X509_REQ_GET_EXTENSIONS(3ossl)

💅 X509_REQ_GET_EXTENSIONS 💅

okay so bestie, this is a page from the OpenSSL 3ossl manual family — it's all about the X.509 extension attributes of a CSR (y'know, a Certificate Signing Request, the little application form you send off begging a CA to sign your cert 🥺). Three functions, one very specific job. Let's get into it ✨

---

🌸 SYNOPSIS 🌸

#include <openssl/x509.h>

STACK_OF(X509_EXTENSION) *X509_REQ_get_extensions(const X509_REQ *req);
int X509_REQ_add_extensions(X509_REQ *req, const STACK_OF(X509_EXTENSION) *exts);
int X509_REQ_add_extensions_nid(X509_REQ *req,
                                const STACK_OF(X509_EXTENSION) *exts, int nid);

three little icons, all lined up 💖

---

🎀 DESCRIPTION 🎀

🦋 X509_REQ_get_extensions()

this one returns the first list of X.509 extensions it can find in the attributes of req. literally just hands you the list, no cap 🫴✨

and if req has no such extensions? you get an empty list, not a sad error — it's fine, she's just empty 💅

⚠️ bestie listen to me: the caller is responsible for freeing the list obtained. that's you. you free it. not her problem. own your memory 🫶

🧚 X509_REQ_add_extensions_nid()

this one adds a list of X.509 extensions, exts, to req — and it uses nid to identify which extensions attribute it is 🏷️

couple of rules, iykyk:

• if exts is NULL, or it's an empty list, then req stays unchanged — nothing happens, we move on 💀
• you can call this more than once on the same req and the same nid. iconic, honestly.
• when you do that, any previous extensions get augmented — and here's the spicy bit: if an extension you're adding has the same OID as one that already exists, it replaces the earlier one. new one ate, periodt 🔥

🍓 X509_REQ_add_extensions()

same energy as X509_REQ_add_extensions_nid(), except it just uses the default NID_ext_req for you. lowkey convenient 💜

---

🌈 RETURN VALUES 🌈

• X509_REQ_get_extensions() — returns a pointer to STACK_OF(X509_EXTENSION), or NULL on error 😭
• X509_REQ_add_extensions() and X509_REQ_add_extensions_nid() — return 1 on success, 0 on error. yes bestie, 1 is the good one, don't get it twisted 💀

---

👑 COPYRIGHT 👑

Copyright 2022-2024 The OpenSSL Project Authors. All Rights Reserved.

Licensed under the Apache License 2.0 (the "License"). You may not use this file except in compliance with the License. You can obtain a copy in the file LICENSE in the source distribution or at <https://www.openssl.org/source/license.html>.

fr fr read the license, it's the main character of legal text 💅

---

and that's the whole vibe check, bestie 🦋 this page was serving OpenSSL 3.5.6, dated 2026-04-07 — X509_REQ_GET_EXTENSIONS(3ossl), signing off with a lil sparkle ✨🎀💖