APIMANS += gnutls_x509_crt_list_import_pkcs11.3
APIMANS += gnutls_pkcs11_token_get_flags.3
APIMANS += gnutls_pkcs11_token_get_mechanism.3
+APIMANS += gnutls_pkcs11_type_get_name.3
APIMANS += gnutls_pkcs11_privkey_init.3
APIMANS += gnutls_pkcs11_privkey_deinit.3
APIMANS += gnutls_pkcs11_privkey_get_pk_algorithm.3
# e.g. IGNORE_HFILES=gtkdebug.h gtkintl.h
IGNORE_HFILES=
-# find lib -name \*.h -exec basename {} \; | grep -v -e abstract.h -e dtls.h -e gnutls.h -e openpgp.h -e pkcs11.h -e pkcs12.h -e x509.h | sort | uniq | sed -e 's/^/\t/' -e 's/$/ \\/'
+# find lib -name \*.h -exec basename {} \; | grep -v -e ^abstract.h$ -e ^crypto.h$ -e ^dtls.h$ -e ^gnutls.h$ -e ^openpgp.h$ -e ^pkcs11.h$ -e ^pkcs12.h$ -e ^x509.h$ | sort | uniq | sed -e 's/^/\t/' -e 's/$/ \\/'
IGNORE_HFILES += \
abstract_int.h \
accelerated.h \
context.h \
crypto-backend.h \
cryptodev.h \
- crypto.h \
debug.h \
dh_common.h \
ecc.h \
gnutls_datum.h \
gnutls_db.h \
gnutls_dh.h \
+ gnutls_dtls.h \
gnutls_ecc.h \
gnutls_errors.h \
gnutls_extensions.h \
gnutls_global.h \
+ gnutls_handshake.h \
+ gnutls_hash_int.h \
+ gnutls_helper.h \
gnutls_int.h \
gnutls_kx.h \
gnutls_mbuffers.h \
gnutls_mem.h \
gnutls_mpi.h \
gnutls_num.h \
+ gnutls_openpgp.h \
gnutls_pk.h \
gnutls_record.h \
gnutls_rsa_export.h \
gnutls_str.h \
gnutls_supplemental.h \
gnutls_v2_compat.h \
+ gnutls_x509.h \
gnutlsxx.h \
gstr.h \
hash.h \
</para>
<xi:include href="xml/gnutls.xml"/>
+ <xi:include href="xml/abstract.xml"/>
<xi:include href="xml/extra.xml"/>
<xi:include href="xml/x509.xml"/>
<xi:include href="xml/pkcs11.xml"/>
<xi:include href="xml/pkcs12.xml"/>
<xi:include href="xml/openpgp.xml"/>
<xi:include href="xml/crypto.xml"/>
+ <xi:include href="xml/dtls.xml"/>
<xi:include href="xml/openssl.xml"/>
</chapter>
*
* Returns: The number of bits, or (0).
*
+ * Since: 2.12.0
**/
unsigned int
gnutls_sec_param_to_pk_bits (gnutls_pk_algorithm_t algo,
* Returns: a pointer to a string that contains the name of the
* specified public key algorithm, or %NULL.
*
+ * Since: 2.12.0
**/
const char *
gnutls_sec_param_get_name (gnutls_sec_param_t param)
*
* Returns: The security parameter.
*
+ * Since: 2.12.0
**/
gnutls_sec_param_t
gnutls_pk_bits_to_sec_param (gnutls_pk_algorithm_t algo, unsigned int bits)
*
* Returns: Zero or a negative error code on error.
*
- * Since: 2.10.0
+ * Since: 2.12.0
**/
int
gnutls_cipher_encrypt2 (gnutls_cipher_hd_t handle, const void *text, size_t textlen,
*
* Returns: Zero or a negative error code on error.
*
- * Since: 2.10.0
+ * Since: 2.12.0
**/
int
gnutls_cipher_decrypt2 (gnutls_cipher_hd_t handle, const void *ciphertext,
*
* Returns: On success, %GNUTLS_E_SUCCESS (0) is returned, otherwise a
* negative error value.
+ *
+ * Since: 3.0.0
**/
int
gnutls_certificate_get_issuer (gnutls_certificate_credentials_t sc,
* and return 0 on success. If no certificate was selected then the
* number of certificates should be set to zero. The value (-1)
* indicates error and the handshake will be terminated.
+ *
+ * Since: 3.0.0
**/
void gnutls_certificate_set_retrieve_function
(gnutls_certificate_credentials_t cred,
/*
- * Copyright (C) 2000, 2002, 2003, 2004, 2005, 2008, 2010 Free Software
+ * Copyright (C) 2000, 2002, 2003, 2004, 2005, 2008, 2010, 2011 Free Software
* Foundation, Inc.
*
* Author: Nikos Mavrogiannopoulos
* Sets the function that will be used to store data from the resumed
* sessions database. This function must remove 0 on success.
*
- * The first argument to store_func() will be null unless
+ * The first argument to @store_func will be null unless
* gnutls_db_set_ptr() has been called.
**/
void
/**
* gnutls_global_set_time_function:
- * @time_func: it's the system time function
+ * @time_func: it's the system time function, a gnutls_time_func() callback.
*
- * This is the function where you can override the default system
- * time function.
+ * This is the function where you can override the default system time
+ * function. The application provided function should behave the same
+ * as the standard function.
*
- * gnutls_time_func is of the form,
- * time_t (*gnutls_time_func)( time*);
+ * Since: 2.12.0
**/
void
gnutls_global_set_time_function (gnutls_time_func time_func)
/*
* GnuTLS PKCS#11 support
- * Copyright (C) 2010 Free Software Foundation
+ * Copyright (C) 2010, 2011 Free Software Foundation
*
* Author: Nikos Mavrogiannopoulos
*
*
* Returns: a member of the #gnutls_privkey_type_t enumeration on
* success, or a negative error code on error.
+ *
+ * Since: 2.12.0
**/
gnutls_privkey_type_t
gnutls_privkey_get_type (gnutls_privkey_t key)
*
* Returns: a member of the #gnutls_pk_algorithm_t enumeration on
* success, or a negative error code on error.
+ *
+ * Since: 2.12.0
**/
int
gnutls_privkey_get_pk_algorithm (gnutls_privkey_t key, unsigned int *bits)
*
* Returns: On success, %GNUTLS_E_SUCCESS (0) is returned, otherwise a
* negative error value.
+ *
+ * Since: 2.12.0
**/
int
gnutls_privkey_init (gnutls_privkey_t * key)
* @key: The structure to be deinitialized
*
* This function will deinitialize a private key structure.
