#include <gnutls/pkcs11.h>unsigned gnutls_pkcs11_crt_is_known(const char * url,gnutls_x509_crt_t cert, unsigned int flags);
АРГУМЕНТЫ
const char * url
A PKCS 11 url identifying a token
gnutls_x509_crt_t cert
is the certificate to find issuer for
unsigned int flags
Use zero or flags from GNUTLS_PKCS11_OBJ_FLAG.
ОПИСАНИЕ
This function will check whether the provided certificate is
stored in the specified token. This is useful in combination with
GNUTLS_PKCS11_OBJ_FLAG_RETRIEVE_TRUSTED or
GNUTLS_PKCS11_OBJ_FLAG_RETRIEVE_DISTRUSTED, to check whether a CA
is present or a certificate is distrusted in a trust PKCS 11
module.
This function can be used with a url of "pkcs11:", and in that
case all modules will be searched. To restrict the modules to the
marked as trusted in p11-kit use the
GNUTLS_PKCS11_OBJ_FLAG_PRESENT_IN_TRUSTED_MODULE flag.
Note that the flag GNUTLS_PKCS11_OBJ_FLAG_RETRIEVE_DISTRUSTED is
specific to p11-kit trust modules.
ЗНАЧЕНИЯ
If the certificate exists non-zero is returned, otherwise zero.
The full documentation for gnutls is maintained as a Texinfo
manual. If the /usr/share/doc/gnutls/ directory does not contain
the HTML form visit
https://www.gnutls.org/manual/
КОЛОФОН
This page is part of the GnuTLS (GnuTLS Transport Layer Security
Library) project. Information about the project can be found at
⟨http://www.gnutls.org/⟩. If you have a bug report for this
manual page, send it to bugs@gnutls.org. This page was obtained
from the tarball gnutls-3.8.5.tar.xz fetched from
⟨http://www.gnutls.org/download.html⟩ on 2024-06-14. If you
discover any rendering problems in this HTML version of the page,
or you believe there is a better or more up-to-date source for
the page, or you have corrections or improvements to the
information in this COLOPHON (which is not part of the original
manual page), send a mail to man-pages@man7.org
gnutls 3.8.5 gnutls_pkcs11_crt_is_known(3)