Verify that chain satisfies ESS signing‐certificate identifiers in ss and/or ssv2.

Synopsis

Declared in <openssl/ess.h>

int
OSSL_ESS_check_signing_certs(
    ESS_SIGNING_CERT const* ss,
    ESS_SIGNING_CERT_V2 const* ssv2,
    stack_st_X509 const* chain,
    int require_signing_cert);

Return Value

1 on success, 0 if a required certificate is missing, or ‐1 on other error.

Parameters

Name

Description

ss

Optional ESS SigningCertificate (CertID) attribute, or NULL.

ssv2

Optional ESS SigningCertificateV2 (CertIDv2) attribute, or NULL.

chain

Certificate validation chain; the first entry must be the signer.

require_signing_cert

Nonzero to require that ss or ssv2 is non‐NULL.

Created with MrDocs