1CT(7ossl)                           OpenSSL                          CT(7ossl)
2
3
4

NAME

6       ct - Certificate Transparency
7

SYNOPSIS

9        #include <openssl/ct.h>
10

DESCRIPTION

12       This library implements Certificate Transparency (CT) verification for
13       TLS clients, as defined in RFC 6962. This verification can provide some
14       confidence that a certificate has been publicly logged in a set of CT
15       logs.
16
17       By default, these checks are disabled. They can be enabled using
18       SSL_CTX_enable_ct(3) or SSL_enable_ct(3).
19
20       This library can also be used to parse and examine CT data structures,
21       such as Signed Certificate Timestamps (SCTs), or to read a list of CT
22       logs. There are functions for: - decoding and encoding SCTs in DER and
23       TLS wire format.  - printing SCTs.  - verifying the authenticity of
24       SCTs.  - loading a CT log list from a CONF file.
25

SEE ALSO

27       d2i_SCT_LIST(3), CTLOG_STORE_new(3), CTLOG_STORE_get0_log_by_id(3),
28       SCT_new(3), SCT_print(3), SCT_validate(3), SCT_validate(3),
29       CT_POLICY_EVAL_CTX_new(3), SSL_CTX_set_ct_validation_callback(3)
30

HISTORY

32       The ct library was added in OpenSSL 1.1.0.
33

35       Copyright 2016-2017 The OpenSSL Project Authors. All Rights Reserved.
36
37       Licensed under the Apache License 2.0 (the "License").  You may not use
38       this file except in compliance with the License.  You can obtain a copy
39       in the file LICENSE in the source distribution or at
40       <https://www.openssl.org/source/license.html>.
41
42
43
443.1.1                             2023-08-31                         CT(7ossl)
Impressum