Main Page   Modules  

Cert Utils Functions

A generic set of utility functions for manipulating OpenSSL objects, such as X509 certificates. More...

Convert ASN1_UTCTIME to time_t

Get the X509 certificate type (EEC, CA, proxy type, etc.)

Get the certificate name

Get the base certificate name

Functions


Detailed Description

A generic set of utility functions for manipulating OpenSSL objects, such as X509 certificates.


Function Documentation

globus_result_t globus_gsi_cert_utils_make_time ASN1_UTCTIME *    ctm,
time_t *    newtime
 

Convert a ASN1_UTCTIME structure to a time_t.

Parameters:
ctm  The ASN1_UTCTIME to convert
newtime  The converted time
Returns:
GLOBUS_SUCCESS or an error captured in a globus_result_t

globus_result_t globus_gsi_cert_utils_get_cert_type X509 *    cert,
globus_gsi_cert_utils_cert_type_t   type
 

Determine the type of the given X509 certificate For the list of possible values returned, see globus_gsi_cert_utils_cert_type_t.

Parameters:
cert  The X509 certificate
type  The returned X509 certificate type
Returns:
GLOBUS_SUCCESS or an error captured in a globus_result_t

globus_result_t globus_gsi_cert_utils_get_x509_name char *    subject_string,
int    length,
X509_NAME *    x509_name
 

Get the X509_NAME from a subject string.

OpenSSL doesn't provide this function, probably because it shouldn't be used. If you are getting an X509_NAME from just a string, its impossible to verify its integrity.

Parameters:
subject_string  The subject in the format: "/O=Grid/OU=..."
length  The length of the subject string
x509_name  The resulting X509_NAME object
Returns:
GLOBUS_SUCCESS unless an error occurred, in which case, a globus error object ID is returned

globus_result_t globus_gsi_cert_utils_get_base_name X509_NAME *    subject,
STACK_OF(X509)*    cert_chain
 

Get the base name of a proxy certificate.

Given an X509 name, strip off the proxy related /CN components to get the base name of the certificate's subject

Parameters:
subject  Pointer to an X509_NAME object which gets stripped
cert_chain  The certificate chain used to detect the number of CNs to strip. This is done by figuring out the number of proxies in the chain.
Returns:
GLOBUS_SUCCESS

globus_result_t globus_gsi_cert_utils_get_eec STACK_OF(X509)*    cert_chain,
X509 **    eec
 

Get the end-entity certificate associated with a certificate chain.

Parameters:
cert_chain  Certificate chain to inspect.
eec  Pointer to be set to the EEC value from within the cert chain. Must freed by the caller.


about globus | globus toolkit | dev.globus

Comments? webmaster@globus.org