openssl/apps/ca.c

72 #include <openssl/x509.h>
199 static int certify(X509 **xret, char *infile, EVP_PKEY *pkey, X509 *x509,
207 static int certify_cert(X509 **xret, char *infile, EVP_PKEY *pkey, X509 *x509,
217                          X509 *x509, const EVP_MD *dgst,
227 static int do_body(X509 **xret, EVP_PKEY *pkey, X509 *x509,
235 static int do_revoke(X509 *x509, CA_DB *db, int ext, char *extval);
307     X509 *x509 = NULL, *x509p = NULL;
740         x509 = load_cert(bio_err, certfile, FORMAT_PEM, NULL, e,
742         if (x509 == NULL)
745         if (!X509_check_private_key(x509, pkey)) {
752         x509p = x509;
1111             j = certify_spkac(&x, spkac_file, pkey, x509, dgst, sigopts,
1135             j = certify_cert(&x, ss_cert_file, pkey, x509, dgst, sigopts,
1339         if (!X509_CRL_set_issuer_name(crl, X509_get_subject_name(x509)))
1392             X509V3_set_ctx(&crlctx, x509, NULL, NULL, crl, 0);
1482     if (x509)
1483         X509_free(x509);
1497 static int certify(X509 **xret, char *infile, EVP_PKEY *pkey, X509 *x509,
1554     ok = do_body(xret, pkey, x509, dgst, sigopts, policy, db, serial, subj,
1567 static int certify_cert(X509 **xret, char *infile, EVP_PKEY *pkey, X509 *x509,
1611     ok = do_body(xret, pkey, x509, dgst, sigopts, policy, db, serial, subj,
1624 static int do_body(X509 **xret, EVP_PKEY *pkey, X509 *x509,
1736         CAname = X509_NAME_dup(x509->cert_info->subject);
1960         if (!X509_set_issuer_name(ret, X509_get_subject_name(x509)))
2003             X509V3_set_ctx(&ctx, x509, ret, req, NULL, 0);
2189                          X509 *x509, const EVP_MD *dgst,
2313     ok = do_body(xret, pkey, x509, dgst, sigopts, policy, db, serial, subj,
2335 static int do_revoke(X509 *x509, CA_DB *db, int type, char *value)
2345     row[DB_name] = X509_NAME_oneline(X509_get_subject_name(x509), NULL, 0);
2346     bn = ASN1_INTEGER_to_BN(X509_get_serialNumber(x509), NULL);
2371         tm = X509_get_notAfter(x509);
2412         ok = do_revoke(x509, db, type, value);