diff options
author | Dr. David von Oheimb <David.von.Oheimb@siemens.com> | 2022-03-15 18:40:32 +0100 |
---|---|---|
committer | Dr. David von Oheimb <dev@ddvo.net> | 2022-03-18 20:22:18 +0100 |
commit | f8c5b8bad32c765a53d856f30d791322dd9f19fa (patch) | |
tree | 0da4eca0e47781d8737ddf8aa8913e0e738b44df /doc | |
parent | 2489d1125ca5f75ddb747b2848d0446944d74494 (diff) |
OSSL_CMP_CTX_new.pod: make references to private key consistent with OSSL_CMP_MSG_get0_header.pod
Reviewed-by: Paul Dale <pauli@openssl.org>
Reviewed-by: Tomas Mraz <tomas@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/17887)
(cherry picked from commit 92cae9b42de1eec3da7ef6ccb36188ff61f3e0df)
Diffstat (limited to 'doc')
-rw-r--r-- | doc/man3/OSSL_CMP_CTX_new.pod | 8 | ||||
-rw-r--r-- | doc/man3/OSSL_CMP_MSG_get0_header.pod | 3 |
2 files changed, 6 insertions, 5 deletions
diff --git a/doc/man3/OSSL_CMP_CTX_new.pod b/doc/man3/OSSL_CMP_CTX_new.pod index 33c73170a0..8ac5b815be 100644 --- a/doc/man3/OSSL_CMP_CTX_new.pod +++ b/doc/man3/OSSL_CMP_CTX_new.pod @@ -244,7 +244,7 @@ The following options can be set: ("indirect method") Note that a signature-based POPO can only be produced if a private key - is provided as the newPkey or client pkey component of the CMP context. + is provided as the newPkey or client's pkey component of the CMP context. =item B<OSSL_CMP_OPT_DIGEST_ALGNID> @@ -441,7 +441,7 @@ The reference counts of those certificates handled successfully are increased. OSSL_CMP_CTX_get0_untrusted(OSSL_CMP_CTX *ctx) returns a pointer to the list of untrusted certs, which may be empty if unset. -OSSL_CMP_CTX_set1_cert() sets the certificate related to the private key +OSSL_CMP_CTX_set1_cert() sets the certificate related to the client's private key used for CMP message protection. Therefore the public key of this I<cert> must correspond to the private key set before or thereafter via OSSL_CMP_CTX_set1_pkey(). @@ -468,7 +468,7 @@ Calling this function is optional; by default a chain construction is performed on demand that is equivalent to calling this function with the I<candidates> and I<own_trusted> arguments being NULL. -OSSL_CMP_CTX_set1_pkey() sets the private key corresponding to the +OSSL_CMP_CTX_set1_pkey() sets the client's private key corresponding to the CMP signer certificate set via OSSL_CMP_CTX_set1_cert(). This key is used create signature-based protection (protectionAlg = MSG_SIG_ALG) of outgoing messages @@ -519,7 +519,7 @@ The I<priv> parameter must be 0 if and only if the given key is a public key. OSSL_CMP_CTX_get0_newPkey() gives the key to use for certificate enrollment dependent on fields of the CMP context structure: the newPkey (which may be a private or public key) if present, -else the public key in the p10CSR if present, else the client private key. +else the public key in the p10CSR if present, else the client's private key. If the I<priv> parameter is not 0 and the selected key does not have a private component then NULL is returned. diff --git a/doc/man3/OSSL_CMP_MSG_get0_header.pod b/doc/man3/OSSL_CMP_MSG_get0_header.pod index e5c27a27b4..76e24e1bad 100644 --- a/doc/man3/OSSL_CMP_MSG_get0_header.pod +++ b/doc/man3/OSSL_CMP_MSG_get0_header.pod @@ -65,7 +65,8 @@ The public key included is the first available value of these: =item the public key of any reference certificate given in I<ctx>, or -=item the public key derived from any client private key set via L<OSSL_CMP_CTX_set1_pkey(3)>. +=item the public key derived from any client's private key +set via L<OSSL_CMP_CTX_set1_pkey(3)>. =back |