gnutls_sign_set_secure3
Api function
Usage
#include <gnutls/gnutls.h>
int gnutls_sign_set_secure(gnutls_sign_algorithm_t sign, unsigned int secure);
Arguments
gnutls_sign_algorithm_t sign
|
the sign algorithm |
|---|---|
unsigned int secure
|
whether to mark the sign algorithm secure |
Overview
Modify the previous system wide setting that marked sign as secure or insecure. Calling this function is allowed only if allowlisting mode is set in the configuration file, and only if the system-wide TLS priority string has not been initialized yet. The intended usage is to provide applications with a way to expressly deviate from the distribution or site defaults inherited from the configuration file. The modification is composable with further modifications performed through the priority string mechanism.
This function is not thread-safe and is intended to be called in the main thread at the beginning of the process execution.
Even when secure is true, sign is not marked as secure for the use in certificates. Use gnutls_sign_set_secure_for_certs() to mark it secure as well for certificates.
Returns
0 on success or negative error code otherwise.
Since
3.7.3
Releases
3 releases since Debian 12 (Bookworm); the text changed 2 times.