From c20fa45999bc9c9e18b6372552c975600aa2aae2 Mon Sep 17 00:00:00 2001
From: beck <>
Date: Tue, 3 Jan 2017 06:29:04 +0000
Subject: It takes a special style of creative writing to be unspecific about
 the error return code of a function in a man page. Let's remove the ambiguity
 and half truths in here. ok jsing@

---
 src/lib/libcrypto/man/X509_verify_cert.3 | 20 +++++---------------
 1 file changed, 5 insertions(+), 15 deletions(-)

(limited to 'src')

diff --git a/src/lib/libcrypto/man/X509_verify_cert.3 b/src/lib/libcrypto/man/X509_verify_cert.3
index 5d603e0387..a930910e03 100644
--- a/src/lib/libcrypto/man/X509_verify_cert.3
+++ b/src/lib/libcrypto/man/X509_verify_cert.3
@@ -1,4 +1,4 @@
-.\"	$OpenBSD: X509_verify_cert.3,v 1.4 2016/12/05 18:26:34 schwarze Exp $
+.\"	$OpenBSD: X509_verify_cert.3,v 1.5 2017/01/03 06:29:04 beck Exp $
 .\"	OpenSSL 99d63d46 Oct 26 13:56:48 2016 -0400
 .\"
 .\" This file was written by Dr. Stephen Henson <steve@openssl.org>.
@@ -48,7 +48,7 @@
 .\" ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED
 .\" OF THE POSSIBILITY OF SUCH DAMAGE.
 .\"
-.Dd $Mdocdate: December 5 2016 $
+.Dd $Mdocdate: January 3 2017 $
 .Dt X509_VERIFY_CERT 3
 .Os
 .Sh NAME
@@ -72,21 +72,11 @@ OpenSSL internally for certificate validation, in both the S/MIME and
 SSL/TLS code.
 .Sh RETURN VALUES
 If a complete chain can be built and validated this function returns 1,
-otherwise it return 0.
+otherwise it returns a value <= 0 indicating failure.
 .Pp
-In exceptional circumstances, it can also return a negative code,
-but only if no certificate is set in
-.Fa ctx
-due to a programming error or if a retry operation is requested
-during internal lookups, which never happens with standard lookup
-methods.
-It is however recommended that application check for <= 0 return
-value on error.
-.Pp
-If the function fails, additional error information can be obtained
-by examining
+Additional error information can be obtained by examining
 .Fa ctx ,
-for example using
+using
 .Xr X509_STORE_CTX_get_error 3 .
 .Sh SEE ALSO
 .Xr openssl 1 ,
-- 
cgit v1.2.3-55-g6feb