summaryrefslogtreecommitdiffstats
path: root/upstream/debian-unstable/man3/X509_ATTRIBUTE.3ssl
diff options
context:
space:
mode:
authorDaniel Baumann <daniel.baumann@progress-linux.org>2024-04-15 19:43:11 +0000
committerDaniel Baumann <daniel.baumann@progress-linux.org>2024-04-15 19:43:11 +0000
commitfc22b3d6507c6745911b9dfcc68f1e665ae13dbc (patch)
treece1e3bce06471410239a6f41282e328770aa404a /upstream/debian-unstable/man3/X509_ATTRIBUTE.3ssl
parentInitial commit. (diff)
downloadmanpages-l10n-fc22b3d6507c6745911b9dfcc68f1e665ae13dbc.tar.xz
manpages-l10n-fc22b3d6507c6745911b9dfcc68f1e665ae13dbc.zip
Adding upstream version 4.22.0.upstream/4.22.0
Signed-off-by: Daniel Baumann <daniel.baumann@progress-linux.org>
Diffstat (limited to 'upstream/debian-unstable/man3/X509_ATTRIBUTE.3ssl')
-rw-r--r--upstream/debian-unstable/man3/X509_ATTRIBUTE.3ssl321
1 files changed, 321 insertions, 0 deletions
diff --git a/upstream/debian-unstable/man3/X509_ATTRIBUTE.3ssl b/upstream/debian-unstable/man3/X509_ATTRIBUTE.3ssl
new file mode 100644
index 00000000..8eac6676
--- /dev/null
+++ b/upstream/debian-unstable/man3/X509_ATTRIBUTE.3ssl
@@ -0,0 +1,321 @@
+.\" -*- mode: troff; coding: utf-8 -*-
+.\" Automatically generated by Pod::Man 5.01 (Pod::Simple 3.43)
+.\"
+.\" Standard preamble:
+.\" ========================================================================
+.de Sp \" Vertical space (when we can't use .PP)
+.if t .sp .5v
+.if n .sp
+..
+.de Vb \" Begin verbatim text
+.ft CW
+.nf
+.ne \\$1
+..
+.de Ve \" End verbatim text
+.ft R
+.fi
+..
+.\" \*(C` and \*(C' are quotes in nroff, nothing in troff, for use with C<>.
+.ie n \{\
+. ds C` ""
+. ds C' ""
+'br\}
+.el\{\
+. ds C`
+. ds C'
+'br\}
+.\"
+.\" Escape single quotes in literal strings from groff's Unicode transform.
+.ie \n(.g .ds Aq \(aq
+.el .ds Aq '
+.\"
+.\" If the F register is >0, we'll generate index entries on stderr for
+.\" titles (.TH), headers (.SH), subsections (.SS), items (.Ip), and index
+.\" entries marked with X<> in POD. Of course, you'll have to process the
+.\" output yourself in some meaningful fashion.
+.\"
+.\" Avoid warning from groff about undefined register 'F'.
+.de IX
+..
+.nr rF 0
+.if \n(.g .if rF .nr rF 1
+.if (\n(rF:(\n(.g==0)) \{\
+. if \nF \{\
+. de IX
+. tm Index:\\$1\t\\n%\t"\\$2"
+..
+. if !\nF==2 \{\
+. nr % 0
+. nr F 2
+. \}
+. \}
+.\}
+.rr rF
+.\" ========================================================================
+.\"
+.IX Title "X509_ATTRIBUTE 3SSL"
+.TH X509_ATTRIBUTE 3SSL 2024-02-03 3.1.5 OpenSSL
+.\" For nroff, turn off justification. Always turn off hyphenation; it makes
+.\" way too many mistakes in technical documents.
