SSL_CTX_SET_CTLOG_LIST_FILE(3ossl)

πŸ“¦
version 15.1 Β· 3 versions
, in freebsd 15.1

πŸ’– NAME πŸ’–

okay bestie, welcome to the OpenSSL manual page for SSL_CTX_SET_CTLOG_LIST_FILE(3ossl). This one is all about two functions β€” SSL_CTX_set_default_ctlog_list_file and SSL_CTX_set_ctlog_list_file β€” and their whole thing is loading a Certificate Transparency log list from a file. Iconic behavior, honestly. ✨


✨ SYNOPSIS ✨

First things first, you gotta include the header, no cap:

#include <openssl/ssl.h>

int SSL_CTX_set_default_ctlog_list_file(SSL_CTX *ctx);
int SSL_CTX_set_ctlog_list_file(SSL_CTX *ctx, const char *path);

πŸ¦‹ DESCRIPTION πŸ¦‹

SSL_CTX_set_default_ctlog_list_file() loads a list of Certificate Transparency (CT) logs from the default file location, ct_log_list.cnf, found in the directory where OpenSSL is installed. That's the default spot, bestie β€” it just knows where to look. πŸ’…

SSL_CTX_set_ctlog_list_file() loads a list of CT logs from a specific path. If you're wondering about the file format, go check CTLOG_STORE_new(3) β€” it's giving "required reading, babe." 🫢


πŸŽ€ NOTES πŸŽ€

  • These functions will not clear the existing CT log list β€” it will be appended to. So yeah, it's adding to the pile, not replacing the pile. 🌸
  • To replace the existing list, use SSL_CTX_set0_ctlog_store(3) first. That's the move, okay?
  • If an error occurs whilst parsing a particular log entry in the file, that log entry will be skipped. Not the whole file, just that entry. πŸ’…

🌸 RETURN VALUES 🌸

SSL_CTX_set_default_ctlog_list_file() and SSL_CTX_set_ctlog_list_file() return 1 if the log list is successfully loaded, and 0 if an error occurs. In the case of an error, the log list may have been partially loaded. So a 0 can still come with a partially loaded log list β€” messy, but that's the tea. 😭


πŸ”₯ SEE ALSO πŸ”₯


Copyright 2016 The OpenSSL Project Authors. All Rights Reserved.

Licensed under the Apache License 2.0 (the "License"). You may not use this file except in compliance with the License. You can obtain a copy in the file LICENSE in the source distribution or at <https://www.openssl.org/source/license.html>.

Legal tea over β€” mwah! πŸ’œ This page is from OpenSSL 3.5.6, dated 2026-04-07. πŸŽ€

πŸ“¦ where this page comes from