libressl-AUTHORITY_KEYID_new(3)

libressl-AUTHORITY_KEYID_new3

X.509 authority key identifier extension

Usage

Crypto Library (libcrypto, -lcrypto)

#include <openssl/x509v3.h>

AUTHORITY_KEYID *

AUTHORITY_KEYID_new(void);

void

AUTHORITY_KEYID_free(AUTHORITY_KEYID *id);

Overview

Using the authority key identifier extension, an X.509 certificate or certificate revocation list can specify which key pair was used for signing it.

AUTHORITY_KEYID_new() allocates and initializes an empty AUTHORITY_KEYID object, representing an ASN.1 AuthorityKeyIdentifier structure defined in RFC 5280 section 4.2.1.1. It can hold an issuer name, a serial number, and a key identifier.

AUTHORITY_KEYID_free() frees id.

Return values

AUTHORITY_KEYID_new() returns the new AUTHORITY_KEYID object or NULL if an error occurs.

Standards

RFC 5280: Internet X.509 Public Key Infrastructure Certificate and Certificate Revocation List (CRL) Profile:

  • section 4.2.1.1: Certificate Extensions: Authority Key Identifier

  • section 5.2.1: CRL Extensions: Authority Key Identifier

History

AUTHORITY_KEYID_new() and AUTHORITY_KEYID_free() first appeared in OpenSSL 0.9.2b and have been available since OpenBSD 2.6.

From libressl 4.4.0-1 in Arch Linux 2026-11-01. Parsed by carta from the page's mdoc source.