NAME
X509_get1_email,
X509_get1_ocsp,
X509_email_free —
utilities for stacks of
strings
SYNOPSIS
#include
<openssl/x509v3.h>
typedef char *OPENSSL_STRING;
STACK_OF(OPENSSL_STRING) *
X509_get1_email(X509
*certificate);
STACK_OF(OPENSSL_STRING) *
X509_get1_ocsp(X509
*certificate);
void
X509_email_free(STACK_OF(OPENSSL_STRING)
*stack);
DESCRIPTION
X509_get1_email()
retrieves all email addresses from the subject field and
from any Subject Alternative Name extension of the
certificate.
X509_get1_ocsp()
retrieves all uniform resource identifiers from all
AccessDescription objects having an
accessMethod of OCSP which are contained in the
Authority Information Access extension of the
certificate.
X509_email_free()
frees all strings stored in the stack as well as the
stack itself. If stack is a
NULL pointer, no action occurs.
RETURN VALUES
X509_REQ_get1_email() and
X509_get1_ocsp() return newly allocated stacks of
char * containing copies of the addresses in question,
or NULL if there are no addresses or if an error
occurs.
SEE ALSO
OCSP_sendreq_new(3), OCSP_SERVICELOC_new(3), OPENSSL_sk_new(3), STACK_OF(3), X509_check_email(3), X509_get_ext_d2i(3), X509_get_subject_name(3), X509_new(3), x509v3.cnf(5)
STANDARDS
RFC 5280: Internet X.509 Public Key Infrastructure Certificate and Certificate Revocation List (CRL) Profile
- section 4.1: Basic Certificate Fields
- section 4.1.2.6: Subject
- section 4.2.1.6: Subject Alternative Name
- section 4.2.2.1: Authority Information Access
RFC 2985: PKCS #9: Selected Object Classes and Attribute Types
- section 5.2.1: Electronic-mail address
- appendix B.3.5: emailAddress
HISTORY
X509_get1_email() and
X509_email_free() first appeared in OpenSSL 0.9.6
and have been available since OpenBSD 2.9.
X509_get1_ocsp() first appeared in OpenSSL
0.9.8h and has been available since OpenBSD 4.5.
BUGS
X509_email_free() is utterly misnamed. It
does not operate on any X509 object, nor is it in any
way restricted to email addresses; instead, it simply frees a stack of
strings.