Linux Manuals session 3

gnutls_x509_dn_import – API function Synopsis#include <gnutls/x509.h> int gnutls_x509_dn_import(gnutls_x509_dn_t dn, const gnutls_datum_t * data); Argumentsgnutls_x509_dn_t dn the structure that will hold the imported DN const gnutls_datum_t * data should contain a DER encoded RDN sequenceDescriptionThis function parses an RDN sequence and stores the result to a gnutls_x509_dn_t structure. The structure must have been initialized with gnutls_x509_dn_init()….

gnutls_x509_dn_get_rdn_ava – API function Synopsis#include <gnutls/x509.h> int gnutls_x509_dn_get_rdn_ava(gnutls_x509_dn_t dn, int irdn, int iava, gnutls_x509_ava_st * ava); Argumentsgnutls_x509_dn_t dn a pointer to DN int irdn index of RDN int iava index of AVA. gnutls_x509_ava_st * ava Pointer to structure which will hold output information.DescriptionGet pointers to data within the DN. The format of the ava structure…

gnutls_x509_dn_export2 – API function Synopsis#include <gnutls/x509.h> int gnutls_x509_dn_export2(gnutls_x509_dn_t dn, gnutls_x509_crt_fmt_t format, gnutls_datum_t * out); Argumentsgnutls_x509_dn_t dn Holds the uint8_t DN object gnutls_x509_crt_fmt_t format the format of output params. One of PEM or DER. gnutls_datum_t * out will contain a DN PEM or DER encodedDescriptionThis function will export the DN to DER or PEM format. The…

gnutls_x509_dn_export – API function Synopsis#include <gnutls/x509.h> int gnutls_x509_dn_export(gnutls_x509_dn_t dn, gnutls_x509_crt_fmt_t format, void * output_data, size_t * output_data_size); Argumentsgnutls_x509_dn_t dn Holds the uint8_t DN object gnutls_x509_crt_fmt_t format the format of output params. One of PEM or DER. void * output_data will contain a DN PEM or DER encoded size_t * output_data_size holds the size of output_data…

gnutls_x509_dn_deinit – API function Synopsis#include <gnutls/x509.h> void gnutls_x509_dn_deinit(gnutls_x509_dn_t dn); Argumentsgnutls_x509_dn_t dn a DN uint8_t object pointer.DescriptionThis function deallocates the DN object as returned by gnutls_x509_dn_import(). Since2.4.0 Reporting BugsReport bugs to <bugs [at] gnutls.org>. Home page: http://www.gnutls.org CopyrightCopyright © 2001-2014 Free Software Foundation, Inc.. Copying and distribution of this file, with or without modification, are permitted…

gnutls_x509_crt_verify_hash – API function Synopsis#include <gnutls/compat.h> int gnutls_x509_crt_verify_hash(gnutls_x509_crt_t crt, unsigned int flags, const gnutls_datum_t * hash, const gnutls_datum_t * signature); Argumentsgnutls_x509_crt_t crt Holds the certificate unsigned int flags should be 0 for now const gnutls_datum_t * hash holds the hash digest to be verified const gnutls_datum_t * signature contains the signatureDescriptionThis function will verify the…

gnutls_x509_crt_verify_data – API function Synopsis#include <gnutls/compat.h> int gnutls_x509_crt_verify_data(gnutls_x509_crt_t crt, unsigned int flags, const gnutls_datum_t * data, const gnutls_datum_t * signature); Argumentsgnutls_x509_crt_t crt Holds the certificate unsigned int flags should be 0 for now const gnutls_datum_t * data holds the data to be signed const gnutls_datum_t * signature contains the signatureDescriptionThis function will verify the given…

gnutls_x509_crt_verify – API function Synopsis#include <gnutls/x509.h> int gnutls_x509_crt_verify(gnutls_x509_crt_t cert, const gnutls_x509_crt_t * CA_list, int CA_list_length, unsigned int flags, unsigned int * verify); Argumentsgnutls_x509_crt_t cert is the certificate to be verified const gnutls_x509_crt_t * CA_list is one certificate that is considered to be trusted one int CA_list_length holds the number of CA certificate in CA_list unsigned…

gnutls_x509_crt_sign2 – API function Synopsis#include <gnutls/x509.h> int gnutls_x509_crt_sign2(gnutls_x509_crt_t crt, gnutls_x509_crt_t issuer, gnutls_x509_privkey_t issuer_key, gnutls_digest_algorithm_t dig, unsigned int flags); Argumentsgnutls_x509_crt_t crt a certificate of type gnutls_x509_crt_t gnutls_x509_crt_t issuer is the certificate of the certificate issuer gnutls_x509_privkey_t issuer_key holds the issuer’s private key gnutls_digest_algorithm_t dig The message digest to use, GNUTLS_DIG_SHA1 is a safe choice unsigned int…

gnutls_x509_crt_sign – API function Synopsis#include <gnutls/x509.h> int gnutls_x509_crt_sign(gnutls_x509_crt_t crt, gnutls_x509_crt_t issuer, gnutls_x509_privkey_t issuer_key); Argumentsgnutls_x509_crt_t crt a certificate of type gnutls_x509_crt_t gnutls_x509_crt_t issuer is the certificate of the certificate issuer gnutls_x509_privkey_t issuer_key holds the issuer’s private keyDescriptionThis function is the same a gnutls_x509_crt_sign2() with no flags, and SHA1 as the hash algorithm. ReturnsOn success, GNUTLS_E_SUCCESS (0)…

