Symbols ![]()
loading...
Files ![]()
loading...
mbedtls_x509write_csr_set_key_usage() function
Set the Key Usage Extension flags (e.g. MBEDTLS_X509_KU_DIGITAL_SIGNATURE | MBEDTLS_X509_KU_KEY_CERT_SIGN)
Syntax
Implemented in ![]()
x509write_csr.c:87
Return value
0 if successful, or MBEDTLS_ERR_X509_ALLOC_FAILED
Notes
The decipherOnly flag from the Key Usage extension is represented by bit 8 (i.e. 0x8000), which cannot typically be represented in an unsigned char. Therefore, the flag decipherOnly (i.e. #MBEDTLS_X509_KU_DECIPHER_ONLY) cannot be set using this function.
Related Functions
Found 11 other functions taking a ![]()
mbedtls_x509write_csr
argument:
Function
Description
Generic function to add to or replace an extension in the CSR
Write a CSR (Certificate Signing Request) to a DER structure Note: data is written at the end of the buffer! Use the return value to determine where you should start using the buffer
Initialize a CSR context
Set the subject name for a CSR Subject names should contain a comma-separated list of OID types and values: e.g. "C=UK,O=ARM,CN=Mbed TLS Server 1"
Set the key for a CSR (public key will be included, private key used to sign the CSR when writing it)
Set the MD algorithm to use for the signature (e.g. MBEDTLS_MD_SHA1)
Set Subject Alternative Name
Set the Netscape Cert Type flags (e.g. MBEDTLS_X509_NS_CERT_TYPE_SSL_CLIENT | MBEDTLS_X509_NS_CERT_TYPE_EMAIL)
Free the contents of a CSR context
Write a CSR (Certificate Signing Request) to a PEM string
References
Code
Location
Call Tree
mbedtls_x509write_csr_set_key_usage() calls 2 functions:
Data Use
mbedtls_x509write_csr_set_key_usage():