Lines Matching defs:policies
51 * (5) Some pruning steps are deferred to when policies are evaluated, as a
71 * a root policies, and is in authorities-constrained-policy-set if it
330 const CERTIFICATEPOLICIES *policies = data;
334 if (sk_POLICYINFO_find(policies, &info) >= 0)
342 * certificate policies extension. This implements steps (d) and (e) of RFC
354 CERTIFICATEPOLICIES *policies;
360 policies = X509_get_ext_d2i(x509, NID_certificate_policies, &critical,
362 if (policies == NULL) {
375 if (sk_POLICYINFO_num(policies) == 0) {
380 (void)sk_POLICYINFO_set_cmp_func(policies, policyinfo_cmp);
381 sk_POLICYINFO_sort(policies);
383 for (i = 0; i < sk_POLICYINFO_num(policies); i++) {
384 policy = sk_POLICYINFO_value(policies, i);
388 OBJ_cmp(sk_POLICYINFO_value(policies, i - 1)->policyid,
391 * Per RFC 5280, section 4.2.1.4, |policies| may not
409 * two steps is to intersect |level| with |policies|, ignoring
413 if (!sk_POLICYINFO_is_sorted(policies))
416 delete_if_not_in_policies, policies);
428 for (i = 0; i < sk_POLICYINFO_num(policies); i++) {
429 policy = sk_POLICYINFO_value(policies, i);
456 CERTIFICATEPOLICIES_free(policies);
844 * |node|'s parents are concrete policies. Mark