Home
last modified time | relevance | path

Searched refs:certificate (Results 1 – 25 of 220) sorted by relevance

123456789

/ohos5.0/docs/en/application-dev/security/DeviceCertificateKit/
H A Dcertificate-framework-overview.md4 …certificate framework shields the differences between third-party certificate algorithm libraries.…
7 You can use the APIs provided by the certificate framework to easily complete your development.
17 …certificate framework provides APIs for parsing, serializing, signing an X.509 certificate, verify…
21 - Digital certificate
30 The following describes certificate specifications.
35 …certificate chain validator does not verify the certificate validity period because the device sys…
68 …certificate framework to implement the following functionalities. Before you start, be sure to fam…
82 …certificate| [X509Cert](../../reference/apis-device-certificate-kit/js-apis-cert.md#x509cert) | Pr…
83 …../../reference/apis-device-certificate-kit/js-apis-cert.md#certextension10) | Provides APIs for o…
85 …certificate-kit/js-apis-cert.md#certchainvalidator) | Provides APIs for validating a certificate c…
[all …]
H A Ddevice-certificate-kit-intro.md3 …e Certificate Kit provides the [certificate framework](#certificate-framework) and [certificate ma…
7 The certificate framework provides APIs for parsing and validating digital certificates.
9 …to parse and validate a certificate, certificate extensions, and a certificate revocation list (CR…
11 The certificate framework shields the differences between third-party algorithm libraries to make d…
15 …certificate or the certificate entered by the user, obtains the basic fields or extension fields o…
19 … certificate framework, which shields the differences between third-party algorithm libraries. You…
29 …em-level certificate management capabilities to ensure certificate security during transmission an…
35 - Install a private certificate.
36 - Obtain a private certificate.
37 - Use a private certificate to generate a signature and verify a signature.
[all …]
H A Dcreate-verify-cerchainvalidator-object.md4 A certificate chain is an ordered list of certificates, in which each certificate is signed by the …
7 …certificate chain consists three certificates. The root certificate is self-signed by GlobalSign, …
35 …tor.validate](../../reference/apis-device-certificate-kit/js-apis-cert.md#validate) to validate th…
48 // Level-2 CA certificate data, which is only an example.
64 // CA certificate data.
67 // Length of the CA certificate data.
70 // Data of the level-2 CA certificate.
73 // Length of the level-2 CA certificate data.
76 …certificate chain in L-V format: Length of the level-2 CA certificate data + Level-2 CA certificat…
94 // Uint8Array in L-V format (certificate data length-certificate data).
[all …]
H A Dcreate-parse-verify-cert-object.md4 …h on how to create a certificate object, obtain information about the certificate, and check the v…
14 …e/apis-device-certificate-kit/js-apis-cert.md#certcreatex509cert) to create an **X509Cert** object…
16 3. Obtain certificate information.<br>
17 … how to obtain the certificate version and serial number. For more information, see [X509Cert](../…
19 …certificate-kit/js-apis-cert.md#getpublickey) to obtain the public key in the certificate and use …
23 …ithDate](../../reference/apis-device-certificate-kit/js-apis-cert.md#checkvaliditywithdate) to che…
47 // Convert the certificate data from a string to a Unit8Array.
63 // Obtain the certificate version.
68 …// Use the getPublicKey() method of the upper-level certificate object or the self-signed certific…
71 // Verify the certificate signature.
[all …]
H A Dcreate-parse-verify-certextension-object.md4 …certificate extension (**CertExtension**) object, obtain the certificate extension information bas…
9 1. Import the [cert](../../reference/apis-device-certificate-kit/js-apis-cert.md) module.
14 2. Use [cert.createCertExtension](../../reference/apis-device-certificate-kit/js-apis-cert.md#certc…
16 …ion.getEntry](../../reference/apis-device-certificate-kit/js-apis-cert.md#getentry10) to obtain th…
18 …(../../reference/apis-device-certificate-kit/js-apis-cert.md#checkca10) to check whether the certi…
58 // Obtain the certificate extension information based on an OID.
65 // Check whether the certificate is a CA certificate.
H A DcertManager-overview.md3 The **certManager** module provides system-level certificate management capabilities to implement m…
7 …and contains the public key owner information and public key. X.509 is a common certificate format.
8 - Credential: private key corresponding to the public key in a certificate.
9 - Keystore file: a file that contains the certificate and credential. PKCS#12 (.p12) is a common ke…
15 … lifecycle management of service certificates and CA certificates. The certificate lifecycle manag…
17 - Certificate installation: You can use **install()** to pass in a certificate.
