summaryrefslogtreecommitdiff
path: root/src/lib/libcrypto/man/PROXY_POLICY_new.3
diff options
context:
space:
mode:
Diffstat (limited to '')
-rw-r--r--src/lib/libcrypto/man/PROXY_POLICY_new.397
1 files changed, 0 insertions, 97 deletions
diff --git a/src/lib/libcrypto/man/PROXY_POLICY_new.3 b/src/lib/libcrypto/man/PROXY_POLICY_new.3
deleted file mode 100644
index c23a620177..0000000000
--- a/src/lib/libcrypto/man/PROXY_POLICY_new.3
+++ /dev/null
@@ -1,97 +0,0 @@
1.\" $OpenBSD: PROXY_POLICY_new.3,v 1.6 2021/10/27 11:24:47 schwarze Exp $
2.\"
3.\" Copyright (c) 2016 Ingo Schwarze <schwarze@openbsd.org>
4.\"
5.\" Permission to use, copy, modify, and distribute this software for any
6.\" purpose with or without fee is hereby granted, provided that the above
7.\" copyright notice and this permission notice appear in all copies.
8.\"
9.\" THE SOFTWARE IS PROVIDED "AS IS" AND THE AUTHOR DISCLAIMS ALL WARRANTIES
10.\" WITH REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF
11.\" MERCHANTABILITY AND FITNESS. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR
12.\" ANY SPECIAL, DIRECT, INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES
13.\" WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR PROFITS, WHETHER IN AN
14.\" ACTION OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF
15.\" OR IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE.
16.\"
17.Dd $Mdocdate: October 27 2021 $
18.Dt PROXY_POLICY_NEW 3
19.Os
20.Sh NAME
21.Nm PROXY_POLICY_new ,
22.Nm PROXY_POLICY_free ,
23.Nm PROXY_CERT_INFO_EXTENSION_new ,
24.Nm PROXY_CERT_INFO_EXTENSION_free
25.Nd X.509 proxy certificate extension
26.Sh SYNOPSIS
27.In openssl/x509v3.h
28.Ft PROXY_POLICY *
29.Fn PROXY_POLICY_new void
30.Ft void
31.Fn PROXY_POLICY_free "PROXY_POLICY *pp"
32.Ft PROXY_CERT_INFO_EXTENSION *
33.Fn PROXY_CERT_INFO_EXTENSION_new void
34.Ft void
35.Fn PROXY_CERT_INFO_EXTENSION_free "PROXY_CERT_INFO_EXTENSION *pcie"
36.Sh DESCRIPTION
37If a given non-CA certificate grants any privileges, using that
38certificate to issue a proxy certificate and handing that proxy
39certificate over to another person, organization, or service allows
40the bearer of the proxy certificate to exercise some or all of the
41privileges on behalf of the subject of the original certificate.
42.Pp
43.Fn PROXY_POLICY_new
44allocates and initializes an empty
45.Vt PROXY_POLICY
46object, representing an ASN.1
47.Vt ProxyPolicy
48structure defined in RFC 3820 section 3.8.
49It defines which privileges are to be delegated.
50.Fn PROXY_POLICY_free
51frees
52.Fa pp .
53.Pp
54.Fn PROXY_CERT_INFO_EXTENSION_new
55allocates and initializes an empty
56.Vt PROXY_CERT_INFO_EXTENSION
57object, representing an ASN.1
58.Vt ProxyCertInfo
59structure defined in RFC 3820 section 3.8.
60It can contain a
61.Vt PROXY_POLICY
62object, and it can additionally restrict the maximum depth of the
63path of proxy certificates that can be signed by this proxy
64certificate.
65.Fn PROXY_CERT_INFO_EXTENSION_free
66frees
67.Fa pcie .
68.Pp
69If a non-CA certificate contains a
70.Vt PROXY_CERT_INFO_EXTENSION ,
71it is a proxy certificate; otherwise, it is an end entity certificate.
72.Sh RETURN VALUES
73.Fn PROXY_POLICY_new
74and
75.Fn PROXY_CERT_INFO_EXTENSION_new
76return the new
77.Vt PROXY_POLICY
78or
79.Vt PROXY_CERT_INFO_EXTENSION
80object, respectively, or
81.Dv NULL
82if an error occurs.
83.Sh SEE ALSO
84.Xr BASIC_CONSTRAINTS_new 3 ,
85.Xr d2i_PROXY_POLICY 3 ,
86.Xr EXTENDED_KEY_USAGE_new 3 ,
87.Xr POLICYINFO_new 3 ,
88.Xr X509_EXTENSION_new 3 ,
89.Xr X509_get_extension_flags 3 ,
90.Xr X509_new 3
91.Sh STANDARDS
92RFC 3820: Internet X.509 Public Key Infrastructure (PKI) Proxy
93Certificate Profile
94.Sh HISTORY
95These functions first appeared in OpenSSL 0.9.7g
96and have been available since
97.Ox 3.8 .