Standard preamble:
========================================================================
..
.... Set up some character translations and predefined strings. \*(-- will
give an unbreakable dash, \*(PI will give pi, \*(L" will give a left
double quote, and \*(R" will give a right double quote. \*(C+ will
give a nicer C++. Capital omega is used to do unbreakable dashes and
therefore won't be available. \*(C` and \*(C' expand to `' in nroff,
nothing in troff, for use with C<>.
.tr \(*W- . ds -- \(*W- . ds PI pi . if (\n(.H=4u)&(1m=24u) .ds -- \(*W\h'-12u'\(*W\h'-12u'-\" diablo 10 pitch . if (\n(.H=4u)&(1m=20u) .ds -- \(*W\h'-12u'\(*W\h'-8u'-\" diablo 12 pitch . ds L" "" . ds R" "" . ds C` "" . ds C' "" 'br\} . ds -- \|\(em\| . ds PI \(*p . ds L" `` . ds R" '' . ds C` . ds C' 'br\}
Escape single quotes in literal strings from groff's Unicode transform.
If the F register is >0, we'll generate index entries on stderr for
titles (.TH), headers (.SH), subsections (.SS), items (.Ip), and index
entries marked with X<> in POD. Of course, you'll have to process the
output yourself in some meaningful fashion.
Avoid warning from groff about undefined register 'F'.
.. .nr rF 0 . if \nF \{\ . de IX . tm Index:\\$1\t\\n%\t"\\$2" .. . if !\nF==2 \{\ . nr % 0 . nr F 2 . \} . \} .\} .rr rF
Accent mark definitions (@(#)ms.acc 1.5 88/02/08 SMI; from UCB 4.2).
Fear. Run. Save yourself. No user-serviceable parts.
. \" fudge factors for nroff and troff . ds #H 0 . ds #V .8m . ds #F .3m . ds #[ \f1 . ds #] .\} . ds #H ((1u-(\\\\n(.fu%2u))*.13m) . ds #V .6m . ds #F 0 . ds #[ \& . ds #] \& .\} . \" simple accents for nroff and troff . ds ' \& . ds ` \& . ds ^ \& . ds , \& . ds ~ ~ . ds / .\} . ds ' \\k:\h'-(\\n(.wu*8/10-\*(#H)'\'\h"|\\n:u" . ds ` \\k:\h'-(\\n(.wu*8/10-\*(#H)'\`\h'|\\n:u' . ds ^ \\k:\h'-(\\n(.wu*10/11-\*(#H)'^\h'|\\n:u' . ds , \\k:\h'-(\\n(.wu*8/10)',\h'|\\n:u' . ds ~ \\k:\h'-(\\n(.wu-\*(#H-.1m)'~\h'|\\n:u' . ds / \\k:\h'-(\\n(.wu*8/10-\*(#H)'\z\(sl\h'|\\n:u' .\} . \" troff and (daisy-wheel) nroff accents . \" corrections for vroff . \" for low resolution devices (crt and lpr) \{\ . ds : e . ds 8 ss . ds o a . ds d- d\h'-1'\(ga . ds D- D\h'-1'\(hy . ds th \o'bp' . ds Th \o'LP' . ds ae ae . ds Ae AE .\} ========================================================================
Title "X509_STORE_SET_VERIFY_CB_FUNC 3"
way too many mistakes in technical documents.
\fBX509_STORE_set_verify() sets the final chain verification function for \fBctx to verify. Its purpose is to go through the chain of certificates and check that all signatures are valid and that the current time is within the limits of each certificate's first and last validity time. The final chain verification functions must return 0 on failure and 1 on success. \fIIf no chain verification function is provided, the internal default function will be used instead.
\fBX509_STORE_set_get_issuer() sets the function to get the issuer certificate that verifies the given certificate x. When found, the issuer certificate must be assigned to *issuer. This function must return 0 on failure and 1 on success. \fIIf no function to get the issuer is provided, the internal default function will be used instead.
\fBX509_STORE_set_check_issued() sets the function to check that a given certificate x is issued by the issuer certificate issuer. This function must return 0 on failure (among others if x hasn't been issued with issuer) and 1 on success. \fIIf no function to get the issuer is provided, the internal default function will be used instead.
\fBX509_STORE_set_check_revocation() sets the revocation checking function. Its purpose is to look through the final chain and check the revocation status for each certificate. It must return 0 on failure and 1 on success. \fIIf no function to get the issuer is provided, the internal default function will be used instead.
