gnutls_pkcs12_simple_parse man page on Manjaro
[printable version]
gnutls_pkcs12_simple_parse(3) gnutls gnutls_pkcs12_simple_parse(3)
NAME
gnutls_pkcs12_simple_parse - API function
SYNOPSIS
#include <gnutls/pkcs12.h>
int gnutls_pkcs12_simple_parse(gnutls_pkcs12_t p12, const char * pass‐
word, gnutls_x509_privkey_t * key, gnutls_x509_crt_t ** chain, unsigned
int * chain_len, gnutls_x509_crt_t ** extra_certs, unsigned int *
extra_certs_len, gnutls_x509_crl_t * crl, unsigned int flags);
ARGUMENTS
gnutls_pkcs12_t p12
the PKCS12 blob.
const char * password
optional password used to decrypt PKCS12 blob, bags and
keys.
gnutls_x509_privkey_t * key
a structure to store the parsed private key.
gnutls_x509_crt_t ** chain
the corresponding to key certificate chain (may be NULL)
unsigned int * chain_len
will be updated with the number of additional (may be NULL)
gnutls_x509_crt_t ** extra_certs
optional pointer to receive an array of additional certifi‐
cates found in the PKCS12 blob (may be NULL).
unsigned int * extra_certs_len
will be updated with the number of additional certs (may be
NULL).
gnutls_x509_crl_t * crl
an optional structure to store the parsed CRL (may be
NULL).
unsigned int flags
should be zero or one of GNUTLS_PKCS12_SP_*
DESCRIPTION
This function parses a PKCS12 blob in p12blob and extracts the private
key, the corresponding certificate chain, and any additional certifi‐
cates and a CRL.
The extra_certs_ret and extra_certs_len parameters are optional and
both may be set to NULL. If either is non-NULL, then both must be set.
Encrypted PKCS12 bags and PKCS8 private keys are supported. However,
only password based security, and the same password for all operations,
are supported.
A PKCS12 file may contain many keys and/or certificates, and there is
no way to identify which key/certificate pair you want. You should
make sure the PKCS12 file only contain one key/certificate pair and/or
one CRL.
It is believed that the limitations of this function are acceptable for
common usage, and that any more flexibility would introduce complexity
that would make it harder to use this functionality at all.
If the provided structure has encrypted fields but no password is pro‐
vided then this function returns GNUTLS_E_DECRYPTION_FAILED.
Note that normally the chain constructed does not include self signed
certificates, to comply with TLS' requirements. If, however, the flag
GNUTLS_PKCS12_SP_INCLUDE_SELF_SIGNED is specified then self signed cer‐
tificates will be included in the chain.
RETURNS
On success, GNUTLS_E_SUCCESS (0) is returned, otherwise a negative
error value.
SINCE
3.1
REPORTING BUGS
Report bugs to <bugs@gnutls.org>.
Home page: http://www.gnutls.org
COPYRIGHT
Copyright © 2001-2014 Free Software Foundation, Inc..
Copying and distribution of this file, with or without modification,
are permitted in any medium without royalty provided the copyright
notice and this notice are preserved.
SEE ALSO
The full documentation for gnutls is maintained as a Texinfo manual.
If the /usr/share/doc/gnutls/ directory does not contain the HTML form
visit
http://www.gnutls.org/manual/
gnutls 3.3.1 gnutls_pkcs12_simple_parse(3)
[top]
List of man pages available for Manjaro
Copyright (c) for man pages and the logo by the respective OS vendor.
For those who want to learn more, the polarhome community provides shell access and support.
[legal]
[privacy]
[GNU]
[policy]
[cookies]
[netiquette]
[sponsors]
[FAQ]
Polarhome, production since 1999.
Member of Polarhome portal.
Based on Fawad Halim's script.
....................................................................
|
Vote for polarhome
|