crypto/openssl/crypto/x509/x509_vfy.c

1814

CB_FAIL_IF((x->ex_flags & EXFLAG_INVALID_POLICY) != 0,

crypto/openssl/crypto/x509/x509_vfy.c

1877

CB_FAIL_IF(i == 0, ctx, x, depth, X509_V_ERR_ERROR_IN_CERT_NOT_BEFORE_FIELD);

crypto/openssl/crypto/x509/x509_vfy.c

1878

CB_FAIL_IF(i > 0, ctx, x, depth, X509_V_ERR_CERT_NOT_YET_VALID);

crypto/openssl/crypto/x509/x509_vfy.c

1883

CB_FAIL_IF(i == 0, ctx, x, depth, X509_V_ERR_ERROR_IN_CERT_NOT_AFTER_FIELD);

crypto/openssl/crypto/x509/x509_vfy.c

1884

CB_FAIL_IF(i < 0, ctx, x, depth, X509_V_ERR_CERT_HAS_EXPIRED);

crypto/openssl/crypto/x509/x509_vfy.c

1924

CB_FAIL_IF(1, ctx, xi, 0,

crypto/openssl/crypto/x509/x509_vfy.c

1978

CB_FAIL_IF(ret != X509_V_OK, ctx, xi, issuer_depth, ret);

crypto/openssl/crypto/x509/x509_vfy.c

1980

CB_FAIL_IF(1, ctx, xi, issuer_depth,

crypto/openssl/crypto/x509/x509_vfy.c

1983

CB_FAIL_IF(X509_verify(xs, pkey) <= 0,

crypto/openssl/crypto/x509/x509_vfy.c

203

CB_FAIL_IF(i > 0 && !check_cert_key_level(ctx, cert),

crypto/openssl/crypto/x509/x509_vfy.c

209

CB_FAIL_IF(i < num - 1 && !check_sig_level(ctx, cert),

crypto/openssl/crypto/x509/x509_vfy.c

247

CB_FAIL_IF(err != X509_V_OK, ctx, NULL, ctx->error_depth, err);

crypto/openssl/crypto/x509/x509_vfy.c

3166

CB_FAIL_IF(err != X509_V_OK, ctx, cert, 0, err);

crypto/openssl/crypto/x509/x509_vfy.c

352

CB_FAIL_IF(!check_cert_key_level(ctx, ctx->cert),

crypto/openssl/crypto/x509/x509_vfy.c

3597

CB_FAIL_IF(num > max_depth,

crypto/openssl/crypto/x509/x509_vfy.c

3599

CB_FAIL_IF(DANETLS_ENABLED(dane)

crypto/openssl/crypto/x509/x509_vfy.c

606

CB_FAIL_IF((ctx->param->flags & X509_V_FLAG_IGNORE_CRITICAL) == 0

crypto/openssl/crypto/x509/x509_vfy.c

609

CB_FAIL_IF(!allow_proxy_certs && (x->ex_flags & EXFLAG_PROXY) != 0,

crypto/openssl/crypto/x509/x509_vfy.c

614

CB_FAIL_IF((ctx->param->flags & X509_V_FLAG_X509_STRICT) != 0

crypto/openssl/crypto/x509/x509_vfy.c

619

CB_FAIL_IF(ret != 0, ctx, x, i, X509_V_ERR_INVALID_NON_CA);

crypto/openssl/crypto/x509/x509_vfy.c

623

CB_FAIL_IF(ret == 0

crypto/openssl/crypto/x509/x509_vfy.c

633

CB_FAIL_IF(ret < 0, ctx, x, i, X509_V_ERR_UNSPECIFIED);

crypto/openssl/crypto/x509/x509_vfy.c

634

CB_FAIL_IF(ret == 0, ctx, x, i, X509_V_ERR_EC_KEY_EXPLICIT_PARAMS);

crypto/openssl/crypto/x509/x509_vfy.c

649

CB_FAIL_IF((x->ex_flags & EXFLAG_CA) == 0,

crypto/openssl/crypto/x509/x509_vfy.c

651

CB_FAIL_IF((x->ex_kusage & KU_KEY_CERT_SIGN) == 0, ctx,

crypto/openssl/crypto/x509/x509_vfy.c

654

CB_FAIL_IF((x->ex_flags & EXFLAG_CA) != 0

crypto/openssl/crypto/x509/x509_vfy.c

660

CB_FAIL_IF((x->ex_flags & EXFLAG_KUSAGE) == 0,

crypto/openssl/crypto/x509/x509_vfy.c

663

CB_FAIL_IF((x->ex_kusage & KU_KEY_CERT_SIGN) != 0, ctx, x, i,

crypto/openssl/crypto/x509/x509_vfy.c

667

CB_FAIL_IF(X509_NAME_entry_count(X509_get_issuer_name(x)) == 0,

crypto/openssl/crypto/x509/x509_vfy.c

670

CB_FAIL_IF(((x->ex_flags & EXFLAG_CA) != 0

crypto/openssl/crypto/x509/x509_vfy.c

675

CB_FAIL_IF(X509_NAME_entry_count(X509_get_subject_name(x)) == 0

crypto/openssl/crypto/x509/x509_vfy.c

680

CB_FAIL_IF(x->altname != NULL

crypto/openssl/crypto/x509/x509_vfy.c

684

CB_FAIL_IF(X509_ALGOR_cmp(&x->sig_alg, &x->cert_info.signature) != 0,

crypto/openssl/crypto/x509/x509_vfy.c

686

CB_FAIL_IF(x->akid != NULL

crypto/openssl/crypto/x509/x509_vfy.c

689

CB_FAIL_IF(x->skid != NULL

crypto/openssl/crypto/x509/x509_vfy.c

694

CB_FAIL_IF(i + 1 < num /*

crypto/openssl/crypto/x509/x509_vfy.c

702

CB_FAIL_IF((x->ex_flags & EXFLAG_CA) != 0 && x->skid == NULL,

crypto/openssl/crypto/x509/x509_vfy.c

705

CB_FAIL_IF(sk_X509_EXTENSION_num(X509_get0_extensions(x)) > 0,

crypto/openssl/crypto/x509/x509_vfy.c

714

CB_FAIL_IF(i > 1 && x->ex_pathlen != -1

crypto/openssl/crypto/x509/x509_vfy.c

738

CB_FAIL_IF(proxy_path_length > x->ex_pcpathlen,

crypto/openssl/crypto/x509/x509_vfy.c

853

CB_FAIL_IF(err != X509_V_OK, ctx, x, i, err);

crypto/openssl/crypto/x509/x509_vfy.c

888

CB_FAIL_IF(1, ctx, x, i, rv);