X509_PUBKEY_new.3ossl 12 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268269270271272273274275276277278279280281282283284285286287288289290291292293294295296297298299300301302303304305306307308309310
  1. .\" Automatically generated by Pod::Man 4.14 (Pod::Simple 3.42)
  2. .\"
  3. .\" Standard preamble:
  4. .\" ========================================================================
  5. .de Sp \" Vertical space (when we can't use .PP)
  6. .if t .sp .5v
  7. .if n .sp
  8. ..
  9. .de Vb \" Begin verbatim text
  10. .ft CW
  11. .nf
  12. .ne \\$1
  13. ..
  14. .de Ve \" End verbatim text
  15. .ft R
  16. .fi
  17. ..
  18. .\" Set up some character translations and predefined strings. \*(-- will
  19. .\" give an unbreakable dash, \*(PI will give pi, \*(L" will give a left
  20. .\" double quote, and \*(R" will give a right double quote. \*(C+ will
  21. .\" give a nicer C++. Capital omega is used to do unbreakable dashes and
  22. .\" therefore won't be available. \*(C` and \*(C' expand to `' in nroff,
  23. .\" nothing in troff, for use with C<>.
  24. .tr \(*W-
  25. .ds C+ C\v'-.1v'\h'-1p'\s-2+\h'-1p'+\s0\v'.1v'\h'-1p'
  26. .ie n \{\
  27. . ds -- \(*W-
  28. . ds PI pi
  29. . if (\n(.H=4u)&(1m=24u) .ds -- \(*W\h'-12u'\(*W\h'-12u'-\" diablo 10 pitch
  30. . if (\n(.H=4u)&(1m=20u) .ds -- \(*W\h'-12u'\(*W\h'-8u'-\" diablo 12 pitch
  31. . ds L" ""
  32. . ds R" ""
  33. . ds C` ""
  34. . ds C' ""
  35. 'br\}
  36. .el\{\
  37. . ds -- \|\(em\|
  38. . ds PI \(*p
  39. . ds L" ``
  40. . ds R" ''
  41. . ds C`
  42. . ds C'
  43. 'br\}
  44. .\"
  45. .\" Escape single quotes in literal strings from groff's Unicode transform.
  46. .ie \n(.g .ds Aq \(aq
  47. .el .ds Aq '
  48. .\"
  49. .\" If the F register is >0, we'll generate index entries on stderr for
  50. .\" titles (.TH), headers (.SH), subsections (.SS), items (.Ip), and index
  51. .\" entries marked with X<> in POD. Of course, you'll have to process the
  52. .\" output yourself in some meaningful fashion.
  53. .\"
  54. .\" Avoid warning from groff about undefined register 'F'.
  55. .de IX
  56. ..
  57. .nr rF 0
  58. .if \n(.g .if rF .nr rF 1
  59. .if (\n(rF:(\n(.g==0)) \{\
  60. . if \nF \{\
  61. . de IX
  62. . tm Index:\\$1\t\\n%\t"\\$2"
  63. ..
  64. . if !\nF==2 \{\
  65. . nr % 0
  66. . nr F 2
  67. . \}
  68. . \}
  69. .\}
  70. .rr rF
  71. .\"
  72. .\" Accent mark definitions (@(#)ms.acc 1.5 88/02/08 SMI; from UCB 4.2).
  73. .\" Fear. Run. Save yourself. No user-serviceable parts.
