gnutls_pkcs11_get_raw_issuer — API function

Synopsis

#include <gnutls/pkcs11.h>

int gnutls_pkcs11_get_raw_issuer(const char * url, gnutls_x509_crt_t cert, gnutls_datum_t * issuer, gnutls_x509_crt_fmt_t fmt, unsigned int flags);

Arguments

const char * url

A PKCS 11 url identifying a token

gnutls_x509_crt_t cert

is the certificate to find issuer for

gnutls_datum_t * issuer

Will hold the issuer if any in an allocated buffer.

gnutls_x509_crt_fmt_t fmt

The format of the exported issuer.

unsigned int flags

Use zero or flags from GNUTLS_PKCS11_OBJ_FLAG.

Description

This function will return the issuer of a given certificate, if it is stored in the token. By default only marked as trusted issuers are returned. If any issuer should be returned specify GNUTLS_PKCS11_OBJ_FLAG_RETRIEVE_ANY in  flags .

Returns

On success, GNUTLS_E_SUCCESS (0) is returned, otherwise a negative error value.

Since

3.2.7

Reporting Bugs

Report bugs to <bugs@gnutls.org>.
Home page: https://www.gnutls.org

See Also

The full documentation for gnutls is maintained as a Texinfo manual. If the /usr/share/doc/gnutls/ directory does not contain the HTML form visit

https://www.gnutls.org/manual/

Info

3.6.9 gnutls