GSP
Quick Navigator

Search Site

Unix VPS
A - Starter
B - Basic
C - Preferred
D - Commercial
MPS - Dedicated
Previous VPSs
* Sign Up! *

Support
Contact Us
Online Help
Handbooks
Domain Status
Man Pages

FAQ
Virtual Servers
Pricing
Billing
Technical

Network
Facilities
Connectivity
Topology Map

Miscellaneous
Server Agreement
Year 2038
Credits
 

USA Flag

 

 

Man Pages


Manual Reference Pages  -  X509_VERIFY_CERT (3)

.ds Aq ’

NAME

X509_verify_cert - discover and verify X509 certificte chain

CONTENTS

SYNOPSIS



 #include <openssl/x509.h>

 int X509_verify_cert(X509_STORE_CTX *ctx);



DESCRIPTION

The X509_verify_cert() function attempts to discover and validate a certificate chain based on parameters in ctx. A complete description of the process is contained in the verify(1) manual page.

RETURN VALUES

If a complete chain can be built and validated this function returns 1, otherwise it return zero, in exceptional circumstances it can also return a negative code.

If the function fails additional error information can be obtained by examining ctx using, for example X509_STORE_CTX_get_error().

NOTES

Applications rarely call this function directly but it is used by OpenSSL internally for certificate validation, in both the S/MIME and SSL/TLS code.

The negative return value from X509_verify_cert() can only occur if no certificate is set in ctx (due to a programming error); if X509_verify_cert() twice without reinitialising ctx in between; or if a retry operation is requested during internal lookups (which never happens with standard lookup methods). It is however recommended that application check for <= 0 return value on error.

BUGS

This function uses the header x509.h as opposed to most chain verification functiosn which use x509_vfy.h.

SEE ALSO

X509_STORE_CTX_get_error(3)

HISTORY

X509_verify_cert() is available in all versions of SSLeay and OpenSSL.
Search for    or go to Top of page |  Section 3 |  Main Index


1.0.1s X509_VERIFY_CERT (3) 2016-03-01

Powered by GSP Visit the GSP FreeBSD Man Page Interface.
Output converted with manServer 1.07.