Manual Pages for UNIX Operating System command usage for man SSL

OpenSSL                                             ssl(3openssl)



NNNNAAAAMMMMEEEE
     SSL - OpenSSL SSL/TLS library

SSSSYYYYNNNNOOOOPPPPSSSSIIIISSSS
DDDDEEEESSSSCCCCRRRRIIIIPPPPTTTTIIIIOOOONNNN
     The OpenSSL ssssssssllll library implements the Secure Sockets Layer
     (SSL v2/v3) and Transport Layer Security (TLS v1) protocols.
     It provides a rich API which is documented here.

     At first the library must be initialized; see
     SSL_library_init(3).

  Te nSSSSLL_CCTTXXojc scetda  rmwr o
     establish TLS/SSL enabled connections (see SSL_CTX_new(3)).
     Various options regarding certificates, algorithms etc. can
     be set in this object.

     When a network connection has been created, it can be
  asge oa SSSSLLojc.AtrteSSSSLL bethsbe
     created using SSL_new(3), SSL_set_fd(3) or SSL_set_bio(3)
     can be used to associate the network connection with the
     object.

     Then the TLS/SSL handshake is performed using SSL_accept(3)
     or SSL_connect(3) respectively.  SSL_read(3) and
     SSL_write(3) are used to read and write data on the TLS/SSL
     connection.  SSL_shutdown(3) can be used to shut down the
     TLS/SSL connection.

DDDDAAAATTTTAAAA SSSSTTTTRRRRUUUUCCCCTTTTUUUURRRREEEESSSS
     Currently the OpenSSL ssssssssllll library functions deals with the
     following data structures:

  SSSSLL_MMEETTHHOODD(S ehd
         That's a dispatch structure describing the internal ssssssssllll
         library methods/functions which implement the various
         protocol versions (SSLv1, SSLv2 and TLSv1). It's needed
    t raea SSSSLLCCTTXX.
  SSSSLL_CCIIPPHHEERR(S ihr
         This structure holds the algorithm information for a
         particular cipher which are a core part of the SSL/TLS
         protocol. The available ciphers are configured on a
    SSSSLL_CCTTXXbssadteatal sdoe r hnpr
    o h SSSSLLSSEESSSSIIOONN.
  SSSSLL_CCTTXX(S otx)
         That's the global context structure which is created by
         a server or client once per program life-time and which
    hlsmil eal ausfrteSSSSLL tutrswih
         are later created for the connections.




30/Mar/2005            Last change: 0.9.8o                      1






OpenSSL                                             ssl(3openssl)



  SSSSLL_SSEESSSSIIOONN(S eso)
         This is a structure containing the current TLS/SSL
    ssindtisfracneto:SSSSLL_CCIIPPHHEERR,cin
         and server certificates, keys, etc.

  SSSSLL SLCneto)
         That's the main SSL/TLS structure which is created by a
         server or client per established connection. This
         actually is the core structure in the SSL API.  Under
         run-time the application usually deals with this
         structure which has links to mostly all other
         structures.

HHHHEEEEAAAADDDDEEEERRRR FFFFIIIILLLLEEEESSSS
     Currently the OpenSSL ssssssssllll library provides the following C
     header files containing the prototypes for the data
     structures and and functions:

     ssssssssllll....hhhh
         That's the common header file for the SSL/TLS API.
         Include it into your program to make the API of the ssssssssllll
         library available. It internally includes both more
         private SSL headers and headers from the ccccrrrryyyyppppttttoooo library.
         Whenever you need hard-core details on the internals of
         the SSL API, look inside this header file.

     ssssssssllll2222....hhhh
         That's the sub header file dealing with the SSLv2
         protocol only.  Usually you don't have to include it
         explicitly because it's already included by ssl.h.

     ssssssssllll3333....hhhh
         That's the sub header file dealing with the SSLv3
         protocol only.  Usually you don't have to include it
         explicitly because it's already included by ssl.h.

     ssssssssllll22223333....hhhh
         That's the sub header file dealing with the combined use
         of the SSLv2 and SSLv3 protocols.  Usually you don't
         have to include it explicitly because it's already
         included by ssl.h.

     ttttllllssss1111....hhhh
         That's the sub header file dealing with the TLSv1
         protocol only.  Usually you don't have to include it
         explicitly because it's already included by ssl.h.

