wbrawner/openssl
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions
openssl/doc/crypto
History
Matt Caswell 692f07c3e0 Reject calls to X509_verify_cert that have not been reinitialised 
The function X509_verify_cert checks the value of |ctx->chain| at the
beginning, and if it is NULL then it initialises it, along with the value
of ctx->untrusted. The normal way to use X509_verify_cert() is to first
call X509_STORE_CTX_init(); then set up various parameters etc; then call
X509_verify_cert(); then check the results; and finally call
X509_STORE_CTX_cleanup(). The initial call to X509_STORE_CTX_init() sets
|ctx->chain| to NULL. The only place in the OpenSSL codebase  where
|ctx->chain| is set to anything other than a non NULL value is in
X509_verify_cert itself. Therefore the only ways that |ctx->chain| could be
non NULL on entry to X509_verify_cert is if one of the following occurs:
1) An application calls X509_verify_cert() twice without re-initialising
in between.
2) An application reaches inside the X509_STORE_CTX structure and changes
the value of |ctx->chain| directly.

With regards to the second of these, we should discount this - it should
not be supported to allow this.

With regards to the first of these, the documentation is not exactly
crystal clear, but the implication is that you must call
X509_STORE_CTX_init() before each call to X509_verify_cert(). If you fail
to do this then, at best, the results would be undefined.

Calling X509_verify_cert() with |ctx->chain| set to a non NULL value is
likely to have unexpected results, and could be dangerous. This commit
changes the behaviour of X509_verify_cert() so that it causes an error if
|ctx->chain| is anything other than NULL (because this indicates that we
have not been initialised properly). It also clarifies the associated
documentation. This is a follow up commit to CVE-2015-1793.

Reviewed-by: Stephen Henson <steve@openssl.org>
2015-07-07 21:50:09 +01:00
..
ASN1_generate_nconf.pod Merge branch 'rsalz-docfixes' 2014-07-03 12:57:16 -04:00
ASN1_OBJECT_new.pod Add includes in synopsis. 2006-05-14 11:28:00 +00:00
ASN1_STRING_length.pod Sync crypto documentation with master branch. 2014-03-03 15:12:17 +00:00
ASN1_STRING_new.pod Add includes in synopsis. 2006-05-14 11:28:00 +00:00
ASN1_STRING_print_ex.pod Sync crypto documentation with master branch. 2014-03-03 15:12:17 +00:00
ASN1_TIME_set.pod Preliminary ASN1_TIME documentation. 2015-02-03 16:50:29 +00:00
bio.pod
BIO_ctrl.pod
BIO_f_base64.pod Merge branch 'rsalz-docfixes' 2014-07-03 12:57:16 -04:00
BIO_f_buffer.pod PR: 2252 2010-05-03 15:29:51 +00:00
BIO_f_cipher.pod Typo. 2003-02-27 13:02:46 +00:00
BIO_f_md.pod Change version from 0.9.9 to 1.0.0 in docs 2009-09-30 23:40:52 +00:00
BIO_f_null.pod
BIO_f_ssl.pod Remove MS SGC 2015-01-02 23:01:38 +00:00
BIO_find_type.pod Sync crypto documentation with master branch. 2014-03-03 15:12:17 +00:00
BIO_new.pod
BIO_new_CMS.pod Change version from 0.9.9 to 1.0.0 in docs 2009-09-30 23:40:52 +00:00
BIO_push.pod Typo. 2014-06-29 13:39:20 +01:00
BIO_read.pod
BIO_s_accept.pod RT2379: Bug in BIO_set_accept_port.pod 2014-08-29 16:46:16 -04:00
BIO_s_bio.pod Brackets are now allowed, after a small hack in the processing of the 2003-05-23 09:08:59 +00:00
BIO_s_connect.pod Sync crypto documentation with master branch. 2014-03-03 15:12:17 +00:00
