VerifyX509(3)

💜 VerifyX509(3) — the Crypt::OpenSSL::VerifyX509 glow-up

okay so bestie, this is a page out of the User Contributed Perl Documentation section of the manual — VerifyX509(3) — and it's lowkey a whole bop. let's get into it 🎀

---

✨ NAME ✨

Crypt::OpenSSL::VerifyX509 — simple certificate verification. that's it. that's the vibe. no cap, it does exactly one thing and it slays at it 💅

---

🦋 SYNOPSIS 🦋

like, here's the whole main character moment in code form:

use Crypt::OpenSSL::VerifyX509;
use Crypt::OpenSSL::X509;

my $ca = Crypt::OpenSSL::VerifyX509->new('t/cacert.pem');

my $cert = Crypt::OpenSSL::X509->new(...);
$ca->verify($cert);

literally that's it. load the modules, build your verifier off 't/cacert.pem', make your $cert, and call verify. iconic behavior honestly 🌸

---

🌈 DESCRIPTION 🌈

so picture this: you've got a CA certificate, and you've got another certificate that you don't trust yet (rude of it, but okay). hand both to this module and it will tell you whether the CA actually signs that certificate. it's giving vibe check for cryptography ✨

why would you even need this? because this is a genuinely useful thing to have when you're signing with X509 certificates but you're doing it outside of SSL. yes, that's a whole thing, and yes, people do it 🫶

a specific example (and the one the author clearly had in mind): you're working with XML signatures, and you need to verify that the signing certificate is valid. that's the moment. that's the whole reason this module exists 🔥

now, you could use Crypt::OpenSSL::CA to do this — it's right there — but it's based on Inline::C, which can be troublesome in some situations. like, it'll work and then it'll be weird about it 😭. so this module provides an XS alternative for the certificate verify feature. same energy, fewer situations, periodt 👑

---

👑 METHODS 👑

💖 new($ca_path)

the constructor, bestie. it returns a VerifyX509 instance, all set up and ready to go with the CA you gave it. 🧚

Arguments:

• $ca_path — path to a file containing the CA certificate

⭐ verify($cert)

the whole point of the module, fr fr. it verifies that the certificate is signed by the CA. returns true if so 👍 and croaks with the verification error if not. no quiet little "false", no subtle vibe — it croaks, loudly, with the actual error 😤

Arguments:

• $cert — a Crypt::OpenSSL::X509 object for the certificate to verify.

---

🌸 AUTHOR 🌸

Chris Andrews <chrisandrews@venda.com>

🎀 MAINTAINER 🎀

Timothy Legge <timlegge@gmail.com>

🌺 COPYRIGHT 🌺

the following copyright notice applies to all the files provided in this distribution, including binary files, unless explicitly noted otherwise. so like, don't try to wiggle out of it 🙈

Copyright 2010 Venda Ltd.

💀 LICENCE 💀

This library is free software; you can redistribute it and/or modify it under the same terms as Perl itself. free as in, go forth and slay 🕊️

---

friendly reminder: verify doesn't return false on failure — it croaks. wrap it if you're not ready for that kind of energy 💅

---

okay that's the whole page, bestie — mwah 💋 this gem was documented in perl v5.42.2 and last touched on 2025-06-30, so if you're reading this from the future, hi, hope the certs still verify 🦋✨