diff options
author | op <> | 2023-05-30 07:37:34 +0000 |
---|---|---|
committer | op <> | 2023-05-30 07:37:34 +0000 |
commit | 3ba21940ac4b9113827f1f795fef37bf02f40ce5 (patch) | |
tree | a779a07628d569d804c65f681fdb27972cb8bf86 /src/lib | |
parent | b873d4ad0ee3b48d0653b5d025c4f758afa2e080 (diff) | |
download | openbsd-3ba21940ac4b9113827f1f795fef37bf02f40ce5.tar.gz openbsd-3ba21940ac4b9113827f1f795fef37bf02f40ce5.tar.bz2 openbsd-3ba21940ac4b9113827f1f795fef37bf02f40ce5.zip |
fix some nits on previous
- move a sentence out of a Bd block
- add some .Pp for spacing
- avoid a double colon on a sentence and the usage of second person
- mark STORE_CTX with .Vt
- change one Vt -> Dv (done after this has been ok'd by beck)
ok beck@
Diffstat (limited to 'src/lib')
-rw-r--r-- | src/lib/libcrypto/man/X509_STORE_CTX_set_verify_cb.3 | 16 |
1 files changed, 10 insertions, 6 deletions
diff --git a/src/lib/libcrypto/man/X509_STORE_CTX_set_verify_cb.3 b/src/lib/libcrypto/man/X509_STORE_CTX_set_verify_cb.3 index e78af8a6cf..0fe086b721 100644 --- a/src/lib/libcrypto/man/X509_STORE_CTX_set_verify_cb.3 +++ b/src/lib/libcrypto/man/X509_STORE_CTX_set_verify_cb.3 | |||
@@ -1,4 +1,4 @@ | |||
1 | .\" $OpenBSD: X509_STORE_CTX_set_verify_cb.3,v 1.11 2023/05/29 11:57:23 beck Exp $ | 1 | .\" $OpenBSD: X509_STORE_CTX_set_verify_cb.3,v 1.12 2023/05/30 07:37:34 op Exp $ |
2 | .\" full merge up to: OpenSSL aebb9aac Jul 19 09:27:53 2016 -0400 | 2 | .\" full merge up to: OpenSSL aebb9aac Jul 19 09:27:53 2016 -0400 |
3 | .\" selective merge up to: OpenSSL 24a535ea Sep 22 13:14:20 2020 +0100 | 3 | .\" selective merge up to: OpenSSL 24a535ea Sep 22 13:14:20 2020 +0100 |
4 | .\" | 4 | .\" |
@@ -66,7 +66,7 @@ | |||
66 | .\" ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED | 66 | .\" ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED |
67 | .\" OF THE POSSIBILITY OF SUCH DAMAGE. | 67 | .\" OF THE POSSIBILITY OF SUCH DAMAGE. |
68 | .\" | 68 | .\" |
69 | .Dd $Mdocdate: May 29 2023 $ | 69 | .Dd $Mdocdate: May 30 2023 $ |
70 | .Dt X509_STORE_CTX_SET_VERIFY_CB 3 | 70 | .Dt X509_STORE_CTX_SET_VERIFY_CB 3 |
71 | .Os | 71 | .Os |
72 | .Sh NAME | 72 | .Sh NAME |
@@ -176,10 +176,11 @@ verify_callback(int ok, X509_STORE_CTX *ctx) | |||
176 | { | 176 | { |
177 | return ok; | 177 | return ok; |
178 | } | 178 | } |
179 | This is likely the only safe callback to use. | ||
180 | .Ed | 179 | .Ed |
181 | .Pp | 180 | .Pp |
182 | Simple and terrible example that you should not use: | 181 | This is likely the only safe callback to use. |
182 | .Pp | ||
183 | Simple and terrible example that should not be used. | ||
183 | Suppose a certificate in the chain is expired and we | 184 | Suppose a certificate in the chain is expired and we |
184 | wish to continue after this error: | 185 | wish to continue after this error: |
185 | .Bd -literal | 186 | .Bd -literal |
@@ -193,10 +194,13 @@ verify_callback(int ok, X509_STORE_CTX *ctx) | |||
193 | return ok; | 194 | return ok; |
194 | } | 195 | } |
195 | .Ed | 196 | .Ed |
197 | .Pp | ||
196 | While this example is presented for historical purposes, | 198 | While this example is presented for historical purposes, |
197 | this is not the correct way to accomplish this. | 199 | this is not the correct way to accomplish this. |
198 | You should set verification options on the STORE_CTX to use | 200 | The verification flag |
199 | .Vt X509_V_FLAG_NO_CHECK_TIME | 201 | .Dv X509_V_FLAG_NO_CHECK_TIME |
202 | should be set on the | ||
203 | .Vt STORE_CTX | ||
200 | using | 204 | using |
201 | .Xr X509_VERIFY_PARAM_set_flags 3 | 205 | .Xr X509_VERIFY_PARAM_set_flags 3 |
202 | instead. | 206 | instead. |