| 123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268269270271272273274275276277278279280281282283284285286287288289290291292293294295296297298299300301302303304305306307308309310311312313314315316317318319320321322323324325326327328329330331332333334335336337338339340341342343344345346347348349350351352353354355356357358359360361362363364365366367368369370371372373374375376377378379380381382383384385386387388389390391392393394395396397398399400401402403404405406407408409410411412413414415416417418419420421422423424425426427428429430431432433434435436437438439440441442443444445446447448449450451452453454455456457458459460461462463464465466467468469470471472473474475476477478479480481482483484485486487488489490491492493494495496497498499500501502503504505506507508509510511512 |
- .\" -*- mode: troff; coding: utf-8 -*-
- .\" Automatically generated by Pod::Man 5.01 (Pod::Simple 3.43)
- .\"
- .\" Standard preamble:
- .\" ========================================================================
- .de Sp \" Vertical space (when we can't use .PP)
- .if t .sp .5v
- .if n .sp
- ..
- .de Vb \" Begin verbatim text
- .ft CW
- .nf
- .ne \\$1
- ..
- .de Ve \" End verbatim text
- .ft R
- .fi
- ..
- .\" \*(C` and \*(C' are quotes in nroff, nothing in troff, for use with C<>.
- .ie n \{\
- . ds C` ""
- . ds C' ""
- 'br\}
- .el\{\
- . ds C`
- . ds C'
- 'br\}
- .\"
- .\" Escape single quotes in literal strings from groff's Unicode transform.
- .ie \n(.g .ds Aq \(aq
- .el .ds Aq '
- .\"
- .\" If the F register is >0, we'll generate index entries on stderr for
- .\" titles (.TH), headers (.SH), subsections (.SS), items (.Ip), and index
- .\" entries marked with X<> in POD. Of course, you'll have to process the
- .\" output yourself in some meaningful fashion.
- .\"
- .\" Avoid warning from groff about undefined register 'F'.
- .de IX
- ..
- .nr rF 0
- .if \n(.g .if rF .nr rF 1
- .if (\n(rF:(\n(.g==0)) \{\
- . if \nF \{\
- . de IX
- . tm Index:\\$1\t\\n%\t"\\$2"
- ..
- . if !\nF==2 \{\
- . nr % 0
- . nr F 2
- . \}
- . \}
- .\}
- .rr rF
- .\" ========================================================================
- .\"
- .IX Title "X509_DUP 3ossl"
- .TH X509_DUP 3ossl 2025-01-17 3.4.0 OpenSSL
- .\" For nroff, turn off justification. Always turn off hyphenation; it makes
