X509_CHECK_HOST(3ssl) OpenSSL X509_CHECK_HOST(3ssl) X509_check_host, X509_check_email, X509_check_ip, X509_check_ip_asc - X.509 #include int X509_check_host(X509 *, const char *name, size_t namelen, unsigned int flags, char **peername); int X509_check_email(X509 *, const char *address, size_t addresslen, unsigned int flags); int X509_check_ip(X509 *, const unsigned char *address, size_t addresslen, unsigned int flags); int X509_check_ip_asc(X509 *, const char *address, unsigned int flags); IP. . X509_check_host() (SAN) (CN) 3.5 RFC 1034. . name "www.example.com" SAN CN "*.example.com" "w*.example.com" "*w.example.com". 6.4.2 RFC 6125 name A-label. namelen strlen(name). name ( ".example.com") name ( X509_CHECK_FLAG_SINGLE_LABEL_SUBDOMAINS ). peername NULL SAN CN peername. peername OPENSSL_free() . X509_check_email() address . RFC 822 . RFC 6531 SmtpUTF8Mailbox subjectAltName RFC 8398 RFC 822 A-label U-label . addresslen strlen(address). X509_check_ip() IPv4 IPv6 . address . 4 (IPv4) 16 (IPv6). IP DNS . flags . X509_check_ip_asc() address NUL . flags 0. OR : X509_CHECK_FLAG_ALWAYS_CHECK_SUBJECT X509_CHECK_FLAG_NEVER_CHECK_SUBJECT X509_CHECK_FLAG_NO_WILDCARDS X509_CHECK_FLAG_NO_PARTIAL_WILDCARDS X509_CHECK_FLAG_MULTI_LABEL_WILDCARDS. X509_CHECK_FLAG_SINGLE_LABEL_SUBDOMAINS. X509_CHECK_FLAG_ALWAYS_CHECK_SUBJECT DN ( DNS ) DN . X509_CHECK_FLAG_NEVER_CHECK_SUBJECT DN ( DNS ) DN . X509_CHECK_FLAG_ALWAYS_CHECK_SUBJECT X509_CHECK_FLAG_NEVER_CHECK_SUBJECT DN . X509_CHECK_FLAG_NO_WILDCARDS X509_check_host. X509_CHECK_FLAG_NO_PARTIAL_WILDCARDS "*" : "www*" "*www" X509_check_host. X509_CHECK_FLAG_MULTI_LABEL_WILDCARDS "*" DNS ( "*.example.com") name X509_check_host. X509_CHECK_FLAG_SINGLE_LABEL_SUBDOMAINS name "." . name ".example.com" DNS "www.example.com" DNS "www.sub.example.com" X509_check_host. 1 0 -1 : ASN.1. -2 . X509_check_host() -2 name NUL . X509_VERIFY_PARAM_set1_host() X509_check_host(3) . DANE-EE(3) DANE. SSL_get_verify_result(3) X509_VERIFY_PARAM_set1_host(3) X509_VERIFY_PARAM_add1_host(3) X509_VERIFY_PARAM_set1_email(3) X509_VERIFY_PARAM_set1_ip(3) OpenSSL 1.0.2. 2012-2022 OpenSSL. . Apache 2.0 ( ""). . LICENSE . 3 . . : . 3.6.2 7 2026 X509_CHECK_HOST(3ssl)