Lines Matching defs:x509
72 #include <openssl/x509.h>
199 static int certify(X509 **xret, char *infile,EVP_PKEY *pkey,X509 *x509,
206 static int certify_cert(X509 **xret, char *infile,EVP_PKEY *pkey,X509 *x509,
214 static int certify_spkac(X509 **xret, char *infile,EVP_PKEY *pkey,X509 *x509,
221 static void write_new_certificate(BIO *bp, X509 *x, int output_der, int notext);
222 static int do_body(X509 **xret, EVP_PKEY *pkey, X509 *x509, const EVP_MD *dgst,
229 static int do_revoke(X509 *x509, CA_DB *db, int ext, char *extval);
302 X509 *x509=NULL, *x509p = NULL;
303 X509 *x=NULL;
317 STACK_OF(X509) *cert_sk=NULL;
781 x509=load_cert(bio_err, certfile, FORMAT_PEM, NULL, e,
783 if (x509 == NULL)
786 if (!X509_check_private_key(x509,pkey))
792 if (!selfsign) x509p = x509;
1187 j=certify_spkac(&x,spkac_file,pkey,x509,dgst,sigopts,
1212 j=certify_cert(&x,ss_cert_file,pkey,x509,dgst,sigopts,
1420 if (!X509_CRL_set_issuer_name(crl, X509_get_subject_name(x509))) goto err;
1470 X509V3_set_ctx(&crlctx, x509, NULL, NULL, crl, 0);
1520 X509 *revcert;
1559 if (x509) X509_free(x509);
1573 static int certify(X509 **xret, char *infile, EVP_PKEY *pkey, X509 *x509,
1633 ok=do_body(xret,pkey,x509,dgst,sigopts, policy,db,serial,subj,chtype,
1644 static int certify_cert(X509 **xret, char *infile, EVP_PKEY *pkey, X509 *x509,
1652 X509 *req=NULL;
1689 ok=do_body(xret,pkey,x509,dgst,sigopts,policy,db,serial,subj,chtype,multirdn,email_dn,startdate,enddate,
1699 static int do_body(X509 **xret, EVP_PKEY *pkey, X509 *x509, const EVP_MD *dgst,
1712 X509 *ret=NULL;
1815 CAname=X509_NAME_dup(x509->cert_info->subject);
2023 /* Make it an X509 v3 certificate. */
2036 if (!X509_set_issuer_name(ret,X509_get_subject_name(x509)))
2076 X509V3_set_ctx(&ctx, x509, ret, req, NULL, 0);
2241 static void write_new_certificate(BIO *bp, X509 *x, int output_der, int notext)
2265 static int certify_spkac(X509 **xret, char *infile, EVP_PKEY *pkey, X509 *x509,
2308 * Now create a dummy X509 request structure. We don't actually
2309 * have an X509 request, but we have many of the components
2311 * put these components into the right X509 request structure
2312 * and we can use the same code as if you had a real X509 request.
2393 ok=do_body(xret,pkey,x509,dgst,sigopts,policy,db,serial,subj,chtype,
2410 static int do_revoke(X509 *x509, CA_DB *db, int type, char *value)
2420 row[DB_name]=X509_NAME_oneline(X509_get_subject_name(x509),NULL,0);
2421 bn = ASN1_INTEGER_to_BN(X509_get_serialNumber(x509),NULL);
2445 tm=X509_get_notAfter(x509);
2488 ok = do_revoke(x509,db, type, value);
