1 files changed, 7 insertions, 6 deletions

diff --git a/src/lib/libcrypto/man/X509_VERIFY_PARAM_set_flags.3 b/src/lib/libcrypto/man/X509_VERIFY_PARAM_set_flags.3
index b6860ab40b..4c72be0267 100644
--- a/src/lib/libcrypto/man/X509_VERIFY_PARAM_set_flags.3
+++ b/src/lib/libcrypto/man/X509_VERIFY_PARAM_set_flags.3
@@ -1,4 +1,4 @@
-.\" $OpenBSD: X509_VERIFY_PARAM_set_flags.3,v 1.31 2025/10/24 11:34:23 tb Exp $
+.\" $OpenBSD: X509_VERIFY_PARAM_set_flags.3,v 1.32 2025/11/07 19:59:31 schwarze Exp $
 .\" full merge up to: OpenSSL d33def66 Feb 9 14:17:13 2016 -0500
 .\" selective merge up to: OpenSSL 24a535ea Sep 22 13:14:20 2020 +0100
 .\"
@@ -68,7 +68,7 @@
 .\" ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED
 .\" OF THE POSSIBILITY OF SUCH DAMAGE.
 .\"
-.Dd $Mdocdate: October 24 2025 $
+.Dd $Mdocdate: November 7 2025 $
 .Dt X509_VERIFY_PARAM_SET_FLAGS 3
 .Os
 .Sh NAME
@@ -356,10 +356,6 @@ uses a different default security level of 1 and calls
 .Fn X509_VERIFY_PARAM_set_auth_level
 with its own level before validating a certificate chain.
 .Pp
-.Fn X509_VERIFY_PARAM_get_hostflags
-returns the host flags previously set by a call to
-.Fn X509_VERIFY_PARAM_set_hostflags .
-.Pp
 .Fn X509_VERIFY_PARAM_set1_host
 sets the expected DNS hostname to
 .Fa name
@@ -515,6 +511,11 @@ is unset.
 .Fn X509_VERIFY_PARAM_get_depth
 returns the current verification depth.
 .Pp
+.Fn X509_VERIFY_PARAM_get_hostflags
+returns the host flags previously set by a call to
+.Fn X509_VERIFY_PARAM_set_hostflags
+or 0 by default.
+.Pp
 .Fn X509_VERIFY_PARAM_get0_name
 and
 .Fn X509_VERIFY_PARAM_get0_peername