summaryrefslogtreecommitdiff
path: root/src/lib/libcrypto/man/GENERAL_NAME_new.3
diff options
context:
space:
mode:
Diffstat (limited to 'src/lib/libcrypto/man/GENERAL_NAME_new.3')
-rw-r--r--src/lib/libcrypto/man/GENERAL_NAME_new.338
1 files changed, 23 insertions, 15 deletions
diff --git a/src/lib/libcrypto/man/GENERAL_NAME_new.3 b/src/lib/libcrypto/man/GENERAL_NAME_new.3
index c4e8fce764..a5537323ae 100644
--- a/src/lib/libcrypto/man/GENERAL_NAME_new.3
+++ b/src/lib/libcrypto/man/GENERAL_NAME_new.3
@@ -1,4 +1,4 @@
1.\" $OpenBSD: GENERAL_NAME_new.3,v 1.1 2016/12/23 00:40:16 schwarze Exp $ 1.\" $OpenBSD: GENERAL_NAME_new.3,v 1.2 2016/12/25 22:15:10 schwarze Exp $
2.\" 2.\"
3.\" Copyright (c) 2016 Ingo Schwarze <schwarze@openbsd.org> 3.\" Copyright (c) 2016 Ingo Schwarze <schwarze@openbsd.org>
4.\" 4.\"
@@ -14,7 +14,7 @@
14.\" ACTION OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF 14.\" ACTION OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF
15.\" OR IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE. 15.\" OR IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE.
16.\" 16.\"
17.Dd $Mdocdate: December 23 2016 $ 17.Dd $Mdocdate: December 25 2016 $
18.Dt GENERAL_NAME_NEW 3 18.Dt GENERAL_NAME_NEW 3
19.Os 19.Os
20.Sh NAME 20.Sh NAME
@@ -46,21 +46,26 @@
46.Ft void 46.Ft void
47.Fn OTHERNAME_free "OTHERNAME *name" 47.Fn OTHERNAME_free "OTHERNAME *name"
48.Sh DESCRIPTION 48.Sh DESCRIPTION
49Even though the X.501 Name documented in 49Even though the X.501
50.Vt Name
51documented in
50.Xr X509_NAME_new 3 52.Xr X509_NAME_new 3
51is a complicated multi-layered structure, it is very rigid and not 53is a complicated multi-layered structure, it is very rigid and not
52flexible enough to represent various entities that many people want 54flexible enough to represent various entities that many people want
53to use as names in certificates. 55to use as names in certificates.
54For that reason, X.509 extensions use the X.509 GeneralName 56For that reason, X.509 extensions use the X.509
55wrapper structure rather than using the X.501 Name structure 57.Vt GeneralName
56directly, at the expense of adding one or two additional layers 58wrapper structure rather than using the X.501
57of indirection. 59.Vt Name
60structure directly, at the expense of adding one or two additional
61layers of indirection.
58.Pp 62.Pp
59.Fn GENERAL_NAME_new 63.Fn GENERAL_NAME_new
60allocates and initializes an empty 64allocates and initializes an empty
61.Vt GENERAL_NAME 65.Vt GENERAL_NAME
62object, representing the ASN.1 GeneralName structure 66object, representing the ASN.1
63defined in RFC 5280 section 4.2.1.6. 67.Vt GeneralName
68structure defined in RFC 5280 section 4.2.1.6.
64It can for example hold an 69It can for example hold an
65.Vt X509_name 70.Vt X509_name
66object, an IP address, a DNS host name, a uniform resource identifier, 71object, an IP address, a DNS host name, a uniform resource identifier,
@@ -78,8 +83,9 @@ allocates and initializes an empty
78.Vt GENERAL_NAMES 83.Vt GENERAL_NAMES
79object, which is a 84object, which is a
80.Vt STACK_OF(GENERAL_NAME) 85.Vt STACK_OF(GENERAL_NAME)
81and represents the ASN.1 GeneralNames structure 86and represents the ASN.1
82defined in RFC 5280 section 4.2.1.6. 87.Vt GeneralNames
88structure defined in RFC 5280 section 4.2.1.6.
83It is used by extension structures that can contain multiple names, 89It is used by extension structures that can contain multiple names,
84for example key identifier, alternative name, and distribution point 90for example key identifier, alternative name, and distribution point
85extensions. 91extensions.
@@ -90,8 +96,9 @@ frees
90.Fn EDIPARTYNAME_new 96.Fn EDIPARTYNAME_new
91allocates and initializes an empty 97allocates and initializes an empty
92.Vt EDIPARTYNAME 98.Vt EDIPARTYNAME
93object, representing the ASN.1 EDIPartyName structure 99object, representing the ASN.1
94defined in RFC 5280 section 4.2.1.6, where 100.Vt EDIPartyName
101structure defined in RFC 5280 section 4.2.1.6, where
95.Dq EDI 102.Dq EDI
96stands for 103stands for
97.Dq electronic data identifier . 104.Dq electronic data identifier .
@@ -104,8 +111,9 @@ frees
104.Fn OTHERNAME_new 111.Fn OTHERNAME_new
105allocates and initializes an empty 112allocates and initializes an empty
106.Vt OTHERNAME 113.Vt OTHERNAME
107object, representing the ASN.1 OtherName structure 114object, representing the ASN.1
108defined in RFC 5280 section 4.2.1.6. 115.Vt OtherName
116structure defined in RFC 5280 section 4.2.1.6.
109It can hold data of any 117It can hold data of any
110.Vt ASN1_TYPE 118.Vt ASN1_TYPE
111together with a type identifier. 119together with a type identifier.