summaryrefslogtreecommitdiff
path: root/src/lib/libcrypto/man/x509.3
diff options
context:
space:
mode:
authorschwarze <>2016-11-04 15:29:03 +0000
committerschwarze <>2016-11-04 15:29:03 +0000
commite23d00ab37299e14c06d5d2b599a3793e3d0575c (patch)
treef91172cf4f459119421ea45c97eb6fa4aec563bc /src/lib/libcrypto/man/x509.3
parentf34ab28d6356aae4d0458dd2076438a042314790 (diff)
downloadopenbsd-e23d00ab37299e14c06d5d2b599a3793e3d0575c.tar.gz
openbsd-e23d00ab37299e14c06d5d2b599a3793e3d0575c.tar.bz2
openbsd-e23d00ab37299e14c06d5d2b599a3793e3d0575c.zip
convert X509 manuals from pod to mdoc
Diffstat (limited to '')
-rw-r--r--src/lib/libcrypto/man/x509.379
1 files changed, 79 insertions, 0 deletions
diff --git a/src/lib/libcrypto/man/x509.3 b/src/lib/libcrypto/man/x509.3
new file mode 100644
index 0000000000..1f7b7f4128
--- /dev/null
+++ b/src/lib/libcrypto/man/x509.3
@@ -0,0 +1,79 @@
1.Dd $Mdocdate: November 4 2016 $
2.Dt X509 3
3.Os
4.Sh NAME
5.Nm x509
6.Nd X.509 certificate handling
7.Sh SYNOPSIS
8.In openssl/x509.h
9.Sh DESCRIPTION
10A X.509 certificate is a structured grouping of information about an
11individual, a device, or anything one can imagine.
12A X.509 CRL (certificate revocation list) is a tool to help determine if
13a certificate is still valid.
14The exact definition of those can be found in the X.509 document from
15ITU-T, or in RFC3280 from PKIX.
16In OpenSSL, the type
17.Vt X509
18is used to express such a certificate, and the type
19.Vt X509_CRL
20is used to express a CRL.
21.Pp
22A related structure is a certificate request, defined in PKCS#10 from
23RSA Security, Inc., also reflected in RFC2896.
24In OpenSSL, the type
25.Vt X509_REQ
26is used to express such a certificate request.
27.Pp
28To handle some complex parts of a certificate, there are the types
29.Vt X509_NAME
30to express a certificate name,
31.Vt X509_ATTRIBUTE
32to express a certificate attribute,
33.Vt X509_EXTENSION
34to express a certificate extension, and a few more.
35.Pp
36Finally, there's the supertype
37.Vt X509_INFO ,
38which can contain a CRL, a certificate, and a corresponding private key.
39.Pp
40The functions
41.Fa X509_* ,
42.Fa d2i_X509_* ,
43and
44.Fa i2d_X509_*
45handle X.509 certificates, with some exceptions shown below.
46.Pp
47.Fa X509_CRL_* ,
48.Fa d2i_X509_CRL_* ,
49and
50.Fa i2d_X509_CRL_*
51handle X.509 CRLs.
52.Pp
53.Fa X509_REQ_* ,
54.Fa d2i_X509_REQ_* ,
55and
56.Fa i2d_X509_REQ_*
57handle PKCS#10 certificate requests.
58.Pp
59.Fa X509_NAME_*
60handle certificate names.
61.Pp
62.Fa X509_ATTRIBUTE_*
63handle certificate attributes.
64.Pp
65.Fa X509_EXTENSION_*
66handle certificate extensions.
67.Sh SEE ALSO
68.Xr crypto 3 ,
69.Xr d2i_X509 3 ,
70.Xr d2i_X509_ALGOR 3 ,
71.Xr d2i_X509_CRL 3 ,
72.Xr d2i_X509_NAME 3 ,
73.Xr d2i_X509_REQ 3 ,
74.Xr d2i_X509_SIG 3 ,
75.Xr X509_NAME_add_entry_by_NID 3 ,
76.Xr X509_NAME_add_entry_by_txt 3 ,
77.Xr X509_NAME_ENTRY_get_object 3 ,
78.Xr X509_NAME_new 3 ,
79.Xr X509_NAME_print_ex 3