Home
last modified time | relevance | path

Searched refs:trust (Results 1 – 25 of 165) sorted by relevance

1234567

/freebsd/crypto/openssl/crypto/x509/
H A Dx509_trust.c18 static int trust_1oidany(X509_TRUST *trust, X509 *x, int flags);
19 static int trust_1oid(X509_TRUST *trust, X509 *x, int flags);
20 static int trust_compat(X509_TRUST *trust, X509 *x, int flags);
54 return (*a)->trust - (*b)->trust; in tr_cmp()
57 int (*X509_TRUST_set_default(int (*trust)(int, X509 *, int)))(int, X509 *, in X509_TRUST_set_default()
62 default_trust = trust; in X509_TRUST_set_default()
108 tmp.trust = id; in X509_TRUST_get_by_id()
117 int X509_TRUST_set(int *t, int trust) in X509_TRUST_set() argument
119 if (X509_TRUST_get_by_id(trust) < 0) { in X509_TRUST_set()
123 *t = trust; in X509_TRUST_set()
[all …]
H A Dx_x509a.c27 ASN1_SEQUENCE_OF_OPT(X509_CERT_AUX, trust, ASN1_OBJECT),
114 if (aux->trust == NULL in X509_add1_trust_object()
115 && (aux->trust = sk_ASN1_OBJECT_new_null()) == NULL) in X509_add1_trust_object()
117 if (!objtmp || sk_ASN1_OBJECT_push(aux->trust, objtmp)) in X509_add1_trust_object()
149 sk_ASN1_OBJECT_pop_free(x->aux->trust, ASN1_OBJECT_free); in X509_trust_clear()
150 x->aux->trust = NULL; in X509_trust_clear()
165 return x->aux->trust; in STACK_OF()
H A Dx509_vfy.c550 tr_ok = X509_check_trust(x, ctx->param->trust, X509_TRUST_NO_SS_COMPAT); in check_purpose()
949 int trust; in check_trust() local
956 trust = check_dane_issuer(ctx, num_untrusted); in check_trust()
957 if (trust != X509_TRUST_UNTRUSTED) in check_trust()
958 return trust; in check_trust()
969 trust = X509_check_trust(x, ctx->param->trust, 0); in check_trust()
971 if (trust == X509_TRUST_TRUSTED) in check_trust()
973 if (trust == X509_TRUST_REJECTED) in check_trust()
1005 trust = X509_check_trust(mx, ctx->param->trust, 0); in check_trust()
1006 if (trust == X509_TRUST_REJECTED) { in check_trust()
[all …]
H A Dx509_vpm.c88 param->trust = X509_TRUST_DEFAULT; in X509_VERIFY_PARAM_new()
170 x509_verify_param_copy(trust, X509_TRUST_DEFAULT); in X509_VERIFY_PARAM_inherit()
308 int X509_VERIFY_PARAM_set_trust(X509_VERIFY_PARAM *param, int trust) in X509_VERIFY_PARAM_set_trust() argument
310 return X509_TRUST_set(&param->trust, trust); in X509_VERIFY_PARAM_set_trust()
H A Dt_x509.c319 STACK_OF(ASN1_OBJECT) *trust, *reject; in X509_aux_print()
325 trust = X509_get0_trust_objects(x); in X509_aux_print()
327 if (trust) { in X509_aux_print()
330 for (i = 0; i < sk_ASN1_OBJECT_num(trust); i++) { in X509_aux_print()
336 sk_ASN1_OBJECT_value(trust, i), 0); in X509_aux_print()
/freebsd/lib/libsecureboot/
H A Dveta.c48 trust_file_add(const char *trust) in trust_file_add() argument
53 xcs = read_certificates(trust, &num); in trust_file_add()
58 else if (load_key_file(trust)) { in trust_file_add()
71 trust_dir_add(const char *trust) in trust_dir_add() argument
80 if (!(dh = opendir(trust))) in trust_dir_add()
85 sz = snprintf(fbuf, sizeof(fbuf), "%s/%s", trust, de->d_name); in trust_dir_add()
100 ve_trust_add(const char *trust) in ve_trust_add() argument
104 if (stat(trust, &st) < 0) in ve_trust_add()
107 return (trust_dir_add(trust)); in ve_trust_add()
108 return (trust_file_add(trust)); in ve_trust_add()
H A DREADME.rst6 To do that, the necessary trust anchors need to be available.
11 The makefile ``local.trust.mk`` is responsible for doing that.
16 provide access to the necessary trust anchors.
69 we want the trust anchor in a file named ``t*.asc``
98 certificate (trust anchor). This is expected to be in a file named
130 you need to provide a suitable file signed by each supported trust
134 have the same extension as the corresponding trust anchor.
140 signed by the corresponding trust anchor.
