NAME¶
SSL_get_client_CA_list, SSL_CTX_get_client_CA_list - get list of client CAs
SYNOPSIS¶
#include <openssl/ssl.h>
STACK_OF(X509_NAME) *SSL_get_client_CA_list(const SSL *s);
STACK_OF(X509_NAME) *SSL_CTX_get_client_CA_list(const SSL_CTX *ctx);
DESCRIPTION¶
SSL_CTX_get_client_CA_list() returns the list of client CAs explicitly
set for
ctx using
SSL_CTX_set_client_CA_list(3).
SSL_get_client_CA_list() returns the list of client CAs explicitly set
for
ssl using
SSL_set_client_CA_list() or
ssl's SSL_CTX
object with
SSL_CTX_set_client_CA_list(3), when in server mode. In
client mode, SSL_get_client_CA_list returns the list of client CAs sent from
the server, if any.
RETURN VALUES¶
SSL_CTX_set_client_CA_list() and
SSL_set_client_CA_list() do not
return diagnostic information.
SSL_CTX_add_client_CA() and
SSL_add_client_CA() have the following
return values:
- STACK_OF(X509_NAMES)
- List of CA names explicitly set (for ctx or in
server mode) or send by the server (client mode).
- NULL
- No client CA list was explicitly set (for ctx or in
server mode) or the server did not send a list of CAs (client mode).
SEE ALSO¶
ssl(3),
SSL_CTX_set_client_CA_list(3),
SSL_CTX_set_client_cert_cb(3)