Lines Matching full:depth
24 void SSL_CTX_set_verify_depth(SSL_CTX *ctx, int depth);
25 void SSL_set_verify_depth(SSL *ssl, int depth);
60 callback (e.g., at a lower depth, or for a separate error condition) returns 0.
62 SSL_CTX_set_verify_depth() sets the maximum B<depth> for the certificate chain
65 SSL_set_verify_depth() sets the maximum B<depth> for the certificate chain
155 application provided procedure also has access to the verify depth information
162 end-entity nor the trust-anchor certificates count against B<depth>. If the
163 certificate chain needed to reach a trusted issuer is longer than B<depth+2>,
165 The depth count is "level 0:peer certificate", "level 1: CA certificate",
167 depth to 2 allows the levels 0, 1, 2 and 3 (0 being the end-entity and 3 the
169 The default depth limit is 100,
240 failure, if wished. The callback realizes a verification depth limit with
266 int err, depth;
272 depth = X509_STORE_CTX_get_error_depth(ctx);
284 * Catch a too long certificate chain. The depth limit set using
286 * that whenever the "depth>verify_depth" condition is met, we
292 if (depth > mydata->verify_depth) {
298 printf("verify error:num=%d:%s:depth=%d:%s\n", err,
299 X509_verify_cert_error_string(err), depth, buf);
301 printf("depth=%d:%s\n", depth, buf);