aboutsummaryrefslogtreecommitdiffstats
path: root/apps/opt.c
diff options
context:
space:
mode:
authorViktor Dukhovni <openssl-users@dukhovni.org>2016-02-09 14:17:13 -0500
committerViktor Dukhovni <openssl-users@dukhovni.org>2016-02-10 12:34:06 -0500
commitd33def662443c4b534c6b261a3b01f3960339c78 (patch)
tree4e95fd943d9df02700d60d5dbb493a6a2d4dec05 /apps/opt.c
parent056be06b4dfd7eaf7914febd043e9b446e1ed772 (diff)
downloadopenssl-d33def662443c4b534c6b261a3b01f3960339c78.tar.gz
Deprecate the -issuer_checks debugging option
This was a developer debugging feature and was never a useful public interface. Added all missing X509 error codes to the verify(1) manpage, but many still need a description beyond the associated text string. Sorted the errors in x509_txt.c by error number. Reviewed-by: Stephen Henson <steve@openssl.org>
Diffstat (limited to 'apps/opt.c')
-rw-r--r--apps/opt.c2
1 files changed, 1 insertions, 1 deletions
diff --git a/apps/opt.c b/apps/opt.c
index 49db5b66e4..3525b969c6 100644
--- a/apps/opt.c
+++ b/apps/opt.c
@@ -557,7 +557,7 @@ int opt_verify(int opt, X509_VERIFY_PARAM *vpm)
X509_VERIFY_PARAM_set_flags(vpm, X509_V_FLAG_IGNORE_CRITICAL);
break;
case OPT_V_ISSUER_CHECKS:
- X509_VERIFY_PARAM_set_flags(vpm, X509_V_FLAG_CB_ISSUER_CHECK);
+ /* NOP, deprecated */
break;
case OPT_V_CRL_CHECK:
X509_VERIFY_PARAM_set_flags(vpm, X509_V_FLAG_CRL_CHECK);