| SSL_CTX_load_verify_locations.3 (206048) | SSL_CTX_load_verify_locations.3 (215698) |
|---|---|
| 1.\" Automatically generated by Pod::Man v1.37, Pod::Parser v1.37 | 1.\" Automatically generated by Pod::Man 2.22 (Pod::Simple 3.07) |
| 2.\" 3.\" Standard preamble: 4.\" ======================================================================== | 2.\" 3.\" Standard preamble: 4.\" ======================================================================== |
| 5.de Sh \" Subsection heading 6.br 7.if t .Sp 8.ne 5 9.PP 10\fB\\$1\fR 11.PP 12.. | |
| 13.de Sp \" Vertical space (when we can't use .PP) 14.if t .sp .5v 15.if n .sp 16.. 17.de Vb \" Begin verbatim text 18.ft CW 19.nf 20.ne \\$1 21.. 22.de Ve \" End verbatim text 23.ft R 24.fi 25.. 26.\" Set up some character translations and predefined strings. \*(-- will 27.\" give an unbreakable dash, \*(PI will give pi, \*(L" will give a left | 5.de Sp \" Vertical space (when we can't use .PP) 6.if t .sp .5v 7.if n .sp 8.. 9.de Vb \" Begin verbatim text 10.ft CW 11.nf 12.ne \\$1 13.. 14.de Ve \" End verbatim text 15.ft R 16.fi 17.. 18.\" Set up some character translations and predefined strings. \*(-- will 19.\" give an unbreakable dash, \*(PI will give pi, \*(L" will give a left |
| 28.\" double quote, and \*(R" will give a right double quote. | will give a 29.\" real vertical bar. \*(C+ will give a nicer C++. Capital omega is used to 30.\" do unbreakable dashes and therefore won't be available. \*(C` and \*(C' 31.\" expand to `' in nroff, nothing in troff, for use with C<>. 32.tr \(*W-|\(bv\*(Tr | 20.\" double quote, and \*(R" will give a right double quote. \*(C+ will 21.\" give a nicer C++. Capital omega is used to do unbreakable dashes and 22.\" therefore won't be available. \*(C` and \*(C' expand to `' in nroff, 23.\" nothing in troff, for use with C<>. 24.tr \(*W- |
| 33.ds C+ C\v'-.1v'\h'-1p'\s-2+\h'-1p'+\s0\v'.1v'\h'-1p' 34.ie n \{\ 35. ds -- \(*W- 36. ds PI pi 37. if (\n(.H=4u)&(1m=24u) .ds -- \(*W\h'-12u'\(*W\h'-12u'-\" diablo 10 pitch 38. if (\n(.H=4u)&(1m=20u) .ds -- \(*W\h'-12u'\(*W\h'-8u'-\" diablo 12 pitch 39. ds L" "" 40. ds R" "" 41. ds C` "" 42. ds C' "" 43'br\} 44.el\{\ 45. ds -- \|\(em\| 46. ds PI \(*p 47. ds L" `` 48. ds R" '' 49'br\} 50.\" | 25.ds C+ C\v'-.1v'\h'-1p'\s-2+\h'-1p'+\s0\v'.1v'\h'-1p' 26.ie n \{\ 27. ds -- \(*W- 28. ds PI pi 29. if (\n(.H=4u)&(1m=24u) .ds -- \(*W\h'-12u'\(*W\h'-12u'-\" diablo 10 pitch 30. if (\n(.H=4u)&(1m=20u) .ds -- \(*W\h'-12u'\(*W\h'-8u'-\" diablo 12 pitch 31. ds L" "" 32. ds R" "" 33. ds C` "" 34. ds C' "" 35'br\} 36.el\{\ 37. ds -- \|\(em\| 38. ds PI \(*p 39. ds L" `` 40. ds R" '' 41'br\} 42.\" |
| 43.\" Escape single quotes in literal strings from groff's Unicode transform. 44.ie \n(.g .ds Aq \(aq 45.el .ds Aq ' 46.\" |
|
| 51.\" If the F register is turned on, we'll generate index entries on stderr for | 47.\" If the F register is turned on, we'll generate index entries on stderr for |
| 52.\" titles (.TH), headers (.SH), subsections (.Sh), items (.Ip), and index | 48.\" titles (.TH), headers (.SH), subsections (.SS), items (.Ip), and index |
| 53.\" entries marked with X<> in POD. Of course, you'll have to process the 54.\" output yourself in some meaningful fashion. | 49.\" entries marked with X<> in POD. Of course, you'll have to process the 50.\" output yourself in some meaningful fashion. |
| 55.if \nF \{\ | 51.ie \nF \{\ |
| 56. de IX 57. tm Index:\\$1\t\\n%\t"\\$2" 58.. 59. nr % 0 60. rr F 61.\} | 52. de IX 53. tm Index:\\$1\t\\n%\t"\\$2" 54.. 55. nr % 0 56. rr F 57.\} |
| 58.el \{\ 59. de IX 60.. 61.\} |
|
| 62.\" | 62.\" |
| 63.\" For nroff, turn off justification. Always turn off hyphenation; it makes 64.\" way too many mistakes in technical documents. 65.hy 0 66.if n .na 67.\" | |
| 68.\" Accent mark definitions (@(#)ms.acc 1.5 88/02/08 SMI; from UCB 4.2). 69.\" Fear. Run. Save yourself. No user-serviceable parts. 70. \" fudge factors for nroff and troff 71.if n \{\ 72. ds #H 0 73. ds #V .8m 74. ds #F .3m 75. ds #[ \f1 --- 48 unchanged lines hidden (view full) --- 124. ds Th \o'LP' 125. ds ae ae 126. ds Ae AE 127.\} 128.rm #[ #] #H #V #F C 129.\" ======================================================================== 130.\" 131.IX Title "SSL_CTX_load_verify_locations 3" | 63.\" Accent mark definitions (@(#)ms.acc 1.5 88/02/08 SMI; from UCB 4.2). 64.\" Fear. Run. Save yourself. No user-serviceable parts. 65. \" fudge factors for nroff and troff 66.if n \{\ 67. ds #H 0 68. ds #V .8m 69. ds #F .3m 70. ds #[ \f1 --- 48 unchanged lines hidden (view full) --- 119. ds Th \o'LP' 120. ds ae ae 121. ds Ae AE 122.\} 123.rm #[ #] #H #V #F C 124.\" ======================================================================== 125.\" 126.IX Title "SSL_CTX_load_verify_locations 3" |
