From e44c38d0e4492dbcaf73471416293a871711ecef Mon Sep 17 00:00:00 2001 From: Gerard Snaauw Date: Fri, 1 Nov 2024 11:19:50 +0100 Subject: [PATCH] update godoc --- pki/interface.go | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/pki/interface.go b/pki/interface.go index 95fd2c026b..b5505644f5 100644 --- a/pki/interface.go +++ b/pki/interface.go @@ -62,7 +62,7 @@ type Validator interface { // ErrCertRevoked and ErrCertUntrusted indicate that at least one of the certificates is revoked, or signed by a CA that is not in the truststore. // ErrCRLMissing and ErrCRLExpired signal that at least one of the certificates cannot be validated reliably. // If the certificate was revoked on an expired CRL, it wil return ErrCertRevoked. - // Ignoring all errors except ErrCertRevoked changes the behavior from hard-fail to soft-fail. Without a truststore, the Validator is a noop if set to soft-fail + // If set to soft-fail it ignores ErrCRLMissing and ErrCRLExpired errors. // The certificate chain is expected to be sorted leaf to root. Validate(chain []*x509.Certificate) error