GNUTLS_X509_TRUST_LIST_REMOVE_CAS(3)

πŸ’– gnutls_x509_trust_list_remove_cas(3) πŸ’–

okay bestie, so this is a page from the gnutls manual, and it's about yeeting certificate authorities out of your trust list. yes, you read that right. we're removing CAs. it's giving spring cleaning but for crypto. 🧹✨


✨ NAME ✨

gnutls_x509_trust_list_remove_cas β€” an API function, bestie. that's the whole name, no notes. πŸ’…


🌸 SYNOPSIS 🌸

#include <gnutls/x509.h>

int gnutls_x509_trust_list_remove_cas(gnutls_x509_trust_list_t list,
const gnutls_x509_crt_t * clist, unsigned clist_size);

look at her. three params, one int return. iconic behavior honestly. πŸŽ€


πŸ¦‹ ARGUMENTS πŸ¦‹

  • gnutls_x509_trust_list_t list β€” the list itself. the main character. the trust list we're about to do surgery on. πŸ‘‘
  • const gnutls_x509_crt_t * clist β€” a list of CAs. like, the ones you're pointing at. 🎯
  • unsigned clist_size β€” the length of that CA list. how many of them there are. the count, the headcount, the vibe check number. πŸ”’

🌈 DESCRIPTION 🌈

so basically this function removes the given certificate authorities from the trusted list. that's it. that's the whole job. bye bye CAs. 🫢

but wait, there's a plot twist, and it's actually important so listen up:

this function can accept certificates and authorities not yet known. no cap.

and when that happens? they don't just vanish into the void. they get kept in a separate block list that will be used during certificate verification. so they're not gone-gone, they're just... relocated. sent to the shadow realm where they get consulted later. πŸ’€

also, key detail for the careful girlies: unlike gnutls_x509_trust_list_add_cas(), there is no deinitialization restriction for the certificate list provided in this function. so you don't have to stress about that particular thing here. freedom. 🌸


πŸ’œ RETURNS πŸ’œ

the number of removed elements is returned. so like, a count. a lil receipt. how many CAs did we actually get rid of. 🧾✨


⭐ SINCE ⭐

3.1.10 β€” she's been around a minute, she's vintage, she's established. πŸ‘‘


πŸŽ€ REPORTING BUGS πŸŽ€

found something cursed? report bugs to <bugs@gnutls.org>. they want to hear it, fr fr.

home page: https://www.gnutls.org 🌐


Copyright Β© 2001-2023 Free Software Foundation, Inc., and others.

copying and distribution of this file, with or without modification, are permitted in any medium without royalty provided the copyright notice and this notice are preserved. so like, go off, but keep the receipts. 🫑


πŸ”₯ SEE ALSO πŸ”₯

the full documentation for gnutls is maintained as a Texinfo manual. if the /usr/share/doc/gnutls/ directory does not contain the HTML form, visit

https://www.gnutls.org/manual/

and that's the whole page bestie, you ate it, you understood it, i'm so proud. πŸ’…βœ¨

signing off with love from gnutls 3.8.13, dated with the same energy as gnutls_x509_trust_list_remove_cas(3). mwah. πŸ’–πŸŒΈπŸ¦‹

πŸ“¦ where this page comes from