232 	char *ca_cert;  member
330 static X509_STORE * tls_crl_cert_reload(const char *ca_cert, int check_crl)  in tls_crl_cert_reload()  argument
343 	if (ca_cert && X509_STORE_load_locations(store, ca_cert, NULL) != 1) {  in tls_crl_cert_reload()
1209 	os_free(data->ca_cert);  in tls_deinit()
1699 		new_cert_store = tls_crl_cert_reload(data->ca_cert,  in tls_connection_init()
2749 static int tls_load_ca_der(struct tls_data *data, const char *ca_cert)  in tls_load_ca_der()  argument
2763 	if (!X509_LOOKUP_load_file(lookup, ca_cert, X509_FILETYPE_ASN1)) {  in tls_load_ca_der()
2783 				  const char *ca_cert, const u8 *ca_cert_blob,  in tls_connection_ca_cert()  argument
2804 	if (ca_cert && os_strncmp(ca_cert, "probe://", 8) == 0) {  in tls_connection_ca_cert()
2812 	if (ca_cert && os_strncmp(ca_cert, "hash://", 7) == 0) {  in tls_connection_ca_cert()
2814 		const char *pos = ca_cert + 7;  in tls_connection_ca_cert()
2817 				   "hash value '%s'", ca_cert);  in tls_connection_ca_cert()
2823 				   "hash length in ca_cert '%s'", ca_cert);  in tls_connection_ca_cert()
2828 				   "value in ca_cert '%s'", ca_cert);  in tls_connection_ca_cert()
2891 	if (ca_cert && os_strncmp("keystore://", ca_cert, 11) == 0) {  in tls_connection_ca_cert()
2893 					     &ca_cert[11]) < 0)  in tls_connection_ca_cert()
2900 	if (ca_cert && os_strncmp("keystores://", ca_cert, 12) == 0) {  in tls_connection_ca_cert()
2901 		char *aliases = os_strdup(&ca_cert[12]);  in tls_connection_ca_cert()
2930 	if (ca_cert && tls_cryptoapi_ca_cert(ssl_ctx, conn->ssl, ca_cert) ==  in tls_connection_ca_cert()
2938 	if (ca_cert || ca_path) {  in tls_connection_ca_cert()
2940 		if (SSL_CTX_load_verify_locations(ssl_ctx, ca_cert, ca_path) !=  in tls_connection_ca_cert()
2944 			if (ca_cert &&  in tls_connection_ca_cert()
2945 			    tls_load_ca_der(data, ca_cert) == 0) {  in tls_connection_ca_cert()
2971 static int tls_global_ca_cert(struct tls_data *data, const char *ca_cert)  in tls_global_ca_cert()  argument
2975 	if (ca_cert) {  in tls_global_ca_cert()
2976 		if (SSL_CTX_load_verify_locations(ssl_ctx, ca_cert, NULL) != 1)  in tls_global_ca_cert()
2989 					   SSL_load_client_CA_file(ca_cert));  in tls_global_ca_cert()
2992 		os_free(data->ca_cert);  in tls_global_ca_cert()
2993 		data->ca_cert = os_strdup(ca_cert);  in tls_global_ca_cert()
5368 	if (!ca_cert_id && params->ca_cert && can_pkcs11 &&  in tls_connection_set_params()
5369 	    os_strncmp(params->ca_cert, "pkcs11:", 7) == 0) {  in tls_connection_set_params()
5371 		ca_cert_id = params->ca_cert;  in tls_connection_set_params()
5442 	} else if (tls_connection_ca_cert(data, conn, params->ca_cert,  in tls_connection_set_params()
5687 	if (tls_global_ca_cert(data, params->ca_cert) ||  in tls_global_set_params()