X509_OCSPID_PRINT(3)

💅 X509_OCSPID_PRINT — pretty-print hashes of subject name and public key

okay so bestie, welcome to the X509_ocspid_print page 💖 (that's section 3, library functions, iykyk). it's a tiny one, she's lowkey iconic, let's go ✨

---

🌸 SYNOPSIS 🌸

#include <openssl/x509.h>

int
X509_ocspid_print(BIO *bio, X509 *issuer);

🎀 DESCRIPTION 🎀

okay so X509_ocspid_print() produces human-readable output to bio — and what's in that output, you ask? it's hexadecimal representations of SHA-1 hashes of the DER-encoded forms of two things:

• the subject name of the issuer certificate
• the public key of the issuer certificate

and the reason these hashes are the moment is that they're exactly how these things appear in OCSP requests. so you're basically seeing the OCSP-ified version of the cert's identity, no cap 🫶

⭐ RETURN VALUES ⭐

• 1 → success, slay 🎉
• 0 → failure, not slay 😭

🦋 EXAMPLES 🦋

this function is the main character behind the -ocspid flag of the openssl(1) x509 command. that's the whole vibe. 💅

👑 SEE ALSO 👑

• EVP_sha1(3)
• i2d_X509_NAME(3)
• OCSP_cert_to_id(3)
• OCSP_REQUEST_new(3)
• X509_get_pubkey(3)
• X509_get_subject_name(3)

🌈 HISTORY 🌈

X509_ocspid_print() first appeared in OpenSSL 0.9.7 and has been available since OpenBSD 3.2. she's been doing this since before u were born fr fr 🧚

---

and that's the whole page, bestie 🍓 this drop came from the Debian fam, dated August 6, 2021, and it's filed under X509_OCSPID_PRINT(3). go off, print those hashes, periodt 💜✨