[#SSL_check_chain]
= SSL_check_chain
:mrdocs:

Check whether certificate `x,` key `pk,` and `chain` suit the current TLS session.

== Synopsis

Declared in `<openssl/tls1.h>`

[source,cpp,subs="verbatim,replacements,macros,-callouts"]
----
int
SSL_check_chain(
    xref:SSL.adoc[SSL]* s,
    xref:X509.adoc[X509]* x,
    xref:EVP_PKEY.adoc[EVP_PKEY]* pk,
    xref:stack_st_X509.adoc[stack_st_X509]* chain);
----

== Return Value

Bitmask of CERT_PKEY_* flags (CERT_PKEY_VALID means the chain is usable for this session).

== Parameters

[cols="1,4"]
|===
| Name| Description
| *s*
| SSL object whose peer preferences and negotiated parameters constrain the check.
| *x*
| End‐entity certificate under consideration.
| *pk*
| Private key matching `x.`
| *chain*
| Intermediate CA certificates, or NULL / empty when none are offered.
|===


[.small]#Created with https://www.mrdocs.com[MrDocs]#