Section 3: library functions
gnutls_x509_crl_verify – API function Synopsis#include <gnutls/x509.h> int gnutls_x509_crl_verify(gnutls_x509_crl_t crl, const gnutls_x509_crt_t * trusted_cas, int tcas_size, unsigned int flags, unsigned int * verify); Argumentsgnutls_x509_crl_t crl is the crl to be verified const gnutls_x509_crt_t * trusted_cas is a certificate list that is considered to be trusted one int tcas_size holds the number of CA certificates in CA_list…
gnutls_x509_crl_sign2 – API function Synopsis#include <gnutls/x509.h> int gnutls_x509_crl_sign2(gnutls_x509_crl_t crl, gnutls_x509_crt_t issuer, gnutls_x509_privkey_t issuer_key, gnutls_digest_algorithm_t dig, unsigned int flags); Argumentsgnutls_x509_crl_t crl should contain a gnutls_x509_crl_t structure gnutls_x509_crt_t issuer is the certificate of the certificate issuer gnutls_x509_privkey_t issuer_key holds the issuer’s private key gnutls_digest_algorithm_t dig The message digest to use. GNUTLS_DIG_SHA1 is the safe choice unless you…
gnutls_x509_crl_sign – API function Synopsis#include <gnutls/compat.h> int gnutls_x509_crl_sign(gnutls_x509_crl_t crl, gnutls_x509_crt_t issuer, gnutls_x509_privkey_t issuer_key); Argumentsgnutls_x509_crl_t crl should contain a gnutls_x509_crl_t structure gnutls_x509_crt_t issuer is the certificate of the certificate issuer gnutls_x509_privkey_t issuer_key holds the issuer’s private keyDescriptionThis function is the same a gnutls_x509_crl_sign2() with no flags, and SHA1 as the hash algorithm. ReturnsOn success, GNUTLS_E_SUCCESS (0)…
gnutls_x509_crl_set_version – API function Synopsis#include <gnutls/x509.h> int gnutls_x509_crl_set_version(gnutls_x509_crl_t crl, unsigned int version); Argumentsgnutls_x509_crl_t crl should contain a gnutls_x509_crl_t structure unsigned int version holds the version number. For CRLv1 crls must be 1.DescriptionThis function will set the version of the CRL. This must be one for CRL version 1, and so on. The CRLs generated by…
gnutls_x509_crl_set_this_update – API function Synopsis#include <gnutls/x509.h> int gnutls_x509_crl_set_this_update(gnutls_x509_crl_t crl, time_t act_time); Argumentsgnutls_x509_crl_t crl should contain a gnutls_x509_crl_t structure time_t act_time The actual timeDescriptionThis function will set the time this CRL was issued. ReturnsOn success, GNUTLS_E_SUCCESS (0) is returned, otherwise a negative error value. Reporting BugsReport bugs to <bugs [at] gnutls.org>. Home page: http://www.gnutls.org CopyrightCopyright ©…
gnutls_x509_crl_set_number – API function Synopsis#include <gnutls/x509.h> int gnutls_x509_crl_set_number(gnutls_x509_crl_t crl, const void * nr, size_t nr_size); Argumentsgnutls_x509_crl_t crl a CRL of type gnutls_x509_crl_t const void * nr The CRL number size_t nr_size Holds the size of the nr field.DescriptionThis function will set the CRL’s number extension. This is to be used as a unique and monotonic…
gnutls_x509_crl_set_next_update – API function Synopsis#include <gnutls/x509.h> int gnutls_x509_crl_set_next_update(gnutls_x509_crl_t crl, time_t exp_time); Argumentsgnutls_x509_crl_t crl should contain a gnutls_x509_crl_t structure time_t exp_time The actual timeDescriptionThis function will set the time this CRL will be updated. ReturnsOn success, GNUTLS_E_SUCCESS (0) is returned, otherwise a negative error value. Reporting BugsReport bugs to <bugs [at] gnutls.org>. Home page: http://www.gnutls.org CopyrightCopyright…
gnutls_x509_crl_set_crt_serial – API function Synopsis#include <gnutls/x509.h> int gnutls_x509_crl_set_crt_serial(gnutls_x509_crl_t crl, const void * serial, size_t serial_size, time_t revocation_time); Argumentsgnutls_x509_crl_t crl should contain a gnutls_x509_crl_t structure const void * serial The revoked certificate’s serial number size_t serial_size Holds the size of the serial field. time_t revocation_time The time this certificate was revokedDescriptionThis function will set a revoked…
gnutls_x509_crl_set_crt – API function Synopsis#include <gnutls/x509.h> int gnutls_x509_crl_set_crt(gnutls_x509_crl_t crl, gnutls_x509_crt_t crt, time_t revocation_time); Argumentsgnutls_x509_crl_t crl should contain a gnutls_x509_crl_t structure gnutls_x509_crt_t crt a certificate of type gnutls_x509_crt_t with the revoked certificate time_t revocation_time The time this certificate was revokedDescriptionThis function will set a revoked certificate’s serial number to the CRL. ReturnsOn success, GNUTLS_E_SUCCESS (0) is…
gnutls_x509_crl_set_authority_key_id – API function Synopsis#include <gnutls/x509.h> int gnutls_x509_crl_set_authority_key_id(gnutls_x509_crl_t crl, const void * id, size_t id_size); Argumentsgnutls_x509_crl_t crl a CRL of type gnutls_x509_crl_t const void * id The key ID size_t id_size Holds the size of the serial field.DescriptionThis function will set the CRL’s authority key ID extension. Only the keyIdentifier field can be set with…
