X509_VERIFY_PARAM_SET_FLAGS(3ssl) OpenSSL X509_VERIFY_PARAM_SET_FLAGS(3ssl) X509_VERIFY_PARAM_set_flags, X509_VERIFY_PARAM_clear_flags, X509_VERIFY_PARAM_get_flags, X509_VERIFY_PARAM_set_purpose, X509_VERIFY_PARAM_get_purpose, X509_VERIFY_PARAM_get_inh_flags, X509_VERIFY_PARAM_set_inh_flags, X509_VERIFY_PARAM_set_trust, X509_VERIFY_PARAM_set_depth, X509_VERIFY_PARAM_get_depth, X509_VERIFY_PARAM_set_auth_level, X509_VERIFY_PARAM_get_auth_level, X509_VERIFY_PARAM_set_time, X509_VERIFY_PARAM_get_time, X509_VERIFY_PARAM_add0_policy, X509_VERIFY_PARAM_set1_policies, X509_VERIFY_PARAM_get0_host, X509_VERIFY_PARAM_set1_host, X509_VERIFY_PARAM_add1_host, X509_VERIFY_PARAM_set_hostflags, X509_VERIFY_PARAM_get_hostflags, X509_VERIFY_PARAM_get0_peername, X509_VERIFY_PARAM_get0_email, X509_VERIFY_PARAM_set1_email, X509_VERIFY_PARAM_set1_ip, X509_VERIFY_PARAM_get1_ip_asc, X509_VERIFY_PARAM_set1_ip_asc - X509 #include int X509_VERIFY_PARAM_set_flags(X509_VERIFY_PARAM *param, unsigned long flags); int X509_VERIFY_PARAM_clear_flags(X509_VERIFY_PARAM *param, unsigned long flags); unsigned long X509_VERIFY_PARAM_get_flags(const X509_VERIFY_PARAM *param); int X509_VERIFY_PARAM_set_inh_flags(X509_VERIFY_PARAM *param, uint32_t flags); uint32_t X509_VERIFY_PARAM_get_inh_flags(const X509_VERIFY_PARAM *param); int X509_VERIFY_PARAM_set_purpose(X509_VERIFY_PARAM *param, int purpose); int X509_VERIFY_PARAM_get_purpose(X509_VERIFY_PARAM *param); int X509_VERIFY_PARAM_set_trust(X509_VERIFY_PARAM *param, int trust); void X509_VERIFY_PARAM_set_time(X509_VERIFY_PARAM *param, time_t t); time_t X509_VERIFY_PARAM_get_time(const X509_VERIFY_PARAM *param); int X509_VERIFY_PARAM_add0_policy(X509_VERIFY_PARAM *param, ASN1_OBJECT *policy); int X509_VERIFY_PARAM_set1_policies(X509_VERIFY_PARAM *param, STACK_OF(ASN1_OBJECT) *policies); void X509_VERIFY_PARAM_set_depth(X509_VERIFY_PARAM *param, int depth); int X509_VERIFY_PARAM_get_depth(const X509_VERIFY_PARAM *param); void X509_VERIFY_PARAM_set_auth_level(X509_VERIFY_PARAM *param, int auth_level); int X509_VERIFY_PARAM_get_auth_level(const X509_VERIFY_PARAM *param); char *X509_VERIFY_PARAM_get0_host(X509_VERIFY_PARAM *param, int n); int X509_VERIFY_PARAM_set1_host(X509_VERIFY_PARAM *param, const char *name, size_t namelen); int X509_VERIFY_PARAM_add1_host(X509_VERIFY_PARAM *param, const char *name, size_t namelen); void X509_VERIFY_PARAM_set_hostflags(X509_VERIFY_PARAM *param, unsigned int flags); unsigned int X509_VERIFY_PARAM_get_hostflags(const X509_VERIFY_PARAM *param); char *X509_VERIFY_PARAM_get0_peername(const X509_VERIFY_PARAM *param); char *X509_VERIFY_PARAM_get0_email(X509_VERIFY_PARAM *param); int X509_VERIFY_PARAM_set1_email(X509_VERIFY_PARAM *param, const char *email, size_t emaillen); char *X509_VERIFY_PARAM_get1_ip_asc(X509_VERIFY_PARAM *param); int X509_VERIFY_PARAM_set1_ip(X509_VERIFY_PARAM *param, const unsigned char *ip, size_t iplen); int X509_VERIFY_PARAM_set1_ip_asc(X509_VERIFY_PARAM *param, const char *ipasc); X509_VERIFY_PARAM . X509_VERIFY_PARAM_set_flags() param OR flags. " " flags. X509_VERIFY_PARAM_get_flags() param. X509_VERIFY_PARAM_get_inh_flags() param . X509_VERIFY_PARAM_set_inh_flags() . . X509_VERIFY_PARAM_clear_flags() flags param. X509_VERIFY_PARAM_set_purpose() param purpose. X509_PURPOSE_SSL_CLIENT. purpose X509_PURPOSE_DEFAULT_ANY. X509_VERIFY_PARAM_get_purpose() param. X509_VERIFY_PARAM_set_trust() param trust. X509_VERIFY_PARAM_set_time() param t. . X509_VERIFY_PARAM_add0_policy() policy . . X509_VERIFY_PARAM_set1_policies() ( ) policies. . policies NULL . X509_VERIFY_PARAM_set_depth() depth. CA . . depth 0 depth 1 CA . X509_VERIFY_PARAM_set_auth_level() auth_level. . . . SSL_CTX_set_security_level(3) . -1 " ". 0 . 1 80 MD5 RSA 1024 . X509_VERIFY_PARAM_get0_host() DNS n X509_VERIFY_PARAM_set1_host() X509_VERIFY_PARAM_add1_host(). n = 0 n . X509_VERIFY_PARAM_set1_host() DNS name . name NULL . name NUL namelen namelen name. X509_check_host(3) flags X509_VERIFY_PARAM_set_hostflags() ( ). X509_check_host(3) DANE-EE(3) DANE. X509_CHECK_FLAG_ALWAYS_CHECK_SUBJECT DNS DNS . X509_CHECK_FLAG_NEVER_CHECK_SUBJECT DNS DNS DN . X509_check_host(3) X509_CHECK_FLAG_NEVER_CHECK_SUBJECT X509_CHECK_FLAG_ALWAYS_CHECK_SUBJECT. X509_VERIFY_PARAM_get_hostflags() X509_VERIFY_PARAM_set_hostflags(). X509_VERIFY_PARAM_add1_host() name . X509_VERIFY_PARAM_set1_host() X509_VERIFY_PARAM_add1_host() name NULL. . X509_VERIFY_PARAM_get0_peername() DNS . ( ".") . param . . X509_VERIFY_PARAM_get0_email() RFC822 . X509_VERIFY_PARAM_set1_email() RFC822 email. email NUL emaillen emaillen email. X509_check_email(3). X509_VERIFY_PARAM_get1_ip_asc() IP . . X509_VERIFY_PARAM_set1_ip() IP ip. ip iplen 4 IPv4 16 IPv6. IP X509_check_ip(3). X509_VERIFY_PARAM_set1_ip_asc() IP ipasc. ipasc ASCII NUL: IPv4 IPv6. "::" IPv6. X509_VERIFY_PARAM_set_flags(), X509_VERIFY_PARAM_clear_flags(), X509_VERIFY_PARAM_set_inh_flags(), X509_VERIFY_PARAM_set_purpose(), X509_VERIFY_PARAM_set_trust(), X509_VERIFY_PARAM_add0_policy() X509_VERIFY_PARAM_set1_policies(), X509_VERIFY_PARAM_set1_host(), X509_VERIFY_PARAM_add1_host(), X509_VERIFY_PARAM_set1_email(), X509_VERIFY_PARAM_set1_ip() X509_VERIFY_PARAM_set1_ip_asc() 