TibrvSdContext:setUserCertWithKey()

Method

Declaration

static TibrvStatus setUserCertWithKey(
    const char*    userCertWithKey,
    const char*    password);

Purpose

Register a (PEM) certificate with private key for identification to secure daemons.

Remarks

When any program transport connects to a secure daemon, the daemon verifies the program’s identity using TLS protocols.

The Rendezvous API includes two methods that achieve similar effects:

•

This call accepts a certificate in PEM text format.

•

TibrvSdContext:setUserCertWithKeyBin() accepts a certificate in PKCS #12 binary format.

Parameter	Description
userCertWithKey	Register this user certificate with private key. The text of this certificate must be in PEM encoding.
password	Use this password to decrypt the private key.

Important

For important information about password security, see Security Factors in TIBCO Rendezvous Administration.

CA-Signed Certificate

You can also supply a certificate signed by a certificate authority (CA). To use a CA-signed certificate, you must supply not only the certificate and private key, but also the CA’s public certificate (or a chain of such certificates). Concatenate these items in one string. For important details, see CA-Signed Certificates in TIBCO Rendezvous Administration.

Errors

Error status code TIBRV_INVALID_FILE can indicate either disk I/O failure, or invalid certificate data, or an incorrect password.

See Also

TibrvSdContext:setUserCertWithKeyBin()