diff options
| author | Viktor Dukhovni <openssl-users@dukhovni.org> | 2016-02-09 14:17:13 -0500 |
|---|---|---|
| committer | Viktor Dukhovni <openssl-users@dukhovni.org> | 2016-02-10 12:34:06 -0500 |
| commit | d33def662443c4b534c6b261a3b01f3960339c78 (patch) | |
| tree | 4e95fd943d9df02700d60d5dbb493a6a2d4dec05 /apps/apps.h | |
| parent | 056be06b4dfd7eaf7914febd043e9b446e1ed772 (diff) | |
Deprecate the -issuer_checks debugging option
This was a developer debugging feature and was never a useful public
interface.
Added all missing X509 error codes to the verify(1) manpage, but
many still need a description beyond the associated text string.
Sorted the errors in x509_txt.c by error number.
Reviewed-by: Stephen Henson <steve@openssl.org>
Diffstat (limited to 'apps/apps.h')
| -rw-r--r-- | apps/apps.h | 3 |
1 files changed, 1 insertions, 2 deletions
diff --git a/apps/apps.h b/apps/apps.h index 3c132e7a9b..d4c2b11b8b 100644 --- a/apps/apps.h +++ b/apps/apps.h @@ -207,8 +207,7 @@ void wait_for_async(SSL *s); "check peer certificate matches \"ipaddr\"" }, \ { "ignore_critical", OPT_V_IGNORE_CRITICAL, '-', \ "Disable critical extension checking"}, \ - { "issuer_checks", OPT_V_ISSUER_CHECKS, '-', \ - "Enable debugging of certificate issuer checks"}, \ + { "issuer_checks", OPT_V_ISSUER_CHECKS, '-', "(deprecated)"}, \ { "crl_check", OPT_V_CRL_CHECK, '-', "Check that peer cert has not been revoked" }, \ { "crl_check_all", OPT_V_CRL_CHECK_ALL, '-', "Also check all certs in the chain" }, \ { "policy_check", OPT_V_POLICY_CHECK, '-', "Enable certificate policy checking"}, \ |