Lines Matching refs:chain
166 ctx->current_cert = x != NULL ? x : sk_X509_value(ctx->chain, depth); in verify_cb_cert()
193 int num = sk_X509_num(ctx->chain); in check_auth_level()
199 X509 *cert = sk_X509_value(ctx->chain, i); in check_auth_level()
244 || (ok = X509_get_pubkey_parameters(NULL, ctx->chain) ? 1 : -1) <= 0 in verify_chain()
248 err = X509_chain_check_suiteb(&ctx->error_depth, NULL, ctx->chain, in verify_chain()
338 if (ctx->chain != NULL) { in x509_verify_x509()
348 if (!ossl_x509_add_cert_new(&ctx->chain, ctx->cert, X509_ADD_FLAG_UP_REF)) { in x509_verify_x509()
394 && (((x->ex_flags & EXFLAG_SI) != 0 && sk_X509_num(ctx->chain) == 1) in find_issuer()
395 || !sk_X509_contains(ctx->chain, issuer))) { in find_issuer()
518 int purpose, allow_proxy_certs, num = sk_X509_num(ctx->chain); in check_extensions()
542 x = sk_X509_value(ctx->chain, i); in check_extensions()
716 for (i = sk_X509_num(ctx->chain) - 1; i >= 0; i--) { in check_name_constraints()
717 X509 *x = sk_X509_value(ctx->chain, i); in check_name_constraints()
797 for (j = sk_X509_num(ctx->chain) - 1; j > i; j--) { in check_name_constraints()
798 NAME_CONSTRAINTS *nc = sk_X509_value(ctx->chain, j)->nc; in check_name_constraints()
881 int num = sk_X509_num(ctx->chain); in check_trust()
901 x = sk_X509_value(ctx->chain, i); in check_trust()
927 x = sk_X509_value(ctx->chain, i); in check_trust()
945 (void)sk_X509_set(ctx->chain, 0, mx); in check_trust()
980 last = sk_X509_num(ctx->chain) - 1; in check_revocation()
1002 X509 *x = sk_X509_value(ctx->chain, cnum); in check_cert()
1334 if (cidx != sk_X509_num(ctx->chain) - 1) in crl_akid_check()
1337 crl_issuer = sk_X509_value(ctx->chain, cidx); in crl_akid_check()
1347 for (cidx++; cidx < sk_X509_num(ctx->chain); cidx++) { in crl_akid_check()
1348 crl_issuer = sk_X509_value(ctx->chain, cidx); in crl_akid_check()
1408 ret = check_crl_chain(ctx, ctx->chain, crl_ctx.chain); in check_crl_path()
1596 int chnum = sk_X509_num(ctx->chain) - 1; in check_crl()
1606 issuer = sk_X509_value(ctx->chain, cnum + 1); in check_crl()
1608 issuer = sk_X509_value(ctx->chain, chnum); in check_crl()
1714 if (ctx->bare_ta_signed && !sk_X509_push(ctx->chain, NULL)) { in check_policy()
1718 ret = X509_policy_check(&ctx->tree, &ctx->explicit_policy, ctx->chain, in check_policy()
1721 (void)sk_X509_pop(ctx->chain); in check_policy()
1732 for (i = 0; i < sk_X509_num(ctx->chain); i++) { in check_policy()
1733 X509 *x = sk_X509_value(ctx->chain, i); in check_policy()
1827 n = sk_X509_num(ctx->chain) - 1; in internal_verify()
1828 xi = sk_X509_value(ctx->chain, n); in internal_verify()
1845 xs = sk_X509_value(ctx->chain, n); in internal_verify()
1927 xs = sk_X509_value(ctx->chain, n); in internal_verify()
2064 int X509_get_pubkey_parameters(EVP_PKEY *pkey, STACK_OF(X509) *chain) in X509_get_pubkey_parameters() argument
2072 for (i = 0; i < sk_X509_num(chain); i++) { in X509_get_pubkey_parameters()
2073 ktmp = X509_get0_pubkey(sk_X509_value(chain, i)); in X509_get_pubkey_parameters()
2089 ktmp2 = X509_get0_pubkey(sk_X509_value(chain, j)); in X509_get_pubkey_parameters()
2266 return ctx->chain; in STACK_OF()
2271 if (ctx->chain == NULL) in STACK_OF()
2273 return X509_chain_up_ref(ctx->chain); in STACK_OF()
2432 STACK_OF(X509) *chain) in X509_STORE_CTX_init()
2442 ctx->untrusted = chain; in X509_STORE_CTX_init()
2447 ctx->chain = NULL; in X509_STORE_CTX_init()
2597 OSSL_STACK_OF_X509_free(ctx->chain); in X509_STORE_CTX_cleanup()
2598 ctx->chain = NULL; in X509_STORE_CTX_cleanup()
2647 OSSL_STACK_OF_X509_free(ctx->chain); in X509_STORE_CTX_set0_verified_chain()
2648 ctx->chain = sk; in X509_STORE_CTX_set0_verified_chain()
2970 cert = sk_X509_value(ctx->chain, depth); in check_dane_issuer()
2986 X509 *cert = sk_X509_value(ctx->chain, num - 1); in check_dane_pkeys()
3008 num = sk_X509_num(ctx->chain); in check_dane_pkeys()
3010 X509_free(sk_X509_pop(ctx->chain)); in check_dane_pkeys()
3148 if (done && !X509_get_pubkey_parameters(NULL, ctx->chain)) in dane_verify()
3192 STACK_OF(X509) *saved_chain = ctx->chain; in get1_trusted_issuer()
3195 ctx->chain = NULL; in get1_trusted_issuer()
3197 ctx->chain = saved_chain; in get1_trusted_issuer()
3209 int num = sk_X509_num(ctx->chain); in build_chain()
3287 num = sk_X509_num(ctx->chain); in build_chain()
3323 curr = sk_X509_value(ctx->chain, i - 1); in build_chain()
3362 X509_free(sk_X509_pop(ctx->chain)); in build_chain()
3378 if (!sk_X509_push(ctx->chain, issuer)) { in build_chain()
3403 (void)sk_X509_set(ctx->chain, num, issuer); in build_chain()
3456 num = sk_X509_num(ctx->chain); in build_chain()
3459 curr = sk_X509_value(ctx->chain, num - 1); in build_chain()
3478 if (!X509_add_cert(ctx->chain, issuer, X509_ADD_FLAG_UP_REF)) in build_chain()
3498 num = sk_X509_num(ctx->chain); in build_chain()
3530 if (X509_self_signed(sk_X509_value(ctx->chain, num - 1), 0) > 0) in build_chain()
3573 if (!ossl_x509_add_cert_new(&ctx->chain, target, X509_ADD_FLAG_UP_REF)) { in STACK_OF()
3583 if (sk_X509_num(ctx->chain) > 1 && !with_self_signed) in STACK_OF()
3585 if (!ossl_x509_add_certs_new(&result, ctx->chain, flags)) { in STACK_OF()
