Last change
on this file since 85651 was 83916, checked in by vboxsync, 5 years ago |
openssl-1.1.1g: Applied and adjusted our OpenSSL changes to 1.1.1g. bugref:9719
|
File size:
1.2 KB
|
Line | |
---|
1 | =pod
|
---|
2 |
|
---|
3 | =head1 NAME
|
---|
4 |
|
---|
5 | X509_check_issued - checks if certificate is issued by another
|
---|
6 | certificate
|
---|
7 |
|
---|
8 | =head1 SYNOPSIS
|
---|
9 |
|
---|
10 | #include <openssl/x509v3.h>
|
---|
11 |
|
---|
12 | int X509_check_issued(X509 *issuer, X509 *subject);
|
---|
13 |
|
---|
14 |
|
---|
15 | =head1 DESCRIPTION
|
---|
16 |
|
---|
17 | This function checks if certificate I<subject> was issued using CA
|
---|
18 | certificate I<issuer>. This function takes into account not only
|
---|
19 | matching of issuer field of I<subject> with subject field of I<issuer>,
|
---|
20 | but also compares B<authorityKeyIdentifier> extension of I<subject> with
|
---|
21 | B<subjectKeyIdentifier> of I<issuer> if B<authorityKeyIdentifier>
|
---|
22 | present in the I<subject> certificate and checks B<keyUsage> field of
|
---|
23 | I<issuer>.
|
---|
24 |
|
---|
25 | =head1 RETURN VALUES
|
---|
26 |
|
---|
27 | Function return B<X509_V_OK> if certificate I<subject> is issued by
|
---|
28 | I<issuer> or some B<X509_V_ERR*> constant to indicate an error.
|
---|
29 |
|
---|
30 | =head1 SEE ALSO
|
---|
31 |
|
---|
32 | L<X509_verify_cert(3)>,
|
---|
33 | L<X509_check_ca(3)>,
|
---|
34 | L<verify(1)>
|
---|
35 |
|
---|
36 | =head1 COPYRIGHT
|
---|
37 |
|
---|
38 | Copyright 2015-2018 The OpenSSL Project Authors. All Rights Reserved.
|
---|
39 |
|
---|
40 | Licensed under the OpenSSL license (the "License"). You may not use
|
---|
41 | this file except in compliance with the License. You can obtain a copy
|
---|
42 | in the file LICENSE in the source distribution or at
|
---|
43 | L<https://www.openssl.org/source/license.html>.
|
---|
44 |
|
---|
45 | =cut
|
---|
Note:
See
TracBrowser
for help on using the repository browser.