X509_ACERT_add_attr_nconf.3ossl - Man Page

X509_ACERT_add_attr_nconf ​- Add attributes to X509_ACERT from configuration section

Synopsis

​ #include <openssl/x509_acert.h>
​
​ int X509_ACERT_add_attr_nconf(CONF *conf, const char *section,
​                               X509_ACERT *acert);

Description

X509_ACERT_add_attr_nconf() adds one or more X509_ATTRIBUTEs to the existing X509_ACERT structure acert. The attributes are read from a section of the conf object.

The give section of the configuration should contain attribute descriptions of the form:

​  attribute_name = value

The format of value will vary depending on the attribute_name. ​value can either be a string value or an ASN1_TYPE object.

To encode an ASN1_TYPE object, use the prefix "ASN1:" followed by the object description that uses the same syntax as ASN1_generate_nconf(3). For example:

​ id-aca-group = ASN1:SEQUENCE:ietfattr
​
​ [ietfattr]
​ values = SEQUENCE:groups
​
​ [groups]
​ 1.string = UTF8:mygroup1

Return Values

X509_ACERT_add_attr_nconf() returns 1 for success and 0 for failure.

See Also

ASN1_generate_nconf(3).

History

The function X509_ACERT_add_attr_nconf() was added in OpenSSL 3.4.

Info

2026-08-25 3.5.8 OpenSSL