Lines Matching refs:CB_FAIL_IF
166 #define CB_FAIL_IF(cond, ctx, cert, depth, err) \
198 CB_FAIL_IF(i > 0 && !check_key_level(ctx, cert),
204 CB_FAIL_IF(i < num - 1 && !check_sig_level(ctx, cert),
226 CB_FAIL_IF(err != X509_V_OK, ctx, NULL, ctx->error_depth, err);
292 CB_FAIL_IF(!check_key_level(ctx, ctx->cert),
481 CB_FAIL_IF((ctx->param->flags & X509_V_FLAG_IGNORE_CRITICAL) == 0
484 CB_FAIL_IF(!allow_proxy_certs && (x->ex_flags & EXFLAG_PROXY) != 0,
489 CB_FAIL_IF((ctx->param->flags & X509_V_FLAG_X509_STRICT) != 0
494 CB_FAIL_IF(ret != 0, ctx, x, i, X509_V_ERR_INVALID_NON_CA);
498 CB_FAIL_IF(ret == 0
507 CB_FAIL_IF(ret < 0, ctx, x, i, X509_V_ERR_UNSPECIFIED);
508 CB_FAIL_IF(ret == 0, ctx, x, i, X509_V_ERR_EC_KEY_EXPLICIT_PARAMS);
523 CB_FAIL_IF((x->ex_flags & EXFLAG_CA) == 0,
525 CB_FAIL_IF((x->ex_kusage & KU_KEY_CERT_SIGN) == 0, ctx,
528 CB_FAIL_IF((x->ex_flags & EXFLAG_CA) != 0
534 CB_FAIL_IF((x->ex_flags & EXFLAG_KUSAGE) == 0,
537 CB_FAIL_IF((x->ex_kusage & KU_KEY_CERT_SIGN) != 0, ctx, x, i,
541 CB_FAIL_IF(X509_NAME_entry_count(X509_get_issuer_name(x)) == 0,
544 CB_FAIL_IF(((x->ex_flags & EXFLAG_CA) != 0
549 CB_FAIL_IF(X509_NAME_entry_count(X509_get_subject_name(x)) == 0
554 CB_FAIL_IF(x->altname != NULL
558 CB_FAIL_IF(X509_ALGOR_cmp(&x->sig_alg, &x->cert_info.signature) != 0,
560 CB_FAIL_IF(x->akid != NULL
563 CB_FAIL_IF(x->skid != NULL
568 CB_FAIL_IF(i + 1 < num /*
575 CB_FAIL_IF((x->ex_flags & EXFLAG_CA) != 0 && x->skid == NULL,
578 CB_FAIL_IF(sk_X509_EXTENSION_num(X509_get0_extensions(x)) > 0,
587 CB_FAIL_IF(i > 1 && x->ex_pathlen != -1
611 CB_FAIL_IF(proxy_path_length > x->ex_pcpathlen,
723 CB_FAIL_IF(err != X509_V_OK, ctx, x, i, err);
756 CB_FAIL_IF(1, ctx, x, i, rv);
1667 CB_FAIL_IF((x->ex_flags & EXFLAG_INVALID_POLICY) != 0,
1730 CB_FAIL_IF(i == 0, ctx, x, depth, X509_V_ERR_ERROR_IN_CERT_NOT_BEFORE_FIELD);
1731 CB_FAIL_IF(i > 0, ctx, x, depth, X509_V_ERR_CERT_NOT_YET_VALID);
1736 CB_FAIL_IF(i == 0, ctx, x, depth, X509_V_ERR_ERROR_IN_CERT_NOT_AFTER_FIELD);
1737 CB_FAIL_IF(i < 0, ctx, x, depth, X509_V_ERR_CERT_HAS_EXPIRED);
1767 CB_FAIL_IF(1, ctx, xi, 0,
1820 CB_FAIL_IF(ret != X509_V_OK, ctx, xi, issuer_depth, ret);
1822 CB_FAIL_IF(1, ctx, xi, issuer_depth,
1825 CB_FAIL_IF(X509_verify(xs, pkey) <= 0,
2906 CB_FAIL_IF(err != X509_V_OK, ctx, cert, 0, err);
3300 CB_FAIL_IF(num > max_depth,
3302 CB_FAIL_IF(DANETLS_ENABLED(dane)