diff options
| author | Paul Kehrer <paul.l.kehrer@gmail.com> | 2018-10-10 12:02:55 +0800 |
|---|---|---|
| committer | Alex Gaynor <alex.gaynor@gmail.com> | 2018-10-10 00:02:55 -0400 |
| commit | 838bc4a95cd2d027fc5c165c07e8ac1039dd7192 (patch) | |
| tree | 6335decbc5c5fc722477c02a9a5e1f50653ce199 /docs/x509 | |
| parent | 6460228b4651de8cdabf30f25335b9693e306c1f (diff) | |
| download | cryptography-838bc4a95cd2d027fc5c165c07e8ac1039dd7192.tar.gz cryptography-838bc4a95cd2d027fc5c165c07e8ac1039dd7192.tar.bz2 cryptography-838bc4a95cd2d027fc5c165c07e8ac1039dd7192.zip | |
simplify some language (#4495)
* simplify some language
* Update reference.rst
* wrap
* remove trailing whitespace
the github web editor is bad and should feel bad
Diffstat (limited to 'docs/x509')
| -rw-r--r-- | docs/x509/reference.rst | 9 |
1 files changed, 7 insertions, 2 deletions
diff --git a/docs/x509/reference.rst b/docs/x509/reference.rst index ef734f88..07a692a8 100644 --- a/docs/x509/reference.rst +++ b/docs/x509/reference.rst @@ -462,8 +462,13 @@ X.509 Certificate Object certificate validation is a complex problem that involves much more than just signature checks. - An example on how to check if a certificate signature is correct with a method - on the public key (this does not mean that the cert should be trusted): + To validate the signature on a certificate you can do the following. + Note: This only verifies that the certificate was signed with the + private key associated with the public key provided and does not + perform any of the other checks needed for secure certificate + validation. Additionally, this example will only work for RSA public + keys with ``PKCS1v15`` signatures, and so it can't be used for general + purpose signature verification. .. doctest:: |