- .\" way too many mistakes in technical documents.
- .if n .ad l
- .nh
- .SH NAME
- DECLARE_ASN1_FUNCTIONS,
- IMPLEMENT_ASN1_FUNCTIONS,
- ASN1_ITEM,
- ACCESS_DESCRIPTION_free,
- ACCESS_DESCRIPTION_new,
- ADMISSIONS_free,
- ADMISSIONS_new,
- ADMISSION_SYNTAX_free,
- ADMISSION_SYNTAX_new,
- ASIdOrRange_free,
- ASIdOrRange_new,
- ASIdentifierChoice_free,
- ASIdentifierChoice_new,
- ASIdentifiers_free,
- ASIdentifiers_new,
- ASRange_free,
- ASRange_new,
- AUTHORITY_INFO_ACCESS_free,
- AUTHORITY_INFO_ACCESS_new,
- AUTHORITY_KEYID_free,
- AUTHORITY_KEYID_new,
- BASIC_CONSTRAINTS_free,
- BASIC_CONSTRAINTS_new,
- CERTIFICATEPOLICIES_free,
- CERTIFICATEPOLICIES_new,
- CMS_ContentInfo_free,
- CMS_ContentInfo_new,
- CMS_ContentInfo_new_ex,
- CMS_ContentInfo_print_ctx,
- CMS_EnvelopedData_it,
- CMS_ReceiptRequest_free,
- CMS_ReceiptRequest_new,
- CMS_SignedData_free,
- CMS_SignedData_new,
- CRL_DIST_POINTS_free,
- CRL_DIST_POINTS_new,
- DIRECTORYSTRING_free,
- DIRECTORYSTRING_new,
- DISPLAYTEXT_free,
- DISPLAYTEXT_new,
- DIST_POINT_NAME_free,
- DIST_POINT_NAME_new,
- DIST_POINT_NAME_dup,
- DIST_POINT_free,
- DIST_POINT_new,
- DSAparams_dup,
- ECPARAMETERS_free,
- ECPARAMETERS_new,
- ECPKPARAMETERS_free,
- ECPKPARAMETERS_new,
- EDIPARTYNAME_free,
- EDIPARTYNAME_new,
- ESS_CERT_ID_dup,
- ESS_CERT_ID_free,
- ESS_CERT_ID_new,
- ESS_CERT_ID_V2_dup,
- ESS_CERT_ID_V2_free,
- ESS_CERT_ID_V2_new,
- ESS_ISSUER_SERIAL_dup,
- ESS_ISSUER_SERIAL_free,
- ESS_ISSUER_SERIAL_new,
- ESS_SIGNING_CERT_dup,
- ESS_SIGNING_CERT_free,
- ESS_SIGNING_CERT_it,
- ESS_SIGNING_CERT_new,
- ESS_SIGNING_CERT_V2_dup,
- ESS_SIGNING_CERT_V2_free,
- ESS_SIGNING_CERT_V2_it,
- ESS_SIGNING_CERT_V2_new,
- EXTENDED_KEY_USAGE_free,
- EXTENDED_KEY_USAGE_new,
- GENERAL_NAMES_free,
- GENERAL_NAMES_new,
- GENERAL_NAME_dup,
- GENERAL_NAME_free,
- GENERAL_NAME_new,
- GENERAL_SUBTREE_free,
- GENERAL_SUBTREE_new,
- OSSL_IETF_ATTR_SYNTAX_free,
- OSSL_IETF_ATTR_SYNTAX_it,
- OSSL_IETF_ATTR_SYNTAX_new,
- IPAddressChoice_free,
- IPAddressChoice_new,
- IPAddressFamily_free,
- IPAddressFamily_new,
- IPAddressOrRange_free,
- IPAddressOrRange_new,
- IPAddressRange_free,
- IPAddressRange_new,
- ISSUER_SIGN_TOOL_free,
- ISSUER_SIGN_TOOL_it,
- ISSUER_SIGN_TOOL_new,
- ISSUING_DIST_POINT_free,
- ISSUING_DIST_POINT_it,
- ISSUING_DIST_POINT_new,
- NAME_CONSTRAINTS_free,
