Lines Matching refs:extraCerts
299 * from extraCerts as trust anchor to validate sender cert -
312 || !ossl_cmp_X509_STORE_add1_certs(store, msg->extraCerts,
355 * If already_checked1 == NULL then certs are assumed to be the msg->extraCerts.
395 ossl_cmp_warn(ctx, "no acceptable cert in extraCerts");
400 * Verify msg trying first ctx->untrusted, which should include extraCerts
415 mode_3gpp ? "normal mode failed; trying now 3GPP mode trusting extraCerts"
417 if (check_msg_with_certs(ctx, msg->extraCerts, "extraCerts",
421 msg->extraCerts, NULL, msg, mode_3gpp))
425 ossl_cmp_warn(ctx, mode_3gpp ? "no self-issued extraCerts"
430 mode_3gpp ? "self-issued extraCerts"
432 msg->extraCerts, ctx->untrusted,
475 * for validating this and any further msgs where extraCerts may be left out
538 * else it is searched in msg->extraCerts, ctx->untrusted, in ctx->trusted
543 * the trust anchor for validating the IP msg may be taken from msg->extraCerts
647 * Any msg->extraCerts are prepended to ctx->untrusted.
693 if (sk_X509_num(msg->extraCerts) > 10)
695 "received CMP message contains more than 10 extraCerts");
697 * Store any provided extraCerts in ctx for use in OSSL_CMP_validate_msg()
701 * extraCerts because they do not belong to the protected msg part anyway.
702 * For efficiency, the extraCerts are prepended so they get used first.
704 if (!X509_add_certs(ctx->untrusted, msg->extraCerts,
781 * Store any provided extraCerts in ctx for future use,
784 * For efficiency, the extraCerts are prepended so they get used first.
786 if (!X509_add_certs(ctx->untrusted, msg->extraCerts,