X509_ACERT_add_attr_nconf(3ssl)

X509_ACERT_add_attr_nconf3ssl

Add attributes to x509_acert from configuration section

Usage

 #include <openssl/x509_acert.h>
 int X509_ACERT_add_attr_nconf(CONF *conf, const char *section,
                               X509_ACERT *acert);

Overview

X509_ACERT_add_attr_nconf() adds one or more X509_ATTRIBUTEs to the existing X509_ACERT structure acert. The attributes are read from a section of the conf object.

The give section of the configuration should contain attribute descriptions of the form:

  attribute_name = value

The format of value will vary depending on the attribute_name. value can either be a string value or an ASN1_TYPE object.

To encode an ASN1_TYPE object, use the prefix "ASN1:" followed by the object description that uses the same syntax as ASN1_generate_nconf(3). For example:

 id-aca-group = ASN1:SEQUENCE:ietfattr
 [ietfattr]
 values = SEQUENCE:groups
 [groups]
 1.string = UTF8:mygroup1

Return values

X509_ACERT_add_attr_nconf() returns 1 for success and 0 for failure.

Releases

2 releases since Debian 13 (Trixie); the text changed 1 time.

  1. 13
  2. Arch

History

The function X509_ACERT_add_attr_nconf() was added in OpenSSL 3.4.

From openssl 3.6.5-1 in Arch Linux 2026-11-01. Parsed by carta from the page's man source.