Linux Manuals session 3

gnutls_x509_crt_get_basic_constraints – API function Synopsis#include <gnutls/x509.h> int gnutls_x509_crt_get_basic_constraints(gnutls_x509_crt_t cert, unsigned int * critical, unsigned int * ca, int * pathlen); Argumentsgnutls_x509_crt_t cert should contain a gnutls_x509_crt_t structure unsigned int * critical will be non-zero if the extension is marked as critical unsigned int * ca pointer to output integer indicating CA status, may be NULL,…

gnutls_x509_crt_get_authority_key_id – API function Synopsis#include <gnutls/x509.h> int gnutls_x509_crt_get_authority_key_id(gnutls_x509_crt_t cert, void * id, size_t * id_size, unsigned int * critical); Argumentsgnutls_x509_crt_t cert should contain a gnutls_x509_crt_t structure void * id The place where the identifier will be copied size_t * id_size Holds the size of the id field. unsigned int * critical will be non-zero if…

gnutls_x509_crt_get_authority_key_gn_serial – API function Synopsis#include <gnutls/x509.h> int gnutls_x509_crt_get_authority_key_gn_serial(gnutls_x509_crt_t cert, unsigned int seq, void * alt, size_t * alt_size, unsigned int * alt_type, void * serial, size_t * serial_size, unsigned int * critical); Argumentsgnutls_x509_crt_t cert should contain a gnutls_x509_crt_t structure unsigned int seq specifies the sequence number of the alt name (0 for the first one,…

gnutls_x509_crt_get_authority_info_access – API function Synopsis#include <gnutls/x509.h> int gnutls_x509_crt_get_authority_info_access(gnutls_x509_crt_t crt, unsigned int seq, int what, gnutls_datum_t * data, unsigned int * critical); Argumentsgnutls_x509_crt_t crt Holds the certificate unsigned int seq specifies the sequence number of the access descriptor (0 for the first one, 1 for the second etc.) int what what data to get, a gnutls_info_access_what_t…

gnutls_x509_crt_get_activation_time – API function Synopsis#include <gnutls/x509.h> time_t gnutls_x509_crt_get_activation_time(gnutls_x509_crt_t cert); Argumentsgnutls_x509_crt_t cert should contain a gnutls_x509_crt_t structureDescriptionThis function will return the time this Certificate was or will be activated. Returnsactivation time, or (time_t)-1 on error. Reporting BugsReport bugs to <bugs [at] gnutls.org>. Home page: http://www.gnutls.org CopyrightCopyright © 2001-2014 Free Software Foundation, Inc.. Copying and distribution of…

gnutls_x509_crt_export2 – API function Synopsis#include <gnutls/x509.h> int gnutls_x509_crt_export2(gnutls_x509_crt_t cert, gnutls_x509_crt_fmt_t format, gnutls_datum_t * out); Argumentsgnutls_x509_crt_t cert Holds the certificate gnutls_x509_crt_fmt_t format the format of output params. One of PEM or DER. gnutls_datum_t * out will contain a certificate PEM or DER encodedDescriptionThis function will export the certificate to DER or PEM format. The output buffer…

gnutls_x509_crt_export – API function Synopsis#include <gnutls/x509.h> int gnutls_x509_crt_export(gnutls_x509_crt_t cert, gnutls_x509_crt_fmt_t format, void * output_data, size_t * output_data_size); Argumentsgnutls_x509_crt_t cert Holds the certificate gnutls_x509_crt_fmt_t format the format of output params. One of PEM or DER. void * output_data will contain a certificate PEM or DER encoded size_t * output_data_size holds the size of output_data (and will…

gnutls_x509_crt_deinit – API function Synopsis#include <gnutls/x509.h> void gnutls_x509_crt_deinit(gnutls_x509_crt_t cert); Argumentsgnutls_x509_crt_t cert The structure to be deinitializedDescriptionThis function will deinitialize a certificate structure. Reporting BugsReport bugs to <bugs [at] gnutls.org>. Home page: http://www.gnutls.org CopyrightCopyright © 2001-2014 Free Software Foundation, Inc.. Copying and distribution of this file, with or without modification, are permitted in any medium without…

gnutls_x509_crt_cpy_crl_dist_points – API function Synopsis#include <gnutls/x509.h> int gnutls_x509_crt_cpy_crl_dist_points(gnutls_x509_crt_t dst, gnutls_x509_crt_t src); Argumentsgnutls_x509_crt_t dst a certificate of type gnutls_x509_crt_t gnutls_x509_crt_t src the certificate where the dist points will be copied fromDescriptionThis function will copy the CRL distribution points certificate extension, from the source to the destination certificate. This may be useful to copy from a CA…

gnutls_x509_crt_check_revocation – API function Synopsis#include <gnutls/x509.h> int gnutls_x509_crt_check_revocation(gnutls_x509_crt_t cert, const gnutls_x509_crl_t * crl_list, int crl_list_length); Argumentsgnutls_x509_crt_t cert should contain a gnutls_x509_crt_t structure const gnutls_x509_crl_t * crl_list should contain a list of gnutls_x509_crl_t structures int crl_list_length the length of the crl_listDescriptionThis function will return check if the given certificate is revoked. It is assumed that the…

