OpenSSL.vip

Cryptography and SSL/TLS Toolkit

NAME

X509_STORE, X509_STORE_add_cert, X509_STORE_add_crl, X509_STORE_set_depth, X509_STORE_set_flags, X509_STORE_set_purpose, X509_STORE_set_trust, X509_STORE_add_lookup, X509_STORE_load_file, X509_STORE_load_path, X509_STORE_load_store, X509_STORE_set_default_paths, X509_STORE_load_locations - X509_STORE manipulation

SYNOPSIS

 #include <openssl/x509_vfy.h>
 
 typedef x509_store_st X509_STORE;
 
 int X509_STORE_add_cert(X509_STORE *ctx, X509 *x);
 int X509_STORE_add_crl(X509_STORE *ctx, X509_CRL *x);
 int X509_STORE_set_depth(X509_STORE *store, int depth);
 int X509_STORE_set_flags(X509_STORE *ctx, unsigned long flags);
 int X509_STORE_set_purpose(X509_STORE *ctx, int purpose);
 int X509_STORE_set_trust(X509_STORE *ctx, int trust);
 
 X509_LOOKUP *X509_STORE_add_lookup(X509_STORE *store,
                                    X509_LOOKUP_METHOD *meth);
 
 int X509_STORE_set_default_paths(X509_STORE *ctx);
 int X509_STORE_load_file(X509_STORE *ctx, const char *file);
 int X509_STORE_load_path(X509_STORE *ctx, const char *dir);
 int X509_STORE_load_store(X509_STORE *ctx, const char *uri);

Deprecated:

 int X509_STORE_load_locations(X509_STORE *ctx,
                               const char *file, const char *dir);

DESCRIPTION

The X509_STORE structure is intended to be a consolidated mechanism for holding information about X.509 certificates and CRLs, and constructing and validating chains of certificates terminating in trusted roots. It admits multiple lookup mechanisms and efficient scaling performance with large numbers of certificates, and a great deal of flexibility in how validation and policy checks are performed.

X509_VERIFY_PARAM_set_depth(3).

X509_STORE_add_lookup() finds or creates a X509_LOOKUP_METHOD(3) meth and adds it to the X509_STORE store. This also associates the X509_STORE with the lookup, so X509_LOOKUP functions can look up objects in that store.

X509_STORE_load_file() loads trusted certificate(s) into an X509_STORE from a given file.

X509_STORE_load_path() loads trusted certificate(s) into an X509_STORE from a given directory path. The certificates in the directory must be in hashed form, as documented in RETURN VALUES

X509_STORE_add_cert(), X509_STORE_add_crl(), X509_STORE_set_depth(), X509_STORE_set_flags(), X509_STORE_set_purpose(), X509_STORE_set_trust(), X509_STORE_load_file(), X509_STORE_load_path(), X509_STORE_load_store(), X509_STORE_load_locations(), and X509_STORE_set_default_paths() return 1 on success or 0 on failure.

X509_STORE_add_lookup() returns the found or created SEE ALSO

X509_VERIFY_PARAM_set_depth(3). X509_STORE_get0_param(3)

COPYRIGHT

Copyright 2017-2020 The OpenSSL Project Authors. All Rights Reserved.

Licensed under the Apache License 2.0 (the "License"). You may not use this file except in compliance with the License. You can obtain a copy in the file LICENSE in the source distribution or at https://www.openssl.org/source/license.html.

关闭