cUnusedBits;
}
alias CRYPT_BIT_BLOB* PCRYPT_BIT_BLOB;

struct CERT_PUBLIC_KEY_INFO {
    CRYPT_ALGORITHM_IDENTIFIER Algorithm;
    CRYPT_BIT_BLOB             PublicKey;
}
alias CERT_PUBLIC_KEY_INFO* PCERT_PUBLIC_KEY_INFO;

struct CERT_EXTENSION {
    LPSTR            pszObjId;
    BOOL             fCritical;
    CRYPT_OBJID_BLOB Value;
}
alias CERT_EXTENSION* PCERT_EXTENSION;

struct CERT_INFO {
    DWORD dwVersion;
    CRYPT_INTEGER_BLOB SerialNumber;
    CRYPT_ALGORITHM_IDENTIFIER SignatureAlgorithm;
    CERT_NAME_BLOB Issuer;
    FILETIME NotBefore;
    FILETIME NotAfter;
    CERT_NAME_BLOB Subject;
    CERT_PUBLIC_KEY_INFO SubjectPublicKeyInfo;
    CRYPT_BIT_BLOB IssuerUniqueId;
    CRYPT_BIT_BLOB SubjectUniqueId;
    DWORD cExtension;
    PCERT_EXTENSION rgExtension;
}
alias CERT_INFO* PCERT_INFO;

struct CERT_CONTEXT {
    DWORD      dwCertEncodingType;
    BYTE*      pbCertEncoded;
    DWORD      cbCertEncoded;
    PCERT_INFO pCertInfo;
    HCERTSTORE hCertStore;
}
alias CERT_CONTEXT*        PCERT_CONTEXT;
alias const(CERT_CONTEXT)* PCCERT_CONTEXT;

struct CTL_USAGE {
    DWORD  cUsageIdentifier;
    LPSTR* rgpszUsageIdentifier;
}
alias CTL_USAGE CERT_ENHKEY_USAGE;
alias CTL_USAGE* PCTRL_USAGE, PCERT_ENHKEY_USAGE;

struct CERT_USAGE_MATCH {
    DWORD             dwType;
    CERT_ENHKEY_USAGE Usage;
}
alias CERT_USAGE_MATCH* PCERT_USAGE_MATCH;
/* #if (_WIN32_WINNT>=0x500) */

struct CERT_CHAIN_PARA {
    DWORD            cbSize = CERT_CHAIN_PARA.sizeof;
    CERT_USAGE_MATCH RequestedUsage;
//#if CERT_CHAIN_PARA_HAS_EXTRA_FIELDS
    CERT_USAGE_MATCH RequestedIssuancePolicy;
    DWORD            dwUrlRetrievalTimeout;
    BOOL             fCheckRevocationFreshnessTime;
    DWORD            dwRevocationFreshnessTime;
//#endif
}
alias CERT_CHAIN_PARA* PCERT_CHAIN_PARA;

extern (Windows) alias BOOL function(PCCERT_CONTEXT, void*)
  PFN_CERT_CHAIN_FIND_BY_ISSUER_CALLBACK;

struct CERT_CHAIN_FIND_BY_ISSUER_PARA {
    DWORD  cbSize = CERT_CHAIN_FIND_BY_ISSUER_PARA.sizeof;
    LPCSTR pszUsageIdentifier;
    DWORD  dwKeySpec;
    DWORD  dwAcquirePrivateKeyFlags;
    DWORD  cIssuer;
    CERT_NAME_BLOB* rgIssuer;
    PFN_CERT_CHAIN_FIND_BY_ISSUER_CALLBACK pfnFIndCallback;
    void*  pvFindArg;
    DWORD* pdwIssuerChainIndex;
    DWORD* pdwIssuerElementIndex;
}
alias CERT_CHAIN_FIND_BY_ISSUER_PARA* PCERT_CHAIN_FIND_BY_ISSUER_PARA;
/* #endif */

struct CERT_TRUST_STATUS {
    DWORD dwErrorStatus;
    DWORD dwInfoStatus;
}
alias CERT_TRUST_STATUS* PCERT_TRUST_STATUS;

struct CRL_ENTRY {
    CRYPT_INTEGER_BLOB SerialNumber;
    FILETIME           RevocationDate;
    DWORD              cExtension;
    PCERT_EXTENSION    rgExtension;
}
alias CRL_ENTRY* PCRL_ENTRY;

