How does a client get the server's SAN/DNS strings

Hal Murray halmurray+openssl at sonic.net
Sat Apr 16 20:18:57 UTC 2022


I can get the subject and issuer with
  X509_get_subject_name and X509_get_issuer_name

I'm looking for something similar to get the SAN/DNS strings used to verify 
that this certificate is valid for the hostname provided via SSL_set1_host

Any API will be slightly complicated since there may be more than one SAN/DNS 
string.



-- 
These are my opinions.  I hate spam.





More information about the openssl-users mailing list