SSL_CONF_CTX_SET_FLAGS(3ossl)

💖 NAME 💖

okay bestie, meet SSL_CONF_CTX_set_flags and SSL_CONF_CTX_clear_flags — the little duo from SSL_CONF_CTX_SET_FLAGS(3ossl) that sets or clears SSL configuration context flags. they're giving “tiny switches, big control-panel energy” ✨

🛠️ SYNOPSIS 🛠️

#include <openssl/ssl.h>

unsigned int SSL_CONF_CTX_set_flags(SSL_CONF_CTX *cctx, unsigned int flags);
unsigned int SSL_CONF_CTX_clear_flags(SSL_CONF_CTX *cctx, unsigned int flags);

🌸 DESCRIPTION 🌸

SSL_CONF_CTX_set_flags() sets flags in the context cctx. simple. iconic. no drama 💅

SSL_CONF_CTX_clear_flags() clears flags in the context cctx. also simple. also iconic. 🎀

👑 NOTES 👑

the flags you set affect how subsequent calls to SSL_CONF_cmd() or SSL_CONF_argv() behave. so yeah, this is one of those “set the vibe first, then do the thing” situations fr fr.

currently the following flags values are recognised:

• SSL_CONF_FLAG_CMDLINE, SSL_CONF_FLAG_FILE — recognise options intended for command line or configuration file use. at least one of these flags must be set.
• SSL_CONF_FLAG_CLIENT, SSL_CONF_FLAG_SERVER — recognise options intended for use in SSL/TLS clients or servers. one or both of these flags must be set.
• SSL_CONF_FLAG_CERTIFICATE — recognise certificate and private key options.
• SSL_CONF_FLAG_REQUIRE_PRIVATE — if this option is set then if a private key is not specified for a certificate it will attempt to load a private key from the certificate file when SSL_CONF_CTX_finish() is called. if a key cannot be loaded from the certificate file an error occurs.
• SSL_CONF_FLAG_SHOW_ERRORS — indicate errors relating to unrecognised options or missing arguments in the error queue. if this option isn't set such errors are only reflected in the return values of SSL_CONF_set_cmd() or SSL_CONF_set_argv().

bestie, pay attention to those “must be set” lines — they're not decorative. the flags are literally doing the vibe check on what gets recognised. 🫶

🔥 RETURN VALUES 🔥

SSL_CONF_CTX_set_flags() and SSL_CONF_CTX_clear_flags() returns the new flags value after setting or clearing flags. so you get the fresh flags value back — cute, useful, slay. 💖

🦋 SEE ALSO 🦋

ssl(7), SSL_CONF_CTX_new(3), SSL_CONF_CTX_set_ssl_ctx(3), SSL_CONF_CTX_set1_prefix(3), SSL_CONF_cmd(3), SSL_CONF_cmd_argv(3)

🌈 HISTORY 🌈

these functions were added in OpenSSL 1.0.2. vintage-ish but still main character energy. ⭐

📜 COPYRIGHT 📜

Copyright 2012-2016 The OpenSSL Project Authors. All Rights Reserved.

Licensed under the Apache License 2.0 (the "License"). You may not use this file except in compliance with the License. You can obtain a copy in the file LICENSE in the source distribution or at <https://www.openssl.org/source/license.html>.

---

💖 cute little footer sign-off, because we don't copy-paste the bottom line around here: this page is rockin' with OpenSSL 3.5.0, dated 2026-09-25, under SSL_CONF_CTX_SET_FLAGS(3ossl). periodt. 🎀