127 lines
4.7 KiB
HTML
127 lines
4.7 KiB
HTML
|
|
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
|
|
<HTML><HEAD><TITLE>Man page of X509</TITLE>
|
|
</HEAD><BODY>
|
|
<H1>X509</H1>
|
|
Section: OpenSSL (7SSL)<BR>Updated: 2021-03-22<BR><A HREF="#index">Index</A>
|
|
<A HREF="/cgi-bin/man/man2html">Return to Main Contents</A><HR>
|
|
|
|
|
|
|
|
|
|
|
|
|
|
<A NAME="lbAB"> </A>
|
|
<H2>NAME</H2>
|
|
|
|
x509 - X.509 certificate handling
|
|
<A NAME="lbAC"> </A>
|
|
<H2>SYNOPSIS</H2>
|
|
|
|
|
|
|
|
|
|
|
|
<PRE>
|
|
#include <<A HREF="file:///usr/include/openssl/x509.h">openssl/x509.h</A>>
|
|
|
|
</PRE>
|
|
|
|
|
|
<A NAME="lbAD"> </A>
|
|
<H2>DESCRIPTION</H2>
|
|
|
|
|
|
|
|
An X.509 certificate is a structured grouping of information about
|
|
an individual, a device, or anything one can imagine. A X.509 <FONT SIZE="-1">CRL</FONT>
|
|
(certificate revocation list) is a tool to help determine if a
|
|
certificate is still valid. The exact definition of those can be
|
|
found in the X.509 document from ITU-T, or in <FONT SIZE="-1">RFC3280</FONT> from <FONT SIZE="-1">PKIX.</FONT>
|
|
In OpenSSL, the type X509 is used to express such a certificate, and
|
|
the type X509_CRL is used to express a <FONT SIZE="-1">CRL.</FONT>
|
|
<P>
|
|
|
|
A related structure is a certificate request, defined in PKCS#10 from
|
|
<FONT SIZE="-1">RSA</FONT> Security, Inc, also reflected in <FONT SIZE="-1">RFC2896.</FONT> In OpenSSL, the type
|
|
X509_REQ is used to express such a certificate request.
|
|
<P>
|
|
|
|
To handle some complex parts of a certificate, there are the types
|
|
X509_NAME (to express a certificate name), X509_ATTRIBUTE (to express
|
|
a certificate attributes), X509_EXTENSION (to express a certificate
|
|
extension) and a few more.
|
|
<P>
|
|
|
|
Finally, there's the supertype X509_INFO, which can contain a <FONT SIZE="-1">CRL,</FONT> a
|
|
certificate and a corresponding private key.
|
|
<P>
|
|
|
|
<B>X509_</B><I></I><FONT SIZE="-1"><I>XXX</I></FONT><I></I>, <B>d2i_X509_</B><I></I><FONT SIZE="-1"><I>XXX</I></FONT><I></I>, and <B>i2d_X509_</B><I></I><FONT SIZE="-1"><I>XXX</I></FONT><I></I> functions
|
|
handle X.509 certificates, with some exceptions, shown below.
|
|
<P>
|
|
|
|
<B>X509_CRL_</B><I></I><FONT SIZE="-1"><I>XXX</I></FONT><I></I>, <B>d2i_X509_CRL_</B><I></I><FONT SIZE="-1"><I>XXX</I></FONT><I></I>, and <B>i2d_X509_CRL_</B><I></I><FONT SIZE="-1"><I>XXX</I></FONT><I></I>
|
|
functions handle X.509 CRLs.
|
|
<P>
|
|
|
|
<B>X509_REQ_</B><I></I><FONT SIZE="-1"><I>XXX</I></FONT><I></I>, <B>d2i_X509_REQ_</B><I></I><FONT SIZE="-1"><I>XXX</I></FONT><I></I>, and <B>i2d_X509_REQ_</B><I></I><FONT SIZE="-1"><I>XXX</I></FONT><I></I>
|
|
functions handle PKCS#10 certificate requests.
