[openssl-commits] [openssl] OpenSSL_1_0_1-stable update

Rich Salz rsalz at openssl.org
Fri Oct 23 01:11:26 UTC 2015


The branch OpenSSL_1_0_1-stable has been updated
       via  2d404dc38031122147043af31a1f1de364903be2 (commit)
      from  b2593839da1e0c5af5fedf3fce3fd43c400199b4 (commit)


- Log -----------------------------------------------------------------
commit 2d404dc38031122147043af31a1f1de364903be2
Author: Adam Eijdenberg <eijdenberg at google.com>
Date:   Mon Oct 19 11:16:25 2015 -0700

    Clarify return values for EVP_DigestVerifyFinal.
    
    Previous language was unclear.  New language isn't pretty but I believe
    it is more accurate.
    
    Signed-off-by: Rich Salz <rsalz at openssl.org>
    Reviewed-by: Ben Laurie <ben at openssl.org>
    Reviewed-by: Richard Levitte <levitte at openssl.org>
    (cherry picked from commit 8cbb048c3ea416f2bd8a3706d027f3aa26ef08d9)

-----------------------------------------------------------------------

Summary of changes:
 doc/crypto/EVP_DigestVerifyInit.pod | 9 +++++----
 1 file changed, 5 insertions(+), 4 deletions(-)

diff --git a/doc/crypto/EVP_DigestVerifyInit.pod b/doc/crypto/EVP_DigestVerifyInit.pod
index cfeccd9..54cad92 100644
--- a/doc/crypto/EVP_DigestVerifyInit.pod
+++ b/doc/crypto/EVP_DigestVerifyInit.pod
@@ -37,10 +37,11 @@ EVP_DigestVerifyInit() and EVP_DigestVerifyUpdate() return 1 for success and 0
 or a negative value for failure. In particular a return value of -2 indicates
 the operation is not supported by the public key algorithm.
 
-Unlike other functions the return value 0 from EVP_DigestVerifyFinal() only
-indicates that the signature did not verify successfully (that is tbs did
-not match the original data or the signature was of invalid form) it is not an
-indication of a more serious error.
+EVP_DigestVerifyFinal() returns 1 for success; any other value indicates
+failure.  A return value of zero indicates that the signature did not verify
+successfully (that is, tbs did not match the original data or the signature had
+an invalid form), while other values indicate a more serious error (and
+sometimes also indicate an invalid signature form).
 
 The error codes can be obtained from L<ERR_get_error(3)|ERR_get_error(3)>.
 


More information about the openssl-commits mailing list