From d766a23deb0dc5a3fc05c37f017cb4ae9abb1c45 Mon Sep 17 00:00:00 2001 From: =?utf8?q?Lutz=20J=C3=A4nicke?= Date: Tue, 5 Dec 2000 16:47:22 +0000 Subject: [PATCH] Typo and additional information about cert-chain building. --- doc/ssl/SSL_CTX_load_verify_locations.pod | 5 ++++- 1 file changed, 4 insertions(+), 1 deletion(-) diff --git a/doc/ssl/SSL_CTX_load_verify_locations.pod b/doc/ssl/SSL_CTX_load_verify_locations.pod index aeeee1a3be..8e11606dad 100644 --- a/doc/ssl/SSL_CTX_load_verify_locations.pod +++ b/doc/ssl/SSL_CTX_load_verify_locations.pod @@ -46,7 +46,7 @@ is performed in the ordering of the extension number, regardless of other properties of the certificates. Use the B utility to create the necessary links. -The certificates in B are only looked up when required, e.g. when +The certificates in B are only looked up when required, e.g. when building the certificate chain or when actually performing the verification of a peer certificate. @@ -62,6 +62,9 @@ matching the parameters is found, the verification process will be performed; no other certificates for the same parameters will be searched in case of failure. +When building its own certificate chain, an OpenSSL client/server will +try to fill in missing certificates from B/B. + =head1 WARNINGS If several CA certificates matching the name, key identifier, and serial -- 2.25.1