carta
tls_config_insecure_noverifytime(3)

tls_config_insecure_noverifytime3

Insecure tls configuration

Part of tls_config_verify(3).

Usage

void

void

void

void

Overview

These functions disable parts of the normal certificate verification process, resulting in insecure configurations. Be very careful when using them.

tls_config_insecure_noverifycert() disables certificate verification and OCSP validation.

tls_config_insecure_noverifyname() disables server name verification (client only).

tls_config_insecure_noverifytime() disables validity checking of certificates and OCSP validation.

tls_config_verify() reenables server name and certificate verification.

History

tls_config_verify() appeared in OpenBSD 5.6 and got its final name in OpenBSD 5.7.

tls_config_insecure_noverifycert() and tls_config_insecure_noverifyname() appeared in OpenBSD 5.7 and tls_config_insecure_noverifytime in OpenBSD 5.9.

Authors

Joel Sing ⟨[email protected]⟩ Ted Unangst ⟨[email protected]⟩

From libretls 3.8.1-3 in Arch Linux 2026-11-01. Parsed by carta from the page's mdoc source.