gnutls_x509_crt_get_crl_dist_points — API function


#include <gnutls/x509.h>
int gnutls_x509_crt_get_crl_dist_points( gnutls_x509_crt_t cert,
  unsigned int seq,
  void * ret,
  size_t * ret_size,
  unsigned int * reason_flags,
  unsigned int * critical);


gnutls_x509_crt_t cert

should contain a gnutls_x509_crt_t structure

unsigned int seq

specifies the sequence number of the distribution point (0 for the first one, 1 for the second etc.)

void * ret

is the place where the distribution point will be copied to

size_t * ret_size

holds the size of ret.

unsigned int * reason_flags

Revocation reasons. An ORed sequence of flags from gnutls_x509_crl_reason_flags_t.

unsigned int * critical

will be non−zero if the extension is marked as critical (may be null)


This function retrieves the CRL distribution points (, contained in the given certificate in the X509v3 Certificate Extensions.


GNUTLS_E_SHORT_MEMORY_BUFFER and updates ret_size if ret_size is not enough to hold the distribution point, or the type of the distribution point if everything was ok. The type is one of the enumerated gnutls_x509_subject_alt_name_t. If the certificate does not have an Alternative name with the specified sequence number then GNUTLS_E_REQUESTED_DATA_NOT_AVAILABLE is returned.


Report bugs to <>.

General guidelines for reporting bugs:

GnuTLS home page:


The full documentation for gnutls is maintained as a Texinfo manual. If the info and gnutls programs are properly installed at your site, the command

info gnutls

should give you access to the complete manual. As an alternative you may obtain the manual from:


Copyright © 2001-2013 Free Software Foundation, Inc..

Copying and distribution of this file, with or without modification, are permitted in any medium without royalty provided the copyright notice and this notice are preserved.