Document the interactions of X509_V_FLAG_USE_CHECK_TIME,
authorschwarze <schwarze@openbsd.org>
Sat, 13 Nov 2021 19:21:17 +0000 (19:21 +0000)
committerschwarze <schwarze@openbsd.org>
Sat, 13 Nov 2021 19:21:17 +0000 (19:21 +0000)
commit61583fc45b9b3a6ace29dc07faf0dcb5a6ad3205
tree1ca0d570b7a35c2f90fc803debfbee5c23ed804a
parentc6191418151bee90d878d4c7e04de11f2f40f21f
Document the interactions of X509_V_FLAG_USE_CHECK_TIME,
X509_V_FLAG_NO_CHECK_TIME, X509_VERIFY_PARAM_set_time(3),
X509_VERIFY_PARAM_set_flags(3), and X509_VERIFY_PARAM_clear_flags(3)
in detail because the API design is both surprising and surprisingly
complicated in this respect, and the resulting nasty traps have
already caused bugs in the past.
lib/libcrypto/man/X509_VERIFY_PARAM_set_flags.3