iPXE
Functions
certmgmt.h File Reference

Certificate management. More...

#include <ipxe/x509.h>

Go to the source code of this file.

Functions

 FILE_LICENCE (GPL2_OR_LATER_OR_UBDL)
 
 FILE_SECBOOT (PERMITTED)
 
void certstat (struct x509_certificate *cert)
 Display status of a certificate. More...
 

Detailed Description

Certificate management.

Definition in file certmgmt.h.

Function Documentation

◆ FILE_LICENCE()

FILE_LICENCE ( GPL2_OR_LATER_OR_UBDL  )

◆ FILE_SECBOOT()

FILE_SECBOOT ( PERMITTED  )

◆ certstat()

void certstat ( struct x509_certificate cert)

Display status of a certificate.

Parameters
certX.509 certificate

Definition at line 45 of file certmgmt.c.

45  {
46  struct digest_algorithm *digest = &sha1_algorithm;
47  uint8_t fingerprint[ digest->digestsize ];
48  char buf[ base16_encoded_len ( sizeof ( fingerprint ) ) + 1 /* NUL */ ];
49 
50  /* Generate fingerprint */
51  x509_fingerprint ( cert, digest, fingerprint );
52  base16_encode ( fingerprint, sizeof ( fingerprint ),
53  buf, sizeof ( buf ) );
54 
55  /* Print certificate status */
56  printf ( "%s : %s", x509_name ( cert ), buf );
57  if ( cert->flags & X509_FL_PERMANENT )
58  printf ( " [PERMANENT]" );
59  if ( cert->flags & X509_FL_EXPLICIT )
60  printf ( " [EXPLICIT]" );
61  if ( x509_is_valid ( cert, NULL ) )
62  printf ( " [VALIDATED]" );
63  printf ( "\n" );
64 }
int printf(const char *fmt,...)
Write a formatted string to the console.
Definition: vsprintf.c:465
int x509_is_valid(struct x509_certificate *cert, struct x509_root *root)
Check if X.509 certificate is valid.
Definition: x509.c:1313
unsigned int flags
Flags.
Definition: x509.h:224
static size_t base16_encoded_len(size_t raw_len)
Calculate length of base16-encoded data.
Definition: base16.h:25
unsigned char uint8_t
Definition: stdint.h:10
void x509_fingerprint(struct x509_certificate *cert, struct digest_algorithm *digest, void *fingerprint)
Calculate X.509 certificate fingerprint.
Definition: x509.c:1237
Certificate was added at build time.
Definition: x509.h:255
const char * x509_name(struct x509_certificate *cert)
Get X.509 certificate display name.
Definition: x509.c:147
size_t digestsize
Digest size.
Definition: crypto.h:27
A message digest algorithm.
Definition: crypto.h:19
#define NULL
NULL pointer (VOID *)
Definition: Base.h:322
Certificate was added explicitly at run time.
Definition: x509.h:257
struct digest_algorithm sha1_algorithm
SHA-1 algorithm.
Definition: sha1.c:258

References base16_encoded_len(), digest_algorithm::digestsize, x509_certificate::flags, NULL, printf(), sha1_algorithm, x509_fingerprint(), X509_FL_EXPLICIT, X509_FL_PERMANENT, x509_is_valid(), and x509_name().