diff options
| author | Dr. David von Oheimb <dev@ddvo.net> | 2021-01-22 22:34:56 +0100 |
|---|---|---|
| committer | Dr. David von Oheimb <dev@ddvo.net> | 2021-07-21 11:44:14 +0200 |
| commit | ee11462d31e0f05bc75264ab40bf90ae55cb1d7c (patch) | |
| tree | 4549f8ccb20c55896706570ae98582e3c10292ea /ssl/sslerr.h | |
| parent | 0c48fda8d38ab91356c725e00ebcbbcad9ef0302 (diff) | |
SSL_CTX_set_cert_verify_callback.pod: various corrections and clarifications
- Make clear the callback is called whenever a peer certificate has been received,
which is independent of the verification mode.
- Make clear that a return value > 1 always leads to handshake failure.
- Make clear that in server mode also return values <= 0 lead to handshake failure.
- For client mode replace the incorrect formulation "if B<SSL_VERIFY_PEER> is set"
by what is actually implemented: "if the verification mode is not B<SSL_VERIFY_NONE>".
- Refer to X509_STORE_CTX_set_error() rather than to internal error variable.
Reviewed-by: Paul Dale <pauli@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/13937)
Diffstat (limited to 'ssl/sslerr.h')
0 files changed, 0 insertions, 0 deletions