diff options
| author | jmc <> | 2016-12-05 16:38:24 +0000 |
|---|---|---|
| committer | jmc <> | 2016-12-05 16:38:24 +0000 |
| commit | cdba88f3f337da1fbe554cc98f50eb987000ee3f (patch) | |
| tree | c257cfd57cef90117e72a8a19fefeab04b958826 /src/lib/libcrypto/man/X509_check_host.3 | |
| parent | d1268ad538f09c0fcdc8f7b84ed3484060b9794d (diff) | |
| download | openbsd-cdba88f3f337da1fbe554cc98f50eb987000ee3f.tar.gz openbsd-cdba88f3f337da1fbe554cc98f50eb987000ee3f.tar.bz2 openbsd-cdba88f3f337da1fbe554cc98f50eb987000ee3f.zip | |
various cleanup;
Diffstat (limited to 'src/lib/libcrypto/man/X509_check_host.3')
| -rw-r--r-- | src/lib/libcrypto/man/X509_check_host.3 | 14 |
1 files changed, 8 insertions, 6 deletions
diff --git a/src/lib/libcrypto/man/X509_check_host.3 b/src/lib/libcrypto/man/X509_check_host.3 index 1e6a44ffe1..5990670acb 100644 --- a/src/lib/libcrypto/man/X509_check_host.3 +++ b/src/lib/libcrypto/man/X509_check_host.3 | |||
| @@ -1,4 +1,4 @@ | |||
| 1 | .\" $OpenBSD: X509_check_host.3,v 1.1 2016/12/05 15:56:46 schwarze Exp $ | 1 | .\" $OpenBSD: X509_check_host.3,v 1.2 2016/12/05 16:38:24 jmc Exp $ |
| 2 | .\" OpenSSL 99d63d46 Oct 26 13:56:48 2016 -0400 | 2 | .\" OpenSSL 99d63d46 Oct 26 13:56:48 2016 -0400 |
| 3 | .\" | 3 | .\" |
| 4 | .\" This file was written by Florian Weimer <fweimer@redhat.com> and | 4 | .\" This file was written by Florian Weimer <fweimer@redhat.com> and |
| @@ -99,7 +99,7 @@ checks if the certificate Subject Alternative Name (SAN) or Subject | |||
| 99 | CommonName (CN) matches the specified host name, which must be encoded | 99 | CommonName (CN) matches the specified host name, which must be encoded |
| 100 | in the preferred name syntax described in section 3.5 of RFC 1034. | 100 | in the preferred name syntax described in section 3.5 of RFC 1034. |
| 101 | By default, wildcards are supported and they match only in the | 101 | By default, wildcards are supported and they match only in the |
| 102 | left-most label; but they may match part of that label with an | 102 | left-most label; they may match part of that label with an |
| 103 | explicit prefix or suffix. | 103 | explicit prefix or suffix. |
| 104 | For example, by default, the host | 104 | For example, by default, the host |
| 105 | .Fa name | 105 | .Fa name |
| @@ -124,7 +124,8 @@ When | |||
| 124 | starts with a dot (e.g.\& | 124 | starts with a dot (e.g.\& |
| 125 | .Qq .example.com ) , | 125 | .Qq .example.com ) , |
| 126 | it will be matched by a certificate valid for any sub-domain of | 126 | it will be matched by a certificate valid for any sub-domain of |
| 127 | .Fa name ; see also | 127 | .Fa name ; |
| 128 | see also | ||
| 128 | .Fa X509_CHECK_FLAG_SINGLE_LABEL_SUBDOMAINS | 129 | .Fa X509_CHECK_FLAG_SINGLE_LABEL_SUBDOMAINS |
| 129 | below. | 130 | below. |
| 130 | .Pp | 131 | .Pp |
| @@ -142,11 +143,12 @@ when it is no longer needed. | |||
| 142 | .Fn X509_check_email | 143 | .Fn X509_check_email |
| 143 | checks if the certificate matches the specified email | 144 | checks if the certificate matches the specified email |
| 144 | .Fa address . | 145 | .Fa address . |
| 145 | Only the mailbox syntax of RFC 822 is supported, comments are not | 146 | Only the mailbox syntax of RFC 822 is supported. |
| 146 | allowed, and no attempt is made to normalize quoted characters. | 147 | Comments are not allowed, |
| 148 | and no attempt is made to normalize quoted characters. | ||
| 147 | The | 149 | The |
| 148 | .Fa addresslen | 150 | .Fa addresslen |
| 149 | argument must be the number of characters in the address string or zero | 151 | argument must be the number of characters in the address string or zero, |
| 150 | in which case the length is calculated with | 152 | in which case the length is calculated with |
| 151 | .Fn strlen address . | 153 | .Fn strlen address . |
| 152 | .Pp | 154 | .Pp |
