GTlsCertificate

typedef struct {
  GObject parent_instance;

  GTlsCertificatePrivate *priv;
} GTlsCertificate;

Abstract base class for TLS certificate types.

Since 2.28

g_tls_certificate_new_from_pem ()

GTlsCertificate *   g_tls_certificate_new_from_pem      (const gchar *data,
                                                         gssize length,
                                                         GError **error);

Creates a new GTlsCertificate from the PEM-encoded data in data. If data includes both a certificate and a private key, then the returned certificate will include the private key data as well.

If data includes multiple certificates, only the first one will be parsed.

Since 2.28

g_tls_certificate_new_from_file ()

GTlsCertificate *   g_tls_certificate_new_from_file     (const gchar *file,
                                                         GError **error);

Creates a GTlsCertificate from the PEM-encoded data in file. If file cannot be read or parsed, the function will return NULL and set error. Otherwise, this behaves like g_tls_certificate_new().

Since 2.28

g_tls_certificate_new_from_files ()

GTlsCertificate *   g_tls_certificate_new_from_files    (const gchar *cert_file,
                                                         const gchar *key_file,
                                                         GError **error);

Creates a GTlsCertificate from the PEM-encoded data in cert_file and key_file. If either file cannot be read or parsed, the function will return NULL and set error. Otherwise, this behaves like g_tls_certificate_new().

Since 2.28

g_tls_certificate_list_new_from_file ()

GList *             g_tls_certificate_list_new_from_file
                                                        (const gchar *file,
                                                         GError **error);

Creates one or more GTlsCertificates from the PEM-encoded data in file. If file cannot be read or parsed, the function will return NULL and set error. If file does not contain any PEM-encoded certificates, this will return an empty list and not set error.

Since 2.28

g_tls_certificate_get_issuer ()

GTlsCertificate *   g_tls_certificate_get_issuer        (GTlsCertificate *cert);

Gets the GTlsCertificate representing cert's issuer, if known

Since 2.28

g_tls_certificate_verify ()

GTlsCertificateFlags  g_tls_certificate_verify          (GTlsCertificate *cert,
                                                         GSocketConnectable *identity,
                                                         GTlsCertificate *trusted_ca);

This verifies cert and returns a set of GTlsCertificateFlags indicating any problems found with it. This can be used to verify a certificate outside the context of making a connection, or to check a certificate against a CA that is not part of the system CA database.

If identity is not NULL, cert's name(s) will be compared against it, and G_TLS_CERTIFICATE_BAD_IDENTITY will be set in the return value if it does not match. If identity is NULL, that bit will never be set in the return value.

If trusted_ca is not NULL, then cert (or one of the certificates in its chain) must be signed by it, or else G_TLS_CERTIFICATE_UNKNOWN_CA will be set in the return value. If trusted_ca is NULL, that bit will never be set in the return value.

(All other GTlsCertificateFlags values will always be set or unset as appropriate.)

Since 2.28