Lines Matching defs:base
68 int *pcrl_score, X509_CRL *base,
1043 /* Ignore expiration of base CRL is delta is valid */
1142 /* See if a base and delta are compatible */
1143 static int check_delta_base(X509_CRL *delta, X509_CRL *base)
1149 if (base->crl_number == NULL)
1152 if (X509_NAME_cmp(X509_CRL_get_issuer(base),
1156 if (!crl_extension_match(delta, base, NID_authority_key_identifier))
1158 if (!crl_extension_match(delta, base, NID_issuing_distribution_point))
1160 /* Delta CRL base number must not exceed Full CRL number. */
1161 if (ASN1_INTEGER_cmp(delta->base_crl_number, base->crl_number) > 0)
1164 return ASN1_INTEGER_cmp(delta->crl_number, base->crl_number) > 0;
1168 * For a given base CRL find a delta... maybe extend to delta scoring or
1172 X509_CRL *base, STACK_OF(X509_CRL) *crls)
1179 if (((ctx->current_cert->ex_flags | base->flags) & EXFLAG_FRESHEST) == 0)
1183 if (check_delta_base(delta, base)) {
2022 X509_CRL *X509_CRL_diff(X509_CRL *base, X509_CRL *newer,
2030 if (base->base_crl_number != NULL || newer->base_crl_number != NULL) {
2035 if (base->crl_number == NULL || newer->crl_number == NULL) {
2040 if (X509_NAME_cmp(X509_CRL_get_issuer(base),
2046 if (!crl_extension_match(base, newer, NID_authority_key_identifier)) {
2050 if (!crl_extension_match(base, newer, NID_issuing_distribution_point)) {
2055 if (ASN1_INTEGER_cmp(newer->crl_number, base->crl_number) <= 0) {
2060 if (skey != NULL && (X509_CRL_verify(base, skey) <= 0 ||
2066 crl = X509_CRL_new_ex(base->libctx, base->propq);
2078 /* Set base CRL number: must be critical */
2079 if (!X509_CRL_add1_ext_i2d(crl, NID_delta_crl, base->crl_number, 1, 0))
2101 * Add only if not also in base.
2105 if (!X509_CRL_get0_by_serial(base, &rvtmp, &rvn->serialNumber)) {