| /freebsd/crypto/openssl/test/certs/ |
| H A D | mkcert.sh | 92 local exts=$1; shift 96 -extfile <(printf "%s\n" "$exts") "$@" 108 exts=$(printf "%s\n%s\n%s\n" "$bcon" "$ku" "$skid" "$akid") 111 exts=$(printf "%s\nextendedKeyUsage = %s\n" "$exts" "$eku") 115 cert "$cert" "$exts" -signkey "${key}.pem" -set_serial 1 -days "${DAYS}" 143 exts=$(printf "%s\n%s\n%s\n" "$bcon" "$ku" "$skid" "$akid") 145 exts=$(printf "%s\nextendedKeyUsage = %s\n" "$exts" "$purpose") 148 exts=$(printf "%s\nnameConstraints = %s\n" "$exts" "$NC") 151 exts=$(printf "%s\ncertificatePolicies = %s\n" "$exts" "$certpol") 156 cert "$cert" "$exts" -CA "${cacert}.pem" -CAkey "${cakey}.pem" \ [all …]
|
| /freebsd/crypto/openssl/ssl/statem/ |
| H A D | extensions_cust.c | 81 custom_ext_method *custom_ext_find(const custom_ext_methods *exts, in custom_ext_find() argument 86 custom_ext_method *meth = exts->meths; in custom_ext_find() 88 for (i = 0; i < exts->meths_count; i++, meth++) { in custom_ext_find() 103 void custom_ext_init(custom_ext_methods *exts) in custom_ext_init() argument 106 custom_ext_method *meth = exts->meths; in custom_ext_init() 108 for (i = 0; i < exts->meths_count; i++, meth++) in custom_ext_init() 119 custom_ext_methods *exts = &s->cert->custext; in custom_ext_parse() local 126 meth = custom_ext_find(exts, role, ext_type, NULL); in custom_ext_parse() 176 custom_ext_methods *exts = &s->cert->custext; in custom_ext_add() local 182 for (i = 0; i < exts->meths_count; i++) { in custom_ext_add() [all …]
|
| H A D | extensions.c | 415 RAW_EXTENSION *exts) in tls_validate_all_contexts() argument 430 for (thisext = exts, i = 0; i < num_exts; i++, thisext++) { in tls_validate_all_contexts() 565 custom_ext_methods *exts = &s->cert->custext; in tls_collect_extensions() local 578 num_exts = OSSL_NELEM(ext_defs) + (exts != NULL ? exts->meths_count : 0); in tls_collect_extensions() 600 if (!verify_extension(s, context, type, exts, raw_extensions, &thisex) in tls_collect_extensions() 688 RAW_EXTENSION *exts, X509 *x, size_t chainidx) in tls_parse_extension() argument 690 RAW_EXTENSION *currext = &exts[idx]; in tls_parse_extension() 739 RAW_EXTENSION *exts, X509 *x, in tls_parse_all_extensions() argument 750 if (!tls_parse_extension(s, i, context, exts, x, chainidx)) { in tls_parse_all_extensions() 764 && !thisexd->final(s, context, exts[i].present)) { in tls_parse_all_extensions()
|
| /freebsd/crypto/openssl/crypto/x509/ |
| H A D | x509_req.c | 144 STACK_OF(X509_EXTENSION) *exts = NULL; in STACK_OF() 150 exts = get_extensions_by_nid(req, *pnid); in STACK_OF() 151 if (exts == NULL) in STACK_OF() 153 if (sk_X509_EXTENSION_num(exts) > 0) in STACK_OF() 154 return exts; in STACK_OF() 155 sk_X509_EXTENSION_free(exts); in STACK_OF() 166 const STACK_OF(X509_EXTENSION) *exts, int nid) in X509_REQ_add_extensions_nid() 174 if (sk_X509_EXTENSION_num(exts) <= 0) in X509_REQ_add_extensions_nid() 181 if (X509v3_add_extensions(&mod_exts, exts) == NULL) in X509_REQ_add_extensions_nid() 186 extlen = ASN1_item_i2d((const ASN1_VALUE *)(mod_exts == NULL ? exts : mod_exts), in X509_REQ_add_extensions_nid() [all …]
