NAME

SSL_set1_host — SSL server verification parameters

SYNOPSIS

#include <openssl/ssl.h>

int
SSL_set1_host(SSL *ssl, const char *hostname);

DESCRIPTION

SSL_set1_host() configures a server hostname check in the ssl client, setting the expected DNS hostname to hostname and clearing any previously specified hostname. If hostname is NULL or the empty string, name checks are not performed on the peer certificate. If a nonempty hostname is specified, certificate verification automatically checks the peer hostname via X509_check_host(3) with flags set to 0.

SSL clients are advised to use this function in preference to explicitly calling X509_check_host(3).

RETURN VALUES

SSL_set1_host() returns 1 for success or 0 for failure.

SEE ALSO

ssl(3), SSL_CTX_set_verify(3), SSL_get_peer_certificate(3), SSL_get_verify_result(3), X509_check_host(3), X509_VERIFY_PARAM_set1_host(3)

HISTORY

This function first appeared in OpenSSL 1.1.0 and has been available since OpenBSD 6.5.