3097         if (!ssl_cert_inst(&s->cert)) {  in ssl3_ctrl()
3125         if ((s->cert != NULL) && (s->cert->rsa_tmp == NULL) &&  in ssl3_ctrl()
3126             ((s->cert->pkeys[SSL_PKEY_RSA_ENC].privatekey == NULL) ||  in ssl3_ctrl()
3127              (EVP_PKEY_size(s->cert->pkeys[SSL_PKEY_RSA_ENC].privatekey) >  in ssl3_ctrl()
3142             if (s->cert->rsa_tmp != NULL)  in ssl3_ctrl()
3143                 RSA_free(s->cert->rsa_tmp);  in ssl3_ctrl()
3144             s->cert->rsa_tmp = rsa;  in ssl3_ctrl()
3174             if (s->cert->dh_tmp != NULL)  in ssl3_ctrl()
3175                 DH_free(s->cert->dh_tmp);  in ssl3_ctrl()
3176             s->cert->dh_tmp = dh;  in ssl3_ctrl()
3208             if (s->cert->ecdh_tmp != NULL)  in ssl3_ctrl()
3209                 EC_KEY_free(s->cert->ecdh_tmp);  in ssl3_ctrl()
3210             s->cert->ecdh_tmp = ecdh;  in ssl3_ctrl()
3382         if (!ssl_cert_inst(&s->cert)) {  in ssl3_callback_ctrl()
3393             s->cert->rsa_tmp_cb = (RSA *(*)(SSL *, int, int))fp;  in ssl3_callback_ctrl()
3400             s->cert->dh_tmp_cb = (DH *(*)(SSL *, int, int))fp;  in ssl3_callback_ctrl()
3407             s->cert->ecdh_tmp_cb = (EC_KEY *(*)(SSL *, int, int))fp;  in ssl3_callback_ctrl()
3425     CERT *cert;  in ssl3_ctx_ctrl()  local
3427     cert = ctx->cert;  in ssl3_ctx_ctrl()
3432         if ((cert->rsa_tmp == NULL) &&  in ssl3_ctx_ctrl()
3433             ((cert->pkeys[SSL_PKEY_RSA_ENC].privatekey == NULL) ||  in ssl3_ctx_ctrl()
3434              (EVP_PKEY_size(cert->pkeys[SSL_PKEY_RSA_ENC].privatekey) >  in ssl3_ctx_ctrl()
3458                 if (cert->rsa_tmp != NULL)  in ssl3_ctx_ctrl()
3459                     RSA_free(cert->rsa_tmp);  in ssl3_ctx_ctrl()
3460                 cert->rsa_tmp = rsa;  in ssl3_ctx_ctrl()
3489             if (cert->dh_tmp != NULL)  in ssl3_ctx_ctrl()
3490                 DH_free(cert->dh_tmp);  in ssl3_ctx_ctrl()
3491             cert->dh_tmp = new;  in ssl3_ctx_ctrl()
3526             if (cert->ecdh_tmp != NULL) {  in ssl3_ctx_ctrl()
3527                 EC_KEY_free(cert->ecdh_tmp);  in ssl3_ctx_ctrl()
3529             cert->ecdh_tmp = ecdh;  in ssl3_ctx_ctrl()
3639     CERT *cert;  in ssl3_ctx_callback_ctrl()  local
3641     cert = ctx->cert;  in ssl3_ctx_callback_ctrl()
3647             cert->rsa_tmp_cb = (RSA *(*)(SSL *, int, int))fp;  in ssl3_ctx_callback_ctrl()
3654             cert->dh_tmp_cb = (DH *(*)(SSL *, int, int))fp;  in ssl3_ctx_callback_ctrl()
3661             cert->ecdh_tmp_cb = (EC_KEY *(*)(SSL *, int, int))fp;  in ssl3_ctx_callback_ctrl()
3760     CERT *cert;  in ssl3_choose_cipher()  local
3764     cert = s->cert;  in ssl3_choose_cipher()
3808         ssl_set_cert_masks(cert, c);  in ssl3_choose_cipher()
3809         mask_k = cert->mask_k;  in ssl3_choose_cipher()
3810         mask_a = cert->mask_a;  in ssl3_choose_cipher()
3811         emask_k = cert->export_mask_k;  in ssl3_choose_cipher()
3812         emask_a = cert->export_mask_a;  in ssl3_choose_cipher()
3867                && (s->cert->pkeys[SSL_PKEY_ECC].x509 != NULL)  in ssl3_choose_cipher()
3875                && ((s->cert->pkeys[SSL_PKEY_ECC].x509->cert_info != NULL)  in ssl3_choose_cipher()
3876                    && (s->cert->pkeys[SSL_PKEY_ECC].x509->cert_info->key !=  in ssl3_choose_cipher()
3878                    && (s->cert->pkeys[SSL_PKEY_ECC].x509->cert_info->  in ssl3_choose_cipher()
3880                    && (s->cert->pkeys[SSL_PKEY_ECC].x509->cert_info->  in ssl3_choose_cipher()
3884                      (s->cert->pkeys[SSL_PKEY_ECC].x509->cert_info->  in ssl3_choose_cipher()
3888                      (s->cert->pkeys[SSL_PKEY_ECC].x509->cert_info->  in ssl3_choose_cipher()
3900             if ((s->cert->pkeys[SSL_PKEY_ECC].privatekey->pkey.ec != NULL)  in ssl3_choose_cipher()
3901                 && (s->cert->pkeys[SSL_PKEY_ECC].privatekey->pkey.ec->group !=  in ssl3_choose_cipher()
3903                 && (s->cert->pkeys[SSL_PKEY_ECC].privatekey->pkey.ec->  in ssl3_choose_cipher()
3907                  (s->cert->pkeys[SSL_PKEY_ECC].privatekey->pkey.ec->  in ssl3_choose_cipher()
3920                     (s->cert->pkeys[SSL_PKEY_ECC].privatekey->pkey.ec->  in ssl3_choose_cipher()
3940                && (s->cert->pkeys[SSL_PKEY_ECC].x509 != NULL)  in ssl3_choose_cipher()
3948             if ((s->cert->pkeys[SSL_PKEY_ECC].privatekey->pkey.ec != NULL)  in ssl3_choose_cipher()
3949                 && (s->cert->pkeys[SSL_PKEY_ECC].privatekey->pkey.ec->group !=  in ssl3_choose_cipher()
3953                     EC_GROUP_get_curve_name(s->cert->  in ssl3_choose_cipher()
3957                     && (s->cert->pkeys[SSL_PKEY_ECC].privatekey->pkey.  in ssl3_choose_cipher()
3961                         (s->cert->pkeys[SSL_PKEY_ECC].privatekey->pkey.  in ssl3_choose_cipher()
3967                             (s->cert->pkeys[SSL_PKEY_ECC].privatekey->  in ssl3_choose_cipher()
4002                && (s->cert->ecdh_tmp != NULL)  in ssl3_choose_cipher()
4010             if (s->cert->ecdh_tmp->group != NULL) {  in ssl3_choose_cipher()
4011                 ec_nid = EC_GROUP_get_curve_name(s->cert->ecdh_tmp->group);  in ssl3_choose_cipher()
4013                     && (s->cert->ecdh_tmp->group->meth != NULL)  in ssl3_choose_cipher()
4016                         (s->cert->ecdh_tmp->group->meth) ==  in ssl3_choose_cipher()
4022                             (s->cert->ecdh_tmp->group->meth) ==  in ssl3_choose_cipher()