Document change of -verify behavior in crl and req apps

vladak · t8m · commit 15585af97ec6 · 2024-04-02T18:42:49.000+02:00
Reviewed-by: Tom Cosgrove <tom.cosgrove@arm.com> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from openssl#23983)
diff --git a/doc/man1/openssl-crl.pod.in b/doc/man1/openssl-crl.pod.in
@@ -162,6 +162,10 @@ L<openssl-ca(1)>,
 L<openssl-x509(1)>,
 L<ossl_store-file(7)>
 
+=head1 HISTORY
+
+Since OpenSSL 3.3, the B<-verify> option will exit with 1 on failure.
+
 =head1 COPYRIGHT
 
 Copyright 2000-2021 The OpenSSL Project Authors. All Rights Reserved.
diff --git a/doc/man1/openssl-req.pod.in b/doc/man1/openssl-req.pod.in
@@ -794,6 +794,8 @@ Since OpenSSL 3.2,
 generated certificates bear X.509 version 3 unless B<-x509v1> is given,
 and key identifier extensions are included by default.
 
+Since OpenSSL 3.3, the B<-verify> option will exit with 1 on failure.
+
 =head1 COPYRIGHT
 
 Copyright 2000-2023 The OpenSSL Project Authors. All Rights Reserved.
