X509 certificate format

Returned if the function executes successfully. NULL if the call to XFTELL macro returns a negative value.ExampleWOLFSSL_X509* x509a = (WOLFSSL_X509*)XMALLOC(sizeof(WOLFSSL_X509), NULL,DYNAMIC_TYPE_X509);WOLFSSL_X509** x509 = x509a;XFILE file; (mapped to struct fs_file*)...WOLFSSL_X509* newX509 = wolfSSL_X509_d2i_fp(x509, file);if(newX509 == NULL){ // The function returned NULL}function wolfSSL_X509_load_certificate_fileWOLFSSL_X509 * wolfSSL_X509_load_certificate_file( const char * fname, int format)The function loads the x509 certificate into memory. Parameters: fname the certificate file to be loaded. format the format of the certificate.See: InitDecodedCert PemToDer wolfSSL_get_certificate AssertNotNull Return: pointer a successful execution returns pointer to a WOLFSSL_X509 structure. NULL returned if the certificate was not able to be written.Example#define cliCert “certs/client-cert.pem”…X509* x509;…x509 = wolfSSL_X509_load_certificate_file(cliCert, SSL_FILETYPE_PEM);AssertNotNull(x509);function wolfSSL_X509_get_device_typeunsigned char * wolfSSL_X509_get_device_type( WOLFSSL_X509 * x509, unsigned char * in, int * inOutSz)This function copies the device type from the x509 structure to the buffer. Parameters: x509 pointer to a WOLFSSL_X509 structure, created with WOLFSSL_X509_new(). in a pointer to a byte type that will hold the device type (the buffer). inOutSz the minimum of either the parameter inOutSz or the deviceTypeSz member of the x509 structure.See: wolfSSL_X509_get_hw_typewolfSSL_X509_get_hw_serial_numberwolfSSL_X509_d2i Return: pointer returns a byte pointer holding the device type from the x509 structure. NULL returned if the buffer size is NULL.ExampleWOLFSSL_X509* x509 = (WOLFSSL_X509)XMALOC(sizeof(WOLFSSL_X509), NULL,DYNAMIC_TYPE_X509);byte* in;int* inOutSz;...byte* deviceType = wolfSSL_X509_get_device_type(x509, in, inOutSz);if(!deviceType){ // Failure case, NULL was returned.}function wolfSSL_X509_get_hw_typeunsigned char * wolfSSL_X509_get_hw_type( WOLFSSL_X509 * x509, unsigned char * in, int * inOutSz)The function copies the hwType member of the WOLFSSL_X509 structure to the buffer. Parameters: x509 a pointer to a WOLFSSL_X509 structure containing certificate information. in pointer to type byte that represents the buffer. inOutSz pointer to type int that represents the size of the buffer.See: wolfSSL_X509_get_hw_serial_numberwolfSSL_X509_get_device_typeReturn: byte The function returns a byte type of the data previously held in the hwType member of the WOLFSSL_X509 structure. NULL returned if inOutSz is NULL.ExampleWOLFSSL_X509* x509; // X509 certificatebyte* in; //

