diff options
| author | martin <martin@NetBSD.org> | 2021-03-28 18:21:44 +0000 |
|---|---|---|
| committer | martin <martin@NetBSD.org> | 2021-03-28 18:21:44 +0000 |
| commit | 5c0d96afbe9db180cba6c96241f6ce1851efcf2c (patch) | |
| tree | a3c16d7576d043bd767c62cbf35632f5d209695f /crypto | |
| parent | c47ebd7c122a41aa1b9fe4105dd39886f28227a1 (diff) | |
Addiotionaly pull up the following, requested by christos in ticket #1237:
crypto/external/bsd/openssl/include/openssl/opensslconf.h up to 1.9
crypto/external/bsd/openssl/lib/libcrypto/crypto.inc up to 1.10
crypto/external/bsd/openssl/lib/libcrypto/evp.inc up to 1.10
crypto/external/bsd/openssl/lib/libcrypto/arch/aarch64/aesv8-armx.S up to 1.3
crypto/external/bsd/openssl/lib/libcrypto/arch/aarch64/chacha-armv8.S up to 1.3
crypto/external/bsd/openssl/lib/libcrypto/arch/aarch64/crypto.inc up to 1.5
crypto/external/bsd/openssl/lib/libcrypto/arch/aarch64/poly1305-armv8.S up to 1.3
crypto/external/bsd/openssl/lib/libcrypto/arch/aarch64/sha1-armv8.S up to 1.3
crypto/external/bsd/openssl/lib/libcrypto/arch/aarch64/sha512-armv8.S up to 1.4
crypto/external/bsd/openssl/lib/libcrypto/arch/alpha/crypto.inc up to 1.3
crypto/external/bsd/openssl/lib/libcrypto/arch/arm/aesv8-armx.S up to 1.5
crypto/external/bsd/openssl/lib/libcrypto/arch/arm/chacha-armv8.S up to 1.4
crypto/external/bsd/openssl/lib/libcrypto/arch/arm/crypto.inc up to 1.11
crypto/external/bsd/openssl/lib/libcrypto/arch/arm/ecp_nistz256-armv4.S up to 1.5
crypto/external/bsd/openssl/lib/libcrypto/arch/arm/modes.inc up to 1.5
crypto/external/bsd/openssl/lib/libcrypto/arch/arm/poly1305-armv8.S up to 1.4
crypto/external/bsd/openssl/lib/libcrypto/arch/arm/sha1-armv8.S up to 1.3
crypto/external/bsd/openssl/lib/libcrypto/arch/arm/sha512-armv8.S up to 1.5
crypto/external/bsd/openssl/lib/libcrypto/arch/i386/crypto.inc up to 1.3
crypto/external/bsd/openssl/lib/libcrypto/arch/mips/mips.S up to 1.4
crypto/external/bsd/openssl/lib/libcrypto/arch/mips/mips64.S up to 1.5
crypto/external/bsd/openssl/lib/libcrypto/arch/powerpc/crypto.inc up to 1.4
crypto/external/bsd/openssl/lib/libcrypto/arch/powerpc/keccak1600p8-ppc.S up to 1.3
crypto/external/bsd/openssl/lib/libcrypto/arch/powerpc/sha.inc up to 1.5
crypto/external/bsd/openssl/lib/libcrypto/arch/powerpc64/crypto.inc up to 1.3
crypto/external/bsd/openssl/lib/libcrypto/arch/powerpc64/keccak1600-ppc64.S up to 1.3
crypto/external/bsd/openssl/lib/libcrypto/arch/powerpc64/keccak1600p8-ppc.S up to 1.3
crypto/external/bsd/openssl/lib/libcrypto/arch/powerpc64/sha.inc up to 1.3
crypto/external/bsd/openssl/lib/libcrypto/arch/sparc/aes.inc up to 1.6
crypto/external/bsd/openssl/lib/libcrypto/arch/sparc/bn.inc up to 1.2
crypto/external/bsd/openssl/lib/libcrypto/arch/sparc/crypto.inc up to 1.13
crypto/external/bsd/openssl/lib/libcrypto/arch/sparc/modes.inc up to 1.4
crypto/external/bsd/openssl/lib/libcrypto/arch/sparc64/crypto.inc up to 1.8
crypto/external/bsd/openssl/lib/libcrypto/arch/vax/crypto.inc up to 1.4
crypto/external/bsd/openssl/lib/libcrypto/arch/x86_64/crypto.inc up to 1.3
crypto/external/bsd/openssl/lib/libcrypto/man/ADMISSIONS.3 up to 1.3
crypto/external/bsd/openssl/lib/libcrypto/man/ASN1_INTEGER_get_int64.3 up to 1.4
crypto/external/bsd/openssl/lib/libcrypto/man/ASN1_ITEM_lookup.3 up to 1.3
crypto/external/bsd/openssl/lib/libcrypto/man/ASN1_OBJECT_new.3 up to 1.20
crypto/external/bsd/openssl/lib/libcrypto/man/ASN1_STRING_TABLE_add.3 up to 1.3
crypto/external/bsd/openssl/lib/libcrypto/man/ASN1_STRING_length.3 up to 1.20
crypto/external/bsd/openssl/lib/libcrypto/man/ASN1_STRING_new.3 up to 1.20
crypto/external/bsd/openssl/lib/libcrypto/man/ASN1_STRING_print_ex.3 up to 1.20
crypto/external/bsd/openssl/lib/libcrypto/man/ASN1_TIME_set.3 up to 1.5
crypto/external/bsd/openssl/lib/libcrypto/man/ASN1_TYPE_get.3 up to 1.4
crypto/external/bsd/openssl/lib/libcrypto/man/ASN1_generate_nconf.3 up to 1.20
crypto/external/bsd/openssl/lib/libcrypto/man/ASYNC_WAIT_CTX_new.3 up to 1.4
crypto/external/bsd/openssl/lib/libcrypto/man/ASYNC_start_job.3 up to 1.4
crypto/external/bsd/openssl/lib/libcrypto/man/BF_encrypt.3 up to 1.4
crypto/external/bsd/openssl/lib/libcrypto/man/BIO_ADDR.3 up to 1.4
crypto/external/bsd/openssl/lib/libcrypto/man/BIO_ADDRINFO.3 up to 1.4
crypto/external/bsd/openssl/lib/libcrypto/man/BIO_connect.3 up to 1.4
crypto/external/bsd/openssl/lib/libcrypto/man/BIO_ctrl.3 up to 1.20
crypto/external/bsd/openssl/lib/libcrypto/man/BIO_f_base64.3 up to 1.20
crypto/external/bsd/openssl/lib/libcrypto/man/BIO_f_buffer.3 up to 1.20
crypto/external/bsd/openssl/lib/libcrypto/man/BIO_f_cipher.3 up to 1.20
crypto/external/bsd/openssl/lib/libcrypto/man/BIO_f_md.3 up to 1.20
crypto/external/bsd/openssl/lib/libcrypto/man/BIO_f_null.3 up to 1.20
crypto/external/bsd/openssl/lib/libcrypto/man/BIO_f_ssl.3 up to 1.20
crypto/external/bsd/openssl/lib/libcrypto/man/BIO_find_type.3 up to 1.20
crypto/external/bsd/openssl/lib/libcrypto/man/BIO_get_data.3 up to 1.4
crypto/external/bsd/openssl/lib/libcrypto/man/BIO_get_ex_new_index.3 up to 1.4
crypto/external/bsd/openssl/lib/libcrypto/man/BIO_meth_new.3 up to 1.4
crypto/external/bsd/openssl/lib/libcrypto/man/BIO_new.3 up to 1.20
crypto/external/bsd/openssl/lib/libcrypto/man/BIO_new_CMS.3 up to 1.20
crypto/external/bsd/openssl/lib/libcrypto/man/BIO_parse_hostserv.3 up to 1.4
crypto/external/bsd/openssl/lib/libcrypto/man/BIO_printf.3 up to 1.4
crypto/external/bsd/openssl/lib/libcrypto/man/BIO_push.3 up to 1.20
crypto/external/bsd/openssl/lib/libcrypto/man/BIO_read.3 up to 1.20
crypto/external/bsd/openssl/lib/libcrypto/man/BIO_s_accept.3 up to 1.20
crypto/external/bsd/openssl/lib/libcrypto/man/BIO_s_bio.3 up to 1.20
crypto/external/bsd/openssl/lib/libcrypto/man/BIO_s_connect.3 up to 1.20
crypto/external/bsd/openssl/lib/libcrypto/man/BIO_s_fd.3 up to 1.20
crypto/external/bsd/openssl/lib/libcrypto/man/BIO_s_file.3 up to 1.20
crypto/external/bsd/openssl/lib/libcrypto/man/BIO_s_mem.3 up to 1.20
crypto/external/bsd/openssl/lib/libcrypto/man/BIO_s_null.3 up to 1.20
crypto/external/bsd/openssl/lib/libcrypto/man/BIO_s_socket.3 up to 1.20
crypto/external/bsd/openssl/lib/libcrypto/man/BIO_set_callback.3 up to 1.20
crypto/external/bsd/openssl/lib/libcrypto/man/BIO_should_retry.3 up to 1.20
crypto/external/bsd/openssl/lib/libcrypto/man/BN_BLINDING_new.3 up to 1.20
crypto/external/bsd/openssl/lib/libcrypto/man/BN_CTX_new.3 up to 1.20
crypto/external/bsd/openssl/lib/libcrypto/man/BN_CTX_start.3 up to 1.20
crypto/external/bsd/openssl/lib/libcrypto/man/BN_add.3 up to 1.20
crypto/external/bsd/openssl/lib/libcrypto/man/BN_add_word.3 up to 1.20
crypto/external/bsd/openssl/lib/libcrypto/man/BN_bn2bin.3 up to 1.20
crypto/external/bsd/openssl/lib/libcrypto/man/BN_cmp.3 up to 1.20
crypto/external/bsd/openssl/lib/libcrypto/man/BN_copy.3 up to 1.20
crypto/external/bsd/openssl/lib/libcrypto/man/BN_generate_prime.3 up to 1.20
crypto/external/bsd/openssl/lib/libcrypto/man/BN_mod_inverse.3 up to 1.20
crypto/external/bsd/openssl/lib/libcrypto/man/BN_mod_mul_montgomery.3 up to 1.20
crypto/external/bsd/openssl/lib/libcrypto/man/BN_mod_mul_reciprocal.3 up to 1.20
crypto/external/bsd/openssl/lib/libcrypto/man/BN_new.3 up to 1.20
crypto/external/bsd/openssl/lib/libcrypto/man/BN_num_bytes.3 up to 1.20
crypto/external/bsd/openssl/lib/libcrypto/man/BN_rand.3 up to 1.20
crypto/external/bsd/openssl/lib/libcrypto/man/BN_security_bits.3 up to 1.3
crypto/external/bsd/openssl/lib/libcrypto/man/BN_set_bit.3 up to 1.20
crypto/external/bsd/openssl/lib/libcrypto/man/BN_swap.3 up to 1.20
crypto/external/bsd/openssl/lib/libcrypto/man/BN_zero.3 up to 1.20
crypto/external/bsd/openssl/lib/libcrypto/man/BUF_MEM_new.3 up to 1.4
crypto/external/bsd/openssl/lib/libcrypto/man/CMS_add0_cert.3 up to 1.20
crypto/external/bsd/openssl/lib/libcrypto/man/CMS_add1_recipient_cert.3 up to 1.20
crypto/external/bsd/openssl/lib/libcrypto/man/CMS_add1_signer.3 up to 1.9
crypto/external/bsd/openssl/lib/libcrypto/man/CMS_compress.3 up to 1.20
crypto/external/bsd/openssl/lib/libcrypto/man/CMS_decrypt.3 up to 1.20
crypto/external/bsd/openssl/lib/libcrypto/man/CMS_encrypt.3 up to 1.20
crypto/external/bsd/openssl/lib/libcrypto/man/CMS_final.3 up to 1.20
crypto/external/bsd/openssl/lib/libcrypto/man/CMS_get0_RecipientInfos.3 up to 1.20
crypto/external/bsd/openssl/lib/libcrypto/man/CMS_get0_SignerInfos.3 up to 1.20
crypto/external/bsd/openssl/lib/libcrypto/man/CMS_get0_type.3 up to 1.20
crypto/external/bsd/openssl/lib/libcrypto/man/CMS_get1_ReceiptRequest.3 up to 1.20
crypto/external/bsd/openssl/lib/libcrypto/man/CMS_sign.3 up to 1.20
crypto/external/bsd/openssl/lib/libcrypto/man/CMS_sign_receipt.3 up to 1.20
crypto/external/bsd/openssl/lib/libcrypto/man/CMS_uncompress.3 up to 1.20
crypto/external/bsd/openssl/lib/libcrypto/man/CMS_verify.3 up to 1.20
crypto/external/bsd/openssl/lib/libcrypto/man/CMS_verify_receipt.3 up to 1.20
crypto/external/bsd/openssl/lib/libcrypto/man/CONF_modules_free.3 up to 1.20
crypto/external/bsd/openssl/lib/libcrypto/man/CONF_modules_load_file.3 up to 1.20
crypto/external/bsd/openssl/lib/libcrypto/man/CRYPTO_THREAD_run_once.3 up to 1.4
crypto/external/bsd/openssl/lib/libcrypto/man/CRYPTO_get_ex_new_index.3 up to 1.4
crypto/external/bsd/openssl/lib/libcrypto/man/CTLOG_STORE_get0_log_by_id.3 up to 1.4
crypto/external/bsd/openssl/lib/libcrypto/man/CTLOG_STORE_new.3 up to 1.4
crypto/external/bsd/openssl/lib/libcrypto/man/CTLOG_new.3 up to 1.4
crypto/external/bsd/openssl/lib/libcrypto/man/CT_POLICY_EVAL_CTX_new.3 up to 1.4
crypto/external/bsd/openssl/lib/libcrypto/man/DEFINE_STACK_OF.3 up to 1.4
crypto/external/bsd/openssl/lib/libcrypto/man/DES_random_key.3 up to 1.4
crypto/external/bsd/openssl/lib/libcrypto/man/DH_generate_key.3 up to 1.20
crypto/external/bsd/openssl/lib/libcrypto/man/DH_generate_parameters.3 up to 1.20
crypto/external/bsd/openssl/lib/libcrypto/man/DH_get0_pqg.3 up to 1.4
crypto/external/bsd/openssl/lib/libcrypto/man/DH_get_1024_160.3 up to 1.4
crypto/external/bsd/openssl/lib/libcrypto/man/DH_meth_new.3 up to 1.4
crypto/external/bsd/openssl/lib/libcrypto/man/DH_new.3 up to 1.20
crypto/external/bsd/openssl/lib/libcrypto/man/DH_new_by_nid.3 up to 1.3
crypto/external/bsd/openssl/lib/libcrypto/man/DH_set_method.3 up to 1.20
crypto/external/bsd/openssl/lib/libcrypto/man/DH_size.3 up to 1.20
crypto/external/bsd/openssl/lib/libcrypto/man/DSA_SIG_new.3 up to 1.20
crypto/external/bsd/openssl/lib/libcrypto/man/DSA_do_sign.3 up to 1.20
crypto/external/bsd/openssl/lib/libcrypto/man/DSA_dup_DH.3 up to 1.20
crypto/external/bsd/openssl/lib/libcrypto/man/DSA_generate_key.3 up to 1.20
crypto/external/bsd/openssl/lib/libcrypto/man/DSA_generate_parameters.3 up to 1.20
crypto/external/bsd/openssl/lib/libcrypto/man/DSA_get0_pqg.3 up to 1.4
crypto/external/bsd/openssl/lib/libcrypto/man/DSA_meth_new.3 up to 1.4
crypto/external/bsd/openssl/lib/libcrypto/man/DSA_new.3 up to 1.20
crypto/external/bsd/openssl/lib/libcrypto/man/DSA_set_method.3 up to 1.20
crypto/external/bsd/openssl/lib/libcrypto/man/DSA_sign.3 up to 1.20
crypto/external/bsd/openssl/lib/libcrypto/man/DSA_size.3 up to 1.20
crypto/external/bsd/openssl/lib/libcrypto/man/DTLS_get_data_mtu.3 up to 1.3
crypto/external/bsd/openssl/lib/libcrypto/man/DTLS_set_timer_cb.3 up to 1.3
crypto/external/bsd/openssl/lib/libcrypto/man/DTLSv1_listen.3 up to 1.4
crypto/external/bsd/openssl/lib/libcrypto/man/ECDSA_SIG_new.3 up to 1.4
crypto/external/bsd/openssl/lib/libcrypto/man/ECPKParameters_print.3 up to 1.4
crypto/external/bsd/openssl/lib/libcrypto/man/EC_GFp_simple_method.3 up to 1.5
crypto/external/bsd/openssl/lib/libcrypto/man/EC_GROUP_copy.3 up to 1.5
crypto/external/bsd/openssl/lib/libcrypto/man/EC_GROUP_new.3 up to 1.5
crypto/external/bsd/openssl/lib/libcrypto/man/EC_KEY_get_enc_flags.3 up to 1.4
crypto/external/bsd/openssl/lib/libcrypto/man/EC_KEY_new.3 up to 1.5
crypto/external/bsd/openssl/lib/libcrypto/man/EC_POINT_add.3 up to 1.5
crypto/external/bsd/openssl/lib/libcrypto/man/EC_POINT_new.3 up to 1.5
crypto/external/bsd/openssl/lib/libcrypto/man/ENGINE_add.3 up to 1.4
crypto/external/bsd/openssl/lib/libcrypto/man/ERR_GET_LIB.3 up to 1.20
crypto/external/bsd/openssl/lib/libcrypto/man/ERR_clear_error.3 up to 1.20
crypto/external/bsd/openssl/lib/libcrypto/man/ERR_error_string.3 up to 1.20
crypto/external/bsd/openssl/lib/libcrypto/man/ERR_get_error.3 up to 1.20
crypto/external/bsd/openssl/lib/libcrypto/man/ERR_load_crypto_strings.3 up to 1.20
crypto/external/bsd/openssl/lib/libcrypto/man/ERR_load_strings.3 up to 1.20
crypto/external/bsd/openssl/lib/libcrypto/man/ERR_print_errors.3 up to 1.20
crypto/external/bsd/openssl/lib/libcrypto/man/ERR_put_error.3 up to 1.20
crypto/external/bsd/openssl/lib/libcrypto/man/ERR_remove_state.3 up to 1.20
crypto/external/bsd/openssl/lib/libcrypto/man/ERR_set_mark.3 up to 1.20
crypto/external/bsd/openssl/lib/libcrypto/man/EVP_BytesToKey.3 up to 1.20
crypto/external/bsd/openssl/lib/libcrypto/man/EVP_CIPHER_CTX_get_cipher_data.3 up to 1.4
crypto/external/bsd/openssl/lib/libcrypto/man/EVP_CIPHER_meth_new.3 up to 1.4
crypto/external/bsd/openssl/lib/libcrypto/man/EVP_DigestInit.3 up to 1.20
crypto/external/bsd/openssl/lib/libcrypto/man/EVP_DigestSignInit.3 up to 1.20
crypto/external/bsd/openssl/lib/libcrypto/man/EVP_DigestVerifyInit.3 up to 1.20
crypto/external/bsd/openssl/lib/libcrypto/man/EVP_EncodeInit.3 up to 1.7
crypto/external/bsd/openssl/lib/libcrypto/man/EVP_EncryptInit.3 up to 1.20
crypto/external/bsd/openssl/lib/libcrypto/man/EVP_MD_meth_new.3 up to 1.4
crypto/external/bsd/openssl/lib/libcrypto/man/EVP_OpenInit.3 up to 1.20
crypto/external/bsd/openssl/lib/libcrypto/man/EVP_PKEY_ASN1_METHOD.3 up to 1.4
crypto/external/bsd/openssl/lib/libcrypto/man/EVP_PKEY_CTX_ctrl.3 up to 1.20
crypto/external/bsd/openssl/lib/libcrypto/man/EVP_PKEY_CTX_new.3 up to 1.20
crypto/external/bsd/openssl/lib/libcrypto/man/EVP_PKEY_CTX_set1_pbe_pass.3 up to 1.3
crypto/external/bsd/openssl/lib/libcrypto/man/EVP_PKEY_CTX_set_hkdf_md.3 up to 1.4
crypto/external/bsd/openssl/lib/libcrypto/man/EVP_PKEY_CTX_set_rsa_pss_keygen_md.3 up to 1.3
crypto/external/bsd/openssl/lib/libcrypto/man/EVP_PKEY_CTX_set_scrypt_N.3 up to 1.3
crypto/external/bsd/openssl/lib/libcrypto/man/EVP_PKEY_CTX_set_tls1_prf_md.3 up to 1.4
crypto/external/bsd/openssl/lib/libcrypto/man/EVP_PKEY_asn1_get_count.3 up to 1.4
crypto/external/bsd/openssl/lib/libcrypto/man/EVP_PKEY_cmp.3 up to 1.20
crypto/external/bsd/openssl/lib/libcrypto/man/EVP_PKEY_decrypt.3 up to 1.20
crypto/external/bsd/openssl/lib/libcrypto/man/EVP_PKEY_derive.3 up to 1.20
crypto/external/bsd/openssl/lib/libcrypto/man/EVP_PKEY_encrypt.3 up to 1.20
crypto/external/bsd/openssl/lib/libcrypto/man/EVP_PKEY_get_default_digest_nid.3 up to 1.4
crypto/external/bsd/openssl/lib/libcrypto/man/EVP_PKEY_keygen.3 up to 1.20
crypto/external/bsd/openssl/lib/libcrypto/man/EVP_PKEY_meth_get_count.3 up to 1.3
crypto/external/bsd/openssl/lib/libcrypto/man/EVP_PKEY_meth_new.3 up to 1.3
crypto/external/bsd/openssl/lib/libcrypto/man/EVP_PKEY_new.3 up to 1.20
crypto/external/bsd/openssl/lib/libcrypto/man/EVP_PKEY_print_private.3 up to 1.20
crypto/external/bsd/openssl/lib/libcrypto/man/EVP_PKEY_set1_RSA.3 up to 1.20
crypto/external/bsd/openssl/lib/libcrypto/man/EVP_PKEY_sign.3 up to 1.20
crypto/external/bsd/openssl/lib/libcrypto/man/EVP_PKEY_verify.3 up to 1.20
crypto/external/bsd/openssl/lib/libcrypto/man/EVP_PKEY_verify_recover.3 up to 1.15
crypto/external/bsd/openssl/lib/libcrypto/man/EVP_SealInit.3 up to 1.20
crypto/external/bsd/openssl/lib/libcrypto/man/EVP_SignInit.3 up to 1.20
crypto/external/bsd/openssl/lib/libcrypto/man/EVP_VerifyInit.3 up to 1.20
crypto/external/bsd/openssl/lib/libcrypto/man/EVP_aes.3 up to 1.3
crypto/external/bsd/openssl/lib/libcrypto/man/EVP_aria.3 up to 1.3
crypto/external/bsd/openssl/lib/libcrypto/man/EVP_bf_cbc.3 up to 1.3
crypto/external/bsd/openssl/lib/libcrypto/man/EVP_blake2b512.3 up to 1.3
crypto/external/bsd/openssl/lib/libcrypto/man/EVP_camellia.3 up to 1.3
crypto/external/bsd/openssl/lib/libcrypto/man/EVP_cast5_cbc.3 up to 1.3
crypto/external/bsd/openssl/lib/libcrypto/man/EVP_chacha20.3 up to 1.3
crypto/external/bsd/openssl/lib/libcrypto/man/EVP_des.3 up to 1.3
crypto/external/bsd/openssl/lib/libcrypto/man/EVP_desx_cbc.3 up to 1.3
crypto/external/bsd/openssl/lib/libcrypto/man/EVP_idea_cbc.3 up to 1.3
crypto/external/bsd/openssl/lib/libcrypto/man/EVP_md2.3 up to 1.3
crypto/external/bsd/openssl/lib/libcrypto/man/EVP_md4.3 up to 1.3
crypto/external/bsd/openssl/lib/libcrypto/man/EVP_md5.3 up to 1.3
crypto/external/bsd/openssl/lib/libcrypto/man/EVP_mdc2.3 up to 1.3
crypto/external/bsd/openssl/lib/libcrypto/man/EVP_rc2_cbc.3 up to 1.3
crypto/external/bsd/openssl/lib/libcrypto/man/EVP_rc4.3 up to 1.3
crypto/external/bsd/openssl/lib/libcrypto/man/EVP_rc5_32_12_16_cbc.3 up to 1.3
crypto/external/bsd/openssl/lib/libcrypto/man/EVP_ripemd160.3 up to 1.3
crypto/external/bsd/openssl/lib/libcrypto/man/EVP_seed_cbc.3 up to 1.3
crypto/external/bsd/openssl/lib/libcrypto/man/EVP_sha1.3 up to 1.3
crypto/external/bsd/openssl/lib/libcrypto/man/EVP_sha224.3 up to 1.3
crypto/external/bsd/openssl/lib/libcrypto/man/EVP_sha3_224.3 up to 1.3
crypto/external/bsd/openssl/lib/libcrypto/man/EVP_sm3.3 up to 1.3
crypto/external/bsd/openssl/lib/libcrypto/man/EVP_sm4_cbc.3 up to 1.3
crypto/external/bsd/openssl/lib/libcrypto/man/EVP_whirlpool.3 up to 1.3
crypto/external/bsd/openssl/lib/libcrypto/man/Ed25519.7 up to 1.3
crypto/external/bsd/openssl/lib/libcrypto/man/HMAC.3 up to 1.5
crypto/external/bsd/openssl/lib/libcrypto/man/MD5.3 up to 1.5
crypto/external/bsd/openssl/lib/libcrypto/man/MDC2_Init.3 up to 1.4
crypto/external/bsd/openssl/lib/libcrypto/man/OBJ_nid2obj.3 up to 1.20
crypto/external/bsd/openssl/lib/libcrypto/man/OCSP_REQUEST_new.3 up to 1.4
crypto/external/bsd/openssl/lib/libcrypto/man/OCSP_cert_to_id.3 up to 1.4
crypto/external/bsd/openssl/lib/libcrypto/man/OCSP_request_add1_nonce.3 up to 1.4
crypto/external/bsd/openssl/lib/libcrypto/man/OCSP_resp_find_status.3 up to 1.4
crypto/external/bsd/openssl/lib/libcrypto/man/OCSP_response_status.3 up to 1.4
crypto/external/bsd/openssl/lib/libcrypto/man/OCSP_sendreq_new.3 up to 1.4
crypto/external/bsd/openssl/lib/libcrypto/man/OPENSSL_Applink.3 up to 1.20
crypto/external/bsd/openssl/lib/libcrypto/man/OPENSSL_LH_COMPFUNC.3 up to 1.4
crypto/external/bsd/openssl/lib/libcrypto/man/OPENSSL_LH_stats.3 up to 1.4
crypto/external/bsd/openssl/lib/libcrypto/man/OPENSSL_VERSION_NUMBER.3 up to 1.20
crypto/external/bsd/openssl/lib/libcrypto/man/OPENSSL_config.3 up to 1.20
crypto/external/bsd/openssl/lib/libcrypto/man/OPENSSL_fork_prepare.3 up to 1.3
crypto/external/bsd/openssl/lib/libcrypto/man/OPENSSL_ia32cap.3 up to 1.22
crypto/external/bsd/openssl/lib/libcrypto/man/OPENSSL_init_crypto.3 up to 1.4
crypto/external/bsd/openssl/lib/libcrypto/man/OPENSSL_init_ssl.3 up to 1.4
crypto/external/bsd/openssl/lib/libcrypto/man/OPENSSL_instrument_bus.3 up to 1.5
crypto/external/bsd/openssl/lib/libcrypto/man/OPENSSL_load_builtin_modules.3 up to 1.20
crypto/external/bsd/openssl/lib/libcrypto/man/OPENSSL_malloc.3 up to 1.4
crypto/external/bsd/openssl/lib/libcrypto/man/OPENSSL_secure_malloc.3 up to 1.4
crypto/external/bsd/openssl/lib/libcrypto/man/OSSL_STORE_INFO.3 up to 1.3
crypto/external/bsd/openssl/lib/libcrypto/man/OSSL_STORE_LOADER.3 up to 1.3
crypto/external/bsd/openssl/lib/libcrypto/man/OSSL_STORE_SEARCH.3 up to 1.3
crypto/external/bsd/openssl/lib/libcrypto/man/OSSL_STORE_expect.3 up to 1.3
crypto/external/bsd/openssl/lib/libcrypto/man/OSSL_STORE_open.3 up to 1.3
crypto/external/bsd/openssl/lib/libcrypto/man/OpenSSL_add_all_algorithms.3 up to 1.20
crypto/external/bsd/openssl/lib/libcrypto/man/PEM_bytes_read_bio.3 up to 1.3
crypto/external/bsd/openssl/lib/libcrypto/man/PEM_read.3 up to 1.4
crypto/external/bsd/openssl/lib/libcrypto/man/PEM_read_CMS.3 up to 1.4
crypto/external/bsd/openssl/lib/libcrypto/man/PEM_read_bio_PrivateKey.3 up to 1.4
crypto/external/bsd/openssl/lib/libcrypto/man/PEM_read_bio_ex.3 up to 1.3
crypto/external/bsd/openssl/lib/libcrypto/man/PEM_write_bio_CMS_stream.3 up to 1.20
crypto/external/bsd/openssl/lib/libcrypto/man/PEM_write_bio_PKCS7_stream.3 up to 1.20
crypto/external/bsd/openssl/lib/libcrypto/man/PKCS12_create.3 up to 1.20
crypto/external/bsd/openssl/lib/libcrypto/man/PKCS12_newpass.3 up to 1.4
crypto/external/bsd/openssl/lib/libcrypto/man/PKCS12_parse.3 up to 1.20
crypto/external/bsd/openssl/lib/libcrypto/man/PKCS5_PBKDF2_HMAC.3 up to 1.4
crypto/external/bsd/openssl/lib/libcrypto/man/PKCS7_decrypt.3 up to 1.20
crypto/external/bsd/openssl/lib/libcrypto/man/PKCS7_encrypt.3 up to 1.20
crypto/external/bsd/openssl/lib/libcrypto/man/PKCS7_sign.3 up to 1.20
crypto/external/bsd/openssl/lib/libcrypto/man/PKCS7_sign_add_signer.3 up to 1.20
crypto/external/bsd/openssl/lib/libcrypto/man/PKCS7_verify.3 up to 1.20
crypto/external/bsd/openssl/lib/libcrypto/man/RAND.7 up to 1.3
crypto/external/bsd/openssl/lib/libcrypto/man/RAND_DRBG.7 up to 1.3
crypto/external/bsd/openssl/lib/libcrypto/man/RAND_DRBG_generate.3 up to 1.3
crypto/external/bsd/openssl/lib/libcrypto/man/RAND_DRBG_get0_master.3 up to 1.3
crypto/external/bsd/openssl/lib/libcrypto/man/RAND_DRBG_new.3 up to 1.3
crypto/external/bsd/openssl/lib/libcrypto/man/RAND_DRBG_reseed.3 up to 1.3
crypto/external/bsd/openssl/lib/libcrypto/man/RAND_DRBG_set_callbacks.3 up to 1.3
crypto/external/bsd/openssl/lib/libcrypto/man/RAND_DRBG_set_ex_data.3 up to 1.3
crypto/external/bsd/openssl/lib/libcrypto/man/RAND_add.3 up to 1.20
crypto/external/bsd/openssl/lib/libcrypto/man/RAND_bytes.3 up to 1.20
crypto/external/bsd/openssl/lib/libcrypto/man/RAND_cleanup.3 up to 1.20
crypto/external/bsd/openssl/lib/libcrypto/man/RAND_egd.3 up to 1.20
crypto/external/bsd/openssl/lib/libcrypto/man/RAND_load_file.3 up to 1.20
crypto/external/bsd/openssl/lib/libcrypto/man/RAND_set_rand_method.3 up to 1.20
crypto/external/bsd/openssl/lib/libcrypto/man/RC4_set_key.3 up to 1.4
crypto/external/bsd/openssl/lib/libcrypto/man/RIPEMD160_Init.3 up to 1.4
crypto/external/bsd/openssl/lib/libcrypto/man/RSA-PSS.7 up to 1.3
crypto/external/bsd/openssl/lib/libcrypto/man/RSA_blinding_on.3 up to 1.20
crypto/external/bsd/openssl/lib/libcrypto/man/RSA_check_key.3 up to 1.20
crypto/external/bsd/openssl/lib/libcrypto/man/RSA_generate_key.3 up to 1.20
crypto/external/bsd/openssl/lib/libcrypto/man/RSA_get0_key.3 up to 1.4
crypto/external/bsd/openssl/lib/libcrypto/man/RSA_meth_new.3 up to 1.4
crypto/external/bsd/openssl/lib/libcrypto/man/RSA_new.3 up to 1.20
crypto/external/bsd/openssl/lib/libcrypto/man/RSA_padding_add_PKCS1_type_1.3 up to 1.20
crypto/external/bsd/openssl/lib/libcrypto/man/RSA_print.3 up to 1.20
crypto/external/bsd/openssl/lib/libcrypto/man/RSA_private_encrypt.3 up to 1.20
crypto/external/bsd/openssl/lib/libcrypto/man/RSA_public_encrypt.3 up to 1.20
crypto/external/bsd/openssl/lib/libcrypto/man/RSA_set_method.3 up to 1.20
crypto/external/bsd/openssl/lib/libcrypto/man/RSA_sign.3 up to 1.20
crypto/external/bsd/openssl/lib/libcrypto/man/RSA_sign_ASN1_OCTET_STRING.3 up to 1.20
crypto/external/bsd/openssl/lib/libcrypto/man/RSA_size.3 up to 1.20
crypto/external/bsd/openssl/lib/libcrypto/man/SCT_new.3 up to 1.4
crypto/external/bsd/openssl/lib/libcrypto/man/SCT_print.3 up to 1.4
crypto/external/bsd/openssl/lib/libcrypto/man/SCT_validate.3 up to 1.4
crypto/external/bsd/openssl/lib/libcrypto/man/SHA256_Init.3 up to 1.4
crypto/external/bsd/openssl/lib/libcrypto/man/SM2.7 up to 1.3
crypto/external/bsd/openssl/lib/libcrypto/man/SMIME_read_CMS.3 up to 1.20
crypto/external/bsd/openssl/lib/libcrypto/man/SMIME_read_PKCS7.3 up to 1.20
crypto/external/bsd/openssl/lib/libcrypto/man/SMIME_write_CMS.3 up to 1.20
crypto/external/bsd/openssl/lib/libcrypto/man/SMIME_write_PKCS7.3 up to 1.20
crypto/external/bsd/openssl/lib/libcrypto/man/SSL_CIPHER_get_name.3 up to 1.20
crypto/external/bsd/openssl/lib/libcrypto/man/SSL_COMP_add_compression_method.3 up to 1.20
crypto/external/bsd/openssl/lib/libcrypto/man/SSL_CONF_CTX_new.3 up to 1.5
crypto/external/bsd/openssl/lib/libcrypto/man/SSL_CONF_CTX_set1_prefix.3 up to 1.5
crypto/external/bsd/openssl/lib/libcrypto/man/SSL_CONF_CTX_set_flags.3 up to 1.5
crypto/external/bsd/openssl/lib/libcrypto/man/SSL_CONF_CTX_set_ssl_ctx.3 up to 1.5
crypto/external/bsd/openssl/lib/libcrypto/man/SSL_CONF_cmd.3 up to 1.5
crypto/external/bsd/openssl/lib/libcrypto/man/SSL_CONF_cmd_argv.3 up to 1.5
crypto/external/bsd/openssl/lib/libcrypto/man/SSL_CTX_add1_chain_cert.3 up to 1.5
crypto/external/bsd/openssl/lib/libcrypto/man/SSL_CTX_add_extra_chain_cert.3 up to 1.20
crypto/external/bsd/openssl/lib/libcrypto/man/SSL_CTX_add_session.3 up to 1.20
crypto/external/bsd/openssl/lib/libcrypto/man/SSL_CTX_config.3 up to 1.4
crypto/external/bsd/openssl/lib/libcrypto/man/SSL_CTX_ctrl.3 up to 1.20
crypto/external/bsd/openssl/lib/libcrypto/man/SSL_CTX_dane_enable.3 up to 1.4
crypto/external/bsd/openssl/lib/libcrypto/man/SSL_CTX_flush_sessions.3 up to 1.20
crypto/external/bsd/openssl/lib/libcrypto/man/SSL_CTX_free.3 up to 1.20
crypto/external/bsd/openssl/lib/libcrypto/man/SSL_CTX_get0_param.3 up to 1.5
crypto/external/bsd/openssl/lib/libcrypto/man/SSL_CTX_get_verify_mode.3 up to 1.20
crypto/external/bsd/openssl/lib/libcrypto/man/SSL_CTX_has_client_custom_ext.3 up to 1.4
crypto/external/bsd/openssl/lib/libcrypto/man/SSL_CTX_load_verify_locations.3 up to 1.20
crypto/external/bsd/openssl/lib/libcrypto/man/SSL_CTX_new.3 up to 1.20
crypto/external/bsd/openssl/lib/libcrypto/man/SSL_CTX_sess_number.3 up to 1.20
crypto/external/bsd/openssl/lib/libcrypto/man/SSL_CTX_sess_set_cache_size.3 up to 1.20
crypto/external/bsd/openssl/lib/libcrypto/man/SSL_CTX_sess_set_get_cb.3 up to 1.20
crypto/external/bsd/openssl/lib/libcrypto/man/SSL_CTX_sessions.3 up to 1.20
crypto/external/bsd/openssl/lib/libcrypto/man/SSL_CTX_set0_CA_list.3 up to 1.3
crypto/external/bsd/openssl/lib/libcrypto/man/SSL_CTX_set1_curves.3 up to 1.5
crypto/external/bsd/openssl/lib/libcrypto/man/SSL_CTX_set1_sigalgs.3 up to 1.4
crypto/external/bsd/openssl/lib/libcrypto/man/SSL_CTX_set1_verify_cert_store.3 up to 1.5
crypto/external/bsd/openssl/lib/libcrypto/man/SSL_CTX_set_alpn_select_cb.3 up to 1.5
crypto/external/bsd/openssl/lib/libcrypto/man/SSL_CTX_set_cert_cb.3 up to 1.5
crypto/external/bsd/openssl/lib/libcrypto/man/SSL_CTX_set_cert_store.3 up to 1.20
crypto/external/bsd/openssl/lib/libcrypto/man/SSL_CTX_set_cert_verify_callback.3 up to 1.20
crypto/external/bsd/openssl/lib/libcrypto/man/SSL_CTX_set_cipher_list.3 up to 1.20
crypto/external/bsd/openssl/lib/libcrypto/man/SSL_CTX_set_client_cert_cb.3 up to 1.20
crypto/external/bsd/openssl/lib/libcrypto/man/SSL_CTX_set_client_hello_cb.3 up to 1.3
crypto/external/bsd/openssl/lib/libcrypto/man/SSL_CTX_set_ct_validation_callback.3 up to 1.4
crypto/external/bsd/openssl/lib/libcrypto/man/SSL_CTX_set_ctlog_list_file.3 up to 1.4
crypto/external/bsd/openssl/lib/libcrypto/man/SSL_CTX_set_default_passwd_cb.3 up to 1.20
crypto/external/bsd/openssl/lib/libcrypto/man/SSL_CTX_set_ex_data.3 up to 1.4
crypto/external/bsd/openssl/lib/libcrypto/man/SSL_CTX_set_generate_session_id.3 up to 1.20
crypto/external/bsd/openssl/lib/libcrypto/man/SSL_CTX_set_info_callback.3 up to 1.20
crypto/external/bsd/openssl/lib/libcrypto/man/SSL_CTX_set_keylog_callback.3 up to 1.3
crypto/external/bsd/openssl/lib/libcrypto/man/SSL_CTX_set_max_cert_list.3 up to 1.20
crypto/external/bsd/openssl/lib/libcrypto/man/SSL_CTX_set_min_proto_version.3 up to 1.4
crypto/external/bsd/openssl/lib/libcrypto/man/SSL_CTX_set_mode.3 up to 1.20
crypto/external/bsd/openssl/lib/libcrypto/man/SSL_CTX_set_msg_callback.3 up to 1.20
crypto/external/bsd/openssl/lib/libcrypto/man/SSL_CTX_set_num_tickets.3 up to 1.3
crypto/external/bsd/openssl/lib/libcrypto/man/SSL_CTX_set_options.3 up to 1.20
crypto/external/bsd/openssl/lib/libcrypto/man/SSL_CTX_set_psk_client_callback.3 up to 1.20
crypto/external/bsd/openssl/lib/libcrypto/man/SSL_CTX_set_quiet_shutdown.3 up to 1.20
crypto/external/bsd/openssl/lib/libcrypto/man/SSL_CTX_set_read_ahead.3 up to 1.8
crypto/external/bsd/openssl/lib/libcrypto/man/SSL_CTX_set_record_padding_callback.3 up to 1.3
crypto/external/bsd/openssl/lib/libcrypto/man/SSL_CTX_set_security_level.3 up to 1.4
crypto/external/bsd/openssl/lib/libcrypto/man/SSL_CTX_set_session_cache_mode.3 up to 1.20
crypto/external/bsd/openssl/lib/libcrypto/man/SSL_CTX_set_session_id_context.3 up to 1.20
crypto/external/bsd/openssl/lib/libcrypto/man/SSL_CTX_set_session_ticket_cb.3 up to 1.3
crypto/external/bsd/openssl/lib/libcrypto/man/SSL_CTX_set_split_send_fragment.3 up to 1.4
crypto/external/bsd/openssl/lib/libcrypto/man/SSL_CTX_set_ssl_version.3 up to 1.20
crypto/external/bsd/openssl/lib/libcrypto/man/SSL_CTX_set_stateless_cookie_generate_cb.3 up to 1.3
crypto/external/bsd/openssl/lib/libcrypto/man/SSL_CTX_set_timeout.3 up to 1.20
crypto/external/bsd/openssl/lib/libcrypto/man/SSL_CTX_set_tlsext_servername_callback.3 up to 1.3
crypto/external/bsd/openssl/lib/libcrypto/man/SSL_CTX_set_tlsext_status_cb.3 up to 1.7
crypto/external/bsd/openssl/lib/libcrypto/man/SSL_CTX_set_tlsext_ticket_key_cb.3 up to 1.10
crypto/external/bsd/openssl/lib/libcrypto/man/SSL_CTX_set_tlsext_use_srtp.3 up to 1.4
crypto/external/bsd/openssl/lib/libcrypto/man/SSL_CTX_set_tmp_dh_callback.3 up to 1.20
crypto/external/bsd/openssl/lib/libcrypto/man/SSL_CTX_set_verify.3 up to 1.20
crypto/external/bsd/openssl/lib/libcrypto/man/SSL_CTX_use_certificate.3 up to 1.20
crypto/external/bsd/openssl/lib/libcrypto/man/SSL_CTX_use_psk_identity_hint.3 up to 1.20
crypto/external/bsd/openssl/lib/libcrypto/man/SSL_CTX_use_serverinfo.3 up to 1.5
crypto/external/bsd/openssl/lib/libcrypto/man/SSL_SESSION_free.3 up to 1.20
crypto/external/bsd/openssl/lib/libcrypto/man/SSL_SESSION_get0_cipher.3 up to 1.4
crypto/external/bsd/openssl/lib/libcrypto/man/SSL_SESSION_get0_hostname.3 up to 1.4
crypto/external/bsd/openssl/lib/libcrypto/man/SSL_SESSION_get0_id_context.3 up to 1.4
crypto/external/bsd/openssl/lib/libcrypto/man/SSL_SESSION_get0_peer.3 up to 1.4
crypto/external/bsd/openssl/lib/libcrypto/man/SSL_SESSION_get_compress_id.3 up to 1.4
crypto/external/bsd/openssl/lib/libcrypto/man/SSL_SESSION_get_ex_data.3 up to 1.4
crypto/external/bsd/openssl/lib/libcrypto/man/SSL_SESSION_get_protocol_version.3 up to 1.4
crypto/external/bsd/openssl/lib/libcrypto/man/SSL_SESSION_get_time.3 up to 1.20
crypto/external/bsd/openssl/lib/libcrypto/man/SSL_SESSION_has_ticket.3 up to 1.4
crypto/external/bsd/openssl/lib/libcrypto/man/SSL_SESSION_is_resumable.3 up to 1.3
crypto/external/bsd/openssl/lib/libcrypto/man/SSL_SESSION_print.3 up to 1.4
crypto/external/bsd/openssl/lib/libcrypto/man/SSL_SESSION_set1_id.3 up to 1.4
crypto/external/bsd/openssl/lib/libcrypto/man/SSL_accept.3 up to 1.20
crypto/external/bsd/openssl/lib/libcrypto/man/SSL_alert_type_string.3 up to 1.20
crypto/external/bsd/openssl/lib/libcrypto/man/SSL_alloc_buffers.3 up to 1.3
crypto/external/bsd/openssl/lib/libcrypto/man/SSL_check_chain.3 up to 1.5
crypto/external/bsd/openssl/lib/libcrypto/man/SSL_clear.3 up to 1.20
crypto/external/bsd/openssl/lib/libcrypto/man/SSL_connect.3 up to 1.20
crypto/external/bsd/openssl/lib/libcrypto/man/SSL_do_handshake.3 up to 1.20
crypto/external/bsd/openssl/lib/libcrypto/man/SSL_export_keying_material.3 up to 1.4
