gnutls_sign_set_secure_for_certs(3) — Linux manual page
gnutls_sign_s...ure_for_certs(3) gnutls gnutls_sign_s...ure_for_certs(3)
NAME
gnutls_sign_set_secure_for_certs - API function
SYNOPSIS
#include <gnutls/gnutls.h>
int gnutls_sign_set_secure_for_certs(gnutls_sign_algorithm_t
sign, unsigned int secure);
ARGUMENTS
gnutls_sign_algorithm_t sign
the sign algorithm
unsigned int secure
whether to mark the sign algorithm secure for
certificates
DESCRIPTION
Modify the previous system wide setting that marked sign as
secure or insecure for the use in certificates. Calling this
function is allowed only if allowlisting mode is set in the
configuration file, and only if the system-wide TLS priority
string has not been initialized yet. The intended usage is to
provide applications with a way to expressly deviate from the
distribution or site defaults inherited from the configuration
file. The modification is composable with further modifications
performed through the priority string mechanism.
This function is not thread-safe and is intended to be called in
the main thread at the beginning of the process execution. When
secure is true, sign is marked as secure for any use unlike
gnutls_sign_set_secure(). Otherwise, it is marked as insecure
only for the use in certificates. Use gnutls_sign_set_secure()
to mark it insecure for any uses.
RETURNS
0 on success or negative error code otherwise.
SINCE
3.7.3
REPORTING BUGS
Report bugs to <bugs@gnutls.org>.
Home page: https://www.gnutls.org
COPYRIGHT
Copyright © 2001-2023 Free Software Foundation, Inc., and others.
Copying and distribution of this file, with or without
modification, are permitted in any medium without royalty
provided the copyright notice and this notice are preserved.
SEE ALSO
The full documentation for gnutls is maintained as a Texinfo
manual. If the /usr/share/doc/gnutls/ directory does not contain
the HTML form visit
https://www.gnutls.org/manual/
COLOPHON
This page is part of the GnuTLS (GnuTLS Transport Layer Security
Library) project. Information about the project can be found at
⟨http://www.gnutls.org/⟩. If you have a bug report for this
manual page, send it to bugs@gnutls.org. This page was obtained
from the tarball gnutls-3.8.5.tar.xz fetched from
⟨http://www.gnutls.org/download.html⟩ on 2024-06-14. If you
discover any rendering problems in this HTML version of the page,
or you believe there is a better or more up-to-date source for
the page, or you have corrections or improvements to the
information in this COLOPHON (which is not part of the original
manual page), send a mail to man-pages@man7.org