Container for a certificate's version 3 extensions. More...

Data Fields
sbyte	certPathLen
	Number of certificates in the certificate chain; if negative, it's omitted from the `basicConstraints`. More...

byteBoolean	hasBasicConstraints
	`TRUE` specifies that the certificate contains a `basicConstraints` extension; `FALSE` otherwise. More...

byteBoolean	hasKeyUsage
	`TRUE` specifies that the certificate contains a `keyUsage` extension; `FALSE` otherwise. More...

byteBoolean	isCA
	`TRUE` specifies that the `basicConstraints` is a CA value; `FALSE` otherwise. More...

ubyte2	keyUsage
	Bit-string representing the desired version 3 certificate extensions. More...

ubyte4	otherExtCount
	Number of extensions in the extensions array. More...

extensions *	otherExts
	Pointer to array of version 3 extensions. More...

Detailed Description

This structure specifies a certificate's version 3 extensions. For more information, refer to RFC 3280 (ftp://ftp.rfc-editor.org/in-notes/pdfrfc/rfc3280.txt.pdf).

Since: 1.41

Version: 3.06 and later

Field Documentation

◆ certPathLen

sbyte certExtensions::certPathLen

(This field corresponds to the pathLenConstraint referenced in RFC 3280.)

Number of certificates in the certificate chain; if negative, it's omitted from the basicConstraints. (This field corresponds to the pathLenConstraint referenced in RFC 3280.

◆ hasBasicConstraints

byteBoolean certExtensions::hasBasicConstraints

TRUE specifies that the certificate contains a basicConstraints extension; FALSE otherwise.

◆ hasKeyUsage

byteBoolean certExtensions::hasKeyUsage

TRUE specifies that the certificate contains a keyUsage extension; FALSE otherwise.

◆ isCA

byteBoolean certExtensions::isCA

TRUE specifies that the basicConstraints is a CA value; FALSE otherwise.

◆ keyUsage

ubyte2 certExtensions::keyUsage

Bit-string representing the desired version 3 certificate extensions; click keyUsage for details about setting this value.

    keyUsage ::= BIT STRING {
      digitalSignature(0), nonRepudiation(1), keyEncipherment(2),
      dataEncipherment(3), keyAgreement(4), keyCertSign(5), cRLSign(6),
      encipherOnly(7), decipherOnly(8)}

For example, to set the key usage extension to "digital signature,
certificate signing, CRL signing" use the following code:

<tt>%keyUsage = (1 << 0) + (1 << 5) + (1 << 6)</tt>

◆ otherExtCount

ubyte4 certExtensions::otherExtCount

Number of extensions in the extensions array.

◆ otherExts

extensions* certExtensions::otherExts

Pointer to array of version 3 extensions.

The documentation for this struct was generated from the following file:

crypto/ca_mgmt.h

Data Fields