ssl-connection-read-certificates Function

Summary

Specifies certificates for a SSL conection.

Package

comm

Signature

ssl-connection-read-certificates connection key-file &key cert-file password password-callback keychain keychain-password keychain-reset

Arguments

Description

The function ssl-connection-read-certificates specifies certificate(s) and a key for a SSL connection.

connection must be a SSL connection (a socket-stream or a async-io-state) that has SSL attached to it.

key-file, cert-file, password, password-callback, keychain, keychain-password and keychain-reset are used to read certificate(s) and a key as described in create-ssl-server-context.

For the OpenSSL implementation, ssl-connection-read-certificates is available only with OpenSSL 1.1 or later.

Notes

If you always use the same certificate(s), then it is better to create a ssl-abstract-context by calling create-ssl-server-context or create-ssl-client-context and specify the certificate arguments at that time. This is not only more convenient, but is also more efficient in repeated use. ssl-connection-read-certificates is needed in cases when you decide which certificate(s) to use after starting the handshake, inside client-hello-callback of create-ssl-server-context or cert-request-callback of create-ssl-client-context.

ssl-connection-read-certificates is not implemented for streams using Java sockets (opened by open-tcp-stream-using-java).

Examples

For examples of using ssl-connection-read-certificates, see:

(example-edit-file "ssl/ssl-certificates")

See also

create-ssl-client-context
create-ssl-server-context