[Docs] 'SSL_CTX_set_cert_store' ownership of 'store' master
authorRuslan Baratov <x@ruslo.dev>
Sun, 12 May 2024 08:33:59 +0000 (16:33 +0800)
committerTomas Mraz <tomas@openssl.org>
Wed, 15 May 2024 10:22:40 +0000 (12:22 +0200)
Reviewed-by: Matt Caswell <matt@openssl.org>
Reviewed-by: Tomas Mraz <tomas@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/24375)

doc/man3/SSL_CTX_set_cert_store.pod

index f1fef9e649cd1bcbf3b30df1ff9ce319678dcbac..792d7c3faab03c33bc56ac0fe4de98142ee28d38 100644 (file)
@@ -16,7 +16,9 @@ SSL_CTX_set_cert_store, SSL_CTX_set1_cert_store, SSL_CTX_get_cert_store - manipu
 
 SSL_CTX_set_cert_store() sets/replaces the certificate verification storage
 of B<ctx> to/with B<store>. If another X509_STORE object is currently
-set in B<ctx>, it will be X509_STORE_free()ed.
+set in B<ctx>, it will be X509_STORE_free()ed. SSL_CTX_set_cert_store() will
+take ownership of the B<store>, i.e., the call C<X509_STORE_free(store)> is no
+longer needed.
 
 SSL_CTX_set1_cert_store() sets/replaces the certificate verification storage
 of B<ctx> to/with B<store>. The B<store>'s reference count is incremented.