DragonFly On-Line Manual Pages

Search: Section:  

EXTENDED_KEY_USAGE_NEW(3)                   DragonFly Library Functions Manual


EXTENDED_KEY_USAGE_new, EXTENDED_KEY_USAGE_free - X.509 key usage restrictions


#include <openssl/x509v3.h> EXTENDED_KEY_USAGE EXTENDED_KEY_USAGE_new(void); void EXTENDED_KEY_USAGE_free(EXTENDED_KEY_USAGE *eku);


By using the key usage extension, the extended key usage extension, or both of them, X509 end entity certificates may indicate that the key contained in them is only intended to be used for the specified purposes. If both extensions are present, only uses compatible with both extensions are intended. EXTENDED_KEY_USAGE_new() allocates and initializes an empty EXTENDED_KEY_USAGE object, which is a STACK_OF(ASN1_OBJECT) and represents an ASN.1 ExtKeyUsageSyntax structure defined in RFC 5280 section It can hold key purpose identifiers. EXTENDED_KEY_USAGE_free() frees eku. The key usage extension uses the ASN.1 BIT STRING data type and doesn't require any dedicated object.


EXTENDED_KEY_USAGE_new() returns the new EXTENDED_KEY_USAGE object or NULL if an error occurs.


BASIC_CONSTRAINTS_new(3), d2i_EXTENDED_KEY_USAGE(3), POLICYINFO_new(3), X509_check_purpose(3), X509_EXTENSION_new(3), X509_new(3)


RFC 5280: Internet X.509 Public Key Infrastructure Certificate and Certificate Revocation List (CRL) Profile: - section Key Usage - section Extended Key Usage


EXTENDED_KEY_USAGE_new() and EXTENDED_KEY_USAGE_free() first appeared in OpenSSL 0.9.7 and have been available since OpenBSD 3.2. DragonFly 6.1-DEVELOPMENT August 22, 2019 DragonFly 6.1-DEVELOPMENT

Search: Section: