SourceVu will show references to mbedtls_x509_crt_profile from the following samples and libraries:
Symbols ![]()
loading...
Files ![]()
loading...
mbedtls_x509_crt_profile struct
Security profile for certificate verification. All lists are bitfields, built by ORing flags from MBEDTLS_X509_ID_FLAG(). The fields of this structure are part of the public API and can be manipulated directly by applications. Future versions of the library may add extra fields or reorder existing fields. You can create custom profiles by starting from a copy of an existing profile, such as mbedtls_x509_crt_profile_default or mbedtls_x509_ctr_profile_none and then tune it to your needs. For example to allow SHA-224 in addition to the default: mbedtls_x509_crt_profile my_profile = mbedtls_x509_crt_profile_default; my_profile.allowed_mds |= MBEDTLS_X509_ID_FLAG( MBEDTLS_MD_SHA224 ); Or to allow only RSA-3072+ with SHA-256: mbedtls_x509_crt_profile my_profile = mbedtls_x509_crt_profile_none; my_profile.allowed_mds = MBEDTLS_X509_ID_FLAG( MBEDTLS_MD_SHA256 ); my_profile.allowed_pks = MBEDTLS_X509_ID_FLAG( MBEDTLS_PK_RSA ); my_profile.rsa_min_bitlen = 3072;
Syntax
typedef struct mbedtls_x509_crt_profile
{
uint32_t allowed_mds;
uint32_t allowed_pks;
uint32_t allowed_curves;
uint32_t rsa_min_bitlen;
}
mbedtls_x509_crt_profile;
Fields
Field
Declared as
Description
uint32_t
PK algs for public keys; this applies to all certificates in the provided chain.
Related Functions
Found 9 other functions taking a mbedtls_x509_crt_profile
argument:
Function
Description
Set the X.509 security profile used for verification
Restartable version of \c mbedtls_crt_verify_with_profile()
Verify a chain of certificates with respect to a configurable security profile.