X509: Public Key Instraftructure (X509) functions

In NCEAS/PKIplus: Public Key Infrastructure for R Based on the X.509 Standard, Plus Access Functions

Description

PKI.load.cert creates a certificate obejct from a string, connection or file.

PKI.verifyCA verifies a certificate against a given chain of trust.

PKI.pubkey extracts public key from a certificate.

PKI.get.subject extracts the subject name from the certificate.

PKI.get.notBefore extracts the notBefore field from the certificate.

PKI.get.notAfter extracts the notAfter field from the certificate.

Usage

PKI.load.cert(what, format = c("PEM", "DER"), file)
PKI.verifyCA(certificate, ca)
PKI.pubkey(certificate)
PKI.get.subject(certificate)
PKI.get.notBefore(certificate)
PKI.get.notAfter(certificate)

Arguments

what	string, raw vector or connection to load the certificate from
format	format used to encode the certificate
file	filename to load the certificate from - what and file are mutually exclusive
certificate	a certificate object (as returned by PKI.load.cert)
ca	a certificate object of the Certificate Authority (CA) or a list of such objects if multiple CAs are involved

Value

PKI.load.code: a certificate object

PKI.verifyCA: TRUE is the certificate can be trusted, FALSE otherwise

PKI.pubkey: public key object

PKI.get.subject: string containing the subject information in one-line RFC2253 format but in UTF8 encoding instead of MBS escapes. NOTE: this is experimantal, we may choose to parse the contents and return it in native R form as a named vector instead.

PKI.get.notBefore: POSIXct value containing the datetime 'notBefore' field fromt the certificate. This represents the earliest time at which the certificate is valid.

PKI.get.notAfter: POSIXct value containing the datetime 'notAfter' field fromt the certificate. This represents the latest time at which the certificate is valid.

Author(s)

Simon Urbanek

Examples

  ca <- PKI.load.cert(file=system.file("certs", "RForge-ca.crt", package="PKIplus"))
  my.cert <- PKI.load.cert(readLines(system.file("certs", "demo.crt", package="PKIplus")))
  PKI.verifyCA(my.cert, ca)
  PKI.pubkey(my.cert)
  PKI.get.subject(my.cert)
  PKI.get.notBefore(my.cert)
  PKI.get.notAfter(my.cert)

NCEAS/PKIplus documentation built on May 7, 2019, 5:58 p.m.