|
| H A D | t_req.c | 43 STACK_OF(X509_EXTENSION) *exts = NULL; in X509_REQ_print_ex() 168 exts = X509_REQ_get_extensions(x); in X509_REQ_print_ex() 169 if (exts) { in X509_REQ_print_ex() 172 for (i = 0; i < sk_X509_EXTENSION_num(exts); i++) { in X509_REQ_print_ex() 176 ex = sk_X509_EXTENSION_value(exts, i); in X509_REQ_print_ex() 195 sk_X509_EXTENSION_pop_free(exts, X509_EXTENSION_free); in X509_REQ_print_ex() 196 exts = NULL; in X509_REQ_print_ex() 210 sk_X509_EXTENSION_pop_free(exts, X509_EXTENSION_free); in X509_REQ_print_ex()
|
| H A D | t_acert.c | 236 const STACK_OF(X509_EXTENSION) *exts; in X509_ACERT_print_ex() 238 exts = X509_ACERT_get0_extensions(x); in X509_ACERT_print_ex() 239 if (exts != NULL) { in X509_ACERT_print_ex() 242 for (i = 0; i < sk_X509_EXTENSION_num(exts); i++) { in X509_ACERT_print_ex() 247 ex = sk_X509_EXTENSION_value(exts, i); in X509_ACERT_print_ex()
|
| H A D | x_crl.c | 93 STACK_OF(X509_EXTENSION) *exts; 134 exts = rev->extensions; 136 for (j = 0; j < sk_X509_EXTENSION_num(exts); j++) { 137 ext = sk_X509_EXTENSION_value(exts, j); 159 STACK_OF(X509_EXTENSION) *exts; in crl_cb() 229 exts = crl->crl.extensions; in crl_cb() 231 for (idx = 0; idx < sk_X509_EXTENSION_num(exts); idx++) { in crl_cb() 233 ext = sk_X509_EXTENSION_value(exts, idx); in crl_cb()
|
| H A D | v3_prn.c | 139 const STACK_OF(X509_EXTENSION) *exts, in X509V3_extensions_print() 144 if (sk_X509_EXTENSION_num(exts) <= 0) in X509V3_extensions_print() 152 for (i = 0; i < sk_X509_EXTENSION_num(exts); i++) { in X509V3_extensions_print() 156 ex = sk_X509_EXTENSION_value(exts, i); in X509V3_extensions_print()
|
| H A D | x509_v3.c | 147 const STACK_OF(X509_EXTENSION) *exts) in STACK_OF() 156 for (i = 0; i < sk_X509_EXTENSION_num(exts); i++) { in STACK_OF() 157 X509_EXTENSION *ext = sk_X509_EXTENSION_value(exts, i); in STACK_OF()
|
| H A D | v3_conf.c | 385 STACK_OF(X509_EXTENSION) *exts = NULL; in X509V3_EXT_REQ_add_nconf() 386 int ret = X509V3_EXT_add_nconf_sk(conf, ctx, section, &exts); in X509V3_EXT_REQ_add_nconf() 388 if (ret && req != NULL && exts != NULL) in X509V3_EXT_REQ_add_nconf() 389 ret = X509_REQ_add_extensions(req, exts); in X509V3_EXT_REQ_add_nconf() 390 sk_X509_EXTENSION_pop_free(exts, X509_EXTENSION_free); in X509V3_EXT_REQ_add_nconf()
|
| /freebsd/contrib/wpa/hs20/client/ |
| H A D | est.c | 247 STACK_OF(X509_EXTENSION) *exts) in add_csrattrs_oid() 271 STACK_OF(X509_EXTENSION) *exts) in add_csrattrs_ext_req() 301 STACK_OF(X509_EXTENSION) *exts) in add_csrattrs_attr() 314 add_csrattrs_ext_req(ctx, attr->values, exts); in add_csrattrs_attr() 333 STACK_OF(X509_EXTENSION) *exts) in add_csrattrs() 353 add_csrattrs_oid(ctx, ao->d.oid, exts); in add_csrattrs() 356 add_csrattrs_attr(ctx, ao->d.attribute, exts); in add_csrattrs() 374 STACK_OF(X509_EXTENSION) *exts = NULL; in generate_csr() 450 exts = sk_X509_EXTENSION_new_null(); in generate_csr() 451 if (!exts) in generate_csr() [all …]
|
| /freebsd/crypto/openssl/test/recipes/25-test_eai_data/ |
