Home
last modified time | relevance | path

Searched refs:cert (Results 1 – 25 of 258) sorted by relevance

1234567891011

/NextBSD/contrib/wpa/src/tls/
HDx509v3.c45 void x509_certificate_free(struct x509_certificate *cert) in x509_certificate_free() argument
47 if (cert == NULL) in x509_certificate_free()
49 if (cert->next) { in x509_certificate_free()
52 cert, cert->next); in x509_certificate_free()
54 x509_free_name(&cert->issuer); in x509_certificate_free()
55 x509_free_name(&cert->subject); in x509_certificate_free()
56 os_free(cert->public_key); in x509_certificate_free()
57 os_free(cert->sign_value); in x509_certificate_free()
58 os_free(cert); in x509_certificate_free()
66 void x509_certificate_chain_free(struct x509_certificate *cert) in x509_certificate_chain_free() argument
[all …]
HDtlsv1_cred.c32 x509_certificate_chain_free(cred->cert); in tlsv1_cred_free()
43 struct x509_certificate *cert, *p; in tlsv1_add_cert_der() local
46 cert = x509_certificate_parse(buf, len); in tlsv1_add_cert_der()
47 if (cert == NULL) { in tlsv1_add_cert_der()
56 if (p && x509_name_compare(&cert->subject, &p->issuer) == 0) { in tlsv1_add_cert_der()
61 p->next = cert; in tlsv1_add_cert_der()
64 cert->next = *chain; in tlsv1_add_cert_der()
65 *chain = cert; in tlsv1_add_cert_der()
68 x509_name_string(&cert->subject, name, sizeof(name)); in tlsv1_add_cert_der()
153 const char *cert, const u8 *cert_blob, in tlsv1_set_cert_chain() argument
[all …]
HDtlsv1_server_write.c27 struct x509_certificate *cert; in tls_server_cert_chain_der_len() local
29 cert = conn->cred->cert; in tls_server_cert_chain_der_len()
30 while (cert) { in tls_server_cert_chain_der_len()
31 len += 3 + cert->cert_len; in tls_server_cert_chain_der_len()
32 if (x509_certificate_self_signed(cert)) in tls_server_cert_chain_der_len()
34 cert = x509_certificate_get_subject(conn->cred->trusted_certs, in tls_server_cert_chain_der_len()
35 &cert->issuer); in tls_server_cert_chain_der_len()
160 struct x509_certificate *cert; in tls_write_server_certificate() local
189 cert = conn->cred->cert; in tls_write_server_certificate()
190 while (cert) { in tls_write_server_certificate()
[all …]
HDtlsv1_client_write.c27 struct x509_certificate *cert; in tls_client_cert_chain_der_len() local
32 cert = conn->cred->cert; in tls_client_cert_chain_der_len()
33 while (cert) { in tls_client_cert_chain_der_len()
34 len += 3 + cert->cert_len; in tls_client_cert_chain_der_len()
35 if (x509_certificate_self_signed(cert)) in tls_client_cert_chain_der_len()
37 cert = x509_certificate_get_subject(conn->cred->trusted_certs, in tls_client_cert_chain_der_len()
38 &cert->issuer); in tls_client_cert_chain_der_len()
134 struct x509_certificate *cert; in tls_write_client_certificate() local
155 cert = conn->cred ? conn->cred->cert : NULL; in tls_write_client_certificate()
156 while (cert) { in tls_write_client_certificate()
[all …]
/NextBSD/crypto/heimdal/lib/hx509/
HDtest_ca.in66 cert:FILE:cert-ee.pem \
76 cert:FILE:cert-ee.pem \
84 FILE:cert-ee.pem || exit 1
88 cert:FILE:cert-ee.pem \
97 FILE:cert-ee.pem || exit 1
101 cert:FILE:cert-ee.pem \
