Lines Matching refs:cert
134 ldns_dane_cert2rdf(ldns_rdf** rdf, X509* cert, in ldns_dane_cert2rdf() argument
147 assert(cert != NULL); in ldns_dane_cert2rdf()
152 len = (size_t)i2d_X509(cert, &buf); in ldns_dane_cert2rdf()
158 xpubkey = X509_get_X509_PUBKEY(cert); in ldns_dane_cert2rdf()
223 ldns_dane_pkix_validate(X509* cert, STACK_OF(X509)* extra_certs, in ldns_dane_pkix_validate() argument
238 cert, extra_certs) != 1) { in ldns_dane_pkix_validate()
257 ldns_dane_pkix_validate_and_get_chain(STACK_OF(X509)** chain, X509* cert, in ldns_dane_pkix_validate_and_get_chain() argument
276 cert, extra_certs) != 1) { in ldns_dane_pkix_validate_and_get_chain()
306 X509* cert, STACK_OF(X509)* extra_certs) in ldns_dane_pkix_get_chain() argument
322 cert, extra_certs) != 1) { in ldns_dane_pkix_get_chain()
345 X509** cert, STACK_OF(X509)* chain, int n, bool ca) in ldns_dane_get_nth_cert_from_validation_chain() argument
350 *cert = sk_X509_pop(chain); in ldns_dane_get_nth_cert_from_validation_chain()
352 X509_free(*cert); in ldns_dane_get_nth_cert_from_validation_chain()
353 *cert = sk_X509_pop(chain); in ldns_dane_get_nth_cert_from_validation_chain()
355 if (ca && ! X509_check_ca(*cert)) { in ldns_dane_get_nth_cert_from_validation_chain()
367 X509* cert, STACK_OF(X509)* extra_certs) in ldns_dane_pkix_get_last_self_signed() argument
382 cert, extra_certs) != 1) { in ldns_dane_pkix_get_last_self_signed()
406 X509* cert, STACK_OF(X509)* extra_certs, in ldns_dane_select_certificate() argument
414 assert(cert != NULL); in ldns_dane_select_certificate()
447 cert, extra_certs, in ldns_dane_select_certificate()
467 *selected_cert = cert; in ldns_dane_select_certificate()
468 return ldns_dane_pkix_validate(cert, extra_certs, in ldns_dane_select_certificate()
477 selected_cert, cert, extra_certs); in ldns_dane_select_certificate()
482 cert, extra_certs); in ldns_dane_select_certificate()
499 *selected_cert = cert; in ldns_dane_select_certificate()
515 X509* cert) in ldns_dane_create_tlsa_rr() argument
521 assert(cert != NULL); in ldns_dane_create_tlsa_rr()
548 s = ldns_dane_cert2rdf(&rdf, cert, selector, matching_type); in ldns_dane_create_tlsa_rr()
600 ldns_dane_match_cert_with_data(X509* cert, ldns_tlsa_selector selector, in ldns_dane_match_cert_with_data() argument
606 s = ldns_dane_cert2rdf(&match_data, cert, selector, matching_type); in ldns_dane_match_cert_with_data()
629 X509* cert; in ldns_dane_match_any_cert_with_data() local
633 cert = sk_X509_pop(chain); in ldns_dane_match_any_cert_with_data()
634 if (! cert) { in ldns_dane_match_any_cert_with_data()
638 s = ldns_dane_match_cert_with_data(cert, in ldns_dane_match_any_cert_with_data()
640 if (ca && s == LDNS_STATUS_OK && ! X509_check_ca(cert)) { in ldns_dane_match_any_cert_with_data()
643 X509_free(cert); in ldns_dane_match_any_cert_with_data()
659 X509* cert, STACK_OF(X509)* extra_certs, in ldns_dane_verify_rr() argument
683 return ldns_dane_pkix_validate(cert, extra_certs, in ldns_dane_verify_rr()
723 else if (!X509_STORE_CTX_init(store_ctx, pkix_validation_store, cert, extra_certs)) in ldns_dane_verify_rr()
758 cert, extra_certs, in ldns_dane_verify_rr()
797 s = ldns_dane_match_cert_with_data(cert, in ldns_dane_verify_rr()
801 return ldns_dane_pkix_validate(cert, extra_certs, in ldns_dane_verify_rr()
810 cert, extra_certs); in ldns_dane_verify_rr()
828 return ldns_dane_match_cert_with_data(cert, in ldns_dane_verify_rr()
842 X509* cert, STACK_OF(X509)* extra_certs, in ldns_dane_verify() argument
859 assert(cert != NULL); in ldns_dane_verify()
864 return ldns_dane_pkix_validate(cert, extra_certs, in ldns_dane_verify()
888 return ldns_dane_pkix_validate(cert, extra_certs, in ldns_dane_verify()
938 else if (!X509_STORE_CTX_init(store_ctx, pkix_validation_store, cert, extra_certs)) in ldns_dane_verify()
974 s = ldns_dane_verify_rr(tlsa_rr, cert, extra_certs, in ldns_dane_verify()