b97fdb57a2
Reviewed-by: Rich Salz <rsalz@openssl.org> (Merged from https://github.com/openssl/openssl/pull/1900)
62 lines
1.6 KiB
Text
62 lines
1.6 KiB
Text
=pod
|
|
|
|
=head1 NAME
|
|
|
|
SSL_get_client_CA_list, SSL_CTX_get_client_CA_list - get list of client CAs
|
|
|
|
=head1 SYNOPSIS
|
|
|
|
#include <openssl/ssl.h>
|
|
|
|
STACK_OF(X509_NAME) *SSL_get_client_CA_list(const SSL *s);
|
|
STACK_OF(X509_NAME) *SSL_CTX_get_client_CA_list(const SSL_CTX *ctx);
|
|
|
|
=head1 DESCRIPTION
|
|
|
|
SSL_CTX_get_client_CA_list() returns the list of client CAs explicitly set for
|
|
B<ctx> using L<SSL_CTX_set_client_CA_list(3)>.
|
|
|
|
SSL_get_client_CA_list() returns the list of client CAs explicitly
|
|
set for B<ssl> using SSL_set_client_CA_list() or B<ssl>'s SSL_CTX object with
|
|
L<SSL_CTX_set_client_CA_list(3)>, when in
|
|
server mode. In client mode, SSL_get_client_CA_list returns the list of
|
|
client CAs sent from the server, if any.
|
|
|
|
=head1 RETURN VALUES
|
|
|
|
SSL_CTX_set_client_CA_list() and SSL_set_client_CA_list() do not return
|
|
diagnostic information.
|
|
|
|
SSL_CTX_add_client_CA() and SSL_add_client_CA() have the following return
|
|
values:
|
|
|
|
=over 4
|
|
|
|
=item STACK_OF(X509_NAMES)
|
|
|
|
List of CA names explicitly set (for B<ctx> or in server mode) or send
|
|
by the server (client mode).
|
|
|
|
=item NULL
|
|
|
|
No client CA list was explicitly set (for B<ctx> or in server mode) or
|
|
the server did not send a list of CAs (client mode).
|
|
|
|
=back
|
|
|
|
=head1 SEE ALSO
|
|
|
|
L<ssl(7)>,
|
|
L<SSL_CTX_set_client_CA_list(3)>,
|
|
L<SSL_CTX_set_client_cert_cb(3)>
|
|
|
|
=head1 COPYRIGHT
|
|
|
|
Copyright 2000-2016 The OpenSSL Project Authors. All Rights Reserved.
|
|
|
|
Licensed under the OpenSSL license (the "License"). You may not use
|
|
this file except in compliance with the License. You can obtain a copy
|
|
in the file LICENSE in the source distribution or at
|
|
L<https://www.openssl.org/source/license.html>.
|
|
|
|
=cut
|