ModuleHsOpenSSL-0.11.7.10Haskell2010

OpenSSL.X509

An interface to X.509 certificate.

2 types
27 values

PackageHsOpenSSL-0.11.7.10
Exports29
LanguageHaskell2010
LicenceLicenseRef-PublicDomain
SourceX509.hsc

Type

2 declarations

newtypenewtype X509

X509 is an opaque object that represents X.509 certificate.

Constructors

X509 (ForeignPtr X509_)

datadata X509_

Functions to manipulate certificate

12 declarations

valuenewX509 :: IO X509

newX509 creates an empty certificate. You must set the following properties to and sign it (see signX509) to actually use the certificate.

Version

See

setVersion

Serial number

See

setSerialNumber

Issuer name

See

setIssuerName

Subject name

See

setSubjectName

Validity

See

setNotBefore

and

setNotAfter

Public Key

See

setPublicKey

valuewrapX509 :: Ptr X509_ -> IO X509

valuewithX509Ptr :: X509 -> (Ptr X509_ -> IO a) -> IO a

valuewithX509Stack :: [X509] -> (Ptr STACK -> IO a) -> IO a

valueunsafeX509ToPtr :: X509 -> Ptr X509_

valuetouchX509 :: X509 -> IO ()

valuewriteDerX509 :: X509 -> IO ByteString

writeDerX509 cert writes an X.509 certificate to DER string.

valuereadDerX509 :: ByteString -> IO X509

readDerX509 der reads in a certificate.

valuecompareX509 :: X509 -> X509 -> IO Ordering

compareX509 cert1 cert2 compares two certificates.

valuesignX509

:: KeyPair key
=> X509
The certificate to be signed.
-> key
The private key to sign with.
-> Maybe Digest
A hashing algorithm to use. If Nothing the most suitable algorithm for the key is automatically used.
-> IO ()

signX509 signs a certificate with an issuer private key.

valueverifyX509

:: PublicKey key
=> X509
The certificate to be verified.
-> key
The public key to verify with.
-> IO VerifyStatus

verifyX509 verifies a signature of certificate with an issuer public key.

valueprintX509 :: X509 -> IO String

printX509 cert translates a certificate into human-readable format.

Accessors

15 declarations

valuegetVersion :: X509 -> IO Int

getVersion cert returns the version number of certificate. It seems the number is 0-origin: version 2 means X.509 v3.

valuesetVersion :: X509 -> Int -> IO ()

setVersion cert ver updates the version number of certificate.

valuegetSerialNumber :: X509 -> IO Integer

getSerialNumber cert returns the serial number of certificate.

valuesetSerialNumber :: X509 -> Integer -> IO ()

setSerialNumber cert num updates the serial number of certificate.

valuegetIssuerName

:: X509
The certificate to examine.
-> Bool
True if you want the keys of each parts to be of long form (e.g. "commonName"), or False if you don't (e.g. "CN").
-> IO [(String, String)]
Pairs of key and value, for example (\"C\", \"JP\"), (\"ST\", \"Some-State\"), ....

getIssuerName returns the issuer name of certificate.

valuesetIssuerName :: X509 -> [(String, String)] -> IO ()

setIssuerName cert name updates the issuer name of certificate. Keys of each parts may be of either long form or short form. See getIssuerName.

valuegetSubjectName :: X509 -> Bool -> IO [(String, String)]

getSubjectName cert wantLongName returns the subject name of certificate. See getIssuerName.

valuesetSubjectName :: X509 -> [(String, String)] -> IO ()

setSubjectName cert name updates the subject name of certificate. See setIssuerName.

valuegetNotBefore :: X509 -> IO UTCTime

getNotBefore cert returns the time when the certificate begins to be valid.

valuesetNotBefore :: X509 -> UTCTime -> IO ()

setNotBefore cert utc updates the time when the certificate begins to be valid.

valuegetNotAfter :: X509 -> IO UTCTime

getNotAfter cert returns the time when the certificate expires.

valuesetNotAfter :: X509 -> UTCTime -> IO ()

setNotAfter cert utc updates the time when the certificate expires.

valuegetPublicKey :: X509 -> IO SomePublicKey

getPublicKey cert returns the public key of the subject of certificate.

valuesetPublicKey :: PublicKey key => X509 -> key -> IO ()

setPublicKey cert pubkey updates the public key of the subject of certificate.

valuegetSubjectEmail :: X509 -> IO [String]

getSubjectEmail cert returns every subject email addresses in the certificate.