mbedtls_x509_crt
x509_crt.h
int int mbedtls_x509_crt::own_buffer own_buffer mbedtls_x509_crt::own_buffer

Indicates if `raw` is owned by the structure or not.

mbedtls_x509_buf mbedtls_x509_buf mbedtls_x509_crt::raw raw mbedtls_x509_crt::raw

The raw certificate data (DER).

mbedtls_x509_buf mbedtls_x509_buf mbedtls_x509_crt::tbs tbs mbedtls_x509_crt::tbs

The raw certificate body (DER). The part that is To Be Signed.

int int mbedtls_x509_crt::version version mbedtls_x509_crt::version

The X.509 version. (1=v1, 2=v2, 3=v3)

mbedtls_x509_buf mbedtls_x509_buf mbedtls_x509_crt::serial serial mbedtls_x509_crt::serial

Unique id for certificate issued by a specific CA.

mbedtls_x509_buf mbedtls_x509_buf mbedtls_x509_crt::sig_oid sig_oid mbedtls_x509_crt::sig_oid

Signature algorithm, e.g. sha1RSA

mbedtls_x509_buf mbedtls_x509_buf mbedtls_x509_crt::issuer_raw issuer_raw mbedtls_x509_crt::issuer_raw

The raw issuer data (DER). Used for quick comparison.

mbedtls_x509_buf mbedtls_x509_buf mbedtls_x509_crt::subject_raw subject_raw mbedtls_x509_crt::subject_raw

The raw subject data (DER). Used for quick comparison.

mbedtls_x509_name mbedtls_x509_name mbedtls_x509_crt::issuer issuer mbedtls_x509_crt::issuer

The parsed issuer data (named information object).

mbedtls_x509_name mbedtls_x509_name mbedtls_x509_crt::subject subject mbedtls_x509_crt::subject

The parsed subject data (named information object).

mbedtls_x509_time mbedtls_x509_time mbedtls_x509_crt::valid_from valid_from mbedtls_x509_crt::valid_from

Start time of certificate validity.

mbedtls_x509_time mbedtls_x509_time mbedtls_x509_crt::valid_to valid_to mbedtls_x509_crt::valid_to

End time of certificate validity.

mbedtls_x509_buf mbedtls_x509_buf mbedtls_x509_crt::pk_raw pk_raw mbedtls_x509_crt::pk_raw
mbedtls_pk_context mbedtls_pk_context mbedtls_x509_crt::pk pk mbedtls_x509_crt::pk

Container for the public key context.

mbedtls_x509_buf mbedtls_x509_buf mbedtls_x509_crt::issuer_id issuer_id mbedtls_x509_crt::issuer_id

Optional X.509 v2/v3 issuer unique identifier.

mbedtls_x509_buf mbedtls_x509_buf mbedtls_x509_crt::subject_id subject_id mbedtls_x509_crt::subject_id

Optional X.509 v2/v3 subject unique identifier.

mbedtls_x509_buf mbedtls_x509_buf mbedtls_x509_crt::v3_ext v3_ext mbedtls_x509_crt::v3_ext

Optional X.509 v3 extensions.

mbedtls_x509_sequence mbedtls_x509_sequence mbedtls_x509_crt::subject_alt_names subject_alt_names mbedtls_x509_crt::subject_alt_names

Optional list of raw entries of Subject Alternative Names extension (currently only dNSName and OtherName are listed).

mbedtls_x509_sequence mbedtls_x509_sequence mbedtls_x509_crt::certificate_policies certificate_policies mbedtls_x509_crt::certificate_policies

Optional list of certificate policies (Only anyPolicy is printed and enforced, however the rest of the policies are still listed).

int int mbedtls_x509_crt::ext_types ext_types mbedtls_x509_crt::ext_types

Bit string containing detected and parsed extensions

int int mbedtls_x509_crt::ca_istrue ca_istrue mbedtls_x509_crt::ca_istrue

Optional Basic Constraint extension value: 1 if this certificate belongs to a CA, 0 otherwise.

