From: Igor Ustinov <igus68@gmail.com>
Date: Wed, 25 Feb 2026 09:27:52 +0000 (+0100)
Subject: openssl-verify.pod.in: Add clarification about the parameters order
X-Git-Tag: openssl-4.0.0-alpha1~51
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=2b5bb6148ff0ea44d4aa977ca897792411c50c77;p=thirdparty%2Fopenssl.git

openssl-verify.pod.in: Add clarification about the parameters order

Fixes #16732

Reviewed-by: Eugene Syromiatnikov <esyr@openssl.org>
Reviewed-by: Paul Dale <paul.dale@oracle.com>
Reviewed-by: Tomas Mraz <tomas@openssl.org>
MergeDate: Tue Mar  3 15:15:33 2026
(Merged from https://github.com/openssl/openssl/pull/30172)
---

diff --git a/doc/man1/openssl-verify.pod.in b/doc/man1/openssl-verify.pod.in
index 0f6a1ba4631..d9fe7ccdb46 100644
--- a/doc/man1/openssl-verify.pod.in
+++ b/doc/man1/openssl-verify.pod.in
@@ -97,6 +97,11 @@ input.
 
 =back
 
+Note that the first parameter that does not begin with a B<-> ends the list
+of options and starts the list of certificates. If you place any options
+after a certificate filename, they will be interpreted not as options
+but as certificates.
+
 =head1 DIAGNOSTICS
 
 When a verify operation fails the output messages can be somewhat cryptic. The