From cc8925bff081ec36ac69be8b3681bff98f5d07da Mon Sep 17 00:00:00 2001 From: jim <> Date: Sun, 4 May 2014 22:26:33 +0000 Subject: Improve line wrapping for lines exceeding 80 chars. ok jmc@ --- src/lib/libcrypto/doc/X509_STORE_CTX_get_error.pod | 62 +++++++++++++++------- 1 file changed, 42 insertions(+), 20 deletions(-) (limited to 'src/lib/libcrypto/doc/X509_STORE_CTX_get_error.pod') diff --git a/src/lib/libcrypto/doc/X509_STORE_CTX_get_error.pod b/src/lib/libcrypto/doc/X509_STORE_CTX_get_error.pod index 60e8332ae9..5760f64fcb 100644 --- a/src/lib/libcrypto/doc/X509_STORE_CTX_get_error.pod +++ b/src/lib/libcrypto/doc/X509_STORE_CTX_get_error.pod @@ -2,7 +2,10 @@ =head1 NAME -X509_STORE_CTX_get_error, X509_STORE_CTX_set_error, X509_STORE_CTX_get_error_depth, X509_STORE_CTX_get_current_cert, X509_STORE_CTX_get1_chain, X509_verify_cert_error_string - get or set certificate verification status information +X509_STORE_CTX_get_error, X509_STORE_CTX_set_error, +X509_STORE_CTX_get_error_depth, X509_STORE_CTX_get_current_cert, +X509_STORE_CTX_get1_chain, X509_verify_cert_error_string - get or set +certificate verification status information =head1 SYNOPSIS @@ -82,19 +85,22 @@ of an untrusted certificate cannot be found. the CRL of a certificate could not be found. -=item B +=item B the certificate signature could not be decrypted. This means that the actual signature value could not be determined rather than it not matching the expected value, this is only meaningful for RSA keys. -=item B +=item B the CRL signature could not be decrypted: this means that the actual signature value could not be determined rather than it not matching the expected value. Unused. -=item B +=item B the public key in the certificate SubjectPublicKeyInfo could not be read. @@ -112,7 +118,8 @@ the certificate is not yet valid: the notBefore date is after the current time. =item B -the certificate has expired: that is the notAfter date is before the current time. +the certificate has expired: that is the notAfter date is before the current +time. =item B @@ -122,19 +129,23 @@ the CRL is not yet valid. the CRL has expired. -=item B +=item B the certificate notBefore field contains an invalid time. -=item B +=item B the certificate notAfter field contains an invalid time. -=item B +=item B the CRL lastUpdate field contains an invalid time. -=item B +=item B the CRL nextUpdate field contains an invalid time. @@ -147,17 +158,20 @@ an error occurred trying to allocate memory. This should never happen. the passed certificate is self signed and the same certificate cannot be found in the list of trusted certificates. -=item B +=item B the certificate chain could be built up using the untrusted certificates but the root could not be found locally. -=item B +=item B the issuer certificate of a locally looked up certificate could not be found. This normally means the list of trusted certificates is not complete. -=item B +=item B no signatures could be verified because the chain contains only one certificate and it is not self signed. @@ -198,34 +212,39 @@ did not match the issuer name of the current certificate. This is only set if issuer check debugging is enabled it is used for status notification and is B in itself an error. -=item B +=item B the current candidate issuer certificate was rejected because its subject key identifier was present and did not match the authority key identifier current certificate. This is only set if issuer check debugging is enabled it is used for status notification and is B in itself an error. -=item B +=item B the current candidate issuer certificate was rejected because its issuer name and serial number was present and did not match the authority key identifier of the current certificate. This is only set if issuer check debugging is enabled it is used for status notification and is B in itself an error. -=item B +=item B the current candidate issuer certificate was rejected because its keyUsage extension does not permit certificate signing. This is only set if issuer check debugging is enabled it is used for status notification and is B in itself an error. -=item B +=item B A certificate extension had an invalid value (for example an incorrect encoding) or some value inconsistent with other extensions. -=item B +=item B A certificate policies extension had an invalid value (for example an incorrect encoding) or some value inconsistent with other extensions. This error only @@ -252,17 +271,20 @@ A name constraint violation occured in the permitted subtrees. A name constraint violation occured in the excluded subtrees. -=item B +=item B A certificate name constraints extension included a minimum or maximum field: this is not supported. -=item B +=item B An unsupported name constraint type was encountered. OpenSSL currently only supports directory name, DNS name, email and URI types. -=item B +=item B The format of the name constraint is not recognised: for example an email address format of a form not mentioned in RFC3280. This could be caused by -- cgit v1.2.3-55-g6feb