/freebsd/crypto/openssl/doc/man3/
H A DX509_STORE_CTX_new.pod60 int X509_STORE_CTX_set_trust(X509_STORE_CTX *ctx, int trust);
62 int purpose, int trust);
185 Among others, the parameters determine the trust model and verification purpose.
205 certificate itself. In addition the trust store containing trusted certificates
206 can declare what purposes we trust different certificates for. This "trust"
212 administrator might only trust it for the former. An X.509 certificate extension
231 CA certificates along the chain, including any given trust anchor certificate.
233 Every purpose also has an associated default trust value, which will also be set
234 at the same time. During verification, this trust setting will be verified
235 to check whether it is consistent with the trust set by the system administrator
[all …]
H A DOSSL_CMP_validate_msg.pod24 In the former case a suitable trust anchor must be given in the CMP context
35 (or the trust store contains a verification callback that overrides the verdict
41 using any trust store set via L<OSSL_CMP_CTX_set0_trusted(3)>.
46 as a trust anchor for the path verification of an 'acceptable' cert if it can be
52 Taking it over as a trust anchor implements trust-on-first-use (TOFU).
H A DX509_VERIFY_PARAM_set_flags.pod40 int X509_VERIFY_PARAM_set_trust(X509_VERIFY_PARAM *param, int trust);
99 X509_VERIFY_PARAM_set_trust() sets the trust setting in B<param> to
100 B<trust>.
118 neither the end-entity certificate nor the trust-anchor count against this
121 directly by the trust anchor, while with a B<depth> limit of 1 there can be one
122 intermediate CA certificate between the trust anchor and the end-entity
131 The signature algorithm security level is not enforced for the chain's I<trust
307 in L<X509_verify_cert(3)> searches the trust store for issuer certificates
311 This is especially important when some certificates in the trust store have
312 explicit trust settings (see "TRUST SETTINGS" in L<openssl-x509(1)>).
[all …]
H A DX509_verify_cert.pod27 the trust store, an optional stack of untrusted certificates that may assist
48 chain, drawing candidates from I<ctx>'s untrusted stack and from the trust
50 examined before the trust store. Setting B<X509_V_FLAG_TRUSTED_FIRST> on
52 search fails to reach a trust anchor and B<X509_V_FLAG_NO_ALT_CHAINS> is not
59 Failure to build a chain to a trust anchor yields an error such as
94 walking from the trust anchor down to the target. The signature on the
95 chain's terminating certificate is not verified: trust is taken from its
96 presence in the trust store rather than from its signature. This applies
97 both to a conventional self-signed trust anchor and, when
165 the chain must reach a trust anchor contained in I<store>. If no chain to a
[all …]
H A DSSL_CTX_get0_param.pod21 int SSL_CTX_set_trust(SSL_CTX *ctx, int trust);
22 int SSL_set_trust(SSL *ssl, int trust);
38 which set the trust parameter on the verification parameters object. These
H A DX509_check_purpose.pod29 int X509_PURPOSE_add(int id, int trust, int flags,
81 The function also sets in the entry the trust id I<trust>, the given I<flags>,
96 X509_PURPOSE_get_trust() returns the trust id of the given B<X509_PURPOSE>.
160 X509_PURPOSE_get_trust() returns the trust id of the given B<X509_PURPOSE>.
/freebsd/contrib/unbound/services/cache/
H A Drrset.c148 if( newd->trust > cached->trust ) { in need_to_update_rrset()
158 (a_aaaa && cached->trust==rrset_trust_add_noAA)) in need_to_update_rrset()
162 if(a_aaaa) newd->trust=rrset_trust_add_noAA; in need_to_update_rrset()
174 if( newd->trust == cached->trust && !equal ) { in need_to_update_rrset()
467 if(updata->trust > cachedata->trust) in rrset_update_sec_status()
468 cachedata->trust = updata->trust; in rrset_update_sec_status()
515 if(cachedata->trust > updata->trust) in rrset_check_sec_status()
516 updata->trust = cachedata->trust; in rrset_check_sec_status()
/freebsd/crypto/openssl/doc/man1/
H A Dopenssl-verification-options.pod40 In general, according to RFC 4158 and RFC 5280, a I<trust anchor> is
45 In practice, trust anchors are given in the form of certificates,
51 is used for matching trust anchors during chain building.
53 In the most simple and common case, trust anchors are by default
54 all self-signed "root" CA certificates that are placed in the I<trust store>,
56 This is akin to what is used in the trust stores of Mozilla Firefox,
59 From the OpenSSL perspective, a trust anchor is a certificate
61 uses of a target certificate the certificate may serve as a trust anchor.
