diff options
| author | cvs2svn <admin@example.com> | 2021-08-18 16:06:57 +0000 |
|---|---|---|
| committer | cvs2svn <admin@example.com> | 2021-08-18 16:06:57 +0000 |
| commit | d56c8fa8260d226f98b26f017b45b9c2b135f38d (patch) | |
| tree | 348178b41617813cc93787187984a734ef8379ca /src/lib/libcrypto/man/X509_add1_trust_object.3 | |
| parent | 18b9c1bcab7c37d8c5bd05b8e0d14d0c59d96650 (diff) | |
| download | openbsd-tb_20210818.tar.gz openbsd-tb_20210818.tar.bz2 openbsd-tb_20210818.zip | |
This commit was manufactured by cvs2git to create tag 'tb_20210818'.tb_20210818
Diffstat (limited to 'src/lib/libcrypto/man/X509_add1_trust_object.3')
| -rw-r--r-- | src/lib/libcrypto/man/X509_add1_trust_object.3 | 100 |
1 files changed, 0 insertions, 100 deletions
diff --git a/src/lib/libcrypto/man/X509_add1_trust_object.3 b/src/lib/libcrypto/man/X509_add1_trust_object.3 deleted file mode 100644 index e1e3824208..0000000000 --- a/src/lib/libcrypto/man/X509_add1_trust_object.3 +++ /dev/null | |||
| @@ -1,100 +0,0 @@ | |||
| 1 | .\" $OpenBSD: X509_add1_trust_object.3,v 1.3 2021/07/24 14:33:14 schwarze Exp $ | ||
| 2 | .\" | ||
| 3 | .\" Copyright (c) 2021 Ingo Schwarze <schwarze@openbsd.org> | ||
| 4 | .\" | ||
| 5 | .\" Permission to use, copy, modify, and distribute this software for any | ||
| 6 | .\" purpose with or without fee is hereby granted, provided that the above | ||
| 7 | .\" copyright notice and this permission notice appear in all copies. | ||
| 8 | .\" | ||
| 9 | .\" THE SOFTWARE IS PROVIDED "AS IS" AND THE AUTHOR DISCLAIMS ALL WARRANTIES | ||
| 10 | .\" WITH REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF | ||
| 11 | .\" MERCHANTABILITY AND FITNESS. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR | ||
| 12 | .\" ANY SPECIAL, DIRECT, INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES | ||
| 13 | .\" WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR PROFITS, WHETHER IN AN | ||
| 14 | .\" ACTION OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF | ||
| 15 | .\" OR IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE. | ||
| 16 | .\" | ||
| 17 | .Dd $Mdocdate: July 24 2021 $ | ||
| 18 | .Dt X509_ADD1_TRUST_OBJECT 3 | ||
| 19 | .Os | ||
| 20 | .Sh NAME | ||
| 21 | .Nm X509_add1_trust_object , | ||
| 22 | .Nm X509_trust_clear , | ||
| 23 | .Nm X509_add1_reject_object , | ||
| 24 | .Nm X509_reject_clear | ||
| 25 | .Nd mark an X.509 certificate as intended for a specific purpose | ||
| 26 | .Sh SYNOPSIS | ||
| 27 | .In openssl/x509.h | ||
| 28 | .Ft int | ||
| 29 | .Fo X509_add1_trust_object | ||
| 30 | .Fa "X509 *x" | ||
| 31 | .Fa "const ASN1_OBJECT *purpose" | ||
| 32 | .Fc | ||
| 33 | .Ft void | ||
| 34 | .Fo X509_trust_clear | ||
| 35 | .Fa "X509 *x" | ||
| 36 | .Fc | ||
| 37 | .Ft int | ||
| 38 | .Fo X509_add1_reject_object | ||
| 39 | .Fa "X509 *x" | ||
| 40 | .Fa "const ASN1_OBJECT *purpose" | ||
| 41 | .Fc | ||
| 42 | .Ft void | ||
| 43 | .Fo X509_reject_clear | ||
| 44 | .Fa "X509 *x" | ||
| 45 | .Fc | ||
| 46 | .Sh DESCRIPTION | ||
| 47 | .Fn X509_add1_trust_object | ||
| 48 | appends a deep copy of the | ||
| 49 | .Fa purpose | ||
| 50 | object to the set of intended purposes that | ||
| 51 | .Fa x | ||
| 52 | contains as non-standard auxiliary data. | ||
| 53 | The function | ||
| 54 | .Xr OBJ_nid2obj 3 | ||
| 55 | can be used to create appropriate purpose objects from the | ||
| 56 | .Dv NID_* | ||
| 57 | constants mentioned in | ||
| 58 | .Xr X509_check_purpose 3 , | ||
| 59 | even though the | ||
| 60 | .Dv X509_PURPOSE_* | ||
| 61 | constants listed in that manual page are not intended for use with | ||
| 62 | .Fn X509_add1_trust_object . | ||
| 63 | .Pp | ||
| 64 | .Fn X509_trust_clear | ||
| 65 | frees and removes all purpose objects from the set of intended | ||
| 66 | purposes in the non-standard auxiliary data of | ||
| 67 | .Fa x . | ||
| 68 | .Pp | ||
| 69 | .Fn X509_add1_reject_object | ||
| 70 | and | ||
| 71 | .Fn X509_reject_clear | ||
| 72 | are similar except that they operate on a set of unintended purposes. | ||
| 73 | .Pp | ||
| 74 | As an alternative to using the functions documented in the present | ||
| 75 | manual page, X.509 certificate extensions can be used. | ||
| 76 | At the price of higher complexity, those allow storing the purpose | ||
| 77 | inside the certificate itself in a standard-conforming way rather than | ||
| 78 | merely in non-standard auxiliary data associated with the certificate. | ||
| 79 | See | ||
| 80 | .Xr EXTENDED_KEY_USAGE_new 3 | ||
| 81 | for details. | ||
| 82 | .Sh RETURN VALUES | ||
| 83 | .Fn X509_add1_trust_object | ||
| 84 | and | ||
| 85 | .Fn X509_add1_reject_object | ||
| 86 | return the new number of purposes in the respective set | ||
| 87 | or 0 if an error occurs, in particular if memory | ||
| 88 | allocation fails or if | ||
| 89 | .Fa x | ||
| 90 | does not contain a sub-object that can hold non-standard auxiliary data. | ||
| 91 | .Sh SEE ALSO | ||
| 92 | .Xr ASN1_OBJECT_new 3 , | ||
| 93 | .Xr EXTENDED_KEY_USAGE_new 3 , | ||
| 94 | .Xr OBJ_nid2obj 3 , | ||
| 95 | .Xr X509_CERT_AUX_new 3 , | ||
| 96 | .Xr X509_check_trust 3 , | ||
| 97 | .Xr X509_new 3 | ||
| 98 | .Sh HISTORY | ||
| 99 | These functions first appeared in OpenSSL 0.9.4 and have been available since | ||
| 100 | .Ox 2.7 . | ||
