SSL_GET_CLIENT_CA_LIST(3)

📦 version 4.4.0, in alpine 3.24, arch rolling

💅 SSL_GET_CLIENT_CA_LIST(3) 💅

ok so picture this: you're deep in the Library Functions Manual (yes that's the whole vibe, we're in libssl/libcrypto land now 🔥) and you need to know which client CAs are even in the chat. That's this whole page. Buckle up bestie 🎀

✨ NAME ✨

SSL_get_client_CA_list, SSL_CTX_get_client_CA_list — get list of client CAs 🫶

🌸 SYNOPSIS 🌸

library “libssl” libcrypto #include <openssl/ssl.h>

STACK_OF(X509_NAME) *
SSL_get_client_CA_list(const SSL *s);

STACK_OF(X509_NAME) *
SSL_CTX_get_client_CA_list(const SSL_CTX *ctx);

literally just include <openssl/ssl.h>, link against libssl and libcrypto, and you're so back ✨

🦋 DESCRIPTION 🦋

okay so SSL_CTX_get_client_CA_list() returns the list of client CAs explicitly set for ctx using SSL_CTX_set_client_CA_list(3). that's it, that's the whole function, no cap 💅

and SSL_get_client_CA_list() returns the list of client CAs explicitly set for ssl using SSL_set_client_CA_list() or ssl's SSL_CTX object with SSL_CTX_set_client_CA_list(3), when in server mode. server girlie energy 👑

but wait — in client mode, SSL_get_client_CA_list() returns the list of client CAs sent from the server, if any. so like, the server slides into your DMs with its CA list and you get to read it 😭 adorable

lowkey important: which list you get depends on whether you're the server or the client. vibe check your mode first fr fr.

💖 SEE ALSO 💖

all the linked besties, go read them too iykyk 🧚

🌈 HISTORY 🌈

SSL_get_client_CA_list() and SSL_CTX_get_client_CA_list() first appeared in SSLeay 0.8.0 and have been available since OpenBSD 2.4. ancient. iconic. main character energy since day one 🏆

and that's the tea 🍓 this page came from Debian, dated June 8, 2025, and it's SSL_GET_CLIENT_CA_LIST(3) all the way down. slay, stay secure, and don't forget to free your stacks 💜🫶✨

📦 where this page comes from