Container for an X.509 certificate.
The certificate may be chained.
Some fields of this structure are publicly readable. Do not modify them except via Mbed TLS library functions: the effect of modifying those fields or the data that those fields points to is unspecified.
Public Attributes#
The raw certificate data (DER).
The raw certificate body (DER).
The X.509 version.
Unique id for certificate issued by a specific CA.
Signature algorithm, e.g.
The raw issuer data (DER).
The raw subject data (DER).
The parsed issuer data (named information object).
The parsed subject data (named information object).
Start time of certificate validity.
End time of certificate validity.
Container for the public key context.
Optional X.509 v2/v3 issuer unique identifier.
Optional X.509 v2/v3 subject unique identifier.
Optional X.509 v3 extensions.
Optional list of raw entries of Subject Alternative Names extension (currently only dNSName and OtherName are listed).
Optional list of certificate policies (Only anyPolicy is printed and enforced, however the rest of the policies are still listed).
Optional list of extended key usage OIDs.
Next certificate in the linked list that constitutes the CA chain.
Public Functions#
Indicates if raw is owned by the structure or not.
Bit string containing detected and parsed extensions.
Optional Basic Constraint extension value: 1 if this certificate belongs to a CA, 0 otherwise.
Optional Basic Constraint extension value: The maximum path length to the root certificate.
Optional key usage extension value: See the values in x509.h.
Optional Netscape certificate type extension value: See the values in x509.h.
Signature: hash of the tbs part signed with the private key.
Internal representation of the MD algorithm of the signature algorithm, e.g.
Internal representation of the Public Key algorithm of the signature algorithm, e.g.
Signature options to be passed to mbedtls_pk_verify_ext(), e.g.
Public Attribute Documentation#
raw#
mbedtls_x509_buf mbedtls_x509_crt::raw
The raw certificate data (DER).
57 of file util/third_party/mbedtls/include/mbedtls/x509_crt.htbs#
mbedtls_x509_buf mbedtls_x509_crt::tbs
The raw certificate body (DER).
The part that is To Be Signed.
58 of file util/third_party/mbedtls/include/mbedtls/x509_crt.hversion#
int mbedtls_x509_crt::version
The X.509 version.
(1=v1, 2=v2, 3=v3)
60 of file util/third_party/mbedtls/include/mbedtls/x509_crt.hserial#
mbedtls_x509_buf mbedtls_x509_crt::serial
Unique id for certificate issued by a specific CA.
61 of file util/third_party/mbedtls/include/mbedtls/x509_crt.hsig_oid#
mbedtls_x509_buf mbedtls_x509_crt::sig_oid
Signature algorithm, e.g.
sha1RSA
62 of file util/third_party/mbedtls/include/mbedtls/x509_crt.hissuer_raw#
mbedtls_x509_buf mbedtls_x509_crt::issuer_raw
The raw issuer data (DER).
Used for quick comparison.
64 of file util/third_party/mbedtls/include/mbedtls/x509_crt.hsubject_raw#
mbedtls_x509_buf mbedtls_x509_crt::subject_raw
The raw subject data (DER).
Used for quick comparison.
65 of file util/third_party/mbedtls/include/mbedtls/x509_crt.hissuer#
mbedtls_x509_name mbedtls_x509_crt::issuer
The parsed issuer data (named information object).
67 of file util/third_party/mbedtls/include/mbedtls/x509_crt.hsubject#
mbedtls_x509_name mbedtls_x509_crt::subject
The parsed subject data (named information object).
68 of file util/third_party/mbedtls/include/mbedtls/x509_crt.hvalid_from#
mbedtls_x509_time mbedtls_x509_crt::valid_from
Start time of certificate validity.
70 of file util/third_party/mbedtls/include/mbedtls/x509_crt.hvalid_to#
mbedtls_x509_time mbedtls_x509_crt::valid_to
End time of certificate validity.
71 of file util/third_party/mbedtls/include/mbedtls/x509_crt.hpk_raw#
mbedtls_x509_buf mbedtls_x509_crt::pk_raw
73 of file util/third_party/mbedtls/include/mbedtls/x509_crt.hpk#
mbedtls_pk_context mbedtls_x509_crt::pk
Container for the public key context.
74 of file util/third_party/mbedtls/include/mbedtls/x509_crt.hissuer_id#
mbedtls_x509_buf mbedtls_x509_crt::issuer_id
Optional X.509 v2/v3 issuer unique identifier.
76 of file util/third_party/mbedtls/include/mbedtls/x509_crt.hsubject_id#
mbedtls_x509_buf mbedtls_x509_crt::subject_id
Optional X.509 v2/v3 subject unique identifier.