AAAAPPPPIIII FFFFUUUUNNNNCCCCTTTTIIIIOOOONNNNSSSS
     Currently the OpenSSL ssssssssllll library exports 214 API functions.
     They are documented in the following:





30/Mar/2005            Last change: 0.9.8o                      2






OpenSSL                                             ssl(3openssl)



     DDDDEEEEAAAALLLLIIIINNNNGGGG WWWWIIIITTTTHHHH PPPPRRRROOOOTTTTOOOOCCCCOOOOLLLL MMMMEEEETTTTHHHHOOOODDDDSSSS

     Here we document the various API functions which deal with
  teSLTSpooo ehd eie nSSSSLL_MMEETTHHOODD
     structures.

  SLMTO SSSSLLvv22_cclliieennttmmeetthhoodd(od;
         Constructor for the SSLv2 SSL_METHOD structure for a
         dedicated client.

  SLMTO SSSSLLvv22_sseerrvveerrmmeetthhoodd(od;
         Constructor for the SSLv2 SSL_METHOD structure for a
         dedicated server.

  SLMTO SSSSLLvv22_mmeetthhooddvi)
         Constructor for the SSLv2 SSL_METHOD structure for
         combined client and server.

  SLMTO SSSSLLvv33_cclliieennttmmeetthhoodd(od;
         Constructor for the SSLv3 SSL_METHOD structure for a
         dedicated client.

  SLMTO SSSSLLvv33_sseerrvveerrmmeetthhoodd(od;
         Constructor for the SSLv3 SSL_METHOD structure for a
         dedicated server.

  SLMTO SSSSLLvv33_mmeetthhooddvi)
         Constructor for the SSLv3 SSL_METHOD structure for
         combined client and server.

     SSL_METHOD *TTTTLLLLSSSSvvvv1111_cccclllliiiieeeennnntttt_mmmmeeeetttthhhhoooodddd(void);
         Constructor for the TLSv1 SSL_METHOD structure for a
         dedicated client.

     SSL_METHOD *TTTTLLLLSSSSvvvv1111_sssseeeerrrrvvvveeeerrrr_mmmmeeeetttthhhhoooodddd(void);
         Constructor for the TLSv1 SSL_METHOD structure for a
         dedicated server.

     SSL_METHOD *TTTTLLLLSSSSvvvv1111_mmmmeeeetttthhhhoooodddd(void);
         Constructor for the TLSv1 SSL_METHOD structure for
         combined client and server.

     DDDDEEEEAAAALLLLIIIINNNNGGGG WWWWIIIITTTTHHHH CCCCIIIIPPPPHHHHEEEERRRRSSSS

     Here we document the various API functions which deal with
  teSLTScpesdfndi SSSSLLCCIIPPHHEERR tutrs

len);
  ca SSSSLL_CCIIPPHHEERRddeessccrriippttiioonn(S_IHR*ihr hr*u,it
         Write a string to buf (with a maximum size of len)
         containing a human readable description of cipher.
         Returns buf.



30/Mar/2005            Last change: 0.9.8o                      3






OpenSSL                                             ssl(3openssl)



  itSSSSLL_CCIIPPHHEERRggeett_bbiittssSLCPE cpe,it*l_is;
         Determine the number of bits in cipher. Because of
         export crippled ciphers there are two bits: The bits the
         algorithm supports in general (stored to alg_bits) and
         the bits which are actually used (the return value).

  cntca SSSSLL_CCIIPPHHEERRggeett_nnaammeeSLCPE cpe)
         Return the internal name of cipher as a string. These
         are the various strings defined by the SSL2_TXT_xxx,
         SSL3_TXT_xxx and TLS1_TXT_xxx definitions in the header
         files.

  ca SSSSLL_CCIIPPHHEERRggeett_vveerrssiioonnSLCPE cpe)
         Returns a string like "TLSv1/SSLv3" or "SSLv2" which
         indicates the SSL/TLS protocol version to which cipher
         belongs (i.e. where it was defined in the specification
         the first time).

     DDDDEEEEAAAALLLLIIIINNNNGGGG WWWWIIIITTTTHHHH PPPPRRRROOOOTTTTOOOOCCCCOOOOLLLL CCCCOOOONNNNTTTTEEEEXXXXTTTTSSSS

     Here we document the various API functions which deal with
  teSLTSpooo otx eie nteSSSSLL_CCTTXX
     structure.

