deploy openssl/openssl@d51b96a to 3.3

3.3/man3/X509V3_set_ctx/index.html

@@ -14,4 +14,4 @@
 void X509V3_set_ctx(X509V3_CTX *ctx, X509 *issuer, X509 *subject,
                     X509_REQ *req, X509_CRL *crl, int flags);
 int X509V3_set_issuer_pkey(X509V3_CTX *ctx, EVP_PKEY *pkey);
-</code></pre></div><h2 id=description>DESCRIPTION<a class=headerlink href=#description title="Permanent link">&para;</a></h2><p>X509V3_set_ctx() fills in the basic fields of <em>ctx</em> of type <strong>X509V3_CTX</strong>, providing details potentially needed by functions producing X509 v3 extensions. These may make use of fields of the certificate <em>subject</em>, the certification request <em>req</em>, or the certificate revocation list <em>crl</em>. At most one of these three parameters can be non-NULL. When constructing the subject key identifier of a certificate by computing a hash value of its public key, the public key is taken from <em>subject</em> or <em>req</em>. Similarly, when constructing subject alternative names from any email addresses contained in a subject DN, the subject DN is taken from <em>subject</em> or <em>req</em>. If <em>subject</em> or <em>crl</em> is provided, <em>issuer</em> should point to its issuer, for instance as a reference for generating the authority key identifier extension. <em>issuer</em> may be the same pointer value as <em>subject</em> (which usually is an indication that the <em>subject</em> certificate is self-issued or even self-signed). In this case the fallback source for generating the authority key identifier extension will be taken from any value provided using X509V3_set_issuer_pkey(). <em>flags</em> may be 0 or contain <strong>X509V3_CTX_TEST</strong>, which means that just the syntax of extension definitions is to be checked without actually producing any extension, or <strong>X509V3_CTX_REPLACE</strong>, which means that each X.509v3 extension added as defined in some configuration section shall replace any already existing extension with the same OID.</p><p>X509V3_set_issuer_pkey() explicitly sets the issuer private key of the subject certificate that has been provided in <em>ctx</em>. This should be done in case the <em>issuer</em> and <em>subject</em> arguments to X509V3_set_ctx() have the same pointer value to provide fallback data for the authority key identifier extension.</p><h2 id=return-values>RETURN VALUES<a class=headerlink href=#return-values title="Permanent link">&para;</a></h2><p>X509V3_set_ctx() and X509V3_set_issuer_pkey() return 1 on success and 0 on error.</p><h2 id=see-also>SEE ALSO<a class=headerlink href=#see-also title="Permanent link">&para;</a></h2><p><a href=../X509v3_get_ext_by_NID/ >X509_add_ext(3)</a></p><h2 id=history>HISTORY<a class=headerlink href=#history title="Permanent link">&para;</a></h2><p>X509V3_set_issuer_pkey() was added in OpenSSL 3.0.</p><p>CTX_TEST was deprecated in OpenSSL 3.0; use X509V3_CTX_TEST instead.</p><h2 id=copyright>COPYRIGHT<a class=headerlink href=#copyright title="Permanent link">&para;</a></h2><p>Copyright 2015-2022 The OpenSSL Project Authors. All Rights Reserved.</p><p>Licensed under the Apache License 2.0 (the &quot;License&quot;). You may not use this file except in compliance with the License. You can obtain a copy in the file LICENSE in the source distribution or at <a href=https://www.openssl.org/source/license.html>https://www.openssl.org/source/license.html</a>.</p></article></div><script>var target=document.getElementById(location.hash.slice(1));target&&target.name&&(target.checked=target.name.startsWith("__tabbed_"))</script></div></main><footer class=md-footer><div class="md-footer-meta md-typeset"><div class="md-footer-meta__inner md-grid"><div class=md-copyright> Made with <a href=https://squidfunk.github.io/mkdocs-material/ target=_blank rel=noopener> Material for MkDocs </a></div></div></div></footer></div><div class=md-dialog data-md-component=dialog><div class="md-dialog__inner md-typeset"></div></div><script id=__config type=application/json>{"base": "../..", "features": ["navigation.indexes", "navigation.instant", "navigation.path", "navigation.prune", "navigation.tabs", "navigation.tabs.sticky", "navigation.tracking", "search.suggest", "toc.follow"], "search": "../../assets/javascripts/workers/search.b8dbb3d2.min.js", "translations": {"clipboard.copied": "Copied to clipboard", "clipboard.copy": "Copy to clipboard", "search.result.more.one": "1 more on this page", "search.result.more.other": "# more on this page", "search.result.none": "No matching documents", "search.result.one": "1 matching document", "search.result.other": "# matching documents", "search.result.placeholder": "Type to start searching", "search.result.term.missing": "Missing", "select.version": "Select version"}, "version": {"default": "master", "provider": "mike"}}</script><script src=../../assets/javascripts/bundle.ad660dcc.min.js></script></body></html>
