From cee281f70b5101b09f9d0a7e034932aa5e04bc5f Mon Sep 17 00:00:00 2001 From: Kyle Mullen Date: Tue, 18 Mar 2025 09:29:25 -0400 Subject: [PATCH] Update X509_VERIFY_PARAM_set_flags.pod Change description of B to reflect its inability to function without B being enabled as well. Fixes #27056 (https://github.com/openssl/openssl/issues/27056) CLA: trivial Reviewed-by: Paul Yang Reviewed-by: David von Oheimb Reviewed-by: Tomas Mraz (Merged from https://github.com/openssl/openssl/pull/27098) (cherry picked from commit b7d3c729b14ccd9d23437d8ae107020a4332af72) --- doc/man3/X509_VERIFY_PARAM_set_flags.pod | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/doc/man3/X509_VERIFY_PARAM_set_flags.pod b/doc/man3/X509_VERIFY_PARAM_set_flags.pod index fcbbfc4c306..571d16e5224 100644 --- a/doc/man3/X509_VERIFY_PARAM_set_flags.pod +++ b/doc/man3/X509_VERIFY_PARAM_set_flags.pod @@ -248,8 +248,8 @@ ored together. B enables CRL checking for the certificate chain leaf certificate. An error occurs if a suitable CRL cannot be found. -B enables CRL checking for the entire certificate -chain. +B expands CRL checking to the entire certificate +chain if B has also been enabled, and is otherwise ignored. B disables critical extension checking. By default any unhandled critical extensions in certificates or (if checked) CRLs result -- 2.47.2