- NAME_CONSTRAINTS_new,
- NAMING_AUTHORITY_free,
- NAMING_AUTHORITY_new,
- NETSCAPE_CERT_SEQUENCE_free,
- NETSCAPE_CERT_SEQUENCE_new,
- NETSCAPE_SPKAC_free,
- NETSCAPE_SPKAC_new,
- NETSCAPE_SPKI_free,
- NETSCAPE_SPKI_new,
- NOTICEREF_free,
- NOTICEREF_new,
- OCSP_BASICRESP_free,
- OCSP_BASICRESP_new,
- OCSP_CERTID_dup,
- OCSP_CERTID_new,
- OCSP_CERTSTATUS_free,
- OCSP_CERTSTATUS_new,
- OCSP_CRLID_free,
- OCSP_CRLID_new,
- OCSP_ONEREQ_free,
- OCSP_ONEREQ_new,
- OCSP_REQINFO_free,
- OCSP_REQINFO_new,
- OCSP_RESPBYTES_free,
- OCSP_RESPBYTES_new,
- OCSP_RESPDATA_free,
- OCSP_RESPDATA_new,
- OCSP_RESPID_free,
- OCSP_RESPID_new,
- OCSP_RESPONSE_new,
- OCSP_REVOKEDINFO_free,
- OCSP_REVOKEDINFO_new,
- OCSP_SERVICELOC_free,
- OCSP_SERVICELOC_new,
- OCSP_SIGNATURE_free,
- OCSP_SIGNATURE_new,
- OCSP_SINGLERESP_free,
- OCSP_SINGLERESP_new,
- OSSL_ATTRIBUTES_SYNTAX_free,
- OSSL_ATTRIBUTES_SYNTAX_it,
- OSSL_ATTRIBUTES_SYNTAX_new,
- OSSL_BASIC_ATTR_CONSTRAINTS_free,
- OSSL_BASIC_ATTR_CONSTRAINTS_it,
- OSSL_BASIC_ATTR_CONSTRAINTS_new,
- OSSL_CMP_ATAVS_new,
- OSSL_CMP_ATAVS_free,
- OSSL_CMP_ATAVS_it,
- OSSL_CMP_CRLSTATUS_free,
- OSSL_CMP_ITAV_dup,
- OSSL_CMP_ITAV_free,
- OSSL_CMP_MSG_dup,
- OSSL_CMP_MSG_it,
- OSSL_CMP_MSG_free,
- OSSL_CMP_PKIHEADER_free,
- OSSL_CMP_PKIHEADER_it,
- OSSL_CMP_PKIHEADER_new,
- OSSL_CMP_PKISI_dup,
- OSSL_CMP_PKISI_free,
- OSSL_CMP_PKISI_it,
- OSSL_CMP_PKISI_new,
- OSSL_CMP_PKISTATUS_it,
- OSSL_CRMF_CERTID_dup,
- OSSL_CRMF_CERTID_free,
- OSSL_CRMF_CERTID_it,
- OSSL_CRMF_CERTID_new,
- OSSL_CRMF_CERTTEMPLATE_free,
- OSSL_CRMF_CERTTEMPLATE_it,
- OSSL_CRMF_CERTTEMPLATE_new,
- OSSL_CRMF_CERTTEMPLATE_dup,
- OSSL_CRMF_ATTRIBUTETYPEANDVALUE_dup,
- OSSL_CRMF_ATTRIBUTETYPEANDVALUE_free,
- OSSL_CRMF_ENCRYPTEDVALUE_free,
- OSSL_CRMF_ENCRYPTEDVALUE_it,
- OSSL_CRMF_ENCRYPTEDVALUE_new,
- OSSL_CRMF_MSGS_free,
- OSSL_CRMF_MSGS_it,
- OSSL_CRMF_MSGS_new,
- OSSL_CRMF_MSG_dup,
- OSSL_CRMF_MSG_free,
- OSSL_CRMF_MSG_it,
- OSSL_CRMF_MSG_new,
- OSSL_CRMF_PBMPARAMETER_free,
- OSSL_CRMF_PBMPARAMETER_it,
- OSSL_CRMF_PBMPARAMETER_new,
- OSSL_CRMF_PKIPUBLICATIONINFO_free,
- OSSL_CRMF_PKIPUBLICATIONINFO_it,
- OSSL_CRMF_PKIPUBLICATIONINFO_new,
- OSSL_CRMF_SINGLEPUBINFO_free,
- OSSL_CRMF_SINGLEPUBINFO_it,
- OSSL_CRMF_SINGLEPUBINFO_new,
- OSSL_TARGET_CERT_free,
- OSSL_TARGET_CERT_it,
