diff options
Diffstat (limited to 'doc/man3/X509_STORE_set_verify_cb_func.pod')
| -rw-r--r-- | doc/man3/X509_STORE_set_verify_cb_func.pod | 6 |
1 files changed, 4 insertions, 2 deletions
diff --git a/doc/man3/X509_STORE_set_verify_cb_func.pod b/doc/man3/X509_STORE_set_verify_cb_func.pod index d16881edd83d..526790938acd 100644 --- a/doc/man3/X509_STORE_set_verify_cb_func.pod +++ b/doc/man3/X509_STORE_set_verify_cb_func.pod @@ -137,7 +137,9 @@ I<If no function to get the issuer is provided, the internal default function will be used instead.> X509_STORE_set_check_issued() sets the function to check that a given -certificate B<x> is issued with the issuer certificate B<issuer>. +certificate B<x> is issued by the issuer certificate B<issuer> and +the issuer is not yet in the chain contained in <ctx>, where the exceptional +case that B<x> is self-issued and ctx->chain has just one element is allowed. This function must return 0 on failure (among others if B<x> hasn't been issued with B<issuer>) and 1 on success. I<If no function to get the issuer is provided, the internal default @@ -256,7 +258,7 @@ were added in OpenSSL 1.1.0. =head1 COPYRIGHT -Copyright 2009-2016 The OpenSSL Project Authors. All Rights Reserved. +Copyright 2009-2020 The OpenSSL Project Authors. All Rights Reserved. Licensed under the OpenSSL license (the "License"). You may not use this file except in compliance with the License. You can obtain a copy |