1 .\" $OpenBSD: tls_config_verify.3,v 1.5 2025年07月07日 10:54:00 schwarze Exp $ 2 .\" 3 .\" Copyright (c) 2014 Ted Unangst <tedu@openbsd.org> 4 .\" Copyright (c) 2015 Joel Sing <jsing@openbsd.org> 5 .\" 6 .\" Permission to use, copy, modify, and distribute this software for any 7 .\" purpose with or without fee is hereby granted, provided that the above 8 .\" copyright notice and this permission notice appear in all copies. 9 .\" 10 .\" THE SOFTWARE IS PROVIDED "AS IS" AND THE AUTHOR DISCLAIMS ALL WARRANTIES 11 .\" WITH REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF 12 .\" MERCHANTABILITY AND FITNESS. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR 13 .\" ANY SPECIAL, DIRECT, INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES 14 .\" WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR PROFITS, WHETHER IN AN 15 .\" ACTION OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF 16 .\" OR IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE. 17 .\" 18 .Dd $Mdocdate: July 7 2025 $ 19 .Dt TLS_CONFIG_VERIFY 3 20 .Os 21 .Sh NAME 22 .Nm tls_config_verify , 23 .Nm tls_config_insecure_noverifycert , 24 .Nm tls_config_insecure_noverifyname , 25 .Nm tls_config_insecure_noverifytime 26 .Nd insecure TLS configuration 27 .Sh SYNOPSIS 28 .Lb libtls libssl libcrypto 29 .In tls.h 30 .Ft void 31 .Fn tls_config_verify "struct tls_config *config" 32 .Ft void 33 .Fn tls_config_insecure_noverifycert "struct tls_config *config" 34 .Ft void 35 .Fn tls_config_insecure_noverifyname "struct tls_config *config" 36 .Ft void 37 .Fn tls_config_insecure_noverifytime "struct tls_config *config" 38 .Sh DESCRIPTION 39These functions disable parts of the normal certificate verification 40process, resulting in insecure configurations. 41Be very careful when using them. 42 .Pp 43 .Fn tls_config_insecure_noverifycert 44disables certificate verification and OCSP validation. 45 .Pp 46 .Fn tls_config_insecure_noverifyname 47disables server name verification (client only). 48 .Pp 49 .Fn tls_config_insecure_noverifytime 50disables validity checking of certificates and OCSP validation. 51 .Pp 52 .Fn tls_config_verify 53reenables server name and certificate verification. 54 .Sh SEE ALSO 55 .Xr tls_client 3 , 56 .Xr tls_config_ocsp_require_stapling 3 , 57 .Xr tls_config_set_protocols 3 , 58 .Xr tls_conn_version 3 , 59 .Xr tls_connect 3 , 60 .Xr tls_handshake 3 , 61 .Xr tls_init 3 62 .Sh HISTORY 63 .Fn tls_config_verify 64appeared in 65 .Ox 5.6 66and got its final name in 67 .Ox 5.7 . 68 .Pp 69 .Fn tls_config_insecure_noverifycert 70and 71 .Fn tls_config_insecure_noverifyname 72appeared in 73 .Ox 5.7 74and 75 .Nm tls_config_insecure_noverifytime 76in 77 .Ox 5.9 . 78 .Sh AUTHORS 79 .An Joel Sing Aq Mt jsing@openbsd.org 80 .An Ted Unangst Aq Mt tedu@openbsd.org 81