CVSROOT: /cvs
Module name: src
Changes by: t...@cvs.openbsd.org 2022/12/16 11:02:28
Modified files:
lib/libcrypto/man: X509_check_purpose.3
Log message:
Document extension caching of X509_check_purpose()
The overwhelming majority of callers of X509_check_purpose() in our tree
pass a purpose of -1. In this case X509_check_purpose() acts as a wrapper
of x509v3_cache_extensions() which makes sanity checks like non-negativity
of ASN.1 integers or canonicity of RFC 3779 extensions as well as checking
uniqueness of extensions.
from schwarze who beat an initial diff of mine into shape
