X509_get_serialNumber(3ssl)

X509_get_serialNumber3ssl

Get or set certificate serial number

Usage

 #include <openssl/x509.h>
 ASN1_INTEGER *X509_get_serialNumber(X509 *x);
 const ASN1_INTEGER *X509_get0_serialNumber(const X509 *x);
 int X509_set_serialNumber(X509 *x, ASN1_INTEGER *serial);
 #include <openssl/x509_acert.h>
 ASN1_INTEGER *X509_ACERT_get0_serialNumber(X509_ACERT *x);
 int X509_ACERT_set1_serialNumber(X509_ACERT *x, ASN1_INTEGER *serial);

Overview

X509_get_serialNumber() returns the serial number of certificate x as an ASN1_INTEGER structure which can be examined or initialised. The value returned is an internal pointer which MUST NOT be freed up after the call.

X509_get0_serialNumber() is the same as X509_get_serialNumber() except it accepts a const parameter and returns a const result.

X509_set_serialNumber() sets the serial number of certificate x to serial. A copy of the serial number is used internally so serial should be freed up after use.

X509_ACERT_get0_serialNumber() performs the same operation as X509_get_serialNumber() for attribute certificates.

X509_ACERT_set1_serialNumber() performs the same operation as X509_set_serialNumber() for attribute certificates.

Return values

X509_get_serialNumber(), X509_get0_serialNumber() and X509_ACERT_get0_serialNumber() return a pointer to an ASN1_INTEGER structure.

X509_set_serialNumber() and X509_ACERT_set1_serialNumber() return 1 for success and 0 for failure.

Releases

6 releases since Debian 9 (Stretch); the text changed 5 times.

  1. 9
  2. 10
  3. 11
  4. 12
  5. 13
  6. Arch

History

The X509_get_serialNumber() and X509_set_serialNumber() functions are available in all versions of OpenSSL. The X509_get0_serialNumber() function was added in OpenSSL 1.1.0. The X509_ACERT_get0_serialNumber() and X509_ACERT_set1_serialNumber() functions were added in OpenSSL 3.4.

From openssl 3.6.5-1 in Arch Linux 2026-11-01. Parsed by carta from the page's man source.