skip to content
section 3ssl — Library functions
- ADMISSIONS(3ssl) Accessors and settors for ADMISSION_SYNTAX
- ASN1_aux_cb(3ssl) ASN.1 auxiliary data
- ASN1_EXTERN_FUNCS(3ssl) ASN.1 external function support
- ASN1_generate_nconf(3ssl) ASN1 string generation functions
- ASN1_INTEGER_get_int64(3ssl) ASN.1 INTEGER and ENUMERATED utilities
- ASN1_INTEGER_new(3ssl) ASN1_INTEGER allocation functions
- ASN1_item_d2i_bio(3ssl) decode and encode DER-encoded ASN.1 structures
- ASN1_ITEM_lookup(3ssl) lookup ASN.1 structures
- ASN1_item_new(3ssl) create new ASN.1 values
- ASN1_item_sign(3ssl) ASN1 sign and verify
- ASN1_OBJECT_new(3ssl) object allocation functions
- ASN1_STRING_length(3ssl) ASN1_STRING utility functions
- ASN1_STRING_new(3ssl) ASN1_STRING allocation functions
- ASN1_STRING_print_ex(3ssl) ASN1_STRING output routines
- ASN1_STRING_TABLE_add(3ssl) ASN1_STRING_TABLE manipulation functions
- ASN1_TIME_set(3ssl) ASN.1 Time functions
- ASN1_TYPE_get(3ssl) ASN1_TYPE utility functions
- ASYNC_start_job(3ssl) asynchronous job management functions
- ASYNC_WAIT_CTX_new(3ssl) functions to manage waiting for asynchronous jobs to complete
- b2i_PVK_bio_ex(3ssl) Decode and encode functions for reading and writing MSBLOB format private keys
- BF_encrypt(3ssl) Blowfish encryption
- BIO_ADDR(3ssl) BIO_ADDR routines
- BIO_ADDRINFO(3ssl) BIO_ADDRINFO type and routines
- BIO_connect(3ssl) BIO socket communication setup routines
- BIO_ctrl(3ssl) BIO control operations
- BIO_f_base64(3ssl) base64 BIO filter
- BIO_f_buffer(3ssl) buffering BIO
- BIO_f_cipher(3ssl) cipher BIO filter
- BIO_f_md(3ssl) message digest BIO filter
- BIO_f_null(3ssl) null filter
- BIO_f_prefix(3ssl) prefix BIO filter
- BIO_f_readbuffer(3ssl) read only buffering BIO that supports BIO_tell() and BIO_seek()
- BIO_f_ssl(3ssl) SSL BIO
- BIO_find_type(3ssl) BIO chain traversal
- BIO_get_data(3ssl) functions for managing BIO state information
- BIO_get_ex_new_index(3ssl) application-specific data
- BIO_meth_new(3ssl) Routines to build up BIO methods
- BIO_new(3ssl) BIO allocation and freeing functions
- BIO_new_CMS(3ssl) CMS streaming filter BIO
- BIO_parse_hostserv(3ssl) utility routines to parse a standard host and service string
- BIO_printf(3ssl) formatted output to a BIO
- BIO_push(3ssl) add and remove BIOs from a chain
- BIO_read(3ssl) BIO I/O functions
- BIO_s_accept(3ssl) accept BIO
- BIO_s_bio(3ssl) BIO pair BIO
- BIO_s_connect(3ssl) connect BIO
- BIO_s_core(3ssl) OSSL_CORE_BIO functions
- BIO_s_datagram(3ssl) Network BIO with datagram semantics
- BIO_s_fd(3ssl) file descriptor BIO
- BIO_s_file(3ssl) FILE bio
- BIO_s_mem(3ssl) memory BIO
- BIO_s_null(3ssl) null data sink
- BIO_s_socket(3ssl) socket BIO
- BIO_set_callback(3ssl) BIO callback functions
- BIO_should_retry(3ssl) BIO retry functions
- BIO_socket_wait(3ssl) BIO connection utility functions
- BN_add(3ssl) arithmetic operations on BIGNUMs
- BN_add_word(3ssl) arithmetic functions on BIGNUMs with integers
- BN_BLINDING_new(3ssl) blinding related BIGNUM functions
- BN_bn2bin(3ssl) format conversions
- BN_cmp(3ssl) BIGNUM comparison and test functions
- BN_copy(3ssl) copy BIGNUMs
- BN_CTX_new(3ssl) allocate and free BN_CTX structures
- BN_CTX_start(3ssl) use temporary BIGNUM variables
- BN_generate_prime(3ssl) generate primes and test for primality
- BN_mod_exp_mont(3ssl) Montgomery exponentiation
- BN_mod_inverse(3ssl) compute inverse modulo n
- BN_mod_mul_montgomery(3ssl) Montgomery multiplication
- BN_mod_mul_reciprocal(3ssl) modular multiplication using reciprocal
- BN_new(3ssl) allocate and free BIGNUMs
- BN_num_bytes(3ssl) get BIGNUM size
- BN_rand(3ssl) generate pseudo-random number
- BN_security_bits(3ssl) returns bits of security based on given numbers
- BN_set_bit(3ssl) bit operations on BIGNUMs
- BN_swap(3ssl) exchange BIGNUMs
- BN_zero(3ssl) BIGNUM assignment operations
- BUF_MEM_new(3ssl) simple character array structure
- CMS_add0_cert(3ssl) CMS certificate and CRL utility functions
- CMS_add1_recipient_cert(3ssl) add recipients to a CMS enveloped data structure
- CMS_add1_signer(3ssl) add a signer to a CMS_ContentInfo signed data structure
- CMS_compress(3ssl) create a CMS CompressedData structure
- CMS_data_create(3ssl) Create CMS Data object
- CMS_decrypt(3ssl) decrypt content from a CMS envelopedData structure
- CMS_digest_create(3ssl) Create CMS DigestedData object
- CMS_encrypt(3ssl) create a CMS envelopedData structure
- CMS_EncryptedData_decrypt(3ssl) Decrypt CMS EncryptedData
- CMS_EncryptedData_encrypt(3ssl) Create CMS EncryptedData
- CMS_EnvelopedData_create(3ssl) Create CMS envelope
- CMS_final(3ssl) finalise a CMS_ContentInfo structure
- CMS_get0_RecipientInfos(3ssl) CMS envelopedData RecipientInfo routines
- CMS_get0_SignerInfos(3ssl) CMS signedData signer functions
- CMS_get0_type(3ssl) get and set CMS content types and content
