openbsd/src/lib/libcrypto/man/PKCS7_verify.3, branch OPENBSD_7_9_BASEA mirror of https://github.com/libressl/openbsd.git
https://git.lua4.win/openbsd/atom?h=OPENBSD_7_9_BASE2025-12-20T07:22:43+00:00pkcs7: add PKCS7_NO_DUAL_CONTENT flag/behavior2025-12-20T07:22:43+00:00tb2025-12-20T07:22:43+00:00urn:sha1:4e99a5c0b6fa18eb76160d4cb726840aacb45404
What Netscape fucked up just had to be embraced by secure boot and
other nonsense. First OpenSSL wanted to be strict (which we inherited)
then Rich Salz Postel-ized this and made OpenSSL bypass this check by
default and added a flag to be strict 10 years ago.
Now sthen found that PHP 8.5 uses/exposes this flag.
Follows OpenSSL 6b2ebe43 (2016)
ok kenjiro
.Lb libcrypto ; OK tb@2025-06-08T22:40:31+00:00schwarze2025-06-08T22:40:31+00:00urn:sha1:8be86af02fed1bda350c8dd14ee064cb66e3b0f5man pages: add missing commas between subordinate and main clauses2022-03-31T17:27:26+00:00naddy2022-03-31T17:27:26+00:00urn:sha1:3d8be07546f5ec331a0f851b0ea88212376ebb95
jmc@ dislikes a comma before "then" in a conditional, so leave those
untouched.
ok jmc@
Document the bizarre fact that {CMS,PCKS7}_get0_signers() needs some2022-01-19T20:28:06+00:00tb2022-01-19T20:28:06+00:00urn:sha1:66fde14c38746fcf4eb247cc5a703458437fcd9d
freeing of what they return despite being get0 functions: the stack
of X509s that they return must be freed with sk_X509_free(). The get0
thus probably refers to the individual certs, but not to the stack
itself.
The libcrypto and libssl APIs never cease to amaze with new traps.
ok inoguchi
delete references to ERR pages from SEE ALSO where such2019-06-10T14:58:48+00:00schwarze2019-06-10T14:58:48+00:00urn:sha1:b783ba28c4b47eb204506e8af355d28ef6e67dec
references were already given below RETURN VALUES right above
Tree structure for manual pages: crypto(3) links to 33 function2019-06-06T01:06:59+00:00schwarze2019-06-06T01:06:59+00:00urn:sha1:580f04977d3a77664477818e7264e008d1ba5843
group pages, and these link on to all their second-level subpages.
Only a handful of second-level pages have third-level subpages.
So all crypto pages can now be reached from the www.libressl.org
frontpage via at most four clicks, in most cases three clicks.
Also link back from leaf pages to their respective group pages
and add a couple of additional links between related pages.
Triggered by a question from deraadt@.
OK jmc@ tb@
crypto HISTORY up to 0.9.5; researched from OpenSSL git2018-03-22T16:06:33+00:00schwarze2018-03-22T16:06:33+00:00urn:sha1:56ed9616f4bcc89cbb8c9e65c821f863853139b1In x509_vfy.h rev. 1.22 2018/02/22 17:15:09, jsing@ provided2018-02-25T17:46:39+00:00schwarze2018-02-25T17:46:39+00:00urn:sha1:24fe6acae50106f428884d85f5968c18ef50b4be
X509_STORE_up_ref(3). X509_STORE_new(3) and X509_STORE_free(3)
have already been available earlier. Import the documentation from
OpenSSL, adding some precision.
tweak SEE ALSO; in particular,2016-12-13T15:00:22+00:00schwarze2016-12-13T15:00:22+00:00urn:sha1:6fbb4473b0e85bf72f50d7a7affbcca9c76ba26e
make sure that all PKCS7 pages point to PKCS7_new(3)
Copyright and license2016-11-28T23:27:55+00:00schwarze2016-11-28T23:27:55+00:00urn:sha1:c56169c5e4a522309cd4a98ba22c94ad508f6c32