Create a rootCaKeyUpdate ITAV with optional transition certificates.

Synopsis

Declared in <openssl/cmp.h>

OSSL_CMP_ITAV*
OSSL_CMP_ITAV_new_rootCaKeyUpdate(
    X509 const* newWithNew,
    X509 const* newWithOld,
    X509 const* oldWithNew);

Return Value

New ITAV on success, or NULL on error.

Parameters

Name

Description

newWithNew

New root CA certificate signed with the new key, or NULL.

newWithOld

New root CA certificate signed with the old key, or NULL.

oldWithNew

Old root CA certificate signed with the new key, or NULL.

Created with MrDocs