  itSSSSLL_CCTTXXaadddd_cclliieennttCCAA(S_T cx 59*)

  ln SSSSLLCCTTXX_aaddddeexxttrraa_cchhaaiinncceerrtt(S_T cx 59*59;
  itSSSSLL_CCTTXXaadddd_sseessssiioonnSLCX*t,SLSSIN*)

  itSSSSLL_CCTTXXcchheecckk_pprriivvaatteekkeeyy(os S_T cx;
  ln SSSSLLCCTTXX_ccttrrllSLCX*t,itcd oglr,ca pr)

  vi SSSSLLCCTTXX_fflluusshhsseessssiioonnss(S_T s ogt;
  vi SSSSLLCCTTXX_ffrreeeeSLCX*)

  ca SSSSLL_CCTTXXggeett_aappppddaattaa(S_T cx;
  X0_TR SSSSLL_CCTTXXggeett_cceerrttssttoorree(S_T cx;
  SAK*SSSSLLCCTTXX_ggeettcclliieenntt_CCAAlliisstt(os S_T cx;
**x509, EVP_PKEY **pkey);
  it(SSSSLL_CCTTXXggeett_cclliieennttcceerrtt_ccbbSLCX*t)(S sl 59
  ca SSSSLL_CCTTXXggeett_eexxddaattaa(os S_T s n d)

(*new_func);(void), int (*dup_func)(void), void
(*free_func)(void))
  itSSSSLL_CCTTXXggeett_eexxnneeww_iinnddeexxln rl hr*rp n



30/Mar/2005            Last change: 0.9.8o                      4






OpenSSL                                             ssl(3openssl)



int ret);
  vi *SSSSLLCCTTXX_ggeettiinnffoo_ccaallllbbaacckkSLCX*t)(S sl n b

  itSSSSLL_CCTTXXggeett_qquuiieettsshhuuttddoowwnn(os S_T cx;
  itSSSSLL_CCTTXXggeett_sseessssiioonnccaacchhee_mmooddeeSLCX*t)

  ln SSSSLLCCTTXX_ggeettttiimmeeoouutt(os S_T cx;
X509_STORE_CTX *ctx);
  it(SSSSLL_CCTTXXggeett_vveerriiffyyccaallllbbaacckk(os S_T cx)ito,
  itSSSSLL_CCTTXXggeett_vveerriiffyymmooddee(S_T cx;
char *CApath);
  itSSSSLL_CCTTXXllooaadd_vveerriiffyyllooccaattiioonnss(S_T cx hr*Aie

  ln SSSSLLCCTTXX_nneeeeddttmmpp_RRSSAASLCX*t)

  SLCX*SSSSLLCCTTXX_nneewwSLMTO mt)

  itSSSSLL_CCTTXXrreemmoovvee_sseessssiioonnSLCX*t,SLSSIN*)

  itSSSSLL_CCTTXXsseessss_aacccceeppttSLCX*t)

  itSSSSLL_CCTTXXsseessss_aacccceeppttggoooodd(S_T cx;
  itSSSSLL_CCTTXXsseessss_aacccceeppttrreenneeggoottiiaattee(S_T cx;
  itSSSSLL_CCTTXXsseessss_ccaacchheeffuullll(S_T cx;
  itSSSSLL_CCTTXXsseessss_ccbbhhiittss(S_T cx;
  itSSSSLL_CCTTXXsseessss_ccoonnnneeccttSLCX*t)

  itSSSSLL_CCTTXXsseessss_ccoonnnneeccttggoooodd(S_T cx;
  itSSSSLL_CCTTXXsseessss_ccoonnnneeccttrreenneeggoottiiaattee(S_T cx;
  itSSSSLL_CCTTXXsseessss_ggeettccaacchhee_ssiizzeeSLCX*t)

unsigned char *data, int len, int *copy);
  SLSSIN**SSSSLLCCTTXX_sseessssggeett_ggeettccbb(S_T cx)SL*s,
*sess);
  it(SSSSLL_CCTTXXsseessss_ggeettnneeww_ccbbSLCX*t)SL*s,SLSSIN
SSL_SESSION *sess);
  vi *SSSSLLCCTTXX_sseessssggeett_rreemmoovveeccbb(S_T cx(S_T cx

  itSSSSLL_CCTTXXsseessss_hhiittssSLCX*t)




30/Mar/2005            Last change: 0.9.8o                      5






OpenSSL                                             ssl(3openssl)



  itSSSSLL_CCTTXXsseessss_mmiisssseessSLCX*t)

  itSSSSLL_CCTTXXsseessss_nnuummbbeerrSLCX*t)

  vi SSSSLLCCTTXX_sseesssssseett_ccaacchheessiizzee(S_T cxt;
*ssl, unsigned char *data, int len, int *copy));
  vi SSSSLLCCTTXX_sseesssssseett_ggeettccbb(S_T cx S_ESO (c)SL
SSL_SESSION *sess));
  vi SSSSLLCCTTXX_sseesssssseett_nneewwccbb(S_T cx n *b(S sl

