Lines Matching refs:CB_FAIL_IF
166 #define CB_FAIL_IF(cond, ctx, cert, depth, err) \ macro
198 CB_FAIL_IF(i > 0 && !check_key_level(ctx, cert), in check_auth_level()
204 CB_FAIL_IF(i < num - 1 && !check_sig_level(ctx, cert), in check_auth_level()
226 CB_FAIL_IF(err != X509_V_OK, ctx, NULL, ctx->error_depth, err); in verify_chain()
292 CB_FAIL_IF(!check_key_level(ctx, ctx->cert), in X509_verify_cert()
483 CB_FAIL_IF((ctx->param->flags & X509_V_FLAG_IGNORE_CRITICAL) == 0 in check_extensions()
486 CB_FAIL_IF(!allow_proxy_certs && (x->ex_flags & EXFLAG_PROXY) != 0, in check_extensions()
491 CB_FAIL_IF((ctx->param->flags & X509_V_FLAG_X509_STRICT) != 0 in check_extensions()
496 CB_FAIL_IF(ret != 0, ctx, x, i, X509_V_ERR_INVALID_NON_CA); in check_extensions()
500 CB_FAIL_IF(ret == 0 in check_extensions()
509 CB_FAIL_IF(ret < 0, ctx, x, i, X509_V_ERR_UNSPECIFIED); in check_extensions()
510 CB_FAIL_IF(ret == 0, ctx, x, i, X509_V_ERR_EC_KEY_EXPLICIT_PARAMS); in check_extensions()
525 CB_FAIL_IF((x->ex_flags & EXFLAG_CA) == 0, in check_extensions()
527 CB_FAIL_IF((x->ex_kusage & KU_KEY_CERT_SIGN) == 0, ctx, in check_extensions()
530 CB_FAIL_IF((x->ex_flags & EXFLAG_CA) != 0 in check_extensions()
536 CB_FAIL_IF((x->ex_flags & EXFLAG_KUSAGE) == 0, in check_extensions()
539 CB_FAIL_IF((x->ex_kusage & KU_KEY_CERT_SIGN) != 0, ctx, x, i, in check_extensions()
543 CB_FAIL_IF(X509_NAME_entry_count(X509_get_issuer_name(x)) == 0, in check_extensions()
546 CB_FAIL_IF(((x->ex_flags & EXFLAG_CA) != 0 in check_extensions()
551 CB_FAIL_IF(X509_NAME_entry_count(X509_get_subject_name(x)) == 0 in check_extensions()
556 CB_FAIL_IF(x->altname != NULL in check_extensions()
560 CB_FAIL_IF(X509_ALGOR_cmp(&x->sig_alg, &x->cert_info.signature) != 0, in check_extensions()
562 CB_FAIL_IF(x->akid != NULL in check_extensions()
565 CB_FAIL_IF(x->skid != NULL in check_extensions()
570 CB_FAIL_IF(i + 1 < num /* in check_extensions()
577 CB_FAIL_IF((x->ex_flags & EXFLAG_CA) != 0 && x->skid == NULL, in check_extensions()
580 CB_FAIL_IF(sk_X509_EXTENSION_num(X509_get0_extensions(x)) > 0, in check_extensions()
589 CB_FAIL_IF(i > 1 && x->ex_pathlen != -1 in check_extensions()
613 CB_FAIL_IF(proxy_path_length > x->ex_pcpathlen, in check_extensions()
725 CB_FAIL_IF(err != X509_V_OK, ctx, x, i, err); in check_name_constraints()
758 CB_FAIL_IF(1, ctx, x, i, rv); in check_name_constraints()
1665 CB_FAIL_IF((x->ex_flags & EXFLAG_INVALID_POLICY) != 0, in check_policy()
1722 CB_FAIL_IF(i == 0, ctx, x, depth, X509_V_ERR_ERROR_IN_CERT_NOT_BEFORE_FIELD); in ossl_x509_check_cert_time()
1723 CB_FAIL_IF(i > 0, ctx, x, depth, X509_V_ERR_CERT_NOT_YET_VALID); in ossl_x509_check_cert_time()
1728 CB_FAIL_IF(i == 0, ctx, x, depth, X509_V_ERR_ERROR_IN_CERT_NOT_AFTER_FIELD); in ossl_x509_check_cert_time()
1729 CB_FAIL_IF(i < 0, ctx, x, depth, X509_V_ERR_CERT_HAS_EXPIRED); in ossl_x509_check_cert_time()
1759 CB_FAIL_IF(1, ctx, xi, 0, in internal_verify()
1812 CB_FAIL_IF(ret != X509_V_OK, ctx, xi, issuer_depth, ret); in internal_verify()
1814 CB_FAIL_IF(1, ctx, xi, issuer_depth, in internal_verify()
1817 CB_FAIL_IF(X509_verify(xs, pkey) <= 0, in internal_verify()
2903 CB_FAIL_IF(err != X509_V_OK, ctx, cert, 0, err); in check_leaf_suiteb()
3300 CB_FAIL_IF(num > max_depth, in build_chain()
3302 CB_FAIL_IF(DANETLS_ENABLED(dane) in build_chain()