mention the possibility that user-defined purpose identifiers may have

been defined or user-supplied checking functions may have been installed

1 files changed, 13 insertions, 2 deletions

diff --git a/src/lib/libcrypto/man/X509_check_purpose.3 b/src/lib/libcrypto/man/X509_check_purpose.3
index 935b7eed86..b03eb5e469 100644
--- a/src/lib/libcrypto/man/X509_check_purpose.3
+++ b/src/lib/libcrypto/man/X509_check_purpose.3
@@ -1,5 +1,6 @@
-.\" $OpenBSD: X509_check_purpose.3,v 1.3 2021/07/23 14:27:32 schwarze Exp $
-.\" Copyright (c) 2019 Ingo Schwarze <schwarze@openbsd.org>
+.\" $OpenBSD: X509_check_purpose.3,v 1.4 2021/07/23 16:22:59 schwarze Exp $
+.\"
+.\" Copyright (c) 2019, 2021 Ingo Schwarze <schwarze@openbsd.org>
 .\"
 .\" Permission to use, copy, modify, and distribute this software for any
 .\" purpose with or without fee is hereby granted, provided that the above
@@ -330,6 +331,16 @@ is -1,
 always succeeds, no matter whether or not the
 .Fa ca
 flag is set.
+.Pp
+If the function
+.Xr X509_PURPOSE_add 3
+was called before
+.Fn X509_check_purpose ,
+it may have installed different, user-supplied checking functions
+for some of the standard purposes listed above, or it may have
+installed additional, user-supplied checking functions for user-defined
+.Fa purpose
+identifiers not listed above.
 .Sh RETURN VALUES
 .Fn X509_check_purpose
 returns the following values: