"int hx509_verify_init_ctx (hx509_context context, hx509_verify_ctx *ctx)"
"void hx509_verify_destroy_ctx (hx509_verify_ctx ctx)"
"void hx509_verify_attach_anchors (hx509_verify_ctx ctx, hx509_certs set)"
"void hx509_verify_attach_revoke (hx509_verify_ctx ctx, hx509_revoke_ctx revoke_ctx)"
"void hx509_verify_set_time (hx509_verify_ctx ctx, time_t t)"
"void hx509_verify_set_max_depth (hx509_verify_ctx ctx, unsigned int max_depth)"
"void hx509_verify_set_proxy_certificate (hx509_verify_ctx ctx, int boolean)"
"void hx509_verify_set_strict_rfc3280_verification (hx509_verify_ctx ctx, int boolean)"
"int hx509_verify_path (hx509_context context, hx509_verify_ctx ctx, hx509_cert cert, hx509_certs pool)"
"int hx509_ocsp_verify (hx509_context context, time_t now, hx509_cert cert, int flags, const void *data, size_t length, time_t *expiration)"
"int hx509_crl_alloc (hx509_context context, hx509_crl *crl)"
"int hx509_crl_add_revoked_certs (hx509_context context, hx509_crl crl, hx509_certs certs)"
"int hx509_crl_lifetime (hx509_context context, hx509_crl crl, int delta)"
"void hx509_crl_free (hx509_context context, hx509_crl *crl)"
"int hx509_crl_sign (hx509_context context, hx509_cert signer, hx509_crl crl, heim_octet_string *os)"
Parameters
context hx509 context to change the flag for.
flag zero, revokation method required, non zero missing revokation method ok
Parameters
context a hx509 context.
crl the CRL to add the revoked certificate to.
certs keyset of certificate to revoke.
Returns
An hx509 error code, see hx509_get_error_string().
Parameters
context a hx509 context.
crl return pointer to a newly allocated CRL context.
Returns
An hx509 error code, see hx509_get_error_string().
Parameters
context a hx509 context.
crl a CRL context to free.
Parameters
context a hx509 context.
crl a CRL context
delta delta time the certificate is valid, library adds the current time to this.
Returns
An hx509 error code, see hx509_get_error_string().
Parameters
context a hx509 context.
signer certificate to sign the CRL with
crl the CRL to sign
os return the signed and encoded CRL, free with free_heim_octet_string()
Returns
An hx509 error code, see hx509_get_error_string().
Parameters
context a hx509 context
now the time right now, if 0, use the current time.
cert the certificate to verify
flags flags control the behavior
data pointer to the encode ocsp reply
length the length of the encode ocsp reply
expiration return the time the OCSP will expire and need to be rechecked.
Returns
An hx509 error code, see hx509_get_error_string().
Parameters
ctx a verification context
set a keyset containing the trust anchors.
Parameters
ctx a verification context.
revoke_ctx a revoke context.
Parameters
ctx the context to be freed.
Parameters
context A hx509 context.
ctx returns a pointer to a hx509_verify_ctx object.
Returns
An hx509 error code, see hx509_get_error_string().
Parameters
context A hx509 context.
ctx A hx509 verification context.
cert the certificate to build the path from.
pool A keyset of certificates to build the chain from.
Returns
An hx509 error code, see hx509_get_error_string().
Parameters
ctx a verification context
max_depth maxium depth of the certificate chain, include trust anchor.
Parameters
ctx a verification context
boolean if non zero, allow proxy certificates.
Parameters
ctx a verification context
boolean if non zero, use strict verification.
Parameters
ctx a verification context.
t the time the verifiation is using.
Generated automatically by Doxygen for Heimdal x509 library from the source code.