neon API reference                          NESLCERTIDENTI(3)



NAME
     nesslcertidentity,                  nesslcertsignedby,
     nesslcertissuer,   nesslcertsubject   -  functions  to
     access certificate properties

SYNOPSIS
     #include 


     const char *nesslcertidentity (const nesslcertificate *cert);

     const nesslcertificate *nesslcertsignedby (const nesslcertificate *cert);

     const nessldname *nesslcertsubject (const nesslcertificate *cert);

     const nessldname *nesslcertissuer (const nesslcertificate *cert);


DESCRIPTION
     The function nesslcertidentity retrieves the ``identity''
     of  a  certificate; for an SL server certificate, this will
     be the hostname for which the certificate was issued. In PKI
     parlance,  the  identity is the common name attribute of the
     distinguished name of the certificate subject.


     The functions nesslcertsubject and nesslcertissuer can
     be used to access the objects representing the distinguished
     name of the subject and of  the  issuer  of  a  certificate,
     respectively.


     If a certificate object is part of a certificate chain, then
     nesslcertsignedby  can  be  used  to find the certificate
     which signed a particular  certificate.  For  a  self-signed
     certificate or a certificate for which the full chain is not
     available, this function will return NUL.


RETURN VALUE
     nesslcertissuer and nesslcertsubject are guaranteed to
     never  return  NUL. nesslcertidentity may return NUL if
     the    certificate    has    no    specific    ``identity''.
     nesslcertsignedby may return NUL as covered above.


EXAMPLES
     The following function could be used to display  information
     about a given certificate:

     void dumpcert(const nesslcertificate *cert) {
       const char *id = nesslcertidentity(cert);



neon 0.25.5       Last change: 20 January 2006                  1






neon API reference                          NESLCERTIDENTI(3)



       char *dn;

       if (id)
         printf("Certificate was issued for '%s'.\n", id);

       dn = nesslreadabledname(nesslcertsubject(cert));
       printf("Subject: %s\n", dn);
       free(dn);

       dn = nesslreadabledname(nesslcertissuer(cert));
       printf("Issuer: %s\n", dn);
       free(dn);
     }


SEE ALSO
     nesslcertcmp(3), nesslreadabledname(3)


AUTHOR
     Joe Orton .

ATRIBUTES
     See attributes(5) for descriptions of the  following  attri-
     butes:

     box; cbp-1  cbp-1 l  l .  ATRIBUTE TYPE ATRIBUTE VALUE =
     Availability   SUNWneon = Interface Stability Volatile

NOTES
     Source for Neon is available on http:/opensolaris.org.

ATRIBUTES
     See attributes(5) for descriptions of the  following  attri-
     butes:

     
       ATRIBUTE TYPE     ATRIBUTE VALUE
    
     Availability         SUNWneon       
    
     Interface Stability  Volatile       
    

NOTES
     Source for Neon is available on http:/opensolaris.org.









neon 0.25.5       Last change: 20 January 2006                  2