| /src/external/ibm-public/postfix/dist/src/tls/ |
| tls_proxy_client_print.c | 225 const TLS_DANE *dane = (const TLS_DANE *) ptr; local
229 SEND_ATTR_INT(TLS_ATTR_DANE, dane != 0),
232 msg_info("tls_proxy_client_dane_print dane=%d", dane != 0);
234 if (ret == 0 && dane != 0) {
238 STRING_OR_EMPTY(dane->base_domain)),
240 (const void *) dane->tlsa),
344 (const void *) props->dane),
|
| tls_proxy_client_print.c | 225 const TLS_DANE *dane = (const TLS_DANE *) ptr; local
229 SEND_ATTR_INT(TLS_ATTR_DANE, dane != 0),
232 msg_info("tls_proxy_client_dane_print dane=%d", dane != 0);
234 if (ret == 0 && dane != 0) {
238 STRING_OR_EMPTY(dane->base_domain)),
240 (const void *) dane->tlsa),
344 (const void *) props->dane),
|
| tls_proxy_client_scan.c | 334 if (props->dane)
335 tls_dane_free((TLS_DANE *) props->dane);
397 TLS_DANE *dane = 0; local
410 dane = tls_dane_alloc();
415 &dane->tlsa),
419 dane->base_domain = vstring_export(base_domain);
422 tls_dane_free(dane);
423 dane = 0;
426 *(TLS_DANE **) ptr = dane;
554 props->dane = 0; /* scan_fn may return early *
[all...] |
| tls_proxy_client_scan.c | 334 if (props->dane)
335 tls_dane_free((TLS_DANE *) props->dane);
397 TLS_DANE *dane = 0; local
410 dane = tls_dane_alloc();
415 &dane->tlsa),
419 dane->base_domain = vstring_export(base_domain);
422 tls_dane_free(dane);
423 dane = 0;
426 *(TLS_DANE **) ptr = dane;
554 props->dane = 0; /* scan_fn may return early *
[all...] |
| tls_dane.c | 7 /* Support for RFC 6698, 7671, 7672 (DANE) certificate matching
24 /* void tls_dane_free(dane)
25 /* TLS_DANE *dane;
27 /* void tls_dane_add_fpt_digests(dane, pkey_only, digest, delim, smtp_mode)
28 /* TLS_DANE *dane;
42 /* int tls_dane_load_trustfile(dane, tafile)
43 /* TLS_DANE *dane;
62 /* int tls_dane_unusable(dane)
63 /* const TLS_DANE *dane;
65 /* int tls_dane_notfound(dane)
292 TLS_DANE *dane = (TLS_DANE *) mymalloc(sizeof(*dane)); local
570 TLS_DANE *dane = tls_dane_alloc(); local
622 TLS_DANE *dane; local
673 TLS_DANE *dane = 0; local
811 const TLS_DANE *dane = TLScontext->dane; local
[all...] |
| tls_dane.c | 7 /* Support for RFC 6698, 7671, 7672 (DANE) certificate matching
24 /* void tls_dane_free(dane)
25 /* TLS_DANE *dane;
27 /* void tls_dane_add_fpt_digests(dane, pkey_only, digest, delim, smtp_mode)
28 /* TLS_DANE *dane;
42 /* int tls_dane_load_trustfile(dane, tafile)
43 /* TLS_DANE *dane;
62 /* int tls_dane_unusable(dane)
63 /* const TLS_DANE *dane;
65 /* int tls_dane_notfound(dane)
292 TLS_DANE *dane = (TLS_DANE *) mymalloc(sizeof(*dane)); local
570 TLS_DANE *dane = tls_dane_alloc(); local
622 TLS_DANE *dane; local
673 TLS_DANE *dane = 0; local
811 const TLS_DANE *dane = TLScontext->dane; local
[all...] |
| tls.h | 31 * "dane" vs. "fingerprint", both must lie between "encrypt" and "verify".
