OSSL_CRMF_ENCRYPTEDVALUE_get1_encCert

Decrypt the certificate held in an EncryptedValue.

Synopsis

Declared in <openssl/crmf.h>

X509*
OSSL_CRMF_ENCRYPTEDVALUE_get1_encCert(
    OSSL_CRMF_ENCRYPTEDVALUE const* ecert,
    OSSL_LIB_CTX* libctx,
    char const* propq,
    EVP_PKEY* pkey);

Return Value

Decrypted X509 certificate copy owned by the caller, or NULL on error; free with X509_free().

Parameters

NameDescription
ecertEncryptedValue containing the encrypted certificate.
libctxLibrary context for algorithm fetches, or NULL for the default.
propqProperty query for algorithm fetches, or NULL.
pkeyPrivate key used to decrypt the certificate (indirect POPO; RFC 4210 section 5.2.8.2).