gnutls_x509_crt_get_ca_status(3)

✨ gnutls_x509_crt_get_ca_status ✨

okay bestie, welcome to the gnutls manual page for gnutls_x509_crt_get_ca_status(3) 💅 this is the one where we find out if a certificate is out here being a whole Certificate Authority or if it's just a regular little leaf cert minding its own business 🎀

---

🌸 SYNOPSIS 🌸

#include <gnutls/x509.h>

int gnutls_x509_crt_get_ca_status(gnutls_x509_crt_t cert, unsigned int *
critical);

---

🫶 ARGUMENTS 🫶

• gnutls_x509_crt_t cert — should contain a gnutls_x509_crt_t type. like, that's the whole vibe, that's the cert we're interrogating 🔍
• unsigned int * critical — will be non-zero if the extension is marked as critical 👑 so if this comes back all nonzero you KNOW the extension is not playing games

---

💖 DESCRIPTION 💖

so basically this function returns the certificate's CA status, and the way it does that is by reading the basicConstraints X.509 extension, which is 2.5.29.19 ✨ yes the OID, we know her.

If the certificate is a CA, a positive value gets returned 🎉 or (0) if the certificate does not have the CA flag set 🙈 (not me, not CA energy, just vibes).

lowkey important: use gnutls_x509_crt_get_basic_constraints() if you also wanna read the pathLenConstraint field too 👀 that's the one that says how many more CAs can chain under this one, iykyk.

---

🌈 RETURNS 🌈

• If the certificate is a CA → a positive value comes back 💚
• If the certificate does not have CA flag set → (0) 🫥
• A negative error code may be returned in case of errors 😭
• If the certificate does not contain the basicConstraints extension → GNUTLS_E_REQUESTED_DATA_NOT_AVAILABLE will be returned 💀 (she's just not there, bestie, nothing we can do)

---

🐛 REPORTING BUGS 🐛

found a bug? don't gatekeep it, report it to <bugs@gnutls.org> 📧

Home page: https://www.gnutls.org 🌐

---

📜 COPYRIGHT 📜

Copyright © 2001-2023 Free Software Foundation, Inc., and others.

Copying and distribution of this file, with or without modification, are permitted in any medium without royalty provided the copyright notice and this notice are preserved. periodt ✨

---

👀 SEE ALSO 👀

The full documentation for gnutls is maintained as a Texinfo manual 📚 If the /usr/share/doc/gnutls/ directory does not contain the HTML form, visit:

https://www.gnutls.org/manual/

---

and that's the whole page, bestie 🦋 this was gnutls 3.8.13 — go check those basicConstraints, stay iconic, and remember: a cert with the CA flag is simply main character energy 👑💖