| /external/boringssl/src/crypto/x509/ |
| x_crl.c | 71 * Method to handle CRL access. In general a CRL could be very large (several
73 * multiple processes. This method allows general CRL operations to be
74 * redirected to more efficient callbacks: for example a CRL entry database.
81 int (*crl_init) (X509_CRL *crl);
82 int (*crl_free) (X509_CRL *crl);
83 int (*crl_lookup) (X509_CRL *crl, X509_REVOKED **ret,
85 int (*crl_verify) (X509_CRL *crl, EVP_PKEY *pk);
89 static void setup_idp(X509_CRL *crl, ISSUING_DIST_POINT *idp);
97 static int def_crl_verify(X509_CRL *crl, EVP_PKEY *r)
[all...] |
| x509cset.c | 68 if (x->crl->version == NULL) {
69 if ((x->crl->version = M_ASN1_INTEGER_new()) == NULL)
72 return (ASN1_INTEGER_set(x->crl->version, version));
77 if ((x == NULL) || (x->crl == NULL))
79 return (X509_NAME_set(&x->crl->issuer, name));
88 in = x->crl->lastUpdate;
92 M_ASN1_TIME_free(x->crl->lastUpdate);
93 x->crl->lastUpdate = in;
105 in = x->crl->nextUpdate;
109 M_ASN1_TIME_free(x->crl->nextUpdate)
[all...] |
| x_info.c | 79 ret->crl = NULL;
91 if (x->crl != NULL)
92 X509_CRL_free(x->crl);
|
| x509_ext.c | 67 return (X509v3_get_ext_count(x->crl->extensions));
72 return (X509v3_get_ext_by_NID(x->crl->extensions, nid, lastpos));
77 return (X509v3_get_ext_by_OBJ(x->crl->extensions, obj, lastpos));
82 return (X509v3_get_ext_by_critical(x->crl->extensions, crit, lastpos));
87 return (X509v3_get_ext(x->crl->extensions, loc));
92 return (X509v3_delete_ext(x->crl->extensions, loc));
97 return X509V3_get_d2i(x->crl->extensions, nid, crit, idx);
103 return X509V3_add1_i2d(&x->crl->extensions, nid, value, crit, flags);
108 return (X509v3_add_ext(&(x->crl->extensions), ex, loc) != NULL);
|
| x509_vfy.c | 77 /* CRL score values */
83 /* certificate is within CRL scope */
87 /* CRL times valid */
95 /* If this score or above CRL is probably valid */
99 /* CRL issuer is certificate issuer */
103 /* CRL issuer is on certificate path */
107 /* CRL issuer matches CRL AKID */
111 /* Have a delta CRL with valid times */
127 unsigned int *preasons, X509_CRL *crl, X509 *x)
886 X509_CRL *crl = NULL, *dcrl = NULL; local
1020 X509_CRL *crl, *best_crl = NULL; local
1481 X509_CRL *crl = NULL, *dcrl = NULL; local
1998 X509_CRL *crl = NULL; local
[all...] |
| pkcs7.c | 38 /* pkcs7_parse_header reads the non-certificate/non-CRL prefix of a PKCS#7
185 X509_CRL *crl; local
196 crl = d2i_X509_CRL(NULL, &inp, (long)CBS_len(&crl_data));
197 if (!crl) {
203 if (sk_X509_CRL_push(out_crls, crl) == 0) {
204 X509_CRL_free(crl);
268 * |cb| with a CBB to which certificate or CRL data can be written, and the
341 X509_CRL *crl = sk_X509_CRL_value(crls, i); local
343 int len = i2d_X509_CRL(crl, NULL);
347 i2d_X509_CRL(crl, &buf) < 0)
[all...] |
| x_all.c | 110 x->crl->enc.modified = 1;
111 return (ASN1_item_sign(ASN1_ITEM_rptr(X509_CRL_INFO), x->crl->sig_alg,
112 x->sig_alg, x->signature, x->crl, pkey, md));
117 x->crl->enc.modified = 1;
119 x->crl->sig_alg, x->sig_alg, x->signature,
120 x->crl, ctx);
158 X509_CRL *d2i_X509_CRL_fp(FILE *fp, X509_CRL **crl)
160 return ASN1_item_d2i_fp(ASN1_ITEM_rptr(X509_CRL), fp, crl);
163 int i2d_X509_CRL_fp(FILE *fp, X509_CRL *crl)
165 return ASN1_item_i2d_fp(ASN1_ITEM_rptr(X509_CRL), fp, crl);
[all...] |
| /libcore/luni/src/test/java/tests/security/cert/ |
| CRLTest.java | 27 import java.security.cert.CRL;
33 * Tests for <code>java.security.cert.CRL</code> fields and methods
47 * Test for <code>CRL(String type)</code> constructor<br>
51 CRL crl = new MyCRL(validValues[i]); local
52 assertEquals(validValues[i], crl.getType());
56 CRL crl = new MyCRL(invalidValues[i]); local
57 assertEquals(invalidValues[i], crl.getType());
61 CRL crl = new MyCRL(null) local
73 CRL crl = new MyCRL("TEST_TYPE"); local
82 CRL crl = new MyCRL(null); local
