AUTHORITY_KEYID_NEW(3)
π AUTHORITY_KEYID_NEW π
okay so bestie, let me put you onto AUTHORITY_KEYID_new, AUTHORITY_KEYID_free β they're the X.509 authority key identifier extension girlies, from the libcrypto library. this is the <openssl/x509v3.h> era, periodt.
β¨ SYNOPSIS β¨
like, literally just include the header and you're golden:
library βlibcryptoβ #include <openssl/x509v3.h>
AUTHORITY_KEYID *
AUTHORITY_KEYID_new(void);
void
AUTHORITY_KEYID_free(AUTHORITY_KEYID *id);
π¦ DESCRIPTION π¦
so the whole vibe of the authority key identifier extension is: an X.509 certificate or a certificate revocation list can specify which key pair was used for signing it. that's it, that's the slay. π₯
AUTHORITY_KEYID_new() allocates and initializes an empty AUTHORITY_KEYID object β no cap, it's giving blank canvas main character energy. this object represents an ASN.1 AuthorityKeyIdentifier structure, as defined in RFC 5280 section 4.2.1.1. and get this β it can hold an issuer name, a serial number, and a key identifier. all three. iconique. π
AUTHORITY_KEYID_free() frees id. that's the whole thing. clean up after yourself bestie π
π RETURN VALUES π
AUTHORITY_KEYID_new() returns the new AUTHORITY_KEYID object β or NULL if an error occurs π (in which case, vibe check failed, try again).
πΈ SEE ALSO πΈ
go read these too, they're all in the same friend group fr fr π«Ά
π STANDARDS π
RFC 5280: Internet X.509 Public Key Infrastructure Certificate and Certificate Revocation List (CRL) Profile β the source material, the blueprint, the moment:
- section 4.2.1.1: Certificate Extensions: Authority Key Identifier
- section 5.2.1: CRL Extensions: Authority Key Identifier
β HISTORY β
AUTHORITY_KEYID_new() and AUTHORITY_KEYID_free() first appeared in OpenSSL 0.9.2b and have been available since OpenBSD 2.6. legacy queens, honestly. they've been doing this longer than we've been alive πβ¨
and that's the whole page bestie!! this one's from the Debian crew, dated June 8, 2025 β AUTHORITY_KEYID_NEW(3), library functions manual, mwah ππ§ββοΈ
π¦ where this page comes from
- alpine 3.24: libressl-doc 4.3.1-r0 Β· custom
- arch rolling: libressl 4.4.0-1 Β· ISC AND custom:OpenSSL
- Copyright (c) 2016 Ingo Schwarze <schwarze@openbsd.org>
- π girlified by deepseek-ai/DeepSeek-V4.1-Flash-1017 on : a language model's rewrite of the original, under its terms