diff options
Diffstat (limited to 'src/lib/libcrypto/man/PROXY_POLICY_new.3')
| -rw-r--r-- | src/lib/libcrypto/man/PROXY_POLICY_new.3 | 96 |
1 files changed, 0 insertions, 96 deletions
diff --git a/src/lib/libcrypto/man/PROXY_POLICY_new.3 b/src/lib/libcrypto/man/PROXY_POLICY_new.3 deleted file mode 100644 index 506b9cb2d3..0000000000 --- a/src/lib/libcrypto/man/PROXY_POLICY_new.3 +++ /dev/null | |||
| @@ -1,96 +0,0 @@ | |||
| 1 | .\" $OpenBSD: PROXY_POLICY_new.3,v 1.5 2019/06/06 17:41:43 schwarze Exp $ | ||
| 2 | .\" | ||
| 3 | .\" Copyright (c) 2016 Ingo Schwarze <schwarze@openbsd.org> | ||
| 4 | .\" | ||
| 5 | .\" Permission to use, copy, modify, and distribute this software for any | ||
| 6 | .\" purpose with or without fee is hereby granted, provided that the above | ||
| 7 | .\" copyright notice and this permission notice appear in all copies. | ||
| 8 | .\" | ||
| 9 | .\" THE SOFTWARE IS PROVIDED "AS IS" AND THE AUTHOR DISCLAIMS ALL WARRANTIES | ||
| 10 | .\" WITH REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF | ||
| 11 | .\" MERCHANTABILITY AND FITNESS. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR | ||
| 12 | .\" ANY SPECIAL, DIRECT, INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES | ||
| 13 | .\" WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR PROFITS, WHETHER IN AN | ||
| 14 | .\" ACTION OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF | ||
| 15 | .\" OR IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE. | ||
| 16 | .\" | ||
| 17 | .Dd $Mdocdate: June 6 2019 $ | ||
| 18 | .Dt PROXY_POLICY_NEW 3 | ||
| 19 | .Os | ||
| 20 | .Sh NAME | ||
| 21 | .Nm PROXY_POLICY_new , | ||
| 22 | .Nm PROXY_POLICY_free , | ||
| 23 | .Nm PROXY_CERT_INFO_EXTENSION_new , | ||
| 24 | .Nm PROXY_CERT_INFO_EXTENSION_free | ||
| 25 | .Nd X.509 proxy certificate extension | ||
| 26 | .Sh SYNOPSIS | ||
| 27 | .In openssl/x509v3.h | ||
| 28 | .Ft PROXY_POLICY * | ||
| 29 | .Fn PROXY_POLICY_new void | ||
| 30 | .Ft void | ||
| 31 | .Fn PROXY_POLICY_free "PROXY_POLICY *pp" | ||
| 32 | .Ft PROXY_CERT_INFO_EXTENSION * | ||
| 33 | .Fn PROXY_CERT_INFO_EXTENSION_new void | ||
| 34 | .Ft void | ||
| 35 | .Fn PROXY_CERT_INFO_EXTENSION_free "PROXY_CERT_INFO_EXTENSION *pcie" | ||
| 36 | .Sh DESCRIPTION | ||
| 37 | If a given non-CA certificate grants any privileges, using that | ||
| 38 | certificate to issue a proxy certificate and handing that proxy | ||
| 39 | certificate over to another person, organization, or service allows | ||
| 40 | the bearer of the proxy certificate to exercise some or all of the | ||
| 41 | privileges on behalf of the subject of the original certificate. | ||
| 42 | .Pp | ||
| 43 | .Fn PROXY_POLICY_new | ||
| 44 | allocates and initializes an empty | ||
| 45 | .Vt PROXY_POLICY | ||
| 46 | object, representing an ASN.1 | ||
| 47 | .Vt ProxyPolicy | ||
| 48 | structure defined in RFC 3820 section 3.8. | ||
| 49 | It defines which privileges are to be delegated. | ||
| 50 | .Fn PROXY_POLICY_free | ||
| 51 | frees | ||
| 52 | .Fa pp . | ||
| 53 | .Pp | ||
| 54 | .Fn PROXY_CERT_INFO_EXTENSION_new | ||
| 55 | allocates and initializes an empty | ||
| 56 | .Vt PROXY_CERT_INFO_EXTENSION | ||
| 57 | object, representing an ASN.1 | ||
| 58 | .Vt ProxyCertInfo | ||
| 59 | structure defined in RFC 3820 section 3.8. | ||
| 60 | It can contain a | ||
| 61 | .Vt PROXY_POLICY | ||
| 62 | object, and it can additionally restrict the maximum depth of the | ||
| 63 | path of proxy certificates that can be signed by this proxy | ||
| 64 | certificate. | ||
| 65 | .Fn PROXY_CERT_INFO_EXTENSION_free | ||
| 66 | frees | ||
| 67 | .Fa pcie . | ||
| 68 | .Pp | ||
| 69 | If a non-CA certificate contains a | ||
| 70 | .Vt PROXY_CERT_INFO_EXTENSION , | ||
| 71 | it is a proxy certificate; otherwise, it is an end entity certificate. | ||
| 72 | .Sh RETURN VALUES | ||
| 73 | .Fn PROXY_POLICY_new | ||
| 74 | and | ||
| 75 | .Fn PROXY_CERT_INFO_EXTENSION_new | ||
| 76 | return the new | ||
| 77 | .Vt PROXY_POLICY | ||
| 78 | or | ||
| 79 | .Vt PROXY_CERT_INFO_EXTENSION | ||
| 80 | object, respectively, or | ||
| 81 | .Dv NULL | ||
| 82 | if an error occurs. | ||
| 83 | .Sh SEE ALSO | ||
| 84 | .Xr BASIC_CONSTRAINTS_new 3 , | ||
| 85 | .Xr d2i_PROXY_POLICY 3 , | ||
| 86 | .Xr EXTENDED_KEY_USAGE_new 3 , | ||
| 87 | .Xr POLICYINFO_new 3 , | ||
| 88 | .Xr X509_EXTENSION_new 3 , | ||
| 89 | .Xr X509_new 3 | ||
| 90 | .Sh STANDARDS | ||
| 91 | RFC 3820: Internet X.509 Public Key Infrastructure (PKI) Proxy | ||
| 92 | Certificate Profile | ||
| 93 | .Sh HISTORY | ||
| 94 | These functions first appeared in OpenSSL 0.9.7g | ||
| 95 | and have been available since | ||
| 96 | .Ox 3.8 . | ||