int int mbedtls_x509_crt::max_pathlen max_pathlen mbedtls_x509_crt::max_pathlen

Optional Basic Constraint extension value: The maximum path length to the root certificate. Path length is 1 higher than RFC 5280 'meaning', so 1+

unsigned int unsigned int mbedtls_x509_crt::key_usage key_usage mbedtls_x509_crt::key_usage

Optional key usage extension value: See the values in x509.h

mbedtls_x509_sequence mbedtls_x509_sequence mbedtls_x509_crt::ext_key_usage ext_key_usage mbedtls_x509_crt::ext_key_usage

Optional list of extended key usage OIDs.

unsigned char unsigned char mbedtls_x509_crt::ns_cert_type ns_cert_type mbedtls_x509_crt::ns_cert_type

Optional Netscape certificate type extension value: See the values in x509.h

mbedtls_x509_buf mbedtls_x509_buf mbedtls_x509_crt::sig sig mbedtls_x509_crt::sig

Signature: hash of the tbs part signed with the private key.

mbedtls_md_type_t mbedtls_md_type_t mbedtls_x509_crt::sig_md sig_md mbedtls_x509_crt::sig_md

Internal representation of the MD algorithm of the signature algorithm, e.g. MBEDTLS_MD_SHA256

mbedtls_pk_type_t mbedtls_pk_type_t mbedtls_x509_crt::sig_pk sig_pk mbedtls_x509_crt::sig_pk

Internal representation of the Public Key algorithm of the signature algorithm, e.g. MBEDTLS_PK_RSA

void * void* mbedtls_x509_crt::sig_opts sig_opts mbedtls_x509_crt::sig_opts

Signature options to be passed to mbedtls_pk_verify_ext(), e.g. for RSASSA-PSS

struct mbedtls_x509_crt * struct mbedtls_x509_crt* mbedtls_x509_crt::next next mbedtls_x509_crt::next

Next certificate in the CA-chain.

Container for an X.509 certificate. The certificate may be chained.

mbedtls_asn1_buf
mbedtls_asn1_named_data
oid
val
next
mbedtls_asn1_sequence
buf
next
mbedtls_pk_context
mbedtls_x509_crt
issuer_id
issuer_raw
pk_raw
raw
serial
sig
sig_oid
subject_id
subject_raw
tbs
...
issuer
subject
valid_from
valid_to
pk
certificate_policies
ext_key_usage
subject_alt_names
next
mbedtls_x509_time
- mbedtls_x509_crt
  ca_istrue
- mbedtls_x509_crt
  certificate_policies
- mbedtls_x509_crt
  ext_key_usage
- mbedtls_x509_crt
  ext_types
- mbedtls_x509_crt
  issuer
- mbedtls_x509_crt
  issuer_id
- mbedtls_x509_crt
  issuer_raw
- mbedtls_x509_crt
  key_usage
- mbedtls_x509_crt
  max_pathlen
- mbedtls_x509_crt
  next
- mbedtls_x509_crt
  ns_cert_type
- mbedtls_x509_crt
  own_buffer
- mbedtls_x509_crt
  pk
- mbedtls_x509_crt
  pk_raw
- mbedtls_x509_crt
  raw
- mbedtls_x509_crt
  serial
- mbedtls_x509_crt
  sig
- mbedtls_x509_crt
  sig_md
- mbedtls_x509_crt
  sig_oid
- mbedtls_x509_crt
  sig_opts
- mbedtls_x509_crt
  sig_pk
- mbedtls_x509_crt
  subject
- mbedtls_x509_crt
  subject_alt_names
- mbedtls_x509_crt
  subject_id
- mbedtls_x509_crt
  subject_raw
- mbedtls_x509_crt
  tbs
- mbedtls_x509_crt
  v3_ext
- mbedtls_x509_crt
  valid_from
- mbedtls_x509_crt
  valid_to
- mbedtls_x509_crt
  version