NPKIT_VerifyIssuerSubjectNameMatch

Verifies whether the subjectCerfificate's issuer name matches the issuerCertificate's subject name.

Syntax

   #include "NPKIT_Verify.h"
   
   NWRCODE NPKIT_VerifyIssuerSubjectNameMatch
   (
      const pnuint8       issuerCertificate,
      const nuint32       issuerCertificateLen,
      const pnuint8       subjectCertificate,
      const nuint32       subjectCertificateLen
   );

Parameters

issuerCertificate
(IN) Points to the DER encoded issuer certificate to use to verify the subject certificate.
issuerCertificateLen
(OUT) Specifies the length of issuerCertificate.
subjectCertificate
(IN) Points to the DER encoded subject certificate to verify.
subjectCertificateLen
(IN) Specifies the length of the subject certificate.

Return Values

Returns 0 if names match, PKI_E_SUBJECT_NAME_COMPARISON_FAILURE if the names do not match, or a NICI or other PKI error code if not successful. For a listing of NPKIT error codes, see Certificate Server Error Code Constants.

Remarks

This is a lightweight function that can be used to construct and sort a certificate chain.