CERT_FindCertByIssuerAndSN


Find a certificate in the database with the given issuer and serial number.

Syntax 

#include <cert.h>
CERTCertificate *CERT_FindCertByIssuerAndSN (

    CERTCertDBHandle *handle,
    CERTIssuerAndSN *issuerAndSN            );

Parameters

handle in pointer to a CERTCertDBHandle representing the certificate database to look in
issuerAndSN in pointer to a CERTIssuerAndSN that must be properly formed to contain the issuer name and the serial number (see [Example])

Description

This function creates a certificate key using the issuerAndSN and it then uses the key to find the matching certificate in the database.

Returns

A pointer to a CERTCertificate representing the certificate in the database that matched the issuer and serial number, or NULL if none was found. The certificate is a shallow copy, use CERT_DestroyCertificate to decrement the reference count on the certificate instance.

Example 

CERTIssuerAndSN issuerSN;
issuerSN.derIssuer.data = caName->data;
issuerSN.derIssuer.len = caName->len;
issuerSN.serialNumber.data = authorityKeyID->authCertSerialNumber.data;
issuerSN.serialNumber.len = authorityKeyID->authCertSerialNumber.len;
issuerCert = CERT_FindCertByIssuerAndSN(cert->dbhandle, &issuerSN);
if ( issuerCert == NULL ) {
    PORT_SetError (SEC_ERROR_UNKNOWN_ISSUER);
}

See Also

Occurrences of CERT_FindCertByIssuerAndSN in the current NSS source code (generated by LXR).