x509.h.in: extended 'documenting' comment on X509_TRUST_OK_ANY_EKU

This hopefully alleviates the fact that the name is unclear/misleading.

Reviewed-by: Paul Dale <pauli@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/13735)

diff --git a/include/openssl/x509.h.in b/include/openssl/x509.h.in
index 38c7b42c22734125319901e80788f90193a0f7e7..a46c9d2756366b445fb16d9563ba878c27bc4e6c 100644 (file)
--- a/include/openssl/x509.h.in
+++ b/include/openssl/x509.h.in
@@ -150,7 +150,7 @@ typedef struct x509_trust_st {
 # define X509_TRUST_NO_SS_COMPAT (1U << 2)
 /* Compat trust if no explicit accepted trust EKUs */
 # define X509_TRUST_DO_SS_COMPAT (1U << 3)
-/* Accept "anyEKU" as a wildcard trust OID */
+/* Accept "anyEKU" as a wildcard rejection OID and as a wildcard trust OID */
 # define X509_TRUST_OK_ANY_EKU   (1U << 4)
 
 /* check_trust return codes */