Files
cpp-httplib/docs-src/pages/en/cookbook/c18-ssl-errors.md
yhirose 0fa4912891 Fix broken relative links in cookbook docs (Fix #2490)
Cookbook body links referenced sibling pages with a bare slug
(e.g. `c14-keep-alive`). Under the pretty-URL layout each page lives
in its own directory, so these resolve against the page's own
directory and 404. Prefix them with `../` to match the convention
already used in the tour and llm-app sections.

Verified clean with `docs-gen check`.
2026-07-08 22:45:29 -04:00

1.7 KiB

title, order, status
title order status
C18. Handle SSL Errors 18 draft

When an HTTPS request fails, res.error() returns values like Error::SSLConnection or Error::SSLServerVerification. Sometimes that's not enough to pinpoint the cause. That's where Result::ssl_error() and Result::ssl_backend_error() help.

Get the SSL error details

httplib::Client cli("https://api.example.com");
auto res = cli.Get("/");

if (!res) {
  auto err = res.error();
  std::cerr << "error: " << httplib::to_string(err) << std::endl;

  if (err == httplib::Error::SSLConnection ||
      err == httplib::Error::SSLServerVerification) {
    std::cerr << "ssl_error: " << res.ssl_error() << std::endl;
    std::cerr << "ssl_backend_error: " << res.ssl_backend_error() << std::endl;
  }
}

ssl_error() returns the error code from the SSL library (e.g., OpenSSL's SSL_get_error()). ssl_backend_error() gives you the backend's more detailed error value — for OpenSSL, that's ERR_get_error().

Format OpenSSL errors as strings

When you have a value from ssl_backend_error(), pass it to OpenSSL's ERR_error_string() to get a readable message.

#include <openssl/err.h>

if (res.ssl_backend_error() != 0) {
  char buf[256];
  ERR_error_string_n(res.ssl_backend_error(), buf, sizeof(buf));
  std::cerr << "openssl: " << buf << std::endl;
}

Common causes

Symptom Usual suspect
SSLServerVerification CA certificate path isn't configured, or the cert is self-signed
SSLServerHostnameVerification The cert's CN/SAN doesn't match the host
SSLConnection TLS version mismatch, no shared cipher suite

To change certificate verification settings, see T02. Control SSL certificate verification.