\fBX509_STORE_set_get_crl() sets the function to get the crl for a given certificate x. When found, the crl must be assigned to *crl. This function must return 0 on failure and 1 on success. \fIIf no function to get the issuer is provided, the internal default function will be used instead.
\fBX509_STORE_set_check_crl() sets the function to check the validity of the given crl. This function must return 0 on failure and 1 on success. \fIIf no function to get the issuer is provided, the internal default function will be used instead.
\fBX509_STORE_set_cert_crl() sets the function to check the revocation status of the given certificate x against the given crl. This function must return 0 on failure and 1 on success. \fIIf no function to get the issuer is provided, the internal default function will be used instead.
\fBX509_STORE_set_check_policy() sets the function to check the policies of all the certificates in the final chain.. This function must return 0 on failure and 1 on success. \fIIf no function to get the issuer is provided, the internal default function will be used instead.
\fBX509_STORE_set_lookup_certs() and X509_STORE_set_lookup_crls() set the functions to look up all the certs or all the CRLs that match the given name nm. These functions return \s-1NULL\s0 on failure and a pointer to a stack of certificates (X509) or to a stack of CRLs (X509_CRL) on success. \fIIf no function to get the issuer is provided, the internal default function will be used instead.
\fBX509_STORE_set_cleanup() sets the final cleanup function, which is called when the context (X509_STORE_CTX) is being torn down. This function doesn't return any value. \fIIf no function to get the issuer is provided, the internal default function will be used instead.
\fBX509_STORE_get_verify_cb(), X509_STORE_CTX_get_verify(), \fBX509_STORE_get_get_issuer(), X509_STORE_get_check_issued(), \fBX509_STORE_get_check_revocation(), X509_STORE_get_get_crl(), \fBX509_STORE_get_check_crl(), X509_STORE_set_verify(), \fBX509_STORE_set_get_issuer(), X509_STORE_get_cert_crl(), \fBX509_STORE_get_check_policy(), X509_STORE_get_lookup_certs(), \fBX509_STORE_get_lookup_crls() and X509_STORE_get_cleanup() all return the function pointer assigned with X509_STORE_set_check_issued(), \fBX509_STORE_set_check_revocation(), X509_STORE_set_get_crl(), \fBX509_STORE_set_check_crl(), X509_STORE_set_cert_crl(), \fBX509_STORE_set_check_policy(), X509_STORE_set_lookup_certs(), \fBX509_STORE_set_lookup_crls() and X509_STORE_set_cleanup(), or \s-1NULL\s0 if no assignment has been made.
\fBX509_STORE_set_verify_cb_func(), X509_STORE_set_verify_func() and \fBX509_STORE_set_lookup_crls_cb() are aliases for \fBX509_STORE_set_verify_cb(), X509_STORE_set_verify() and X509_STORE_set_lookup_crls, available as macros for backward compatibility.
The X509_STORE_get_*() functions return a pointer of the appropriate function type.
The functions \fBX509_STORE_set_verify_cb(), X509_STORE_get_verify_cb(), \fBX509_STORE_set_verify(), X509_STORE_CTX_get_verify(), \fBX509_STORE_set_get_issuer(), X509_STORE_get_get_issuer(), \fBX509_STORE_set_check_issued(), X509_STORE_get_check_issued(), \fBX509_STORE_set_check_revocation(), X509_STORE_get_check_revocation(), \fBX509_STORE_set_get_crl(), X509_STORE_get_get_crl(), \fBX509_STORE_set_check_crl(), X509_STORE_get_check_crl(), \fBX509_STORE_set_cert_crl(), X509_STORE_get_cert_crl(), \fBX509_STORE_set_check_policy(), X509_STORE_get_check_policy(), \fBX509_STORE_set_lookup_certs(), X509_STORE_get_lookup_certs(), \fBX509_STORE_set_lookup_crls(), X509_STORE_get_lookup_crls(), \fBX509_STORE_set_cleanup() and X509_STORE_get_cleanup() were added in OpenSSL 1.1.0.
Licensed under the OpenSSL license (the \*(L"License\*(R"). You may not use this file except in compliance with the License. You can obtain a copy in the file \s-1LICENSE\s0 in the source distribution or at <https://www.openssl.org/source/license.html>.