Commit 8cbb048c authored by Adam Eijdenberg's avatar Adam Eijdenberg Committed by Rich Salz
Browse files

Clarify return values for EVP_DigestVerifyFinal. 



Previous language was unclear.  New language isn't pretty but I believe
it is more accurate.

Signed-off-by: default avatarRich Salz <rsalz@openssl.org>
Reviewed-by: default avatarBen Laurie <ben@openssl.org>
Reviewed-by: default avatarRichard Levitte <levitte@openssl.org>
parent 5212d39b

doc/crypto/EVP_DigestVerifyInit.pod

+5 −4
Original line number Original line Diff line number Diff line
@@ -36,10 +36,11 @@ B<sig> of length B<siglen>. 
EVP_DigestVerifyInit() and EVP_DigestVerifyUpdate() return 1 for success and 0

EVP_DigestVerifyInit() and EVP_DigestVerifyUpdate() return 1 for success and 0

for failure.

for failure.





Unlike other functions the return value 0 from EVP_DigestVerifyFinal() only

EVP_DigestVerifyFinal() returns 1 for success; any other value indicates

indicates that the signature did not verify successfully (that is tbs did

failure.  A return value of zero indicates that the signature did not verify

not match the original data or the signature was of invalid form) it is not an

successfully (that is, tbs did not match the original data or the signature had

indication of a more serious error.

an invalid form), while other values indicate a more serious error (and

sometimes also indicate an invalid signature form).





The error codes can be obtained from L<ERR_get_error(3)>.

The error codes can be obtained from L<ERR_get_error(3)>.