+</code></pre></div><h2 id=description>DESCRIPTION<a class=headerlink href=#description title="Permanent link">&para;</a></h2><p>X509V3_set_ctx() fills in the basic fields of <em>ctx</em> of type <strong>X509V3_CTX</strong>, providing details potentially needed by functions producing X509 v3 extensions. These may make use of fields of the certificate <em>subject</em>, the certification request <em>req</em>, or the certificate revocation list <em>crl</em>. At most one of these three parameters can be non-NULL. When constructing the subject key identifier of a certificate by computing a hash value of its public key, the public key is taken from <em>subject</em> or <em>req</em>. Similarly, when constructing subject alternative names from any email addresses contained in a subject DN, the subject DN is taken from <em>subject</em> or <em>req</em>. If <em>subject</em> or <em>crl</em> is provided, <em>issuer</em> should point to its issuer, for instance as a reference for generating the authority key identifier extension. <em>issuer</em> may be the same pointer value as <em>subject</em> (which usually is an indication that the <em>subject</em> certificate is self-issued or even self-signed). In this case the fallback source for generating the authority key identifier extension will be taken from any value provided using X509V3_set_issuer_pkey(). <em>flags</em> may be 0 or contain <strong>X509V3_CTX_TEST</strong>, which means that just the syntax of extension definitions is to be checked without actually producing any extension, or <strong>X509V3_CTX_REPLACE</strong>, which means that each X.509v3 extension added as defined in some configuration section shall replace any already existing extension with the same OID.</p><p>X509V3_set_issuer_pkey() explicitly sets the issuer private key of the subject certificate that has been provided in <em>ctx</em>. This should be done in case the <em>issuer</em> and <em>subject</em> arguments to X509V3_set_ctx() have the same pointer value to provide fallback data for the authority key identifier extension.</p><h2 id=return-values>RETURN VALUES<a class=headerlink href=#return-values title="Permanent link">&para;</a></h2><p>X509V3_set_issuer_pkey() returns 1 on success and 0 on error.</p><h2 id=see-also>SEE ALSO<a class=headerlink href=#see-also title="Permanent link">&para;</a></h2><p><a href=../X509v3_get_ext_by_NID/ >X509_add_ext(3)</a></p><h2 id=history>HISTORY<a class=headerlink href=#history title="Permanent link">&para;</a></h2><p>X509V3_set_issuer_pkey() was added in OpenSSL 3.0.</p><p>CTX_TEST was deprecated in OpenSSL 3.0; use X509V3_CTX_TEST instead.</p><h2 id=copyright>COPYRIGHT<a class=headerlink href=#copyright title="Permanent link">&para;</a></h2><p>Copyright 2015-2022 The OpenSSL Project Authors. All Rights Reserved.</p><p>Licensed under the Apache License 2.0 (the &quot;License&quot;). You may not use this file except in compliance with the License. You can obtain a copy in the file LICENSE in the source distribution or at <a href=https://www.openssl.org/source/license.html>https://www.openssl.org/source/license.html</a>.</p></article></div><script>var target=document.getElementById(location.hash.slice(1));target&&target.name&&(target.checked=target.name.startsWith("__tabbed_"))</script></div></main><footer class=md-footer><div class="md-footer-meta md-typeset"><div class="md-footer-meta__inner md-grid"><div class=md-copyright> Made with <a href=https://squidfunk.github.io/mkdocs-material/ target=_blank rel=noopener> Material for MkDocs </a></div></div></div></footer></div><div class=md-dialog data-md-component=dialog><div class="md-dialog__inner md-typeset"></div></div><script id=__config type=application/json>{"base": "../..", "features": ["navigation.indexes", "navigation.instant", "navigation.path", "navigation.prune", "navigation.tabs", "navigation.tabs.sticky", "navigation.tracking", "search.suggest", "toc.follow"], "search": "../../assets/javascripts/workers/search.b8dbb3d2.min.js", "translations": {"clipboard.copied": "Copied to clipboard", "clipboard.copy": "Copy to clipboard", "search.result.more.one": "1 more on this page", "search.result.more.other": "# more on this page", "search.result.none": "No matching documents", "search.result.one": "1 matching document", "search.result.other": "# matching documents", "search.result.placeholder": "Type to start searching", "search.result.term.missing": "Missing", "select.version": "Select version"}, "version": {"default": "master", "provider": "mike"}}</script><script src=../../assets/javascripts/bundle.ad660dcc.min.js></script></body></html>