NAME

v2i_ASN1_BIT_STRING, i2v_ASN1_BIT_STRING — ASN.1 BIT STRING utility functions for certificate extensions

SYNOPSIS

#include <openssl/x509v3.h>

ASN1_BIT_STRING *
v2i_ASN1_BIT_STRING(X509V3_EXT_METHOD *method, X509V3_CTX *ctx, STACK_OF(CONF_VALUE) *nval);

STACK_OF(CONF_VALUE) *
i2v_ASN1_BIT_STRING(X509V3_EXT_METHOD *method, ASN1_BIT_STRING *bit_string, STACK_OF(CONF_VALUE) *nval);

DESCRIPTION

v2i_ASN1_BIT_STRING() allocates a new ASN.1 BIT STRING object and initializes it from a list of bit names. The nval argument is essentially used as the list of the names of the bits to set. Both long names and short names can be used. One name is taken from each element of nval. The ctx argument and any section names or values contained in the elements of nval are ignored. To convert a C string containing a comma-separated list of names to the input format of this function, X509V3_parse_list(3) can be used.

i2v_ASN1_BIT_STRING() translates the numbers of the bits that are set in the bit_string to long names. For each bit that is set, one element containing the corresponding long name is added to nval. If a NULL pointer is passed for the nval argument, a new STACK_OF(CONF_VALUE) is allocated.

For both functions, the method argument is only used for the translation of bit names to bit numbers and vice versa. Any names and bit numbers that do not occur in the usr_data translation table in the method are silently ignored.

For the following arguments, X509V3_EXT_get_nid(3) returns static constant method objects supporting these functions:

NID_crl_reason

reason codes, RFC 5280 section 5.3.1

NID_key_usage

key usage purposes, RFC 5280 section 4.2.1.3

NID_netscape_cert_type

Netscape certificate types (obsolete)

While an application program could theoretically provide its own method object containing a custom translation table, that is unlikely to be useful for any practical purpose.

RETURN VALUES

v2i_ASN1_BIT_STRING() returns the new BIT STRING object and i2v_ASN1_BIT_STRING() the modified or new list of bit names. Both functions return NULL if an error occurs, in particular if memory allocation fails.

SEE ALSO

ASN1_BIT_STRING_new(3), ASN1_BIT_STRING_set(3), i2s_ASN1_ENUMERATED_TABLE(3), STACK_OF(3), tls_peer_ocsp_crl_reason(3), X509_get_key_usage(3), X509V3_EXT_get_nid(3), X509V3_get_d2i(3), X509V3_parse_list(3)

HISTORY

These functions first appeared in OpenSSL 0.9.8 and have been available since OpenBSD 4.5.