tls_config_set_keypair_file3
Tls certificate and key configuration
Part of tls_load_file(3).
Usage
uint8_t *
void
int
int
int
int
int
int
int
int
int
int
int
int
int
int
int
int
int
int
int
void
int
void
void
const char
*
Overview
tls_load_file() loads a certificate or key from disk into memory to be used with tls_config_set_ca_mem(), tls_config_set_cert_mem(), tls_config_set_crl_mem() or tls_config_set_key_mem(). A private key will be decrypted if the optional password argument is specified.
tls_unload_file() unloads the memory that was returned from an earlier tls_load_file() call, ensuring that the memory contents is discarded.
tls_default_ca_cert_file() returns the path of the file that contains the default root certificates.
tls_config_set_ca_file() loads a file containing the root certificates.
tls_config_set_ca_path() sets the path (directory) which should be searched for root certificates.
tls_config_set_ca_mem() sets the root certificates directly from memory.
tls_config_set_cert_file() loads a file containing the public certificate.
tls_config_set_cert_mem() sets the public certificate directly from memory.
tls_config_set_crl_file() loads a file containing the Certificate Revocation List (CRL).
tls_config_set_crl_mem() sets the CRL directly from memory.
tls_config_set_key_file() loads a file containing the private key.
tls_config_set_key_mem() directly sets the private key from memory.
tls_config_set_ocsp_staple_file() loads a file containing a DER-encoded OCSP response to be stapled during the TLS handshake.
tls_config_set_ocsp_staple_mem() sets a DER-encoded OCSP response to be stapled during the TLS handshake from memory.
tls_config_set_keypair_file() loads two files from which the public certificate and private key will be read.
tls_config_set_keypair_mem() directly sets the public certificate and private key from memory.
tls_config_set_keypair_ocsp_file() loads three files containing the public certificate, private key, and DER-encoded OCSP staple.
tls_config_set_keypair_ocsp_mem() directly sets the public certificate, private key, and DER-encoded OCSP staple from memory.
tls_config_add_keypair_file() adds an additional public certificate and private key from the specified files, used as an alternative certificate for Server Name Indication (server only).
tls_config_add_keypair_mem() adds an additional public certificate and private key from memory, used as an alternative certificate for Server Name Indication (server only).
tls_config_add_keypair_ocsp_file() adds an additional public certificate, private key, and DER-encoded OCSP staple from the specified files, used as an alternative certificate for Server Name Indication (server only).
tls_config_add_keypair_ocsp_mem() adds an additional public certificate, private key, and DER-encoded OCSP staple from memory, used as an alternative certificate for Server Name Indication (server only).
tls_config_clear_keys() clears any secret keys from memory.
tls_config_set_verify_depth() limits the number of intermediate certificates that will be followed during certificate validation.
tls_config_verify_client() enables client certificate verification, requiring the client to send a certificate (server only).
tls_config_verify_client_optional() enables client certificate verification, without requiring the client to send a certificate (server only).
Return values
tls_load_file() returns NULL on error or an out of memory condition.
The other functions return 0 on success or -1 on error.