- Home
- Download

- GitHub

- News
- Documentation

- FAQ
- Tutorial
- API reference
- Examples

- XML Digital Signature
- XML Encryption
- XML Canonicalization
- Reporting Bugs
- Mailing list
- Related
- Authors

## x509

x509 — X509 certificates implementation for GnuTLS.

## Stability Level

Stable, unless otherwise indicated

## Functions

xmlSecKeyDataId | xmlSecGnuTLSKeyDataX509GetKlass ()
gnutls_x509_crt_t | xmlSecGnuTLSKeyDataX509GetKeyCert ()
int | xmlSecGnuTLSKeyDataX509AdoptKeyCert ()
int | xmlSecGnuTLSKeyDataX509AdoptCert ()
gnutls_x509_crt_t | xmlSecGnuTLSKeyDataX509GetCert ()
xmlSecSize | xmlSecGnuTLSKeyDataX509GetCertsSize ()
int | xmlSecGnuTLSKeyDataX509AdoptCrl ()
gnutls_x509_crl_t | xmlSecGnuTLSKeyDataX509GetCrl ()
xmlSecSize | xmlSecGnuTLSKeyDataX509GetCrlsSize ()
xmlSecKeyDataPtr | xmlSecGnuTLSX509CertGetKey ()
xmlSecKeyDataId | xmlSecGnuTLSKeyDataRawX509CertGetKlass ()
xmlSecKeyDataStoreId | xmlSecGnuTLSX509StoreGetKlass ()
gnutls_x509_crt_t | xmlSecGnuTLSX509StoreVerify ()
int | xmlSecGnuTLSX509StoreAdoptCert ()
int | xmlSecGnuTLSX509StoreVerifyCrl ()
int | xmlSecGnuTLSX509StoreAdoptCrl ()

## Types and Values

#define | xmlSecGnuTLSKeyDataX509Id
#define | xmlSecGnuTLSKeyDataRawX509CertId
#define | xmlSecGnuTLSX509StoreId

## Description

## Functions

### xmlSecGnuTLSKeyDataX509GetKlass ()

    xmlSecKeyDataId
    xmlSecGnuTLSKeyDataX509GetKlass (void);

The GnuTLS X509 key data klass (http://www.w3.org/TR/xmldsig-core/sec-X509Data).

#### Returns

the X509 data klass.

### xmlSecGnuTLSKeyDataX509GetKeyCert ()

    gnutls_x509_crt_t
    xmlSecGnuTLSKeyDataX509GetKeyCert (xmlSecKeyDataPtr data);

Gets the certificate from which the key was extracted.

#### Parameters

data | the pointer to X509 key data. |

#### Returns

the key's certificate or NULL if key data was not used for key extraction or an error occurs.

### xmlSecGnuTLSKeyDataX509AdoptKeyCert ()

    int
    xmlSecGnuTLSKeyDataX509AdoptKeyCert (xmlSecKeyDataPtr data,
                                         gnutls_x509_crt_t cert);

Adds certificate to the X509 key data and sets the it as the key's certificate in `data` . On success, the `data` owns the cert.

#### Parameters

data | the pointer to X509 key data. |
cert | the pointer to GnuTLS X509 certificate. |

#### Returns

0 on success or a negative value if an error occurs.

### xmlSecGnuTLSKeyDataX509AdoptCert ()

    int
    xmlSecGnuTLSKeyDataX509AdoptCert (xmlSecKeyDataPtr data,
                                      gnutls_x509_crt_t cert);

Adds certificate to the X509 key data.

#### Parameters

data | the pointer to X509 key data. |
cert | the pointer to GnuTLS X509 certificate. |

#### Returns

0 on success or a negative value if an error occurs.

### xmlSecGnuTLSKeyDataX509GetCert ()

    gnutls_x509_crt_t
    xmlSecGnuTLSKeyDataX509GetCert (xmlSecKeyDataPtr data,
                                    xmlSecSize pos);

Gets a certificate from X509 key data.

#### Parameters

data | the pointer to X509 key data. |
pos | the desired certificate position. |

#### Returns

the pointer to certificate or NULL if `pos` is larger than the number of certificates in `data` or an error occurs.

### xmlSecGnuTLSKeyDataX509GetCertsSize ()

    xmlSecSize
    xmlSecGnuTLSKeyDataX509GetCertsSize (xmlSecKeyDataPtr data);

Gets the number of certificates in `data` .

#### Parameters

data | the pointer to X509 key data. |

#### Returns

te number of certificates in `data` .

### xmlSecGnuTLSKeyDataX509AdoptCrl ()

    int
    xmlSecGnuTLSKeyDataX509AdoptCrl (xmlSecKeyDataPtr data,
                                     gnutls_x509_crl_t crl);

Adds crl to the X509 key data.