77 of file util/third_party/mbedtls/include/mbedtls/x509_crt.hv3_ext#
mbedtls_x509_buf mbedtls_x509_crt::v3_ext
Optional X.509 v3 extensions.
78 of file util/third_party/mbedtls/include/mbedtls/x509_crt.hsubject_alt_names#
mbedtls_x509_sequence mbedtls_x509_crt::subject_alt_names
Optional list of raw entries of Subject Alternative Names extension (currently only dNSName and OtherName are listed).
79 of file util/third_party/mbedtls/include/mbedtls/x509_crt.hcertificate_policies#
mbedtls_x509_sequence mbedtls_x509_crt::certificate_policies
Optional list of certificate policies (Only anyPolicy is printed and enforced, however the rest of the policies are still listed).
81 of file util/third_party/mbedtls/include/mbedtls/x509_crt.hext_key_usage#
mbedtls_x509_sequence mbedtls_x509_crt::ext_key_usage
Optional list of extended key usage OIDs.
89 of file util/third_party/mbedtls/include/mbedtls/x509_crt.hnext#
struct mbedtls_x509_crt* mbedtls_x509_crt::next
Next certificate in the linked list that constitutes the CA chain.
NULL indicates the end of the list. Do not modify this field directly.
101 of file util/third_party/mbedtls/include/mbedtls/x509_crt.hPublic Function Documentation#
MBEDTLS_PRIVATE#
int mbedtls_x509_crt::MBEDTLS_PRIVATE (own_buffer )
Indicates if raw is owned by the structure or not.
| N/A |
55 of file util/third_party/mbedtls/include/mbedtls/x509_crt.hMBEDTLS_PRIVATE#
int mbedtls_x509_crt::MBEDTLS_PRIVATE (ext_types )
Bit string containing detected and parsed extensions.
| N/A |
83 of file util/third_party/mbedtls/include/mbedtls/x509_crt.hMBEDTLS_PRIVATE#
int mbedtls_x509_crt::MBEDTLS_PRIVATE (ca_istrue )
Optional Basic Constraint extension value: 1 if this certificate belongs to a CA, 0 otherwise.
| N/A |
84 of file util/third_party/mbedtls/include/mbedtls/x509_crt.hMBEDTLS_PRIVATE#
int mbedtls_x509_crt::MBEDTLS_PRIVATE (max_pathlen )
Optional Basic Constraint extension value: The maximum path length to the root certificate.
| N/A |
Path length is 1 higher than RFC 5280 'meaning', so 1+
85 of file util/third_party/mbedtls/include/mbedtls/x509_crt.hMBEDTLS_PRIVATE#
unsigned int mbedtls_x509_crt::MBEDTLS_PRIVATE (key_usage )
Optional key usage extension value: See the values in x509.h.
| N/A |
87 of file util/third_party/mbedtls/include/mbedtls/x509_crt.hMBEDTLS_PRIVATE#
unsigned char mbedtls_x509_crt::MBEDTLS_PRIVATE (ns_cert_type )
Optional Netscape certificate type extension value: See the values in x509.h.
| N/A |
91 of file util/third_party/mbedtls/include/mbedtls/x509_crt.hMBEDTLS_PRIVATE#
mbedtls_x509_buf mbedtls_x509_crt::MBEDTLS_PRIVATE (sig )
Signature: hash of the tbs part signed with the private key.
| N/A |
93 of file util/third_party/mbedtls/include/mbedtls/x509_crt.hMBEDTLS_PRIVATE#
mbedtls_md_type_t mbedtls_x509_crt::MBEDTLS_PRIVATE (sig_md )
Internal representation of the MD algorithm of the signature algorithm, e.g.
| N/A |
MBEDTLS_MD_SHA256
94 of file util/third_party/mbedtls/include/mbedtls/x509_crt.hMBEDTLS_PRIVATE#
mbedtls_pk_type_t mbedtls_x509_crt::MBEDTLS_PRIVATE (sig_pk )
Internal representation of the Public Key algorithm of the signature algorithm, e.g.
| N/A |
MBEDTLS_PK_RSA
95 of file util/third_party/mbedtls/include/mbedtls/x509_crt.hMBEDTLS_PRIVATE#
void * mbedtls_x509_crt::MBEDTLS_PRIVATE (sig_opts )
Signature options to be passed to mbedtls_pk_verify_ext(), e.g.
| N/A |
for RSASSA-PSS
96 of file util/third_party/mbedtls/include/mbedtls/x509_crt.h