1=pod 2 3=head1 NAME 4 5X509_check_issued - checks if certificate is issued by another 6certificate 7 8=head1 SYNOPSIS 9 10 #include <openssl/x509v3.h> 11 12 int X509_check_issued(X509 *issuer, X509 *subject); 13 14 15=head1 DESCRIPTION 16 17This function checks if certificate I<subject> was issued using CA 18certificate I<issuer>. This function takes into account not only 19matching of issuer field of I<subject> with subject field of I<issuer>, 20but also compares B<authorityKeyIdentifier> extension of I<subject> with 21B<subjectKeyIdentifier> of I<issuer> if B<authorityKeyIdentifier> 22present in the I<subject> certificate and checks B<keyUsage> field of 23I<issuer>. 24 25=head1 RETURN VALUES 26 27Function return B<X509_V_OK> if certificate I<subject> is issued by 28I<issuer> or some B<X509_V_ERR*> constant to indicate an error. 29 30=head1 SEE ALSO 31 32L<X509_verify_cert(3)>, 33L<X509_check_ca(3)>, 34L<verify(1)> 35 36=head1 COPYRIGHT 37 38Copyright 2015-2018 The OpenSSL Project Authors. All Rights Reserved. 39 40Licensed under the OpenSSL license (the "License"). You may not use 41this file except in compliance with the License. You can obtain a copy 42in the file LICENSE in the source distribution or at 43L<https://www.openssl.org/source/license.html>. 44 45=cut 46