From 25aae346f1f74105268cb616d2b56a00c869a923 Mon Sep 17 00:00:00 2001 From: Hans Nilsson Date: Fri, 13 Oct 2017 12:29:13 +0200 Subject: public_key: Polish verify_hostname doc --- lib/public_key/doc/src/public_key.xml | 7 ++++--- 1 file changed, 4 insertions(+), 3 deletions(-) diff --git a/lib/public_key/doc/src/public_key.xml b/lib/public_key/doc/src/public_key.xml index 3040f2db0d..5230cef496 100644 --- a/lib/public_key/doc/src/public_key.xml +++ b/lib/public_key/doc/src/public_key.xml @@ -883,8 +883,8 @@ fun(#'DistributionPoint'{}, #'CertificateList'{},

This function checks that the Presented Identifier (e.g hostname) in a peer certificate - conforms with the Expected Identifier that the client wants to connect to. - This functions is intended to be added as an extra client check to the peer certificate when performing + is in agreement with the Reference Identifier that the client expects to be connected to. + The function is intended to be added as an extra client check of the peer certificate when performing public_key:pkix_path_validation/3

See RFC 6125 @@ -897,7 +897,8 @@ fun(#'DistributionPoint'{}, #'CertificateList'{},

The {OtherRefId,term()} is defined by the user and is passed to the match_fun, if defined. If that term is a binary, it will be converted to a string.

-

The ip takes a 4-tuple or a +

The ip Reference ID takes an inet:ip_address() + or an ip address in string format (E.g "10.0.1.1" or "1234::5678:9012") as second element.

-- cgit v1.2.3