Linux Manuals session 3

NAME gnutls_certificate_set_x509_crl – API function SYNOPSIS #include <gnutls/gnutls.h> int gnutls_certificate_set_x509_crl(gnutls_certificate_credentials_t res, gnutls_x509_crl_t * crl_list, int crl_list_size); ARGUMENTS gnutls_certificate_credentials_t res is a gnutls_certificate_credentials_t structure. gnutls_x509_crl_t * crl_list is a list of trusted CRLs. They should have been verified before. int crl_list_size holds the size of the crl_list DESCRIPTION This function adds the trusted CRLs in order…

NAME gnutls_certificate_set_verify_limits – API function SYNOPSIS #include <gnutls/gnutls.h> void gnutls_certificate_set_verify_limits(gnutls_certificate_credentials_t res, unsigned int max_bits, unsigned int max_depth); ARGUMENTS gnutls_certificate_credentials_t res is a gnutls_certificate_credentials structure unsigned int max_bits is the number of bits of an acceptable certificate (default 8200) unsigned int max_depth is maximum depth of the verification of a certificate chain (default 5) DESCRIPTION This…

NAME gnutls_certificate_set_verify_function – API function SYNOPSIS #include <gnutls/gnutls.h> void gnutls_certificate_set_verify_function(gnutls_certificate_credentials_t cred, gnutls_certificate_verify_function * func); ARGUMENTS gnutls_certificate_credentials_t cred is a gnutls_certificate_credentials_t structure. gnutls_certificate_verify_function * func is the callback function DESCRIPTION This function sets a callback to be called when peer’s certificate has been received in order to verify it on receipt rather than doing after the…

NAME gnutls_certificate_set_verify_flags – API function SYNOPSIS #include <gnutls/gnutls.h> void gnutls_certificate_set_verify_flags(gnutls_certificate_credentials_t res, unsigned int flags); ARGUMENTS gnutls_certificate_credentials_t res is a gnutls_certificate_credentials_t structure unsigned int flags are the flags DESCRIPTION This function will set the flags to be used for verification of certificates and override any defaults. The provided flags must be an OR of the gnutls_certificate_verify_flags…

NAME gnutls_certificate_set_trust_list – API function SYNOPSIS #include <gnutls/x509.h> void gnutls_certificate_set_trust_list(gnutls_certificate_credentials_t res, gnutls_x509_trust_list_t tlist, unsigned flags); ARGUMENTS gnutls_certificate_credentials_t res is a gnutls_certificate_credentials_t structure. gnutls_x509_trust_list_t tlist is a gnutls_x509_trust_list_t structure unsigned flags must be zero DESCRIPTION This function sets a trust list in the gnutls_certificate_credentials_t structure. Note that the tlist will become part of the credentials structure…

NAME gnutls_certificate_set_rsa_export_params – API function SYNOPSIS #include <gnutls/compat.h> void gnutls_certificate_set_rsa_export_params(gnutls_certificate_credentials_t res, gnutls_rsa_params_t rsa_params); ARGUMENTS gnutls_certificate_credentials_t res is a gnutls_certificate_credentials_t structure gnutls_rsa_params_t rsa_params is a structure that holds temporary RSA parameters. DESCRIPTION This function will set the temporary RSA parameters for a certificate server to use. These parameters will be used in RSA-EXPORT cipher suites. REPORTING…

NAME gnutls_certificate_set_retrieve_function2 – API function SYNOPSIS #include <gnutls/abstract.h> void gnutls_certificate_set_retrieve_function2(gnutls_certificate_credentials_t cred, gnutls_certificate_retrieve_function2 * func); ARGUMENTS gnutls_certificate_credentials_t cred is a gnutls_certificate_credentials_t structure. gnutls_certificate_retrieve_function2 * func is the callback function DESCRIPTION This function sets a callback to be called in order to retrieve the certificate to be used in the handshake. The callback’s function prototype is: int…

NAME gnutls_certificate_set_retrieve_function – API function SYNOPSIS #include <gnutls/gnutls.h> void gnutls_certificate_set_retrieve_function(gnutls_certificate_credentials_t cred, gnutls_certificate_retrieve_function * func); ARGUMENTS gnutls_certificate_credentials_t cred is a gnutls_certificate_credentials_t structure. gnutls_certificate_retrieve_function * func is the callback function DESCRIPTION This function sets a callback to be called in order to retrieve the certificate to be used in the handshake. You are advised to use gnutls_certificate_set_retrieve_function2()…

NAME gnutls_certificate_set_pin_function – API function SYNOPSIS #include <gnutls/gnutls.h> void gnutls_certificate_set_pin_function(gnutls_certificate_credentials_t cred, gnutls_pin_callback_t fn, void * userdata); ARGUMENTS gnutls_certificate_credentials_t cred is a gnutls_certificate_credentials_t structure. gnutls_pin_callback_t fn A PIN callback void * userdata Data to be passed in the callback DESCRIPTION This function will set a callback function to be used when required to access a protected…

NAME gnutls_certificate_set_params_function – API function SYNOPSIS #include <gnutls/gnutls.h> void gnutls_certificate_set_params_function(gnutls_certificate_credentials_t res, gnutls_params_function * func); ARGUMENTS gnutls_certificate_credentials_t res is a gnutls_certificate_credentials_t structure gnutls_params_function * func is the function to be called DESCRIPTION This function will set a callback in order for the server to get the Diffie-Hellman or RSA parameters for certificate authentication. The callback should…