BIO_s_fd.pod
BIO_s_file.pod bss_file.c: reserve for option to encode file name in UTF-8 on Windows 2010-04-28 20:04:37 +00:00
BIO_s_mem.pod PR: 1894 2009-04-16 17:22:51 +00:00
BIO_s_null.pod
BIO_s_socket.pod
BIO_set_callback.pod fix documentation 2006-12-06 09:10:59 +00:00
BIO_should_retry.pod PR: 2209 2010-04-06 14:45:31 +00:00
blowfish.pod Fix typo on blowfish manual page 2005-02-19 10:26:18 +00:00
bn.pod Revert my earlier CRYPTO_THREADID commit, I will commit a reworked 2008-07-03 19:59:25 +00:00
BN_add.pod It makes more sense to refer to specific function manuals than the concept 2002-09-25 13:11:12 +00:00
BN_add_word.pod fix BN_mod_word and give a more reasonable return value if an error occurred 2005-07-25 22:57:54 +00:00
BN_BLINDING_new.pod Sync crypto documentation with master branch. 2014-03-03 15:12:17 +00:00
BN_bn2bin.pod It makes more sense to refer to specific function manuals than the concept 2002-09-25 13:33:28 +00:00
BN_cmp.pod
BN_copy.pod It makes more sense to refer to specific function manuals than the concept 2002-09-25 13:33:28 +00:00
BN_CTX_new.pod Sync crypto documentation with master branch. 2014-03-03 15:12:17 +00:00
BN_CTX_start.pod
BN_generate_prime.pod Sync crypto documentation with master branch. 2014-03-03 15:12:17 +00:00
bn_internal.pod PR: 2078 2009-10-28 13:51:56 +00:00
BN_mod_inverse.pod It makes more sense to refer to specific function manuals than the concept 2002-09-25 13:33:28 +00:00
BN_mod_mul_montgomery.pod It makes more sense to refer to specific function manuals than the concept 2002-09-25 13:33:28 +00:00
BN_mod_mul_reciprocal.pod It makes more sense to refer to specific function manuals than the concept 2002-09-25 13:33:28 +00:00
BN_new.pod typo 2004-03-06 08:43:36 +00:00
BN_num_bytes.pod Explain a little better what BN_num_bits() and BN_num_bits_word() do. 2004-07-01 12:33:39 +00:00
BN_rand.pod Fix off-by-one in BN_rand 2015-05-22 23:43:07 +01:00
BN_set_bit.pod Reject negative shifts for BN_rshift and BN_lshift 2015-05-22 23:19:34 +01:00
BN_swap.pod
BN_zero.pod Add history for documented new functions. 2002-07-18 18:54:46 +00:00
buffer.pod
CMS_add0_cert.pod Sync crypto documentation with master branch. 2014-03-03 15:12:17 +00:00
CMS_add1_recipient_cert.pod Reformat, fix typos and clarify CMS API docs. 2008-04-10 23:28:25 +00:00
CMS_add1_signer.pod Use correct function name: CMS_add1_signer() 2014-09-25 00:06:46 +01:00
CMS_compress.pod Change version from 0.9.9 to 1.0.0 in docs 2009-09-30 23:40:52 +00:00
CMS_decrypt.pod Clarify CMS_decrypt behaviour. 2014-04-15 18:19:26 +01:00
CMS_encrypt.pod Change version from 0.9.9 to 1.0.0 in docs 2009-09-30 23:40:52 +00:00
CMS_final.pod Reformat, fix typos and clarify CMS API docs. 2008-04-10 23:28:25 +00:00
CMS_get0_RecipientInfos.pod Sync crypto documentation with master branch. 2014-03-03 15:12:17 +00:00
CMS_get0_SignerInfos.pod Add CMS_SignerInfo_get0_signature function. 2013-11-09 15:09:22 +00:00
CMS_get0_type.pod Additional CMS documentation. 2015-03-08 16:19:24 +00:00
CMS_get1_ReceiptRequest.pod Reformat, fix typos and clarify CMS API docs. 2008-04-10 23:28:25 +00:00
CMS_sign.pod Change version from 0.9.9 to 1.0.0 in docs 2009-09-30 23:40:52 +00:00
CMS_sign_receipt.pod Reformat, fix typos and clarify CMS API docs. 2008-04-10 23:28:25 +00:00
