blob: 315f0e3ce9d63832ac3beb1c0d837a4c472dfdf0 [file] [log] [blame]
Paul Bakker37ca75d2011-01-06 12:28:03 +00001/**
2 * @file
3 * X.509 module documentation file.
Manuel Pégourié-Gonnard8119dad2015-08-06 10:59:26 +02004 *
5 * Copyright (C) 2006-2015, ARM Limited, All Rights Reserved
Manuel Pégourié-Gonnard37ff1402015-09-04 14:21:07 +02006 * SPDX-License-Identifier: Apache-2.0
7 *
8 * Licensed under the Apache License, Version 2.0 (the "License"); you may
9 * not use this file except in compliance with the License.
10 * You may obtain a copy of the License at
11 *
12 * http://www.apache.org/licenses/LICENSE-2.0
13 *
14 * Unless required by applicable law or agreed to in writing, software
15 * distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
16 * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
17 * See the License for the specific language governing permissions and
18 * limitations under the License.
Manuel Pégourié-Gonnard8119dad2015-08-06 10:59:26 +020019 *
20 * This file is part of mbed TLS (https://tls.mbed.org)
Paul Bakker37ca75d2011-01-06 12:28:03 +000021 */
22
23/**
24 * @addtogroup x509_module X.509 module
Paul Bakkerdcbfdcc2013-09-10 16:16:50 +020025 *
Simon Butchera02fe7c2016-01-03 16:14:14 +000026 * The X.509 module provides X.509 support for reading, writing and verification
27 * of certificates.
28 * In summary:
29 * - X.509 certificate (CRT) reading (see \c mbedtls_x509_crt_parse(),
30 * \c mbedtls_x509_crt_parse_der(), \c mbedtls_x509_crt_parse_file()).
31 * - X.509 certificate revocation list (CRL) reading (see
32 * \c mbedtls_x509_crl_parse(), \c mbedtls_x509_crl_parse_der(),
33 * and \c mbedtls_x509_crl_parse_file()).
34 * - X.509 certificate signature verification (see \c
35 * mbedtls_x509_crt_verify() and \c mbedtls_x509_crt_verify_with_profile().
36 * - X.509 certificate writing and certificate request writing (see
37 * \c mbedtls_x509write_crt_der() and \c mbedtls_x509write_csr_der()).
Paul Bakker37ca75d2011-01-06 12:28:03 +000038 *
39 * This module can be used to build a certificate authority (CA) chain and
Paul Bakkerdcbfdcc2013-09-10 16:16:50 +020040 * verify its signature. It is also used to generate Certificate Signing
Simon Butchera02fe7c2016-01-03 16:14:14 +000041 * Requests and X.509 certificates just as a CA would do.
Paul Bakker37ca75d2011-01-06 12:28:03 +000042 */