diff options
| author | Ingo Schwarze <schwarze@cvs.openbsd.org> | 2021-07-23 16:43:57 +0000 |
|---|---|---|
| committer | Ingo Schwarze <schwarze@cvs.openbsd.org> | 2021-07-23 16:43:57 +0000 |
| commit | 2c559f1c4d8444ba0737dd447a269efdd085e0fc (patch) | |
| tree | 32b5faf233550984130e8913a583f3ebf8d14f14 | |
| parent | daab4a1647ab2e2b571d02542df06db50f12aad9 (diff) | |
clarify the meaning of the argument of X509_VERIFY_PARAM_set_purpose(3)
| -rw-r--r-- | lib/libcrypto/man/X509_VERIFY_PARAM_set_flags.3 | 26 |
1 files changed, 16 insertions, 10 deletions
diff --git a/lib/libcrypto/man/X509_VERIFY_PARAM_set_flags.3 b/lib/libcrypto/man/X509_VERIFY_PARAM_set_flags.3 index 7fc559f7fd8..ea3c867b8b6 100644 --- a/lib/libcrypto/man/X509_VERIFY_PARAM_set_flags.3 +++ b/lib/libcrypto/man/X509_VERIFY_PARAM_set_flags.3 @@ -1,11 +1,11 @@ -.\" $OpenBSD: X509_VERIFY_PARAM_set_flags.3,v 1.16 2021/06/11 19:45:21 jmc Exp $ +.\" $OpenBSD: X509_VERIFY_PARAM_set_flags.3,v 1.17 2021/07/23 16:43:56 schwarze Exp $ .\" full merge up to: OpenSSL d33def66 Feb 9 14:17:13 2016 -0500 -.\" selective merge up to: OpenSSL 6328d367 Jul 4 21:58:30 2020 +0200 +.\" selective merge up to: OpenSSL 24a535ea Sep 22 13:14:20 2020 +0100 .\" .\" This file is a derived work. .\" The changes are covered by the following Copyright and license: .\" -.\" Copyright (c) 2018 Ingo Schwarze <schwarze@openbsd.org> +.\" Copyright (c) 2018, 2021 Ingo Schwarze <schwarze@openbsd.org> .\" .\" Permission to use, copy, modify, and distribute this software for any .\" purpose with or without fee is hereby granted, provided that the above @@ -68,7 +68,7 @@ .\" ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED .\" OF THE POSSIBILITY OF SUCH DAMAGE. .\" -.Dd $Mdocdate: June 11 2021 $ +.Dd $Mdocdate: July 23 2021 $ .Dt X509_VERIFY_PARAM_SET_FLAGS 3 .Os .Sh NAME @@ -292,12 +292,18 @@ in .Fa param . .Pp .Fn X509_VERIFY_PARAM_set_purpose -sets the verification purpose in -.Fa param -to -.Fa purpose . -This determines the acceptable purpose of the certificate chain, for -example SSL client or SSL server. +sets the verification +.Fa purpose +identifier in +.Fa param . +This determines the acceptable purpose of the certificate chain, for example +.Dv X509_PURPOSE_SSL_CLIENT +or +.Dv X509_PURPOSE_SSL_SERVER . +Standard purposes are listed in +.Xr X509_check_purpose 3 , +and additional purposes can be defined with +.Xr X509_PURPOSE_add 3 . .Pp .Fn X509_VERIFY_PARAM_set_trust sets the trust setting in |