Table B-1 describes the default values of some useful properties on Oracle Solaris and Linux platforms.
Table B-1 Default Java 2D Properties on Oracle Solaris and Linux
| Setup | DGA | SHM | Pixmaps | OnScreen | OffScreen |
|---|---|---|---|---|---|
|
Oracle Solaris SPARC with DGA support |
On |
On |
Off |
DGA/Software |
Software |
|
Oracle Solaris SPARC with no DGA, Oracle Solaris x86, Linux, SunRay, VNC |
Off |
On |
On |
X11/MITSHM |
Shared/Server Pixmaps |
|
J2SE 1.4 or greater: Remote X server, ssh |
Off |
Off |
On |
X11 |
Server Pixmaps |
|
J2SE 1.3.1 or less: Remote X server, ssh |
Off |
Off |
Off |
X11 |
Software |
The following list explains how to change the defaults.
The X11 pipeline is the default pipeline for Oracle Solaris and Linux. Change this default as follows:
-Dsun.java2d.opengl=true
Attempt to enable the OpenGL pipeline.
The use of DGA is controlled as follows:
NO_J2D_DGA unset
Use DGA, if available.
NO_J2D_DGA set
Disable the use of DGA.
MIT Shared Memory Extension (SHM) is controlled as follows:
To use SHM, if available, specify either one of the following properties:
NO_J2D_MITSHM unset
J2D_USE_MITSHM=true
To not use SHM, specify either one of the following properties:
NO_J2D_MITSHM set
J2D_USE_MITSHM=false
The general use of pixmaps is controlled as follows:
-Dsun.java2d.pmoffscreen unset
Use pixmaps if DGA is not available.
-Dsun.java2d.pmoffscreen=true
Force the use of pixmaps.
-Dsun.java2d.pmoffscreen=false
Disable the use of pixmaps.
The use of Shared and Server pixmaps is controlled as follows:
J2D_PIXMAPS unset
Use both types.
J2D_PIXMAPS=shared
Use only shared memory pixmaps.
J2D_PIXMAPS=sserver
Use only server-side pixmaps.
The choice of default visual is controlled as follows:
FORCEDEFVIS
unset (default) Use the best visual available.
FORCEDEFVIS
set to a hexadecimal value Use the visual whose ID is the hexadecimal value.
FORCEDEFVIS
set to any other value Use the default visual.


This is a template that is great for small businesses. It doesn't have too much fancy flare to it, but it makes a great use of the standard Bootstrap core components. Feel free to use this template for any project you want!
For more Info!This call to action card is a great place to showcase some important information or display a clever tagline!
Lorem ipsum dolor sit amet, consectetur adipisicing elit. Quod tenetur ex natus at dolorem enim! Nesciunt pariatur voluptatem sunt quam eaque, vel, non in id dolore voluptates quos eligendi labore.
Lorem ipsum dolor sit amet, consectetur adipisicing elit. Rem magni quas ex numquam, maxime minus quam molestias corporis quod, ea minima accusamus.


The London Squash and Fitness Club located in London, Ontario, reached out looking for a revamping of their site. Through the redesign, the owners of the club were looking to achieve a modern feel to their brand as well as expanding their current demographic to a younger one by including more students. My partner and I redesigned the site and social media plans completely in hopes of benefiting the clients.
Many visits were made the to location itself to completely understand the values and current feel of the club. My partner and I also gathered our own images during these tours as their previous photos on their website were not high quality and did not suit our redesign. These visits also allowed us to speak with the owners and comprehend to our fully abilities what their specific goals and values were.
With the intentions of expanding to younger audiences, my partner and I found it beneficial to utilize social media to their advantage. We created mockups of Instagram, Facebook, and Twitter posts that would engage younger users and potential club members as well as mockup schedules and posts.
My partner and I wanted to keep the branding the same in regards to colour schemes while completely updating the site. We focused on large and bold graphics that would draw lots of attention to the site. We feature a couple of photo galleries to further emphasize the visual aspect of the design.


I went to a local health food store and found a large jar containing lots of the stuff.. It was 16.99/pound, and so I grabbed a bag and proceeded to fill it up. I ended up with what looked like around half an ounce - quite a bit. Anyways, it ended up costing fifty cents.. so far I'm loving it just for the price. Also, the stuff seemed pretty fresh. I don't know if thats been part of the problem for other people who have tried it and havent felt anything.
The stuff looks *quite* a bit like weed, only its all broken up - like the shake at the bottom of a bag of weed, and its also got a few long stems. I tried chewing on a little bit of it and it tasted pretty flowerish and sweet. There is no real distinct smell to it.
Anyways, I got home and packed a very large bowl in a handpipe and proceeded to smoke it. The smoke was very harsh and it was hard to hold it in my lungs for very long, but I managed to get through the bowl just fine. After even the second hit I could start to feel a heady buzz coming on - VERY much like the onset of a marijuana high. By the end of the bowl my body was feeling distinctly different. Its hard to explain - but I just felt relaxed all over - and this was without a doubt caused by the damiana, it was *way* too noticeable to be a placebo effect.
Most of all, my head was feeling quite buzzed. Not like being high, but very tingly and relaxed. I sat down at my computer and listened to some music, and it definitly sounded better than it typically does, very enjoyable and smooth.
I then proceeded to go downstairs to make a cup of tea with the stuff - I mixed some chamonmile in with a little over a teaspoon of damiana. The tea tasted pretty good, and I drank it pretty quickly. I could feel the effects intensify as I got towards the end of the tea. Just to be clear though - the effects of this drug were definitly noticed, and it felt good, but it was nowhere close to being high at all, rather just a very mild head buzz that was enjoyable.
After downing the tea I went downstairs and chatted with my mom for a bit. I had no problems whatsoever interacting with her and I felt fine the whole time. I also noticed after looking in a mirror that my eyes looked normal - no redness or anything.
All in all, it was an enjoyable experience and I plan on giving it a try again sometime soon. I was a bit dismayed to notice that pretty much all of the noticeable effects of the drug were gone whenever I would start moving around or walking.. they were only felt when I was sitting in one place not doing any significant movement. But if I decide to get into smoking this stuff on a semi frequent basis, I'm definitly going to need a water bong - the smoke is too harsh otherwise.
Experience Reports are the writings and opinions of the individual authors who submit them.
Some of the activities described are dangerous and/or illegal and none are recommended by Erowid.


Thank you for shopping @ The State of Art
Have a discount code?
Please enter "none" if you do not have a code.
Coupon Code: TSOA
Select a delivery option!
Please refresh if you've added the coupon code


Kate Henshaw shares message she got from 'worried fan' about getting married
- Nigerian actress Kate Henshaw recently shared her encounter with a concerned follower on social media
- The actress posted a screenshot of the fan’s message to her on her Instagram DM channel
- Henshaw’s fan had expressed concern because she is yet to get married
Much loved Nollywood actress Kate Henshaw recently took to micro blogging platform, Twitter, to recount her experience with an Instagram follower, who sent a message to her direct messaging channel, on the photo-sharing app.
From the screenshot shared by the actress, the individual in his message had expressed concern because the movie star is yet to tie the knot. He noted that Henshaw is a beautiful woman and he would have loved to help her settle down.
See the photo shared by the actress on Twitter:
PAY ATTENTION: Read best news on Nigeria's #1 news app
In a different post, Henshaw noted that she had so many other similar messages in her DM.
Actress Mary Remmy Njoku comes for trolls who said marriage is making her age
See her tweet below:
The actress was spotted in the comment section responding to some of her Twitter followers that reacted to the post.
Read her exchange with fans below:
PAY ATTENTION: Get your daily relationship tips and advice on Africa Love Aid group
Meanwhile, Legit.ng previously gathered that Henshaw expressed remorse on social media after scrapping an unidentified lady's car in Lagos. The actress narrated the details of the incident on Twitter.
PAY ATTENTION: NAIJ.com upgrades to Legit.ng: a letter from our Editor-in-Chief Bayo Olupohunda
She explained that the unidentified lady had given her room to drive by on the road in the Lekki area. Henshaw further explained that while she was trying to drive by she scraped the lady's car because she had no room to manoeuvre.
NAIJ.com (naija.ng) -> Legit.ng We have upgraded to serve you better
BBNaija Tacha shows off video call with Twitter CEO Jack Dorsey on his birthday
Should a woman marry a man without a job? | Legit TV


Supreme Court to pronounce verdict on pleas seeking Rafale judgment review on Thursday
A bench comprising Chief Justice Ranjan Gogoi and Justices SK Kaul and KM Joseph is likely to pronounce verdicts on three review petitions
by PTINew Delhi: The Supreme Court is scheduled to pronounce on Thursday its verdict on petitions seeking a review of its judgement giving a clean chit to the Modi government in the Rafale fighter jet deal with French firm Dassault Aviation. On May 10, the apex court had reserved the decision on the pleas, including one filed by former Union ministers Yashwant Sinha, Arun Shourie and activist lawyer Prashant Bhushan, seeking a re-examination of its findings that there was no occasion to doubt the decision-making process in the procurement of 36 Rafale fighter jets.
A Bench comprising Chief Justice Ranjan Gogoi and Justices S K Kaul and K M Joseph is likely to pronounce verdicts on three review petitions filed by the trio, lawyer Vineet Dhandha and Aam Aadmi Party lawmaker Sanjay Singh.
On December 14, 2018, the apex court dismissed the petitions seeking an investigation into alleged irregularities in the Rs 58,000 crore deal.
This story has been sourced from a third party syndicated feed, agencies. Mid-day accepts no responsibility or liability for its dependability, trustworthiness, reliability and data of the text. Mid-day management/mid-day.com reserves the sole right to alter, delete or remove (without notice) the content in its absolute discretion for any reason whatsoever
Sign up for all the latest news, top galleries and trending videos from Mid-day.com
Subscribe
Loading...


PART XVIII. TRANSITION PROVISIONS
[§414-481] Application to existing domestic corporations. This chapter applies to all domestic corporations in existence on July 1, 2001 that were incorporated under any general statute of this State providing for incorporation of corporations for profit if the power to amend or repeal the statute under which the corporation was incorporated was reserved. [L 2000, c 244, pt of §1]
Revision Note
"July 1, 2001" substituted for "its effective date".