18 … the installed certificate in a directory of the certificate manager service. The private key cred…
19 …certificate file and perform service-related operations, and use the APIs provided by **certManage…
20 …one or more certificates or credentials stored in the directory of the certificate manager service.
H A DcertManagerDialog-guidelines.md7 …open the certificate management dialog box and perform certificate management, such as installing,…
12 …s, see [Certificate Management Dialog Box](../../reference/apis-device-certificate-kit/js-apis-cer…
18 …text, pageType: CertificateDialogPageType): Promise\<void> | Opens the certificate management dial…
31 3. Open the certificate management dialog box.
41 console.info('Succeeded in opening certificate manager dialog.');
43 …console.error(`Failed to open certificate manager dialog. Code: ${err.code}, message: ${err.messag…
46 …console.error(`Failed to open certificate manager dialog. Code: ${error.code}, message: ${error.me…
H A Dcreate-parse-verify-crl-object.md4 …certificate revocation list (CRL) object, obtain CRL information, check whether a certificate has …
15 2. Use [cert.createX509CRL](../../reference/apis-device-certificate-kit/js-apis-cert.md#certcreatex…
19 … type. For more information, see [X509CRL](../../reference/apis-device-certificate-kit/js-apis-cer…
25 5. Use [X509CRL.verify](../../reference/apis-device-certificate-kit/js-apis-cert.md#verify11) to ve…
27 …e/apis-device-certificate-kit/js-apis-cert.md#certcreatex509cert) to create an **X509Cert** object…
29 …voked](../../reference/apis-device-certificate-kit/js-apis-cert.md#isrevoked11) to check whether t…
31 …dCert](../../reference/apis-device-certificate-kit/js-apis-cert.md#getrevokedcert11) to obtain the…
33 …](../../reference/apis-device-certificate-kit/js-apis-cert.md#getrevocationdate11) to obtain the d…
139 // Check whether the certificate has been revoked.
155 // Obtain the revoked certificate based on the serial number.
[all …]
/ohos5.0/docs/en/application-dev/reference/apis-network-kit/
H A Derrorcode-net-networkSecurity.md25 Unable to get issuer certificate.
33 The certificate chain is incomplete or an incorrect certificate is configured on the server.
37 …SSL/TLS connection is correctly set with a certificate path and certificate chain and whether the …
109 Check the certificate format and public key data, and regenerate the certificate.
163 Check the start date and end date of the certificate, and update or regenerate the certificate.
223 Self-signed certificate.
235 Check the certificate source, and add the self-signed certificate as a trusted CA.
267 The certificate has expired or has been revoked, or the certificate chain is incomplete.
271 Check whether the certificate has been revoked. If yes, use an available certificate.
303 The certificate is issued by an untrusted CA or the certificate has been revoked.
[all …]
H A Djs-apis-networkSecurity.md20 // Define certificate blobs
43 > Be sure to replace the certificate data in the example with the actual certificate data.
47 Enumerates certificate types.
53 | CERT_TYPE_PEM | 0 | PEM certificate|
59 Defines the certificate data.
73 Obtains the preset CA certificate and custom CA certificate from the certificate management module,…
123 // Define certificate blobs
145 > Be sure to replace the certificate data in the example with the actual certificate data.
153 Obtains the preset CA certificate and custom CA certificate from the certificate management module,…
201 // Create certificate blobs
[all …]
/ohos5.0/docs/en/application-dev/reference/apis-device-certificate-kit/
H A Derrorcode-cert.md55 The certificate signature verification failed.
63 Check whether the certificate is correct.
69 The certificate has not taken effect.
77 1. Check whether the certificate is correct.
85 The certificate has expired.
93 1. Check whether the certificate is correct.
101 Failed to obtain the certificate issuer.
105 The certificate issuer cannot be obtained during certificate verification.
109 Check whether the certificate is correct.
123 Check whether the certificate is correct.
[all …]
H A Djs-apis-certManagerDialog.md17 Enumerates the page types of the certificate management dialog box.
