-.\" $OpenBSD: X509_STORE_CTX_set_verify.3,v 1.1 2021/11/17 16:08:32 schwarze Exp $
+.\" $OpenBSD: X509_STORE_CTX_set_verify.3,v 1.2 2021/11/23 17:06:05 tb Exp $
.\"
.\" Copyright (c) 2021 Ingo Schwarze <schwarze@openbsd.org>
.\"
.\" ACTION OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF
.\" OR IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE.
.\"
-.Dd $Mdocdate: November 17 2021 $
+.Dd $Mdocdate: November 23 2021 $
.Dt X509_STORE_CTX_SET_VERIFY 3
.Os
-.\" ds LIBRESSL_NEW_API
+.\" ds LIBRESSL_NEXT_API
.Sh NAME
-.if dLIBRESSL_NEW_API \{\
+.if dLIBRESSL_NEXT_API \{\
.Nm X509_STORE_CTX_verify_fn ,
.\}
.Nm X509_STORE_CTX_set_verify ,
-.ie dLIBRESSL_NEW_API \{\
+.ie dLIBRESSL_NEXT_API \{\
.Nm X509_STORE_CTX_get_verify ,
.Nm X509_STORE_set_verify ,
.Nm X509_STORE_set_verify_func
.Nd user-defined certificate chain verification function
.Sh SYNOPSIS
.In openssl/x509_vfy.h
-.if dLIBRESSL_NEW_API \{\
+.if dLIBRESSL_NEXT_API \{\
.Ft typedef int
.Fo "(*X509_STORE_CTX_verify_fn)"
.Fa "X509_STORE_CTX *ctx"
.Ft void
.Fo X509_STORE_CTX_set_verify
.Fa "X509_STORE_CTX *ctx"
-.ie dLIBRESSL_NEW_API \{\
+.ie dLIBRESSL_NEXT_API \{\
.Fa "X509_STORE_CTX_verify_fn verify"
.\}
.el \{\
.Fa "int (*verify)(X509_STORE_CTX *)"
.\}
.Fc
-.ie dLIBRESSL_NEW_API \{\
+.ie dLIBRESSL_NEXT_API \{\
.Ft X509_STORE_CTX_verify_fn
.Fo X509_STORE_CTX_get_verify
.\}
.\}
.Fa "X509_STORE_CTX *ctx"
.Fc
-.if dLIBRESSL_NEW_API \{\
+.if dLIBRESSL_NEXT_API \{\
.Ft void
.Fo X509_STORE_set_verify
.Fa "X509_STORE *store"
.Xr X509_VERIFY_PARAM_set_flags 3 .
Otherwise, it is ignored and a different algorithm is used that does
not support replacing the verification function.
-.if dLIBRESSL_NEW_API \{\
+.if dLIBRESSL_NEXT_API \{\
.Pp
.Fn X509_STORE_set_verify
saves the function pointer
implemented as a macro.
.\}
.Sh RETURN VALUES
-.if dLIBRESSL_NEW_API \{\
+.if dLIBRESSL_NEXT_API \{\
.Fn X509_STORE_CTX_verify_fn
is supposed to return 1 to indicate that the chain is valid
or 0 if it is not or if an error occurred.
.Xr X509_verify_cert 3 ,
.Xr X509_VERIFY_PARAM_set_flags 3
.Sh HISTORY
-.if dLIBRESSL_NEW_API \{\
+.if dLIBRESSL_NEXT_API \{\
.Fn X509_STORE_set_verify_func
first appeared in SSLeay 0.8.0 and has been available since
.Ox 2.4 .
.Fn X509_STORE_CTX_get_verify
first appeared in OpenSSL 1.1.0 and have been available since
.Ox 7.1 .
-.if dLIBRESSL_NEW_API \{\
+.if dLIBRESSL_NEXT_API \{\
.Pp
.Fn X509_STORE_CTX_verify_fn
and