Lines Matching refs:crl
124 unsigned int *preasons, X509_CRL *crl, X509 *x);
130 static void crl_akid_check(X509_STORE_CTX *ctx, X509_CRL *crl, X509 **pissuer,
132 static int crl_crldp_check(X509 *x, X509_CRL *crl, int crl_score,
873 X509_CRL *crl = NULL, *dcrl = NULL;
887 ok = ctx->get_crl(ctx, &crl, x);
889 ok = get_crl_delta(ctx, &crl, &dcrl, x);
898 ctx->current_crl = crl;
899 ok = ctx->check_crl(ctx, crl);
915 ok = ctx->cert_crl(ctx, crl, x);
920 X509_CRL_free(crl);
922 crl = NULL;
935 X509_CRL_free(crl);
945 static int check_crl_time(X509_STORE_CTX *ctx, X509_CRL *crl, int notify)
950 ctx->current_crl = crl;
956 i = X509_cmp_time(X509_CRL_get_lastUpdate(crl), ptime);
973 if (X509_CRL_get_nextUpdate(crl)) {
974 i = X509_cmp_time(X509_CRL_get_nextUpdate(crl), ptime);
1006 X509_CRL *crl, *best_crl = NULL;
1010 crl = sk_X509_CRL_value(crls, i);
1012 crl_score = get_crl_score(ctx, &crl_issuer, &reasons, crl, x);
1015 best_crl = crl;
1146 unsigned int *preasons, X509_CRL *crl, X509 *x)
1155 if (crl->idp_flags & IDP_INVALID)
1159 if (crl->idp_flags & (IDP_INDIRECT | IDP_REASONS))
1161 } else if (crl->idp_flags & IDP_REASONS) {
1163 if (!(crl->idp_reasons & ~tmp_reasons))
1167 else if (crl->base_crl_number)
1170 if (X509_NAME_cmp(X509_get_issuer_name(x), X509_CRL_get_issuer(crl))) {
1171 if (!(crl->idp_flags & IDP_INDIRECT))
1176 if (!(crl->flags & EXFLAG_CRITICAL))
1180 if (check_crl_time(ctx, crl, 0))
1184 crl_akid_check(ctx, crl, pissuer, &crl_score);
1193 if (crl_crldp_check(x, crl, crl_score, &crl_reasons)) {
1207 static void crl_akid_check(X509_STORE_CTX *ctx, X509_CRL *crl,
1211 X509_NAME *cnm = X509_CRL_get_issuer(crl);
1220 if (X509_check_akid(crl_issuer, crl->akid) == X509_V_OK) {
1232 if (X509_check_akid(crl_issuer, crl->akid) == X509_V_OK) {
1252 if (X509_check_akid(crl_issuer, crl->akid) == X509_V_OK) {
1385 static int crldp_check_crlissuer(DIST_POINT *dp, X509_CRL *crl, int crl_score)
1388 X509_NAME *nm = X509_CRL_get_issuer(crl);
1404 static int crl_crldp_check(X509 *x, X509_CRL *crl, int crl_score,
1408 if (crl->idp_flags & IDP_ONLYATTR)
1411 if (crl->idp_flags & IDP_ONLYUSER)
1414 if (crl->idp_flags & IDP_ONLYCA)
1417 *preasons = crl->idp_reasons;
1420 if (crldp_check_crlissuer(dp, crl, crl_score)) {
1421 if (!crl->idp || idp_check_dp(dp->distpoint, crl->idp->distpoint)) {
1427 if ((!crl->idp || !crl->idp->distpoint)
1445 X509_CRL *crl = NULL, *dcrl = NULL;
1449 ok = get_crl_sk(ctx, &crl, &dcrl,
1460 if (!skcrl && crl)
1463 get_crl_sk(ctx, &crl, &dcrl, &issuer, &crl_score, &reasons, skcrl);
1470 if (crl) {
1474 *pcrl = crl;
1483 static int check_crl(X509_STORE_CTX *ctx, X509_CRL *crl)
1515 if (!crl->base_crl_number) {
1541 if (crl->idp_flags & IDP_INVALID) {
1551 ok = check_crl_time(ctx, crl, 1);
1566 rv = X509_CRL_check_suiteb(crl, ikey, ctx->param->flags);
1574 if (X509_CRL_verify(crl, ikey) <= 0) {
1591 static int cert_crl(X509_STORE_CTX *ctx, X509_CRL *crl, X509 *x)
1602 && (crl->flags & EXFLAG_CRITICAL)) {
1612 if (X509_CRL_get0_by_cert(crl, &rev, x)) {
1998 X509_CRL *crl = NULL;
2037 crl = X509_CRL_new();
2038 if (!crl || !X509_CRL_set_version(crl, 1))
2041 if (!X509_CRL_set_issuer_name(crl, X509_CRL_get_issuer(newer)))
2044 if (!X509_CRL_set_lastUpdate(crl, X509_CRL_get_lastUpdate(newer)))
2046 if (!X509_CRL_set_nextUpdate(crl, X509_CRL_get_nextUpdate(newer)))
2051 if (!X509_CRL_add1_ext_i2d(crl, NID_delta_crl, base->crl_number, 1, 0))
2062 if (!X509_CRL_add_ext(crl, ext, -1))
2081 if (!X509_CRL_add0_revoked(crl, rvtmp)) {
2089 if (skey && md && !X509_CRL_sign(crl, skey, md))
2092 return crl;
2096 if (crl)
2097 X509_CRL_free(crl);