|
mbed TLS v2.16.11
|
Data Structures | |
| struct | mbedtls_x509_time |
| struct | mbedtls_x509_crl_entry |
| struct | mbedtls_x509_crl |
| struct | mbedtls_x509_crt |
| struct | mbedtls_x509_crt_profile |
| struct | mbedtls_x509write_cert |
| struct | mbedtls_x509_crt_verify_chain_item |
| struct | mbedtls_x509_crt_verify_chain |
| struct | mbedtls_x509_csr |
| struct | mbedtls_x509write_csr |
Macros | |
| #define | MBEDTLS_X509_MAX_INTERMEDIATE_CA 8 |
| #define | MBEDTLS_X509_SAFE_SNPRINTF |
Functions | |
| int | mbedtls_dhm_parse_dhm (mbedtls_dhm_context *dhm, const unsigned char *dhmin, size_t dhminlen) |
| This function parses DHM parameters in PEM or DER format. More... | |
| int | mbedtls_dhm_parse_dhmfile (mbedtls_dhm_context *dhm, const char *path) |
| This function loads and parses DHM parameters from a file. More... | |
| int | mbedtls_x509_dn_gets (char *buf, size_t size, const mbedtls_x509_name *dn) |
| Store the certificate DN in printable form into buf; no more than size characters will be written. More... | |
| int | mbedtls_x509_serial_gets (char *buf, size_t size, const mbedtls_x509_buf *serial) |
| Store the certificate serial in printable form into buf; no more than size characters will be written. More... | |
| int | mbedtls_x509_time_is_past (const mbedtls_x509_time *to) |
| Check a given mbedtls_x509_time against the system time and tell if it's in the past. More... | |
| int | mbedtls_x509_time_is_future (const mbedtls_x509_time *from) |
| Check a given mbedtls_x509_time against the system time and tell if it's in the future. More... | |
| int | mbedtls_x509_self_test (int verbose) |
| Checkup routine. More... | |
| int | mbedtls_x509_get_name (unsigned char **p, const unsigned char *end, mbedtls_x509_name *cur) |
| int | mbedtls_x509_get_alg_null (unsigned char **p, const unsigned char *end, mbedtls_x509_buf *alg) |
| int | mbedtls_x509_get_alg (unsigned char **p, const unsigned char *end, mbedtls_x509_buf *alg, mbedtls_x509_buf *params) |
| int | mbedtls_x509_get_rsassa_pss_params (const mbedtls_x509_buf *params, mbedtls_md_type_t *md_alg, mbedtls_md_type_t *mgf_md, int *salt_len) |
| int | mbedtls_x509_get_sig (unsigned char **p, const unsigned char *end, mbedtls_x509_buf *sig) |
| int | mbedtls_x509_get_sig_alg (const mbedtls_x509_buf *sig_oid, const mbedtls_x509_buf *sig_params, mbedtls_md_type_t *md_alg, mbedtls_pk_type_t *pk_alg, void **sig_opts) |
| int | mbedtls_x509_get_time (unsigned char **p, const unsigned char *end, mbedtls_x509_time *t) |
| int | mbedtls_x509_get_serial (unsigned char **p, const unsigned char *end, mbedtls_x509_buf *serial) |
| int | mbedtls_x509_get_ext (unsigned char **p, const unsigned char *end, mbedtls_x509_buf *ext, int tag) |
| int | mbedtls_x509_sig_alg_gets (char *buf, size_t size, const mbedtls_x509_buf *sig_oid, mbedtls_pk_type_t pk_alg, mbedtls_md_type_t md_alg, const void *sig_opts) |
| int | mbedtls_x509_key_size_helper (char *buf, size_t buf_size, const char *name) |
| int | mbedtls_x509_string_to_names (mbedtls_asn1_named_data **head, const char *name) |
| int | mbedtls_x509_set_extension (mbedtls_asn1_named_data **head, const char *oid, size_t oid_len, int critical, const unsigned char *val, size_t val_len) |
| int | mbedtls_x509_write_extensions (unsigned char **p, unsigned char *start, mbedtls_asn1_named_data *first) |
| int | mbedtls_x509_write_names (unsigned char **p, unsigned char *start, mbedtls_asn1_named_data *first) |
| int | mbedtls_x509_write_sig (unsigned char **p, unsigned char *start, const char *oid, size_t oid_len, unsigned char *sig, size_t size) |
X509 Error codes | |
| #define | MBEDTLS_ERR_X509_FEATURE_UNAVAILABLE -0x2080 |
| #define | MBEDTLS_ERR_X509_UNKNOWN_OID -0x2100 |
| #define | MBEDTLS_ERR_X509_INVALID_FORMAT -0x2180 |
| #define | MBEDTLS_ERR_X509_INVALID_VERSION -0x2200 |
| #define | MBEDTLS_ERR_X509_INVALID_SERIAL -0x2280 |
| #define | MBEDTLS_ERR_X509_INVALID_ALG -0x2300 |
| #define | MBEDTLS_ERR_X509_INVALID_NAME -0x2380 |
| #define | MBEDTLS_ERR_X509_INVALID_DATE -0x2400 |
| #define | MBEDTLS_ERR_X509_INVALID_SIGNATURE -0x2480 |
| #define | MBEDTLS_ERR_X509_INVALID_EXTENSIONS -0x2500 |
| #define | MBEDTLS_ERR_X509_UNKNOWN_VERSION -0x2580 |
| #define | MBEDTLS_ERR_X509_UNKNOWN_SIG_ALG -0x2600 |
| #define | MBEDTLS_ERR_X509_SIG_MISMATCH -0x2680 |
| #define | MBEDTLS_ERR_X509_CERT_VERIFY_FAILED -0x2700 |
| #define | MBEDTLS_ERR_X509_CERT_UNKNOWN_FORMAT -0x2780 |
| #define | MBEDTLS_ERR_X509_BAD_INPUT_DATA -0x2800 |
| #define | MBEDTLS_ERR_X509_ALLOC_FAILED -0x2880 |
| #define | MBEDTLS_ERR_X509_FILE_IO_ERROR -0x2900 |
| #define | MBEDTLS_ERR_X509_BUFFER_TOO_SMALL -0x2980 |
| #define | MBEDTLS_ERR_X509_FATAL_ERROR -0x3000 |
Structures for parsing X.509 certificates, CRLs and CSRs | |
| typedef mbedtls_asn1_buf | mbedtls_x509_buf |
| typedef mbedtls_asn1_bitstring | mbedtls_x509_bitstring |
| typedef mbedtls_asn1_named_data | mbedtls_x509_name |
| typedef mbedtls_asn1_sequence | mbedtls_x509_sequence |
| typedef struct mbedtls_x509_time | mbedtls_x509_time |
Structures and functions for parsing CRLs | |
| typedef struct mbedtls_x509_crl_entry | mbedtls_x509_crl_entry |
| typedef struct mbedtls_x509_crl | mbedtls_x509_crl |
| int | mbedtls_x509_crl_parse_der (mbedtls_x509_crl *chain, const unsigned char *buf, size_t buflen) |
| Parse a DER-encoded CRL and append it to the chained list. More... | |
| int | mbedtls_x509_crl_parse (mbedtls_x509_crl *chain, const unsigned char *buf, size_t buflen) |
| Parse one or more CRLs and append them to the chained list. More... | |
| int | mbedtls_x509_crl_parse_file (mbedtls_x509_crl *chain, const char *path) |
| Load one or more CRLs and append them to the chained list. More... | |
| int | mbedtls_x509_crl_info (char *buf, size_t size, const char *prefix, const mbedtls_x509_crl *crl) |
| Returns an informational string about the CRL. More... | |
| void | mbedtls_x509_crl_init (mbedtls_x509_crl *crl) |
| Initialize a CRL (chain) More... | |
| void | mbedtls_x509_crl_free (mbedtls_x509_crl *crl) |
| Unallocate all CRL data. More... | |
Structures and functions for parsing and writing X.509 certificates | |
| typedef struct mbedtls_x509_crt | mbedtls_x509_crt |
| typedef struct mbedtls_x509_crt_profile | mbedtls_x509_crt_profile |
| typedef struct mbedtls_x509write_cert | mbedtls_x509write_cert |
| typedef void | mbedtls_x509_crt_restart_ctx |
| const mbedtls_x509_crt_profile | mbedtls_x509_crt_profile_default |
| const mbedtls_x509_crt_profile | mbedtls_x509_crt_profile_next |
| const mbedtls_x509_crt_profile | mbedtls_x509_crt_profile_suiteb |
| int | mbedtls_x509_crt_parse_der (mbedtls_x509_crt *chain, const unsigned char *buf, size_t buflen) |
| Parse a single DER formatted certificate and add it to the chained list. More... | |
| int | mbedtls_x509_crt_parse (mbedtls_x509_crt *chain, const unsigned char *buf, size_t buflen) |
| Parse one DER-encoded or one or more concatenated PEM-encoded certificates and add them to the chained list. More... | |
| int | mbedtls_x509_crt_parse_file (mbedtls_x509_crt *chain, const char *path) |
| Load one or more certificates and add them to the chained list. Parses permissively. If some certificates can be parsed, the result is the number of failed certificates it encountered. If none complete correctly, the first error is returned. More... | |
| int | mbedtls_x509_crt_parse_path (mbedtls_x509_crt *chain, const char *path) |
| Load one or more certificate files from a path and add them to the chained list. Parses permissively. If some certificates can be parsed, the result is the number of failed certificates it encountered. If none complete correctly, the first error is returned. More... | |
| int | mbedtls_x509_crt_info (char *buf, size_t size, const char *prefix, const mbedtls_x509_crt *crt) |
| Returns an informational string about the certificate. More... | |
| int | mbedtls_x509_crt_verify_info (char *buf, size_t size, const char *prefix, uint32_t flags) |
| Returns an informational string about the verification status of a certificate. More... | |
| int | mbedtls_x509_crt_verify (mbedtls_x509_crt *crt, mbedtls_x509_crt *trust_ca, mbedtls_x509_crl *ca_crl, const char *cn, uint32_t *flags, int(*f_vrfy)(void *, mbedtls_x509_crt *, int, uint32_t *), void *p_vrfy) |
| Verify the certificate signature. More... | |
| int | mbedtls_x509_crt_verify_with_profile (mbedtls_x509_crt *crt, mbedtls_x509_crt *trust_ca, mbedtls_x509_crl *ca_crl, const mbedtls_x509_crt_profile *profile, const char *cn, uint32_t *flags, int(*f_vrfy)(void *, mbedtls_x509_crt *, int, uint32_t *), void *p_vrfy) |
| Verify the certificate signature according to profile. More... | |
| int | mbedtls_x509_crt_verify_restartable (mbedtls_x509_crt *crt, mbedtls_x509_crt *trust_ca, mbedtls_x509_crl *ca_crl, const mbedtls_x509_crt_profile *profile, const char *cn, uint32_t *flags, int(*f_vrfy)(void *, mbedtls_x509_crt *, int, uint32_t *), void *p_vrfy, mbedtls_x509_crt_restart_ctx *rs_ctx) |
Restartable version of mbedtls_crt_verify_with_profile() More... | |
| int | mbedtls_x509_crt_check_key_usage (const mbedtls_x509_crt *crt, unsigned int usage) |
| Check usage of certificate against keyUsage extension. More... | |
| int | mbedtls_x509_crt_check_extended_key_usage (const mbedtls_x509_crt *crt, const char *usage_oid, size_t usage_len) |
| Check usage of certificate against extendedKeyUsage. More... | |
| int | mbedtls_x509_crt_is_revoked (const mbedtls_x509_crt *crt, const mbedtls_x509_crl *crl) |
| Verify the certificate revocation status. More... | |
| void | mbedtls_x509_crt_init (mbedtls_x509_crt *crt) |
| Initialize a certificate (chain) More... | |
| void | mbedtls_x509_crt_free (mbedtls_x509_crt *crt) |
| Unallocate all certificate data. More... | |
| void | mbedtls_x509write_crt_init (mbedtls_x509write_cert *ctx) |
| Initialize a CRT writing context. More... | |
| void | mbedtls_x509write_crt_set_version (mbedtls_x509write_cert *ctx, int version) |
| Set the verion for a Certificate Default: MBEDTLS_X509_CRT_VERSION_3. More... | |
| int | mbedtls_x509write_crt_set_serial (mbedtls_x509write_cert *ctx, const mbedtls_mpi *serial) |
| Set the serial number for a Certificate. More... | |
| int | mbedtls_x509write_crt_set_validity (mbedtls_x509write_cert *ctx, const char *not_before, const char *not_after) |
| Set the validity period for a Certificate Timestamps should be in string format for UTC timezone i.e. "YYYYMMDDhhmmss" e.g. "20131231235959" for December 31st 2013 at 23:59:59. More... | |
| int | mbedtls_x509write_crt_set_issuer_name (mbedtls_x509write_cert *ctx, const char *issuer_name) |
| Set the issuer name for a Certificate Issuer names should contain a comma-separated list of OID types and values: e.g. "C=UK,O=ARM,CN=mbed TLS CA". More... | |
| int | mbedtls_x509write_crt_set_subject_name (mbedtls_x509write_cert *ctx, const char *subject_name) |
| Set the subject name for a Certificate Subject names should contain a comma-separated list of OID types and values: e.g. "C=UK,O=ARM,CN=mbed TLS Server 1". More... | |
| void | mbedtls_x509write_crt_set_subject_key (mbedtls_x509write_cert *ctx, mbedtls_pk_context *key) |
| Set the subject public key for the certificate. More... | |
| void | mbedtls_x509write_crt_set_issuer_key (mbedtls_x509write_cert *ctx, mbedtls_pk_context *key) |
| Set the issuer key used for signing the certificate. More... | |
| void | mbedtls_x509write_crt_set_md_alg (mbedtls_x509write_cert *ctx, mbedtls_md_type_t md_alg) |
| Set the MD algorithm to use for the signature (e.g. MBEDTLS_MD_SHA1) More... | |
| int | mbedtls_x509write_crt_set_extension (mbedtls_x509write_cert *ctx, const char *oid, size_t oid_len, int critical, const unsigned char *val, size_t val_len) |
| Generic function to add to or replace an extension in the CRT. More... | |
| int | mbedtls_x509write_crt_set_basic_constraints (mbedtls_x509write_cert *ctx, int is_ca, int max_pathlen) |
| Set the basicConstraints extension for a CRT. More... | |
| int | mbedtls_x509write_crt_set_subject_key_identifier (mbedtls_x509write_cert *ctx) |
| Set the subjectKeyIdentifier extension for a CRT Requires that mbedtls_x509write_crt_set_subject_key() has been called before. More... | |
| int | mbedtls_x509write_crt_set_authority_key_identifier (mbedtls_x509write_cert *ctx) |
| Set the authorityKeyIdentifier extension for a CRT Requires that mbedtls_x509write_crt_set_issuer_key() has been called before. More... | |
| int | mbedtls_x509write_crt_set_key_usage (mbedtls_x509write_cert *ctx, unsigned int key_usage) |
| Set the Key Usage Extension flags (e.g. MBEDTLS_X509_KU_DIGITAL_SIGNATURE | MBEDTLS_X509_KU_KEY_CERT_SIGN) More... | |
| int | mbedtls_x509write_crt_set_ns_cert_type (mbedtls_x509write_cert *ctx, unsigned char ns_cert_type) |
| Set the Netscape Cert Type flags (e.g. MBEDTLS_X509_NS_CERT_TYPE_SSL_CLIENT | MBEDTLS_X509_NS_CERT_TYPE_EMAIL) More... | |
| void | mbedtls_x509write_crt_free (mbedtls_x509write_cert *ctx) |
| Free the contents of a CRT write context. More... | |
| int | mbedtls_x509write_crt_der (mbedtls_x509write_cert *ctx, unsigned char *buf, size_t size, int(*f_rng)(void *, unsigned char *, size_t), void *p_rng) |
| Write a built up certificate to a X509 DER structure Note: data is written at the end of the buffer! Use the return value to determine where you should start using the buffer. More... | |
| int | mbedtls_x509write_crt_pem (mbedtls_x509write_cert *ctx, unsigned char *buf, size_t size, int(*f_rng)(void *, unsigned char *, size_t), void *p_rng) |
| Write a built up certificate to a X509 PEM string. More... | |
| #define | MBEDTLS_X509_ID_FLAG(id) ( 1 << ( (id) - 1 ) ) |
| #define | MBEDTLS_X509_CRT_VERSION_1 0 |
| #define | MBEDTLS_X509_CRT_VERSION_2 1 |
| #define | MBEDTLS_X509_CRT_VERSION_3 2 |
| #define | MBEDTLS_X509_RFC5280_MAX_SERIAL_LEN 32 |
| #define | MBEDTLS_X509_RFC5280_UTC_TIME_LEN 15 |
| #define | MBEDTLS_X509_MAX_FILE_PATH_LEN 512 |
| #define | MBEDTLS_X509_MAX_VERIFY_CHAIN_SIZE ( MBEDTLS_X509_MAX_INTERMEDIATE_CA + 2 ) |
Structures and functions for X.509 Certificate Signing Requests (CSR) | |
| typedef struct mbedtls_x509_csr | mbedtls_x509_csr |
| typedef struct mbedtls_x509write_csr | mbedtls_x509write_csr |
| int | mbedtls_x509_csr_parse_der (mbedtls_x509_csr *csr, const unsigned char *buf, size_t buflen) |
| Load a Certificate Signing Request (CSR) in DER format. More... | |
| int | mbedtls_x509_csr_parse (mbedtls_x509_csr *csr, const unsigned char *buf, size_t buflen) |
| Load a Certificate Signing Request (CSR), DER or PEM format. More... | |
| int | mbedtls_x509_csr_parse_file (mbedtls_x509_csr *csr, const char *path) |
| Load a Certificate Signing Request (CSR) More... | |
| int | mbedtls_x509_csr_info (char *buf, size_t size, const char *prefix, const mbedtls_x509_csr *csr) |