+.if n .ad l
+.nh
+.SH NAME
+X509_ATTRIBUTE, X509at_get_attr,
+X509at_get_attr_count, X509at_get_attr_by_NID, X509at_get_attr_by_OBJ,
+X509at_delete_attr,
+X509at_add1_attr,
+X509at_add1_attr_by_OBJ, X509at_add1_attr_by_NID, X509at_add1_attr_by_txt,
+X509at_get0_data_by_OBJ,
+X509_ATTRIBUTE_create, X509_ATTRIBUTE_create_by_NID,
+X509_ATTRIBUTE_create_by_OBJ, X509_ATTRIBUTE_create_by_txt,
+X509_ATTRIBUTE_set1_object, X509_ATTRIBUTE_set1_data,
+X509_ATTRIBUTE_count,
+X509_ATTRIBUTE_get0_data, X509_ATTRIBUTE_get0_object, X509_ATTRIBUTE_get0_type
+\&\- X509 attribute functions
+.SH SYNOPSIS
+.IX Header "SYNOPSIS"
+.Vb 1
+\& #include <openssl/x509.h>
+\&
+\& typedef struct x509_attributes_st X509_ATTRIBUTE;
+\&
+\& int X509at_get_attr_count(const STACK_OF(X509_ATTRIBUTE) *x);
+\& int X509at_get_attr_by_NID(const STACK_OF(X509_ATTRIBUTE) *x, int nid,
+\& int lastpos);
+\& int X509at_get_attr_by_OBJ(const STACK_OF(X509_ATTRIBUTE) *sk,
+\& const ASN1_OBJECT *obj, int lastpos);
+\& X509_ATTRIBUTE *X509at_get_attr(const STACK_OF(X509_ATTRIBUTE) *x, int loc);
+\& X509_ATTRIBUTE *X509at_delete_attr(STACK_OF(X509_ATTRIBUTE) *x, int loc);
+\& STACK_OF(X509_ATTRIBUTE) *X509at_add1_attr(STACK_OF(X509_ATTRIBUTE) **x,
+\& X509_ATTRIBUTE *attr);
+\& STACK_OF(X509_ATTRIBUTE) *X509at_add1_attr_by_OBJ(STACK_OF(X509_ATTRIBUTE)
+\& **x, const ASN1_OBJECT *obj,
+\& int type,
+\& const unsigned char *bytes,
+\& int len);
+\& STACK_OF(X509_ATTRIBUTE) *X509at_add1_attr_by_NID(STACK_OF(X509_ATTRIBUTE)
+\& **x, int nid, int type,
+\& const unsigned char *bytes,
+\& int len);
+\& STACK_OF(X509_ATTRIBUTE) *X509at_add1_attr_by_txt(STACK_OF(X509_ATTRIBUTE)
+\& **x, const char *attrname,
+\& int type,
+\& const unsigned char *bytes,
+\& int len);
+\& void *X509at_get0_data_by_OBJ(const STACK_OF(X509_ATTRIBUTE) *x,
+\& const ASN1_OBJECT *obj, int lastpos, int type);
+\& X509_ATTRIBUTE *X509_ATTRIBUTE_create(int nid, int atrtype, void *value);
+\& X509_ATTRIBUTE *X509_ATTRIBUTE_create_by_NID(X509_ATTRIBUTE **attr, int nid,
+\& int atrtype, const void *data,
+\& int len);
+\& X509_ATTRIBUTE *X509_ATTRIBUTE_create_by_OBJ(X509_ATTRIBUTE **attr,
+\& const ASN1_OBJECT *obj,
+\& int atrtype, const void *data,
+\& int len);
+\& X509_ATTRIBUTE *X509_ATTRIBUTE_create_by_txt(X509_ATTRIBUTE **attr,
+\& const char *atrname, int type,
+\& const unsigned char *bytes,
+\& int len);
+\& int X509_ATTRIBUTE_set1_object(X509_ATTRIBUTE *attr, const ASN1_OBJECT *obj);
+\& int X509_ATTRIBUTE_set1_data(X509_ATTRIBUTE *attr, int attrtype,
+\& const void *data, int len);
+\& void *X509_ATTRIBUTE_get0_data(X509_ATTRIBUTE *attr, int idx, int atrtype,
+\& void *data);
+\& int X509_ATTRIBUTE_count(const X509_ATTRIBUTE *attr);
+\& ASN1_OBJECT *X509_ATTRIBUTE_get0_object(X509_ATTRIBUTE *attr);
+\& ASN1_TYPE *X509_ATTRIBUTE_get0_type(X509_ATTRIBUTE *attr, int idx);
+.Ve
+.SH DESCRIPTION
+.IX Header "DESCRIPTION"
+\&\fBX509_ATTRIBUTE\fR objects are used by many standards including X509, X509_REQ,
+PKCS12, PKCS8, PKCS7 and CMS.
