| /onnv/onnv-gate/usr/src/common/openssl/crypto/x509v3/ |
| v3conf.c | 72 X509 *cert; local
81 fprintf(stderr, "Usage: v3conf cert.pem [file.cnf]\n");
98 cert = PEM_read_X509(inf, NULL, NULL);
99 if(!cert) {
105 sk_pop_free(cert->cert_info->extensions, X509_EXTENSION_free);
106 cert->cert_info->extensions = NULL;
108 if(!X509V3_EXT_add_conf(conf, NULL, "test_section", cert)) {
114 count = X509_get_ext_count(cert);
117 ext = X509_get_ext(cert, i);
|
| v3prin.c | 69 X509 *cert; local
76 fprintf(stderr, "Usage v3prin cert.pem\n");
83 if(!(cert = PEM_read_X509(inf, NULL, NULL))) {
89 count = X509_get_ext_count(cert);
92 ext = X509_get_ext(cert, i);
|
| v3_akey.c | 106 * issuer: use the issuers cert issuer and serial number. The default is
123 X509 *cert; local
157 cert = ctx->issuer_cert;
161 i = X509_get_ext_by_NID(cert, NID_subject_key_identifier, -1);
162 if((i >= 0) && (ext = X509_get_ext(cert, i)))
173 isname = X509_NAME_dup(X509_get_issuer_name(cert));
174 serial = M_ASN1_INTEGER_dup(X509_get_serialNumber(cert));
|
| /onnv/onnv-gate/usr/src/common/net/wanboot/ |
| p12auxutl.c | 82 * Given one or more of user private key, user cert and/or other (CA) certs,
116 X509 *cert = NULL; local
136 cert = sk_X509_value(certs, i);
139 if ((bag = M_PKCS12_x5092certbag(cert)) == NULL) {
143 if (cert->aux != NULL && cert->aux->alias != NULL &&
144 cert->aux->alias->type == V_ASN1_UTF8STRING) {
145 str = utf82ascstr(cert->aux->alias);
160 if (cert->aux != NULL && cert->aux->keyid != NULL &
[all...] |
| p12access.c | 28 * sunw_p12_use_certfile - gets the user's cert from a pkcs12 file & pass
69 * cert - Certificate to pass in x509 format
73 * >0 - Success. Cert was successfully added.
76 sunw_use_x509cert(SSL_CTX *ctx, X509 *cert)
80 if (ctx == NULL || cert == NULL) {
85 if (SSL_CTX_use_certificate(ctx, cert) != 1) {
182 * passphrase to decrypt it. Pass the cert to SSL.
191 * >0 - Success. Cert was successfully added.
197 X509 *cert = NULL; local
209 &cert, NULL)
[all...] |
| p12auxpars.c | 91 * PKCS12_parse, any cert which is not the one selected is assumed to be
92 * a CA cert. In parse_pkcs12, certs which have matching private keys are
98 * return just a cert, just a private key, the stack of CA certs or any
115 * that a cert, a private key and a stack for CA certs.
119 * to one cert, one private key and a stack of CA certificates).
126 * cert somewhere in the input. This was done by moving the matching
156 * Parse and decrypt a PKCS#12 structure returning user key, user cert and/or
158 * or it should point to a valid STACK_OF(X509) structure. pkey and cert can
173 * cert - Points to locaiton which points to the client cert returne
[all...] |
| auxutil.c | 287 * cert - Points to locaiton where the address of the matching client cert
307 * - Once a cert is found, verify that the key actually matches by
308 * comparing the private key with the public key (in the cert).
311 * A pointer to cert and/or pkey which matches the name or keyid is stored
321 STACK_OF(X509) *cl, X509 **cert)
336 chkcerts = (cert != NULL || pkey != NULL) && cl != NULL;
381 if (cert != NULL)
382 *cert = sk_X509_delete(cl, c);
395 * Looking for pkey to match a cert? If so, assume tha
[all...] |
| /onnv/onnv-gate/usr/src/lib/libelfsign/common/ |
| elfcertlib.c | 72 * elfcertlib_verifycert - Verify the Cert with a Trust Anchor
75 * cert
83 * We then verify the given cert using the publickey of a TA.
