X509_STORE_CTX_GET_ERROR(3ssl) OpenSSL X509_STORE_CTX_GET_ERROR(3ssl) X509_STORE_CTX_get_error, X509_STORE_CTX_set_error, X509_STORE_CTX_get_error_depth, X509_STORE_CTX_set_error_depth, X509_STORE_CTX_get_current_cert, X509_STORE_CTX_set_current_cert, X509_STORE_CTX_get0_cert, X509_STORE_CTX_get1_chain, X509_verify_cert_error_string - #include int X509_STORE_CTX_get_error(const X509_STORE_CTX *ctx); void X509_STORE_CTX_set_error(X509_STORE_CTX *ctx, int s); int X509_STORE_CTX_get_error_depth(const X509_STORE_CTX *ctx); void X509_STORE_CTX_set_error_depth(X509_STORE_CTX *ctx, int depth); X509 *X509_STORE_CTX_get_current_cert(const X509_STORE_CTX *ctx); void X509_STORE_CTX_set_current_cert(X509_STORE_CTX *ctx, X509 *x); X509 *X509_STORE_CTX_get0_cert(const X509_STORE_CTX *ctx); STACK_OF(X509) *X509_STORE_CTX_get1_chain(const X509_STORE_CTX *ctx); const char *X509_verify_cert_error_string(long n); X509_verify_cert(3) X509_STORE_CTX_verify(3) . X509_STORE_CTX_get_error() ctx. ctx NULL. " " . != X509_V_OK X509_verify_cert() . X509_STORE_CTX_set_error() ctx s. . ctx NULL. X509_STORE_CTX_get_error_depth() . . . ctx NULL. X509_STORE_CTX_set_error_depth() . X509_STORE_CTX_set_error() . X509_STORE_CTX_get_current_cert() ctx. NULL . X509_STORE_CTX_set_current_cert() x ctx . . . X509_up_ref(3). X509_free(3). X509_STORE_CTX_get0_cert() ctx. NULL . X509_STORE_CTX_get1_chain() . . ctx. : OSSL_STACK_OF_X509_free(chain); X509_verify_cert_error_string() n. X509_STORE_CTX_get_error() X509_V_OK . X509_STORE_CTX_get_error_depth() . X509_STORE_CTX_get_current_cert() NULL . X509_verify_cert_error_string() n. . : " ". X509_V_OK: . X509_V_ERR_UNSPECIFIED: . X509_V_ERR_UNABLE_TO_GET_ISSUER_CERT: . . ( ) X509_V_FLAG_PARTIAL_CHAIN. X509_V_ERR_UNABLE_TO_GET_CRL: . X509_V_ERR_UNABLE_TO_DECRYPT_CERT_SIGNATURE: . RSA. X509_V_ERR_UNABLE_TO_DECRYPT_CRL_SIGNATURE: : . . X509_V_ERR_UNABLE_TO_DECODE_ISSUER_PUBLIC_KEY: "SubjectPublicKeyInfo" . X509_V_ERR_CERT_SIGNATURE_FAILURE: . X509_V_ERR_CRL_SIGNATURE_FAILURE: . X509_V_ERR_CERT_NOT_YET_VALID: : "notBefore" . X509_V_ERR_CERT_HAS_EXPIRED: : "notAfter" . X509_V_ERR_CRL_NOT_YET_VALID: . X509_V_ERR_CRL_HAS_EXPIRED: . X509_V_ERR_ERROR_IN_CERT_NOT_BEFORE_FIELD: notBefore "notBefore" . X509_V_ERR_ERROR_IN_CERT_NOT_AFTER_FIELD: notAfter "notAfter" . X509_V_ERR_ERROR_IN_CRL_LAST_UPDATE_FIELD: lastUpdate lastUpdate . X509_V_ERR_ERROR_IN_CRL_NEXT_UPDATE_FIELD: nextUpdate "nextUpdate" . X509_V_ERR_OUT_OF_MEM: . X509_V_ERR_DEPTH_ZERO_SELF_SIGNED_CERT: . X509_V_ERR_SELF_SIGNED_CERT_IN_CHAIN: ( ) . X509_V_ERR_UNABLE_TO_GET_ISSUER_CERT_LOCALLY: : . X509_V_ERR_UNABLE_TO_VERIFY_LEAF_SIGNATURE: X509_V_FLAG_PARTIAL_CHAIN. X509_V_ERR_CERT_CHAIN_TOO_LONG: . X509_V_ERR_CERT_REVOKED: . X509_V_ERR_NO_ISSUER_PUBLIC_KEY: . X509_V_ERR_PATH_LENGTH_EXCEEDED: basicConstraints. X509_V_ERR_INVALID_PURPOSE: . X509_V_ERR_CERT_UNTRUSTED: (CA) . X509_V_ERR_CERT_REJECTED: (CA) . X509_V_ERR_SUBJECT_ISSUER_MISMATCH: . X509_V_ERR_AKID_SKID_MISMATCH: . X509_V_ERR_AKID_ISSUER_SERIAL_MISMATCH: . X509_V_ERR_KEYUSAGE_NO_CERTSIGN: "keyUsage" . X509_V_ERR_UNABLE_TO_GET_CRL_ISSUER: (CRL) (CRL). X509_V_ERR_UNHANDLED_CRITICAL_EXTENSION: . X509_V_ERR_KEYUSAGE_NO_CRL_SIGN: (CRL) (CRL). X509_V_ERR_UNHANDLED_CRITICAL_CRL_EXTENSION: (CRL) (CRL). X509_V_ERR_INVALID_NON_CA: (CA) ( ) (CA) . X509_V_ERR_PROXY_PATH_LENGTH_EXCEEDED: . X509_V_ERR_KEYUSAGE_NO_DIGITAL_SIGNATURE: . X509_V_ERR_PROXY_CERTIFICATES_NOT_ALLOWED: X509_V_FLAG_ALLOW_PROXY_CERTS. X509_V_ERR_INVALID_EXTENSION: ( ) . X509_V_ERR_INVALID_POLICY_EXTENSION: ( ) . . X509_V_ERR_NO_EXPLICIT_POLICY: . X509_V_ERR_DIFFERENT_CRL_SCOPE: CRL CRL . X509_V_ERR_UNSUPPORTED_EXTENSION_FEATURE: . . X509_V_ERR_UNNESTED_RESOURCE: RFC 3779 RFC 3779 . X509_V_ERR_PERMITTED_VIOLATION: . X509_V_ERR_EXCLUDED_VIOLATION: . X509_V_ERR_SUBTREE_MINMAX: : . X509_V_ERR_APPLICATION_VERIFICATION: . . X509_V_ERR_UNSUPPORTED_CONSTRAINT_TYPE: . OpenSSL DNS URI . X509_V_ERR_UNSUPPORTED_CONSTRAINT_SYNTAX: : RFC3280. . X509_V_ERR_UNSUPPORTED_NAME_SYNTAX: . X509_V_ERR_CRL_PATH_VALIDATION_ERROR: CRL CRL. CRL . X509_V_ERR_PATH_LOOP: . X509_V_ERR_HOSTNAME_MISMATCH: . X509_V_ERR_EMAIL_MISMATCH: . X509_V_ERR_IP_ADDRESS_MISMATCH: IP IP. X509_V_ERR_DANE_NO_MATCH: DANE TLSA DANE TLSA TLSA . openssl-s_client(1). X509_V_ERR_EE_KEY_TOO_SMALL: EE EE . X509_V_ERR_CA_KEY_TOO_SMALL: CA CA . X509_V_ERR_CA_MD_TOO_WEAK: CA CA . X509_V_ERR_INVALID_CALL: . X509_V_ERR_STORE_LOOKUP: . X509_V_ERR_NO_VALID_SCTS: SCTs SCTs . X509_V_ERR_PROXY_SUBJECT_NAME_VIOLATION: . X509_V_ERR_OCSP_VERIFY_NEEDED: OCSP OCSP . X509_V_ERR_OCSP_VERIFY_FAILED: OCSP OCSP. X509_V_ERR_OCSP_CERT_UNKNOWN: OCSP OCSP. X509_V_ERR_OCSP_RESP_INVALID: () OCSP OCSP . X509_V_ERR_OCSP_SIGNATURE_FAILURE: OCSP OCSP. X509_V_ERR_OCSP_NOT_YET_VALID: OCSP OCSP ( )> OCSP thisUpdate . X509_V_ERR_OCSP_HAS_EXPIRED: OCSP OCSP . X509_V_ERR_OCSP_NO_RESPONSE: OCSP OCSP . X509_V_ERR_UNSUPPORTED_SIGNATURE_ALGORITHM: . X509_V_ERR_SIGNATURE_ALGORITHM_MISMATCH: . X509_V_ERR_SIGNATURE_ALGORITHM_INCONSISTENCY: . X509_V_ERR_INVALID_CA: CA CA . CA . X509_V_ERR_RPK_UNTRUSTED: TLS DANE . X509_VERIFY_CTX. OpenSSL 1.0 X509_STORE_CTX_get_current_cert() NULL . . X509_verify_cert_error_string() . . X509_V_ERR_UNABLE_TO_GET_ISSUER_CERT X509_V_ERR_UNABLE_TO_GET_ISSUER_CERT_LOCALLY. X509_verify_cert(3) X509_STORE_CTX_verify(3) X509_up_ref(3) X509_free(3). 2009-2025 OpenSSL. . Apache 2.0 ( ""). . LICENSE . 3 . . : . 3.6.2 7 2026 X509_STORE_CTX_GET_ERROR(3ssl)