diff options
Diffstat (limited to 'src/lib/libssl/doc/SSL_CTX_set_cert_store.3')
-rw-r--r-- | src/lib/libssl/doc/SSL_CTX_set_cert_store.3 | 80 |
1 files changed, 0 insertions, 80 deletions
diff --git a/src/lib/libssl/doc/SSL_CTX_set_cert_store.3 b/src/lib/libssl/doc/SSL_CTX_set_cert_store.3 deleted file mode 100644 index 8ef3c5561e..0000000000 --- a/src/lib/libssl/doc/SSL_CTX_set_cert_store.3 +++ /dev/null | |||
@@ -1,80 +0,0 @@ | |||
1 | .\" | ||
2 | .\" $OpenBSD: SSL_CTX_set_cert_store.3,v 1.2 2014/12/02 14:11:01 jmc Exp $ | ||
3 | .\" | ||
4 | .Dd $Mdocdate: December 2 2014 $ | ||
5 | .Dt SSL_CTX_SET_CERT_STORE 3 | ||
6 | .Os | ||
7 | .Sh NAME | ||
8 | .Nm SSL_CTX_set_cert_store , | ||
9 | .Nm SSL_CTX_get_cert_store | ||
10 | .Nd manipulate X509 certificate verification storage | ||
11 | .Sh SYNOPSIS | ||
12 | .In openssl/ssl.h | ||
13 | .Ft void | ||
14 | .Fn SSL_CTX_set_cert_store "SSL_CTX *ctx" "X509_STORE *store" | ||
15 | .Ft X509_STORE * | ||
16 | .Fn SSL_CTX_get_cert_store "const SSL_CTX *ctx" | ||
17 | .Sh DESCRIPTION | ||
18 | .Fn SSL_CTX_set_cert_store | ||
19 | setsthe verification storage of | ||
20 | .Fa ctx | ||
21 | to or replaces it with | ||
22 | .Fa store . | ||
23 | If another | ||
24 | .Vt X509_STORE | ||
25 | object is currently set in | ||
26 | .Fa ctx , | ||
27 | it will be | ||
28 | .Xr X509_STORE_free 3 Ns ed. | ||
29 | .Pp | ||
30 | .Fn SSL_CTX_get_cert_store | ||
31 | returns a pointer to the current certificate verification storage. | ||
32 | .Sh NOTES | ||
33 | In order to verify the certificates presented by the peer, trusted CA | ||
34 | certificates must be accessed. | ||
35 | These CA certificates are made available via lookup methods, handled inside the | ||
36 | .Vt X509_STORE . | ||
37 | From the | ||
38 | .Vt X509_STORE | ||
39 | the | ||
40 | .Vt X509_STORE_CTX | ||
41 | used when verifying certificates is created. | ||
42 | .Pp | ||
43 | Typically the trusted certificate store is handled indirectly via using | ||
44 | .Xr SSL_CTX_load_verify_locations 3 . | ||
45 | Using the | ||
46 | .Fn SSL_CTX_set_cert_store | ||
47 | and | ||
48 | .Fn SSL_CTX_get_cert_store | ||
49 | functions it is possible to manipulate the | ||
50 | .Vt X509_STORE | ||
51 | object beyond the | ||
52 | .Xr SSL_CTX_load_verify_locations 3 | ||
53 | call. | ||
54 | .Pp | ||
55 | Currently no detailed documentation on how to use the | ||
56 | .Vt X509_STORE | ||
57 | object is available. | ||
58 | Not all members of the | ||
59 | .Vt X509_STORE | ||
60 | are used when the verification takes place. | ||
61 | So will, for example, the | ||
62 | .Fn verify_callback | ||
63 | be overridden with the | ||
64 | .Fn verify_callback | ||
65 | set via the | ||
66 | .Xr SSL_CTX_set_verify 3 | ||
67 | family of functions. | ||
68 | This document must therefore be updated when documentation about the | ||
69 | .Vt X509_STORE | ||
70 | object and its handling becomes available. | ||
71 | .Sh RETURN VALUES | ||
72 | .Fn SSL_CTX_set_cert_store | ||
73 | does not return diagnostic output. | ||
74 | .Pp | ||
75 | .Fn SSL_CTX_get_cert_store | ||
76 | returns the current setting. | ||
77 | .Sh SEE ALSO | ||
78 | .Xr ssl 3 , | ||
79 | .Xr SSL_CTX_load_verify_locations 3 , | ||
80 | .Xr SSL_CTX_set_verify 3 | ||