Update doc/man3/X509_VERIFY_PARAM_set_flags.pod

Co-authored-by: Viktor Dukhovni <viktor1ghub@dukhovni.org>
Reviewed-by: Neil Horman <nhorman@openssl.org>
Reviewed-by: Viktor Dukhovni <viktor@openssl.org>
MergeDate: Tue Feb 24 14:03:52 2026
(Merged from https://github.com/openssl/openssl/pull/29612)

diff --git a/doc/man3/X509_VERIFY_PARAM_set_flags.pod b/doc/man3/X509_VERIFY_PARAM_set_flags.pod
index 4eb5edd6bbbcb0e0e4a7728bb9cfbdeb5a2ae79f..c4477e79f11002aec760a38f0cdf71310367f029 100644 (file)
--- a/doc/man3/X509_VERIFY_PARAM_set_flags.pod
+++ b/doc/man3/X509_VERIFY_PARAM_set_flags.pod
@@ -294,8 +294,9 @@ condensed "::" notation is supported for IPv6 addresses.  Any previous
 names set via X509_VERIFY_PARAM_set1_ip(),
 X509_VERIFY_PARAM_add1_ip(), X509_VERIFY_PARAM_set1_ip_asc(), or
 X509_VERIFY_PARAM_add1_ip_asc() are retained. No change is made on
-failure. It is a failure if I<ip_asc> is NULL or the empty string.
-When multiple names are configured, the peer is considered verified
+failure.
+It is a failure if I<ip_asc> is NULL or the empty string.
+When multiple addresses are configured, the peer is considered verified
 when any one of the specified addresses matches a corresponding IP address SAN in the certificate.
 
 X509_VERIFY_PARAM_set1_host_input_validation(),