1X509_CHECK_CA(3) OpenSSL X509_CHECK_CA(3)
2
3
4
6 X509_check_ca - check if given certificate is CA certificate
7
9 #include <openssl/x509v3.h>
10
11 int X509_check_ca(X509 *cert);
12
14 This function checks if given certificate is CA certificate (can be
15 used to sign other certificates).
16
18 Function return 0, if it is not CA certificate, 1 if it is proper
19 X509v3 CA certificate with basicConstraints extension CA:TRUE, 3, if it
20 is self-signed X509 v1 certificate, 4, if it is certificate with
21 keyUsage extension with bit keyCertSign set, but without
22 basicConstraints, and 5 if it has outdated Netscape Certificate Type
23 extension telling that it is CA certificate.
24
25 Actually, any non-zero value means that this certificate could have
26 been used to sign other certificates.
27
29 X509_verify_cert(3), X509_check_issued(3), X509_check_purpose(3)
30
32 Copyright 2015-2018 The OpenSSL Project Authors. All Rights Reserved.
33
34 Licensed under the OpenSSL license (the "License"). You may not use
35 this file except in compliance with the License. You can obtain a copy
36 in the file LICENSE in the source distribution or at
37 <https://www.openssl.org/source/license.html>.
38
39
40
411.1.1g 2020-04-23 X509_CHECK_CA(3)