+ *
+ * Since: 2.12.0
**/
void
gnutls_privkey_deinit (gnutls_privkey_t key)
*
* Returns: On success, %GNUTLS_E_SUCCESS (0) is returned, otherwise a
* negative error value.
+ *
+ * Since: 2.12.0
**/
int
gnutls_privkey_import_pkcs11 (gnutls_privkey_t pkey,
*
* Returns: On success, %GNUTLS_E_SUCCESS (0) is returned, otherwise a
* negative error value.
+ *
+ * Since: 2.12.0
**/
int
gnutls_privkey_import_x509 (gnutls_privkey_t pkey,
*
* Returns: On success, %GNUTLS_E_SUCCESS (0) is returned, otherwise a
* negative error value.
+ *
+ * Since: 2.12.0
**/
int
gnutls_privkey_import_openpgp (gnutls_privkey_t pkey,
*
* Returns: On success, %GNUTLS_E_SUCCESS (0) is returned, otherwise a
* negative error value.
+ *
+ * Since: 2.12.0
**/
int
gnutls_privkey_decrypt_data (gnutls_privkey_t key,
*
* Returns: a member of the #gnutls_pk_algorithm_t enumeration on
* success, or a negative error code on error.
+ *
+ * Since: 2.12.0
**/
int
gnutls_pubkey_get_pk_algorithm (gnutls_pubkey_t key, unsigned int *bits)
*
* Returns: On success, %GNUTLS_E_SUCCESS (0) is returned, otherwise a
* negative error value.
+ *
+ * Since: 2.12.0
**/
int
gnutls_pubkey_get_key_usage (gnutls_pubkey_t key, unsigned int *usage)
*
* Returns: On success, %GNUTLS_E_SUCCESS (0) is returned, otherwise a
* negative error value.
+ *
+ * Since: 2.12.0
**/
int
gnutls_pubkey_init (gnutls_pubkey_t * key)
* @key: The structure to be deinitialized
*
* This function will deinitialize a public key structure.
+ *
+ * Since: 2.12.0
**/
void
gnutls_pubkey_deinit (gnutls_pubkey_t key)
*
* Returns: On success, %GNUTLS_E_SUCCESS (0) is returned, otherwise a
* negative error value.
+ *
+ * Since: 2.12.0
**/
int
gnutls_pubkey_import_x509 (gnutls_pubkey_t key, gnutls_x509_crt_t crt,
* Returns: the 0 if the hash algorithm is found. A negative error code is
* returned on error.
*
- * Since: 2.11.0
+ * Since: 2.12.0
**/
int
gnutls_pubkey_get_preferred_hash_algorithm (gnutls_pubkey_t key,
*
* Returns: On success, %GNUTLS_E_SUCCESS (0) is returned, otherwise a
* negative error value.
+ *
+ * Since: 2.12.0
**/
int
gnutls_pubkey_import_pkcs11 (gnutls_pubkey_t key,
*
* Returns: On success, %GNUTLS_E_SUCCESS (0) is returned, otherwise a
* negative error value.
+ *
+ * Since: 2.12.0
**/
int
gnutls_pubkey_import_openpgp (gnutls_pubkey_t key,
*
* Returns: In case of failure a negative error code will be
* returned, and 0 on success.
+ *
+ * Since: 2.12.0
**/
int
gnutls_pubkey_export (gnutls_pubkey_t key,
*
* Returns: In case of failure a negative error code will be
* returned, and 0 on success.
+ *
+ * Since: 2.12.0
**/
int
gnutls_pubkey_get_key_id (gnutls_pubkey_t key, unsigned int flags,
* gnutls_malloc() and will be stored in the appropriate datum.
*
* Returns: %GNUTLS_E_SUCCESS on success, otherwise a negative error code.
+ *
+ * Since: 2.12.0
**/
int
gnutls_pubkey_get_pk_rsa_raw (gnutls_pubkey_t key,
* gnutls_malloc() and will be stored in the appropriate datum.
*
* Returns: %GNUTLS_E_SUCCESS on success, otherwise a negative error code.
+ *
+ * Since: 2.12.0
**/
int
gnutls_pubkey_get_pk_dsa_raw (gnutls_pubkey_t key,
*
* Returns: On success, %GNUTLS_E_SUCCESS (0) is returned, otherwise a
* negative error value.
+ *
+ * Since: 2.12.0
**/
int
gnutls_pubkey_import (gnutls_pubkey_t key,
*
* Returns: On success, %GNUTLS_E_SUCCESS (0) is returned, otherwise a
* negative error value.
+ *
+ * Since: 2.12.0
**/
int
gnutls_x509_crt_set_pubkey (gnutls_x509_crt_t crt, gnutls_pubkey_t key)
*
* Returns: On success, %GNUTLS_E_SUCCESS (0) is returned, otherwise a
* negative error value.
+ *
+ * Since: 2.12.0
**/
int
gnutls_x509_crq_set_pubkey (gnutls_x509_crq_t crq, gnutls_pubkey_t key)
*
* Returns: On success, %GNUTLS_E_SUCCESS (0) is returned, otherwise a
* negative error value.
+ *
+ * Since: 2.12.0
**/
int
gnutls_pubkey_set_key_usage (gnutls_pubkey_t key, unsigned int usage)
*
* Returns: On success, %GNUTLS_E_SUCCESS (0) is returned, otherwise a
* negative error value.
+ *
+ * Since: 2.12.0
**/
-
int
gnutls_pubkey_import_pkcs11_url (gnutls_pubkey_t key, const char *url,
unsigned int flags)
* gnutls_datum.
*
* Returns: %GNUTLS_E_SUCCESS on success, or an negative error code.
+ *
+ * Since: 2.12.0
**/
int
gnutls_pubkey_import_rsa_raw (gnutls_pubkey_t key,
*
* Returns: On success, %GNUTLS_E_SUCCESS (0) is returned, otherwise a
* negative error value.
+ *
+ * Since: 2.12.0
**/
int
gnutls_pubkey_import_dsa_raw (gnutls_pubkey_t key,
*
* Returns: In case of a verification failure %GNUTLS_E_PK_SIG_VERIFY_FAILED
* is returned, and a positive code on success.
+ *
+ * Since: 2.12.0
**/
int
gnutls_pubkey_verify_hash (gnutls_pubkey_t key, unsigned int flags,
*
* Returns: the 0 if the hash algorithm is found. A negative error code is
* returned on error.
