Lines Matching refs:CB_FAIL_IF
170 #define CB_FAIL_IF(cond, ctx, cert, depth, err) \ macro
203 CB_FAIL_IF(i > 0 && !check_cert_key_level(ctx, cert), in check_auth_level()
209 CB_FAIL_IF(i < num - 1 && !check_sig_level(ctx, cert), in check_auth_level()
248 CB_FAIL_IF(err != X509_V_OK, ctx, NULL, ctx->error_depth, err); in verify_chain()
353 CB_FAIL_IF(!check_cert_key_level(ctx, ctx->cert), in x509_verify_x509()
576 CB_FAIL_IF((ctx->param->flags & X509_V_FLAG_IGNORE_CRITICAL) == 0 in check_extensions()
579 CB_FAIL_IF(!allow_proxy_certs && (x->ex_flags & EXFLAG_PROXY) != 0, in check_extensions()
584 CB_FAIL_IF((ctx->param->flags & X509_V_FLAG_X509_STRICT) != 0 in check_extensions()
589 CB_FAIL_IF(ret != 0, ctx, x, i, X509_V_ERR_INVALID_NON_CA); in check_extensions()
593 CB_FAIL_IF(ret == 0 in check_extensions()
602 CB_FAIL_IF(ret < 0, ctx, x, i, X509_V_ERR_UNSPECIFIED); in check_extensions()
603 CB_FAIL_IF(ret == 0, ctx, x, i, X509_V_ERR_EC_KEY_EXPLICIT_PARAMS); in check_extensions()
618 CB_FAIL_IF((x->ex_flags & EXFLAG_CA) == 0, in check_extensions()
620 CB_FAIL_IF((x->ex_kusage & KU_KEY_CERT_SIGN) == 0, ctx, in check_extensions()
623 CB_FAIL_IF((x->ex_flags & EXFLAG_CA) != 0 in check_extensions()
629 CB_FAIL_IF((x->ex_flags & EXFLAG_KUSAGE) == 0, in check_extensions()
632 CB_FAIL_IF((x->ex_kusage & KU_KEY_CERT_SIGN) != 0, ctx, x, i, in check_extensions()
636 CB_FAIL_IF(X509_NAME_entry_count(X509_get_issuer_name(x)) == 0, in check_extensions()
639 CB_FAIL_IF(((x->ex_flags & EXFLAG_CA) != 0 in check_extensions()
644 CB_FAIL_IF(X509_NAME_entry_count(X509_get_subject_name(x)) == 0 in check_extensions()
649 CB_FAIL_IF(x->altname != NULL in check_extensions()
653 CB_FAIL_IF(X509_ALGOR_cmp(&x->sig_alg, &x->cert_info.signature) != 0, in check_extensions()
655 CB_FAIL_IF(x->akid != NULL in check_extensions()
658 CB_FAIL_IF(x->skid != NULL in check_extensions()
663 CB_FAIL_IF(i + 1 < num /* in check_extensions()
670 CB_FAIL_IF((x->ex_flags & EXFLAG_CA) != 0 && x->skid == NULL, in check_extensions()
673 CB_FAIL_IF(sk_X509_EXTENSION_num(X509_get0_extensions(x)) > 0, in check_extensions()
682 CB_FAIL_IF(i > 1 && x->ex_pathlen != -1 in check_extensions()
706 CB_FAIL_IF(proxy_path_length > x->ex_pcpathlen, in check_extensions()
821 CB_FAIL_IF(err != X509_V_OK, ctx, x, i, err); in check_name_constraints()
854 CB_FAIL_IF(1, ctx, x, i, rv); in check_name_constraints()
1770 CB_FAIL_IF((x->ex_flags & EXFLAG_INVALID_POLICY) != 0, in check_policy()
1833 CB_FAIL_IF(i == 0, ctx, x, depth, X509_V_ERR_ERROR_IN_CERT_NOT_BEFORE_FIELD); in ossl_x509_check_cert_time()
1834 CB_FAIL_IF(i > 0, ctx, x, depth, X509_V_ERR_CERT_NOT_YET_VALID); in ossl_x509_check_cert_time()
1839 CB_FAIL_IF(i == 0, ctx, x, depth, X509_V_ERR_ERROR_IN_CERT_NOT_AFTER_FIELD); in ossl_x509_check_cert_time()
1840 CB_FAIL_IF(i < 0, ctx, x, depth, X509_V_ERR_CERT_HAS_EXPIRED); in ossl_x509_check_cert_time()
1880 CB_FAIL_IF(1, ctx, xi, 0, in internal_verify()
1933 CB_FAIL_IF(ret != X509_V_OK, ctx, xi, issuer_depth, ret); in internal_verify()
1935 CB_FAIL_IF(1, ctx, xi, issuer_depth, in internal_verify()
1938 CB_FAIL_IF(X509_verify(xs, pkey) <= 0, in internal_verify()
3122 CB_FAIL_IF(err != X509_V_OK, ctx, cert, 0, err); in check_leaf_suiteb()
3558 CB_FAIL_IF(num > max_depth, in build_chain()
3560 CB_FAIL_IF(DANETLS_ENABLED(dane) in build_chain()