crypto/external/bsd/openssl/lib/libcrypto/man/SSL_extension_supported.3 up to 1.4
crypto/external/bsd/openssl/lib/libcrypto/man/SSL_free.3 up to 1.20
crypto/external/bsd/openssl/lib/libcrypto/man/SSL_get0_peer_scts.3 up to 1.4
crypto/external/bsd/openssl/lib/libcrypto/man/SSL_get_SSL_CTX.3 up to 1.20
crypto/external/bsd/openssl/lib/libcrypto/man/SSL_get_all_async_fds.3 up to 1.4
crypto/external/bsd/openssl/lib/libcrypto/man/SSL_get_ciphers.3 up to 1.20
crypto/external/bsd/openssl/lib/libcrypto/man/SSL_get_client_random.3 up to 1.4
crypto/external/bsd/openssl/lib/libcrypto/man/SSL_get_current_cipher.3 up to 1.20
crypto/external/bsd/openssl/lib/libcrypto/man/SSL_get_default_timeout.3 up to 1.20
crypto/external/bsd/openssl/lib/libcrypto/man/SSL_get_error.3 up to 1.20
crypto/external/bsd/openssl/lib/libcrypto/man/SSL_get_extms_support.3 up to 1.4
crypto/external/bsd/openssl/lib/libcrypto/man/SSL_get_fd.3 up to 1.20
crypto/external/bsd/openssl/lib/libcrypto/man/SSL_get_peer_cert_chain.3 up to 1.20
crypto/external/bsd/openssl/lib/libcrypto/man/SSL_get_peer_certificate.3 up to 1.20
crypto/external/bsd/openssl/lib/libcrypto/man/SSL_get_peer_signature_nid.3 up to 1.3
crypto/external/bsd/openssl/lib/libcrypto/man/SSL_get_peer_tmp_key.3 up to 1.2
crypto/external/bsd/openssl/lib/libcrypto/man/SSL_get_psk_identity.3 up to 1.20
crypto/external/bsd/openssl/lib/libcrypto/man/SSL_get_rbio.3 up to 1.20
crypto/external/bsd/openssl/lib/libcrypto/man/SSL_get_session.3 up to 1.20
crypto/external/bsd/openssl/lib/libcrypto/man/SSL_get_shared_sigalgs.3 up to 1.4
crypto/external/bsd/openssl/lib/libcrypto/man/SSL_get_verify_result.3 up to 1.20
crypto/external/bsd/openssl/lib/libcrypto/man/SSL_get_version.3 up to 1.20
crypto/external/bsd/openssl/lib/libcrypto/man/SSL_in_init.3 up to 1.3
crypto/external/bsd/openssl/lib/libcrypto/man/SSL_key_update.3 up to 1.3
crypto/external/bsd/openssl/lib/libcrypto/man/SSL_library_init.3 up to 1.20
crypto/external/bsd/openssl/lib/libcrypto/man/SSL_load_client_CA_file.3 up to 1.20
crypto/external/bsd/openssl/lib/libcrypto/man/SSL_new.3 up to 1.20
crypto/external/bsd/openssl/lib/libcrypto/man/SSL_pending.3 up to 1.20
crypto/external/bsd/openssl/lib/libcrypto/man/SSL_read.3 up to 1.21
crypto/external/bsd/openssl/lib/libcrypto/man/SSL_read_early_data.3 up to 1.3
crypto/external/bsd/openssl/lib/libcrypto/man/SSL_rstate_string.3 up to 1.20
crypto/external/bsd/openssl/lib/libcrypto/man/SSL_session_reused.3 up to 1.20
crypto/external/bsd/openssl/lib/libcrypto/man/SSL_set1_host.3 up to 1.4
crypto/external/bsd/openssl/lib/libcrypto/man/SSL_set_bio.3 up to 1.20
crypto/external/bsd/openssl/lib/libcrypto/man/SSL_set_connect_state.3 up to 1.20
crypto/external/bsd/openssl/lib/libcrypto/man/SSL_set_fd.3 up to 1.20
crypto/external/bsd/openssl/lib/libcrypto/man/SSL_set_session.3 up to 1.20
crypto/external/bsd/openssl/lib/libcrypto/man/SSL_set_shutdown.3 up to 1.20
crypto/external/bsd/openssl/lib/libcrypto/man/SSL_set_verify_result.3 up to 1.20
crypto/external/bsd/openssl/lib/libcrypto/man/SSL_shutdown.3 up to 1.20
crypto/external/bsd/openssl/lib/libcrypto/man/SSL_state_string.3 up to 1.20
crypto/external/bsd/openssl/lib/libcrypto/man/SSL_want.3 up to 1.20
crypto/external/bsd/openssl/lib/libcrypto/man/SSL_write.3 up to 1.20
crypto/external/bsd/openssl/lib/libcrypto/man/UI_STRING.3 up to 1.4
crypto/external/bsd/openssl/lib/libcrypto/man/UI_UTIL_read_pw.3 up to 1.3
crypto/external/bsd/openssl/lib/libcrypto/man/UI_create_method.3 up to 1.4
crypto/external/bsd/openssl/lib/libcrypto/man/UI_new.3 up to 1.4
crypto/external/bsd/openssl/lib/libcrypto/man/X25519.7 up to 1.3
crypto/external/bsd/openssl/lib/libcrypto/man/X509V3_get_d2i.3 up to 1.4
crypto/external/bsd/openssl/lib/libcrypto/man/X509_ALGOR_dup.3 up to 1.4
crypto/external/bsd/openssl/lib/libcrypto/man/X509_CRL_get0_by_serial.3 up to 1.4
crypto/external/bsd/openssl/lib/libcrypto/man/X509_EXTENSION_set_object.3 up to 1.4
crypto/external/bsd/openssl/lib/libcrypto/man/X509_LOOKUP_hash_dir.3 up to 1.4
crypto/external/bsd/openssl/lib/libcrypto/man/X509_LOOKUP_meth_new.3 up to 1.3
crypto/external/bsd/openssl/lib/libcrypto/man/X509_NAME_ENTRY_get_object.3 up to 1.20
crypto/external/bsd/openssl/lib/libcrypto/man/X509_NAME_add_entry_by_txt.3 up to 1.20
crypto/external/bsd/openssl/lib/libcrypto/man/X509_NAME_get0_der.3 up to 1.4
crypto/external/bsd/openssl/lib/libcrypto/man/X509_NAME_get_index_by_NID.3 up to 1.20
crypto/external/bsd/openssl/lib/libcrypto/man/X509_NAME_print_ex.3 up to 1.20
crypto/external/bsd/openssl/lib/libcrypto/man/X509_PUBKEY_new.3 up to 1.4
crypto/external/bsd/openssl/lib/libcrypto/man/X509_SIG_get0.3 up to 1.4
crypto/external/bsd/openssl/lib/libcrypto/man/X509_STORE_CTX_get_error.3 up to 1.19
crypto/external/bsd/openssl/lib/libcrypto/man/X509_STORE_CTX_new.3 up to 1.19
crypto/external/bsd/openssl/lib/libcrypto/man/X509_STORE_CTX_set_verify_cb.3 up to 1.19
crypto/external/bsd/openssl/lib/libcrypto/man/X509_STORE_add_cert.3 up to 1.3
crypto/external/bsd/openssl/lib/libcrypto/man/X509_STORE_get0_param.3 up to 1.4
crypto/external/bsd/openssl/lib/libcrypto/man/X509_STORE_new.3 up to 1.4
crypto/external/bsd/openssl/lib/libcrypto/man/X509_STORE_set_verify_cb_func.3 up to 1.19
crypto/external/bsd/openssl/lib/libcrypto/man/X509_VERIFY_PARAM_set_flags.3 up to 1.19
crypto/external/bsd/openssl/lib/libcrypto/man/X509_check_ca.3 up to 1.4
crypto/external/bsd/openssl/lib/libcrypto/man/X509_check_host.3 up to 1.5
crypto/external/bsd/openssl/lib/libcrypto/man/X509_check_issued.3 up to 1.4
crypto/external/bsd/openssl/lib/libcrypto/man/X509_check_private_key.3 up to 1.3
crypto/external/bsd/openssl/lib/libcrypto/man/X509_cmp_time.3 up to 1.3
crypto/external/bsd/openssl/lib/libcrypto/man/X509_digest.3 up to 1.4
crypto/external/bsd/openssl/lib/libcrypto/man/X509_dup.3 up to 1.4
crypto/external/bsd/openssl/lib/libcrypto/man/X509_get0_notBefore.3 up to 1.4
crypto/external/bsd/openssl/lib/libcrypto/man/X509_get0_signature.3 up to 1.4
crypto/external/bsd/openssl/lib/libcrypto/man/X509_get0_uids.3 up to 1.4
crypto/external/bsd/openssl/lib/libcrypto/man/X509_get_extension_flags.3 up to 1.4
crypto/external/bsd/openssl/lib/libcrypto/man/X509_get_pubkey.3 up to 1.4
crypto/external/bsd/openssl/lib/libcrypto/man/X509_get_serialNumber.3 up to 1.4
crypto/external/bsd/openssl/lib/libcrypto/man/X509_get_subject_name.3 up to 1.4
crypto/external/bsd/openssl/lib/libcrypto/man/X509_get_version.3 up to 1.4
crypto/external/bsd/openssl/lib/libcrypto/man/X509_new.3 up to 1.20
crypto/external/bsd/openssl/lib/libcrypto/man/X509_sign.3 up to 1.4
crypto/external/bsd/openssl/lib/libcrypto/man/X509_verify_cert.3 up to 1.19
crypto/external/bsd/openssl/lib/libcrypto/man/X509v3_get_ext_by_NID.3 up to 1.4
crypto/external/bsd/openssl/lib/libcrypto/man/bio.7 up to 1.3
crypto/external/bsd/openssl/lib/libcrypto/man/crypto.7 up to 1.3
crypto/external/bsd/openssl/lib/libcrypto/man/ct.7 up to 1.3
crypto/external/bsd/openssl/lib/libcrypto/man/d2i_DHparams.3 up to 1.20
crypto/external/bsd/openssl/lib/libcrypto/man/d2i_PKCS8PrivateKey_bio.3 up to 1.4
crypto/external/bsd/openssl/lib/libcrypto/man/d2i_PrivateKey.3 up to 1.7
crypto/external/bsd/openssl/lib/libcrypto/man/d2i_SSL_SESSION.3 up to 1.20
crypto/external/bsd/openssl/lib/libcrypto/man/d2i_X509.3 up to 1.20
crypto/external/bsd/openssl/lib/libcrypto/man/des_modes.7 up to 1.20
crypto/external/bsd/openssl/lib/libcrypto/man/evp.7 up to 1.3
crypto/external/bsd/openssl/lib/libcrypto/man/i2d_CMS_bio_stream.3 up to 1.20
crypto/external/bsd/openssl/lib/libcrypto/man/i2d_PKCS7_bio_stream.3 up to 1.20
crypto/external/bsd/openssl/lib/libcrypto/man/i2d_re_X509_tbs.3 up to 1.4
crypto/external/bsd/openssl/lib/libcrypto/man/o2i_SCT_LIST.3 up to 1.4
crypto/external/bsd/openssl/lib/libcrypto/man/openssl.1 up to 1.19
crypto/external/bsd/openssl/lib/libcrypto/man/openssl_CA.pl.1 up to 1.20
crypto/external/bsd/openssl/lib/libcrypto/man/openssl_asn1parse.1 up to 1.20
crypto/external/bsd/openssl/lib/libcrypto/man/openssl_ca.1 up to 1.20
crypto/external/bsd/openssl/lib/libcrypto/man/openssl_ciphers.1 up to 1.20
crypto/external/bsd/openssl/lib/libcrypto/man/openssl_cms.1 up to 1.20
crypto/external/bsd/openssl/lib/libcrypto/man/openssl_config.5 up to 1.3
crypto/external/bsd/openssl/lib/libcrypto/man/openssl_crl.1 up to 1.20
crypto/external/bsd/openssl/lib/libcrypto/man/openssl_crl2pkcs7.1 up to 1.20
crypto/external/bsd/openssl/lib/libcrypto/man/openssl_dgst.1 up to 1.20
crypto/external/bsd/openssl/lib/libcrypto/man/openssl_dhparam.1 up to 1.20
crypto/external/bsd/openssl/lib/libcrypto/man/openssl_dsa.1 up to 1.20
crypto/external/bsd/openssl/lib/libcrypto/man/openssl_dsaparam.1 up to 1.20
crypto/external/bsd/openssl/lib/libcrypto/man/openssl_ec.1 up to 1.20
crypto/external/bsd/openssl/lib/libcrypto/man/openssl_ecparam.1 up to 1.20
crypto/external/bsd/openssl/lib/libcrypto/man/openssl_enc.1 up to 1.20
crypto/external/bsd/openssl/lib/libcrypto/man/openssl_engine.1 up to 1.4
crypto/external/bsd/openssl/lib/libcrypto/man/openssl_errstr.1 up to 1.20
crypto/external/bsd/openssl/lib/libcrypto/man/openssl_gendsa.1 up to 1.20
crypto/external/bsd/openssl/lib/libcrypto/man/openssl_genpkey.1 up to 1.20
crypto/external/bsd/openssl/lib/libcrypto/man/openssl_genrsa.1 up to 1.20
crypto/external/bsd/openssl/lib/libcrypto/man/openssl_list.1 up to 1.4
crypto/external/bsd/openssl/lib/libcrypto/man/openssl_nseq.1 up to 1.20
crypto/external/bsd/openssl/lib/libcrypto/man/openssl_ocsp.1 up to 1.20
crypto/external/bsd/openssl/lib/libcrypto/man/openssl_passwd.1 up to 1.20
crypto/external/bsd/openssl/lib/libcrypto/man/openssl_pkcs12.1 up to 1.20
crypto/external/bsd/openssl/lib/libcrypto/man/openssl_pkcs7.1 up to 1.20
crypto/external/bsd/openssl/lib/libcrypto/man/openssl_pkcs8.1 up to 1.20
crypto/external/bsd/openssl/lib/libcrypto/man/openssl_pkey.1 up to 1.20
crypto/external/bsd/openssl/lib/libcrypto/man/openssl_pkeyparam.1 up to 1.20
crypto/external/bsd/openssl/lib/libcrypto/man/openssl_pkeyutl.1 up to 1.20
crypto/external/bsd/openssl/lib/libcrypto/man/openssl_prime.1 up to 1.3
crypto/external/bsd/openssl/lib/libcrypto/man/openssl_rand.1 up to 1.20
crypto/external/bsd/openssl/lib/libcrypto/man/openssl_rehash.1 up to 1.4
crypto/external/bsd/openssl/lib/libcrypto/man/openssl_req.1 up to 1.20
crypto/external/bsd/openssl/lib/libcrypto/man/openssl_rsa.1 up to 1.20
crypto/external/bsd/openssl/lib/libcrypto/man/openssl_rsautl.1 up to 1.20
crypto/external/bsd/openssl/lib/libcrypto/man/openssl_s_client.1 up to 1.20
crypto/external/bsd/openssl/lib/libcrypto/man/openssl_s_server.1 up to 1.20
crypto/external/bsd/openssl/lib/libcrypto/man/openssl_s_time.1 up to 1.20
crypto/external/bsd/openssl/lib/libcrypto/man/openssl_sess_id.1 up to 1.20
crypto/external/bsd/openssl/lib/libcrypto/man/openssl_smime.1 up to 1.20
crypto/external/bsd/openssl/lib/libcrypto/man/openssl_speed.1 up to 1.20
crypto/external/bsd/openssl/lib/libcrypto/man/openssl_spkac.1 up to 1.20
crypto/external/bsd/openssl/lib/libcrypto/man/openssl_srp.1 up to 1.3
crypto/external/bsd/openssl/lib/libcrypto/man/openssl_storeutl.1 up to 1.3
crypto/external/bsd/openssl/lib/libcrypto/man/openssl_ts.1 up to 1.20
crypto/external/bsd/openssl/lib/libcrypto/man/openssl_tsget.1 up to 1.21
crypto/external/bsd/openssl/lib/libcrypto/man/openssl_verify.1 up to 1.20
crypto/external/bsd/openssl/lib/libcrypto/man/openssl_version.1 up to 1.20
crypto/external/bsd/openssl/lib/libcrypto/man/openssl_x509.1 up to 1.20
crypto/external/bsd/openssl/lib/libcrypto/man/ossl_store-file.7 up to 1.3
crypto/external/bsd/openssl/lib/libcrypto/man/ossl_store.7 up to 1.3
crypto/external/bsd/openssl/lib/libcrypto/man/passphrase-encoding.7 up to 1.3
crypto/external/bsd/openssl/lib/libcrypto/man/scrypt.7 up to 1.3
crypto/external/bsd/openssl/lib/libcrypto/man/ssl.7 up to 1.3
crypto/external/bsd/openssl/lib/libcrypto/man/x509.7 up to 1.3
crypto/external/bsd/openssl/lib/libcrypto/man/x509v3_config.5 up to 1.3
Import OpenSSL 1.1.1k
Diffstat (limited to 'crypto')
566 files changed, 3492 insertions, 2823 deletions
diff --git a/crypto/external/bsd/openssl/include/openssl/opensslconf.h b/crypto/external/bsd/openssl/include/openssl/opensslconf.h index a2199efaa29..9f610f3751e 100644 --- a/crypto/external/bsd/openssl/include/openssl/opensslconf.h +++ b/crypto/external/bsd/openssl/include/openssl/opensslconf.h @@ -50,7 +50,12 @@ extern "C" { # define OPENSSL_NO_DEVCRYPTOENG # endif #endif -#if !defined(_LP64) || defined(__sparc64__) +/* + * XXX + * This seems broken on big-endian or strictly-aligned architectures. + */ +#if !defined(_LP64) || \ + defined(__AARCH64EB__) || defined(__alpha__) || defined(__sparc64__) # ifndef OPENSSL_NO_EC_NISTP_64_GCC_128 # define OPENSSL_NO_EC_NISTP_64_GCC_128 # endif diff --git a/crypto/external/bsd/openssl/lib/libcrypto/arch/aarch64/aesv8-armx.S b/crypto/external/bsd/openssl/lib/libcrypto/arch/aarch64/aesv8-armx.S index eddbefbad78..2a37eee5e1f 100644 --- a/crypto/external/bsd/openssl/lib/libcrypto/arch/aarch64/aesv8-armx.S +++ b/crypto/external/bsd/openssl/lib/libcrypto/arch/aarch64/aesv8-armx.S @@ -108,7 +108,12 @@ aes_v8_set_encrypt_key: vtbl.8 d20,{q8},d4 vtbl.8 d21,{q8},d5 vext.8 q9,q0,q3,#12 +#ifdef __ARMEB__ + vst1.32 {q8},[r2]! + sub r2,r2,#8 +#else vst1.32 {d16},[r2]! +#endif .byte 0x00,0x43,0xf0,0xf3 @ aese q10,q0 subs r1,r1,#1 @@ -580,8 +585,11 @@ aes_v8_ctr32_encrypt_blocks: ldr r5,[r3,#240] ldr r8, [r4, #12] +#ifdef __ARMEB__ + vld1.8 {q0},[r4] +#else vld1.32 {q0},[r4] - +#endif vld1.32 {q8,q9},[r3] @ load key schedule... sub r5,r5,#4 mov r12,#16 @@ -597,17 +605,17 @@ aes_v8_ctr32_encrypt_blocks: #ifndef __ARMEB__ rev r8, r8 #endif - vorr q1,q0,q0 add r10, r8, #1 - vorr q10,q0,q0 - add r8, r8, #2 vorr q6,q0,q0 rev r10, r10 - vmov.32 d3[1],r10 + vmov.32 d13[1],r10 + add r8, r8, #2 + vorr q1,q6,q6 bls .Lctr32_tail rev r12, r8 + vmov.32 d13[1],r12 sub r2,r2,#3 @ bias - vmov.32 d21[1],r12 + vorr q10,q6,q6 b .Loop3x_ctr32 .align 4 @@ -634,11 +642,11 @@ aes_v8_ctr32_encrypt_blocks: .byte 0x20,0x23,0xb0,0xf3 @ aese q1,q8 .byte 0x82,0xa3,0xb0,0xf3 @ aesmc q5,q1 vld1.8 {q2},[r0]! - vorr q0,q6,q6 + add r9,r8,#1 .byte 0x20,0x43,0xf0,0xf3 @ aese q10,q8 .byte 0xa4,0x43,0xf0,0xf3 @ aesmc q10,q10 vld1.8 {q3},[r0]! - vorr q1,q6,q6 + rev r9,r9 .byte 0x22,0x83,0xb0,0xf3 @ aese q4,q9 .byte 0x88,0x83,0xb0,0xf3 @ aesmc q4,q4 .byte 0x22,0xa3,0xb0,0xf3 @ aese q5,q9 @@ -647,8 +655,6 @@ aes_v8_ctr32_encrypt_blocks: mov r7,r3 .byte 0x22,0x43,0xf0,0xf3 @ aese q10,q9 .byte 0xa4,0x23,0xf0,0xf3 @ aesmc q9,q10 - vorr q10,q6,q6 - add r9,r8,#1 .byte 0x28,0x83,0xb0,0xf3 @ aese q4,q12 .byte 0x88,0x83,0xb0,0xf3 @ aesmc q4,q4 .byte 0x28,0xa3,0xb0,0xf3 @ aese q5,q12 @@ -664,20 +670,22 @@ aes_v8_ctr32_encrypt_blocks: .byte 0x2a,0xa3,0xb0,0xf3 @ aese q5,q13 .byte 0x8a,0xa3,0xb0,0xf3 @ aesmc q5,q5 veor q11,q11,q7 - rev r9,r9 + vmov.32 d13[1], r9 .byte 0x2a,0x23,0xf0,0xf3 @ aese q9,q13 .byte 0xa2,0x23,0xf0,0xf3 @ aesmc q9,q9 - vmov.32 d1[1], r9 + vorr q0,q6,q6 rev r10,r10 .byte 0x2c,0x83,0xb0,0xf3 @ aese q4,q14 .byte 0x88,0x83,0xb0,0xf3 @ aesmc q4,q4 + vmov.32 d13[1], r10 + rev r12,r8 .byte 0x2c,0xa3,0xb0,0xf3 @ aese q5,q14 .byte 0x8a,0xa3,0xb0,0xf3 @ aesmc q5,q5 - vmov.32 d3[1], r10 - rev r12,r8 + vorr q1,q6,q6 + vmov.32 d13[1], r12 .byte 0x2c,0x23,0xf0,0xf3 @ aese q9,q14 .byte 0xa2,0x23,0xf0,0xf3 @ aesmc q9,q9 - vmov.32 d21[1], r12 + vorr q10,q6,q6 subs r2,r2,#3 .byte 0x2e,0x83,0xb0,0xf3 @ aese q4,q15 .byte 0x2e,0xa3,0xb0,0xf3 @ aese q5,q15 diff --git a/crypto/external/bsd/openssl/lib/libcrypto/arch/aarch64/chacha-armv8.S b/crypto/external/bsd/openssl/lib/libcrypto/arch/aarch64/chacha-armv8.S index 6f83fae2082..f4676cbf681 100644 --- a/crypto/external/bsd/openssl/lib/libcrypto/arch/aarch64/chacha-armv8.S +++ b/crypto/external/bsd/openssl/lib/libcrypto/arch/aarch64/chacha-armv8.S @@ -3,6 +3,7 @@ .text +.hidden OPENSSL_armcap_P .align 5 .Lsigma: diff --git a/crypto/external/bsd/openssl/lib/libcrypto/arch/aarch64/crypto.inc b/crypto/external/bsd/openssl/lib/libcrypto/arch/aarch64/crypto.inc index 354354b1895..42fe669fca5 100644 --- a/crypto/external/bsd/openssl/lib/libcrypto/arch/aarch64/crypto.inc +++ b/crypto/external/bsd/openssl/lib/libcrypto/arch/aarch64/crypto.inc @@ -1,9 +1,9 @@ .PATH.S: ${.PARSEDIR} CPUID_SRCS += arm64cpuid.S armcap.c -CRYPTOCPPFLAGS += -DOPENSSL_CPUID_OBJ CPUID = yes ARM_MAX_ARCH=8 CPPFLAGS += -D__ARM_MAX_ARCH__=${ARM_MAX_ARCH} +CPPFLAGS += -DOPENSSL_CPUID_OBJ CFLAGS+= ${${ACTIVE_CC} == "clang" :? -no-integrated-as :} .include "../../crypto.inc" diff --git a/crypto/external/bsd/openssl/lib/libcrypto/arch/aarch64/poly1305-armv8.S b/crypto/external/bsd/openssl/lib/libcrypto/arch/aarch64/poly1305-armv8.S index d53257f5023..62271b488a9 100644 --- a/crypto/external/bsd/openssl/lib/libcrypto/arch/aarch64/poly1305-armv8.S +++ b/crypto/external/bsd/openssl/lib/libcrypto/arch/aarch64/poly1305-armv8.S @@ -4,10 +4,14 @@ // forward "declarations" are required for Apple +.hidden OPENSSL_armcap_P +.globl poly1305_init +.hidden poly1305_init .globl poly1305_blocks +.hidden poly1305_blocks .globl poly1305_emit +.hidden poly1305_emit -.globl poly1305_init .type poly1305_init,%function .align 5 poly1305_init: @@ -795,8 +799,8 @@ poly1305_blocks_neon: st1 {v23.s}[0],[x0] .Lno_data_neon: -.inst 0xd50323bf // autiasp ldr x29,[sp],#80 +.inst 0xd50323bf // autiasp ret .size poly1305_blocks_neon,.-poly1305_blocks_neon diff --git a/crypto/external/bsd/openssl/lib/libcrypto/arch/aarch64/sha1-armv8.S b/crypto/external/bsd/openssl/lib/libcrypto/arch/aarch64/sha1-armv8.S index bba45bae0fa..d64f46a8f69 100644 --- a/crypto/external/bsd/openssl/lib/libcrypto/arch/aarch64/sha1-armv8.S +++ b/crypto/external/bsd/openssl/lib/libcrypto/arch/aarch64/sha1-armv8.S @@ -3,6 +3,7 @@ .text +.hidden OPENSSL_armcap_P .globl sha1_block_data_order .type sha1_block_data_order,%function .align 6 @@ -1218,4 +1219,3 @@ sha1_block_armv8: .byte 83,72,65,49,32,98,108,111,99,107,32,116,114,97,110,115,102,111,114,109,32,102,111,114,32,65,82,77,118,56,44,32,67,82,89,80,84,79,71,65,77,83,32,98,121,32,60,97,112,112,114,111,64,111,112,101,110,115,115,108,46,111,114,103,62,0 .align 2 .align 2 -.comm OPENSSL_armcap_P,4,4 diff --git a/crypto/external/bsd/openssl/lib/libcrypto/arch/aarch64/sha512-armv8.S b/crypto/external/bsd/openssl/lib/libcrypto/arch/aarch64/sha512-armv8.S index a8843c87d19..52ca2ef1e0c 100644 --- a/crypto/external/bsd/openssl/lib/libcrypto/arch/aarch64/sha512-armv8.S +++ b/crypto/external/bsd/openssl/lib/libcrypto/arch/aarch64/sha512-armv8.S @@ -59,6 +59,7 @@ .text +.hidden OPENSSL_armcap_P .globl sha256_block_data_order .type sha256_block_data_order,%function .align 6 @@ -2060,6 +2061,3 @@ sha256_block_neon: add sp,sp,#16*4+16 ret .size sha256_block_neon,.-sha256_block_neon -#ifndef __KERNEL__ -.comm OPENSSL_armcap_P,4,4 -#endif diff --git a/crypto/external/bsd/openssl/lib/libcrypto/arch/alpha/crypto.inc b/crypto/external/bsd/openssl/lib/libcrypto/arch/alpha/crypto.inc index 1261e4d1af1..8e75a1af94f 100644 --- a/crypto/external/bsd/openssl/lib/libcrypto/arch/alpha/crypto.inc +++ b/crypto/external/bsd/openssl/lib/libcrypto/arch/alpha/crypto.inc @@ -5,7 +5,7 @@ ASMDIR:=${.PARSEDIR} CPUID_SRCS += alpha-mont.S alphacpuid.S CPUID = yes CPPFLAGS += -DOPENSSL_BN_ASM_MONT -I${ASMDIR} -CRYPTOCPPFLAGS += -DOPENSSL_CPUID_OBJ +CPPFLAGS += -DOPENSSL_CPUID_OBJ .include "../../crypto.inc" diff --git a/crypto/external/bsd/openssl/lib/libcrypto/arch/arm/aesv8-armx.S b/crypto/external/bsd/openssl/lib/libcrypto/arch/arm/aesv8-armx.S index 0aad14d8952..e492594ad32 100644 --- a/crypto/external/bsd/openssl/lib/libcrypto/arch/arm/aesv8-armx.S +++ b/crypto/external/bsd/openssl/lib/libcrypto/arch/arm/aesv8-armx.S @@ -109,7 +109,12 @@ aes_v8_set_encrypt_key: vtbl.8 d20,{q8},d4 vtbl.8 d21,{q8},d5 vext.8 q9,q0,q3,#12 +#ifdef __ARMEB__ + vst1.32 {q8},[r2]! + sub r2,r2,#8 +#else vst1.32 {d16},[r2]! +#endif .byte 0x00,0x43,0xf0,0xf3 @ aese q10,q0 subs r1,r1,#1 @@ -581,8 +586,11 @@ aes_v8_ctr32_encrypt_blocks: ldr r5,[r3,#240] ldr r8, [r4, #12] +#ifdef __ARMEB__ + vld1.8 {q0},[r4] +#else vld1.32 {q0},[r4] - +#endif vld1.32 {q8,q9},[r3] @ load key schedule... sub r5,r5,#4 mov r12,#16 @@ -598,17 +606,17 @@ aes_v8_ctr32_encrypt_blocks: #ifndef __ARMEB__ rev r8, r8 #endif - vorr q1,q0,q0 add r10, r8, #1 - vorr q10,q0,q0 - add r8, r8, #2 vorr q6,q0,q0 rev r10, r10 - vmov.32 d3[1],r10 + vmov.32 d13[1],r10 + add r8, r8, #2 + vorr q1,q6,q6 bls .Lctr32_tail rev r12, r8 + vmov.32 d13[1],r12 sub r2,r2,#3 @ bias - vmov.32 d21[1],r12 + vorr q10,q6,q6 b .Loop3x_ctr32 .align 4 @@ -635,11 +643,11 @@ aes_v8_ctr32_encrypt_blocks: .byte 0x20,0x23,0xb0,0xf3 @ aese q1,q8 .byte 0x82,0xa3,0xb0,0xf3 @ aesmc q5,q1 vld1.8 {q2},[r0]! - vorr q0,q6,q6 + add r9,r8,#1 .byte 0x20,0x43,0xf0,0xf3 @ aese q10,q8 .byte 0xa4,0x43,0xf0,0xf3 @ aesmc q10,q10 vld1.8 {q3},[r0]! - vorr q1,q6,q6 + rev r9,r9 .byte 0x22,0x83,0xb0,0xf3 @ aese q4,q9 .byte 0x88,0x83,0xb0,0xf3 @ aesmc q4,q4 .byte 0x22,0xa3,0xb0,0xf3 @ aese q5,q9 @@ -648,8 +656,6 @@ aes_v8_ctr32_encrypt_blocks: mov r7,r3 .byte 0x22,0x43,0xf0,0xf3 @ aese q10,q9 .byte 0xa4,0x23,0xf0,0xf3 @ aesmc q9,q10 - vorr q10,q6,q6 - add r9,r8,#1 .byte 0x28,0x83,0xb0,0xf3 @ aese q4,q12 .byte 0x88,0x83,0xb0,0xf3 @ aesmc q4,q4 .byte 0x28,0xa3,0xb0,0xf3 @ aese q5,q12 @@ -665,20 +671,22 @@ aes_v8_ctr32_encrypt_blocks: .byte 0x2a,0xa3,0xb0,0xf3 @ aese q5,q13 .byte 0x8a,0xa3,0xb0,0xf3 @ aesmc q5,q5 veor q11,q11,q7 - rev r9,r9 + vmov.32 d13[1], r9 .byte 0x2a,0x23,0xf0,0xf3 @ aese q9,q13 .byte 0xa2,0x23,0xf0,0xf3 @ aesmc q9,q9 - vmov.32 d1[1], r9 + vorr q0,q6,q6 rev r10,r10 .byte 0x2c,0x83,0xb0,0xf3 @ aese q4,q14 .byte 0x88,0x83,0xb0,0xf3 @ aesmc q4,q4 + vmov.32 d13[1], r10 + rev r12,r8 .byte 0x2c,0xa3,0xb0,0xf3 @ aese q5,q14 .byte 0x8a,0xa3,0xb0,0xf3 @ aesmc q5,q5 - vmov.32 d3[1], r10 - rev r12,r8 + vorr q1,q6,q6 + vmov.32 d13[1], r12 .byte 0x2c,0x23,0xf0,0xf3 @ aese q9,q14 .byte 0xa2,0x23,0xf0,0xf3 @ aesmc q9,q9 - vmov.32 d21[1], r12 + vorr q10,q6,q6 subs r2,r2,#3 .byte 0x2e,0x83,0xb0,0xf3 @ aese q4,q15 .byte 0x2e,0xa3,0xb0,0xf3 @ aese q5,q15 diff --git a/crypto/external/bsd/openssl/lib/libcrypto/arch/arm/chacha-armv8.S b/crypto/external/bsd/openssl/lib/libcrypto/arch/arm/chacha-armv8.S index 09a787f57bd..398a4e879df 100644 --- a/crypto/external/bsd/openssl/lib/libcrypto/arch/arm/chacha-armv8.S +++ b/crypto/external/bsd/openssl/lib/libcrypto/arch/arm/chacha-armv8.S @@ -4,6 +4,7 @@ .text +.hidden OPENSSL_armcap_P .align 5 .Lsigma: diff --git a/crypto/external/bsd/openssl/lib/libcrypto/arch/arm/crypto.inc b/crypto/external/bsd/openssl/lib/libcrypto/arch/arm/crypto.inc index 5d4049955e9..529d35bdc36 100644 --- a/crypto/external/bsd/openssl/lib/libcrypto/arch/arm/crypto.inc +++ b/crypto/external/bsd/openssl/lib/libcrypto/arch/arm/crypto.inc @@ -3,7 +3,7 @@ CPUID_SRCS += armv4cpuid.S armcap.c armv4-mont.S armv4-gf2m.S CPUID = yes CPPFLAGS += -DOPENSSL_BN_ASM_MONT -DOPENSSL_BN_ASM_GF2m -CRYPTOCPPFLAGS += -DOPENSSL_CPUID_OBJ +CPPFLAGS += -DOPENSSL_CPUID_OBJ .include "../../crypto.inc" diff --git a/crypto/external/bsd/openssl/lib/libcrypto/arch/arm/ecp_nistz256-armv4.S b/crypto/external/bsd/openssl/lib/libcrypto/arch/arm/ecp_nistz256-armv4.S index 3f871bf349e..47c892bb294 100644 --- a/crypto/external/bsd/openssl/lib/libcrypto/arch/arm/ecp_nistz256-armv4.S +++ b/crypto/external/bsd/openssl/lib/libcrypto/arch/arm/ecp_nistz256-armv4.S @@ -3851,9 +3851,9 @@ ecp_nistz256_point_add: ldr r14,[sp,#32*18+12] @ ~is_equal(S1,S2) mvn r10,r10 @ -1/0 -> 0/-1 mvn r12,r12 @ -1/0 -> 0/-1 - orr r11,r10 - orr r11,r12 - orrs r11,r14 @ set flags + orr r11,r11,r10 + orr r11,r11,r12 + orrs r11,r11,r14 @ set flags @ if(~is_equal(U1,U2) | in1infty | in2infty | ~is_equal(S1,S2)) bne .Ladd_proceed diff --git a/crypto/external/bsd/openssl/lib/libcrypto/arch/arm/modes.inc b/crypto/external/bsd/openssl/lib/libcrypto/arch/arm/modes.inc index f0ef1b8b179..4bcf98f3301 100644 --- a/crypto/external/bsd/openssl/lib/libcrypto/arch/arm/modes.inc +++ b/crypto/external/bsd/openssl/lib/libcrypto/arch/arm/modes.inc @@ -3,9 +3,8 @@ .PATH.S: ${.PARSEDIR} MODES_SRCS += ghash-armv4.S -.if ${ARM_MAX_ARCH} >= 8 MODES_SRCS += ghashv8-armx.S -.endif +AFLAGS.ghashv8-armx.S = -Wa,-march=armv8.4-a MODESCPPFLAGS = -DGHASH_ASM .include "../../modes.inc" diff --git a/crypto/external/bsd/openssl/lib/libcrypto/arch/arm/poly1305-armv8.S b/crypto/external/bsd/openssl/lib/libcrypto/arch/arm/poly1305-armv8.S index aaa75c119b5..f8016b87717 100644 --- a/crypto/external/bsd/openssl/lib/libcrypto/arch/arm/poly1305-armv8.S +++ b/crypto/external/bsd/openssl/lib/libcrypto/arch/arm/poly1305-armv8.S @@ -5,10 +5,14 @@ // forward "declarations" are required for Apple +.hidden OPENSSL_armcap_P +.globl poly1305_init +.hidden poly1305_init .globl poly1305_blocks +.hidden poly1305_blocks .globl poly1305_emit +.hidden poly1305_emit -.globl poly1305_init .type poly1305_init,%function .align 5 poly1305_init: @@ -796,8 +800,8 @@ poly1305_blocks_neon: st1 {v23.s}[0],[x0] .Lno_data_neon: -.inst 0xd50323bf // autiasp ldr x29,[sp],#80 +.inst 0xd50323bf // autiasp ret .size poly1305_blocks_neon,.-poly1305_blocks_neon diff --git a/crypto/external/bsd/openssl/lib/libcrypto/arch/arm/sha1-armv8.S b/crypto/external/bsd/openssl/lib/libcrypto/arch/arm/sha1-armv8.S index 17241c8ec09..d3393d739dc 100644 --- a/crypto/external/bsd/openssl/lib/libcrypto/arch/arm/sha1-armv8.S +++ b/crypto/external/bsd/openssl/lib/libcrypto/arch/arm/sha1-armv8.S @@ -4,6 +4,7 @@ .text +.hidden OPENSSL_armcap_P .globl sha1_block_data_order .type sha1_block_data_order,%function .align 6 @@ -1219,4 +1220,3 @@ sha1_block_armv8: .byte 83,72,65,49,32,98,108,111,99,107,32,116,114,97,110,115,102,111,114,109,32,102,111,114,32,65,82,77,118,56,44,32,67,82,89,80,84,79,71,65,77,83,32,98,121,32,60,97,112,112,114,111,64,111,112,101,110,115,115,108,46,111,114,103,62,0 .align 2 .align 2 -.comm OPENSSL_armcap_P,4,4 diff --git a/crypto/external/bsd/openssl/lib/libcrypto/arch/arm/sha512-armv8.S b/crypto/external/bsd/openssl/lib/libcrypto/arch/arm/sha512-armv8.S index 7a69fe101e2..fb965f5d575 100644 --- a/crypto/external/bsd/openssl/lib/libcrypto/arch/arm/sha512-armv8.S +++ b/crypto/external/bsd/openssl/lib/libcrypto/arch/arm/sha512-armv8.S @@ -60,6 +60,7 @@ .text +.hidden OPENSSL_armcap_P .globl sha256_block_data_order .type sha256_block_data_order,%function .align 6 @@ -2061,6 +2062,3 @@ sha256_block_neon: add sp,sp,#16*4+16 ret .size sha256_block_neon,.-sha256_block_neon -#ifndef __KERNEL__ -.comm OPENSSL_armcap_P,4,4 -#endif diff --git a/crypto/external/bsd/openssl/lib/libcrypto/arch/i386/crypto.inc b/crypto/external/bsd/openssl/lib/libcrypto/arch/i386/crypto.inc index dbaa2d74393..e489c2590ef 100644 --- a/crypto/external/bsd/openssl/lib/libcrypto/arch/i386/crypto.inc +++ b/crypto/external/bsd/openssl/lib/libcrypto/arch/i386/crypto.inc @@ -1,5 +1,5 @@ .PATH.S: ${.PARSEDIR} CPUID_SRCS = x86cpuid.S CPUID = yes -CRYPTOCPPFLAGS += -DOPENSSL_CPUID_OBJ +CPPFLAGS += -DOPENSSL_CPUID_OBJ .include "../../crypto.inc" diff --git a/crypto/external/bsd/openssl/lib/libcrypto/arch/mips/mips.S b/crypto/external/bsd/openssl/lib/libcrypto/arch/mips/mips.S index 318362017b7..2dc616c5763 100644 --- a/crypto/external/bsd/openssl/lib/libcrypto/arch/mips/mips.S +++ b/crypto/external/bsd/openssl/lib/libcrypto/arch/mips/mips.S @@ -316,9 +316,8 @@ bn_sqr_words_internal: sw $11,-2*4($4) .set noreorder - sw $10,-4($4) bgtz $8,.L_bn_sqr_words_loop - nop + sw $10,-4($4) beqz $6,.L_bn_sqr_words_return nop @@ -589,9 +588,8 @@ bn_div_3_words: lw $4,($7) move $10,$5 - lw $5,-4($7) bne $4,$6,bn_div_3_words_internal - nop + lw $5,-4($7) li $2,-1 jr $31 move $4,$2 diff --git a/crypto/external/bsd/openssl/lib/libcrypto/arch/mips/mips64.S b/crypto/external/bsd/openssl/lib/libcrypto/arch/mips/mips64.S index 7d190f2e460..0dddcb6fd84 100644 --- a/crypto/external/bsd/openssl/lib/libcrypto/arch/mips/mips64.S +++ b/crypto/external/bsd/openssl/lib/libcrypto/arch/mips/mips64.S @@ -313,9 +313,8 @@ bn_sqr_words_internal: sd $11,-2*8($4) .set noreorder - sd $10,-8($4) bgtz $8,.L_bn_sqr_words_loop - nop + sd $10,-8($4) beqz $6,.L_bn_sqr_words_return nop @@ -586,9 +585,8 @@ bn_div_3_words: ld $4,($7) move $10,$5 - ld $5,-8($7) bne $4,$6,bn_div_3_words_internal - nop + ld $5,-8($7) li $2,-1 jr $31 move $4,$2 diff --git a/crypto/external/bsd/openssl/lib/libcrypto/arch/powerpc/crypto.inc b/crypto/external/bsd/openssl/lib/libcrypto/arch/powerpc/crypto.inc index 60559ffd036..3b0ff2bf02c 100644 --- a/crypto/external/bsd/openssl/lib/libcrypto/arch/powerpc/crypto.inc +++ b/crypto/external/bsd/openssl/lib/libcrypto/arch/powerpc/crypto.inc @@ -1,4 +1,4 @@ CPUID_SRCS = ppccap.c ppccpuid.S -CRYPTOCPPFLAGS += -DOPENSSL_CPUID_OBJ +CPPFLAGS += -DOPENSSL_CPUID_OBJ CPUID = yes .include "../../crypto.inc" diff --git a/crypto/external/bsd/openssl/lib/libcrypto/arch/powerpc/keccak1600p8-ppc.S b/crypto/external/bsd/openssl/lib/libcrypto/arch/powerpc/keccak1600p8-ppc.S index bfe1fbb1bc9..61715a5ffd2 100644 --- a/crypto/external/bsd/openssl/lib/libcrypto/arch/powerpc/keccak1600p8-ppc.S +++ b/crypto/external/bsd/openssl/lib/libcrypto/arch/powerpc/keccak1600p8-ppc.S @@ -288,11 +288,11 @@ KeccakF1600: .byte 0,12,0x04,1,0x80,0,1,0 .long 0 -.globl SHA3_absorb_vsx -.type SHA3_absorb_vsx,@function +.globl SHA3_absorb +.type SHA3_absorb,@function .align 5 -SHA3_absorb_vsx: +SHA3_absorb: stwu 1,-232(1) li 10,39 li 11,55 @@ -590,11 +590,11 @@ SHA3_absorb_vsx: .byte 0,12,0x04,1,0x80,0,4,0 .long 0 -.globl SHA3_squeeze_vsx -.type SHA3_squeeze_vsx,@function +.globl SHA3_squeeze +.type SHA3_squeeze,@function .align 5 -SHA3_squeeze_vsx: +SHA3_squeeze: mflr 9 subi 4,4,1 addi 8,3,4 diff --git a/crypto/external/bsd/openssl/lib/libcrypto/arch/powerpc/sha.inc b/crypto/external/bsd/openssl/lib/libcrypto/arch/powerpc/sha.inc index 655f2e41fdd..ae4371f8c39 100644 --- a/crypto/external/bsd/openssl/lib/libcrypto/arch/powerpc/sha.inc +++ b/crypto/external/bsd/openssl/lib/libcrypto/arch/powerpc/sha.inc @@ -1,7 +1,6 @@ .PATH.S: ${.PARSEDIR} -SHA_SRCS = sha1-ppc.S keccak1600p8-ppc.S keccak1600.c -SHACPPFLAGS = -DSHA1_ASM -DKECCAK1600_ASM -KECCAKNI = yes +SHA_SRCS = sha1-ppc.S +SHACPPFLAGS = -DSHA1_ASM .if NOT_USING_SHAXXX_FROM_LIBC SHA_SRCS += sha512-ppc.S sha512p8-ppc.S SHA_SRCS += sha256-ppc.S sha256p8-ppc.S diff --git a/crypto/external/bsd/openssl/lib/libcrypto/arch/powerpc64/crypto.inc b/crypto/external/bsd/openssl/lib/libcrypto/arch/powerpc64/crypto.inc index 60559ffd036..3b0ff2bf02c 100644 --- a/crypto/external/bsd/openssl/lib/libcrypto/arch/powerpc64/crypto.inc +++ b/crypto/external/bsd/openssl/lib/libcrypto/arch/powerpc64/crypto.inc @@ -1,4 +1,4 @@ CPUID_SRCS = ppccap.c ppccpuid.S -CRYPTOCPPFLAGS += -DOPENSSL_CPUID_OBJ +CPPFLAGS += -DOPENSSL_CPUID_OBJ CPUID = yes .include "../../crypto.inc" diff --git a/crypto/external/bsd/openssl/lib/libcrypto/arch/powerpc64/keccak1600-ppc64.S b/crypto/external/bsd/openssl/lib/libcrypto/arch/powerpc64/keccak1600-ppc64.S index fdafbf9c92f..a1d60a6e805 100644 --- a/crypto/external/bsd/openssl/lib/libcrypto/arch/powerpc64/keccak1600-ppc64.S +++ b/crypto/external/bsd/openssl/lib/libcrypto/arch/powerpc64/keccak1600-ppc64.S @@ -317,16 +317,16 @@ dword_le_load: .long 0 -.globl SHA3_absorb_vsx -.type SHA3_absorb_vsx,@function +.globl SHA3_absorb +.type SHA3_absorb,@function .section ".opd","aw" .align 3 -SHA3_absorb_vsx: -.quad .SHA3_absorb_vsx,.TOC.