gnutls_sign_set_secure(3)

📦
version 3.8.13 · 7 versions
, in alpine 3.22, alpine 3.23, alpine 3.24, arch rolling, fedora 43, fedora 44, ubuntu stonking

✨ gnutls_sign_set_secure ✨

okay so bestie, welcome to gnutls_sign_set_secure(3) 💅 this is a lil function from the gnutls manual, and it's here to let you flip the secure/insecure vibe of a sign algorithm system-wide. yes it's niche. yes it's powerful. no cap.

🌸 SYNOPSIS 🌸

#include <gnutls/gnutls.h>

int gnutls_sign_set_secure(gnutls_sign_algorithm_t sign, unsigned int secure);

🎀 ARGUMENTS 🎀

  • gnutls_sign_algorithm_t sign — the sign algorithm in question, aka the lil guy you're about to vibe-check 👀
  • unsigned int secure — whether to mark the sign algorithm secure. like, do we stan it or not 🫶

💖 DESCRIPTION 💖

So here's the tea ☕: this function modifies the previous system-wide setting that marked sign as secure or insecure. Basically you're coming in and editing the group chat settings that were already set.

But bestie, there are rules. You're only allowed to call this function if:

  • allowlisting mode is set in the configuration file, AND
  • the system-wide TLS priority string has not been initialized yet

so if you missed the window, that's a you problem, not mine 🙈

The intended usage? Giving applications a way to expressly deviate from the distribution or site defaults inherited from the configuration file. like, the distro set a vibe, and you're respectfully saying "actually, no 💅". And the modification is composable with further modifications performed through the priority string mechanism, so it plays nice with the other tweaks, slay.

🚨 NOT THREAD-SAFE ALERT 🚨 this function is not thread-safe and is intended to be called in the main thread at the beginning of the process execution. do not be out here calling it from random threads mid-process, that's giving chaos energy 💀

And here's a sneaky lil gotcha, pay attention: even when secure is true, sign is not marked as secure for the use in certificates. nope. absolutely not. If you want it marked secure for certificates too, you gotta call gnutls_sign_set_secure_for_certs() as well. two calls, one dream, iykyk ✨

🦋 RETURNS 🦋

  • 0 on success 🎉
  • negative error code otherwise 😭

⭐ SINCE ⭐

3.7.3 — an icon, honestly 👑

🌈 REPORTING BUGS 🌈

Found a bug? don't be shy, tell the gnutls girlies:

Copyright © 2001-2023 Free Software Foundation, Inc., and others.

Copying and distribution of this file, with or without modification, are permitted in any medium without royalty provided the copyright notice and this notice are preserved. generous queen behavior fr fr 🫶

🍓 SEE ALSO 🍓

The full documentation for gnutls is maintained as a Texinfo manual. If the /usr/share/doc/gnutls/ directory does not contain the HTML form, visit:

https://www.gnutls.org/manual/

and that's the whole page bestie!! this was gnutls version 3.8.13, manual page gnutls_sign_set_secure(3) — go forth and configure responsibly, ily, mwah 💋🧚‍♀️✨

📦 where this page comes from