struct CRL_INFO {
    DWORD           dwVersion;
    CRYPT_ALGORITHM_IDENTIFIER SignatureAlgorithm;
    CERT_NAME_BLOB  Issuer;
    FILETIME        ThisUpdate;
    FILETIME        NextUpdate;
    DWORD           cCRLEntry;
    PCRL_ENTRY      rgCRLEntry;
    DWORD           cExtension;
    PCERT_EXTENSION rgExtension;
}
alias CRL_INFO* PCRL_INFO;

struct CRL_CONTEXT {
    DWORD      dwCertEncodingType;
    BYTE*      pbCrlEncoded;
    DWORD      cbCrlEncoded;
    PCRL_INFO  pCrlInfo;
    HCERTSTORE hCertStore;
}
alias CRL_CONTEXT*        PCRL_CONTEXT;
alias const(CRL_CONTEXT)* PCCRL_CONTEXT;

struct CERT_REVOCATION_CRL_INFO {
    DWORD         cbSize = CERT_REVOCATION_CRL_INFO.sizeof;
    PCCRL_CONTEXT pBaseCRLContext;
    PCCRL_CONTEXT pDeltaCRLContext;
    PCRL_ENTRY    pCrlEntry;
    BOOL          fDeltaCrlEntry;
}
alias CERT_REVOCATION_CRL_INFO* PCERT_REVOCATION_CRL_INFO;

struct CERT_REVOCATION_INFO {
    DWORD  cbSize = CERT_REVOCATION_INFO.sizeof;
    DWORD  dwRevocationResult;
    LPCSTR pszRevocationOid;
    LPVOID pvOidSpecificInfo;
    BOOL   fHasFreshnessTime;
    DWORD  dwFreshnessTime;
    PCERT_REVOCATION_CRL_INFO pCrlInfo;
}
alias CERT_REVOCATION_INFO* PCERT_REVOCATION_INFO;

/* #if (_WIN32_WINNT>=0x500) */
struct CERT_CHAIN_ELEMENT {
    DWORD                 cbSize = CERT_CHAIN_ELEMENT.sizeof;
    PCCERT_CONTEXT        pCertContext;
    CERT_TRUST_STATUS     TrustStatus;
    PCERT_REVOCATION_INFO pRevocationInfo;
    PCERT_ENHKEY_USAGE    pIssuanceUsage;
    PCERT_ENHKEY_USAGE    pApplicationUsage;
}
alias CERT_CHAIN_ELEMENT* PCERT_CHAIN_ELEMENT;
/* #endif */

struct CRYPT_ATTRIBUTE {
    LPSTR            pszObjId;
    DWORD            cValue;
    PCRYPT_ATTR_BLOB rgValue;
}
alias CRYPT_ATTRIBUTE* PCRYPT_ATTRIBUTE;

struct CTL_ENTRY {
    CRYPT_DATA_BLOB  SubjectIdentifier;
    DWORD            cAttribute;
    PCRYPT_ATTRIBUTE rgAttribute;
}
alias CTL_ENTRY* PCTL_ENTRY;

struct CTL_INFO {
    DWORD              dwVersion;
    CTL_USAGE          SubjectUsage;
    CRYPT_DATA_BLOB    ListIdentifier;
    CRYPT_INTEGER_BLOB SequenceNumber;
    FILETIME           ThisUpdate;
    FILETIME           NextUpdate;
    CRYPT_ALGORITHM_IDENTIFIER SubjectAlgorithm;
    DWORD              cCTLEntry;
    PCTL_ENTRY         rgCTLEntry;
    DWORD              cExtension;
    PCERT_EXTENSION    rgExtension;
}
alias CTL_INFO* PCTL_INFO;

struct CTL_CONTEXT {
    DWORD      dwMsgAndCertEncodingType;
    BYTE*      pbCtlEncoded;
    DWORD      cbCtlEncoded;
    PCTL_INFO  pCtlInfo;
    HCERTSTORE hCertStore;
    HCRYPTMSG  hCryptMsg;
    BYTE*      pbCtlContent;
    DWORD      cbCtlContent;
}
alias CTL_CONTEXT*        PCTL_CONTEXT;
alias const(CTL_CONTEXT)* PCCTL_CONTEXT;

struct CERT_TRUST_LIST_INFO {
    DWORD         cbSize = CERT_TRUST_LIST_INFO.sizeof;
    PCTL_ENTRY    pCtlEntry;
    PCCTL_CONTEXT pCtlContext;
}
alias CERT_TRUST_LIST_INFO* PCERT_TRUST_LIST_INFO;

struct CERT_SIMPLE_CHAIN {
    DWORD                 cbSize = CERT_SIMPLE_CHAIN.sizeof;
    CERT_TRUST_STATUS     TrustStatus;
    DWORD                 cElement;
    PCERT_CHAIN_ELEMENT*  rgpElement;
    PCERT_TRUST_LIST_INFO pTrustListInfo;
    BOOL                  fHasRevocationFreshnessTime;
    DWORD                 dwRevocationFreshnessTime;
}
alias CERT_SIMPLE_CHAIN* PCERT_SIMPLE_CHAIN;

