Lines Matching refs:issuer
371 /* Does subject name match issuer ? */
690 * This can be used to prune a set of possible issuer certificates
694 * 1. Check issuer_name(subject) == subject_name(issuer)
695 * 2. If akid(subject) exists check it matches issuer
696 * 3. If key_usage(issuer) exists check it supports certificate signing
701 int X509_check_issued(X509 *issuer, X509 *subject)
703 if(X509_NAME_cmp(X509_get_subject_name(issuer),
706 x509v3_cache_extensions(issuer);
711 int ret = X509_check_akid(issuer, subject->akid);
718 if(ku_reject(issuer, KU_DIGITAL_SIGNATURE))
721 else if(ku_reject(issuer, KU_KEY_CERT_SIGN))
726 int X509_check_akid(X509 *issuer, AUTHORITY_KEYID *akid)
733 if(akid->keyid && issuer->skid &&
734 ASN1_OCTET_STRING_cmp(akid->keyid, issuer->skid) )
738 ASN1_INTEGER_cmp(X509_get_serialNumber(issuer), akid->serial))
740 /* Check issuer name */
741 if(akid->issuer)
752 gens = akid->issuer;
762 if(nm && X509_NAME_cmp(nm, X509_get_issuer_name(issuer)))