CMS_uncompress.pod Revert argument swap change... oops CMS_uncompress() was consistent... 2008-04-11 23:23:18 +00:00
CMS_verify.pod Sync crypto documentation with master branch. 2014-03-03 15:12:17 +00:00
CMS_verify_receipt.pod Reformat, fix typos and clarify CMS API docs. 2008-04-10 23:28:25 +00:00
CONF_modules_free.pod Corrected POD syntax errors. PR#3353 2014-05-14 22:58:19 +01:00
CONF_modules_load_file.pod additional configuration documentation 2015-03-12 13:45:24 +00:00
crypto.pod Sync crypto documentation with master branch. 2014-03-03 15:12:17 +00:00
CRYPTO_set_ex_data.pod Add includes in synopsis. 2006-05-14 11:28:00 +00:00
d2i_ASN1_OBJECT.pod More man pages. 2002-10-09 12:06:12 +00:00
d2i_CMS_ContentInfo.pod Additional CMS documentation. 2015-03-08 16:19:24 +00:00
d2i_DHparams.pod Update DH parameter docs. 2002-10-06 12:24:09 +00:00
d2i_DSAPublicKey.pod Sync crypto documentation with master branch. 2014-03-03 15:12:17 +00:00
d2i_ECPKParameters.pod Fix NAME section of d2i_ECPKParameters to prevent broken symlinks when using 2015-02-25 20:47:42 +00:00
d2i_ECPrivateKey.pod Fix some minor documentation issues 2015-02-25 17:22:01 +00:00
d2i_PKCS8PrivateKey.pod More d2i/i2d manual pages. 2002-10-07 13:07:00 +00:00
d2i_RSAPublicKey.pod PR: 1626 2009-04-06 15:16:41 +00:00
d2i_X509.pod Fix some minor documentation issues 2015-02-25 17:22:01 +00:00
d2i_X509_ALGOR.pod More man pages. 2002-10-09 12:06:12 +00:00
d2i_X509_CRL.pod Sync crypto documentation with master branch. 2014-03-03 15:12:17 +00:00
d2i_X509_NAME.pod More docs. 2002-10-09 17:19:59 +00:00
d2i_X509_REQ.pod PR: 2023 2009-09-12 23:34:56 +00:00
d2i_X509_SIG.pod More man pages. 2002-10-09 12:06:12 +00:00
des.pod Minor documentation update removing "really" and a 2014-07-21 20:25:14 +10:00
des_modes.pod small cosmetics: align title with the other similar manual page 2007-02-27 07:41:54 +00:00
dh.pod These are updates/fixes to DH/DSA/RAND docs based on the fixes to the RSA 2002-08-05 16:27:01 +00:00
DH_generate_key.pod It makes more sense to refer to specific function manuals than the concept 2002-09-25 13:33:28 +00:00
DH_generate_parameters.pod Sync crypto documentation with master branch. 2014-03-03 15:12:17 +00:00
DH_get_ex_new_index.pod Typos in links between manual pages 2002-07-10 19:35:54 +00:00
DH_new.pod It makes more sense to refer to specific function manuals than the concept 2002-09-25 13:33:28 +00:00
DH_set_method.pod Typos in man pages: dependant->dependent 2007-11-19 09:18:03 +00:00
DH_size.pod
dsa.pod These are updates/fixes to DH/DSA/RAND docs based on the fixes to the RSA 2002-08-05 16:27:01 +00:00
DSA_do_sign.pod It makes more sense to refer to specific function manuals than the concept 2002-09-25 13:33:28 +00:00
DSA_dup_DH.pod It makes more sense to refer to specific function manuals than the concept 2002-09-25 13:33:28 +00:00
DSA_generate_key.pod It makes more sense to refer to specific function manuals than the concept 2002-09-25 13:33:28 +00:00
DSA_generate_parameters.pod Sync crypto documentation with master branch. 2014-03-03 15:12:17 +00:00
DSA_get_ex_new_index.pod Document additions for X509 chain verification from HEAD 2009-10-18 15:28:59 +00:00
DSA_new.pod It makes more sense to refer to specific function manuals than the concept 2002-09-25 13:33:28 +00:00
