NAME

pkc_lookup_keys_in_trustlist — Searches trust list for keys

Synopsis

unsigned32 pkc_lookup_keys_in_trustlist(
pkc_trust_list_t ∗ trust_list,
const pkc_trusted_key_t ∗∗ key,
size_t ∗ key_count,
const x500name & owner,
utc_t ∗ key_time ,
const pkc_generic_key_usage_t ∗ usages );

Parameters

Input

trust_listSpecifies trust list to search. 

ownerSpecifies principal whose keys are to be searched for. 

key_timeSpecifies time of ownership to search for. 

usagesSpecifies usage to search for. 

Output

keyArray of pointers to keys found. 

key_countNumber of keys found. 

Description

pkc_lookup_keys_in_trustlist(3sec) searches the specified trust list for keys owned by the specified principal at the specified time for the specified usage.  The keys are returned in an array of pointers to pkc_trusted_key_t objects, which is allocated on the heap. The pointers point to elements within the trust list; thus the caller should copy into allocated storage if they are expected to remain valid after the deletion of the trust list. 

This routine is a C++ interface. C++ must be used to perform direct certificate manipulation. 

See also the contents of the asn.h and x509.h header files, which define some of the basic types used by the low-level certificate manipulation routines. 

Return Values

pkc_s_success
Operation successfully completed.

Errors

Refer to the OSF DCE Problem Determination Guide for complete descriptions of all error messages. 

Related Information

Functions: pkc_add_trusted_key(3sec), pkc_check_cert_against_trustlist(3sec), pkc_lookup_key_in_trustlist(3sec), pkc_revoke_certificate(3sec), pkc_revoke_certificates(3sec).  Classes: pkc_ca_key_usage.class(3sec), pkc_constraints.class(3sec), pkc_generic_key_usage.class(3sec), pkc_key_policies.class(3sec), pkc_key_policy.class(3sec), pkc_key_usage.class(3sec), pkc_name_subord_constraint.class(3sec), pkc_name_subord_constraints.class(3sec), pkc_name_subtree_constraint.class(3sec), pkc_name_subtree_constraints.class(3sec), pkc_pending_revocation.class(3sec), pkc_revocation.class(3sec), pkc_revocation_list.class(3sec), pkc_trust_list.class(3sec), pkc_trust_list_element.class(3sec), pkc_trusted_key.class(3sec).