84 * If the passed in cert is a TA or it has been verified already we
89 elfcertlib_verifycert(ELFsign_t ess, ELFCert_t cert)
95 if ((cert->c_verified == E_OK) || (cert->c_verified == E_IS_TA)) {
121 KMF_CERT_DATA_ATTR, &cert->c_cert.certificate,
131 cert, CACERT); local
132 cert->c_verified = E_OK
150 cert, OBJCACERT); local
163 cert, SECACERT); local
189 ELFCert_t cert = NULL; local
299 (ess->es_certCAcallback)(ess->es_callbackctx, cert, local
751 ELFCert_t cert = NULL; local
[all...] |
| libelfsign.h | 172 extern char *elfcertlib_getdn(ELFCert_t cert);
173 extern char *elfcertlib_getissuer(ELFCert_t cert);
175 extern boolean_t elfcertlib_loadprivatekey(ELFsign_t ess, ELFCert_t cert,
177 extern boolean_t elfcertlib_loadtokenkey(ELFsign_t ess, ELFCert_t cert,
180 extern boolean_t elfcertlib_sign(ELFsign_t ess, ELFCert_t cert,
184 extern boolean_t elfcertlib_verifycert(ELFsign_t ess, ELFCert_t cert);
185 extern boolean_t elfcertlib_verifysig(ELFsign_t ess, ELFCert_t cert,
|
| /onnv/onnv-gate/usr/src/common/openssl/crypto/pkcs12/ |
| p12_kiss.c | 66 EVP_PKEY **pkey, X509 **cert, STACK_OF(X509) **ca);
69 int passlen, EVP_PKEY **pkey, X509 **cert,
74 EVP_PKEY **pkey, X509 **cert, STACK_OF(X509) **ca,
77 /* Parse and decrypt a PKCS#12 structure returning user key, user cert
79 * or it should point to a valid STACK structure. pkey and cert can be
83 int PKCS12_parse(PKCS12 *p12, const char *pass, EVP_PKEY **pkey, X509 **cert,
103 if(cert) *cert = NULL;
125 if (!parse_pk12 (p12, pass, -1, pkey, cert, ca))
136 if (cert && *cert) X509_free(*cert)
[all...] |
| p12_crt.c | 66 PKCS12 *PKCS12_create(char *pass, char *name, EVP_PKEY *pkey, X509 *cert,
88 if(!pkey && !cert && !ca)
94 if (pkey && cert)
96 if(!X509_check_private_key(cert, pkey))
98 X509_digest(cert, EVP_sha1(), keyid, &keyidlen);
101 if (cert)
103 bag = PKCS12_add_cert(&bags, cert);
176 PKCS12_SAFEBAG *PKCS12_add_cert(STACK_OF(PKCS12_SAFEBAG) **pbags, X509 *cert)
185 if(!(bag = PKCS12_x5092certbag(cert)))
192 name = (char *)X509_alias_get0(cert, &namelen)
[all...] |
| /onnv/onnv-gate/usr/src/lib/libpkg/common/ |
| security.c | 85 * cert - User cert to start with
95 get_cert_chain(PKG_ERR *err, X509 *cert, STACK_OF(X509) *clcerts,
130 (void) X509_STORE_CTX_init(store_ctx, ca_store, cert, clcerts);
131 /* attempt to verify the cert, which builds the cert chain */
135 get_subject_display_name(cert),
157 * Arguments: cert - The certificate to get the name from
160 * subject of the cert.
166 *get_subject_display_name(X509 *cert)
[all...] |
| p12lib.c | 202 STACK_OF(X509) *, X509 **cert);
220 * Parse and decrypt a PKCS#12 structure returning user key, user cert and/or
222 * or it should point to a valid STACK_OF(X509) structure. pkey and cert can
237 * cert - Points to locaiton which points to the client cert returned
248 * 1) Find the key and/or cert whose localkeyid attributes matches
250 * 2) Find the key and/or cert whose friendlyname attributes matches
252 * 3) Return the first matching key/cert pair found.
253 * 4) Return the last matching key/cert pair found.
254 * 5) Return whatever cert and/or key are available, even unmatching
341 X509_free(*cert); variable
646 X509 *cert = NULL; local
[all...] |
| /onnv/onnv-gate/usr/src/lib/mms/mms/common/ |
| connect.c | 79 mms_intrp(char *rsp, char **pass, char **cert, char **auth, int *err_code)
91 *cert = NULL;
126 *cert = strdup(value->pn_string);
206 char *cert = NULL; local
237 net->cli_pass, &cert, &auth)) {
248 cert, auth);
254 cert, auth, tag);
256 free(cert);
258 cert = NULL;
317 switch (mms_intrp(rsp, &pass, &cert, &auth, err_code))
[all...] |
| mms_sock.h | 49 char *password, char **cert, char **auth);
51 char *cert, char *auth, char **password);
|
| /onnv/onnv-gate/usr/src/lib/libslp/javalib/com/sun/slp/ |
| AuthBlock.java | 35 import java.security.cert.*;
289 * cert has been signed by someDN.
302 X509Certificate cert = getCert(someDN, ks); local
305 myCert.getSubjectDN().toString(), cert.getSubjectDN());
310 * is in ab's cert chain.
