Go to main content

man pages section 3: Library Interfaces and Headers

Exit Print View

Updated: Wednesday, July 27, 2022
 
 

CURLINFO_CERTINFO (3)

Name

CURLINFO_CERTINFO - get the TLS certificate chain

Synopsis

#include <curl/curl.h>

CURLcode curl_easy_getinfo(CURL *handle, CURLINFO_CERTINFO,
struct curl_certinfo **chainp);

Description

CURLINFO_CERTINFO(3)       curl_easy_getinfo options      CURLINFO_CERTINFO(3)



NAME
       CURLINFO_CERTINFO - get the TLS certificate chain

SYNOPSIS
       #include <curl/curl.h>

       CURLcode curl_easy_getinfo(CURL *handle, CURLINFO_CERTINFO,
                                  struct curl_certinfo **chainp);

DESCRIPTION
       Pass a pointer to a 'struct curl_certinfo *' and you will get it set to
       point to a struct that holds a number of linked lists with  info  about
       the  certificate  chain,  assuming  you had CURLOPT_CERTINFO(3) enabled
       when the request was made. The struct reports how many certs  it  found
       and  then you can extract info for each of those certs by following the
       linked lists. The info chain is provided in a series  of  data  in  the
       format "name:content" where the content is for the specific named data.
       See also the certinfo.c example.

PROTOCOLS
       All TLS-based

EXAMPLE
       curl = curl_easy_init();
       if(curl) {
         curl_easy_setopt(curl, CURLOPT_URL, "https://www.example.com/");

         /* connect to any HTTPS site, trusted or not */
         curl_easy_setopt(curl, CURLOPT_SSL_VERIFYPEER, 0L);
         curl_easy_setopt(curl, CURLOPT_SSL_VERIFYHOST, 0L);

         curl_easy_setopt(curl, CURLOPT_CERTINFO, 1L);

         res = curl_easy_perform(curl);

         if (!res) {
           struct curl_certinfo *ci;
           res = curl_easy_getinfo(curl, CURLINFO_CERTINFO, &ci);

           if (!res) {
             printf("%d certs!\n", ci->num_of_certs);

             for(i = 0; i < ci->num_of_certs; i++) {
               struct curl_slist *slist;

               for(slist = ci->certinfo[i]; slist; slist = slist->next)
                 printf("%s\n", slist->data);
             }
           }
         }
         curl_easy_cleanup(curl);
       }

AVAILABILITY
       This option is only working in libcurl built with OpenSSL, NSS,  Schan-
       nel,  GSKit  or  Secure  Transport  support.  Schannel support added in
       7.50.0. Secure Transport support added in 7.79.0.

       Added in 7.19.1

RETURN VALUE
       Returns CURLE_OK if the option is supported,  and  CURLE_UNKNOWN_OPTION
       if not.


ATTRIBUTES
       See attributes(7) for descriptions of the following attributes:


       +---------------+------------------+
       |ATTRIBUTE TYPE | ATTRIBUTE VALUE  |
       +---------------+------------------+
       |Availability   | web/curl         |
       +---------------+------------------+
       |Stability      | Uncommitted      |
       +---------------+------------------+

SEE ALSO
       curl_easy_getinfo(3), curl_easy_setopt(3),



NOTES
       Source  code  for open source software components in Oracle Solaris can
       be found at https://www.oracle.com/downloads/opensource/solaris-source-
       code-downloads.html.

       This     software     was    built    from    source    available    at
       https://github.com/oracle/solaris-userland.   The  original   community
       source       was       downloaded      from       https://curl.se/down-
       load/curl-7.83.1.tar.bz2.

       Further information about this software can be found on the open source
       community website at http://curl.haxx.se/.



libcurl 7.83.1                 November 26, 2021          CURLINFO_CERTINFO(3)