Class
GcrPkcs11Certificate
Description [src]
class Gcr.Pkcs11Certificate : Gck.Object {
parent: GckObject
}
A certificate loaded from a PKCS#11 storage.
It is also a valid GckObject
and can be used as such.
Use gcr_pkcs11_certificate_lookup_issuer()
to lookup the issuer of a given
certificate in the PKCS#11 store.
Various common PKCS#11 certificate attributes are automatically loaded and are available via gcr_pkcs11_certificate_get_attributes().
Functions
gcr_pkcs11_certificate_lookup_issuer
Lookup a the issuer of a certificate
in the PKCS#11 storage. The
lookup is done using the issuer DN of the certificate. No certificate chain
verification is done. Use a crypto library to make trust decisions.
gcr_pkcs11_certificate_lookup_issuer_async
Lookup a the issuer of a certificate
in the PKCS#11 storage. The
lookup is done using the issuer DN of the certificate. No certificate chain
verification is done. Use a crypto library to make trust decisions.
gcr_pkcs11_certificate_lookup_issuer_finish
Finishes an asynchronous operation started by gcr_pkcs11_certificate_lookup_issuer_async().
Instance methods
gcr_pkcs11_certificate_get_attributes
Access the automatically loaded attributes for this certificate.
Methods inherited from GcrCertificate (22)
gcr_certificate_get_basic_constraints
Get the basic constraints for the certificate if present. If FALSE
is
returned then no basic constraints are present and the is_ca
and
path_len
arguments are not changed.
gcr_certificate_get_der_data
Gets the raw DER data for an X.509 certificate.
gcr_certificate_get_expiry_date
Get the expiry date of this certificate.
gcr_certificate_get_fingerprint
Calculate the fingerprint for this certificate.
gcr_certificate_get_fingerprint_hex
Calculate the fingerprint for this certificate, and return it as a hex string.
gcr_certificate_get_interface_elements
Get the list of sections from the certificate that can be shown to the user interface.
gcr_certificate_get_issued_date
Get the issued date of this certificate.
gcr_certificate_get_issuer_cn
Get the common name of the issuer of this certificate.
gcr_certificate_get_issuer_dn
Get the full issuer DN of the certificate as a (mostly) readable string.
gcr_certificate_get_issuer_name
Get a name to represent the issuer of this certificate.
gcr_certificate_get_issuer_part
Get a part of the DN of the issuer of this certificate.
gcr_certificate_get_issuer_raw
Get the raw DER data for the issuer DN of the certificate.
gcr_certificate_get_key_size
Get the key size in bits of the public key represented by this certificate.
gcr_certificate_get_serial_number
Get the raw binary serial number of the certificate.
gcr_certificate_get_serial_number_hex
Get the serial number of the certificate as a hex string.
gcr_certificate_get_subject_cn
Get the common name of the subject of this certificate.
gcr_certificate_get_subject_dn
Get the full subject DN of the certificate as a (mostly) readable string.
gcr_certificate_get_subject_name
Get a name to represent the subject of this certificate.
gcr_certificate_get_subject_part
Get a part of the DN of the subject of this certificate.
gcr_certificate_get_subject_raw
Get the raw DER data for the subject DN of the certificate.
gcr_certificate_is_issuer
Check if issuer
could be the issuer of this certificate. This is done by
comparing the relevant subject and issuer fields. No signature check is
done. Proper verification of certificates must be done via a crypto library.
gcr_certificate_mixin_emit_notify
Implementers of the GcrCertificate
mixin should call this function to notify
when the certificate has changed to emit notifications on the various properties.
Properties
Gcr.Pkcs11Certificate:attributes
Automatically loaded attributes for this certificate.
Properties inherited from GckObject (3)
Gck.Object:handle
The raw PKCS11 handle for this object.
Gck.Object:module
The GckModule that this object belongs to.
Gck.Object:session
The PKCS11 session to make calls on when this object needs to perform operations on itself.
Properties inherited from GcrCertificate (5)
Gcr.Certificate:description
A readable description for this certificate.
Gcr.Certificate:expiry-date
The expiry date of the certificate.
Gcr.Certificate:issuer-name
Common name part of the certificate issuer.
Gcr.Certificate:label
A readable label for this certificate.
Gcr.Certificate:subject-name
Signals
Signals inherited from GObject (1)
GObject.Object::notify
The notify signal is emitted on an object when one of its properties has its value set through g_object_set_property(), g_object_set(), et al.