OpenBSD manual page server

Manual Page Search Parameters

X509V3_EXT_PRINT(3) Library Functions Manual X509V3_EXT_PRINT(3)

X509V3_EXT_printpretty-print an X.509 extension

#include <openssl/x509v3.h>

int
X509V3_EXT_print(BIO *bio, X509_EXTENSION *ext, unsigned long flags, int indent);

() decodes ext and prints the data contained in it to bio in a human-readable format with a left margin of indent space characters. The details of both the decoding and the printing depend on the type of ext.

For most extension types, the decoding is done in the same way as it would be done by the appropriate public API function, for example:

d2i_ASN1_OCTET_STRING(3)
d2i_ASN1_BIT_STRING(3)
d2i_ASN1_INTEGER(3)
d2i_ASN1_ENUMERATED(3)
d2i_ASN1_GENERALIZEDTIME(3)
d2i_GENERAL_NAMES(3)
d2i_ASN1_OBJECT(3)
d2i_ASN1_NULL(3)
d2i_AUTHORITY_KEYID(3)
d2i_CERTIFICATEPOLICIES(3)
d2i_OCSP_CRLID(3)
non-public function built into the library

For some types, the printing is performed by a dedicated non-public function built into the library. For some other types, the printing function is a public API function, but none of these printing functions are documented yet.

If ext is of an unknown extension type or if decoding fails while using the decoding function for the relevant type, the action taken depends on the flags argument:

X509V3_EXT_print() returns 0 if failure was both detected and considered relevant. Otherwise, 1 is returned, and in general the user cannot tell whether failure simply went undetected, whether the function detected failure but regarded it as irrelevant, or whether printing did indeed succeed.

BIO_new(3), X509_EXTENSION_new(3), X509_get0_extensions(3), X509_get_ext(3), X509V3_extensions_print(3)

X509V3_EXT_print() first appeared in OpenSSL 0.9.2 and has been available since OpenBSD 2.6.

X509V3_EXT_print() lacks error handling throughout. When a write operation fails, it will usually ignore the fact that information was omitted from the output and report success to the caller anyway.

July 12, 2021 OpenBSD-7.3