39 * - At "dane" and higher, the peer certificate must also be trusted. With
40 * "dane" the trust may be self-asserted, so we only log trust verification
49 #define TLS_LEV_HALF_DANE 4 /* DANE TLSA MX host, insecure MX RR */
179 * RFC 6698, 7671, 7672 DANE
191 #define tls_dane_unusable(dane) ((dane)->flags & TLS_DANE_FLAG_EMPTY)
192 #define tls_dane_notfound(dane) ((dane)->flags & TLS_DANE_FLAG_NORRS)
202 uint8_t usage; /* DANE certificate usage *
280 const TLS_DANE *dane; \/* DANE TLSA digests *\/ member in struct:__anon80
518 const TLS_DANE *dane; \/* DANE TLSA verification *\/ member in struct:__anon82
[all...] |
| /src/external/ibm-public/postfix/dist/src/smtp/ |
| smtp_tlsrpt.c | 61 /* object with DANE or STS TLS policy information, and clears
284 /* smtp_tlsrpt_set_dane_policy - add DANE policy properties */
290 TLS_DANE *dane = state->tls->dane; local
293 for (tlsa = dane->tlsa; tlsa != 0; tlsa = tlsa->next) {
301 (const char *const *) argv->argv, dane->base_domain,
350 if (tls->dane != 0) /* Actual policy */
|
| smtp_tlsrpt.c | 61 /* object with DANE or STS TLS policy information, and clears
284 /* smtp_tlsrpt_set_dane_policy - add DANE policy properties */
290 TLS_DANE *dane = state->tls->dane; local
293 for (tlsa = dane->tlsa; tlsa != 0; tlsa = tlsa->next) {
301 (const char *const *) argv->argv, dane->base_domain,
350 if (tls->dane != 0) /* Actual policy */
|
| smtp_tls_policy.c | 463 if (!tls->dane)
464 tls->dane = tls_dane_alloc();
465 if (!tls_dane_load_trustfile(tls->dane, val)) {
624 static int load_tas(TLS_DANE *dane, const char *files)
633 ret = tls_dane_load_trustfile(dane, file);
727 * records are looked up for security level "dane", and then the security
783 * DANE initialization may change the security level to something else,
785 * "dane-only" changes to "dane" once we obtain the requisite TLSA
839 if (tls->dane == 0
1040 TLS_DANE *dane; local
[all...] |
| smtp_tls_policy.c | 463 if (!tls->dane)
464 tls->dane = tls_dane_alloc();
465 if (!tls_dane_load_trustfile(tls->dane, val)) {
624 static int load_tas(TLS_DANE *dane, const char *files)
633 ret = tls_dane_load_trustfile(dane, file);
727 * records are looked up for security level "dane", and then the security
783 * DANE initialization may change the security level to something else,
785 * "dane-only" changes to "dane" once we obtain the requisite TLSA
839 if (tls->dane == 0
1040 TLS_DANE *dane; local
[all...] |
| smtp.h | 116 TLS_DANE *dane; /* DANE TLSA digests */ member in struct:SMTP_TLS_POLICY
117 char *sni; /* Optional SNI name when not DANE */
173 _tls_policy_init_tmp->dane = 0; \
414 extern int smtp_tls_insecure_mx_policy; /* DANE post insecure MX? */
|
| smtp.h | 116 TLS_DANE *dane; /* DANE TLSA digests */ member in struct:SMTP_TLS_POLICY
117 char *sni; /* Optional SNI name when not DANE */
173 _tls_policy_init_tmp->dane = 0; \
414 extern int smtp_tls_insecure_mx_policy; /* DANE post insecure MX? */
|
| /src/crypto/external/apache2/openssl/dist/include/crypto/ |
| x509.h | 278 SSL_DANE *dane; member in struct:x509_store_ctx_st
|
| x509.h | 278 SSL_DANE *dane; member in struct:x509_store_ctx_st
|
| /src/crypto/external/bsd/openssl/dist/include/crypto/ |
| x509.h | 278 SSL_DANE *dane; member in struct:x509_store_ctx_st
|
| x509.h | 278 SSL_DANE *dane; member in struct:x509_store_ctx_st
|
| /src/crypto/external/bsd/openssl.old/dist/include/crypto/ |
| x509.h | 255 SSL_DANE *dane; member in struct:x509_store_ctx_st
|
| x509.h | 255 SSL_DANE *dane; member in struct:x509_store_ctx_st
|
| /src/crypto/external/bsd/openssl/dist/crypto/x509/ |