  74. . \" fudge factors for nroff and troff
  75. .if n \{\
  76. . ds #H 0
  77. . ds #V .8m
  78. . ds #F .3m
  79. . ds #[ \f1
  80. . ds #] \fP
  81. .\}
  82. .if t \{\
  83. . ds #H ((1u-(\\\\n(.fu%2u))*.13m)
  84. . ds #V .6m
  85. . ds #F 0
  86. . ds #[ \&
  87. . ds #] \&
  88. .\}
  89. . \" simple accents for nroff and troff
  90. .if n \{\
  91. . ds ' \&
  92. . ds ` \&
  93. . ds ^ \&
  94. . ds , \&
  95. . ds ~ ~
  96. . ds /
  97. .\}
  98. .if t \{\
  99. . ds ' \\k:\h'-(\\n(.wu*8/10-\*(#H)'\'\h"|\\n:u"
  100. . ds ` \\k:\h'-(\\n(.wu*8/10-\*(#H)'\`\h'|\\n:u'
  101. . ds ^ \\k:\h'-(\\n(.wu*10/11-\*(#H)'^\h'|\\n:u'
  102. . ds , \\k:\h'-(\\n(.wu*8/10)',\h'|\\n:u'
  103. . ds ~ \\k:\h'-(\\n(.wu-\*(#H-.1m)'~\h'|\\n:u'
  104. . ds / \\k:\h'-(\\n(.wu*8/10-\*(#H)'\z\(sl\h'|\\n:u'
  105. .\}
  106. . \" troff and (daisy-wheel) nroff accents
  107. .ds : \\k:\h'-(\\n(.wu*8/10-\*(#H+.1m+\*(#F)'\v'-\*(#V'\z.\h'.2m+\*(#F'.\h'|\\n:u'\v'\*(#V'
  108. .ds 8 \h'\*(#H'\(*b\h'-\*(#H'
  109. .ds o \\k:\h'-(\\n(.wu+\w'\(de'u-\*(#H)/2u'\v'-.3n'\*(#[\z\(de\v'.3n'\h'|\\n:u'\*(#]
  110. .ds d- \h'\*(#H'\(pd\h'-\w'~'u'\v'-.25m'\f2\(hy\fP\v'.25m'\h'-\*(#H'
  111. .ds D- D\\k:\h'-\w'D'u'\v'-.11m'\z\(hy\v'.11m'\h'|\\n:u'
  112. .ds th \*(#[\v'.3m'\s+1I\s-1\v'-.3m'\h'-(\w'I'u*2/3)'\s-1o\s+1\*(#]
  113. .ds Th \*(#[\s+2I\s-2\h'-\w'I'u*3/5'\v'-.3m'o\v'.3m'\*(#]
  114. .ds ae a\h'-(\w'a'u*4/10)'e
  115. .ds Ae A\h'-(\w'A'u*4/10)'E
  116. . \" corrections for vroff
  117. .if v .ds ~ \\k:\h'-(\\n(.wu*9/10-\*(#H)'\s-2\u~\d\s+2\h'|\\n:u'
  118. .if v .ds ^ \\k:\h'-(\\n(.wu*10/11-\*(#H)'\v'-.4m'^\v'.4m'\h'|\\n:u'
  119. . \" for low resolution devices (crt and lpr)
  120. .if \n(.H>23 .if \n(.V>19 \
  121. \{\
  122. . ds : e
  123. . ds 8 ss
  124. . ds o a
  125. . ds d- d\h'-1'\(ga
  126. . ds D- D\h'-1'\(hy
  127. . ds th \o'bp'
  128. . ds Th \o'LP'
  129. . ds ae ae
  130. . ds Ae AE
  131. .\}
  132. .rm #[ #] #H #V #F C
  133. .\" ========================================================================
  134. .\"
  135. .IX Title "X509_PUBKEY_NEW 3ossl"
  136. .TH X509_PUBKEY_NEW 3ossl "2024-09-03" "3.3.2" "OpenSSL"
  137. .\" For nroff, turn off justification. Always turn off hyphenation; it makes
  138. .\" way too many mistakes in technical documents.
