X509_NAME_ENTRY_GET_OBJECT(3ossl)
π X509_NAME_ENTRY_GET_OBJECT β the 3ossl girlies' guide to X509_NAME_ENTRY
okay so bestie, you found the 3ossl page for the X509_NAME_ENTRY utility functions and honestly? it's a little family of getters, setters and creators for one single name/value pair inside an X509 name. think of an X509_NAME_ENTRY as one line on a form β the field name (an ASN1_OBJECT) and the field value (an ASN1_STRING) β and these functions are your little hands to grab the pen ποΈβ¨
πΈ SYNOPSIS πΈ
#include <openssl/x509.h>
ASN1_OBJECT *X509_NAME_ENTRY_get_object(const X509_NAME_ENTRY *ne);
ASN1_STRING *X509_NAME_ENTRY_get_data(const X509_NAME_ENTRY *ne);
int X509_NAME_ENTRY_set_object(X509_NAME_ENTRY *ne, const ASN1_OBJECT *obj);
int X509_NAME_ENTRY_set_data(X509_NAME_ENTRY *ne, int type,
const unsigned char *bytes, int len);
X509_NAME_ENTRY *X509_NAME_ENTRY_create_by_txt(X509_NAME_ENTRY **ne, const char *field,
int type, const unsigned char *bytes,
int len);
X509_NAME_ENTRY *X509_NAME_ENTRY_create_by_NID(X509_NAME_ENTRY **ne, int nid,
int type, const unsigned char *bytes,
int len);
X509_NAME_ENTRY *X509_NAME_ENTRY_create_by_OBJ(X509_NAME_ENTRY **ne,
const ASN1_OBJECT *obj, int type,
const unsigned char *bytes, int len);
β¨ DESCRIPTION β¨ (what each one actually does)
X509_NAME_ENTRY_get_object()β grabs the field name ofneand hands it back to you as anASN1_OBJECTstructure. the name tag, basically π·οΈX509_NAME_ENTRY_get_data()β grabs the field value ofneand returns it as anASN1_STRINGstructure. the actual content, the main character of the entry πX509_NAME_ENTRY_set_object()β sets the field name ofnetoobj. new name tag, who dis πX509_NAME_ENTRY_set_data()β sets the field value ofneto string typetypeand value determined bybytesandlen. you're literally writing the value in, no cap βοΈX509_NAME_ENTRY_create_by_txt(),X509_NAME_ENTRY_create_by_NID()andX509_NAME_ENTRY_create_by_OBJ()β create and return anX509_NAME_ENTRYstructure. factory functions, they make the whole thing from scratch π οΈβ¨
π¦ NOTES π¦ (the lore you need)
X509_NAME_ENTRY_get_object() and X509_NAME_ENTRY_get_data() are your besties for examining an X509_NAME_ENTRY β like, for example, one that came back from X509_NAME_get_entry(). peek at the field name, peek at the value, done π
X509_NAME_ENTRY_create_by_txt(), X509_NAME_ENTRY_create_by_OBJ(), X509_NAME_ENTRY_create_by_NID() and X509_NAME_ENTRY_set_data() are seldom used in practice β and there's a reason for that: X509_NAME_ENTRY structures are almost always part of X509_NAME structures, and the matching X509_NAME functions are typically used to create and add new entries in a single operation. so it's giving "I could do it in two steps but why would I" π
The arguments of these functions support similar options to the similarly named ones of the corresponding X509_NAME functions, such as X509_NAME_add_entry_by_txt(). So for example type can be set to MBSTRING_ASC β but heads up, in the case of X509_set_data() the field name must be set first so the relevant field information can be looked up internally. order matters, bestie, don't skip steps π«Ά
π RETURN VALUES π
X509_NAME_ENTRY_get_object()β returns a validASN1_OBJECTstructure if it is set, orNULLif an error occurred πX509_NAME_ENTRY_get_data()β returns a validASN1_STRINGstructure if it is set, orNULLif an error occurred πX509_NAME_ENTRY_set_object()andX509_NAME_ENTRY_set_data()β return1on success or0on error π―X509_NAME_ENTRY_create_by_txt(),X509_NAME_ENTRY_create_by_NID()andX509_NAME_ENTRY_create_by_OBJ()β return a validX509_NAME_ENTRYon success orNULLif an error occurred π
lowkey the pattern is: pointer-returning ones give youNULLon error, int-returning ones give you0. check your returns fr fr π₯
π SEE ALSO π
π COPYRIGHT π
Copyright 2002-2018 The OpenSSL Project Authors. All Rights Reserved.
Licensed under the Apache License 2.0 (the "License"). You may not use this file except in compliance with the License. You can obtain a copy in the file LICENSE in the source distribution or at <https://www.openssl.org/source/license.html>.
go off, icon β this was 3.5.0, dated 2026-09-25, straight from the X509_NAME_ENTRY_GET_OBJECT(3ossl) page. slay, read the docs, stay hydrated ππ§π
π¦ where this page comes from
- opensuse-leap 16.0: openssl-3-doc 3.5.0-160000.11.1 Β· Apache-2.0
- π girlified by deepseek-ai/DeepSeek-V4.1-Flash-1017 on : a language model's rewrite of the original, under its terms