1X509_CHECK_CA(3ossl)                OpenSSL               X509_CHECK_CA(3ossl)
2
3
4

NAME

6       X509_check_ca - check if given certificate is CA certificate
7

SYNOPSIS

9        #include <openssl/x509v3.h>
10
11        int X509_check_ca(X509 *cert);
12

DESCRIPTION

14       This function checks if given certificate is CA certificate (can be
15       used to sign other certificates). The certificate must be a complete
16       certificate otherwise an error is returned.
17

RETURN VALUES

19       Function return 0, if it is not CA certificate, 1 if it is proper
20       X509v3 CA certificate with basicConstraints extension CA:TRUE, 3, if it
21       is self-signed X509 v1 certificate, 4, if it is certificate with
22       keyUsage extension with bit keyCertSign set, but without
23       basicConstraints, and 5 if it has outdated Netscape Certificate Type
24       extension telling that it is CA certificate.
25
26       This function will also return 0 on error.
27
28       Actually, any nonzero value means that this certificate could have been
29       used to sign other certificates.
30

SEE ALSO

32       X509_verify_cert(3), X509_check_issued(3), X509_check_purpose(3)
33

35       Copyright 2015-2021 The OpenSSL Project Authors. All Rights Reserved.
36
37       Licensed under the Apache License 2.0 (the "License").  You may not use
38       this file except in compliance with the License.  You can obtain a copy
39       in the file LICENSE in the source distribution or at
40       <https://www.openssl.org/source/license.html>.
41
42
43
443.0.9                             2023-07-27              X509_CHECK_CA(3ossl)
Impressum