RtsX509AltNameType (ENUM) ¶ TYPE RtsX509AltNameType : Attributes: qualified_only InOut: Name Comment otherName Not supported Email Supported DnsName Supported X400Address Not supported directoryName Not supported ediPartyName Not supported URI Supported IpAddress Supported RegisterdID Supported

RtsX509CertCheckFlags (ENUM) ¶ TYPE RtsX509CertCheckFlags : Attributes: qualified_only InOut: Name Initial Comment FORCE_SUBJECT 16#1 Forces that the hostname / IP address is part OF certificate subject. Otherwhise part OF subject alternative name is accepted. DISABLE_WILDCARDS 16#2 Disable support FOR wildcard checking. * .example.com in a certificate is NOT accepted. Only FOR X509CertCheckHost. DISABLE_PARTIAL_WILDCARDS 16#4 Disable support FOR partial wildcard checking. ww*.example.com OR * ww.example.com. Only FOR X509CertCheckHost. ALLOW_MULTILABLE_WILDCARDS 16#8 Allow that wildcards replace multiple subdomains. * .example.com will accept www.SUB.example.com. Only FOR X509CertCheckHost. FORCE_SINGLE_SUBDOMAIN 16#10 Forces that .example.com will only accept a single subdomain e.f. SUB.example.com, but NOT www.SUB.example.com. Only FOR X509CertCheckHost.

RtsX509CertFilterType (ENUM) ¶ TYPE RtsX509CertFilterType : Attributes: qualified_only InOut: Name Initial TRUST_LEVEL 0 SUBJECT SUBJECT_MATCHALL CERT_DATEVALID CERT_KEYUSAGE CERT_EXKEYUSAGE CERT_THUMBPRINT

RtsX509VerifyFlags (ENUM) ¶ TYPE RtsX509VerifyFlags : Attributes: qualified_only InOut: Name Initial Comment EnableCRLCheck 16#1 Enables CRL checks for certificate validation.

Structs ¶ RtsOID (Struct) RtsX509AltName (Struct) RtsX509CertFilter (Struct) RtsX509CertInfo (Struct) RtsX509CertName (Struct) RtsX509ExKeyUsage (Struct) RtsX509NameEntry (Struct)

RtsOID (STRUCT) ¶ TYPE RtsOID : STRUCT InOut: Name Type Comment length UDINT Lenght of the OID in memory data RtsOIDStore Storage of the OID flags UDINT Internal

RtsX509AltName (STRUCT) ¶ TYPE RtsX509AltName : STRUCT Represents an alternative name of a certificate. The alternative name can be selected out of different meanings. E.g. E-Mail address, IP-Address, URI or a DNS name. Use the corresponding fiels of the union to geht the values. The meaning is declared in the valueType field. InOut: Name Type Comment valueType RtsX509AltNameType Type of the alternative name value RtsX509AltNameStore

RtsX509CertFilter (STRUCT) ¶ TYPE RtsX509CertFilter : STRUCT InOut: Name Type filterType RtsX509CertFilterType filterContent RtsX509CertFilterContent

RtsX509CertInfo (STRUCT) ¶ TYPE RtsX509CertInfo : STRUCT This structuer contains common fiels of an certificate. Most values are stored in textual form if available. The alternative key usages and the signature algorithm are stored as RtsOID. Use the RtsOIDGetName function to get human readable names of this fields. The notBefore and notAfter fields are in UTC format and high resolution timestamp. InOut: Name Type Comment ui32StructSize UDINT Structure size. Used if the structuer is extended in the futuer. issuer RtsX509CertName Common fields of the issuer subject RtsX509CertName Common fields of the subject numOfAltNames UDINT Number of stored alternative names pAltNames POINTER TO RtsX509AltName Pointer to a list of alternative names. notBefore ULINT High resolution UTC timestamp notAfter ULINT High resolution UTC timestamp keyUsage UDINT Key usage field. Use the constans of X509CertKeyUsage to determin the key usages. Every value is represented by a specific bit of the value. numOfExKeyUsages UDINT Number of extended key usages pExKeyUsages POINTER TO RtsOID Pointer to a list of extended key usages. signatureAlgorithm RtsOID OID of the signature algorithm. Use the RtsOIDGetName to get a human readable string.

RtsX509CertName (STRUCT) ¶ TYPE RtsX509CertName : STRUCT InOut: Name Type Comment numOfEntries UDINT Number of entries in the X509 Name entries POINTER TO RtsX509NameEntry Pointer to a list of name entries.