1diff --git a/doc/man3/X509_VERIFY_PARAM_set_flags.pod b/doc/man3/X509_VERIFY_PARAM_set_flags.pod 2index f6f304bf7b..aa292f9336 100644 3--- a/doc/man3/X509_VERIFY_PARAM_set_flags.pod 4+++ b/doc/man3/X509_VERIFY_PARAM_set_flags.pod 5@@ -92,8 +92,9 @@ B<trust>. 6 X509_VERIFY_PARAM_set_time() sets the verification time in B<param> to 7 B<t>. Normally the current time is used. 8 9-X509_VERIFY_PARAM_add0_policy() enables policy checking (it is disabled 10-by default) and adds B<policy> to the acceptable policy set. 11+X509_VERIFY_PARAM_add0_policy() adds B<policy> to the acceptable policy set. 12+Contrary to preexisting documentation of this function it does not enable 13+policy checking. 14 15 X509_VERIFY_PARAM_set1_policies() enables policy checking (it is disabled 16 by default) and sets the acceptable policy set to B<policies>. Any existing 17@@ -377,6 +378,10 @@ and has no effect. 18 19 The X509_VERIFY_PARAM_get_hostflags() function was added in OpenSSL 1.1.0i. 20 21+The function X509_VERIFY_PARAM_add0_policy() was historically documented as 22+enabling policy checking however the implementation has never done this. 23+The documentation was changed to align with the implementation. 24+ 25 =head1 COPYRIGHT 26 27 Copyright 2009-2020 The OpenSSL Project Authors. All Rights Reserved. 28