diff options
| author | Dr. David von Oheimb <David.von.Oheimb@siemens.com> | 2021-01-11 07:52:45 +0100 |
|---|---|---|
| committer | Dr. David von Oheimb <dev@ddvo.net> | 2021-01-13 11:53:16 +0100 |
| commit | 2ed63033e46953d0d95ff100c1334da7cc32c49b (patch) | |
| tree | 1a52e87c58289752b79a11162ff400579f28848f /doc | |
| parent | 04a1b3fa7b6090aaca88d2d884de847822e89bef (diff) | |
x509v3.h.in: Deprecate CTX_TEST and replace it by X509V3_CTX_TEST
Reviewed-by: Tomas Mraz <tmraz@fedoraproject.org>
(Merged from https://github.com/openssl/openssl/pull/13658)
Diffstat (limited to 'doc')
| -rw-r--r-- | doc/man3/X509V3_set_ctx.pod | 11 |
1 files changed, 7 insertions, 4 deletions
diff --git a/doc/man3/X509V3_set_ctx.pod b/doc/man3/X509V3_set_ctx.pod index 136e3f1982..6357199483 100644 --- a/doc/man3/X509V3_set_ctx.pod +++ b/doc/man3/X509V3_set_ctx.pod @@ -3,7 +3,7 @@ =head1 NAME X509V3_set_ctx, -X509V3_set_issuer_pkey - X.509v3 extension generation utility functions +X509V3_set_issuer_pkey - X.509 v3 extension generation utilities =head1 SYNOPSIS @@ -16,15 +16,16 @@ X509V3_set_issuer_pkey - X.509v3 extension generation utility functions =head1 DESCRIPTION X509V3_set_ctx() fills in the basic fields of I<ctx> of type B<X509V3_CTX>, -providing details potentially needed by functions producing X509 v3 certificate -extensions, e.g., to look up values for filling in authority key identifiers. +providing details potentially needed by functions producing X509 v3 extensions, +e.g., to look up values for filling in authority key identifiers. Any of I<subj>, I<req>, or I<crl> may be provided, pointing to a certificate, certification request, or certificate revocation list, respectively. If I<subj> or I<crl> is provided, I<issuer> should point to its issuer, for instance to help generating an authority key identifier extension. Note that if I<subj> is provided, I<issuer> may be the same as I<subj>, which means that I<subj> is self-issued (or even self-signed). -I<flags> may be 0 or contain B<CTX_TEST>, which means that just the syntax of +I<flags> may be 0 +or contain B<X509V3_CTX_TEST>, which means that just the syntax of extension definitions is to be checked without actually producing an extension, or B<X509V3_CTX_REPLACE>, which means that each X.509v3 extension added as defined in some configuration section shall replace any already existing @@ -48,6 +49,8 @@ L<X509_add_ext(3)> X509V3_set_issuer_pkey() was added in OpenSSL 3.0. +CTX_TEST was deprecated in OpenSSL 3.0; use X509V3_CTX_TEST instead. + =head1 COPYRIGHT Copyright 2015-2020 The OpenSSL Project Authors. All Rights Reserved. |