*ctx, SSL_SESSION *sess));
  vi SSSSLLCCTTXX_sseesssssseett_rreemmoovveeccbb(S_T cx od(c)SLCX
  itSSSSLL_CCTTXXsseessss_ttiimmeeoouuttssSLCX*t)

  LAH*SSSSLLCCTTXX_sseessssiioonnssSLCX*t)

  vi SSSSLLCCTTXX_sseettaapppp_ddaattaaSLCX*t,vi ag;
  vi SSSSLLCCTTXX_sseettcceerrtt_ssttoorreeSLCX*t,X0_TR c)

*arg)
  vi SSSSLLCCTTXX_sseettcceerrtt_vveerriiffyyccbb(S_T cx n *b(,ca

  itSSSSLL_CCTTXXsseett_cciipphheerrlliisstt(S_T cx hr*t)

  vi SSSSLLCCTTXX_sseettcclliieenntt_CCAAlliisstt(S_T cx TC ls)

X509 **x509, EVP_PKEY **pkey));
  vi SSSSLLCCTTXX_sseettcclliieenntt_cceerrttccbb(S_T cx n *b(S sl

(*cb);(void))
  vi SSSSLLCCTTXX_sseettddeeffaauulltt_ppaasssswwddccbb(S_T cx n

  vi SSSSLLCCTTXX_sseettddeeffaauulltt_rreeaaddaahheeaadd(S_T cx n )

  itSSSSLL_CCTTXXsseett_ddeeffaauullttvveerriiffyy_ppaatthhssSLCX*t)

  itSSSSLL_CCTTXXsseett_eexxddaattaa(S_T s n d,ca ag;
int cb, int ret));
  vi SSSSLLCCTTXX_sseettiinnffoo_ccaallllbbaacckkSLCX*t,vi *b(S sl

write_p, int version, int content_type, const void *buf, size_t
len, SSL *ssl, void *arg));
  vi SSSSLLCCTTXX_sseettmmssgg_ccaallllbbaacckkSLCX*t,vi *b(n

  vi SSSSLLCCTTXX_sseettmmssgg_ccaallllbbaacckkaarrgg(S_T cx od*r)





30/Mar/2005            Last change: 0.9.8o                      6






OpenSSL                                             ssl(3openssl)



  vi SSSSLLCCTTXX_sseettooppttiioonnss(S_T cx nindln p;
  vi SSSSLLCCTTXX_sseettqquuiieett_sshhuuttddoowwnnSLCX*t,itmd)

  vi SSSSLLCCTTXX_sseettsseessssiioonn_ccaacchheemmooddee(S_T cx n oe;
  itSSSSLL_CCTTXXsseett_ssssllvveerrssiioonn(S_T cx S_EHD*eh;
  vi SSSSLLCCTTXX_sseettttiimmeeoouutt(S_T cx ogt;
  ln SSSSLLCCTTXX_sseettttmmpp_ddhhSLCX t,D d)

  ln SSSSLLCCTTXX_sseettttmmpp_ddhhccaallllbbaacckk(S_T cx H**b(od)

  ln SSSSLLCCTTXX_sseettttmmpp_rrssaaSLCX*t,RA*s)

     SSL_CTX_set_tmp_rsa_callback
    ln SSSSLLCCTTXX_sseettttmmpp_rrssaaccaallllbbaacckk(S_T ccttxx,RA
         *(*ccccbbbb)(SSL *ssssssssllll, int eeeexxxxppppoooorrrrtttt, int kkkkeeeeyyyylllleeeennnnggggtttthhhh));

         Sets the callback which will be called when a temporary
         private key is required. The eeeexxxxppppoooorrrrtttt flag will be set if
         the reason for needing a temp key is that an export
         ciphersuite is in use, in which case, kkkkeeeeyyyylllleeeennnnggggtttthhhh will
         contain the required keylength in bits. Generate a key
         of appropriate size (using ???) and return it.