|
|
<P>
|
|
|
|
<B>X509_NAME_</B><I></I><FONT SIZE="-1"><I>XXX</I></FONT><I></I> functions handle certificate names.
|
|
<P>
|
|
|
|
<B>X509_ATTRIBUTE_</B><I></I><FONT SIZE="-1"><I>XXX</I></FONT><I></I> functions handle certificate attributes.
|
|
<P>
|
|
|
|
<B>X509_EXTENSION_</B><I></I><FONT SIZE="-1"><I>XXX</I></FONT><I></I> functions handle certificate extensions.
|
|
<A NAME="lbAE"> </A>
|
|
<H2>SEE ALSO</H2>
|
|
|
|
|
|
|
|
<B><A HREF="/cgi-bin/man/man2html?3+X509_NAME_ENTRY_get_object">X509_NAME_ENTRY_get_object</A></B>(3),
|
|
<B><A HREF="/cgi-bin/man/man2html?3+X509_NAME_add_entry_by_txt">X509_NAME_add_entry_by_txt</A></B>(3),
|
|
<B><A HREF="/cgi-bin/man/man2html?3+X509_NAME_add_entry_by_NID">X509_NAME_add_entry_by_NID</A></B>(3),
|
|
<B><A HREF="/cgi-bin/man/man2html?3+X509_NAME_print_ex">X509_NAME_print_ex</A></B>(3),
|
|
<B><A HREF="/cgi-bin/man/man2html?3+X509_NAME_new">X509_NAME_new</A></B>(3),
|
|
<B><A HREF="/cgi-bin/man/man2html?3+d2i_X509">d2i_X509</A></B>(3),
|
|
<B><A HREF="/cgi-bin/man/man2html?3+d2i_X509_ALGOR">d2i_X509_ALGOR</A></B>(3),
|
|
<B><A HREF="/cgi-bin/man/man2html?3+d2i_X509_CRL">d2i_X509_CRL</A></B>(3),
|
|
<B><A HREF="/cgi-bin/man/man2html?3+d2i_X509_NAME">d2i_X509_NAME</A></B>(3),
|
|
<B><A HREF="/cgi-bin/man/man2html?3+d2i_X509_REQ">d2i_X509_REQ</A></B>(3),
|
|
<B><A HREF="/cgi-bin/man/man2html?3+d2i_X509_SIG">d2i_X509_SIG</A></B>(3),
|
|
<B><A HREF="/cgi-bin/man/man2html?3+X509v3">X509v3</A></B>(3),
|
|
<B><A HREF="/cgi-bin/man/man2html?7+crypto">crypto</A></B>(7)
|
|
<A NAME="lbAF"> </A>
|
|
<H2>COPYRIGHT</H2>
|
|
|
|
|
|
|
|
Copyright 2003-2017 The OpenSSL Project Authors. All Rights Reserved.
|
|
<P>
|
|
|
|
Licensed under the OpenSSL license (the ``License''). You may not use
|
|
this file except in compliance with the License. You can obtain a copy
|
|
in the file <FONT SIZE="-1">LICENSE</FONT> in the source distribution or at
|
|
<<A HREF="https://www.openssl.org/source/license.html">https://www.openssl.org/source/license.html</A>>.
|
|
<P>
|
|
|
|
<HR>
|
|
<A NAME="index"> </A><H2>Index</H2>
|
|
<DL>
|
|
<DT id="1"><A HREF="#lbAB">NAME</A><DD>
|
|
<DT id="2"><A HREF="#lbAC">SYNOPSIS</A><DD>
|
|
<DT id="3"><A HREF="#lbAD">DESCRIPTION</A><DD>
|
|
<DT id="4"><A HREF="#lbAE">SEE ALSO</A><DD>
|
|
<DT id="5"><A HREF="#lbAF">COPYRIGHT</A><DD>
|
|
</DL>
|
|
<HR>
|
|
This document was created by
|
|
<A HREF="/cgi-bin/man/man2html">man2html</A>,
|
|
using the manual pages.<BR>
|
|
Time: 00:06:10 GMT, March 31, 2021
|
|
</BODY>
|
|
</HTML>
|