Linux Manuals session 3

NAME gnutls_certificate_set_dh_params – API function SYNOPSIS #include <gnutls/gnutls.h> void gnutls_certificate_set_dh_params(gnutls_certificate_credentials_t res, gnutls_dh_params_t dh_params); ARGUMENTS gnutls_certificate_credentials_t res is a gnutls_certificate_credentials_t structure gnutls_dh_params_t dh_params is a structure that holds Diffie-Hellman parameters. DESCRIPTION This function will set the Diffie-Hellman parameters for a certificate server to use. These parameters will be used in Ephemeral Diffie-Hellman cipher suites. Note that…

NAME gnutls_certificate_server_set_retrieve_function – API function SYNOPSIS #include <gnutls/compat.h> void gnutls_certificate_server_set_retrieve_function(gnutls_certificate_credentials_t cred, gnutls_certificate_server_retrieve_function * func); ARGUMENTS gnutls_certificate_credentials_t cred is a gnutls_certificate_credentials_t structure. gnutls_certificate_server_retrieve_function * func is the callback function DESCRIPTION This function sets a callback to be called in order to retrieve the certificate to be used in the handshake. You are advised to use gnutls_certificate_set_retrieve_function2()…

NAME gnutls_certificate_server_set_request – API function SYNOPSIS #include <gnutls/gnutls.h> void gnutls_certificate_server_set_request(gnutls_session_t session, gnutls_certificate_request_t req); ARGUMENTS gnutls_session_t session is a gnutls_session_t structure. gnutls_certificate_request_t req is one of GNUTLS_CERT_REQUEST, GNUTLS_CERT_REQUIRE DESCRIPTION This function specifies if we (in case of a server) are going to send a certificate request message to the client. If req is GNUTLS_CERT_REQUIRE then the…

NAME gnutls_certificate_send_x509_rdn_sequence – API function SYNOPSIS #include <gnutls/gnutls.h> void gnutls_certificate_send_x509_rdn_sequence(gnutls_session_t session, int status); ARGUMENTS gnutls_session_t session is a pointer to a gnutls_session_t structure. int status is 0 or 1 DESCRIPTION If status is non zero, this function will order gnutls not to send the rdnSequence in the certificate request message. That is the server will…

NAME gnutls_certificate_get_x509_crls – Used to export all the CRLs from a gnutls_certificate_credentials_t structure SYNOPSIS #include <gnutls/gnutls.h> void gnutls_certificate_get_x509_crls(gnutls_certificate_credentials_t sc, gnutls_x509_crl_t ** x509_crl_list, unsigned int * ncrls); ARGUMENTS gnutls_certificate_credentials_t sc is a gnutls_certificate_credentials_t structure. gnutls_x509_crl_t ** x509_crl_list the exported CRL list. Should be treated as constant unsigned int * ncrls the number of exported CRLs DESCRIPTION…

NAME gnutls_certificate_get_x509_cas – Used to export all the CAs from a gnutls_certificate_credentials_t structure SYNOPSIS #include <gnutls/gnutls.h> void gnutls_certificate_get_x509_cas(gnutls_certificate_credentials_t sc, gnutls_x509_crt_t ** x509_ca_list, unsigned int * ncas); ARGUMENTS gnutls_certificate_credentials_t sc is a gnutls_certificate_credentials_t structure. gnutls_x509_crt_t ** x509_ca_list will point to the CA list. Should be treated as constant unsigned int * ncas the number of CAs…

NAME gnutls_certificate_get_peers_subkey_id – API function SYNOPSIS #include <gnutls/gnutls.h> int gnutls_certificate_get_peers_subkey_id(gnutls_session_t session, gnutls_datum_t * id); ARGUMENTS gnutls_session_t session is a gnutls session gnutls_datum_t * id will contain the ID DESCRIPTION Get the peer’s subkey ID when OpenPGP certificates are used. The returned id should be treated as constant. RETURNS On success, GNUTLS_E_SUCCESS (0) is returned, otherwise…

NAME gnutls_certificate_get_peers – API function SYNOPSIS #include <gnutls/gnutls.h> const gnutls_datum_t * gnutls_certificate_get_peers(gnutls_session_t session, unsigned int * list_size); ARGUMENTS gnutls_session_t session is a gnutls session unsigned int * list_size is the length of the certificate list (may be NULL) DESCRIPTION Get the peer’s raw certificate (chain) as sent by the peer. These certificates are in raw…

NAME gnutls_certificate_get_ours – API function SYNOPSIS #include <gnutls/gnutls.h> const gnutls_datum_t * gnutls_certificate_get_ours(gnutls_session_t session); ARGUMENTS gnutls_session_t session is a gnutls session DESCRIPTION Gets the certificate as sent to the peer in the last handshake. The certificate is in raw (DER) format. No certificate list is being returned. Only the first certificate. RETURNS a pointer to a…

NAME gnutls_certificate_get_openpgp_keyring – export keyring from a #gnutls_certificate_credentials_t SYNOPSIS #include <gnutls/gnutls.h> void gnutls_certificate_get_openpgp_keyring(gnutls_certificate_credentials_t sc, gnutls_openpgp_keyring_t * keyring); ARGUMENTS gnutls_certificate_credentials_t sc is a gnutls_certificate_credentials_t structure. gnutls_openpgp_keyring_t * keyring the exported keyring. Should be treated as constant DESCRIPTION This function will export the OpenPGP keyring associated with the given credentials. SINCE 2.4.0 REPORTING BUGS Report bugs to…

