gnutls_x509_crq_privkey_sign3
Api function
Usage
#include <gnutls/abstract.h>
int gnutls_x509_crq_privkey_sign(gnutls_x509_crq_t crq, gnutls_privkey_t key, gnutls_digest_algorithm_t dig, unsigned int flags);
Arguments
gnutls_x509_crq_t crq
|
should contain a |
|---|---|
gnutls_privkey_t key
|
holds a private key |
gnutls_digest_algorithm_t dig
|
The message digest to use, i.e., |
unsigned int flags
|
must be 0 |
Overview
This function will sign the certificate request with a private key. This must be the same key as the one used in gnutls_x509_crt_set_key() since a certificate request is self signed.
This must be the last step in a certificate request generation since all the previously set parameters are now signed.
A known limitation of this function is, that a newly-signed request will not be fully functional (e.g., for signature verification), until it is exported an re-imported.
After GnuTLS 3.6.1 the value of dig may be GNUTLS_DIG_UNKNOWN, and in that case, a suitable but reasonable for the key algorithm will be selected.
Returns
GNUTLS_E_SUCCESS on success, otherwise a negative error code. GNUTLS_E_ASN1_VALUE_NOT_FOUND is returned if you didn't set all information in the certificate request (e.g., the version using gnutls_x509_crq_set_version()).
Since
2.12.0
Releases
7 releases since Debian 8 (Jessie); the text changed 6 times.