diff options
| author | Dr. David von Oheimb <dev@ddvo.net> | 2021-01-27 22:13:30 +0100 |
|---|---|---|
| committer | Dr. David von Oheimb <dev@ddvo.net> | 2021-07-21 11:46:18 +0200 |
| commit | 4672e5de9e22a752870c9a05e0a92faef9e6f340 (patch) | |
| tree | bbb19d03ec3a39680a6604cb02506e6e5d451464 /doc | |
| parent | ee11462d31e0f05bc75264ab40bf90ae55cb1d7c (diff) | |
tls_process_{client,server}_certificate(): allow verify_callback return > 1
Reviewed-by: Paul Dale <pauli@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/13937)
Diffstat (limited to 'doc')
| -rw-r--r-- | doc/man3/SSL_CTX_set_cert_verify_callback.pod | 8 |
1 files changed, 4 insertions, 4 deletions
diff --git a/doc/man3/SSL_CTX_set_cert_verify_callback.pod b/doc/man3/SSL_CTX_set_cert_verify_callback.pod index 87ea772fb7..fdeeaee6d7 100644 --- a/doc/man3/SSL_CTX_set_cert_verify_callback.pod +++ b/doc/man3/SSL_CTX_set_cert_verify_callback.pod @@ -32,11 +32,11 @@ By setting I<callback> to NULL, the default behaviour is restored. I<callback> should return 1 to indicate verification success and 0 to indicate verification failure. -In server mode, a return value other than 1 leads to handshake failure. +In server mode, a return value of 0 leads to handshake failure. In client mode, the behaviour is as follows. -A return value greater than 1 leads to handshake failure. -Other values are ignored if the verification mode is B<SSL_VERIFY_NONE>. -On return value 0 the handshake will fail. +All values, including 0, are ignored +if the verification mode is B<SSL_VERIFY_NONE>. +Otherwise, when the return value is 0, the handshake will fail. In client mode I<callback> may also return -1, typically on failure verifying the server certificate. |