153 cert:FILE:cert-ee.pem \
159 cert:FILE:cert-ee.pem \
165 cert:FILE:cert-ee.pem \
179 cert:FILE:cert-ee.pem \
[all …]
HDtest_chain.in52 cert:FILE:$srcdir/data/test.crt \
59 cert:FILE:$srcdir/data/test.crt \
65 cert:FILE:$srcdir/data/test.crt \
70 cert:FILE:$srcdir/data/sub-cert.crt \
76 cert:FILE:$srcdir/data/sub-cert.crt \
83 cert:FILE:$srcdir/data/sub-cert.crt \
88 cert:FILE:$srcdir/data/sub-cert.crt \
95 cert:FILE:$srcdir/data/sub-cert.crt \
102 cert:FILE:$srcdir/data/sub-cert.crt \
109 cert:FILE:$srcdir/data/sub-cert.crt \
[all …]
HDcert.c191 _hx509_get_cert(hx509_cert cert) in _hx509_get_cert() argument
193 return cert->data; in _hx509_get_cert()
220 hx509_cert_init(hx509_context context, const Certificate *c, hx509_cert *cert) in hx509_cert_init() argument
224 *cert = malloc(sizeof(**cert)); in hx509_cert_init()
225 if (*cert == NULL) in hx509_cert_init()
227 (*cert)->ref = 1; in hx509_cert_init()
228 (*cert)->friendlyname = NULL; in hx509_cert_init()
229 (*cert)->attrs.len = 0; in hx509_cert_init()
230 (*cert)->attrs.val = NULL; in hx509_cert_init()
231 (*cert)->private_key = NULL; in hx509_cert_init()
[all …]
HDtest_cert.in61 FILE:${srcdir}/data/test.crt PEM-FILE:cert-pem.tmp || exit 1
63 ${hxtool} certificate-copy PEM-FILE:cert-pem.tmp DER-FILE:cert-der.tmp || exit 1
64 ${hxtool} certificate-copy DER-FILE:cert-der.tmp PEM-FILE:cert-pem2.tmp || exit 1
66 cmp cert-pem.tmp cert-pem2.tmp || exit 1
71 cert:FILE:$srcdir/data/n0ll.pem \
76 cert:FILE:$srcdir/data/n0ll.pem \
81 cert:FILE:$srcdir/data/win-u16-in-printablestring.der \
HDcms.c172 fill_CMSIdentifier(const hx509_cert cert, in fill_CMSIdentifier() argument
181 ret = _hx509_find_extension_subject_key_id(_hx509_get_cert(cert), in fill_CMSIdentifier()
190 ret = hx509_cert_get_issuer(cert, &name); in fill_CMSIdentifier()
198 ret = hx509_cert_get_serialnumber(cert, &id->u.issuerAndSerialNumber.serialNumber); in fill_CMSIdentifier()
267 hx509_cert cert; in find_CMSIdentifier() local
300 ret = hx509_certs_find(context, certs, &q, &cert); in find_CMSIdentifier()
319 *signer_cert = cert; in find_CMSIdentifier()
359 hx509_cert cert; in hx509_cms_unenvelope() local
408 cert = NULL; in hx509_cms_unenvelope()
417 time_now, &cert, in hx509_cms_unenvelope()
[all …]
HDpeer.c96 if (peer->cert) in hx509_peer_info_free()
97 hx509_cert_free(peer->cert); in hx509_peer_info_free()
116 hx509_cert cert) in hx509_peer_info_set_cert() argument
118 if (peer->cert) in hx509_peer_info_set_cert()
119 hx509_cert_free(peer->cert); in hx509_peer_info_set_cert()
120 peer->cert = hx509_cert_ref(cert); in hx509_peer_info_set_cert()
/NextBSD/crypto/openssl/util/
HDmkcerts.sh19 echo creating $CAbits bit PCA cert request
45 -CAcreateserial -CAserial pca-cert.srl \
46 -in pca-req.pem -out pca-cert.pem
49 echo problems self signing PCA cert
55 echo creating $CAbits bit CA cert request
81 -CAcreateserial -CAserial pca-cert.srl \
82 -CA pca-cert.pem -CAkey pca-key.pem \
83 -in ca-req.pem -out ca-cert.pem
86 echo problems signing CA cert
92 echo creating 512 bit server cert request
[all …]
/NextBSD/contrib/ldns/