+.PP
+The \fBX509_ATTRIBUTE\fR object is used to represent the ASN.1 Attribute as defined
+in RFC 5280, i.e.
+.PP
+.Vb 3
+\& Attribute ::= SEQUENCE {
+\& type AttributeType,
+\& values SET OF AttributeValue }
+\&
+\& AttributeType ::= OBJECT IDENTIFIER
+\& AttributeValue ::= ANY \-\- DEFINED BY AttributeType
+.Ve
+.PP
+For example CMS defines the signing-time attribute as:
+.PP
+.Vb 2
+\& id\-signingTime OBJECT IDENTIFIER ::= { iso(1) member\-body(2)
+\& us(840) rsadsi(113549) pkcs(1) pkcs9(9) 5 }
+\&
+\& SigningTime ::= Time
+\&
+\& Time ::= CHOICE {
+\& utcTime UTCTime,
+\& generalizedTime GeneralizedTime }
+.Ve
+.PP
+In OpenSSL \fBAttributeType\fR maps to an \fBASN1_OBJECT\fR object
+and \fBAttributeValue\fR maps to a list of \fBASN1_TYPE\fR objects.
+.PP
+The following functions are used for \fBX509_ATTRIBUTE\fR objects.
+.PP
+\&\fBX509at_get_attr_by_OBJ()\fR finds the location of the first matching object \fIobj\fR
+in a list of attributes \fIsk\fR. The search starts at the position after \fIlastpos\fR.
+If the returned value is positive then it can be used on the next call to
+\&\fBX509at_get_attr_by_OBJ()\fR as the value of \fIlastpos\fR in order to iterate through
+the remaining attributes. \fIlastpos\fR can be set to any negative value on the
+first call, in order to start searching from the start of the list.
+.PP
+\&\fBX509at_get_attr_by_NID()\fR is similar to \fBX509at_get_attr_by_OBJ()\fR except that it
+passes the numerical identifier (NID) \fInid\fR associated with the object.
+See <openssl/obj_mac.h> for a list of NID_*.
+.PP
+\&\fBX509at_get_attr()\fR returns the \fBX509_ATTRIBUTE\fR object at index \fIloc\fR in the
+list of attributes \fIx\fR. \fIloc\fR should be in the range from 0 to
+\&\fBX509at_get_attr_count()\fR \- 1.
+.PP
+\&\fBX509at_delete_attr()\fR removes the \fBX509_ATTRIBUTE\fR object at index \fIloc\fR in
+the list of attributes \fIx\fR.
+.PP
+\&\fBX509at_add1_attr()\fR pushes a copy of the passed in \fBX509_ATTRIBUTE\fR object
+to the list \fIx\fR.
+Both \fIx\fR and \fIattr\fR must be non NULL or an error will occur.
+If \fI*x\fR is NULL then a new list is created, otherwise it uses the
+passed in list. An error will occur if an existing attribute (with the same
+attribute type) already exists in the attribute list.
+.PP
+\&\fBX509at_add1_attr_by_OBJ()\fR creates a new \fBX509_ATTRIBUTE\fR using
+\&\fBX509_ATTRIBUTE_set1_object()\fR and \fBX509_ATTRIBUTE_set1_data()\fR to assign a new
+\&\fIobj\fR with type \fItype\fR and data \fIbytes\fR of length \fIlen\fR and then pushes it
+to the attribute list \fIx\fR. Both \fIx\fR and \fIattr\fR must be non NULL or an error
+will occur. If \fI*x\fR is NULL then a new attribute list is created. If \fIobj\fR
+already exists in the attribute list then an error occurs.
+.PP
+\&\fBX509at_add1_attr_by_NID()\fR is similar to \fBX509at_add1_attr_by_OBJ()\fR except that it
+passes the numerical identifier (NID) \fInid\fR associated with the object.
+See <openssl/obj_mac.h> for a list of NID_*.
+.PP
+\&\fBX509at_add1_attr_by_txt()\fR is similar to \fBX509at_add1_attr_by_OBJ()\fR except that it
+passes a name \fIattrname\fR associated with the object.
+See <openssl/obj_mac.h> for a list of SN_* names.
