UserMgrUserRemove (FUN) ¶ FUNCTION UserMgrUserRemove : RTS_IEC_RESULT Remove user from the user database InOut: Scope Name Type Comment Return UserMgrUserRemove RTS_IEC_RESULT Error code ERR_OK: User could be removed ERR_PARAMETER: Invalid parameter. pszUser empty ERR_NO_ACCESS_RIGHTS: User not authorized Input hUser RTS_IEC_HANDLE Handle to authorized user Inout Const pszUser STRING User name, limited to 59 chars

X509CertStoreOpen (FUN) ¶ FUNCTION X509CertStoreOpen : RTS_IEC_HANDLE Open the certificate store. InOut: Scope Name Type Comment Return X509CertStoreOpen RTS_IEC_HANDLE Handle to the certificate store Input componentID UDINT ID of the component opening the certificate store. pResult POINTER TO RTS_IEC_RESULT Result of the operation.

X509CertStoreRegister (FUN) ¶ FUNCTION X509CertStoreRegister : RTS_IEC_HANDLE Register your certificate at the certificate store. This has to be done in order to allow the user the view the different configured certificates and to generate missing certificates or to renew outdated certificates. Register the same information you are using in the X509CertStoreSearch function. InOut: Scope Name Type Comment Return X509CertStoreRegister RTS_IEC_HANDLE Input hCertStore RTS_IEC_HANDLE Handle of to certificate store. cmpID UDINT Component ID which registered the certificate pCertInfo POINTER TO RtsX509CertInfo Certificate information to be registered. Should match the information needed to use the Search function. pResult POINTER TO RTS_IEC_RESULT Pointer to error code

X509CertStoreRemoveCert (FUN) ¶ FUNCTION X509CertStoreRemoveCert : RTS_IEC_RESULT Remove the certificate from the store. InOut: Scope Name Type Comment Return X509CertStoreRemoveCert RTS_IEC_RESULT Input hCertStore RTS_IEC_HANDLE Handle of to certificate store. hBackend RTS_IEC_HANDLE Handle to the back-end where to store the generated certificate. RTS_INVALID_HANDLE should be used if no back- end is specified. hCert RTS_IEC_HANDLE Handle of the certificate to remove. xRemovePrivateKey BOOL Select if the private key of the certificate should be deleted too. If the certificate is renewed the same private key the key shouldn’t be deleted.

X509CertStoreSearchGetFirst (FUN) ¶ FUNCTION X509CertStoreSearchGetFirst : RTS_IEC_HANDLE Search for the given certificate in the cert store. InOut: Scope Name Type Comment Return X509CertStoreSearchGetFirst RTS_IEC_HANDLE Handle to the first certificate matching the filter criteria. Input hCertStore RTS_IEC_HANDLE Handle of to certificate store. pFilters POINTER TO RtsX509CertFilter Pointer to array of filters to be applied. ui32NumOfFilters UDINT Number of applied filters. pResult POINTER TO RTS_IEC_RESULT

X509CertStoreSearchGetNext (FUN) ¶ FUNCTION X509CertStoreSearchGetNext : RTS_IEC_HANDLE Search for the given certificate in the cert store. InOut: Scope Name Type Comment Return X509CertStoreSearchGetNext RTS_IEC_HANDLE Handle to the next certificate matching the filter criteria. Input hCertStore RTS_IEC_HANDLE Handle of to certificate store. hCert RTS_IEC_HANDLE Handle of the last found certificate. pFilters POINTER TO RtsX509CertFilter Pointer to array of filters to be applied. ui32NumOfFilters UDINT Number of applied filters. pResult POINTER TO RTS_IEC_RESULT

X509CertStoreUnregister (FUN) ¶ FUNCTION X509CertStoreUnregister : RTS_IEC_RESULT Unregister the component from the certificate store. This disables certificate generation for that specific use case. InOut: Scope Name Type Comment Return X509CertStoreUnregister RTS_IEC_RESULT Input hCertStore RTS_IEC_HANDLE Handle of to certificate store hRegisteredComponent RTS_IEC_HANDLE Handle to the entry retrieved by X509CertStoreRegister

X509CertVerify (FUN) ¶ FUNCTION X509CertVerify : RTS_IEC_RESULT Verify the given certificate. This verify checks only if the certificate itself is trusted using the certificates in the store. The verify checks if the certificate was added to the untrusted certs list. No subjects, key usages or other fields are verified. This has to be done by the application using this function. If the verify should use CRL to verify the certificates set the setting VerifyUseCRL to 1. This is disabled by default. InOut: Scope Name Type Comment Return X509CertVerify RTS_IEC_RESULT Result of the verification. Refer to ERR_CERT_ … error codes Input hCertStore RTS_IEC_HANDLE Handle of to certificate store. hCert RTS_IEC_HANDLE Certificate to verify.

X509CertVerify2 (FUN) ¶ FUNCTION X509CertVerify2 : RTS_IEC_RESULT Verify the given certificate. THIS verify checks only IF the certificate itself is trusted using the certificates in the store. The verify checks if the certificate was added to the untrusted certs list. No subjects, key usages or other fields are verified. This has to be done by the application using this function. This is disabled by default. InOut: Scope Name Type Comment Return X509CertVerify2 RTS_IEC_RESULT Result of certificate validation. One of the ERR_CERT_ … error codes. Input hCertStore RTS_IEC_HANDLE Handle of to certificate store. hCert RTS_IEC_HANDLE Certificate to verify. validationTimestamp SYSTIME The time-stamp used to verify the certificate. Same timebase as UtcHighresGet. If 0 the current time will be used. verificationFlags RtsX509VerifyFlags Flags to configure the verification process. See RTSX509VERIFYFLAGS for details.

UtilityFunctions ¶ RtsOIDClear (Function) RtsOIDCreate (Function) RtsOIDGetID (Function) RtsOIDGetName (Function) X509CertInfoExit (Function) X509CertInfoInit (Function)