OpenBSD manual page server

Manual Page Search Parameters

SSL_GET_CLIENT_CA_LIST(3) Library Functions Manual SSL_GET_CLIENT_CA_LIST(3)

SSL_get_client_CA_list, SSL_CTX_get_client_CA_listget list of client CAs

#include <openssl/ssl.h>

STACK_OF(X509_NAME) *
SSL_get_client_CA_list(const SSL *s);

STACK_OF(X509_NAME) *
SSL_CTX_get_client_CA_list(const SSL_CTX *ctx);

() returns the list of client CAs explicitly set for ctx using SSL_CTX_set_client_CA_list(3).

() returns the list of client CAs explicitly set for ssl using () or ssl's SSL_CTX object with SSL_CTX_set_client_CA_list(3), when in server mode. In client mode, SSL_get_client_CA_list() returns the list of client CAs sent from the server, if any.

SSL_CTX_set_client_CA_list() and SSL_set_client_CA_list() do not return diagnostic information.

SSL_CTX_add_client_CA() and SSL_add_client_CA() have the following return values:

(X509_NAMES)
List of CA names explicitly set (for ctx or in server mode) or sent by the server (client mode).
No client CA list was explicitly set (for ctx or in server mode) or the server did not send a list of CAs (client mode).

ssl(3), SSL_CTX_set_client_CA_list(3), SSL_CTX_set_client_cert_cb(3)

December 2, 2014 OpenBSD-6.0