X509_PUBKEY_new.pod 5.8 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150
  1. =pod
  2. =head1 NAME
  3. X509_PUBKEY_new_ex, X509_PUBKEY_new, X509_PUBKEY_free, X509_PUBKEY_dup,
  4. X509_PUBKEY_set, X509_PUBKEY_get0, X509_PUBKEY_get,
  5. d2i_PUBKEY_ex, d2i_PUBKEY, i2d_PUBKEY, d2i_PUBKEY_bio, d2i_PUBKEY_fp,
  6. i2d_PUBKEY_fp, i2d_PUBKEY_bio, X509_PUBKEY_set0_param, X509_PUBKEY_get0_param,
  7. X509_PUBKEY_eq - SubjectPublicKeyInfo public key functions
  8. =head1 SYNOPSIS
  9. #include <openssl/x509.h>
  10. X509_PUBKEY *X509_PUBKEY_new_ex(OSSL_LIB_CTX *libctx, const char *propq);
  11. X509_PUBKEY *X509_PUBKEY_new(void);
  12. void X509_PUBKEY_free(X509_PUBKEY *a);
  13. X509_PUBKEY *X509_PUBKEY_dup(const X509_PUBKEY *a);
  14. int X509_PUBKEY_set(X509_PUBKEY **x, EVP_PKEY *pkey);
  15. EVP_PKEY *X509_PUBKEY_get0(const X509_PUBKEY *key);
  16. EVP_PKEY *X509_PUBKEY_get(const X509_PUBKEY *key);
  17. EVP_PKEY *d2i_PUBKEY_ex(EVP_PKEY **a, const unsigned char **pp, long length,
  18. OSSL_LIB_CTX *libctx, const char *propq);
  19. EVP_PKEY *d2i_PUBKEY(EVP_PKEY **a, const unsigned char **pp, long length);
  20. int i2d_PUBKEY(const EVP_PKEY *a, unsigned char **pp);
  21. EVP_PKEY *d2i_PUBKEY_bio(BIO *bp, EVP_PKEY **a);
  22. EVP_PKEY *d2i_PUBKEY_fp(FILE *fp, EVP_PKEY **a);
  23. int i2d_PUBKEY_fp(const FILE *fp, EVP_PKEY *pkey);
  24. int i2d_PUBKEY_bio(BIO *bp, const EVP_PKEY *pkey);
  25. int X509_PUBKEY_set0_param(X509_PUBKEY *pub, ASN1_OBJECT *aobj,
  26. int ptype, void *pval,
  27. unsigned char *penc, int penclen);
  28. int X509_PUBKEY_get0_param(ASN1_OBJECT **ppkalg,
  29. const unsigned char **pk, int *ppklen,
  30. X509_ALGOR **pa, const X509_PUBKEY *pub);
  31. int X509_PUBKEY_eq(X509_PUBKEY *a, X509_PUBKEY *b);
  32. =head1 DESCRIPTION
  33. The B<X509_PUBKEY> structure represents the ASN.1 B<SubjectPublicKeyInfo>
  34. structure defined in RFC5280 and used in certificates and certificate requests.
  35. X509_PUBKEY_new_ex() allocates and initializes an B<X509_PUBKEY> structure
  36. associated with the given B<OSSL_LIB_CTX> in the I<libctx> parameter. Any
  37. algorithm fetches associated with using the B<X509_PUBKEY> object will use
  38. the property query string I<propq>. See L<crypto(7)/ALGORITHM FETCHING> for
  39. further information about algorithm fetching.
  40. X509_PUBKEY_new() is the same as X509_PUBKEY_new_ex() except that the default
  41. (NULL) B<OSSL_LIB_CTX> and a NULL property query string are used.
  42. X509_PUBKEY_dup() creates a duplicate copy of the B<X509_PUBKEY> object
  43. specified by I<a>.
  44. X509_PUBKEY_free() frees up B<X509_PUBKEY> structure I<a>. If I<a> is NULL
  45. nothing is done.
  46. X509_PUBKEY_set() sets the public key in I<*x> to the public key contained
  47. in the B<EVP_PKEY> structure I<pkey>. If I<*x> is not NULL any existing
  48. public key structure will be freed.
