Commit 8cbb048c authored by Adam Eijdenberg's avatar Adam Eijdenberg Committed by Rich Salz
Browse files

Clarify return values for EVP_DigestVerifyFinal. 



Previous language was unclear.  New language isn't pretty but I believe
it is more accurate.

Signed-off-by: default avatarRich Salz <rsalz@openssl.org>
Reviewed-by: default avatarBen Laurie <ben@openssl.org>
Reviewed-by: default avatarRichard Levitte <levitte@openssl.org>
parent 5212d39b

doc/crypto/EVP_DigestVerifyInit.pod

+5 −4
Original line number Diff line number Diff line
@@ -36,10 +36,11 @@ B<sig> of length B<siglen>. 
EVP_DigestVerifyInit() and EVP_DigestVerifyUpdate() return 1 for success and 0

for failure.



Unlike other functions the return value 0 from EVP_DigestVerifyFinal() only

indicates that the signature did not verify successfully (that is tbs did

not match the original data or the signature was of invalid form) it is not an

indication of a more serious error.

EVP_DigestVerifyFinal() returns 1 for success; any other value indicates

failure.  A return value of zero indicates that the signature did not verify

successfully (that is, tbs did not match the original data or the signature had

an invalid form), while other values indicate a more serious error (and

sometimes also indicate an invalid signature form).



The error codes can be obtained from L<ERR_get_error(3)>.