Lines Matching defs:x509
27 #include <openssl/x509.h>
305 ssl_cert_pubkey_security_bits(const X509 *x509)
309 if ((pkey = X509_get0_pubkey(x509)) == NULL)
316 ssl_security_cert_key(const SSL_CTX *ctx, const SSL *ssl, X509 *x509, int secop)
320 security_bits = ssl_cert_pubkey_security_bits(x509);
323 return ssl_security(ssl, secop, security_bits, 0, x509);
325 return ssl_ctx_security(ctx, secop, security_bits, 0, x509);
329 ssl_security_cert_sig_security_bits(X509 *x509, int *out_md_nid)
341 if (!X509_get_signature_info(x509, out_md_nid, &pkey_nid, &security_bits,
359 ssl_security_cert_sig(const SSL_CTX *ctx, const SSL *ssl, X509 *x509, int secop)
364 if ((X509_get_extension_flags(x509) & EXFLAG_SS) != 0)
371 security_bits = ssl_security_cert_sig_security_bits(x509, &md_nid);
374 return ssl_security(ssl, secop, security_bits, md_nid, x509);
376 return ssl_ctx_security(ctx, secop, security_bits, md_nid, x509);
380 ssl_security_cert(const SSL_CTX *ctx, const SSL *ssl, X509 *x509,
395 if (!ssl_security_cert_key(ctx, ssl, x509, operation)) {
400 if (!ssl_security_cert_sig(ctx, ssl, x509, SSL_SECOP_CA_MD)) {
410 * then |x509| must be NULL.
413 ssl_security_cert_chain(const SSL *ssl, STACK_OF(X509) *sk, X509 *x509,
420 if (x509 == NULL) {
421 x509 = sk_X509_value(sk, 0);
426 if (!ssl_security_cert(NULL, ssl, x509, is_ee, out_error))
431 x509 = sk_X509_value(sk, i);
433 if (!ssl_security_cert(NULL, ssl, x509, is_ee, out_error))