| Returns an informational string about the CSR. More... | |
| void | mbedtls_x509_csr_init (mbedtls_x509_csr *csr) |
| Initialize a CSR. More... | |
| void | mbedtls_x509_csr_free (mbedtls_x509_csr *csr) |
| Unallocate all CSR data. More... | |
| void | mbedtls_x509write_csr_init (mbedtls_x509write_csr *ctx) |
| Initialize a CSR context. More... | |
| int | mbedtls_x509write_csr_set_subject_name (mbedtls_x509write_csr *ctx, const char *subject_name) |
| Set the subject name for a CSR Subject names should contain a comma-separated list of OID types and values: e.g. "C=UK,O=ARM,CN=mbed TLS Server 1". More... | |
| void | mbedtls_x509write_csr_set_key (mbedtls_x509write_csr *ctx, mbedtls_pk_context *key) |
| Set the key for a CSR (public key will be included, private key used to sign the CSR when writing it) More... | |
| void | mbedtls_x509write_csr_set_md_alg (mbedtls_x509write_csr *ctx, mbedtls_md_type_t md_alg) |
| Set the MD algorithm to use for the signature (e.g. MBEDTLS_MD_SHA1) More... | |
| int | mbedtls_x509write_csr_set_key_usage (mbedtls_x509write_csr *ctx, unsigned char key_usage) |
| Set the Key Usage Extension flags (e.g. MBEDTLS_X509_KU_DIGITAL_SIGNATURE | MBEDTLS_X509_KU_KEY_CERT_SIGN) More... | |
| int | mbedtls_x509write_csr_set_ns_cert_type (mbedtls_x509write_csr *ctx, unsigned char ns_cert_type) |
| Set the Netscape Cert Type flags (e.g. MBEDTLS_X509_NS_CERT_TYPE_SSL_CLIENT | MBEDTLS_X509_NS_CERT_TYPE_EMAIL) More... | |
| int | mbedtls_x509write_csr_set_extension (mbedtls_x509write_csr *ctx, const char *oid, size_t oid_len, const unsigned char *val, size_t val_len) |
| Generic function to add to or replace an extension in the CSR. More... | |
| void | mbedtls_x509write_csr_free (mbedtls_x509write_csr *ctx) |
| Free the contents of a CSR context. More... | |
| int | mbedtls_x509write_csr_der (mbedtls_x509write_csr *ctx, unsigned char *buf, size_t size, int(*f_rng)(void *, unsigned char *, size_t), void *p_rng) |
| Write a CSR (Certificate Signing Request) to a DER structure Note: data is written at the end of the buffer! Use the return value to determine where you should start using the buffer. More... | |
| int | mbedtls_x509write_csr_pem (mbedtls_x509write_csr *ctx, unsigned char *buf, size_t size, int(*f_rng)(void *, unsigned char *, size_t), void *p_rng) |
| Write a CSR (Certificate Signing Request) to a PEM string. More... | |
The X.509 module provides X.509 support for reading, writing and verification of certificates. In summary:
mbedtls_x509_crt_parse()
, mbedtls_x509_crt_parse_der()
, mbedtls_x509_crt_parse_file()
).mbedtls_x509_crl_parse()
, mbedtls_x509_crl_parse_der()
, and mbedtls_x509_crl_parse_file()
).mbedtls_x509_crt_verify()
and mbedtls_x509_crt_verify_with_profile()
.mbedtls_x509write_crt_der()
and mbedtls_x509write_csr_der()
).This module can be used to build a certificate authority (CA) chain and verify its signature. It is also used to generate Certificate Signing Requests and X.509 certificates just as a CA would do.
| #define MBEDTLS_ERR_X509_ALLOC_FAILED -0x2880 |
| #define MBEDTLS_ERR_X509_BAD_INPUT_DATA -0x2800 |
| #define MBEDTLS_ERR_X509_BUFFER_TOO_SMALL -0x2980 |
| #define MBEDTLS_ERR_X509_CERT_UNKNOWN_FORMAT -0x2780 |
| #define MBEDTLS_ERR_X509_CERT_VERIFY_FAILED -0x2700 |
| #define MBEDTLS_ERR_X509_FATAL_ERROR -0x3000 |
| #define MBEDTLS_ERR_X509_FEATURE_UNAVAILABLE -0x2080 |
| #define MBEDTLS_ERR_X509_FILE_IO_ERROR -0x2900 |
| #define MBEDTLS_ERR_X509_INVALID_ALG -0x2300 |
| #define MBEDTLS_ERR_X509_INVALID_DATE -0x2400 |
| #define MBEDTLS_ERR_X509_INVALID_EXTENSIONS -0x2500 |
| #define MBEDTLS_ERR_X509_INVALID_FORMAT -0x2180 |
| #define MBEDTLS_ERR_X509_INVALID_NAME -0x2380 |
| #define MBEDTLS_ERR_X509_INVALID_SERIAL -0x2280 |
| #define MBEDTLS_ERR_X509_INVALID_SIGNATURE -0x2480 |
| #define MBEDTLS_ERR_X509_INVALID_VERSION -0x2200 |
| #define MBEDTLS_ERR_X509_SIG_MISMATCH -0x2680 |
Signature algorithms do not match. (see mbedtls_x509_crt
sig_oid)
| #define MBEDTLS_ERR_X509_UNKNOWN_OID -0x2100 |
| #define MBEDTLS_ERR_X509_UNKNOWN_SIG_ALG -0x2600 |
| #define MBEDTLS_ERR_X509_UNKNOWN_VERSION -0x2580 |
| #define MBEDTLS_X509_BADCERT_BAD_KEY 0x010000 |
| #define MBEDTLS_X509_BADCERT_BAD_MD 0x4000 |
| #define MBEDTLS_X509_BADCERT_BAD_PK 0x8000 |
| #define MBEDTLS_X509_BADCERT_CN_MISMATCH 0x04 |
| #define MBEDTLS_X509_BADCERT_EXPIRED 0x01 |
| #define MBEDTLS_X509_BADCERT_EXT_KEY_USAGE 0x1000 |
| #define MBEDTLS_X509_BADCERT_FUTURE 0x0200 |
| #define MBEDTLS_X509_BADCERT_KEY_USAGE 0x0800 |
| #define MBEDTLS_X509_BADCERT_MISSING 0x40 |
| #define MBEDTLS_X509_BADCERT_NOT_TRUSTED 0x08 |
| #define MBEDTLS_X509_BADCERT_NS_CERT_TYPE 0x2000 |
| #define MBEDTLS_X509_BADCERT_OTHER 0x0100 |
| #define MBEDTLS_X509_BADCERT_REVOKED 0x02 |
| #define MBEDTLS_X509_BADCERT_SKIP_VERIFY 0x80 |
| #define MBEDTLS_X509_BADCRL_BAD_KEY 0x080000 |
| #define MBEDTLS_X509_BADCRL_BAD_MD 0x020000 |
| #define MBEDTLS_X509_BADCRL_BAD_PK 0x040000 |
| #define MBEDTLS_X509_BADCRL_FUTURE 0x0400 |
| #define MBEDTLS_X509_BADCRL_NOT_TRUSTED 0x10 |
| #define MBEDTLS_X509_CRT_VERSION_1 0 |
Definition at line 142 of file x509_crt.h.
| #define MBEDTLS_X509_CRT_VERSION_2 1 |
Definition at line 143 of file x509_crt.h.
| #define MBEDTLS_X509_CRT_VERSION_3 2 |
Definition at line 144 of file x509_crt.h.
| #define MBEDTLS_X509_EXT_BASIC_CONSTRAINTS (1 << 8) /* Supported */ |
| #define MBEDTLS_X509_EXT_SUBJECT_ALT_NAME (1 << 5) /* Supported (DNS) */ |
| #define MBEDTLS_X509_ID_FLAG | ( | id | ) | ( 1 << ( (id) - 1 ) ) |
Build flag from an algorithm/curve identifier (pk, md, ecp) Since 0 is always XXX_NONE, ignore it.
Definition at line 126 of file x509_crt.h.
| #define MBEDTLS_X509_MAX_DN_NAME_SIZE 256 |
| #define MBEDTLS_X509_MAX_FILE_PATH_LEN 512 |
Definition at line 150 of file x509_crt.h.
| #define MBEDTLS_X509_MAX_INTERMEDIATE_CA 8 |
Maximum number of intermediate CAs in a verification chain. That is, maximum length of the chain, excluding the end-entity certificate and the trusted root certificate.
Set this to a low value to prevent an adversary from making you waste resources verifying an overlong certificate chain.
| #define MBEDTLS_X509_MAX_VERIFY_CHAIN_SIZE ( MBEDTLS_X509_MAX_INTERMEDIATE_CA + 2 ) |
Max size of verification chain: end-entity + intermediates + trusted root
Definition at line 182 of file x509_crt.h.
| #define MBEDTLS_X509_NS_CERT_TYPE_EMAIL_CA (0x02) /* bit 6 */ |
| #define MBEDTLS_X509_NS_CERT_TYPE_OBJECT_SIGNING (0x10) /* bit 3 */ |
| #define MBEDTLS_X509_NS_CERT_TYPE_OBJECT_SIGNING_CA (0x01) /* bit 7 */ |
| #define MBEDTLS_X509_NS_CERT_TYPE_RESERVED (0x08) /* bit 4 */ |
| #define MBEDTLS_X509_NS_CERT_TYPE_SSL_CLIENT (0x80) /* bit 0 */ |
| #define MBEDTLS_X509_NS_CERT_TYPE_SSL_SERVER (0x40) /* bit 1 */ |
| #define MBEDTLS_X509_RFC5280_MAX_SERIAL_LEN 32 |
Definition at line 146 of file x509_crt.h.
| #define MBEDTLS_X509_RFC5280_UTC_TIME_LEN 15 |
Definition at line 147 of file x509_crt.h.
| #define MBEDTLS_X509_SAFE_SNPRINTF |
| typedef mbedtls_asn1_buf mbedtls_x509_buf |
| typedef struct mbedtls_x509_crl mbedtls_x509_crl |
Certificate revocation list structure. Every CRL may have multiple entries.
| typedef struct mbedtls_x509_crl_entry mbedtls_x509_crl_entry |
Certificate revocation list entry. Contains the CA-specific serial numbers and revocation dates.
| typedef struct mbedtls_x509_crt mbedtls_x509_crt |
Container for an X.509 certificate. The certificate may be chained.
| typedef struct mbedtls_x509_crt_profile mbedtls_x509_crt_profile |
Security profile for certificate verification.
All lists are bitfields, built by ORing flags from MBEDTLS_X509_ID_FLAG().
| typedef void mbedtls_x509_crt_restart_ctx |
Definition at line 224 of file x509_crt.h.
| typedef struct mbedtls_x509_csr mbedtls_x509_csr |
Certificate Signing Request (CSR) structure.
| typedef struct mbedtls_x509_time mbedtls_x509_time |
Container for date and time (precision in seconds).
| typedef struct mbedtls_x509write_cert mbedtls_x509write_cert |
Container for writing a certificate (CRT)
| typedef struct mbedtls_x509write_csr mbedtls_x509write_csr |
Container for writing a CSR
| int mbedtls_dhm_parse_dhm | ( | mbedtls_dhm_context * | dhm, |
| const unsigned char * | dhmin, | ||
| size_t | dhminlen | ||
| ) |
This function parses DHM parameters in PEM or DER format.
| dhm | The DHM context to import the DHM parameters into. This must be initialized. |
| dhmin | The input buffer. This must be a readable buffer of length dhminlen Bytes. |
| dhminlen | The size of the input buffer dhmin , including the terminating NULL Byte for PEM data. |
0
on success. MBEDTLS_ERR_DHM_XXX
or MBEDTLS_ERR_PEM_XXX
error code on failure. | int mbedtls_dhm_parse_dhmfile | ( | mbedtls_dhm_context * | dhm, |
| const char * | path | ||
| ) |
This function loads and parses DHM parameters from a file.
| dhm | The DHM context to load the parameters to. This must be initialized. |
| path | The filename to read the DHM parameters from. This must not be NULL . |
0
on success. MBEDTLS_ERR_DHM_XXX
or MBEDTLS_ERR_PEM_XXX
error code on failure. | void mbedtls_x509_crl_free | ( | mbedtls_x509_crl * | crl | ) |
Unallocate all CRL data.
| crl | CRL chain to free |
| int mbedtls_x509_crl_info | ( | char * | buf, |
| size_t | size, | ||
| const char * | prefix, | ||
| const mbedtls_x509_crl * | crl | ||
| ) |
Returns an informational string about the CRL.
| buf | Buffer to write to |
| size | Maximum size of buffer |
| prefix | A line prefix |
| crl | The X509 CRL to represent |
| void mbedtls_x509_crl_init | ( | mbedtls_x509_crl * | crl | ) |
Initialize a CRL (chain)
| crl | CRL chain to initialize |
| int mbedtls_x509_crl_parse | ( | mbedtls_x509_crl * | chain, |
| const unsigned char * | buf, | ||
| size_t | buflen | ||
| ) |
Parse one or more CRLs and append them to the chained list.
| chain | points to the start of the chain |
| buf | buffer holding the CRL data in PEM or DER format |
| buflen | size of the buffer (including the terminating null byte for PEM data) |
| int mbedtls_x509_crl_parse_der | ( | mbedtls_x509_crl * | chain, |
| const unsigned char * | buf, | ||
| size_t | buflen | ||
| ) |
Parse a DER-encoded CRL and append it to the chained list.
| chain | points to the start of the chain |
| buf | buffer holding the CRL data in DER format |
| buflen | size of the buffer (including the terminating null byte for PEM data) |
| int mbedtls_x509_crl_parse_file | ( | mbedtls_x509_crl * | chain, |
| const char * | path | ||
| ) |
Load one or more CRLs and append them to the chained list.
| chain | points to the start of the chain |
| path | filename to read the CRLs from (in PEM or DER encoding) |
| int mbedtls_x509_crt_check_extended_key_usage | ( | const mbedtls_x509_crt * | crt, |
| const char * | usage_oid, | ||
| size_t | usage_len | ||
| ) |
Check usage of certificate against extendedKeyUsage.
| crt | Leaf certificate used. |
| usage_oid | Intended usage (eg MBEDTLS_OID_SERVER_AUTH or MBEDTLS_OID_CLIENT_AUTH). |
| usage_len | Length of usage_oid (eg given by MBEDTLS_OID_SIZE()). |
| int mbedtls_x509_crt_check_key_usage | ( | const mbedtls_x509_crt * | crt, |
| unsigned int | usage | ||
| ) |
Check usage of certificate against keyUsage extension.
| crt | Leaf certificate used. |
| usage | Intended usage(s) (eg MBEDTLS_X509_KU_KEY_ENCIPHERMENT before using the certificate to perform an RSA key exchange). |
mbedtls_x509_crt_verify()
. | void mbedtls_x509_crt_free | ( | mbedtls_x509_crt * | crt | ) |
Unallocate all certificate data.
| crt | Certificate chain to free |
| int mbedtls_x509_crt_info | ( | char * | buf, |
| size_t | size, | ||
| const char * | prefix, | ||
| const mbedtls_x509_crt * | crt | ||
| ) |
Returns an informational string about the certificate.
| buf | Buffer to write to |
| size | Maximum size of buffer |
| prefix | A line prefix |
| crt | The X509 certificate to represent |
| void mbedtls_x509_crt_init | ( | mbedtls_x509_crt * | crt | ) |
Initialize a certificate (chain)
| crt | Certificate chain to initialize |
| int mbedtls_x509_crt_is_revoked | ( | const mbedtls_x509_crt * | crt, |
| const mbedtls_x509_crl * | crl | ||
| ) |
Verify the certificate revocation status.
| crt | a certificate to be verified |
| crl | the CRL to verify against |
| int mbedtls_x509_crt_parse | ( | mbedtls_x509_crt * | chain, |
| const unsigned char * | buf, | ||
| size_t | buflen | ||
| ) |
Parse one DER-encoded or one or more concatenated PEM-encoded certificates and add them to the chained list.
For CRTs in PEM encoding, the function parses permissively: if at least one certificate can be parsed, the function returns the number of certificates for which parsing failed (hence 0
if all certificates were parsed successfully). If no certificate could be parsed, the function returns the first (negative) error encountered during parsing.
PEM encoded certificates may be interleaved by other data such as human readable descriptions of their content, as long as the certificates are enclosed in the PEM specific '--—{BEGIN/END} CERTIFICATE--—' delimiters.
| chain | The chain to which to add the parsed certificates. |
| buf | The buffer holding the certificate data in PEM or DER format. For certificates in PEM encoding, this may be a concatenation of multiple certificates; for DER encoding, the buffer must comprise exactly one certificate. |
| buflen | The size of buf , including the terminating NULL byte in case of PEM encoded data. |
0
if all certificates were parsed successfully. | int mbedtls_x509_crt_parse_der | ( | mbedtls_x509_crt * | chain, |
| const unsigned char * | buf, | ||
| size_t | buflen | ||
| ) |
Parse a single DER formatted certificate and add it to the chained list.
| chain | points to the start of the chain |
| buf | buffer holding the certificate DER data |
| buflen | size of the buffer |
| int mbedtls_x509_crt_parse_file | ( | mbedtls_x509_crt * | chain, |
| const char * | path | ||
| ) |
Load one or more certificates and add them to the chained list. Parses permissively. If some certificates can be parsed, the result is the number of failed certificates it encountered. If none complete correctly, the first error is returned.
| chain | points to the start of the chain |
| path | filename to read the certificates from |
| int mbedtls_x509_crt_parse_path | ( | mbedtls_x509_crt * | chain, |
| const char * | path | ||
| ) |
Load one or more certificate files from a path and add them to the chained list. Parses permissively. If some certificates can be parsed, the result is the number of failed certificates it encountered. If none complete correctly, the first error is returned.
| chain | points to the start of the chain |
| path | directory / folder to read the certificate files from |
