NAME
SSL_set_connect_state
,
SSL_set_accept_state
,
SSL_is_server
—
prepare SSL object to work in client or
server mode
SYNOPSIS
#include
<openssl/ssl.h>
void
SSL_set_connect_state
(SSL
*ssl);
void
SSL_set_accept_state
(SSL
*ssl);
int
SSL_is_server
(const
SSL *ssl);
DESCRIPTION
SSL_set_connect_state
()
sets ssl to work in client mode.
SSL_set_accept_state
()
sets ssl to work in server mode.
SSL_is_server
()
checks whether ssl is set to server mode.
When the SSL_CTX object was created with SSL_CTX_new(3), it was either assigned a dedicated client method, a dedicated server method, or a generic method, that can be used for both client and server connections. (The method might have been changed with SSL_CTX_set_ssl_version(3) or SSL_set_ssl_method(3).)
When beginning a new handshake, the SSL engine must know whether it must call the connect (client) or accept (server) routines. Even though it may be clear from the method chosen whether client or server mode was requested, the handshake routines must be explicitly set.
When using the
SSL_connect(3) or
SSL_accept(3) routines, the correct handshake routines are
automatically set. When performing a transparent negotiation using
SSL_write(3) or
SSL_read(3), the handshake routines must be explicitly set in advance
using either
SSL_set_connect_state
()
or SSL_set_accept_state
().
If
SSL_is_server
()
is called before SSL_set_connect_state
() or
SSL_set_accept_state
() was called either
automatically or explicitly, the result depends on what method was used when
the SSL_CTX was created. If a generic method or a
dedicated server method was passed to
SSL_CTX_new(3), SSL_is_server
() returns 1;
otherwise, it returns 0.
RETURN VALUES
SSL_is_server
() returns 1 if
ssl is set to server mode or 0 if it is set to client
mode.
SEE ALSO
ssl(3), SSL_accept(3), SSL_connect(3), SSL_CTX_new(3), SSL_CTX_set_ssl_version(3), SSL_do_handshake(3), SSL_new(3), SSL_read(3), SSL_write(3)
HISTORY
SSL_set_connect_state
() and
SSL_set_accept_state
() first appeared in SSLeay
0.6.0 and have been available since OpenBSD 2.4.
SSL_is_server
() first appeared in OpenSSL
1.0.2 and has been available since OpenBSD 6.3.