@tocbase,0 +SHA3_absorb: +.quad .SHA3_absorb,.TOC.@tocbase,0 .previous .align 5 -.SHA3_absorb_vsx: +.SHA3_absorb: stdu 1,-272(1) mflr 0 std 14,128(1) @@ -546,16 +546,16 @@ SHA3_absorb_vsx: .byte 0,12,4,1,0x80,18,4,0 .long 0 -.globl SHA3_squeeze_vsx -.type SHA3_squeeze_vsx,@function +.globl SHA3_squeeze +.type SHA3_squeeze,@function .section ".opd","aw" .align 3 -SHA3_squeeze_vsx: -.quad .SHA3_squeeze_vsx,.TOC.@tocbase,0 +SHA3_squeeze: +.quad .SHA3_squeeze,.TOC.@tocbase,0 .previous .align 5 -.SHA3_squeeze_vsx: +.SHA3_squeeze: stdu 1,-80(1) mflr 0 std 28,48(1) diff --git a/crypto/external/bsd/openssl/lib/libcrypto/arch/powerpc64/keccak1600p8-ppc.S b/crypto/external/bsd/openssl/lib/libcrypto/arch/powerpc64/keccak1600p8-ppc.S index 9638e7a6c96..752c4d81c20 100644 --- a/crypto/external/bsd/openssl/lib/libcrypto/arch/powerpc64/keccak1600p8-ppc.S +++ b/crypto/external/bsd/openssl/lib/libcrypto/arch/powerpc64/keccak1600p8-ppc.S @@ -288,16 +288,16 @@ KeccakF1600: .byte 0,12,0x04,1,0x80,0,1,0 .long 0 -.globl SHA3_absorb_vsx -.type SHA3_absorb_vsx,@function +.globl SHA3_absorb +.type SHA3_absorb,@function .section ".opd","aw" .align 3 -SHA3_absorb_vsx: -.quad .SHA3_absorb_vsx,.TOC.@tocbase,0 +SHA3_absorb: +.quad .SHA3_absorb,.TOC.@tocbase,0 .previous .align 5 -.SHA3_absorb_vsx: +.SHA3_absorb: stdu 1,-256(1) li 10,63 li 11,79 @@ -595,16 +595,16 @@ SHA3_absorb_vsx: .byte 0,12,0x04,1,0x80,0,4,0 .long 0 -.globl SHA3_squeeze_vsx -.type SHA3_squeeze_vsx,@function +.globl SHA3_squeeze +.type SHA3_squeeze,@function .section ".opd","aw" .align 3 -SHA3_squeeze_vsx: -.quad .SHA3_squeeze_vsx,.TOC.@tocbase,0 +SHA3_squeeze: +.quad .SHA3_squeeze,.TOC.@tocbase,0 .previous .align 5 -.SHA3_squeeze_vsx: +.SHA3_squeeze: mflr 9 subi 4,4,1 addi 8,3,4 diff --git a/crypto/external/bsd/openssl/lib/libcrypto/arch/powerpc64/sha.inc b/crypto/external/bsd/openssl/lib/libcrypto/arch/powerpc64/sha.inc index bed20818040..ae4371f8c39 100644 --- a/crypto/external/bsd/openssl/lib/libcrypto/arch/powerpc64/sha.inc +++ b/crypto/external/bsd/openssl/lib/libcrypto/arch/powerpc64/sha.inc @@ -1,7 +1,6 @@ .PATH.S: ${.PARSEDIR} -SHA_SRCS = sha1-ppc.S keccak1600-ppc64.S keccak1600.c -SHACPPFLAGS = -DSHA1_ASM -DKECCAK1600_ASM -KECCAKNI = yes +SHA_SRCS = sha1-ppc.S +SHACPPFLAGS = -DSHA1_ASM .if NOT_USING_SHAXXX_FROM_LIBC SHA_SRCS += sha512-ppc.S sha512p8-ppc.S SHA_SRCS += sha256-ppc.S sha256p8-ppc.S diff --git a/crypto/external/bsd/openssl/lib/libcrypto/arch/sparc/aes.inc b/crypto/external/bsd/openssl/lib/libcrypto/arch/sparc/aes.inc index b4cca4f2d48..dc70c2ee6ce 100644 --- a/crypto/external/bsd/openssl/lib/libcrypto/arch/sparc/aes.inc +++ b/crypto/external/bsd/openssl/lib/libcrypto/arch/sparc/aes.inc @@ -1,8 +1,9 @@ .if ${MACHINE} == "sparc64" .PATH.S: ${.PARSEDIR} -AES_SRCS = aes_core.c aes_cbc.c aes-sparcv9.S aest4-sparcv9.S +AES_SRCS = aes_core.c aes_cbc.c aes-sparcv9.S aest4-sparcv9.S aesfx-sparcv9.S AESCPPFLAGS = -DAES_ASM AFLAGS.aes-sparcv9.S+= -Wa,-Av9 AFLAGS.aest4-sparcv9.S+= -Wa,-Av9 +AFLAGS.aesfx-sparcv9.S+= -Wa,-Av9 .endif .include "../../aes.inc" diff --git a/crypto/external/bsd/openssl/lib/libcrypto/arch/sparc/bn.inc b/crypto/external/bsd/openssl/lib/libcrypto/arch/sparc/bn.inc index bdc02c7c56c..5585e16031c 100644 --- a/crypto/external/bsd/openssl/lib/libcrypto/arch/sparc/bn.inc +++ b/crypto/external/bsd/openssl/lib/libcrypto/arch/sparc/bn.inc @@ -1,6 +1,5 @@ -.if ${MACHINE} == "sparc64" .PATH.S: ${.PARSEDIR} # XXX bn-sparcv8plus.S doesn't work well. why? BN_SRCS = bn-sparcv8.S -.endif +AFLAGS.bn-sparcv8.S+= -Wa,-Av9 .include "../../bn.inc" diff --git a/crypto/external/bsd/openssl/lib/libcrypto/arch/sparc/crypto.inc b/crypto/external/bsd/openssl/lib/libcrypto/arch/sparc/crypto.inc index 8039a5bee8b..f1da01e62b3 100644 --- a/crypto/external/bsd/openssl/lib/libcrypto/arch/sparc/crypto.inc +++ b/crypto/external/bsd/openssl/lib/libcrypto/arch/sparc/crypto.inc @@ -1,10 +1,9 @@ .PATH.S: ${.PARSEDIR} .PATH.c: ${.PARSEDIR} CPUID = yes -CPUID_SRCS += sparccpuid.S sparccap.c -CRYPTOCPPFLAGS += -DOPENSSL_CPUID_OBJ +CPUID_SRCS += sparccpuid.S sparcv9cap.c +CPPFLAGS += -DOPENSSL_CPUID_OBJ -.if ${MACHINE} == "sparc64" CPUID_SRCS += sparcv9-mont.S sparcv9a-mont.S CPUID_SRCS += sparct4-mont.S vis3-mont.S #CPPFLAGS += -DOPENSSL_BN_ASM_MONT @@ -12,6 +11,5 @@ AFLAGS.sparcv9-mont.S+= -Wa,-Av9 AFLAGS.sparcv9a-mont.S+= -Wa,-Av9a AFLAGS.sparct4-mont.S+= -Wa,-Av9a AFLAGS.vis3-mont.S+= -Wa,-Av9a -.endif .include "../../crypto.inc" diff --git a/crypto/external/bsd/openssl/lib/libcrypto/arch/sparc/modes.inc b/crypto/external/bsd/openssl/lib/libcrypto/arch/sparc/modes.inc index 80a7a956ded..6975427ee93 100644 --- a/crypto/external/bsd/openssl/lib/libcrypto/arch/sparc/modes.inc +++ b/crypto/external/bsd/openssl/lib/libcrypto/arch/sparc/modes.inc @@ -1,7 +1,5 @@ -.if ${MACHINE} == "sparc64" .PATH.S: ${.PARSEDIR} MODES_SRCS = ghash-sparcv9.S MODESCPPFLAGS = -DGHASH_ASM AFLAGS.ghash-sparcv9.S+= -Wa,-Av9 -.endif .include "../../modes.inc" diff --git a/crypto/external/bsd/openssl/lib/libcrypto/arch/sparc64/crypto.inc b/crypto/external/bsd/openssl/lib/libcrypto/arch/sparc64/crypto.inc index 56c022c0037..f28bcfee539 100644 --- a/crypto/external/bsd/openssl/lib/libcrypto/arch/sparc64/crypto.inc +++ b/crypto/external/bsd/openssl/lib/libcrypto/arch/sparc64/crypto.inc @@ -1,7 +1,7 @@ .PATH.S: ${.PARSEDIR} CPUID_SRCS = sparcv9cap.c sparccpuid.S sparcv9-mont.S sparcv9a-mont.S CPUID_SRCS += sparct4-mont.S vis3-mont.S -CRYPTOCPPFLAGS += -DOPENSSL_CPUID_OBJ CPUID = yes #CPPFLAGS += -DOPENSSL_BN_ASM_MONT +CPPFLAGS += -DOPENSSL_CPUID_OBJ .include "../../crypto.inc" diff --git a/crypto/external/bsd/openssl/lib/libcrypto/arch/vax/crypto.inc b/crypto/external/bsd/openssl/lib/libcrypto/arch/vax/crypto.inc index 68a141bafd8..991b52cc288 100644 --- a/crypto/external/bsd/openssl/lib/libcrypto/arch/vax/crypto.inc +++ b/crypto/external/bsd/openssl/lib/libcrypto/arch/vax/crypto.inc @@ -1,6 +1,6 @@ .PATH.S: ${.PARSEDIR} #CRYPTO_SRCS += libc-memequal.c -#CRYPTOCPPFLAGS += -DOPENSSL_CPUID_OBJ +#CPPFLAGS += -DOPENSSL_CPUID_OBJ .include "../../crypto.inc" diff --git a/crypto/external/bsd/openssl/lib/libcrypto/arch/x86_64/crypto.inc b/crypto/external/bsd/openssl/lib/libcrypto/arch/x86_64/crypto.inc index ef858b30861..3ea4bed846e 100644 --- a/crypto/external/bsd/openssl/lib/libcrypto/arch/x86_64/crypto.inc +++ b/crypto/external/bsd/openssl/lib/libcrypto/arch/x86_64/crypto.inc @@ -1,5 +1,5 @@ .PATH.S: ${.PARSEDIR} CPUID_SRCS = x86_64cpuid.S CPUID = yes -CRYPTOCPPFLAGS += -DOPENSSL_CPUID_OBJ +CPPFLAGS += -DOPENSSL_CPUID_OBJ .include "../../crypto.inc" diff --git a/crypto/external/bsd/openssl/lib/libcrypto/crypto.inc b/crypto/external/bsd/openssl/lib/libcrypto/crypto.inc index 773a23bfbc3..e6fa1c34e4d 100644 --- a/crypto/external/bsd/openssl/lib/libcrypto/crypto.inc +++ b/crypto/external/bsd/openssl/lib/libcrypto/crypto.inc @@ -1,4 +1,4 @@ -# $NetBSD: crypto.inc,v 1.9 2018/12/08 22:35:44 christos Exp $ +# $NetBSD: crypto.inc,v 1.9.2.1 2021/03/28 18:21:44 martin Exp $ # # @(#) Copyright (c) 1995 Simon J. Gerraty # @@ -37,7 +37,6 @@ SRCS += ${CRYPTO_SRCS} CRYPTO_SRCS+= mem_clr.c .else CRYPTO_SRCS+= ${CPUID_SRCS} -#CRYPTOCPPFLAGS=-DOPENSSL_CPUID_OBJ .endif CRYPTOCPPFLAGS+=-DOPENSSL_NO_STATIC_ENGINE diff --git a/crypto/external/bsd/openssl/lib/libcrypto/evp.inc b/crypto/external/bsd/openssl/lib/libcrypto/evp.inc index 6a975660ac6..cf59bd32688 100644 --- a/crypto/external/bsd/openssl/lib/libcrypto/evp.inc +++ b/crypto/external/bsd/openssl/lib/libcrypto/evp.inc @@ -1,4 +1,4 @@ -# $NetBSD: evp.inc,v 1.8.2.1 2020/05/13 12:24:10 martin Exp $ +# $NetBSD: evp.inc,v 1.8.2.2 2021/03/28 18:21:44 martin Exp $ # # @(#) Copyright (c) 1995 Simon J. Gerraty # @@ -85,7 +85,6 @@ EVP_AES_SRCS = e_aes.c .for cryptosrc in ${EVP_AES_SRCS} CPPFLAGS.${cryptosrc} += ${AESCPPFLAGS} -CPPFLAGS.${cryptosrc} += ${CRYPTOCPPFLAGS} .endfor CPPFLAGS.e_aes.c += -I${OPENSSLSRC}/crypto/modes diff --git a/crypto/external/bsd/openssl/lib/libcrypto/man/ADMISSIONS.3 b/crypto/external/bsd/openssl/lib/libcrypto/man/ADMISSIONS.3 index 4717236f79b..b2a4377981e 100644 --- a/crypto/external/bsd/openssl/lib/libcrypto/man/ADMISSIONS.3 +++ b/crypto/external/bsd/openssl/lib/libcrypto/man/ADMISSIONS.3 @@ -1,6 +1,6 @@ -.\" $NetBSD: ADMISSIONS.3,v 1.2 2019/06/09 18:44:30 christos Exp $ +.\" $NetBSD: ADMISSIONS.3,v 1.2.4.1 2021/03/28 18:21:46 martin Exp $ .\" -.\" Automatically generated by Pod::Man 4.10 (Pod::Simple 3.35) +.\" Automatically generated by Pod::Man 4.11 (Pod::Simple 3.35) .\" .\" Standard preamble: .\" ======================================================================== @@ -135,7 +135,7 @@ .\" ======================================================================== .\" .IX Title "ADMISSIONS 3" -.TH ADMISSIONS 3 "2018-09-23" "1.1.1c" "OpenSSL" +.TH ADMISSIONS 3 "2020-01-23" "1.1.1i" "OpenSSL" .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. .if n .ad l @@ -271,7 +271,7 @@ The functions free any existing value and set the pointer to the specified value. .PP The \fB\s-1ADMISSION\s0\fR type has an authority name, authority object, and a -stack of \fB\s-1PROFSSION_INFO\s0\fR items. +stack of \fB\s-1PROFESSION_INFO\s0\fR items. The \fBADMISSIONS_get0_admissionAuthority()\fR, \fBADMISSIONS_get0_namingAuthority()\fR, and \fBADMISSIONS_get0_professionInfos()\fR functions return pointers to those values within the object. @@ -307,7 +307,7 @@ structure and must not be freed. \&\fBd2i_X509\fR\|(3), .SH "COPYRIGHT" .IX Header "COPYRIGHT" -Copyright 2017\-2018 The OpenSSL Project Authors. All Rights Reserved. +Copyright 2017\-2019 The OpenSSL Project Authors. All Rights Reserved. .PP Licensed under the OpenSSL license (the \*(L"License\*(R"). You may not use this file except in compliance with the License. You can obtain a copy diff --git a/crypto/external/bsd/openssl/lib/libcrypto/man/ASN1_INTEGER_get_int64.3 b/crypto/external/bsd/openssl/lib/libcrypto/man/ASN1_INTEGER_get_int64.3 index e3d111deb98..0a108167c19 100644 --- a/crypto/external/bsd/openssl/lib/libcrypto/man/ASN1_INTEGER_get_int64.3 +++ b/crypto/external/bsd/openssl/lib/libcrypto/man/ASN1_INTEGER_get_int64.3 @@ -1,6 +1,6 @@ -.\" $NetBSD: ASN1_INTEGER_get_int64.3,v 1.3 2019/06/09 18:44:30 christos Exp $ +.\" $NetBSD: ASN1_INTEGER_get_int64.3,v 1.3.2.1 2021/03/28 18:21:46 martin Exp $ .\" -.\" Automatically generated by Pod::Man 4.10 (Pod::Simple 3.35) +.\" Automatically generated by Pod::Man 4.11 (Pod::Simple 3.35) .\" .\" Standard preamble: .\" ======================================================================== @@ -135,7 +135,7 @@ .\" ======================================================================== .\" .IX Title "ASN1_INTEGER_get_int64 3" -.TH ASN1_INTEGER_get_int64 3 "2019-03-12" "1.1.1c" "OpenSSL" +.TH ASN1_INTEGER_get_int64 3 "2020-12-10" "1.1.1i" "OpenSSL" .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. .if n .ad l @@ -163,10 +163,10 @@ libcrypto, -lcrypto \& ASN1_INTEGER *BN_to_ASN1_INTEGER(const BIGNUM *bn, ASN1_INTEGER *ai); \& BIGNUM *ASN1_INTEGER_to_BN(const ASN1_INTEGER *ai, BIGNUM *bn); \& -\& int ASN1_ENUMERATED_get_int64(int64_t *pr, const ASN1_INTEGER *a); +\& int ASN1_ENUMERATED_get_int64(int64_t *pr, const ASN1_ENUMERATED *a); \& long ASN1_ENUMERATED_get(const ASN1_ENUMERATED *a); \& -\& int ASN1_ENUMERATED_set_int64(ASN1_INTEGER *a, int64_t r); +\& int ASN1_ENUMERATED_set_int64(ASN1_ENUMERATED *a, int64_t r); \& int ASN1_ENUMERATED_set(ASN1_ENUMERATED *a, long v); \& \& ASN1_ENUMERATED *BN_to_ASN1_ENUMERATED(BIGNUM *bn, ASN1_ENUMERATED *ai); @@ -221,7 +221,7 @@ instead. .IX Header "NOTES" In general an \fB\s-1ASN1_INTEGER\s0\fR or \fB\s-1ASN1_ENUMERATED\s0\fR type can contain an integer of almost arbitrary size and so cannot always be represented by a C -\&\fBint64_t\fR type. However in many cases (for example version numbers) they +\&\fBint64_t\fR type. However, in many cases (for example version numbers) they represent small integers which can be more easily manipulated if converted to an appropriate C integer type. .SH "BUGS" @@ -258,7 +258,7 @@ of \s-1NULL\s0 if an error occurs. They can fail if the passed type is incorrect were added in OpenSSL 1.1.0. .SH "COPYRIGHT" .IX Header "COPYRIGHT" -Copyright 2015\-2018 The OpenSSL Project Authors. All Rights Reserved. +Copyright 2015\-2020 The OpenSSL Project Authors. All Rights Reserved. .PP Licensed under the OpenSSL license (the \*(L"License\*(R"). You may not use this file except in compliance with the License. You can obtain a copy diff --git a/crypto/external/bsd/openssl/lib/libcrypto/man/ASN1_ITEM_lookup.3 b/crypto/external/bsd/openssl/lib/libcrypto/man/ASN1_ITEM_lookup.3 index c55cc0f19cc..c5f28a5fc59 100644 --- a/crypto/external/bsd/openssl/lib/libcrypto/man/ASN1_ITEM_lookup.3 +++ b/crypto/external/bsd/openssl/lib/libcrypto/man/ASN1_ITEM_lookup.3 @@ -1,6 +1,6 @@ -.\" $NetBSD: ASN1_ITEM_lookup.3,v 1.2 2019/06/09 18:44:30 christos Exp $ +.\" $NetBSD: ASN1_ITEM_lookup.3,v 1.2.4.1 2021/03/28 18:21:46 martin Exp $ .\" -.\" Automatically generated by Pod::Man 4.10 (Pod::Simple 3.35) +.\" Automatically generated by Pod::Man 4.11 (Pod::Simple 3.35) .\" .\" Standard preamble: .\" ======================================================================== @@ -135,7 +135,7 @@ .\" ======================================================================== .\" .IX Title "ASN1_ITEM_lookup 3" -.TH ASN1_ITEM_lookup 3 "2018-09-23" "1.1.1c" "OpenSSL" +.TH ASN1_ITEM_lookup 3 "2018-09-23" "1.1.1i" "OpenSSL" .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. .if n .ad l diff --git a/crypto/external/bsd/openssl/lib/libcrypto/man/ASN1_OBJECT_new.3 b/crypto/external/bsd/openssl/lib/libcrypto/man/ASN1_OBJECT_new.3 index 661287cd775..137422c7419 100644 --- a/crypto/external/bsd/openssl/lib/libcrypto/man/ASN1_OBJECT_new.3 +++ b/crypto/external/bsd/openssl/lib/libcrypto/man/ASN1_OBJECT_new.3 @@ -1,6 +1,6 @@ -.\" $NetBSD: ASN1_OBJECT_new.3,v 1.19 2019/06/09 18:44:30 christos Exp $ +.\" $NetBSD: ASN1_OBJECT_new.3,v 1.19.2.1 2021/03/28 18:21:46 martin Exp $ .\" -.\" Automatically generated by Pod::Man 4.10 (Pod::Simple 3.35) +.\" Automatically generated by Pod::Man 4.11 (Pod::Simple 3.35) .\" .\" Standard preamble: .\" ======================================================================== @@ -135,7 +135,7 @@ .\" ======================================================================== .\" .IX Title "ASN1_OBJECT_new 3" -.TH ASN1_OBJECT_new 3 "2018-09-23" "1.1.1c" "OpenSSL" +.TH ASN1_OBJECT_new 3 "2018-09-23" "1.1.1i" "OpenSSL" .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. .if n .ad l diff --git a/crypto/external/bsd/openssl/lib/libcrypto/man/ASN1_STRING_TABLE_add.3 b/crypto/external/bsd/openssl/lib/libcrypto/man/ASN1_STRING_TABLE_add.3 index 020a5e7f018..cd03552708f 100644 --- a/crypto/external/bsd/openssl/lib/libcrypto/man/ASN1_STRING_TABLE_add.3 +++ b/crypto/external/bsd/openssl/lib/libcrypto/man/ASN1_STRING_TABLE_add.3 @@ -1,6 +1,6 @@ -.\" $NetBSD: ASN1_STRING_TABLE_add.3,v 1.2 2019/06/09 18:44:30 christos Exp $ +.\" $NetBSD: ASN1_STRING_TABLE_add.3,v 1.2.4.1 2021/03/28 18:21:46 martin Exp $ .\" -.\" Automatically generated by Pod::Man 4.10 (Pod::Simple 3.35) +.\" Automatically generated by Pod::Man 4.11 (Pod::Simple 3.35) .\" .\" Standard preamble: .\" ======================================================================== @@ -135,7 +135,7 @@ .\" ======================================================================== .\" .IX Title "ASN1_STRING_TABLE_add 3" -.TH ASN1_STRING_TABLE_add 3 "2018-09-23" "1.1.1c" "OpenSSL" +.TH ASN1_STRING_TABLE_add 3 "2018-09-23" "1.1.1i" "OpenSSL" .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. .if n .ad l diff --git a/crypto/external/bsd/openssl/lib/libcrypto/man/ASN1_STRING_length.3 b/crypto/external/bsd/openssl/lib/libcrypto/man/ASN1_STRING_length.3 index 8c53d51d6ac..f5fed1b5326 100644 --- a/crypto/external/bsd/openssl/lib/libcrypto/man/ASN1_STRING_length.3 +++ b/crypto/external/bsd/openssl/lib/libcrypto/man/ASN1_STRING_length.3 @@ -1,6 +1,6 @@ -.\" $NetBSD: ASN1_STRING_length.3,v 1.19 2019/06/09 18:44:30 christos Exp $ +.\" $NetBSD: ASN1_STRING_length.3,v 1.19.2.1 2021/03/28 18:21:46 martin Exp $ .\" -.\" Automatically generated by Pod::Man 4.10 (Pod::Simple 3.35) +.\" Automatically generated by Pod::Man 4.11 (Pod::Simple 3.35) .\" .\" Standard preamble: .\" ======================================================================== @@ -135,7 +135,7 @@ .\" ======================================================================== .\" .IX Title "ASN1_STRING_length 3" -.TH ASN1_STRING_length 3 "2018-09-23" "1.1.1c" "OpenSSL" +.TH ASN1_STRING_length 3 "2020-12-10" "1.1.1i" "OpenSSL" .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. .if n .ad l @@ -212,7 +212,7 @@ In general it cannot be assumed that the data returned by \fBASN1_STRING_data()\ is null terminated or does not contain embedded nulls. The actual format of the data will depend on the actual string type itself: for example for an IA5String the data will be \s-1ASCII,\s0 for a BMPString two bytes per -character in big endian format, and for an UTF8String it will be in \s-1UTF8\s0 format. +character in big endian format, and for a UTF8String it will be in \s-1UTF8\s0 format. .PP Similar care should be take to ensure the data is in the correct format when calling \fBASN1_STRING_set()\fR. @@ -240,7 +240,7 @@ negative value if an error occurred. \&\fBERR_get_error\fR\|(3) .SH "COPYRIGHT" .IX Header "COPYRIGHT" -Copyright 2002\-2018 The OpenSSL Project Authors. All Rights Reserved. +Copyright 2002\-2020 The OpenSSL Project Authors. All Rights Reserved. .PP Licensed under the OpenSSL license (the \*(L"License\*(R"). You may not use this file except in compliance with the License. You can obtain a copy diff --git a/crypto/external/bsd/openssl/lib/libcrypto/man/ASN1_STRING_new.3 b/crypto/external/bsd/openssl/lib/libcrypto/man/ASN1_STRING_new.3 index b596c9a9c0f..f4ecf52ec4c 100644 --- a/crypto/external/bsd/openssl/lib/libcrypto/man/ASN1_STRING_new.3 +++ b/crypto/external/bsd/openssl/lib/libcrypto/man/ASN1_STRING_new.3 @@ -1,6 +1,6 @@ -.\" $NetBSD: ASN1_STRING_new.3,v 1.19 2019/06/09 18:44:30 christos Exp $ +.\" $NetBSD: ASN1_STRING_new.3,v 1.19.2.1 2021/03/28 18:21:46 martin Exp $ .\" -.\" Automatically generated by Pod::Man 4.10 (Pod::Simple 3.35) +.\" Automatically generated by Pod::Man 4.11 (Pod::Simple 3.35) .\" .\" Standard preamble: .\" ======================================================================== @@ -135,7 +135,7 @@ .\" ======================================================================== .\" .IX Title "ASN1_STRING_new 3" -.TH ASN1_STRING_new 3 "2018-09-23" "1.1.1c" "OpenSSL" +.TH ASN1_STRING_new 3 "2018-09-23" "1.1.1i" "OpenSSL" .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. .if n .ad l diff --git a/crypto/external/bsd/openssl/lib/libcrypto/man/ASN1_STRING_print_ex.3 b/crypto/external/bsd/openssl/lib/libcrypto/man/ASN1_STRING_print_ex.3 index 0af50d6873b..c98437a4bc2 100644 --- a/crypto/external/bsd/openssl/lib/libcrypto/man/ASN1_STRING_print_ex.3 +++ b/crypto/external/bsd/openssl/lib/libcrypto/man/ASN1_STRING_print_ex.3 @@ -1,6 +1,6 @@ -.\" $NetBSD: ASN1_STRING_print_ex.3,v 1.19 2019/06/09 18:44:30 christos Exp $ +.\" $NetBSD: ASN1_STRING_print_ex.3,v 1.19.2.1 2021/03/28 18:21:46 martin Exp $ .\" -.\" Automatically generated by Pod::Man 4.10 (Pod::Simple 3.35) +.\" Automatically generated by Pod::Man 4.11 (Pod::Simple 3.35) .\" .\" Standard preamble: .\" ======================================================================== @@ -135,7 +135,7 @@ .\" ======================================================================== .\" .IX Title "ASN1_STRING_print_ex 3" -.TH ASN1_STRING_print_ex 3 "2018-09-23" "1.1.1c" "OpenSSL" +.TH ASN1_STRING_print_ex 3 "2018-09-23" "1.1.1i" "OpenSSL" .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. .if n .ad l diff --git a/crypto/external/bsd/openssl/lib/libcrypto/man/ASN1_TIME_set.3 b/crypto/external/bsd/openssl/lib/libcrypto/man/ASN1_TIME_set.3 index 5f07cce9790..887d3150bfa 100644 --- a/crypto/external/bsd/openssl/lib/libcrypto/man/ASN1_TIME_set.3 +++ b/crypto/external/bsd/openssl/lib/libcrypto/man/ASN1_TIME_set.3 @@ -1,6 +1,6 @@ -.\" $NetBSD: ASN1_TIME_set.3,v 1.4 2019/06/09 18:44:30 christos Exp $ +.\" $NetBSD: ASN1_TIME_set.3,v 1.4.2.1 2021/03/28 18:21:46 martin Exp $ .\" -.\" Automatically generated by Pod::Man 4.10 (Pod::Simple 3.35) +.\" Automatically generated by Pod::Man 4.11 (Pod::Simple 3.35) .\" .\" Standard preamble: .\" ======================================================================== @@ -135,7 +135,7 @@ .\" ======================================================================== .\" .IX Title "ASN1_TIME_set 3" -.TH ASN1_TIME_set 3 "2019-06-09" "1.1.1c" "OpenSSL" +.TH ASN1_TIME_set 3 "2020-12-10" "1.1.1i" "OpenSSL" .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. .if n .ad l @@ -258,7 +258,7 @@ one or both (depending on the time difference) of \fB*pday\fR and \fB*psec\fR will be positive. If \fBto\fR represents a time earlier than \fBfrom\fR then one or both of \fB*pday\fR and \fB*psec\fR will be negative. If \fBto\fR and \fBfrom\fR represent the same time then \fB*pday\fR and \fB*psec\fR will both be zero. -If both \fB*pday\fR and \fB*psec\fR are non-zero they will always have the same +If both \fB*pday\fR and \fB*psec\fR are nonzero they will always have the same sign. The value of \fB*psec\fR will always be less than the number of seconds in a day. If \fBfrom\fR or \fBto\fR is \s-1NULL\s0 the current time is used. .PP @@ -306,7 +306,7 @@ format. .SH "BUGS" .IX Header "BUGS" \&\fBASN1_TIME_print()\fR, \fBASN1_UTCTIME_print()\fR and \fBASN1_GENERALIZEDTIME_print()\fR -do not print out the time zone: it either prints out \*(L"\s-1GMT\*(R"\s0 or nothing. But all +do not print out the timezone: it either prints out \*(L"\s-1GMT\*(R"\s0 or nothing. But all certificates complying with \s-1RFC5280\s0 et al use \s-1GMT\s0 anyway. .PP Use the \fBASN1_TIME_normalize()\fR function to normalize the time value before @@ -387,7 +387,7 @@ The \fBASN1_TIME_cmp_time_t()\fR function was added in OpenSSL 1.1.1. The \fBASN1_TIME_compare()\fR function was added in OpenSSL 1.1.1. .SH "COPYRIGHT" .IX Header "COPYRIGHT" -Copyright 2015\-2019 The OpenSSL Project Authors. All Rights Reserved. +Copyright 2015\-2020 The OpenSSL Project Authors. All Rights Reserved. .PP Licensed under the OpenSSL license (the \*(L"License\*(R"). You may not use this file except in compliance with the License. You can obtain a copy diff --git a/crypto/external/bsd/openssl/lib/libcrypto/man/ASN1_TYPE_get.3 b/crypto/external/bsd/openssl/lib/libcrypto/man/ASN1_TYPE_get.3 index 7c236a4c07f..3281d703abe 100644 --- a/crypto/external/bsd/openssl/lib/libcrypto/man/ASN1_TYPE_get.3 +++ b/crypto/external/bsd/openssl/lib/libcrypto/man/ASN1_TYPE_get.3 @@ -1,6 +1,6 @@ -.\" $NetBSD: ASN1_TYPE_get.3,v 1.3 2019/06/09 18:44:30 christos Exp $ +.\" $NetBSD: ASN1_TYPE_get.3,v 1.3.2.1 2021/03/28 18:21:46 martin Exp $ .\" -.\" Automatically generated by Pod::Man 4.10 (Pod::Simple 3.35) +.\" Automatically generated by Pod::Man 4.11 (Pod::Simple 3.35) .\" .\" Standard preamble: .\" ======================================================================== @@ -135,7 +135,7 @@ .\" ======================================================================== .\" .IX Title "ASN1_TYPE_get 3" -.TH ASN1_TYPE_get 3 "2018-09-23" "1.1.1c" "OpenSSL" +.TH ASN1_TYPE_get 3 "2020-12-10" "1.1.1i" "OpenSSL" .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. .if n .ad l @@ -174,7 +174,7 @@ up after the call. \&\fBASN1_TYPE_set1()\fR sets the value of \fBa\fR to \fBtype\fR a copy of \fBvalue\fR. .PP \&\fBASN1_TYPE_cmp()\fR compares \s-1ASN.1\s0 types \fBa\fR and \fBb\fR and returns 0 if -they are identical and non-zero otherwise. +they are identical and nonzero otherwise. .PP \&\fBASN1_TYPE_unpack_sequence()\fR attempts to parse the \s-1SEQUENCE\s0 present in \&\fBt\fR using the \s-1ASN.1\s0 structure \fBit\fR. If successful it returns a pointer @@ -202,14 +202,14 @@ length octets). .PP \&\fBASN1_TYPE_cmp()\fR may not return zero if two types are equivalent but have different encodings. For example the single content octet of the boolean \s-1TRUE\s0 -value under \s-1BER\s0 can have any non-zero encoding but \fBASN1_TYPE_cmp()\fR will +value under \s-1BER\s0 can have any nonzero encoding but \fBASN1_TYPE_cmp()\fR will only return zero if the values are the same. .PP If either or both of the parameters passed to \fBASN1_TYPE_cmp()\fR is \s-1NULL\s0 the -return value is non-zero. Technically if both parameters are \s-1NULL\s0 the two -types could be absent \s-1OPTIONAL\s0 fields and so should match, however passing +return value is nonzero. Technically if both parameters are \s-1NULL\s0 the two +types could be absent \s-1OPTIONAL\s0 fields and so should match, however, passing \&\s-1NULL\s0 values could also indicate a programming error (for example an -unparseable type which returns \s-1NULL\s0) for types which do \fBnot\fR match. So +unparsable type which returns \s-1NULL\s0) for types which do \fBnot\fR match. So applications should handle the case of two absent values separately. .SH "RETURN VALUES" .IX Header "RETURN VALUES" @@ -219,7 +219,7 @@ applications should handle the case of two absent values separately. .PP \&\fBASN1_TYPE_set1()\fR returns 1 for success and 0 for failure. .PP -\&\fBASN1_TYPE_cmp()\fR returns 0 if the types are identical and non-zero otherwise. +\&\fBASN1_TYPE_cmp()\fR returns 0 if the types are identical and nonzero otherwise. .PP \&\fBASN1_TYPE_unpack_sequence()\fR returns a pointer to an \s-1ASN.1\s0 structure or \&\s-1NULL\s0 on failure. @@ -228,7 +228,7 @@ applications should handle the case of two absent values separately. \&\s-1NULL\s0 on failure. .SH "COPYRIGHT" .IX Header "COPYRIGHT" -Copyright 2015\-2016 The OpenSSL Project Authors. All Rights Reserved. +Copyright 2015\-2020 The OpenSSL Project Authors. All Rights Reserved. .PP Licensed under the OpenSSL license (the \*(L"License\*(R"). You may not use this file except in compliance with the License. You can obtain a copy diff --git a/crypto/external/bsd/openssl/lib/libcrypto/man/ASN1_generate_nconf.3 b/crypto/external/bsd/openssl/lib/libcrypto/man/ASN1_generate_nconf.3 index 5bb80e395df..5bdee28c5ea 100644 --- a/crypto/external/bsd/openssl/lib/libcrypto/man/ASN1_generate_nconf.3 +++ b/crypto/external/bsd/openssl/lib/libcrypto/man/ASN1_generate_nconf.3 @@ -1,6 +1,6 @@ -.\" $NetBSD: ASN1_generate_nconf.3,v 1.19 2019/06/09 18:44:30 christos Exp $ +.\" $NetBSD: ASN1_generate_nconf.3,v 1.19.2.1 2021/03/28 18:21:46 martin Exp $ .\" -.\" Automatically generated by Pod::Man 4.10 (Pod::Simple 3.35) +.\" Automatically generated by Pod::Man 4.11 (Pod::Simple 3.35) .\" .\" Standard preamble: .\" ======================================================================== @@ -135,7 +135,7 @@ .\" ======================================================================== .\" .IX Title "ASN1_generate_nconf 3" -.TH ASN1_generate_nconf 3 "2019-06-09" "1.1.1c" "OpenSSL" +.TH ASN1_generate_nconf 3 "2019-06-09" "1.1.1i" "OpenSSL" .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. .if n .ad l diff --git a/crypto/external/bsd/openssl/lib/libcrypto/man/ASYNC_WAIT_CTX_new.3 b/crypto/external/bsd/openssl/lib/libcrypto/man/ASYNC_WAIT_CTX_new.3 index acefe7011ef..8ca7e0e0cdb 100644 --- a/crypto/external/bsd/openssl/lib/libcrypto/man/ASYNC_WAIT_CTX_new.3 +++ b/crypto/external/bsd/openssl/lib/libcrypto/man/ASYNC_WAIT_CTX_new.3 @@ -1,6 +1,6 @@ -.\" $NetBSD: ASYNC_WAIT_CTX_new.3,v 1.3 2019/06/09 18:44:30 christos Exp $ +.\" $NetBSD: ASYNC_WAIT_CTX_new.3,v 1.3.2.1 2021/03/28 18:21:46 martin Exp $ .\" -.\" Automatically generated by Pod::Man 4.10 (Pod::Simple 3.35) +.\" Automatically generated by Pod::Man 4.11 (Pod::Simple 3.35) .\" .\" Standard preamble: .\" ======================================================================== @@ -135,7 +135,7 @@ .\" ======================================================================== .\" .IX Title "ASYNC_WAIT_CTX_new 3" -.TH ASYNC_WAIT_CTX_new 3 "2019-03-12" "1.1.1c" "OpenSSL" +.TH ASYNC_WAIT_CTX_new 3 "2020-12-10" "1.1.1i" "OpenSSL" .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. .if n .ad l @@ -190,7 +190,7 @@ job in \fB*fd\fR. The number of file descriptors returned will be stored in \&\fB*numfds\fR. It is the caller's responsibility to ensure that sufficient memory has been allocated in \fB*fd\fR to receive all the file descriptors. Calling \&\fBASYNC_WAIT_CTX_get_all_fds()\fR with a \s-1NULL\s0 \fBfd\fR value will return no file -descriptors but will still populate \fB*numfds\fR. Therefore application code is +descriptors but will still populate \fB*numfds\fR. Therefore, application code is typically expected to call this function twice: once to get the number of fds, and then again when sufficient memory has been allocated. If only one asynchronous engine is being used then normally this call will only ever return @@ -255,7 +255,7 @@ success or 0 on error. On Windows platforms the openssl/async.h header is dependent on some of the types customarily made available by including windows.h. The application developer is likely to require control over when the latter -is included, commonly as one of the first included headers. Therefore +is included, commonly as one of the first included headers. Therefore, it is defined as an application developer's responsibility to include windows.h prior to async.h. .SH "SEE ALSO" @@ -269,7 +269,7 @@ windows.h prior to async.h. were added in OpenSSL 1.1.0. .SH "COPYRIGHT" .IX Header "COPYRIGHT" -Copyright 2016 The OpenSSL Project Authors. All Rights Reserved. +Copyright 2016\-2020 The OpenSSL Project Authors. All Rights Reserved. .PP Licensed under the OpenSSL license (the \*(L"License\*(R"). You may not use this file except in compliance with the License. You can obtain a copy diff --git a/crypto/external/bsd/openssl/lib/libcrypto/man/ASYNC_start_job.3 b/crypto/external/bsd/openssl/lib/libcrypto/man/ASYNC_start_job.3 index e337ebb9007..1513aabd75d 100644 --- a/crypto/external/bsd/openssl/lib/libcrypto/man/ASYNC_start_job.3 +++ b/crypto/external/bsd/openssl/lib/libcrypto/man/ASYNC_start_job.3 @@ -1,6 +1,6 @@ -.\" $NetBSD: ASYNC_start_job.3,v 1.3 2019/06/09 18:44:30 christos Exp $ +.\" $NetBSD: ASYNC_start_job.3,v 1.3.2.1 2021/03/28 18:21:46 martin Exp $ .\" -.\" Automatically generated by Pod::Man 4.10 (Pod::Simple 3.35) +.\" Automatically generated by Pod::Man 4.11 (Pod::Simple 3.35) .\" .\" Standard preamble: .\" ======================================================================== @@ -135,7 +135,7 @@ .\" ======================================================================== .\" .IX Title "ASYNC_start_job 3" -.TH ASYNC_start_job 3 "2019-03-12" "1.1.1c" "OpenSSL" +.TH ASYNC_start_job 3 "2020-12-10" "1.1.1i" "OpenSSL" .