26 | PAGE_CA_CERTIFICATE | 2 | CA certificate list page.|
32 Enumerates the types of the certificate to be installed.
40 | CA_CERT | 1 | CA certificate.|
44 Defines the usage scope of the certificate to be installed.
149 | Promise\<string> | Promise used to return the certificate URI.|
161 | 29700003<sup>14+</sup> | The user install certificate failed in the certificate manager dialog. …
172 /* certificateType specifies the certificate type. The value CA_CERT here indicates a CA certificat…
174 …ficateScope specifies the usage scope of the certificate. The value CURRENT_USER here means the ce…
176 /* The CA certificate data must be assigned by the service. In this example, the data is not CA cer…
[all …]
/ohos5.0/docs/zh-cn/application-dev/reference/apis-network-kit/
H A Djs-apis-networkSecurity.md20 // Define certificate blobs
31 // Perform asynchronous certificate verification
96 | 2305002 | Unable to get issuer certificate. |
97 | 2305003 | Unable to get certificate revocation list (CRL). |
98 | 2305004 | Unable to decrypt certificate signature. |
107 | 2305018 | Self-signed certificate. |
109 | 2305024 | Invalid certificate authority (CA). |
111 | 2305069 | Invalid certificate verification context. |
123 // Define certificate blobs
134 // Perform asynchronous certificate verification
[all …]
H A Derrorcode-net-networkSecurity.md25 Unable to get issuer certificate.
43 Unable to get certificate revocation list (CRL).
61 Unable to decrypt certificate signature.
223 Self-signed certificate.
241 Unable to get local issuer certificate.
277 Invalid certificate authority (CA).
313 Invalid certificate verification context.
/ohos5.0/docs/en/application-dev/security/
H A Dhapsigntool-guidelines.md150 8. Generate a common certificate, which can be used to generate a custom certificate.
153 … generate-cert: Generate a common certificate, which can be used to generate a custom certificate.
187 …ile # Profile signing certificate (certificate chain, in the entity certificate, intermediate CA c…
210 …tFile # App signing certificate (certificate chain, in the entity certificate, intermediate CA c…
281 Use the local intermediate CA certificate to issue an app signing certificate.
378 … certificate (certificate chain, in the entity certificate, intermediate CA certificate, and root …
393 …is used to generate an app signing certificate, the certificate content is displayed on the consol…
417 (1) The certificate chain of the profile signing certificate is in incorrect order.
419 (2) The profile signing certificate is not a certificate chain.
427 (2) Check that the certificate is a certificate chain.
[all …]
/ohos5.0/base/security/certificate_framework/
H A DREADME-en.md4 …certificate framework shields the implementation differences of third-party certificate algorithm …
11 The certificate framework consists of the following:
13 … capabilities, including parsing certificates, certificate extensions, and CRLs and verifying cert…
14 …suer, subject, signature algorithm, and public key of the certificate based on the certificate dat…
15 …de obtaining the object identifier (OID) list of the certificate extensions based on the certifica…
17 …e chain operations include verifying the validity of a certificate chain based on the certificate …
19 …ry to provide capabilities, such as parsing certificates and obtaining certificate fields, for ser…
41 …Harmony source code, run the following command to separately build the certificate framework compo…
/ohos5.0/docs/en/release-notes/changelogs/OpenHarmony_5.0.0.38/
H A Dchangelogs-network.md17 Before change: If a certificate with an invalid context or a self-signed certificate is specified, …
19 …certificate is invalid, **2305069 Invalid certificate verification context** is returned. If the c…
30 …-signed certificate data** in the **Verifying the 2305069 Error Code of the CertVerification** tes…
57 …rtificates and user installed CA certificates from certificate management, and verify the certific…
65 … data: '-----BEGIN CERTIFICATE-----\n... (xxxx certificate data) ...\n-----END CERTIFICATE-----',
86 …rtificates and user installed CA certificates from certificate management, and verify the certific…
94 data: 'your Self-signed certificate data',
/ohos5.0/docs/en/application-dev/security/UniversalKeystoreKit/
H A Dhuks-key-attestation-overview.md7 …certificate for the public key of an asymmetric key pair stored in HUKS using the public key infra…
17 …rce meets the expectation based on the key source field in the service certificate on the server. …