NAME gnutls_certificate_set_openpgp_keyring_mem – API function SYNOPSIS #include <gnutls/openpgp.h> int gnutls_certificate_set_openpgp_keyring_mem(gnutls_certificate_credentials_t c, const uint8_t * data, size_t dlen, gnutls_openpgp_crt_fmt_t format); ARGUMENTS gnutls_certificate_credentials_t c A certificate credentials structure const uint8_t * data buffer with keyring data. size_t dlen length of data buffer. gnutls_openpgp_crt_fmt_t format the format of the keyring DESCRIPTION The function is used to set keyrings…

NAME gnutls_certificate_set_openpgp_keyring_file – API function SYNOPSIS #include <gnutls/openpgp.h> int gnutls_certificate_set_openpgp_keyring_file(gnutls_certificate_credentials_t c, const char * file, gnutls_openpgp_crt_fmt_t format); ARGUMENTS gnutls_certificate_credentials_t c A certificate credentials structure const char * file filename of the keyring. gnutls_openpgp_crt_fmt_t format format of keyring. DESCRIPTION The function is used to set keyrings that will be used internally by various OpenPGP functions. For…

NAME gnutls_certificate_set_openpgp_key_mem2 – API function SYNOPSIS #include <gnutls/openpgp.h> int gnutls_certificate_set_openpgp_key_mem2(gnutls_certificate_credentials_t res, const gnutls_datum_t * cert, const gnutls_datum_t * key, const char * subkey_id, gnutls_openpgp_crt_fmt_t format); ARGUMENTS gnutls_certificate_credentials_t res the destination context to save the data. const gnutls_datum_t * cert the datum that contains the public key. const gnutls_datum_t * key the datum that contains the…

NAME gnutls_certificate_set_openpgp_key_mem – API function SYNOPSIS #include <gnutls/openpgp.h> int gnutls_certificate_set_openpgp_key_mem(gnutls_certificate_credentials_t res, const gnutls_datum_t * cert, const gnutls_datum_t * key, gnutls_openpgp_crt_fmt_t format); ARGUMENTS gnutls_certificate_credentials_t res the destination context to save the data. const gnutls_datum_t * cert the datum that contains the public key. const gnutls_datum_t * key the datum that contains the secret key. gnutls_openpgp_crt_fmt_t format…

NAME gnutls_certificate_set_openpgp_key_file2 – API function SYNOPSIS #include <gnutls/openpgp.h> int gnutls_certificate_set_openpgp_key_file2(gnutls_certificate_credentials_t res, const char * certfile, const char * keyfile, const char * subkey_id, gnutls_openpgp_crt_fmt_t format); ARGUMENTS gnutls_certificate_credentials_t res the destination context to save the data. const char * certfile the file that contains the public key. const char * keyfile the file that contains the…

NAME gnutls_certificate_set_openpgp_key_file – API function SYNOPSIS #include <gnutls/openpgp.h> int gnutls_certificate_set_openpgp_key_file(gnutls_certificate_credentials_t res, const char * certfile, const char * keyfile, gnutls_openpgp_crt_fmt_t format); ARGUMENTS gnutls_certificate_credentials_t res the destination context to save the data. const char * certfile the file that contains the public key. const char * keyfile the file that contains the secret key. gnutls_openpgp_crt_fmt_t format…

NAME gnutls_certificate_set_openpgp_key – API function SYNOPSIS #include <gnutls/openpgp.h> int gnutls_certificate_set_openpgp_key(gnutls_certificate_credentials_t res, gnutls_openpgp_crt_t crt, gnutls_openpgp_privkey_t pkey); ARGUMENTS gnutls_certificate_credentials_t res is a gnutls_certificate_credentials_t structure. gnutls_openpgp_crt_t crt contains an openpgp public key gnutls_openpgp_privkey_t pkey is an openpgp private key DESCRIPTION This function sets a certificate/private key pair in the gnutls_certificate_credentials_t structure. This function may be called more than…

NAME gnutls_certificate_set_ocsp_status_request_function – API function SYNOPSIS #include <gnutls/gnutls.h> void gnutls_certificate_set_ocsp_status_request_function(gnutls_certificate_credentials_t sc, gnutls_status_request_ocsp_func ocsp_func, void * ptr); ARGUMENTS gnutls_certificate_credentials_t sc is a gnutls_certificate_credentials_t structure. gnutls_status_request_ocsp_func ocsp_func function pointer to OCSP status request callback. void * ptr opaque pointer passed to callback function DESCRIPTION This function is to be used by server to register a callback to…

NAME gnutls_certificate_set_ocsp_status_request_file – API function SYNOPSIS #include <gnutls/gnutls.h> int gnutls_certificate_set_ocsp_status_request_file(gnutls_certificate_credentials_t sc, const char * response_file, unsigned int flags); ARGUMENTS gnutls_certificate_credentials_t sc is a credentials structure. const char * response_file a filename of the OCSP response unsigned int flags should be zero DESCRIPTION This function sets the filename of an OCSP response, that will be sent…

NAME gnutls_certificate_set_key – API function SYNOPSIS #include <gnutls/abstract.h> int gnutls_certificate_set_key(gnutls_certificate_credentials_t res, const char ** names, int names_size, gnutls_pcert_st * pcert_list, int pcert_list_size, gnutls_privkey_t key); ARGUMENTS gnutls_certificate_credentials_t res is a gnutls_certificate_credentials_t structure. const char ** names is an array of DNS name of the certificate (NULL if none) int names_size holds the size of the names…