1.\" $OpenBSD: tls_config_verify.3,v 1.1 2017/01/25 23:53:18 schwarze Exp $ 2.\" 3.\" Copyright (c) 2014 Ted Unangst <tedu@openbsd.org> 4.\" 5.\" Permission to use, copy, modify, and distribute this software for any 6.\" purpose with or without fee is hereby granted, provided that the above 7.\" copyright notice and this permission notice appear in all copies. 8.\" 9.\" THE SOFTWARE IS PROVIDED "AS IS" AND THE AUTHOR DISCLAIMS ALL WARRANTIES 10.\" WITH REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF 11.\" MERCHANTABILITY AND FITNESS. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR 12.\" ANY SPECIAL, DIRECT, INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES 13.\" WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR PROFITS, WHETHER IN AN 14.\" ACTION OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF 15.\" OR IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE. 16.\" 17.Dd $Mdocdate: January 25 2017 $ 18.Dt TLS_CONGIG_VERIFY 3 19.Os 20.Sh NAME 21.Nm tls_config_verify , 22.Nm tls_config_insecure_noverifycert , 23.Nm tls_config_insecure_noverifyname , 24.Nm tls_config_insecure_noverifytime 25.Nd insecure TLS configuration 26.Sh SYNOPSIS 27.In tls.h 28.Ft void 29.Fn tls_config_verify "struct tls_config *config" 30.Ft void 31.Fn tls_config_insecure_noverifycert "struct tls_config *config" 32.Ft void 33.Fn tls_config_insecure_noverifyname "struct tls_config *config" 34.Ft void 35.Fn tls_config_insecure_noverifytime "struct tls_config *config" 36.Sh DESCRIPTION 37These functions disable parts of the normal certificate verification 38process, resulting in insecure configurations. 39Be very careful when using them. 40.Pp 41.Fn tls_config_insecure_noverifycert 42disables certificate verification and OCSP validation. 43.Pp 44.Fn tls_config_insecure_noverifyname 45disables server name verification (client only). 46.Pp 47.Fn tls_config_insecure_noverifytime 48disables validity checking of certificates and OCSP validation. 49.Pp 50.Fn tls_config_verify 51reenables server name and certificate verification. 52.Sh SEE ALSO 53.Xr tls_client 3 , 54.Xr tls_config_ocsp_require_stapling 3 , 55.Xr tls_config_set_protocols 3 , 56.Xr tls_conn_version 3 , 57.Xr tls_connect 3 , 58.Xr tls_handshake 3 , 59.Xr tls_init 3 60