- CMS_get1_ReceiptRequest(3ssl) CMS signed receipt request functions
- CMS_sign(3ssl) create a CMS SignedData structure
- CMS_sign_receipt(3ssl) create a CMS signed receipt
- CMS_signed_get_attr(3ssl) CMS signed and unsigned attribute functions
- CMS_uncompress(3ssl) uncompress a CMS CompressedData structure
- CMS_verify(3ssl) verify a CMS SignedData structure
- CMS_verify_receipt(3ssl) verify a CMS signed receipt
- CONF_modules_free(3ssl) OpenSSL configuration cleanup functions
- CONF_modules_load_file(3ssl) OpenSSL configuration functions
- CRYPTO_get_ex_new_index(3ssl) functions supporting application-specific data
- CRYPTO_memcmp(3ssl) Constant time memory comparison
- CRYPTO_THREAD_run_once(3ssl) OpenSSL thread support
- CT_POLICY_EVAL_CTX_new(3ssl) Encapsulates the data required to evaluate whether SCTs meet a Certificate Transparency policy
- CTLOG_new(3ssl) encapsulates information about a Certificate Transparency log
- CTLOG_STORE_get0_log_by_id(3ssl) Get a Certificate Transparency log from a CTLOG_STORE
- CTLOG_STORE_new(3ssl) Create and populate a Certificate Transparency log list
- d2i_PKCS8PrivateKey_bio(3ssl) PKCS#8 format private key functions
- d2i_PrivateKey(3ssl) decode and encode functions for reading and saving EVP_PKEY structures
- d2i_RSAPrivateKey(3ssl) DEPRECATED
- d2i_SSL_SESSION(3ssl) convert SSL_SESSION object from/to ASN1 representation
- d2i_X509(3ssl) convert objects from/to ASN.1/DER representation
- DEFINE_STACK_OF(3ssl) stack container
- DES_random_key(3ssl) DES encryption
- DH_generate_key(3ssl) perform Diffie-Hellman key exchange
- DH_generate_parameters(3ssl) generate and check Diffie-Hellman parameters
- DH_get0_pqg(3ssl) Routines for getting and setting data in a DH object
- DH_get_1024_160(3ssl) Create standardized public primes or DH pairs
- DH_meth_new(3ssl) Routines to build up DH methods
- DH_new(3ssl) allocate and free DH objects
- DH_new_by_nid(3ssl) create or get DH named parameters
- DH_set_method(3ssl) select DH method
- DH_size(3ssl) get Diffie-Hellman prime size and security bits
- DSA_do_sign(3ssl) raw DSA signature operations
- DSA_dup_DH(3ssl) create a DH structure out of DSA structure
- DSA_generate_key(3ssl) generate DSA key pair
- DSA_generate_parameters(3ssl) generate DSA parameters
- DSA_get0_pqg(3ssl) Routines for getting and setting data in a DSA object
- DSA_meth_new(3ssl) Routines to build up DSA methods
- DSA_new(3ssl) allocate and free DSA objects
- DSA_set_method(3ssl) select DSA method
- DSA_SIG_new(3ssl) allocate and free DSA signature objects
- DSA_sign(3ssl) DSA signatures
- DSA_size(3ssl) get DSA signature size, key bits or security bits
- DTLS_get_data_mtu(3ssl) Get maximum data payload size
- DTLS_set_timer_cb(3ssl) Set callback for controlling DTLS timer duration
- DTLSv1_listen(3ssl) Statelessly listen for incoming connections
- EC_GFp_simple_method(3ssl) Functions for obtaining EC_METHOD objects
- EC_GROUP_copy(3ssl) Functions for manipulating EC_GROUP objects
- EC_GROUP_new(3ssl) Functions for creating and destroying EC_GROUP objects
- EC_KEY_get_enc_flags(3ssl) Get and set flags for encoding EC_KEY structures
- EC_KEY_new(3ssl) Functions for creating, destroying and manipulating EC_KEY objects
- EC_POINT_add(3ssl) Functions for performing mathematical operations and tests on EC_POINT objects
- EC_POINT_new(3ssl) Functions for creating, destroying and manipulating EC_POINT objects
- ECDSA_SIG_new(3ssl) Functions for creating, destroying and manipulating ECDSA_SIG objects
- ECDSA_sign(3ssl) deprecated low-level elliptic curve digital signature algorithm (ECDSA) functions
- ECPKParameters_print(3ssl) Functions for decoding and encoding ASN1 representations of elliptic curve entities
- ENGINE_add(3ssl) ENGINE cryptographic module support
- ERR_clear_error(3ssl) clear the error queue
- ERR_error_string(3ssl) obtain human-readable error message
- ERR_get_error(3ssl) obtain error code and data
- ERR_GET_LIB(3ssl) get information from error codes
- ERR_load_crypto_strings(3ssl) load and free error strings
- ERR_load_strings(3ssl) load arbitrary error strings
- ERR_new(3ssl) Error recording building blocks
- ERR_print_errors(3ssl) print error messages
- ERR_put_error(3ssl) record an error
- ERR_remove_state(3ssl) DEPRECATED
- ERR_set_mark(3ssl) set mark, clear mark and pop errors until mark
- EVP_aes_128_gcm(3ssl) EVP AES cipher
- EVP_aria_128_gcm(3ssl) EVP ARIA cipher
- EVP_ASYM_CIPHER_free(3ssl) Functions to manage EVP_ASYM_CIPHER algorithm objects
- EVP_bf_cbc(3ssl) EVP Blowfish cipher
- EVP_blake2b512(3ssl) BLAKE2 For EVP
- EVP_BytesToKey(3ssl) password based encryption routine
- EVP_camellia_128_ecb(3ssl) EVP Camellia cipher
- EVP_cast5_cbc(3ssl) EVP CAST cipher
- EVP_chacha20(3ssl) EVP ChaCha20 stream cipher
- EVP_CIPHER_CTX_get_cipher_data(3ssl) Routines to inspect and modify EVP_CIPHER_CTX objects