96 CRL crl = new MyCRL("TEST_TYPE"); local
104 CRL crl = new MyCRL("TEST_TYPE"); local
[all...] |
| X509CRLTest.java | 234 assertFalse("The CRL should not be equals to the object which is not "
257 TBTCRL crl = new TBTCRL() { local
263 assertEquals(new X500Principal("CN=Z"), crl.getIssuerX500Principal());
274 TBTCRL crl = new TBTCRL() { local
281 crl.getRevokedCertificate((X509Certificate) null);
291 crl.getRevokedCertificate(cert);
298 TBTCRL crl = new TBTCRL() { local
305 crl.getEncoded();
306 crl.getIssuerDN();
307 crl.getNextUpdate()
327 TBTCRL crl = new TBTCRL(); local
[all...] |
| X509CRLSelector2Test.java | 17 import java.security.cert.CRL;
69 CRL crl1 = new TestCRL(iss1);
70 CRL crl2 = new TestCRL(iss2);
73 assertTrue("The CRL should match the selection criteria.", selector
75 assertFalse("The CRL should not match the selection criteria.",
78 assertTrue("The CRL should match the selection criteria.", selector
100 assertTrue("The CRL should match the selection criteria.", selector
102 assertFalse("The CRL should not match the selection criteria.",
110 assertTrue("The CRL should match the selection criteria.", selector
141 assertTrue("Any CRL issuers should match in the case of null issuers."
243 CRL crl = new TestCRL(minCRL); local
265 TestCRL crl = new TestCRL(maxCRL); local
285 TestCRL crl = new TestCRL(new Date(200), new Date(300)); local
318 TestCRL crl = new TestCRL(); local
474 TestCRL crl = new TestCRL(iss1); local
[all...] |
| CertStoreSpiTest.java | 31 import java.security.cert.CRL;
81 public boolean match (CRL crl) {
89 public boolean match (Certificate crl) {
|
| X509CRL2Test.java | 111 MyX509CRL crl = new MyX509CRL(); local
112 assertNotNull(crl);
113 assertTrue(crl instanceof X509CRL);
|
| /libcore/ojluni/src/main/java/java/security/cert/ |
| CRLSelector.java | 29 * A selector that defines a set of criteria for selecting {@code CRL}s.
31 * which {@code CRL}s should be retrieved from a {@code CertStore}.
41 * @see CRL
51 * Decides whether a {@code CRL} should be selected.
53 * @param crl the {@code CRL} to be checked
54 * @return {@code true} if the {@code CRL} should be selected,
57 boolean match(CRL crl);
|
| /external/bouncycastle/bcprov/src/main/java/org/bouncycastle/jce/provider/ |
| PKIXCRLUtil.java | 26 // get complete CRL(s)
42 X509CRL crl = (X509CRL)it.next(); local
44 if (crl.getNextUpdate().after(validityDate))
50 if (crl.getThisUpdate().before(cert.getNotAfter()))
52 finalSet.add(crl);
57 finalSet.add(crl);
104 // "Exception searching in X.509 CRL store.", e);
120 "Exception searching in X.509 CRL store.", e);
|
| PrincipalUtils.java | 20 static X500Name getIssuerPrincipal(X509CRL crl)
22 return X500Name.getInstance(crl.getIssuerX500Principal().getEncoded());
|
| /cts/hostsidetests/devicepolicy/app/DeviceOwner/assets/ |
| ca.conf | 11 crl_dir = $dir/crl
23 crl = $dir/crl/ca.crl.pem
40 crl_dir = $dir/crl
52 crl = $dir/crl/ca.crl.pem
|
| /libcore/support/src/test/java/tests/resources/x509/ |
| create.sh | 82 # Create temporary CA for CRL generation
92 openssl x509 -in /tmp/cacert.pem -outform d > "$DIR/cert-crl-ca.der"
94 openssl ca -gencrl -crlhours 70 -keyfile /tmp/cakey.pem -cert /tmp/cacert.pem -out /tmp/crl-empty.pem -config "$DIR/default.cnf"
95 openssl crl -in /tmp/crl-empty.pem -outform d -out "$DIR/crl-empty.der"
99 openssl ca -gencrl -crlhours 70 -keyfile /tmp/cakey.pem -cert /tmp/cacert.pem -out /tmp/crl-rsa.pem -config "$DIR/default.cnf"
100 openssl crl -in /tmp/crl-rsa.pem -outform d -out "$DIR/crl-rsa.der
[all...] |
| /external/bouncycastle/bcprov/src/main/java/org/bouncycastle/jcajce/ |
| PKIXCRLStoreSelector.java | 4 import java.security.cert.CRL;
25 public class PKIXCRLStoreSelector<T extends CRL>
69 * If this is set to <code>true</code> the CRL reported contains the delta
70 * CRL indicator CRL extension.
