Skip to content

Commit

Permalink
SSL_CTX_set_verify.pod: move a note further down where it fits better
Browse files Browse the repository at this point in the history
Reviewed-by: Paul Dale <pauli@openssl.org>
Reviewed-by: Tomas Mraz <tomas@openssl.org>
Reviewed-by: David von Oheimb <david.von.oheimb@siemens.com>
(Merged from openssl#17887)
  • Loading branch information
DDvO committed Mar 18, 2022
1 parent 9362638 commit 1aa1bba
Showing 1 changed file with 2 additions and 2 deletions.
4 changes: 2 additions & 2 deletions doc/man3/SSL_CTX_set_verify.pod
Original file line number Diff line number Diff line change
Expand Up @@ -53,11 +53,11 @@ This makes the handshake suspend and return control to the calling application
with B<SSL_ERROR_WANT_RETRY_VERIFY>.
The application can for instance fetch further certificates or cert status
information needed for the verification.
Note that the handshake may still be aborted if a subsequent invocation of the
callback (e.g. at a lower depth, or for a separate error condition) returns 0.
Calling L<SSL_connect(3)> again resumes the connection attempt by retrying the
server certificate verification step.
This process may even be repeated if need be.
Note that the handshake may still be aborted if a subsequent invocation of the
callback (e.g., at a lower depth, or for a separate error condition) returns 0.

SSL_CTX_set_verify_depth() sets the maximum B<depth> for the certificate chain
verification that shall be allowed for B<ctx>.
Expand Down

0 comments on commit 1aa1bba

Please sign in to comment.