Linux Manuals session 3

gnutls_x509_name_constraints_get_permitted – API function Synopsis#include <gnutls/x509.h> int gnutls_x509_name_constraints_get_permitted(gnutls_x509_name_constraints_t nc, unsigned idx, unsigned * type, gnutls_datum_t * name); Argumentsgnutls_x509_name_constraints_t nc the extracted name constraints structure unsigned idx the index of the constraint unsigned * type the type of the constraint (of type gnutls_x509_subject_alt_name_t) gnutls_datum_t * name the name in the constraint (of the specific type)DescriptionThis function…

gnutls_x509_name_constraints_get_excluded – API function Synopsis#include <gnutls/x509.h> int gnutls_x509_name_constraints_get_excluded(gnutls_x509_name_constraints_t nc, unsigned idx, unsigned * type, gnutls_datum_t * name); Argumentsgnutls_x509_name_constraints_t nc the extracted name constraints structure unsigned idx the index of the constraint unsigned * type the type of the constraint (of type gnutls_x509_subject_alt_name_t) gnutls_datum_t * name the name in the constraint (of the specific type)DescriptionThis function…

gnutls_x509_name_constraints_deinit – API function Synopsis#include <gnutls/x509.h> void gnutls_x509_name_constraints_deinit(gnutls_x509_name_constraints_t nc); Argumentsgnutls_x509_name_constraints_t nc The nameconstraints structureDescriptionThis function will deinitialize a name constraints structure. Since3.3.0 Reporting BugsReport bugs to <bugs [at] gnutls.org>. Home page: http://www.gnutls.org CopyrightCopyright © 2001-2014 Free Software Foundation, Inc.. Copying and distribution of this file, with or without modification, are permitted in any medium without…

gnutls_x509_name_constraints_check_crt – API function Synopsis#include <gnutls/x509.h> unsigned gnutls_x509_name_constraints_check_crt(gnutls_x509_name_constraints_t nc, gnutls_x509_subject_alt_name_t type, gnutls_x509_crt_t cert); Argumentsgnutls_x509_name_constraints_t nc the extracted name constraints structure gnutls_x509_subject_alt_name_t type the type of the constraint to check (of type gnutls_x509_subject_alt_name_t) gnutls_x509_crt_t cert the certificate to be checkedDescriptionThis function will check the provided certificate names against the constraints in  nc using the RFC5280 rules. It…

gnutls_x509_name_constraints_check – API function Synopsis#include <gnutls/x509.h> unsigned gnutls_x509_name_constraints_check(gnutls_x509_name_constraints_t nc, gnutls_x509_subject_alt_name_t type, const gnutls_datum_t * name); Argumentsgnutls_x509_name_constraints_t nc the extracted name constraints structure gnutls_x509_subject_alt_name_t type the type of the constraint to check (of type gnutls_x509_subject_alt_name_t) const gnutls_datum_t * name the name to be checkedDescriptionThis function will check the provided name against the constraints in  nc using the…

gnutls_x509_name_constraints_add_permitted – API function Synopsis#include <gnutls/x509.h> int gnutls_x509_name_constraints_add_permitted(gnutls_x509_name_constraints_t nc, gnutls_x509_subject_alt_name_t type, const gnutls_datum_t * name); Argumentsgnutls_x509_name_constraints_t nc The nameconstraints structure gnutls_x509_subject_alt_name_t type The type of the constraints const gnutls_datum_t * name The data of the constraintsDescriptionThis function will add a name constraint to the list of permitted constraints. The constraints type can be any of…

gnutls_x509_name_constraints_add_excluded – API function Synopsis#include <gnutls/x509.h> int gnutls_x509_name_constraints_add_excluded(gnutls_x509_name_constraints_t nc, gnutls_x509_subject_alt_name_t type, const gnutls_datum_t * name); Argumentsgnutls_x509_name_constraints_t nc The nameconstraints structure gnutls_x509_subject_alt_name_t type The type of the constraints const gnutls_datum_t * name The data of the constraintsDescriptionThis function will add a name constraint to the list of excluded constraints. The constraints type can be any of…

gnutls_x509_key_purpose_set – API function Synopsis#include <gnutls/x509-ext.h> int gnutls_x509_key_purpose_set(gnutls_x509_key_purposes_t p, const char * oid); Argumentsgnutls_x509_key_purposes_t p The key purposes structure const char * oid The object identifier of the key purposeDescriptionThis function will store the specified key purpose in the purposes structure. ReturnsOn success, GNUTLS_E_SUCCESS (0), otherwise a negative error value. Since3.3.0 Reporting BugsReport bugs to…

gnutls_x509_key_purpose_init – API function Synopsis#include <gnutls/x509-ext.h> int gnutls_x509_key_purpose_init(gnutls_x509_key_purposes_t * p); Argumentsgnutls_x509_key_purposes_t * p The key purposes structureDescriptionThis function will initialize an alternative names structure. ReturnsOn success, GNUTLS_E_SUCCESS (0) is returned, otherwise a negative error value. Since3.3.0 Reporting BugsReport bugs to <bugs [at] gnutls.org>. Home page: http://www.gnutls.org CopyrightCopyright © 2001-2014 Free Software Foundation, Inc.. Copying and…

gnutls_x509_key_purpose_get – API function Synopsis#include <gnutls/x509-ext.h> int gnutls_x509_key_purpose_get(gnutls_x509_key_purposes_t p, unsigned idx, gnutls_datum_t * oid); Argumentsgnutls_x509_key_purposes_t p The key purposes structure unsigned idx The index of the key purpose to retrieve gnutls_datum_t * oid Will hold the object identifier of the key purpose (to be treated as constant)DescriptionThis function will retrieve the specified by the index…

