X509_get_version.3ssl - Man Page

get or set certificate, certificate request or CRL version


 #include <openssl/x509.h>

 long X509_get_version(const X509 *x);
 int X509_set_version(X509 *x, long version);

 long X509_REQ_get_version(const X509_REQ *req);
 int X509_REQ_set_version(X509_REQ *x, long version);

 long X509_CRL_get_version(const X509_CRL *crl);
 int X509_CRL_set_version(X509_CRL *x, long version);


X509_get_version() returns the numerical value of the version field of certificate x. Note: this is defined by standards (X.509 et al) to be one less than the certificate version. So a version 3 certificate will return 2 and a version 1 certificate will return 0.

X509_set_version() sets the numerical value of the version field of certificate x to version.

Similarly X509_REQ_get_version(), X509_REQ_set_version(), X509_CRL_get_version() and X509_CRL_set_version() get and set the version number of certificate requests and CRLs.


The version field of certificates, certificate requests and CRLs has a DEFAULT value of v1(0) meaning the field should be omitted for version 1. This is handled transparently by these functions.

Return Values

X509_get_version(), X509_REQ_get_version() and X509_CRL_get_version() return the numerical value of the version field.

X509_set_version(), X509_REQ_set_version() and X509_CRL_set_version() return 1 for success and 0 for failure.

See Also

d2i_X509(3), ERR_get_error(3), X509_CRL_get0_by_serial(3), X509_get0_signature(3), X509_get_ext_d2i(3), X509_get_extension_flags(3), X509_get_pubkey(3), X509_get_subject_name(3), X509_NAME_add_entry_by_txt(3), X509_NAME_ENTRY_get_object(3), X509_NAME_get_index_by_NID(3), X509_NAME_print_ex(3), X509_new(3), X509_sign(3), X509V3_get_d2i(3), X509_verify_cert(3)


X509_get_version(), X509_REQ_get_version() and X509_CRL_get_version() are functions in OpenSSL 1.1.0, in previous versions they were macros.

Referenced By

i2d_re_X509_tbs.3ssl(3), X509_CRL_get0_by_serial.3ssl(3), X509_get0_signature.3ssl(3), X509_get0_uids.3ssl(3), X509_get_pubkey.3ssl(3), X509_new.3ssl(3), X509_sign.3ssl(3), X509V3_get_d2i.3ssl(3).

The man pages X509_CRL_get_version.3ssl(3), X509_CRL_set_version.3ssl(3), X509_REQ_get_version.3ssl(3), X509_REQ_set_version.3ssl(3) and X509_set_version.3ssl(3) are aliases of X509_get_version.3ssl(3).

2023-07-20 1.1.1q OpenSSL