Lines Matching refs:chain
7755 mbedtls_x509_crt *chain) in ssl_parse_certificate_chain() argument
7861 ret = mbedtls_x509_crt_parse_der(chain, ssl->in_msg + i, n); in ssl_parse_certificate_chain()
7865 ret = mbedtls_x509_crt_parse_der_nocopy(chain, ssl->in_msg + i, n); in ssl_parse_certificate_chain()
7893 MBEDTLS_SSL_DEBUG_CRT(3, "peer certificate", chain); in ssl_parse_certificate_chain()
8019 mbedtls_x509_crt *chain = NULL; in mbedtls_ssl_parse_certificate() local
8032 chain = ssl->handshake->ecrs_peer_cert; in mbedtls_ssl_parse_certificate()
8061 chain = mbedtls_calloc(1, sizeof(mbedtls_x509_crt)); in mbedtls_ssl_parse_certificate()
8062 if (chain == NULL) { in mbedtls_ssl_parse_certificate()
8072 mbedtls_x509_crt_init(chain); in mbedtls_ssl_parse_certificate()
8074 ret = ssl_parse_certificate_chain(ssl, chain); in mbedtls_ssl_parse_certificate()
8090 ret = mbedtls_ssl_verify_certificate(ssl, authmode, chain, in mbedtls_ssl_parse_certificate()
8107 crt_start = chain->raw.p; in mbedtls_ssl_parse_certificate()
8108 crt_len = chain->raw.len; in mbedtls_ssl_parse_certificate()
8110 pk_start = chain->pk_raw.p; in mbedtls_ssl_parse_certificate()
8111 pk_len = chain->pk_raw.len; in mbedtls_ssl_parse_certificate()
8115 mbedtls_x509_crt_free(chain); in mbedtls_ssl_parse_certificate()
8116 mbedtls_free(chain); in mbedtls_ssl_parse_certificate()
8117 chain = NULL; in mbedtls_ssl_parse_certificate()
8131 ssl->session_negotiate->peer_cert = chain; in mbedtls_ssl_parse_certificate()
8132 chain = NULL; in mbedtls_ssl_parse_certificate()
8145 ssl->handshake->ecrs_peer_cert = chain; in mbedtls_ssl_parse_certificate()
8146 chain = NULL; in mbedtls_ssl_parse_certificate()
8150 if (chain != NULL) { in mbedtls_ssl_parse_certificate()
8151 mbedtls_x509_crt_free(chain); in mbedtls_ssl_parse_certificate()
8152 mbedtls_free(chain); in mbedtls_ssl_parse_certificate()
9871 mbedtls_x509_crt *chain, in mbedtls_ssl_verify_certificate() argument
9909 chain, in mbedtls_ssl_verify_certificate()
9937 chain, in mbedtls_ssl_verify_certificate()
9969 mbedtls_pk_can_do(&chain->pk, MBEDTLS_PK_ECKEY)) { in mbedtls_ssl_verify_certificate()
9970 if (mbedtls_ssl_check_curve(ssl, mbedtls_pk_get_ec_group_id(&chain->pk)) != 0) { in mbedtls_ssl_verify_certificate()
9981 if (mbedtls_ssl_check_cert_usage(chain, in mbedtls_ssl_verify_certificate()