| /src/external/ibm-public/postfix/dist/src/tls/ |
| tls_proxy_client_print.c | 227 const TLS_DANE *dane = (const TLS_DANE *) ptr; local
231 SEND_ATTR_INT(TLS_ATTR_DANE, dane != 0),
234 msg_info("tls_proxy_client_dane_print dane=%d", dane != 0);
236 if (ret == 0 && dane != 0) {
240 STRING_OR_EMPTY(dane->base_domain)),
242 (const void *) dane->tlsa),
346 (const void *) props->dane),
|
| tls_proxy_client_scan.c | 336 if (props->dane)
337 tls_dane_free((TLS_DANE *) props->dane);
399 TLS_DANE *dane = 0; local
412 dane = tls_dane_alloc();
417 &dane->tlsa),
421 dane->base_domain = vstring_export(base_domain);
424 tls_dane_free(dane);
425 dane = 0;
428 *(TLS_DANE **) ptr = dane;
556 props->dane = 0; /* scan_fn may return early *
[all...] |
| tls_dane.c | 7 /* Support for RFC 6698, 7671, 7672 (DANE) certificate matching
24 /* void tls_dane_free(dane)
25 /* TLS_DANE *dane;
27 /* void tls_dane_add_fpt_digests(dane, pkey_only, digest, delim, smtp_mode)
28 /* TLS_DANE *dane;
42 /* int tls_dane_load_trustfile(dane, tafile)
43 /* TLS_DANE *dane;
62 /* int tls_dane_unusable(dane)
63 /* const TLS_DANE *dane;
65 /* int tls_dane_notfound(dane)
292 TLS_DANE *dane = (TLS_DANE *) mymalloc(sizeof(*dane)); local
570 TLS_DANE *dane = tls_dane_alloc(); local
622 TLS_DANE *dane; local
673 TLS_DANE *dane = 0; local
811 const TLS_DANE *dane = TLScontext->dane; local
[all...] |
| tls.h | 31 * "dane" vs. "fingerprint", both must lie between "encrypt" and "verify".
39 * - At "dane" and higher, the peer certificate must also be trusted. With
40 * "dane" the trust may be self-asserted, so we only log trust verification
49 #define TLS_LEV_HALF_DANE 4 /* DANE TLSA MX host, insecure MX RR */
170 * RFC 6698, 7671, 7672 DANE
182 #define tls_dane_unusable(dane) ((dane)->flags & TLS_DANE_FLAG_EMPTY)
183 #define tls_dane_notfound(dane) ((dane)->flags & TLS_DANE_FLAG_NORRS)
193 uint8_t usage; /* DANE certificate usage *
270 const TLS_DANE *dane; \/* DANE TLSA digests *\/ member in struct:__anon23190
508 const TLS_DANE *dane; \/* DANE TLSA verification *\/ member in struct:__anon23192
[all...] |
| /src/external/ibm-public/postfix/dist/src/smtp/ |
| smtp_tlsrpt.c | 61 /* object with DANE or STS TLS policy information, and clears
278 /* smtp_tlsrpt_set_dane_policy - add DANE policy properties */
284 TLS_DANE *dane = state->tls->dane; local
287 for (tlsa = dane->tlsa; tlsa != 0; tlsa = tlsa->next) {
295 (const char *const *) argv->argv, dane->base_domain,
342 if (tls->dane != 0) /* Actual policy */
|
| smtp_tls_policy.c | 396 if (!tls->dane)
397 tls->dane = tls_dane_alloc();
398 if (!tls_dane_load_trustfile(tls->dane, val)) {
553 static int load_tas(TLS_DANE *dane, const char *files)
562 ret = tls_dane_load_trustfile(dane, file);
