Login or Register to Ask a Question and Join Our Community

Linux and UNIX Man Pages

Linux & Unix Commands - Search Man Pages

gnutls_certificate_verify_peers3(3) [centos man page]

gnutls_certificate_verify_peers3(3)				      gnutls				       gnutls_certificate_verify_peers3(3)

NAME

       gnutls_certificate_verify_peers3 - API function

SYNOPSIS

       #include <gnutls/gnutls.h>

       int gnutls_certificate_verify_peers3(gnutls_session_t session, const char* hostname, unsigned int * status);

ARGUMENTS

       gnutls_session_t session
		   is a gnutls session

       const char* hostname
		   is the expected name of the peer; may be NULL

       unsigned int * status
		   is the output of the verification

DESCRIPTION

       This function will verify the peer's certificate and store the status in the  status variable as a bitwise or'd gnutls_certificate_status_t
       values or zero if the certificate is trusted. Note that value in  status is set only when the return value  of  this  function  is  success
       (i.e, failure to trust a certificate does not imply a negative return value).

       If  the	 hostname  provided  is non-NULL then this function will compare the hostname in the certificate against the given. If they do not
       match the GNUTLS_CERT_UNEXPECTED_OWNER status flag will be set.

       If available the OCSP Certificate Status extension will be utilized by this function.

       To avoid denial of service attacks some default upper limits regarding the certificate key size and chain size are set.	To  override  them
       use gnutls_certificate_set_verify_limits().

RETURNS

       a negative error code on error and GNUTLS_E_SUCCESS (0) on success.

SINCE

       3.1.4

REPORTING BUGS

       Report bugs to <bug-gnutls@gnu.org>.
       General guidelines for reporting bugs: http://www.gnu.org/gethelp/
       GnuTLS home page: http://www.gnu.org/software/gnutls/

COPYRIGHT

       Copyright (C) 2012 Free Software Foundation, Inc..
       Copying	and  distribution  of  this file, with or without modification, are permitted in any medium without royalty provided the copyright
       notice and this notice are preserved.

SEE ALSO

       The full documentation for gnutls is maintained as a Texinfo manual.  If the info and gnutls programs are properly installed at your  site,
       the command

	      info gnutls

       should give you access to the complete manual.  As an alternative you may obtain the manual from:

	      http://www.gnu.org/software/gnutls/manual/

gnutls								      3.1.15				       gnutls_certificate_verify_peers3(3)

Check Out this Related Man Page

gnutls_x509_crl_verify(3)					      gnutls						 gnutls_x509_crl_verify(3)

NAME

       gnutls_x509_crl_verify - API function

SYNOPSIS

       #include <gnutls/x509.h>

       int  gnutls_x509_crl_verify(gnutls_x509_crl_t crl, const gnutls_x509_crt_t * trusted_cas, int tcas_size, unsigned int flags, unsigned int *
       verify);

ARGUMENTS

       gnutls_x509_crl_t crl
		   is the crl to be verified

       const gnutls_x509_crt_t * trusted_cas
		   is a certificate list that is considered to be trusted one

       int tcas_size
		   holds the number of CA certificates in CA_list

       unsigned int flags
		   Flags that may be used to change the verification algorithm. Use OR of the gnutls_certificate_verify_flags enumerations.

       unsigned int * verify
		   will hold the crl verification output.

DESCRIPTION

       This function will try to verify the given crl and return its  verification  status.   See  gnutls_x509_crt_list_verify()  for  a  detailed
       description of return values. Note that since GnuTLS 3.1.4 this function includes the time checks.

       Note  that  value  in  verify is set only when the return value of this function is success (i.e, failure to trust a CRL a certificate does
       not imply a negative return value).

RETURNS

       On success, GNUTLS_E_SUCCESS (0) is returned, otherwise a negative error value.

REPORTING BUGS

       Report bugs to <bug-gnutls@gnu.org>.
       General guidelines for reporting bugs: http://www.gnu.org/gethelp/
       GnuTLS home page: http://www.gnu.org/software/gnutls/

COPYRIGHT

       Copyright (C) 2012 Free Software Foundation, Inc..
       Copying and distribution of this file, with or without modification, are permitted in any medium without  royalty  provided  the  copyright
       notice and this notice are preserved.

SEE ALSO

       The  full documentation for gnutls is maintained as a Texinfo manual.  If the info and gnutls programs are properly installed at your site,
       the command

	      info gnutls

       should give you access to the complete manual.  As an alternative you may obtain the manual from:

	      http://www.gnu.org/software/gnutls/manual/

gnutls								      3.1.15						 gnutls_x509_crl_verify(3)
Man Page