check whether a certificate was issued
using a given CA certificate
This function checks whether the certificate subject was issued using the CA certificate issuer. It does the following checks:
- match the issuer field of subject against the subject field of issuer
- check the keyUsage field of issuer.
This function returns
X509_V_OK if the
certificate subject is issued by
issuer, or some
constant to indicate an error.
X509_check_ca(3), X509_new(3), X509_verify_cert(3)
X509_check_issued() first appeared in
OpenSSL 0.9.6 and has been available since OpenBSD