ne_ssl_trust_default_ca(3)

ne_ssl_trust_default_ca3

Functions to indicate that certificates are trusted

Part of ne_ssl_trust_cert(3).

Usage

#include <ne_session.h>

void ne_ssl_trust_cert(ne_session *session, const ne_ssl_certificate *cert);

void ne_ssl_trust_default_ca(ne_session *session);

Overview

To indicate that a given certificate is trusted by the user, the certificate object can be passed to ne_ssl_trust_cert. The certificate object is duplicated internally and can subsequently be destroyed.

The SSL library in use by neon may include a default set of CA certificates; calling the ne_ssl_trust_default_ca function will indicate that these CAs are trusted by the user.

Examples

Load the CA certificate stored in /path/to/cacert.pem:

ne_session *sess = ne_session_create(...);
ne_ssl_certificate *cert = ne_ssl_cert_read("/path/to/cacert.pem");
if (cert) {
   ne_ssl_trust_cert(sess, cert);
   ne_ssl_cert_free(cert);
} else {
   printf("Could not load CA cert: %s\n", ne_get_error(sess));
}

Releases

9 releases since Debian 4.0 (Etch); the text changed 7 times.

  1. 4.0
  2. 5.0
  3. 6.0
  4. 8
  5. 9–10
  6. 11
  7. 12
  8. 13

History

ne_ssl_trust_default_ca is not safe to call for non-SSL sessions versions of neon before 0.33.0. In 0.33.0 and later, this function is a no-op for non-SSL sessinos.

From libneon27-dev 0.34.2-1 in Debian 13 (Trixie). Also shipped by libneon27-gnutls-dev. Parsed by carta from the page's man source.