[openssl/openssl] 94fcd6: Extract the documentation for reference id setters

  Branch: refs/heads/master
  Home:   https://github.com/openssl/openssl
  Commit: 94fcd62565f0ccce31193096fd1d7deab20e0fe7
      https://github.com/openssl/openssl/commit/94fcd62565f0ccce31193096fd1d7deab20e0fe7
  Author: Bob Beck <[email protected]>
  Date:   2026-08-18 (Tue, 18 Aug 2026)

  Changed paths:
    M doc/build.info
    A doc/man3/X509_VERIFY_PARAM_set1_host.pod
    M doc/man3/X509_VERIFY_PARAM_set_flags.pod

  Log Message:
  -----------
  Extract the documentation for reference id setters

I need to make further changes, and to do so, need the documentation
of the current functions to be a bit better organized.

This extracts the documentation for the verify parameter reference id
setters to a dedicated page, and cleans it up to prepare for later
changes in the area. It should not have any funcitonal change, it
only documents them as they exist today.

Reviewed-by: Neil Horman <[email protected]>
Reviewed-by: Andrew Dinh <[email protected]>
MergeDate: Tue Aug 18 15:17:02 2026
(Merged from https://github.com/openssl/openssl/pull/31972)


  Commit: c27da9bde25a7d8295dd73ca48ced0abf475e629
      https://github.com/openssl/openssl/commit/c27da9bde25a7d8295dd73ca48ced0abf475e629
  Author: Bob Beck <[email protected]>
  Date:   2026-08-18 (Tue, 18 Aug 2026)

  Changed paths:
    M doc/build.info
    M doc/man3/X509_VERIFY_PARAM_set_flags.pod
    A doc/man3/X509_VERIFY_PARAM_set_hostflags.pod

  Log Message:
  -----------
  Separate out the host flag documentation and tidy set_flags.pod

Move X509_VERIFY_PARAM_set_hostflags() and _get_hostflags() into a
dedicated X509_VERIFY_PARAM_set_hostflags.pod, then reorganize and
correct what remains on the set_flags page (flag sections, the
missing SUITEB flags, and the trust/time/policy/depth descriptions).

Documentation only; no behavioural change.

Reviewed-by: Neil Horman <[email protected]>
Reviewed-by: Andrew Dinh <[email protected]>
MergeDate: Tue Aug 18 15:17:09 2026
(Merged from https://github.com/openssl/openssl/pull/31972)


  Commit: fc2668e0b33f02a076bc7e356ad6c754f7b39e93
      https://github.com/openssl/openssl/commit/fc2668e0b33f02a076bc7e356ad6c754f7b39e93
  Author: Bob Beck <[email protected]>
  Date:   2026-08-18 (Tue, 18 Aug 2026)

  Changed paths:
    M doc/man3/X509_VERIFY_PARAM_set_flags.pod
    M doc/man3/X509_VERIFY_PARAM_set_hostflags.pod

  Log Message:
  -----------
  Clarify the X509_VERIFY_PARAM_set_trust() documentation

Spell out that the X509_TRUST_* selectors do not check the extKeyUsage
extension they appear to name: they match only auxiliary trust
information attached to the in-memory certificate from outside, so absent
that they have no effect. Mark the selector as a legacy mechanism and
point callers at X509_VERIFY_PARAM_set_purpose() instead.

Documentation only; no behavioural change.

Reviewed-by: Neil Horman <[email protected]>
Reviewed-by: Andrew Dinh <[email protected]>
MergeDate: Tue Aug 18 15:17:16 2026
(Merged from https://github.com/openssl/openssl/pull/31972)


Compare: https://github.com/openssl/openssl/compare/1bf213943b0f...fc2668e0b33f

To unsubscribe from these emails, change your notification settings at https://github.com/openssl/openssl/settings/notifications

-- 
You received this message because you are subscribed to the Google Groups "openssl-commits" group.
To unsubscribe from this group and stop receiving emails from it, send an email to [email protected].
To view this discussion visit https://groups.google.com/a/openssl.org/d/msgid/openssl-commits/openssl/openssl/push/refs/heads/master/1bf213-fc2668%40github.com.