695 * DANE initialization may change the security level to something else,
697 * "dane-only" changes to "dane" once we obtain the requisite TLSA
751 if (tls->dane == 0)
752 tls->dane = tls_dane_alloc()
952 TLS_DANE *dane; local
[all...] |
| smtp.h | 109 TLS_DANE *dane; /* DANE TLSA digests */ member in struct:SMTP_TLS_POLICY
110 char *sni; /* Optional SNI name when not DANE */
165 _tls_policy_init_tmp->dane = 0; \
362 extern int smtp_tls_insecure_mx_policy; /* DANE post insecure MX? */
|
| /src/crypto/external/apache2/openssl/dist/include/crypto/ |
| x509.h | 278 SSL_DANE *dane; member in struct:x509_store_ctx_st
|
| /src/crypto/external/bsd/openssl/dist/include/crypto/ |
| x509.h | 278 SSL_DANE *dane; member in struct:x509_store_ctx_st
|
| /src/crypto/external/bsd/openssl.old/dist/include/crypto/ |
| x509.h | 255 SSL_DANE *dane; member in struct:x509_store_ctx_st
|
| /src/crypto/external/bsd/openssl/dist/crypto/x509/ |
| x509_vfy.c | 27 #include "internal/dane.h"
295 ret = DANETLS_ENABLED(ctx->dane) ? dane_verify(ctx) : verify_chain(ctx);
815 SSL_DANE *dane = ctx->dane; local
820 * Check for a DANE issuer at depth 1 or greater, if it is a DANE-TA(2)
823 if (DANETLS_HAS_TA(dane) && num_untrusted > 0 && num_untrusted < num) {
897 if (!DANETLS_ENABLED(dane))
899 if (dane->pdpth < 0)
900 dane->pdpth = num_untrusted
2687 SSL_DANE *dane = ctx->dane; local
2830 SSL_DANE *dane = ctx->dane; local
2855 SSL_DANE *dane = ctx->dane; local
2912 SSL_DANE *dane = ctx->dane; local
2990 SSL_DANE *dane = ctx->dane; local
[all...] |
| /src/crypto/external/bsd/openssl.old/dist/crypto/x509/ |
| x509_vfy.c | 24 #include "internal/dane.h"
256 SSL_DANE *dane = ctx->dane; local
300 if (DANETLS_ENABLED(dane))
782 SSL_DANE *dane = ctx->dane; local
787 * Check for a DANE issuer at depth 1 or greater, if it is a DANE-TA(2)
790 if (DANETLS_HAS_TA(dane) && num_untrusted > 0 && num_untrusted < num) {
864 if (!DANETLS_ENABLED(dane))
2629 SSL_DANE *dane = ctx->dane; local
2772 SSL_DANE *dane = ctx->dane; local
2797 SSL_DANE *dane = ctx->dane; local
2856 SSL_DANE *dane = ctx->dane; local
2950 SSL_DANE *dane = ctx->dane; local
[all...] |
| /src/external/ibm-public/postfix/dist/src/posttls-finger/ |
| posttls-finger.c | 104 /* fingerprints (with DANE TLSA records the algorithm is specified
108 /* Look up the associated DANE TLSA RRset even when a hostname is not an
196 /* and each subjectAltName and which name matched. With DANE, logs
246 /* extension. When the server has DANE TLSA records, this parameter
508 TLS_DANE *dane; /* DANE TLSA validation structure */ member in struct:STATE
509 TLS_DANE *ddane; /* DANE TLSA from DNS */
512 int mxinsec_level; /* DANE for insecure MX RRs? */
842 dane = state->ddane ?
