Lines Matching defs:cert
168 struct hx509_query_data *q, struct hx509_cert_data **cert)
197 ret = hx509_certs_find(context->hx509ctx, certs, q, cert);
217 if (id->cert == NULL)
226 id->cert,
598 ctx->id->cert,
810 if (ctx->id->cert == NULL && ctx->anonymous == 0) {
1748 struct hx509_cert_data *cert)
1752 if (ctx->id->cert)
1753 hx509_cert_free(ctx->id->cert);
1755 ctx->id->cert = hx509_cert_ref(cert);
1760 /* add cert to certs since it might be needed when we do rsa mode PKINIT */
1761 if (ctx->id->cert) {
1766 hx509_certs_add(context->hx509ctx, ctx->id->certs, cert);
1769 if (ctx->id->cert && _krb5_have_debug(context, 2)) {
1774 ret = hx509_cert_get_subject(ctx->id->cert, &name);
1783 ret = hx509_cert_get_serialnumber(ctx->id->cert, &i);
1796 _krb5_debugx(context, 2, "using cert: subject: %s sn: %s", str, sn);
1812 hx509_cert cert = NULL;
1817 if (ctx->id->cert) {
1818 hx509_cert_free(ctx->id->cert);
1819 ctx->id->cert = NULL;
1822 /* Merge certs into cert pool so that cms call can use them */
1839 ctx->id->certs, q, &cert);
1843 _krb5_pk_set_user_id(context, ctx, cert);
1844 hx509_cert_free(cert);
1873 /* load cert */
1910 "Failed to init cert certs");
1924 ret = hx509_certs_init(context->hx509ctx, "MEMORY:pkinit-cert-chain",
1937 "Failed to load cert pool: %s",
2322 hx509_cert_free(ctx->id->cert);
2444 opt->opt_private->pk_init_ctx->id->cert = NULL;
2448 hx509_cert cert = opt->opt_private->pk_init_ctx->id->cert;
2455 if (cert) {
2458 ret = hx509_cert_get_SPKI_AlgorithmIdentifier(hx509ctx, cert, &alg);
2487 struct hx509_cert_data *cert)
2501 _krb5_pk_set_user_id(context, opt->opt_private->pk_init_ctx, cert);
2514 get_ms_san(hx509_context context, hx509_cert cert, char **upn)
2522 cert,
2539 find_ms_san(hx509_context context, hx509_cert cert, void *ctx)
2544 ret = get_ms_san(context, cert, &upn);
2579 hx509_cert cert = NULL;
2595 "Failed to init cert certs");
2620 ret = hx509_get_one_cert(context->hx509ctx, result, &cert);
2624 "Failed to get one cert");
2628 ret = get_ms_san(context->hx509ctx, cert, &name);
2643 *res = hx509_cert_ref(cert);
2646 hx509_cert_free(cert);
2650 N_("PK-INIT cert didn't contain principal SAN", ""));
2664 struct hx509_cert_data *cert,
2673 ret = hx509_cert_find_subjectAltName_otherName(context->hx509ctx, cert,
2710 N_("PK-INIT cert didn't contain principal SAN", ""));