Callback that decides whether received SCTs satisfy Certificate Transparency policy.

Synopsis

Declared in <openssl/ssl.h>

typedef int(* ssl_ct_validation_cb)(CT_POLICY_EVAL_CTX const*, stack_st_SCT const*, void*);

Return Value

1 if SCTs are sufficient, 0 if insufficient (abort connection), or negative on error.

Parameters

Name

Description

ctx

Policy evaluation context for the peer certificate chain.

scts

Stack of signed certificate timestamps presented by the peer.

arg

Application userdata registered with the validation callback.

Created with MrDocs