843 state->ddane : state->dane);
[all...] |
| /src/crypto/external/apache2/openssl/dist/crypto/x509/ |
| x509_vfy.c | 27 #include "internal/dane.h"
309 ret = DANETLS_ENABLED(ctx->dane) ? dane_verify_rpk(ctx) : verify_rpk(ctx);
355 ret = DANETLS_ENABLED(ctx->dane) ? dane_verify(ctx) : verify_chain(ctx);
947 SSL_DANE *dane = ctx->dane; local
952 * Check for a DANE issuer at depth 1 or greater, if it is a DANE-TA(2)
955 if (DANETLS_HAS_TA(dane) && num_untrusted > 0 && num_untrusted < num) {
1030 if (!DANETLS_ENABLED(dane))
1032 if (dane->pdpth < 0
2889 SSL_DANE *dane = ctx->dane; local
3035 SSL_DANE *dane = ctx->dane; local
3060 SSL_DANE *dane = ctx->dane; local
3098 SSL_DANE *dane = ctx->dane; local
3170 SSL_DANE *dane = ctx->dane; local
3201 SSL_DANE *dane = ctx->dane; local
3281 SSL_DANE *dane = ctx->dane; local
[all...] |
| /src/crypto/external/bsd/openssl/dist/ssl/ |
| ssl_lib.c | 170 static void dane_final(SSL_DANE *dane)
172 sk_danetls_record_pop_free(dane->trecs, tlsa_free);
173 dane->trecs = NULL;
175 sk_X509_pop_free(dane->certs, X509_free);
176 dane->certs = NULL;
178 X509_free(dane->mcert);
179 dane->mcert = NULL;
180 dane->mtlsa = NULL;
181 dane->mdpth = -1;
182 dane->pdpth = -1
1051 SSL_DANE *dane = &s->dane; local
1110 SSL_DANE *dane = &s->dane; local
1126 SSL_DANE *dane = &s->dane; local
5246 SSL_DANE *dane = &s->dane; local
[all...] |
| ssl_local.h | 33 # include "internal/dane.h"
1132 /* Shared DANE context */
1133 struct dane_ctx_st dane; member in struct:ssl_ctx_st
1445 /* Per connection DANE state */
1446 SSL_DANE dane; member in struct:ssl_st
|
| /src/crypto/external/bsd/openssl.old/dist/ssl/ |
| ssl_lib.c | 191 static void dane_final(SSL_DANE *dane)
193 sk_danetls_record_pop_free(dane->trecs, tlsa_free);
194 dane->trecs = NULL;
196 sk_X509_pop_free(dane->certs, X509_free);
197 dane->certs = NULL;
199 X509_free(dane->mcert);
200 dane->mcert = NULL;
201 dane->mtlsa = NULL;
202 dane->mdpth = -1;
203 dane->pdpth = -1
1010 SSL_DANE *dane = &s->dane; local
1069 SSL_DANE *dane = &s->dane; local
1085 SSL_DANE *dane = &s->dane; local
4980 SSL_DANE *dane = &s->dane; local
[all...] |
| ssl_local.h | 34 # include "internal/dane.h"
1014 /* Shared DANE context */
1015 struct dane_ctx_st dane; member in struct:ssl_ctx_st
1129 /* Per connection DANE state */
1130 SSL_DANE dane; member in struct:ssl_st
|
| /src/crypto/external/apache2/openssl/dist/ssl/ |
| ssl_lib.c | 168 static void dane_final(SSL_DANE *dane)
170 sk_danetls_record_pop_free(dane->trecs, tlsa_free);
171 dane->trecs = NULL;
173 OSSL_STACK_OF_X509_free(dane->certs);
174 dane->certs = NULL;
176 X509_free(dane->mcert);
177 dane->mcert = NULL;
178 dane->mtlsa = NULL;
179 dane->mdpth = -1;
180 dane->pdpth = -1
1231 SSL_DANE *dane; local
1307 SSL_DANE *dane; local
1329 SSL_DANE *dane; local
6573 SSL_DANE *dane = &s->dane; local
8146 SSL_DANE *dane = SSL_get0_dane(s); local
[all...] |
| ssl_local.h | 32 #include "internal/dane.h"
1092 /* Shared DANE context */
1093 struct dane_ctx_st dane; member in struct:ssl_ctx_st
1492 /* Per connection DANE state */
1493 SSL_DANE dane; member in struct:ssl_connection_st
|
