Lines Matching defs:issuer
96 /* CRL issuer is certificate issuer */
100 /* CRL issuer is on certificate path */
104 /* CRL issuer matches CRL AKID */
113 static int check_issued(X509_STORE_CTX *ctx, X509 *x, X509 *issuer);
252 * If asked see if we can find issuer in trusted store first
522 * Given a STACK_OF(X509) find the issuer of cert (if any)
528 X509 *issuer;
530 issuer = sk_X509_value(sk, i);
531 if (ctx->check_issued(ctx, x, issuer))
532 return issuer;
537 /* Given a possible certificate and issuer check them */
539 static int check_issued(X509_STORE_CTX *ctx, X509 *x, X509 *issuer)
542 ret = X509_check_issued(issuer, x);
545 /* If we haven't asked for issuer errors don't set ctx */
551 ctx->current_issuer = issuer;
557 static int get_issuer_sk(X509 **issuer, X509_STORE_CTX *ctx, X509 *x)
559 *issuer = find_issuer(ctx, ctx->other_ctx, x);
560 if (*issuer) {
561 CRYPTO_add(&(*issuer)->references, 1, CRYPTO_LOCK_X509);
844 * standard (no issuer cert) etc errors to be indicated.
1139 * 'x'. The return value is a mask of several criteria. If the issuer is not
1140 * the certificate issuer this is returned in *pissuer. The reasons mask is
1169 /* If issuer name doesn't match certificate need indirect CRL */
1183 /* Check authority key ID and locate certificate issuer */
1186 /* If we can't locate certificate issuer at this point forget it */
1245 * Otherwise the CRL issuer is not on the path. Look for it in the set of
1261 * Check the path of a CRL issuer certificate. This creates a new
1284 /* Verify CRL issuer */
1442 X509 *issuer = NULL;
1450 &issuer, &crl_score, &reasons, ctx->crls);
1463 get_crl_sk(ctx, &crl, &dcrl, &issuer, &crl_score, &reasons, skcrl);
1471 ctx->current_issuer = issuer;
1485 X509 *issuer = NULL;
1490 /* if we have an alternative CRL issuer cert use that */
1492 issuer = ctx->current_issuer;
1495 * Else find CRL issuer: if not last certificate then issuer is next
1499 issuer = sk_X509_value(ctx->chain, cnum + 1);
1501 issuer = sk_X509_value(ctx->chain, chnum);
1503 if (!ctx->check_issued(ctx, issuer, issuer)) {
1511 if (issuer) {
1517 if ((issuer->ex_flags & EXFLAG_KUSAGE) &&
1518 !(issuer->ex_kusage & KU_CRL_SIGN)) {
1556 /* Attempt to get issuer certificate public key */
1557 ikey = X509_get_pubkey(issuer);
2040 /* Set issuer name */