mbedtls_x509_crt
x509_crt.h
int int mbedtls_x509_crt::private_own_buffer private_own_buffer mbedtls_x509_crt::private_own_buffer

Indicates if `raw` is owned by the structure or not.

mbedtls_x509_buf mbedtls_x509_buf mbedtls_x509_crt::raw raw mbedtls_x509_crt::raw

The raw certificate data (DER).

mbedtls_x509_buf mbedtls_x509_buf mbedtls_x509_crt::tbs tbs mbedtls_x509_crt::tbs

The raw certificate body (DER). The part that is To Be Signed.

int int mbedtls_x509_crt::version version mbedtls_x509_crt::version

The X.509 version. (1=v1, 2=v2, 3=v3)

mbedtls_x509_buf mbedtls_x509_buf mbedtls_x509_crt::serial serial mbedtls_x509_crt::serial

Unique id for certificate issued by a specific CA.

mbedtls_x509_buf mbedtls_x509_buf mbedtls_x509_crt::sig_oid sig_oid mbedtls_x509_crt::sig_oid

Signature algorithm, e.g. sha1RSA

mbedtls_x509_buf mbedtls_x509_buf mbedtls_x509_crt::issuer_raw issuer_raw mbedtls_x509_crt::issuer_raw

The raw issuer data (DER). Used for quick comparison.

mbedtls_x509_buf mbedtls_x509_buf mbedtls_x509_crt::subject_raw subject_raw mbedtls_x509_crt::subject_raw

The raw subject data (DER). Used for quick comparison.

mbedtls_x509_name mbedtls_x509_name mbedtls_x509_crt::issuer issuer mbedtls_x509_crt::issuer

The parsed issuer data (named information object).

mbedtls_x509_name mbedtls_x509_name mbedtls_x509_crt::subject subject mbedtls_x509_crt::subject

The parsed subject data (named information object).

mbedtls_x509_time mbedtls_x509_time mbedtls_x509_crt::valid_from valid_from mbedtls_x509_crt::valid_from

Start time of certificate validity.

mbedtls_x509_time mbedtls_x509_time mbedtls_x509_crt::valid_to valid_to mbedtls_x509_crt::valid_to

End time of certificate validity.

mbedtls_x509_buf mbedtls_x509_buf mbedtls_x509_crt::pk_raw pk_raw mbedtls_x509_crt::pk_raw
mbedtls_pk_context mbedtls_pk_context mbedtls_x509_crt::pk pk mbedtls_x509_crt::pk

Container for the public key context.

mbedtls_x509_buf mbedtls_x509_buf mbedtls_x509_crt::issuer_id issuer_id mbedtls_x509_crt::issuer_id

Optional X.509 v2/v3 issuer unique identifier.

mbedtls_x509_buf mbedtls_x509_buf mbedtls_x509_crt::subject_id subject_id mbedtls_x509_crt::subject_id

Optional X.509 v2/v3 subject unique identifier.

mbedtls_x509_buf mbedtls_x509_buf mbedtls_x509_crt::v3_ext v3_ext mbedtls_x509_crt::v3_ext

Optional X.509 v3 extensions.

mbedtls_x509_sequence mbedtls_x509_sequence mbedtls_x509_crt::subject_alt_names subject_alt_names mbedtls_x509_crt::subject_alt_names

Optional list of raw entries of Subject Alternative Names extension. These can be later parsed by mbedtls_x509_parse_subject_alt_name.

mbedtls_x509_buf mbedtls_x509_buf mbedtls_x509_crt::subject_key_id subject_key_id mbedtls_x509_crt::subject_key_id

Optional X.509 v3 extension subject key identifier.

mbedtls_x509_authority mbedtls_x509_authority mbedtls_x509_crt::authority_key_id authority_key_id mbedtls_x509_crt::authority_key_id

Optional X.509 v3 extension authority key identifier.

mbedtls_x509_sequence mbedtls_x509_sequence mbedtls_x509_crt::certificate_policies certificate_policies mbedtls_x509_crt::certificate_policies

Optional list of certificate policies (Only anyPolicy is printed and enforced, however the rest of the policies are still listed).

int int mbedtls_x509_crt::private_ext_types private_ext_types mbedtls_x509_crt::private_ext_types

Bit string containing detected and parsed extensions

int int mbedtls_x509_crt::private_ca_istrue private_ca_istrue mbedtls_x509_crt::private_ca_istrue

Optional Basic Constraint extension value: 1 if this certificate belongs to a CA, 0 otherwise.

