Lines Matching refs:cert
77 ldns_dane_cert2rdf(ldns_rdf** rdf, X509* cert,
90 assert(cert != NULL);
95 len = (size_t)i2d_X509(cert, &buf);
101 xpubkey = X509_get_X509_PUBKEY(cert);
162 /* Ordinary PKIX validation of cert (with extra_certs to help)
166 ldns_dane_pkix_validate(X509* cert, STACK_OF(X509)* extra_certs,
181 cert, extra_certs) != 1) {
196 /* Orinary PKIX validation of cert (with extra_certs to help)
200 ldns_dane_pkix_validate_and_get_chain(STACK_OF(X509)** chain, X509* cert,
219 cert, extra_certs) != 1) {
245 /* Return the validation chain that can be build out of cert, with extra_certs.
249 X509* cert, STACK_OF(X509)* extra_certs)
265 cert, extra_certs) != 1) {
288 X509** cert, STACK_OF(X509)* chain, int n, bool ca)
293 *cert = sk_X509_pop(chain);
295 X509_free(*cert);
296 *cert = sk_X509_pop(chain);
298 if (ca && ! X509_check_ca(*cert)) {
305 /* Create validation chain with cert and extra_certs and returns the last
310 X509* cert, STACK_OF(X509)* extra_certs)
325 cert, extra_certs) != 1) {
349 X509* cert, STACK_OF(X509)* extra_certs,
357 assert(cert != NULL);
390 cert, extra_certs,
410 *selected_cert = cert;
411 return ldns_dane_pkix_validate(cert, extra_certs,
420 selected_cert, cert, extra_certs);
425 cert, extra_certs);
442 *selected_cert = cert;
458 X509* cert)
464 assert(cert != NULL);
491 s = ldns_dane_cert2rdf(&rdf, cert, selector, matching_type);
540 /* Return whether cert/selector/matching_type matches data.
543 ldns_dane_match_cert_with_data(X509* cert, ldns_tlsa_selector selector,
549 s = ldns_dane_cert2rdf(&match_data, cert, selector, matching_type);
572 X509* cert;
576 cert = sk_X509_pop(chain);
577 if (! cert) {
581 s = ldns_dane_match_cert_with_data(cert,
583 if (ca && s == LDNS_STATUS_OK && ! X509_check_ca(cert)) {
586 X509_free(cert);
602 X509* cert, STACK_OF(X509)* extra_certs,
626 return ldns_dane_pkix_validate(cert, extra_certs,
666 else if (!X509_STORE_CTX_init(store_ctx, pkix_validation_store, cert, extra_certs))
701 cert, extra_certs,
720 /* A TLSA record did match a cert from the
740 s = ldns_dane_match_cert_with_data(cert,
744 return ldns_dane_pkix_validate(cert, extra_certs,
753 cert, extra_certs);
771 return ldns_dane_match_cert_with_data(cert,
785 X509* cert, STACK_OF(X509)* extra_certs,
802 assert(cert != NULL);
807 return ldns_dane_pkix_validate(cert, extra_certs,
831 return ldns_dane_pkix_validate(cert, extra_certs,
881 else if (!X509_STORE_CTX_init(store_ctx, pkix_validation_store, cert, extra_certs))
917 s = ldns_dane_verify_rr(tlsa_rr, cert, extra_certs,