`gnutls_pkcs12_simple_parse` ( 3 )

Функции API (API function)

Имя (Name)

gnutls_pkcs12_simple_parse - API function

Синопсис (Synopsis)

#include <gnutls/pkcs12.h>

       int gnutls_pkcs12_simple_parse(gnutls_pkcs12_t p12, const char *
       password, gnutls_x509_privkey_t * key, gnutls_x509_crt_t **
       chain, unsigned int * chain_len, gnutls_x509_crt_t **
       extra_certs, unsigned int * extra_certs_len, gnutls_x509_crl_t *
       crl, unsigned int flags);

Аргументы (Arguments)

gnutls_pkcs12_t p12
                   A pkcs12 type

       const char * password
                   optional password used to decrypt the structure, bags
                   and keys.

       gnutls_x509_privkey_t * key
                   a structure to store the parsed private key.

       gnutls_x509_crt_t ** chain
                   the corresponding to key certificate chain (may be
                   NULL)

       unsigned int * chain_len
                   will be updated with the number of additional (may be
                   NULL)

       gnutls_x509_crt_t ** extra_certs
                   optional pointer to receive an array of additional
                   certificates found in the PKCS12 structure (may be
                   NULL).

       unsigned int * extra_certs_len
                   will be updated with the number of additional certs
                   (may be NULL).

       gnutls_x509_crl_t * crl
                   an optional structure to store the parsed CRL (may be
                   NULL).

       unsigned int flags
                   should be zero or one of GNUTLS_PKCS12_SP_*

Описание (Description)

This function parses a PKCS12 structure in  pkcs12 and extracts
       the private key, the corresponding certificate chain, any
       additional certificates and a CRL. The structures in  key ,
       chain  crl , and  extra_certs must not be initialized.

       The  extra_certs and  extra_certs_len parameters are optional and
       both may be set to NULL. If either is non-NULL, then both must be
       set. The value for  extra_certs is allocated using
       gnutls_malloc().

       Encrypted PKCS12 bags and PKCS8 private keys are supported, but
       only with password based security and the same password for all
       operations.

       Note that a PKCS12 structure may contain many keys and/or
       certificates, and there is no way to identify which
       key/certificate pair you want.  For this reason this function is
       useful for PKCS12 files that contain only one key/certificate
       pair and/or one CRL.

       If the provided structure has encrypted fields but no password is
       provided then this function returns GNUTLS_E_DECRYPTION_FAILED.

       Note that normally the chain constructed does not include self
       signed certificates, to comply with TLS' requirements. If,
       however, the flag GNUTLS_PKCS12_SP_INCLUDE_SELF_SIGNED is
       specified then self signed certificates will be included in the
       chain.

       Prior to using this function the PKCS 12 structure integrity must
       be verified using gnutls_pkcs12_verify_mac().

Возвращаемое значение (Return value)

On success, GNUTLS_E_SUCCESS (0) is returned, otherwise a
       negative error value.

Сообщение об ошибках (Reporting bugs)

Report bugs to <bugs@gnutls.org>.
       Home page: https://www.gnutls.org

Смотри также (See also)

The full documentation for gnutls is maintained as a Texinfo manual. If the /usr/share/doc/gnutls/ directory does not contain the HTML form visit

https://www.gnutls.org/manual/

Исходный текст на man7.org

gnutls_pkcs12_simple_parse ( 3 )