Document change of -verify behavior in crl and req apps

Reviewed-by: Tom Cosgrove <tom.cosgrove@arm.com>
Reviewed-by: Tomas Mraz <tomas@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/23983)

diff --git a/doc/man1/openssl-crl.pod.in b/doc/man1/openssl-crl.pod.in
index f477cfd2362e8211675d88bed8788aba8ede7ed5..630c15dab5a0039ace7683907e0be45dc293804f 100644 (file)
--- a/doc/man1/openssl-crl.pod.in
+++ b/doc/man1/openssl-crl.pod.in
@@ -162,6 +162,10 @@ L<openssl-ca(1)>,
 L<openssl-x509(1)>,
 L<ossl_store-file(7)>
 
+=head1 HISTORY
+
+Since OpenSSL 3.3, the B<-verify> option will exit with 1 on failure.
+
 =head1 COPYRIGHT
 
 Copyright 2000-2021 The OpenSSL Project Authors. All Rights Reserved.

diff --git a/doc/man1/openssl-req.pod.in b/doc/man1/openssl-req.pod.in
index d2de373e2ca2f0d4532021366b84d7bceb965bd6..c1480ef07ba0fe13c4c5803ca8cbf7a0e886f0d1 100644 (file)
--- a/doc/man1/openssl-req.pod.in
+++ b/doc/man1/openssl-req.pod.in
@@ -794,6 +794,8 @@ Since OpenSSL 3.2,
 generated certificates bear X.509 version 3 unless B<-x509v1> is given,
 and key identifier extensions are included by default.
 
+Since OpenSSL 3.3, the B<-verify> option will exit with 1 on failure.
+
 =head1 COPYRIGHT
 
 Copyright 2000-2023 The OpenSSL Project Authors. All Rights Reserved.