check whether a certificate was issued using a given CA
This function checks whether the certificate subject was
issued using the CA certificate issuer. It does the
This function returns
- match the issuer field of subject against the
subject field of issuer
- if authorityKeyIdentifier is present in the
subject certificate, compare it to the
- check the keyUsage field of
X509_V_OK if the certificate
subject is issued by issuer, or
X509_V_ERR* constant to indicate an error.
X509_check_issued() first appeared in OpenSSL 0.9.6 and
has been available since OpenBSD 2.9.