TLS_CONFIG_VERIFY(3)

📦 version 4.4.0, in alpine 3.24, arch rolling

okay bestie, you're looking at the TLS_CONFIG_VERIFY(3) page from the Library Functions Manual, and it's all about the insecure TLS configuration crew 🫶. These functions turn off parts of normal cert verification, so please read the warnings — this is not the "set it and forget it" slay-safe zone 💅.

✨ NAME ✨

tls_config_verify, tls_config_insecure_noverifycert, tls_config_insecure_noverifyname, tls_config_insecure_noverifytime — insecure TLS configuration

🦋 SYNOPSIS 🦋

okay so the synopsis is giving:

library “libtls” libssl libcrypto #include <tls.h>

and then the actual function besties:

void
tls_config_verify(struct tls_config *config);

void
tls_config_insecure_noverifycert(struct tls_config *config);

void
tls_config_insecure_noverifyname(struct tls_config *config);

void
tls_config_insecure_noverifytime(struct tls_config *config);

🌸 DESCRIPTION 🌸

These functions disable parts of the normal certificate verification process, resulting in insecure configurations. Be very careful when using them. Like, fr fr 😭.

⚠️ real talk: these are literally the insecure-configuration functions. They disable parts of normal certificate verification, and that is not a vibe you want accidentally shipping.
  • tls_config_insecure_noverifycert(struct tls_config *config) — disables certificate verification and OCSP validation. she is highkey risky, no cap 💀.
  • tls_config_insecure_noverifyname(struct tls_config *config) — disables server name verification, and it's client only 🧚.
  • tls_config_insecure_noverifytime(struct tls_config *config) — disables validity checking of certificates and OCSP validation. time? who is she? 🙈
  • tls_config_verify(struct tls_config *config) — reenables server name and certificate verification. this is the "put the safety rails back on" one, periodt 👑.

💜 SEE ALSO 💜

🎀 HISTORY 🎀

tls_config_verify() appeared in OpenBSD 5.6 and got its final name in OpenBSD 5.7.

tls_config_insecure_noverifycert() and tls_config_insecure_noverifyname() appeared in OpenBSD 5.7 and tls_config_insecure_noverifytime in OpenBSD 5.9.

👑 AUTHORS 👑

  • Joel Sing <jsing@openbsd.org>
  • Ted Unangst <tedu@openbsd.org>

mwah 💋 this lil page is from Debian, dated July 7, 2025, and it's TLS_CONFIG_VERIFY(3). stay safe out there, bestie — and maybe don't disable cert verification unless you literally know what you're doing 🌈✨.

📦 where this page comes from