gnutls_certificate_set_x509_crl(3)

📦
version 3.8.13 · 7 versions
, in alpine 3.22, alpine 3.23, alpine 3.24, arch rolling, fedora 43, fedora 44, ubuntu stonking

💖 gnutls_certificate_set_x509_crl — the "here's my trust issues, in list form" function 💖

okay bestie so this is a page straight out of the gnutls manual (you know, the TLS library that's lowkey carrying half the internet's handshakes) and today's main character is gnutls_certificate_set_x509_crl. it's an API function. let's get into it 🫶

✨ NAME ✨

gnutls_certificate_set_x509_crl — API function

like. that's the whole name. she's not hiding anything. iconic behavior honestly 💅

🌸 SYNOPSIS 🌸

#include <gnutls/gnutls.h>

int gnutls_certificate_set_x509_crl(gnutls_certificate_credentials_t
res, gnutls_x509_crl_t * crl_list, int crl_list_size);

yes she takes three things and gives you back an int. the way that this signature is just sitting there being correct... obsessed 😭

🎀 ARGUMENTS 🎀

  • gnutls_certificate_credentials_t res — bestie this is a gnutls_certificate_credentials_t type. that's it. that's the vibe. it's your credentials object and she's the one getting the CRLs handed to her 💖
  • gnutls_x509_crl_t * crl_list — this is a list of trusted CRLs. and listen, important part: they should have been verified before. like, do not just roll up with unverified CRLs and expect the universe to protect you, okay? 🙈
  • int crl_list_size — holds the size of the crl_list. the count. the number. the "how many of these am I actually looking at" value 🦋

🌈 DESCRIPTION 🌈

so what does she do? this function adds the trusted CRLs, and it does it specifically so client or server certificates can be verified. no cap, that's the whole job and she's very good at it ✨

now here's the tea for the client side specifically: in case of a client, this is not required to be called if the certificates are not being verified using gnutls_certificate_verify_peers2(). so if you're not verifying, you can just... not. free pass. we love an optional call 🌸

and the best part?? this function may be called multiple times. call her, call her again, she does not care. she is unbothered, moisturized, in her lane 👑

💀 RETURNS 💀

number of CRLs processed. or, if things went sideways, a negative error code on error. so like. check the sign bestie. negative = we're not okay 😭

⭐ SINCE ⭐

2.4.0 — she's been here since 2.4.0, a true veteran, a legend, we stan a long-running API 🫶

🐛 REPORTING BUGS 🐛

found a bug? do NOT suffer in silence, tell the people:

they literally want to hear from you 💜

Copyright © 2001-2023 Free Software Foundation, Inc., and others.

Copying and distribution of this file, with or without modification, are permitted in any medium without royalty provided the copyright notice and this notice are preserved.

periodt. the license said what it said and she ate 💅

🦋 SEE ALSO 🦋

The full documentation for gnutls is maintained as a Texinfo manual. If the /usr/share/doc/gnutls/ directory does not contain the HTML form visit

https://www.gnutls.org/manual/

fr fr, that's the whole page. no details skipped, no flags dropped, we kept it 100. 🍓

and that's a wrap bestie!! this was the gnutls manual, version 3.8.13, and the page was gnutls_certificate_set_x509_crl(3). go verify some certificates, stay hydrated, and remember: verify your CRLs before you hand them over. mwah 💖✨🧚

📦 where this page comes from