HDdane.c77 ldns_dane_cert2rdf(ldns_rdf** rdf, X509* cert, in ldns_dane_cert2rdf() argument
90 assert(cert != NULL); in ldns_dane_cert2rdf()
95 len = (size_t)i2d_X509(cert, &buf); in ldns_dane_cert2rdf()
101 xpubkey = X509_get_X509_PUBKEY(cert); in ldns_dane_cert2rdf()
166 ldns_dane_pkix_validate(X509* cert, STACK_OF(X509)* extra_certs, in ldns_dane_pkix_validate() argument
181 cert, extra_certs) != 1) { in ldns_dane_pkix_validate()
200 ldns_dane_pkix_validate_and_get_chain(STACK_OF(X509)** chain, X509* cert, in ldns_dane_pkix_validate_and_get_chain() argument
219 cert, extra_certs) != 1) { in ldns_dane_pkix_validate_and_get_chain()
249 X509* cert, STACK_OF(X509)* extra_certs) in ldns_dane_pkix_get_chain() argument
265 cert, extra_certs) != 1) { in ldns_dane_pkix_get_chain()
[all …]
/NextBSD/crypto/openssh/regress/
HDcert-hostkey.sh6 rm -f $OBJ/known_hosts-cert $OBJ/host_ca_key* $OBJ/cert_host_key*
18 ) > $OBJ/known_hosts-cert
57 echo HostCertificate $OBJ/cert_host_key_${ktype}-cert.pub
61 ${SSH} -2 -oUserKnownHostsFile=$OBJ/known_hosts-cert \
62 -oGlobalKnownHostsFile=$OBJ/known_hosts-cert \
79 ) > $OBJ/known_hosts-cert
86 echo HostCertificate $OBJ/cert_host_key_${ktype}-cert.pub
90 ${SSH} -2 -oUserKnownHostsFile=$OBJ/known_hosts-cert \
91 -oGlobalKnownHostsFile=$OBJ/known_hosts-cert \
107 ) > $OBJ/known_hosts-cert
[all …]
/NextBSD/crypto/openssh/
HDkey.c67 struct KeyCert *cert; in cert_new() local
69 cert = xcalloc(1, sizeof(*cert)); in cert_new()
70 buffer_init(&cert->certblob); in cert_new()
71 buffer_init(&cert->critical); in cert_new()
72 buffer_init(&cert->extensions); in cert_new()
73 cert->key_id = NULL; in cert_new()
74 cert->principals = NULL; in cert_new()
75 cert->signature_key = NULL; in cert_new()
76 return cert; in cert_new()
91 k->cert = NULL; in key_new()
[all …]
HDssh-add.c102 Key *public = NULL, *cert = NULL; in delete_file() local
124 if ((cert = key_load_public(certpath, &comment)) == NULL) in delete_file()
126 if (!key_equal_public(cert, public)) in delete_file()
130 if (ssh_remove_identity(ac, cert)) { in delete_file()
138 if (cert != NULL) in delete_file()
139 key_free(cert); in delete_file()
170 Key *private, *cert; in add_file() local
254 if ((cert = key_load_public(certpath, NULL)) == NULL) in add_file()
257 if (!key_equal_public(cert, private)) { in add_file()
260 key_free(cert); in add_file()
[all …]
HDauth2-pubkey.c215 fp = key_fingerprint(key->cert->signature_key, in pubkey_auth_info()
218 key_type(key), key->cert->key_id, in pubkey_auth_info()
219 (unsigned long long)key->cert->serial, in pubkey_auth_info()
220 key_type(key->cert->signature_key), fp, in pubkey_auth_info()
233 match_principals_option(const char *principal_list, struct KeyCert *cert) in match_principals_option() argument
240 for (i = 0; i < cert->nprincipals; i++) { in match_principals_option()
241 if ((result = match_list(cert->principals[i], in match_principals_option()
253 match_principals_file(char *file, struct passwd *pw, struct KeyCert *cert) in match_principals_file() argument
291 for (i = 0; i < cert->nprincipals; i++) { in match_principals_file()