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. .if n .ad l @@ -297,11 +297,11 @@ otherwise. On Windows platforms the openssl/async.h header is dependent on some of the types customarily made available by including windows.h. The application developer is likely to require control over when the latter -is included, commonly as one of the first included headers. Therefore +is included, commonly as one of the first included headers. Therefore, it is defined as an application developer's responsibility to include windows.h prior to async.h. -.SH "EXAMPLE" -.IX Header "EXAMPLE" +.SH "EXAMPLES" +.IX Header "EXAMPLES" The following example demonstrates how to use most of the core async APIs: .PP .Vb 7 @@ -452,7 +452,7 @@ ASYNC_start_job, ASYNC_pause_job, ASYNC_get_current_job, \fBASYNC_get_wait_ctx() added in OpenSSL 1.1.0. .SH "COPYRIGHT" .IX Header "COPYRIGHT" -Copyright 2015\-2016 The OpenSSL Project Authors. All Rights Reserved. +Copyright 2015\-2020 The OpenSSL Project Authors. All Rights Reserved. .PP Licensed under the OpenSSL license (the \*(L"License\*(R"). You may not use this file except in compliance with the License. You can obtain a copy diff --git a/crypto/external/bsd/openssl/lib/libcrypto/man/BF_encrypt.3 b/crypto/external/bsd/openssl/lib/libcrypto/man/BF_encrypt.3 index a9e979da2b5..71ed4281ace 100644 --- a/crypto/external/bsd/openssl/lib/libcrypto/man/BF_encrypt.3 +++ b/crypto/external/bsd/openssl/lib/libcrypto/man/BF_encrypt.3 @@ -1,6 +1,6 @@ -.\" $NetBSD: BF_encrypt.3,v 1.3 2019/06/09 18:44:30 christos Exp $ +.\" $NetBSD: BF_encrypt.3,v 1.3.2.1 2021/03/28 18:21:46 martin Exp $ .\" -.\" Automatically generated by Pod::Man 4.10 (Pod::Simple 3.35) +.\" Automatically generated by Pod::Man 4.11 (Pod::Simple 3.35) .\" .\" Standard preamble: .\" ======================================================================== @@ -135,7 +135,7 @@ .\" ======================================================================== .\" .IX Title "BF_encrypt 3" -.TH BF_encrypt 3 "2018-09-23" "1.1.1c" "OpenSSL" +.TH BF_encrypt 3 "2020-12-10" "1.1.1i" "OpenSSL" .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. .if n .ad l @@ -201,7 +201,7 @@ recipient needs to know what it was initialized with, or it won't be able to decrypt. Some programs and protocols simplify this, like \s-1SSH,\s0 where \&\fBivec\fR is simply initialized to zero. \&\fBBF_cbc_encrypt()\fR operates on data that is a multiple of 8 bytes long, while -\&\fBBF_cfb64_encrypt()\fR and \fBBF_ofb64_encrypt()\fR are used to encrypt an variable +\&\fBBF_cfb64_encrypt()\fR and \fBBF_ofb64_encrypt()\fR are used to encrypt a variable number of bytes (the amount does not have to be an exact multiple of 8). The purpose of the latter two is to simulate stream ciphers, and therefore, they need the parameter \fBnum\fR, which is a pointer to an integer where the current @@ -246,7 +246,7 @@ functions directly. \&\fBdes_modes\fR\|(7) .SH "COPYRIGHT" .IX Header "COPYRIGHT" -Copyright 2000\-2016 The OpenSSL Project Authors. All Rights Reserved. +Copyright 2000\-2020 The OpenSSL Project Authors. All Rights Reserved. .PP Licensed under the OpenSSL license (the \*(L"License\*(R"). You may not use this file except in compliance with the License. You can obtain a copy diff --git a/crypto/external/bsd/openssl/lib/libcrypto/man/BIO_ADDR.3 b/crypto/external/bsd/openssl/lib/libcrypto/man/BIO_ADDR.3 index 21b4e125135..714cd3ea2ab 100644 --- a/crypto/external/bsd/openssl/lib/libcrypto/man/BIO_ADDR.3 +++ b/crypto/external/bsd/openssl/lib/libcrypto/man/BIO_ADDR.3 @@ -1,6 +1,6 @@ -.\" $NetBSD: BIO_ADDR.3,v 1.3 2019/06/09 18:44:30 christos Exp $ +.\" $NetBSD: BIO_ADDR.3,v 1.3.2.1 2021/03/28 18:21:46 martin Exp $ .\" -.\" Automatically generated by Pod::Man 4.10 (Pod::Simple 3.35) +.\" Automatically generated by Pod::Man 4.11 (Pod::Simple 3.35) .\" .\" Standard preamble: .\" ======================================================================== @@ -135,7 +135,7 @@ .\" ======================================================================== .\" .IX Title "BIO_ADDR 3" -.TH BIO_ADDR 3 "2018-09-23" "1.1.1c" "OpenSSL" +.TH BIO_ADDR 3 "2020-12-10" "1.1.1i" "OpenSSL" .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. .if n .ad l @@ -183,7 +183,7 @@ with routines that will fill it with information, such as \&\fBBIO_ADDR_clear()\fR clears any data held within the provided \fB\s-1BIO_ADDR\s0\fR and sets it back to an uninitialised state. .PP -\&\fBBIO_ADDR_rawmake()\fR takes a protocol \fBfamily\fR, an byte array of +\&\fBBIO_ADDR_rawmake()\fR takes a protocol \fBfamily\fR, a byte array of size \fBwherelen\fR with an address in network byte order pointed at by \fBwhere\fR and a port number in network byte order in \fBport\fR (except for the \fB\s-1AF_UNIX\s0\fR protocol family, where \fBport\fR is meaningless and @@ -252,7 +252,7 @@ information they should return isn't available. \&\fBBIO_connect\fR\|(3), \fBBIO_s_connect\fR\|(3) .SH "COPYRIGHT" .IX Header "COPYRIGHT" -Copyright 2016 The OpenSSL Project Authors. All Rights Reserved. +Copyright 2016\-2020 The OpenSSL Project Authors. All Rights Reserved. .PP Licensed under the OpenSSL license (the \*(L"License\*(R"). You may not use this file except in compliance with the License. You can obtain a copy diff --git a/crypto/external/bsd/openssl/lib/libcrypto/man/BIO_ADDRINFO.3 b/crypto/external/bsd/openssl/lib/libcrypto/man/BIO_ADDRINFO.3 index 6fd0f4f2c27..e51324ff659 100644 --- a/crypto/external/bsd/openssl/lib/libcrypto/man/BIO_ADDRINFO.3 +++ b/crypto/external/bsd/openssl/lib/libcrypto/man/BIO_ADDRINFO.3 @@ -1,6 +1,6 @@ -.\" $NetBSD: BIO_ADDRINFO.3,v 1.3 2019/06/09 18:44:30 christos Exp $ +.\" $NetBSD: BIO_ADDRINFO.3,v 1.3.2.1 2021/03/28 18:21:46 martin Exp $ .\" -.\" Automatically generated by Pod::Man 4.10 (Pod::Simple 3.35) +.\" Automatically generated by Pod::Man 4.11 (Pod::Simple 3.35) .\" .\" Standard preamble: .\" ======================================================================== @@ -135,7 +135,7 @@ .\" ======================================================================== .\" .IX Title "BIO_ADDRINFO 3" -.TH BIO_ADDRINFO 3 "2018-09-23" "1.1.1c" "OpenSSL" +.TH BIO_ADDRINFO 3 "2020-12-10" "1.1.1i" "OpenSSL" .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. .if n .ad l @@ -233,7 +233,7 @@ information they should return isn't available. .IX Header "NOTES" The \fBBIO_lookup_ex()\fR implementation uses the platform provided \fBgetaddrinfo()\fR function. On Linux it is known that specifying 0 for the protocol will not -return any \s-1SCTP\s0 based addresses when calling \fBgetaddrinfo()\fR. Therefore if an \s-1SCTP\s0 +return any \s-1SCTP\s0 based addresses when calling \fBgetaddrinfo()\fR. Therefore, if an \s-1SCTP\s0 address is required then the \fBprotocol\fR parameter to \fBBIO_lookup_ex()\fR should be explicitly set to \s-1IPPROTO_SCTP.\s0 The same may be true on other platforms. .SH "HISTORY" @@ -241,7 +241,7 @@ explicitly set to \s-1IPPROTO_SCTP.\s0 The same may be true on other platforms. The \fBBIO_lookup_ex()\fR function was added in OpenSSL 1.1.1. .SH "COPYRIGHT" .IX Header "COPYRIGHT" -Copyright 2016\-2017 The OpenSSL Project Authors. All Rights Reserved. +Copyright 2016\-2020 The OpenSSL Project Authors. All Rights Reserved. .PP Licensed under the OpenSSL license (the \*(L"License\*(R"). You may not use this file except in compliance with the License. You can obtain a copy diff --git a/crypto/external/bsd/openssl/lib/libcrypto/man/BIO_connect.3 b/crypto/external/bsd/openssl/lib/libcrypto/man/BIO_connect.3 index 984587f3e19..0113c2cd996 100644 --- a/crypto/external/bsd/openssl/lib/libcrypto/man/BIO_connect.3 +++ b/crypto/external/bsd/openssl/lib/libcrypto/man/BIO_connect.3 @@ -1,6 +1,6 @@ -.\" $NetBSD: BIO_connect.3,v 1.3 2019/06/09 18:44:30 christos Exp $ +.\" $NetBSD: BIO_connect.3,v 1.3.2.1 2021/03/28 18:21:46 martin Exp $ .\" -.\" Automatically generated by Pod::Man 4.10 (Pod::Simple 3.35) +.\" Automatically generated by Pod::Man 4.11 (Pod::Simple 3.35) .\" .\" Standard preamble: .\" ======================================================================== @@ -135,7 +135,7 @@ .\" ======================================================================== .\" .IX Title "BIO_connect 3" -.TH BIO_connect 3 "2019-06-09" "1.1.1c" "OpenSSL" +.TH BIO_connect 3 "2020-12-10" "1.1.1i" "OpenSSL" .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. .if n .ad l @@ -165,7 +165,7 @@ but is present for future use. .PP \&\fBBIO_bind()\fR binds the source address and service to a socket and may be useful before calling \fBBIO_connect()\fR. The options may include -\&\fB\s-1BIO_SOCK_REUSADDR\s0\fR, which is described in \*(L"\s-1FLAGS\*(R"\s0 below. +\&\fB\s-1BIO_SOCK_REUSEADDR\s0\fR, which is described in \*(L"\s-1FLAGS\*(R"\s0 below. .PP \&\fBBIO_connect()\fR connects \fBsock\fR to the address and service given by \&\fBaddr\fR. Connection \fBoptions\fR may be zero or any combination of @@ -192,7 +192,7 @@ on the accepted socket. The flags are described in \*(L"\s-1FLAGS\*(R"\s0 below Enables regular sending of keep-alive messages. .IP "\s-1BIO_SOCK_NONBLOCK\s0" 4 .IX Item "BIO_SOCK_NONBLOCK" -Sets the socket to non-blocking mode. +Sets the socket to nonblocking mode. .IP "\s-1BIO_SOCK_NODELAY\s0" 4 .IX Item "BIO_SOCK_NODELAY" Corresponds to \fB\s-1TCP_NODELAY\s0\fR, and disables the Nagle algorithm. With @@ -237,7 +237,7 @@ error. Use the functions described above instead. .SH "COPYRIGHT" .IX Header "COPYRIGHT" -Copyright 2016\-2019 The OpenSSL Project Authors. All Rights Reserved. +Copyright 2016\-2020 The OpenSSL Project Authors. All Rights Reserved. .PP Licensed under the OpenSSL license (the \*(L"License\*(R"). You may not use this file except in compliance with the License. You can obtain a copy diff --git a/crypto/external/bsd/openssl/lib/libcrypto/man/BIO_ctrl.3 b/crypto/external/bsd/openssl/lib/libcrypto/man/BIO_ctrl.3 index 7648a4dd7ed..56964934914 100644 --- a/crypto/external/bsd/openssl/lib/libcrypto/man/BIO_ctrl.3 +++ b/crypto/external/bsd/openssl/lib/libcrypto/man/BIO_ctrl.3 @@ -1,6 +1,6 @@ -.\" $NetBSD: BIO_ctrl.3,v 1.19 2019/06/09 18:44:30 christos Exp $ +.\" $NetBSD: BIO_ctrl.3,v 1.19.2.1 2021/03/28 18:21:46 martin Exp $ .\" -.\" Automatically generated by Pod::Man 4.10 (Pod::Simple 3.35) +.\" Automatically generated by Pod::Man 4.11 (Pod::Simple 3.35) .\" .\" Standard preamble: .\" ======================================================================== @@ -135,7 +135,7 @@ .\" ======================================================================== .\" .IX Title "BIO_ctrl 3" -.TH BIO_ctrl 3 "2018-09-23" "1.1.1c" "OpenSSL" +.TH BIO_ctrl 3 "2020-12-10" "1.1.1i" "OpenSSL" .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. .if n .ad l @@ -248,7 +248,7 @@ Filter BIOs if they do not internally handle a particular \fBBIO_ctrl()\fR operation usually pass the operation to the next \s-1BIO\s0 in the chain. This often means there is no need to locate the required \s-1BIO\s0 for a particular operation, it can be called on a chain and it will -be automatically passed to the relevant \s-1BIO.\s0 However this can cause +be automatically passed to the relevant \s-1BIO.\s0 However, this can cause unexpected results: for example no current filter BIOs implement \&\fBBIO_seek()\fR, but this may still succeed if the chain ends in a \s-1FILE\s0 or file descriptor \s-1BIO.\s0 @@ -263,7 +263,7 @@ supported, if an error occurred, if \s-1EOF\s0 has not been reached and in the case of \fBBIO_seek()\fR on a file \s-1BIO\s0 for a successful operation. .SH "COPYRIGHT" .IX Header "COPYRIGHT" -Copyright 2000\-2016 The OpenSSL Project Authors. All Rights Reserved. +Copyright 2000\-2020 The OpenSSL Project Authors. All Rights Reserved. .PP Licensed under the OpenSSL license (the \*(L"License\*(R"). You may not use this file except in compliance with the License. You can obtain a copy diff --git a/crypto/external/bsd/openssl/lib/libcrypto/man/BIO_f_base64.3 b/crypto/external/bsd/openssl/lib/libcrypto/man/BIO_f_base64.3 index baff2f0d188..6cc37db0ae9 100644 --- a/crypto/external/bsd/openssl/lib/libcrypto/man/BIO_f_base64.3 +++ b/crypto/external/bsd/openssl/lib/libcrypto/man/BIO_f_base64.3 @@ -1,6 +1,6 @@ -.\" $NetBSD: BIO_f_base64.3,v 1.19 2019/06/09 18:44:31 christos Exp $ +.\" $NetBSD: BIO_f_base64.3,v 1.19.2.1 2021/03/28 18:21:46 martin Exp $ .\" -.\" Automatically generated by Pod::Man 4.10 (Pod::Simple 3.35) +.\" Automatically generated by Pod::Man 4.11 (Pod::Simple 3.35) .\" .\" Standard preamble: .\" ======================================================================== @@ -135,7 +135,7 @@ .\" ======================================================================== .\" .IX Title "BIO_f_base64 3" -.TH BIO_f_base64 3 "2018-09-23" "1.1.1c" "OpenSSL" +.TH BIO_f_base64 3 "2018-09-23" "1.1.1i" "OpenSSL" .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. .if n .ad l diff --git a/crypto/external/bsd/openssl/lib/libcrypto/man/BIO_f_buffer.3 b/crypto/external/bsd/openssl/lib/libcrypto/man/BIO_f_buffer.3 index 9df99b00c80..f444d3a15d3 100644 --- a/crypto/external/bsd/openssl/lib/libcrypto/man/BIO_f_buffer.3 +++ b/crypto/external/bsd/openssl/lib/libcrypto/man/BIO_f_buffer.3 @@ -1,6 +1,6 @@ -.\" $NetBSD: BIO_f_buffer.3,v 1.19 2019/06/09 18:44:31 christos Exp $ +.\" $NetBSD: BIO_f_buffer.3,v 1.19.2.1 2021/03/28 18:21:46 martin Exp $ .\" -.\" Automatically generated by Pod::Man 4.10 (Pod::Simple 3.35) +.\" Automatically generated by Pod::Man 4.11 (Pod::Simple 3.35) .\" .\" Standard preamble: .\" ======================================================================== @@ -135,7 +135,7 @@ .\" ======================================================================== .\" .IX Title "BIO_f_buffer 3" -.TH BIO_f_buffer 3 "2018-09-23" "1.1.1c" "OpenSSL" +.TH BIO_f_buffer 3 "2020-03-22" "1.1.1i" "OpenSSL" .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. .if n .ad l @@ -189,10 +189,20 @@ is expanded. .IX Header "NOTES" These functions, other than \fBBIO_f_buffer()\fR, are implemented as macros. .PP -Buffering BIOs implement \fBBIO_gets()\fR by using \fBBIO_read_ex()\fR operations on the -next \s-1BIO\s0 in the chain. By prepending a buffering \s-1BIO\s0 to a chain it is therefore -possible to provide \fBBIO_gets()\fR functionality if the following BIOs do not -support it (for example \s-1SSL\s0 BIOs). +Buffering BIOs implement \fBBIO_read_ex()\fR and \fBBIO_gets()\fR by using +\&\fBBIO_read_ex()\fR operations on the next \s-1BIO\s0 in the chain and storing the +result in an internal buffer, from which bytes are given back to the +caller as appropriate for the call; a \fBBIO_gets()\fR is guaranteed to give +the caller a whole line, and \fBBIO_read_ex()\fR is guaranteed to give the +caller the number of bytes it asks for, unless there's an error or end +of communication is reached in the next \s-1BIO.\s0 By prepending a +buffering \s-1BIO\s0 to a chain it is therefore possible to provide +\&\fBBIO_gets()\fR or exact size \fBBIO_read_ex()\fR functionality if the following +BIOs do not support it. +.PP +Do not add more than one \fBBIO_f_buffer()\fR to a \s-1BIO\s0 chain. The result of +doing so will force a full read of the size of the internal buffer of +the top \fBBIO_f_buffer()\fR, which is 4 KiB at a minimum. .PP Data is only written to the next \s-1BIO\s0 in the chain when the write buffer fills or when \fBBIO_flush()\fR is called. It is therefore important to call \fBBIO_flush()\fR @@ -219,7 +229,7 @@ there was an error. \&\fBBIO_ctrl\fR\|(3). .SH "COPYRIGHT" .IX Header "COPYRIGHT" -Copyright 2000\-2016 The OpenSSL Project Authors. All Rights Reserved. +Copyright 2000\-2020 The OpenSSL Project Authors. All Rights Reserved. .PP Licensed under the OpenSSL license (the \*(L"License\*(R"). You may not use this file except in compliance with the License. You can obtain a copy diff --git a/crypto/external/bsd/openssl/lib/libcrypto/man/BIO_f_cipher.3 b/crypto/external/bsd/openssl/lib/libcrypto/man/BIO_f_cipher.3 index 034f7e4d36a..87137aaf814 100644 --- a/crypto/external/bsd/openssl/lib/libcrypto/man/BIO_f_cipher.3 +++ b/crypto/external/bsd/openssl/lib/libcrypto/man/BIO_f_cipher.3 @@ -1,6 +1,6 @@ -.\" $NetBSD: BIO_f_cipher.3,v 1.19 2019/06/09 18:44:31 christos Exp $ +.\" $NetBSD: BIO_f_cipher.3,v 1.19.2.1 2021/03/28 18:21:46 martin Exp $ .\" -.\" Automatically generated by Pod::Man 4.10 (Pod::Simple 3.35) +.\" Automatically generated by Pod::Man 4.11 (Pod::Simple 3.35) .\" .\" Standard preamble: .\" ======================================================================== @@ -135,7 +135,7 @@ .\" ======================================================================== .\" .IX Title "BIO_f_cipher 3" -.TH BIO_f_cipher 3 "2018-09-23" "1.1.1c" "OpenSSL" +.TH BIO_f_cipher 3 "2018-09-23" "1.1.1i" "OpenSSL" .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. .if n .ad l diff --git a/crypto/external/bsd/openssl/lib/libcrypto/man/BIO_f_md.3 b/crypto/external/bsd/openssl/lib/libcrypto/man/BIO_f_md.3 index f42a39f2822..d59de6da647 100644 --- a/crypto/external/bsd/openssl/lib/libcrypto/man/BIO_f_md.3 +++ b/crypto/external/bsd/openssl/lib/libcrypto/man/BIO_f_md.3 @@ -1,6 +1,6 @@ -.\" $NetBSD: BIO_f_md.3,v 1.19 2019/06/09 18:44:31 christos Exp $ +.\" $NetBSD: BIO_f_md.3,v 1.19.2.1 2021/03/28 18:21:46 martin Exp $ .\" -.\" Automatically generated by Pod::Man 4.10 (Pod::Simple 3.35) +.\" Automatically generated by Pod::Man 4.11 (Pod::Simple 3.35) .\" .\" Standard preamble: .\" ======================================================================== @@ -135,7 +135,7 @@ .\" ======================================================================== .\" .IX Title "BIO_f_md 3" -.TH BIO_f_md 3 "2018-09-23" "1.1.1c" "OpenSSL" +.TH BIO_f_md 3 "2018-09-23" "1.1.1i" "OpenSSL" .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. .if n .ad l diff --git a/crypto/external/bsd/openssl/lib/libcrypto/man/BIO_f_null.3 b/crypto/external/bsd/openssl/lib/libcrypto/man/BIO_f_null.3 index 5d8e4820c60..729e3e5ce90 100644 --- a/crypto/external/bsd/openssl/lib/libcrypto/man/BIO_f_null.3 +++ b/crypto/external/bsd/openssl/lib/libcrypto/man/BIO_f_null.3 @@ -1,6 +1,6 @@ -.\" $NetBSD: BIO_f_null.3,v 1.19 2019/06/09 18:44:31 christos Exp $ +.\" $NetBSD: BIO_f_null.3,v 1.19.2.1 2021/03/28 18:21:46 martin Exp $ .\" -.\" Automatically generated by Pod::Man 4.10 (Pod::Simple 3.35) +.\" Automatically generated by Pod::Man 4.11 (Pod::Simple 3.35) .\" .\" Standard preamble: .\" ======================================================================== @@ -135,7 +135,7 @@ .\" ======================================================================== .\" .IX Title "BIO_f_null 3" -.TH BIO_f_null 3 "2018-09-23" "1.1.1c" "OpenSSL" +.TH BIO_f_null 3 "2018-09-23" "1.1.1i" "OpenSSL" .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. .if n .ad l diff --git a/crypto/external/bsd/openssl/lib/libcrypto/man/BIO_f_ssl.3 b/crypto/external/bsd/openssl/lib/libcrypto/man/BIO_f_ssl.3 index c087269dd93..912f51c833e 100644 --- a/crypto/external/bsd/openssl/lib/libcrypto/man/BIO_f_ssl.3 +++ b/crypto/external/bsd/openssl/lib/libcrypto/man/BIO_f_ssl.3 @@ -1,6 +1,6 @@ -.\" $NetBSD: BIO_f_ssl.3,v 1.19 2019/06/09 18:44:31 christos Exp $ +.\" $NetBSD: BIO_f_ssl.3,v 1.19.2.1 2021/03/28 18:21:46 martin Exp $ .\" -.\" Automatically generated by Pod::Man 4.10 (Pod::Simple 3.35) +.\" Automatically generated by Pod::Man 4.11 (Pod::Simple 3.35) .\" .\" Standard preamble: .\" ======================================================================== @@ -135,7 +135,7 @@ .\" ======================================================================== .\" .IX Title "BIO_f_ssl 3" -.TH BIO_f_ssl 3 "2018-09-23" "1.1.1c" "OpenSSL" +.TH BIO_f_ssl 3 "2020-01-23" "1.1.1i" "OpenSSL" .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. .if n .ad l @@ -266,9 +266,24 @@ processing. \&\fBBIO_set_ssl()\fR, \fBBIO_get_ssl()\fR, \fBBIO_set_ssl_mode()\fR, \&\fBBIO_set_ssl_renegotiate_bytes()\fR, \fBBIO_set_ssl_renegotiate_timeout()\fR, \&\fBBIO_get_num_renegotiates()\fR, and \fBBIO_do_handshake()\fR are implemented as macros. -.SH "EXAMPLE" -.IX Header "EXAMPLE" -This \s-1SSL/TLS\s0 client example, attempts to retrieve a page from an +.SH "RETURN VALUES" +.IX Header "RETURN VALUES" +\&\fBBIO_f_ssl()\fR returns the \s-1SSL\s0 \fB\s-1BIO_METHOD\s0\fR structure. +.PP +\&\fBBIO_set_ssl()\fR, \fBBIO_get_ssl()\fR, \fBBIO_set_ssl_mode()\fR, \fBBIO_set_ssl_renegotiate_bytes()\fR, +\&\fBBIO_set_ssl_renegotiate_timeout()\fR and \fBBIO_get_num_renegotiates()\fR return 1 on +success or a value which is less than or equal to 0 if an error occurred. +.PP +\&\fBBIO_new_ssl()\fR, \fBBIO_new_ssl_connect()\fR and \fBBIO_new_buffer_ssl_connect()\fR return +a valid \fB\s-1BIO\s0\fR structure on success or \fB\s-1NULL\s0\fR if an error occurred. +.PP +\&\fBBIO_ssl_copy_session_id()\fR returns 1 on success or 0 on error. +.PP +\&\fBBIO_do_handshake()\fR returns 1 if the connection was established successfully. +A zero or negative value is returned if the connection could not be established. +.SH "EXAMPLES" +.IX Header "EXAMPLES" +This \s-1SSL/TLS\s0 client example attempts to retrieve a page from an \&\s-1SSL/TLS\s0 web server. The I/O routines are identical to those of the unencrypted example in \fBBIO_s_connect\fR\|(3). .PP @@ -411,21 +426,6 @@ a client and also echoes the request to standard output. \& BIO_flush(sbio); \& BIO_free_all(sbio); .Ve -.SH "RETURN VALUES" -.IX Header "RETURN VALUES" -\&\fBBIO_f_ssl()\fR returns the \s-1SSL\s0 \fB\s-1BIO_METHOD\s0\fR structure. -.PP -\&\fBBIO_set_ssl()\fR, \fBBIO_get_ssl()\fR, \fBBIO_set_ssl_mode()\fR, \fBBIO_set_ssl_renegotiate_bytes()\fR, -\&\fBBIO_set_ssl_renegotiate_timeout()\fR and \fBBIO_get_num_renegotiates()\fR return 1 on -success or a value which is less than or equal to 0 if an error occurred. -.PP -\&\fBBIO_new_ssl()\fR, \fBBIO_new_ssl_connect()\fR and \fBBIO_new_buffer_ssl_connect()\fR return -a valid \fB\s-1BIO\s0\fR structure on success or \fB\s-1NULL\s0\fR if an error occurred. -.PP -\&\fBBIO_ssl_copy_session_id()\fR returns 1 on success or 0 on error. -.PP -\&\fBBIO_do_handshake()\fR returns 1 if the connection was established successfully. -A zero or negative value is returned if the connection could not be established. .SH "HISTORY" .IX Header "HISTORY" In OpenSSL before 1.0.0 the \fBBIO_pop()\fR call was handled incorrectly, @@ -436,7 +436,7 @@ included workarounds for this bug (e.g. freeing BIOs more than once) should be modified to handle this fix or they may free up an already freed \s-1BIO.\s0 .SH "COPYRIGHT" .IX Header "COPYRIGHT" -Copyright 2000\-2018 The OpenSSL Project Authors. All Rights Reserved. +Copyright 2000\-2019 The OpenSSL Project Authors. All Rights Reserved. .PP Licensed under the OpenSSL license (the \*(L"License\*(R"). You may not use this file except in compliance with the License. You can obtain a copy diff --git a/crypto/external/bsd/openssl/lib/libcrypto/man/BIO_find_type.3 b/crypto/external/bsd/openssl/lib/libcrypto/man/BIO_find_type.3 index ed2b6e75d76..f14e7100334 100644 --- a/crypto/external/bsd/openssl/lib/libcrypto/man/BIO_find_type.3 +++ b/crypto/external/bsd/openssl/lib/libcrypto/man/BIO_find_type.3 @@ -1,6 +1,6 @@ -.\" $NetBSD: BIO_find_type.3,v 1.19 2019/06/09 18:44:31 christos Exp $ +.\" $NetBSD: BIO_find_type.3,v 1.19.2.1 2021/03/28 18:21:46 martin Exp $ .\" -.\" Automatically generated by Pod::Man 4.10 (Pod::Simple 3.35) +.\" Automatically generated by Pod::Man 4.11 (Pod::Simple 3.35) .\" .\" Standard preamble: .\" ======================================================================== @@ -135,7 +135,7 @@ .\" ======================================================================== .\" .IX Title "BIO_find_type 3" -.TH BIO_find_type 3 "2018-09-23" "1.1.1c" "OpenSSL" +.TH BIO_find_type 3 "2020-01-23" "1.1.1i" "OpenSSL" .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. .if n .ad l @@ -179,8 +179,8 @@ certain type. \&\fBBIO_next()\fR returns the next \s-1BIO\s0 in a chain. .PP \&\fBBIO_method_type()\fR returns the type of the \s-1BIO\s0 \fBb\fR. -.SH "EXAMPLE" -.IX Header "EXAMPLE" +.SH "EXAMPLES" +.IX Header "EXAMPLES" Traverse a chain looking for digest BIOs: .PP .Vb 1 @@ -199,7 +199,7 @@ Traverse a chain looking for digest BIOs: .Ve .SH "COPYRIGHT" .IX Header "COPYRIGHT" -Copyright 2000\-2016 The OpenSSL Project Authors. All Rights Reserved. +Copyright 2000\-2019 The OpenSSL Project Authors. All Rights Reserved. .PP Licensed under the OpenSSL license (the \*(L"License\*(R"). You may not use this file except in compliance with the License. You can obtain a copy diff --git a/crypto/external/bsd/openssl/lib/libcrypto/man/BIO_get_data.3 b/crypto/external/bsd/openssl/lib/libcrypto/man/BIO_get_data.3 index fccf41f4086..1881245e96f 100644 --- a/crypto/external/bsd/openssl/lib/libcrypto/man/BIO_get_data.3 +++ b/crypto/external/bsd/openssl/lib/libcrypto/man/BIO_get_data.3 @@ -1,6 +1,6 @@ -.\" $NetBSD: BIO_get_data.3,v 1.3 2019/06/09 18:44:31 christos Exp $ +.\" $NetBSD: BIO_get_data.3,v 1.3.2.1 2021/03/28 18:21:46 martin Exp $ .\" -.\" Automatically generated by Pod::Man 4.10 (Pod::Simple 3.35) +.\" Automatically generated by Pod::Man 4.11 (Pod::Simple 3.35) .\" .\" Standard preamble: .\" ======================================================================== @@ -135,7 +135,7 @@ .\" ======================================================================== .\" .IX Title "BIO_get_data 3" -.TH BIO_get_data 3 "2018-09-23" "1.1.1c" "OpenSSL" +.TH BIO_get_data 3 "2020-12-10" "1.1.1i" "OpenSSL" .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. .if n .ad l @@ -166,7 +166,7 @@ the \s-1BIO.\s0 This data can subsequently be retrieved via a call to \fBBIO_get This can be used by custom BIOs for storing implementation specific information. .PP The \fBBIO_set_init()\fR function sets the value of the \s-1BIO\s0's \*(L"init\*(R" flag to indicate -whether initialisation has been completed for this \s-1BIO\s0 or not. A non-zero value +whether initialisation has been completed for this \s-1BIO\s0 or not. A nonzero value indicates that initialisation is complete, whilst zero indicates that it is not. Often initialisation will complete during initial construction of the \s-1BIO.\s0 For some BIOs however, initialisation may not complete until after additional steps @@ -192,7 +192,7 @@ bio, BIO_meth_new The functions described here were added in OpenSSL 1.1.0. .SH "COPYRIGHT" .IX Header "COPYRIGHT" -Copyright 2016 The OpenSSL Project Authors. All Rights Reserved. +Copyright 2016\-2020 The OpenSSL Project Authors. All Rights Reserved. .PP Licensed under the OpenSSL license (the \*(L"License\*(R"). You may not use this file except in compliance with the License. You can obtain a copy diff --git a/crypto/external/bsd/openssl/lib/libcrypto/man/BIO_get_ex_new_index.3 b/crypto/external/bsd/openssl/lib/libcrypto/man/BIO_get_ex_new_index.3 index ff4dd1a0f25..502123c0749 100644 --- a/crypto/external/bsd/openssl/lib/libcrypto/man/BIO_get_ex_new_index.3 +++ b/crypto/external/bsd/openssl/lib/libcrypto/man/BIO_get_ex_new_index.3 @@ -1,6 +1,6 @@ -.\" $NetBSD: BIO_get_ex_new_index.3,v 1.3 2019/06/09 18:44:31 christos Exp $ +.\" $NetBSD: BIO_get_ex_new_index.3,v 1.3.2.1 2021/03/28 18:21:46 martin Exp $ .\" -.\" Automatically generated by Pod::Man 4.10 (Pod::Simple 3.35) +.\" Automatically generated by Pod::Man 4.11 (Pod::Simple 3.35) .\" .\" Standard preamble: .\" ======================================================================== @@ -135,7 +135,7 @@ .\" ======================================================================== .\" .IX Title "BIO_get_ex_new_index 3" -.TH BIO_get_ex_new_index 3 "2018-09-23" "1.1.1c" "OpenSSL" +.TH BIO_get_ex_new_index 3 "2020-03-22" "1.1.1i" "OpenSSL" .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. .if n .ad l @@ -178,7 +178,7 @@ for any of the OpenSSL datatypes listed in These functions handle application-specific data for OpenSSL data structures. .PP -\&\fBTYPE_get_new_ex_index()\fR is a macro that calls \fBCRYPTO_get_ex_new_index()\fR +\&\fBTYPE_get_ex_new_index()\fR is a macro that calls \fBCRYPTO_get_ex_new_index()\fR with the correct \fBindex\fR value. .PP \&\fBTYPE_set_ex_data()\fR is a function that calls \fBCRYPTO_set_ex_data()\fR with @@ -188,7 +188,7 @@ an offset into the opaque exdata part of the \s-1TYPE\s0 object. an offset into the opaque exdata part of the \s-1TYPE\s0 object. .SH "RETURN VALUES" .IX Header "RETURN VALUES" -\&\fBTYPE_get_new_ex_index()\fR returns a new index on success or \-1 on error. +\&\fBTYPE_get_ex_new_index()\fR returns a new index on success or \-1 on error. .PP \&\fBTYPE_set_ex_data()\fR returns 1 on success or 0 on error. .PP @@ -198,7 +198,7 @@ an offset into the opaque exdata part of the \s-1TYPE\s0 object. \&\fBCRYPTO_get_ex_new_index\fR\|(3). .SH "COPYRIGHT" .IX Header "COPYRIGHT" -Copyright 2015\-2018 The OpenSSL Project Authors. All Rights Reserved. +Copyright 2015\-2020 The OpenSSL Project Authors. All Rights Reserved. .PP Licensed under the OpenSSL license (the \*(L"License\*(R"). You may not use this file except in compliance with the License. You can obtain a copy diff --git a/crypto/external/bsd/openssl/lib/libcrypto/man/BIO_meth_new.3 b/crypto/external/bsd/openssl/lib/libcrypto/man/BIO_meth_new.3 index 94729f12cce..34d8f60f2dc 100644 --- a/crypto/external/bsd/openssl/lib/libcrypto/man/BIO_meth_new.3 +++ b/crypto/external/bsd/openssl/lib/libcrypto/man/BIO_meth_new.3 @@ -1,6 +1,6 @@ -.\" $NetBSD: BIO_meth_new.3,v 1.3 2019/06/09 18:44:31 christos Exp $ +.\" $NetBSD: BIO_meth_new.3,v 1.3.2.1 2021/03/28 18:21:46 martin Exp $ .\" -.\" Automatically generated by Pod::Man 4.10 (Pod::Simple 3.35) +.\" Automatically generated by Pod::Man 4.11 (Pod::Simple 3.35) .\" .\" Standard preamble: .\" ======================================================================== @@ -135,7 +135,7 @@ .\" ======================================================================== .\" .IX Title "BIO_meth_new 3" -.TH BIO_meth_new 3 "2018-09-23" "1.1.1c" "OpenSSL" +.TH BIO_meth_new 3 "2018-09-23" "1.1.1i" "OpenSSL" .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. .if n .ad l diff --git a/crypto/external/bsd/openssl/lib/libcrypto/man/BIO_new.3 b/crypto/external/bsd/openssl/lib/libcrypto/man/BIO_new.3 index 7520d5dbd06..bf285bfe022 100644 --- a/crypto/external/bsd/openssl/lib/libcrypto/man/BIO_new.3 +++ b/crypto/external/bsd/openssl/lib/libcrypto/man/BIO_new.3 @@ -1,6 +1,6 @@ -.\" $NetBSD: BIO_new.3,v 1.19 2019/06/09 18:44:31 christos Exp $ +.\" $NetBSD: BIO_new.3,v 1.19.2.1 2021/03/28 18:21:46 martin Exp $ .\" -.\" Automatically generated by Pod::Man 4.10 (Pod::Simple 3.35) +.\" Automatically generated by Pod::Man 4.11 (Pod::Simple 3.35) .\" .\" Standard preamble: .\" ======================================================================== @@ -135,7 +135,7 @@ .\" ======================================================================== .\" .IX Title "BIO_new 3" -.TH BIO_new 3 "2018-09-23" "1.1.1c" "OpenSSL" +.TH BIO_new 3 "2020-01-23" "1.1.1i" "OpenSSL" .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. .if n .ad l @@ -190,8 +190,8 @@ on it other than the discarded return value. .SH "HISTORY" .IX Header "HISTORY" \&\fBBIO_set()\fR was removed in OpenSSL 1.1.0 as \s-1BIO\s0 type is now opaque. -.SH "EXAMPLE" -.IX Header "EXAMPLE" +.SH "EXAMPLES" +.IX Header "EXAMPLES" Create a memory \s-1BIO:\s0 .PP .Vb 1 @@ -199,7 +199,7 @@ Create a memory \s-1BIO:\s0 .Ve .SH "COPYRIGHT" .IX Header "COPYRIGHT" -Copyright 2000\-2016 The OpenSSL Project Authors. All Rights Reserved. +Copyright 2000\-2019 The OpenSSL Project Authors. All Rights Reserved. .PP Licensed under the OpenSSL license (the \*(L"License\*(R"). You may not use this file except in compliance with the License. You can obtain a copy diff --git a/crypto/external/bsd/openssl/lib/libcrypto/man/BIO_new_CMS.3 b/crypto/external/bsd/openssl/lib/libcrypto/man/BIO_new_CMS.3 index 849c74f0ba9..04e112a4f7c 100644 --- a/crypto/external/bsd/openssl/lib/libcrypto/man/BIO_new_CMS.3 +++ b/crypto/external/bsd/openssl/lib/libcrypto/man/BIO_new_CMS.3 @@ -1,6 +1,6 @@ -.