+ *
+ * Since: 2.12.0
**/
int
gnutls_pubkey_get_verify_algorithm (gnutls_pubkey_t key,
void gnutls_privkey_deinit (gnutls_privkey_t key);
int gnutls_privkey_get_pk_algorithm (gnutls_privkey_t key,
unsigned int *bits);
-int gnutls_privkey_get_dsa_raw (gnutls_x509_privkey_t key,
- gnutls_datum_t * p,
- gnutls_datum_t * q,
- gnutls_datum_t * g,
- gnutls_datum_t * y,
- gnutls_datum_t * x);
-
-
-int
-gnutls_privkey_get_preferred_hash_algorithm (gnutls_privkey_t key,
- gnutls_digest_algorithm_t *
- hash, unsigned int *mand);
gnutls_privkey_type_t gnutls_privkey_get_type (gnutls_privkey_t key);
int gnutls_global_init (void);
void gnutls_global_deinit (void);
+ /**
+ * gnutls_time_func:
+ * @t: where to store time.
+ *
+ * Function prototype for time()-like function. Set with
+ * gnutls_global_set_time_function().
+ *
+ * Returns: Number of seconds since the epoch, or (time_t)-1 on errors.
+ */
typedef time_t (*gnutls_time_func) (time_t *t);
+
typedef int (*mutex_init_func) (void **mutex);
typedef int (*mutex_lock_func) (void **mutex);
typedef int (*mutex_unlock_func) (void **mutex);
struct gnutls_pkcs11_privkey_st;
typedef struct gnutls_pkcs11_privkey_st *gnutls_pkcs11_privkey_t;
+ /**
+ * gnutls_privkey_type_t:
+ * @GNUTLS_PRIVKEY_X509: X.509 private key, #gnutls_x509_privkey_t.
+ * @GNUTLS_PRIVKEY_OPENPGP: OpenPGP private key, #gnutls_openpgp_privkey_t.
+ * @GNUTLS_PRIVKEY_PKCS11: PKCS11 private key, #gnutls_pkcs11_privkey_t.
+ *
+ * Enumeration of different private key types.
+ */
typedef enum
- {
- GNUTLS_PRIVKEY_X509, /* gnutls_x509_privkey_t */
- GNUTLS_PRIVKEY_OPENPGP, /* gnutls_openpgp_privkey_t */
- GNUTLS_PRIVKEY_PKCS11 /* gnutls_pkcs11_privkey_t */
- } gnutls_privkey_type_t;
+ {
+ GNUTLS_PRIVKEY_X509,
+ GNUTLS_PRIVKEY_OPENPGP,
+ GNUTLS_PRIVKEY_PKCS11
+ } gnutls_privkey_type_t;
typedef struct gnutls_retr2_st
{
#define GNUTLS_PKCS11_MAX_PIN_LEN 32
-/* Token callback function. The callback will be used to
- * ask the user to re-enter the token with given null terminated
- * label. Callback should return zero if token has been inserted
- * by user and a negative error code otherwise. It might be called
- * multiple times if the token is not detected and the retry counter
- * will be increased.
- */
-typedef int (*gnutls_pkcs11_token_callback_t) (void *const global_data,
+/**
+ * gnutls_pkcs11_token_callback_t:
+ * @userdata: user-controlled data from gnutls_pkcs11_set_token_function().
+ * @label: token label.
+ * @retry: retry counter, initially 0.
+ *
+ * Token callback function. The callback will be used to ask the user
+ * to re-insert the token with given (null terminated) label. The
+ * callback should return zero if token has been inserted by user and
+ * a negative error code otherwise. It might be called multiple times
+ * if the token is not detected and the retry counter will be
+ * increased.
+ *
+ * Returns: %GNUTLS_E_SUCCESS (0) on success or a negative error code
+ * on error.
+ *
+ * Since: 2.12.0
+ **/
+typedef int (*gnutls_pkcs11_token_callback_t) (void *const userdata,
const char *const label,
const unsigned retry);
- /**
- * gnutls_pkcs11_pin_flag_t:
- * @GNUTLS_PKCS11_PIN_USER: The PIN for the user.
- * @GNUTLS_PKCS11_PIN_SO: The PIN for the security officer.
- * @GNUTLS_PKCS11_PIN_CONTEXT_SPECIFIC: The PIN is for a specific action and key like signing.
- * @GNUTLS_PKCS11_PIN_FINAL_TRY: This is the final try before blocking.
- * @GNUTLS_PKCS11_PIN_COUNT_LOW: Few tries remain before token blocks.
- *
- * Enumeration of different PIN flags.
- */
+/**
+ * gnutls_pkcs11_pin_flag_t:
+ * @GNUTLS_PKCS11_PIN_USER: The PIN for the user.
+ * @GNUTLS_PKCS11_PIN_SO: The PIN for the security officer.
+ * @GNUTLS_PKCS11_PIN_CONTEXT_SPECIFIC: The PIN is for a specific action and key like signing.
+ * @GNUTLS_PKCS11_PIN_FINAL_TRY: This is the final try before blocking.
+ * @GNUTLS_PKCS11_PIN_COUNT_LOW: Few tries remain before token blocks.
+ *
+ * Enumeration of different PIN flags.
+ */
typedef enum
-{
- GNUTLS_PKCS11_PIN_USER = (1 << 0),
- GNUTLS_PKCS11_PIN_SO = (1 << 1),
- GNUTLS_PKCS11_PIN_CONTEXT_SPECIFIC = (1 << 4),
- GNUTLS_PKCS11_PIN_FINAL_TRY = (1 << 2),
- GNUTLS_PKCS11_PIN_COUNT_LOW = (1 << 3),
-} gnutls_pkcs11_pin_flag_t;
-
+ {
+ GNUTLS_PKCS11_PIN_USER = (1 << 0),
+ GNUTLS_PKCS11_PIN_SO = (1 << 1),
+ GNUTLS_PKCS11_PIN_CONTEXT_SPECIFIC = (1 << 4),
+ GNUTLS_PKCS11_PIN_FINAL_TRY = (1 << 2),
+ GNUTLS_PKCS11_PIN_COUNT_LOW = (1 << 3),
+ } gnutls_pkcs11_pin_flag_t;
+
+/**
+ * gnutls_pkcs11_pin_callback_t:
+ * @userdata: user-controlled data from gnutls_pkcs11_set_pin_function().
+ * @attempt: pin-attempt counter, initially 0.
+ * @token_url: PKCS11 URL.
+ * @token_label: label of PKCS11 token.
+ * @flags: a #gnutls_pkcs11_pin_flag_t flag.
+ * @pin: buffer to hold PIN, of size @pin_max.