gnutls_x509_crt_set_version – API function Synopsis#include <gnutls/x509.h> int gnutls_x509_crt_set_version(gnutls_x509_crt_t crt, unsigned int version); Argumentsgnutls_x509_crt_t crt a certificate of type gnutls_x509_crt_t unsigned int version holds the version number. For X.509v1 certificates must be 1.DescriptionThis function will set the version of the certificate. This must be one for X.509 version 1, and so on. Plain certificates without extensions…

gnutls_x509_crt_set_subject_unique_id – API function Synopsis#include <gnutls/x509.h> int gnutls_x509_crt_set_subject_unique_id(gnutls_x509_crt_t cert, const void * id, size_t id_size); Argumentsgnutls_x509_crt_t cert a certificate of type gnutls_x509_crt_t const void * id The unique ID size_t id_size Holds the size of the unique ID.DescriptionThis function will set the X.509 certificate’s subject unique ID field. ReturnsOn success, GNUTLS_E_SUCCESS (0) is returned, otherwise…

gnutls_x509_crt_set_subject_key_id – API function Synopsis#include <gnutls/x509.h> int gnutls_x509_crt_set_subject_key_id(gnutls_x509_crt_t cert, const void * id, size_t id_size); Argumentsgnutls_x509_crt_t cert a certificate of type gnutls_x509_crt_t const void * id The key ID size_t id_size Holds the size of the subject key ID field.DescriptionThis function will set the X.509 certificate’s subject key ID extension. ReturnsOn success, GNUTLS_E_SUCCESS (0) is…

gnutls_x509_crt_set_subject_alternative_name – API function Synopsis#include <gnutls/x509.h> int gnutls_x509_crt_set_subject_alternative_name(gnutls_x509_crt_t crt, gnutls_x509_subject_alt_name_t type, const char * data_string); Argumentsgnutls_x509_crt_t crt a certificate of type gnutls_x509_crt_t gnutls_x509_subject_alt_name_t type is one of the gnutls_x509_subject_alt_name_t enumerations const char * data_string The data to be set, a (0) terminated stringDescriptionThis function will set the subject alternative name certificate extension. This function assumes…

gnutls_x509_crt_set_subject_alt_name – API function Synopsis#include <gnutls/x509.h> int gnutls_x509_crt_set_subject_alt_name(gnutls_x509_crt_t crt, gnutls_x509_subject_alt_name_t type, const void * data, unsigned int data_size, unsigned int flags); Argumentsgnutls_x509_crt_t crt a certificate of type gnutls_x509_crt_t gnutls_x509_subject_alt_name_t type is one of the gnutls_x509_subject_alt_name_t enumerations const void * data The data to be set unsigned int data_size The size of data to be set…

gnutls_x509_crt_set_serial – API function Synopsis#include <gnutls/x509.h> int gnutls_x509_crt_set_serial(gnutls_x509_crt_t cert, const void * serial, size_t serial_size); Argumentsgnutls_x509_crt_t cert a certificate of type gnutls_x509_crt_t const void * serial The serial number size_t serial_size Holds the size of the serial field.DescriptionThis function will set the X.509 certificate’s serial number. While the serial number is an integer, it is…

gnutls_x509_crt_set_pubkey – API function Synopsis#include <gnutls/abstract.h> int gnutls_x509_crt_set_pubkey(gnutls_x509_crt_t crt, gnutls_pubkey_t key); Argumentsgnutls_x509_crt_t crt should contain a gnutls_x509_crt_t structure gnutls_pubkey_t key holds a public keyDescriptionThis function will set the public parameters from the given public key to the request. ReturnsOn success, GNUTLS_E_SUCCESS (0) is returned, otherwise a negative error value. Since2.12.0 Reporting BugsReport bugs to <bugs…

gnutls_x509_crt_set_proxy_dn – API function Synopsis#include <gnutls/x509.h> int gnutls_x509_crt_set_proxy_dn(gnutls_x509_crt_t crt, gnutls_x509_crt_t eecrt, unsigned int raw_flag, const void * name, unsigned int sizeof_name); Argumentsgnutls_x509_crt_t crt a gnutls_x509_crt_t structure with the new proxy cert gnutls_x509_crt_t eecrt the end entity certificate that will be issuing the proxy unsigned int raw_flag must be 0, or 1 if the CN is…

gnutls_x509_crt_set_proxy – API function Synopsis#include <gnutls/x509.h> int gnutls_x509_crt_set_proxy(gnutls_x509_crt_t crt, int pathLenConstraint, const char * policyLanguage, const char * policy, size_t sizeof_policy); Argumentsgnutls_x509_crt_t crt a certificate of type gnutls_x509_crt_t int pathLenConstraint non-negative error codes indicate maximum length of path, and negative error codes indicate that the pathLenConstraints field should not be present. const char * policyLanguage…

gnutls_x509_crt_set_private_key_usage_period – API function Synopsis#include <gnutls/x509.h> int gnutls_x509_crt_set_private_key_usage_period(gnutls_x509_crt_t crt, time_t activation, time_t expiration); Argumentsgnutls_x509_crt_t crt a certificate of type gnutls_x509_crt_t time_t activation The activation time time_t expiration The expiration timeDescriptionThis function will set the private key usage period extension (2.5.29.16). ReturnsOn success, GNUTLS_E_SUCCESS (0) is returned, otherwise a negative error value. Reporting BugsReport bugs to…