Create a PKCS#12 structure with an optional per‐safeBag callback.

Synopsis

Declared in <openssl/pkcs12.h>

PKCS12*
PKCS12_create_ex2(
    char const* pass,
    char const* name,
    EVP_PKEY* pkey,
    X509* cert,
    stack_st_X509* ca,
    int nid_key,
    int nid_cert,
    int iter,
    int mac_iter,
    int keytype,
    OSSL_LIB_CTX* ctx,
    char const* propq,
    PKCS12_create_cb* cb,
    void* cbarg);

Return Value

New PKCS#12 structure, or NULL on error.

Parameters

Name

Description

pass

Passphrase for encryption and MAC.

name

Friendly name for the key and certificate.

pkey

Private key to include, or NULL.

cert

Entity certificate to include, or NULL.

ca

Optional additional certificates, or NULL.

nid_key

PBE NID for key encryption, or 0/‐1 for defaults/no encryption.

nid_cert

PBE NID for certificate encryption, or 0/‐1 for defaults/no encryption.

iter

Encryption iteration count, or 0 for default.

mac_iter

MAC iteration count, or 0/‐1 for default/omit MAC.

keytype

MS key‐usage flag (KEY_SIG or KEY_EX), or 0 to omit.

ctx

Library context for algorithm fetching, or NULL for default.

propq

Property query for algorithm fetching, or NULL.

cb

Optional callback invoked for each safeBag added (return 1 to keep, 0 to omit, ‐1 for fatal error).

cbarg

Opaque argument passed to cb.

Created with MrDocs