| int mbedtls_x509_crt_verify | ( | mbedtls_x509_crt * | crt, |
| mbedtls_x509_crt * | trust_ca, | ||
| mbedtls_x509_crl * | ca_crl, | ||
| const char * | cn, | ||
| uint32_t * | flags, | ||
| int(*)(void *, mbedtls_x509_crt *, int, uint32_t *) | f_vrfy, | ||
| void * | p_vrfy | ||
| ) |
Verify the certificate signature.
The verify callback is a user-supplied callback that can clear / modify / add flags for a certificate. If set, the verification callback is called for each certificate in the chain (from the trust-ca down to the presented crt). The parameters for the callback are: (void *parameter, mbedtls_x509_crt *crt, int certificate_depth, int *flags). With the flags representing current flags for that specific certificate and the certificate depth from the bottom (Peer cert depth = 0). All flags left after returning from the callback are also returned to the application. The function should return 0 for anything (including invalid certificates) other than fatal error, as a non-zero return code immediately aborts the verification process. For fatal errors, a specific error code should be used (different from MBEDTLS_ERR_X509_CERT_VERIFY_FAILED which should not be returned at this point), or MBEDTLS_ERR_X509_FATAL_ERROR can be used if no better code is available.
mbedtls_x509_crt_verify_info()
mbedtls_x509_crt_verify_with_profile()
with the default security profile.trust_ca
list can contain two types of certificates: (1) those of trusted root CAs, so that certificates chaining up to those CAs will be trusted, and (2) self-signed end-entity certificates to be trusted (for specific peers you know) - in that case, the self-signed certificate doesn't need to have the CA bit set.| crt | a certificate (chain) to be verified |
| trust_ca | the list of trusted CAs (see note above) |
| ca_crl | the list of CRLs for trusted CAs (see note above) |
| cn | expected Common Name (can be set to NULL if the CN must not be verified) |
| flags | result of the verification |
| f_vrfy | verification function |
| p_vrfy | verification parameter |
| int mbedtls_x509_crt_verify_info | ( | char * | buf, |
| size_t | size, | ||
| const char * | prefix, | ||
| uint32_t | flags | ||
| ) |
Returns an informational string about the verification status of a certificate.
| buf | Buffer to write to |
| size | Maximum size of buffer |
| prefix | A line prefix |
| flags | Verification flags created by mbedtls_x509_crt_verify() |
| int mbedtls_x509_crt_verify_restartable | ( | mbedtls_x509_crt * | crt, |
| mbedtls_x509_crt * | trust_ca, | ||
| mbedtls_x509_crl * | ca_crl, | ||
| const mbedtls_x509_crt_profile * | profile, | ||
| const char * | cn, | ||
| uint32_t * | flags, | ||
| int(*)(void *, mbedtls_x509_crt *, int, uint32_t *) | f_vrfy, | ||
| void * | p_vrfy, | ||
| mbedtls_x509_crt_restart_ctx * | rs_ctx | ||
| ) |
Restartable version of mbedtls_crt_verify_with_profile()
mbedtls_crt_verify_with_profile()
but can return early and restart according to the limit set with mbedtls_ecp_set_max_ops()
to reduce blocking.| crt | a certificate (chain) to be verified |
| trust_ca | the list of trusted CAs |
| ca_crl | the list of CRLs for trusted CAs |
| profile | security profile for verification |
| cn | expected Common Name (can be set to NULL if the CN must not be verified) |
| flags | result of the verification |
| f_vrfy | verification function |
| p_vrfy | verification parameter |
| rs_ctx | restart context (NULL to disable restart) |
mbedtls_crt_verify_with_profile()
, or mbedtls_ecp_set_max_ops()
. | int mbedtls_x509_crt_verify_with_profile | ( | mbedtls_x509_crt * | crt, |
| mbedtls_x509_crt * | trust_ca, | ||
| mbedtls_x509_crl * | ca_crl, | ||
| const mbedtls_x509_crt_profile * | profile, | ||
| const char * | cn, | ||
| uint32_t * | flags, | ||
| int(*)(void *, mbedtls_x509_crt *, int, uint32_t *) | f_vrfy, | ||
| void * | p_vrfy | ||
| ) |
Verify the certificate signature according to profile.
mbedtls_x509_crt_verify()
, but with explicit security profile.| crt | a certificate (chain) to be verified |
| trust_ca | the list of trusted CAs |
| ca_crl | the list of CRLs for trusted CAs |
| profile | security profile for verification |
| cn | expected Common Name (can be set to NULL if the CN must not be verified) |
| flags | result of the verification |
| f_vrfy | verification function |
| p_vrfy | verification parameter |
| void mbedtls_x509_csr_free | ( | mbedtls_x509_csr * | csr | ) |
Unallocate all CSR data.
| csr | CSR to free |
| int mbedtls_x509_csr_info | ( | char * | buf, |
| size_t | size, | ||
| const char * | prefix, | ||
| const mbedtls_x509_csr * | csr | ||
| ) |
Returns an informational string about the CSR.
| buf | Buffer to write to |
| size | Maximum size of buffer |
| prefix | A line prefix |
| csr | The X509 CSR to represent |
| void mbedtls_x509_csr_init | ( | mbedtls_x509_csr * | csr | ) |
Initialize a CSR.
| csr | CSR to initialize |
| int mbedtls_x509_csr_parse | ( | mbedtls_x509_csr * | csr, |
| const unsigned char * | buf, | ||
| size_t | buflen | ||
| ) |
Load a Certificate Signing Request (CSR), DER or PEM format.
mbedtls_x509_csr_parse_der()
| csr | CSR context to fill |
| buf | buffer holding the CRL data |
| buflen | size of the buffer (including the terminating null byte for PEM data) |
| int mbedtls_x509_csr_parse_der | ( | mbedtls_x509_csr * | csr, |
| const unsigned char * | buf, | ||
| size_t | buflen | ||
| ) |
Load a Certificate Signing Request (CSR) in DER format.
| csr | CSR context to fill |
| buf | buffer holding the CRL data |
| buflen | size of the buffer |
| int mbedtls_x509_csr_parse_file | ( | mbedtls_x509_csr * | csr, |
| const char * | path | ||
| ) |
Load a Certificate Signing Request (CSR)
mbedtls_x509_csr_parse()
| csr | CSR context to fill |
| path | filename to read the CSR from |
| int mbedtls_x509_dn_gets | ( | char * | buf, |
| size_t | size, | ||
| const mbedtls_x509_name * | dn | ||
| ) |
Store the certificate DN in printable form into buf; no more than size characters will be written.
| buf | Buffer to write to |
| size | Maximum size of buffer |
| dn | The X509 name to represent |
| int mbedtls_x509_get_alg | ( | unsigned char ** | p, |
| const unsigned char * | end, | ||
| mbedtls_x509_buf * | alg, | ||
| mbedtls_x509_buf * | params | ||
| ) |
| int mbedtls_x509_get_alg_null | ( | unsigned char ** | p, |
| const unsigned char * | end, | ||
| mbedtls_x509_buf * | alg | ||
| ) |
| int mbedtls_x509_get_ext | ( | unsigned char ** | p, |
| const unsigned char * | end, | ||
| mbedtls_x509_buf * | ext, | ||
| int | tag | ||
| ) |
| int mbedtls_x509_get_name | ( | unsigned char ** | p, |
| const unsigned char * | end, | ||
| mbedtls_x509_name * | cur | ||
| ) |
| int mbedtls_x509_get_rsassa_pss_params | ( | const mbedtls_x509_buf * | params, |
| mbedtls_md_type_t * | md_alg, | ||
| mbedtls_md_type_t * | mgf_md, | ||
| int * | salt_len | ||
| ) |
| int mbedtls_x509_get_serial | ( | unsigned char ** | p, |
| const unsigned char * | end, | ||
| mbedtls_x509_buf * | serial | ||
| ) |
| int mbedtls_x509_get_sig | ( | unsigned char ** | p, |
| const unsigned char * | end, | ||
| mbedtls_x509_buf * | sig | ||
| ) |
| int mbedtls_x509_get_sig_alg | ( | const mbedtls_x509_buf * | sig_oid, |
| const mbedtls_x509_buf * | sig_params, | ||
| mbedtls_md_type_t * | md_alg, | ||
| mbedtls_pk_type_t * | pk_alg, | ||
| void ** | sig_opts | ||
| ) |
| int mbedtls_x509_get_time | ( | unsigned char ** | p, |
| const unsigned char * | end, | ||
| mbedtls_x509_time * | t | ||
| ) |
| int mbedtls_x509_key_size_helper | ( | char * | buf, |
| size_t | buf_size, | ||
| const char * | name | ||
| ) |
| int mbedtls_x509_self_test | ( | int | verbose | ) |
Checkup routine.
| int mbedtls_x509_serial_gets | ( | char * | buf, |
| size_t | size, | ||
| const mbedtls_x509_buf * | serial | ||
| ) |
Store the certificate serial in printable form into buf; no more than size characters will be written.
| buf | Buffer to write to |
| size | Maximum size of buffer |
| serial | The X509 serial to represent |
| int mbedtls_x509_set_extension | ( | mbedtls_asn1_named_data ** | head, |
| const char * | oid, | ||
| size_t | oid_len, | ||
| int | critical, | ||
| const unsigned char * | val, | ||
| size_t | val_len | ||
| ) |
| int mbedtls_x509_sig_alg_gets | ( | char * | buf, |
| size_t | size, | ||
| const mbedtls_x509_buf * | sig_oid, | ||
| mbedtls_pk_type_t | pk_alg, | ||
| mbedtls_md_type_t | md_alg, | ||
| const void * | sig_opts | ||
| ) |
| int mbedtls_x509_string_to_names | ( | mbedtls_asn1_named_data ** | head, |
| const char * | name | ||
| ) |
| int mbedtls_x509_time_is_future | ( | const mbedtls_x509_time * | from | ) |
Check a given mbedtls_x509_time against the system time and tell if it's in the future.
| from | mbedtls_x509_time to check |
| int mbedtls_x509_time_is_past | ( | const mbedtls_x509_time * | to | ) |
Check a given mbedtls_x509_time against the system time and tell if it's in the past.
| to | mbedtls_x509_time to check |
| int mbedtls_x509_write_extensions | ( | unsigned char ** | p, |
| unsigned char * | start, | ||
| mbedtls_asn1_named_data * | first | ||
| ) |
| int mbedtls_x509_write_names | ( | unsigned char ** | p, |
| unsigned char * | start, | ||
| mbedtls_asn1_named_data * | first | ||
| ) |
| int mbedtls_x509_write_sig | ( | unsigned char ** | p, |
| unsigned char * | start, | ||
| const char * | oid, | ||
| size_t | oid_len, | ||
| unsigned char * | sig, | ||
| size_t | size | ||
| ) |
| int mbedtls_x509write_crt_der | ( | mbedtls_x509write_cert * | ctx, |
| unsigned char * | buf, | ||
| size_t | size, | ||
| int(*)(void *, unsigned char *, size_t) | f_rng, | ||
| void * | p_rng | ||
| ) |
Write a built up certificate to a X509 DER structure Note: data is written at the end of the buffer! Use the return value to determine where you should start using the buffer.
| ctx | certificate to write away |
| buf | buffer to write to |
| size | size of the buffer |
| f_rng | RNG function (for signature, see note) |
| p_rng | RNG parameter |
| void mbedtls_x509write_crt_free | ( | mbedtls_x509write_cert * | ctx | ) |
Free the contents of a CRT write context.
| ctx | CRT context to free |
| void mbedtls_x509write_crt_init | ( | mbedtls_x509write_cert * | ctx | ) |
Initialize a CRT writing context.
| ctx | CRT context to initialize |
| int mbedtls_x509write_crt_pem | ( | mbedtls_x509write_cert * | ctx, |
| unsigned char * | buf, | ||
| size_t | size, | ||
| int(*)(void *, unsigned char *, size_t) | f_rng, | ||
| void * | p_rng | ||
| ) |
Write a built up certificate to a X509 PEM string.
| ctx | certificate to write away |
| buf | buffer to write to |
| size | size of the buffer |
| f_rng | RNG function (for signature, see note) |
| p_rng | RNG parameter |
| int mbedtls_x509write_crt_set_authority_key_identifier | ( | mbedtls_x509write_cert * | ctx | ) |
Set the authorityKeyIdentifier extension for a CRT Requires that mbedtls_x509write_crt_set_issuer_key() has been called before.
| ctx | CRT context to use |
| int mbedtls_x509write_crt_set_basic_constraints | ( | mbedtls_x509write_cert * | ctx, |
| int | is_ca, | ||
| int | max_pathlen | ||
| ) |
Set the basicConstraints extension for a CRT.
| ctx | CRT context to use |
| is_ca | is this a CA certificate |
| max_pathlen | maximum length of certificate chains below this certificate (only for CA certificates, -1 is inlimited) |
| int mbedtls_x509write_crt_set_extension | ( | mbedtls_x509write_cert * | ctx, |
| const char * | oid, | ||
| size_t | oid_len, | ||
| int | critical, | ||
| const unsigned char * | val, | ||
| size_t | val_len | ||
| ) |
Generic function to add to or replace an extension in the CRT.
| ctx | CRT context to use |
| oid | OID of the extension |
| oid_len | length of the OID |
| critical | if the extension is critical (per the RFC's definition) |
| val | value of the extension OCTET STRING |
| val_len | length of the value data |
| void mbedtls_x509write_crt_set_issuer_key | ( | mbedtls_x509write_cert * | ctx, |
| mbedtls_pk_context * | key | ||
| ) |
Set the issuer key used for signing the certificate.
| ctx | CRT context to use |
| key | private key to sign with |
| int mbedtls_x509write_crt_set_issuer_name | ( | mbedtls_x509write_cert * | ctx, |
| const char * | issuer_name | ||
| ) |
Set the issuer name for a Certificate Issuer names should contain a comma-separated list of OID types and values: e.g. "C=UK,O=ARM,CN=mbed TLS CA".
| ctx | CRT context to use |
| issuer_name | issuer name to set |
| int mbedtls_x509write_crt_set_key_usage | ( | mbedtls_x509write_cert * | ctx, |
| unsigned int | key_usage | ||
| ) |
Set the Key Usage Extension flags (e.g. MBEDTLS_X509_KU_DIGITAL_SIGNATURE | MBEDTLS_X509_KU_KEY_CERT_SIGN)
| ctx | CRT context to use |
| key_usage | key usage flags to set |
| void mbedtls_x509write_crt_set_md_alg | ( | mbedtls_x509write_cert * | ctx, |
| mbedtls_md_type_t | md_alg | ||
| ) |
Set the MD algorithm to use for the signature (e.g. MBEDTLS_MD_SHA1)
| ctx | CRT context to use |
| md_alg | MD algorithm to use |
| int mbedtls_x509write_crt_set_ns_cert_type | ( | mbedtls_x509write_cert * | ctx, |
| unsigned char | ns_cert_type | ||
| ) |
Set the Netscape Cert Type flags (e.g. MBEDTLS_X509_NS_CERT_TYPE_SSL_CLIENT | MBEDTLS_X509_NS_CERT_TYPE_EMAIL)
| ctx | CRT context to use |
| ns_cert_type | Netscape Cert Type flags to set |
| int mbedtls_x509write_crt_set_serial | ( | mbedtls_x509write_cert * | ctx, |
| const mbedtls_mpi * | serial | ||
| ) |
Set the serial number for a Certificate.
| ctx | CRT context to use |
| serial | serial number to set |
| void mbedtls_x509write_crt_set_subject_key | ( | mbedtls_x509write_cert * | ctx, |
| mbedtls_pk_context * | key | ||
| ) |
Set the subject public key for the certificate.
| ctx | CRT context to use |
| key | public key to include |
| int mbedtls_x509write_crt_set_subject_key_identifier | ( | mbedtls_x509write_cert * | ctx | ) |
Set the subjectKeyIdentifier extension for a CRT Requires that mbedtls_x509write_crt_set_subject_key() has been called before.
| ctx | CRT context to use |
| int mbedtls_x509write_crt_set_subject_name | ( | mbedtls_x509write_cert * | ctx, |
| const char * | subject_name | ||
| ) |
Set the subject name for a Certificate Subject names should contain a comma-separated list of OID types and values: e.g. "C=UK,O=ARM,CN=mbed TLS Server 1".
| ctx | CRT context to use |
| subject_name | subject name to set |
| int mbedtls_x509write_crt_set_validity | ( | mbedtls_x509write_cert * | ctx, |
| const char * | not_before, | ||
| const char * | not_after | ||
| ) |
Set the validity period for a Certificate Timestamps should be in string format for UTC timezone i.e. "YYYYMMDDhhmmss" e.g. "20131231235959" for December 31st 2013 at 23:59:59.
| ctx | CRT context to use |
