31
edits
NSS libPKIX Brainstorming: Difference between revisions
→The LibPKIX overview
No edit summary |
|||
| Line 7: | Line 7: | ||
Main functions: | Main functions: | ||
*PKIX_BuildChain | *PKIX_BuildChain: the function attempts to build and validate a certificate chain according to the ProcessingParams using an RFC 3280-compliant validation algorithm. If successful, this function returns NULL(PKIX_Error*) and stores the build result at "pResult", which holds the built certificate chain, as well as additional information, such as the policy tree and the target's public key. If unsuccessful, an Error is returned. | ||
*PKIX_ValidateChain | |||
*PKIX_ValidateChain: the function attempts to validate the certificate chian that has been set in the PKIX_ValidateParams pointed to by "params" using an RFC 3280-compliant algorithm. If successful, this function returns NULL and stores the PKIX_ValidateResult at "pResult", which holds additional information, such as the policy tree and the target's public key. | |||
Main structures: | Main structures: | ||
*PKIX_ProcessingParams | *PKIX_ProcessingParams: are parameters used when validating or building a chain of certificates. Using the parameters, the caller can specify several things, including the various inputs to the PKIX chain validation algorithm (such as trust anchors, initial policies, etc), any customized functionality (such as CertChainCheckers, RevocationCheckers, CertStores), and whether revocation checking should be disabled. | ||
*PKIX_BuildParams | *PKIX_BuildParams | ||
*PKIX_ValidateParams | *PKIX_ValidateParams | ||