From ec6cbda0f2e435ae0efaec308dc5569c75bb759b Mon Sep 17 00:00:00 2001 From: "Dr. David von Oheimb" Date: Mon, 16 Jan 2023 08:38:01 +0100 Subject: [PATCH] X509_V_ERR_INVALID_PURPOSE: fix misleading text; Fix omission in X509_VERIFY_PARAM_clear_flags doc Reviewed-by: Tomas Mraz Reviewed-by: Dmitry Belyavskiy Reviewed-by: David von Oheimb (Merged from https://github.com/openssl/openssl/pull/20052) --- crypto/x509/x509_txt.c | 2 +- doc/man3/X509_STORE_CTX_get_error.pod | 2 +- doc/man3/X509_VERIFY_PARAM_set_flags.pod | 1 + 3 files changed, 3 insertions(+), 2 deletions(-) diff --git a/crypto/x509/x509_txt.c b/crypto/x509/x509_txt.c index 0c7ae1ed79d..54decf73328 100644 --- a/crypto/x509/x509_txt.c +++ b/crypto/x509/x509_txt.c @@ -74,7 +74,7 @@ const char *X509_verify_cert_error_string(long n) case X509_V_ERR_PATH_LENGTH_EXCEEDED: return "path length constraint exceeded"; case X509_V_ERR_INVALID_PURPOSE: - return "unsupported certificate purpose"; + return "unsuitable certificate purpose"; case X509_V_ERR_CERT_UNTRUSTED: return "certificate not trusted"; case X509_V_ERR_CERT_REJECTED: diff --git a/doc/man3/X509_STORE_CTX_get_error.pod b/doc/man3/X509_STORE_CTX_get_error.pod index 76fcf27b8da..8357f505686 100644 --- a/doc/man3/X509_STORE_CTX_get_error.pod +++ b/doc/man3/X509_STORE_CTX_get_error.pod @@ -229,7 +229,7 @@ consistent with the supplied purpose. The basicConstraints path-length parameter has been exceeded. -=item B +=item B The target certificate cannot be used for the specified purpose. diff --git a/doc/man3/X509_VERIFY_PARAM_set_flags.pod b/doc/man3/X509_VERIFY_PARAM_set_flags.pod index 149cc00d01a..51fb70b5000 100644 --- a/doc/man3/X509_VERIFY_PARAM_set_flags.pod +++ b/doc/man3/X509_VERIFY_PARAM_set_flags.pod @@ -90,6 +90,7 @@ X509_VERIFY_PARAM_clear_flags() clears the flags B in B. X509_VERIFY_PARAM_set_purpose() sets the verification purpose in B to B. This determines the acceptable purpose of the certificate chain, for example B. +The purpose requirement is cleared if B is 0. X509_VERIFY_PARAM_set_trust() sets the trust setting in B to B. -- 2.47.2