| not_before | not_before timestamp |
| not_after | not_after timestamp |
| void mbedtls_x509write_crt_set_version | ( | mbedtls_x509write_cert * | ctx, |
| int | version | ||
| ) |
Set the verion for a Certificate Default: MBEDTLS_X509_CRT_VERSION_3.
| ctx | CRT context to use |
| version | version to set (MBEDTLS_X509_CRT_VERSION_1, MBEDTLS_X509_CRT_VERSION_2 or MBEDTLS_X509_CRT_VERSION_3) |
| int mbedtls_x509write_csr_der | ( | mbedtls_x509write_csr * | ctx, |
| unsigned char * | buf, | ||
| size_t | size, | ||
| int(*)(void *, unsigned char *, size_t) | f_rng, | ||
| void * | p_rng | ||
| ) |
Write a CSR (Certificate Signing Request) to a DER structure Note: data is written at the end of the buffer! Use the return value to determine where you should start using the buffer.
| ctx | CSR to write away |
| buf | buffer to write to |
| size | size of the buffer |
| f_rng | RNG function (for signature, see note) |
| p_rng | RNG parameter |
| void mbedtls_x509write_csr_free | ( | mbedtls_x509write_csr * | ctx | ) |
Free the contents of a CSR context.
| ctx | CSR context to free |
| void mbedtls_x509write_csr_init | ( | mbedtls_x509write_csr * | ctx | ) |
Initialize a CSR context.
| ctx | CSR context to initialize |
| int mbedtls_x509write_csr_pem | ( | mbedtls_x509write_csr * | ctx, |
| unsigned char * | buf, | ||
| size_t | size, | ||
| int(*)(void *, unsigned char *, size_t) | f_rng, | ||
| void * | p_rng | ||
| ) |
Write a CSR (Certificate Signing Request) to a PEM string.
| ctx | CSR to write away |
| buf | buffer to write to |
| size | size of the buffer |
| f_rng | RNG function (for signature, see note) |
| p_rng | RNG parameter |
| int mbedtls_x509write_csr_set_extension | ( | mbedtls_x509write_csr * | ctx, |
| const char * | oid, | ||
| size_t | oid_len, | ||
| const unsigned char * | val, | ||
| size_t | val_len | ||
| ) |
Generic function to add to or replace an extension in the CSR.
| ctx | CSR context to use |
| oid | OID of the extension |
| oid_len | length of the OID |
| val | value of the extension OCTET STRING |
| val_len | length of the value data |
| void mbedtls_x509write_csr_set_key | ( | mbedtls_x509write_csr * | ctx, |
| mbedtls_pk_context * | key | ||
| ) |
Set the key for a CSR (public key will be included, private key used to sign the CSR when writing it)
| ctx | CSR context to use |
| key | Asymetric key to include |
| int mbedtls_x509write_csr_set_key_usage | ( | mbedtls_x509write_csr * | ctx, |
| unsigned char | key_usage | ||
| ) |
Set the Key Usage Extension flags (e.g. MBEDTLS_X509_KU_DIGITAL_SIGNATURE | MBEDTLS_X509_KU_KEY_CERT_SIGN)
| ctx | CSR context to use |
| key_usage | key usage flags to set |
decipherOnly
flag from the Key Usage extension is represented by bit 8 (i.e. 0x8000
), which cannot typically be represented in an unsigned char. Therefore, the flag decipherOnly
(i.e. MBEDTLS_X509_KU_DECIPHER_ONLY) cannot be set using this function. | void mbedtls_x509write_csr_set_md_alg | ( | mbedtls_x509write_csr * | ctx, |
| mbedtls_md_type_t | md_alg | ||
| ) |
Set the MD algorithm to use for the signature (e.g. MBEDTLS_MD_SHA1)
| ctx | CSR context to use |
| md_alg | MD algorithm to use |
| int mbedtls_x509write_csr_set_ns_cert_type | ( | mbedtls_x509write_csr * | ctx, |
| unsigned char | ns_cert_type | ||
| ) |
Set the Netscape Cert Type flags (e.g. MBEDTLS_X509_NS_CERT_TYPE_SSL_CLIENT | MBEDTLS_X509_NS_CERT_TYPE_EMAIL)
| ctx | CSR context to use |
| ns_cert_type | Netscape Cert Type flags to set |
| int mbedtls_x509write_csr_set_subject_name | ( | mbedtls_x509write_csr * | ctx, |
| const char * | subject_name | ||
| ) |
Set the subject name for a CSR Subject names should contain a comma-separated list of OID types and values: e.g. "C=UK,O=ARM,CN=mbed TLS Server 1".
| ctx | CSR context to use |
| subject_name | subject name to set |
| uint32_t mbedtls_x509_crt_profile::allowed_curves |
Elliptic curves for ECDSA
Definition at line 137 of file x509_crt.h.
| uint32_t mbedtls_x509_crt_profile::allowed_mds |
MDs for signatures
Definition at line 135 of file x509_crt.h.
| uint32_t mbedtls_x509_crt_profile::allowed_pks |
PK algs for signatures
Definition at line 136 of file x509_crt.h.
| int mbedtls_x509_crt::ca_istrue |
Optional Basic Constraint extension value: 1 if this certificate belongs to a CA, 0 otherwise.
Definition at line 104 of file x509_crt.h.
| mbedtls_x509_buf mbedtls_x509_csr::cri |
The raw CertificateRequestInfo body (DER).
Definition at line 79 of file x509_csr.h.
| mbedtls_x509_buf mbedtls_x509_crl::crl_ext |
Definition at line 112 of file x509_crl.h.
| mbedtls_x509_crt* mbedtls_x509_crt_verify_chain_item::crt |
Definition at line 175 of file x509_crt.h.
| mbedtls_x509_crl_entry mbedtls_x509_crl::entry |
The CRL entries containing the certificate revocation times for this CA.
Definition at line 110 of file x509_crl.h.
| mbedtls_x509_buf mbedtls_x509_crl_entry::entry_ext |
Definition at line 85 of file x509_crl.h.
| mbedtls_x509_sequence mbedtls_x509_crt::ext_key_usage |
Optional list of extended key usage OIDs.
Definition at line 109 of file x509_crt.h.
| int mbedtls_x509_crt::ext_types |
Bit string containing detected and parsed extensions
Definition at line 103 of file x509_crt.h.
| mbedtls_asn1_named_data* mbedtls_x509write_csr::extensions |
Definition at line 104 of file x509_csr.h.
| mbedtls_asn1_named_data* mbedtls_x509write_cert::extensions |
Definition at line 167 of file x509_crt.h.
| uint32_t mbedtls_x509_crt_verify_chain_item::flags |
Definition at line 176 of file x509_crt.h.
| mbedtls_x509_name mbedtls_x509_crt::issuer |
The parsed issuer data (named information object).
Definition at line 90 of file x509_crt.h.
| mbedtls_x509_name mbedtls_x509_crl::issuer |
The parsed issuer data (named information object).
Definition at line 105 of file x509_crl.h.
| mbedtls_asn1_named_data* mbedtls_x509write_cert::issuer |
Definition at line 163 of file x509_crt.h.
| mbedtls_x509_buf mbedtls_x509_crt::issuer_id |
Optional X.509 v2/v3 issuer unique identifier.
Definition at line 98 of file x509_crt.h.
| mbedtls_pk_context* mbedtls_x509write_cert::issuer_key |
Definition at line 161 of file x509_crt.h.
| mbedtls_x509_buf mbedtls_x509_crt::issuer_raw |
The raw issuer data (DER). Used for quick comparison.
Definition at line 87 of file x509_crt.h.
| mbedtls_x509_buf mbedtls_x509_crl::issuer_raw |
The raw issuer data (DER).
Definition at line 103 of file x509_crl.h.
| mbedtls_x509_crt_verify_chain_item mbedtls_x509_crt_verify_chain::items[MBEDTLS_X509_MAX_VERIFY_CHAIN_SIZE] |
Definition at line 189 of file x509_crt.h.
| mbedtls_pk_context* mbedtls_x509write_csr::key |
Definition at line 101 of file x509_csr.h.
| unsigned int mbedtls_x509_crt::key_usage |
Optional key usage extension value: See the values in x509.h
Definition at line 107 of file x509_crt.h.
| unsigned mbedtls_x509_crt_verify_chain::len |
Definition at line 190 of file x509_crt.h.
| int mbedtls_x509_crt::max_pathlen |
Optional Basic Constraint extension value: The maximum path length to the root certificate. Path length is 1 higher than RFC 5280 'meaning', so 1+
Definition at line 105 of file x509_crt.h.
| const mbedtls_x509_crt_profile mbedtls_x509_crt_profile_default |
Default security profile. Should provide a good balance between security and compatibility with current deployments.
This profile permits:
New minor versions of Mbed TLS may extend this profile, for example if new curves are added to the library. New minor versions of Mbed TLS will not reduce this profile unless serious security concerns require it.
| const mbedtls_x509_crt_profile mbedtls_x509_crt_profile_next |
Expected next default profile. Recommended for new deployments. Currently targets a 128-bit security level, except for allowing RSA-2048.
| const mbedtls_x509_crt_profile mbedtls_x509_crt_profile_suiteb |
NSA Suite B profile.
| mbedtls_md_type_t mbedtls_x509write_csr::md_alg |
Definition at line 103 of file x509_csr.h.
| mbedtls_md_type_t mbedtls_x509write_cert::md_alg |
Definition at line 164 of file x509_crt.h.
| struct mbedtls_x509_crl_entry* mbedtls_x509_crl_entry::next |
Definition at line 87 of file x509_crl.h.
| struct mbedtls_x509_crt* mbedtls_x509_crt::next |
Next certificate in the CA-chain.
Definition at line 118 of file x509_crt.h.
| struct mbedtls_x509_crl* mbedtls_x509_crl::next |
Definition at line 120 of file x509_crl.h.
| mbedtls_x509_time mbedtls_x509_crl::next_update |
Definition at line 108 of file x509_crl.h.
| char mbedtls_x509write_cert::not_after[MBEDTLS_X509_RFC5280_UTC_TIME_LEN+1] |
Definition at line 166 of file x509_crt.h.
| char mbedtls_x509write_cert::not_before[MBEDTLS_X509_RFC5280_UTC_TIME_LEN+1] |
Definition at line 165 of file x509_crt.h.
| unsigned char mbedtls_x509_crt::ns_cert_type |
Optional Netscape certificate type extension value: See the values in x509.h
Definition at line 111 of file x509_crt.h.
| mbedtls_pk_context mbedtls_x509_csr::pk |
Container for the public key context.
Definition at line 86 of file x509_csr.h.
| mbedtls_pk_context mbedtls_x509_crt::pk |
Container for the public key context.
Definition at line 96 of file x509_crt.h.
| mbedtls_x509_buf mbedtls_x509_csr::raw |
The raw CSR data (DER).
Definition at line 78 of file x509_csr.h.
| mbedtls_x509_buf mbedtls_x509_crl_entry::raw |
Definition at line 79 of file x509_crl.h.
| mbedtls_x509_buf mbedtls_x509_crt::raw |
The raw certificate data (DER).
Definition at line 80 of file x509_crt.h.
| mbedtls_x509_buf mbedtls_x509_crl::raw |
The raw certificate data (DER).
Definition at line 97 of file x509_crl.h.
| mbedtls_x509_time mbedtls_x509_crl_entry::revocation_date |
Definition at line 83 of file x509_crl.h.
| uint32_t mbedtls_x509_crt_profile::rsa_min_bitlen |
Minimum size for RSA keys
Definition at line 138 of file x509_crt.h.
| mbedtls_x509_buf mbedtls_x509_crl_entry::serial |
Definition at line 81 of file x509_crl.h.
| mbedtls_x509_buf mbedtls_x509_crt::serial |
Unique id for certificate issued by a specific CA.
Definition at line 84 of file x509_crt.h.
| mbedtls_mpi mbedtls_x509write_cert::serial |
Definition at line 159 of file x509_crt.h.
| mbedtls_x509_buf mbedtls_x509_csr::sig |
Definition at line 89 of file x509_csr.h.
| mbedtls_x509_buf mbedtls_x509_crt::sig |
Signature: hash of the tbs part signed with the private key.
Definition at line 113 of file x509_crt.h.
| mbedtls_x509_buf mbedtls_x509_crl::sig |
Definition at line 115 of file x509_crl.h.
| mbedtls_md_type_t mbedtls_x509_csr::sig_md |
Internal representation of the MD algorithm of the signature algorithm, e.g. MBEDTLS_MD_SHA256
Definition at line 90 of file x509_csr.h.
| mbedtls_md_type_t mbedtls_x509_crt::sig_md |
Internal representation of the MD algorithm of the signature algorithm, e.g. MBEDTLS_MD_SHA256
Definition at line 114 of file x509_crt.h.
| mbedtls_md_type_t mbedtls_x509_crl::sig_md |
Internal representation of the MD algorithm of the signature algorithm, e.g. MBEDTLS_MD_SHA256
Definition at line 116 of file x509_crl.h.
| mbedtls_x509_buf mbedtls_x509_crt::sig_oid |
Signature algorithm, e.g. sha1RSA
Definition at line 85 of file x509_crt.h.
| mbedtls_x509_buf mbedtls_x509_csr::sig_oid |
Definition at line 88 of file x509_csr.h.
| mbedtls_x509_buf mbedtls_x509_crl::sig_oid |
CRL signature type identifier
Definition at line 101 of file x509_crl.h.
| mbedtls_x509_buf mbedtls_x509_crl::sig_oid2 |
Definition at line 114 of file x509_crl.h.
| void* mbedtls_x509_csr::sig_opts |
Signature options to be passed to mbedtls_pk_verify_ext(), e.g. for RSASSA-PSS
Definition at line 92 of file x509_csr.h.
| void* mbedtls_x509_crt::sig_opts |
Signature options to be passed to mbedtls_pk_verify_ext(), e.g. for RSASSA-PSS
Definition at line 116 of file x509_crt.h.
| void* mbedtls_x509_crl::sig_opts |
Signature options to be passed to mbedtls_pk_verify_ext(), e.g. for RSASSA-PSS
Definition at line 118 of file x509_crl.h.
| mbedtls_pk_type_t mbedtls_x509_csr::sig_pk |
Internal representation of the Public Key algorithm of the signature algorithm, e.g. MBEDTLS_PK_RSA
Definition at line 91 of file x509_csr.h.
| mbedtls_pk_type_t mbedtls_x509_crt::sig_pk |
Internal representation of the Public Key algorithm of the signature algorithm, e.g. MBEDTLS_PK_RSA
Definition at line 115 of file x509_crt.h.
| mbedtls_pk_type_t mbedtls_x509_crl::sig_pk |
Internal representation of the Public Key algorithm of the signature algorithm, e.g. MBEDTLS_PK_RSA
Definition at line 117 of file x509_crl.h.
| mbedtls_x509_name mbedtls_x509_csr::subject |
The parsed subject data (named information object).
Definition at line 84 of file x509_csr.h.
| mbedtls_x509_name mbedtls_x509_crt::subject |
The parsed subject data (named information object).
Definition at line 91 of file x509_crt.h.
| mbedtls_asn1_named_data* mbedtls_x509write_csr::subject |
Definition at line 102 of file x509_csr.h.
| mbedtls_asn1_named_data* mbedtls_x509write_cert::subject |
Definition at line 162 of file x509_crt.h.
| mbedtls_x509_sequence mbedtls_x509_crt::subject_alt_names |
Optional list of Subject Alternative Names (Only dNSName supported).
Definition at line 101 of file x509_crt.h.
| mbedtls_x509_buf mbedtls_x509_crt::subject_id |
Optional X.509 v2/v3 subject unique identifier.
Definition at line 99 of file x509_crt.h.
| mbedtls_pk_context* mbedtls_x509write_cert::subject_key |
Definition at line 160 of file x509_crt.h.
| mbedtls_x509_buf mbedtls_x509_csr::subject_raw |
The raw subject data (DER).
Definition at line 83 of file x509_csr.h.
| mbedtls_x509_buf mbedtls_x509_crt::subject_raw |
The raw subject data (DER). Used for quick comparison.
Definition at line 88 of file x509_crt.h.
| mbedtls_x509_buf mbedtls_x509_crt::tbs |
The raw certificate body (DER). The part that is To Be Signed.
Definition at line 81 of file x509_crt.h.
| mbedtls_x509_buf mbedtls_x509_crl::tbs |
The raw certificate body (DER). The part that is To Be Signed.
Definition at line 98 of file x509_crl.h.
| mbedtls_x509_time mbedtls_x509_crl::this_update |
Definition at line 107 of file x509_crl.h.
| mbedtls_x509_buf mbedtls_x509_crt::v3_ext |
Optional X.509 v3 extensions.
Definition at line 100 of file x509_crt.h.
| mbedtls_x509_time mbedtls_x509_crt::valid_from |
Start time of certificate validity.
Definition at line 93 of file x509_crt.h.
| mbedtls_x509_time mbedtls_x509_crt::valid_to |
End time of certificate validity.
Definition at line 94 of file x509_crt.h.
| int mbedtls_x509_csr::version |
CSR version (1=v1).
Definition at line 81 of file x509_csr.h.
| int mbedtls_x509_crt::version |
The X.509 version. (1=v1, 2=v2, 3=v3)
Definition at line 83 of file x509_crt.h.
| int mbedtls_x509_crl::version |
CRL version (1=v1, 2=v2)
Definition at line 100 of file x509_crl.h.
| int mbedtls_x509write_cert::version |
Definition at line 158 of file x509_crt.h.


