Lines Matching refs:cert
425 "received \"waiting\" status for cert when actually aiming to extract cert");
435 ossl_cmp_err(ctx, "received \"rejection\" status rather than cert");
440 "received \"revocationWarning\" - a revocation of the cert is imminent");
444 "received \"revocationNotification\" - a revocation of the cert has occurred");
460 if (crt == NULL) /* according to PKIStatus, we can expect a cert */
488 int OSSL_CMP_certConf_cb(OSSL_CMP_CTX *ctx, X509 *cert, int fail_info,
499 ossl_cmp_debug(ctx, "trying to build chain for newly enrolled cert");
500 chain = X509_build_chain(cert, ctx->untrusted, out_trusted,
505 ossl_cmp_debug(ctx, "validating newly enrolled cert");
508 if (!X509_STORE_CTX_init(csc, out_trusted, cert, ctx->untrusted))
510 /* disable any cert status/revocation checking etc. */
530 X509_free(sk_X509_shift(chain)); /* remove leaf (EE) cert */
533 ossl_cmp_err(ctx, "failed to validate newly enrolled cert");
537 "success validating newly enrolled cert");
540 ossl_cmp_warn(ctx, "could not build approximate chain for newly enrolled cert, resorting to received extraCerts");
544 "success building approximate chain for newly enrolled cert");
570 X509 *cert;
609 cert = get1_cert_status(ctx, (*resp)->body->type, crep);
610 if (cert == NULL) {
614 if (!ossl_cmp_ctx_set0_newCert(ctx, cert))
625 subj = X509_NAME_oneline(X509_get_subject_name(cert), NULL, 0);
651 "rejecting newly enrolled cert with subject: %s", subj);
661 "rejecting newly enrolled cert with subject: %s; %s",