- OSSL_TARGET_CERT_new,
- OSSL_TARGET_free,
- OSSL_TARGET_it,
- OSSL_TARGET_new,
- OSSL_TARGETING_INFORMATION_free,
- OSSL_TARGETING_INFORMATION_it,
- OSSL_TARGETING_INFORMATION_new,
- OSSL_TARGETS_free,
- OSSL_TARGETS_it,
- OSSL_TARGETS_new,
- OSSL_IETF_ATTR_SYNTAX_VALUE_free,
- OSSL_IETF_ATTR_SYNTAX_VALUE_it,
- OSSL_IETF_ATTR_SYNTAX_VALUE_new,
- OSSL_ISSUER_SERIAL_free,
- OSSL_ISSUER_SERIAL_new,
- OSSL_OBJECT_DIGEST_INFO_free,
- OSSL_OBJECT_DIGEST_INFO_new,
- OSSL_USER_NOTICE_SYNTAX_free,
- OSSL_USER_NOTICE_SYNTAX_new,
- OSSL_USER_NOTICE_SYNTAX_it,
- OTHERNAME_free,
- OTHERNAME_new,
- PBE2PARAM_free,
- PBE2PARAM_new,
- PBEPARAM_free,
- PBEPARAM_new,
- PBKDF2PARAM_free,
- PBKDF2PARAM_new,
- PBMAC1PARAM_free,
- PBMAC1PARAM_it,
- PBMAC1PARAM_new,
- PKCS12_BAGS_free,
- PKCS12_BAGS_new,
- PKCS12_MAC_DATA_free,
- PKCS12_MAC_DATA_new,
- PKCS12_SAFEBAG_free,
- PKCS12_SAFEBAG_new,
- PKCS12_free,
- PKCS12_new,
- PKCS7_DIGEST_free,
- PKCS7_DIGEST_new,
- PKCS7_ENCRYPT_free,
- PKCS7_ENCRYPT_new,
- PKCS7_ENC_CONTENT_free,
- PKCS7_ENC_CONTENT_new,
- PKCS7_ENVELOPE_free,
- PKCS7_ENVELOPE_new,
- PKCS7_ISSUER_AND_SERIAL_free,
- PKCS7_ISSUER_AND_SERIAL_new,
- PKCS7_RECIP_INFO_free,
- PKCS7_RECIP_INFO_new,
- PKCS7_SIGNED_free,
- PKCS7_SIGNED_new,
- PKCS7_SIGNER_INFO_free,
- PKCS7_SIGNER_INFO_new,
- PKCS7_SIGN_ENVELOPE_free,
- PKCS7_SIGN_ENVELOPE_new,
- PKCS7_dup,
- PKCS7_free,
- PKCS7_new_ex,
- PKCS7_new,
- PKCS7_print_ctx,
- PKCS8_PRIV_KEY_INFO_free,
- PKCS8_PRIV_KEY_INFO_new,
- PKEY_USAGE_PERIOD_free,
- PKEY_USAGE_PERIOD_new,
- POLICYINFO_free,
- POLICYINFO_new,
- POLICYQUALINFO_free,
- POLICYQUALINFO_new,
- POLICY_CONSTRAINTS_free,
- POLICY_CONSTRAINTS_new,
- POLICY_MAPPING_free,
- POLICY_MAPPING_new,
- PROFESSION_INFOS_free,
- PROFESSION_INFOS_new,
- PROFESSION_INFO_free,
- PROFESSION_INFO_new,
- PROXY_CERT_INFO_EXTENSION_free,
- PROXY_CERT_INFO_EXTENSION_new,
- PROXY_POLICY_free,
- PROXY_POLICY_new,
- RSAPrivateKey_dup,
- RSAPublicKey_dup,
- RSA_OAEP_PARAMS_free,
- RSA_OAEP_PARAMS_new,
- RSA_PSS_PARAMS_free,
- RSA_PSS_PARAMS_new,
- RSA_PSS_PARAMS_dup,
- SCRYPT_PARAMS_free,
- SCRYPT_PARAMS_new,
- SXNETID_free,
- SXNETID_new,
- SXNET_free,
- SXNET_new,
- TLS_FEATURE_free,
- TLS_FEATURE_new,
- TS_ACCURACY_dup,
- TS_ACCURACY_free,
- TS_ACCURACY_new,
- TS_MSG_IMPRINT_dup,
- TS_MSG_IMPRINT_free,
