---
name: "libressl-DIST_POINT_new"
section: "3"
platform: "linux"
package: "libressl"
version: "4.4.0-1"
release: "Arch Linux 2026-11-01"
platforms: ["linux"]
url: "https://new.carta.tech/libressl-DIST_POINT_new"
---

# libressl-DIST\_POINT\_new(3)

X.509 CRL distribution point extensions

## NAME

**DIST\_POINT\_new**, **DIST\_POINT\_free**, **CRL\_DIST\_POINTS\_new**, **CRL\_DIST\_POINTS\_free**, **DIST\_POINT\_NAME\_new**, **DIST\_POINT\_NAME\_free**, **ISSUING\_DIST\_POINT\_new**, **ISSUING\_DIST\_POINT\_free** – X.509 CRL distribution point extensions

## SYNOPSIS

Crypto Library (libcrypto, -lcrypto)

**#include \<openssl/x509v3.h\>**

*DIST\_POINT* *\**\

**DIST\_POINT\_new**(*void*);

*void*\

**DIST\_POINT\_free**(*DIST\_POINT \*dp*);

*CRL\_DIST\_POINTS* *\**\

**CRL\_DIST\_POINTS\_new**(*void*);

*void*\

**CRL\_DIST\_POINTS\_free**(*CRL\_DIST\_POINTS \*dps*);

*DIST\_POINT\_NAME* *\**\

**DIST\_POINT\_NAME\_new**(*void*);

*void*\

**DIST\_POINT\_NAME\_free**(*DIST\_POINT\_NAME \*name*);

*ISSUING\_DIST\_POINT* *\**\

**ISSUING\_DIST\_POINT\_new**(*void*);

*void*\

**ISSUING\_DIST\_POINT\_free**(*ISSUING\_DIST\_POINT \*dp*);

## DESCRIPTION

Using the CRL distribution point extension, a certificate can specify where to obtain certificate revocation lists that might later revoke it.

**DIST\_POINT\_new**() allocates and initializes an empty *DIST\_POINT* object, representing an ASN.1 *DistributionPoint* structure defined in RFC 5280 section 4.2.1.13. It can hold issuer names, distribution point names, and reason flags. **DIST\_POINT\_free**() frees *dp*.

**CRL\_DIST\_POINTS\_new**() allocates and initializes an empty *CRL\_DIST\_POINTS* object, which is a *STACK\_OF(DIST\_POINT)* and represents the ASN.1 *CRLDistributionPoints* structure defined in RFC 5280 section 4.2.1.13. It can be used as an extension in *X509* and in *X509\_CRL* objects. **CRL\_DIST\_POINTS\_free**() frees *dps*.

**DIST\_POINT\_NAME\_new**() allocates and initializes an empty *DIST\_POINT\_NAME* object, representing an ASN.1 *DistributionPointName* structure defined in RFC 5280 section 4.2.1.13. It is used by the *DIST\_POINT* and *ISSUING\_DIST\_POINT* objects and can hold multiple names, each representing a different way to obtain the same CRL. **DIST\_POINT\_NAME\_free**() frees *name*.

**ISSUING\_DIST\_POINT\_new**() allocates and initializes an empty *ISSUING\_DIST\_POINT* object, representing an ASN.1 *IssuingDistributionPoint* structure defined in RFC 5280 section 5.2.5. Using this extension, a CRL can specify which distribution point it was issued from and which kinds of certificates and revocation reasons it covers. **ISSUING\_DIST\_POINT\_free**() frees *dp*.

## RETURN VALUES

**DIST\_POINT\_new**(), **CRL\_DIST\_POINTS\_new**(), **DIST\_POINT\_NAME\_new**(), and **ISSUING\_DIST\_POINT\_new**() return the new *DIST\_POINT*, *CRL\_DIST\_POINTS*, *DIST\_POINT\_NAME*, or *ISSUING\_DIST\_POINT* object, respectively, or NULL if an error occurs.

## SEE ALSO

d2i\_DIST\_POINT(3), GENERAL\_NAMES\_new(3), X509\_CRL\_new(3), X509\_EXTENSION\_new(3), X509\_NAME\_new(3), X509\_new(3)

## STANDARDS

RFC 5280: Internet X.509 Public Key Infrastructure Certificate and Certificate Revocation List (CRL) Profile:

- section 4.2.1.13: CRL Distribution Points

- section 5.2.5: Issuing Distribution Point

## HISTORY

**DIST\_POINT\_new**(), **DIST\_POINT\_free**(), **CRL\_DIST\_POINTS\_new**(), **CRL\_DIST\_POINTS\_free**(), **DIST\_POINT\_NAME\_new**(), and **DIST\_POINT\_NAME\_free**() first appeared in OpenSSL 0.9.3 and have been available since OpenBSD 2.6.

**ISSUING\_DIST\_POINT\_new**() and **ISSUING\_DIST\_POINT\_free**() first appeared in OpenSSL 1.0.0 and have been available since OpenBSD 4.9.