| /third_party/libwebsockets/lib/tls/mbedtls/ |
| D | mbedtls-x509.c | 102 lws_mbedtls_x509_authority akid; in lws_tls_mbedtls_cert_info() local
198 memset(&akid, 0, sizeof(akid)); in lws_tls_mbedtls_cert_info()
201 lws_x509_get_crt_ext(x509, &skid, &akid); in lws_tls_mbedtls_cert_info()
202 if (akid.keyIdentifier.MBEDTLS_PRIVATE(tag) != MBEDTLS_ASN1_OCTET_STRING) in lws_tls_mbedtls_cert_info()
204 buf->ns.len = (int)akid.keyIdentifier.MBEDTLS_PRIVATE(len); in lws_tls_mbedtls_cert_info()
205 if (!akid.keyIdentifier.MBEDTLS_PRIVATE(p) || in lws_tls_mbedtls_cert_info()
208 memcpy(buf->ns.name, akid.keyIdentifier.MBEDTLS_PRIVATE(p), (size_t)buf->ns.len); in lws_tls_mbedtls_cert_info()
214 memset(&akid, 0, sizeof(akid)); in lws_tls_mbedtls_cert_info()
217 lws_x509_get_crt_ext(x509, &skid, &akid); in lws_tls_mbedtls_cert_info()
219 ip = &akid.authorityCertIssuer; in lws_tls_mbedtls_cert_info()
[all …]
|
| D | mbedtls-extensions.c | 371 x509_get_akid(uint8_t **p, uint8_t *end, lws_mbedtls_x509_authority *akid) in x509_get_akid() argument
383 akid->keyIdentifier.MBEDTLS_PRIVATE(len) = len; in x509_get_akid()
384 akid->keyIdentifier.MBEDTLS_PRIVATE(p) = *p; in x509_get_akid()
385 akid->keyIdentifier.MBEDTLS_PRIVATE(tag) = MBEDTLS_ASN1_OCTET_STRING; in x509_get_akid()
408 &akid->authorityCertIssuer); in x509_get_akid()
419 akid->authorityCertSerialNumber.MBEDTLS_PRIVATE(len) = len; in x509_get_akid()
420 akid->authorityCertSerialNumber.MBEDTLS_PRIVATE(p) = *p; in x509_get_akid()
421 akid->authorityCertSerialNumber.MBEDTLS_PRIVATE(tag) = MBEDTLS_ASN1_OCTET_STRING; in x509_get_akid()
435 lws_mbedtls_x509_authority *akid) in lws_x509_get_crt_ext() argument
501 r = x509_get_akid(&p, end_ext_octet, akid); in lws_x509_get_crt_ext()
|
| D | private-lib-tls-mbedtls.h | 59 lws_mbedtls_x509_authority *akid);
|
| D | mbedtls-client.c | 47 if (ssl->kid_chain.count == LWS_ARRAY_SIZE(ssl->kid_chain.akid)) in lws_mbedtls_client_verify_callback()
60 &ssl->kid_chain.akid[ssl->kid_chain.count]); in lws_mbedtls_client_verify_callback()
|
| /third_party/libwebsockets/lib/tls/openssl/ |
| D | openssl-x509.c | 85 AUTHORITY_KEYID *akid; in lws_tls_openssl_cert_info() local
211 akid = (AUTHORITY_KEYID *)X509V3_EXT_d2i(ext); in lws_tls_openssl_cert_info()
213 akid = (AUTHORITY_KEYID *)wolfSSL_X509V3_EXT_d2i(ext); in lws_tls_openssl_cert_info()
215 if (!akid || !akid->keyid) in lws_tls_openssl_cert_info()
217 val = akid->keyid; in lws_tls_openssl_cert_info()
227 AUTHORITY_KEYID_free(akid); in lws_tls_openssl_cert_info()
240 akid = (AUTHORITY_KEYID *)X509V3_EXT_d2i(ext); in lws_tls_openssl_cert_info()
242 akid = (AUTHORITY_KEYID *)wolfSSL_X509V3_EXT_d2i(ext); in lws_tls_openssl_cert_info()
244 if (!akid || !akid->issuer) in lws_tls_openssl_cert_info()
253 cv = i2v_GENERAL_NAMES((X509V3_EXT_METHOD*)method, akid->issuer, NULL); in lws_tls_openssl_cert_info()
[all …]
|
| D | openssl-client.c | 161 LWS_ARRAY_SIZE(wsi->tls.kid_chain.akid); n++) { in OpenSSL_client_verify_callback()
