xref: /freebsd/crypto/openssl/doc/man3/SSL_get0_peer_scts.pod (revision b077aed33b7b6aefca7b17ddb250cf521f938613)
1e71b7053SJung-uk Kim=pod
2e71b7053SJung-uk Kim
3e71b7053SJung-uk Kim=head1 NAME
4e71b7053SJung-uk Kim
5e71b7053SJung-uk KimSSL_get0_peer_scts - get SCTs received
6e71b7053SJung-uk Kim
7e71b7053SJung-uk Kim=head1 SYNOPSIS
8e71b7053SJung-uk Kim
9e71b7053SJung-uk Kim #include <openssl/ssl.h>
10e71b7053SJung-uk Kim
11e71b7053SJung-uk Kim const STACK_OF(SCT) *SSL_get0_peer_scts(SSL *s);
12e71b7053SJung-uk Kim
13e71b7053SJung-uk Kim=head1 DESCRIPTION
14e71b7053SJung-uk Kim
15e71b7053SJung-uk KimSSL_get0_peer_scts() returns the signed certificate timestamps (SCTs) that have
16e71b7053SJung-uk Kimbeen received. If this is the first time that this function has been called for
17e71b7053SJung-uk Kima given B<SSL> instance, it will examine the TLS extensions, OCSP response and
18e71b7053SJung-uk Kimthe peer's certificate for SCTs. Future calls will return the same SCTs.
19e71b7053SJung-uk Kim
20e71b7053SJung-uk Kim=head1 RESTRICTIONS
21e71b7053SJung-uk Kim
22e71b7053SJung-uk KimIf no Certificate Transparency validation callback has been set (using
23e71b7053SJung-uk KimB<SSL_CTX_set_ct_validation_callback> or B<SSL_set_ct_validation_callback>),
24e71b7053SJung-uk Kimthis function is not guaranteed to return all of the SCTs that the peer is
25e71b7053SJung-uk Kimcapable of sending.
26e71b7053SJung-uk Kim
27e71b7053SJung-uk Kim=head1 RETURN VALUES
28e71b7053SJung-uk Kim
29e71b7053SJung-uk KimSSL_get0_peer_scts() returns a list of SCTs found, or NULL if an error occurs.
30e71b7053SJung-uk Kim
31e71b7053SJung-uk Kim=head1 SEE ALSO
32e71b7053SJung-uk Kim
33e71b7053SJung-uk KimL<ssl(7)>,
34e71b7053SJung-uk KimL<SSL_CTX_set_ct_validation_callback(3)>
35e71b7053SJung-uk Kim
36e71b7053SJung-uk Kim=head1 COPYRIGHT
37e71b7053SJung-uk Kim
38e71b7053SJung-uk KimCopyright 2016 The OpenSSL Project Authors. All Rights Reserved.
39e71b7053SJung-uk Kim
40*b077aed3SPierre ProncheryLicensed under the Apache License 2.0 (the "License").  You may not use
41e71b7053SJung-uk Kimthis file except in compliance with the License.  You can obtain a copy
42e71b7053SJung-uk Kimin the file LICENSE in the source distribution or at
43e71b7053SJung-uk KimL<https://www.openssl.org/source/license.html>.
44e71b7053SJung-uk Kim
45e71b7053SJung-uk Kim=cut
46