diff options
Diffstat (limited to 'src')
| -rw-r--r-- | src/lib/libcrypto/x509/x509_vfy.h | 33 |
1 files changed, 16 insertions, 17 deletions
diff --git a/src/lib/libcrypto/x509/x509_vfy.h b/src/lib/libcrypto/x509/x509_vfy.h index 9dc2e6ce18..ab41426505 100644 --- a/src/lib/libcrypto/x509/x509_vfy.h +++ b/src/lib/libcrypto/x509/x509_vfy.h | |||
| @@ -1,4 +1,4 @@ | |||
| 1 | /* $OpenBSD: x509_vfy.h,v 1.33 2021/10/23 16:17:44 tb Exp $ */ | 1 | /* $OpenBSD: x509_vfy.h,v 1.34 2021/10/23 16:18:20 tb Exp $ */ |
| 2 | /* Copyright (C) 1995-1998 Eric Young (eay@cryptsoft.com) | 2 | /* Copyright (C) 1995-1998 Eric Young (eay@cryptsoft.com) |
| 3 | * All rights reserved. | 3 | * All rights reserved. |
| 4 | * | 4 | * |
| @@ -85,23 +85,22 @@ typedef struct x509_file_st | |||
| 85 | int *path_type; | 85 | int *path_type; |
| 86 | } X509_CERT_FILE_CTX; | 86 | } X509_CERT_FILE_CTX; |
| 87 | 87 | ||
| 88 | /*******************************/ | ||
| 89 | /* | 88 | /* |
| 90 | SSL_CTX -> X509_STORE | 89 | * SSL_CTX -> X509_STORE |
| 91 | -> X509_LOOKUP | 90 | * -> X509_LOOKUP |
| 92 | ->X509_LOOKUP_METHOD | 91 | * ->X509_LOOKUP_METHOD |
| 93 | -> X509_LOOKUP | 92 | * -> X509_LOOKUP |
| 94 | ->X509_LOOKUP_METHOD | 93 | * ->X509_LOOKUP_METHOD |
| 95 | 94 | * | |
| 96 | SSL -> X509_STORE_CTX | 95 | * SSL -> X509_STORE_CTX |
| 97 | ->X509_STORE | 96 | * ->X509_STORE |
| 98 | 97 | * | |
| 99 | The X509_STORE holds the tables etc for verification stuff. | 98 | * The X509_STORE holds the tables etc for verification stuff. |
| 100 | A X509_STORE_CTX is used while validating a single certificate. | 99 | * A X509_STORE_CTX is used while validating a single certificate. |
| 101 | The X509_STORE has X509_LOOKUPs for looking up certs. | 100 | * The X509_STORE has X509_LOOKUPs for looking up certs. |
| 102 | The X509_STORE then calls a function to actually verify the | 101 | * The X509_STORE then calls a function to actually verify the |
| 103 | certificate chain. | 102 | * certificate chain. |
| 104 | */ | 103 | */ |
| 105 | 104 | ||
| 106 | #define X509_LU_RETRY -1 | 105 | #define X509_LU_RETRY -1 |
| 107 | #define X509_LU_FAIL 0 | 106 | #define X509_LU_FAIL 0 |
