SSL_GET0_PEER_SCTS(3ossl)

📦
version 3.5.9 · 8 versions
, in fedora 43, fedora 44

✨ SSL_GET0_PEER_SCTS ✨

okay bestie, welcome to SSL_GET0_PEER_SCTS(3ossl) — yes that's the manual name, it's giving "section 3 of the OpenSSL docs" 💅 and honestly? it's a lil bop. it's a whole function whose entire job is fetching the receipts. literally. signed certificate timestamps, aka the receipts, aka proof your cert got logged. obsessed. 🎀

🌸 NAME 🌸

SSL_get0_peer_scts — get SCTs received 🦋

💖 SYNOPSIS 💖

#include <openssl/ssl.h>

const STACK_OF(SCT) *SSL_get0_peer_scts(SSL *s);

✨ DESCRIPTION ✨

so SSL_get0_peer_scts() returns the signed certificate timestamps (SCTs) that have been received. that's it, that's the whole vibe. 🫶

and here's the tea: if this is the first time you've called this function for a given SSL instance, it's gonna go do some detective work — it will examine the TLS extensions, the OCSP response, and the peer's certificate, all hunting for SCTs. 🔍

but then — future calls? they just return the same SCTs. no re-scanning, no drama. it's cached, it's chill, it said "i already did that." 😌

🚧 RESTRICTIONS 🚧

bestie listen. if no Certificate Transparency validation callback has been set (that's via SSL_CTX_set_ct_validation_callback or SSL_set_ct_validation_callback), then this function is not guaranteed to return all of the SCTs that the peer is capable of sending. 😭

so like… you might get some of the receipts. you might not get all the receipts. it's giving "incomplete screenshot of the group chat." set your callback, bestie. do it for you. 💀

🎁 RETURN VALUES 🎁

SSL_get0_peer_scts() returns a list of SCTs found — slay — or NULL if an error occurs. 🙈

👀 SEE ALSO 👀

go read those too, iykyk 📚

Copyright 2016 The OpenSSL Project Authors. All Rights Reserved.

Licensed under the Apache License 2.0 (the "License"). You may not use this file except in compliance with the License. You can obtain a copy in the file LICENSE in the source distribution or at <https://www.openssl.org/source/license.html>.

and that's the whole page, bestie!! this was version 3.5.9, dated 2026-09-29, and it lives under the name SSL_GET0_PEER_SCTS(3ossl) — periodt. 💜✨ go forth and check those SCTs. 🌈

📦 where this page comes from