63 Such a designation provides a set of positive trust attributes
64 explicitly stating trust for the listed purposes
[all …]
/freebsd/secure/caroot/
H A Dca-extract.pl185 my $trust = ($maytrust and not $distrust);
186 return ($serial, $cka_label, $trust);
202 my ($serial, $label, $trust) = grabtrust($inputfh);
206 $trusts{$label."\0".$serial} = $trust;
/freebsd/crypto/heimdal/doc/
H A Dwin2k.texi21 * Inter-Realm keys (trust) between Windows and a Heimdal KDC::
29 @node Configuring Windows to use a Heimdal KDC, Inter-Realm keys (trust) between Windows and a Heim…
86 @node Inter-Realm keys (trust) between Windows and a Heimdal KDC, Create account mappings, Configur…
88 @section Inter-Realm keys (trust) between Windows and a Heimdal KDC
95 By default the trust will be non-transitive. This means that only users
98 can also be used to add the trust between two realms.
112 Add on the appropriate trust windows and enter domain name and
122 netdom trust NT.REALM.EXAMPLE.COM /Domain:EXAMPLE.COM /add /realm /passwordt:TrustPassword
130 understand them. Otherwise, the trust will not works.
140 For Windows 2003RC2, to change the trust encryption type, you have to use the
[all …]
/freebsd/contrib/ntp/libntp/
H A Dauthkeys.c635 u_long trust in authtrust()
647 if (!trust && sk == NULL) in authtrust()
663 if (trust > 0) { in authtrust()
665 if (trust > 1) in authtrust()
666 sk->lifetime = current_time + trust; in authtrust()
679 if (trust > 1) { in authtrust()
680 lifetime = current_time + trust; in authtrust()
632 authtrust(keyid_t id,u_long trust) authtrust() argument
/freebsd/crypto/openssl/crypto/cmp/
H A Dcmp_genm.c189 STACK_OF(X509) *trust; in selfsigned_verify_cb()
202 trust = X509_STORE_get1_all_certs(X509_STORE_CTX_get0_store(store_ctx)); in selfsigned_verify_cb()
203 for (i = 0; i < sk_X509_num(trust); i++) { in selfsigned_verify_cb()
204 issuer = sk_X509_value(trust, i); in selfsigned_verify_cb()
211 sk_X509_pop_free(trust, X509_free); in selfsigned_verify_cb()
/freebsd/contrib/unbound/doc/
H A DFEATURES33 RFC 2181: completely, including the trust model, keeping rrsets together.
43 RFC 5011: update of trust anchors with timers.
76 draft-ietf-dnsop-dnssec-trust-anchor(-01): DS records can be configured
77 as trust anchors. Also DNSKEYs are allowed, by the way.
H A Dunbound-anchor.rst50 ``unbound-anchor`` performs setup or update of the root trust anchor for DNSSEC
52 The program fetches the trust anchor with the method from :rfc:`7958` when
58 :ref:`auto-trust-anchor-file<unbound.conf.auto-trust-anchor-file>` option) so
59 that trust anchor information is automatically tracked by Unbound during
79 # auto-trust-anchor-file: "@UNBOUND_ROOTKEY_FILE@"
148 file (:option:`-c`) as trust anchor.
275 downloaded DNSSEC root trust anchor.
/freebsd/crypto/openssl/include/openssl/
H A Dx509_vfy.h.in80 /* This is used for a table of trust checking functions */
82 int trust; member
95 /* standard trust ids */
112 /* No compat trust if self-signed, preempts "DO_SS" */
114 /* Compat trust if no explicit accepted trust EKUs */
116 /* Accept "anyEKU" as a wildcard rejection OID and as a wildcard trust OID */
124 int X509_TRUST_set(int *t, int trust);
143 int (*X509_TRUST_set_default(int (*trust)(int, X509 *, int)))(int, X509 *,
418 int X509_STORE_set_trust(X509_STORE *xs, int trust);
681 int X509_STORE_CTX_set_trust(X509_STORE_CTX *ctx, int trust);
[all …]
/freebsd/contrib/bearssl/samples/
H A DREADME.txt11 certificate against two hardcoded trust anchors.
24 certificate chains link to the trust anchors that are hardcoded
/freebsd/usr.sbin/certctl/tests/
H A Dcertctl_test.sh244 atf_test_case trust
259 certctl trust ${crtfile}
335 atf_add_test_case trust
/freebsd/crypto/openssl/apps/
H A Dx509.c334 STACK_OF(ASN1_OBJECT) *trust = NULL, *reject = NULL; in x509_main()
506 if (trust == NULL && (trust = sk_ASN1_OBJECT_new_null()) == NULL) in x509_main()
513 if (!sk_ASN1_OBJECT_push(trust, objtmp)) in x509_main()
878 if (trust != NULL) { in x509_main()
879 for (i = 0; i < sk_ASN1_OBJECT_num(trust); i++) in x509_main()
880 X509_add1_trust_object(x, sk_ASN1_OBJECT_value(trust, i)); in x509_main()
1186 sk_ASN1_OBJECT_pop_free(trust, ASN1_OBJECT_free); in x509_main()

1234567