NAME
X509V3_extensions_print —
pretty-print an array of X.509
extensions
SYNOPSIS
#include
<openssl/x509v3.h>
int
X509V3_extensions_print(BIO
*bio, char *title, const
STACK_OF(X509_EXTENSION) *sk, unsigned long
flags, int indent);
DESCRIPTION
For each member of the variable sized array
sk,
X509V3_extensions_print()
prints the following information to bio in the
following order:
- The extension type as printed by i2a_ASN1_OBJECT(3).
- If the extension is critical, the fixed string "critical".
- A human-readable representation of the data contained in the extension as printed by X509V3_EXT_print(3), passing through the flags. If that function indicates failure, the BER-encoded data of the extension is dumped with ASN1_STRING_print(3) without decoding it first. In both cases, an indent incremented by 4 space characters is used.
If sk is a
NULL pointer or empty,
X509V3_extensions_print()
prints nothing and indicates success.
Unless title is
NULL, it is printed on its own output line before
the rest of the output, and indent is increased by 4
space characters. This additional global indentation is cumulative to the
one applied to individual extensions mentioned above.
RETURN VALUES
X509V3_extensions_print() is intended to
return 1 on success or 0 if an error occurs.
SEE ALSO
BIO_new(3), STACK_OF(3), X509_EXTENSION_get_critical(3), X509_get0_extensions(3), X509_get_ext(3), X509V3_EXT_print(3)
HISTORY
X509V3_extensions_print() first appeared
in OpenSSL 0.9.7 and has been available since OpenBSD
3.2.
BUGS
Many parsing and printing errors are silently ignored, and the function may return indicating success even though sk contains invalid data. Even if all the data is valid, success may be indicated even when the information printed is incomplete for various reasons, for example due to memory allocation failures or I/O errors.