From ee2178b073e936760b405b338e473236a5df94ca Mon Sep 17 00:00:00 2001 From: Magnus Henoch Date: Tue, 8 Dec 2015 18:16:36 +0000 Subject: Function for generating OpenSSL-style name hashes OpenSSL has functions to generate short (eight hex digits) hashes of issuers of certificates and CRLs. These hashes are used by the "c_rehash" script to populate directories of CA certificates and CRLs, e.g. in the Apache web server. Adding this function lets an Erlang program find the right CRL for a given certificate in such a directory. --- lib/public_key/doc/src/public_key.xml | 21 ++++++++++++++++++++- 1 file changed, 20 insertions(+), 1 deletion(-) (limited to 'lib/public_key/doc') diff --git a/lib/public_key/doc/src/public_key.xml b/lib/public_key/doc/src/public_key.xml index becb5338e0..96901ed516 100644 --- a/lib/public_key/doc/src/public_key.xml +++ b/lib/public_key/doc/src/public_key.xml @@ -863,7 +863,26 @@ fun(#'DistributionPoint'{}, #'CertificateList'{},

Verifies a digital signature.

- + + + short_name_hash(Name) -> string() + + Name = issuer_name() + + +

Generates a short hash of an issuer name. The hash is + returned as a string containing eight hexadecimal digits.

+ +

The return value of this function is the same as the result + of the commands openssl crl -hash and + openssl x509 -issuer_hash, when passed the issuer name of + a CRL or a certificate, respectively. This hash is used by the + c_rehash tool to maintain a directory of symlinks to CRL + files, in order to facilitate looking up a CRL by its issuer + name.

+
+
+ -- cgit v1.2.3