  49. X509_PUBKEY_get0() returns the public key contained in I<key>. The returned
  50. value is an internal pointer which B<MUST NOT> be freed after use.
  51. X509_PUBKEY_get() is similar to X509_PUBKEY_get0() except the reference
  52. count on the returned key is incremented so it B<MUST> be freed using
  53. EVP_PKEY_free() after use.
  54. d2i_PUBKEY_ex() decodes an B<EVP_PKEY> structure using B<SubjectPublicKeyInfo>
  55. format. Some public key decoding implementations may use cryptographic
  56. algorithms. In this case the supplied library context I<libctx> and property
  57. query string I<propq> are used.
  58. d2i_PUBKEY() does the same as d2i_PUBKEY_ex() except that the default
  59. library context and property query string are used.
  60. i2d_PUBKEY() encodes an B<EVP_PKEY> structure using B<SubjectPublicKeyInfo>
  61. format.
  62. d2i_PUBKEY_bio(), d2i_PUBKEY_fp(), i2d_PUBKEY_bio() and i2d_PUBKEY_fp() are
  63. similar to d2i_PUBKEY() and i2d_PUBKEY() except they decode or encode using a
  64. B<BIO> or B<FILE> pointer.
  65. X509_PUBKEY_set0_param() sets the public key parameters of I<pub>. The
  66. OID associated with the algorithm is set to I<aobj>. The type of the
  67. algorithm parameters is set to I<type> using the structure I<pval>.
  68. The encoding of the public key itself is set to the I<penclen>
  69. bytes contained in buffer I<penc>. On success ownership of all the supplied
  70. parameters is passed to I<pub> so they must not be freed after the
  71. call.
  72. X509_PUBKEY_get0_param() retrieves the public key parameters from I<pub>,
  73. I<*ppkalg> is set to the associated OID and the encoding consists of
  74. I<*ppklen> bytes at I<*pk>, I<*pa> is set to the associated
  75. AlgorithmIdentifier for the public key. If the value of any of these
  76. parameters is not required it can be set to NULL. All of the
  77. retrieved pointers are internal and must not be freed after the
  78. call.
  79. X509_PUBKEY_eq() compares two B<X509_PUBKEY> values.
  80. =head1 NOTES
  81. The B<X509_PUBKEY> functions can be used to encode and decode public keys
  82. in a standard format.
  83. In many cases applications will not call the B<X509_PUBKEY> functions
  84. directly: they will instead call wrapper functions such as X509_get0_pubkey().
  85. =head1 RETURN VALUES
  86. If the allocation fails, X509_PUBKEY_new() and X509_PUBKEY_dup() return
  87. NULL and set an error code that can be obtained by L<ERR_get_error(3)>.
  88. Otherwise they return a pointer to the newly allocated structure.
  89. X509_PUBKEY_free() does not return a value.
  90. X509_PUBKEY_get0() and X509_PUBKEY_get() return a pointer to an B<EVP_PKEY>
  91. structure or NULL if an error occurs.
  92. X509_PUBKEY_set(), X509_PUBKEY_set0_param() and X509_PUBKEY_get0_param()
  93. return 1 for success and 0 if an error occurred.
  94. X509_PUBKEY_eq() returns 1 for equal, 0 for different, and < 0 on error.
  95. =head1 SEE ALSO
  96. L<d2i_X509(3)>,
  97. L<ERR_get_error(3)>,
  98. L<X509_get_pubkey(3)>,
  99. =head1 HISTORY
  100. The X509_PUBKEY_new_ex() and X509_PUBKEY_eq() functions were added in OpenSSL
  101. 3.0.
  102. =head1 COPYRIGHT
  103. Copyright 2016-2021 The OpenSSL Project Authors. All Rights Reserved.
  104. Licensed under the Apache License 2.0 (the "License"). You may not use
  105. this file except in compliance with the License. You can obtain a copy
  106. in the file LICENSE in the source distribution or at
  107. L<https://www.openssl.org/source/license.html>.
  108. =cut