Next: PKCS #12 structures, Previous: Verifying X.509 certificate paths, Up: The X.509 trust model
A certificate request is a structure, which contain information about an applicant of a certificate service. It usually contains a private key, a distinguished name and secondary data such as a challenge password. GnuTLS supports the requests defined in PKCS #10 [RFC2986] (See RFC2986.) . Other certificate request's format such as PKIX's [RFC4211] (See RFC4211.) are not currently supported.
In GnuTLS the PKCS #10 structures are handled
using the gnutls_x509_crq_t
type. An example of a certificate
request generation can be found at section ex:crq.