- EVP_CIPHER_CTX_get_original_iv(3ssl) Routines to inspect EVP_CIPHER_CTX IV data
- EVP_CIPHER_meth_new(3ssl) Routines to build up EVP_CIPHER methods
- EVP_des_cbc(3ssl) EVP DES cipher
- EVP_desx_cbc(3ssl) EVP DES-X cipher
- EVP_DigestInit(3ssl) EVP digest routines
- EVP_DigestSignInit(3ssl) EVP signing functions
- EVP_DigestVerifyInit(3ssl) EVP signature verification functions
- EVP_EncodeInit(3ssl) EVP base 64 encode/decode routines
- EVP_EncryptInit(3ssl) EVP cipher routines
- EVP_idea_cbc(3ssl) EVP IDEA cipher
- EVP_KDF(3ssl) EVP KDF routines
- EVP_KEM_free(3ssl) Functions to manage EVP_KEM algorithm objects
- EVP_KEYEXCH_free(3ssl) Functions to manage EVP_KEYEXCH algorithm objects
- EVP_KEYMGMT(3ssl) EVP key management routines
- EVP_MAC(3ssl) EVP MAC routines
- EVP_md2(3ssl) MD2 For EVP
- EVP_md4(3ssl) MD4 For EVP
- EVP_md5(3ssl) MD5 For EVP
- EVP_MD_meth_new(3ssl) Routines to build up legacy EVP_MD methods
- EVP_mdc2(3ssl) MDC-2 For EVP
- EVP_OpenInit(3ssl) EVP envelope decryption
- EVP_PBE_CipherInit(3ssl) Password based encryption routines
- EVP_PKEY2PKCS8(3ssl) Convert a private key to/from PKCS8
- EVP_PKEY_asn1_get_count(3ssl) enumerate public key ASN.1 methods
- EVP_PKEY_ASN1_METHOD(3ssl) manipulating and registering EVP_PKEY_ASN1_METHOD structure
- EVP_PKEY_check(3ssl) key and parameter validation functions
- EVP_PKEY_copy_parameters(3ssl) public key parameter and comparison functions
- EVP_PKEY_CTX_ctrl(3ssl) algorithm specific control operations
- EVP_PKEY_CTX_get0_libctx(3ssl) functions for getting diverse information from an EVP_PKEY_CTX
- EVP_PKEY_CTX_get0_pkey(3ssl) functions for accessing the EVP_PKEY associated with an EVP_PKEY_CTX
- EVP_PKEY_CTX_new(3ssl) public key algorithm context functions
- EVP_PKEY_CTX_set1_pbe_pass(3ssl) generic KDF support functions
- EVP_PKEY_CTX_set_hkdf_md(3ssl) HMAC-based Extract-and-Expand key derivation algorithm
- EVP_PKEY_CTX_set_params(3ssl) provider parameter passing operations
- EVP_PKEY_CTX_set_rsa_pss_keygen_md(3ssl) EVP_PKEY RSA-PSS algorithm support functions
- EVP_PKEY_CTX_set_scrypt_N(3ssl) EVP_PKEY scrypt KDF support functions
- EVP_PKEY_CTX_set_tls1_prf_md(3ssl) TLS PRF key derivation algorithm
- EVP_PKEY_decapsulate(3ssl) Key decapsulation using a KEM algorithm with a private key
- EVP_PKEY_decrypt(3ssl) decrypt using a public key algorithm
- EVP_PKEY_derive(3ssl) derive public key algorithm shared secret
- EVP_PKEY_digestsign_supports_digest(3ssl) indicate support for signature digest
- EVP_PKEY_encapsulate(3ssl) Key encapsulation using a KEM algorithm with a public key
- EVP_PKEY_encrypt(3ssl) encrypt using a public key algorithm
- EVP_PKEY_fromdata(3ssl) functions to create keys and key parameters from user data
- EVP_PKEY_get_attr(3ssl) EVP_PKEY X509_ATTRIBUTE functions
- EVP_PKEY_get_default_digest_nid(3ssl) get default signature digest
- EVP_PKEY_get_field_type(3ssl) get field type or point conversion form of a key
- EVP_PKEY_get_group_name(3ssl) get group name of a key
- EVP_PKEY_get_size(3ssl) EVP_PKEY information functions
- EVP_PKEY_gettable_params(3ssl) retrieve key parameters from a key
- EVP_PKEY_is_a(3ssl) key type and capabilities functions
- EVP_PKEY_keygen(3ssl) key and parameter generation and check functions
- EVP_PKEY_meth_get_count(3ssl) enumerate public key methods
- EVP_PKEY_meth_new(3ssl) manipulating EVP_PKEY_METHOD structure
- EVP_PKEY_new(3ssl) public/private key allocation and raw key handling functions
- EVP_PKEY_print_private(3ssl) public key algorithm printing routines
- EVP_PKEY_set1_encoded_public_key(3ssl) functions to set and get public key data within an EVP_PKEY
- EVP_PKEY_set1_RSA(3ssl) EVP_PKEY assignment functions
- EVP_PKEY_set_type(3ssl) functions to change the EVP_PKEY type
- EVP_PKEY_settable_params(3ssl) set key parameters into a key
- EVP_PKEY_sign(3ssl) sign using a public key algorithm
- EVP_PKEY_todata(3ssl) functions to return keys as an array of key parameters
- EVP_PKEY_verify(3ssl) signature verification using a public key algorithm
- EVP_PKEY_verify_recover(3ssl) recover signature using a public key algorithm
- EVP_RAND(3ssl) EVP RAND routines
- EVP_rc2_cbc(3ssl) EVP RC2 cipher
- EVP_rc4(3ssl) EVP RC4 stream cipher
- EVP_rc5_32_12_16_cbc(3ssl) EVP RC5 cipher
- EVP_ripemd160(3ssl) RIPEMD160 For EVP
- EVP_SealInit(3ssl) EVP envelope encryption
- EVP_seed_cbc(3ssl) EVP SEED cipher
- EVP_set_default_properties(3ssl) Set default properties for future algorithm fetches
- EVP_sha1(3ssl) SHA-1 For EVP
- EVP_sha224(3ssl) SHA-2 For EVP
- EVP_sha3_224(3ssl) SHA-3 For EVP
- EVP_SIGNATURE(3ssl) Functions to manage EVP_SIGNATURE algorithm objects
- EVP_SignInit(3ssl) EVP signing functions
- EVP_sm3(3ssl) SM3 for EVP
- EVP_sm4_cbc(3ssl) EVP SM4 cipher
- EVP_VerifyInit(3ssl) EVP signature verification functions
- EVP_whirlpool(3ssl) WHIRLPOOL For EVP
- HMAC(3ssl) HMAC message authentication code