  139. .if n .ad l
  140. .nh
  141. .SH "NAME"
  142. X509_PUBKEY_new_ex, X509_PUBKEY_new, X509_PUBKEY_free, X509_PUBKEY_dup,
  143. X509_PUBKEY_set, X509_PUBKEY_get0, X509_PUBKEY_get,
  144. d2i_PUBKEY_ex, d2i_PUBKEY, i2d_PUBKEY, d2i_PUBKEY_ex_bio, d2i_PUBKEY_bio,
  145. d2i_PUBKEY_ex_fp, d2i_PUBKEY_fp, i2d_PUBKEY_fp, i2d_PUBKEY_bio,
  146. X509_PUBKEY_set0_public_key, X509_PUBKEY_set0_param, X509_PUBKEY_get0_param,
  147. X509_PUBKEY_eq \- SubjectPublicKeyInfo public key functions
  148. .SH "SYNOPSIS"
  149. .IX Header "SYNOPSIS"
  150. .Vb 1
  151. \& #include <openssl/x509.h>
  152. \&
  153. \& X509_PUBKEY *X509_PUBKEY_new_ex(OSSL_LIB_CTX *libctx, const char *propq);
  154. \& X509_PUBKEY *X509_PUBKEY_new(void);
  155. \& void X509_PUBKEY_free(X509_PUBKEY *a);
  156. \& X509_PUBKEY *X509_PUBKEY_dup(const X509_PUBKEY *a);
  157. \&
  158. \& int X509_PUBKEY_set(X509_PUBKEY **x, EVP_PKEY *pkey);
  159. \& EVP_PKEY *X509_PUBKEY_get0(const X509_PUBKEY *key);
  160. \& EVP_PKEY *X509_PUBKEY_get(const X509_PUBKEY *key);
  161. \&
  162. \& EVP_PKEY *d2i_PUBKEY_ex(EVP_PKEY **a, const unsigned char **pp, long length,
  163. \& OSSL_LIB_CTX *libctx, const char *propq);
  164. \& EVP_PKEY *d2i_PUBKEY(EVP_PKEY **a, const unsigned char **pp, long length);
  165. \& int i2d_PUBKEY(const EVP_PKEY *a, unsigned char **pp);
  166. \&
  167. \& EVP_PKEY *d2i_PUBKEY_ex_bio(BIO *bp, EVP_PKEY **a, OSSL_LIB_CTX *libctx,
  168. \& const char *propq);
  169. \& EVP_PKEY *d2i_PUBKEY_bio(BIO *bp, EVP_PKEY **a);
  170. \&
  171. \& EVP_PKEY *d2i_PUBKEY_ex_fp(FILE *fp, EVP_PKEY **a, OSSL_LIB_CTX *libctx,
  172. \& const char *propq);
  173. \& EVP_PKEY *d2i_PUBKEY_fp(FILE *fp, EVP_PKEY **a);
  174. \&
  175. \& int i2d_PUBKEY_fp(const FILE *fp, EVP_PKEY *pkey);
  176. \& int i2d_PUBKEY_bio(BIO *bp, const EVP_PKEY *pkey);
  177. \&
  178. \& void X509_PUBKEY_set0_public_key(X509_PUBKEY *pub,
  179. \& unsigned char *penc, int penclen);
  180. \& int X509_PUBKEY_set0_param(X509_PUBKEY *pub, ASN1_OBJECT *aobj,
  181. \& int ptype, void *pval,
  182. \& unsigned char *penc, int penclen);
  183. \& int X509_PUBKEY_get0_param(ASN1_OBJECT **ppkalg,
  184. \& const unsigned char **pk, int *ppklen,
  185. \& X509_ALGOR **pa, const X509_PUBKEY *pub);
  186. \& int X509_PUBKEY_eq(X509_PUBKEY *a, X509_PUBKEY *b);
  187. .Ve
  188. .SH "DESCRIPTION"
  189. .IX Header "DESCRIPTION"
  190. The \fBX509_PUBKEY\fR structure represents the \s-1ASN.1\s0 \fBSubjectPublicKeyInfo\fR
  191. structure defined in \s-1RFC5280\s0 and used in certificates and certificate requests.
  192. .PP
  193. \&\fBX509_PUBKEY_new_ex()\fR allocates and initializes an \fBX509_PUBKEY\fR structure
  194. associated with the given \fB\s-1OSSL_LIB_CTX\s0\fR in the \fIlibctx\fR parameter. Any
  195. algorithm fetches associated with using the \fBX509_PUBKEY\fR object will use
  196. the property query string \fIpropq\fR. See \*(L"\s-1ALGORITHM FETCHING\*(R"\s0 in \fBcrypto\fR\|(7) for
  197. further information about algorithm fetching.
  198. .PP
  199. \&\fBX509_PUBKEY_new()\fR is the same as \fBX509_PUBKEY_new_ex()\fR except that the default
  200. (\s-1NULL\s0) \fB\s-1OSSL_LIB_CTX\s0\fR and a \s-1NULL\s0 property query string are used.
