globus_gsi_credential.h(3)

💖 globus_gsi_credential.h — the Globus GSI Credential Library ✨

okay bestie, sit down, hydrate, because this is the globus_gsi_credential.h manual page from the Library Functions Manual and it's lowkey a whole vibe. it's the header for the Globus GSI Credential Library — yes, the one that handles your certs, your keys, your proxies, your whole identity situation. 🎀

---

🌸 NAME 🌸

globus_gsi_credential.h — the Globus GSI Credential Library. it's giving "i hold your credentials and i hold them responsibly." 👑

---

✨ SYNOPSIS ✨

first things first, you gotta invite the whole friend group in:

#include 'globus_common.h'
#include 'globus_error_openssl.h'
#include 'globus_gsi_cred_constants.h'
#include 'globus_gsi_callback.h'
#include 'globus_gsi_cert_utils.h'
#include 'openssl/x509.h'
#include 'openssl/bio.h'
#include 'openssl/ssl.h'
#include 'globus_error_generic.h'

🧚 Macros

• #define GLOBUS_GSI_CREDENTIAL_MODULE — the module macro. it's here, it exists, it said hi. 💅

🦋 Typedefs

• typedef struct globus_l_gsi_cred_handle_s * globus_gsi_cred_handle_t — your credential handle. the main character fr.
• typedef struct globus_l_gsi_cred_handle_attrs_s * globus_gsi_cred_handle_attrs_t — the handle's attributes. the handle's supportive bestie. 💜

