From: Dr. David von Oheimb Date: Thu, 4 Mar 2021 06:36:21 +0000 (+0100) Subject: x509.h.in: extended 'documenting' comment on X509_TRUST_OK_ANY_EKU X-Git-Tag: openssl-3.0.0-beta1~166 X-Git-Url: http://git.ipfire.org/?a=commitdiff_plain;h=3cd4e5e73f8efc652c00fc8071b035bef7dc149c;p=thirdparty%2Fopenssl.git x509.h.in: extended 'documenting' comment on X509_TRUST_OK_ANY_EKU This hopefully alleviates the fact that the name is unclear/misleading. Reviewed-by: Paul Dale (Merged from https://github.com/openssl/openssl/pull/13735) --- diff --git a/include/openssl/x509.h.in b/include/openssl/x509.h.in index 38c7b42c227..a46c9d27563 100644 --- a/include/openssl/x509.h.in +++ b/include/openssl/x509.h.in @@ -150,7 +150,7 @@ typedef struct x509_trust_st { # define X509_TRUST_NO_SS_COMPAT (1U << 2) /* Compat trust if no explicit accepted trust EKUs */ # define X509_TRUST_DO_SS_COMPAT (1U << 3) -/* Accept "anyEKU" as a wildcard trust OID */ +/* Accept "anyEKU" as a wildcard rejection OID and as a wildcard trust OID */ # define X509_TRUST_OK_ANY_EKU (1U << 4) /* check_trust return codes */