X509_REQ_ADD_EXTENSIONS(3)

okay so this page is X509_REQ_ADD_EXTENSIONS(3), from the Library Functions Manual, and it’s all about extensions in certification requests. bestie, it’s giving ASN.1 but make it cute. 💅

💖 NAME 💖

• X509_REQ_add_extensions, X509_REQ_add_extensions_nid, X509_REQ_get_extensions, X509_REQ_extension_nid — extensions in certification requests

✨ SYNOPSIS ✨

#include <openssl/x509.h>

int
X509_REQ_add_extensions(X509_REQ *req,
    STACK_OF(X509_EXTENSION) *extensions);

int
X509_REQ_add_extensions_nid(X509_REQ *req,
    STACK_OF(X509_EXTENSION) *extensions, int nid);

STACK_OF(X509_EXTENSION) *
X509_REQ_get_extensions(X509_REQ *req);

int
X509_REQ_extension_nid(int nid);

💅 DESCRIPTION 💅

okay so here’s the vibe check on each little function, bestie:

• X509_REQ_add_extensions() — it takes that array of extensions and encodes it with i2d_X509_EXTENSIONS(3). then it adds a new X.501 Attribute object to req, of the type NID_ext_req, using the equivalent of X509_ATTRIBUTE_create_by_NID(3) with a type of V_ASN1_SEQUENCE. iconic behavior, no cap. 🔥
• X509_REQ_add_extensions_nid() — literally identical, except the nid you pass in is used as the X.501 Attribute type instead of NID_ext_req. same energy, different label. 🎀
• X509_REQ_get_extensions() — it retrieves the first value of the first X.501 Attribute of appropriate type. by default, the attribute types NID_ext_req and NID_ms_ext_req are considered appropriate. iykyk. 🦋
• X509_REQ_extension_nid() — checks whether X509_REQ_get_extensions() regards the nid argument as a type appropriate for storing extensions. it’s the vibe-checker for nids. 💜

🫶 RETURN VALUES 🫶

• X509_REQ_add_extensions() and X509_REQ_add_extensions_nid() — return 1 for success or 0 for failure. slay or don’t slay, those are the options. ✨
• X509_REQ_get_extensions() — returns a newly allocated array of ASN.1 Extension objects or NULL if req is NULL, does not contain CertificationRequestInfo, contains no attribute of an appropriate type, or if decoding or memory allocation fails. 😭
• X509_REQ_extension_nid() — returns 1 if nid is considered appropriate or 0 otherwise. simple as that, bestie. 💖

🔥 SEE ALSO 🔥

• d2i_X509_EXTENSION(3)
• STACK_OF(3)
• X509_EXTENSION_new(3)
• X509_REQ_new(3)
• X509V3_extensions_print(3)

🦋 HISTORY 🦋

These functions first appeared in OpenSSL 0.9.5 and have been available since OpenBSD 2.7. vintage but still main character energy. 👑

Source/version: Debian · date: August 18, 2024 · manual: X509_REQ_ADD_EXTENSIONS(3) — byeeeee 💖