292 if (strcmp(cp, cert->principals[i]) == 0) { in match_principals_file()
[all …]
/NextBSD/crypto/openssl/ssl/
HDssl_cert.c185 void ssl_cert_set_default_md(CERT *cert) in ssl_cert_set_default_md() argument
189 cert->pkeys[SSL_PKEY_DSA_SIGN].digest = EVP_sha1(); in ssl_cert_set_default_md()
192 cert->pkeys[SSL_PKEY_RSA_SIGN].digest = EVP_sha1(); in ssl_cert_set_default_md()
193 cert->pkeys[SSL_PKEY_RSA_ENC].digest = EVP_sha1(); in ssl_cert_set_default_md()
196 cert->pkeys[SSL_PKEY_ECC].digest = EVP_sha1(); in ssl_cert_set_default_md()
217 CERT *ssl_cert_dup(CERT *cert) in ssl_cert_dup() argument
231 ret->key = &ret->pkeys[cert->key - &cert->pkeys[0]]; in ssl_cert_dup()
237 ret->valid = cert->valid; in ssl_cert_dup()
238 ret->mask_k = cert->mask_k; in ssl_cert_dup()
239 ret->mask_a = cert->mask_a; in ssl_cert_dup()
[all …]
HDs3_lib.c3139 if (!ssl_cert_inst(&s->cert)) { in ssl3_ctrl()
3167 if ((s->cert != NULL) && (s->cert->rsa_tmp == NULL) && in ssl3_ctrl()
3168 ((s->cert->pkeys[SSL_PKEY_RSA_ENC].privatekey == NULL) || in ssl3_ctrl()
3169 (EVP_PKEY_size(s->cert->pkeys[SSL_PKEY_RSA_ENC].privatekey) > in ssl3_ctrl()
3184 if (s->cert->rsa_tmp != NULL) in ssl3_ctrl()
3185 RSA_free(s->cert->rsa_tmp); in ssl3_ctrl()
3186 s->cert->rsa_tmp = rsa; in ssl3_ctrl()
3216 if (s->cert->dh_tmp != NULL) in ssl3_ctrl()
3217 DH_free(s->cert->dh_tmp); in ssl3_ctrl()
3218 s->cert->dh_tmp = dh; in ssl3_ctrl()
[all …]
/NextBSD/crypto/openssl/crypto/x509v3/
HDv3conf.c72 X509 *cert; in main() local
99 cert = PEM_read_X509(inf, NULL, NULL); in main()
100 if (!cert) { in main()
106 sk_pop_free(cert->cert_info->extensions, X509_EXTENSION_free); in main()
107 cert->cert_info->extensions = NULL; in main()
109 if (!X509V3_EXT_add_conf(conf, NULL, "test_section", cert)) { in main()
115 count = X509_get_ext_count(cert); in main()
118 ext = X509_get_ext(cert, i); in main()
/NextBSD/contrib/wpa/src/crypto/
HDtls_openssl.c197 const CERT_CONTEXT *cert; member
320 if (priv->cert) in cryptoapi_free_data()
321 CertFreeCertificateContext(priv->cert); in cryptoapi_free_data()
383 X509 *cert = NULL; in tls_cryptoapi_cert() local
403 priv->cert = cryptoapi_find_cert(name, CERT_SYSTEM_STORE_CURRENT_USER); in tls_cryptoapi_cert()
404 if (priv->cert == NULL) { in tls_cryptoapi_cert()
405 priv->cert = cryptoapi_find_cert( in tls_cryptoapi_cert()
408 if (priv->cert == NULL) { in tls_cryptoapi_cert()
414 cert = d2i_X509(NULL, in tls_cryptoapi_cert()
415 (const unsigned char **) &priv->cert->pbCertEncoded, in tls_cryptoapi_cert()
[all …]
/NextBSD/crypto/openssl/crypto/cms/
HDcms_lib.c447 int CMS_add0_cert(CMS_ContentInfo *cms, X509 *cert) in CMS_add0_cert() argument
458 if (!X509_cmp(cch->d.certificate, cert)) { in CMS_add0_cert()
469 cch->d.certificate = cert; in CMS_add0_cert()
473 int CMS_add1_cert(CMS_ContentInfo *cms, X509 *cert) in CMS_add1_cert() argument
476 r = CMS_add0_cert(cms, cert); in CMS_add1_cert()
478 CRYPTO_add(&cert->references, 1, CRYPTO_LOCK_X509); in CMS_add1_cert()
597 int cms_ias_cert_cmp(CMS_IssuerAndSerialNumber *ias, X509 *cert) in cms_ias_cert_cmp() argument
