SSL_GET0_PEER_SCTS(3SSL)

📦
version 4.0.3 · 13 versions
, in ubuntu stonking

💖 SSL_get0_peer_scts — get SCTs received 💖

okay bestie, welcome to SSL_GET0_PEER_SCTS(3SSL), an OpenSSL manual page, section 3SSL, and honestly? this one is short and sweet and we're gonna devour it. no cap. 🎀

✨ NAME ✨

SSL_get0_peer_scts — get SCTs received 🦋

🌸 SYNOPSIS 🌸

#include <openssl/ssl.h>

const STACK_OF(SCT) *SSL_get0_peer_scts(SSL *s);

like, that's it. one (1) function. she's iconic for that. 💅

👑 DESCRIPTION 👑

so SSL_get0_peer_scts() hands you back the signed certificate timestamps (SCTs) that have been received. that's the tea. ☕

here's the little detail u need to know tho: if this is the first time anyone has called this function for a given SSL instance, she's gonna go do a whole investigation — she examines the TLS extensions, the OCSP response, and the peer's certificate, hunting for SCTs. 🔍✨

and after that? future calls just return the same SCTs. she remembers. main character energy, honestly — does the work once and never again. 😌

💀 RESTRICTIONS 💀

okay so this is the part where we have to be real with u. 😭

if no Certificate Transparency validation callback has been set — that's via SSL_CTX_set_ct_validation_callback or SSL_set_ct_validation_callback — then this function is not guaranteed to return all of the SCTs that the peer is capable of sending.

⚠️ bestie read that again: not guaranteed. not "might be slightly off", not "close enough". set ur CT validation callback, i'm begging. 🙈

🌈 RETURN VALUES 🌈

SSL_get0_peer_scts() returns a list of SCTs found, or NULL if an error occurs. so like, either u get the goods or u get NULL, and NULL is giving "something went wrong" energy. check it fr fr. 🔥

🫶 SEE ALSO 🫶

(go read those too, iykwyk 💜)

Copyright 2016 The OpenSSL Project Authors. All Rights Reserved. 👑

Licensed under the Apache License 2.0 (the "License"). You may not use this file except in compliance with the License. You can obtain a copy in the file LICENSE in the source distribution or at <https://www.openssl.org/source/license.html>.

like yes, legal said what it said, and we respect it. 💅

and that's the whole page, bestie!! this was version 4.0.3 from 2026-09-29, and ur girl is signing off — mwah, slay, go set that CT validation callback. 💖✨🎀

📦 where this page comes from