diff options
author | Todd Short <tshort@akamai.com> | 2015-03-31 17:06:21 -0400 |
---|---|---|
committer | Rich Salz <rsalz@openssl.org> | 2017-04-12 14:41:10 -0400 |
commit | 3bb0f989b53c59c6d4527a0b5077dbb7fabe14b7 (patch) | |
tree | b03c7f9c1698d3d50d242281bcd7c8d9135cfbbe /doc/man1/verify.pod | |
parent | 2da3f9687fc0efd56d1269dfda4c9ca5b388038a (diff) |
OCSP Updates: error codes and multiple certificates
RT3877: Add X509 OCSP error codes and messages
Add additional OCSP error codes for X509 verify usage
RT3867: Support Multiple CA certs in ocsp app
Add the ability to read multiple CA certs from a single file in the
ocsp app.
Update some missing X509 errors in documentation.
Reviewed-by: Richard Levitte <levitte@openssl.org>
Reviewed-by: Rich Salz <rsalz@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/941)
Diffstat (limited to 'doc/man1/verify.pod')
-rw-r--r-- | doc/man1/verify.pod | 41 |
1 files changed, 41 insertions, 0 deletions
diff --git a/doc/man1/verify.pod b/doc/man1/verify.pod index 6db7cd8367..5596e1d8bd 100644 --- a/doc/man1/verify.pod +++ b/doc/man1/verify.pod @@ -696,6 +696,47 @@ DANE TLSA authentication is enabled, but no TLSA records matched the certificate chain. This error is only possible in L<s_client(1)>. +=item B<X509_V_ERR_EE_KEY_TOO_SMALL> + +EE certificate key too weak. + +=item B<X509_ERR_CA_KEY_TOO_SMALL> + +CA certificate key too weak. + +=item B<X509_ERR_CA_MD_TOO_WEAK> + +CA signature digest algorithm too weak. + +=item B<X509_V_ERR_INVALID_CALL> + +nvalid certificate verification context. + +=item B<X509_V_ERR_STORE_LOOKUP> + +Issuer certificate lookup error. + +=item B<X509_V_ERR_NO_VALID_SCTS> + +Certificate Transparency required, but no valid SCTs found. + +=item B<X509_V_ERR_PROXY_SUBJECT_NAME_VIOLATION> + +Proxy subject name violation. + +=item B<X509_V_ERR_OCSP_VERIFY_NEEDED> + +Returned by the verify callback to indicate an OCSP verification is needed. + +=item B<X509_V_ERR_OCSP_VERIFY_FAILED> + +Returned by the verify callback to indicate OCSP verification failed. + +=item B<X509_V_ERR_OCSP_CERT_UNKNOWN> + +Returned by the verify callback to indicate that the certificate is not recognized +by the OCSP responder. + =back =head1 BUGS |