Provides no information about whether client key exchange was done, and what cert was used, or what key size or client authentication algorithm was used. However, the application can obtain the peer's cert and extract what it needs with other libcert functions. The newly proposed function returns all info in a caller-supplied structure. The caller does not have to free any memory allocated by the function. No strings are returned.
All values are numeric.
Translating the returned numbers into strings is the responsibility of the calling application. Zero means SSL was not used. However, since the application provides that cert to the SSL library through a callback function, the application ought to already have a pointer to that cert. However, a function to return a reference to the local client cert could be added if needed. All rights reserved.