- TS_MSG_IMPRINT_new,
- TS_REQ_dup,
- TS_REQ_free,
- TS_REQ_new,
- TS_RESP_dup,
- TS_RESP_free,
- TS_RESP_new,
- TS_STATUS_INFO_dup,
- TS_STATUS_INFO_free,
- TS_STATUS_INFO_new,
- TS_TST_INFO_dup,
- TS_TST_INFO_free,
- TS_TST_INFO_new,
- USERNOTICE_free,
- USERNOTICE_new,
- X509_ACERT_dup,
- X509_ACERT_free,
- X509_ACERT_it,
- X509_ACERT_new,
- X509_ACERT_INFO_free,
- X509_ACERT_INFO_it,
- X509_ACERT_INFO_new,
- X509_ACERT_ISSUER_V2FORM_free,
- X509_ACERT_ISSUER_V2FORM_new,
- X509_ALGOR_free,
- X509_ALGOR_it,
- X509_ALGOR_new,
- X509_ATTRIBUTE_dup,
- X509_ATTRIBUTE_free,
- X509_ATTRIBUTE_new,
- X509_CERT_AUX_free,
- X509_CERT_AUX_new,
- X509_CINF_free,
- X509_CINF_new,
- X509_CRL_INFO_free,
- X509_CRL_INFO_new,
- X509_CRL_dup,
- X509_CRL_free,
- X509_CRL_new_ex,
- X509_CRL_new,
- X509_EXTENSION_dup,
- X509_EXTENSION_free,
- X509_EXTENSION_new,
- X509_NAME_ENTRY_dup,
- X509_NAME_ENTRY_free,
- X509_NAME_ENTRY_new,
- X509_NAME_dup,
- X509_NAME_free,
- X509_NAME_new,
- X509_REQ_INFO_free,
- X509_REQ_INFO_new,
- X509_REQ_dup,
- X509_REQ_free,
- X509_REQ_new,
- X509_REQ_new_ex,
- X509_REVOKED_dup,
- X509_REVOKED_free,
- X509_REVOKED_new,
- X509_SIG_free,
- X509_SIG_new,
- X509_VAL_free,
- X509_VAL_new,
- X509_dup,
- \&\- ASN1 object utilities
- .SH SYNOPSIS
- .IX Header "SYNOPSIS"
- .Vb 1
- \& #include <openssl/asn1t.h>
- \&
- \& DECLARE_ASN1_FUNCTIONS(type)
- \& IMPLEMENT_ASN1_FUNCTIONS(stname)
- \&
- \& typedef struct ASN1_ITEM_st ASN1_ITEM;
- \&
- \& extern const ASN1_ITEM TYPE_it;
- \& TYPE *TYPE_new(void);
- \& TYPE *TYPE_dup(const TYPE *a);
- \& void TYPE_free(TYPE *a);
- \& int TYPE_print_ctx(BIO *out, TYPE *a, int indent, const ASN1_PCTX *pctx);
- .Ve
- .PP
- The following functions have been deprecated since OpenSSL 3.0, and can be
- hidden entirely by defining \fBOPENSSL_API_COMPAT\fR with a suitable version value,
- see \fBopenssl_user_macros\fR\|(7):
- .PP
- .Vb 3
- \& DSA *DSAparams_dup(const DSA *dsa);
- \& RSA *RSAPrivateKey_dup(const RSA *rsa);
- \& RSA *RSAPublicKey_dup(const RSA *rsa);
- .Ve
- .SH DESCRIPTION
- .IX Header "DESCRIPTION"
- In the description below, \fR\f(BITYPE\fR\fB\fR is used
- as a placeholder for any of the OpenSSL datatypes, such as \fBX509\fR.
- .PP
- The OpenSSL ASN1 parsing library templates are like a data-driven bytecode
- interpreter.
