From bf4412dc6246cd937e40cf1290efa574ed5f24aa Mon Sep 17 00:00:00 2001 From: Ivan Desiatov Date: Mon, 9 Dec 2024 09:40:29 +0100 Subject: [PATCH] Doc updates per PR discussion. --- docs/x509/verification.rst | 8 ++++++-- 1 file changed, 6 insertions(+), 2 deletions(-) diff --git a/docs/x509/verification.rst b/docs/x509/verification.rst index 9e34f5c39b50..2887bcdfa9d0 100644 --- a/docs/x509/verification.rst +++ b/docs/x509/verification.rst @@ -307,13 +307,17 @@ the root of trust: .. versionadded:: 44.0.0 - An ExtensionPolicy provides a builder-style interface for constructing an - :class:`ExtensionPolicy`. + ExtensionPolicy provides a set of static methods to construct predefined + extension policies, and a builder-style interface for modifying them. + + .. note:: Calling any of the builder methods (:meth:`require_not_present`, :meth:`may_be_present`, or :meth:`require_present`) + multiple times with the same extension OID will raise an exception. .. staticmethod:: permit_all() Creates an ExtensionPolicy initialized with a policy that does not put any constraints on a certificate's extensions. + This can serve as a base for a fully custom extension policy. :returns: An instance of :class:`ExtensionPolicy`