summaryrefslogtreecommitdiff
path: root/src/lib
diff options
context:
space:
mode:
authorop <>2023-05-30 07:37:34 +0000
committerop <>2023-05-30 07:37:34 +0000
commit3ba21940ac4b9113827f1f795fef37bf02f40ce5 (patch)
treea779a07628d569d804c65f681fdb27972cb8bf86 /src/lib
parentb873d4ad0ee3b48d0653b5d025c4f758afa2e080 (diff)
downloadopenbsd-3ba21940ac4b9113827f1f795fef37bf02f40ce5.tar.gz
openbsd-3ba21940ac4b9113827f1f795fef37bf02f40ce5.tar.bz2
openbsd-3ba21940ac4b9113827f1f795fef37bf02f40ce5.zip
fix some nits on previous
- move a sentence out of a Bd block - add some .Pp for spacing - avoid a double colon on a sentence and the usage of second person - mark STORE_CTX with .Vt - change one Vt -> Dv (done after this has been ok'd by beck) ok beck@
Diffstat (limited to 'src/lib')
-rw-r--r--src/lib/libcrypto/man/X509_STORE_CTX_set_verify_cb.316
1 files changed, 10 insertions, 6 deletions
diff --git a/src/lib/libcrypto/man/X509_STORE_CTX_set_verify_cb.3 b/src/lib/libcrypto/man/X509_STORE_CTX_set_verify_cb.3
index e78af8a6cf..0fe086b721 100644
--- a/src/lib/libcrypto/man/X509_STORE_CTX_set_verify_cb.3
+++ b/src/lib/libcrypto/man/X509_STORE_CTX_set_verify_cb.3
@@ -1,4 +1,4 @@
1.\" $OpenBSD: X509_STORE_CTX_set_verify_cb.3,v 1.11 2023/05/29 11:57:23 beck Exp $ 1.\" $OpenBSD: X509_STORE_CTX_set_verify_cb.3,v 1.12 2023/05/30 07:37:34 op Exp $
2.\" full merge up to: OpenSSL aebb9aac Jul 19 09:27:53 2016 -0400 2.\" full merge up to: OpenSSL aebb9aac Jul 19 09:27:53 2016 -0400
3.\" selective merge up to: OpenSSL 24a535ea Sep 22 13:14:20 2020 +0100 3.\" selective merge up to: OpenSSL 24a535ea Sep 22 13:14:20 2020 +0100
4.\" 4.\"
@@ -66,7 +66,7 @@
66.\" ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED 66.\" ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED
67.\" OF THE POSSIBILITY OF SUCH DAMAGE. 67.\" OF THE POSSIBILITY OF SUCH DAMAGE.
68.\" 68.\"
69.Dd $Mdocdate: May 29 2023 $ 69.Dd $Mdocdate: May 30 2023 $
70.Dt X509_STORE_CTX_SET_VERIFY_CB 3 70.Dt X509_STORE_CTX_SET_VERIFY_CB 3
71.Os 71.Os
72.Sh NAME 72.Sh NAME
@@ -176,10 +176,11 @@ verify_callback(int ok, X509_STORE_CTX *ctx)
176{ 176{
177 return ok; 177 return ok;
178} 178}
179This is likely the only safe callback to use.
180.Ed 179.Ed
181.Pp 180.Pp
182Simple and terrible example that you should not use: 181This is likely the only safe callback to use.
182.Pp
183Simple and terrible example that should not be used.
183Suppose a certificate in the chain is expired and we 184Suppose a certificate in the chain is expired and we
184wish to continue after this error: 185wish to continue after this error:
185.Bd -literal 186.Bd -literal
@@ -193,10 +194,13 @@ verify_callback(int ok, X509_STORE_CTX *ctx)
193 return ok; 194 return ok;
194} 195}
195.Ed 196.Ed
197.Pp
196While this example is presented for historical purposes, 198While this example is presented for historical purposes,
197this is not the correct way to accomplish this. 199this is not the correct way to accomplish this.
198You should set verification options on the STORE_CTX to use 200The verification flag
199.Vt X509_V_FLAG_NO_CHECK_TIME 201.Dv X509_V_FLAG_NO_CHECK_TIME
202should be set on the
203.Vt STORE_CTX
200using 204using
201.Xr X509_VERIFY_PARAM_set_flags 3 205.Xr X509_VERIFY_PARAM_set_flags 3
202instead. 206instead.