summaryrefslogtreecommitdiffstats
path: root/doc/ssl
diff options
context:
space:
mode:
authorJeffrey Walton <noloader@gmail.com>2014-06-27 16:33:06 +0100
committerDr. Stephen Henson <steve@openssl.org>2014-06-27 16:39:11 +0100
commit0535c2d67ca2d684087ef90be35d5fb207aab227 (patch)
treef24e38179d487d76cae54918ad37394f6e81ff9e /doc/ssl
parentabac8e0e08a8742820ecc57e47676827fa880a5b (diff)
Clarify docs.
Document that the certificate passed to SSL_CTX_add_extra_chain_cert() should not be freed by the application. PR#3409
Diffstat (limited to 'doc/ssl')
-rw-r--r--doc/ssl/SSL_CTX_add_extra_chain_cert.pod2
1 files changed, 2 insertions, 0 deletions
diff --git a/doc/ssl/SSL_CTX_add_extra_chain_cert.pod b/doc/ssl/SSL_CTX_add_extra_chain_cert.pod
index 11b3b4bbe3..8e832a57ea 100644
--- a/doc/ssl/SSL_CTX_add_extra_chain_cert.pod
+++ b/doc/ssl/SSL_CTX_add_extra_chain_cert.pod
@@ -24,6 +24,8 @@ the library will try to complete the chain from the available CA
certificates in the trusted CA storage, see
L<SSL_CTX_load_verify_locations(3)|SSL_CTX_load_verify_locations(3)>.
+The B<x509> certificate provided to SSL_CTX_add_extra_chain_cert() will be freed by the library when the B<SSL_CTX> is destroyed. An application B<should not> free the B<x509> object.
+
=head1 RESTRICTIONS
Only one set of extra chain certificates can be specified per SSL_CTX