diff options
| author | Jake Maynard <jake@maynard-labs.com> | 2019-10-30 11:27:04 -0400 |
|---|---|---|
| committer | Matt Caswell <matt@openssl.org> | 2020-04-11 11:26:58 +0100 |
| commit | eacd30a703b52f5b3e8e70b58f99bd1128458c7c (patch) | |
| tree | 53e52245a766e0842794adc5a8e97d0d28bb69f4 /crypto | |
| parent | abfc73f374c2b80e15f6c9d0b3a7437b3e94afa8 (diff) | |
Add manpage entry for X509_check_purpose()
Fixes #10263
Reviewed-by: Paul Dale <paul.dale@oracle.com>
Reviewed-by: Matt Caswell <matt@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/10301)
Diffstat (limited to 'crypto')
| -rw-r--r-- | crypto/x509/v3_purp.c | 4 |
1 files changed, 3 insertions, 1 deletions
diff --git a/crypto/x509/v3_purp.c b/crypto/x509/v3_purp.c index bb60276d94..bee8210bfc 100644 --- a/crypto/x509/v3_purp.c +++ b/crypto/x509/v3_purp.c @@ -552,9 +552,11 @@ int X509v3_cache_extensions(X509 *x, OPENSSL_CTX *libctx, const char *propq) * return codes: * 0 not a CA * 1 is a CA - * 2 basicConstraints absent so "maybe" a CA + * 2 Only possible in older versions of openSSL when basicConstraints are absent + * new versions will not return this value. May be a CA * 3 basicConstraints absent but self signed V1. * 4 basicConstraints absent but keyUsage present and keyCertSign asserted. + * 5 Netscape specific CA Flags present */ static int check_ca(const X509 *x) |