X509_ACERT_ADD_ATTR_NCONF(3SSL)

📦
version 4.0.3 · 6 versions
, in ubuntu stonking

✨ X509_ACERT_ADD_ATTR_NCONF(3SSL) ✨

okay bestie so this is <openssl/x509_acert.h> territory, and the function is X509_ACERT_add_attr_nconf — it's the one that lets you pour a whole config section's worth of attributes into your attribute certificate 💖

🌸 SYNOPSIS 🌸

#include <openssl/x509_acert.h>

int X509_ACERT_add_attr_nconf(CONF *conf, const char *section,
                              X509_ACERT *acert);

💅 DESCRIPTION 💅

So like, X509_ACERT_add_attr_nconf() takes your existing X509_ACERT structure, the one you already made, and it's gonna add one or more X509_ATTRIBUTEs to it. Obsessed. ✨

Where do those attributes come from tho? Not from you typing them out one by one, no ma'am — they get read straight out of a section of the conf object you hand over. Very lazy-girl-coded of them honestly. 🎀

That given section of the config needs to look all like this, one attribute per line, no cap:

attribute_name = value

Now here's the tea: the format of value fully depends on what attribute_name you're working with. It can be either:

  • a plain string value 🍓
  • an ASN1_TYPE object 🦋

Wanna encode one of those ASN1_TYPE objects? Lowkey easy. Just slap the prefix "ASN1:" on the front, then follow it with the object description — and it uses the exact same syntax as ASN1_generate_nconf(3), so if you know that one you already know this one. periodt.

Like, for example, bestie:

id-aca-group = ASN1:SEQUENCE:ietfattr

[ietfattr]
values = SEQUENCE:groups

[groups]
1.string = UTF8:mygroup1

See? Sections inside sections, living their nested main character lives. 🌈

👑 RETURN VALUES 👑

  • X509_ACERT_add_attr_nconf() returns 1 when it slays (success) 💖
  • and 0 when it does not (failure) 😭

🌟 SEE ALSO 🌟

ASN1_generate_nconf(3) — go read that one too fr fr.

🦋 HISTORY 🦋

The function X509_ACERT_add_attr_nconf() was added in OpenSSL 3.4. So if your OpenSSL is older than that, it's giving "who is she" 💀

Copyright 2023-2024 The OpenSSL Project Authors. All Rights Reserved.

Licensed under the Apache License 2.0 (the "License"). You may not use this file except in compliance with the License. You can obtain a copy in the file LICENSE in the source distribution or at <https://www.openssl.org/source/license.html>.

okay that's the whole page bestie, mwah 💜 stay licensed, stay compliant, don't skip the ASN1: prefix ✨

X509_ACERT_ADD_ATTR_NCONF(3SSL) — OpenSSL 4.0.3 — 2026-09-29 🫶

📦 where this page comes from