- i2d_CMS_bio_stream(3ssl) output CMS_ContentInfo structure in BER format
- i2d_PKCS7_bio_stream(3ssl) output PKCS7 structure in BER format
- i2d_re_X509_tbs(3ssl) X509 encode and decode functions
- MD5(3ssl) MD2, MD4, and MD5 hash functions
- MDC2_Init(3ssl) MDC2 hash function
- NCONF_new_ex(3ssl) functionality to Load and parse configuration files manually
- o2i_SCT_LIST(3ssl) decode and encode Signed Certificate Timestamp lists in TLS wire format
- OBJ_nid2obj(3ssl) ASN1 object utility functions
- OCSP_cert_to_id(3ssl) OCSP certificate ID utility functions
- OCSP_request_add1_nonce(3ssl) OCSP nonce functions
- OCSP_REQUEST_new(3ssl) OCSP request functions
- OCSP_resp_find_status(3ssl) OCSP response utility functions
- OCSP_response_status(3ssl) OCSP response functions
- OCSP_sendreq_new(3ssl) OCSP responder query functions
- OpenSSL_add_all_algorithms(3ssl) add algorithms to internal table
- OPENSSL_Applink(3ssl) glue between OpenSSL BIO and Win32 compiler run-time
- OPENSSL_config(3ssl) simple OpenSSL configuration functions
- OPENSSL_FILE(3ssl) generic C programming utility macros
- OPENSSL_fork_prepare(3ssl) OpenSSL fork handlers
- OPENSSL_gmtime(3ssl) platform-agnostic OpenSSL time routines
- OPENSSL_hexchar2int(3ssl) Hex encoding and decoding functions
- OPENSSL_ia32cap(3ssl) the x86[_64] processor capabilities vector
- OPENSSL_init_crypto(3ssl) OpenSSL initialisation and deinitialisation functions
- OPENSSL_init_ssl(3ssl) OpenSSL (libssl and libcrypto) initialisation
- OPENSSL_instrument_bus(3ssl) instrument references to memory bus
- OPENSSL_LH_COMPFUNC(3ssl) dynamic hash table
- OPENSSL_LH_stats(3ssl) LHASH statistics
- OPENSSL_load_builtin_modules(3ssl) add standard configuration modules
- OPENSSL_malloc(3ssl) Memory allocation functions
- OPENSSL_s390xcap(3ssl) the IBM z processor capabilities vector
- OPENSSL_secure_malloc(3ssl) secure heap storage
- OPENSSL_strcasecmp(3ssl) compare two strings ignoring case
- OpenSSL_version(3ssl) get OpenSSL version number and other information
- OSSL_ALGORITHM(3ssl) OpenSSL Core type to define a fetchable algorithm
- OSSL_CALLBACK(3ssl) OpenSSL Core type to define callbacks
- OSSL_CMP_CTX_new(3ssl) functions for managing the CMP client context data structure
- OSSL_CMP_exec_certreq(3ssl) functions implementing CMP client transactions
- OSSL_CMP_HDR_get0_transactionID(3ssl) functions manipulating CMP message headers
- OSSL_CMP_ITAV_set0(3ssl) OSSL_CMP_ITAV utility functions
- OSSL_CMP_log_open(3ssl) functions for logging and error reporting
- OSSL_CMP_MSG_get0_header(3ssl) function(s) manipulating CMP messages
- OSSL_CMP_MSG_http_perform(3ssl) client-side HTTP(S) transfer of a CMP request-response pair
- OSSL_CMP_SRV_CTX_new(3ssl) generic functions to set up and control a CMP server
- OSSL_CMP_STATUSINFO_new(3ssl) function(s) for managing the CMP PKIStatus
- OSSL_CMP_validate_msg(3ssl) functions for verifying CMP message protection
- OSSL_CORE_MAKE_FUNC(3ssl) OpenSSL reserved symbols
- OSSL_CRMF_MSG_get0_tmpl(3ssl) functions reading from CRMF CertReqMsg structures
- OSSL_CRMF_MSG_set0_validity(3ssl) functions populating and verifying CRMF CertReqMsg structures
- OSSL_CRMF_MSG_set1_regCtrl_regToken(3ssl) functions getting or setting CRMF Registration Controls
- OSSL_CRMF_MSG_set1_regInfo_certReq(3ssl) functions getting or setting CRMF Registration Info
- OSSL_CRMF_pbmp_new(3ssl) functions for producing Password-Based MAC (PBM)
- OSSL_DECODER(3ssl) Decoder method routines
- OSSL_DECODER_CTX(3ssl) Decoder context routines
- OSSL_DECODER_CTX_new_for_pkey(3ssl) Decoder routines to decode EVP_PKEYs
- OSSL_DECODER_from_bio(3ssl) Routines to perform a decoding
- OSSL_DISPATCH(3ssl) OpenSSL Core type to define a dispatchable function table
- OSSL_ENCODER(3ssl) Encoder method routines
- OSSL_ENCODER_CTX(3ssl) Encoder context routines
- OSSL_ENCODER_CTX_new_for_pkey(3ssl) Encoder routines to encode EVP_PKEYs
- OSSL_ENCODER_to_bio(3ssl) Routines to perform an encoding
- OSSL_ESS_check_signing_certs(3ssl) Enhanced Security Services (ESS) functions
- OSSL_HTTP_parse_url(3ssl) http utility functions
- OSSL_HTTP_REQ_CTX(3ssl) HTTP client low-level functions
- OSSL_HTTP_transfer(3ssl) HTTP client high-level functions
- OSSL_ITEM(3ssl) OpenSSL Core type for generic itemized data
- OSSL_LIB_CTX(3ssl) OpenSSL library context
- OSSL_PARAM(3ssl) a structure to pass or request object parameters
- OSSL_PARAM_allocate_from_text(3ssl) OSSL_PARAM construction utilities
- OSSL_PARAM_BLD(3ssl) functions to assist in the creation of OSSL_PARAM arrays
- OSSL_PARAM_dup(3ssl) OSSL_PARAM array copy functions
- OSSL_PARAM_int(3ssl) OSSL_PARAM helpers
- OSSL_PROVIDER(3ssl) provider routines
- OSSL_SELF_TEST_new(3ssl) functionality to trigger a callback during a self test
- OSSL_SELF_TEST_set_callback(3ssl) specify a callback for processing self tests