600 ret = X509_NAME_cmp(ias->issuer, X509_get_issuer_name(cert)); in cms_ias_cert_cmp()
603 return ASN1_INTEGER_cmp(ias->serialNumber, X509_get_serialNumber(cert)); in cms_ias_cert_cmp()
606 int cms_keyid_cert_cmp(ASN1_OCTET_STRING *keyid, X509 *cert) in cms_keyid_cert_cmp() argument
[all …]
/NextBSD/contrib/wpa/src/utils/
HDhttp_curl.c45 int (*cert_cb)(void *ctx, struct http_cert *cert);
168 static void debug_dump_cert(const char *title, X509 *cert) in debug_dump_cert() argument
178 X509_print_ex(out, cert, XN_FLAG_COMPAT, X509_FLAG_COMPAT); in debug_dump_cert()
193 static void add_alt_name_othername(struct http_ctx *ctx, struct http_cert *cert, in add_alt_name_othername() argument
201 on = os_realloc_array(cert->othername, cert->num_othername + 1, in add_alt_name_othername()
205 cert->othername = on; in add_alt_name_othername()
206 on = &on[cert->num_othername]; in add_alt_name_othername()
221 cert->num_othername++; in add_alt_name_othername()
225 static void add_alt_name_dns(struct http_ctx *ctx, struct http_cert *cert, in add_alt_name_dns() argument
235 n = os_realloc_array(cert->dnsname, cert->num_dnsname + 1, in add_alt_name_dns()
[all …]
/NextBSD/crypto/openssl/engines/
HDe_capi.c1198 CRYPT_KEY_PROV_INFO *capi_get_prov_info(CAPI_CTX * ctx, PCCERT_CONTEXT cert) in capi_get_prov_info() argument
1204 (cert, CERT_KEY_PROV_INFO_PROP_ID, NULL, &len)) in capi_get_prov_info()
1212 (cert, CERT_KEY_PROV_INFO_PROP_ID, pinfo, &len)) { in capi_get_prov_info()
1247 char *capi_cert_get_fname(CAPI_CTX * ctx, PCCERT_CONTEXT cert) in capi_cert_get_fname() argument
1254 (cert, CERT_FRIENDLY_NAME_PROP_ID, NULL, &dlen)) in capi_cert_get_fname()
1258 (cert, CERT_FRIENDLY_NAME_PROP_ID, wfname, &dlen)) { in capi_cert_get_fname()
1270 void capi_dump_cert(CAPI_CTX * ctx, BIO *out, PCCERT_CONTEXT cert) in capi_dump_cert() argument
1277 fname = capi_cert_get_fname(ctx, cert); in capi_dump_cert()
1285 p = cert->pbCertEncoded; in capi_dump_cert()
1286 x = d2i_X509(NULL, &p, cert->cbCertEncoded); in capi_dump_cert()
[all …]
/NextBSD/crypto/openssl/crypto/pkcs12/
HDp12_crt.c80 PKCS12 *PKCS12_create(char *pass, char *name, EVP_PKEY *pkey, X509 *cert, in PKCS12_create() argument
112 if (!pkey && !cert && !ca) { in PKCS12_create()
117 if (pkey && cert) { in PKCS12_create()
118 if (!X509_check_private_key(cert, pkey)) in PKCS12_create()
120 X509_digest(cert, EVP_sha1(), keyid, &keyidlen); in PKCS12_create()
123 if (cert) { in PKCS12_create()
124 bag = PKCS12_add_cert(&bags, cert); in PKCS12_create()
193 PKCS12_SAFEBAG *PKCS12_add_cert(STACK_OF(PKCS12_SAFEBAG) **pbags, X509 *cert) in PKCS12_add_cert() argument
202 if (!(bag = PKCS12_x5092certbag(cert))) in PKCS12_add_cert()
209 name = (char *)X509_alias_get0(cert, &namelen); in PKCS12_add_cert()
[all …]
HDp12_kiss.c82 int PKCS12_parse(PKCS12 *p12, const char *pass, EVP_PKEY **pkey, X509 **cert, in PKCS12_parse() argument
97 if (cert) in PKCS12_parse()
98 *cert = NULL; in PKCS12_parse()
137 if (pkey && *pkey && cert && !*cert) { in PKCS12_parse()
140 *cert = x; in PKCS12_parse()
168 if (cert && *cert) in PKCS12_parse()
169 X509_free(*cert); in PKCS12_parse()

1234567891011