gnutls_x509_crt_check_issuer – API function Synopsis#include <gnutls/x509.h> int gnutls_x509_crt_check_issuer(gnutls_x509_crt_t cert, gnutls_x509_crt_t issuer); Argumentsgnutls_x509_crt_t cert is the certificate to be checked gnutls_x509_crt_t issuer is the certificate of a possible issuerDescriptionThis function will check if the given certificate was issued by the given issuer. It checks the DN fields and the authority key identifier and subject key identifier…

gnutls_x509_crt_check_hostname2 – API function Synopsis#include <gnutls/x509.h> int gnutls_x509_crt_check_hostname2(gnutls_x509_crt_t cert, const char * hostname, unsigned int flags); Argumentsgnutls_x509_crt_t cert should contain an gnutls_x509_crt_t structure const char * hostname A null terminated string that contains a DNS name unsigned int flags gnutls_certificate_verify_flagsDescriptionThis function will check if the given certificate’s subject matches the given hostname. This is a…

gnutls_x509_crt_check_hostname – API function Synopsis#include <gnutls/x509.h> int gnutls_x509_crt_check_hostname(gnutls_x509_crt_t cert, const char * hostname); Argumentsgnutls_x509_crt_t cert should contain an gnutls_x509_crt_t structure const char * hostname A null terminated string that contains a DNS nameDescriptionThis function will check if the given certificate’s subject matches the given hostname. This is a basic implementation of the matching described in…

gnutls_x509_crq_verify – API function Synopsis#include <gnutls/x509.h> int gnutls_x509_crq_verify(gnutls_x509_crq_t crq, unsigned int flags); Argumentsgnutls_x509_crq_t crq is the crq to be verified unsigned int flags Flags that may be used to change the verification algorithm. Use OR of the gnutls_certificate_verify_flags enumerations.DescriptionThis function will verify self signature in the certificate request and return its status. ReturnsIn case of…

gnutls_x509_crq_sign2 – API function Synopsis#include <gnutls/x509.h> int gnutls_x509_crq_sign2(gnutls_x509_crq_t crq, gnutls_x509_privkey_t key, gnutls_digest_algorithm_t dig, unsigned int flags); Argumentsgnutls_x509_crq_t crq should contain a gnutls_x509_crq_t structure gnutls_x509_privkey_t key holds a private key gnutls_digest_algorithm_t dig The message digest to use, i.e., GNUTLS_DIG_SHA1 unsigned int flags must be 0DescriptionThis function will sign the certificate request with a private key. This…

gnutls_x509_crq_sign – API function Synopsis#include <gnutls/compat.h> int gnutls_x509_crq_sign(gnutls_x509_crq_t crq, gnutls_x509_privkey_t key); Argumentsgnutls_x509_crq_t crq should contain a gnutls_x509_crq_t structure gnutls_x509_privkey_t key holds a private keyDescriptionThis function is the same a gnutls_x509_crq_sign2() with no flags, and SHA1 as the hash algorithm. ReturnsOn success, GNUTLS_E_SUCCESS (0) is returned, otherwise a negative error value. DeprecatedUse gnutls_x509_crq_privkey_sign() instead. Reporting BugsReport…

gnutls_x509_crq_set_version – API function Synopsis#include <gnutls/x509.h> int gnutls_x509_crq_set_version(gnutls_x509_crq_t crq, unsigned int version); Argumentsgnutls_x509_crq_t crq should contain a gnutls_x509_crq_t structure unsigned int version holds the version number, for v1 Requests must be 1DescriptionThis function will set the version of the certificate request. For version 1 requests this must be one. ReturnsOn success, GNUTLS_E_SUCCESS (0) is returned,…

gnutls_x509_crq_set_subject_alt_name – API function Synopsis#include <gnutls/x509.h> int gnutls_x509_crq_set_subject_alt_name(gnutls_x509_crq_t crq, gnutls_x509_subject_alt_name_t nt, const void * data, unsigned int data_size, unsigned int flags); Argumentsgnutls_x509_crq_t crq a certificate request of type gnutls_x509_crq_t gnutls_x509_subject_alt_name_t nt is one of the gnutls_x509_subject_alt_name_t enumerations const void * data The data to be set unsigned int data_size The size of data to be…

gnutls_x509_crq_set_pubkey – API function Synopsis#include <gnutls/abstract.h> int gnutls_x509_crq_set_pubkey(gnutls_x509_crq_t crq, gnutls_pubkey_t key); Argumentsgnutls_x509_crq_t crq should contain a gnutls_x509_crq_t structure gnutls_pubkey_t key holds a public keyDescriptionThis function will set the public parameters from the given public key to the request. ReturnsOn success, GNUTLS_E_SUCCESS (0) is returned, otherwise a negative error value. Since2.12.0 Reporting BugsReport bugs to <bugs…

gnutls_x509_crq_set_private_key_usage_period – API function Synopsis#include <gnutls/x509.h> int gnutls_x509_crq_set_private_key_usage_period(gnutls_x509_crq_t crq, time_t activation, time_t expiration); Argumentsgnutls_x509_crq_t crq a certificate of type gnutls_x509_crq_t time_t activation The activation time time_t expiration The expiration timeDescriptionThis function will set the private key usage period extension (2.5.29.16). ReturnsOn success, GNUTLS_E_SUCCESS (0) is returned, otherwise a negative error value. Reporting BugsReport bugs to…