X509_ACERT_add_attr_nconf.3ossl - Man Page

Add attributes to X509_ACERT from configuration section

Synopsis

 #include <openssl/x509_acert.h>

 int X509_ACERT_add_attr_nconf(CONF *conf, const char *section,
                               X509_ACERT *acert);

Description

X509_ACERT_add_attr_nconf() adds one or more X509_ATTRIBUTEs to the existing X509_ACERT structure acert. The attributes are read from a section of the conf object.

The give section of the configuration should contain attribute descriptions of the form:

  attribute_name = value

The format of value will vary depending on the attribute_name. value can either be a string value or an ASN1_TYPE object.

To encode an ASN1_TYPE object, use the prefix "ASN1:" followed by the object description that uses the same syntax as ASN1_generate_nconf(3). For example:

 id-aca-group = ASN1:SEQUENCE:ietfattr

 [ietfattr]
 values = SEQUENCE:groups

 [groups]
 1.string = UTF8:mygroup1

Return Values

X509_ACERT_add_attr_nconf() returns 1 for success and 0 for failure.

See Also

ASN1_generate_nconf(3).

History

The function X509_ACERT_add_attr_nconf() was added in OpenSSL 3.4.

Info

2025-03-26 3.5.0-beta1 OpenSSL