X509CAImpl

This class represents X.509 Certificate Authorities (CAs).

final

static if(BOTAN_HAS_X509_CERTIFICATES)

class X509CAImpl {

X509Certificate signRequest(PKCS10Request req, RandomNumberGenerator rng, X509Time not_before, X509Time not_after);

const(X509Certificate) caCertificate();

X509CRL newCRL(RandomNumberGenerator rng, Duration next_update);

X509CRL updateCRL(X509CRL crl, Vector!CRLEntry new_revoked, RandomNumberGenerator rng, Duration next_update);

static X509Certificate makeCert(PKSigner signer, RandomNumberGenerator rng, AlgorithmIdentifier sig_algo, Vector!(ubyte, ALLOC) pub_key, X509Time not_before, X509Time not_after, X509DN issuer_dn, X509DN subject_dn, X509Extensions extensions);

this(X509Certificate c, PrivateKey key, string hash_fn);

}

Constructors

this this(X509Certificate c, PrivateKey key, string hash_fn): Create a new CA object. Load the certificate and private key

Destructor

~this ~this(): Undocumented in source.

Members

Functions

caCertificate const(X509Certificate) caCertificate(): Get the certificate of this CA.
newCRL X509CRL newCRL(RandomNumberGenerator rng, Duration next_update): Create a new and empty CRL for this CA.
signRequest X509Certificate signRequest(PKCS10Request req, RandomNumberGenerator rng, X509Time not_before, X509Time not_after): Sign a PKCS#10 Request.
updateCRL X509CRL updateCRL(X509CRL crl, Vector!CRLEntry new_revoked, RandomNumberGenerator rng, Duration next_update): Create a new CRL by with additional entries.

Static functions

makeCert X509Certificate makeCert(PKSigner signer, RandomNumberGenerator rng, AlgorithmIdentifier sig_algo, Vector!(ubyte, ALLOC) pub_key, X509Time not_before, X509Time not_after, X509DN issuer_dn, X509DN subject_dn, X509Extensions extensions): Interface for creating new certificates

Meta

Source

See Implementation

botan cert x509 x509_ca aliases

X509CA

classes

X509CAImpl

functions

chooseSigFormat