OSSL_ESS_check_signing_certs

Verify that chain satisfies ESS signing-certificate identifiers in ss and/or ssv2.

Synopsis

Declared in <openssl/ess.h>

int
OSSL_ESS_check_signing_certs(
    ESS_SIGNING_CERT const* ss,
    ESS_SIGNING_CERT_V2 const* ssv2,
    stack_st_X509 const* chain,
    int require_signing_cert);

Return Value

1 on success, 0 if a required certificate is missing, or -1 on other error.

Parameters

NameDescription
ssOptional ESS SigningCertificate (CertID) attribute, or NULL.
ssv2Optional ESS SigningCertificateV2 (CertIDv2) attribute, or NULL.
chainCertificate validation chain; the first entry must be the signer.
require_signing_certNonzero to require that ss or ssv2 is non-NULL.