Login or Register to Ask a Question and Join Our Community

Linux and UNIX Man Pages

Linux & Unix Commands - Search Man Pages

gnutls_x509_crt_list_verify(3) [centos man page]

gnutls_x509_crt_list_verify(3)					      gnutls					    gnutls_x509_crt_list_verify(3)

NAME

       gnutls_x509_crt_list_verify - API function

SYNOPSIS

       #include <gnutls/x509.h>

       int  gnutls_x509_crt_list_verify(const  gnutls_x509_crt_t  *  cert_list,  int  cert_list_length,  const	gnutls_x509_crt_t  *  CA_list, int
       CA_list_length, const gnutls_x509_crl_t * CRL_list, int CRL_list_length, unsigned int flags, unsigned int * verify);

ARGUMENTS

       const gnutls_x509_crt_t * cert_list
		   is the certificate list to be verified

       int cert_list_length
		   holds the number of certificate in cert_list

       const gnutls_x509_crt_t * CA_list
		   is the CA list which will be used in verification

       int CA_list_length
		   holds the number of CA certificate in CA_list

       const gnutls_x509_crl_t * CRL_list
		   holds a list of CRLs.

       int CRL_list_length
		   the length of CRL list.

       unsigned int flags
		   Flags that may be used to change the verification algorithm. Use OR of the gnutls_certificate_verify_flags enumerations.

       unsigned int * verify
		   will hold the certificate verification output.

DESCRIPTION

       This function will try to verify the given certificate list and return its status.  If no flags are specified (0), this function  will  use
       the basicConstraints (2.5.29.19) PKIX extension. This means that only a certificate authority is allowed to sign a certificate.

       You must also check the peer's name in order to check if the verified certificate belongs to the actual peer.

       The  certificate  verification output will be put in  verify and will be one or more of the gnutls_certificate_status_t enumerated elements
       bitwise or'd.  For a more detailed verification status use gnutls_x509_crt_verify() per list element.

RETURNS

       On success, GNUTLS_E_SUCCESS (0) is returned, otherwise a negative error value.

REPORTING BUGS

       Report bugs to <bug-gnutls@gnu.org>.
       General guidelines for reporting bugs: http://www.gnu.org/gethelp/
       GnuTLS home page: http://www.gnu.org/software/gnutls/

COPYRIGHT

       Copyright (C) 2012 Free Software Foundation, Inc..
       Copying and distribution of this file, with or without modification, are permitted in any medium without  royalty  provided  the  copyright
       notice and this notice are preserved.

SEE ALSO

       The  full documentation for gnutls is maintained as a Texinfo manual.  If the info and gnutls programs are properly installed at your site,
       the command

	      info gnutls

       should give you access to the complete manual.  As an alternative you may obtain the manual from:

	      http://www.gnu.org/software/gnutls/manual/

gnutls								      3.1.15					    gnutls_x509_crt_list_verify(3)

Check Out this Related Man Page

gnutls_certificate_set_x509_key(3)				      gnutls					gnutls_certificate_set_x509_key(3)

NAME

       gnutls_certificate_set_x509_key - API function

SYNOPSIS

       #include <gnutls/gnutls.h>

       int    gnutls_certificate_set_x509_key(gnutls_certificate_credentials_t	 res,	gnutls_x509_crt_t   *	cert_list,   int   cert_list_size,
       gnutls_x509_privkey_t key);

ARGUMENTS

       gnutls_certificate_credentials_t res
		   is a gnutls_certificate_credentials_t structure.

       gnutls_x509_crt_t * cert_list
		   contains a certificate list (path) for the specified private key

       int cert_list_size
		   holds the size of the certificate list

       gnutls_x509_privkey_t key
		   is a gnutls_x509_privkey_t key

DESCRIPTION

       This function sets a certificate/private key pair in the gnutls_certificate_credentials_t structure.  This function may be called more than
       once,  in  case multiple keys/certificates exist for the server.  For clients that wants to send more than their own end entity certificate
       (e.g., also an intermediate CA cert) then put the certificate chain in  cert_list .

RETURNS

       GNUTLS_E_SUCCESS (0) on success, or a negative error code.

SINCE

       2.4.0

REPORTING BUGS

       Report bugs to <bug-gnutls@gnu.org>.
       General guidelines for reporting bugs: http://www.gnu.org/gethelp/
       GnuTLS home page: http://www.gnu.org/software/gnutls/

COPYRIGHT

       Copyright (C) 2012 Free Software Foundation, Inc..
       Copying and distribution of this file, with or without modification, are permitted in any medium without  royalty  provided  the  copyright
       notice and this notice are preserved.

SEE ALSO

       The  full documentation for gnutls is maintained as a Texinfo manual.  If the info and gnutls programs are properly installed at your site,
       the command

	      info gnutls

       should give you access to the complete manual.  As an alternative you may obtain the manual from:

	      http://www.gnu.org/software/gnutls/manual/

gnutls								      3.1.15					gnutls_certificate_set_x509_key(3)
Man Page