From 1a90c2784b3bff527e6e6015887ea9b66011f0b3 Mon Sep 17 00:00:00 2001 From: Kyle Mullen Date: Tue, 18 Mar 2025 09:29:25 -0400 Subject: [PATCH] Update X509_VERIFY_PARAM_set_flags.pod Change description of B to reflect its inability to function without B being enabled as well. Fixes #27056 (https://github.com/openssl/openssl/issues/27056) CLA: trivial Reviewed-by: Paul Yang Reviewed-by: David von Oheimb Reviewed-by: Tomas Mraz (Merged from https://github.com/openssl/openssl/pull/27098) (cherry picked from commit b7d3c729b14ccd9d23437d8ae107020a4332af72) --- doc/man3/X509_VERIFY_PARAM_set_flags.pod | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/doc/man3/X509_VERIFY_PARAM_set_flags.pod b/doc/man3/X509_VERIFY_PARAM_set_flags.pod index 4627206174a..4b190a7d18f 100644 --- a/doc/man3/X509_VERIFY_PARAM_set_flags.pod +++ b/doc/man3/X509_VERIFY_PARAM_set_flags.pod @@ -248,8 +248,8 @@ ored together. B enables CRL checking for the certificate chain leaf certificate. An error occurs if a suitable CRL cannot be found. -B enables CRL checking for the entire certificate -chain. +B expands CRL checking to the entire certificate +chain if B has also been enabled, and is otherwise ignored. B disables critical extension checking. By default any unhandled critical extensions in certificates or (if checked) CRLs result -- 2.47.2