summaryrefslogtreecommitdiffstats
path: root/doc
diff options
context:
space:
mode:
authorLutz Jänicke <jaenicke@openssl.org>2003-06-26 14:03:03 +0000
committerLutz Jänicke <jaenicke@openssl.org>2003-06-26 14:03:03 +0000
commit9d19fbc4fce71a7a5f40314e3d0e25db26f82043 (patch)
treeea93f89b6d7ac71262db8558899ac25b5698b975 /doc
parentaa5ae4841e74c0fb94c0b9513cd93e5f24d12d4b (diff)
Clarify wording of verify_callback() behaviour.
Diffstat (limited to 'doc')
-rw-r--r--doc/ssl/SSL_CTX_set_verify.pod6
1 files changed, 3 insertions, 3 deletions
diff --git a/doc/ssl/SSL_CTX_set_verify.pod b/doc/ssl/SSL_CTX_set_verify.pod
index d15b2a3a1a..ca8d81b82c 100644
--- a/doc/ssl/SSL_CTX_set_verify.pod
+++ b/doc/ssl/SSL_CTX_set_verify.pod
@@ -135,9 +135,9 @@ process is immediately stopped with "verification failed" state. If
SSL_VERIFY_PEER is set, a verification failure alert is sent to the peer and
the TLS/SSL handshake is terminated. If B<verify_callback> returns 1,
the verification process is continued. If B<verify_callback> always returns
-1, the TLS/SSL handshake will never be terminated because of this application
-experiencing a verification failure. The calling process can however
-retrieve the error code of the last verification error using
+1, the TLS/SSL handshake will not be terminated with respect to verification
+failures and the connection will be established. The calling process can
+however retrieve the error code of the last verification error using
L<SSL_get_verify_result(3)|SSL_get_verify_result(3)> or by maintaining its
own error storage managed by B<verify_callback>.