- a, w, s, d
- Move spinners origin
- + and - (without shift)
- increase/decrease spin speed
- g and f
- increase/decrease gravity
- b
- toggle bounce mode: none, floor, all walls
- m and n
- increase/decrease bounce damping
- < and > (without shift)
- increase/decrease diminishing speed
>>
<<


Overview
Package
Class
Use
Tree
Deprecated
Index
Help
PREV LETTER
NEXT LETTER
FRAMES
NO FRAMES
All Classes
A
B
C
D
E
F
G
H
I
J
L
M
N
O
P
R
S
T
U
V
W
X
Y
Z
T
t
- Variable in class com.tabuto.j2dgf.collision.
CollisionDetector
t
- Variable in class com.tabuto.jsimlife.views.
JSLTestTubeView
testTube
- Variable in class com.tabuto.jsimlife.views.
JSLTestTubeView
testTubeGame
- Variable in class com.tabuto.jsimlife.views.
JSLTestTubeView
think(double, double)
- Method in class com.tabuto.jsimlife.
ZetatronBrain
thinkState()
- Method in class com.tabuto.jsimlife.
Zetatron
Calculate the current state as the result of Brain's think method
ThisIsMe(Graphics)
- Method in class com.tabuto.j2dgf.
Sprite
This method must be override to implements how the Sprite must be draw
ThisIsMe(Graphics)
- Method in class com.tabuto.jsimlife.
Seed
Overrided ThisIsMe sprite methods
ThisIsMe(Graphics)
- Method in class com.tabuto.jsimlife.
Zatropod.Limb
ThisIsMe(Graphics)
- Method in class com.tabuto.jsimlife.
Zetatron
ThisIsMe(Graphics)
- Method in class com.tabuto.jsimlife.
Zlife
ThisIsMe(Graphics)
- Method in class com.tabuto.jsimlife.
Zretador
Through(Sprite)
- Method in class com.tabuto.j2dgf.collision.
CollisionBoundDetector
Change the Sprite position to simulate a pass through the boundary
TimeCollisionDetector
- Class in
com.tabuto.j2dgf.collision
Abstract class extends CollisionDetectot to perform action every check time.
TimeCollisionDetector(Group<? extends Sprite>, int)
- Constructor for class com.tabuto.j2dgf.collision.
TimeCollisionDetector
timer
- Variable in class com.tabuto.jsimlife.views.
JSLControlPanelView
Title
- Variable in class com.tabuto.jsimlife.actions.
ChangeColorButtonAction
title
- Static variable in class com.tabuto.jsimlife.views.
JSLMainView
tn
- Variable in class com.tabuto.jsimlife.views.
JSLDnaTreePanelView
toolbar
- Variable in class com.tabuto.jsimlife.views.
JSLMainView
toString()
- Method in class com.tabuto.jenetic.
Dna
toString()
- Method in class com.tabuto.jenetic.
Gene
toString()
- Method in class com.tabuto.jsimlife.
JSLStatistic
Return a String with all the Calculated Values
toString()
- Method in class com.tabuto.jsimlife.
Zlife
toString()
- Method in class com.tabuto.util.
Point
toString()
- Method in class com.tabuto.util.
Vettore
TotalEnergy
- Variable in class com.tabuto.jsimlife.
JSLStatistic
TotalRadius
- Variable in class com.tabuto.jsimlife.
JSLStatistic
TotalSpeed
- Variable in class com.tabuto.jsimlife.
JSLStatistic
toXML()
- Method in class com.tabuto.jenetic.
Dna
Return a XML document represent this DNA with description List of ist genes
toXML(String)
- Method in class com.tabuto.jenetic.
Dna
Write a XML file represent this DNA with description List of ist genes
TUBE
- Static variable in class com.tabuto.jsimlife.views.
JSLToolbar
tubeDimension
- Variable in class com.tabuto.jsimlife.views.
JSLTestTubeView
twoGroups
- Variable in class com.tabuto.j2dgf.collision.
CollisionDetector
Boolean variable.
Type
- Variable in class com.tabuto.jenetic.
Gene
String indicates the Class Type of the Wrapped Object
Overview
Package
Class
Use
Tree
Deprecated
Index
Help
PREV LETTER
NEXT LETTER
FRAMES
NO FRAMES
All Classes
A
B
C
D
E
F
G
H
I
J
L
M
N
O
P
R
S
T
U
V
W
X
Y
Z


