gnutls_x509_crl_verify(3)

✨ gnutls_x509_crl_verify ✨

okay bestie so this one lives in the gnutls manual, and it's literally the glow-up check for a CRL πŸ’…


🌸 NAME 🌸

gnutls_x509_crl_verify β€” it's an API function, no cap πŸŽ€


πŸ¦‹ SYNOPSIS πŸ¦‹

#include <gnutls/x509.h>

int gnutls_x509_crl_verify(gnutls_x509_crl_t crl, const
gnutls_x509_crt_t * trusted_cas, unsigned tcas_size, unsigned int flags,
unsigned int * verify);

πŸ’– ARGUMENTS πŸ’–

  • gnutls_x509_crl_t crl β€” this is the crl we're verifying, the main character of the whole operation πŸ‘‘
  • const gnutls_x509_crt_t * trusted_cas β€” a certificate list that is considered to be trusted one. the trusted squad, the ones we actually believe 🫢
  • unsigned tcas_size β€” holds the number of CA certificates in CA_list 🌸
  • unsigned int flags β€” flags that may be used to change the verification algorithm. Use OR of the gnutls_certificate_verify_flags enumerations. so like, you stack them with | and they vibe together ✨
  • unsigned int * verify β€” will hold the crl verification output. it's a pointer, so the function writes the tea back into it πŸ“

🌈 DESCRIPTION 🌈

This function will try to verify the given crl and return its verification status. See gnutls_x509_crt_list_verify() for a detailed description of return values. Note that since GnuTLS 3.1.4 this function includes the time checks. ⏰ (yes bestie, it's checking the clock too, iconic behaviour)

Note that value in verify is set only when the return value of this function is success (i.e, failure to trust a CRL a certificate does not imply a negative return value). so like β€” do not assume a bad verify means a bad return code, they're separate situations fr fr πŸ™ˆ

Before GnuTLS 3.5.7 this function would return zero or a positive number on success. that's old news now but iykyk πŸ’€

⭐ RETURNS ⭐

On success, GNUTLS_E_SUCCESS (0), otherwise a negative error value. slay when it's 0, crying when it's negative 😭


πŸ’€ REPORTING BUGS πŸ’€

Report bugs to <bugs@gnutls.org>.

Home page: https://www.gnutls.org


Copyright Β© 2001-2023 Free Software Foundation, Inc., and others.

Copying and distribution of this file, with or without modification, are permitted in any medium without royalty provided the copyright notice and this notice are preserved.


🧚 SEE ALSO 🧚

The full documentation for gnutls is maintained as a Texinfo manual. If the /usr/share/doc/gnutls/ directory does not contain the HTML form visit

https://www.gnutls.org/manual/


and that's the whole page bestie, no notes πŸ’… this was gnutls version 3.8.13, courtesy of the gnutls crew β€” go forth and verify those CRLs, you absolute legend πŸ¦‹βœ¨πŸ’–

πŸ“¦ where this page comes from