Lines Matching refs:cert
415 "GnuTLS: Failed to read CA cert '%s' in DER format (%s) - try in PEM format",
423 "Failed to read CA cert '%s' in PEM format: %s",
439 "Failed to parse CA cert in DER format: %s",
445 "Failed to parse CA cert in PEM format: %s",
486 wpa_printf(MSG_DEBUG, "Failed to read client cert/key "
500 "cert/key in PEM format: %s",
526 gnutls_datum_t cert, key;
528 cert.data = (unsigned char *) params->client_cert_blob;
529 cert.size = params->client_cert_blob_len;
535 conn->xcred, &cert, &key, GNUTLS_X509_FMT_DER,
540 conn->xcred, &cert, &key, GNUTLS_X509_FMT_DER);
543 wpa_printf(MSG_DEBUG, "Failed to read client cert/key "
547 conn->xcred, &cert, &key, GNUTLS_X509_FMT_PEM,
552 conn->xcred, &cert, &key, GNUTLS_X509_FMT_PEM);
556 "cert/key in PEM format: %s",
678 wpa_printf(MSG_DEBUG, "Failed to read CA cert '%s' "
685 wpa_printf(MSG_DEBUG, "Failed to read CA cert "
712 wpa_printf(MSG_DEBUG, "Failed to read client cert/key "
719 "cert/key in PEM format: %s",
833 const gnutls_datum_t *cert, int depth,
849 if (cert) {
850 cert_buf = wpabuf_alloc_copy(cert->data, cert->size);
851 ev.cert_fail.cert = cert_buf;
859 static int server_eku_purpose(gnutls_x509_crt_t cert)
868 res = gnutls_x509_crt_get_key_purpose_oid(cert, i, oid,
965 wpa_printf(MSG_DEBUG, "GnuTLS: OCSP cert status: good");
968 "GnuTLS: OCSP cert status: revoked");
972 "GnuTLS: OCSP cert status: unknown");
999 gnutls_x509_crt_t cert;
1130 if (gnutls_x509_crt_init(&cert) < 0) {
1137 if (gnutls_x509_crt_import(cert, &certs[i],
1141 gnutls_x509_crt_deinit(cert);
1146 gnutls_x509_crt_get_dn(cert, NULL, &len);
1151 gnutls_x509_crt_get_dn(cert, buf, &len);
1153 wpa_printf(MSG_DEBUG, "TLS: Peer cert chain %d/%d: %s",
1169 ev.peer_cert.cert = cert_buf;
1189 cert, conn->suffix_match)) {
1198 gnutls_x509_crt_deinit(cert);
1206 cert, conn->domain_match,
1216 gnutls_x509_crt_deinit(cert);
1232 !server_eku_purpose(cert)) {
1240 gnutls_x509_crt_deinit(cert);
1248 (gnutls_x509_crt_get_expiration_time(cert) < now.sec ||
1249 gnutls_x509_crt_get_activation_time(cert) > now.sec)) {
1257 gnutls_x509_crt_deinit(cert);
1265 gnutls_x509_crt_deinit(cert);
