mbedtls_x509write_csr_set_extension() function

CSR context to use

OID of the extension

length of the OID

Set to 1 to mark the extension as critical, 0 otherwise.

value of the extension OCTET STRING

length of the value data

Write a CSR (Certificate Signing Request) to a DER structure Note: data is written at the end of the buffer! Use the return value to determine where you should start using the buffer

Initialize a CSR context

Set the subject name for a CSR Subject names should contain a comma-separated list of OID types and values: e.g. "C=UK,O=ARM,CN=Mbed TLS Server 1"

Set the key for a CSR (public key will be included, private key used to sign the CSR when writing it)

Set the MD algorithm to use for the signature (e.g. MBEDTLS_MD_SHA1)

Set the Key Usage Extension flags (e.g. MBEDTLS_X509_KU_DIGITAL_SIGNATURE | MBEDTLS_X509_KU_KEY_CERT_SIGN)

Set Subject Alternative Name

Set the Netscape Cert Type flags (e.g. MBEDTLS_X509_NS_CERT_TYPE_SSL_CLIENT | MBEDTLS_X509_NS_CERT_TYPE_EMAIL)

Free the contents of a CSR context

Write a CSR (Certificate Signing Request) to a PEM string