Create a rootCaKeyUpdate ITAV with optional transition certificates.
Declared in <openssl/cmp.h>
OSSL_CMP_ITAV*
OSSL_CMP_ITAV_new_rootCaKeyUpdate(
X509 const* newWithNew,
X509 const* newWithOld,
X509 const* oldWithNew);
New ITAV on success, or NULL on error.
| Name | Description |
|---|---|
| newWithNew | New root CA certificate signed with the new key, or NULL. |
| newWithOld | New root CA certificate signed with the old key, or NULL. |
| oldWithNew | Old root CA certificate signed with the new key, or NULL. |