diff options
| author | Adam Langley <agl@google.com> | 2016-03-02 02:58:14 +0300 |
|---|---|---|
| committer | Adam Langley <agl@google.com> | 2016-03-02 18:57:27 +0300 |
| commit | d323f4b1e185b43f8d5e5a3b191d4bf0d5b65609 (patch) | |
| tree | fe6a9d3719c07a9782ba662c57b0bd6f13652cce /include/openssl/ssl.h | |
| parent | 2b07fa4b22198ac02e0cee8f37f3337c3dba91bc (diff) | |
Bring back |verify_store|.
This was dropped in d27441a9cb55b02149d7f1236de94f3a40dd1692 due to lack
of use, but node.js now needs it.
Change-Id: I1e207d4b46fc746cfae309a0ea7bbbc04ea785e8
Reviewed-on: https://boringssl-review.googlesource.com/7270
Reviewed-by: David Benjamin <davidben@google.com>
Diffstat (limited to 'include/openssl/ssl.h')
| -rw-r--r-- | include/openssl/ssl.h | 22 |
1 files changed, 22 insertions, 0 deletions
diff --git a/include/openssl/ssl.h b/include/openssl/ssl.h index 158c72d5..a21b6ee2 100644 --- a/include/openssl/ssl.h +++ b/include/openssl/ssl.h @@ -2065,6 +2065,28 @@ OPENSSL_EXPORT int SSL_enable_ocsp_stapling(SSL *ssl); * handshake. */ OPENSSL_EXPORT void SSL_CTX_enable_ocsp_stapling(SSL_CTX *ctx); +/* SSL_CTX_set0_verify_cert_store sets an |X509_STORE| that will be used + * exclusively for certificate verification and returns one. Ownership of + * |store| is transferred to the |SSL_CTX|. */ +OPENSSL_EXPORT int SSL_CTX_set0_verify_cert_store(SSL_CTX *ctx, + X509_STORE *store); + +/* SSL_CTX_set1_verify_cert_store sets an |X509_STORE| that will be used + * exclusively for certificate verification and returns one. An additional + * reference to |store| will be taken. */ +OPENSSL_EXPORT int SSL_CTX_set1_verify_cert_store(SSL_CTX *ctx, + X509_STORE *store); + +/* SSL_set0_verify_cert_store sets an |X509_STORE| that will be used + * exclusively for certificate verification and returns one. Ownership of + * |store| is transferred to the |SSL|. */ +OPENSSL_EXPORT int SSL_set0_verify_cert_store(SSL *ssl, X509_STORE *store); + +/* SSL_set1_verify_cert_store sets an |X509_STORE| that will be used + * exclusively for certificate verification and returns one. An additional + * reference to |store| will be taken. */ +OPENSSL_EXPORT int SSL_set1_verify_cert_store(SSL *ssl, X509_STORE *store); + /* Client certificate CA list. * |