From: tb <tb@openbsd.org>
Date: Sat, 3 Aug 2024 04:53:01 +0000 (+0000)
Subject: Document SSL_CTX_set_cert_store
X-Git-Url: http://artulab.com/gitweb/?a=commitdiff_plain;h=946c90018101187c3da61f217217876b9da7f74a;p=openbsd

Document SSL_CTX_set_cert_store

From Kenjiro Nakayama
---

diff --git a/lib/libssl/man/SSL_CTX_set_cert_store.3 b/lib/libssl/man/SSL_CTX_set_cert_store.3
index b23e3c4a12b..1be1ba2f68d 100644
--- a/lib/libssl/man/SSL_CTX_set_cert_store.3
+++ b/lib/libssl/man/SSL_CTX_set_cert_store.3
@@ -1,4 +1,4 @@
-.\"	$OpenBSD: SSL_CTX_set_cert_store.3,v 1.7 2018/03/27 17:35:50 schwarze Exp $
+.\"	$OpenBSD: SSL_CTX_set_cert_store.3,v 1.8 2024/08/03 04:53:01 tb Exp $
 .\"	OpenSSL 99d63d46 Oct 26 13:56:48 2016 -0400
 .\"
 .\" This file was written by Lutz Jaenicke <jaenicke@openssl.org>.
@@ -48,17 +48,20 @@
 .\" ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED
 .\" OF THE POSSIBILITY OF SUCH DAMAGE.
 .\"
-.Dd $Mdocdate: March 27 2018 $
+.Dd $Mdocdate: August 3 2024 $
 .Dt SSL_CTX_SET_CERT_STORE 3
 .Os
 .Sh NAME
 .Nm SSL_CTX_set_cert_store ,
+.Nm SSL_CTX_set1_cert_store ,
 .Nm SSL_CTX_get_cert_store
 .Nd manipulate X509 certificate verification storage
 .Sh SYNOPSIS
 .In openssl/ssl.h
 .Ft void
 .Fn SSL_CTX_set_cert_store "SSL_CTX *ctx" "X509_STORE *store"
+.Ft void
+.Fn SSL_CTX_set1_cert_store "SSL_CTX *ctx" "X509_STORE *store"
 .Ft X509_STORE *
 .Fn SSL_CTX_get_cert_store "const SSL_CTX *ctx"
 .Sh DESCRIPTION
@@ -73,6 +76,15 @@ object is currently set in
 .Fa ctx ,
 it will be freed.
 .Pp
+.Fn SSL_CTX_set1_cert_store
+sets the verification storage of
+.Fa ctx
+to or replaces it with
+.Fa store .
+The
+.Fa store Ns 's
+reference count is incremented.
+.Pp
 .Fn SSL_CTX_get_cert_store
 returns a pointer to the current certificate verification storage.
 .Pp
@@ -128,3 +140,7 @@ and
 .Fn SSL_CTX_get_cert_store
 first appeared in SSLeay 0.8.1 and have been available since
 .Ox 2.4 .
+.Pp
+.Fn SSL_CTX_set1_cert_store
+first appeared in OpenSSL 1.1.1 and has been available since
+.Ox 7.6 .