     SSL_set_tmp_rsa_callback
    ln SSSSLLsseett_ttmmpprrssaa_ccaallllbbaacckkSL*s,RA**b(S
         *ssl, int export, int keylength));

    Tesm sSSSSLL_CCTTXXsseett_ttmmpprrssaa_ccaallllbbaacckk xeti
         operates on an SSL session instead of a context.

  vi SSSSLLCCTTXX_sseettvveerriiffyy(S_T cx n oe n *b;vi)

  itSSSSLL_CCTTXXuussee_PPrriivvaatteeKKeeyySLCX*t,EPPE pe)

char *d, long len);
  itSSSSLL_CCTTXXuussee_PPrriivvaatteeKKeeyyAASSNN11(n ye S_T cx nind
type);
  itSSSSLL_CCTTXXuussee_PPrriivvaatteeKKeeyyffiillee(S_T cx hr*ie n

  itSSSSLL_CCTTXXuussee_RRSSAAPPrriivvaatteeKKeeyySLCX*t,RA*s)

*d, long len);
  itSSSSLL_CCTTXXuussee_RRSSAAPPrriivvaatteeKKeeyyAASSNN11(S_T cx nindca

type);
  itSSSSLL_CCTTXXuussee_RRSSAAPPrriivvaatteeKKeeyyffiillee(S_T cx hr*ie n




30/Mar/2005            Last change: 0.9.8o                      7






OpenSSL                                             ssl(3openssl)



  itSSSSLL_CCTTXXuussee_cceerrttiiffiiccaatteeSLCX*t,X0 x;
char *d);
  itSSSSLL_CCTTXXuussee_cceerrttiiffiiccaatteeAASSNN11(S_T cx n e,usge

type);
  itSSSSLL_CCTTXXuussee_cceerrttiiffiiccaatteeffiillee(S_T cx hr*ie n

     DDDDEEEEAAAALLLLIIIINNNNGGGG WWWWIIIITTTTHHHH SSSSEEEESSSSSSSSIIIIOOOONNNNSSSS

     Here we document the various API functions which deal with
  teSLTSssin eie nteSSSSLL_SSEESSSSIIOONNsrcue.
  itSSSSLL_SSEESSSSIIOONNccmmpp(os S_ESO a os S_ESO b;
  vi SSSSLLSSEESSSSIIOONN_ffrreeeeSLSSIN*s;
  ca SSSSLL_SSEESSSSIIOONNggeett_aappppddaattaa(S_ESO s;
  ca SSSSLL_SSEESSSSIIOONNggeett_eexxddaattaa(os S_ESO s n d)

(*new_func);(void), int (*dup_func)(void), void
(*free_func)(void))
  itSSSSLL_SSEESSSSIIOONNggeett_eexxnneeww_iinnddeexxln rl hr*rp n

  ln SSSSLLSSEESSSSIIOONN_ggeettttiimmee(os S_ESO s;
  ln SSSSLLSSEESSSSIIOONN_ggeettttiimmeeoouutt(os S_ESO s;
  usge ogSSSSLL_SSEESSSSIIOONNhhaasshh(os S_ESO a;
  SLSSIN*SSSSLLSSEESSSSIIOONN_nneewwvi)

  itSSSSLL_SSEESSSSIIOONNpprriinntt(I b,cntSLSSIN*)

  itSSSSLL_SSEESSSSIIOONNpprriinntt_ffppFL f,cntSLSSIN*)

  vi SSSSLLSSEESSSSIIOONN_sseettaapppp_ddaattaaSLSSIN*,ca a;
  itSSSSLL_SSEESSSSIIOONNsseett_eexxddaattaa(S_ESO s n d,ca ag;
  ln SSSSLLSSEESSSSIIOONN_sseettttiimmee(S_ESO s ogt;
  ln SSSSLLSSEESSSSIIOONN_sseettttiimmeeoouutt(S_ESO s ogt;
     DDDDEEEEAAAALLLLIIIINNNNGGGG WWWWIIIITTTTHHHH CCCCOOOONNNNNNNNEEEECCCCTTTTIIIIOOOONNNNSSSS

     Here we document the various API functions which deal with
  teSLTScneto eie nteSSSSLL tutr.
  itSSSSLL_aacccceeppttSL*s)




30/Mar/2005            Last change: 0.9.8o                      8






OpenSSL                                             ssl(3openssl)