DSA_set_method.pod Typos in man pages: dependant->dependent 2007-11-19 09:18:03 +00:00
DSA_SIG_new.pod It makes more sense to refer to specific function manuals than the concept 2002-09-25 13:33:28 +00:00
DSA_sign.pod It makes more sense to refer to specific function manuals than the concept 2002-09-25 13:33:28 +00:00
DSA_size.pod These are updates/fixes to DH/DSA/RAND docs based on the fixes to the RSA 2002-08-05 16:27:01 +00:00
ec.pod Sync crypto documentation with master branch. 2014-03-03 15:12:17 +00:00
EC_GFp_simple_method.pod Sync crypto documentation with master branch. 2014-03-03 15:12:17 +00:00
EC_GROUP_copy.pod Sync crypto documentation with master branch. 2014-03-03 15:12:17 +00:00
EC_GROUP_new.pod Sync crypto documentation with master branch. 2014-03-03 15:12:17 +00:00
EC_KEY_new.pod Provide documentation for i2d_ECPrivateKey and d2i_ECPrivateKey 2015-02-25 17:22:01 +00:00
EC_POINT_add.pod Sync crypto documentation with master branch. 2014-03-03 15:12:17 +00:00
EC_POINT_new.pod Provide documentation for i2d_ECPrivateKey and d2i_ECPrivateKey 2015-02-25 17:22:01 +00:00
ecdsa.pod Sync crypto documentation with master branch. 2014-03-03 15:12:17 +00:00
engine.pod Typos in man pages: dependant->dependent 2007-11-19 09:18:03 +00:00
err.pod Merge branch 'rsalz-docfixes' 2014-07-03 12:57:16 -04:00
ERR_clear_error.pod
ERR_error_string.pod PR: 923 2004-11-14 15:11:37 +00:00
ERR_get_error.pod Fix doc typo. 2014-07-02 03:45:01 +01:00
ERR_GET_LIB.pod
ERR_load_crypto_strings.pod
ERR_load_strings.pod
ERR_print_errors.pod
ERR_put_error.pod
ERR_remove_state.pod Sync crypto documentation with master branch. 2014-03-03 15:12:17 +00:00
ERR_set_mark.pod Add documentation for ERR_set_mark() and ERR_pop_to_mark(). 2003-06-11 20:51:49 +00:00
evp.pod Sync crypto documentation with master branch. 2014-03-03 15:12:17 +00:00
EVP_BytesToKey.pod Explicitly mention PKCS5_PBKDF2_HMAC in EVP doc. 2015-06-08 20:21:23 -04:00
EVP_DigestInit.pod RT2210: Add missing EVP_cleanup to example 2014-08-27 13:25:36 -04:00
EVP_DigestSignInit.pod Change version from 0.9.9 to 1.0.0 in docs 2009-09-30 23:40:52 +00:00
EVP_DigestVerifyInit.pod Typo fixes to evp documentation. 2014-08-24 21:26:02 +01:00
EVP_EncryptInit.pod Fixes a minor typo in the EVP docs. 2014-11-12 21:05:01 +00:00
EVP_OpenInit.pod
EVP_PKEY_cmp.pod Sync crypto documentation with master branch. 2014-03-03 15:12:17 +00:00
EVP_PKEY_CTX_ctrl.pod Sync crypto documentation with master branch. 2014-03-03 15:12:17 +00:00
EVP_PKEY_CTX_new.pod Change version from 0.9.9 to 1.0.0 in docs 2009-09-30 23:40:52 +00:00
EVP_PKEY_decrypt.pod Correct EVP_PKEY_verifyrecover to EVP_PKEY_verify_recover (RT 2955). 2013-01-12 12:51:58 +00:00
EVP_PKEY_derive.pod Correct EVP_PKEY_verifyrecover to EVP_PKEY_verify_recover (RT 2955). 2013-01-12 12:51:58 +00:00
EVP_PKEY_encrypt.pod Updates to EVP_PKEY_encrypt.pod submitted by user Bernardh via the wiki 2014-11-27 13:57:11 +00:00
EVP_PKEY_get_default_digest.pod Correct EVP_PKEY_verifyrecover to EVP_PKEY_verify_recover (RT 2955). 2013-01-12 12:51:58 +00:00
EVP_PKEY_keygen.pod Correct EVP_PKEY_verifyrecover to EVP_PKEY_verify_recover (RT 2955). 2013-01-12 12:51:58 +00:00
EVP_PKEY_new.pod More docs. 2002-10-07 17:31:00 +00:00
EVP_PKEY_print_private.pod Change version from 0.9.9 to 1.0.0 in docs 2009-09-30 23:40:52 +00:00