NAME gnutls_certificate_get_issuer – API function SYNOPSIS #include <gnutls/gnutls.h> int gnutls_certificate_get_issuer(gnutls_certificate_credentials_t sc, gnutls_x509_crt_t cert, gnutls_x509_crt_t * issuer, unsigned int flags); ARGUMENTS gnutls_certificate_credentials_t sc is a gnutls_certificate_credentials_t structure. gnutls_x509_crt_t cert is the certificate to find issuer for gnutls_x509_crt_t * issuer Will hold the issuer if any. Should be treated as constant. unsigned int flags Use zero or…

NAME gnutls_certificate_get_crt_raw – API function SYNOPSIS #include <gnutls/gnutls.h> int gnutls_certificate_get_crt_raw(gnutls_certificate_credentials_t sc, unsigned idx1, unsigned idx2, gnutls_datum_t * cert); ARGUMENTS gnutls_certificate_credentials_t sc is a gnutls_certificate_credentials_t structure. unsigned idx1 the index of the certificate if multiple are present unsigned idx2 the index in the certificate list. Zero gives the server’s certificate. gnutls_datum_t * cert Will hold the…

NAME gnutls_certificate_free_keys – API function SYNOPSIS #include <gnutls/gnutls.h> void gnutls_certificate_free_keys(gnutls_certificate_credentials_t sc); ARGUMENTS gnutls_certificate_credentials_t sc is a gnutls_certificate_credentials_t structure. DESCRIPTION This function will delete all the keys and the certificates associated with the given credentials. This function must not be called when a TLS negotiation that uses the credentials is in progress. REPORTING BUGS Report bugs…

NAME gnutls_certificate_free_crls – API function SYNOPSIS #include <gnutls/gnutls.h> void gnutls_certificate_free_crls(gnutls_certificate_credentials_t sc); ARGUMENTS gnutls_certificate_credentials_t sc is a gnutls_certificate_credentials_t structure. DESCRIPTION This function will delete all the CRLs associated with the given credentials. REPORTING BUGS Report bugs to <bugs [at] gnutls.org>. Home page: http://www.gnutls.org COPYRIGHT Copyright © 2001-2014 Free Software Foundation, Inc.. Copying and distribution of this…

NAME gnutls_certificate_free_credentials – API function SYNOPSIS #include <gnutls/gnutls.h> void gnutls_certificate_free_credentials(gnutls_certificate_credentials_t sc); ARGUMENTS gnutls_certificate_credentials_t sc is a gnutls_certificate_credentials_t structure. DESCRIPTION This structure is complex enough to manipulate directly thus this helper function is provided in order to free (deallocate) it. This function does not free any temporary parameters associated with this structure (ie RSA and DH…

NAME gnutls_certificate_free_cas – API function SYNOPSIS #include <gnutls/gnutls.h> void gnutls_certificate_free_cas(gnutls_certificate_credentials_t sc); ARGUMENTS gnutls_certificate_credentials_t sc is a gnutls_certificate_credentials_t structure. DESCRIPTION This function will delete all the CAs associated with the given credentials. Servers that do not use gnutls_certificate_verify_peers2() may call this to save some memory. REPORTING BUGS Report bugs to <bugs [at] gnutls.org>. Home page: http://www.gnutls.org…

NAME gnutls_certificate_free_ca_names – API function SYNOPSIS #include <gnutls/gnutls.h> void gnutls_certificate_free_ca_names(gnutls_certificate_credentials_t sc); ARGUMENTS gnutls_certificate_credentials_t sc is a gnutls_certificate_credentials_t structure. DESCRIPTION This function will delete all the CA name in the given credentials. Clients may call this to save some memory since in client side the CA names are not used. Servers might want to use this…

NAME gnutls_certificate_expiration_time_peers – API function SYNOPSIS #include <gnutls/gnutls.h> time_t gnutls_certificate_expiration_time_peers(gnutls_session_t session); ARGUMENTS gnutls_session_t session is a gnutls session DESCRIPTION This function will return the peer’s certificate expiration time. RETURNS (time_t)-1 on error. DEPRECATED gnutls_certificate_verify_peers2() now verifies expiration times. REPORTING BUGS Report bugs to <bugs [at] gnutls.org>. Home page: http://www.gnutls.org COPYRIGHT Copyright © 2001-2014 Free Software…

NAME gnutls_certificate_client_set_retrieve_function – API function SYNOPSIS #include <gnutls/compat.h> void gnutls_certificate_client_set_retrieve_function(gnutls_certificate_credentials_t cred, gnutls_certificate_client_retrieve_function * func); ARGUMENTS gnutls_certificate_credentials_t cred is a gnutls_certificate_credentials_t structure. gnutls_certificate_client_retrieve_function * func is the callback function DESCRIPTION This function sets a callback to be called in order to retrieve the certificate to be used in the handshake. You are advised to use gnutls_certificate_set_retrieve_function2()…

NAME gnutls_certificate_client_get_request_status – API function SYNOPSIS #include <gnutls/gnutls.h> int gnutls_certificate_client_get_request_status(gnutls_session_t session); ARGUMENTS gnutls_session_t session is a gnutls session DESCRIPTION Get whether client certificate is requested or not. RETURNS 0 if the peer (server) did not request client authentication or 1 otherwise. REPORTING BUGS Report bugs to <bugs [at] gnutls.org>. Home page: http://www.gnutls.org COPYRIGHT Copyright ©…