+ * @pin_max: size of @pin buffer.
+ *
+ * Callback function type for PKCS#11 PIN entry. It is set by
+ * gnutls_pkcs11_set_pin_function().
+ *
+ * The callback should provides the PIN code to unlock the token with
+ * label @token_label, specified by the URL @token_url.
+ *
+ * The PIN code, as a NUL-terminated ASCII string, should be copied
+ * into the @pin buffer (of maximum size @pin_max), and return 0 to
+ * indicate success. Alternatively, the callback may return a
+ * negative gnutls error code to indicate failure and cancel PIN entry
+ * (in which case, the contents of the @pin parameter are ignored).
+ *
+ * When a PIN is required, the callback will be invoked repeatedly
+ * (and indefinitely) until either the returned PIN code is correct,
+ * the callback returns failure, or the token refuses login (e.g. when
+ * the token is locked due to too many incorrect PINs!). For the
+ * first such invocation, the @attempt counter will have value zero;
+ * it will increase by one for each subsequent attempt.
+ *
+ * Returns: %GNUTLS_E_SUCCESS (0) on success or a negative error code on error.
+ *
+ * Since: 2.12.0
+ **/
typedef int (*gnutls_pkcs11_pin_callback_t) (void *userdata, int attempt,
const char *token_url,
const char *token_label,
- unsigned int flags
- /*gnutls_pkcs11_pin_flag_t */ ,
+ unsigned int flags,
char *pin, size_t pin_max);
struct gnutls_pkcs11_obj_st;
#define GNUTLS_PKCS11_OBJ_FLAG_MARK_PRIVATE (1<<4) /* marked as private (requires PIN to access) */
#define GNUTLS_PKCS11_OBJ_FLAG_MARK_NOT_PRIVATE (1<<5) /* marked as not private */
- /**
- * gnutls_pkcs11_url_type_t:
- * @GNUTLS_PKCS11_URL_GENERIC: A generic-purpose URL.
- * @GNUTLS_PKCS11_URL_LIB: A URL that specifies the library used as well.
- * @GNUTLS_PKCS11_URL_LIB_VERSION: A URL that specifies the library and its version.
- *
- * Enumeration of different URL extraction flags.
- */
+/**
+ * gnutls_pkcs11_url_type_t:
+ * @GNUTLS_PKCS11_URL_GENERIC: A generic-purpose URL.
+ * @GNUTLS_PKCS11_URL_LIB: A URL that specifies the library used as well.
+ * @GNUTLS_PKCS11_URL_LIB_VERSION: A URL that specifies the library and its version.
+ *
+ * Enumeration of different URL extraction flags.
+ */
typedef enum
-{
- GNUTLS_PKCS11_URL_GENERIC, /* URL specifies the object on token level */
- GNUTLS_PKCS11_URL_LIB, /* URL specifies the object on module level */
- GNUTLS_PKCS11_URL_LIB_VERSION /* URL specifies the object on module and version level */
-} gnutls_pkcs11_url_type_t;
-
-int gnutls_pkcs11_obj_import_url (gnutls_pkcs11_obj_t, const char *url,
+ {
+ GNUTLS_PKCS11_URL_GENERIC, /* URL specifies the object on token level */
+ GNUTLS_PKCS11_URL_LIB, /* URL specifies the object on module level */
+ GNUTLS_PKCS11_URL_LIB_VERSION /* URL specifies the object on module and version level */
+ } gnutls_pkcs11_url_type_t;
+
+int gnutls_pkcs11_obj_import_url (gnutls_pkcs11_obj_t cert,
+ const char *url,
unsigned int flags
/* GNUTLS_PKCS11_OBJ_FLAG_* */ );
int gnutls_pkcs11_obj_export_url (gnutls_pkcs11_obj_t obj,
unsigned int flags
/* GNUTLS_PKCS11_OBJ_FLAG_* */ );
- /**
- * gnutls_pkcs11_obj_info_t:
- * @GNUTLS_PKCS11_OBJ_ID_HEX: The object ID in hex.
- * @GNUTLS_PKCS11_OBJ_LABEL: The object label.
- * @GNUTLS_PKCS11_OBJ_TOKEN_LABEL: The token's label.
- * @GNUTLS_PKCS11_OBJ_TOKEN_SERIAL: The token's serial number.
- * @GNUTLS_PKCS11_OBJ_TOKEN_MANUFACTURER: The token's manufacturer.
- * @GNUTLS_PKCS11_OBJ_TOKEN_MODEL: The token's model.
- * @GNUTLS_PKCS11_OBJ_ID: The object ID.
- * @GNUTLS_PKCS11_OBJ_LIBRARY_VERSION: The library's used to access the object version.
- * @GNUTLS_PKCS11_OBJ_LIBRARY_DESCRIPTION: The library's used to access the object description (name).
- * @GNUTLS_PKCS11_OBJ_LIBRARY_MANUFACTURER: The library's used to access the object manufacturer name.
- *
- * Enumeration of several object information types.
- */
+/**
+ * gnutls_pkcs11_obj_info_t:
+ * @GNUTLS_PKCS11_OBJ_ID_HEX: The object ID in hex.
+ * @GNUTLS_PKCS11_OBJ_LABEL: The object label.
+ * @GNUTLS_PKCS11_OBJ_TOKEN_LABEL: The token's label.
+ * @GNUTLS_PKCS11_OBJ_TOKEN_SERIAL: The token's serial number.
+ * @GNUTLS_PKCS11_OBJ_TOKEN_MANUFACTURER: The token's manufacturer.
+ * @GNUTLS_PKCS11_OBJ_TOKEN_MODEL: The token's model.
+ * @GNUTLS_PKCS11_OBJ_ID: The object ID.
+ * @GNUTLS_PKCS11_OBJ_LIBRARY_VERSION: The library's used to access the object version.
+ * @GNUTLS_PKCS11_OBJ_LIBRARY_DESCRIPTION: The library's used to access the object description (name).
+ * @GNUTLS_PKCS11_OBJ_LIBRARY_MANUFACTURER: The library's used to access the object manufacturer name.
+ *
+ * Enumeration of several object information types.
