kmf_openssl/common/openssl_spi.c

668 	KMF_DATA *certs = NULL;
681 		certs = (KMF_DATA *)malloc(sizeof (KMF_DATA));
682 		if (certs == NULL)
684 		certs->Data = NULL;
685 		certs->Length = 0;
687 		    pathname, certs);
689 			*certlist = certs;
692 			kmf_free_data(certs);
693 			free(certs);
694 			certs = NULL;
705 		    (uchar_t *)NULL, 0, NULL, &certs, &nc);
715 			rv = kmf_check_cert_date(kmfh, &certs[i]);
717 			rv = kmf_check_cert_date(kmfh, &certs[i]);
725 			kmf_free_data(&certs[i]);
727 			hits++; /* count valid certs found */
733 		 * Sort the list of certs by length to put the cleared ones
736 		qsort((void *)certs, nc, sizeof (KMF_DATA), datacmp);
737 		*certlist = certs;
744 		if (certs != NULL) {
745 			free(certs);
746 			certs = NULL;
1132 				 * certs that were not used.
2471 static X509 *ocsp_find_signer_sk(STACK_OF(X509) *certs, OCSP_RESPID *id)
2478 		return (X509_find_by_subject(certs, id->value.byName));
2488 	for (i = 0; i < sk_X509_num(certs); i++) {
2490 		X509 *x = sk_X509_value(certs, i);
2502 ocsp_find_signer(X509 **psigner, OCSP_BASICRESP *bs, STACK_OF(X509) *certs,
2507 	if ((signer = ocsp_find_signer_sk(certs, rid)))	{
2512 	    (signer = ocsp_find_signer_sk(bs->certs, rid))) {
3053 	/* Turn bag_stack of certs into encrypted authsafe. */
3587  * However, the file may be just a list of X509 certs with no keys.
3593 	CK_ULONG pinlen, EVP_PKEY **priv_key, KMF_DATA **certs,
3609 	if (certs)
3610 		*certs = NULL;
3665 	 * Convert all of the certs to DER format.
3668 	for (i = 0; rv == KMF_OK && certs != NULL && i < ncerts; i++) {
3694 	if (certs != NULL)
3695 		*certs = certlist;
3726 	STACK_OF(EVP_PKEY) *keys, STACK_OF(X509) *certs)
3735 		    keys, certs);
3915 	STACK_OF(X509) *certs,
3925 	if (p12 == NULL || (keys == NULL && certs == NULL))
3962 		if (openssl_parse_bags(bags, pin, keys, certs) != KMF_OK)
3979 	STACK_OF(EVP_PKEY) **priv_key, STACK_OF(X509) **certs,
4027 	if (certs && xcertlist)
4028 		*certs = xcertlist;
4333 	/* Also add any included CA certs to the list */
4363 	STACK_OF(X509)		*certs = NULL;
4395 		    (uint32_t)cred->credlen, &privkeys, &certs, &cacerts);
4398 			/* Convert keys and certs to exportable format */
4399 			rv = convertPK12Objects(kmfh, privkeys, certs, cacerts,
4434 			 * Convert keys to exportable format, the certs
4447 	if (certs)
4448 		sk_X509_pop_free(certs, X509_free);