+.PP
+\&\fBX509_ATTRIBUTE_set1_object()\fR assigns a \fBASN1_OBJECT\fR \fIobj\fR
+to the attribute \fIattr\fR. If \fIattr\fR contained an existing \fBASN1_OBJECT\fR then
+it is freed. An error occurs if either \fIattr\fR or \fIobj\fR are NULL, or if
+the passed in \fIobj\fR cannot be duplicated.
+.PP
+\&\fBX509_ATTRIBUTE_set1_data()\fR pushes a new \fBASN1_TYPE\fR object onto the \fIattr\fR
+attributes list. The new object is assigned a copy of the data in \fIdata\fR of
+size \fIlen\fR.
+If \fIattrtype\fR has flag \fIMBSTRING_FLAG\fR set then a table lookup using the
+\&\fIattr\fR attributes NID is used to set an \fBASN1_STRING\fR using
+\&\fBASN1_STRING_set_by_NID()\fR, and the passed in \fIdata\fR must be in the format
+required for that object type or an error will occur.
+If \fIlen\fR is not \-1 then internally \fBASN1_STRING_type_new()\fR is
+used with the passed in \fIattrtype\fR.
+If \fIattrtype\fR is 0 the call does nothing except return 1.
+.PP
+\&\fBX509_ATTRIBUTE_create()\fR creates a new \fBX509_ATTRIBUTE\fR using the \fInid\fR
+to set the \fBASN1_OBJECT\fR OID and the \fIatrtype\fR and \fIvalue\fR to set the
+\&\fBASN1_TYPE\fR.
+.PP
+\&\fBX509_ATTRIBUTE_create_by_OBJ()\fR uses \fBX509_ATTRIBUTE_set1_object()\fR and
+\&\fBX509_ATTRIBUTE_set1_data()\fR to assign a new \fIobj\fR with type \fIatrtype\fR and
+data \fIdata\fR of length \fIlen\fR. If the passed in attribute \fIattr\fR OR \fI*attr\fR is
+NULL then a new \fBX509_ATTRIBUTE\fR will be returned, otherwise the passed in
+\&\fBX509_ATTRIBUTE\fR is used. Note that the ASN1_OBJECT \fIobj\fR is pushed onto the
+attributes existing list of objects, which could be an issue if the attributes
+<ASN1_OBJECT> was different.
+.PP
+\&\fBX509_ATTRIBUTE_create_by_NID()\fR is similar to \fBX509_ATTRIBUTE_create_by_OBJ()\fR
+except that it passes the numerical identifier (NID) \fInid\fR associated with the
+object. See <openssl/obj_mac.h> for a list of NID_*.
+.PP
+\&\fBX509_ATTRIBUTE_create_by_txt()\fR is similar to \fBX509_ATTRIBUTE_create_by_OBJ()\fR
+except that it passes a name \fIatrname\fR associated with the
+object. See <openssl/obj_mac.h> for a list of SN_* names.
+.PP
+\&\fBX509_ATTRIBUTE_count()\fR returns the number of \fBASN1_TYPE\fR objects in an
+attribute \fIattr\fR.
+.PP
+\&\fBX509_ATTRIBUTE_get0_type()\fR returns the \fBASN1_TYPE\fR object at index \fIidx\fR in
+the attribute list \fIattr\fR. \fIidx\fR should be in the
+range of 0 to \fBX509_ATTRIBUTE_count()\fR \- 1 or an error will occur.
+.PP
+\&\fBX509_ATTRIBUTE_get0_data()\fR returns the data of an \fBASN1_TYPE\fR object at
+index \fIidx\fR in the attribute \fIattr\fR. \fIdata\fR is unused and can be set to NULL.
+An error will occur if the attribute type \fIatrtype\fR does not match the type of
+the \fBASN1_TYPE\fR object at index \fIidx\fR OR if \fIatrtype\fR is either
+\&\fBV_ASN1_BOOLEAN\fR or \fBV_ASN1_NULL\fR OR if the \fIidx\fR is not in the
+range 0 to \fBX509_ATTRIBUTE_count()\fR \- 1.