  201. .PP
  202. \&\fBX509_PUBKEY_dup()\fR creates a duplicate copy of the \fBX509_PUBKEY\fR object
  203. specified by \fIa\fR.
  204. .PP
  205. \&\fBX509_PUBKEY_free()\fR frees up \fBX509_PUBKEY\fR structure \fIa\fR. If \fIa\fR is \s-1NULL\s0
  206. nothing is done.
  207. .PP
  208. \&\fBX509_PUBKEY_set()\fR sets the public key in \fI*x\fR to the public key contained
  209. in the \fB\s-1EVP_PKEY\s0\fR structure \fIpkey\fR. If \fI*x\fR is not \s-1NULL\s0 any existing
  210. public key structure will be freed.
  211. .PP
  212. \&\fBX509_PUBKEY_get0()\fR returns the public key contained in \fIkey\fR. The returned
  213. value is an internal pointer which \fB\s-1MUST NOT\s0\fR be freed after use.
  214. .PP
  215. \&\fBX509_PUBKEY_get()\fR is similar to \fBX509_PUBKEY_get0()\fR except the reference
  216. count on the returned key is incremented so it \fB\s-1MUST\s0\fR be freed using
  217. \&\fBEVP_PKEY_free()\fR after use.
  218. .PP
  219. \&\fBd2i_PUBKEY_ex()\fR decodes an \fB\s-1EVP_PKEY\s0\fR structure using \fBSubjectPublicKeyInfo\fR
  220. format. Some public key decoding implementations may use cryptographic
  221. algorithms. In this case the supplied library context \fIlibctx\fR and property
  222. query string \fIpropq\fR are used.
  223. \&\fBd2i_PUBKEY()\fR does the same as \fBd2i_PUBKEY_ex()\fR except that the default
  224. library context and property query string are used.
  225. .PP
  226. \&\fBi2d_PUBKEY()\fR encodes an \fB\s-1EVP_PKEY\s0\fR structure using \fBSubjectPublicKeyInfo\fR
  227. format.
  228. .PP
  229. \&\fBd2i_PUBKEY_bio()\fR, \fBd2i_PUBKEY_fp()\fR, \fBi2d_PUBKEY_bio()\fR and \fBi2d_PUBKEY_fp()\fR are
  230. similar to \fBd2i_PUBKEY()\fR and \fBi2d_PUBKEY()\fR except they decode or encode using a
  231. \&\fB\s-1BIO\s0\fR or \fB\s-1FILE\s0\fR pointer.
  232. .PP
  233. \&\fBd2i_PUBKEY_ex_bio()\fR and \fBd2i_PUBKEY_ex_fp()\fR are similar to \fBd2i_PUBKEY_ex()\fR except
  234. they decode using a \fB\s-1BIO\s0\fR or \fB\s-1FILE\s0\fR pointer.
  235. .PP
  236. \&\fBX509_PUBKEY_set0_public_key()\fR sets the public-key encoding of \fIpub\fR
  237. to the \fIpenclen\fR bytes contained in buffer \fIpenc\fR.
  238. Any earlier public-key encoding in \fIpub\fR is freed.
  239. \&\fIpenc\fR may be \s-1NULL\s0 to indicate that there is no actual public key data.
  240. Ownership of the \fIpenc\fR argument is passed to \fIpub\fR.
  241. .PP
  242. \&\fBX509_PUBKEY_set0_param()\fR sets the public-key parameters of \fIpub\fR.
  243. The \s-1OID\s0 associated with the algorithm is set to \fIaobj\fR. The type of the
  244. algorithm parameters is set to \fItype\fR using the structure \fIpval\fR.
  245. If \fIpenc\fR is not \s-1NULL\s0 the encoding of the public key itself is set
  246. to the \fIpenclen\fR bytes contained in buffer \fIpenc\fR and
  247. any earlier public-key encoding in \fIpub\fR is freed.
  248. On success ownership of all the supplied arguments is passed to \fIpub\fR
  249. so they must not be freed after the call.