gnutls_x509_key_purpose_deinit – API function Synopsis#include <gnutls/x509-ext.h> void gnutls_x509_key_purpose_deinit(gnutls_x509_key_purposes_t p); Argumentsgnutls_x509_key_purposes_t p The key purposes structureDescriptionThis function will deinitialize an alternative names structure. Since3.3.0 Reporting BugsReport bugs to <bugs [at] gnutls.org>. Home page: http://www.gnutls.org CopyrightCopyright © 2001-2014 Free Software Foundation, Inc.. Copying and distribution of this file, with or without modification, are permitted in any medium…

gnutls_x509_ext_print – API function Synopsis#include <gnutls/x509.h> int gnutls_x509_ext_print(gnutls_x509_ext_st * exts, unsigned int exts_size, gnutls_certificate_print_formats_t format, gnutls_datum_t * out); Argumentsgnutls_x509_ext_st * exts The structures to be printed unsigned int exts_size the number of available structures gnutls_certificate_print_formats_t format Indicate the format to use gnutls_datum_t * out Newly allocated datum with null terminated string.DescriptionThis function will pretty print…

gnutls_x509_ext_import_subject_key_id – API function Synopsis#include <gnutls/x509-ext.h> int gnutls_x509_ext_import_subject_key_id(const gnutls_datum_t * ext, gnutls_datum_t * id); Argumentsconst gnutls_datum_t * ext a DER encoded extension gnutls_datum_t * id will contain the subject key IDDescriptionThis function will return the subject key ID stored in the provided SubjectKeyIdentifier extension. The ID will be allocated using gnutls_malloc(). ReturnsOn success, GNUTLS_E_SUCCESS (0)…

gnutls_x509_ext_import_subject_alt_names – API function Synopsis#include <gnutls/x509-ext.h> int gnutls_x509_ext_import_subject_alt_names(const gnutls_datum_t * ext, gnutls_subject_alt_names_t sans, unsigned int flags); Argumentsconst gnutls_datum_t * ext The DER-encoded extension data gnutls_subject_alt_names_t sans The alternative names structure unsigned int flags should be zeroDescriptionThis function will export the alternative names in the provided DER-encoded SubjectAltName PKIX extension, to a gnutls_subject_alt_names_t structure. The structure…

gnutls_x509_ext_import_proxy – API function Synopsis#include <gnutls/x509-ext.h> int gnutls_x509_ext_import_proxy(const gnutls_datum_t * ext, int * pathlen, char ** policyLanguage, char ** policy, size_t * sizeof_policy); Argumentsconst gnutls_datum_t * ext the DER encoded extension data int * pathlen pointer to output integer indicating path length (may be NULL), non-negative error codes indicate a present pCPathLenConstraint field and the…

gnutls_x509_ext_import_private_key_usage_period – API function Synopsis#include <gnutls/x509-ext.h> int gnutls_x509_ext_import_private_key_usage_period(const gnutls_datum_t * ext, time_t * activation, time_t * expiration); Argumentsconst gnutls_datum_t * ext the DER encoded extension data time_t * activation Will hold the activation time time_t * expiration Will hold the expiration timeDescriptionThis function will return the expiration and activation times of the private key as…

gnutls_x509_ext_import_policies – API function Synopsis#include <gnutls/x509-ext.h> int gnutls_x509_ext_import_policies(const gnutls_datum_t * ext, gnutls_x509_policies_t policies, unsigned int flags); Argumentsconst gnutls_datum_t * ext the DER encoded extension data gnutls_x509_policies_t policies A pointer to an initialized policies structures. unsigned int flags should be zeroDescriptionThis function will extract the certificate policy extension (2.5.29.32) and store it the provided structure. ReturnsOn…

gnutls_x509_ext_import_name_constraints – API function Synopsis#include <gnutls/x509-ext.h> int gnutls_x509_ext_import_name_constraints(const gnutls_datum_t * ext, gnutls_x509_name_constraints_t nc, unsigned int flags); Argumentsconst gnutls_datum_t * ext a DER encoded extension gnutls_x509_name_constraints_t nc The nameconstraints intermediate structure unsigned int flags zero or GNUTLS_NAME_CONSTRAINTS_FLAG_APPENDDescriptionThis function will return an intermediate structure containing the name constraints of the provided NameConstraints extension. That structure can be…

gnutls_x509_ext_import_key_usage – API function Synopsis#include <gnutls/x509-ext.h> int gnutls_x509_ext_import_key_usage(const gnutls_datum_t * ext, unsigned int * key_usage); Argumentsconst gnutls_datum_t * ext the DER encoded extension data unsigned int * key_usage where the key usage bits will be storedDescriptionThis function will return certificate’s key usage, by reading the DER data of the keyUsage X.509 extension (2.5.29.15). The key…

gnutls_x509_ext_import_key_purposes – API function Synopsis#include <gnutls/x509-ext.h> int gnutls_x509_ext_import_key_purposes(const gnutls_datum_t * ext, gnutls_x509_key_purposes_t p, unsigned int flags); Argumentsconst gnutls_datum_t * ext The DER-encoded extension data gnutls_x509_key_purposes_t p The key purposes structure unsigned int flags should be zeroDescriptionThis function will extract the key purposes in the provided DER-encoded ExtKeyUsageSyntax PKIX extension, to a gnutls_x509_key_purposes_t structure. The structure…