319 ve_anchors_add(br_x509_certificate *xcs, size_t num, anchor_list *anchors,  in ve_anchors_add()  argument
326 		if (certificate_to_trust_anchor_inner(&ta, &xcs[u]) < 0) {  in ve_anchors_add()
334 			cp = x509_cn_get(&xcs[u], buf, sizeof(buf));  in ve_anchors_add()
348 ve_trust_anchors_add(br_x509_certificate *xcs, size_t num)  in ve_trust_anchors_add()  argument
350 	return (ve_anchors_add(xcs, num, &trust_anchors, "trusted"));  in ve_trust_anchors_add()
354 ve_forbidden_anchors_add(br_x509_certificate *xcs, size_t num)  in ve_forbidden_anchors_add()  argument
356 	return (ve_anchors_add(xcs, num, &forbidden_anchors, "forbidden"));  in ve_forbidden_anchors_add()
371 	br_x509_certificate *xcs;  in ve_trust_anchors_add_buf()  local
375 	xcs = parse_certificates(buf, len, &num);  in ve_trust_anchors_add_buf()
376 	if (xcs != NULL) {  in ve_trust_anchors_add_buf()
377 		num = ve_trust_anchors_add(xcs, num);  in ve_trust_anchors_add_buf()
397 	br_x509_certificate *xcs;  in ve_trust_anchors_revoke()  local
401 	xcs = parse_certificates(buf, len, &num);  in ve_trust_anchors_revoke()
402 	if (xcs != NULL) {  in ve_trust_anchors_revoke()
403 		num = ve_forbidden_anchors_add(xcs, num);  in ve_trust_anchors_revoke()
487 verify_signer_xcs(br_x509_certificate *xcs,  in verify_signer_xcs()  argument
502 	VEC_ADDMANY(chain, xcs, num);  in verify_signer_xcs()
600 check_forbidden_digests(br_x509_certificate *xcs, size_t num)  in check_forbidden_digests()  argument
620 		tbs = X509_to_tbs(xcs[num].data, &tbs_len);  in check_forbidden_digests()
683 	br_x509_certificate *xcs;  in verify_signer()  local
690 	xcs = read_certificates(certs, &num);  in verify_signer()
691 	if (xcs == NULL) {  in verify_signer()
703 		pk = verify_signer_xcs(xcs, num, elts, num_elts, &forbidden_anchors);  in verify_signer()
711 	pk = verify_signer_xcs(xcs, num, elts, num_elts, &trust_anchors);  in verify_signer()
719 	if (check_forbidden_digests(xcs, num)) {  in verify_signer()
725 	free_certificates(xcs, num);  in verify_signer()
1087 	br_x509_certificate *xcs;  in ve_self_tests()  local
1116 	xcs = parse_certificates(__DECONST(unsigned char *, VERIFY_CERTS_STR),  in ve_self_tests()
1118 	if (xcs != NULL) {  in ve_self_tests()
1132 			if ((pk = verify_signer_xcs(&xcs[u], 1, &cn, 1, &trust_anchors)) != NULL) {  in ve_self_tests()
1133 				free_cert_contents(&xcs[u]);  in ve_self_tests()
1142 		xfree(xcs);  in ve_self_tests()