From: Lutz Jänicke <jaenicke@openssl.org>
Date: Fri, 30 May 2003 07:45:07 +0000 (+0000)
Subject: Clarify ordering of certificates when using certificate chains
X-Git-Tag: BEN_FIPS_TEST_1~38^2~84
X-Git-Url: https://git.librecmc.org/?a=commitdiff_plain;h=02b95b7499f29f1c0118afce26b25f15c6720318;p=oweals%2Fopenssl.git

Clarify ordering of certificates when using certificate chains
---

diff --git a/doc/ssl/SSL_CTX_use_certificate.pod b/doc/ssl/SSL_CTX_use_certificate.pod
index b8868f18bf..ea2faba3ec 100644
--- a/doc/ssl/SSL_CTX_use_certificate.pod
+++ b/doc/ssl/SSL_CTX_use_certificate.pod
@@ -68,7 +68,9 @@ should be preferred.
 
 SSL_CTX_use_certificate_chain_file() loads a certificate chain from 
 B<file> into B<ctx>. The certificates must be in PEM format and must
-be sorted starting with the certificate to the highest level (root CA).
+be sorted starting with the subject's certificate (actual client or server
+certificate), followed by intermediate CA certificates if applicable, and
+ending at the highest level (root) CA.
 There is no corresponding function working on a single SSL object.
 
 SSL_CTX_use_PrivateKey() adds B<pkey> as private key to B<ctx>.