X-Git-Url: https://git.openssl.org/?p=openssl.git;a=blobdiff_plain;f=doc%2Fman3%2FCT_POLICY_EVAL_CTX_new.pod;h=fe25cd9cae4d86e1a3f046aafb40fe287fc90564;hp=0f50078b51f0d400a6a835bad7c3569a7eaad65f;hb=1871a5aa8a538c2b8ac3d302c1e9e72867f5ee0f;hpb=333c2e43729a92cf37d4bd12d6a3531b4bd7e1da diff --git a/doc/man3/CT_POLICY_EVAL_CTX_new.pod b/doc/man3/CT_POLICY_EVAL_CTX_new.pod index 0f50078b51..fe25cd9cae 100644 --- a/doc/man3/CT_POLICY_EVAL_CTX_new.pod +++ b/doc/man3/CT_POLICY_EVAL_CTX_new.pod @@ -64,11 +64,14 @@ Increments the reference count of the certificate. Holds a pointer to the CTLOG_STORE, so the CTLOG_STORE must outlive the CT_POLICY_EVAL_CTX. -=item * CT_POLICY_EVAL_CTX_set_time() to provide the current time +=item * CT_POLICY_EVAL_CTX_set_time() to set the time SCTs should be compared with to determine if they are valid The SCT timestamp will be compared to this time to check whether the SCT was -supposedly issued in the future. RFC6962 states that "TLS clients MUST reject -SCTs whose timestamp is in the future". +issued in the future. RFC6962 states that "TLS clients MUST reject SCTs whose +timestamp is in the future". Typically, the time provided to this function will +be the current time. + +The time should be in milliseconds since the Unix epoch. =back