gnutls_x509_crt_set_proxy_dn — API function


#include <gnutls/x509.h>
int gnutls_x509_crt_set_proxy_dn( gnutls_x509_crt_t crt,
  gnutls_x509_crt_t eecrt,
  unsigned int raw_flag,
  const void * name,
  unsigned int sizeof_name);


gnutls_x509_crt_t crt

a gnutls_x509_crt_t structure with the new proxy cert

gnutls_x509_crt_t eecrt

the end entity certificate that will be issuing the proxy

unsigned int raw_flag

must be 0, or 1 if the CN is DER encoded

const void * name

a pointer to the CN name, may be NULL (but MUST then be added later)

unsigned int sizeof_name

holds the size of name


This function will set the subject in crt to the end entity's eecrt subject name, and add a single Common Name component name of size sizeof_name . This corresponds to the required proxy certificate naming style. Note that if name is NULL, you MUST set it later by using gnutls_x509_crt_set_dn_by_oid() or similar.


On success, GNUTLS_E_SUCCESS (0) is returned, otherwise a negative error value.


Report bugs to <>.

General guidelines for reporting bugs:

GnuTLS home page:


The full documentation for gnutls is maintained as a Texinfo manual. If the info and gnutls programs are properly installed at your site, the command

info gnutls

should give you access to the complete manual. As an alternative you may obtain the manual from:


Copyright © 2001-2013 Free Software Foundation, Inc..

Copying and distribution of this file, with or without modification, are permitted in any medium without royalty provided the copyright notice and this notice are preserved.