👑 Functions

• globus_result_t globus_gsi_cred_handle_init (globus_gsi_cred_handle_t *handle, globus_gsi_cred_handle_attrs_t handle_attrs) — Initialize a Handle. birth of a legend, no cap.
• globus_result_t globus_gsi_cred_handle_destroy (globus_gsi_cred_handle_t handle) — Destroy the credential handle. it lived a good life. 🕊️
• globus_result_t globus_gsi_cred_handle_copy (globus_gsi_cred_handle_t source, globus_gsi_cred_handle_t *dest) — Copy a handle. twin energy.
• globus_result_t globus_gsi_cred_handle_attrs_init (globus_gsi_cred_handle_attrs_t *handle_attrs) — Initialize credential handle attributes. ✨
• globus_result_t globus_gsi_cred_handle_attrs_destroy (globus_gsi_cred_handle_attrs_t handle_attrs) — Destroy credential handle attributes. bye bestie 🫶
• globus_result_t globus_gsi_cred_handle_attrs_copy (globus_gsi_cred_handle_attrs_t source, globus_gsi_cred_handle_attrs_t *dest) — Copy credential handle attributes.
• globus_result_t globus_gsi_cred_read (globus_gsi_cred_handle_t handle, X509_NAME *desired_subject) — Read a credential.
• globus_result_t globus_gsi_cred_read_proxy (globus_gsi_cred_handle_t handle, const char *proxy_filename) — Read proxy credential. from a file, with a filename and everything. 🍓
• globus_result_t globus_gsi_cred_read_proxy_bio (globus_gsi_cred_handle_t handle, BIO *bio) — Read proxy credential from a BIO. same energy, different source.
• globus_result_t globus_gsi_cred_read_key (globus_gsi_cred_handle_t handle, const char *key_filename, pem_password_cb *pw_cb) — Read a private key. 🤫
• globus_result_t globus_gsi_cred_read_cert (globus_gsi_cred_handle_t handle, const char *cert_filename) — Read a certificate chain from a file.
• globus_result_t globus_gsi_cred_read_cert_bio (globus_gsi_cred_handle_t handle, BIO *bio) — Read a certificate chain from a BIO.
• globus_result_t globus_gsi_cred_read_cert_buffer (const char *pem_buf, globus_gsi_cred_handle_t *out_handle, X509 **out_cert, STACK_OF(X509) **out_cert_chain, char **out_subject) — Read certificate chain from a buffer. yes it gives you the handle, the cert, the chain AND the subject. overachiever behavior 💅
• globus_result_t globus_gsi_cred_read_pkcs12 (globus_gsi_cred_handle_t handle, const char *pkcs12_filename) — Read certificate and key from a PKCS12 file.
• globus_result_t globus_gsi_cred_write (globus_gsi_cred_handle_t handle, BIO *bio) — Write Credential.
• globus_result_t globus_gsi_cred_write_proxy (globus_gsi_cred_handle_t handle, const char *proxy_filename) — Write a proxy credential.
• globus_result_t globus_gsi_cred_verify_cert_chain (globus_gsi_cred_handle_t cred_handle, globus_gsi_callback_data_t callback_data) — Verify credential.
• globus_result_t globus_gsi_cred_verify_cert_chain_when (globus_gsi_cred_handle_t cred_handle, globus_gsi_callback_data_t callback_data, time_t check_time) — Verify credential at a specific time. time travel but make it PKI. ⏰
• globus_result_t globus_gsi_cred_verify (globus_gsi_cred_handle_t handle) — Verify a credential.
• globus_result_t globus_gsi_cred_get_X509_subject_name (globus_gsi_cred_handle_t handle, X509_NAME **subject_name) — Get credential subject name. the raw X509 version.
• globus_result_t globus_gsi_cred_get_subject_name (globus_gsi_cred_handle_t handle, char **subject_name) — Get credential subject name. the string version, for when you want it readable.
• globus_result_t globus_gsi_cred_get_policies (globus_gsi_cred_handle_t handle, STACK_OF(OPENSSL_STRING) **policies) — Get certificate chain policies.
• globus_result_t globus_gsi_cred_get_policy_languages (globus_gsi_cred_handle_t handle, STACK_OF(ASN1_OBJECT) **languages) — Get certificate chain policy languages.
• globus_result_t globus_gsi_cred_get_X509_issuer_name (globus_gsi_cred_handle_t handle, X509_NAME **issuer_name) — Get credential issuer name object.
• globus_result_t globus_gsi_cred_get_issuer_name (globus_gsi_cred_handle_t handle, char **issuer_name) — Get issuer name.
• globus_result_t globus_gsi_cred_get_X509_identity_name (globus_gsi_cred_handle_t handle, X509_NAME **identity_name) — Get X.509 identity.
• globus_result_t globus_gsi_cred_get_identity_name (globus_gsi_cred_handle_t handle, char **identity_name) — Get identity name. who even are you? this knows. 🪞
• globus_result_t globus_gsi_cred_set_cert (globus_gsi_cred_handle_t handle, X509 *cert) — Set the credential's certificate.
• globus_result_t globus_gsi_cred_set_key (globus_gsi_cred_handle_t handle, EVP_PKEY *key) — Set the credential's private key.
• globus_result_t globus_gsi_cred_set_cert_chain (globus_gsi_cred_handle_t handle, STACK_OF(X509) *cert_chain) — Set the certificate chain.
• globus_result_t globus_gsi_cred_get_cert (globus_gsi_cred_handle_t handle, X509 **cert) — Get the credential's certificate.
• globus_result_t globus_gsi_cred_get_key (globus_gsi_cred_handle_t handle, EVP_PKEY **key) — Get the credential's private key.
• globus_result_t globus_gsi_cred_get_cert_chain (globus_gsi_cred_handle_t handle, STACK_OF(X509) **cert_chain) — Get the certificate chain.
• globus_result_t globus_gsi_cred_get_handle_attrs (globus_gsi_cred_handle_t handle, globus_gsi_cred_handle_attrs_t *handle_attrs) — Get the handle attributes.
• globus_result_t globus_gsi_cred_get_lifetime (globus_gsi_cred_handle_t handle, time_t *lifetime) — Get credential lifetime.
• globus_result_t globus_gsi_cred_get_goodtill (globus_gsi_cred_handle_t handle, time_t *goodtill) — Get credential expiration.
• globus_result_t globus_gsi_cred_get_cert_type (globus_gsi_cred_handle_t handle, globus_gsi_cert_utils_cert_type_t *type) — Get the X.509 certificate type.
• globus_result_t globus_gsi_cred_get_key_bits (globus_gsi_cred_handle_t handle, int *key_bits) — Get credential strength. 💪
• globus_result_t globus_gsi_cred_handle_attrs_set_search_order (globus_gsi_cred_handle_attrs_t handle_attrs, globus_gsi_cred_type_t search_order[]) — Set the search order.

---

🌈 Detailed Description 🌈

Globus GSI Credential Library. that's the whole thing, bestie. that's what we're working with. it's iconic, it's load-bearing, and every function above is in this file. periodt. 💅

🌟 Author

Sam Lang, Sam Meder — the actual authors, absolute legends, we love them, we thank them. 🙌

---

💜 Author 💜

okay so this page itself? it was Generated automatically by Doxygen for globus_gsi_credential from the source code. so no human hand-typed it, it just materialized. very demure, very automated. ✨

and that's the whole page — this is globus_gsi_credential.h(3), sitting pretty at Version 8.5, in the globus_gsi_credential era. go read your certs, bestie, you got this 🫶🎀💖