/* #if (_WIN32_WINNT>=0x500) */
alias const(CERT_CHAIN_CONTEXT)* PCCERT_CHAIN_CONTEXT;
struct CERT_CHAIN_CONTEXT {
    DWORD                 cbSize = CERT_CHAIN_CONTEXT.sizeof;
    CERT_TRUST_STATUS     TrustStatus;
    DWORD                 cChain;
    PCERT_SIMPLE_CHAIN*   rgpChain;
    DWORD                 cLowerQualityChainContext;
    PCCERT_CHAIN_CONTEXT* rgpLowerQualityChainContext;
    BOOL                  fHasRevocationFreshnessTime;
    DWORD                 dwRevocationFreshnessTime;
}
alias CERT_CHAIN_CONTEXT* PCERT_CHAIN_CONTEXT;
/* #endif */

struct PROV_ENUMALGS {
    ALG_ID   aiAlgid;
    DWORD    dwBitLen;
    DWORD    dwNameLen;
    CHAR[20] szName = 0;
}

struct PUBLICKEYSTRUC {
    BYTE   bType;
    BYTE   bVersion;
    WORD   reserved;
    ALG_ID aiKeyAlg;
}
alias PUBLICKEYSTRUC BLOBHEADER;

struct RSAPUBKEY {
    DWORD magic;
    DWORD bitlen;
    DWORD pubexp;
}

struct HMAC_INFO {
    ALG_ID HashAlgid;
    BYTE*  pbInnerString;
    DWORD  cbInnerString;
    BYTE*  pbOuterString;
    DWORD  cbOuterString;
}
alias HMAC_INFO* PHMAC_INFO;

extern (Windows) @nogc nothrow {
    BOOL CertCloseStore(HCERTSTORE, DWORD);
    BOOL CertGetCertificateChain(HCERTCHAINENGINE, PCCERT_CONTEXT, LPFILETIME,
      HCERTSTORE, PCERT_CHAIN_PARA, DWORD, LPVOID, PCCERT_CHAIN_CONTEXT*);
    BOOL CertVerifyCertificateChainPolicy(LPCSTR, PCCERT_CHAIN_CONTEXT,
      PCERT_CHAIN_POLICY_PARA, PCERT_CHAIN_POLICY_STATUS);
    void CertFreeCertificateChain(PCCERT_CHAIN_CONTEXT);
    DWORD CertNameToStrA(DWORD, PCERT_NAME_BLOB, DWORD, LPSTR, DWORD);
    DWORD CertNameToStrW(DWORD, PCERT_NAME_BLOB, DWORD, LPWSTR, DWORD);
    HCERTSTORE CertOpenSystemStoreA(HCRYPTPROV, LPCSTR);
    HCERTSTORE CertOpenSystemStoreW(HCRYPTPROV, LPCWSTR);
    HCERTSTORE CertOpenStore(LPCSTR, DWORD, HCRYPTPROV, DWORD, const(void)*);
    PCCERT_CONTEXT CertFindCertificateInStore(HCERTSTORE, DWORD, DWORD, DWORD,
const(void)*, PCCERT_CONTEXT);
    BOOL CertFreeCertificateContext(PCCERT_CONTEXT);
    PCCERT_CONTEXT CertGetIssuerCertificateFromStore(HCERTSTORE,
      PCCERT_CONTEXT, PCCERT_CONTEXT, DWORD*);
    PCCERT_CHAIN_CONTEXT CertFindChainInStore(HCERTSTORE, DWORD, DWORD, DWORD,
const(void)*, PCCERT_CHAIN_CONTEXT);