#### Parameters

data | the pointer to X509 key data. |
crl | the pointer to GnuTLS X509 crl. |

#### Returns

0 on success or a negative value if an error occurs.

### xmlSecGnuTLSKeyDataX509GetCrl ()

    gnutls_x509_crl_t
    xmlSecGnuTLSKeyDataX509GetCrl (xmlSecKeyDataPtr data,
                                   xmlSecSize pos);

Gets a crl from X509 key data.

#### Parameters

data | the pointer to X509 key data. |
pos | the desired crl position. |

#### Returns

the pointer to crl or NULL if `pos` is larger than the number of crls in `data` or an error occurs.

### xmlSecGnuTLSKeyDataX509GetCrlsSize ()

    xmlSecSize
    xmlSecGnuTLSKeyDataX509GetCrlsSize (xmlSecKeyDataPtr data);

Gets the number of crls in `data` .

#### Parameters

data | the pointer to X509 key data. |

#### Returns

te number of crls in `data` .

### xmlSecGnuTLSX509CertGetKey ()

    xmlSecKeyDataPtr
    xmlSecGnuTLSX509CertGetKey (gnutls_x509_crt_t cert);

Extracts public key from the `cert` .

#### Parameters

cert | the certificate. |

#### Returns

public key value or NULL if an error occurs.

### xmlSecGnuTLSKeyDataRawX509CertGetKlass ()

    xmlSecKeyDataId
    xmlSecGnuTLSKeyDataRawX509CertGetKlass
                                   (void);

The raw X509 certificates key data klass.

#### Returns

raw X509 certificates key data klass.

### xmlSecGnuTLSX509StoreGetKlass ()

    xmlSecKeyDataStoreId
    xmlSecGnuTLSX509StoreGetKlass (void);

The GnuTLS X509 certificates key data store klass.

#### Returns

pointer to GnuTLS X509 certificates key data store klass.

### xmlSecGnuTLSX509StoreVerify ()

    gnutls_x509_crt_t
    xmlSecGnuTLSX509StoreVerify (xmlSecKeyDataStorePtr store,
                                 xmlSecPtrListPtr certs,
                                 xmlSecPtrListPtr crls,
                                 const xmlSecKeyInfoCtx *keyInfoCtx);

Verifies `certs` list.

#### Parameters

store | the pointer to X509 key data store klass. |
certs | the untrusted certificates. |
crls | the crls. |
keyInfoCtx | the pointer to <dsig:KeyInfo/> element processing context. |

#### Returns

pointer to the first verified certificate from `certs` .

### xmlSecGnuTLSX509StoreAdoptCert ()

    int
    xmlSecGnuTLSX509StoreAdoptCert (xmlSecKeyDataStorePtr store,
                                    gnutls_x509_crt_t cert,
                                    xmlSecKeyDataType type);

Adds trusted (root) or untrusted certificate to the store.

#### Parameters

store | the pointer to X509 key data store klass. |
cert | the pointer to GnuTLS X509 certificate. |
type | the certificate type (trusted/untrusted). |

#### Returns

0 on success or a negative value if an error occurs.

### xmlSecGnuTLSX509StoreVerifyCrl ()

    int
    xmlSecGnuTLSX509StoreVerifyCrl (xmlSecKeyDataStorePtr store,
                                    gnutls_x509_crl_t crl,
                                    xmlSecKeyInfoCtxPtr keyInfoCtx);

Verifies `crl` by checking:

1. Signature is valid (signed by issuer cert in store)

2. thisUpdate <= verification_time <= nextUpdate

#### Parameters

store | the pointer to X509 key data store klass. |
crl | the CRL to verify. |
keyInfoCtx | the key info context for verification parameters. |

#### Returns

1 if verified, 0 if not verified, or a negative value on error.

### xmlSecGnuTLSX509StoreAdoptCrl ()

    int
    xmlSecGnuTLSX509StoreAdoptCrl (xmlSecKeyDataStorePtr store,
                                   gnutls_x509_crl_t crl);

Adds CRL to the store.

#### Parameters

store | the pointer to X509 key data store klass. |
crl | the pointer to GnuTLS X509 CRL. |

#### Returns

0 on success or a negative value if an error occurs.

## Types and Values

### xmlSecGnuTLSKeyDataX509Id

    #define             xmlSecGnuTLSKeyDataX509Id

The GnuTLS X509 data klass.

### xmlSecGnuTLSKeyDataRawX509CertId

    #define             xmlSecGnuTLSKeyDataRawX509CertId

The GnuTLS raw X509 certificate klass.

### xmlSecGnuTLSX509StoreId

    #define             xmlSecGnuTLSX509StoreId

The GnuTLS X509 store klass.