From 3cd4e5e73f8efc652c00fc8071b035bef7dc149c Mon Sep 17 00:00:00 2001 From: "Dr. David von Oheimb" Date: Thu, 4 Mar 2021 07:36:21 +0100 Subject: [PATCH] x509.h.in: extended 'documenting' comment on X509_TRUST_OK_ANY_EKU This hopefully alleviates the fact that the name is unclear/misleading. Reviewed-by: Paul Dale (Merged from https://github.com/openssl/openssl/pull/13735) --- include/openssl/x509.h.in | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/include/openssl/x509.h.in b/include/openssl/x509.h.in index 38c7b42c227..a46c9d27563 100644 --- a/include/openssl/x509.h.in +++ b/include/openssl/x509.h.in @@ -150,7 +150,7 @@ typedef struct x509_trust_st { # define X509_TRUST_NO_SS_COMPAT (1U << 2) /* Compat trust if no explicit accepted trust EKUs */ # define X509_TRUST_DO_SS_COMPAT (1U << 3) -/* Accept "anyEKU" as a wildcard trust OID */ +/* Accept "anyEKU" as a wildcard rejection OID and as a wildcard trust OID */ # define X509_TRUST_OK_ANY_EKU (1U << 4) /* check_trust return codes */ -- 2.47.2