From 52c752abbfa5fd86691977a8efbd207ffd342cd3 Mon Sep 17 00:00:00 2001 From: schwarze <> Date: Thu, 22 Jul 2021 19:44:30 +0000 Subject: document X509_STORE_CTX_set_time(3) and X509_STORE_CTX_set_depth(3) --- src/lib/libcrypto/man/X509_STORE_CTX_set_flags.3 | 36 ++++++++++++++++++++++-- 1 file changed, 34 insertions(+), 2 deletions(-) diff --git a/src/lib/libcrypto/man/X509_STORE_CTX_set_flags.3 b/src/lib/libcrypto/man/X509_STORE_CTX_set_flags.3 index f15ec5f16f..d84b1e7ae4 100644 --- a/src/lib/libcrypto/man/X509_STORE_CTX_set_flags.3 +++ b/src/lib/libcrypto/man/X509_STORE_CTX_set_flags.3 @@ -1,4 +1,4 @@ -.\" $OpenBSD: X509_STORE_CTX_set_flags.3,v 1.1 2021/07/22 17:11:14 schwarze Exp $ +.\" $OpenBSD: X509_STORE_CTX_set_flags.3,v 1.2 2021/07/22 19:44:30 schwarze Exp $ .\" full merge up to: OpenSSL aae41f8c Jun 25 09:47:15 2015 +0100 .\" selective merge up to: OpenSSL 24a535ea Sep 22 13:14:20 2020 +0100 .\" @@ -72,6 +72,8 @@ .Os .Sh NAME .Nm X509_STORE_CTX_set_flags , +.Nm X509_STORE_CTX_set_time , +.Nm X509_STORE_CTX_set_depth , .Nm X509_STORE_CTX_get0_param , .Nm X509_STORE_CTX_set0_param , .Nm X509_STORE_CTX_set_default @@ -83,6 +85,17 @@ .Fa "X509_STORE_CTX *ctx" .Fa "unsigned long flags" .Fc +.Ft void +.Fo X509_STORE_CTX_set_time +.Fa "X509_STORE_CTX *ctx" +.Fa "unsigned long dummy" +.Fa "time_t time" +.Fc +.Ft void +.Fo X509_STORE_CTX_set_depth +.Fa "X509_STORE_CTX *ctx" +.Fa "int depth" +.Fc .Ft X509_VERIFY_PARAM * .Fo X509_STORE_CTX_get0_param .Fa "X509_STORE_CTX *ctx" @@ -117,6 +130,19 @@ See .Xr X509_VERIFY_PARAM_set_flags 3 for a description of the verification flags. .Pp +.Fn X509_STORE_CTX_set_time +sets the verification +.Fa time . +The +.Fa dummy +argument is ignored. +.Pp +.Fn X509_STORE_CTX_set_depth +sets the maximum verification +.Fa depth . +That is the maximum number of untrusted CA certificates +that can appear in a chain. +.Pp .Fn X509_STORE_CTX_get0_param retrieves an internal pointer to the verification parameters associated with @@ -154,8 +180,14 @@ returns 1 for success or 0 if an error occurred. .Xr X509_verify_cert 3 , .Xr X509_VERIFY_PARAM_set_flags 3 .Sh HISTORY +.Fn X509_STORE_CTX_set_depth +first appeared in OpenSSL 0.9.3 and has been available since +.Ox 2.4 . +.Pp .Fn X509_STORE_CTX_set_flags -first appeared in OpenSSL 0.9.6 and has been available since +and +.Fn X509_STORE_CTX_set_time +first appeared in OpenSSL 0.9.6 and have been available since .Ox 2.9 . .Pp .Fn X509_STORE_CTX_get0_param , -- cgit v1.2.3-55-g6feb