gnutls_certificate_set_x509_trust

Section: gnutls (3)
Updated: 2.8.5
Index Return to Main Contents

NAME

gnutls_certificate_set_x509_trust - Used to add trusted CAs in a gnutls_certificate_credentials_t structure

SYNOPSIS

#include <gnutls/gnutls.h>

int gnutls_certificate_set_x509_trust(gnutls_certificate_credentials_t res, gnutls_x509_crt_t * ca_list, int ca_list_size);

ARGUMENTS

gnutls_certificate_credentials_t res: is a gnutls_certificate_credentials_t structure.
gnutls_x509_crt_t * ca_list: is a list of trusted CAs
int ca_list_size: holds the size of the CA list

DESCRIPTION

This function adds the trusted CAs in order to verify client or server certificates. In case of a client this is not required to be called if the certificates are not verified using gnutls_certificate_verify_peers2(). This function may be called multiple times.

In case of a server the CAs set here will be sent to the client if a certificate request is sent. This can be disabled using gnutls_certificate_send_x509_rdn_sequence().

RETURNS

GNUTLS_E_SUCCESS on success, or an error code.

SINCE

2.4.0

REPORTING BUGS

Report bugs to <bug-gnutls@gnu.org>. GnuTLS home page: http://www.gnu.org/software/gnutls/ General help using GNU software: http://www.gnu.org/gethelp/

COPYRIGHT

Copyright © 2008 Free Software Foundation.
Copying and distribution of this file, with or without modification, are permitted in any medium without royalty provided the copyright notice and this notice are preserved.