LibPKI

From OpenCA Labs WiKi

Basic Concepts

The LibPKI library provides the developer with an high-level API which is meant to be easy to use. Moreover the library is capable of using different cryptographic providers (e.g., OpenSSL or KMF) where they are available.

Installing the Library

Let's Start Coding!

The library exposes different interfaces. The developer should use the PKI Token API, the easies way to manage X.509 data structures. It is also possible to generate the needed data structures outside the PKI_TOKEN environment by using more low-level functionality. This should be avoided if not absolutely needed as the lower level API may change at any time.

The API provides the following different subset of functionality:

• PKI Token
  • Generating a new Token
  • Generating a new KeyPair for the Token
  • Generating a PKCS#10 Request
  • Self-Signing a Token
  • Issuing a Certificate
  • Issuing a CRL
  • Loading a PKCS#12 file
  • Exporting a PKI_TOKEN in a PKCS#12 file
  • Generating a Proxy (RFC 3820) Certificate
• Lower Level API
• Messaging Interface
• URL retrieval