526     ret = hx509_certs_init(context->hx509ctx,  in _kdc_pk_rd_padata()
534     ret = hx509_certs_merge(context->hx509ctx, trust_anchors,  in _kdc_pk_rd_padata()
549 	    ret = hx509_cert_init_data(context->hx509ctx,  in _kdc_pk_rd_padata()
555 	    hx509_certs_add(context->hx509ctx, trust_anchors, cert);  in _kdc_pk_rd_padata()
560     ret = hx509_verify_init_ctx(context->hx509ctx, &cp->verify_ctx);  in _kdc_pk_rd_padata()
627 	    ret = hx509_certs_init(context->hx509ctx,  in _kdc_pk_rd_padata()
654 		ret = hx509_query_alloc(context->hx509ctx, &q);  in _kdc_pk_rd_padata()
666 		    hx509_query_free(context->hx509ctx, q);  in _kdc_pk_rd_padata()
672 		    hx509_query_free(context->hx509ctx, q);  in _kdc_pk_rd_padata()
676 		ret = hx509_certs_find(context->hx509ctx,  in _kdc_pk_rd_padata()
680 		hx509_query_free(context->hx509ctx, q);  in _kdc_pk_rd_padata()
683 		hx509_certs_add(context->hx509ctx,  in _kdc_pk_rd_padata()
728 	ret = hx509_cms_verify_signed(context->hx509ctx,  in _kdc_pk_rd_padata()
739 	    char *s = hx509_get_error_string(context->hx509ctx, ret);  in _kdc_pk_rd_padata()
747 	    ret = hx509_get_one_cert(context->hx509ctx, signer_certs,  in _kdc_pk_rd_padata()
852 	ret = hx509_peer_info_alloc(context->hx509ctx,  in _kdc_pk_rd_padata()
860 	    ret = hx509_peer_info_set_cms_algs(context->hx509ctx,  in _kdc_pk_rd_padata()
870 	    hx509_peer_info_add_cms_alg(context->hx509ctx, cp->peer,  in _kdc_pk_rd_padata()
872 	    hx509_peer_info_add_cms_alg(context->hx509ctx, cp->peer,  in _kdc_pk_rd_padata()
874 	    hx509_peer_info_add_cms_alg(context->hx509ctx, cp->peer,  in _kdc_pk_rd_padata()
1025 	ret = hx509_query_alloc(context->hx509ctx, &q);  in pk_mk_pa_reply_enckey()
1033 	ret = hx509_certs_find(context->hx509ctx,  in pk_mk_pa_reply_enckey()
1037 	hx509_query_free(context->hx509ctx, q);  in pk_mk_pa_reply_enckey()
1041 	ret = hx509_cms_create_signed_1(context->hx509ctx,  in pk_mk_pa_reply_enckey()
1069     ret = hx509_cms_envelope_1(context->hx509ctx,  in pk_mk_pa_reply_enckey()
1183     ret = hx509_query_alloc(context->hx509ctx, &q);  in pk_mk_pa_reply_dh()
1191     ret = hx509_certs_find(context->hx509ctx,  in pk_mk_pa_reply_dh()
1195     hx509_query_free(context->hx509ctx, q);  in pk_mk_pa_reply_dh()
1199     ret = hx509_cms_create_signed_1(context->hx509ctx,  in pk_mk_pa_reply_dh()
1535 	    ret = hx509_ocsp_verify(context->hx509ctx,  in _kdc_pk_mk_pa_reply()
1581 	      hx509_context hx509ctx,  in match_rfc_san()  argument
1591     ret = hx509_cert_find_subjectAltName_otherName(hx509ctx,  in match_rfc_san()
1641 		 hx509_context hx509ctx,  in match_ms_upn_san()  argument
1654     ret = hx509_cert_find_subjectAltName_otherName(hx509ctx,  in match_ms_upn_san()
1731     ret = hx509_cert_get_base_subject(context->hx509ctx,  in _kdc_pk_check_client()
1752 	    ret = hx509_cert_init_data(context->hx509ctx,  in _kdc_pk_check_client()
1771 			    context->hx509ctx,  in _kdc_pk_check_client()
1780 			       context->hx509ctx,  in _kdc_pk_check_client()
1995 	ret = hx509_query_alloc(context->hx509ctx, &q);  in krb5_kdc_pk_initialize()
2005 	ret = hx509_certs_find(context->hx509ctx,  in krb5_kdc_pk_initialize()
2009 	hx509_query_free(context->hx509ctx, q);  in krb5_kdc_pk_initialize()
2011 	    if (hx509_cert_check_eku(context->hx509ctx, cert,  in krb5_kdc_pk_initialize()