Go to main content

man pages section 3: Extended Library Functions, Volume 1

Exit Print View

Updated: Wednesday, July 27, 2022
 
 

SSL_get_client_CA_list (3openssl)

Name

SSL_get_client_CA_list - get list of client CAs

Synopsis

#include <openssl/ssl.h>

STACK_OF(X509_NAME) *SSL_get_client_CA_list(const SSL *s);
STACK_OF(X509_NAME) *SSL_CTX_get_client_CA_list(const SSL_CTX *ctx);

Description

OpenSSL                                       SSL_get_client_CA_list(3openssl)



NAME
       SSL_get_client_CA_list, SSL_CTX_get_client_CA_list - get list of client
       CAs

SYNOPSIS
        #include <openssl/ssl.h>

        STACK_OF(X509_NAME) *SSL_get_client_CA_list(const SSL *s);
        STACK_OF(X509_NAME) *SSL_CTX_get_client_CA_list(const SSL_CTX *ctx);

DESCRIPTION
       SSL_CTX_get_client_CA_list() returns the list of client CAs explicitly
       set for ctx using SSL_CTX_set_client_CA_list(3).

       SSL_get_client_CA_list() returns the list of client CAs explicitly set
       for ssl using SSL_set_client_CA_list() or ssl's SSL_CTX object with
       SSL_CTX_set_client_CA_list(3), when in server mode. In client mode,
       SSL_get_client_CA_list returns the list of client CAs sent from the
       server, if any.

RETURN VALUES
       SSL_CTX_set_client_CA_list() and SSL_set_client_CA_list() do not return
       diagnostic information.

       SSL_CTX_add_client_CA() and SSL_add_client_CA() have the following
       return values:

       STACK_OF(X509_NAMES)
           List of CA names explicitly set (for ctx or in server mode) or send
           by the server (client mode).

       NULL
           No client CA list was explicitly set (for ctx or in server mode) or
           the server did not send a list of CAs (client mode).


ATTRIBUTES
       See attributes(7) for descriptions of the following attributes:


       +---------------+--------------------------+
       |ATTRIBUTE TYPE |     ATTRIBUTE VALUE      |
       +---------------+--------------------------+
       |Availability   | library/security/openssl |
       +---------------+--------------------------+
       |Stability      | Pass-through uncommitted |
       +---------------+--------------------------+

SEE ALSO
       ssl(3), SSL_CTX_set_client_CA_list(3), SSL_CTX_set_client_cert_cb(3)



NOTES
       Source code for open source software components in Oracle Solaris can
       be found at https://www.oracle.com/downloads/opensource/solaris-source-
       code-downloads.html.

       This software was built from source available at
       https://github.com/oracle/solaris-userland.  The original community
       source was downloaded from
       https://www.openssl.org/source/openssl-1.0.2ze.tar.gz.

       Further information about this software can be found on the open source
       community website at https://www.openssl.org/.



1.0.2ze                           2022-05-03
                                              SSL_get_client_CA_list(3openssl)