src/crypto/tls_openssl.c

2144 				   X509 *err_cert, int err, int depth,
2155 	cert = get_x509_cert(err_cert);
2197 				   X509 *err_cert, int depth,
2220 		cert = get_x509_cert(err_cert);
2238 	ser = X509_get_serialNumber(err_cert);
2246 	ext = X509_get_ext_d2i(err_cert, NID_subject_alt_name, NULL, NULL);
2288 	ev.peer_cert.tod = openssl_cert_tod(err_cert);
2300 	X509 *err_cert;
2309 	err_cert = X509_STORE_CTX_get_current_cert(x509_ctx);
2310 	if (!err_cert)
2317 	X509_NAME_oneline(X509_get_subject_name(err_cert), buf, sizeof(buf));
2324 		conn->peer_cert = err_cert;
2326 		conn->peer_issuer = err_cert;
2328 		conn->peer_issuer_issuer = err_cert;
2364 		cert = get_x509_cert(err_cert);
2394 	openssl_tls_cert_event(conn, err_cert, depth, buf);
2421 		openssl_tls_fail_event(conn, err_cert, err, depth, buf,
2435 		    !tls_match_dn_field(err_cert, check_cert_subject)) {
2437 			openssl_tls_fail_event(conn, err_cert, err, depth, buf,
2446 		openssl_tls_fail_event(conn, err_cert, err, depth, buf,
2450 		   !tls_match_altsubject(err_cert, altmatch)) {
2454 		openssl_tls_fail_event(conn, err_cert, err, depth, buf,
2458 		   !tls_match_suffix(err_cert, suffix_match, 0)) {
2462 		openssl_tls_fail_event(conn, err_cert, err, depth, buf,
2466 		   !tls_match_suffix(err_cert, domain_match, 1)) {
2470 		openssl_tls_fail_event(conn, err_cert, err, depth, buf,
2479 		openssl_tls_fail_event(conn, err_cert, err, depth, buf,
2490 		pk = X509_get_pubkey(err_cert);
2506 					conn, err_cert, err,
2520 		res = check_ocsp_resp(conn->ssl_ctx, conn->ssl, err_cert,
2525 			openssl_tls_fail_event(conn, err_cert, err, depth, buf,
2534 			openssl_tls_fail_event(conn, err_cert, err, depth, buf,