Schwarz becomes third Bundesliga coach fired in a week
BERLIN: Mainz sacked Sandro Schwarz as head coach on Sunday (Nov 10) after more than two years in charge, making him the third boss to be dismissed by a Bundesliga club in the last week.
Schwarz, 41, was shown the door after Saturday's 3-2 home defeat to newly-promoted Union Berlin which followed last week's 8-0 drubbing at high-fliers RB Leipzig.
Schwarz's dismissal comes after Achim Beierlorzer was sacked by Cologne on Saturday, and Niko Kovac was let go by Bayern Munich last weekend.
Defeat to Union saw Mainz drop into the bottom three after losing eight of their first 11 league games this season - the worst start to a season in the club's history.
Mainz now have a fortnight to find a new coach during the international break before their next game on November 24 at Hoffenheim, who are fourth after winning all of their last six games.


Using two sets of radio buttons, as horizontal controlgroups, and one group of checkboxes, as a vertical controlgroup, to implement a product selector.


basic members
We don't have memberships as such, those are people who joined our groups across social media. It is done with the vision that if people are looking for Python talents, they can see them here. It is also a motivation to learn Python and update your data
| username | name | date joined |
|---|---|---|
| NayarJ | Nayar Joolfoo | 20-04-2019 |
| ManojM | Manoj Maracheea | 10-04-2019 |
| devildron | Codarren Velvindron | 20-08-2018 |
| PrakashR | Prakash Rambojun | 05-04-2019 |
| KeShav | Keshav Purdaseea | 20-04-2019 |
| appinv | Abdur-Rahmaan Janhangeer | 12-08-2018 |
| BilaalAH | Bilaal Abdel Hassan | 16-04-2019 |
| RoderyckBryan | Roderyck Bryan Rammanaiken | 08-04-2019 |
| 0x15F9 | Muhammad Isfaaq Goomany | 29-03-2019 |
| ShiamB | Shiam Beeharry | 17-12-2019 |
| Nirmal | Nirmal R | 04-07-2019 |
| LuxCasa | Lux Casa | 30-04-2019 |
| caffeinatedstud | Yashvi Paupiah | 12-08-2018 |
| AjmalR | Ajmal Rajah | 10-03-2019 |
| FarhaanH | Farhaan Hatteea | 01-05-2019 |
| zcoldplayer | Jheengut Prithvi | 05-04-2019 |
| AvishaiP | Avishai Poorun | 14-04-2019 |
| LinleyT | Linley Tanner | ~april19 |
| DominiqueT | Dominique Theodore | 10-03-2019 |
| Iven24 | Iven Vencatasawmy | 14-04-2019 |
| NdoloY | Ndolo Yvonne Ngwe | 28-04-2019 |
| RachnaP | Rachna Poonit | 01-05-2019 |
| irshaad | Irshaad Abdool | 12-08-2018 |
| TashleyT | Tashley Toocaram | 06-04-2019 |
| ShivamK | Shivam Khoosye | 05-04-2019 |
| Joki | Jochen Kirstätter | 05-04-2019 |
| SubashneeC | Subashnee Chetty | 06-04-2019 |
| JPFortuno | Jean Paul Fortuno | ~june19 |
| AshmitaS | Ashmita Seetal | 06-04-2019 |
| ReetG | Reet Gungoa | ~april19 |
| DeelveshB | Deelvesh Bunjun | 10-04-2019 |
| AvishC | Avish Cheetaram | ~aug19 |
| accelerator | Tanesh Chuckowree | 16-08-2018 |
| AviB | Avi Bhagowantin | 01-05-2019 |
| YuveshV | Yuvesh Veeriah | ~aug19 |
| ShravanS | Shravan S. Dwarka | 09-04-2019 |
| KunalB | Kunal Banydeen | 09-04-2019 |
| haidarknightfury | Haidar Dargaye | 17-04-2019 |
| YudzS | Yudz Sharma | ~may |
| kherin | Kherin Bundhoo | 21-04-2019 |
| NeerajJ | Neeraj Joypaul | 20-04-2019 |
| javed | Javed Mahamoodally | 12-08-2018 |


Calcium
Element Name:
Calcium
Latin Name:
Calcium
Atomic Number:
20
Atomic Weight:
40.078 u
Is a:
Alkali-Earth-Metal
State of the element:
Solid
About:
Calcium is a chemical element with the symbol Ca and atomic number 20. As an alkaline earth metal, calcium is a reactive metal that forms a dark oxide-nitride layer when exposed to air. Its physical and chemical properties are most similar to its heavier homologues strontium and barium. It is the fifth most abundant element in Earth's crust and the third most abundant metal, after iron and aluminium. The most common calcium compound on Earth is calcium carbonate, found in limestone and the fossilised remnants of early sea life; gypsum, anhydrite, fluorite, and apatite are also sources of calcium. The name derives from Latin calx 'lime', which was obtained from heating limestone.
Electrons
20
Protons
20
Neutrons
20
Discoverer:
Humphry Davy
Discovered in:
1808


Elton John: I needed teleprompter for Princess Diana’s funeral song
LONDON, Nov 20 — British singer-songwriter Elton John said he was so worried about getting the words wrong when performing an adaptation of Candle In the Wind at Princess Diana’s funeral that he had a teleprompter installed by the piano.
John, who was a friend of Diana, sang the new version of the hit song using revised words penned by lyricist and frequent collaborator Bernie Taupin.
His performance at London’s Westminster Abbey in 1997, after Diana was killed in a car crash in Paris, was a standout moment at a televised service watched by hundreds of millions of people around the world.
The song, featuring the line “Goodbye England’s rose” instead of the original words “Goodbye Norma Jean”, went on to become the fastest-selling single in Britain.
“It’s the first time I had a teleprompter, a teleprompter down on my left hand side, because I thought if I sing ‘Goodbye Norma Jean’ I’m gonna get hung, drawn and quartered,” John told a London audience late yesterday.
“So just for precaution, I had the teleprompter there.”
The 72-year-old was speaking at the Royal Academy of Music, where he once studied, at an event to mark the publication of his autobiography Me: Elton John.
He described the process by which he and Taupin worked together on some of their greatest hits.
“He (Bernie) always gives me a lyric,” John said. “I go into a room, put the lyric on the piano, look at the title. And as I start reading the song, a little movie comes in my head a bit like writing a film score where you get the visual part.
“By the time I finish the song or the lyric, I kind of know what tempo it might be or what genre it could be. And I just literally put my hands on the piano and that’s it. I hope for the best. That is it.” — Reuters


Heatmap of differentially expressed proteins in D1 and D2 cell types. Normalized intensities were Log 2 transformed and were Z-scored prior to Euclidean distance-based hierarchical clustering with Perseus. Protein clusters D1 and D2 include 40 and 47 proteins, respectively.


