gnutls_x509_crt_check_key_purpose(3)

gnutls_x509_crt_check_key_purpose3

Api function

Usage

#include <gnutls/x509.h>

unsigned gnutls_x509_crt_check_key_purpose(gnutls_x509_crt_t cert, const char * purpose, unsigned flags);

Arguments

gnutls_x509_crt_t cert

should contain a gnutls_x509_crt_t type

const char * purpose

a key purpose OID (e.g., GNUTLS_KP_CODE_SIGNING)

unsigned flags

zero or GNUTLS_KP_FLAG_DISALLOW_ANY

Overview

This function will check whether the given certificate matches the provided key purpose. If flags contains GNUTLS_KP_FLAG_ALLOW_ANY then it a certificate marked for any purpose will not match.

Returns

zero if the key purpose doesn't match, and non-zero otherwise.

Since

3.5.6

Releases

6 releases since Debian 9 (Stretch); the text changed 5 times.

  1. 9
  2. 10
  3. 11
  4. 12
  5. 13
  6. Arch

Reporting bugs

Report bugs to <[email protected]>.
Home page: https://www.gnutls.org

From gnutls 3.8.13-3 in Arch Linux 2026-11-07. Parsed by carta from the page's man source.