- OSSL_STORE_attach(3ssl) Functions to read objects from a BIO
- OSSL_STORE_expect(3ssl) Specify what object type is expected
- OSSL_STORE_INFO(3ssl) Functions to manipulate OSSL_STORE_INFO objects
- OSSL_STORE_LOADER(3ssl) Types and functions to manipulate, register and unregister STORE loaders for different URI schemes
- OSSL_STORE_open(3ssl) Types and functions to read objects from a URI
- OSSL_STORE_SEARCH(3ssl) Type and functions to create OSSL_STORE search criteria
- OSSL_trace_enabled(3ssl) OpenSSL Tracing API
- OSSL_trace_get_category_num(3ssl) OpenSSL tracing information functions
- OSSL_trace_set_channel(3ssl) Enabling trace output
- PEM_bytes_read_bio(3ssl) read a PEM-encoded data structure from a BIO
- PEM_read(3ssl) PEM encoding routines
- PEM_read_bio_ex(3ssl) read PEM format files with custom processing
- PEM_read_bio_PrivateKey(3ssl) PEM routines
- PEM_read_CMS(3ssl) PEM object encoding routines
- PEM_write_bio_CMS_stream(3ssl) output CMS_ContentInfo structure in PEM format
- PEM_write_bio_PKCS7_stream(3ssl) output PKCS7 structure in PEM format
- PEM_X509_INFO_read_bio_ex(3ssl) read PEM-encoded data structures into one or more X509_INFO objects
- PKCS12_add1_attr_by_NID(3ssl) Add an attribute to a PKCS#12 safeBag structure
- PKCS12_add_cert(3ssl) Add an object to a set of PKCS#12 safeBags
- PKCS12_add_CSPName_asc(3ssl) Add a Microsoft CSP Name attribute to a PKCS#12 safeBag
- PKCS12_add_friendlyname_asc(3ssl) Functions to add the friendlyname attribute to a PKCS#12 safeBag
- PKCS12_add_localkeyid(3ssl) Add the localKeyId attribute to a PKCS#12 safeBag
- PKCS12_add_safe(3ssl) Create and add objects to a PKCS#12 structure
- PKCS12_create(3ssl) create a PKCS#12 structure
- PKCS12_decrypt_skey(3ssl) PKCS12 shrouded keyBag decrypt functions
- PKCS12_gen_mac(3ssl) Functions to create and manipulate a PKCS#12 structure
- PKCS12_get_friendlyname(3ssl) Retrieve the friendlyname attribute from a PKCS#12 safeBag
- PKCS12_init(3ssl) Create a new empty PKCS#12 structure
- PKCS12_item_decrypt_d2i(3ssl) PKCS12 item encrypt/decrypt functions
- PKCS12_key_gen_utf8_ex(3ssl) PKCS#12 Password based key derivation
- PKCS12_newpass(3ssl) change the password of a PKCS12 structure
- PKCS12_pack_p7encdata(3ssl) Pack a set of PKCS#12 safeBags into a PKCS#7 encrypted data object
- PKCS12_parse(3ssl) parse a PKCS#12 structure
- PKCS12_PBE_keyivgen(3ssl) PKCS#12 Password based encryption
- PKCS12_SAFEBAG_create_cert(3ssl) Create PKCS#12 safeBag objects
- PKCS12_SAFEBAG_get0_attrs(3ssl) Retrieve attributes from a PKCS#12 safeBag
- PKCS12_SAFEBAG_get1_cert(3ssl) Get objects from a PKCS#12 safeBag
- PKCS5_PBE_keyivgen(3ssl) PKCS#5 Password based encryption routines
- PKCS5_PBKDF2_HMAC(3ssl) password based derivation routines with salt and iteration count
- PKCS7_decrypt(3ssl) decrypt content from a PKCS#7 envelopedData structure
- PKCS7_encrypt(3ssl) create a PKCS#7 envelopedData structure
- PKCS7_get_octet_string(3ssl) return octet string from a PKCS#7 envelopedData structure
- PKCS7_sign(3ssl) create a PKCS#7 signedData structure
- PKCS7_sign_add_signer(3ssl) add information to PKCS7 structure
- PKCS7_type_is_other(3ssl) determine content type of PKCS#7 envelopedData structure
- PKCS7_verify(3ssl) verify a PKCS#7 signedData structure
- PKCS8_encrypt(3ssl) PKCS8 encrypt/decrypt functions
- PKCS8_pkey_add1_attr(3ssl) PKCS8 attribute functions
- RAND_add(3ssl) add randomness to the PRNG or get its status
- RAND_bytes(3ssl) generate random data
- RAND_cleanup(3ssl) erase the PRNG state
- RAND_egd(3ssl) query entropy gathering daemon
- RAND_get0_primary(3ssl) get access to the global EVP_RAND_CTX instances
- RAND_load_file(3ssl) PRNG seed file
- RAND_set_DRBG_type(3ssl) specify the global random number generator types
- RAND_set_rand_method(3ssl) select RAND method
- RC4_set_key(3ssl) RC4 encryption
- RIPEMD160_Init(3ssl) RIPEMD-160 hash function
- RSA_blinding_on(3ssl) protect the RSA operation from timing attacks
- RSA_check_key(3ssl) validate private RSA keys
- RSA_generate_key(3ssl) generate RSA key pair
- RSA_get0_key(3ssl) Routines for getting and setting data in an RSA object
- RSA_meth_new(3ssl) Routines to build up RSA methods
- RSA_new(3ssl) allocate and free RSA objects
- RSA_padding_add_PKCS1_type_1(3ssl) asymmetric encryption padding
- RSA_print(3ssl) print cryptographic parameters
- RSA_private_encrypt(3ssl) low-level signature operations
- RSA_public_encrypt(3ssl) RSA public key cryptography
- RSA_set_method(3ssl) select RSA method
- RSA_sign(3ssl) RSA signatures
- RSA_sign_ASN1_OCTET_STRING(3ssl) RSA signatures
- RSA_size(3ssl) get RSA modulus size or security bits
- s2i_ASN1_IA5STRING(3ssl) convert objects from/to ASN.1/string representation
- SCT_new(3ssl) A Certificate Transparency Signed Certificate Timestamp
- SCT_print(3ssl) Prints Signed Certificate Timestamps in a human-readable way