+ */
typedef enum
-{
- GNUTLS_PKCS11_OBJ_ID_HEX = 1,
- GNUTLS_PKCS11_OBJ_LABEL,
- GNUTLS_PKCS11_OBJ_TOKEN_LABEL,
- GNUTLS_PKCS11_OBJ_TOKEN_SERIAL,
- GNUTLS_PKCS11_OBJ_TOKEN_MANUFACTURER,
- GNUTLS_PKCS11_OBJ_TOKEN_MODEL,
- GNUTLS_PKCS11_OBJ_ID,
- /* the pkcs11 provider library info */
- GNUTLS_PKCS11_OBJ_LIBRARY_VERSION,
- GNUTLS_PKCS11_OBJ_LIBRARY_DESCRIPTION,
- GNUTLS_PKCS11_OBJ_LIBRARY_MANUFACTURER
-} gnutls_pkcs11_obj_info_t;
+ {
+ GNUTLS_PKCS11_OBJ_ID_HEX = 1,
+ GNUTLS_PKCS11_OBJ_LABEL,
+ GNUTLS_PKCS11_OBJ_TOKEN_LABEL,
+ GNUTLS_PKCS11_OBJ_TOKEN_SERIAL,
+ GNUTLS_PKCS11_OBJ_TOKEN_MANUFACTURER,
+ GNUTLS_PKCS11_OBJ_TOKEN_MODEL,
+ GNUTLS_PKCS11_OBJ_ID,
+ /* the pkcs11 provider library info */
+ GNUTLS_PKCS11_OBJ_LIBRARY_VERSION,
+ GNUTLS_PKCS11_OBJ_LIBRARY_DESCRIPTION,
+ GNUTLS_PKCS11_OBJ_LIBRARY_MANUFACTURER
+ } gnutls_pkcs11_obj_info_t;
int gnutls_pkcs11_obj_get_info (gnutls_pkcs11_obj_t crt,
gnutls_pkcs11_obj_info_t itype, void *output,
size_t * output_size);
- /**
- * gnutls_pkcs11_obj_attr_t:
- * @GNUTLS_PKCS11_OBJ_ATTR_CRT_ALL: Specify all certificates.
- * @GNUTLS_PKCS11_OBJ_ATTR_CRT_TRUSTED: Specify all certificates marked as trusted.
- * @GNUTLS_PKCS11_OBJ_ATTR_CRT_WITH_PRIVKEY: Specify all certificates with a corresponding private key.
- * @GNUTLS_PKCS11_OBJ_ATTR_PUBKEY: Specify all public keys.
- * @GNUTLS_PKCS11_OBJ_ATTR_PRIVKEY: Specify all private keys.
- * @GNUTLS_PKCS11_OBJ_ATTR_ALL: Specify all objects.
- *
- * Enumeration of several attributes for object enumeration.
- */
+/**
+ * gnutls_pkcs11_obj_attr_t:
+ * @GNUTLS_PKCS11_OBJ_ATTR_CRT_ALL: Specify all certificates.
+ * @GNUTLS_PKCS11_OBJ_ATTR_CRT_TRUSTED: Specify all certificates marked as trusted.
+ * @GNUTLS_PKCS11_OBJ_ATTR_CRT_WITH_PRIVKEY: Specify all certificates with a corresponding private key.
+ * @GNUTLS_PKCS11_OBJ_ATTR_PUBKEY: Specify all public keys.
+ * @GNUTLS_PKCS11_OBJ_ATTR_PRIVKEY: Specify all private keys.
+ * @GNUTLS_PKCS11_OBJ_ATTR_ALL: Specify all objects.
+ *
+ * Enumeration of several attributes for object enumeration.
+ */
typedef enum
-{
- GNUTLS_PKCS11_OBJ_ATTR_CRT_ALL = 1, /* all certificates */
- GNUTLS_PKCS11_OBJ_ATTR_CRT_TRUSTED, /* certificates marked as trusted */
- GNUTLS_PKCS11_OBJ_ATTR_CRT_WITH_PRIVKEY, /* certificates with corresponding private key */
- GNUTLS_PKCS11_OBJ_ATTR_PUBKEY, /* public keys */
- GNUTLS_PKCS11_OBJ_ATTR_PRIVKEY, /* private keys */
- GNUTLS_PKCS11_OBJ_ATTR_ALL /* everything! */
-} gnutls_pkcs11_obj_attr_t;
-
- /**
- * gnutls_pkcs11_token_info_t:
- * @GNUTLS_PKCS11_TOKEN_LABEL: The token's label
- * @GNUTLS_PKCS11_TOKEN_SERIAL: The token's serial number
- * @GNUTLS_PKCS11_TOKEN_MANUFACTURER: The token's manufacturer
- * @GNUTLS_PKCS11_TOKEN_MODEL: The token's model
- *
- * Enumeration of types for retrieving token information.
- */
+ {
+ GNUTLS_PKCS11_OBJ_ATTR_CRT_ALL = 1, /* all certificates */
+ GNUTLS_PKCS11_OBJ_ATTR_CRT_TRUSTED, /* certificates marked as trusted */
+ GNUTLS_PKCS11_OBJ_ATTR_CRT_WITH_PRIVKEY, /* certificates with corresponding private key */
+ GNUTLS_PKCS11_OBJ_ATTR_PUBKEY, /* public keys */
+ GNUTLS_PKCS11_OBJ_ATTR_PRIVKEY, /* private keys */
+ GNUTLS_PKCS11_OBJ_ATTR_ALL /* everything! */
+ } gnutls_pkcs11_obj_attr_t;
+
+/**
+ * gnutls_pkcs11_token_info_t:
+ * @GNUTLS_PKCS11_TOKEN_LABEL: The token's label
+ * @GNUTLS_PKCS11_TOKEN_SERIAL: The token's serial number
+ * @GNUTLS_PKCS11_TOKEN_MANUFACTURER: The token's manufacturer
+ * @GNUTLS_PKCS11_TOKEN_MODEL: The token's model
+ *
+ * Enumeration of types for retrieving token information.
+ */
typedef enum
-{
- GNUTLS_PKCS11_TOKEN_LABEL,
- GNUTLS_PKCS11_TOKEN_SERIAL,
- GNUTLS_PKCS11_TOKEN_MANUFACTURER,
- GNUTLS_PKCS11_TOKEN_MODEL
-} gnutls_pkcs11_token_info_t;
-
- /**
- * gnutls_pkcs11_obj_type_t:
- * @GNUTLS_PKCS11_OBJ_UNKNOWN: Unknown PKCS11 object.
- * @GNUTLS_PKCS11_OBJ_X509_CRT: X.509 certificate.
- * @GNUTLS_PKCS11_OBJ_PUBKEY: Public key.
- * @GNUTLS_PKCS11_OBJ_PRIVKEY: Private key.
- * @GNUTLS_PKCS11_OBJ_SECRET_KEY: Secret key.
- * @GNUTLS_PKCS11_OBJ_DATA: Data object.
