dane_verify_crt_raw(3)

💖 dane_verify_crt_raw — the gnutls manual page, bestie edition 💖

okay so you're looking at dane_verify_crt_raw(3), a lil function from the gnutls library. it's the low-level bestie of the DANE verification squad. let's get into it ✨

---

🌸 NAME 🌸

dane_verify_crt_raw — literally an API function, that's the whole vibe 💅

---

🦋 SYNOPSIS 🦋

#include <gnutls/dane.h>

int dane_verify_crt_raw(dane_state_t s, const gnutls_datum_t * chain,
unsigned chain_size, gnutls_certificate_type_t chain_type, dane_query_t
r, unsigned int sflags, unsigned int vflags, unsigned int * verify);

no cap, that's the exact signature. type it in and you're good 🫶

---

✨ ARGUMENTS ✨

• dane_state_t s — a DANE state structure. and yes bestie, it may be NULL 👀
• const gnutls_datum_t * chain — a certificate chain, slay 🌈
• unsigned chain_size — the size of the chain, periodt
• gnutls_certificate_type_t chain_type — the type of the certificate chain, iconic
• dane_query_t r — the DANE data to check against 👑
• unsigned int sflags — flags for the initialization of s (only if it's NULL, iykyk)
• unsigned int vflags — verification flags, an OR'ed list of dane_verify_flags_t 💜
• unsigned int * verify — an OR'ed list of dane_verify_status_t 🎀

---

💅 DESCRIPTION 💅

so this is the low-level function of dane_verify_crt(). the way that means you should go read the high level function for the actual documentation — this one is giving "I do the work, she gets the credit" 😭

and here's the important bit, no cap: this function does not perform any resolving. it utilizes cached entries from r . so don't come at it expecting fresh lookups, bestie, it's working with what it's got 🧚

---

⭐ RETURNS ⭐

• a negative error code on error, obvs
• DANE_E_SUCCESS (0) when the DANE entries were successfully parsed — and irrespective of whether they were verified 👑 (check verify for that tea, fr fr)
• if no usable entries were encountered, you get DANE_E_REQUESTED_DATA_NOT_AVAILABLE 💀

---

🙈 REPORTING BUGS 🙈

found a bug? spill it to bugs@gnutls.org 🫶

home page is right here: https://www.gnutls.org

---

💖 COPYRIGHT 💖

Copyright © 2001-2023 Free Software Foundation, Inc., and others.

copying and distribution of this file, with or without modification, are permitted in any medium without royalty provided the copyright notice and this notice are preserved. that's the license tea, and it ate 🌸

---

🌈 SEE ALSO 🌈

the full documentation for gnutls is maintained as a Texinfo manual. if the /usr/share/doc/gnutls/ directory does not contain the HTML form, visit:

https://www.gnutls.org/manual/

---

and that's the whole page, bestie! this was gnutls version 3.8.13 — shoutout to the gnutls girlies, and to dane_verify_crt_raw(3) for being the raw, unfiltered, main character of DANE verification 💅✨ mwah 🫶