*dir);
  itSSSSLL_aaddddddiirr_cceerrttssuubbjjeeccttss_ttoossttaacckk(TC sak os hr
*file);
  itSSSSLL_aaddddffiillee_cceerrttssuubbjjeeccttss_ttoossttaacckk(TC sak os hr
  itSSSSLL_aaddddcclliieenntt_CCAASL*s,X0 x;
  ca SSSSLL_aalleerrttddeesscc_ssttrriinnggitvle;
  ca SSSSLL_aalleerrttddeesscc_ssttrriinngglloonngg(n au)

  ca SSSSLL_aalleerrttttyyppee_ssttrriinnggitvle;
  ca SSSSLL_aalleerrttttyyppee_ssttrriinngglloonngg(n au)

  itSSSSLL_cchheecckkpprriivvaattee_kkeeyycntSL*s)

  vi SSSSLLcclleeaarr(S sl;
  ln SSSSLLcclleeaarr_nnuummrreenneeggoottiiaattiioonnss(S sl;
  itSSSSLL_ccoonnnneeccttSL*s)

  vi SSSSLLccooppyy_sseessssiioonniidd(S t os S f;
  ln SSSSLLccttrrll(S sl n m,ln ag hr*ag;
  itSSSSLL_ddoohhaannddsshhaakkee(S sl;
  SL*SSSSLLdduupp(S sl;
  SAK*SSSSLLdduupp_CCAAlliisstt(TC s)

  vi SSSSLLffrreeee(S sl;
  SLCX*SSSSLLggeett_SSSSLLCCTTXX(os S sl;
  ca SSSSLL_ggeettaapppp_ddaattaaSL*s)

  X0 SSSSLL_ggeettcceerrttiiffiiccaattee(os S sl;
  cntca SSSSLL_ggeettcciipphheerr(os S sl;
  itSSSSLL_ggeettcciipphheerr_bbiittsscntSL*s,it*l_is;
  ca SSSSLL_ggeettcciipphheerr_lliissttcntSL*s,itn;
  ca SSSSLL_ggeettcciipphheerr_nnaammeecntSL*s)

  ca SSSSLL_ggeettcciipphheerr_vveerrssiioonncntSL*s)




30/Mar/2005            Last change: 0.9.8o                      9






OpenSSL                                             ssl(3openssl)



  SAK*SSSSLLggeett_cciipphheerrsscntSL*s)

  SAK*SSSSLLggeett_cclliieennttCCAA_lliissttcntSL*s)

  SLCPE SSSSLL_ggeettccuurrrreenntt_cciipphheerrSL*s)

  ln SSSSLLggeett_ddeeffaauullttttiimmeeoouutt(os S sl;
  itSSSSLL_ggeetteerrrroorr(os S sl n )

  ca SSSSLL_ggeetteexx_ddaattaacntSL*s,itix;
  itSSSSLL_ggeetteexx_ddaattaaXX550099_SSTTOORREECCTTXX_iiddxxvi)

(*new_func);(void), int (*dup_func)(void), void
(*free_func)(void))
  itSSSSLL_ggeetteexx_nneewwiinnddeexx(ogag,ca ag,it
  itSSSSLL_ggeettffdd(os S sl;
  vi *SSSSLLggeett_iinnffooccaallllbbaacckk(os S sl;(

  SAK*SSSSLLggeett_ppeeeerrcceerrtt_cchhaaiinncntSL*s)

  X0 SSSSLL_ggeettppeeeerr_cceerrttiiffiiccaatteecntSL*s)

  EPPE SSSSLL_ggeettpprriivvaatteekkeeyy(S sl;
  itSSSSLL_ggeettqquuiieett_sshhuuttddoowwnncntSL*s)

  BO*SSSSLLggeett_rrbbiioocntSL*s)

  itSSSSLL_ggeettrreeaadd_aahheeaaddcntSL*s)

  SLSSIN*SSSSLLggeett_sseessssiioonncntSL*s)

  ca SSSSLL_ggeettsshhaarreedd_cciipphheerrsscntSL*s,ca bf n e)

  itSSSSLL_ggeettsshhuuttddoowwnn(os S sl;
  SLMTO SSSSLL_ggeettssssll_mmeetthhooddSL*s)

  itSSSSLL_ggeettssttaattee(os S sl;
  ln SSSSLLggeett_ttiimmeecntSL*s)

  ln SSSSLLggeett_ttiimmeeoouuttcntSL*s)

*)
  it(SSSSLL_ggeettvveerriiffyy_ccaallllbbaacckkcntSL*s)(n,59SOECX




30/Mar/2005            Last change: 0.9.8o                     10






OpenSSL                                             ssl(3openssl)



  itSSSSLL_ggeettvveerriiffyy_mmooddeecntSL*s)

  ln SSSSLLggeett_vveerriiffyyrreessuulltt(os S sl;
  ca SSSSLL_ggeettvveerrssiioonn(os S sl;
  BO*SSSSLLggeett_wwbbiioocntSL*s)

  itSSSSLL_iinnaacccceepptt_iinniittSL*s)

  itSSSSLL_iinnbbeeffoorree(S sl;
  itSSSSLL_iinnccoonnnneecctt_iinniittSL*s)

  itSSSSLL_iinniinniitt(S sl;
  itSSSSLL_iissiinniitt_ffiinniisshheeddSL*s)

