From 1ec9711787e6735d06c91a470baa8c76fb5f3dd5 Mon Sep 17 00:00:00 2001
From: schwarze <>
Date: Thu, 29 Jul 2021 12:39:47 +0000
Subject: Fix a documentation bug i introduced that tb@ pointed out:
 X509_policy_check(3) never returns 2. If validation succeeds, it always
 returns 1.

---
 src/lib/libcrypto/man/X509_policy_check.3 | 15 +++------------
 1 file changed, 3 insertions(+), 12 deletions(-)

(limited to 'src')

diff --git a/src/lib/libcrypto/man/X509_policy_check.3 b/src/lib/libcrypto/man/X509_policy_check.3
index 7739f13d5a..445f22ddea 100644
--- a/src/lib/libcrypto/man/X509_policy_check.3
+++ b/src/lib/libcrypto/man/X509_policy_check.3
@@ -1,4 +1,4 @@
-.\" $OpenBSD: X509_policy_check.3,v 1.3 2021/07/28 14:00:33 schwarze Exp $
+.\" $OpenBSD: X509_policy_check.3,v 1.4 2021/07/29 12:39:47 schwarze Exp $
 .\"
 .\" Copyright (c) 2021 Ingo Schwarze <schwarze@openbsd.org>
 .\"
@@ -14,7 +14,7 @@
 .\" ACTION OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF
 .\" OR IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE.
 .\"
-.Dd $Mdocdate: July 28 2021 $
+.Dd $Mdocdate: July 29 2021 $
 .Dt X509_POLICY_CHECK 3
 .Os
 .Sh NAME
@@ -158,17 +158,8 @@ In the special cases that the
 .Fa certs
 argument contains exactly one certificate or that
 .Dv X509_V_FLAG_EXPLICIT_POLICY
-was not requested and the resulting policy tree would have been empty,
-.Pf * Fa ptree
-is set to
-.Dv NULL
-and
-.Pf * Fa pexplicit_policy
-to 0.
-.It 2
-.Dv X509_V_FLAG_EXPLICIT_POLICY
 was not requested and at least one of the certificates contains no
-certificate policies.
+certificate policies or the resulting policy tree would have been empty,
 .Pf * Fa ptree
 is set to
 .Dv NULL
-- 
cgit v1.2.3-55-g6feb