summaryrefslogtreecommitdiffstats
path: root/doc/manpages/gnutls_ocsp_resp_verify.3
diff options
context:
space:
mode:
authorDaniel Baumann <daniel.baumann@progress-linux.org>2024-04-28 07:33:12 +0000
committerDaniel Baumann <daniel.baumann@progress-linux.org>2024-04-28 07:33:12 +0000
commit36082a2fe36ecd800d784ae44c14f1f18c66a7e9 (patch)
tree6c68e0c0097987aff85a01dabddd34b862309a7c /doc/manpages/gnutls_ocsp_resp_verify.3
parentInitial commit. (diff)
downloadgnutls28-36082a2fe36ecd800d784ae44c14f1f18c66a7e9.tar.xz
gnutls28-36082a2fe36ecd800d784ae44c14f1f18c66a7e9.zip
Adding upstream version 3.7.9.upstream/3.7.9upstream
Signed-off-by: Daniel Baumann <daniel.baumann@progress-linux.org>
Diffstat (limited to 'doc/manpages/gnutls_ocsp_resp_verify.3')
-rw-r--r--doc/manpages/gnutls_ocsp_resp_verify.359
1 files changed, 59 insertions, 0 deletions
diff --git a/doc/manpages/gnutls_ocsp_resp_verify.3 b/doc/manpages/gnutls_ocsp_resp_verify.3
new file mode 100644
index 0000000..7b2a173
--- /dev/null
+++ b/doc/manpages/gnutls_ocsp_resp_verify.3
@@ -0,0 +1,59 @@
+.\" DO NOT MODIFY THIS FILE! It was generated by gdoc.
+.TH "gnutls_ocsp_resp_verify" 3 "3.7.9" "gnutls" "gnutls"
+.SH NAME
+gnutls_ocsp_resp_verify \- API function
+.SH SYNOPSIS
+.B #include <gnutls/ocsp.h>
+.sp
+.BI "int gnutls_ocsp_resp_verify(gnutls_ocsp_resp_const_t " resp ", gnutls_x509_trust_list_t " trustlist ", unsigned int * " verify ", unsigned int " flags ");"
+.SH ARGUMENTS
+.IP "gnutls_ocsp_resp_const_t resp" 12
+should contain a \fBgnutls_ocsp_resp_t\fP type
+.IP "gnutls_x509_trust_list_t trustlist" 12
+trust anchors as a \fBgnutls_x509_trust_list_t\fP type
+.IP "unsigned int * verify" 12
+output variable with verification status, an \fBgnutls_ocsp_verify_reason_t\fP
+.IP "unsigned int flags" 12
+verification flags from \fBgnutls_certificate_verify_flags\fP
+.SH "DESCRIPTION"
+Verify signature of the Basic OCSP Response against the public key
+in the certificate of a trusted signer. The \fItrustlist\fP should be
+populated with trust anchors. The function will extract the signer
+certificate from the Basic OCSP Response and will verify it against
+the \fItrustlist\fP . A trusted signer is a certificate that is either
+in \fItrustlist\fP , or it is signed directly by a certificate in
+ \fItrustlist\fP and has the id\-ad\-ocspSigning Extended Key Usage bit
+set.
+
+The output \fIverify\fP variable will hold verification status codes
+(e.g., \fBGNUTLS_OCSP_VERIFY_SIGNER_NOT_FOUND\fP,
+\fBGNUTLS_OCSP_VERIFY_INSECURE_ALGORITHM\fP) which are only valid if the
+function returned \fBGNUTLS_E_SUCCESS\fP.
+
+Note that the function returns \fBGNUTLS_E_SUCCESS\fP even when
+verification failed. The caller must always inspect the \fIverify\fP variable to find out the verification status.
+
+The \fIflags\fP variable should be 0 for now.
+.SH "RETURNS"
+On success, \fBGNUTLS_E_SUCCESS\fP (0) is returned, otherwise a
+negative error value.
+.SH "REPORTING BUGS"
+Report bugs to <bugs@gnutls.org>.
+.br
+Home page: https://www.gnutls.org
+
+.SH COPYRIGHT
+Copyright \(co 2001- Free Software Foundation, Inc., and others.
+.br
+Copying and distribution of this file, with or without modification,
+are permitted in any medium without royalty provided the copyright
+notice and this notice are preserved.
+.SH "SEE ALSO"
+The full documentation for
+.B gnutls
+is maintained as a Texinfo manual.
+If the /usr/share/doc/gnutls/
+directory does not contain the HTML form visit
+.B
+.IP https://www.gnutls.org/manual/
+.PP