man-pages/man7/ct.7ssl.html
2021-03-31 01:06:50 +01:00

103 lines
3.3 KiB
HTML

<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
<HTML><HEAD><TITLE>Man page of CT</TITLE>
</HEAD><BODY>
<H1>CT</H1>
Section: OpenSSL (7SSL)<BR>Updated: 2021-03-22<BR><A HREF="#index">Index</A>
<A HREF="/cgi-bin/man/man2html">Return to Main Contents</A><HR>
<A NAME="lbAB">&nbsp;</A>
<H2>NAME</H2>
ct - Certificate Transparency
<A NAME="lbAC">&nbsp;</A>
<H2>SYNOPSIS</H2>
<PRE>
#include &lt;<A HREF="file:///usr/include/openssl/ct.h">openssl/ct.h</A>&gt;
</PRE>
<A NAME="lbAD">&nbsp;</A>
<H2>DESCRIPTION</H2>
This library implements Certificate Transparency (<FONT SIZE="-1">CT</FONT>) verification for <FONT SIZE="-1">TLS</FONT>
clients, as defined in <FONT SIZE="-1">RFC 6962.</FONT> This verification can provide some confidence
that a certificate has been publicly logged in a set of <FONT SIZE="-1">CT</FONT> logs.
<P>
By default, these checks are disabled. They can be enabled using
<B><A HREF="/cgi-bin/man/man2html?3+SSL_CTX_enable_ct">SSL_CTX_enable_ct</A></B>(3) or <B><A HREF="/cgi-bin/man/man2html?3+SSL_enable_ct">SSL_enable_ct</A></B>(3).
<P>
This library can also be used to parse and examine <FONT SIZE="-1">CT</FONT> data structures, such as
Signed Certificate Timestamps (SCTs), or to read a list of <FONT SIZE="-1">CT</FONT> logs. There are
functions for:
- decoding and encoding SCTs in <FONT SIZE="-1">DER</FONT> and <FONT SIZE="-1">TLS</FONT> wire format.
- printing SCTs.
- verifying the authenticity of SCTs.
- loading a <FONT SIZE="-1">CT</FONT> log list from a <FONT SIZE="-1">CONF</FONT> file.
<A NAME="lbAE">&nbsp;</A>
<H2>SEE ALSO</H2>
<B><A HREF="/cgi-bin/man/man2html?3+d2i_SCT_LIST">d2i_SCT_LIST</A></B>(3),
<B><A HREF="/cgi-bin/man/man2html?3+CTLOG_STORE_new">CTLOG_STORE_new</A></B>(3),
<B><A HREF="/cgi-bin/man/man2html?3+CTLOG_STORE_get0_log_by_id">CTLOG_STORE_get0_log_by_id</A></B>(3),
<B><A HREF="/cgi-bin/man/man2html?3+SCT_new">SCT_new</A></B>(3),
<B><A HREF="/cgi-bin/man/man2html?3+SCT_print">SCT_print</A></B>(3),
<B><A HREF="/cgi-bin/man/man2html?3+SCT_validate">SCT_validate</A></B>(3),
<B><A HREF="/cgi-bin/man/man2html?3+SCT_validate">SCT_validate</A></B>(3),
<B><A HREF="/cgi-bin/man/man2html?3+CT_POLICY_EVAL_CTX_new">CT_POLICY_EVAL_CTX_new</A></B>(3),
<B><A HREF="/cgi-bin/man/man2html?3+SSL_CTX_set_ct_validation_callback">SSL_CTX_set_ct_validation_callback</A></B>(3)
<A NAME="lbAF">&nbsp;</A>
<H2>HISTORY</H2>
The ct library was added in OpenSSL 1.1.0.
<A NAME="lbAG">&nbsp;</A>
<H2>COPYRIGHT</H2>
Copyright 2016-2017 The OpenSSL Project Authors. All Rights Reserved.
<P>
Licensed under the OpenSSL license (the ``License''). You may not use
this file except in compliance with the License. You can obtain a copy
in the file <FONT SIZE="-1">LICENSE</FONT> in the source distribution or at
&lt;<A HREF="https://www.openssl.org/source/license.html">https://www.openssl.org/source/license.html</A>&gt;.
<P>
<HR>
<A NAME="index">&nbsp;</A><H2>Index</H2>
<DL>
<DT id="1"><A HREF="#lbAB">NAME</A><DD>
<DT id="2"><A HREF="#lbAC">SYNOPSIS</A><DD>
<DT id="3"><A HREF="#lbAD">DESCRIPTION</A><DD>
<DT id="4"><A HREF="#lbAE">SEE ALSO</A><DD>
<DT id="5"><A HREF="#lbAF">HISTORY</A><DD>
<DT id="6"><A HREF="#lbAG">COPYRIGHT</A><DD>
</DL>
<HR>
This document was created by
<A HREF="/cgi-bin/man/man2html">man2html</A>,
using the manual pages.<BR>
Time: 00:06:08 GMT, March 31, 2021
</BODY>
</HTML>