\" $NetBSD: BIO_new_CMS.3,v 1.19 2019/06/09 18:44:31 christos Exp $ +.\" $NetBSD: BIO_new_CMS.3,v 1.19.2.1 2021/03/28 18:21:46 martin Exp $ .\" -.\" Automatically generated by Pod::Man 4.10 (Pod::Simple 3.35) +.\" Automatically generated by Pod::Man 4.11 (Pod::Simple 3.35) .\" .\" Standard preamble: .\" ======================================================================== @@ -135,7 +135,7 @@ .\" ======================================================================== .\" .IX Title "BIO_new_CMS 3" -.TH BIO_new_CMS 3 "2019-03-12" "1.1.1c" "OpenSSL" +.TH BIO_new_CMS 3 "2019-03-12" "1.1.1i" "OpenSSL" .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. .if n .ad l diff --git a/crypto/external/bsd/openssl/lib/libcrypto/man/BIO_parse_hostserv.3 b/crypto/external/bsd/openssl/lib/libcrypto/man/BIO_parse_hostserv.3 index faeccf05abc..20d4758459c 100644 --- a/crypto/external/bsd/openssl/lib/libcrypto/man/BIO_parse_hostserv.3 +++ b/crypto/external/bsd/openssl/lib/libcrypto/man/BIO_parse_hostserv.3 @@ -1,6 +1,6 @@ -.\" $NetBSD: BIO_parse_hostserv.3,v 1.3 2019/06/09 18:44:31 christos Exp $ +.\" $NetBSD: BIO_parse_hostserv.3,v 1.3.2.1 2021/03/28 18:21:46 martin Exp $ .\" -.\" Automatically generated by Pod::Man 4.10 (Pod::Simple 3.35) +.\" Automatically generated by Pod::Man 4.11 (Pod::Simple 3.35) .\" .\" Standard preamble: .\" ======================================================================== @@ -135,7 +135,7 @@ .\" ======================================================================== .\" .IX Title "BIO_parse_hostserv 3" -.TH BIO_parse_hostserv 3 "2018-09-23" "1.1.1c" "OpenSSL" +.TH BIO_parse_hostserv 3 "2020-12-10" "1.1.1i" "OpenSSL" .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. .if n .ad l @@ -160,10 +160,10 @@ libcrypto, -lcrypto .SH "DESCRIPTION" .IX Header "DESCRIPTION" \&\fBBIO_parse_hostserv()\fR will parse the information given in \fBhostserv\fR, -create strings with the host name and service name and give those +create strings with the hostname and service name and give those back via \fBhost\fR and \fBservice\fR. Those will need to be freed after they are used. \fBhostserv_prio\fR helps determine if \fBhostserv\fR shall -be interpreted primarily as a host name or a service name in ambiguous +be interpreted primarily as a hostname or a service name in ambiguous cases. .PP The syntax the \fBBIO_parse_hostserv()\fR recognises is: @@ -210,7 +210,7 @@ and \fBhostserv_prio\fR, as follows: \&\s-1\fBBIO_ADDRINFO\s0\fR\|(3) .SH "COPYRIGHT" .IX Header "COPYRIGHT" -Copyright 2016\-2018 The OpenSSL Project Authors. All Rights Reserved. +Copyright 2016\-2020 The OpenSSL Project Authors. All Rights Reserved. .PP Licensed under the OpenSSL license (the \*(L"License\*(R"). You may not use this file except in compliance with the License. You can obtain a copy diff --git a/crypto/external/bsd/openssl/lib/libcrypto/man/BIO_printf.3 b/crypto/external/bsd/openssl/lib/libcrypto/man/BIO_printf.3 index ffad1036366..4bd85466ffd 100644 --- a/crypto/external/bsd/openssl/lib/libcrypto/man/BIO_printf.3 +++ b/crypto/external/bsd/openssl/lib/libcrypto/man/BIO_printf.3 @@ -1,6 +1,6 @@ -.\" $NetBSD: BIO_printf.3,v 1.3 2019/06/09 18:44:31 christos Exp $ +.\" $NetBSD: BIO_printf.3,v 1.3.2.1 2021/03/28 18:21:46 martin Exp $ .\" -.\" Automatically generated by Pod::Man 4.10 (Pod::Simple 3.35) +.\" Automatically generated by Pod::Man 4.11 (Pod::Simple 3.35) .\" .\" Standard preamble: .\" ======================================================================== @@ -135,7 +135,7 @@ .\" ======================================================================== .\" .IX Title "BIO_printf 3" -.TH BIO_printf 3 "2018-09-23" "1.1.1c" "OpenSSL" +.TH BIO_printf 3 "2018-09-23" "1.1.1i" "OpenSSL" .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. .if n .ad l diff --git a/crypto/external/bsd/openssl/lib/libcrypto/man/BIO_push.3 b/crypto/external/bsd/openssl/lib/libcrypto/man/BIO_push.3 index 5ad32e7ca99..1aad1943c52 100644 --- a/crypto/external/bsd/openssl/lib/libcrypto/man/BIO_push.3 +++ b/crypto/external/bsd/openssl/lib/libcrypto/man/BIO_push.3 @@ -1,6 +1,6 @@ -.\" $NetBSD: BIO_push.3,v 1.19 2019/06/09 18:44:31 christos Exp $ +.\" $NetBSD: BIO_push.3,v 1.19.2.1 2021/03/28 18:21:46 martin Exp $ .\" -.\" Automatically generated by Pod::Man 4.10 (Pod::Simple 3.35) +.\" Automatically generated by Pod::Man 4.11 (Pod::Simple 3.35) .\" .\" Standard preamble: .\" ======================================================================== @@ -135,7 +135,7 @@ .\" ======================================================================== .\" .IX Title "BIO_push 3" -.TH BIO_push 3 "2019-06-09" "1.1.1c" "OpenSSL" +.TH BIO_push 3 "2019-06-09" "1.1.1i" "OpenSSL" .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. .if n .ad l diff --git a/crypto/external/bsd/openssl/lib/libcrypto/man/BIO_read.3 b/crypto/external/bsd/openssl/lib/libcrypto/man/BIO_read.3 index 151ce902faf..8eea6729b94 100644 --- a/crypto/external/bsd/openssl/lib/libcrypto/man/BIO_read.3 +++ b/crypto/external/bsd/openssl/lib/libcrypto/man/BIO_read.3 @@ -1,6 +1,6 @@ -.\" $NetBSD: BIO_read.3,v 1.19 2019/06/09 18:44:31 christos Exp $ +.\" $NetBSD: BIO_read.3,v 1.19.2.1 2021/03/28 18:21:46 martin Exp $ .\" -.\" Automatically generated by Pod::Man 4.10 (Pod::Simple 3.35) +.\" Automatically generated by Pod::Man 4.11 (Pod::Simple 3.35) .\" .\" Standard preamble: .\" ======================================================================== @@ -135,7 +135,7 @@ .\" ======================================================================== .\" .IX Title "BIO_read 3" -.TH BIO_read 3 "2018-09-23" "1.1.1c" "OpenSSL" +.TH BIO_read 3 "2020-12-10" "1.1.1i" "OpenSSL" .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. .if n .ad l @@ -194,7 +194,7 @@ the operation is not implemented in the specific \s-1BIO\s0 type. The trailing .SH "NOTES" .IX Header "NOTES" A 0 or \-1 return is not necessarily an indication of an error. In -particular when the source/sink is non-blocking or of a certain type +particular when the source/sink is nonblocking or of a certain type it may merely be an indication that no data is currently available and that the application should retry the operation later. .PP @@ -223,7 +223,7 @@ to the chain. keep the '\en' at the end of the line in the buffer. .SH "COPYRIGHT" .IX Header "COPYRIGHT" -Copyright 2000\-2016 The OpenSSL Project Authors. All Rights Reserved. +Copyright 2000\-2020 The OpenSSL Project Authors. All Rights Reserved. .PP Licensed under the OpenSSL license (the \*(L"License\*(R"). You may not use this file except in compliance with the License. You can obtain a copy diff --git a/crypto/external/bsd/openssl/lib/libcrypto/man/BIO_s_accept.3 b/crypto/external/bsd/openssl/lib/libcrypto/man/BIO_s_accept.3 index 5eda7879f9b..c773ce1fb53 100644 --- a/crypto/external/bsd/openssl/lib/libcrypto/man/BIO_s_accept.3 +++ b/crypto/external/bsd/openssl/lib/libcrypto/man/BIO_s_accept.3 @@ -1,6 +1,6 @@ -.\" $NetBSD: BIO_s_accept.3,v 1.19 2019/06/09 18:44:31 christos Exp $ +.\" $NetBSD: BIO_s_accept.3,v 1.19.2.1 2021/03/28 18:21:46 martin Exp $ .\" -.\" Automatically generated by Pod::Man 4.10 (Pod::Simple 3.35) +.\" Automatically generated by Pod::Man 4.11 (Pod::Simple 3.35) .\" .\" Standard preamble: .\" ======================================================================== @@ -135,7 +135,7 @@ .\" ======================================================================== .\" .IX Title "BIO_s_accept 3" -.TH BIO_s_accept 3 "2018-09-23" "1.1.1c" "OpenSSL" +.TH BIO_s_accept 3 "2020-12-10" "1.1.1i" "OpenSSL" .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. .if n .ad l @@ -285,7 +285,7 @@ however because the accept \s-1BIO\s0 will still accept additional incoming connections. This can be resolved by using \fBBIO_pop()\fR (see above) and freeing up the accept \s-1BIO\s0 after the initial connection. .PP -If the underlying accept socket is non-blocking and \fBBIO_do_accept()\fR is +If the underlying accept socket is nonblocking and \fBBIO_do_accept()\fR is called to await an incoming connection it is possible for \&\fBBIO_should_io_special()\fR with the reason \s-1BIO_RR_ACCEPT.\s0 If this happens then it is an indication that an accept attempt would block: the application @@ -314,8 +314,8 @@ return 1 for success and 0 or \-1 for failure. \&\fBBIO_get_bind_mode()\fR returns the set of \fB\s-1BIO_BIND\s0\fR flags, or \-1 on failure. .PP \&\fBBIO_new_accept()\fR returns a \s-1BIO\s0 or \s-1NULL\s0 on error. -.SH "EXAMPLE" -.IX Header "EXAMPLE" +.SH "EXAMPLES" +.IX Header "EXAMPLES" This example accepts two connections on port 4444, sends messages down each and finally closes both down. .PP @@ -365,7 +365,7 @@ down each and finally closes both down. .Ve .SH "COPYRIGHT" .IX Header "COPYRIGHT" -Copyright 2000\-2018 The OpenSSL Project Authors. All Rights Reserved. +Copyright 2000\-2020 The OpenSSL Project Authors. All Rights Reserved. .PP Licensed under the OpenSSL license (the \*(L"License\*(R"). You may not use this file except in compliance with the License. You can obtain a copy diff --git a/crypto/external/bsd/openssl/lib/libcrypto/man/BIO_s_bio.3 b/crypto/external/bsd/openssl/lib/libcrypto/man/BIO_s_bio.3 index faa3384360d..31d1ce56b43 100644 --- a/crypto/external/bsd/openssl/lib/libcrypto/man/BIO_s_bio.3 +++ b/crypto/external/bsd/openssl/lib/libcrypto/man/BIO_s_bio.3 @@ -1,6 +1,6 @@ -.\" $NetBSD: BIO_s_bio.3,v 1.19 2019/06/09 18:44:31 christos Exp $ +.\" $NetBSD: BIO_s_bio.3,v 1.19.2.1 2021/03/28 18:21:46 martin Exp $ .\" -.\" Automatically generated by Pod::Man 4.10 (Pod::Simple 3.35) +.\" Automatically generated by Pod::Man 4.11 (Pod::Simple 3.35) .\" .\" Standard preamble: .\" ======================================================================== @@ -135,7 +135,7 @@ .\" ======================================================================== .\" .IX Title "BIO_s_bio 3" -.TH BIO_s_bio 3 "2018-09-23" "1.1.1c" "OpenSSL" +.TH BIO_s_bio 3 "2020-12-10" "1.1.1i" "OpenSSL" .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. .if n .ad l @@ -271,8 +271,8 @@ as macros. locations for \fBbio1\fR and \fBbio2\fR. Check the error stack for more information. .PP [\s-1XXXXX:\s0 More return values need to be added here] -.SH "EXAMPLE" -.IX Header "EXAMPLE" +.SH "EXAMPLES" +.IX Header "EXAMPLES" The \s-1BIO\s0 pair can be used to have full control over the network access of an application. The application can call \fBselect()\fR on the socket as required without having to go through the SSL-interface. @@ -283,7 +283,7 @@ without having to go through the SSL-interface. \& ... \& BIO_new_bio_pair(&internal_bio, 0, &network_bio, 0); \& SSL_set_bio(ssl, internal_bio, internal_bio); -\& SSL_operations(); /* e.g SSL_read and SSL_write */ +\& SSL_operations(); /* e.g. SSL_read and SSL_write */ \& ... \& \& application | TLS\-engine @@ -307,7 +307,7 @@ without having to go through the SSL-interface. .Ve .PP As the \s-1BIO\s0 pair will only buffer the data and never directly access the -connection, it behaves non-blocking and will return as soon as the write +connection, it behaves nonblocking and will return as soon as the write buffer is full or the read buffer is drained. Then the application has to flush the write buffer and/or fill the read buffer. .PP @@ -315,8 +315,8 @@ Use the \fBBIO_ctrl_pending()\fR, to find out whether data is buffered in the \s and must be transferred to the network. Use \fBBIO_ctrl_get_read_request()\fR to find out, how many bytes must be written into the buffer before the \&\fBSSL_operation()\fR can successfully be continued. -.SH "WARNING" -.IX Header "WARNING" +.SH "WARNINGS" +.IX Header "WARNINGS" As the data is buffered, \fBSSL_operation()\fR may return with an \s-1ERROR_SSL_WANT_READ\s0 condition, but there is still data in the write buffer. An application must not rely on the error value of \fBSSL_operation()\fR but must assure that the @@ -328,7 +328,7 @@ the peer might be waiting for the data before being able to continue. \&\fBBIO_should_retry\fR\|(3), \fBBIO_read_ex\fR\|(3) .SH "COPYRIGHT" .IX Header "COPYRIGHT" -Copyright 2000\-2016 The OpenSSL Project Authors. All Rights Reserved. +Copyright 2000\-2020 The OpenSSL Project Authors. All Rights Reserved. .PP Licensed under the OpenSSL license (the \*(L"License\*(R"). You may not use this file except in compliance with the License. You can obtain a copy diff --git a/crypto/external/bsd/openssl/lib/libcrypto/man/BIO_s_connect.3 b/crypto/external/bsd/openssl/lib/libcrypto/man/BIO_s_connect.3 index 73498aca4b2..b2a727a2d30 100644 --- a/crypto/external/bsd/openssl/lib/libcrypto/man/BIO_s_connect.3 +++ b/crypto/external/bsd/openssl/lib/libcrypto/man/BIO_s_connect.3 @@ -1,6 +1,6 @@ -.\" $NetBSD: BIO_s_connect.3,v 1.19 2019/06/09 18:44:31 christos Exp $ +.\" $NetBSD: BIO_s_connect.3,v 1.19.2.1 2021/03/28 18:21:46 martin Exp $ .\" -.\" Automatically generated by Pod::Man 4.10 (Pod::Simple 3.35) +.\" Automatically generated by Pod::Man 4.11 (Pod::Simple 3.35) .\" .\" Standard preamble: .\" ======================================================================== @@ -135,7 +135,7 @@ .\" ======================================================================== .\" .IX Title "BIO_s_connect 3" -.TH BIO_s_connect 3 "2018-09-23" "1.1.1c" "OpenSSL" +.TH BIO_s_connect 3 "2020-12-10" "1.1.1i" "OpenSSL" .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. .if n .ad l @@ -246,7 +246,7 @@ If blocking I/O is set then a non positive return value from any I/O call is caused by an error condition, although a zero return will normally mean that the connection was closed. .PP -If the port name is supplied as part of the host name then this will +If the port name is supplied as part of the hostname then this will override any value set with \fBBIO_set_conn_port()\fR. This may be undesirable if the application does not wish to allow connection to arbitrary ports. This can be avoided by checking for the presence of the ':' @@ -301,8 +301,8 @@ port or \s-1NULL\s0 if not set. .PP \&\fBBIO_do_connect()\fR returns 1 if the connection was successfully established and 0 or \-1 if the connection failed. -.SH "EXAMPLE" -.IX Header "EXAMPLE" +.SH "EXAMPLES" +.IX Header "EXAMPLES" This is example connects to a webserver on the local host and attempts to retrieve a page and copy the result to standard output. .PP @@ -338,7 +338,7 @@ were removed in OpenSSL 1.1.0. Use \fBBIO_set_conn_address()\fR and \fBBIO_get_conn_address()\fR instead. .SH "COPYRIGHT" .IX Header "COPYRIGHT" -Copyright 2000\-2018 The OpenSSL Project Authors. All Rights Reserved. +Copyright 2000\-2020 The OpenSSL Project Authors. All Rights Reserved. .PP Licensed under the OpenSSL license (the \*(L"License\*(R"). You may not use this file except in compliance with the License. You can obtain a copy diff --git a/crypto/external/bsd/openssl/lib/libcrypto/man/BIO_s_fd.3 b/crypto/external/bsd/openssl/lib/libcrypto/man/BIO_s_fd.3 index e871ffccb72..bf6665bd93a 100644 --- a/crypto/external/bsd/openssl/lib/libcrypto/man/BIO_s_fd.3 +++ b/crypto/external/bsd/openssl/lib/libcrypto/man/BIO_s_fd.3 @@ -1,6 +1,6 @@ -.\" $NetBSD: BIO_s_fd.3,v 1.19 2019/06/09 18:44:31 christos Exp $ +.\" $NetBSD: BIO_s_fd.3,v 1.19.2.1 2021/03/28 18:21:46 martin Exp $ .\" -.\" Automatically generated by Pod::Man 4.10 (Pod::Simple 3.35) +.\" Automatically generated by Pod::Man 4.11 (Pod::Simple 3.35) .\" .\" Standard preamble: .\" ======================================================================== @@ -135,7 +135,7 @@ .\" ======================================================================== .\" .IX Title "BIO_s_fd 3" -.TH BIO_s_fd 3 "2018-09-23" "1.1.1c" "OpenSSL" +.TH BIO_s_fd 3 "2020-01-23" "1.1.1i" "OpenSSL" .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. .if n .ad l @@ -206,8 +206,8 @@ been initialized. .PP \&\fBBIO_new_fd()\fR returns the newly allocated \s-1BIO\s0 or \s-1NULL\s0 is an error occurred. -.SH "EXAMPLE" -.IX Header "EXAMPLE" +.SH "EXAMPLES" +.IX Header "EXAMPLES" This is a file descriptor \s-1BIO\s0 version of \*(L"Hello World\*(R": .PP .Vb 1 @@ -226,7 +226,7 @@ This is a file descriptor \s-1BIO\s0 version of \*(L"Hello World\*(R": \&\fBBIO_set_close\fR\|(3), \fBBIO_get_close\fR\|(3) .SH "COPYRIGHT" .IX Header "COPYRIGHT" -Copyright 2000\-2016 The OpenSSL Project Authors. All Rights Reserved. +Copyright 2000\-2019 The OpenSSL Project Authors. All Rights Reserved. .PP Licensed under the OpenSSL license (the \*(L"License\*(R"). You may not use this file except in compliance with the License. You can obtain a copy diff --git a/crypto/external/bsd/openssl/lib/libcrypto/man/BIO_s_file.3 b/crypto/external/bsd/openssl/lib/libcrypto/man/BIO_s_file.3 index f0bf08dd0c0..4f42df888de 100644 --- a/crypto/external/bsd/openssl/lib/libcrypto/man/BIO_s_file.3 +++ b/crypto/external/bsd/openssl/lib/libcrypto/man/BIO_s_file.3 @@ -1,6 +1,6 @@ -.\" $NetBSD: BIO_s_file.3,v 1.19 2019/06/09 18:44:31 christos Exp $ +.\" $NetBSD: BIO_s_file.3,v 1.19.2.1 2021/03/28 18:21:46 martin Exp $ .\" -.\" Automatically generated by Pod::Man 4.10 (Pod::Simple 3.35) +.\" Automatically generated by Pod::Man 4.11 (Pod::Simple 3.35) .\" .\" Standard preamble: .\" ======================================================================== @@ -135,7 +135,7 @@ .\" ======================================================================== .\" .IX Title "BIO_s_file 3" -.TH BIO_s_file 3 "2019-06-09" "1.1.1c" "OpenSSL" +.TH BIO_s_file 3 "2020-12-10" "1.1.1i" "OpenSSL" .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. .if n .ad l @@ -218,7 +218,7 @@ in stdio behaviour will be mirrored by the corresponding \s-1BIO.\s0 .PP On Windows BIO_new_files reserves for the filename argument to be \&\s-1UTF\-8\s0 encoded. In other words if you have to make it work in multi\- -lingual environment, encode file names in \s-1UTF\-8.\s0 +lingual environment, encode filenames in \s-1UTF\-8.\s0 .SH "RETURN VALUES" .IX Header "RETURN VALUES" \&\fBBIO_s_file()\fR returns the file \s-1BIO\s0 method. @@ -301,7 +301,7 @@ occurred this differs from other types of \s-1BIO\s0 which will typically return \&\fBBIO_set_close\fR\|(3), \fBBIO_get_close\fR\|(3) .SH "COPYRIGHT" .IX Header "COPYRIGHT" -Copyright 2000\-2019 The OpenSSL Project Authors. All Rights Reserved. +Copyright 2000\-2020 The OpenSSL Project Authors. All Rights Reserved. .PP Licensed under the OpenSSL license (the \*(L"License\*(R"). You may not use this file except in compliance with the License. You can obtain a copy diff --git a/crypto/external/bsd/openssl/lib/libcrypto/man/BIO_s_mem.3 b/crypto/external/bsd/openssl/lib/libcrypto/man/BIO_s_mem.3 index 5e133373607..cbb0b6b1b55 100644 --- a/crypto/external/bsd/openssl/lib/libcrypto/man/BIO_s_mem.3 +++ b/crypto/external/bsd/openssl/lib/libcrypto/man/BIO_s_mem.3 @@ -1,6 +1,6 @@ -.\" $NetBSD: BIO_s_mem.3,v 1.19 2019/06/09 18:44:31 christos Exp $ +.\" $NetBSD: BIO_s_mem.3,v 1.19.2.1 2021/03/28 18:21:46 martin Exp $ .\" -.\" Automatically generated by Pod::Man 4.10 (Pod::Simple 3.35) +.\" Automatically generated by Pod::Man 4.11 (Pod::Simple 3.35) .\" .\" Standard preamble: .\" ======================================================================== @@ -135,7 +135,7 @@ .\" ======================================================================== .\" .IX Title "BIO_s_mem 3" -.TH BIO_s_mem 3 "2019-06-09" "1.1.1c" "OpenSSL" +.TH BIO_s_mem 3 "2020-01-23" "1.1.1i" "OpenSSL" .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. .if n .ad l @@ -182,9 +182,10 @@ If the \s-1BIO_CLOSE\s0 flag is set when a memory \s-1BIO\s0 is freed then the u \&\s-1BUF_MEM\s0 structure is also freed. .PP Calling \fBBIO_reset()\fR on a read write memory \s-1BIO\s0 clears any data in it if the -flag \s-1BIO_FLAGS_NONCLEAR_RST\s0 is not set. On a read only \s-1BIO\s0 or if the flag -\&\s-1BIO_FLAGS_NONCLEAR_RST\s0 is set it restores the \s-1BIO\s0 to its original state and -the data can be read again. +flag \s-1BIO_FLAGS_NONCLEAR_RST\s0 is not set, otherwise it just restores the read +pointer to the state it was just after the last write was performed and the +data can be read again. On a read only \s-1BIO\s0 it similarly restores the \s-1BIO\s0 to +its original state and the read only data can be read again. .PP \&\fBBIO_eof()\fR is true if no data is in the \s-1BIO.\s0 .PP @@ -219,11 +220,11 @@ first, so the supplied area of memory must be unchanged until the \s-1BIO\s0 is Writes to memory BIOs will always succeed if memory is available: that is their size can grow indefinitely. .PP -Every read from a read write memory \s-1BIO\s0 will remove the data just read with -an internal copy operation, if a \s-1BIO\s0 contains a lot of data and it is -read in small chunks the operation can be very slow. The use of a read only -memory \s-1BIO\s0 avoids this problem. If the \s-1BIO\s0 must be read write then adding -a buffering \s-1BIO\s0 to the chain will speed up the process. +Every write after partial read (not all data in the memory buffer was read) +to a read write memory \s-1BIO\s0 will have to move the unread data with an internal +copy operation, if a \s-1BIO\s0 contains a lot of data and it is read in small +chunks intertwined with writes the operation can be very slow. Adding +a buffering \s-1BIO\s0 to the chain can speed up the process. .PP Calling \fBBIO_set_mem_buf()\fR on a \s-1BIO\s0 created with \fBBIO_new_secmem()\fR will give undefined results, including perhaps a program crash. @@ -243,11 +244,31 @@ contains only the remaining data to be read. If the close status of the \&\s-1BIO\s0 is set to \s-1BIO_NOCLOSE,\s0 before freeing the \s-1BUF_MEM\s0 the data pointer in it must be set to \s-1NULL\s0 as the data pointer does not point to an allocated memory. +.PP +Calling \fBBIO_reset()\fR on a read write memory \s-1BIO\s0 with \s-1BIO_FLAGS_NONCLEAR_RST\s0 +flag set can have unexpected outcome when the reads and writes to the +\&\s-1BIO\s0 are intertwined. As documented above the \s-1BIO\s0 will be reset to the +state after the last completed write operation. The effects of reads +preceding that write operation cannot be undone. +.PP +Calling \fBBIO_get_mem_ptr()\fR prior to a \fBBIO_reset()\fR call with +\&\s-1BIO_FLAGS_NONCLEAR_RST\s0 set has the same effect as a write operation. .SH "BUGS" .IX Header "BUGS" There should be an option to set the maximum size of a memory \s-1BIO.\s0 -.SH "EXAMPLE" -.IX Header "EXAMPLE" +.SH "RETURN VALUES" +.IX Header "RETURN VALUES" +\&\fBBIO_s_mem()\fR and \fBBIO_s_secmem()\fR return a valid memory \fB\s-1BIO_METHOD\s0\fR structure. +.PP +\&\fBBIO_set_mem_eof_return()\fR, \fBBIO_set_mem_buf()\fR and \fBBIO_get_mem_ptr()\fR +return 1 on success or a value which is less than or equal to 0 if an error occurred. +.PP +\&\fBBIO_get_mem_data()\fR returns the total number of bytes available on success, +0 if b is \s-1NULL,\s0 or a negative value in case of other errors. +.PP +\&\fBBIO_new_mem_buf()\fR returns a valid \fB\s-1BIO\s0\fR structure on success or \s-1NULL\s0 on error. +.SH "EXAMPLES" +.IX Header "EXAMPLES" Create a memory \s-1BIO\s0 and write some data to it: .PP .Vb 1 @@ -272,14 +293,6 @@ Extract the \s-1BUF_MEM\s0 structure from a memory \s-1BIO\s0 and then free up t \& BIO_set_close(mem, BIO_NOCLOSE); /* So BIO_free() leaves BUF_MEM alone */ \& BIO_free(mem); .Ve -.SH "RETURN VALUES" -.IX Header "RETURN VALUES" -\&\fBBIO_s_mem()\fR and \fBBIO_s_secmem()\fR return a valid memory \fB\s-1BIO_METHOD\s0\fR structure. -.PP -\&\fBBIO_set_mem_eof_return()\fR, \fBBIO_get_mem_data()\fR, \fBBIO_set_mem_buf()\fR and \fBBIO_get_mem_ptr()\fR -return 1 on success or a value which is less than or equal to 0 if an error occurred. -.PP -\&\fBBIO_new_mem_buf()\fR returns a valid \fB\s-1BIO\s0\fR structure on success or \s-1NULL\s0 on error. .SH "COPYRIGHT" .IX Header "COPYRIGHT" Copyright 2000\-2019 The OpenSSL Project Authors. All Rights Reserved. diff --git a/crypto/external/bsd/openssl/lib/libcrypto/man/BIO_s_null.3 b/crypto/external/bsd/openssl/lib/libcrypto/man/BIO_s_null.3 index b98bc09f6e7..41da9dafa78 100644 --- a/crypto/external/bsd/openssl/lib/libcrypto/man/BIO_s_null.3 +++ b/crypto/external/bsd/openssl/lib/libcrypto/man/BIO_s_null.3 @@ -1,6 +1,6 @@ -.\" $NetBSD: BIO_s_null.3,v 1.19 2019/06/09 18:44:31 christos Exp $ +.\" $NetBSD: BIO_s_null.3,v 1.19.2.1 2021/03/28 18:21:46 martin Exp $ .\" -.\" Automatically generated by Pod::Man 4.10 (Pod::Simple 3.35) +.\" Automatically generated by Pod::Man 4.11 (Pod::Simple 3.35) .\" .\" Standard preamble: .\" ======================================================================== @@ -135,7 +135,7 @@ .\" ======================================================================== .\" .IX Title "BIO_s_null 3" -.TH BIO_s_null 3 "2018-09-23" "1.1.1c" "OpenSSL" +.TH BIO_s_null 3 "2018-09-23" "1.1.1i" "OpenSSL" .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. .if n .ad l diff --git a/crypto/external/bsd/openssl/lib/libcrypto/man/BIO_s_socket.3 b/crypto/external/bsd/openssl/lib/libcrypto/man/BIO_s_socket.3 index 64d0b42ae61..48ea8403958 100644 --- a/crypto/external/bsd/openssl/lib/libcrypto/man/BIO_s_socket.3 +++ b/crypto/external/bsd/openssl/lib/libcrypto/man/BIO_s_socket.3 @@ -1,6 +1,6 @@ -.\" $NetBSD: BIO_s_socket.3,v 1.19 2019/06/09 18:44:31 christos Exp $ +.\" $NetBSD: BIO_s_socket.3,v 1.19.2.1 2021/03/28 18:21:46 martin Exp $ .\" -.\" Automatically generated by Pod::Man 4.10 (Pod::Simple 3.35) +.\" Automatically generated by Pod::Man 4.11 (Pod::Simple 3.35) .\" .\" Standard preamble: .\" ======================================================================== @@ -135,7 +135,7 @@ .\" ======================================================================== .\" .IX Title "BIO_s_socket 3" -.TH BIO_s_socket 3 "2018-09-23" "1.1.1c" "OpenSSL" +.TH BIO_s_socket 3 "2018-09-23" "1.1.1i" "OpenSSL" .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. .if n .ad l diff --git a/crypto/external/bsd/openssl/lib/libcrypto/man/BIO_set_callback.3 b/crypto/external/bsd/openssl/lib/libcrypto/man/BIO_set_callback.3 index 8ac844c15fe..0877c7b1583 100644 --- a/crypto/external/bsd/openssl/lib/libcrypto/man/BIO_set_callback.3 +++ b/crypto/external/bsd/openssl/lib/libcrypto/man/BIO_set_callback.3 @@ -1,6 +1,6 @@ -.\" $NetBSD: BIO_set_callback.3,v 1.19 2019/06/09 18:44:31 christos Exp $ +.\" $NetBSD: BIO_set_callback.3,v 1.19.2.1 2021/03/28 18:21:46 martin Exp $ .\" -.\" Automatically generated by Pod::Man 4.10 (Pod::Simple 3.35) +.\" Automatically generated by Pod::Man 4.11 (Pod::Simple 3.35) .\" .\" Standard preamble: .\" ======================================================================== @@ -135,7 +135,7 @@ .\" ======================================================================== .\" .IX Title "BIO_set_callback 3" -.TH BIO_set_callback 3 "2018-09-23" "1.1.1c" "OpenSSL" +.TH BIO_set_callback 3 "2020-12-10" "1.1.1i" "OpenSSL" .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. .if n .ad l @@ -172,7 +172,7 @@ libcrypto, -lcrypto .SH "DESCRIPTION" .IX Header "DESCRIPTION" \&\fBBIO_set_callback_ex()\fR and \fBBIO_get_callback_ex()\fR set and retrieve the \s-1BIO\s0 -callback. The callback is called during most high level \s-1BIO\s0 operations. It can +callback. The callback is called during most high-level \s-1BIO\s0 operations. It can be used for debugging purposes to trace operations on a \s-1BIO\s0 or to modify its operation. .PP @@ -374,10 +374,6 @@ after. Note: \fBcmd\fR == \fB\s-1BIO_CTRL_SET_CALLBACK\s0\fR is special, because \fBparg\fR is not the argument of type \fBBIO_info_cb\fR itself. In this case \fBparg\fR is a pointer to the actual call parameter, see \fBBIO_callback_ctrl\fR. -.SH "EXAMPLE" -.IX Header "EXAMPLE" -The \fBBIO_debug_callback()\fR function is a good example, its source is -in crypto/bio/bio_cb.c .SH "RETURN VALUES" .IX Header "RETURN VALUES" \&\fBBIO_get_callback_ex()\fR and \fBBIO_get_callback()\fR return the callback function @@ -389,9 +385,13 @@ via a call to \fBBIO_set_callback_arg()\fR. .PP \&\fBBIO_debug_callback()\fR returns 1 or \fBret\fR if it's called after specific \s-1BIO\s0 operations. +.SH "EXAMPLES" +.IX Header "EXAMPLES" +The \fBBIO_debug_callback()\fR function is a good example, its source is +in crypto/bio/bio_cb.c .SH "COPYRIGHT" .IX Header "COPYRIGHT" -Copyright 2000\-2018 The OpenSSL Project Authors. All Rights Reserved. +Copyright 2000\-2020 The OpenSSL Project Authors. All Rights Reserved. .PP Licensed under the OpenSSL license (the \*(L"License\*(R"). You may not use this file except in compliance with the License. You can obtain a copy diff --git a/crypto/external/bsd/openssl/lib/libcrypto/man/BIO_should_retry.3 b/crypto/external/bsd/openssl/lib/libcrypto/man/BIO_should_retry.3 index f734bef49ab..9825b358010 100644 --- a/crypto/external/bsd/openssl/lib/libcrypto/man/BIO_should_retry.3 +++ b/crypto/external/bsd/openssl/lib/libcrypto/man/BIO_should_retry.3 @@ -1,6 +1,6 @@ -.\" $NetBSD: BIO_should_retry.3,v 1.19 2019/06/09 18:44:31 christos Exp $ +.\" $NetBSD: BIO_should_retry.3,v 1.19.2.1 2021/03/28 18:21:46 martin Exp $ .\" -.\" Automatically generated by Pod::Man 4.10 (Pod::Simple 3.35) +.\" Automatically generated by Pod::Man 4.11 (Pod::Simple 3.35) .\" .\" Standard preamble: .\" ======================================================================== @@ -135,7 +135,7 @@ .\" ======================================================================== .\" .IX Title "BIO_should_retry 3" -.TH BIO_should_retry 3 "2018-09-23" "1.1.1c" "OpenSSL" +.TH BIO_should_retry 3 "2018-09-23" "1.1.1i" "OpenSSL" .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. .if n .ad l diff --git a/crypto/external/bsd/openssl/lib/libcrypto/man/BN_BLINDING_new.3 b/crypto/external/bsd/openssl/lib/libcrypto/man/BN_BLINDING_new.3 index edcd70bb255..558a8bffcba 100644 --- a/crypto/external/bsd/openssl/lib/libcrypto/man/BN_BLINDING_new.3 +++ b/crypto/external/bsd/openssl/lib/libcrypto/man/BN_BLINDING_new.3 @@ -1,6 +1,6 @@ -.\" $NetBSD: BN_BLINDING_new.3,v 1.19 2019/06/09 18:44:31 christos Exp $ +.\" $NetBSD: BN_BLINDING_new.3,v 1.19.2.1 2021/03/28 18:21:46 martin Exp $ .\" -.\" Automatically generated by Pod::Man 4.10 (Pod::Simple 3.35) +.\" Automatically generated by Pod::Man 4.11 (Pod::Simple 3.35) .\" .\" Standard preamble: .\" ======================================================================== @@ -135,7 +135,7 @@ .\" ======================================================================== .\" .IX Title "BN_BLINDING_new 3" -.TH BN_BLINDING_new 3 "2018-09-23" "1.1.1c" "OpenSSL" +.TH BN_BLINDING_new 3 "2018-09-23" "1.1.1i" "OpenSSL" .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. .if n .ad l diff --git a/crypto/external/bsd/openssl/lib/libcrypto/man/BN_CTX_new.3 b/crypto/external/bsd/openssl/lib/libcrypto/man/BN_CTX_new.3 index a169d8ef5a0..592b98b17f9 100644 --- a/crypto/external/bsd/openssl/lib/libcrypto/man/BN_CTX_new.3 +++ b/crypto/external/bsd/openssl/lib/libcrypto/man/BN_CTX_new.3 @@ -1,6 +1,6 @@ -.