+.PP
+\&\fBX509at_get0_data_by_OBJ()\fR finds the first attribute in an attribute list \fIx\fR
+that matches the \fIobj\fR starting at index \fIlastpos\fR and returns the data
+retrieved from the found attributes first \fBASN1_TYPE\fR object. An error will
+occur if the attribute type \fItype\fR does not match the type of the \fBASN1_TYPE\fR
+object OR if \fItype\fR is either \fBV_ASN1_BOOLEAN\fR or \fBV_ASN1_NULL\fR OR the
+attribute is not found.
+If \fIlastpos\fR is less than \-1 then an error will occur if there are multiple
+objects in the list \fIx\fR that match \fIobj\fR.
+If \fIlastpos\fR is less than \-2 then an error will occur if there is more than
+one \fBASN1_TYPE\fR object in the found attribute.
+.SH "RETURN VALUES"
+.IX Header "RETURN VALUES"
+\&\fBX509at_get_attr_count()\fR returns the number of attributes in the list \fIx\fR or \-1
+if \fIx\fR is NULL.
+.PP
+\&\fBX509at_get_attr_by_OBJ()\fR returns \-1 if either the list is empty OR the object
+is not found, otherwise it returns the location of the object in the list.
+.PP
+\&\fBX509at_get_attr_by_NID()\fR is similar to \fBX509at_get_attr_by_OBJ()\fR, except that
+it returns \-2 if the \fInid\fR is not known by OpenSSL.
+.PP
+\&\fBX509at_get_attr()\fR returns either an \fBX509_ATTRIBUTE\fR or NULL if there is a error.
+.PP
+\&\fBX509at_delete_attr()\fR returns either the removed \fBX509_ATTRIBUTE\fR or NULL if
+there is a error.
+.PP
+\&\fBX509_ATTRIBUTE_count()\fR returns \-1 on error, otherwise it returns the number
+of \fBASN1_TYPE\fR elements.
+.PP
+\&\fBX509_ATTRIBUTE_get0_type()\fR returns NULL on error, otherwise it returns a
+\&\fBASN1_TYPE\fR object.
+.PP
+\&\fBX509_ATTRIBUTE_get0_data()\fR returns NULL if an error occurs,
+otherwise it returns the data associated with an \fBASN1_TYPE\fR object.
+.PP
+\&\fBX509_ATTRIBUTE_set1_object()\fR and \fBX509_ATTRIBUTE_set1_data()\fR returns 1 on
+success, or 0 otherwise.
+.PP
+\&\fBX509_ATTRIBUTE_create()\fR, \fBX509_ATTRIBUTE_create_by_OBJ()\fR,
+\&\fBX509_ATTRIBUTE_create_by_NID()\fR and \fBX509_ATTRIBUTE_create_by_txt()\fR return either
+a \fBX509_ATTRIBUTE\fR on success, or NULL if there is a error.
+.PP
+\&\fBX509at_add1_attr()\fR, \fBX509at_add1_attr_by_OBJ()\fR, \fBX509at_add1_attr_by_NID()\fR and
+\&\fBX509at_add1_attr_by_txt()\fR return NULL on error, otherwise they return a list
+of \fBX509_ATTRIBUTE\fR.
+.PP
+\&\fBX509at_get0_data_by_OBJ()\fR returns the data retrieved from the found attributes
+first \fBASN1_TYPE\fR object, or NULL if an error occurs.
+.SH "SEE ALSO"
+.IX Header "SEE ALSO"
+\&\fBASN1_TYPE_get\fR\|(3),
+\&\fBASN1_INTEGER_get\fR\|(3),
+\&\fBASN1_ENUMERATED_get\fR\|(3),
+\&\fBASN1_STRING_get0_data\fR\|(3),
+\&\fBASN1_STRING_length\fR\|(3),
+\&\fBASN1_STRING_type\fR\|(3),
+\&\fBX509_REQ_get_attr\fR\|(3),
+\&\fBEVP_PKEY_get_attr\fR\|(3),
+\&\fBCMS_signed_get_attr\fR\|(3),
+\&\fBPKCS8_pkey_get0_attrs\fR\|(3),
+.SH COPYRIGHT
+.IX Header "COPYRIGHT"
+Copyright 2023\-2024 The OpenSSL Project Authors. All Rights Reserved.
+.PP
+Licensed under the Apache License 2.0 (the "License"). You may not use
+this file except in compliance with the License. You can obtain a copy
+in the file LICENSE in the source distribution or at
+<https://www.openssl.org/source/license.html>.