$NetBSD: X509_check_ca.3,v 1.9 2024/09/08 13:08:37 christos Exp $
-*- mode: troff; coding: utf-8 -*-
Automatically generated by Pod::Man 5.01 (Pod::Simple 3.43)
Standard preamble:
========================================================================
..
. ds C` "" . ds C' "" 'br\} . ds C` . ds C' 'br\}
Escape single quotes in literal strings from groff's Unicode transform.
If the F register is >0, we'll generate index entries on stderr for
titles (.TH), headers (.SH), subsections (.SS), items (.Ip), and index
entries marked with X<> in POD. Of course, you'll have to process the
output yourself in some meaningful fashion.
Avoid warning from groff about undefined register 'F'.
.. .nr rF 0 . if \nF \{\ . de IX . tm Index:\\$1\t\\n%\t"\\$2" .. . if !\nF==2 \{\ . nr % 0 . nr F 2 . \} . \} .\} .rr rF ========================================================================
Title "X509_check_ca 3"
way too many mistakes in technical documents.
-*- mode: troff; coding: utf-8 -*-
Automatically generated by Pod::Man 5.01 (Pod::Simple 3.43)
Standard preamble:
========================================================================
..
.... \*(C` and \*(C' are quotes in nroff, nothing in troff, for use with C<>.
. ds C` "" . ds C' "" 'br\} . ds C` . ds C' 'br\}
Escape single quotes in literal strings from groff's Unicode transform.
If the F register is >0, we'll generate index entries on stderr for
titles (.TH), headers (.SH), subsections (.SS), items (.Ip), and index
entries marked with X<> in POD. Of course, you'll have to process the
output yourself in some meaningful fashion.
Avoid warning from groff about undefined register 'F'.
.. .nr rF 0 . if \nF \{\ . de IX . tm Index:\\$1\t\\n%\t"\\$2" .. . if !\nF==2 \{\ . nr % 0 . nr F 2 . \} . \} .\} .rr rF ========================================================================
Title "X509_check_ca 3"
X509_check_ca 3 2024-09-03 3.0.15 OpenSSL
For nroff, turn off justification. Always turn off hyphenation; it makesway too many mistakes in technical documents.
NAME
X509_check_ca - check if given certificate is CA certificate
SYNOPSIS
Header "SYNOPSIS" .Vb 1
#include <openssl/x509v3.h>
\&
int X509_check_ca(X509 *cert);
.Ve
DESCRIPTION
Header "DESCRIPTION" This function checks if given certificate is CA certificate (can be used
to sign other certificates). The certificate must be a complete certificate
otherwise an error is returned.
"RETURN VALUES"
Header "RETURN VALUES" Function return 0, if it is not CA certificate, 1 if it is proper X509v3
CA certificate with basicConstraints extension CA:TRUE,
3, if it is self-signed X509 v1 certificate, 4, if it is certificate with
\fBkeyUsage extension with bit keyCertSign set, but without
\fBbasicConstraints, and 5 if it has outdated Netscape Certificate Type
extension telling that it is CA certificate.
This function will also return 0 on error.
Actually, any nonzero value means that this certificate could have been used to sign other certificates.
"SEE ALSO"
Header "SEE ALSO" \fBX509_verify_cert\|(3),
\fBX509_check_issued\|(3),
\fBX509_check_purpose\|(3)
COPYRIGHT
Header "COPYRIGHT" Copyright 2015-2021 The OpenSSL Project Authors. All Rights Reserved.
Licensed under the Apache License 2.0 (the "License"). You may not use this file except in compliance with the License. You can obtain a copy in the file LICENSE in the source distribution or at <https://www.openssl.org/source/license.html>.