diff options
Diffstat (limited to '')
-rw-r--r-- | src/lib/libcrypto/man/PROXY_POLICY_new.3 | 97 |
1 files changed, 0 insertions, 97 deletions
diff --git a/src/lib/libcrypto/man/PROXY_POLICY_new.3 b/src/lib/libcrypto/man/PROXY_POLICY_new.3 deleted file mode 100644 index c23a620177..0000000000 --- a/src/lib/libcrypto/man/PROXY_POLICY_new.3 +++ /dev/null | |||
@@ -1,97 +0,0 @@ | |||
1 | .\" $OpenBSD: PROXY_POLICY_new.3,v 1.6 2021/10/27 11:24:47 schwarze Exp $ | ||
2 | .\" | ||
3 | .\" Copyright (c) 2016 Ingo Schwarze <schwarze@openbsd.org> | ||
4 | .\" | ||
5 | .\" Permission to use, copy, modify, and distribute this software for any | ||
6 | .\" purpose with or without fee is hereby granted, provided that the above | ||
7 | .\" copyright notice and this permission notice appear in all copies. | ||
8 | .\" | ||
9 | .\" THE SOFTWARE IS PROVIDED "AS IS" AND THE AUTHOR DISCLAIMS ALL WARRANTIES | ||
10 | .\" WITH REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF | ||
11 | .\" MERCHANTABILITY AND FITNESS. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR | ||
12 | .\" ANY SPECIAL, DIRECT, INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES | ||
13 | .\" WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR PROFITS, WHETHER IN AN | ||
14 | .\" ACTION OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF | ||
15 | .\" OR IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE. | ||
16 | .\" | ||
17 | .Dd $Mdocdate: October 27 2021 $ | ||
18 | .Dt PROXY_POLICY_NEW 3 | ||
19 | .Os | ||
20 | .Sh NAME | ||
21 | .Nm PROXY_POLICY_new , | ||
22 | .Nm PROXY_POLICY_free , | ||
23 | .Nm PROXY_CERT_INFO_EXTENSION_new , | ||
24 | .Nm PROXY_CERT_INFO_EXTENSION_free | ||
25 | .Nd X.509 proxy certificate extension | ||
26 | .Sh SYNOPSIS | ||
27 | .In openssl/x509v3.h | ||
28 | .Ft PROXY_POLICY * | ||
29 | .Fn PROXY_POLICY_new void | ||
30 | .Ft void | ||
31 | .Fn PROXY_POLICY_free "PROXY_POLICY *pp" | ||
32 | .Ft PROXY_CERT_INFO_EXTENSION * | ||
33 | .Fn PROXY_CERT_INFO_EXTENSION_new void | ||
34 | .Ft void | ||
35 | .Fn PROXY_CERT_INFO_EXTENSION_free "PROXY_CERT_INFO_EXTENSION *pcie" | ||
36 | .Sh DESCRIPTION | ||
37 | If a given non-CA certificate grants any privileges, using that | ||
38 | certificate to issue a proxy certificate and handing that proxy | ||
39 | certificate over to another person, organization, or service allows | ||
40 | the bearer of the proxy certificate to exercise some or all of the | ||
41 | privileges on behalf of the subject of the original certificate. | ||
42 | .Pp | ||
43 | .Fn PROXY_POLICY_new | ||
44 | allocates and initializes an empty | ||
45 | .Vt PROXY_POLICY | ||
46 | object, representing an ASN.1 | ||
47 | .Vt ProxyPolicy | ||
48 | structure defined in RFC 3820 section 3.8. | ||
49 | It defines which privileges are to be delegated. | ||
50 | .Fn PROXY_POLICY_free | ||
51 | frees | ||
52 | .Fa pp . | ||
53 | .Pp | ||
54 | .Fn PROXY_CERT_INFO_EXTENSION_new | ||
55 | allocates and initializes an empty | ||
56 | .Vt PROXY_CERT_INFO_EXTENSION | ||
57 | object, representing an ASN.1 | ||
58 | .Vt ProxyCertInfo | ||
59 | structure defined in RFC 3820 section 3.8. | ||
60 | It can contain a | ||
61 | .Vt PROXY_POLICY | ||
62 | object, and it can additionally restrict the maximum depth of the | ||
63 | path of proxy certificates that can be signed by this proxy | ||
64 | certificate. | ||
65 | .Fn PROXY_CERT_INFO_EXTENSION_free | ||
66 | frees | ||
67 | .Fa pcie . | ||
68 | .Pp | ||
69 | If a non-CA certificate contains a | ||
70 | .Vt PROXY_CERT_INFO_EXTENSION , | ||
71 | it is a proxy certificate; otherwise, it is an end entity certificate. | ||
72 | .Sh RETURN VALUES | ||
73 | .Fn PROXY_POLICY_new | ||
74 | and | ||
75 | .Fn PROXY_CERT_INFO_EXTENSION_new | ||
76 | return the new | ||
77 | .Vt PROXY_POLICY | ||
78 | or | ||
79 | .Vt PROXY_CERT_INFO_EXTENSION | ||
80 | object, respectively, or | ||
81 | .Dv NULL | ||
82 | if an error occurs. | ||
83 | .Sh SEE ALSO | ||
84 | .Xr BASIC_CONSTRAINTS_new 3 , | ||
85 | .Xr d2i_PROXY_POLICY 3 , | ||
86 | .Xr EXTENDED_KEY_USAGE_new 3 , | ||
87 | .Xr POLICYINFO_new 3 , | ||
88 | .Xr X509_EXTENSION_new 3 , | ||
89 | .Xr X509_get_extension_flags 3 , | ||
90 | .Xr X509_new 3 | ||
91 | .Sh STANDARDS | ||
92 | RFC 3820: Internet X.509 Public Key Infrastructure (PKI) Proxy | ||
93 | Certificate Profile | ||
94 | .Sh HISTORY | ||
95 | These functions first appeared in OpenSSL 0.9.7g | ||
96 | and have been available since | ||
97 | .Ox 3.8 . | ||