QuasarApp/openssl
4
0
Fork 0
mirror of https://github.com/QuasarApp/openssl.git synced 2025-04-29 11:14:36 +00:00
Code Issues Projects Releases Wiki Activity

x509_vfy: Clarify relevance of ctx->error also on successful verification

Browse Source 
Reviewed-by: Paul Dale <pauli@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/14127)
This commit is contained in:
Dr. David von Oheimb 2021-02-08 08:17:23 +01:00 committed by Dr. David von Oheimb
parent 579262af14
commit 990a15fe73
2 changed files with 7 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

6
doc/man3/X509_STORE_CTX_get_error.pod
View File

@ -31,8 +31,10 @@ These functions are typically called after certificate or chain verification
using L<X509_verify_cert(3)> or L<X509_STORE_CTX_verify(3)> has indicated
an error or in a verification callback to determine the nature of an error.
X509_STORE_CTX_get_error() returns the error code of B<ctx>, see
the B<ERROR CODES> section for a full description of all error codes.
X509_STORE_CTX_get_error() returns the error code of I<ctx>.
See the L</ERROR CODES> section for a full description of all error codes.
It may return a code != X509_V_OK even if X509_verify_cert() did not indicate
an error, likely because a verification callback function has waived the error.
X509_STORE_CTX_set_error() sets the error code of I<ctx> to I<s>. For example
it might be used in a verification callback to set an error based on additional

4
doc/man3/X509_verify_cert.pod
View File

@ -49,7 +49,9 @@ otherwise they return 0, and in exceptional circumstances (such as malloc
failure and internal errors) they can also return a negative code.
On error or failure additional error information can be obtained by
examining I<ctx> using, for example, L<X509_STORE_CTX_get_error(3)>.
examining I<ctx> using, for example, L<X509_STORE_CTX_get_error(3)>. Even if
verification indicated success, the stored error code may be different from
X509_V_OK, likely because a verification callback function has waived the error.
=head1 SEE ALSO