    BOOL CryptAcquireContextA(HCRYPTPROV*, LPCSTR, LPCSTR, DWORD, DWORD);
    BOOL CryptAcquireContextW(HCRYPTPROV*, LPCWSTR, LPCWSTR, DWORD, DWORD);
     BOOL CryptContextAddRef(HCRYPTPROV, DWORD*, DWORD);
    BOOL CryptReleaseContext(HCRYPTPROV, ULONG_PTR);
    BOOL CryptGenKey(HCRYPTPROV, ALG_ID, DWORD, HCRYPTKEY*);
    BOOL CryptDeriveKey(HCRYPTPROV, ALG_ID, HCRYPTHASH, DWORD, HCRYPTKEY*);
    BOOL CryptDestroyKey(HCRYPTKEY);
    static if (_WIN32_WINNT >= 0x500) {
        BOOL CryptDuplicateHash(HCRYPTHASH, DWORD*, DWORD, HCRYPTHASH*);
        BOOL CryptDuplicateKey(HCRYPTKEY, DWORD*, DWORD, HCRYPTKEY*);
    }
    BOOL CryptSetKeyParam(HCRYPTKEY, DWORD, PBYTE, DWORD);
    BOOL CryptGetKeyParam(HCRYPTKEY, DWORD, PBYTE, PDWORD, DWORD);
    BOOL CryptSetHashParam(HCRYPTHASH, DWORD, PBYTE, DWORD);
    BOOL CryptGetHashParam(HCRYPTHASH, DWORD, PBYTE, PDWORD, DWORD);
    BOOL CryptSetProvParam(HCRYPTPROV, DWORD, PBYTE, DWORD);
    BOOL CryptGetProvParam(HCRYPTPROV, DWORD, PBYTE, PDWORD, DWORD);
    BOOL CryptGenRandom(HCRYPTPROV, DWORD, PBYTE);
    BOOL CryptGetUserKey(HCRYPTPROV, DWORD, HCRYPTKEY*);
    BOOL CryptExportKey(HCRYPTKEY, HCRYPTKEY, DWORD, DWORD, PBYTE, PDWORD);
    BOOL CryptImportKey(HCRYPTPROV, PBYTE, DWORD, HCRYPTKEY, DWORD,
      HCRYPTKEY*);
    BOOL CryptEncrypt(HCRYPTKEY, HCRYPTHASH, BOOL, DWORD, PBYTE, PDWORD,
      DWORD);
    BOOL CryptDecrypt(HCRYPTKEY, HCRYPTHASH, BOOL, DWORD, PBYTE, PDWORD);
    BOOL CryptCreateHash(HCRYPTPROV, ALG_ID, HCRYPTKEY, DWORD, HCRYPTHASH*);
    BOOL CryptHashData(HCRYPTHASH, PBYTE, DWORD, DWORD);
    BOOL CryptHashSessionKey(HCRYPTHASH, HCRYPTKEY, DWORD);
    BOOL CryptGetHashValue(HCRYPTHASH, DWORD, PBYTE, PDWORD);
    BOOL CryptDestroyHash(HCRYPTHASH);
    BOOL CryptSignHashA(HCRYPTHASH, DWORD, LPCSTR, DWORD, PBYTE, PDWORD);
    BOOL CryptSignHashW(HCRYPTHASH, DWORD, LPCWSTR, DWORD, PBYTE, PDWORD);
    BOOL CryptVerifySignatureA(HCRYPTHASH, PBYTE, DWORD, HCRYPTKEY, LPCSTR,
      DWORD);
    BOOL CryptVerifySignatureW(HCRYPTHASH, PBYTE, DWORD, HCRYPTKEY, LPCWSTR,
      DWORD);
    BOOL CryptSetProviderA(LPCSTR, DWORD);
    BOOL CryptSetProviderW(LPCWSTR, DWORD);
}

version (Unicode) {
    alias CertNameToStrW CertNameToStr;
    alias CryptAcquireContextW CryptAcquireContext;
    alias CryptSignHashW CryptSignHash;
    alias CryptVerifySignatureW CryptVerifySignature;
    alias CryptSetProviderW CryptSetProvider;
    alias CertOpenSystemStoreW CertOpenSystemStore;
    /+alias CERT_FIND_SUBJECT_STR_W CERT_FIND_SUBJECT_STR;
    alias CERT_FIND_ISSUER_STR_W CERT_FIND_ISSUER_STR;+/
} else {
    alias CertNameToStrA CertNameToStr;
    alias CryptAcquireContextA CryptAcquireContext;
    alias CryptSignHashA CryptSignHash;
    alias CryptVerifySignatureA CryptVerifySignature;
    alias CryptSetProviderA CryptSetProvider;
    alias CertOpenSystemStoreA CertOpenSystemStore;
    /+alias CERT_FIND_SUBJECT_STR_A CERT_FIND_SUBJECT_STR;
    alias CERT_FIND_ISSUER_STR_A CERT_FIND_ISSUER_STR;+/
}