  SAK*SSSSLLllooaadd_cclliieennttCCAA_ffiilleeca fl)

  vi SSSSLLllooaadd_eerrrroorrssttrriinnggss(od;
  SL*SSSSLLnneeww(S_T cx;
  ln SSSSLLnnuumm_rreenneeggoottiiaattiioonnssSL*s)

  itSSSSLL_ppeeeekkSL*s,vi bf n u)

  itSSSSLL_ppeennddiinnggcntSL*s)

  itSSSSLL_rreeaaddSL*s,vi bf n u)

  itSSSSLL_rreenneeggoottiiaatteeSL*s)

  ca SSSSLL_rrssttaatteessttrriinngg(S sl;
  ca SSSSLL_rrssttaatteessttrriinngg_lloonnggSL*s)

  ln SSSSLLsseessssiioonn_rreeuusseeddSL*s)

  vi SSSSLLsseett_aacccceeppttssttaattee(S sl;
  vi SSSSLLsseett_aappppddaattaa(S sl hr*r)

  vi SSSSLLsseett_bbiiooSL*s,BO*bo I wi)

  itSSSSLL_sseettcciipphheerr_lliissttSL*s,ca sr;
  vi SSSSLLsseett_cclliieennttCCAA_lliissttSL*s,SAK*it;
  vi SSSSLLsseett_ccoonnnneeccttssttaattee(S sl;



30/Mar/2005            Last change: 0.9.8o                     11






OpenSSL                                             ssl(3openssl)



  itSSSSLL_sseetteexx_ddaattaaSL*s,itix hr*r)

  itSSSSLL_sseettffdd(S sl n d;
  vi SSSSLLsseett_iinnffooccaallllbbaacckk(S sl od(c)(od)
version, int content_type, const void *buf, size_t len, SSL *ssl,
void *arg));
  vi SSSSLLsseett_mmssggccaallllbbaacckk(S cx od(c)itwiep n

  vi SSSSLLsseett_mmssggccaallllbbaacckk_aarrggSL*t,vi ag;
  vi SSSSLLsseett_ooppttiioonnssSL*s,usge ogo)

  vi SSSSLLsseett_qquuiieettsshhuuttddoowwnn(S sl n oe;
  vi SSSSLLsseett_rreeaaddaahheeaadd(S sl n e)

  itSSSSLL_sseettrrffdd(S sl n d;
  itSSSSLL_sseettsseessssiioonn(S sl S_ESO ssin;
  vi SSSSLLsseett_sshhuuttddoowwnnSL*s,itmd)

  itSSSSLL_sseettssssll_mmeetthhooddSL*s,SLMTO mt)

  vi SSSSLLsseett_ttiimmeeSL*s,ln )

  vi SSSSLLsseett_ttiimmeeoouuttSL*s,ln )

  vi SSSSLLsseett_vveerriiffyySL*s,itmd,it(clbc)(od)
  vi SSSSLLsseett_vveerriiffyyrreessuulltt(S sl ogag;
  itSSSSLL_sseettwwffdd(S sl n d;
  itSSSSLL_sshhuuttddoowwnnSL*s)

  itSSSSLL_ssttaatteecntSL*s)

  ca SSSSLL_ssttaatteessttrriinngg(os S sl;
  ca SSSSLL_ssttaatteessttrriinngg_lloonnggcntSL*s)

  ln SSSSLLttoottaall_rreenneeggoottiiaattiioonnssSL*s)

  itSSSSLL_uusseePPrriivvaatteeKKeeyy(S sl V_KY*ky;
long len);
  itSSSSLL_uusseePPrriivvaatteeKKeeyy_AASSNN11ittp,SL*s,usge hr*,




30/Mar/2005            Last change: 0.9.8o                     12






OpenSSL                                             ssl(3openssl)



  itSSSSLL_uusseePPrriivvaatteeKKeeyy_ffiilleeSL*s,ca fl,ittp)

  itSSSSLL_uusseeRRSSAAPPrriivvaatteeKKeeyy(S sl S ra;
len);
  itSSSSLL_uusseeRRSSAAPPrriivvaatteeKKeeyy_AASSNN11SL*s,usge hr*,ln

  itSSSSLL_uusseeRRSSAAPPrriivvaatteeKKeeyy_ffiilleeSL*s,ca fl,ittp)

  itSSSSLL_uusseecceerrttiiffiiccaattee(S sl 59*)

