Lines Matching refs:issuer

52 static int check_issued(X509_STORE_CTX *ctx, X509 *x, X509 *issuer);
388 X509 *candidate, *issuer = NULL; in get0_best_issuer_sk() local
407 if (issuer == NULL in get0_best_issuer_sk()
409 X509_get0_notAfter(issuer)) > 0) in get0_best_issuer_sk()
410 issuer = candidate; in get0_best_issuer_sk()
413 return issuer; in get0_best_issuer_sk()
424 int X509_STORE_CTX_get1_issuer(X509 **issuer, X509_STORE_CTX *ctx, X509 *x) in X509_STORE_CTX_get1_issuer() argument
431 *issuer = get0_best_issuer_sk(ctx, 1 /* trusted */, 0, certs, x); in X509_STORE_CTX_get1_issuer()
432 if (*issuer != NULL) in X509_STORE_CTX_get1_issuer()
433 ret = X509_up_ref(*issuer) ? 1 : -1; in X509_STORE_CTX_get1_issuer()
439 static int check_issued(ossl_unused X509_STORE_CTX *ctx, X509 *x, X509 *issuer) in check_issued() argument
441 int err = ossl_x509_likely_issued(issuer, x); in check_issued()
456 static int get1_best_issuer_other_sk(X509 **issuer, X509_STORE_CTX *ctx, X509 *x) in get1_best_issuer_other_sk() argument
458 *issuer = get0_best_issuer_sk(ctx, 1 /* trusted */, 1 /* no_dup */, in get1_best_issuer_other_sk()
460 if (*issuer == NULL) in get1_best_issuer_other_sk()
462 return X509_up_ref(*issuer) ? 1 : -1; in get1_best_issuer_other_sk()
1586 X509 *issuer = NULL; in get_crl_delta() local
1595 &issuer, &crl_score, &reasons, ctx->crls); in get_crl_delta()
1606 get_crl_sk(ctx, &crl, &dcrl, &issuer, &crl_score, &reasons, skcrl); in get_crl_delta()
1613 ctx->current_issuer = issuer; in get_crl_delta()
1626 X509 *issuer = NULL; in check_crl() local
1633 issuer = ctx->current_issuer; in check_crl()
1639 issuer = sk_X509_value(ctx->chain, cnum + 1); in check_crl()
1641 issuer = sk_X509_value(ctx->chain, chnum); in check_crl()
1642 if (!ossl_assert(issuer != NULL)) in check_crl()
1645 if (!ctx->check_issued(ctx, issuer, issuer) && in check_crl()
1650 if (issuer == NULL) in check_crl()
1658 if ((issuer->ex_flags & EXFLAG_KUSAGE) != 0 && in check_crl()
1659 (issuer->ex_kusage & KU_CRL_SIGN) == 0 && in check_crl()
1682 ikey = X509_get0_pubkey(issuer); in check_crl()
3223 static int get1_trusted_issuer(X509 **issuer, X509_STORE_CTX *ctx, X509 *cert) in get1_trusted_issuer() argument
3229 ok = ctx->get_issuer(issuer, ctx, cert); in get1_trusted_issuer()
3318 X509 *curr, *issuer = NULL; in build_chain() local
3359 ok = num > max_depth ? 0 : get1_trusted_issuer(&issuer, ctx, curr); in build_chain()
3371 X509_free(issuer); in build_chain()
3390 X509_free(issuer); in build_chain()
3411 if (!sk_X509_push(ctx->chain, issuer)) { in build_chain()
3412 X509_free(issuer); in build_chain()
3416 if ((self_signed = X509_self_signed(issuer, 0)) < 0) in build_chain()
3425 if (X509_cmp(curr, issuer) != 0) { in build_chain()
3427 X509_free(issuer); in build_chain()
3436 (void)sk_X509_set(ctx->chain, num, issuer); in build_chain()
3493 issuer = (X509_self_signed(curr, 0) > 0 || num > max_depth) ? in build_chain()
3495 if (issuer == NULL) { in build_chain()
3508 (void)sk_X509_delete_ptr(sk_untrusted, issuer); in build_chain()
3511 if (!X509_add_cert(ctx->chain, issuer, X509_ADD_FLAG_UP_REF)) in build_chain()