crypto/openssh/krl.c

145 revoked_certs_free(struct revoked_certs *rc)
150 	RB_FOREACH_SAFE(rs, revoked_serial_tree, &rc->revoked_serials, trs) {
151 		RB_REMOVE(revoked_serial_tree, &rc->revoked_serials, rs);
154 	RB_FOREACH_SAFE(rki, revoked_key_id_tree, &rc->revoked_key_ids, trki) {
155 		RB_REMOVE(revoked_key_id_tree, &rc->revoked_key_ids, rki);
159 	sshkey_free(rc->ca_key);
166 	struct revoked_certs *rc, *trc;
182 	TAILQ_FOREACH_SAFE(rc, &krl->revoked_certs, entry, trc) {
183 		TAILQ_REMOVE(&krl->revoked_certs, rc, entry);
184 		revoked_certs_free(rc);
211 	struct revoked_certs *rc;
215 	TAILQ_FOREACH(rc, &krl->revoked_certs, entry) {
216 		if ((ca_key == NULL && rc->ca_key == NULL) ||
217 		    sshkey_equal(rc->ca_key, ca_key)) {
218 			*rcp = rc;
225 	if ((rc = calloc(1, sizeof(*rc))) == NULL)
228 		rc->ca_key = NULL;
229 	else if ((r = sshkey_from_private(ca_key, &rc->ca_key)) != 0) {
230 		free(rc);
233 	RB_INIT(&rc->revoked_serials);
234 	RB_INIT(&rc->revoked_key_ids);
235 	TAILQ_INSERT_TAIL(&krl->revoked_certs, rc, entry);
238 	*rcp = rc;
326 	struct revoked_certs *rc;
331 	if ((r = revoked_certs_for_ca_key(krl, ca_key, &rc, 1)) != 0)
333 	return insert_serial_range(&rc->revoked_serials, lo, hi);
341 	struct revoked_certs *rc;
344 	if ((r = revoked_certs_for_ca_key(krl, ca_key, &rc, 1)) != 0)
353 	erki = RB_INSERT(revoked_key_id_tree, &rc->revoked_key_ids, rki);
547 revoked_certs_generate(struct revoked_certs *rc, struct sshbuf *buf)
561 	if (rc->ca_key == NULL) {
565 		if ((r = sshkey_puts(rc->ca_key, buf)) != 0)
572 	for (rs = RB_MIN(revoked_serial_tree, &rc->revoked_serials);
574 	     rs = RB_NEXT(revoked_serial_tree, &rc->revoked_serials, rs)) {
580 		nrs = RB_NEXT(revoked_serial_tree, &rc->revoked_serials, rs);
688 	RB_FOREACH(rki, revoked_key_id_tree, &rc->revoked_key_ids) {
710 	struct revoked_certs *rc;
733 	TAILQ_FOREACH(rc, &krl->revoked_certs, entry) {
735 		if ((r = revoked_certs_generate(rc, sect)) != 0)
1163 is_cert_revoked(const struct sshkey *key, struct revoked_certs *rc)
1171 	erki = RB_FIND(revoked_key_id_tree, &rc->revoked_key_ids, &rki);
1186 	ers = RB_FIND(revoked_serial_tree, &rc->revoked_serials, &rs);
1200 	struct revoked_certs *rc;
1231 	    &rc, 0)) != 0)
1233 	if (rc != NULL) {
1234 		if ((r = is_cert_revoked(key, rc)) != 0)
1238 	if ((r = revoked_certs_for_ca_key(krl, NULL, &rc, 0)) != 0)
1240 	if (rc != NULL) {
1241 		if ((r = is_cert_revoked(key, rc)) != 0)