- SCT_validate(3ssl) checks Signed Certificate Timestamps (SCTs) are valid
- SHA256_Init(3ssl) Secure Hash Algorithm
- SMIME_read_ASN1(3ssl) parse S/MIME message
- SMIME_read_CMS(3ssl) parse S/MIME message
- SMIME_read_PKCS7(3ssl) parse S/MIME message
- SMIME_write_ASN1(3ssl) convert structure to S/MIME format
- SMIME_write_CMS(3ssl) convert CMS structure to S/MIME format
- SMIME_write_PKCS7(3ssl) convert PKCS#7 structure to S/MIME format
- SRP_Calc_B(3ssl) SRP authentication primitives
- SRP_create_verifier(3ssl) SRP authentication primitives
- SRP_user_pwd_new(3ssl) Functions to create a record of SRP user verifier information
- SRP_VBASE_new(3ssl) Functions to create and manage a stack of SRP user verifier information
- SSL_accept(3ssl) wait for a TLS/SSL client to initiate a TLS/SSL handshake
- SSL_alert_type_string(3ssl) get textual description of alert information
- SSL_alloc_buffers(3ssl) manage SSL structure buffers
- SSL_check_chain(3ssl) check certificate chain suitability
- SSL_CIPHER_get_name(3ssl) get SSL_CIPHER properties
- SSL_clear(3ssl) reset SSL object to allow another connection
- SSL_COMP_add_compression_method(3ssl) handle SSL/TLS integrated compression methods
- SSL_CONF_cmd(3ssl) send configuration command
- SSL_CONF_cmd_argv(3ssl) SSL configuration command line processing
- SSL_CONF_CTX_new(3ssl) SSL configuration allocation functions
- SSL_CONF_CTX_set1_prefix(3ssl) Set configuration context command prefix
- SSL_CONF_CTX_set_flags(3ssl) Set or clear SSL configuration context flags
- SSL_CONF_CTX_set_ssl_ctx(3ssl) set context to configure
- SSL_connect(3ssl) initiate the TLS/SSL handshake with an TLS/SSL server
- SSL_CTX_add1_chain_cert(3ssl) extra chain certificate processing
- SSL_CTX_add_extra_chain_cert(3ssl) add, get or clear extra chain certificates
- SSL_CTX_add_session(3ssl) manipulate session cache
- SSL_CTX_config(3ssl) configure SSL_CTX or SSL structure
- SSL_CTX_ctrl(3ssl) internal handling functions for SSL_CTX and SSL objects
- SSL_CTX_dane_enable(3ssl) enable DANE TLS authentication of the remote TLS server in the local TLS client
- SSL_CTX_flush_sessions(3ssl) remove expired sessions
- SSL_CTX_free(3ssl) free an allocated SSL_CTX object
- SSL_CTX_get0_param(3ssl) get and set verification parameters
- SSL_CTX_get_verify_mode(3ssl) get currently set verification parameters
- SSL_CTX_has_client_custom_ext(3ssl) check whether a handler exists for a particular client extension type
- SSL_CTX_load_verify_locations(3ssl) set default locations for trusted CA certificates
- SSL_CTX_new(3ssl) create a new SSL_CTX object as framework for TLS/SSL or DTLS enabled functions
- SSL_CTX_sess_number(3ssl) obtain session cache statistics
- SSL_CTX_sess_set_cache_size(3ssl) manipulate session cache size
- SSL_CTX_sess_set_get_cb(3ssl) provide callback functions for server side external session caching
- SSL_CTX_sessions(3ssl) access internal session cache
- SSL_CTX_set0_CA_list(3ssl) get or set CA list
- SSL_CTX_set1_curves(3ssl) EC supported curve functions
- SSL_CTX_set1_sigalgs(3ssl) set supported signature algorithms
- SSL_CTX_set1_verify_cert_store(3ssl) set certificate verification or chain store
- SSL_CTX_set_alpn_select_cb(3ssl) handle application layer protocol negotiation (ALPN)
- SSL_CTX_set_cert_cb(3ssl) handle certificate callback function
- SSL_CTX_set_cert_store(3ssl) manipulate X509 certificate verification storage
- SSL_CTX_set_cert_verify_callback(3ssl) set peer certificate verification procedure
- SSL_CTX_set_cipher_list(3ssl) choose list of available SSL_CIPHERs
- SSL_CTX_set_client_cert_cb(3ssl) handle client certificate callback function
- SSL_CTX_set_client_hello_cb(3ssl) callback functions for early server-side ClientHello processing
- SSL_CTX_set_ct_validation_callback(3ssl) control Certificate Transparency policy
- SSL_CTX_set_ctlog_list_file(3ssl) load a Certificate Transparency log list from a file
- SSL_CTX_set_default_passwd_cb(3ssl) set or get passwd callback for encrypted PEM file handling
- SSL_CTX_set_generate_session_id(3ssl) manipulate generation of SSL session IDs (server only)
- SSL_CTX_set_info_callback(3ssl) handle information callback for SSL connections
- SSL_CTX_set_keylog_callback(3ssl) logging TLS key material
- SSL_CTX_set_max_cert_list(3ssl) manipulate allowed size for the peer's certificate chain
- SSL_CTX_set_min_proto_version(3ssl) Get and set minimum and maximum supported protocol version
- SSL_CTX_set_mode(3ssl) manipulate SSL engine mode
- SSL_CTX_set_msg_callback(3ssl) install callback for observing protocol messages
- SSL_CTX_set_num_tickets(3ssl) control the number of TLSv1.3 session tickets that are issued
- SSL_CTX_set_options(3ssl) manipulate SSL options
- SSL_CTX_set_psk_client_callback(3ssl) set PSK client callback
- SSL_CTX_set_quiet_shutdown(3ssl) manipulate shutdown behaviour
