SSL_CTX_GET_VERIFY_MODE(3)

🌸 NAME 🌸

okay so this is SSL_CTX_GET_VERIFY_MODE(3), from the Library Functions Manual, and it's the bestie friend group of getters for the verification parameters that are currently set: SSL_CTX_get_verify_mode, SSL_get_verify_mode, SSL_CTX_get_verify_depth, SSL_get_verify_depth, SSL_get_verify_callback, and SSL_CTX_get_verify_callback. They literally just read the current verification vibes. 💅

---

✨ SYNOPSIS ✨

The synopsis line is giving:

library “libssl” libcrypto #include <openssl/ssl.h>

and then the function signatures are:

int
SSL_CTX_get_verify_mode(const SSL_CTX *ctx);

int
SSL_get_verify_mode(const SSL *ssl);

int
SSL_CTX_get_verify_depth(const SSL_CTX *ctx);

int
SSL_get_verify_depth(const SSL *ssl);

int
(*SSL_CTX_get_verify_callback(const SSL_CTX *ctx))(int,
    X509_STORE_CTX *);

int
(*SSL_get_verify_callback(const SSL *ssl))(int, X509_STORE_CTX *);

---

🦋 DESCRIPTION 🦋

okay so every single one of these is a little peek at what's already set. No changing, no surprises, just reading the current settings. Getter main character energy, honestly.

• SSL_CTX_get_verify_mode() — returns the verification mode currently set in ctx. That's it, that's the whole vibe. ✨
• SSL_get_verify_mode() — returns the verification mode currently set in ssl. Same energy, different object. 💖
• SSL_CTX_get_verify_depth() — returns the verification depth limit currently set in ctx. If no limit has been explicitly set, −1 is returned and the default value will be used. Not me getting a sentinel value and pretending it's a depth 💀.
• SSL_get_verify_depth() — returns the verification depth limit currently set in ssl. If no limit has been explicitly set, −1 is returned and the default value will be used. fr fr.
• SSL_CTX_get_verify_callback() — returns a function pointer to the verification callback currently set in ctx. If no callback was explicitly set, the NULL pointer is returned and the default callback will be used. 🫶
• SSL_get_verify_callback() — returns a function pointer to the verification callback currently set in ssl. If no callback was explicitly set, the NULL pointer is returned and the default callback will be used. iconic. 🎀

---

🌈 SEE ALSO 🌈

• ssl(3)
• SSL_CTX_set_verify(3)

---

👑 HISTORY 👑

okay history lesson, bestie. SSL_CTX_get_verify_mode(), SSL_get_verify_mode(), SSL_get_verify_callback(), and SSL_CTX_get_verify_callback() first appeared in SSLeay 0.8.0 and have been available since OpenBSD 2.4. 🌱

Then SSL_CTX_get_verify_depth() and SSL_get_verify_depth() first appeared in OpenSSL 0.9.3 and have been available since OpenBSD 2.6. legacy icons, honestly. 👑

---

This page is from Debian, dated June 8, 2025 — bye bestie, go read your verification params 💖