| H A D | kdc.sh | 13 exts=$( 34 printf "%s\n" "$exts" 41 -extfile <(printf "%s\n" "$exts")
|
| /freebsd/crypto/krb5/src/lib/gssapi/krb5/ |
| H A D | init_sec_context.c | 233 krb5_gss_ctx_ext_t exts; member 311 assert(data->exts != NULL); in make_gss_checksum() 313 if (data->exts->iakerb.conv) { in make_gss_checksum() 320 code = iakerb_make_finished(context, key, data->exts->iakerb.conv, in make_gss_checksum() 341 if (data->exts->iakerb.conv != NULL) { in make_gss_checksum() 368 int cbt_flag, gss_buffer_t token, krb5_gss_ctx_ext_t exts) in make_ap_req_v1() argument 393 cksum_struct.exts = exts; in make_ap_req_v1() 477 krb5_gss_ctx_ext_t exts) in kg_new_connection() argument 604 &token, exts))) { in kg_new_connection() 885 krb5_gss_ctx_ext_t exts) in krb5_gss_init_sec_context_ext() argument [all …]
|
| H A D | accept_sec_context.c | 374 krb5_gss_ctx_ext_t exts) in kg_process_extension() argument 378 assert(exts != NULL); in kg_process_extension() 382 if (exts->iakerb.conv == NULL) { in kg_process_extension() 391 code = iakerb_verify_finished(context, key, exts->iakerb.conv, in kg_process_extension() 394 exts->iakerb.verified = 1; in kg_process_extension() 468 krb5_authenticator *authenticator, krb5_gss_ctx_ext_t exts, in process_checksum() argument 595 &option, exts); in process_checksum() 673 krb5_gss_ctx_ext_t exts) in kg_accept_krb5() argument 843 authdat, exts, in kg_accept_krb5() 850 if (exts->iakerb.conv && !exts->iakerb.verified) { in kg_accept_krb5() [all …]
|
| H A D | iakerb.c | 837 iakerb_make_exts(iakerb_ctx_id_t ctx, krb5_gss_ctx_ext_rec *exts) in iakerb_make_exts() argument 839 memset(exts, 0, sizeof(*exts)); in iakerb_make_exts() 842 exts->iakerb.conv = &ctx->conv; in iakerb_make_exts() 894 krb5_gss_ctx_ext_rec exts; in iakerb_gss_accept_sec_context() local 896 iakerb_make_exts(ctx, &exts); in iakerb_gss_accept_sec_context() 909 &exts); in iakerb_gss_accept_sec_context() 1014 krb5_gss_ctx_ext_rec exts; in iakerb_gss_init_sec_context() local 1021 iakerb_make_exts(ctx, &exts); in iakerb_gss_init_sec_context() 1040 &exts); in iakerb_gss_init_sec_context()
|
| /freebsd/crypto/openssl/doc/man3/ |
| H A D | X509_REQ_get_extensions.pod | 14 int X509_REQ_add_extensions(X509_REQ *req, const STACK_OF(X509_EXTENSION) *exts); 16 const STACK_OF(X509_EXTENSION) *exts, int nid); 25 X509_REQ_add_extensions_nid() adds to I<req> a list of X.509 extensions I<exts>, 27 I<req> is unchanged if I<exts> is NULL or an empty list.
|
| H A D | OSSL_CRMF_MSG_set0_validity.pod | 29 int OSSL_CRMF_MSG_set0_extensions(OSSL_CRMF_MSG *crm, X509_EXTENSIONS *exts); 58 OSSL_CRMF_MSG_set0_extensions() sets I<exts> as the extensions in the 59 certTemplate of I<crm>. Frees any pre-existing ones and consumes I<exts>.
|
| H A D | X509v3_get_ext_by_NID.pod | 34 const STACK_OF(X509_EXTENSION) *exts); 90 X509v3_add_extensions() adds the list of extensions I<exts> to STACK I<*target>. 91 The STACK I<*target> is returned unchanged if I<exts> is NULL or an empty list. 147 or NULL on error or if I<*target> is NULL and I<exts> is NULL or an empty list.
