From 767bff4409ce6a123bd88bf933cd119b0224b542 Mon Sep 17 00:00:00 2001 From: jmc <> Date: Sat, 3 Dec 2016 13:36:03 +0000 Subject: various cleanup; --- src/lib/libcrypto/man/X509_STORE_CTX_get_error.3 | 20 ++++++++++---------- 1 file changed, 10 insertions(+), 10 deletions(-) (limited to 'src/lib/libcrypto/man/X509_STORE_CTX_get_error.3') diff --git a/src/lib/libcrypto/man/X509_STORE_CTX_get_error.3 b/src/lib/libcrypto/man/X509_STORE_CTX_get_error.3 index 85b7ac06f0..36f153af5a 100644 --- a/src/lib/libcrypto/man/X509_STORE_CTX_get_error.3 +++ b/src/lib/libcrypto/man/X509_STORE_CTX_get_error.3 @@ -1,6 +1,6 @@ -.\" $OpenBSD: X509_STORE_CTX_get_error.3,v 1.2 2016/11/06 15:52:50 jmc Exp $ +.\" $OpenBSD: X509_STORE_CTX_get_error.3,v 1.3 2016/12/03 13:36:03 jmc Exp $ .\" -.Dd $Mdocdate: November 6 2016 $ +.Dd $Mdocdate: December 3 2016 $ .Dt X509_STORE_CTX_GET_ERROR 3 .Os .Sh NAME @@ -86,7 +86,7 @@ successful, the returned chain may be incomplete or invalid. The returned chain persists after the .Fa ctx structure is freed. -When it is no longer needed, it should be free up using +When it is no longer needed, it should be freed up using .Fn sk_X509_pop_free chain X509_free . .Pp .Fn X509_verify_cert_error_string @@ -144,8 +144,8 @@ The CRL of a certificate could not be found. No unable to decrypt certificate's signature The certificate signature could not be decrypted. This means that the actual signature value could not be determined -rather than it not matching the expected value, this is only meaningful -for RSA keys. +rather than it not matching the expected value. +This is only meaningful for RSA keys. .It Dv X509_V_ERR_UNABLE_TO_DECRYPT_CRL_SIGNATURE : \ No unable to decrypt CRL's signature The CRL signature could not be decrypted: this means that the actual @@ -219,7 +219,7 @@ The root CA is marked to reject the specified purpose. .It Dv X509_V_ERR_SUBJECT_ISSUER_MISMATCH : No subject issuer mismatch The current candidate issuer certificate was rejected because its subject name did not match the issuer name of the current certificate. -This is only set if issuer check debugging is enabled it is used for +This is only set if issuer check debugging is enabled; it is used for status notification and is .Sy not in itself an error. @@ -228,7 +228,7 @@ in itself an error. The current candidate issuer certificate was rejected because its subject key identifier was present and did not match the authority key identifier current certificate. -This is only set if issuer check debugging is enabled it is used for +This is only set if issuer check debugging is enabled; it is used for status notification and is .Sy not in itself an error. @@ -237,7 +237,7 @@ in itself an error. The current candidate issuer certificate was rejected because its issuer name and serial number was present and did not match the authority key identifier of the current certificate. -This is only set if issuer check debugging is enabled it is used for +This is only set if issuer check debugging is enabled; it is used for status notification and is .Sy not in itself an error. @@ -259,7 +259,7 @@ A certificate policies extension had an invalid value (for example an incorrect encoding) or some value inconsistent with other extensions. This error only occurs if policy processing is enabled. .It Dv X509_V_ERR_NO_EXPLICIT_POLICY : No no explicit policy -The verification flags were set to require and explicit policy but none +The verification flags were set to require an explicit policy but none was present. .It Dv X509_V_ERR_DIFFERENT_CRL_SCOPE : No different CRL scope The only CRLs that could be found did not match the scope of the @@ -284,7 +284,7 @@ types. .It Dv X509_V_ERR_UNSUPPORTED_CONSTRAINT_SYNTAX : \ No unsupported or invalid name constraint syntax The format of the name constraint is not recognised: for example an -email address format of a form not mentioned in RFC3280. +email address format of a form not mentioned in RFC 3280. This could be caused by a garbage extension or some new feature not currently supported. .It Dv X509_V_ERR_CRL_PATH_VALIDATION_ERROR : No CRL path validation error -- cgit v1.2.3-55-g6feb