generic-library/openssl
1
0
Fork 0
Code Issues Pull Requests Releases Wiki Activity

Option to set current cert to server certificate.

Browse Source 
(cherry picked from commit daddd9a950)
This commit is contained in:
Dr. Stephen Henson
2014-02-21 19:42:03 +00:00
parent a466be6243
commit 58b86e4235
4 changed files with 29 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

8
doc/ssl/SSL_CTX_add1_chain_cert.pod
View File

@@ -77,6 +77,14 @@ the first valid certificate or B<SSL_CERT_SET_NEXT> to set the next valid
certificate after the current certificate. These two operations can be
used to iterate over all certificates in an B<SSL_CTX> structure.
SSL_set_current_cert() also supports the option B<SSL_CERT_SET_SERVER>.
If B<ssl> is a server and has sent a certificate to a connected client
this option sets that certificate to the current certificate and returns 1.
If the negotiated ciphersuite is anonymous (and thus no certificate will
be sent) 2 is returned and the current certificate is unchanged. If B<ssl>
is not a server or a certificate has not been sent 0 is returned and
the current certificate is unchanged.
All these functions are implemented as macros. Those containing a B<1>
increment the reference count of the supplied certificate or chain so it must
be freed at some point after the operation. Those containing a B<0> do