- SSL_CTX_set_read_ahead(3ssl) manage whether to read as many input bytes as possible
- SSL_CTX_set_record_padding_callback(3ssl) install callback to specify TLS 1.3 record padding
- SSL_CTX_set_security_level(3ssl) SSL/TLS security framework
- SSL_CTX_set_session_cache_mode(3ssl) enable/disable session caching
- SSL_CTX_set_session_id_context(3ssl) set context within which session can be reused (server side only)
- SSL_CTX_set_session_ticket_cb(3ssl) manage session ticket application data
- SSL_CTX_set_split_send_fragment(3ssl) Control fragment size settings and pipelining operations
- SSL_CTX_set_srp_password(3ssl) SRP control operations
- SSL_CTX_set_ssl_version(3ssl) choose a new TLS/SSL method
- SSL_CTX_set_stateless_cookie_generate_cb(3ssl) Callback functions for stateless TLS1.3 cookies
- SSL_CTX_set_timeout(3ssl) manipulate timeout values for session caching
- SSL_CTX_set_tlsext_servername_callback(3ssl) handle server name indication (SNI)
- SSL_CTX_set_tlsext_status_cb(3ssl) OCSP Certificate Status Request functions
- SSL_CTX_set_tlsext_ticket_key_cb(3ssl) set a callback for session ticket processing
- SSL_CTX_set_tlsext_use_srtp(3ssl) Configure and query SRTP support
- SSL_CTX_set_tmp_dh_callback(3ssl) handle DH keys for ephemeral key exchange
- SSL_CTX_set_tmp_ecdh(3ssl) handle ECDH keys for ephemeral key exchange
- SSL_CTX_set_verify(3ssl) set various SSL/TLS parameters for peer certificate verification
- SSL_CTX_use_certificate(3ssl) load certificate and key data
- SSL_CTX_use_psk_identity_hint(3ssl) set PSK identity hint to use
- SSL_CTX_use_serverinfo(3ssl) use serverinfo extension
- SSL_do_handshake(3ssl) perform a TLS/SSL handshake
- SSL_export_keying_material(3ssl) obtain keying material for application use
- SSL_extension_supported(3ssl) custom TLS extension handling
- SSL_free(3ssl) free an allocated SSL structure
- SSL_get0_peer_scts(3ssl) get SCTs received
- SSL_get_all_async_fds(3ssl) manage asynchronous operations
- SSL_get_certificate(3ssl) retrieve TLS/SSL certificate and private key
- SSL_get_ciphers(3ssl) get list of available SSL_CIPHERs
- SSL_get_client_random(3ssl) get internal TLS/SSL random values and get/set master key
- SSL_get_current_cipher(3ssl) get SSL_CIPHER of a connection
- SSL_get_default_timeout(3ssl) get default session timeout value
- SSL_get_error(3ssl) obtain result code for TLS/SSL I/O operation
- SSL_get_extms_support(3ssl) extended master secret support
- SSL_get_fd(3ssl) get file descriptor linked to an SSL object
- SSL_get_peer_cert_chain(3ssl) get the X509 certificate chain of the peer
- SSL_get_peer_certificate(3ssl) get the X509 certificate of the peer
- SSL_get_peer_signature_nid(3ssl) get TLS message signing types
- SSL_get_peer_tmp_key(3ssl) get information about temporary keys used during a handshake
- SSL_get_psk_identity(3ssl) get PSK client identity and hint
- SSL_get_rbio(3ssl) get BIO linked to an SSL object
- SSL_get_session(3ssl) retrieve TLS/SSL session data
- SSL_get_shared_sigalgs(3ssl) get supported signature algorithms
- SSL_get_SSL_CTX(3ssl) get the SSL_CTX from which an SSL is created
- SSL_get_verify_result(3ssl) get result of peer certificate verification
- SSL_get_version(3ssl) get the protocol information of a connection
- SSL_group_to_name(3ssl) get name of group
- SSL_in_init(3ssl) retrieve information about the handshake state machine
- SSL_key_update(3ssl) initiate and obtain information about updating connection keys
- SSL_library_init(3ssl) initialize SSL library by registering algorithms
- SSL_load_client_CA_file(3ssl) load certificate names
- SSL_new(3ssl) create an SSL structure for a connection
- SSL_pending(3ssl) check for readable bytes buffered in an SSL object
- SSL_read(3ssl) read bytes from a TLS/SSL connection
- SSL_read_early_data(3ssl) functions for sending and receiving early data
- SSL_rstate_string(3ssl) get textual description of state of an SSL object during read operation
- SSL_SESSION_free(3ssl) create, free and manage SSL_SESSION structures
- SSL_SESSION_get0_cipher(3ssl) set and retrieve the SSL cipher associated with a session
- SSL_SESSION_get0_hostname(3ssl) get and set SNI and ALPN data associated with a session
- SSL_SESSION_get0_id_context(3ssl) get and set the SSL ID context associated with a session
- SSL_SESSION_get0_peer(3ssl) get details about peer's certificate for a session
- SSL_SESSION_get_compress_id(3ssl) get details about the compression associated with a session
- SSL_SESSION_get_protocol_version(3ssl) get and set the session protocol version
- SSL_SESSION_get_time(3ssl) retrieve and manipulate session time and timeout settings
- SSL_SESSION_has_ticket(3ssl) get details about the ticket associated with a session
- SSL_SESSION_is_resumable(3ssl) determine whether an SSL_SESSION object can be used for resumption
- SSL_SESSION_print(3ssl) printf information about a session
