libressl-PKEY_USAGE_PERIOD_new(3)

libressl-PKEY_USAGE_PERIOD_new3

X.509 certificate private key usage period extension

Usage

Crypto Library (libcrypto, -lcrypto)

#include <openssl/x509v3.h>

PKEY_USAGE_PERIOD *

PKEY_USAGE_PERIOD_new(void);

void

PKEY_USAGE_PERIOD_free(PKEY_USAGE_PERIOD *period);

Overview

PKEY_USAGE_PERIOD_new() allocates and initializes an empty PKEY_USAGE_PERIOD object, representing an ASN.1 PrivateKeyUsagePeriod structure defined in RFC 3280 section 4.2.1.4. It could be used in X509 certificates to specify a validity period for the private key that differed from the validity period of the certificate.

PKEY_USAGE_PERIOD_free() frees period.

Return values

PKEY_USAGE_PERIOD_new() returns the new PKEY_USAGE_PERIOD object or NULL if an error occurs.

Standards

RFC 3280: Internet X.509 Public Key Infrastructure Certificate and Certificate Revocation List (CRL) Profile, section 4.2.1.4: Private Key Usage Period

RFC 3280 was obsoleted by RFC 5280, which says: "Section 4.2.1.4 in RFC 3280, which specified the PrivateKeyUsagePeriod certificate extension but deprecated its use, was removed. Use of this ISO standard extension is neither deprecated nor recommended for use in the Internet PKI."

History

PKEY_USAGE_PERIOD_new() and PKEY_USAGE_PERIOD_free() first appeared in OpenSSL 0.9.2b and have been available since OpenBSD 2.6.

From libressl 4.4.0-1 in Arch Linux 2026-11-01. Parsed by carta from the page's mdoc source.