doc/crypto/X509_check_issued.pod

   1 =pod
   2
   3 =head1 NAME
   4
   5 X509_check_issued - checks if certificate is issued by another
   6 certificate
   7
   8 =head1 SYNOPSIS
   9
  10  #include <openssl/x509v3.h>
  11
  12  int X509_check_issued(X509 *issuer, X509 *subject);
  13
  14
  15 =head1 DESCRIPTION
  16
  17 This function checks if certificate I<subject> was issued using CA
  18 certificate I<issuer>. This function takes into account not only
  19 matching of issuer field of I<subject> with subject field of I<issuer>,
  20 but also compares B<authorityKeyIdentifier> extension of I<subject> with
  21 B<subjectKeyIdentifier> of I<issuer> if B<authorityKeyIdentifier>
  22 present in the I<subject> certificate and checks B<keyUsage> field of
  23 I<issuer>.
  24
  25 =head1 RETURN VALUE
  26
  27 Function return B<X509_V_OK> if certificate I<subject> is issued by
  28 I<issuer> or some B<X509_V_ERR*> constant to indicate an error.
  29
  30 =head1 SEE ALSO
  31
  32 L<X509_verify_cert(3)>,
  33 L<X509_check_ca(3)>,
  34 L<verify(1)>
  35
  36 =cut