* )Returns the common name of the subject from the certificate.const unsigned char *wolfSSL_X509_get_der(WOLFSSL_X509 * x509, int * outSz)This function gets the DER encoded certificate in the WOLFSSL_X509 struct.WOLFSSL_ASN1_TIME *wolfSSL_X509_get_notAfter(WOLFSSL_X509 * )This function checks to see if x509 is NULL and if it’s not, it returns the notAfter member of the x509 struct.intwolfSSL_X509_version(WOLFSSL_X509 * )This function retrieves the version of the X509 certificate.WOLFSSL_X509 *wolfSSL_X509_d2i_fp(WOLFSSL_X509 ** x509, FILE * file)If NO_STDIO_FILESYSTEM is defined this function will allocate heap memory, initialize a WOLFSSL_X509 structure and return a pointer to it.WOLFSSL_X509 *wolfSSL_X509_load_certificate_file(const char * fname, int format)The function loads the x509 certificate into memory.unsigned char *wolfSSL_X509_get_device_type(WOLFSSL_X509 * x509, unsigned char * in, int * inOutSz)This function copies the device type from the x509 structure to the buffer.unsigned char *wolfSSL_X509_get_hw_type(WOLFSSL_X509 * x509, unsigned char * in, int * inOutSz)The function copies the hwType member of the WOLFSSL_X509 structure to the buffer.unsigned char *wolfSSL_X509_get_hw_serial_number(WOLFSSL_X509 * x509, unsigned char * in, int * inOutSz)This function returns the hwSerialNum member of the x509 object.intwolfSSL_SetTmpDH(WOLFSSL * ssl, const unsigned char * p, int pSz, const unsigned char * g, int gSz)Server Diffie-Hellman Ephemeral parameters setting. This function sets up the group parameters to be used if the server negotiates a cipher suite that uses DHE.intwolfSSL_SetTmpDH_buffer(WOLFSSL * ssl, const unsigned char * b, long sz, int format)The function calls the wolfSSL_SetTMpDH_buffer_wrapper, which is a wrapper for Diffie-Hellman parameters.intwolfSSL_SetTmpDH_file(WOLFSSL * ssl, const char * f, int format)This function calls wolfSSL_SetTmpDH_file_wrapper to set server Diffie-Hellman parameters.intwolfSSL_CTX_SetTmpDH(WOLFSSL_CTX * ctx, const unsigned char * p, int pSz, const unsigned char * g, int gSz)Sets the parameters for the server CTX Diffie-Hellman.intwolfSSL_CTX_SetTmpDH_buffer(WOLFSSL_CTX * ctx, const unsigned char * b, long sz, int format)A wrapper function that calls wolfSSL_SetTmpDH_buffer_wrapper.intwolfSSL_CTX_SetTmpDH_file(WOLFSSL_CTX * ctx, const char * f, int format)The function calls wolfSSL_SetTmpDH_file_wrapper to set the server Diffie-Hellman

@peculiar/x509AboutInstallationDocumentationUsageBrowserSet crypto provider for Node.jsCreate a self-signed certificateParse a X509 certificateCreate a PKCS#10 certificate requestDecoded X509 certificateBuild a certificate chainExport a list of X509 certificates to PKCS#7 formatAbout@peculiar/x509 is an easy to use TypeScript/Javascript library based on @peculiar/asn1-schema that makes generating X.509 Certificates and Certificate Requests as well as validating certificate chains easy.Installationnpm install @peculiar/x509Documentation release of @peculiar/x509 will have new build of ./build/x509.js for use in the browser. To get access to module classes use x509 global variable.WARN: We recommend hosting and controlling your own copy for security reasons">script src=" simple web application examplesGenerate X509 certificateGenerate PKCS#10 certificate requestSet crypto provider for Node.jsIn some cases you may want to use a different cryptographic implementation, for example when you want to work with an object that supports a cryptographic algorithm not supported by the platform you are on.In these cases you can set a custom provider, these providers need to be compatible with the WebCrypto API, for example on NodeJS you can use @peculiar/webcrypto to allow @peculiar/x509 to work the same as it does in browser!import * as x509 from "@peculiar/x509";import { Crypto } from "@peculiar/webcrypto";const crypto = new Crypto();x509.cryptoProvider.set(crypto);Create a self-signed certificateconst alg = { name: "RSASSA-PKCS1-v1_5", hash: "SHA-256", publicExponent: new Uint8Array([1, 0, 1]), modulusLength: 2048,};const keys = await crypto.subtle.generateKey(alg, false, ["sign", "verify"]);const cert = await x509.X509CertificateGenerator.createSelfSigned({ serialNumber: "01", name: "CN=Test", notBefore: new Date("2020/01/01"), notAfter: new Date("2020/01/02"), signingAlgorithm: alg, keys, extensions: [ new x509.BasicConstraintsExtension(true, 2, true), new x509.ExtendedKeyUsageExtension(["1.2.3.4.5.6.7", "2.3.4.5.6.7.8"], true), new x509.KeyUsagesExtension(x509.KeyUsageFlags.keyCertSign | x509.KeyUsageFlags.cRLSign, true), await x509.SubjectKeyIdentifierExtension.create(keys.publicKey), ]});console.log(cert.toString("pem")); //