Update doc/man3/X509_VERIFY_PARAM_set_flags.pod

Co-authored-by: Viktor Dukhovni <viktor1ghub@dukhovni.org>
Reviewed-by: Neil Horman <nhorman@openssl.org>
Reviewed-by: Viktor Dukhovni <viktor@openssl.org>
MergeDate: Tue Feb 24 14:04:02 2026
(Merged from https://github.com/openssl/openssl/pull/29612)

diff --git a/doc/man3/X509_VERIFY_PARAM_set_flags.pod b/doc/man3/X509_VERIFY_PARAM_set_flags.pod
index b0c1ff55cee68dc7cf0e0683219d1316af414ecf..b801c61733c29bbb63354c910c48eba9b7af4d9a 100644 (file)
--- a/doc/man3/X509_VERIFY_PARAM_set_flags.pod
+++ b/doc/man3/X509_VERIFY_PARAM_set_flags.pod
@@ -306,9 +306,11 @@ X509_VERIFY_PARAM_set1_rfc822_input_validation(),
 X509_VERIFY_PARAM_set1_smtputf8_input_validation(), and
 X509_VERIFY_PARAM_set1_ip_input_validation() set a verification
 function to validate the input on setting the corresponding validation
-parameter expected values. These functions bypass OpenSSL's input validation
-to these commands. if the provided function succeeds, the corresponding
-input will be accepted and attempted to be used when verifying certificates.
+parameter expected values.
+These functions make it possible to override OpenSSL's built-in input validation of
+the corresponding verification parameters.
+If the provided function succeeds, the corresponding
+input will be accepted for use in certificate verification.
 
 =head1 RETURN VALUES