EVP_PKEY_set1_RSA.pod Typo fixes to evp documentation. 2014-08-24 21:26:02 +01:00
EVP_PKEY_sign.pod Improve EVP_PKEY_sign documentation 2014-08-22 15:05:55 +02:00
EVP_PKEY_verify.pod Correct EVP_PKEY_verifyrecover to EVP_PKEY_verify_recover (RT 2955). 2013-01-12 12:51:58 +00:00
EVP_PKEY_verify_recover.pod Correct EVP_PKEY_verifyrecover to EVP_PKEY_verify_recover (RT 2955). 2013-01-12 12:51:58 +00:00
EVP_SealInit.pod the second argument of EVP_SealInit is const 2005-03-29 17:50:08 +00:00
EVP_SignInit.pod Clarified that the signature's buffer size, s, is not used as an 2014-06-29 23:36:22 +01:00
EVP_VerifyInit.pod New docs for EVP_Digest{Sign,Verify}*() function. Update existing docs. 2006-07-12 12:31:30 +00:00
hmac.pod Sync crypto documentation with master branch. 2014-03-03 15:12:17 +00:00
i2d_CMS_bio_stream.pod Change version from 0.9.9 to 1.0.0 in docs 2009-09-30 23:40:52 +00:00
i2d_PKCS7_bio_stream.pod Sync crypto documentation with master branch. 2014-03-03 15:12:17 +00:00
lh_stats.pod
lhash.pod Change version from 0.9.9 to 1.0.0 in docs 2009-09-30 23:40:52 +00:00
md5.pod update md docs 2006-10-27 21:58:09 +00:00
mdc2.pod update md docs 2006-10-27 21:58:09 +00:00
OBJ_nid2obj.pod Add includes in synopsis. 2006-05-14 11:28:00 +00:00
OpenSSL_add_all_algorithms.pod Sync crypto documentation with master branch. 2014-03-03 15:12:17 +00:00
OPENSSL_Applink.pod The NAME section of a man page is required to have a dash followed by a 2005-06-23 21:45:37 +00:00
OPENSSL_config.pod Make OPENSSL_config truly ignore errors. 2015-01-25 21:12:01 -05:00
OPENSSL_ia32cap.pod Sync crypto documentation with master branch. 2014-03-03 15:12:17 +00:00
OPENSSL_instrument_bus.pod Sync crypto documentation with master branch. 2014-03-03 15:12:17 +00:00
OPENSSL_load_builtin_modules.pod Sync crypto documentation with master branch. 2014-03-03 15:12:17 +00:00
OPENSSL_VERSION_NUMBER.pod RT2309: Fix podpage MMNNFFPPS->MNNFFPPS 2014-09-30 16:31:44 -04:00
pem.pod PEM doc fixes 2015-05-28 18:01:52 +01:00
PEM_write_bio_CMS_stream.pod Change version from 0.9.9 to 1.0.0 in docs 2009-09-30 23:40:52 +00:00
PEM_write_bio_PKCS7_stream.pod Change version from 0.9.9 to 1.0.0 in docs 2009-09-30 23:40:52 +00:00
PKCS7_decrypt.pod Add includes in synopsis. 2006-05-14 11:28:00 +00:00
PKCS7_encrypt.pod Change version from 0.9.9 to 1.0.0 in docs 2009-09-30 23:40:52 +00:00
PKCS7_sign.pod Change version from 0.9.9 to 1.0.0 in docs 2009-09-30 23:40:52 +00:00
PKCS7_sign_add_signer.pod Change version from 0.9.9 to 1.0.0 in docs 2009-09-30 23:40:52 +00:00
PKCS7_verify.pod RT1834: Fix PKCS7_verify return value 2014-09-08 10:43:32 -04:00
PKCS12_create.pod Typo. 2002-10-09 17:15:35 +00:00
PKCS12_parse.pod PR: 1599 2009-05-17 14:48:02 +00:00
rand.pod Sync crypto documentation with master branch. 2014-03-03 15:12:17 +00:00
RAND_add.pod
RAND_bytes.pod Port from 0.9.8-stable 2007-09-24 11:01:18 +00:00
RAND_cleanup.pod
RAND_egd.pod Sync crypto documentation with master branch. 2014-03-03 15:12:17 +00:00
RAND_load_file.pod
RAND_set_rand_method.pod Typos in man pages: dependant->dependent 2007-11-19 09:18:03 +00:00
rc4.pod
ripemd.pod update md docs 2006-10-27 21:58:09 +00:00
rsa.pod Various parts of the RSA documentation were inaccurate and out of date and 2002-08-04 21:08:36 +00:00
RSA_blinding_on.pod
