OSSL_CMP_get1_rootCaKeyUpdate

Request a root CA key update via genm/genp and verify the response.

Synopsis

Declared in <openssl/cmp.h>

int
OSSL_CMP_get1_rootCaKeyUpdate(
    OSSL_CMP_CTX* ctx,
    X509 const* oldWithOld,
    X509** newWithNew,
    X509** newWithOld,
    X509** oldWithNew);

Return Value

1 on success, 0 on error.

Parameters

Name

Description

ctx

CMP context referencing the CMP server.

oldWithOld

Current trusted root CA certificate, or NULL.

newWithNew

Receives the new root CA certificate; caller must free.

newWithOld

Receives the newWithOld transition certificate if non‐NULL; caller must free.

oldWithNew

Receives the oldWithNew transition certificate if non‐NULL; caller must free.

Created with MrDocs