- *
- * Enumeration of object types.
- */
+ {
+ GNUTLS_PKCS11_TOKEN_LABEL,
+ GNUTLS_PKCS11_TOKEN_SERIAL,
+ GNUTLS_PKCS11_TOKEN_MANUFACTURER,
+ GNUTLS_PKCS11_TOKEN_MODEL
+ } gnutls_pkcs11_token_info_t;
+
+/**
+ * gnutls_pkcs11_obj_type_t:
+ * @GNUTLS_PKCS11_OBJ_UNKNOWN: Unknown PKCS11 object.
+ * @GNUTLS_PKCS11_OBJ_X509_CRT: X.509 certificate.
+ * @GNUTLS_PKCS11_OBJ_PUBKEY: Public key.
+ * @GNUTLS_PKCS11_OBJ_PRIVKEY: Private key.
+ * @GNUTLS_PKCS11_OBJ_SECRET_KEY: Secret key.
+ * @GNUTLS_PKCS11_OBJ_DATA: Data object.
+ *
+ * Enumeration of object types.
+ */
typedef enum
-{
- GNUTLS_PKCS11_OBJ_UNKNOWN,
- GNUTLS_PKCS11_OBJ_X509_CRT,
- GNUTLS_PKCS11_OBJ_PUBKEY,
- GNUTLS_PKCS11_OBJ_PRIVKEY,
- GNUTLS_PKCS11_OBJ_SECRET_KEY,
- GNUTLS_PKCS11_OBJ_DATA
-} gnutls_pkcs11_obj_type_t;
+ {
+ GNUTLS_PKCS11_OBJ_UNKNOWN,
+ GNUTLS_PKCS11_OBJ_X509_CRT,
+ GNUTLS_PKCS11_OBJ_PUBKEY,
+ GNUTLS_PKCS11_OBJ_PRIVKEY,
+ GNUTLS_PKCS11_OBJ_SECRET_KEY,
+ GNUTLS_PKCS11_OBJ_DATA
+ } gnutls_pkcs11_obj_type_t;
int
gnutls_pkcs11_token_init (const char *token_url,
gnutls_pkcs11_token_get_mechanism (const char *url, int idx,
unsigned long *mechanism);
-int gnutls_pkcs11_token_set_pin (const char *token_url, const char *oldpin, const char *newpin, unsigned int flags /*gnutls_pkcs11_pin_flag_t */
- );
+int gnutls_pkcs11_token_set_pin (const char *token_url,
+ const char *oldpin,
+ const char *newpin,
+ unsigned int flags /*gnutls_pkcs11_pin_flag_t */
+ );
int gnutls_pkcs11_token_get_url (unsigned int seq,
gnutls_pkcs11_url_type_t detailed,
char **url);
-int gnutls_pkcs11_token_get_info (const char *url, gnutls_pkcs11_token_info_t ttype,
+int gnutls_pkcs11_token_get_info (const char *url,
+ gnutls_pkcs11_token_info_t ttype,
void *output, size_t * output_size);
#define GNUTLS_PKCS11_TOKEN_HW 1
/* GNUTLS_PKCS11_OBJ_FLAG_* */ );
gnutls_pkcs11_obj_type_t gnutls_pkcs11_obj_get_type (gnutls_pkcs11_obj_t obj);
-const char *gnutls_pkcs11_type_get_name (gnutls_pkcs11_obj_type_t);
-
-int gnutls_x509_crt_list_import_pkcs11 (gnutls_x509_crt_t * certs, unsigned int cert_max,
- gnutls_pkcs11_obj_t * const objs, unsigned int flags /* must be zero */);
+const char *gnutls_pkcs11_type_get_name (gnutls_pkcs11_obj_type_t type);
+int gnutls_x509_crt_list_import_pkcs11 (gnutls_x509_crt_t * certs,
+ unsigned int cert_max,
+ gnutls_pkcs11_obj_t * const objs,
+ unsigned int flags /* must be zero */);
/* private key functions...*/
int gnutls_pkcs11_privkey_init (gnutls_pkcs11_privkey_t * key);
gnutls_pkcs11_url_type_t detailed,
char **url);
-/** @} */
-
#endif
/*
- * Copyright (C) 2010 Free Software Foundation, Inc.
+ * Copyright (C) 2010, 2011 Free Software Foundation, Inc.
*
* Author: Nikos Mavrogiannopoulos
*
*
* This function must be called before gnutls_global_init().
*
+ * Since: 2.12.0
**/
void
gnutls_global_set_mutex (mutex_init_func init, mutex_deinit_func deinit,
/*
- * Copyright (C) 2003, 2004, 2005, 2006, 2007, 2008, 2009, 2010 Free
+ * Copyright (C) 2003, 2004, 2005, 2006, 2007, 2008, 2009, 2010, 2011 Free
* Software Foundation, Inc.
*
* Author: Nikos Mavrogiannopoulos
*
* Returns: On success, a valid security parameter is returned otherwise
* %GNUTLS_SEC_PARAM_UNKNOWN is returned.
+ *
+ * Since: 2.12.0
**/
gnutls_sec_param_t
gnutls_openpgp_privkey_sec_param (gnutls_openpgp_privkey_t key)
*
* Returns: On success, %GNUTLS_E_SUCCESS (0) is returned, otherwise a
* negative error value.
+ *
+ * Since: 2.12.0
**/
int
gnutls_pkcs11_add_provider (const char *name, const char *params)
* @output: where output will be stored
* @output_size: contains the maximum size of the output and will be overwritten with actual
*
- * This function will return information about the PKCS 11
- * certificatesuch as the label, id as well as token information where
- * the key is stored. When output is text it returns null terminated
- * string although @output_size contains the size of the actual data
- * only.
+ * This function will return information about the PKCS11 certificate
+ * such as the label, id as well as token information where the key is
+ * stored. When output is text it returns null terminated string
+ * although @output_size contains the size of the actual data only.
*
* Returns: %GNUTLS_E_SUCCESS (0) on success or a negative error code on error.
+ *
+ * Since: 2.12.0
**/
int
gnutls_pkcs11_obj_get_info (gnutls_pkcs11_obj_t crt,
*
* Returns: On success, %GNUTLS_E_SUCCESS (0) is returned, otherwise a
* negative error value.
+ *
+ * Since: 2.12.0
**/
int
gnutls_pkcs11_init (unsigned int flags, const char *deprecated_config_file)
*
* This function will deinitialize the PKCS 11 subsystem in gnutls.
