:: KeyPair key
=> X509
The certificate to be signed.
-> key
The private key to sign with.
-> Maybe Digest
A hashing algorithm to use. If Nothing the most suitable algorithm for the key is automatically used.
-> IO ()

Source#

signX509 signs a certificate with an issuer private key.

valueverifyX509

:: PublicKey key
=> X509
The certificate to be verified.
-> key
The public key to verify with.
-> IO VerifyStatus

Source#

verifyX509 verifies a signature of certificate with an issuer public key.

valueprintX509 :: X509 -> IO String

Source#

printX509 cert translates a certificate into human-readable format.

Accessors

valuegetVersion :: X509 -> IO Int

Source#

getVersion cert returns the version number of certificate. It seems the number is 0-origin: version 2 means X.509 v3.

valuesetVersion :: X509 -> Int -> IO ()

Source#

setVersion cert ver updates the version number of certificate.

valuegetSerialNumber :: X509 -> IO Integer

Source#

getSerialNumber cert returns the serial number of certificate.

valuesetSerialNumber :: X509 -> Integer -> IO ()

Source#

setSerialNumber cert num updates the serial number of certificate.

valuegetIssuerName

:: X509
The certificate to examine.
-> Bool
True if you want the keys of each parts to be of long form (e.g. "commonName"), or False if you don't (e.g. "CN").
-> IO [(String, String)]
Pairs of key and value, for example (\"C\", \"JP\"), (\"ST\", \"Some-State\"), ....

Source#

getIssuerName returns the issuer name of certificate.

valuesetIssuerName :: X509 -> [(String, String)] -> IO ()

Source#

setIssuerName cert name updates the issuer name of certificate. Keys of each parts may be of either long form or short form. See getIssuerName.

valuegetSubjectName :: X509 -> Bool -> IO [(String, String)]

Source#

getSubjectName cert wantLongName returns the subject name of certificate. See getIssuerName.

valuesetSubjectName :: X509 -> [(String, String)] -> IO ()

Source#

setSubjectName cert name updates the subject name of certificate. See setIssuerName.

valuegetNotBefore :: X509 -> IO UTCTime

Source#

getNotBefore cert returns the time when the certificate begins to be valid.

valuesetNotBefore :: X509 -> UTCTime -> IO ()

Source#

setNotBefore cert utc updates the time when the certificate begins to be valid.

valuegetNotAfter :: X509 -> IO UTCTime

Source#

getNotAfter cert returns the time when the certificate expires.

valuesetNotAfter :: X509 -> UTCTime -> IO ()

Source#

setNotAfter cert utc updates the time when the certificate expires.

valuegetPublicKey :: X509 -> IO SomePublicKey

Source#

getPublicKey cert returns the public key of the subject of certificate.

valuesetPublicKey :: PublicKey key => X509 -> key -> IO ()

Source#

setPublicKey cert pubkey updates the public key of the subject of certificate.

valuegetSubjectEmail :: X509 -> IO [String]

Source#

getSubjectEmail cert returns every subject email addresses in the certificate.