Using the Certificate Mapping API

[Previous] [Next]

ldapu_set_cert_verifyfn()

Specifies which certificate verification function is used for a given certificate authority (CA). Call this function if you want to configure the server to call your own function instead of the default certificate verification function.

Syntax

NSAPI_PUBLIC 
int ldapu_set_cert_verifyfn (const char *issuerDN, 
      CertVerifyFn_t verifyFn);

Parameters

This function has the following parameters:


Name	Description
issuerDN	DN of the certificate authority (CA). If NULL, the function specified by the `verifyfn` argument becomes the default certificate verification function.
verifyfn	The certificate verification function that you want called when evaluating certificates issued by this CA. The function must comply with the CertVerifyFn_t (Verification Function) type definition.

Returns

Returns one of the following values:

LDAPU_SUCCESS, if the function was successful.

An error code, if a problem occurred. (You can pass this error code to ldapu_err2string() to get more information on the problem.)

Description

In your initialization function, you need to call this function if you want to associate a custom certificate verification function with this CA.

The given CA must have an entry in the certmap.conf file.

If you want to specify a custom function to be used as the default function, pass NULL as the issuerDN argument.

Example

See the example under "CertMapInitFn_t (Init Function)".

See Also

CertVerifyFn_t (Verification Function), CertMapInitFn_t (Init Function), ldapu_get_cert_verifyfn().

[Previous] [Next]

Copyright ⌐ 1997 Netscape Communications Corporation