SSL_GET_CERTIFICATE(3) Library Functions Manual SSL_GET_CERTIFICATE(3)

SSL_get_certificate, SSL_get_privatekey — get SSL certificate and private key

/* -lssl -lcrypto */
#include <openssl/ssl.h>

X509 *
SSL_get_certificate(const SSL *ssl);

EVP_PKEY *
SSL_get_privatekey(const SSL *ssl);

These functions retrieve certificate and key data from an SSL object. They return internal pointers that must not be freed by the application program.

SSL_get_certificate() returns the active X.509 certificate currently used by ssl or NULL if none is active.

SSL_get_privatekey() returns the active private key currently used by ssl or NULL if none is active.

ssl(3), SSL_check_private_key(3), SSL_use_certificate(3)

SSL_get_certificate() first appeared in SSLeay 0.5.2a. SSL_get_privatekey() first appeared in SSLeay 0.8.0. Both functions have been available since OpenBSD 2.4.

OpenBSD 7.8 June 8, 2025 SSL_GET_CERTIFICATE(3)