Default certificate‐confirmation callback that validates the new certificate chain.

Synopsis

Declared in <openssl/cmp.h>

int
OSSL_CMP_certConf_cb(
    OSSL_CMP_CTX* ctx,
    X509* cert,
    int fail_info,
    char const** text);

Return Value

0 on acceptance, fail_info if non‐zero, or OSSL_CMP_PKIFAILUREINFO_incorrectData.

Parameters

Name

Description

ctx

CMP context; callback argument should point to a trust store, or be NULL.

cert

Newly enrolled certificate to validate.

fail_info

Pre‐decision PKIFailureInfo bit field.

text

Optional output for a detail string on rejection.

Created with MrDocs