313 // Get cert for input DN
338 // Get cert for input DN
370 X509Certificate cert = getSignAsCert(); local
373 if (cert == null) {
378 String DN = cert.getSubjectDN().toString()
422 X509Certificate cert = null; local
[all...] |
| /onnv/onnv-gate/usr/src/cmd/cmd-crypto/elfsign/ |
| elfsign.c | 87 char *cert; /* -c <certificate_file> | */ member in struct:__anon1
167 cmd_info.cert = NULL;
225 cmd_info.cert = optarg;
279 cmd_info.cert = optarg;
315 (cmd_info.cert == NULL) ||
317 cryptodebug("Missing privpath|token_label/cert/elfobj");
325 (cmd_info.cert == NULL)) {
331 if ((cmd_info.cert != NULL) == (cmd_info.elfcnt > 0)) {
332 cryptodebug("Neither or both of cert/elfobj");
440 if (cmd_info.cert == NULL
512 ELFCert_t cert = NULL; local
720 ELFCert_t cert = NULL; local
1414 ELFCert_t cert; local
[all...] |
| /onnv/onnv-gate/usr/src/cmd/svr4pkg/pkgadm/ |
| addcert.c | 85 X509 *cert = NULL; local
273 /* we must have gotten at least one cert, if not, fail */
281 &key, &cert) != 0) {
287 /* we must have gotten a cert, if not, fail */
288 if (cert == NULL) {
295 * if we are importing a user cert, and did not get
328 cert = sk_X509_value(trustcerts, i);
329 if (check_cert(err, cert) != 0) {
338 if (check_cert_and_key(err, cert, key) != 0) {
347 * if importing more than one cert, must use implicit trust
[all...] |
| certs.c | 68 * cert - Location to store resulting cert if found.
73 * match. If no key matches the cert, then only the cert
80 X509 **cert)
91 if (cert) *cert = NULL;
95 /* first try to load a DER cert, which cannot contain a key */
117 /* take the first cert in the file, if any */
118 if (cert && (certs != NULL))
[all...] |
| /onnv/onnv-gate/usr/src/cmd/cmd-crypto/pktool/ |
| download.c | 58 KMF_DATA cert = {NULL, 0}; local
236 ch_rv = kmf_read_input_file(kmfhandle, fullpath, &cert);
242 ch_rv = kmf_pem_to_der(cert.Data, cert.Length,
250 format == KMF_FORMAT_ASN1 ? &cert : &cert_der);
265 kmf_free_data(&cert);
|
| /onnv/onnv-gate/usr/src/common/openssl/ssl/ |
| ssl_cert.c | 151 CERT *ssl_cert_new(void)
153 CERT *ret;
155 ret=(CERT *)OPENSSL_malloc(sizeof(CERT));
161 memset(ret,0,sizeof(CERT));
169 CERT *ssl_cert_dup(CERT *cert)
171 CERT *ret;
174 ret = (CERT *)OPENSSL_malloc(sizeof(CERT))
[all...] |
| s3_lib.c | 1709 CERT *cert; local
1852 CERT *cert; local
1924 CERT *cert; local
[all...] |
| /onnv/onnv-gate/usr/src/common/openssl/crypto/pkcs7/ |
| pk7_enc.c | 70 PKCS7_add_signer(PKCS7 *p7,X509 *cert,EVP_PKEY *key);
|
| /onnv/onnv-gate/usr/src/uts/common/inet/kssl/ |
| ksslioctl.c | 59 certificate_free(Certificate_t *cert)
61 kmem_free(cert->msg, cert->len);
62 kmem_free(cert, sizeof (struct Certificate));
109 Certificate_t *cert; local
118 if ((cert = kssl_entry->ke_server_certificate) != NULL) {
119 certificate_free(cert);
193 Certificate_t *cert; local
267 cert = kmem_alloc(sizeof (Certificate_t), KM_SLEEP);
268 cert->msg = cert_buf
527 Certificate_t *cert; local
[all...] |
| /onnv/onnv-gate/usr/src/cmd/cmd-inet/usr.lib/wanboot/p12split/ |
| p12split.c | 52 /* The following match/cert values require PKCS12 */
58 #define IO_CERTFILE 2 /* Have a separate cert file or data */
63 static char *cert_out = NULL; /* Cert file to be output */
70 CHK_TIME_OK = 0, /* Cert in effect and not expired */
73 CHK_TIME_IS_BEFORE, /* Cert not yet in force */
74 CHK_TIME_HAS_EXPIRED /* Cert has expired */
236 (void) printf(gettext("\nMain cert:\n"));
268 gettext("\nTrust Anchor cert %d:\n"), i);
318 * is no trust anchor but is a regular cert, use it instead. Do this
319 * to handle the insanity with openssl, which requires a matching cert
[all...] |