75 * @param deltaCRLIndicator <code>true</code> if the delta CRL indicator
76 * extension must be in the CRL.
86 * Sets the maximum base CRL number. Setting to <code>null</code> disables
89 * This is only meaningful for delta CRLs. Complete CRLs must have a CRL
91 * corresponding CRL
187 X509CRL crl = (X509CRL)obj; local
[all...] |
| /libcore/ojluni/src/main/java/sun/security/provider/certpath/ |
| URICertStore.java | 63 * <code>CRL</code>s from a URI, for example, as specified in an X.509
66 * For CRLs, this implementation retrieves a single DER encoded CRL per URI.
67 * For Certificates, this implementation retrieves a single DER encoded CRL or
70 * This <code>CertStore</code> also implements Certificate/CRL caching.
75 * we open an URLConnection to download the Certificate(s)/CRL using an
78 * or the Certificate(s)/CRL cannot be parsed, we remember this result and
107 private X509CRL crl; field in class:URICertStore
131 * used for the CRL download. A timeout of zero is interpreted as
137 * Initialize the timeout length by getting the CRL timeout
143 new GetIntegerAction("com.sun.security.crl.timeout"))
[all...] |
| DistributionPointFetcher.java | 45 * class also implements CRL caching: see the class description for more
165 // should only be one CRL Issuer
189 X509CRL crl = getCRL(uriName); local
190 if (crl != null) {
191 possibleCRLs.add(crl);
204 for (X509CRL crl : possibleCRLs) {
209 if (selector.match(crl) && verifyCRL(certImpl, point, crl,
212 crls.add(crl);
215 // don't add the CRL
[all...] |
| /external/bouncycastle/bcprov/src/main/java/org/bouncycastle/jce/ |
| PrincipalUtil.java | 63 * return the issuer of the given CRL as an X509PrincipalObject.
66 X509CRL crl)
72 ASN1Primitive.fromByteArray(crl.getTBSCertList()));
|
| /external/bouncycastle/bcprov/src/main/java/org/bouncycastle/x509/ |
| X509CRLStoreSelector.java | 5 import java.security.cert.CRL;
98 X509CRL crl = (X509CRL)obj; local
102 byte[] bytes = crl
141 byte[] idp = crl
163 public boolean match(CRL crl)
165 return match((Object)crl);
169 * Returns if this selector must match CRLs with the delta CRL indicator
172 * @return Returns <code>true</code> if only CRLs with the delta CRL
181 * If this is set to <code>true</code> the CRL reported contains the delt
[all...] |
| /external/libjpeg-turbo/simd/ |
| jdcolext-altivec.c | 49 crl, crh, rl, rh, gl, gh, bl, bh, g0w, g1w, g2w, g3w; local
94 crl = (__vector signed short)VEC_UNPACKHU(cr);
96 crl = vec_sub(crl, pw_cj);
122 rl = vec_add(crl, crl);
128 rl = vec_add(rl, crl);
133 g0w = vec_mergeh(cbl, crl);
134 g1w = vec_mergel(cbl, crl);
148 gl = vec_sub(gl, crl);
[all...] |
| jdmrgext-altivec.c | 50 crl, crh, r_yl, r_yh, g_yl, g_yh, b_yl, b_yh, g_y0w, g_y1w, g_y2w, g_y3w, local
92 crl = (__vector signed short)VEC_UNPACKHU(cr);
94 crl = vec_sub(crl, pw_cj);
118 r_yl = vec_add(crl, crl);
124 r_yl = vec_add(r_yl, crl);
127 g_y0w = vec_mergeh(cbl, crl);
128 g_y1w = vec_mergel(cbl, crl);
144 g_yl = vec_sub(g_yl, crl);
[all...] |
| /external/ltp/testcases/commands/tpm-tools/tpmtoken/tpmtoken_import/ |
| tpmtoken_import_openssl.cnf | 39 crl_dir = $dir/crl # Where the issued crl are kept
45 crl = $dir/crl.pem # The current CRL
59 # Extensions to add to a CRL. Note: Netscape communicator chokes on V2 CRLs
60 # so this is commented out by default to leave a V1 CRL.
64 default_crl_days= 30 # how long before next CRL
201 #nsCaRevocationUrl = http://www.domain.dom/ca-crl.pem
254 # CRL extensions
[all...] |
