X509\_STORE\_GET0\_PARAM(3ossl) OpenSSL X509\_STORE\_GET0\_PARAM(3ossl)

# [NAME](#NAME)

X509\_STORE\_get0\_param, X509\_STORE\_set1\_param, X509\_STORE\_get1\_objects, X509\_STORE\_get0\_objects, X509\_STORE\_get1\_all\_certs - X509\_STORE setter and getter functions

# [SYNOPSIS](#SYNOPSIS)

```
 #include <openssl/x509_vfy.h>
 X509_VERIFY_PARAM *X509_STORE_get0_param(const X509_STORE *xs);
 int X509_STORE_set1_param(X509_STORE *xs, const X509_VERIFY_PARAM *pm);
 STACK_OF(X509_OBJECT) *X509_STORE_get1_objects(X509_STORE *xs);
 STACK_OF(X509_OBJECT) *X509_STORE_get0_objects(const X509_STORE *xs);
 STACK_OF(X509) *X509_STORE_get1_all_certs(X509_STORE *xs);
```

# [DESCRIPTION](#DESCRIPTION)

**X509\_STORE\_set1\_param()** sets the verification parameters to *pm* for *xs*.

**X509\_STORE\_get0\_param()** retrieves an internal pointer to the verification parameters for *xs*. The returned pointer must not be freed by the calling application

**X509\_STORE\_get1\_objects()** returns a snapshot of all objects in the store's X509 cache. The cache contains **X509** and **X509\_CRL** objects. The caller is responsible for freeing the returned list, using sk\_X509\_OBJECT\_pop\_free(sk, X509\_OBJECT\_free).

**X509\_STORE\_get0\_objects()** was deprecated in OpenSSL 4.0. Applications should instead use **X509\_STORE\_get1\_objects()** to avoid potential issues associated with **X509\_STORE\_get0\_objects()**. The **X509\_STORE\_get0\_objects()** returns an internal pointer to the store's cache of X509 and X509\_CRL objects. This pointer references internal data structures and must not be freed by the application. Since the returned pointer exposes shared internal state, its use in multithreaded contexts is inherently unsafe without external synchronisation. When a store is shared across threads, callers are required to acquire the store lock via **X509\_STORE\_lock()** before invoking **X509\_STORE\_get0\_objects()**.

**X509\_STORE\_get1\_all\_certs()** returns a list of all certificates in the store. The caller is responsible for freeing the returned list with **OSSL\_STACK\_OF\_X509\_free()**.

# [RETURN VALUES](#RETURN_VALUES)

**X509\_STORE\_get0\_param()** returns a pointer to an **X509\_VERIFY\_PARAM** structure.

**X509\_STORE\_set1\_param()** returns 1 for success and 0 for failure.

**X509\_STORE\_get1\_objects()** returns a pointer to a stack of the retrieved objects on success, else NULL.

**X509\_STORE\_get0\_objects()** returns a pointer to a stack of **X509\_OBJECT**.

**X509\_STORE\_get1\_all\_certs()** returns a pointer to a stack of the retrieved certificates on success, else NULL.

# [SEE ALSO](#SEE_ALSO)

[**DEFINE\_STACK\_OF**(3)](/man/os/openssl-4.0/DEFINE_STACK_OF.3), [**X509\_STORE\_new**(3)](/man/os/openssl-4.0/X509_STORE_new.3)

# [HISTORY](#HISTORY)

**X509\_STORE\_get0\_param** and **X509\_STORE\_get0\_objects** were added in OpenSSL 1.1.0. **X509\_STORE\_get1\_certs** was added in OpenSSL 3.0. **X509\_STORE\_get1\_objects** was added in OpenSSL 3.3.

# [COPYRIGHT](#COPYRIGHT)

Copyright 2016-2024 The OpenSSL Project Authors. All Rights Reserved.

Licensed under the Apache License 2.0 (the "License"). You may not use this file except in compliance with the License. You can obtain a copy in the file LICENSE in the source distribution or at &lt;https://www.openssl.org/source/license.html&gt;.

2026-09-29 4.0.3

---

Document: X509_STORE_get0_objects(3ossl) from openssl-4.0 4.0.3-r8 (Chainguard OS)