diff options
author | Omar Polo <op@cvs.openbsd.org> | 2023-05-30 07:37:35 +0000 |
---|---|---|
committer | Omar Polo <op@cvs.openbsd.org> | 2023-05-30 07:37:35 +0000 |
commit | 1289a7741494c3d5e286aefb006b2d5264b7a58d (patch) | |
tree | 3e4879cdb5f017ff7e40c666eebd65375fde70aa | |
parent | b675df4b41a3f48d486812e1aedd2dac76a65765 (diff) |
fix some nits on previous
- move a sentence out of a Bd block
- add some .Pp for spacing
- avoid a double colon on a sentence and the usage of second person
- mark STORE_CTX with .Vt
- change one Vt -> Dv (done after this has been ok'd by beck)
ok beck@
-rw-r--r-- | lib/libcrypto/man/X509_STORE_CTX_set_verify_cb.3 | 16 |
1 files changed, 10 insertions, 6 deletions
diff --git a/lib/libcrypto/man/X509_STORE_CTX_set_verify_cb.3 b/lib/libcrypto/man/X509_STORE_CTX_set_verify_cb.3 index e78af8a6cfb..0fe086b721a 100644 --- a/lib/libcrypto/man/X509_STORE_CTX_set_verify_cb.3 +++ b/lib/libcrypto/man/X509_STORE_CTX_set_verify_cb.3 @@ -1,4 +1,4 @@ -.\" $OpenBSD: X509_STORE_CTX_set_verify_cb.3,v 1.11 2023/05/29 11:57:23 beck Exp $ +.\" $OpenBSD: X509_STORE_CTX_set_verify_cb.3,v 1.12 2023/05/30 07:37:34 op Exp $ .\" full merge up to: OpenSSL aebb9aac Jul 19 09:27:53 2016 -0400 .\" selective merge up to: OpenSSL 24a535ea Sep 22 13:14:20 2020 +0100 .\" @@ -66,7 +66,7 @@ .\" ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED .\" OF THE POSSIBILITY OF SUCH DAMAGE. .\" -.Dd $Mdocdate: May 29 2023 $ +.Dd $Mdocdate: May 30 2023 $ .Dt X509_STORE_CTX_SET_VERIFY_CB 3 .Os .Sh NAME @@ -176,10 +176,11 @@ verify_callback(int ok, X509_STORE_CTX *ctx) { return ok; } -This is likely the only safe callback to use. .Ed .Pp -Simple and terrible example that you should not use: +This is likely the only safe callback to use. +.Pp +Simple and terrible example that should not be used. Suppose a certificate in the chain is expired and we wish to continue after this error: .Bd -literal @@ -193,10 +194,13 @@ verify_callback(int ok, X509_STORE_CTX *ctx) return ok; } .Ed +.Pp While this example is presented for historical purposes, this is not the correct way to accomplish this. -You should set verification options on the STORE_CTX to use -.Vt X509_V_FLAG_NO_CHECK_TIME +The verification flag +.Dv X509_V_FLAG_NO_CHECK_TIME +should be set on the +.Vt STORE_CTX using .Xr X509_VERIFY_PARAM_set_flags 3 instead. |