OSSL_CMP_get1_rootCaKeyUpdate

Request a root CA key update via genm/genp and verify the response.

Synopsis

Declared in <openssl/cmp.h>

int
OSSL_CMP_get1_rootCaKeyUpdate(
    OSSL_CMP_CTX* ctx,
    X509 const* oldWithOld,
    X509** newWithNew,
    X509** newWithOld,
    X509** oldWithNew);

Return Value

1 on success, 0 on error.

Parameters

NameDescription
ctxCMP context referencing the CMP server.
oldWithOldCurrent trusted root CA certificate, or NULL.
newWithNewReceives the new root CA certificate; caller must free.
newWithOldReceives the newWithOld transition certificate if non-NULL; caller must free.
oldWithNewReceives the oldWithNew transition certificate if non-NULL; caller must free.