NAME
d2i_PROXY_POLICY,
i2d_PROXY_POLICY,
d2i_PROXY_CERT_INFO_EXTENSION,
i2d_PROXY_CERT_INFO_EXTENSION —
decode and encode X.509 proxy
certificate extensions
SYNOPSIS
#include
<openssl/x509v3.h>
PROXY_POLICY *
d2i_PROXY_POLICY(PROXY_POLICY
**val_out, const unsigned char **der_in,
long length);
int
i2d_PROXY_POLICY(PROXY_POLICY
*val_in, unsigned char **der_out);
PROXY_CERT_INFO_EXTENSION *
d2i_PROXY_CERT_INFO_EXTENSION(PROXY_CERT_INFO_EXTENSION
**val_out, const unsigned char **der_in,
long length);
int
i2d_PROXY_CERT_INFO_EXTENSION(PROXY_CERT_INFO_EXTENSION
*val_in, unsigned char **der_out);
DESCRIPTION
These functions encode and decode X.509 extensions that decide whether a certificate is a proxy certificate, and which policies apply to it. For details about the semantics, examples, caveats, and bugs, see ASN1_item_d2i(3).d2i_PROXY_POLICY()
and
i2d_PROXY_POLICY()
decode and encode an ASN.1 ProxyPolicy structure
defined in RFC 3820 section 3.8.
d2i_PROXY_CERT_INFO_EXTENSION()
and
i2d_PROXY_CERT_INFO_EXTENSION()
decode and encode an ASN.1 ProxyCertInfo structure
defined in RFC 3820 section 3.8.
RETURN VALUES
d2i_PROXY_POLICY() and
d2i_PROXY_CERT_INFO_EXTENSION() return a
PROXY_POLICY or
PROXY_CERT_INFO_EXTENSION object, respectively, or
NULL if an error occurs.
i2d_PROXY_POLICY() and
i2d_PROXY_CERT_INFO_EXTENSION() return the number of
bytes successfully encoded or a negative value if an error occurs.
SEE ALSO
ASN1_item_d2i(3), PROXY_POLICY_new(3), X509_EXTENSION_new(3)
STANDARDS
RFC 3820: Internet X.509 Public Key Infrastructure (PKI) Proxy Certificate Profile
HISTORY
These functions first appeared in OpenSSL 0.9.7g and have been available since OpenBSD 3.8.