Coefficient of traffic manipulation
dashboard
Dashboard
perm_data_setting
Traffic increase pattern
perm_data_setting
Coefficient of traffic manipulation
perm_data_setting
Similar text clustering
perm_data_setting
Metric4
perm_data_setting
Metric5
Original tweets vs. retweets:
{{retweets_percent_pie}}
Tweets generated by the 50 most active users:
{{most_tweets_pie}}
Average number of tweets per user:
{{average_tweets}}
Coefficient of traffic manipulation:
{{coeff_text}}
A coefficient over 12 suggests a high probability of traffic manipulation.


I’m a Responsive Developer and you’re invited to hear my yarn. I carry no ego, but I do bear a relentless enthusiasm for progressing in my field. My essence is patient professionalism and I will happily accept constructive feedback. You see, I want to learn all aspects of web development. Not only to expand my own understanding, but also to pass on that knowledge to help others grow.
An 80's youth, my earlier days were occupied by warehouse parties and illegal raves, bucket hats and high visability jackets, whistles and glow-sticks, zero inhibition and pure love.
Whilst whopping fun, a wreckless youth then gave way to a rather mundane working life. Many dead end and low skill jobs became the norm and a numbness, brought on from boredom, enveloped my working life.
Finally.. after many years, I dicover something that I find facinating! Coding and Web Develpment have become my focus, a passion that I cannot contain. The more I learn, the more I want to know. So it continues...


Adaptive Modes¶
Automatically configures all control file and defaults accordin to the chosen methodology.
Induced fit_fast¶
induced_fit_fast: Run a short induced fit AdaptivePELE simulation paramaters by setting the center of the box in the cm of the ligand, a box radius of 10A, small rotations and translations and a high number of steric clashes and sidechain predition frequency. Usefull to refine docking poses, and search new conformations within the same binding site.
induced_fit_fast: true
Induced fit_exhaustive¶
induced_fit_exhaustive: Run a long induced fit PELE simulation paramaters by setting the center of the box in the cm of the ligand, a box radius of 10A, small rotations and translations and a high number of steric clashes and sidechain predition frequency. Usefull to refine docking poses, and search new conformations within the same binding site.
induced_fit_exhaustive: true
Rescoring¶
Simulation to refine around an initial conformation. Not looking to find a new binding mode but to minimize the actual one.
rescoring: true
Local Exploration¶
out_in: Local exploration to move the ligand from the bulk to the binding site. The box center set on the center of mass of the ligand with a radius of 30A, steering 1 50% of the times, and a slight bias towards binding energies. Useful when no docking is possible in the binding site and you need to open up the pocket.
out_in: true
Biased¶
bias: Bias exploration towards the indicated bias column. The box center is set on the center of mass of the ligand with a radius of 30A, and a bias towards the chosen metric is set. An epsilon fraction of processors are distributed proportionally to the value of a metric, and the rest are inverselyProportional distributed. Therefore, the epsilon value controls fraction of the processors that will be assigned according to the selected metric in biascolumn
bias: true
epsilon: 0.5
bias_column: 5 (starting by 1 on the reports)
Exit path¶
in_out: Explore the dissociative path of a molecule. At each step the box is center on the most exterior cluster and there is a bias towards higher values of SASA. This type accepts a exit_metric which represents a column in the report file, an exit_value which represents a value for the metric and a exit_condition parameter which can be either “<” or “>”, default value is “<”. The simulation will terminate after the metric written in the metricCol reaches a value smaller or greater than exitValue, depending on the condition specified. An example of the exit condition block that would terminate the program after 4 trajectories reaches a value of more than 0.9 for the sixth column (6th starting to count from 1) of the report file would look like:
in_out: true
exit_value: 0.9
exit_condition: ">"
exit_trajnum: 4
Global exploration¶
global: Configure a global exploration by randomizing the ligand all around the protein. Then the simulation will start from all configurationsof the system at the same time. The number of configurations (ligand-protein systems) can be chosen thorugh the poses flag.
global: true
poses: 40


#set( $symbol_pound = '#' ) #set( $symbol_dollar = '$' ) #set( $symbol_escape = '\' )
Congratulations, you've successfully run the Apache Isis ${parentArtifactId} archetype and are now running the generated application.
The app has the following viewers are configured:
| Viewer | Description | Further Documentation |
|---|---|---|
| HTML viewer | for building simple, non-customizable webapps | (none currently) |
| Scimpi viewer | which supports optional customization | Developers' guide |
| JSON viewer | which exposes a REST API to supporting custom UIs (eg Javascript) and integration scenarios | Restful Objects spec |
| JQueryMobile demo | which is a demo mobile webapp that can be used browse the REST API | (none) |
Follow the links above to explore these viewers, using username: sven, password: pass.
It also has the following objectstores (databases) configured:
| Object Store | Description | Further Documentation |
|---|---|---|
| In-memory objectstore | for rapid prototyping | (none) |
| NoSQL MongoDB objectstore | for persisting to a MongoDB instance | (none currently) |
| SQL objectstore | for persisting to a relational database | Config and Deployment guide |
The in-memory objectstore is the default, as it takes no additional setup.
Decide which viewer(s) you want to provide for accessing your domain objects, and then comment out/delete the relevant entries from the WEB-INF/web.xml and delete the static resources that you no longer need. You'll probably also want to delete this file, and remove the <filter>RedirectToDocsFilter</filter> entry in web.xml.
Also, decide which objectstore you want to use to persist your domain objects. As noted above, the in-memory object store is the default. If you decide to use the NoSQL (MongoDB) or SQL object stores, you'll need to make a number of configuration changes:
While doing initial prototyping you may find that the default in-memory objectstore suffices; the isis.fixtures / isis.fixtures.prefix properties in the WEB-INF/isis.properties configuration file define an the initial data set with which to seed the database.
For both the NoSQL and SQL object stores, these fixtures are loaded the very first time that the system is bootstrapped, but are then not loaded thereafter.
In addition to app, the archetype also generates some simple tests:
These tests are configured to run within Maven (eg using mvn test).
If you get stuck, don't forget that there is more information at the Apache Isis website, and you can always find more help on the Apache Isis mailing lists (subscribe here, post here)
| File | Description |
|---|---|
| index.html | This file |
| htmlviewer | HTML viewer styles and images |
| debug.shtml | Scimpi viewer debug page |
| error.shtml | Scimpi viewer error page |
| generic | Scimpi viewer generic views |
| index.shtml | Scimpi viewer home page |
| login.shtml | Scimpi viewer login page |
| scimpi | Scimpi viewer styles and images |
| ToDoItem | Scimpi viewer customisation for ToDoItem class |
| jquery | JQuery library (used by Mobile demo app) |
| jquery.mobile | JQueryMobile library (used by Mobile demo app) |
| jquery.tmpl | JQueryTmpl library (used by Mobile demo app) |
| mobile | Mobile demo app |
| WEB-INF/web.xml | Servlet container's web.xml, bootstrapping Isis and defining its filters and servlets |
| WEB-INF/isis.properties | Isis' main configuration file |
| WEB-INF/logging.properties | Log4j configuration |
| WEB-INF/authentication_file.properties | File-based authentication mechanism's configuration file |
| WEB-INF/authentication_file.passwords | File-based authentication mechanism supporting configuration file |
| WEB-INF/authorization_file.properties | File-based authorization mechanism's configuration file |
| WEB-INF/authorization_file.allow | File-based authorization mechanism's supporting configuration file (whitelist) |
| WEB-INF/persistor_in-memory.properties | In-memory objectstore configuration file |
| WEB-INF/persistor_mongodb.properties | MongoDB objectstore configuration file |
| WEB-INF/persistor_sql.properties | SQL objectstore configuration file |
| WEB-INF/user-profile-store_in-memory.properties | In-memory user profile store configuration file |
| WEB-INF/viewer_html.properties | HTML viewer configuration file |
| WEB-INF/viewer_json.properties | JSON viewer configuration file |
| WEB-INF/viewer_scimpi.properties | Scimpi viewer configuration file |


Dashboard
Profile
Research
Change Password
Hub Guidelines
Stats
Some Actions
Account
Complete your profile


Personality:
All these being studied using MBTI personality characteristics, you can read more here
Introversion(I)
tend to be inward turning, or focused more on internal thoughts, feelings and moods rather than seeking out external stimulation.
Extraversion(E)
enjoy engaging with the external world. These individuals thrive on excitement, and are enthusiastic, action-oriented people. They like to be the center of attention in groups.
Sensing(S)
pay attention to both immediate data from their five senses and from their own direct experiences. They are create meaning from conscious thought, rather than trusting their subconscious, limiting their attention to facts and solid data. As necessary, they will happily dig into the fine detail of the situation.
Intuition(N)
process data more deeply than sensors and are happy to trust their subconscious and 'sixth sense', gut feel, intuition or whatever you want to call it. They are good at spotting patterns and taking a high-level view, as opposed to digging into the detail.
Thinking(T)
decide based primarily on logic, and when they do so, they consider a decision to be made. They tend to see the world in black and white and dislike fuzziness.
Feeling(F)
decide based primarily through social considerations, listening to their heart and considering the feelings of others.
Judging(J)
approach life in a structured way, creating plans and organizing their world to achieve their goals and desired results in a predictable way.
Perceiving(P)
perceive structure as being more limiting than enabling. They prefer to keep their choices open so they can cope with many problems that the know life will put in their way.


DOLORES CLAIBORNE A film review by Steve Rhodes Copyright 1995 Steve Rhodes
RATING (0 TO ****): ***
DOLORES CLAIBORNE is somewhat of a thriller and is based on a Stephen King story. More later on why I say "somewhat." It stars Kathy Bates as Dolores Claiborne in another one of Bates brilliant acting performances.
 As the story opens, Vera has fallen down the stairs and, we see Dolores starting to finish off her with a rolling pin. The local policeman, Detective John Mackey (Christopher Plummer) wants to convict Dolores of Donovan's murder because Dolores's husband died years ago under mysterious circumstances, and he tried at the time to pen the murder on Dolores but failed. He is still angry since that is the only case he ever lost.
Selena (Jennifer Jason Leigh), Dolores's estranged daughter, soon appears on the scene.  At first, her mother's behavior is so strange it appears she may be mentally deranged. Selena, likewise, is a walking time bomb of pent up anger about something.
The movie is told as a series of flashbacks to the incidents leading up to the death of Dolores's husband (David Strathairn). The scenes of the present have people from the past appear and then the scenes evolves into the past. It was an interesting and effective editing technique. The two parallel stories work equally well, and thanks to the editing, they are interwoven nicely.
The past has lots of abuse, violence, and major alcoholism. Selena was clearly affected by this past since she has become a alcoholic and a drug abuser herself. Selena frequently gets out her hand lotion and rubs it into her hands as she talks. I was never quite sure the meaning of this while watching the show. A couple of days later it hit me why, and it made sense. If you see it and can not figure it out, I am not going to tell you the answer. You will have to keep pondering. Actually, that you still think about a movie after you leave is a tribute to its effectiveness.
The cinematography was certainly beautiful in the golden hues of sunset and in the glow of a solar eclipse. On the other hand, I felt it overpowered the story and would have been more appropriate in another movie. The scenes of dark and depressing grays were also overdone I thought. Better to have the acting and the script convey the mood and have the cinematography complement it rather than overwhelm it.
The acting was good around with one exception. The casting of Strathairn as the evil husband was poor. He is too much of a nice guy, and it showed through. His evil was too one dimensional and was rarely threatening. A thriller needs a strong villain, and DOLORES CLAIBORNE had none. I attribute this problem solely to Strathairn and to the directing (Taylor Hackford) and not to the script (Tony Gilroy).
Having a weak villain relegated the movie to being somewhat of a thriller with a lightweight mystery attached. With a more effective bad guy, this movie could have really taken off. Instead, it became more a character study, which was very effective, and a mood piece, which, as I already said, was overdone.
DOLORES CLAIBORNE runs 2:11, but it did not seem that long. It is correctly rated R for significant amounts of realistic domestic violence and for alcohol and drug abuse. I think it would be fine for mature teenagers. I recommend this movie to you, and I award it ***.
**** = One of the top few films of this or any year. A must see film. *** = Excellent show. Look for it. ** = Average movie. Kind of enjoyable. * = Poor show.  Totally unbearable.
REVIEWED WRITTEN ON: April 6, 1995
Opinions expressed are mine and not meant to reflect my employer's.
The review above was posted to the
rec.arts.movies.reviews newsgroup (de.rec.film.kritiken for German reviews).
The Internet Movie Database accepts no responsibility for the contents of the
review and has no editorial control. Unless stated otherwise, the copyright
belongs to the author.
Please direct comments/criticisms of the review to relevant newsgroups.
Broken URLs inthe reviews are the responsibility of the author.
The formatting of the review is likely to differ from the original due
to ASCII to HTML conversion.
Related links: index of all rec.arts.movies.reviews reviews