gnutls_pkcs11_crt_is_known(3)

1gnutls_pkcs11_crt_is_known(3)       gnutls       gnutls_pkcs11_crt_is_known(3)
2
3
4

NAME

6       gnutls_pkcs11_crt_is_known - API function
7

SYNOPSIS

9       #include <gnutls/pkcs11.h>
10
11       unsigned gnutls_pkcs11_crt_is_known(const char * url, gnutls_x509_crt_t
12       cert, unsigned int flags);
13

ARGUMENTS

15       const char * url
16                   A PKCS 11 url identifying a token
17
18       gnutls_x509_crt_t cert
19                   is the certificate to find issuer for
20
21       unsigned int flags
22                   Use zero or flags from GNUTLS_PKCS11_OBJ_FLAG.
23

DESCRIPTION

25       This function will check whether the provided certificate is stored  in
26       the   specified   token.   This   is   useful   in   combination   with
27       GNUTLS_PKCS11_OBJ_FLAG_RETRIEVE_TRUSTED                              or
28       GNUTLS_PKCS11_OBJ_FLAG_RETRIEVE_DISTRUSTED,  to  check  whether a CA is
29       present or a certificate is blacklisted in a trust PKCS 11 module.
30
31       This function can be used with a  url of "pkcs11:", and  in  that  case
32       all  modules will be searched. To restrict the modules to the marked as
33       trusted            in            p11-kit            use             the
34       GNUTLS_PKCS11_OBJ_FLAG_PRESENT_IN_TRUSTED_MODULE flag.
35
36       Note  that  the flag GNUTLS_PKCS11_OBJ_FLAG_RETRIEVE_DISTRUSTED is spe‐
37       cific to p11-kit trust modules.
38

RETURNS

40       If the certificate exists non-zero is returned, otherwise zero.
41

SINCE

43       3.3.0
44

REPORTING BUGS

46       Report bugs to <bugs@gnutls.org>.
47       Home page: https://www.gnutls.org
48
49

COPYRIGHT

51       Copyright © 2001-2020 Free Software Foundation, Inc., and others.
52       Copying and distribution of this file, with  or  without  modification,
53       are  permitted  in  any  medium  without royalty provided the copyright
54       notice and this notice are preserved.
55