---
name: "gnutls_pkcs11_copy_x509_crt2"
section: "3"
platform: "linux"
package: "gnutls"
version: "3.8.13-3"
release: "Arch Linux 2026-11-01"
platforms: ["linux"]
url: "https://new.carta.tech/gnutls_pkcs11_copy_x509_crt2"
---

# gnutls\_pkcs11\_copy\_x509\_crt2(3)

API function

## NAME

gnutls\_pkcs11\_copy\_x509\_crt2 - API function

## SYNOPSIS

**#include \<gnutls/pkcs11.h\>**

**int gnutls\_pkcs11\_copy\_x509\_crt2(const char \*** *token\_url***, gnutls\_x509\_crt\_t** *crt***, const char \*** *label***, const gnutls\_datum\_t \*** *cid***, unsigned int** *flags***);**

## ARGUMENTS

- const char \* token\_url

  A PKCS **11** URL specifying a token

- gnutls\_x509\_crt\_t crt

  The certificate to copy

- const char \* label

  The name to be used for the stored data

- const gnutls\_datum\_t \* cid

  The CKA\_ID to set for the object -if NULL, the ID will be derived from the public key

- unsigned int flags

  One of GNUTLS\_PKCS11\_OBJ\_FLAG\_\*

## DESCRIPTION

This function will copy a certificate into a PKCS **11** token specified by a URL. Valid flags to mark the certificate: **GNUTLS\_PKCS11\_OBJ\_FLAG\_MARK\_TRUSTED**, **GNUTLS\_PKCS11\_OBJ\_FLAG\_MARK\_PRIVATE**, **GNUTLS\_PKCS11\_OBJ\_FLAG\_MARK\_CA**, **GNUTLS\_PKCS11\_OBJ\_FLAG\_MARK\_ALWAYS\_AUTH**.

## RETURNS

On success, **GNUTLS\_E\_SUCCESS** (0) is returned, otherwise a negative error value.

## SINCE

3\.4.0

## REPORTING BUGS

Report bugs to \<bugs@gnutls.org\>.\
 Home page: https://www.gnutls.org

## COPYRIGHT

Copyright © 2001-2023 Free Software Foundation, Inc., and others.\
 Copying and distribution of this file, with or without modification, are permitted in any medium without royalty provided the copyright notice and this notice are preserved.

## SEE ALSO

The full documentation for **gnutls** is maintained as a Texinfo manual. If the /usr/share/doc/gnutls/ directory does not contain the HTML form visit

- https://www.gnutls.org/manual/