OSSL_CMP_certConf_cb

Default certificate-confirmation callback that validates the new certificate chain.

Synopsis

Declared in <openssl/cmp.h>

int
OSSL_CMP_certConf_cb(
    OSSL_CMP_CTX* ctx,
    X509* cert,
    int fail_info,
    char const** text);

Return Value

0 on acceptance, fail_info if non-zero, or OSSL_CMP_PKIFAILUREINFO_incorrectData.

Parameters

NameDescription
ctxCMP context; callback argument should point to a trust store, or be NULL.
certNewly enrolled certificate to validate.
fail_infoPre-decision PKIFailureInfo bit field.
textOptional output for a detail string on rejection.