pki_default.h File Reference

#include <open62541/plugin/pki.h>

Go to the source code of this file.

Functions
_UA_BEGIN_DECLS UA_EXPORT void	UA_CertificateVerification_AcceptAll (UA_CertificateVerification *cv)
UA_EXPORT UA_StatusCode	UA_CertificateVerification_Trustlist (UA_CertificateVerification *cv, const UA_ByteString *certificateTrustList, size_t certificateTrustListSize, const UA_ByteString *certificateIssuerList, size_t certificateIssuerListSize, const UA_ByteString *certificateRevocationList, size_t certificateRevocationListSize)

Function Documentation

UA_CertificateVerification_AcceptAll()

_UA_BEGIN_DECLS UA_EXPORT void UA_CertificateVerification_AcceptAll

(

UA_CertificateVerification *

cv

)

This work is licensed under a Creative Commons CCZero 1.0 Universal License.

See http://creativecommons.org/publicdomain/zero/1.0/ for more information.

Copyright 2018 (c) Mark Giraud, Fraunhofer IOSB Copyright 2019 (c) Kalycito Infotech Private Limited Default implementation that accepts all certificates Any plugin implementation should invalidate an existing certificate verification by first calling the internal clear() method if it is not NULL. Refer to the default implementation in src/plugins/crypto/ua_pki_none.c

UA_CertificateVerification_Trustlist()

UA_EXPORT UA_StatusCode UA_CertificateVerification_Trustlist	(	UA_CertificateVerification *	cv,
		const UA_ByteString *	certificateTrustList,
		size_t	certificateTrustListSize,
		const UA_ByteString *	certificateIssuerList,
		size_t	certificateIssuerListSize,
		const UA_ByteString *	certificateRevocationList,
		size_t	certificateRevocationListSize
	)

Accept certificates based on a trust-list and a revocation-list.

Based on mbedTLS. Any plugin implementation should invalidate an existing certificate verification by first calling the internal clear() method if it is not NULL. Refer to the default implementation in src/plugins/crypto/mbedtls/ua_pki_mbedtls.c or src/plugins/crypto/openssl/ua_pki_openssl.c