|
| /freebsd/crypto/openssl/test/recipes/ |
| H A D | tconversion.pl | 168 my ($cert, $expected, $exts, $name) = @_; 170 run(app(["openssl", "x509", "-noout", "-ext", $exts, 173 "$cert '$exts' output should contain $expected different lines");
|
| /freebsd/crypto/openssl/apps/ |
| H A D | x509.c | 265 STACK_OF(X509_EXTENSION) *exts; in x509_to_req() 277 if ((exts = sk_X509_EXTENSION_new_reserve(NULL, n)) == NULL) in x509_to_req() 284 && !sk_X509_EXTENSION_push(exts, ex)) in x509_to_req() 288 if (sk_X509_EXTENSION_num(exts) > 0) { in x509_to_req() 290 && !X509_REQ_add_extensions(req, exts)) { in x509_to_req() 295 sk_X509_EXTENSION_free(exts); in x509_to_req() 299 sk_X509_EXTENSION_free(exts); in x509_to_req() 1306 const STACK_OF(X509_EXTENSION) *exts = NULL; in print_x509v3_exts() 1314 exts = X509_get0_extensions(x); in print_x509v3_exts() 1315 if ((num = sk_X509_EXTENSION_num(exts)) <= 0) { in print_x509v3_exts() [all …]
|
| /freebsd/crypto/openssh/ |
| H A D | sftp-client.c | 108 u_int exts; member 472 ret->exts = 0; in sftp_init() 512 ret->exts |= SFTP_EXT_POSIX_RENAME; in sftp_init() 516 ret->exts |= SFTP_EXT_STATVFS; in sftp_init() 520 ret->exts |= SFTP_EXT_FSTATVFS; in sftp_init() 524 ret->exts |= SFTP_EXT_HARDLINK; in sftp_init() 528 ret->exts |= SFTP_EXT_FSYNC; in sftp_init() 532 ret->exts |= SFTP_EXT_LSETSTAT; in sftp_init() 536 ret->exts |= SFTP_EXT_LIMITS; in sftp_init() 540 ret->exts |= SFTP_EXT_PATH_EXPAND; in sftp_init() [all …]
|
| /freebsd/crypto/openssl/crypto/cmp/ |
| H A D | cmp_msg.c | 312 X509_EXTENSIONS *exts = NULL; in OSSL_CMP_CTX_setup_CRM() local 356 && (exts = X509_REQ_get_extensions(ctx->p10CSR)) == NULL) in OSSL_CMP_CTX_setup_CRM() 362 && !add1_extension(&exts, NID_subject_alt_name, crit, default_sans)) in OSSL_CMP_CTX_setup_CRM() 365 && X509v3_add_extensions(&exts, ctx->reqExtensions) == NULL) in OSSL_CMP_CTX_setup_CRM() 368 && !add1_extension(&exts, NID_subject_alt_name, in OSSL_CMP_CTX_setup_CRM() 372 && !add1_extension(&exts, NID_certificate_policies, in OSSL_CMP_CTX_setup_CRM() 375 if (!OSSL_CRMF_MSG_set0_extensions(crm, exts)) in OSSL_CMP_CTX_setup_CRM() 377 exts = NULL; in OSSL_CMP_CTX_setup_CRM() 401 sk_X509_EXTENSION_pop_free(exts, X509_EXTENSION_free); in OSSL_CMP_CTX_setup_CRM()
|
| H A D | cmp_ctx.c | 154 #define X509_EXTENSIONS_free(exts) \ argument 155 sk_X509_EXTENSION_pop_free(exts, X509_EXTENSION_free) 634 int OSSL_CMP_CTX_set0_reqExtensions(OSSL_CMP_CTX *ctx, X509_EXTENSIONS *exts) 641 if (sk_GENERAL_NAME_num(ctx->subjectAltNames) > 0 && exts != NULL 642 && X509v3_get_ext_by_NID(exts, NID_subject_alt_name, -1) >= 0) { 647 ctx->reqExtensions = exts;
|
| /freebsd/crypto/openssh/regress/unittests/sshkey/ |
| H A D | test_sshkey.c | 61 struct sshbuf *ca_buf, *pk, *principals, *critopts, *exts; in build_cert() local 88 exts = sshbuf_new(); in build_cert() 89 ASSERT_PTR_NE(exts, NULL); in build_cert() 102 ASSERT_INT_EQ(sshbuf_put_stringb(b, exts), 0); /* extensions */ in build_cert() 111 sshbuf_free(exts); in build_cert()
|
| /freebsd/crypto/openssl/test/ |
| H A D | cmp_ctx_test.c | 223 X509_EXTENSIONS *exts = NULL; in execute_CTX_reqExtensions_have_SAN_test() local 235 || !TEST_ptr(exts = sk_X509_EXTENSION_new_null()) in execute_CTX_reqExtensions_have_SAN_test() 236 || !TEST_true(sk_X509_EXTENSION_push(exts, ext)) in execute_CTX_reqExtensions_have_SAN_test() 237 || !TEST_true(OSSL_CMP_CTX_set0_reqExtensions(ctx, exts))) { in execute_CTX_reqExtensions_have_SAN_test() 239 sk_X509_EXTENSION_free(exts); in execute_CTX_reqExtensions_have_SAN_test() 243 ext = sk_X509_EXTENSION_pop(exts); in execute_CTX_reqExtensions_have_SAN_test()
|