  250. .PP
  251. \&\fBX509_PUBKEY_get0_param()\fR retrieves the public key parameters from \fIpub\fR,
  252. \&\fI*ppkalg\fR is set to the associated \s-1OID\s0 and the encoding consists of
  253. \&\fI*ppklen\fR bytes at \fI*pk\fR, \fI*pa\fR is set to the associated
  254. AlgorithmIdentifier for the public key. If the value of any of these
  255. parameters is not required it can be set to \s-1NULL.\s0 All of the
  256. retrieved pointers are internal and must not be freed after the
  257. call.
  258. .PP
  259. \&\fBX509_PUBKEY_eq()\fR compares two \fBX509_PUBKEY\fR values.
  260. .SH "NOTES"
  261. .IX Header "NOTES"
  262. The \fBX509_PUBKEY\fR functions can be used to encode and decode public keys
  263. in a standard format.
  264. .PP
  265. In many cases applications will not call the \fBX509_PUBKEY\fR functions
  266. directly: they will instead call wrapper functions such as \fBX509_get0_pubkey()\fR.
  267. .SH "RETURN VALUES"
  268. .IX Header "RETURN VALUES"
  269. If the allocation fails, \fBX509_PUBKEY_new()\fR and \fBX509_PUBKEY_dup()\fR return
  270. \&\s-1NULL\s0 and set an error code that can be obtained by \fBERR_get_error\fR\|(3).
  271. Otherwise they return a pointer to the newly allocated structure.
  272. .PP
  273. \&\fBX509_PUBKEY_free()\fR does not return a value.
  274. .PP
  275. \&\fBX509_PUBKEY_get0()\fR, \fBX509_PUBKEY_get()\fR, \fBd2i_PUBKEY_ex()\fR, \fBd2i_PUBKEY()\fR,
  276. \&\fBd2i_PUBKEY_ex_bio()\fR, \fBd2i_PUBKEY_bio()\fR, \fBd2i_PUBKEY_ex_fp()\fR and \fBd2i_PUBKEY_fp()\fR
  277. return a pointer to an \fB\s-1EVP_PKEY\s0\fR structure or \s-1NULL\s0 if an error occurs.
  278. .PP
  279. \&\fBi2d_PUBKEY()\fR returns the number of bytes successfully encoded or a
  280. negative value if an error occurs.
  281. .PP
  282. \&\fBi2d_PUBKEY_fp()\fR and \fBi2d_PUBKEY_bio()\fR return 1 if successfully
  283. encoded or 0 if an error occurs.
  284. .PP
  285. \&\fBX509_PUBKEY_set0_public_key()\fR does not return a value.
  286. .PP
  287. \&\fBX509_PUBKEY_set()\fR, \fBX509_PUBKEY_set0_param()\fR and \fBX509_PUBKEY_get0_param()\fR
  288. return 1 for success and 0 if an error occurred.
  289. .PP
  290. \&\fBX509_PUBKEY_eq()\fR returns 1 for equal, 0 for different, and < 0 on error.
  291. .SH "SEE ALSO"
  292. .IX Header "SEE ALSO"
  293. \&\fBd2i_X509\fR\|(3),
  294. \&\fBERR_get_error\fR\|(3),
  295. \&\fBX509_get_pubkey\fR\|(3),
  296. .SH "HISTORY"
  297. .IX Header "HISTORY"
  298. The \fBX509_PUBKEY_new_ex()\fR and \fBX509_PUBKEY_eq()\fR functions were added in OpenSSL
  299. 3.0.
  300. .PP
  301. The \fBX509_PUBKEY_set0_public_key()\fR, \fBd2i_PUBKEY_ex_bio()\fR and \fBd2i_PUBKEY_ex_fp()\fR
  302. functions were added in OpenSSL 3.2.
  303. .SH "COPYRIGHT"
  304. .IX Header "COPYRIGHT"
  305. Copyright 2016\-2022 The OpenSSL Project Authors. All Rights Reserved.
  306. .PP
  307. Licensed under the Apache License 2.0 (the \*(L"License\*(R"). You may not use
  308. this file except in compliance with the License. You can obtain a copy
  309. in the file \s-1LICENSE\s0 in the source distribution or at
  310. <https://www.openssl.org/source/license.html>.