X509V3_ADDR_INHERITS(3)

πŸ“¦ version 4.4.0, in alpine 3.24, arch rolling

πŸ¦‹ X509v3_addr_inherits & X509v3_asid_inherits β€” RFC 3779 inheritance πŸ¦‹

omg hi bestie πŸ’– welcome to the X509V3_ADDR_INHERITS(3) page β€” yes, that's the manual name, and we're about to vibe-check RFC 3779 inheritance together. no cap, it's giving niche crypto lore, but we got this.


🌸 NAME 🌸

X509v3_addr_inherits, X509v3_asid_inherits β€” RFC 3779 inheritance πŸ’…


✨ SYNOPSIS ✨

okay so the synopsis is literally this, bestie β€” copied exactly:

library β€œlibcrypto” #include <openssl/x509v3.h>

int
X509v3_addr_inherits(IPAddrBlocks *addrblocks);

int
X509v3_asid_inherits(ASIdentifiers *asids);

πŸ’– DESCRIPTION πŸ’–

  • X509v3_addr_inherits() β€” determines if there is at least one address family in addrblocks that uses inheritance. πŸ‘‘
  • X509v3_asid_inherits() β€” is intended to determine if at least one of the list of autonomous system numbers or the list of routing domain identifiers uses inheritance. 🫢

πŸ”₯ RETURN VALUES πŸ”₯

  • X509v3_addr_inherits() returns 1 if and only if addrblocks contains at least one IPAddressFamily object that is correctly marked β€œinherit”: its IPAddressChoice is of type IPAddressChoice_inherit and its inherit element is present. Otherwise it returns 0. πŸ’…
  • X509v3_asid_inherits() returns 1 if and only if at least one of the asnum or the rdi lists has type ASIdentifierChoice_inherit. Otherwise it returns 0. ✨

🌈 SEE ALSO 🌈


πŸ‘‘ STANDARDS πŸ‘‘

RFC 3779: X.509 Extensions for IP Addresses and AS Identifiers: 🧚

  • section 2: IP Address delegation extension
  • section 2.2.3.5: Element inherit
  • section 3: AS identifiers delegation extension
  • section 3.2.3.3: Element inherit

πŸŽ€ HISTORY πŸŽ€

These functions first appeared in OpenSSL 0.9.8e and have been available since OpenBSD 7.1. iconic behavior, honestly πŸ’œ


πŸ’€ BUGS πŸ’€

⚠️ bestie, listen: X509v3_asid_inherits() ignores whether the inherit element is present or absent in the list that is considered to use inheritance. πŸ™ˆ

There is no API that determines whether all lists contained in an ASIdentifiers or an IPAddrBlocks object inherit. See RFC 9287, 5.1.2 for an example where this is relevant. 😭


mwah πŸ’‹ this page came from Debian, dated June 8, 2025, and it's the X509V3_ADDR_INHERITS(3) manual page. byeee 🫢

πŸ“¦ where this page comes from