- SSL_session_reused(3ssl) query whether a reused session was negotiated during handshake
- SSL_SESSION_set1_id(3ssl) get and set the SSL session ID
- SSL_set1_host(3ssl) SSL server verification parameters
- SSL_set_async_callback(3ssl) manage asynchronous operations
- SSL_set_bio(3ssl) connect the SSL object with a BIO
- SSL_set_connect_state(3ssl) functions for manipulating and examining the client or server mode of an SSL object
- SSL_set_fd(3ssl) connect the SSL object with a file descriptor
- SSL_set_retry_verify(3ssl) indicate that certificate verification should be retried
- SSL_set_session(3ssl) set a TLS/SSL session to be used during TLS/SSL connect
- SSL_set_shutdown(3ssl) manipulate shutdown state of an SSL connection
- SSL_set_verify_result(3ssl) override result of peer certificate verification
- SSL_shutdown(3ssl) shut down a TLS/SSL connection
- SSL_state_string(3ssl) get textual description of state of an SSL object
- SSL_want(3ssl) obtain state information TLS/SSL I/O operation
- SSL_write(3ssl) write bytes to a TLS/SSL connection
- TS_RESP_CTX_new(3ssl) Timestamp response context object creation
- TS_VERIFY_CTX_set_certs(3ssl) set certificates for TS response verification
- UI_create_method(3ssl) user interface method creation and destruction
- UI_new(3ssl) user interface
- UI_STRING(3ssl) User interface string parsing
- UI_UTIL_read_pw(3ssl) user interface utilities
- X509_add_cert(3ssl) X509 certificate list addition functions
- X509_ALGOR_dup(3ssl) AlgorithmIdentifier functions
- X509_ATTRIBUTE(3ssl) X509 attribute functions
- X509_check_ca(3ssl) check if given certificate is CA certificate
- X509_check_host(3ssl) X.509 certificate matching
- X509_check_issued(3ssl) checks if certificate is apparently issued by another certificate
- X509_check_private_key(3ssl) check the consistency of a private key with the public key in an X509 certificate or certificate request
- X509_check_purpose(3ssl) Check the purpose of a certificate
- X509_cmp(3ssl) compare X509 certificates and related values
- X509_cmp_time(3ssl) X509 time functions
- X509_CRL_get0_by_serial(3ssl) CRL revoked entry utility functions
- X509_digest(3ssl) get digest of various objects
- X509_dup(3ssl) ASN1 object utilities
- X509_EXTENSION_set_object(3ssl) extension utility functions
- X509_get0_distinguishing_id(3ssl) get or set the Distinguishing ID for certificate operations
- X509_get0_notBefore(3ssl) get or set certificate or CRL dates
- X509_get0_signature(3ssl) signature information
- X509_get0_uids(3ssl) get certificate unique identifiers
- X509_get_extension_flags(3ssl) retrieve certificate extension data
- X509_get_pubkey(3ssl) get or set certificate or certificate request public key
- X509_get_serialNumber(3ssl) get or set certificate serial number
- X509_get_subject_name(3ssl) get X509_NAME hashes or get and set issuer or subject names
- X509_get_version(3ssl) get or set certificate, certificate request or CRL version
- X509_load_http(3ssl) certificate and CRL loading functions
- X509_LOOKUP(3ssl) OpenSSL certificate lookup mechanisms
- X509_LOOKUP_hash_dir(3ssl) Default OpenSSL certificate lookup methods
- X509_LOOKUP_meth_new(3ssl) Routines to build up X509_LOOKUP methods
- X509_NAME_add_entry_by_txt(3ssl) X509_NAME modification functions
- X509_NAME_ENTRY_get_object(3ssl) X509_NAME_ENTRY utility functions
- X509_NAME_get0_der(3ssl) get X509_NAME DER encoding
- X509_NAME_get_index_by_NID(3ssl) X509_NAME lookup and enumeration functions
- X509_NAME_print_ex(3ssl) X509_NAME printing routines
- X509_new(3ssl) X509 certificate ASN1 allocation functions
- X509_PUBKEY_new(3ssl) SubjectPublicKeyInfo public key functions
- X509_REQ_get_attr(3ssl) X509_ATTRIBUTE support for signed certificate requests
- X509_REQ_get_extensions(3ssl) handle X.509 extension attributes of a CSR
- X509_SIG_get0(3ssl) DigestInfo functions
- X509_sign(3ssl) sign certificate, certificate request, or CRL signature
- X509_STORE_add_cert(3ssl) X509_STORE manipulation
- X509_STORE_CTX_get_error(3ssl) get or set certificate verification status information
- X509_STORE_CTX_new(3ssl) X509_STORE_CTX initialisation
- X509_STORE_CTX_set_verify_cb(3ssl) get and set X509_STORE_CTX components such as verification callback
- X509_STORE_get0_param(3ssl) X509_STORE setter and getter functions
- X509_STORE_new(3ssl) X509_STORE allocation, freeing and locking functions
- X509_STORE_set_verify_cb_func(3ssl) set verification callback
- X509_verify(3ssl) verify certificate, certificate request, or CRL signature
- X509_verify_cert(3ssl) build and verify X509 certificate chain
- X509_VERIFY_PARAM_set_flags(3ssl) X509 verification parameters
- X509V3_get_d2i(3ssl) X509 extension decode and encode functions
- X509v3_get_ext_by_NID(3ssl) extension stack utility functions
- X509V3_set_ctx(3ssl) X.509 v3 extension generation utilities