- Every ASN1 object as a global variable, TYPE_it, that describes the item
- such as its fields. (On systems which cannot export variables from shared
- libraries, the global is instead a function which returns a pointer to a
- static variable.
- .PP
- The macro \fBDECLARE_ASN1_FUNCTIONS()\fR is typically used in header files
- to generate the function declarations.
- .PP
- The macro \fBIMPLEMENT_ASN1_FUNCTIONS()\fR is used once in a source file
- to generate the function bodies.
- .PP
- \&\fR\f(BITYPE\fR\fB_new\fR() allocates an empty object of the indicated type.
- The object returned must be released by calling \fB\fR\f(BITYPE\fR\fB_free\fR().
- .PP
- \&\fR\f(BITYPE\fR\fB_new_ex\fR() is similar to \fB\fR\f(BITYPE\fR\fB_new\fR() but also passes the
- library context \fIlibctx\fR and the property query \fIpropq\fR to use when retrieving
- algorithms from providers. This created object can then be used when loading
- binary data using \fBd2i_\fR\f(BITYPE\fR\fB\fR().
- .PP
- \&\fR\f(BITYPE\fR\fB_dup\fR() copies an existing object, leaving it untouched.
- Note, however, that the internal representation of the object
- may contain (besides the ASN.1 structure) further data, which is not copied.
- For instance, an \fBX509\fR object usually is augmented by cached information
- on X.509v3 extensions, etc., and losing it can lead to wrong validation results.
- To avoid such situations, better use \fB\fR\f(BITYPE\fR\fB_up_ref\fR() if available.
- For the case of \fBX509\fR objects, an alternative to using \fBX509_up_ref\fR\|(3)
- may be to still call \fB\fR\f(BITYPE\fR\fB_dup\fR(), e.g., \fIcopied_cert = X509_dup(cert)\fR,
- followed by \fIX509_check_purpose(copied_cert, \-1, 0)\fR,
- which re-builds the cached data.
- .PP
- \&\fR\f(BITYPE\fR\fB_free\fR() releases the object and all pointers and sub-objects
- within it. If the argument is NULL, nothing is done.
- .PP
- \&\fR\f(BITYPE\fR\fB_print_ctx\fR() prints the object \fIa\fR on the specified BIO \fIout\fR.
- Each line will be prefixed with \fIindent\fR spaces.
- The \fIpctx\fR specifies the printing context and is for internal
- use; use NULL to get the default behavior. If a print function is
- user-defined, then pass in any \fIpctx\fR down to any nested calls.
- .SH "RETURN VALUES"
- .IX Header "RETURN VALUES"
- \&\fR\f(BITYPE\fR\fB_new\fR(), \fB\fR\f(BITYPE\fR\fB_new_ex\fR() and \fB\fR\f(BITYPE\fR\fB_dup\fR() return a pointer to
- the object or NULL on failure.
- .PP
- \&\fR\f(BITYPE\fR\fB_print_ctx\fR() returns 1 on success or zero on failure.
- .SH "SEE ALSO"
- .IX Header "SEE ALSO"
- \&\fBX509_up_ref\fR\|(3)
- .SH HISTORY
- .IX Header "HISTORY"
- The functions \fBX509_REQ_new_ex()\fR, \fBX509_CRL_new_ex()\fR, \fBPKCS7_new_ex()\fR and
- \&\fBCMS_ContentInfo_new_ex()\fR were added in OpenSSL 3.0.
- .PP
- The functions \fBDSAparams_dup()\fR, \fBRSAPrivateKey_dup()\fR and \fBRSAPublicKey_dup()\fR were
- deprecated in 3.0.
- .SH COPYRIGHT
- .IX Header "COPYRIGHT"
- Copyright 2016\-2024 The OpenSSL Project Authors. All Rights Reserved.
- .PP
- Licensed under the Apache License 2.0 (the "License"). You may not use
- this file except in compliance with the License. You can obtain a copy
- in the file LICENSE in the source distribution or at
- <https://www.openssl.org/source/license.html>.
|