gnutls_x509_crl_privkey_sign – API function Synopsis#include <gnutls/abstract.h> int gnutls_x509_crl_privkey_sign(gnutls_x509_crl_t crl, gnutls_x509_crt_t issuer, gnutls_privkey_t issuer_key, gnutls_digest_algorithm_t dig, unsigned int flags); Argumentsgnutls_x509_crl_t crl should contain a gnutls_x509_crl_t structure gnutls_x509_crt_t issuer is the certificate of the certificate issuer gnutls_privkey_t issuer_key holds the issuer’s private key gnutls_digest_algorithm_t dig The message digest to use. GNUTLS_DIG_SHA1 is the safe choice unless you…
gnutls_x509_crl_print – API function Synopsis#include <gnutls/x509.h> int gnutls_x509_crl_print(gnutls_x509_crl_t crl, gnutls_certificate_print_formats_t format, gnutls_datum_t * out); Argumentsgnutls_x509_crl_t crl The structure to be printed gnutls_certificate_print_formats_t format Indicate the format to use gnutls_datum_t * out Newly allocated datum with null terminated string.DescriptionThis function will pretty print a X.509 certificate revocation list, suitable for display to a human. The output…
gnutls_x509_crl_list_import2 – API function Synopsis#include <gnutls/x509.h> int gnutls_x509_crl_list_import2(gnutls_x509_crl_t ** crls, unsigned int * size, const gnutls_datum_t * data, gnutls_x509_crt_fmt_t format, unsigned int flags); Argumentsgnutls_x509_crl_t ** crls The structures to store the parsed crl list. Must not be initialized. unsigned int * size It will contain the size of the list. const gnutls_datum_t * data The…
gnutls_x509_crl_list_import – API function Synopsis#include <gnutls/x509.h> int gnutls_x509_crl_list_import(gnutls_x509_crl_t * crls, unsigned int * crl_max, const gnutls_datum_t * data, gnutls_x509_crt_fmt_t format, unsigned int flags); Argumentsgnutls_x509_crl_t * crls The structures to store the parsed CRLs. Must not be initialized. unsigned int * crl_max Initially must hold the maximum number of crls. It will be updated with the…
gnutls_x509_crl_iter_deinit – API function Synopsis#include <gnutls/x509.h> void gnutls_x509_crl_iter_deinit(gnutls_x509_crl_iter_t iter); Argumentsgnutls_x509_crl_iter_t iter The iterator structure to be deinitializedDescriptionThis function will deinitialize an iterator structure. Reporting BugsReport bugs to <bugs [at] gnutls.org>. Home page: http://www.gnutls.org CopyrightCopyright © 2001-2014 Free Software Foundation, Inc.. Copying and distribution of this file, with or without modification, are permitted in any medium…
gnutls_x509_crl_iter_crt_serial – API function Synopsis#include <gnutls/x509.h> int gnutls_x509_crl_iter_crt_serial(gnutls_x509_crl_t crl, gnutls_x509_crl_iter_t * iter, unsigned char * serial, size_t * serial_size, time_t * t); Argumentsgnutls_x509_crl_t crl should contain a gnutls_x509_crl_t structure gnutls_x509_crl_iter_t * iter A pointer to an iterator (initially the iterator should be NULL) unsigned char * serial where the serial number will be copied size_t…
gnutls_x509_crl_init – API function Synopsis#include <gnutls/x509.h> int gnutls_x509_crl_init(gnutls_x509_crl_t * crl); Argumentsgnutls_x509_crl_t * crl The structure to be initializedDescriptionThis function will initialize a CRL structure. CRL stands for Certificate Revocation List. A revocation list usually contains lists of certificate serial numbers that have been revoked by an Authority. The revocation lists are always signed with the…
gnutls_x509_crl_import – API function Synopsis#include <gnutls/x509.h> int gnutls_x509_crl_import(gnutls_x509_crl_t crl, const gnutls_datum_t * data, gnutls_x509_crt_fmt_t format); Argumentsgnutls_x509_crl_t crl The structure to store the parsed CRL. const gnutls_datum_t * data The DER or PEM encoded CRL. gnutls_x509_crt_fmt_t format One of DER or PEMDescriptionThis function will convert the given DER or PEM encoded CRL to the native gnutls_x509_crl_t…
gnutls_x509_crl_get_version – API function Synopsis#include <gnutls/x509.h> int gnutls_x509_crl_get_version(gnutls_x509_crl_t crl); Argumentsgnutls_x509_crl_t crl should contain a gnutls_x509_crl_t structureDescriptionThis function will return the version of the specified CRL. ReturnsThe version number, or a negative error code on error. Reporting BugsReport bugs to <bugs [at] gnutls.org>. Home page: http://www.gnutls.org CopyrightCopyright © 2001-2014 Free Software Foundation, Inc.. Copying and distribution…
gnutls_x509_crl_get_this_update – API function Synopsis#include <gnutls/x509.h> time_t gnutls_x509_crl_get_this_update(gnutls_x509_crl_t crl); Argumentsgnutls_x509_crl_t crl should contain a gnutls_x509_crl_t structureDescriptionThis function will return the time this CRL was issued. Returnswhen the CRL was issued, or (time_t)-1 on error. Reporting BugsReport bugs to <bugs [at] gnutls.org>. Home page: http://www.gnutls.org CopyrightCopyright © 2001-2014 Free Software Foundation, Inc.. Copying and distribution of…