summaryrefslogtreecommitdiff
path: root/lib/libcrypto/x509
diff options
context:
space:
mode:
authorTheo Buehler <tb@cvs.openbsd.org>2022-04-21 05:06:08 +0000
committerTheo Buehler <tb@cvs.openbsd.org>2022-04-21 05:06:08 +0000
commit863ee49e6d893a018e33cffd5dbdd71da893717e (patch)
treec7e4c470084fd90527e094890bf138143b581e14 /lib/libcrypto/x509
parenta689e0a48fdf68bfd7c4802c5c376ff021494b9c (diff)
Clarify comments at the start of {asid,addr}_validate_path_internal()
Requested by jsing
Diffstat (limited to 'lib/libcrypto/x509')
-rw-r--r--lib/libcrypto/x509/x509_addr.c6
-rw-r--r--lib/libcrypto/x509/x509_asid.c8
2 files changed, 7 insertions, 7 deletions
diff --git a/lib/libcrypto/x509/x509_addr.c b/lib/libcrypto/x509/x509_addr.c
index d33d4f2f8ed..b1ff93d4d0e 100644
--- a/lib/libcrypto/x509/x509_addr.c
+++ b/lib/libcrypto/x509/x509_addr.c
@@ -1,4 +1,4 @@
-/* $OpenBSD: x509_addr.c,v 1.79 2022/04/21 04:48:12 tb Exp $ */
+/* $OpenBSD: x509_addr.c,v 1.80 2022/04/21 05:06:07 tb Exp $ */
/*
* Contributed to the OpenSSL Project by the American Registry for
* Internet Numbers ("ARIN").
@@ -1774,8 +1774,8 @@ addr_validate_path_internal(X509_STORE_CTX *ctx, STACK_OF(X509) *chain,
/*
* Figure out where to start. If we don't have an extension to check,
- * we're done. Otherwise, check canonical form and set up for walking
- * up the chain.
+ * (either extracted from the leaf or passed by the caller), we're done.
+ * Otherwise, check canonical form and set up for walking up the chain.
*/
if (ext == NULL) {
depth = 0;
diff --git a/lib/libcrypto/x509/x509_asid.c b/lib/libcrypto/x509/x509_asid.c
index 5f43b3030dc..514b88bc0ef 100644
--- a/lib/libcrypto/x509/x509_asid.c
+++ b/lib/libcrypto/x509/x509_asid.c
@@ -1,4 +1,4 @@
-/* $OpenBSD: x509_asid.c,v 1.31 2022/04/21 04:48:12 tb Exp $ */
+/* $OpenBSD: x509_asid.c,v 1.32 2022/04/21 05:06:07 tb Exp $ */
/*
* Contributed to the OpenSSL Project by the American Registry for
* Internet Numbers ("ARIN").
@@ -999,9 +999,9 @@ asid_validate_path_internal(X509_STORE_CTX *ctx, STACK_OF(X509) *chain,
goto err;
/*
- * Figure out where to start. If we don't have an extension to
- * check, we're done. Otherwise, check canonical form and
- * set up for walking up the chain.
+ * Figure out where to start. If we don't have an extension to check,
+ * (either extracted from the leaf or passed by the caller), we're done.
+ * Otherwise, check canonical form and set up for walking up the chain.
*/
if (ext != NULL) {
i = -1;