*d);
  itSSSSLL_uusseecceerrttiiffiiccaattee_AASSNN11SL*s,itln nindca

  itSSSSLL_uusseecceerrttiiffiiccaattee_ffiilleeSL*s,ca fl,ittp)

  itSSSSLL_vveerrssiioonncntSL*s)

  itSSSSLL_wwaannttcntSL*s)

  itSSSSLL_wwaannttnnootthhiinngg(os S sl;
  itSSSSLL_wwaannttrreeaadd(os S sl;
  itSSSSLL_wwaannttwwrriittee(os S sl;
  itSSSSLL_wwaannttxx550099_llooookkuuppcntSL*s)

  itSSSSLL_wwrriitteeSL*s,cntvi bf n u)

SSSSEEEEEEEE AAAALLLLSSSSOOOO
     openssl(1), crypto(3), SSL_accept(3), SSL_clear(3),
     SSL_connect(3), SSL_CIPHER_get_name(3),
     SSL_COMP_add_compression_method(3),
     SSL_CTX_add_extra_chain_cert(3), SSL_CTX_add_session(3),
     SSL_CTX_ctrl(3), SSL_CTX_flush_sessions(3),
     SSL_CTX_get_ex_new_index(3), SSL_CTX_get_verify_mode(3),
     SSL_CTX_load_verify_locations(3) SSL_CTX_new(3),
     SSL_CTX_sess_number(3), SSL_CTX_sess_set_cache_size(3),
     SSL_CTX_sess_set_get_cb(3), SSL_CTX_sessions(3),
     SSL_CTX_set_cert_store(3),
     SSL_CTX_set_cert_verify_callback(3),
     SSL_CTX_set_cipher_list(3), SSL_CTX_set_client_CA_list(3),
     SSL_CTX_set_client_cert_cb(3),
     SSL_CTX_set_default_passwd_cb(3),
     SSL_CTX_set_generate_session_id(3),
     SSL_CTX_set_info_callback(3), SSL_CTX_set_max_cert_list(3),
     SSL_CTX_set_mode(3), SSL_CTX_set_msg_callback(3),
     SSL_CTX_set_options(3), SSL_CTX_set_quiet_shutdown(3),
     SSL_CTX_set_session_cache_mode(3),
     SSL_CTX_set_session_id_context(3),
     SSL_CTX_set_ssl_version(3), SSL_CTX_set_timeout(3),



30/Mar/2005            Last change: 0.9.8o                     13






OpenSSL                                             ssl(3openssl)



     SSL_CTX_set_tmp_rsa_callback(3),
     SSL_CTX_set_tmp_dh_callback(3), SSL_CTX_set_verify(3),
     SSL_CTX_use_certificate(3), SSL_alert_type_string(3),
     SSL_do_handshake(3), SSL_get_SSL_CTX(3), SSL_get_ciphers(3),
     SSL_get_client_CA_list(3), SSL_get_default_timeout(3),
     SSL_get_error(3), SSL_get_ex_data_X509_STORE_CTX_idx(3),
     SSL_get_ex_new_index(3), SSL_get_fd(3),
     SSL_get_peer_cert_chain(3), SSL_get_rbio(3),
     SSL_get_session(3), SSL_get_verify_result(3),
     SSL_get_version(3), SSL_library_init(3),
     SSL_load_client_CA_file(3), SSL_new(3), SSL_pending(3),
     SSL_read(3), SSL_rstate_string(3), SSL_session_reused(3),
     SSL_set_bio(3), SSL_set_connect_state(3), SSL_set_fd(3),
     SSL_set_session(3), SSL_set_shutdown(3), SSL_shutdown(3),
     SSL_state_string(3), SSL_want(3), SSL_write(3),
     SSL_SESSION_free(3), SSL_SESSION_get_ex_new_index(3),
     SSL_SESSION_get_time(3), d2i_SSL_SESSION(3)

HHHHIIIISSSSTTTTOOOORRRRYYYY
     The ssl(3) document appeared in OpenSSL 0.9.2



































30/Mar/2005            Last change: 0.9.8o                     14






OpenSSL                                             ssl(3openssl)























































30/Mar/2005            Last change: 0.9.8o                     15