\" $NetBSD: BN_CTX_new.3,v 1.19 2019/06/09 18:44:31 christos Exp $ +.\" $NetBSD: BN_CTX_new.3,v 1.19.2.1 2021/03/28 18:21:46 martin Exp $ .\" -.\" Automatically generated by Pod::Man 4.10 (Pod::Simple 3.35) +.\" Automatically generated by Pod::Man 4.11 (Pod::Simple 3.35) .\" .\" Standard preamble: .\" ======================================================================== @@ -135,7 +135,7 @@ .\" ======================================================================== .\" .IX Title "BN_CTX_new 3" -.TH BN_CTX_new 3 "2018-09-23" "1.1.1c" "OpenSSL" +.TH BN_CTX_new 3 "2018-09-23" "1.1.1i" "OpenSSL" .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. .if n .ad l diff --git a/crypto/external/bsd/openssl/lib/libcrypto/man/BN_CTX_start.3 b/crypto/external/bsd/openssl/lib/libcrypto/man/BN_CTX_start.3 index fa48fba0592..c5b938c543f 100644 --- a/crypto/external/bsd/openssl/lib/libcrypto/man/BN_CTX_start.3 +++ b/crypto/external/bsd/openssl/lib/libcrypto/man/BN_CTX_start.3 @@ -1,6 +1,6 @@ -.\" $NetBSD: BN_CTX_start.3,v 1.19 2019/06/09 18:44:31 christos Exp $ +.\" $NetBSD: BN_CTX_start.3,v 1.19.2.1 2021/03/28 18:21:46 martin Exp $ .\" -.\" Automatically generated by Pod::Man 4.10 (Pod::Simple 3.35) +.\" Automatically generated by Pod::Man 4.11 (Pod::Simple 3.35) .\" .\" Standard preamble: .\" ======================================================================== @@ -135,7 +135,7 @@ .\" ======================================================================== .\" .IX Title "BN_CTX_start 3" -.TH BN_CTX_start 3 "2019-06-09" "1.1.1c" "OpenSSL" +.TH BN_CTX_start 3 "2019-06-09" "1.1.1i" "OpenSSL" .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. .if n .ad l diff --git a/crypto/external/bsd/openssl/lib/libcrypto/man/BN_add.3 b/crypto/external/bsd/openssl/lib/libcrypto/man/BN_add.3 index db683cdd3ec..55b7545b50f 100644 --- a/crypto/external/bsd/openssl/lib/libcrypto/man/BN_add.3 +++ b/crypto/external/bsd/openssl/lib/libcrypto/man/BN_add.3 @@ -1,6 +1,6 @@ -.\" $NetBSD: BN_add.3,v 1.19 2019/06/09 18:44:31 christos Exp $ +.\" $NetBSD: BN_add.3,v 1.19.2.1 2021/03/28 18:21:46 martin Exp $ .\" -.\" Automatically generated by Pod::Man 4.10 (Pod::Simple 3.35) +.\" Automatically generated by Pod::Man 4.11 (Pod::Simple 3.35) .\" .\" Standard preamble: .\" ======================================================================== @@ -135,7 +135,7 @@ .\" ======================================================================== .\" .IX Title "BN_add 3" -.TH BN_add 3 "2018-09-23" "1.1.1c" "OpenSSL" +.TH BN_add 3 "2020-12-10" "1.1.1i" "OpenSSL" .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. .if n .ad l @@ -209,16 +209,16 @@ For division by powers of 2, use \fBBN_rshift\fR\|(3). .PP \&\fBBN_mod()\fR corresponds to \fBBN_div()\fR with \fIdv\fR set to \fB\s-1NULL\s0\fR. .PP -\&\fBBN_nnmod()\fR reduces \fIa\fR modulo \fIm\fR and places the non-negative +\&\fBBN_nnmod()\fR reduces \fIa\fR modulo \fIm\fR and places the nonnegative remainder in \fIr\fR. .PP -\&\fBBN_mod_add()\fR adds \fIa\fR to \fIb\fR modulo \fIm\fR and places the non-negative +\&\fBBN_mod_add()\fR adds \fIa\fR to \fIb\fR modulo \fIm\fR and places the nonnegative result in \fIr\fR. .PP \&\fBBN_mod_sub()\fR subtracts \fIb\fR from \fIa\fR modulo \fIm\fR and places the -non-negative result in \fIr\fR. +nonnegative result in \fIr\fR. .PP -\&\fBBN_mod_mul()\fR multiplies \fIa\fR by \fIb\fR and finds the non-negative +\&\fBBN_mod_mul()\fR multiplies \fIa\fR by \fIb\fR and finds the nonnegative remainder respective to modulus \fIm\fR (\f(CW\*(C`r=(a*b) mod m\*(C'\fR). \fIr\fR may be the same \fB\s-1BIGNUM\s0\fR as \fIa\fR or \fIb\fR. For more efficient algorithms for repeated computations using the same modulus, see @@ -257,7 +257,7 @@ The error codes can be obtained by \fBERR_get_error\fR\|(3). \&\fBBN_add_word\fR\|(3), \fBBN_set_bit\fR\|(3) .SH "COPYRIGHT" .IX Header "COPYRIGHT" -Copyright 2000\-2018 The OpenSSL Project Authors. All Rights Reserved. +Copyright 2000\-2020 The OpenSSL Project Authors. All Rights Reserved. .PP Licensed under the OpenSSL license (the \*(L"License\*(R"). You may not use this file except in compliance with the License. You can obtain a copy diff --git a/crypto/external/bsd/openssl/lib/libcrypto/man/BN_add_word.3 b/crypto/external/bsd/openssl/lib/libcrypto/man/BN_add_word.3 index 9c92ba76417..21e97a6cddc 100644 --- a/crypto/external/bsd/openssl/lib/libcrypto/man/BN_add_word.3 +++ b/crypto/external/bsd/openssl/lib/libcrypto/man/BN_add_word.3 @@ -1,6 +1,6 @@ -.\" $NetBSD: BN_add_word.3,v 1.19 2019/06/09 18:44:31 christos Exp $ +.\" $NetBSD: BN_add_word.3,v 1.19.2.1 2021/03/28 18:21:46 martin Exp $ .\" -.\" Automatically generated by Pod::Man 4.10 (Pod::Simple 3.35) +.\" Automatically generated by Pod::Man 4.11 (Pod::Simple 3.35) .\" .\" Standard preamble: .\" ======================================================================== @@ -135,7 +135,7 @@ .\" ======================================================================== .\" .IX Title "BN_add_word 3" -.TH BN_add_word 3 "2018-09-23" "1.1.1c" "OpenSSL" +.TH BN_add_word 3 "2018-09-23" "1.1.1i" "OpenSSL" .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. .if n .ad l diff --git a/crypto/external/bsd/openssl/lib/libcrypto/man/BN_bn2bin.3 b/crypto/external/bsd/openssl/lib/libcrypto/man/BN_bn2bin.3 index 54abf67a5da..462c1c02a75 100644 --- a/crypto/external/bsd/openssl/lib/libcrypto/man/BN_bn2bin.3 +++ b/crypto/external/bsd/openssl/lib/libcrypto/man/BN_bn2bin.3 @@ -1,6 +1,6 @@ -.\" $NetBSD: BN_bn2bin.3,v 1.19 2019/06/09 18:44:31 christos Exp $ +.\" $NetBSD: BN_bn2bin.3,v 1.19.2.1 2021/03/28 18:21:46 martin Exp $ .\" -.\" Automatically generated by Pod::Man 4.10 (Pod::Simple 3.35) +.\" Automatically generated by Pod::Man 4.11 (Pod::Simple 3.35) .\" .\" Standard preamble: .\" ======================================================================== @@ -135,7 +135,7 @@ .\" ======================================================================== .\" .IX Title "BN_bn2bin 3" -.TH BN_bn2bin 3 "2018-09-23" "1.1.1c" "OpenSSL" +.TH BN_bn2bin 3 "2020-12-10" "1.1.1i" "OpenSSL" .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. .if n .ad l @@ -178,7 +178,7 @@ memory. .PP \&\fBBN_bn2binpad()\fR also converts the absolute value of \fBa\fR into big-endian form and stores it at \fBto\fR. \fBtolen\fR indicates the length of the output buffer -\&\fBto\fR. The result is padded with zeroes if necessary. If \fBtolen\fR is less than +\&\fBto\fR. The result is padded with zeros if necessary. If \fBtolen\fR is less than BN_num_bytes(\fBa\fR) an error is returned. .PP \&\fBBN_bin2bn()\fR converts the positive integer in big-endian form of length @@ -244,7 +244,7 @@ The error codes can be obtained by \fBERR_get_error\fR\|(3). \&\fBBN_num_bytes\fR\|(3) .SH "COPYRIGHT" .IX Header "COPYRIGHT" -Copyright 2000\-2018 The OpenSSL Project Authors. All Rights Reserved. +Copyright 2000\-2020 The OpenSSL Project Authors. All Rights Reserved. .PP Licensed under the OpenSSL license (the \*(L"License\*(R"). You may not use this file except in compliance with the License. You can obtain a copy diff --git a/crypto/external/bsd/openssl/lib/libcrypto/man/BN_cmp.3 b/crypto/external/bsd/openssl/lib/libcrypto/man/BN_cmp.3 index e28b564f038..45a3c168fa2 100644 --- a/crypto/external/bsd/openssl/lib/libcrypto/man/BN_cmp.3 +++ b/crypto/external/bsd/openssl/lib/libcrypto/man/BN_cmp.3 @@ -1,6 +1,6 @@ -.\" $NetBSD: BN_cmp.3,v 1.19 2019/06/09 18:44:31 christos Exp $ +.\" $NetBSD: BN_cmp.3,v 1.19.2.1 2021/03/28 18:21:47 martin Exp $ .\" -.\" Automatically generated by Pod::Man 4.10 (Pod::Simple 3.35) +.\" Automatically generated by Pod::Man 4.11 (Pod::Simple 3.35) .\" .\" Standard preamble: .\" ======================================================================== @@ -135,7 +135,7 @@ .\" ======================================================================== .\" .IX Title "BN_cmp 3" -.TH BN_cmp 3 "2018-09-23" "1.1.1c" "OpenSSL" +.TH BN_cmp 3 "2018-09-23" "1.1.1i" "OpenSSL" .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. .if n .ad l diff --git a/crypto/external/bsd/openssl/lib/libcrypto/man/BN_copy.3 b/crypto/external/bsd/openssl/lib/libcrypto/man/BN_copy.3 index 7f26f4dbef1..6e4923cd408 100644 --- a/crypto/external/bsd/openssl/lib/libcrypto/man/BN_copy.3 +++ b/crypto/external/bsd/openssl/lib/libcrypto/man/BN_copy.3 @@ -1,6 +1,6 @@ -.\" $NetBSD: BN_copy.3,v 1.19 2019/06/09 18:44:31 christos Exp $ +.\" $NetBSD: BN_copy.3,v 1.19.2.1 2021/03/28 18:21:47 martin Exp $ .\" -.\" Automatically generated by Pod::Man 4.10 (Pod::Simple 3.35) +.\" Automatically generated by Pod::Man 4.11 (Pod::Simple 3.35) .\" .\" Standard preamble: .\" ======================================================================== @@ -135,7 +135,7 @@ .\" ======================================================================== .\" .IX Title "BN_copy 3" -.TH BN_copy 3 "2018-09-23" "1.1.1c" "OpenSSL" +.TH BN_copy 3 "2018-09-23" "1.1.1i" "OpenSSL" .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. .if n .ad l diff --git a/crypto/external/bsd/openssl/lib/libcrypto/man/BN_generate_prime.3 b/crypto/external/bsd/openssl/lib/libcrypto/man/BN_generate_prime.3 index 902f91ce273..d4d53bf178d 100644 --- a/crypto/external/bsd/openssl/lib/libcrypto/man/BN_generate_prime.3 +++ b/crypto/external/bsd/openssl/lib/libcrypto/man/BN_generate_prime.3 @@ -1,6 +1,6 @@ -.\" $NetBSD: BN_generate_prime.3,v 1.19 2019/06/09 18:44:31 christos Exp $ +.\" $NetBSD: BN_generate_prime.3,v 1.19.2.1 2021/03/28 18:21:47 martin Exp $ .\" -.\" Automatically generated by Pod::Man 4.10 (Pod::Simple 3.35) +.\" Automatically generated by Pod::Man 4.11 (Pod::Simple 3.35) .\" .\" Standard preamble: .\" ======================================================================== @@ -135,7 +135,7 @@ .\" ======================================================================== .\" .IX Title "BN_generate_prime 3" -.TH BN_generate_prime 3 "2019-03-12" "1.1.1c" "OpenSSL" +.TH BN_generate_prime 3 "2020-12-10" "1.1.1i" "OpenSSL" .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. .if n .ad l @@ -194,7 +194,11 @@ Deprecated: .SH "DESCRIPTION" .IX Header "DESCRIPTION" \&\fBBN_generate_prime_ex()\fR generates a pseudo-random prime number of -at least bit length \fBbits\fR. +at least bit length \fBbits\fR. The returned number is probably prime +with a negligible error. If \fBadd\fR is \fB\s-1NULL\s0\fR the returned prime +number will have exact bit length \fBbits\fR with the top most two +bits set. +.PP If \fBret\fR is not \fB\s-1NULL\s0\fR, it will be used to store the number. .PP If \fBcb\fR is not \fB\s-1NULL\s0\fR, it is used as follows: @@ -218,10 +222,13 @@ If \fBadd\fR is not \fB\s-1NULL\s0\fR, the prime will fulfill the condition p % generator. .PP If \fBsafe\fR is true, it will be a safe prime (i.e. a prime p so -that (p\-1)/2 is also prime). +that (p\-1)/2 is also prime). If \fBsafe\fR is true, and \fBrem\fR == \fB\s-1NULL\s0\fR +the condition will be p % \fBadd\fR == 3. +It is recommended that \fBadd\fR is a multiple of 4. .PP -The \s-1PRNG\s0 must be seeded prior to calling \fBBN_generate_prime_ex()\fR. -The prime number generation has a negligible error probability. +The random generator must be seeded prior to calling \fBBN_generate_prime_ex()\fR. +If the automatic seeding or reseeding of the OpenSSL \s-1CSPRNG\s0 fails due to +external circumstances (see \s-1\fBRAND\s0\fR\|(7)), the operation will fail. .PP \&\fBBN_is_prime_ex()\fR and \fBBN_is_prime_fasttest_ex()\fR test if the number \fBp\fR is prime. The following tests are performed until one of them shows that @@ -251,7 +258,7 @@ For instance, to reach the 128 bit security level, \fBnchecks\fR should be set t .PP If \fBcb\fR is not \fB\s-1NULL\s0\fR, \fBBN_GENCB_call(cb, 1, j)\fR is called after the j\-th iteration (j = 0, 1, ...). \fBctx\fR is a -pre-allocated \fB\s-1BN_CTX\s0\fR (to save the overhead of allocating and +preallocated \fB\s-1BN_CTX\s0\fR (to save the overhead of allocating and freeing the structure in a loop), or \fB\s-1NULL\s0\fR. .PP \&\fBBN_GENCB_call()\fR calls the callback function held in the \fB\s-1BN_GENCB\s0\fR structure @@ -325,14 +332,15 @@ Instead applications should create a \s-1BN_GENCB\s0 structure using BN_GENCB_ne .SH "SEE ALSO" .IX Header "SEE ALSO" \&\fBDH_generate_parameters\fR\|(3), \fBDSA_generate_parameters\fR\|(3), -\&\fBRSA_generate_key\fR\|(3), \fBERR_get_error\fR\|(3), \fBRAND_bytes\fR\|(3) +\&\fBRSA_generate_key\fR\|(3), \fBERR_get_error\fR\|(3), \fBRAND_bytes\fR\|(3), +\&\s-1\fBRAND\s0\fR\|(7) .SH "HISTORY" .IX Header "HISTORY" The \fBBN_GENCB_new()\fR, \fBBN_GENCB_free()\fR, and \fBBN_GENCB_get_arg()\fR functions were added in OpenSSL 1.1.0. .SH "COPYRIGHT" .IX Header "COPYRIGHT" -Copyright 2000\-2018 The OpenSSL Project Authors. All Rights Reserved. +Copyright 2000\-2020 The OpenSSL Project Authors. All Rights Reserved. .PP Licensed under the OpenSSL license (the \*(L"License\*(R"). You may not use this file except in compliance with the License. You can obtain a copy diff --git a/crypto/external/bsd/openssl/lib/libcrypto/man/BN_mod_inverse.3 b/crypto/external/bsd/openssl/lib/libcrypto/man/BN_mod_inverse.3 index 5d8b1327a8f..7e6846a377c 100644 --- a/crypto/external/bsd/openssl/lib/libcrypto/man/BN_mod_inverse.3 +++ b/crypto/external/bsd/openssl/lib/libcrypto/man/BN_mod_inverse.3 @@ -1,6 +1,6 @@ -.\" $NetBSD: BN_mod_inverse.3,v 1.19 2019/06/09 18:44:31 christos Exp $ +.\" $NetBSD: BN_mod_inverse.3,v 1.19.2.1 2021/03/28 18:21:47 martin Exp $ .\" -.\" Automatically generated by Pod::Man 4.10 (Pod::Simple 3.35) +.\" Automatically generated by Pod::Man 4.11 (Pod::Simple 3.35) .\" .\" Standard preamble: .\" ======================================================================== @@ -135,7 +135,7 @@ .\" ======================================================================== .\" .IX Title "BN_mod_inverse 3" -.TH BN_mod_inverse 3 "2018-09-23" "1.1.1c" "OpenSSL" +.TH BN_mod_inverse 3 "2018-09-23" "1.1.1i" "OpenSSL" .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. .if n .ad l diff --git a/crypto/external/bsd/openssl/lib/libcrypto/man/BN_mod_mul_montgomery.3 b/crypto/external/bsd/openssl/lib/libcrypto/man/BN_mod_mul_montgomery.3 index 445d5e5103c..c6b51feec93 100644 --- a/crypto/external/bsd/openssl/lib/libcrypto/man/BN_mod_mul_montgomery.3 +++ b/crypto/external/bsd/openssl/lib/libcrypto/man/BN_mod_mul_montgomery.3 @@ -1,6 +1,6 @@ -.\" $NetBSD: BN_mod_mul_montgomery.3,v 1.19 2019/06/09 18:44:31 christos Exp $ +.\" $NetBSD: BN_mod_mul_montgomery.3,v 1.19.2.1 2021/03/28 18:21:47 martin Exp $ .\" -.\" Automatically generated by Pod::Man 4.10 (Pod::Simple 3.35) +.\" Automatically generated by Pod::Man 4.11 (Pod::Simple 3.35) .\" .\" Standard preamble: .\" ======================================================================== @@ -135,7 +135,7 @@ .\" ======================================================================== .\" .IX Title "BN_mod_mul_montgomery 3" -.TH BN_mod_mul_montgomery 3 "2018-09-23" "1.1.1c" "OpenSSL" +.TH BN_mod_mul_montgomery 3 "2020-12-10" "1.1.1i" "OpenSSL" .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. .if n .ad l @@ -190,7 +190,7 @@ the result in \fIr\fR. \&\fBBN_from_montgomery()\fR performs the Montgomery reduction \fIr\fR = \fIa\fR*R^\-1. .PP \&\fBBN_to_montgomery()\fR computes Mont(\fIa\fR,R^2), i.e. \fIa\fR*R. -Note that \fIa\fR must be non-negative and smaller than the modulus. +Note that \fIa\fR must be nonnegative and smaller than the modulus. .PP For all functions, \fIctx\fR is a previously allocated \fB\s-1BN_CTX\s0\fR used for temporary variables. @@ -203,8 +203,8 @@ on error. .PP For the other functions, 1 is returned for success, 0 on error. The error codes can be obtained by \fBERR_get_error\fR\|(3). -.SH "WARNING" -.IX Header "WARNING" +.SH "WARNINGS" +.IX Header "WARNINGS" The inputs must be reduced modulo \fBm\fR, otherwise the result will be outside the expected range. .SH "SEE ALSO" @@ -216,7 +216,7 @@ outside the expected range. \&\fBBN_MONT_CTX_init()\fR was removed in OpenSSL 1.1.0 .SH "COPYRIGHT" .IX Header "COPYRIGHT" -Copyright 2000\-2017 The OpenSSL Project Authors. All Rights Reserved. +Copyright 2000\-2020 The OpenSSL Project Authors. All Rights Reserved. .PP Licensed under the OpenSSL license (the \*(L"License\*(R"). You may not use this file except in compliance with the License. You can obtain a copy diff --git a/crypto/external/bsd/openssl/lib/libcrypto/man/BN_mod_mul_reciprocal.3 b/crypto/external/bsd/openssl/lib/libcrypto/man/BN_mod_mul_reciprocal.3 index 4c94b2bc800..f435cc7c6f7 100644 --- a/crypto/external/bsd/openssl/lib/libcrypto/man/BN_mod_mul_reciprocal.3 +++ b/crypto/external/bsd/openssl/lib/libcrypto/man/BN_mod_mul_reciprocal.3 @@ -1,6 +1,6 @@ -.\" $NetBSD: BN_mod_mul_reciprocal.3,v 1.19 2019/06/09 18:44:31 christos Exp $ +.\" $NetBSD: BN_mod_mul_reciprocal.3,v 1.19.2.1 2021/03/28 18:21:47 martin Exp $ .\" -.\" Automatically generated by Pod::Man 4.10 (Pod::Simple 3.35) +.\" Automatically generated by Pod::Man 4.11 (Pod::Simple 3.35) .\" .\" Standard preamble: .\" ======================================================================== @@ -135,7 +135,7 @@ .\" ======================================================================== .\" .IX Title "BN_mod_mul_reciprocal 3" -.TH BN_mod_mul_reciprocal 3 "2018-09-23" "1.1.1c" "OpenSSL" +.TH BN_mod_mul_reciprocal 3 "2018-09-23" "1.1.1i" "OpenSSL" .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. .if n .ad l diff --git a/crypto/external/bsd/openssl/lib/libcrypto/man/BN_new.3 b/crypto/external/bsd/openssl/lib/libcrypto/man/BN_new.3 index ca010d6eb2c..5c32ffc9a54 100644 --- a/crypto/external/bsd/openssl/lib/libcrypto/man/BN_new.3 +++ b/crypto/external/bsd/openssl/lib/libcrypto/man/BN_new.3 @@ -1,6 +1,6 @@ -.\" $NetBSD: BN_new.3,v 1.19 2019/06/09 18:44:31 christos Exp $ +.\" $NetBSD: BN_new.3,v 1.19.2.1 2021/03/28 18:21:47 martin Exp $ .\" -.\" Automatically generated by Pod::Man 4.10 (Pod::Simple 3.35) +.\" Automatically generated by Pod::Man 4.11 (Pod::Simple 3.35) .\" .\" Standard preamble: .\" ======================================================================== @@ -135,7 +135,7 @@ .\" ======================================================================== .\" .IX Title "BN_new 3" -.TH BN_new 3 "2019-06-09" "1.1.1c" "OpenSSL" +.TH BN_new 3 "2020-01-23" "1.1.1i" "OpenSSL" .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. .if n .ad l @@ -185,7 +185,7 @@ by \fBERR_get_error\fR\|(3). \&\fBBN_clear()\fR, \fBBN_free()\fR and \fBBN_clear_free()\fR have no return values. .SH "SEE ALSO" .IX Header "SEE ALSO" -\&\fBERR_get_error\fR\|(3) +\&\fBERR_get_error\fR\|(3), \fBOPENSSL_secure_malloc\fR\|(3) .SH "HISTORY" .IX Header "HISTORY" \&\fBBN_init()\fR was removed in OpenSSL 1.1.0; use \fBBN_new()\fR instead. diff --git a/crypto/external/bsd/openssl/lib/libcrypto/man/BN_num_bytes.3 b/crypto/external/bsd/openssl/lib/libcrypto/man/BN_num_bytes.3 index e17ee185f0a..22e05bc2797 100644 --- a/crypto/external/bsd/openssl/lib/libcrypto/man/BN_num_bytes.3 +++ b/crypto/external/bsd/openssl/lib/libcrypto/man/BN_num_bytes.3 @@ -1,6 +1,6 @@ -.\" $NetBSD: BN_num_bytes.3,v 1.19 2019/06/09 18:44:31 christos Exp $ +.\" $NetBSD: BN_num_bytes.3,v 1.19.2.1 2021/03/28 18:21:47 martin Exp $ .\" -.\" Automatically generated by Pod::Man 4.10 (Pod::Simple 3.35) +.\" Automatically generated by Pod::Man 4.11 (Pod::Simple 3.35) .\" .\" Standard preamble: .\" ======================================================================== @@ -135,7 +135,7 @@ .\" ======================================================================== .\" .IX Title "BN_num_bytes 3" -.TH BN_num_bytes 3 "2018-09-23" "1.1.1c" "OpenSSL" +.TH BN_num_bytes 3 "2018-09-23" "1.1.1i" "OpenSSL" .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. .if n .ad l diff --git a/crypto/external/bsd/openssl/lib/libcrypto/man/BN_rand.3 b/crypto/external/bsd/openssl/lib/libcrypto/man/BN_rand.3 index 22dfbecd75e..c9c8617eb51 100644 --- a/crypto/external/bsd/openssl/lib/libcrypto/man/BN_rand.3 +++ b/crypto/external/bsd/openssl/lib/libcrypto/man/BN_rand.3 @@ -1,6 +1,6 @@ -.\" $NetBSD: BN_rand.3,v 1.19 2019/06/09 18:44:31 christos Exp $ +.\" $NetBSD: BN_rand.3,v 1.19.2.1 2021/03/28 18:21:47 martin Exp $ .\" -.\" Automatically generated by Pod::Man 4.10 (Pod::Simple 3.35) +.\" Automatically generated by Pod::Man 4.11 (Pod::Simple 3.35) .\" .\" Standard preamble: .\" ======================================================================== @@ -135,7 +135,7 @@ .\" ======================================================================== .\" .IX Title "BN_rand 3" -.TH BN_rand 3 "2019-06-09" "1.1.1c" "OpenSSL" +.TH BN_rand 3 "2019-06-09" "1.1.1i" "OpenSSL" .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. .if n .ad l diff --git a/crypto/external/bsd/openssl/lib/libcrypto/man/BN_security_bits.3 b/crypto/external/bsd/openssl/lib/libcrypto/man/BN_security_bits.3 index 6dc11311421..6f00e234728 100644 --- a/crypto/external/bsd/openssl/lib/libcrypto/man/BN_security_bits.3 +++ b/crypto/external/bsd/openssl/lib/libcrypto/man/BN_security_bits.3 @@ -1,6 +1,6 @@ -.\" $NetBSD: BN_security_bits.3,v 1.2 2019/06/09 18:44:31 christos Exp $ +.\" $NetBSD: BN_security_bits.3,v 1.2.4.1 2021/03/28 18:21:47 martin Exp $ .\" -.\" Automatically generated by Pod::Man 4.10 (Pod::Simple 3.35) +.\" Automatically generated by Pod::Man 4.11 (Pod::Simple 3.35) .\" .\" Standard preamble: .\" ======================================================================== @@ -135,7 +135,7 @@ .\" ======================================================================== .\" .IX Title "BN_security_bits 3" -.TH BN_security_bits 3 "2019-06-09" "1.1.1c" "OpenSSL" +.TH BN_security_bits 3 "2019-06-09" "1.1.1i" "OpenSSL" .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. .if n .ad l diff --git a/crypto/external/bsd/openssl/lib/libcrypto/man/BN_set_bit.3 b/crypto/external/bsd/openssl/lib/libcrypto/man/BN_set_bit.3 index e21a65e1b57..bcf9bc85a20 100644 --- a/crypto/external/bsd/openssl/lib/libcrypto/man/BN_set_bit.3 +++ b/crypto/external/bsd/openssl/lib/libcrypto/man/BN_set_bit.3 @@ -1,6 +1,6 @@ -.\" $NetBSD: BN_set_bit.3,v 1.19 2019/06/09 18:44:31 christos Exp $ +.\" $NetBSD: BN_set_bit.3,v 1.19.2.1 2021/03/28 18:21:47 martin Exp $ .\" -.\" Automatically generated by Pod::Man 4.10 (Pod::Simple 3.35) +.\" Automatically generated by Pod::Man 4.11 (Pod::Simple 3.35) .\" .\" Standard preamble: .\" ======================================================================== @@ -135,7 +135,7 @@ .\" ======================================================================== .\" .IX Title "BN_set_bit 3" -.TH BN_set_bit 3 "2018-09-23" "1.1.1c" "OpenSSL" +.TH BN_set_bit 3 "2020-12-10" "1.1.1i" "OpenSSL" .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. .if n .ad l @@ -174,15 +174,15 @@ error occurs if \fBa\fR is shorter than \fBn\fR bits. \&\fBBN_is_bit_set()\fR tests if bit \fBn\fR in \fBa\fR is set. .PP \&\fBBN_mask_bits()\fR truncates \fBa\fR to an \fBn\fR bit number -(\f(CW\*(C`a&=~((~0)>>n)\*(C'\fR). An error occurs if \fBa\fR already is +(\f(CW\*(C`a&=~((~0)<<n)\*(C'\fR). An error occurs if \fBa\fR already is shorter than \fBn\fR bits. .PP \&\fBBN_lshift()\fR shifts \fBa\fR left by \fBn\fR bits and places the result in -\&\fBr\fR (\f(CW\*(C`r=a*2^n\*(C'\fR). Note that \fBn\fR must be non-negative. \fBBN_lshift1()\fR shifts +\&\fBr\fR (\f(CW\*(C`r=a*2^n\*(C'\fR). Note that \fBn\fR must be nonnegative. \fBBN_lshift1()\fR shifts \&\fBa\fR left by one and places the result in \fBr\fR (\f(CW\*(C`r=2*a\*(C'\fR). .PP \&\fBBN_rshift()\fR shifts \fBa\fR right by \fBn\fR bits and places the result in -\&\fBr\fR (\f(CW\*(C`r=a/2^n\*(C'\fR). Note that \fBn\fR must be non-negative. \fBBN_rshift1()\fR shifts +\&\fBr\fR (\f(CW\*(C`r=a/2^n\*(C'\fR). Note that \fBn\fR must be nonnegative. \fBBN_rshift1()\fR shifts \&\fBa\fR right by one and places the result in \fBr\fR (\f(CW\*(C`r=a/2\*(C'\fR). .PP For the shift functions, \fBr\fR and \fBa\fR may be the same variable. @@ -197,7 +197,7 @@ can be obtained by \fBERR_get_error\fR\|(3). \&\fBBN_num_bytes\fR\|(3), \fBBN_add\fR\|(3) .SH "COPYRIGHT" .IX Header "COPYRIGHT" -Copyright 2000\-2017 The OpenSSL Project Authors. All Rights Reserved. +Copyright 2000\-2020 The OpenSSL Project Authors. All Rights Reserved. .PP Licensed under the OpenSSL license (the \*(L"License\*(R"). You may not use this file except in compliance with the License. You can obtain a copy diff --git a/crypto/external/bsd/openssl/lib/libcrypto/man/BN_swap.3 b/crypto/external/bsd/openssl/lib/libcrypto/man/BN_swap.3 index 0670e984273..5487f7391f4 100644 --- a/crypto/external/bsd/openssl/lib/libcrypto/man/BN_swap.3 +++ b/crypto/external/bsd/openssl/lib/libcrypto/man/BN_swap.3 @@ -1,6 +1,6 @@ -.\" $NetBSD: BN_swap.3,v 1.19 2019/06/09 18:44:31 christos Exp $ +.\" $NetBSD: BN_swap.3,v 1.19.2.1 2021/03/28 18:21:47 martin Exp $ .\" -.\" Automatically generated by Pod::Man 4.10 (Pod::Simple 3.35) +.\" Automatically generated by Pod::Man 4.11 (Pod::Simple 3.35) .\" .\" Standard preamble: .\" ======================================================================== @@ -135,7 +135,7 @@ .\" ======================================================================== .\" .IX Title "BN_swap 3" -.TH BN_swap 3 "2018-09-23" "1.1.1c" "OpenSSL" +.TH BN_swap 3 "2018-09-23" "1.1.1i" "OpenSSL" .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. .if n .ad l diff --git a/crypto/external/bsd/openssl/lib/libcrypto/man/BN_zero.3 b/crypto/external/bsd/openssl/lib/libcrypto/man/BN_zero.3 index e7900ccd84f..d8f639f96ba 100644 --- a/crypto/external/bsd/openssl/lib/libcrypto/man/BN_zero.3 +++ b/crypto/external/bsd/openssl/lib/libcrypto/man/BN_zero.3 @@ -1,6 +1,6 @@ -.\" $NetBSD: BN_zero.3,v 1.19 2019/06/09 18:44:31 christos Exp $ +.\" $NetBSD: BN_zero.3,v 1.19.2.1 2021/03/28 18:21:47 martin Exp $ .\" -.\" Automatically generated by Pod::Man 4.10 (Pod::Simple 3.35) +.\" Automatically generated by Pod::Man 4.11 (Pod::Simple 3.35) .\" .\" Standard preamble: .\" ======================================================================== @@ -135,7 +135,7 @@ .\" ======================================================================== .\" .IX Title "BN_zero 3" -.TH BN_zero 3 "2018-09-23" "1.1.1c" "OpenSSL" +.TH BN_zero 3 "2018-09-23" "1.1.1i" "OpenSSL" .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. .if n .ad l diff --git a/crypto/external/bsd/openssl/lib/libcrypto/man/BUF_MEM_new.3 b/crypto/external/bsd/openssl/lib/libcrypto/man/BUF_MEM_new.3 index 9843acd8f54..a2962002b0e 100644 --- a/crypto/external/bsd/openssl/lib/libcrypto/man/BUF_MEM_new.3 +++ b/crypto/external/bsd/openssl/lib/libcrypto/man/BUF_MEM_new.3 @@ -1,6 +1,6 @@ -.\" $NetBSD: BUF_MEM_new.3,v 1.3 2019/06/09 18:44:31 christos Exp $ +.\" $NetBSD: BUF_MEM_new.3,v 1.3.2.1 2021/03/28 18:21:47 martin Exp $ .\" -.\" Automatically generated by Pod::Man 4.10 (Pod::Simple 3.35) +.\" Automatically generated by Pod::Man 4.11 (Pod::Simple 3.35) .\" .\" Standard preamble: .\" ======================================================================== @@ -135,7 +135,7 @@ .\" ======================================================================== .\" .IX Title "BUF_MEM_new 3" -.TH BUF_MEM_new 3 "2019-03-12" "1.1.1c" "OpenSSL" +.TH BUF_MEM_new 3 "2019-03-12" "1.1.1i" "OpenSSL" .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. .if n .ad l diff --git a/crypto/external/bsd/openssl/lib/libcrypto/man/CMS_add0_cert.3 b/crypto/external/bsd/openssl/lib/libcrypto/man/CMS_add0_cert.3 index 4ef460386d2..75107c31990 100644 --- a/crypto/external/bsd/openssl/lib/libcrypto/man/CMS_add0_cert.3 +++ b/crypto/external/bsd/openssl/lib/libcrypto/man/CMS_add0_cert.3 @@ -1,6 +1,6 @@ -.\" $NetBSD: CMS_add0_cert.3,v 1.19 2019/06/09 18:44:31 christos Exp $ +.\" $NetBSD: CMS_add0_cert.3,v 1.19.2.1 2021/03/28 18:21:47 martin Exp $ .\" -.\" Automatically generated by Pod::Man 4.10 (Pod::Simple 3.35) +.\" Automatically generated by Pod::Man 4.11 (Pod::Simple 3.35) .\" .\" Standard preamble: .\" ======================================================================== @@ -135,7 +135,7 @@ .\" ======================================================================== .\" .IX Title "CMS_add0_cert 3" -.TH CMS_add0_cert 3 "2018-09-23" "1.1.1c" "OpenSSL" +.TH CMS_add0_cert 3 "2018-09-23" "1.1.1i" "OpenSSL" .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. .if n .ad l diff --git a/crypto/external/bsd/openssl/lib/libcrypto/man/CMS_add1_recipient_cert.3 b/crypto/external/bsd/openssl/lib/libcrypto/man/CMS_add1_recipient_cert.3 index 5c0e825b19a..6d8f8d148d0 100644 --- a/crypto/external/bsd/openssl/lib/libcrypto/man/CMS_add1_recipient_cert.3 +++ b/crypto/external/bsd/openssl/lib/libcrypto/man/CMS_add1_recipient_cert.3 @@ -1,6 +1,6 @@ -.\" $NetBSD: CMS_add1_recipient_cert.3,v 1.19 2019/06/09 18:44:31 christos Exp $ +.\" $NetBSD: CMS_add1_recipient_cert.3,v 1.19.2.1 2021/03/28 18:21:47 martin Exp $ .\" -.\" Automatically generated by Pod::Man 4.10 (Pod::Simple 3.35) +.\" Automatically generated by Pod::Man 4.11 (Pod::Simple 3.35) .\" .\" Standard preamble: .\" ======================================================================== @@ -135,7 +135,7 @@ .\" ======================================================================== .\" .IX Title "CMS_add1_recipient_cert 3" -.TH CMS_add1_recipient_cert 3 "2018-09-23" "1.1.1c" "OpenSSL" +.TH CMS_add1_recipient_cert 3 "2018-09-23" "1.1.1i" "OpenSSL" .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. .if n .ad l diff --git a/crypto/external/bsd/openssl/lib/libcrypto/man/CMS_add1_signer.3 b/crypto/external/bsd/openssl/lib/libcrypto/man/CMS_add1_signer.3 index e5b3f1b488a..5cb167ac396 100644 --- a/crypto/external/bsd/openssl/lib/libcrypto/man/CMS_add1_signer.3 +++ b/crypto/external/bsd/openssl/lib/libcrypto/man/CMS_add1_signer.3 @@ -1,6 +1,6 @@ -.\" $NetBSD: CMS_add1_signer.3,v 1.8 2019/06/09 18:44:31 christos Exp $ +.\" $NetBSD: CMS_add1_signer.3,v 1.8.2.1 2021/03/28 18:21:47 martin Exp $ .\" -.\" Automatically generated by Pod::Man 4.10 (Pod::Simple 3.35) +.\" Automatically generated by Pod::Man 4.11 (Pod::Simple 3.35) .\" .\" Standard preamble: .\" ======================================================================== @@ -135,7 +135,7 @@ .\" ======================================================================== .\" .IX Title "CMS_add1_signer 3" -.TH CMS_add1_signer 3 "2018-09-23" "1.1.1c" "OpenSSL" +.TH CMS_add1_signer 3 "2018-09-23" "1.1.1i" "OpenSSL" .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. .if n .ad l diff --git a/crypto/external/bsd/openssl/lib/libcrypto/man/CMS_compress.3 b/crypto/external/bsd/openssl/lib/libcrypto/man/CMS_compress.3 index 4d83197944a..c521828786e 100644 --- a/crypto/external/bsd/openssl/lib/libcrypto/man/CMS_compress.3 +++ b/crypto/external/bsd/openssl/lib/libcrypto/man/CMS_compress.3 @@ -1,6 +1,6 @@ -.\" $NetBSD: CMS_compress.3,v 1.19 2019/06/09 18:44:31 christos Exp $ +.\" $NetBSD: CMS_compress.3,v 1.19.2.1 2021/03/28 18:21:47 martin Exp $ .\" -.\" Automatically generated by Pod::Man 4.10 (Pod::Simple 3.35) +.\" Automatically generated by Pod::Man 4.11 (Pod::Simple 3.35) .