175 &wsi->tls.kid_chain.akid[ in OpenSSL_client_verify_callback()
|
| /third_party/openssl/crypto/x509v3/ |
| D | v3_purp.c | 514 x->akid = X509_get_ext_d2i(x, NID_authority_key_identifier, &i, NULL); in x509v3_cache_extensions()
515 if (x->akid == NULL && i != -1) in x509v3_cache_extensions()
520 if (X509_check_akid(x, x->akid) == X509_V_OK /* SKID matches AKID */ in x509v3_cache_extensions()
869 if (subject->akid) { in x509_likely_issued()
870 int ret = X509_check_akid(issuer, subject->akid); in x509_likely_issued()
879 int X509_check_akid(X509 *issuer, AUTHORITY_KEYID *akid) in X509_check_akid() argument
882 if (!akid) in X509_check_akid()
886 if (akid->keyid && issuer->skid && in X509_check_akid()
887 ASN1_OCTET_STRING_cmp(akid->keyid, issuer->skid)) in X509_check_akid()
890 if (akid->serial && in X509_check_akid()
[all …]
|
| /third_party/openssl/test/certs/ |
| D | mkcert.sh | 104 local akid="authorityKeyIdentifier = keyid"
106 exts=$(printf "%s\n%s\n%s\n" "$skid" "$akid" "basicConstraints = critical,CA:true")
136 local akid="authorityKeyIdentifier = keyid"
138 exts=$(printf "%s\n%s\n%s\n" "$skid" "$akid" "basicConstraints = critical,CA:true")
158 local akid="authorityKeyIdentifier = keyid"
160 exts=$(printf "%s\n%s\n%s\n" "$skid" "$akid")
|
| /third_party/libwebsockets/lib/tls/ |
| D | tls-jit-trust.c | 133 &ch->akid[n + 1])) in lws_tls_jit_trust_sort_kids()
147 &ch->akid[m])) { in lws_tls_jit_trust_sort_kids()
157 t = ch->akid[m]; in lws_tls_jit_trust_sort_kids()
158 ch->akid[m] = ch->akid[n]; in lws_tls_jit_trust_sort_kids()
159 ch->akid[n] = t; in lws_tls_jit_trust_sort_kids()
178 lwsl_hexdump_info(ch->akid[n].kid, ch->akid[n].kid_len); in lws_tls_jit_trust_sort_kids()
226 ch->akid[n].kid, (size_t)ch->akid[n].kid_len, in lws_tls_jit_trust_sort_kids()
|
| D | private-jit-trust.h | 66 lws_tls_kid_t akid[4]; member
|
| /third_party/openssl/crypto/x509/ |
| D | x_x509.c | 47 AUTHORITY_KEYID_free(ret->akid); in x509_cb()
68 ret->akid = NULL; in x509_cb()
86 AUTHORITY_KEYID_free(ret->akid); in x509_cb()
|
| D | x_crl.c | 166 AUTHORITY_KEYID_free(crl->akid); in crl_cb()
175 crl->akid = NULL; in crl_cb()
200 crl->akid = X509_CRL_get_ext_d2i(crl, in crl_cb()
203 if (crl->akid == NULL && i != -1) in crl_cb()
262 AUTHORITY_KEYID_free(crl->akid); in crl_cb()
|
| D | x509_vfy.c | 1254 if (X509_check_akid(crl_issuer, crl->akid) == X509_V_OK) { in crl_akid_check()
1266 if (X509_check_akid(crl_issuer, crl->akid) == X509_V_OK) { in crl_akid_check()
1286 if (X509_check_akid(crl_issuer, crl->akid) == X509_V_OK) { in crl_akid_check()
|
| /third_party/openssl/include/crypto/ |
| D | x509.h | 99 AUTHORITY_KEYID *akid; member
175 AUTHORITY_KEYID *akid; member
|
| /third_party/openssl/include/openssl/ |
| D | x509v3.h | 655 int X509_check_akid(X509 *issuer, AUTHORITY_KEYID *akid);
|
| /third_party/openssl/crypto/err/ |
| D | openssl.txt | 3027 X509_R_AKID_MISMATCH:110:akid mismatch
|