610 		gnutls_datum_t cert, key;  in tls_connection_set_params()  local
612 		cert.data = (unsigned char *) params->client_cert_blob;  in tls_connection_set_params()
613 		cert.size = params->client_cert_blob_len;  in tls_connection_set_params()
619 			conn->xcred, &cert, &key, GNUTLS_X509_FMT_DER,  in tls_connection_set_params()
624 			conn->xcred, &cert, &key, GNUTLS_X509_FMT_DER);  in tls_connection_set_params()
631 				conn->xcred, &cert, &key, GNUTLS_X509_FMT_PEM,  in tls_connection_set_params()
636 				conn->xcred, &cert, &key, GNUTLS_X509_FMT_PEM);  in tls_connection_set_params()
929 				  const gnutls_datum_t *cert, int depth,  in gnutls_tls_fail_event()  argument
945 	if (cert) {  in gnutls_tls_fail_event()
946 		cert_buf = wpabuf_alloc_copy(cert->data, cert->size);  in gnutls_tls_fail_event()
947 		ev.cert_fail.cert = cert_buf;  in gnutls_tls_fail_event()
955 static int server_eku_purpose(gnutls_x509_crt_t cert)  in server_eku_purpose()  argument
964 		res = gnutls_x509_crt_get_key_purpose_oid(cert, i, oid,  in server_eku_purpose()
1089 static int tls_match_suffix_helper(gnutls_x509_crt_t cert, const char *match,  in tls_match_suffix_helper()  argument
1097 			cert, match,  in tls_match_suffix_helper()
1101 		res = gnutls_x509_crt_check_hostname(cert, match);  in tls_match_suffix_helper()
1109 static int tls_match_suffix(gnutls_x509_crt_t cert, const char *match,  in tls_match_suffix()  argument
1116 		return tls_match_suffix_helper(cert, match, full);  in tls_match_suffix()
1124 		if (tls_match_suffix_helper(cert, token, full)) {  in tls_match_suffix()
1141 	gnutls_x509_crt_t cert;  in tls_connection_verify_peer()  local
1272 		if (gnutls_x509_crt_init(&cert) < 0) {  in tls_connection_verify_peer()
1279 		if (gnutls_x509_crt_import(cert, &certs[i],  in tls_connection_verify_peer()
1283 			gnutls_x509_crt_deinit(cert);  in tls_connection_verify_peer()
1288 		gnutls_x509_crt_get_dn(cert, NULL, &len);  in tls_connection_verify_peer()
1293 			gnutls_x509_crt_get_dn(cert, buf, &len);  in tls_connection_verify_peer()
1311 				ev.peer_cert.cert = cert_buf;  in tls_connection_verify_peer()
1330 			    !tls_match_suffix(cert, conn->suffix_match, 0)) {  in tls_connection_verify_peer()
1339 				gnutls_x509_crt_deinit(cert);  in tls_connection_verify_peer()
1346 			    !tls_match_suffix(cert, conn->domain_match, 1)) {  in tls_connection_verify_peer()
1355 				gnutls_x509_crt_deinit(cert);  in tls_connection_verify_peer()
1371 			    !server_eku_purpose(cert)) {  in tls_connection_verify_peer()
1379 				gnutls_x509_crt_deinit(cert);  in tls_connection_verify_peer()
1387 		    (gnutls_x509_crt_get_expiration_time(cert) < now.sec ||  in tls_connection_verify_peer()
1388 		     gnutls_x509_crt_get_activation_time(cert) > now.sec)) {  in tls_connection_verify_peer()
1396 			gnutls_x509_crt_deinit(cert);  in tls_connection_verify_peer()
1404 		gnutls_x509_crt_deinit(cert);  in tls_connection_verify_peer()