\" .\" Standard preamble: .\" ======================================================================== @@ -135,7 +135,7 @@ .\" ======================================================================== .\" .IX Title "CMS_compress 3" -.TH CMS_compress 3 "2018-09-23" "1.1.1c" "OpenSSL" +.TH CMS_compress 3 "2018-09-23" "1.1.1i" "OpenSSL" .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. .if n .ad l diff --git a/crypto/external/bsd/openssl/lib/libcrypto/man/CMS_decrypt.3 b/crypto/external/bsd/openssl/lib/libcrypto/man/CMS_decrypt.3 index 6e0d684ff16..ef9637ff9e0 100644 --- a/crypto/external/bsd/openssl/lib/libcrypto/man/CMS_decrypt.3 +++ b/crypto/external/bsd/openssl/lib/libcrypto/man/CMS_decrypt.3 @@ -1,6 +1,6 @@ -.\" $NetBSD: CMS_decrypt.3,v 1.19 2019/06/09 18:44:31 christos Exp $ +.\" $NetBSD: CMS_decrypt.3,v 1.19.2.1 2021/03/28 18:21:47 martin Exp $ .\" -.\" Automatically generated by Pod::Man 4.10 (Pod::Simple 3.35) +.\" Automatically generated by Pod::Man 4.11 (Pod::Simple 3.35) .\" .\" Standard preamble: .\" ======================================================================== @@ -135,7 +135,7 @@ .\" ======================================================================== .\" .IX Title "CMS_decrypt 3" -.TH CMS_decrypt 3 "2018-09-23" "1.1.1c" "OpenSSL" +.TH CMS_decrypt 3 "2018-09-23" "1.1.1i" "OpenSSL" .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. .if n .ad l diff --git a/crypto/external/bsd/openssl/lib/libcrypto/man/CMS_encrypt.3 b/crypto/external/bsd/openssl/lib/libcrypto/man/CMS_encrypt.3 index 5d76c0f67e4..41994ca48bb 100644 --- a/crypto/external/bsd/openssl/lib/libcrypto/man/CMS_encrypt.3 +++ b/crypto/external/bsd/openssl/lib/libcrypto/man/CMS_encrypt.3 @@ -1,6 +1,6 @@ -.\" $NetBSD: CMS_encrypt.3,v 1.19 2019/06/09 18:44:31 christos Exp $ +.\" $NetBSD: CMS_encrypt.3,v 1.19.2.1 2021/03/28 18:21:47 martin Exp $ .\" -.\" Automatically generated by Pod::Man 4.10 (Pod::Simple 3.35) +.\" Automatically generated by Pod::Man 4.11 (Pod::Simple 3.35) .\" .\" Standard preamble: .\" ======================================================================== @@ -135,7 +135,7 @@ .\" ======================================================================== .\" .IX Title "CMS_encrypt 3" -.TH CMS_encrypt 3 "2018-09-23" "1.1.1c" "OpenSSL" +.TH CMS_encrypt 3 "2018-09-23" "1.1.1i" "OpenSSL" .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. .if n .ad l diff --git a/crypto/external/bsd/openssl/lib/libcrypto/man/CMS_final.3 b/crypto/external/bsd/openssl/lib/libcrypto/man/CMS_final.3 index df2f3709916..c05b61ce338 100644 --- a/crypto/external/bsd/openssl/lib/libcrypto/man/CMS_final.3 +++ b/crypto/external/bsd/openssl/lib/libcrypto/man/CMS_final.3 @@ -1,6 +1,6 @@ -.\" $NetBSD: CMS_final.3,v 1.19 2019/06/09 18:44:31 christos Exp $ +.\" $NetBSD: CMS_final.3,v 1.19.2.1 2021/03/28 18:21:47 martin Exp $ .\" -.\" Automatically generated by Pod::Man 4.10 (Pod::Simple 3.35) +.\" Automatically generated by Pod::Man 4.11 (Pod::Simple 3.35) .\" .\" Standard preamble: .\" ======================================================================== @@ -135,7 +135,7 @@ .\" ======================================================================== .\" .IX Title "CMS_final 3" -.TH CMS_final 3 "2018-09-23" "1.1.1c" "OpenSSL" +.TH CMS_final 3 "2020-01-23" "1.1.1i" "OpenSSL" .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. .if n .ad l @@ -153,7 +153,7 @@ libcrypto, -lcrypto .Ve .SH "DESCRIPTION" .IX Header "DESCRIPTION" -\&\fBCMS_final()\fR finalises the structure \fBcms\fR. It's purpose is to perform any +\&\fBCMS_final()\fR finalises the structure \fBcms\fR. Its purpose is to perform any operations necessary on \fBcms\fR (digest computation for example) and set the appropriate fields. The parameter \fBdata\fR contains the content to be processed. The \fBdcont\fR parameter contains a \s-1BIO\s0 to write content to after @@ -173,7 +173,7 @@ I/O functions perform finalisation operations internally. \&\fBCMS_encrypt\fR\|(3) .SH "COPYRIGHT" .IX Header "COPYRIGHT" -Copyright 2008\-2016 The OpenSSL Project Authors. All Rights Reserved. +Copyright 2008\-2019 The OpenSSL Project Authors. All Rights Reserved. .PP Licensed under the OpenSSL license (the \*(L"License\*(R"). You may not use this file except in compliance with the License. You can obtain a copy diff --git a/crypto/external/bsd/openssl/lib/libcrypto/man/CMS_get0_RecipientInfos.3 b/crypto/external/bsd/openssl/lib/libcrypto/man/CMS_get0_RecipientInfos.3 index d6412d1b8f0..1d7f67bb419 100644 --- a/crypto/external/bsd/openssl/lib/libcrypto/man/CMS_get0_RecipientInfos.3 +++ b/crypto/external/bsd/openssl/lib/libcrypto/man/CMS_get0_RecipientInfos.3 @@ -1,6 +1,6 @@ -.\" $NetBSD: CMS_get0_RecipientInfos.3,v 1.19 2019/06/09 18:44:31 christos Exp $ +.\" $NetBSD: CMS_get0_RecipientInfos.3,v 1.19.2.1 2021/03/28 18:21:47 martin Exp $ .\" -.\" Automatically generated by Pod::Man 4.10 (Pod::Simple 3.35) +.\" Automatically generated by Pod::Man 4.11 (Pod::Simple 3.35) .\" .\" Standard preamble: .\" ======================================================================== @@ -135,7 +135,7 @@ .\" ======================================================================== .\" .IX Title "CMS_get0_RecipientInfos 3" -.TH CMS_get0_RecipientInfos 3 "2018-09-23" "1.1.1c" "OpenSSL" +.TH CMS_get0_RecipientInfos 3 "2018-09-23" "1.1.1i" "OpenSSL" .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. .if n .ad l diff --git a/crypto/external/bsd/openssl/lib/libcrypto/man/CMS_get0_SignerInfos.3 b/crypto/external/bsd/openssl/lib/libcrypto/man/CMS_get0_SignerInfos.3 index c571b552f78..0c07cf3e6f0 100644 --- a/crypto/external/bsd/openssl/lib/libcrypto/man/CMS_get0_SignerInfos.3 +++ b/crypto/external/bsd/openssl/lib/libcrypto/man/CMS_get0_SignerInfos.3 @@ -1,6 +1,6 @@ -.\" $NetBSD: CMS_get0_SignerInfos.3,v 1.19 2019/06/09 18:44:31 christos Exp $ +.\" $NetBSD: CMS_get0_SignerInfos.3,v 1.19.2.1 2021/03/28 18:21:47 martin Exp $ .\" -.\" Automatically generated by Pod::Man 4.10 (Pod::Simple 3.35) +.\" Automatically generated by Pod::Man 4.11 (Pod::Simple 3.35) .\" .\" Standard preamble: .\" ======================================================================== @@ -135,7 +135,7 @@ .\" ======================================================================== .\" .IX Title "CMS_get0_SignerInfos 3" -.TH CMS_get0_SignerInfos 3 "2018-09-23" "1.1.1c" "OpenSSL" +.TH CMS_get0_SignerInfos 3 "2018-09-23" "1.1.1i" "OpenSSL" .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. .if n .ad l diff --git a/crypto/external/bsd/openssl/lib/libcrypto/man/CMS_get0_type.3 b/crypto/external/bsd/openssl/lib/libcrypto/man/CMS_get0_type.3 index 9e244f65006..bd998469920 100644 --- a/crypto/external/bsd/openssl/lib/libcrypto/man/CMS_get0_type.3 +++ b/crypto/external/bsd/openssl/lib/libcrypto/man/CMS_get0_type.3 @@ -1,6 +1,6 @@ -.\" $NetBSD: CMS_get0_type.3,v 1.19 2019/06/09 18:44:31 christos Exp $ +.\" $NetBSD: CMS_get0_type.3,v 1.19.2.1 2021/03/28 18:21:47 martin Exp $ .\" -.\" Automatically generated by Pod::Man 4.10 (Pod::Simple 3.35) +.\" Automatically generated by Pod::Man 4.11 (Pod::Simple 3.35) .\" .\" Standard preamble: .\" ======================================================================== @@ -135,7 +135,7 @@ .\" ======================================================================== .\" .IX Title "CMS_get0_type 3" -.TH CMS_get0_type 3 "2019-03-12" "1.1.1c" "OpenSSL" +.TH CMS_get0_type 3 "2019-03-12" "1.1.1i" "OpenSSL" .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. .if n .ad l diff --git a/crypto/external/bsd/openssl/lib/libcrypto/man/CMS_get1_ReceiptRequest.3 b/crypto/external/bsd/openssl/lib/libcrypto/man/CMS_get1_ReceiptRequest.3 index 21708fe0fe5..7560daa7cda 100644 --- a/crypto/external/bsd/openssl/lib/libcrypto/man/CMS_get1_ReceiptRequest.3 +++ b/crypto/external/bsd/openssl/lib/libcrypto/man/CMS_get1_ReceiptRequest.3 @@ -1,6 +1,6 @@ -.\" $NetBSD: CMS_get1_ReceiptRequest.3,v 1.19 2019/06/09 18:44:31 christos Exp $ +.\" $NetBSD: CMS_get1_ReceiptRequest.3,v 1.19.2.1 2021/03/28 18:21:47 martin Exp $ .\" -.\" Automatically generated by Pod::Man 4.10 (Pod::Simple 3.35) +.\" Automatically generated by Pod::Man 4.11 (Pod::Simple 3.35) .\" .\" Standard preamble: .\" ======================================================================== @@ -135,7 +135,7 @@ .\" ======================================================================== .\" .IX Title "CMS_get1_ReceiptRequest 3" -.TH CMS_get1_ReceiptRequest 3 "2018-09-23" "1.1.1c" "OpenSSL" +.TH CMS_get1_ReceiptRequest 3 "2018-09-23" "1.1.1i" "OpenSSL" .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. .if n .ad l diff --git a/crypto/external/bsd/openssl/lib/libcrypto/man/CMS_sign.3 b/crypto/external/bsd/openssl/lib/libcrypto/man/CMS_sign.3 index 5c4584eb396..5a3b9e67f27 100644 --- a/crypto/external/bsd/openssl/lib/libcrypto/man/CMS_sign.3 +++ b/crypto/external/bsd/openssl/lib/libcrypto/man/CMS_sign.3 @@ -1,6 +1,6 @@ -.\" $NetBSD: CMS_sign.3,v 1.19 2019/06/09 18:44:31 christos Exp $ +.\" $NetBSD: CMS_sign.3,v 1.19.2.1 2021/03/28 18:21:47 martin Exp $ .\" -.\" Automatically generated by Pod::Man 4.10 (Pod::Simple 3.35) +.\" Automatically generated by Pod::Man 4.11 (Pod::Simple 3.35) .\" .\" Standard preamble: .\" ======================================================================== @@ -135,7 +135,7 @@ .\" ======================================================================== .\" .IX Title "CMS_sign 3" -.TH CMS_sign 3 "2018-09-23" "1.1.1c" "OpenSSL" +.TH CMS_sign 3 "2018-09-23" "1.1.1i" "OpenSSL" .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. .if n .ad l diff --git a/crypto/external/bsd/openssl/lib/libcrypto/man/CMS_sign_receipt.3 b/crypto/external/bsd/openssl/lib/libcrypto/man/CMS_sign_receipt.3 index 55aa85eac28..cec3da54225 100644 --- a/crypto/external/bsd/openssl/lib/libcrypto/man/CMS_sign_receipt.3 +++ b/crypto/external/bsd/openssl/lib/libcrypto/man/CMS_sign_receipt.3 @@ -1,6 +1,6 @@ -.\" $NetBSD: CMS_sign_receipt.3,v 1.19 2019/06/09 18:44:31 christos Exp $ +.\" $NetBSD: CMS_sign_receipt.3,v 1.19.2.1 2021/03/28 18:21:47 martin Exp $ .\" -.\" Automatically generated by Pod::Man 4.10 (Pod::Simple 3.35) +.\" Automatically generated by Pod::Man 4.11 (Pod::Simple 3.35) .\" .\" Standard preamble: .\" ======================================================================== @@ -135,7 +135,7 @@ .\" ======================================================================== .\" .IX Title "CMS_sign_receipt 3" -.TH CMS_sign_receipt 3 "2018-09-23" "1.1.1c" "OpenSSL" +.TH CMS_sign_receipt 3 "2018-09-23" "1.1.1i" "OpenSSL" .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. .if n .ad l diff --git a/crypto/external/bsd/openssl/lib/libcrypto/man/CMS_uncompress.3 b/crypto/external/bsd/openssl/lib/libcrypto/man/CMS_uncompress.3 index 4dd03b449b3..eabfb235a4f 100644 --- a/crypto/external/bsd/openssl/lib/libcrypto/man/CMS_uncompress.3 +++ b/crypto/external/bsd/openssl/lib/libcrypto/man/CMS_uncompress.3 @@ -1,6 +1,6 @@ -.\" $NetBSD: CMS_uncompress.3,v 1.19 2019/06/09 18:44:31 christos Exp $ +.\" $NetBSD: CMS_uncompress.3,v 1.19.2.1 2021/03/28 18:21:47 martin Exp $ .\" -.\" Automatically generated by Pod::Man 4.10 (Pod::Simple 3.35) +.\" Automatically generated by Pod::Man 4.11 (Pod::Simple 3.35) .\" .\" Standard preamble: .\" ======================================================================== @@ -135,7 +135,7 @@ .\" ======================================================================== .\" .IX Title "CMS_uncompress 3" -.TH CMS_uncompress 3 "2018-09-23" "1.1.1c" "OpenSSL" +.TH CMS_uncompress 3 "2018-09-23" "1.1.1i" "OpenSSL" .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. .if n .ad l diff --git a/crypto/external/bsd/openssl/lib/libcrypto/man/CMS_verify.3 b/crypto/external/bsd/openssl/lib/libcrypto/man/CMS_verify.3 index a3c908770fb..c8033aba077 100644 --- a/crypto/external/bsd/openssl/lib/libcrypto/man/CMS_verify.3 +++ b/crypto/external/bsd/openssl/lib/libcrypto/man/CMS_verify.3 @@ -1,6 +1,6 @@ -.\" $NetBSD: CMS_verify.3,v 1.19 2019/06/09 18:44:31 christos Exp $ +.\" $NetBSD: CMS_verify.3,v 1.19.2.1 2021/03/28 18:21:47 martin Exp $ .\" -.\" Automatically generated by Pod::Man 4.10 (Pod::Simple 3.35) +.\" Automatically generated by Pod::Man 4.11 (Pod::Simple 3.35) .\" .\" Standard preamble: .\" ======================================================================== @@ -135,7 +135,7 @@ .\" ======================================================================== .\" .IX Title "CMS_verify 3" -.TH CMS_verify 3 "2019-06-09" "1.1.1c" "OpenSSL" +.TH CMS_verify 3 "2020-12-10" "1.1.1i" "OpenSSL" .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. .if n .ad l @@ -165,7 +165,7 @@ present in \fBcms\fR. The content is written to \fBout\fR if it is not \s-1NULL. \&\fBflags\fR is an optional set of flags, which can be used to modify the verify operation. .PP -\&\fBCMS_get0_signers()\fR retrieves the signing certificate(s) from \fBcms\fR, it must +\&\fBCMS_get0_signers()\fR retrieves the signing certificate(s) from \fBcms\fR, it may only be called after a successful \fBCMS_verify()\fR operation. .SH "VERIFY PROCESS" .IX Header "VERIFY PROCESS" @@ -233,7 +233,7 @@ useful if one merely wishes to write the content to \fBout\fR and its validity is not considered important. .PP Chain verification should arguably be performed using the signing time rather -than the current time. However since the signing time is supplied by the +than the current time. However, since the signing time is supplied by the signer it cannot be trusted without additional evidence (such as a trusted timestamp). .SH "RETURN VALUES" @@ -257,7 +257,7 @@ be held in memory if it is not detached. \&\fBERR_get_error\fR\|(3), \fBCMS_sign\fR\|(3) .SH "COPYRIGHT" .IX Header "COPYRIGHT" -Copyright 2008\-2019 The OpenSSL Project Authors. All Rights Reserved. +Copyright 2008\-2020 The OpenSSL Project Authors. All Rights Reserved. .PP Licensed under the OpenSSL license (the \*(L"License\*(R"). You may not use this file except in compliance with the License. You can obtain a copy diff --git a/crypto/external/bsd/openssl/lib/libcrypto/man/CMS_verify_receipt.3 b/crypto/external/bsd/openssl/lib/libcrypto/man/CMS_verify_receipt.3 index 3b564269419..208755271b4 100644 --- a/crypto/external/bsd/openssl/lib/libcrypto/man/CMS_verify_receipt.3 +++ b/crypto/external/bsd/openssl/lib/libcrypto/man/CMS_verify_receipt.3 @@ -1,6 +1,6 @@ -.\" $NetBSD: CMS_verify_receipt.3,v 1.19 2019/06/09 18:44:31 christos Exp $ +.\" $NetBSD: CMS_verify_receipt.3,v 1.19.2.1 2021/03/28 18:21:47 martin Exp $ .\" -.\" Automatically generated by Pod::Man 4.10 (Pod::Simple 3.35) +.\" Automatically generated by Pod::Man 4.11 (Pod::Simple 3.35) .\" .\" Standard preamble: .\" ======================================================================== @@ -135,7 +135,7 @@ .\" ======================================================================== .\" .IX Title "CMS_verify_receipt 3" -.TH CMS_verify_receipt 3 "2018-09-23" "1.1.1c" "OpenSSL" +.TH CMS_verify_receipt 3 "2018-09-23" "1.1.1i" "OpenSSL" .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. .if n .ad l diff --git a/crypto/external/bsd/openssl/lib/libcrypto/man/CONF_modules_free.3 b/crypto/external/bsd/openssl/lib/libcrypto/man/CONF_modules_free.3 index 53928eefdd5..582fca86299 100644 --- a/crypto/external/bsd/openssl/lib/libcrypto/man/CONF_modules_free.3 +++ b/crypto/external/bsd/openssl/lib/libcrypto/man/CONF_modules_free.3 @@ -1,6 +1,6 @@ -.\" $NetBSD: CONF_modules_free.3,v 1.19 2019/06/09 18:44:31 christos Exp $ +.\" $NetBSD: CONF_modules_free.3,v 1.19.2.1 2021/03/28 18:21:47 martin Exp $ .\" -.\" Automatically generated by Pod::Man 4.10 (Pod::Simple 3.35) +.\" Automatically generated by Pod::Man 4.11 (Pod::Simple 3.35) .\" .\" Standard preamble: .\" ======================================================================== @@ -135,7 +135,7 @@ .\" ======================================================================== .\" .IX Title "CONF_modules_free 3" -.TH CONF_modules_free 3 "2018-09-23" "1.1.1c" "OpenSSL" +.TH CONF_modules_free 3 "2018-09-23" "1.1.1i" "OpenSSL" .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. .if n .ad l diff --git a/crypto/external/bsd/openssl/lib/libcrypto/man/CONF_modules_load_file.3 b/crypto/external/bsd/openssl/lib/libcrypto/man/CONF_modules_load_file.3 index 7b63bd34ad2..86c9ab6cfb8 100644 --- a/crypto/external/bsd/openssl/lib/libcrypto/man/CONF_modules_load_file.3 +++ b/crypto/external/bsd/openssl/lib/libcrypto/man/CONF_modules_load_file.3 @@ -1,6 +1,6 @@ -.\" $NetBSD: CONF_modules_load_file.3,v 1.19 2019/06/09 18:44:31 christos Exp $ +.\" $NetBSD: CONF_modules_load_file.3,v 1.19.2.1 2021/03/28 18:21:47 martin Exp $ .\" -.\" Automatically generated by Pod::Man 4.10 (Pod::Simple 3.35) +.\" Automatically generated by Pod::Man 4.11 (Pod::Simple 3.35) .\" .\" Standard preamble: .\" ======================================================================== @@ -135,7 +135,7 @@ .\" ======================================================================== .\" .IX Title "CONF_modules_load_file 3" -.TH CONF_modules_load_file 3 "2019-06-09" "1.1.1c" "OpenSSL" +.TH CONF_modules_load_file 3 "2019-06-09" "1.1.1i" "OpenSSL" .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. .if n .ad l diff --git a/crypto/external/bsd/openssl/lib/libcrypto/man/CRYPTO_THREAD_run_once.3 b/crypto/external/bsd/openssl/lib/libcrypto/man/CRYPTO_THREAD_run_once.3 index 7304817c7e3..61d00579d47 100644 --- a/crypto/external/bsd/openssl/lib/libcrypto/man/CRYPTO_THREAD_run_once.3 +++ b/crypto/external/bsd/openssl/lib/libcrypto/man/CRYPTO_THREAD_run_once.3 @@ -1,6 +1,6 @@ -.\" $NetBSD: CRYPTO_THREAD_run_once.3,v 1.3 2019/06/09 18:44:31 christos Exp $ +.\" $NetBSD: CRYPTO_THREAD_run_once.3,v 1.3.2.1 2021/03/28 18:21:47 martin Exp $ .\" -.\" Automatically generated by Pod::Man 4.10 (Pod::Simple 3.35) +.\" Automatically generated by Pod::Man 4.11 (Pod::Simple 3.35) .\" .\" Standard preamble: .\" ======================================================================== @@ -135,7 +135,7 @@ .\" ======================================================================== .\" .IX Title "CRYPTO_THREAD_run_once 3" -.TH CRYPTO_THREAD_run_once 3 "2018-09-23" "1.1.1c" "OpenSSL" +.TH CRYPTO_THREAD_run_once 3 "2020-12-10" "1.1.1i" "OpenSSL" .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. .if n .ad l @@ -214,11 +214,11 @@ On Windows platforms the CRYPTO_THREAD_* types and functions in the openssl/crypto.h header are dependent on some of the types customarily made available by including windows.h. The application developer is likely to require control over when the latter is included, commonly as -one of the first included headers. Therefore it is defined as an +one of the first included headers. Therefore, it is defined as an application developer's responsibility to include windows.h prior to crypto.h where use of CRYPTO_THREAD_* types and functions is required. -.SH "EXAMPLE" -.IX Header "EXAMPLE" +.SH "EXAMPLES" +.IX Header "EXAMPLES" This example safely initializes and uses a lock. .PP .Vb 4 @@ -282,7 +282,7 @@ You can find out if OpenSSL was configured with thread support: \&\fBcrypto\fR\|(7) .SH "COPYRIGHT" .IX Header "COPYRIGHT" -Copyright 2000\-2018 The OpenSSL Project Authors. All Rights Reserved. +Copyright 2000\-2020 The OpenSSL Project Authors. All Rights Reserved. .PP Licensed under the OpenSSL license (the \*(L"License\*(R"). You may not use this file except in compliance with the License. You can obtain a copy diff --git a/crypto/external/bsd/openssl/lib/libcrypto/man/CRYPTO_get_ex_new_index.3 b/crypto/external/bsd/openssl/lib/libcrypto/man/CRYPTO_get_ex_new_index.3 index 8ebb67b78fc..a7620a3486d 100644 --- a/crypto/external/bsd/openssl/lib/libcrypto/man/CRYPTO_get_ex_new_index.3 +++ b/crypto/external/bsd/openssl/lib/libcrypto/man/CRYPTO_get_ex_new_index.3 @@ -1,6 +1,6 @@ -.\" $NetBSD: CRYPTO_get_ex_new_index.3,v 1.3 2019/06/09 18:44:31 christos Exp $ +.\" $NetBSD: CRYPTO_get_ex_new_index.3,v 1.3.2.1 2021/03/28 18:21:47 martin Exp $ .\" -.\" Automatically generated by Pod::Man 4.10 (Pod::Simple 3.35) +.\" Automatically generated by Pod::Man 4.11 (Pod::Simple 3.35) .\" .\" Standard preamble: .\" ======================================================================== @@ -135,7 +135,7 @@ .\" ======================================================================== .\" .IX Title "CRYPTO_get_ex_new_index 3" -.TH CRYPTO_get_ex_new_index 3 "2019-03-12" "1.1.1c" "OpenSSL" +.TH CRYPTO_get_ex_new_index 3 "2019-03-12" "1.1.1i" "OpenSSL" .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. .if n .ad l diff --git a/crypto/external/bsd/openssl/lib/libcrypto/man/CTLOG_STORE_get0_log_by_id.3 b/crypto/external/bsd/openssl/lib/libcrypto/man/CTLOG_STORE_get0_log_by_id.3 index d1baed5250b..c1e38c3481e 100644 --- a/crypto/external/bsd/openssl/lib/libcrypto/man/CTLOG_STORE_get0_log_by_id.3 +++ b/crypto/external/bsd/openssl/lib/libcrypto/man/CTLOG_STORE_get0_log_by_id.3 @@ -1,6 +1,6 @@ -.\" $NetBSD: CTLOG_STORE_get0_log_by_id.3,v 1.3 2019/06/09 18:44:31 christos Exp $ +.\" $NetBSD: CTLOG_STORE_get0_log_by_id.3,v 1.3.2.1 2021/03/28 18:21:47 martin Exp $ .\" -.\" Automatically generated by Pod::Man 4.10 (Pod::Simple 3.35) +.\" Automatically generated by Pod::Man 4.11 (Pod::Simple 3.35) .\" .\" Standard preamble: .\" ======================================================================== @@ -135,7 +135,7 @@ .\" ======================================================================== .\" .IX Title "CTLOG_STORE_get0_log_by_id 3" -.TH CTLOG_STORE_get0_log_by_id 3 "2019-03-12" "1.1.1c" "OpenSSL" +.TH CTLOG_STORE_get0_log_by_id 3 "2019-03-12" "1.1.1i" "OpenSSL" .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. .if n .ad l diff --git a/crypto/external/bsd/openssl/lib/libcrypto/man/CTLOG_STORE_new.3 b/crypto/external/bsd/openssl/lib/libcrypto/man/CTLOG_STORE_new.3 index 4dd11caf1d4..1cafd65d32b 100644 --- a/crypto/external/bsd/openssl/lib/libcrypto/man/CTLOG_STORE_new.3 +++ b/crypto/external/bsd/openssl/lib/libcrypto/man/CTLOG_STORE_new.3 @@ -1,6 +1,6 @@ -.\" $NetBSD: CTLOG_STORE_new.3,v 1.3 2019/06/09 18:44:31 christos Exp $ +.\" $NetBSD: CTLOG_STORE_new.3,v 1.3.2.1 2021/03/28 18:21:47 martin Exp $ .\" -.\" Automatically generated by Pod::Man 4.10 (Pod::Simple 3.35) +.\" Automatically generated by Pod::Man 4.11 (Pod::Simple 3.35) .\" .\" Standard preamble: .\" ======================================================================== @@ -135,7 +135,7 @@ .\" ======================================================================== .\" .IX Title "CTLOG_STORE_new 3" -.TH CTLOG_STORE_new 3 "2018-09-23" "1.1.1c" "OpenSSL" +.TH CTLOG_STORE_new 3 "2018-09-23" "1.1.1i" "OpenSSL" .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. .if n .ad l diff --git a/crypto/external/bsd/openssl/lib/libcrypto/man/CTLOG_new.3 b/crypto/external/bsd/openssl/lib/libcrypto/man/CTLOG_new.3 index f41d24bc418..7ea286f172d 100644 --- a/crypto/external/bsd/openssl/lib/libcrypto/man/CTLOG_new.3 +++ b/crypto/external/bsd/openssl/lib/libcrypto/man/CTLOG_new.3 @@ -1,6 +1,6 @@ -.\" $NetBSD: CTLOG_new.3,v 1.3 2019/06/09 18:44:31 christos Exp $ +.\" $NetBSD: CTLOG_new.3,v 1.3.2.1 2021/03/28 18:21:47 martin Exp $ .\" -.\" Automatically generated by Pod::Man 4.10 (Pod::Simple 3.35) +.\" Automatically generated by Pod::Man 4.11 (Pod::Simple 3.35) .\" .\" Standard preamble: .\" ======================================================================== @@ -135,7 +135,7 @@ .\" ======================================================================== .\" .IX Title "CTLOG_new 3" -.TH CTLOG_new 3 "2018-09-23" "1.1.1c" "OpenSSL" +.TH CTLOG_new 3 "2018-09-23" "1.1.1i" "OpenSSL" .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. .if n .ad l diff --git a/crypto/external/bsd/openssl/lib/libcrypto/man/CT_POLICY_EVAL_CTX_new.3 b/crypto/external/bsd/openssl/lib/libcrypto/man/CT_POLICY_EVAL_CTX_new.3 index 801af905e0e..b8e6cad6cdd 100644 --- a/crypto/external/bsd/openssl/lib/libcrypto/man/CT_POLICY_EVAL_CTX_new.3 +++ b/crypto/external/bsd/openssl/lib/libcrypto/man/CT_POLICY_EVAL_CTX_new.3 @@ -1,6 +1,6 @@ -.\" $NetBSD: CT_POLICY_EVAL_CTX_new.3,v 1.3 2019/06/09 18:44:31 christos Exp $ +.\" $NetBSD: CT_POLICY_EVAL_CTX_new.3,v 1.3.2.1 2021/03/28 18:21:47 martin Exp $ .\" -.\" Automatically generated by Pod::Man 4.10 (Pod::Simple 3.35) +.\" Automatically generated by Pod::Man 4.11 (Pod::Simple 3.35) .\" .\" Standard preamble: .\" ======================================================================== @@ -135,7 +135,7 @@ .\" ======================================================================== .\" .IX Title "CT_POLICY_EVAL_CTX_new 3" -.TH CT_POLICY_EVAL_CTX_new 3 "2018-09-23" "1.1.1c" "OpenSSL" +.TH CT_POLICY_EVAL_CTX_new 3 "2018-09-23" "1.1.1i" "OpenSSL" .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. .if n .ad l diff --git a/crypto/external/bsd/openssl/lib/libcrypto/man/DEFINE_STACK_OF.3 b/crypto/external/bsd/openssl/lib/libcrypto/man/DEFINE_STACK_OF.3 index 308a7d0919c..f8b04a62e95 100644 --- a/crypto/external/bsd/openssl/lib/libcrypto/man/DEFINE_STACK_OF.3 +++ b/crypto/external/bsd/openssl/lib/libcrypto/man/DEFINE_STACK_OF.3 @@ -1,6 +1,6 @@ -.\" $NetBSD: DEFINE_STACK_OF.3,v 1.3 2019/06/09 18:44:31 christos Exp $ +.\" $NetBSD: DEFINE_STACK_OF.3,v 1.3.2.1 2021/03/28 18:21:47 martin Exp $ .\" -.\" Automatically generated by Pod::Man 4.10 (Pod::Simple 3.35) +.\" Automatically generated by Pod::Man 4.11 (Pod::Simple 3.35) .\" .\" Standard preamble: .\" ======================================================================== @@ -135,7 +135,7 @@ .\" ======================================================================== .\" .IX Title "DEFINE_STACK_OF 3" -.TH DEFINE_STACK_OF 3 "2018-09-23" "1.1.1c" "OpenSSL" +.TH DEFINE_STACK_OF 3 "2018-09-23" "1.1.1i" "OpenSSL" .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. .if n .ad l diff --git a/crypto/external/bsd/openssl/lib/libcrypto/man/DES_random_key.3 b/crypto/external/bsd/openssl/lib/libcrypto/man/DES_random_key.3 index 5badd89835d..5a7d92d1bcf 100644 --- a/crypto/external/bsd/openssl/lib/libcrypto/man/DES_random_key.3 +++ b/crypto/external/bsd/openssl/lib/libcrypto/man/DES_random_key.3 @@ -1,6 +1,6 @@ -.\" $NetBSD: DES_random_key.3,v 1.3 2019/06/09 18:44:31 christos Exp $ +.\" $NetBSD: DES_random_key.3,v 1.3.2.1 2021/03/28 18:21:47 martin Exp $ .\" -.\" Automatically generated by Pod::Man 4.10 (Pod::Simple 3.35) +.\" Automatically generated by Pod::Man 4.11 (Pod::Simple 3.35) .\" .\" Standard preamble: .\" ======================================================================== @@ -135,7 +135,7 @@ .\" ======================================================================== .\" .IX Title "DES_random_key 3" -.TH DES_random_key 3 "2019-06-09" "1.1.1c" "OpenSSL" +.TH DES_random_key 3 "2020-12-10" "1.1.1i" "OpenSSL" .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. .if n .ad l @@ -245,9 +245,11 @@ consists of 8 bytes with odd parity. The least significant bit in each byte is the parity bit. The key schedule is an expanded form of the key; it is used to speed the encryption process. .PP -\&\fBDES_random_key()\fR generates a random key. The \s-1PRNG\s0 must be seeded -prior to using this function (see \fBRAND_bytes\fR\|(3)). If the \s-1PRNG\s0 -could not generate a secure key, 0 is returned. +\&\fBDES_random_key()\fR generates a random key. The random generator must be +seeded when calling this function. +If the automatic seeding or reseeding of the OpenSSL \s-1CSPRNG\s0 fails due to +external circumstances (see \s-1\fBRAND\s0\fR\|(7)), the operation will fail. +If the function fails, 0 is returned. .PP Before a \s-1DES\s0 key can be used, it must be converted into the architecture dependent \fIDES_key_schedule\fR via the @@ -259,7 +261,7 @@ is returned. If the key is a weak key, then \-2 is returned. If an error is returned, the key schedule is not generated. .PP \&\fBDES_set_key()\fR works like -\&\fBDES_set_key_checked()\fR if the \fIDES_check_key\fR flag is non-zero, +\&\fBDES_set_key_checked()\fR if the \fIDES_check_key\fR flag is nonzero, otherwise like \fBDES_set_key_unchecked()\fR. These functions are available for compatibility; it is recommended to use a function that does not depend on a global variable. @@ -276,7 +278,7 @@ The following routines mostly operate on an input and output stream of decrypts a single 8\-byte \fIDES_cblock\fR in \fIelectronic code book\fR (\s-1ECB\s0) mode. It always transforms the input data, pointed to by \&\fIinput\fR, into the output data, pointed to by the \fIoutput\fR argument. -If the \fIencrypt\fR argument is non-zero (\s-1DES_ENCRYPT\s0), the \fIinput\fR +If the \fIencrypt\fR argument is nonzero (\s-1DES_ENCRYPT\s0), the \fIinput\fR (cleartext) is encrypted in to the \fIoutput\fR (ciphertext) using the key_schedule specified by the \fIschedule\fR argument, previously set via \&\fIDES_set_key\fR. If \fIencrypt\fR is zero (\s-1DES_DECRYPT\s0), the \fIinput\fR (now @@ -295,7 +297,7 @@ The macro \fBDES_ecb2_encrypt()\fR is provided to perform two-key Triple-DES encryption by using \fIks1\fR for the final encryption. .PP \&\fBDES_ncbc_encrypt()\fR encrypts/decrypts using the \fIcipher-block-chaining\fR -(\s-1CBC\s0) mode of \s-1DES.\s0 If the \fIencrypt\fR argument is non-zero, the +(\s-1CBC\s0) mode of \s-1DES.\s0 If the \fIencrypt\fR argument is nonzero, the routine cipher-block-chain encrypts the cleartext data pointed to by the \fIinput\fR argument into the ciphertext pointed to by the \fIoutput\fR argument, using the key schedule provided by the \fIschedule\fR argument, @@ -446,7 +448,7 @@ if both character were not present, and could crash when given non-ASCII on some platforms. .SH "COPYRIGHT" .IX Header "COPYRIGHT" -Copyright 2000\-2019 The OpenSSL Project Authors. All Rights Reserved. +Copyright 2000\-2020 The OpenSSL Project Authors. All Rights Reserved. .PP Licensed under the OpenSSL license (the \*(L"License\*(R"). You may not use this file except in compliance with the License. You can obtain a copy diff --git a/crypto/external/bsd/openssl/lib/libcrypto/man/DH_generate_key.3 b/crypto/external/bsd/openssl/lib/libcrypto/man/DH_generate_key.3 index 5a8b7655120..11b990c48c8 100644 --- a/crypto/external/bsd/openssl/lib/libcrypto/man/DH_generate_key.3 +++ b/crypto/external/bsd/openssl/lib/libcrypto/man/DH_generate_key.3 @@ -1,6 +1,6 @@ -.\" $NetBSD: DH_generate_key.3,v 1.19 2019/06/09 18:44:31 christos Exp $ +.\" $NetBSD: DH_generate_key.3,v 1.19.2.1 2021/03/28 18:21:47 martin Exp $ .\" -.\" Automatically generated by Pod::Man 4.10 (Pod::Simple 3.35) +.\" Automatically generated by Pod::Man 4.11 (Pod::Simple 3.35) .\" .\" Standard preamble: .\" ======================================================================== @@ -135,7 +135,7 @@ .\" ======================================================================== .\" .IX Title "DH_generate_key 3" -.TH DH_generate_key 3 "2018-09-23" "1.1.1c" "OpenSSL" +.TH DH_generate_key 3 "2018-09-23" "1.1.1i" "OpenSSL" .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. .if n .ad l diff --git a/crypto/external/bsd/openssl/lib/libcrypto/man/DH_generate_parameters.3 b/crypto/external/bsd/openssl/lib/libcrypto/man/DH_generate_parameters.3 index df7479b492f..01f3c7ed477 100644 --- a/crypto/external/bsd/openssl/lib/libcrypto/man/DH_generate_parameters.3 +++ b/crypto/external/bsd/openssl/lib/libcrypto/man/DH_generate_parameters.3 @@ -1,6 +1,6 @@ -.