*
+ * Since: 2.12.0
**/
void
gnutls_pkcs11_deinit (void)
/**
* gnutls_pkcs11_set_pin_function:
- * @fn: The PIN callback
+ * @fn: The PIN callback, a gnutls_pkcs11_pin_callback_t() function.
* @userdata: data to be supplied to callback
*
- * This function will set a callback function to be used when a PIN
- * is required for PKCS 11 operations.
- *
- * Callback for PKCS#11 PIN entry. The callback provides the PIN code
- * to unlock the token with label 'token_label', specified by the URL
- * 'token_url'.
- *
- * The PIN code, as a NUL-terminated ASCII string, should be copied
- * into the 'pin' buffer (of maximum size pin_max), and
- * return 0 to indicate success. Alternatively, the callback may
- * return a negative gnutls error code to indicate failure and cancel
- * PIN entry (in which case, the contents of the 'pin' parameter are ignored).
- *
- * When a PIN is required, the callback will be invoked repeatedly
- * (and indefinitely) until either the returned PIN code is correct,
- * the callback returns failure, or the token refuses login (e.g. when
- * the token is locked due to too many incorrect PINs!). For the
- * first such invocation, the 'attempt' counter will have value zero;
- * it will increase by one for each subsequent attempt.
+ * This function will set a callback function to be used when a PIN is
+ * required for PKCS 11 operations. See
+ * gnutls_pkcs11_pin_callback_t() on how the callback should behave.
+ *
+ * Since: 2.12.0
**/
void
gnutls_pkcs11_set_pin_function (gnutls_pkcs11_pin_callback_t fn,
*
* This function will set a callback function to be used when a token
* needs to be inserted to continue PKCS 11 operations.
+ *
+ * Since: 2.12.0
**/
void
gnutls_pkcs11_set_token_function (gnutls_pkcs11_token_callback_t fn,
*
* Returns: On success, %GNUTLS_E_SUCCESS (0) is returned, otherwise a
* negative error value.
+ *
+ * Since: 2.12.0
**/
int
gnutls_pkcs11_obj_init (gnutls_pkcs11_obj_t * obj)
* @obj: The structure to be initialized
*
* This function will deinitialize a certificate structure.
+ *
+ * Since: 2.12.0
**/
void
gnutls_pkcs11_obj_deinit (gnutls_pkcs11_obj_t obj)
* @output_data_size: holds the size of output_data (and will be
* replaced by the actual size of parameters)
*
- * This function will export the pkcs11 object data. It is normal
- * for PKCS #11 data to be inaccesible and in that case %GNUTLS_E_INVALID_REQUEST
+ * This function will export the PKCS11 object data. It is normal for
+ * data to be inaccesible and in that case %GNUTLS_E_INVALID_REQUEST
* will be returned.
*
* If the buffer provided is not long enough to hold the output, then
*
* Returns: In case of failure a negative error code will be
* returned, and %GNUTLS_E_SUCCESS (0) on success.
+ *
+ * Since: 2.12.0
**/
int
gnutls_pkcs11_obj_export (gnutls_pkcs11_obj_t obj,
}
/**
- * gnutls_pkcs11_privkey_import_url:
+ * gnutls_pkcs11_obj_import_url:
* @cert: The structure to store the parsed certificate
* @url: a PKCS 11 url identifying the key
* @flags: One of GNUTLS_PKCS11_OBJ_* flags
*
* Returns: On success, %GNUTLS_E_SUCCESS (0) is returned, otherwise a
* negative error value.
+ *
+ * Since: 2.12.0
**/
int
gnutls_pkcs11_obj_import_url (gnutls_pkcs11_obj_t cert, const char *url,
* This function will return the URL for each token available
* in system. The url has to be released using gnutls_free()
*
- * Returns: On success, %GNUTLS_E_SUCCESS (0) is returned, %GNUTLS_E_REQUESTED_DATA_NOT_AVAILABLE
- * if the sequence number exceeds the available tokens, otherwise a negative error value.
+ * Returns: On success, %GNUTLS_E_SUCCESS (0) is returned,
+ * %GNUTLS_E_REQUESTED_DATA_NOT_AVAILABLE if the sequence number
+ * exceeds the available tokens, otherwise a negative error value.
+ *
+ * Since: 2.12.0
**/
-
int
gnutls_pkcs11_token_get_url (unsigned int seq,
gnutls_pkcs11_url_type_t detailed, char **url)
* This function will return information about the PKCS 11 token such
* as the label, id as well as token information where the key is stored.
*
- * Returns: %GNUTLS_E_SUCCESS (0) on success or a negative error code on error.
+ * Returns: %GNUTLS_E_SUCCESS (0) on success or a negative error code
+ * on error.
+ *
+ * Since: 2.12.0
**/
int
gnutls_pkcs11_token_get_info (const char *url,
*
* Returns: On success, %GNUTLS_E_SUCCESS (0) is returned, otherwise a
* negative error value.
+ *
+ * Since: 2.12.0
**/
int
gnutls_pkcs11_obj_export_url (gnutls_pkcs11_obj_t obj,
* stored in the structure.
*
* Returns: The type of the certificate.
+ *
+ * Since: 2.12.0
**/
gnutls_pkcs11_obj_type_t
gnutls_pkcs11_obj_get_type (gnutls_pkcs11_obj_t obj)
*
* Returns: On success, %GNUTLS_E_SUCCESS (0) is returned, otherwise a
* negative error value.
+ *
+ * Since: 2.12.0
**/
int
gnutls_pkcs11_obj_list_import_url (gnutls_pkcs11_obj_t * p_list,
*
* Returns: On success, %GNUTLS_E_SUCCESS (0) is returned, otherwise a
* negative error value.
+ *
+ * Since: 2.12.0
**/
int
gnutls_x509_crt_import_pkcs11_url (gnutls_x509_crt_t crt,
*
* Returns: On success, %GNUTLS_E_SUCCESS (0) is returned, otherwise a
* negative error value.
+ *
+ * Since: 2.12.0
**/
int
gnutls_x509_crt_import_pkcs11 (gnutls_x509_crt_t crt,
*
* Returns: On success, %GNUTLS_E_SUCCESS (0) is returned, otherwise a
* negative error value.
+ *
+ * Since: 2.12.0
**/
int
gnutls_x509_crt_list_import_pkcs11 (gnutls_x509_crt_t * certs,
* This function will return information about the PKCS 11 token flags.
*
* Returns: %GNUTLS_E_SUCCESS (0) on success or a negative error code on error.
