Commit 2815901f59 for openssl.org
commit 2815901f591589846832d79bd744b990009d78aa
Author: kovan <xaum.io@gmail.com>
Date: Tue Jan 27 06:01:56 2026 +0100
doc: Add deprecation note to SSL_get_peer_certificate description
Fixes #22972
CLA: trivial
Reviewed-by: Matt Caswell <matt@openssl.org>
Reviewed-by: Paul Dale <paul.dale@oracle.com>
(Merged from https://github.com/openssl/openssl/pull/29764)
diff --git a/doc/man3/SSL_get_peer_certificate.pod b/doc/man3/SSL_get_peer_certificate.pod
index 1897a43ebe..9a24438c81 100644
--- a/doc/man3/SSL_get_peer_certificate.pod
+++ b/doc/man3/SSL_get_peer_certificate.pod
@@ -21,6 +21,9 @@ version value, see L<openssl_user_macros(7)>:
=head1 DESCRIPTION
+SSL_get_peer_certificate() is deprecated. Use SSL_get0_peer_certificate() or
+SSL_get1_peer_certificate() instead.
+
These functions return a pointer to the X509 certificate the
peer presented. If the peer did not present a certificate, NULL is returned.