30 …sues an X.509 certificate chain, which consists of the root CA certificate, device CA certificate,…
32 …certificate chain is sent to a trusted server. The server parses the certificate chain and verifie…
/ohos5.0/base/security/appverify/interfaces/innerkits/appverify/test/unittest/src/
H A Dprovision_verify_test.cpp50 "development-certificate": "ABCD",
51 "distribution-certificate": "1234",
70 "development-certificate": "ABCDEFG",
71 "distribution-certificate": "123456789",
90 "development-certificate": "ABCDEFG",
91 "distribution-certificate": "123456789",
110 "development-certificate": "ABCDEFGH",
334 "development-certificate": "ABCDEFG",
423 "development-certificate": "ABCDEFG",
472 "development-certificate": "ABCDEFG",
[all …]
/ohos5.0/base/security/certificate_manager/interfaces/kits/napi/src/
H A Dcm_napi_get_system_cert_info.cpp40 struct CertInfo *certificate = nullptr; member
67 if (context->certificate != nullptr) { in DeleteGetCertInfoAsyncContext()
68 FreeCertInfo(context->certificate); in DeleteGetCertInfoAsyncContext()
114 napi_value certInfo = GenerateCertInfo(env, context->certificate); in GetCertInfoWriteResult()
127 context->certificate = static_cast<struct CertInfo *>(CmMalloc(sizeof(struct CertInfo))); in GetCertInfoExecute()
128 if (context->certificate == nullptr) { in GetCertInfoExecute()
133 (void)memset_s(context->certificate, sizeof(struct CertInfo), 0, sizeof(struct CertInfo)); in GetCertInfoExecute()
135 context->certificate->certInfo.data = static_cast<uint8_t *>(CmMalloc(MAX_LEN_CERTIFICATE)); in GetCertInfoExecute()
136 if (context->certificate->certInfo.data == nullptr) { in GetCertInfoExecute()
141 context->certificate->certInfo.size = MAX_LEN_CERTIFICATE; in GetCertInfoExecute()
[all …]
/ohos5.0/base/security/certificate_manager/test/unittest/src/
H A Dcm_app_cert_test.cpp29 struct Credential certificate; member
299 struct Credential certificate; variable
302 ASSERT_TRUE(certificate.credData.data != nullptr);
303 certificate.credData.size = MAX_LEN_CERTIFICATE_CHAIN;
308 FreeCMBlobData(&certificate.credData);
329 struct Credential certificate; variable
339 … EXPECT_EQ(CompareCredential(&certificate, &(g_credentialexpectResult[0].certificate)), true);
340 FreeCMBlobData(&(certificate.credData));
397 struct Credential certificate; variable
400 ASSERT_TRUE(certificate.credData.data != nullptr);
[all …]
/ohos5.0/base/security/certificate_framework/frameworks/core/v1.0/
H A DBUILD.gn33 "certificate/cert_chain_validator.c",
34 "certificate/cert_crl_collection.c",
35 "certificate/cert_crl_common.c",
36 "certificate/x509_cert_chain.c",
37 "certificate/x509_certificate.c",
38 "certificate/x509_crl.c",
39 "certificate/x509_distinguished_name.c",
/ohos5.0/docs/zh-cn/application-dev/security/DeviceCertificateKit/
H A Dcertificate-framework-overview.md30 …的时间有效性，可使用X509证书的[checkValidityWithDate()](../../reference/apis-device-certificate-kit/js-apis-cer…
77 | X509证书 | [X509Cert](../../reference/apis-device-certificate-kit/js-apis-cert.md#x509cert) | 提供X50…
78 | 证书扩展域段 | [CertExtension](../../reference/apis-device-certificate-kit/js-apis-cert.md#certextensio…
79 | X509证书吊销列表 | [X509CRL](../../reference/apis-device-certificate-kit/js-apis-cert.md#x509crl11) | 提…
80 | 证书链校验器 | [CertChainValidator](../../reference/apis-device-certificate-kit/js-apis-cert.md#certcha…
81 | 证书和证书吊销列表集合 | [CertCRLCollection](../../reference/apis-device-certificate-kit/js-apis-cert.md#cer…
82 | X509证书链 | [X509CertChain](../../reference/apis-device-certificate-kit/js-apis-cert.md#x509certcha…
/ohos5.0/docs/en/device-dev/subsystems/
H A Dsubsys-security-sigverify.md8 …certificate, and a public key certificate for you to sign your application package. To facilitate …
10 …e application signature verification module uses the preset public key certificate to verify the s…
27 …, hash comparison, certificate chain verification, and matching between the certificate chain and …
31 …PKCS #7 signature verification, hash comparison, certificate chain verification, and profile certi…
35 …list in the profile. If yes, the module compares the certificate in the profile with the certifica…
47 …certificate chain verification based on the debugging root key is enabled; if **mode** is set to *…
/ohos5.0/docs/zh-cn/application-dev/reference/apis-device-certificate-kit/
H A Derrorcode-cert.md55 The certificate signature verification failed.
69 The certificate has not taken effect.
85 The certificate has expired.
101 Failed to obtain the certificate issuer.
115 The key cannot be used for signing a certificate.

123456789