2124 static int x509_crt_check_signature(const mbedtls_x509_crt *child,  in x509_crt_check_signature()  argument
2132     md_info = mbedtls_md_info_from_type(child->sig_md);  in x509_crt_check_signature()
2136     if (mbedtls_md(md_info, child->tbs.p, child->tbs.len, hash) != 0) {  in x509_crt_check_signature()
2140     psa_algorithm_t hash_alg = mbedtls_md_psa_alg_from_type(child->sig_md);  in x509_crt_check_signature()
2144                               child->tbs.p,  in x509_crt_check_signature()
2145                               child->tbs.len,  in x509_crt_check_signature()
2155     if (!mbedtls_pk_can_do(&parent->pk, child->sig_pk)) {  in x509_crt_check_signature()
2160     if (rs_ctx != NULL && child->sig_pk == MBEDTLS_PK_ECDSA) {  in x509_crt_check_signature()
2162                                              child->sig_md, hash, hash_len,  in x509_crt_check_signature()
2163                                              child->sig.p, child->sig.len, &rs_ctx->pk);  in x509_crt_check_signature()
2169     return mbedtls_pk_verify_ext(child->sig_pk, child->sig_opts, &parent->pk,  in x509_crt_check_signature()
2170                                  child->sig_md, hash, hash_len,  in x509_crt_check_signature()
2171                                  child->sig.p, child->sig.len);  in x509_crt_check_signature()
2180 static int x509_crt_check_parent(const mbedtls_x509_crt *child,  in x509_crt_check_parent()  argument
2187     if (x509_name_cmp(&child->issuer, &parent->subject) != 0) {  in x509_crt_check_parent()
2255     mbedtls_x509_crt *child,  in x509_crt_find_parent_in()  argument
2292         if (x509_crt_check_parent(child, parent, top) != 0) {  in x509_crt_find_parent_in()
2306         ret = x509_crt_check_signature(child, parent, rs_ctx);  in x509_crt_find_parent_in()
2378     mbedtls_x509_crt *child,  in x509_crt_find_parent()  argument
2402         search_list = *parent_is_trusted ? trust_ca : child->next;  in x509_crt_find_parent()
2404         ret = x509_crt_find_parent_in(child, search_list,  in x509_crt_find_parent()
2521     mbedtls_x509_crt *child;  in x509_crt_verify_chain()  local
2545         child = cur->crt;  in x509_crt_verify_chain()
2552     child = crt;  in x509_crt_verify_chain()
2560         cur->crt = child;  in x509_crt_verify_chain()
2567         if (mbedtls_x509_time_cmp(&child->valid_to, &now) < 0) {  in x509_crt_verify_chain()
2571         if (mbedtls_x509_time_cmp(&child->valid_from, &now) > 0) {  in x509_crt_verify_chain()
2582         if (x509_profile_check_md_alg(profile, child->sig_md) != 0) {  in x509_crt_verify_chain()
2586         if (x509_profile_check_pk_alg(profile, child->sig_pk) != 0) {  in x509_crt_verify_chain()
2592             x509_crt_check_ee_locally_trusted(child, trust_ca) == 0) {  in x509_crt_verify_chain()
2608             ret = f_ca_cb(p_ca_cb, child, &ver_chain->trust_ca_cb_result);  in x509_crt_verify_chain()
2623         ret = x509_crt_find_parent(child, cur_trust_ca, &parent,  in x509_crt_verify_chain()
2651             x509_name_cmp(&child->issuer, &child->subject) == 0) {  in x509_crt_verify_chain()
2675         *flags |= x509_crt_verifycrl(child, parent, ca_crl, profile, &now);  in x509_crt_verify_chain()
2681         child = parent;  in x509_crt_verify_chain()