NAME
X509_REQ_new,
X509_REQ_dup,
X509_to_X509_REQ,
X509_REQ_free,
X509_REQ_INFO_new,
X509_REQ_INFO_free —
PKCS#10 certification
requests
SYNOPSIS
#include
<openssl/x509.h>
X509_REQ *
X509_REQ_new(void);
X509_REQ *
X509_REQ_dup(X509_REQ
*req);
X509_REQ *
X509_to_X509_REQ(X509
*x, EVP_PKEY *pkey,
const EVP_MD *md);
void
X509_REQ_free(X509_REQ
*req);
X509_REQ_INFO *
X509_REQ_INFO_new(void);
void
X509_REQ_INFO_free(X509_REQ_INFO
*req_info);
DESCRIPTION
X509_REQ_new()
allocates and initializes an empty X509_REQ object,
representing an ASN.1 CertificationRequest structure
defined in RFC 2986 section 4.2. It can hold a pointer to an
X509_REQ_INFO object discussed below together with a
cryptographic signature and information about the signature algorithm
used.
X509_REQ_dup()
creates a deep copy of req using
ASN1_item_dup(3), setting the reference count of the copy to
1.
X509_to_X509_REQ()
allocates a new certification request object, copies the subject name and
the public key into it from the certificate x, and
sets the version to zero. Unless pkey is
NULL, it also signs the request with
X509_REQ_sign(3) using pkey and
md.
X509_REQ_free()
frees req. If req is a
NULL pointer, no action occurs.
X509_REQ_INFO_new()
allocates and initializes an empty X509_REQ_INFO
object, representing an ASN.1 CertificationRequestInfo
structure defined in RFC 2986 section 4.1. It is used inside the
X509_REQ object and can hold the subject and the
public key of the requested certificate and additional attributes.
X509_REQ_INFO_free()
frees req_info. If req_info is a
NULL pointer, no action occurs.
RETURN VALUES
X509_REQ_new(),
X509_REQ_dup(),
X509_to_X509_REQ(), and
X509_REQ_INFO_new() return the new
X509_REQ or X509_REQ_INFO
object, respectively, or NULL if an error
occurs.
SEE ALSO
d2i_X509_REQ(3), PEM_read_X509_REQ(3), X509_new(3), X509_REQ_add1_attr(3), X509_REQ_add_extensions(3), X509_REQ_check_private_key(3), X509_REQ_digest(3), X509_REQ_get0_signature(3), X509_REQ_get_pubkey(3), X509_REQ_get_subject_name(3), X509_REQ_get_version(3), X509_REQ_print_ex(3), X509_REQ_sign(3)
STANDARDS
RFC 2986: PKCS #10: Certification Request Syntax Specification
HISTORY
X509_REQ_new(),
X509_REQ_free(),
X509_REQ_INFO_new(), and
X509_REQ_INFO_free() first appeared in SSLeay 0.4.4,
X509_REQ_dup() in SSLeay 0.5.1, and
X509_to_X509_REQ() in SSLeay 0.6.0. These functions
have been available since OpenBSD 2.4.