1=pod
2
3=head1 NAME
4
5X509_check_issued - checks if certificate is issued by another
6certificate
7
8=head1 SYNOPSIS
9
10 #include <openssl/x509v3.h>
11
12 int X509_check_issued(X509 *issuer, X509 *subject);
13
14
15=head1 DESCRIPTION
16
17This function checks if certificate I<subject> was issued using CA
18certificate I<issuer>. This function takes into account not only
19matching of issuer field of I<subject> with subject field of I<issuer>,
20but also compares B<authorityKeyIdentifier> extension of I<subject> with
21B<subjectKeyIdentifier> of I<issuer> if B<authorityKeyIdentifier>
22present in the I<subject> certificate and checks B<keyUsage> field of
23I<issuer>.
24
25=head1 RETURN VALUES
26
27Function return B<X509_V_OK> if certificate I<subject> is issued by
28I<issuer> or some B<X509_V_ERR*> constant to indicate an error.
29
30=head1 SEE ALSO
31
32L<X509_verify_cert(3)>,
33L<X509_check_ca(3)>,
34L<verify(1)>
35
36=head1 COPYRIGHT
37
38Copyright 2015-2018 The OpenSSL Project Authors. All Rights Reserved.
39
40Licensed under the OpenSSL license (the "License").  You may not use
41this file except in compliance with the License.  You can obtain a copy
42in the file LICENSE in the source distribution or at
43L<https://www.openssl.org/source/license.html>.
44
45=cut
46