Add the X509v3_cache_extensions() function

[openssl.git] / doc / man3 / X509_check_ca.pod

diff --git a/doc/man3/X509_check_ca.pod b/doc/man3/X509_check_ca.pod
index 4540e96d3e3084031190b1a2170a987adb081283..89adb2e3b6468502d1929ec03fb8f8dc568cb2d9 100644 (file)
--- a/doc/man3/X509_check_ca.pod
+++ b/doc/man3/X509_check_ca.pod
@@ -24,7 +24,9 @@ B<keyUsage> extension with bit B<keyCertSign> set, but without
 B<basicConstraints>, and 5 if it has outdated Netscape Certificate Type
 extension telling that it is CA certificate.
 
-Actually, any non-zero value means that this certificate could have been
+This function will also return 0 on error.
+
+Actually, any nonzero value means that this certificate could have been
 used to sign other certificates.
 
 =head1 SEE ALSO