diff options
author | Dr. David von Oheimb <David.von.Oheimb@siemens.com> | 2022-08-01 20:34:19 +0200 |
---|---|---|
committer | Dr. David von Oheimb <dev@ddvo.net> | 2022-08-24 11:43:52 +0200 |
commit | 784126f117eb31d0296f839db1f426385312845a (patch) | |
tree | 2d5b541bf84bfa9751637f825cf1ffdce3757390 /doc/man3 | |
parent | 41f238d830e510f6d4bde63dd822e3041f14fc15 (diff) |
CMP: correct handling of fallback subject in OSSL_CMP_CTX_setup_CRM() and its doc
Reviewed-by: Tomas Mraz <tomas@openssl.org>
Reviewed-by: Matt Caswell <matt@openssl.org>
Reviewed-by: David von Oheimb <david.von.oheimb@siemens.com>
(Merged from https://github.com/openssl/openssl/pull/18929)
(cherry picked from commit 7af110f9f5fb9b039cc09b63768a0b989a7bf5ad)
Diffstat (limited to 'doc/man3')
-rw-r--r-- | doc/man3/OSSL_CMP_MSG_get0_header.pod | 21 |
1 files changed, 15 insertions, 6 deletions
diff --git a/doc/man3/OSSL_CMP_MSG_get0_header.pod b/doc/man3/OSSL_CMP_MSG_get0_header.pod index 76e24e1bad..6fc620f83b 100644 --- a/doc/man3/OSSL_CMP_MSG_get0_header.pod +++ b/doc/man3/OSSL_CMP_MSG_get0_header.pod @@ -45,12 +45,14 @@ the first available value of these: =over 4 -=item any subject name in I<ctx> set via L<OSSL_CMP_CTX_set1_subjectName(3)>, +=item any subject name in I<ctx> set via L<OSSL_CMP_CTX_set1_subjectName(3)> - +if it is the NULL-DN (i.e., any empty sequence of RDNs), no subject is included, -=item the subject field of any PKCS#10 CSR is given in I<ctx>, or +=item the subject field of any PKCS#10 CSR set in I<ctx> +via L<OSSL_CMP_CTX_set1_p10CSR(3)>, =item the subject field of any reference certificate given in I<ctx> -(see L<OSSL_CMP_CTX_set1_oldCert(3)>), if I<for_KUR> is nonzero +(see L<OSSL_CMP_CTX_set1_oldCert(3)>), but only if I<for_KUR> is nonzero or the I<ctx> does not include a Subject Alternative Name. =back @@ -61,9 +63,9 @@ The public key included is the first available value of these: =item the public key derived from any key set via L<OSSL_CMP_CTX_set0_newPkey(3)>, -=item the public key of any PKCS#10 CSR is given in I<ctx>, +=item the public key of any PKCS#10 CSR given in I<ctx>, -=item the public key of any reference certificate given in I<ctx>, or +=item the public key of any reference certificate given in I<ctx>, =item the public key derived from any client's private key set via L<OSSL_CMP_CTX_set1_pkey(3)>. @@ -108,7 +110,7 @@ or NULL if the respective entry does not exist and on error. OSSL_CMP_MSG_get_bodytype() returns the body type or -1 on error. -OSSL_CMP_CTX_setup_CRM() returns a pointer to a OSSL_CRMF_MSG on success, +OSSL_CMP_CTX_setup_CRM() returns a pointer to a B<OSSL_CRMF_MSG> on success, NULL on error. d2i_OSSL_CMP_MSG_bio() returns the parsed message or NULL on error. @@ -121,6 +123,13 @@ the number of bytes successfully encoded or a negative value if an error occurs. OSSL_CMP_MSG_update_transactionID() returns 1 on success, 0 on error. +=head1 SEE ALSO + +L<OSSL_CMP_CTX_set1_subjectName(3)>, L<OSSL_CMP_CTX_set1_p10CSR(3)>, +L<OSSL_CMP_CTX_set1_oldCert(3)>, L<OSSL_CMP_CTX_set0_newPkey(3)>, +L<OSSL_CMP_CTX_set1_pkey(3)>, L<OSSL_CMP_CTX_set0_reqExtensions(3)>, +L<OSSL_CMP_CTX_push1_subjectAltName(3)>, L<OSSL_CMP_CTX_push0_policy(3)> + =head1 HISTORY The OpenSSL CMP support was added in OpenSSL 3.0. |