| x509_vfy.c | 27 #include "internal/dane.h"
295 ret = DANETLS_ENABLED(ctx->dane) ? dane_verify(ctx) : verify_chain(ctx);
815 SSL_DANE *dane = ctx->dane; local
820 * Check for a DANE issuer at depth 1 or greater, if it is a DANE-TA(2)
823 if (DANETLS_HAS_TA(dane) && num_untrusted > 0 && num_untrusted < num) {
897 if (!DANETLS_ENABLED(dane))
899 if (dane->pdpth < 0)
900 dane->pdpth = num_untrusted
2687 SSL_DANE *dane = ctx->dane; local
2830 SSL_DANE *dane = ctx->dane; local
2855 SSL_DANE *dane = ctx->dane; local
2912 SSL_DANE *dane = ctx->dane; local
2990 SSL_DANE *dane = ctx->dane; local
[all...] |
| x509_vfy.c | 27 #include "internal/dane.h"
295 ret = DANETLS_ENABLED(ctx->dane) ? dane_verify(ctx) : verify_chain(ctx);
815 SSL_DANE *dane = ctx->dane; local
820 * Check for a DANE issuer at depth 1 or greater, if it is a DANE-TA(2)
823 if (DANETLS_HAS_TA(dane) && num_untrusted > 0 && num_untrusted < num) {
897 if (!DANETLS_ENABLED(dane))
899 if (dane->pdpth < 0)
900 dane->pdpth = num_untrusted
2687 SSL_DANE *dane = ctx->dane; local
2830 SSL_DANE *dane = ctx->dane; local
2855 SSL_DANE *dane = ctx->dane; local
2912 SSL_DANE *dane = ctx->dane; local
2990 SSL_DANE *dane = ctx->dane; local
[all...] |
| /src/crypto/external/bsd/openssl.old/dist/crypto/x509/ |
| x509_vfy.c | 24 #include "internal/dane.h"
256 SSL_DANE *dane = ctx->dane; local
300 if (DANETLS_ENABLED(dane))
782 SSL_DANE *dane = ctx->dane; local
787 * Check for a DANE issuer at depth 1 or greater, if it is a DANE-TA(2)
790 if (DANETLS_HAS_TA(dane) && num_untrusted > 0 && num_untrusted < num) {
864 if (!DANETLS_ENABLED(dane))
2629 SSL_DANE *dane = ctx->dane; local
2772 SSL_DANE *dane = ctx->dane; local
2797 SSL_DANE *dane = ctx->dane; local
2856 SSL_DANE *dane = ctx->dane; local
2950 SSL_DANE *dane = ctx->dane; local
[all...] |
| x509_vfy.c | 24 #include "internal/dane.h"
256 SSL_DANE *dane = ctx->dane; local
300 if (DANETLS_ENABLED(dane))
782 SSL_DANE *dane = ctx->dane; local
787 * Check for a DANE issuer at depth 1 or greater, if it is a DANE-TA(2)
790 if (DANETLS_HAS_TA(dane) && num_untrusted > 0 && num_untrusted < num) {
864 if (!DANETLS_ENABLED(dane))
2629 SSL_DANE *dane = ctx->dane; local
2772 SSL_DANE *dane = ctx->dane; local
2797 SSL_DANE *dane = ctx->dane; local
2856 SSL_DANE *dane = ctx->dane; local
2950 SSL_DANE *dane = ctx->dane; local
[all...] |
| /src/external/ibm-public/postfix/dist/src/posttls-finger/ |
| posttls-finger.c | 104 /* fingerprints (with DANE TLSA records the algorithm is specified
108 /* Look up the associated DANE TLSA RRset even when a hostname is not an
197 /* and each subjectAltName and which name matched. With DANE, logs
247 /* extension. When the server has DANE TLSA records, this parameter
508 TLS_DANE *dane; /* DANE TLSA validation structure */ member in struct:STATE
509 TLS_DANE *ddane; /* DANE TLSA from DNS */
512 int mxinsec_level; /* DANE for insecure MX RRs? */
842 dane = state->ddane ?
843 state->ddane : state->dane);
[all...] |
| posttls-finger.c | 104 /* fingerprints (with DANE TLSA records the algorithm is specified
108 /* Look up the associated DANE TLSA RRset even when a hostname is not an
197 /* and each subjectAltName and which name matched. With DANE, logs
247 /* extension. When the server has DANE TLSA records, this parameter
508 TLS_DANE *dane; /* DANE TLSA validation structure */ member in struct:STATE
509 TLS_DANE *ddane; /* DANE TLSA from DNS */
512 int mxinsec_level; /* DANE for insecure MX RRs? */
842 dane = state->ddane ?
843 state->ddane : state->dane);
[all...] |
