summaryrefslogtreecommitdiffstats
path: root/doc/ssl/SSL_CTX_add_extra_chain_cert.pod
diff options
context:
space:
mode:
authorDr. Stephen Henson <steve@openssl.org>2013-08-16 18:11:29 +0100
committerDr. Stephen Henson <steve@openssl.org>2013-08-18 13:53:32 +0100
commitdf430489cf46a2a0734b63fd3879c7721efcaa16 (patch)
tree0a0cc8e96983f9f94b31607dcce3f3a9736d4d5b /doc/ssl/SSL_CTX_add_extra_chain_cert.pod
parent5085e57fb5d65c0ab271a307fc3364547e687f6a (diff)
Add documentation.
Preliminary documentation for chain and verify stores and certificate chain setting functions. (cherry picked from commit eeb15452a053c14305210522be0e7313cb763bac)
Diffstat (limited to 'doc/ssl/SSL_CTX_add_extra_chain_cert.pod')
-rw-r--r--doc/ssl/SSL_CTX_add_extra_chain_cert.pod19
1 files changed, 19 insertions, 0 deletions
diff --git a/doc/ssl/SSL_CTX_add_extra_chain_cert.pod b/doc/ssl/SSL_CTX_add_extra_chain_cert.pod
index ee28f5ccc3..11b3b4bbe3 100644
--- a/doc/ssl/SSL_CTX_add_extra_chain_cert.pod
+++ b/doc/ssl/SSL_CTX_add_extra_chain_cert.pod
@@ -24,6 +24,15 @@ the library will try to complete the chain from the available CA
certificates in the trusted CA storage, see
L<SSL_CTX_load_verify_locations(3)|SSL_CTX_load_verify_locations(3)>.
+=head1 RESTRICTIONS
+
+Only one set of extra chain certificates can be specified per SSL_CTX
+structure. Different chains for different certificates (for example if both
+RSA and DSA certificates are specified by the same server) or different SSL
+structures with the same parent SSL_CTX cannot be specified using this
+function. For more flexibility functions such as SSL_add1_chain_cert() should
+be used instead.
+
=head1 RETURN VALUES
SSL_CTX_add_extra_chain_cert() returns 1 on success. Check out the
@@ -35,5 +44,15 @@ L<ssl(3)|ssl(3)>,
L<SSL_CTX_use_certificate(3)|SSL_CTX_use_certificate(3)>,
L<SSL_CTX_set_client_cert_cb(3)|SSL_CTX_set_client_cert_cb(3)>,
L<SSL_CTX_load_verify_locations(3)|SSL_CTX_load_verify_locations(3)>
+L<SSL_CTX_set0_chain(3)|SSL_CTX_set0_chain(3)>
+L<SSL_CTX_set1_chain(3)|SSL_CTX_set1_chain(3)>
+L<SSL_CTX_add0_chain_cert(3)|SSL_CTX_add0_chain_cert(3)>
+L<SSL_CTX_add1_chain_cert(3)|SSL_CTX_add1_chain_cert(3)>
+L<SSL_set0_chain(3)|SSL_set0_chain(3)>
+L<SSL_set1_chain(3)|SSL_set1_chain(3)>
+L<SSL_add0_chain_cert(3)|SSL_add0_chain_cert(3)>
+L<SSL_add1_chain_cert(3)|SSL_add1_chain_cert(3)>
+L<SSL_CTX_build_cert_chain(3)|SSL_CTX_build_cert_chain(3)>
+L<SSL_build_cert_chain(3)|SSL_build_cert_chain(3)>
=cut