| 132.TH SSL_CTX_load_verify_locations 3 "2010-03-24" "0.9.8n" "OpenSSL" | 127.TH SSL_CTX_load_verify_locations 3 "2010-11-16" "0.9.8p" "OpenSSL" 128.\" For nroff, turn off justification. Always turn off hyphenation; it makes 129.\" way too many mistakes in technical documents. 130.if n .ad l 131.nh |
| 133.SH "NAME" 134SSL_CTX_load_verify_locations \- set default locations for trusted CA 135certificates 136.SH "SYNOPSIS" 137.IX Header "SYNOPSIS" 138.Vb 1 139\& #include <openssl/ssl.h> | 132.SH "NAME" 133SSL_CTX_load_verify_locations \- set default locations for trusted CA 134certificates 135.SH "SYNOPSIS" 136.IX Header "SYNOPSIS" 137.Vb 1 138\& #include <openssl/ssl.h> |
| 140.Ve 141.PP 142.Vb 2 | 139\& |
| 143\& int SSL_CTX_load_verify_locations(SSL_CTX *ctx, const char *CAfile, 144\& const char *CApath); 145.Ve 146.SH "DESCRIPTION" 147.IX Header "DESCRIPTION" 148\&\fISSL_CTX_load_verify_locations()\fR specifies the locations for \fBctx\fR, at 149which \s-1CA\s0 certificates for verification purposes are located. The certificates 150available via \fBCAfile\fR and \fBCApath\fR are trusted. 151.SH "NOTES" 152.IX Header "NOTES" 153If \fBCAfile\fR is not \s-1NULL\s0, it points to a file of \s-1CA\s0 certificates in \s-1PEM\s0 154format. The file can contain several \s-1CA\s0 certificates identified by 155.PP 156.Vb 3 | 140\& int SSL_CTX_load_verify_locations(SSL_CTX *ctx, const char *CAfile, 141\& const char *CApath); 142.Ve 143.SH "DESCRIPTION" 144.IX Header "DESCRIPTION" 145\&\fISSL_CTX_load_verify_locations()\fR specifies the locations for \fBctx\fR, at 146which \s-1CA\s0 certificates for verification purposes are located. The certificates 147available via \fBCAfile\fR and \fBCApath\fR are trusted. 148.SH "NOTES" 149.IX Header "NOTES" 150If \fBCAfile\fR is not \s-1NULL\s0, it points to a file of \s-1CA\s0 certificates in \s-1PEM\s0 151format. The file can contain several \s-1CA\s0 certificates identified by 152.PP 153.Vb 3 |
| 157\& -----BEGIN CERTIFICATE----- | 154\& \-\-\-\-\-BEGIN CERTIFICATE\-\-\-\-\- |
| 158\& ... (CA certificate in base64 encoding) ... | 155\& ... (CA certificate in base64 encoding) ... |
| 159\& -----END CERTIFICATE----- | 156\& \-\-\-\-\-END CERTIFICATE\-\-\-\-\- |
| 160.Ve 161.PP 162sequences. Before, between, and after the certificates text is allowed 163which can be used e.g. for descriptions of the certificates. 164.PP 165The \fBCAfile\fR is processed on execution of the \fISSL_CTX_load_verify_locations()\fR 166function. 167.PP --- 43 unchanged lines hidden (view full) --- 211.IX Header "EXAMPLES" 212Generate a \s-1CA\s0 certificate file with descriptive text from the \s-1CA\s0 certificates 213ca1.pem ca2.pem ca3.pem: 214.PP 215.Vb 5 216\& #!/bin/sh 217\& rm CAfile.pem 218\& for i in ca1.pem ca2.pem ca3.pem ; do | 157.Ve 158.PP 159sequences. Before, between, and after the certificates text is allowed 160which can be used e.g. for descriptions of the certificates. 161.PP 162The \fBCAfile\fR is processed on execution of the \fISSL_CTX_load_verify_locations()\fR 163function. 164.PP --- 43 unchanged lines hidden (view full) --- 208.IX Header "EXAMPLES" 209Generate a \s-1CA\s0 certificate file with descriptive text from the \s-1CA\s0 certificates 210ca1.pem ca2.pem ca3.pem: 211.PP 212.Vb 5 213\& #!/bin/sh 214\& rm CAfile.pem 215\& for i in ca1.pem ca2.pem ca3.pem ; do |
| 219\& openssl x509 -in $i -text >> CAfile.pem | 216\& openssl x509 \-in $i \-text >> CAfile.pem |
| 220\& done 221.Ve 222.PP 223Prepare the directory /some/where/certs containing several \s-1CA\s0 certificates 224for use as \fBCApath\fR: 225.PP 226.Vb 2 227\& cd /some/where/certs --- 20 unchanged lines hidden --- | 217\& done 218.Ve 219.PP 220Prepare the directory /some/where/certs containing several \s-1CA\s0 certificates 221for use as \fBCApath\fR: 222.PP 223.Vb 2 224\& cd /some/where/certs --- 20 unchanged lines hidden --- |