+ *
+ * Since: 2.12.0
**/
int
gnutls_pkcs11_token_get_flags (const char *url, unsigned int *flags)
}
-
/**
* gnutls_pkcs11_token_get_mechanism:
* @url: should contain a PKCS 11 URL
* it return GNUTLS_E_REQUESTED_DATA_NOT_AVAILABLE.
*
* Returns: %GNUTLS_E_SUCCESS (0) on success or a negative error code on error.
+ *
+ * Since: 2.12.0
**/
int
gnutls_pkcs11_token_get_mechanism (const char *url, int idx,
}
-
+/**
+ * gnutls_pkcs11_type_get_name:
+ * @type: Holds the PKCS 11 object type, a #gnutls_pkcs11_obj_type_t.
+ *
+ * This function will return a human readable description of the
+ * PKCS11 object type @obj. It will return "Unknown" for unknown
+ * types.
+ *
+ * Returns: human readable string labeling the PKCS11 object type
+ * @type.
+ *
+ * Since: 2.12.0
+ **/
const char *
gnutls_pkcs11_type_get_name (gnutls_pkcs11_obj_type_t type)
{
/*
* GnuTLS PKCS#11 support
- * Copyright (C) 2010 Free Software Foundation
+ * Copyright (C) 2010, 2011 Free Software Foundation
*
* Author: Nikos Mavrogiannopoulos
*
*
* Returns: On success, %GNUTLS_E_SUCCESS (0) is returned, otherwise a
* negative error value.
+ *
+ * Since: 2.12.0
**/
int
gnutls_pkcs11_copy_secret_key (const char *token_url, gnutls_datum_t * key,
/*
* GnuTLS PKCS#11 support
- * Copyright (C) 2010 Free Software Foundation
+ * Copyright (C) 2010, 2011 Free Software Foundation
*
* Author: Nikos Mavrogiannopoulos
*
*
* Returns: On success, %GNUTLS_E_SUCCESS (0) is returned, otherwise a
* negative error value.
+ *
+ * Since: 2.12.0
**/
int
gnutls_pkcs11_copy_x509_crt (const char *token_url,
*
* Returns: On success, %GNUTLS_E_SUCCESS (0) is returned, otherwise a
* negative error value.
+ *
+ * Since: 2.12.0
**/
int
gnutls_pkcs11_copy_x509_privkey (const char *token_url,
*
* Returns: On success, the number of objects deleted is returned, otherwise a
* negative error value.
+ *
+ * Since: 2.12.0
**/
int
gnutls_pkcs11_delete_url (const char *object_url, unsigned int flags)
* @token_url: A PKCS #11 URL specifying a token
* @oldpin: old user's PIN
* @newpin: new user's PIN
- * @flags: one of gnutls_pkcs11_pin_flag_t
+ * @flags: one of #gnutls_pkcs11_pin_flag_t.
*
* This function will modify or set a user's PIN for the given token.
* If it is called to set a user pin for first time the oldpin must
/*
- * Copyright (C) 2008, 2010 Free Software Foundation, Inc.
+ * Copyright (C) 2008, 2010, 2011 Free Software Foundation, Inc.
*
* Author: Nikos Mavrogiannopoulos
*
* @data: place to store random bytes
* @len: The requested size
*
- * This function will generate random data and store it
- * to output buffer.
+ * This function will generate random data and store it to output
+ * buffer.
*
* Returns: Zero or a negative error code on error.
*
+ * Since: 2.12.0
**/
-
int
gnutls_rnd (gnutls_rnd_level_t level, void *data, size_t len)
{
* vec_func is of the form,
* ssize_t (*gnutls_vec_push_func) (gnutls_transport_ptr_t, const giovec_t * iov, int iovcnt);
*
+ * Since: 2.12.0
**/
void
gnutls_transport_set_vec_push_function (gnutls_session_t session,
* errno_func is of the form,
* int (*gnutls_errno_func)(gnutls_transport_ptr_t);
* and should return the errno.
+ *
+ * Since: 2.12.0
**/
void
gnutls_transport_set_errno_function (gnutls_session_t session,
/*
- * Copyright (C) 2003, 2004, 2005, 2008, 2010 Free Software Foundation,
+ * Copyright (C) 2003, 2004, 2005, 2008, 2010, 2011 Free Software Foundation,
* Inc.
*
* Author: Nikos Mavrogiannopoulos
*
* Returns: On success, %GNUTLS_E_SUCCESS (0) is returned, otherwise a
* negative error value.
+ *
+ * Since 2.12.0
**/
int
gnutls_x509_crl_privkey_sign (gnutls_x509_crl_t crl, gnutls_x509_crt_t issuer,
* information in the certificate request (e.g., the version using
* gnutls_x509_crq_set_version()).
*
+ * Since: 2.12.0
**/
int
gnutls_x509_crq_privkey_sign (gnutls_x509_crq_t crq, gnutls_privkey_t key,
* This function will verify self signature in the certificate
* request and return its status.
*
- * Returns: On success, %GNUTLS_E_SUCCESS (0) is returned, %GNUTLS_E_PK_SIG_VERIFY_FAILED
- * if verification failed, otherwise a negative error value.
+ * Returns: On success, %GNUTLS_E_SUCCESS (0) is returned,
+ * %GNUTLS_E_PK_SIG_VERIFY_FAILED if verification failed, otherwise a
+ * negative error value.
+ *
+ * Since 2.12.0
**/
int
gnutls_x509_crq_verify (gnutls_x509_crq_t crq,
*
* Returns: On success, a valid security parameter is returned otherwise
* %GNUTLS_SEC_PARAM_UNKNOWN is returned.
+ *
+ * Since: 2.12.0
**/
gnutls_sec_param_t
gnutls_x509_privkey_sec_param (gnutls_x509_privkey_t key)
*
* Returns: On success, %GNUTLS_E_SUCCESS (0) is returned, otherwise a
* negative error value.
+ *
+ * Since: 2.12.0
**/
int
gnutls_x509_privkey_export_rsa_raw2 (gnutls_x509_privkey_t key,
* Returns: the 0 if the hash algorithm is found. A negative error code is
* returned on error.
*
- * Since: 2.11.0
+ * Since: 2.12.0
**/
int
gnutls_x509_crt_get_preferred_hash_algorithm (gnutls_x509_crt_t crt,
* returned, and sizeof_buf will be set to the actual length.
*
* Returns: %GNUTLS_E_SUCCESS on success, otherwise a negative error code.
+ *
+ * Since: 2.12.0
**/
int
gnutls_x509_crt_get_issuer_unique_id (gnutls_x509_crt_t crt, char *buf,
projects / thirdparty / gnutls.git / commitdiff
