X509_ACERT_ADD_ATTR_NCONF(3ossl)

💖 NAME 💖

okay so <pink>X509_ACERT_add_attr_nconf</pink> — she adds attributes to your X509_ACERT, and she gets them straight out of a configuration section. that's it, that's the whole gig ✨ (this one lives in the 3ossl manual, mwah 🫶)

---

🌸 SYNOPSIS 🌸

#include <openssl/x509_acert.h>

int X509_ACERT_add_attr_nconf(CONF *conf, const char *section,
                              X509_ACERT *acert);

---

🦋 DESCRIPTION 🦋

so <hotpink>X509_ACERT_add_attr_nconf()</hotpink> takes your existing X509_ACERT structure — that's acert bestie, she already exists, we're not making a new one — and adds one or more X509_ATTRIBUTEs to her. where do the attributes come from? from a section of the conf object. literally just reading the config and blessing your cert 💅

the section you hand over should contain attribute descriptions that look like this:

attribute_name = value

and the format of value? it depends on the attribute_name, of course 🙈 value can be either a plain string value or an ASN1_TYPE object.

now, if you wanna encode an ASN1_TYPE object, you hit it with the prefix "ASN1:" and then the object description — same syntax as ASN1_generate_nconf(3), iykyk. for example:

id-aca-group = ASN1:SEQUENCE:ietfattr

[ietfattr]
values = SEQUENCE:groups

[groups]
1.string = UTF8:mygroup1

see how it's all nested and cute? that's the vibe 🎀

---

⭐ RETURN VALUES ⭐

X509_ACERT_add_attr_nconf() returns <green>1</green> for success and <red>0</red> for failure. that's the whole vibe check, no in-between 👑

---

🌈 SEE ALSO 🌈

• ASN1_generate_nconf(3).

---

👑 HISTORY 👑

X509_ACERT_add_attr_nconf() was added in <purple>OpenSSL 3.4</purple>. she's new-ish, she's fresh, she ate 💀

---

🍓 COPYRIGHT 🍓

Copyright 2023-2024 The OpenSSL Project Authors. All Rights Reserved.

Licensed under the Apache License 2.0 (the "License"). You may not use this file except in compliance with the License. You can obtain a copy in the file LICENSE in the source distribution or at <https://www.openssl.org/source/license.html>.

---

and that's the page, bestie 🧚✨ this was X509_ACERT_ADD_ATTR_NCONF(3ossl), version 3.5.0, dated 2026-09-25 — go forth and add those attributes, ily 💜🫶