int int mbedtls_x509_crt::private_max_pathlen private_max_pathlen mbedtls_x509_crt::private_max_pathlen

Optional Basic Constraint extension value: The maximum path length to the root certificate. Path length is 1 higher than RFC 5280 'meaning', so 1+

unsigned int unsigned int mbedtls_x509_crt::private_key_usage private_key_usage mbedtls_x509_crt::private_key_usage

Optional key usage extension value: See the values in x509.h

mbedtls_x509_sequence mbedtls_x509_sequence mbedtls_x509_crt::ext_key_usage ext_key_usage mbedtls_x509_crt::ext_key_usage

Optional list of extended key usage OIDs.

unsigned char unsigned char mbedtls_x509_crt::private_ns_cert_type private_ns_cert_type mbedtls_x509_crt::private_ns_cert_type

Optional Netscape certificate type extension value: See the values in x509.h

mbedtls_x509_buf mbedtls_x509_buf mbedtls_x509_crt::private_sig private_sig mbedtls_x509_crt::private_sig

Signature: hash of the tbs part signed with the private key.

mbedtls_md_type_t mbedtls_md_type_t mbedtls_x509_crt::private_sig_md private_sig_md mbedtls_x509_crt::private_sig_md

Internal representation of the MD algorithm of the signature algorithm, e.g. MBEDTLS_MD_SHA256

mbedtls_pk_type_t mbedtls_pk_type_t mbedtls_x509_crt::private_sig_pk private_sig_pk mbedtls_x509_crt::private_sig_pk

Internal representation of the Public Key algorithm of the signature algorithm, e.g. MBEDTLS_PK_RSA

void * void* mbedtls_x509_crt::private_sig_opts private_sig_opts mbedtls_x509_crt::private_sig_opts

Signature options to be passed to mbedtls_pk_verify_ext(), e.g. for RSASSA-PSS

struct mbedtls_x509_crt * struct mbedtls_x509_crt* mbedtls_x509_crt::next next mbedtls_x509_crt::next

Next certificate in the linked list that constitutes the CA chain. `NULL` indicates the end of the list. Do not modify this field directly.

Container for an X.509 certificate. The certificate may be chained.

Some fields of this structure are publicly readable. Do not modify them except via Mbed TLS library functions: the effect of modifying those fields or the data that those fields points to is unspecified.

mbedtls_asn1_buf
mbedtls_asn1_named_data
oid
val
next
mbedtls_asn1_sequence
buf
next
mbedtls_pk_context
mbedtls_x509_authority
authorityCertSerialNumber
keyIdentifier
raw
authorityCertIssuer
mbedtls_x509_crt
issuer_id
issuer_raw
pk_raw
private_sig
raw
serial
sig_oid
subject_id
subject_key_id
subject_raw
...
issuer
subject
valid_from
valid_to
pk
certificate_policies
ext_key_usage
subject_alt_names
authority_key_id
next
mbedtls_x509_time
- mbedtls_x509_crt
  authority_key_id
- mbedtls_x509_crt
  certificate_policies
- mbedtls_x509_crt
  ext_key_usage
- mbedtls_x509_crt
  issuer
- mbedtls_x509_crt
  issuer_id
- mbedtls_x509_crt
  issuer_raw
- mbedtls_x509_crt
  next
- mbedtls_x509_crt
  pk
- mbedtls_x509_crt
  pk_raw
- mbedtls_x509_crt
  private_ca_istrue
- mbedtls_x509_crt
  private_ext_types
- mbedtls_x509_crt
  private_key_usage
- mbedtls_x509_crt
  private_max_pathlen
- mbedtls_x509_crt
  private_ns_cert_type
- mbedtls_x509_crt
  private_own_buffer
- mbedtls_x509_crt
  private_sig
- mbedtls_x509_crt
  private_sig_md
- mbedtls_x509_crt
  private_sig_opts
- mbedtls_x509_crt
  private_sig_pk
- mbedtls_x509_crt
  raw
- mbedtls_x509_crt
  serial
- mbedtls_x509_crt
  sig_oid
- mbedtls_x509_crt
  subject
- mbedtls_x509_crt
  subject_alt_names
- mbedtls_x509_crt
  subject_id
- mbedtls_x509_crt
  subject_key_id
- mbedtls_x509_crt
  subject_raw
- mbedtls_x509_crt
  tbs
- mbedtls_x509_crt
  v3_ext
- mbedtls_x509_crt
  valid_from
- mbedtls_x509_crt
  valid_to
- mbedtls_x509_crt
  version