RSA_check_key.pod It makes more sense to refer to specific function manuals than the concept 2002-09-25 13:33:28 +00:00
RSA_generate_key.pod Sync crypto documentation with master branch. 2014-03-03 15:12:17 +00:00
RSA_get_ex_new_index.pod fix documentation 2006-12-06 09:10:59 +00:00
RSA_new.pod It makes more sense to refer to specific function manuals than the concept 2002-09-25 13:33:28 +00:00
RSA_padding_add_PKCS1_type_1.pod
RSA_print.pod Correct documentation typos. 2003-12-27 15:04:54 +00:00
RSA_private_encrypt.pod It makes more sense to refer to specific function manuals than the concept 2002-09-25 13:33:28 +00:00
RSA_public_encrypt.pod Make it clear that for RSA_NO_PADDING, flen must be RSA_size(rsa) 2004-03-23 21:01:34 +00:00
RSA_set_method.pod Fix documentation for RSA_set_method(3) 2014-07-19 18:25:53 +01:00
RSA_sign.pod Merge branch 'rsalz-docfixes' 2014-07-03 12:57:16 -04:00
RSA_sign_ASN1_OCTET_STRING.pod It makes more sense to refer to specific function manuals than the concept 2002-09-25 13:33:28 +00:00
RSA_size.pod These are updates/fixes to DH/DSA/RAND docs based on the fixes to the RSA 2002-08-05 16:27:01 +00:00
sha.pod Update the SHA* documentation 2015-02-25 22:57:19 +00:00
SMIME_read_CMS.pod Reformat, fix typos and clarify CMS API docs. 2008-04-10 23:28:25 +00:00
SMIME_read_PKCS7.pod Add includes in synopsis. 2006-05-14 11:28:00 +00:00
SMIME_write_CMS.pod Reformat, fix typos and clarify CMS API docs. 2008-04-10 23:28:25 +00:00
SMIME_write_PKCS7.pod Oops... 2007-04-13 13:20:46 +00:00
SSLeay_version.pod Sync crypto documentation with master branch. 2014-03-03 15:12:17 +00:00
threads.pod Change version from 0.9.9 to 1.0.0 in docs 2009-09-30 23:40:52 +00:00
ui.pod Minor documentation update removing "really" and a 2014-07-21 20:25:14 +10:00
ui_compat.pod Add includes in synopsis. 2006-05-14 11:28:00 +00:00
x509.pod A document that has a very rough description of the X509 2003-07-10 08:49:03 +00:00
X509_check_host.pod Fix hostname validation in the command-line tool to honour negative return values. 2015-02-10 15:36:03 +01:00
X509_NAME_add_entry_by_txt.pod Updates to X509_NAME_add_entry_by_txt.pod submitted by user Bernardh via the wiki 2014-11-27 13:57:11 +00:00
X509_NAME_ENTRY_get_object.pod Corrected POD syntax errors. PR#3353 2014-05-14 22:58:19 +01:00
X509_NAME_get_index_by_NID.pod document -2 return value 2015-07-06 18:35:35 +01:00
X509_NAME_print_ex.pod Typos 2007-09-24 11:22:58 +00:00
X509_new.pod Add includes in synopsis. 2006-05-14 11:28:00 +00:00
X509_STORE_CTX_get_error.pod Sync crypto documentation with master branch. 2014-03-03 15:12:17 +00:00
X509_STORE_CTX_get_ex_new_index.pod Correct the return type on the signature for X509_STORE_CTX_get_ex_data given in the pod file. 2014-05-12 22:49:00 +01:00
X509_STORE_CTX_new.pod Reject calls to X509_verify_cert that have not been reinitialised 2015-07-07 21:50:09 +01:00
X509_STORE_CTX_set_verify_cb.pod Document additions for X509 chain verification from HEAD 2009-10-18 15:28:59 +00:00
X509_STORE_set_verify_cb_func.pod PR: 2157 2010-01-27 12:55:52 +00:00
X509_verify_cert.pod Reject calls to X509_verify_cert that have not been reinitialised 2015-07-07 21:50:09 +01:00
X509_VERIFY_PARAM_set_flags.pod Add documentation for the -no_alt_chains option for various apps, as well as 2015-04-20 13:42:17 +01:00