X509_VERIFY_CERT(3ssl) OpenSSL X509_VERIFY_CERT(3ssl) X509_build_chain X509_verify_cert X509_STORE_CTX_verify - X509 #include STACK_OF(X509) *X509_build_chain(X509 *target, STACK_OF(X509) *certs, X509_STORE *store, int with_self_signed, OSSL_LIB_CTX *libctx, const char *propq); int X509_verify_cert(X509_STORE_CTX *ctx); int X509_STORE_CTX_verify(X509_STORE_CTX *ctx); X509_build_chain() target CA certs. store NULL . store. X509_STORE_CTX libctx propq NULL. . ( ) target . target with_self_signed 1. NULL . X509_verify_cert() ctx. X509_STORE_CTX X509_STORE_CTX_new(3) X509_STORE_CTX_init(3). X509_V_FLAG_X509_STRICT . openssl-verification-options(1). OpenSSL S/MIME SSL/TLS. X509_verify_cert() ctx ctx . . <= 0 . X509_STORE_CTX_verify() X509_verify_cert() ctx . . . DANE TLSA DNS. DANE TLSA SSL_add_expected_rpk(3) SSL_dane_tlsa_add(3). X509_build_chain() NULL . X509_verify_cert() X509_STORE_CTX_verify() 1 0 ( malloc ) . 1. 0. . ctx X509_STORE_CTX_get_error(3). X509_V_OK . SSL_add_expected_rpk(3) SSL_CTX_dane_enable(3) SSL_dane_tlsa_add(3) X509_STORE_CTX_new(3) X509_STORE_CTX_init(3) X509_STORE_CTX_init_rpk(3) X509_STORE_CTX_get_error(3) X509_build_chain() X509_STORE_CTX_verify() OpenSSL 3.0. 2009-2023 OpenSSL. . Apache 2.0 ( ""). . LICENSE . 3 . . : . 3.6.2 7 2026 X509_VERIFY_CERT(3ssl)