gnutls_x509_cr...bject_alt_name2(3)

📦
version 3.8.13 · 7 versions
, in alpine 3.22, alpine 3.23, alpine 3.24, arch rolling, fedora 43, fedora 44, ubuntu stonking

✨ NAME ✨

gnutls_x509_crt_get_subject_alt_name2 — an API function, bestie 💅

okay so first things first, this page lives in the gnutls manual (you know, the 3.8.13 era of it), and if you've been squinting at the title bar going "what is gnutls_x509_cr...bject_alt_name2" — that's just the truncated header being dramatic. The real one is the full name up there. 🎀

🌸 SYNOPSIS 🌸

#include <gnutls/x509.h>

int gnutls_x509_crt_get_subject_alt_name2(gnutls_x509_crt_t cert,
unsigned int seq, void * san, size_t * san_size, unsigned int *
san_type, unsigned int * critical);

🦋 ARGUMENTS 🦋

  • gnutls_x509_crt_t cert — should contain a gnutls_x509_crt_t type. it's the cert you're snooping on, periodt 👑
  • unsigned int seq — specifies the sequence number of the alt name (0 for the first one, 1 for the second etc.). yes queen, we're counting from zero, it's giving very index-energy 🔢
  • void * san — is the place where the alternative name will be copied to. empty bucket, ready to receive 🪣
  • size_t * san_size — holds the size of ret. (that's the size of the buffer you handed over in san, and it gets updated if things go sideways)
  • unsigned int * san_type — holds the type of the alternative name (one of gnutls_x509_subject_alt_name_t). this is the spicy one, more on that in a sec 😌
  • unsigned int * critical — will be non-zero if the extension is marked as critical (may be null). so like, pass a real pointer if you care, or NULL if you don't 💀

💖 DESCRIPTION 💖

This function will return the alternative names, contained in the given certificate. 🎀

It is the same as gnutls_x509_crt_get_subject_alt_name() except for the fact that it will return the type of the alternative name in san_type even if the function fails for some reason (i.e. the buffer provided is not enough).

that last bit is the whole entire plot twist, no cap — the type info still comes through even when everything else refuses. main character energy fr fr ✨

🔥 RETURNS 🔥

the alternative subject name type on success, one of the enumerated gnutls_x509_subject_alt_name_t. 💅

  • It will return GNUTLS_E_SHORT_MEMORY_BUFFER if san_size is not large enough to hold the value. In that case san_size will be updated with the required size. (so it's not a failure-failure, it's a "here's how much room you actually need, bestie" 📏)
  • If the certificate does not have an Alternative name with the specified sequence number then GNUTLS_E_REQUESTED_DATA_NOT_AVAILABLE is returned. 🙈

😭 REPORTING BUGS 😭

Report bugs to <bugs@gnutls.org>.

Home page: https://www.gnutls.org

not me asking you to actually file the bug instead of just complaining in the group chat 🫶

Copyright © 2001-2023 Free Software Foundation, Inc., and others.

Copying and distribution of this file, with or without modification, are permitted in any medium without royalty provided the copyright notice and this notice are preserved.

🌈 SEE ALSO 🌈

The full documentation for gnutls is maintained as a Texinfo manual. If the /usr/share/doc/gnutls/ directory does not contain the HTML form visit

https://www.gnutls.org/manual/

and that's the whole page, slay 💜 this was gnutls 3.8.13, from the gnutls manual — go forth and read those subject alt names, icon of you 🧚✨

📦 where this page comes from