diff options
author | cvs2svn <admin@example.com> | 2025-04-14 17:32:06 +0000 |
---|---|---|
committer | cvs2svn <admin@example.com> | 2025-04-14 17:32:06 +0000 |
commit | eb8dd9dca1228af0cd132f515509051ecfabf6f6 (patch) | |
tree | edb6da6af7e865d488dc1a29309f1e1ec226e603 /src/lib/libcrypto/man/X509_add1_trust_object.3 | |
parent | 247f0352e0ed72a4f476db9dc91f4d982bc83eb2 (diff) | |
download | openbsd-tb_20250414.tar.gz openbsd-tb_20250414.tar.bz2 openbsd-tb_20250414.zip |
This commit was manufactured by cvs2git to create tag 'tb_20250414'.tb_20250414
Diffstat (limited to 'src/lib/libcrypto/man/X509_add1_trust_object.3')
-rw-r--r-- | src/lib/libcrypto/man/X509_add1_trust_object.3 | 99 |
1 files changed, 0 insertions, 99 deletions
diff --git a/src/lib/libcrypto/man/X509_add1_trust_object.3 b/src/lib/libcrypto/man/X509_add1_trust_object.3 deleted file mode 100644 index 067bf64464..0000000000 --- a/src/lib/libcrypto/man/X509_add1_trust_object.3 +++ /dev/null | |||
@@ -1,99 +0,0 @@ | |||
1 | .\" $OpenBSD: X509_add1_trust_object.3,v 1.4 2024/09/02 08:04:32 tb Exp $ | ||
2 | .\" | ||
3 | .\" Copyright (c) 2021 Ingo Schwarze <schwarze@openbsd.org> | ||
4 | .\" | ||
5 | .\" Permission to use, copy, modify, and distribute this software for any | ||
6 | .\" purpose with or without fee is hereby granted, provided that the above | ||
7 | .\" copyright notice and this permission notice appear in all copies. | ||
8 | .\" | ||
9 | .\" THE SOFTWARE IS PROVIDED "AS IS" AND THE AUTHOR DISCLAIMS ALL WARRANTIES | ||
10 | .\" WITH REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF | ||
11 | .\" MERCHANTABILITY AND FITNESS. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR | ||
12 | .\" ANY SPECIAL, DIRECT, INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES | ||
13 | .\" WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR PROFITS, WHETHER IN AN | ||
14 | .\" ACTION OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF | ||
15 | .\" OR IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE. | ||
16 | .\" | ||
17 | .Dd $Mdocdate: September 2 2024 $ | ||
18 | .Dt X509_ADD1_TRUST_OBJECT 3 | ||
19 | .Os | ||
20 | .Sh NAME | ||
21 | .Nm X509_add1_trust_object , | ||
22 | .Nm X509_trust_clear , | ||
23 | .Nm X509_add1_reject_object , | ||
24 | .Nm X509_reject_clear | ||
25 | .Nd mark an X.509 certificate as intended for a specific purpose | ||
26 | .Sh SYNOPSIS | ||
27 | .In openssl/x509.h | ||
28 | .Ft int | ||
29 | .Fo X509_add1_trust_object | ||
30 | .Fa "X509 *x" | ||
31 | .Fa "const ASN1_OBJECT *purpose" | ||
32 | .Fc | ||
33 | .Ft void | ||
34 | .Fo X509_trust_clear | ||
35 | .Fa "X509 *x" | ||
36 | .Fc | ||
37 | .Ft int | ||
38 | .Fo X509_add1_reject_object | ||
39 | .Fa "X509 *x" | ||
40 | .Fa "const ASN1_OBJECT *purpose" | ||
41 | .Fc | ||
42 | .Ft void | ||
43 | .Fo X509_reject_clear | ||
44 | .Fa "X509 *x" | ||
45 | .Fc | ||
46 | .Sh DESCRIPTION | ||
47 | .Fn X509_add1_trust_object | ||
48 | appends a deep copy of the | ||
49 | .Fa purpose | ||
50 | object to the set of intended purposes that | ||
51 | .Fa x | ||
52 | contains as non-standard auxiliary data. | ||
53 | The function | ||
54 | .Xr OBJ_nid2obj 3 | ||
55 | can be used to create appropriate purpose objects from the | ||
56 | .Dv NID_* | ||
57 | constants mentioned in | ||
58 | .Xr X509_check_purpose 3 , | ||
59 | even though the | ||
60 | .Dv X509_PURPOSE_* | ||
61 | constants listed in that manual page are not intended for use with | ||
62 | .Fn X509_add1_trust_object . | ||
63 | .Pp | ||
64 | .Fn X509_trust_clear | ||
65 | frees and removes all purpose objects from the set of intended | ||
66 | purposes in the non-standard auxiliary data of | ||
67 | .Fa x . | ||
68 | .Pp | ||
69 | .Fn X509_add1_reject_object | ||
70 | and | ||
71 | .Fn X509_reject_clear | ||
72 | are similar except that they operate on a set of unintended purposes. | ||
73 | .Pp | ||
74 | As an alternative to using the functions documented in the present | ||
75 | manual page, X.509 certificate extensions can be used. | ||
76 | At the price of higher complexity, those allow storing the purpose | ||
77 | inside the certificate itself in a standard-conforming way rather than | ||
78 | merely in non-standard auxiliary data associated with the certificate. | ||
79 | See | ||
80 | .Xr EXTENDED_KEY_USAGE_new 3 | ||
81 | for details. | ||
82 | .Sh RETURN VALUES | ||
83 | .Fn X509_add1_trust_object | ||
84 | and | ||
85 | .Fn X509_add1_reject_object | ||
86 | return the new number of purposes in the respective set | ||
87 | or 0 if an error occurs, in particular if memory | ||
88 | allocation fails or if | ||
89 | .Fa x | ||
90 | does not contain a sub-object that can hold non-standard auxiliary data. | ||
91 | .Sh SEE ALSO | ||
92 | .Xr ASN1_OBJECT_new 3 , | ||
93 | .Xr EXTENDED_KEY_USAGE_new 3 , | ||
94 | .Xr OBJ_nid2obj 3 , | ||
95 | .Xr X509_CERT_AUX_new 3 , | ||
96 | .Xr X509_new 3 | ||
97 | .Sh HISTORY | ||
98 | These functions first appeared in OpenSSL 0.9.4 and have been available since | ||
99 | .Ox 2.7 . | ||