blob: 3c11abe59ce66889bbff89a7ccd5a63e31110b78 [file] [log] [blame]
Paul Bakker37ca75d2011-01-06 12:28:03 +00001/**
2 * @file
3 * X.509 module documentation file.
Manuel Pégourié-Gonnard8119dad2015-08-06 10:59:26 +02004 *
5 * Copyright (C) 2006-2015, ARM Limited, All Rights Reserved
6 *
7 * This file is part of mbed TLS (https://tls.mbed.org)
8 *
9 * This program is free software; you can redistribute it and/or modify
10 * it under the terms of the GNU General Public License as published by
11 * the Free Software Foundation; either version 2 of the License, or
12 * (at your option) any later version.
13 *
14 * This program is distributed in the hope that it will be useful,
15 * but WITHOUT ANY WARRANTY; without even the implied warranty of
16 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
17 * GNU General Public License for more details.
18 *
19 * You should have received a copy of the GNU General Public License along
20 * with this program; if not, write to the Free Software Foundation, Inc.,
21 * 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301 USA.
Paul Bakker37ca75d2011-01-06 12:28:03 +000022 */
23
24/**
25 * @addtogroup x509_module X.509 module
Paul Bakkerdcbfdcc2013-09-10 16:16:50 +020026 *
Paul Bakker37ca75d2011-01-06 12:28:03 +000027 * The X.509 module provides X.509 support which includes:
28 * - X.509 certificate (CRT) reading (see \c x509parse_crt() and
29 * \c x509parse_crtfile()).
30 * - X.509 certificate revocation list (CRL) reading (see \c x509parse_crl()
31 * and\c x509parse_crlfile()).
Paul Bakkerdcbfdcc2013-09-10 16:16:50 +020032 * - X.509 (RSA and ECC) private key reading (see \c x509parse_key() and
33 * \c x509parse_keyfile()).
Paul Bakker37ca75d2011-01-06 12:28:03 +000034 * - X.509 certificate signature verification (see \c x509parse_verify())
Paul Bakkerdcbfdcc2013-09-10 16:16:50 +020035 * - X.509 certificate writing and certificate request writing (see
Manuel Pégourié-Gonnard151dc772015-05-14 13:55:51 +020036 * \c mbedtls_x509write_crt_der() and \c mbedtls_x509write_csr_der()).
Paul Bakker37ca75d2011-01-06 12:28:03 +000037 *
38 * This module can be used to build a certificate authority (CA) chain and
Paul Bakkerdcbfdcc2013-09-10 16:16:50 +020039 * verify its signature. It is also used to generate Certificate Signing
40 * Requests and X509 certificates just as a CA would do.
Paul Bakker37ca75d2011-01-06 12:28:03 +000041 */