authentication. For this purpose the following functions are
provided.
-@showfuncdesc{gnutls_x509_trust_list_init}
-@showfuncdesc{gnutls_x509_trust_list_deinit}
+@showfuncB{gnutls_x509_trust_list_init,gnutls_x509_trust_list_deinit}
+
@showfuncdesc{gnutls_x509_trust_list_add_cas}
@showfuncdesc{gnutls_x509_trust_list_add_named_crt}
@showfuncdesc{gnutls_x509_trust_list_add_crls}
The verification function will verify a given certificate chain against a list of certificate
authorities and certificate revocation lists, and output
-a bit-wise OR of elements of the @code{gnutls_certificate_status_t}
+a bit-wise OR of elements of the @code{gnutls_\-certificate_\-status_t}
enumeration.
A detailed description of these elements can be found
in @ref{tab:cert-verify}. An example of certificate verification is shown in @ref{ex:verify2}.
A certificate request can be generated by
associating it with a private key, setting the
-subject's information and self signing it.
+subject's information and finally self signing it.
+The last step ensures that the requester is in
+possession of the private key.
@showfuncdesc{gnutls_x509_crq_set_version}
@showfuncdesc{gnutls_x509_crq_set_dn_by_oid}
@showfuncdesc{gnutls_x509_crq_sign2}
The following example is about generating a certificate request, and a
-private key. A certificate request can be later be processed by a CA,
+private key. A certificate request can be later be processed by a CA
which should return a signed certificate.
@anchor{ex:crq}
@subsection Operations
The abstract key types can be used to access signing and
-signature verification operations on the underlying keys.
+signature verification operations with the underlying keys.
@showfuncdesc{gnutls_pubkey_verify_data2}
@showfuncdesc{gnutls_pubkey_verify_hash}
This is fully controlled by the application layer, thus your program
has to set up the required parameters. The main handshake function
is @funcref{gnutls_handshake}. In the next paragraphs we elaborate on
-controlling of the handshake protocol, i.e., the ciphersuite negotiation.
-
-@showfuncA{gnutls_handshake}
+the handshake protocol, i.e., the ciphersuite negotiation.
@menu