ossl_x509_signing_allowed
return ossl_x509_signing_allowed(issuer, subject);
int ossl_x509_signing_allowed(const X509 *issuer, const X509 *subject);
: ossl_x509_signing_allowed(xi, xs);
&& ossl_x509_signing_allowed(candidate, x) != X509_V_OK)