1 0 . X509_VERIFY_PARAM_get0_host(), X509_VERIFY_PARAM_get0_email(), X509_VERIFY_PARAM_get1_ip_asc() NULL . X509_VERIFY_PARAM_get_flags() . X509_VERIFY_PARAM_get_hostflags() . X509_VERIFY_PARAM_get_inh_flags() . X509_VERIFY_PARAM_set_time() X509_VERIFY_PARAM_set_depth() . X509_VERIFY_PARAM_get_depth() . X509_VERIFY_PARAM_get_auth_level() . X509_VERIFY_PARAM_get_purpose() X509_PURPOSE_DEFAULT_ANY . OR. X509_V_FLAG_CRL_CHECK (CRL) . CRL . X509_V_FLAG_CRL_CHECK_ALL CRL X509_V_FLAG_CRL_CHECK . X509_V_FLAG_OCSP_RESP_CHECK (OCSP) . OCSP . X509_V_FLAG_OCSP_RESP_CHECK_ALL OCSP X509_V_FLAG_OCSP_RESP_CHECK . X509_V_FLAG_IGNORE_CRITICAL . ( ) CRLs . . . . X509_V_FLAG_X509_STRICT X509 . X509_V_FLAG_ALLOW_PROXY_CERTS . X509_V_FLAG_POLICY_CHECK . . X509_V_FLAG_EXPLICIT_POLICY X509_V_FLAG_INHIBIT_ANY X509_V_FLAG_INHIBIT_MAP RFC3280. . X509_V_FLAG_NOTIFY_POLICY . . CRLs CRLs . X509_V_FLAG_EXTENDED_CRL_SUPPORT . X509_V_FLAG_USE_DELTAS CRLs ( ) . . X509_V_FLAG_CHECK_SS_SIGNATURE . CA keyCertSign. . . X509_V_FLAG_TRUSTED_FIRST OpenSSL 1.1.0 X509_verify_cert(3) . . ( " " openssl-x509(1)). X509_V_FLAG_NO_ALT_CHAINS OpenSSL 1.1.0 . X509_V_FLAG_TRUSTED_FIRST OpenSSL . OpenSSL 1.1.0 X509_V_FLAG_TRUSTED_FIRST . X509_V_FLAG_PARTIAL_CHAIN CA . CA CA . OpenSSL 1.1.0 X509_V_FLAG_PARTIAL_CHAIN "" "" . X509_V_FLAG_PARTIAL_CHAIN. X509_V_FLAG_NO_CHECK_TIME CRLs . X509_VERIFY_PARAM_set_time() . "" . X509_VP_FLAG_ONCE . X509_VP_FLAG_LOCKED . . X509_VP_FLAG_DEFAULT . "" "". . X509_VP_FLAG_OVERWRITE . OR. X509_VP_FLAG_RESET_FLAGS OR. X509_STORE_CTX_set_flags() . CRL . CRL ( X509_STORE). CRLs CRLs X509_STORE . CRLs CRL. CRL SSL SSL_CTX ctx: X509_VERIFY_PARAM *param; param = X509_VERIFY_PARAM_new(); X509_VERIFY_PARAM_set_flags(param, X509_V_FLAG_CRL_CHECK); SSL_CTX_set1_param(ctx, param); X509_VERIFY_PARAM_free(param); X509_verify_cert(3), X509_check_host(3), X509_check_email(3), X509_check_ip(3), openssl-x509(1) X509_V_FLAG_NO_ALT_CHAINS OpenSSL 1.1.0. X509_V_FLAG_CB_ISSUER_CHECK OpenSSL 1.1.0 . X509_VERIFY_PARAM_get_hostflags() OpenSSL 1.1.0i. X509_VERIFY_PARAM_get0_host() X509_VERIFY_PARAM_get0_email() X509_VERIFY_PARAM_get1_ip_asc() OpenSSL 3.0. X509_VERIFY_PARAM_add0_policy() . . X509_VERIFY_PARAM_get_purpose() OpenSSL 3.5. 2009-2025 OpenSSL. . Apache 2.0 ( ""). . LICENSE . 3 . . : . 3.6.2 7 2026 X509_VERIFY_PARAM_SET_FLAGS(3ssl)