\" $NetBSD: DH_generate_parameters.3,v 1.19 2019/06/09 18:44:31 christos Exp $ +.\" $NetBSD: DH_generate_parameters.3,v 1.19.2.1 2021/03/28 18:21:47 martin Exp $ .\" -.\" Automatically generated by Pod::Man 4.10 (Pod::Simple 3.35) +.\" Automatically generated by Pod::Man 4.11 (Pod::Simple 3.35) .\" .\" Standard preamble: .\" ======================================================================== @@ -135,7 +135,7 @@ .\" ======================================================================== .\" .IX Title "DH_generate_parameters 3" -.TH DH_generate_parameters 3 "2018-09-23" "1.1.1c" "OpenSSL" +.TH DH_generate_parameters 3 "2018-09-23" "1.1.1i" "OpenSSL" .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. .if n .ad l diff --git a/crypto/external/bsd/openssl/lib/libcrypto/man/DH_get0_pqg.3 b/crypto/external/bsd/openssl/lib/libcrypto/man/DH_get0_pqg.3 index f71156de956..2cf40473069 100644 --- a/crypto/external/bsd/openssl/lib/libcrypto/man/DH_get0_pqg.3 +++ b/crypto/external/bsd/openssl/lib/libcrypto/man/DH_get0_pqg.3 @@ -1,6 +1,6 @@ -.\" $NetBSD: DH_get0_pqg.3,v 1.3 2019/06/09 18:44:31 christos Exp $ +.\" $NetBSD: DH_get0_pqg.3,v 1.3.2.1 2021/03/28 18:21:47 martin Exp $ .\" -.\" Automatically generated by Pod::Man 4.10 (Pod::Simple 3.35) +.\" Automatically generated by Pod::Man 4.11 (Pod::Simple 3.35) .\" .\" Standard preamble: .\" ======================================================================== @@ -135,7 +135,7 @@ .\" ======================================================================== .\" .IX Title "DH_get0_pqg 3" -.TH DH_get0_pqg 3 "2018-09-23" "1.1.1c" "OpenSSL" +.TH DH_get0_pqg 3 "2020-12-10" "1.1.1i" "OpenSSL" .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. .if n .ad l @@ -222,7 +222,7 @@ within the \s-1DH\s0 object. object, or \s-1NULL\s0 if no such \s-1ENGINE\s0 has been set. .PP The \fBDH_get_length()\fR and \fBDH_set_length()\fR functions get and set the optional -length parameter associated with this \s-1DH\s0 object. If the length is non-zero then +length parameter associated with this \s-1DH\s0 object. If the length is nonzero then it is used, otherwise it is ignored. The \fBlength\fR parameter indicates the length of the secret exponent (private key) in bits. .SH "NOTES" @@ -254,7 +254,7 @@ or zero if no such length has been explicitly set. The functions described here were added in OpenSSL 1.1.0. .SH "COPYRIGHT" .IX Header "COPYRIGHT" -Copyright 2016\-2018 The OpenSSL Project Authors. All Rights Reserved. +Copyright 2016\-2020 The OpenSSL Project Authors. All Rights Reserved. .PP Licensed under the OpenSSL license (the \*(L"License\*(R"). You may not use this file except in compliance with the License. You can obtain a copy diff --git a/crypto/external/bsd/openssl/lib/libcrypto/man/DH_get_1024_160.3 b/crypto/external/bsd/openssl/lib/libcrypto/man/DH_get_1024_160.3 index 05ac3f46b17..5a82e3af1b0 100644 --- a/crypto/external/bsd/openssl/lib/libcrypto/man/DH_get_1024_160.3 +++ b/crypto/external/bsd/openssl/lib/libcrypto/man/DH_get_1024_160.3 @@ -1,6 +1,6 @@ -.\" $NetBSD: DH_get_1024_160.3,v 1.3 2019/06/09 18:44:31 christos Exp $ +.\" $NetBSD: DH_get_1024_160.3,v 1.3.2.1 2021/03/28 18:21:47 martin Exp $ .\" -.\" Automatically generated by Pod::Man 4.10 (Pod::Simple 3.35) +.\" Automatically generated by Pod::Man 4.11 (Pod::Simple 3.35) .\" .\" Standard preamble: .\" ======================================================================== @@ -135,7 +135,7 @@ .\" ======================================================================== .\" .IX Title "DH_get_1024_160 3" -.TH DH_get_1024_160 3 "2018-09-23" "1.1.1c" "OpenSSL" +.TH DH_get_1024_160 3 "2018-09-23" "1.1.1i" "OpenSSL" .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. .if n .ad l diff --git a/crypto/external/bsd/openssl/lib/libcrypto/man/DH_meth_new.3 b/crypto/external/bsd/openssl/lib/libcrypto/man/DH_meth_new.3 index 36d2fdbec92..67c2a18ae93 100644 --- a/crypto/external/bsd/openssl/lib/libcrypto/man/DH_meth_new.3 +++ b/crypto/external/bsd/openssl/lib/libcrypto/man/DH_meth_new.3 @@ -1,6 +1,6 @@ -.\" $NetBSD: DH_meth_new.3,v 1.3 2019/06/09 18:44:31 christos Exp $ +.\" $NetBSD: DH_meth_new.3,v 1.3.2.1 2021/03/28 18:21:47 martin Exp $ .\" -.\" Automatically generated by Pod::Man 4.10 (Pod::Simple 3.35) +.\" Automatically generated by Pod::Man 4.11 (Pod::Simple 3.35) .\" .\" Standard preamble: .\" ======================================================================== @@ -135,7 +135,7 @@ .\" ======================================================================== .\" .IX Title "DH_meth_new 3" -.TH DH_meth_new 3 "2018-09-23" "1.1.1c" "OpenSSL" +.TH DH_meth_new 3 "2018-09-23" "1.1.1i" "OpenSSL" .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. .if n .ad l diff --git a/crypto/external/bsd/openssl/lib/libcrypto/man/DH_new.3 b/crypto/external/bsd/openssl/lib/libcrypto/man/DH_new.3 index d82eb380a0f..d3d160be6aa 100644 --- a/crypto/external/bsd/openssl/lib/libcrypto/man/DH_new.3 +++ b/crypto/external/bsd/openssl/lib/libcrypto/man/DH_new.3 @@ -1,6 +1,6 @@ -.\" $NetBSD: DH_new.3,v 1.19 2019/06/09 18:44:31 christos Exp $ +.\" $NetBSD: DH_new.3,v 1.19.2.1 2021/03/28 18:21:47 martin Exp $ .\" -.\" Automatically generated by Pod::Man 4.10 (Pod::Simple 3.35) +.\" Automatically generated by Pod::Man 4.11 (Pod::Simple 3.35) .\" .\" Standard preamble: .\" ======================================================================== @@ -135,7 +135,7 @@ .\" ======================================================================== .\" .IX Title "DH_new 3" -.TH DH_new 3 "2018-09-23" "1.1.1c" "OpenSSL" +.TH DH_new 3 "2018-09-23" "1.1.1i" "OpenSSL" .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. .if n .ad l diff --git a/crypto/external/bsd/openssl/lib/libcrypto/man/DH_new_by_nid.3 b/crypto/external/bsd/openssl/lib/libcrypto/man/DH_new_by_nid.3 index 57d2083b7c5..45f8ad4601b 100644 --- a/crypto/external/bsd/openssl/lib/libcrypto/man/DH_new_by_nid.3 +++ b/crypto/external/bsd/openssl/lib/libcrypto/man/DH_new_by_nid.3 @@ -1,6 +1,6 @@ -.\" $NetBSD: DH_new_by_nid.3,v 1.2 2019/06/09 18:44:31 christos Exp $ +.\" $NetBSD: DH_new_by_nid.3,v 1.2.4.1 2021/03/28 18:21:47 martin Exp $ .\" -.\" Automatically generated by Pod::Man 4.10 (Pod::Simple 3.35) +.\" Automatically generated by Pod::Man 4.11 (Pod::Simple 3.35) .\" .\" Standard preamble: .\" ======================================================================== @@ -135,7 +135,7 @@ .\" ======================================================================== .\" .IX Title "DH_new_by_nid 3" -.TH DH_new_by_nid 3 "2018-09-23" "1.1.1c" "OpenSSL" +.TH DH_new_by_nid 3 "2018-09-23" "1.1.1i" "OpenSSL" .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. .if n .ad l diff --git a/crypto/external/bsd/openssl/lib/libcrypto/man/DH_set_method.3 b/crypto/external/bsd/openssl/lib/libcrypto/man/DH_set_method.3 index 055e0eb6f57..249f4118129 100644 --- a/crypto/external/bsd/openssl/lib/libcrypto/man/DH_set_method.3 +++ b/crypto/external/bsd/openssl/lib/libcrypto/man/DH_set_method.3 @@ -1,6 +1,6 @@ -.\" $NetBSD: DH_set_method.3,v 1.19 2019/06/09 18:44:31 christos Exp $ +.\" $NetBSD: DH_set_method.3,v 1.19.2.1 2021/03/28 18:21:47 martin Exp $ .\" -.\" Automatically generated by Pod::Man 4.10 (Pod::Simple 3.35) +.\" Automatically generated by Pod::Man 4.11 (Pod::Simple 3.35) .\" .\" Standard preamble: .\" ======================================================================== @@ -135,7 +135,7 @@ .\" ======================================================================== .\" .IX Title "DH_set_method 3" -.TH DH_set_method 3 "2018-09-23" "1.1.1c" "OpenSSL" +.TH DH_set_method 3 "2020-12-10" "1.1.1i" "OpenSSL" .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. .if n .ad l @@ -186,7 +186,7 @@ API\s0 is being used, so this function is no longer recommended. This will replace the \s-1DH_METHOD\s0 used by the \s-1DH\s0 key and if the previous method was supplied by an \s-1ENGINE,\s0 the handle to that \s-1ENGINE\s0 will be released during the change. It is possible to have \s-1DH\s0 keys that only work with certain \s-1DH_METHOD\s0 -implementations (eg. from an \s-1ENGINE\s0 module that supports embedded +implementations (e.g. from an \s-1ENGINE\s0 module that supports embedded hardware-protected keys), and in such cases attempting to change the \s-1DH_METHOD\s0 for the key can have unexpected results. .PP @@ -204,7 +204,7 @@ A new \s-1DH_METHOD\s0 object may be constructed using \fBDH_meth_new()\fR (see .PP \&\fBDH_set_default_method()\fR returns no value. .PP -\&\fBDH_set_method()\fR returns non-zero if the provided \fBmeth\fR was successfully set as +\&\fBDH_set_method()\fR returns nonzero if the provided \fBmeth\fR was successfully set as the method for \fBdh\fR (including unloading the \s-1ENGINE\s0 handle if the previous method was supplied by an \s-1ENGINE\s0). .PP @@ -216,7 +216,7 @@ returns a pointer to the newly allocated structure. \&\fBDH_new\fR\|(3), \fBDH_new\fR\|(3), \fBDH_meth_new\fR\|(3) .SH "COPYRIGHT" .IX Header "COPYRIGHT" -Copyright 2000\-2016 The OpenSSL Project Authors. All Rights Reserved. +Copyright 2000\-2020 The OpenSSL Project Authors. All Rights Reserved. .PP Licensed under the OpenSSL license (the \*(L"License\*(R"). You may not use this file except in compliance with the License. You can obtain a copy diff --git a/crypto/external/bsd/openssl/lib/libcrypto/man/DH_size.3 b/crypto/external/bsd/openssl/lib/libcrypto/man/DH_size.3 index c59ce84854d..2d4e6eedddc 100644 --- a/crypto/external/bsd/openssl/lib/libcrypto/man/DH_size.3 +++ b/crypto/external/bsd/openssl/lib/libcrypto/man/DH_size.3 @@ -1,6 +1,6 @@ -.\" $NetBSD: DH_size.3,v 1.19 2019/06/09 18:44:31 christos Exp $ +.\" $NetBSD: DH_size.3,v 1.19.2.1 2021/03/28 18:21:47 martin Exp $ .\" -.\" Automatically generated by Pod::Man 4.10 (Pod::Simple 3.35) +.\" Automatically generated by Pod::Man 4.11 (Pod::Simple 3.35) .\" .\" Standard preamble: .\" ======================================================================== @@ -135,7 +135,7 @@ .\" ======================================================================== .\" .IX Title "DH_size 3" -.TH DH_size 3 "2019-03-12" "1.1.1c" "OpenSSL" +.TH DH_size 3 "2019-03-12" "1.1.1i" "OpenSSL" .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. .if n .ad l diff --git a/crypto/external/bsd/openssl/lib/libcrypto/man/DSA_SIG_new.3 b/crypto/external/bsd/openssl/lib/libcrypto/man/DSA_SIG_new.3 index 9e09ded9f83..50a8463ec71 100644 --- a/crypto/external/bsd/openssl/lib/libcrypto/man/DSA_SIG_new.3 +++ b/crypto/external/bsd/openssl/lib/libcrypto/man/DSA_SIG_new.3 @@ -1,6 +1,6 @@ -.\" $NetBSD: DSA_SIG_new.3,v 1.19 2019/06/09 18:44:31 christos Exp $ +.\" $NetBSD: DSA_SIG_new.3,v 1.19.2.1 2021/03/28 18:21:47 martin Exp $ .\" -.\" Automatically generated by Pod::Man 4.10 (Pod::Simple 3.35) +.\" Automatically generated by Pod::Man 4.11 (Pod::Simple 3.35) .\" .\" Standard preamble: .\" ======================================================================== @@ -135,7 +135,7 @@ .\" ======================================================================== .\" .IX Title "DSA_SIG_new 3" -.TH DSA_SIG_new 3 "2018-09-23" "1.1.1c" "OpenSSL" +.TH DSA_SIG_new 3 "2018-09-23" "1.1.1i" "OpenSSL" .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. .if n .ad l diff --git a/crypto/external/bsd/openssl/lib/libcrypto/man/DSA_do_sign.3 b/crypto/external/bsd/openssl/lib/libcrypto/man/DSA_do_sign.3 index f15561447a2..06b9605b98c 100644 --- a/crypto/external/bsd/openssl/lib/libcrypto/man/DSA_do_sign.3 +++ b/crypto/external/bsd/openssl/lib/libcrypto/man/DSA_do_sign.3 @@ -1,6 +1,6 @@ -.\" $NetBSD: DSA_do_sign.3,v 1.19 2019/06/09 18:44:31 christos Exp $ +.\" $NetBSD: DSA_do_sign.3,v 1.19.2.1 2021/03/28 18:21:47 martin Exp $ .\" -.\" Automatically generated by Pod::Man 4.10 (Pod::Simple 3.35) +.\" Automatically generated by Pod::Man 4.11 (Pod::Simple 3.35) .\" .\" Standard preamble: .\" ======================================================================== @@ -135,7 +135,7 @@ .\" ======================================================================== .\" .IX Title "DSA_do_sign 3" -.TH DSA_do_sign 3 "2018-09-23" "1.1.1c" "OpenSSL" +.TH DSA_do_sign 3 "2018-09-23" "1.1.1i" "OpenSSL" .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. .if n .ad l diff --git a/crypto/external/bsd/openssl/lib/libcrypto/man/DSA_dup_DH.3 b/crypto/external/bsd/openssl/lib/libcrypto/man/DSA_dup_DH.3 index 2caaa603a84..1bcfdfd9cf3 100644 --- a/crypto/external/bsd/openssl/lib/libcrypto/man/DSA_dup_DH.3 +++ b/crypto/external/bsd/openssl/lib/libcrypto/man/DSA_dup_DH.3 @@ -1,6 +1,6 @@ -.\" $NetBSD: DSA_dup_DH.3,v 1.19 2019/06/09 18:44:31 christos Exp $ +.\" $NetBSD: DSA_dup_DH.3,v 1.19.2.1 2021/03/28 18:21:47 martin Exp $ .\" -.\" Automatically generated by Pod::Man 4.10 (Pod::Simple 3.35) +.\" Automatically generated by Pod::Man 4.11 (Pod::Simple 3.35) .\" .\" Standard preamble: .\" ======================================================================== @@ -135,7 +135,7 @@ .\" ======================================================================== .\" .IX Title "DSA_dup_DH 3" -.TH DSA_dup_DH 3 "2018-09-23" "1.1.1c" "OpenSSL" +.TH DSA_dup_DH 3 "2018-09-23" "1.1.1i" "OpenSSL" .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. .if n .ad l diff --git a/crypto/external/bsd/openssl/lib/libcrypto/man/DSA_generate_key.3 b/crypto/external/bsd/openssl/lib/libcrypto/man/DSA_generate_key.3 index f6b1d7601c8..80fa373e10b 100644 --- a/crypto/external/bsd/openssl/lib/libcrypto/man/DSA_generate_key.3 +++ b/crypto/external/bsd/openssl/lib/libcrypto/man/DSA_generate_key.3 @@ -1,6 +1,6 @@ -.\" $NetBSD: DSA_generate_key.3,v 1.19 2019/06/09 18:44:31 christos Exp $ +.\" $NetBSD: DSA_generate_key.3,v 1.19.2.1 2021/03/28 18:21:47 martin Exp $ .\" -.\" Automatically generated by Pod::Man 4.10 (Pod::Simple 3.35) +.\" Automatically generated by Pod::Man 4.11 (Pod::Simple 3.35) .\" .\" Standard preamble: .\" ======================================================================== @@ -135,7 +135,7 @@ .\" ======================================================================== .\" .IX Title "DSA_generate_key 3" -.TH DSA_generate_key 3 "2018-09-23" "1.1.1c" "OpenSSL" +.TH DSA_generate_key 3 "2020-01-23" "1.1.1i" "OpenSSL" .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. .if n .ad l @@ -156,7 +156,9 @@ libcrypto, -lcrypto \&\fBDSA_generate_key()\fR expects \fBa\fR to contain \s-1DSA\s0 parameters. It generates a new key pair and stores it in \fBa\->pub_key\fR and \fBa\->priv_key\fR. .PP -The \s-1PRNG\s0 must be seeded prior to calling \fBDSA_generate_key()\fR. +The random generator must be seeded prior to calling \fBDSA_generate_key()\fR. +If the automatic seeding or reseeding of the OpenSSL \s-1CSPRNG\s0 fails due to +external circumstances (see \s-1\fBRAND\s0\fR\|(7)), the operation will fail. .SH "RETURN VALUES" .IX Header "RETURN VALUES" \&\fBDSA_generate_key()\fR returns 1 on success, 0 otherwise. @@ -167,7 +169,7 @@ The error codes can be obtained by \fBERR_get_error\fR\|(3). \&\fBDSA_generate_parameters_ex\fR\|(3) .SH "COPYRIGHT" .IX Header "COPYRIGHT" -Copyright 2000\-2018 The OpenSSL Project Authors. All Rights Reserved. +Copyright 2000\-2019 The OpenSSL Project Authors. All Rights Reserved. .PP Licensed under the OpenSSL license (the \*(L"License\*(R"). You may not use this file except in compliance with the License. You can obtain a copy diff --git a/crypto/external/bsd/openssl/lib/libcrypto/man/DSA_generate_parameters.3 b/crypto/external/bsd/openssl/lib/libcrypto/man/DSA_generate_parameters.3 index b0dc4cf0658..c623d3c4cf1 100644 --- a/crypto/external/bsd/openssl/lib/libcrypto/man/DSA_generate_parameters.3 +++ b/crypto/external/bsd/openssl/lib/libcrypto/man/DSA_generate_parameters.3 @@ -1,6 +1,6 @@ -.\" $NetBSD: DSA_generate_parameters.3,v 1.19 2019/06/09 18:44:31 christos Exp $ +.\" $NetBSD: DSA_generate_parameters.3,v 1.19.2.1 2021/03/28 18:21:47 martin Exp $ .\" -.\" Automatically generated by Pod::Man 4.10 (Pod::Simple 3.35) +.\" Automatically generated by Pod::Man 4.11 (Pod::Simple 3.35) .\" .\" Standard preamble: .\" ======================================================================== @@ -135,7 +135,7 @@ .\" ======================================================================== .\" .IX Title "DSA_generate_parameters 3" -.TH DSA_generate_parameters 3 "2018-09-23" "1.1.1c" "OpenSSL" +.TH DSA_generate_parameters 3 "2018-09-23" "1.1.1i" "OpenSSL" .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. .if n .ad l diff --git a/crypto/external/bsd/openssl/lib/libcrypto/man/DSA_get0_pqg.3 b/crypto/external/bsd/openssl/lib/libcrypto/man/DSA_get0_pqg.3 index ca3be8b4e66..7732cbc9ebe 100644 --- a/crypto/external/bsd/openssl/lib/libcrypto/man/DSA_get0_pqg.3 +++ b/crypto/external/bsd/openssl/lib/libcrypto/man/DSA_get0_pqg.3 @@ -1,6 +1,6 @@ -.\" $NetBSD: DSA_get0_pqg.3,v 1.3 2019/06/09 18:44:31 christos Exp $ +.\" $NetBSD: DSA_get0_pqg.3,v 1.3.2.1 2021/03/28 18:21:47 martin Exp $ .\" -.\" Automatically generated by Pod::Man 4.10 (Pod::Simple 3.35) +.\" Automatically generated by Pod::Man 4.11 (Pod::Simple 3.35) .\" .\" Standard preamble: .\" ======================================================================== @@ -135,7 +135,7 @@ .\" ======================================================================== .\" .IX Title "DSA_get0_pqg 3" -.TH DSA_get0_pqg 3 "2018-09-23" "1.1.1c" "OpenSSL" +.TH DSA_get0_pqg 3 "2018-09-23" "1.1.1i" "OpenSSL" .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. .if n .ad l diff --git a/crypto/external/bsd/openssl/lib/libcrypto/man/DSA_meth_new.3 b/crypto/external/bsd/openssl/lib/libcrypto/man/DSA_meth_new.3 index ec1db2dc043..75a8ca8ce2d 100644 --- a/crypto/external/bsd/openssl/lib/libcrypto/man/DSA_meth_new.3 +++ b/crypto/external/bsd/openssl/lib/libcrypto/man/DSA_meth_new.3 @@ -1,6 +1,6 @@ -.\" $NetBSD: DSA_meth_new.3,v 1.3 2019/06/09 18:44:31 christos Exp $ +.\" $NetBSD: DSA_meth_new.3,v 1.3.2.1 2021/03/28 18:21:47 martin Exp $ .\" -.\" Automatically generated by Pod::Man 4.10 (Pod::Simple 3.35) +.\" Automatically generated by Pod::Man 4.11 (Pod::Simple 3.35) .\" .\" Standard preamble: .\" ======================================================================== @@ -135,7 +135,7 @@ .\" ======================================================================== .\" .IX Title "DSA_meth_new 3" -.TH DSA_meth_new 3 "2018-09-23" "1.1.1c" "OpenSSL" +.TH DSA_meth_new 3 "2018-09-23" "1.1.1i" "OpenSSL" .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. .if n .ad l diff --git a/crypto/external/bsd/openssl/lib/libcrypto/man/DSA_new.3 b/crypto/external/bsd/openssl/lib/libcrypto/man/DSA_new.3 index b07822bac7b..575a95ac156 100644 --- a/crypto/external/bsd/openssl/lib/libcrypto/man/DSA_new.3 +++ b/crypto/external/bsd/openssl/lib/libcrypto/man/DSA_new.3 @@ -1,6 +1,6 @@ -.\" $NetBSD: DSA_new.3,v 1.19 2019/06/09 18:44:31 christos Exp $ +.\" $NetBSD: DSA_new.3,v 1.19.2.1 2021/03/28 18:21:47 martin Exp $ .\" -.\" Automatically generated by Pod::Man 4.10 (Pod::Simple 3.35) +.\" Automatically generated by Pod::Man 4.11 (Pod::Simple 3.35) .\" .\" Standard preamble: .\" ======================================================================== @@ -135,7 +135,7 @@ .\" ======================================================================== .\" .IX Title "DSA_new 3" -.TH DSA_new 3 "2018-09-23" "1.1.1c" "OpenSSL" +.TH DSA_new 3 "2018-09-23" "1.1.1i" "OpenSSL" .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. .if n .ad l diff --git a/crypto/external/bsd/openssl/lib/libcrypto/man/DSA_set_method.3 b/crypto/external/bsd/openssl/lib/libcrypto/man/DSA_set_method.3 index f9b2de72462..1a132d956b0 100644 --- a/crypto/external/bsd/openssl/lib/libcrypto/man/DSA_set_method.3 +++ b/crypto/external/bsd/openssl/lib/libcrypto/man/DSA_set_method.3 @@ -1,6 +1,6 @@ -.\" $NetBSD: DSA_set_method.3,v 1.19 2019/06/09 18:44:31 christos Exp $ +.\" $NetBSD: DSA_set_method.3,v 1.19.2.1 2021/03/28 18:21:47 martin Exp $ .\" -.\" Automatically generated by Pod::Man 4.10 (Pod::Simple 3.35) +.\" Automatically generated by Pod::Man 4.11 (Pod::Simple 3.35) .\" .\" Standard preamble: .\" ======================================================================== @@ -135,7 +135,7 @@ .\" ======================================================================== .\" .IX Title "DSA_set_method 3" -.TH DSA_set_method 3 "2018-09-23" "1.1.1c" "OpenSSL" +.TH DSA_set_method 3 "2020-12-10" "1.1.1i" "OpenSSL" .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. .if n .ad l @@ -187,7 +187,7 @@ recommended. \&\fBrsa\fR. This will replace the \s-1DSA_METHOD\s0 used by the \s-1DSA\s0 key and if the previous method was supplied by an \s-1ENGINE,\s0 the handle to that \s-1ENGINE\s0 will be released during the change. It is possible to have \s-1DSA\s0 keys that only -work with certain \s-1DSA_METHOD\s0 implementations (eg. from an \s-1ENGINE\s0 module +work with certain \s-1DSA_METHOD\s0 implementations (e.g. from an \s-1ENGINE\s0 module that supports embedded hardware-protected keys), and in such cases attempting to change the \s-1DSA_METHOD\s0 for the key can have unexpected results. See DSA_meth_new for information on constructing custom \s-1DSA_METHOD\s0 @@ -204,7 +204,7 @@ controlled by \fBDSA_set_default_method()\fR is used. .PP \&\fBDSA_set_default_method()\fR returns no value. .PP -\&\fBDSA_set_method()\fR returns non-zero if the provided \fBmeth\fR was successfully set as +\&\fBDSA_set_method()\fR returns nonzero if the provided \fBmeth\fR was successfully set as the method for \fBdsa\fR (including unloading the \s-1ENGINE\s0 handle if the previous method was supplied by an \s-1ENGINE\s0). .PP @@ -216,7 +216,7 @@ fails. Otherwise it returns a pointer to the newly allocated structure. \&\fBDSA_new\fR\|(3), \fBDSA_new\fR\|(3), \fBDSA_meth_new\fR\|(3) .SH "COPYRIGHT" .IX Header "COPYRIGHT" -Copyright 2000\-2016 The OpenSSL Project Authors. All Rights Reserved. +Copyright 2000\-2020 The OpenSSL Project Authors. All Rights Reserved. .PP Licensed under the OpenSSL license (the \*(L"License\*(R"). You may not use this file except in compliance with the License. You can obtain a copy diff --git a/crypto/external/bsd/openssl/lib/libcrypto/man/DSA_sign.3 b/crypto/external/bsd/openssl/lib/libcrypto/man/DSA_sign.3 index 86122dcbbff..811a812af2e 100644 --- a/crypto/external/bsd/openssl/lib/libcrypto/man/DSA_sign.3 +++ b/crypto/external/bsd/openssl/lib/libcrypto/man/DSA_sign.3 @@ -1,6 +1,6 @@ -.\" $NetBSD: DSA_sign.3,v 1.19 2019/06/09 18:44:31 christos Exp $ +.\" $NetBSD: DSA_sign.3,v 1.19.2.1 2021/03/28 18:21:47 martin Exp $ .\" -.\" Automatically generated by Pod::Man 4.10 (Pod::Simple 3.35) +.\" Automatically generated by Pod::Man 4.11 (Pod::Simple 3.35) .\" .\" Standard preamble: .\" ======================================================================== @@ -135,7 +135,7 @@ .\" ======================================================================== .\" .IX Title "DSA_sign 3" -.TH DSA_sign 3 "2018-09-23" "1.1.1c" "OpenSSL" +.TH DSA_sign 3 "2020-01-23" "1.1.1i" "OpenSSL" .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. .if n .ad l @@ -177,8 +177,10 @@ matches a given message digest \fBdgst\fR of size \fBlen\fR. .PP The \fBtype\fR parameter is ignored. .PP -The \s-1PRNG\s0 must be seeded before \fBDSA_sign()\fR (or \fBDSA_sign_setup()\fR) +The random generator must be seeded when \fBDSA_sign()\fR (or \fBDSA_sign_setup()\fR) is called. +If the automatic seeding or reseeding of the OpenSSL \s-1CSPRNG\s0 fails due to +external circumstances (see \s-1\fBRAND\s0\fR\|(7)), the operation will fail. .SH "RETURN VALUES" .IX Header "RETURN VALUES" \&\fBDSA_sign()\fR and \fBDSA_sign_setup()\fR return 1 on success, 0 on error. @@ -192,10 +194,11 @@ Standard, \s-1DSS\s0), \s-1ANSI X9.30\s0 .SH "SEE ALSO" .IX Header "SEE ALSO" \&\fBDSA_new\fR\|(3), \fBERR_get_error\fR\|(3), \fBRAND_bytes\fR\|(3), -\&\fBDSA_do_sign\fR\|(3) +\&\fBDSA_do_sign\fR\|(3), +\&\s-1\fBRAND\s0\fR\|(7) .SH "COPYRIGHT" .IX Header "COPYRIGHT" -Copyright 2000\-2018 The OpenSSL Project Authors. All Rights Reserved. +Copyright 2000\-2019 The OpenSSL Project Authors. All Rights Reserved. .PP Licensed under the OpenSSL license (the \*(L"License\*(R"). You may not use this file except in compliance with the License. You can obtain a copy diff --git a/crypto/external/bsd/openssl/lib/libcrypto/man/DSA_size.3 b/crypto/external/bsd/openssl/lib/libcrypto/man/DSA_size.3 index af2ea0c8ce8..37dfb0bb6f2 100644 --- a/crypto/external/bsd/openssl/lib/libcrypto/man/DSA_size.3 +++ b/crypto/external/bsd/openssl/lib/libcrypto/man/DSA_size.3 @@ -1,6 +1,6 @@ -.\" $NetBSD: DSA_size.3,v 1.19 2019/06/09 18:44:31 christos Exp $ +.\" $NetBSD: DSA_size.3,v 1.19.2.1 2021/03/28 18:21:47 martin Exp $ .\" -.\" Automatically generated by Pod::Man 4.10 (Pod::Simple 3.35) +.\" Automatically generated by Pod::Man 4.11 (Pod::Simple 3.35) .\" .\" Standard preamble: .\" ======================================================================== @@ -135,7 +135,7 @@ .\" ======================================================================== .\" .IX Title "DSA_size 3" -.TH DSA_size 3 "2018-09-23" "1.1.1c" "OpenSSL" +.TH DSA_size 3 "2018-09-23" "1.1.1i" "OpenSSL" .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. .if n .ad l diff --git a/crypto/external/bsd/openssl/lib/libcrypto/man/DTLS_get_data_mtu.3 b/crypto/external/bsd/openssl/lib/libcrypto/man/DTLS_get_data_mtu.3 index ef503a1b756..4b224d1d82b 100644 --- a/crypto/external/bsd/openssl/lib/libcrypto/man/DTLS_get_data_mtu.3 +++ b/crypto/external/bsd/openssl/lib/libcrypto/man/DTLS_get_data_mtu.3 @@ -1,6 +1,6 @@ -.\" $NetBSD: DTLS_get_data_mtu.3,v 1.2 2019/06/09 18:44:31 christos Exp $ +.\" $NetBSD: DTLS_get_data_mtu.3,v 1.2.4.1 2021/03/28 18:21:47 martin Exp $ .\" -.\" Automatically generated by Pod::Man 4.10 (Pod::Simple 3.35) +.\" Automatically generated by Pod::Man 4.11 (Pod::Simple 3.35) .\" .\" Standard preamble: .\" ======================================================================== @@ -135,7 +135,7 @@ .\" ======================================================================== .\" .IX Title "DTLS_get_data_mtu 3" -.TH DTLS_get_data_mtu 3 "2019-03-12" "1.1.1c" "OpenSSL" +.TH DTLS_get_data_mtu 3 "2019-03-12" "1.1.1i" "OpenSSL" .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. .if n .ad l diff --git a/crypto/external/bsd/openssl/lib/libcrypto/man/DTLS_set_timer_cb.3 b/crypto/external/bsd/openssl/lib/libcrypto/man/DTLS_set_timer_cb.3 index 6bc3367bab2..1848ec48207 100644 --- a/crypto/external/bsd/openssl/lib/libcrypto/man/DTLS_set_timer_cb.3 +++ b/crypto/external/bsd/openssl/lib/libcrypto/man/DTLS_set_timer_cb.3 @@ -1,6 +1,6 @@ -.\" $NetBSD: DTLS_set_timer_cb.3,v 1.2 2019/06/09 18:44:31 christos Exp $ +.\" $NetBSD: DTLS_set_timer_cb.3,v 1.2.4.1 2021/03/28 18:21:47 martin Exp $ .\" -.\" Automatically generated by Pod::Man 4.10 (Pod::Simple 3.35) +.\" Automatically generated by Pod::Man 4.11 (Pod::Simple 3.35) .\" .\" Standard preamble: .\" ======================================================================== @@ -135,7 +135,7 @@ .\" ======================================================================== .\" .IX Title "DTLS_set_timer_cb 3" -.TH DTLS_set_timer_cb 3 "2019-03-12" "1.1.1c" "OpenSSL" +.TH DTLS_set_timer_cb 3 "2019-03-12" "1.1.1i" "OpenSSL" .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. .if n .ad l diff --git a/crypto/external/bsd/openssl/lib/libcrypto/man/DTLSv1_listen.3 b/crypto/external/bsd/openssl/lib/libcrypto/man/DTLSv1_listen.3 index ef01b38f6b6..47f3eada73f 100644 --- a/crypto/external/bsd/openssl/lib/libcrypto/man/DTLSv1_listen.3 +++ b/crypto/external/bsd/openssl/lib/libcrypto/man/DTLSv1_listen.3 @@ -1,6 +1,6 @@ -.\" $NetBSD: DTLSv1_listen.3,v 1.3 2019/06/09 18:44:31 christos Exp $ +.\" $NetBSD: DTLSv1_listen.3,v 1.3.2.1 2021/03/28 18:21:47 martin Exp $ .\" -.\" Automatically generated by Pod::Man 4.10 (Pod::Simple 3.35) +.\" Automatically generated by Pod::Man 4.11 (Pod::Simple 3.35) .\" .\" Standard preamble: .\" ======================================================================== @@ -135,7 +135,7 @@ .\" ======================================================================== .\" .IX Title "DTLSv1_listen 3" -.TH DTLSv1_listen 3 "2019-03-12" "1.1.1c" "OpenSSL" +.TH DTLSv1_listen 3 "2020-12-10" "1.1.1i" "OpenSSL" .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. .if n .ad l @@ -175,7 +175,7 @@ message then the amplification attack has succeeded. If \s-1DTLS\s0 is used over \s-1UDP\s0 (or any datagram based protocol that does not validate the source \s-1IP\s0) then it is susceptible to this type of attack. TLSv1.3 is designed to operate over a stream-based transport protocol (such as \s-1TCP\s0). -If \s-1TCP\s0 is being used then there is no need to use \fBSSL_stateless()\fR. However some +If \s-1TCP\s0 is being used then there is no need to use \fBSSL_stateless()\fR. However, some stream-based transport protocols (e.g. \s-1QUIC\s0) may not validate the source address. In this case a TLSv1.3 application would be susceptible to this attack. .PP @@ -206,9 +206,9 @@ the peer and continue the handshake in a connected state. .PP Prior to calling \fBDTLSv1_listen()\fR user code must ensure that cookie generation and verification callbacks have been set up using -\&\fBSSL_CTX_set_cookie_generate_cb()\fR and \fBSSL_CTX_set_cookie_verify_cb()\fR -respectively. For \fBSSL_stateless()\fR, \fBSSL_CTX_set_stateless_cookie_generate_cb()\fR -and \fBSSL_CTX_set_stateless_cookie_verify_cb()\fR must be used instead. +\&\fBSSL_CTX_set_cookie_generate_cb\fR\|(3) and \fBSSL_CTX_set_cookie_verify_cb\fR\|(3) +respectively. For \fBSSL_stateless()\fR, \fBSSL_CTX_set_stateless_cookie_generate_cb\fR\|(3) +and \fBSSL_CTX_set_stateless_cookie_verify_cb\fR\|(3) must be used instead. .PP Since \fBDTLSv1_listen()\fR operates entirely statelessly whilst processing incoming ClientHellos it is unable to process fragmented messages (since this would @@ -237,7 +237,7 @@ will be set up ready to continue the handshake. the \fBpeer\fR value will also filled in. .PP A return value of 0 indicates a non-fatal error. This could (for -example) be because of non-blocking \s-1IO,\s0 or some invalid message having been +example) be because of nonblocking \s-1IO,\s0 or some invalid message having been received from a peer. Errors may be placed on the OpenSSL error queue with further information if appropriate. Typically user code is expected to retry the call to \fBDTLSv1_listen()\fR in the event of a non-fatal error. @@ -250,8 +250,10 @@ produce return codes <= 0 (in typical implementations user code treats all errors as non-fatal), whilst return codes >0 indicate success. .SH "SEE ALSO" .IX Header "SEE ALSO" -\&\fBSSL_get_error\fR\|(3), \fBSSL_accept\fR\|(3), -\&\fBssl\fR\|(7), \fBbio\fR\|(7) +\&\fBSSL_CTX_set_cookie_generate_cb\fR\|(3), \fBSSL_CTX_set_cookie_verify_cb\fR\|(3), +\&\fBSSL_CTX_set_stateless_cookie_generate_cb\fR\|(3), +\&\fBSSL_CTX_set_stateless_cookie_verify_cb\fR\|(3), \fBSSL_get_error\fR\|(3), +\&\fBSSL_accept\fR\|(3), \fBssl\fR\|(7), \fBbio\fR\|(7) .SH "HISTORY" .IX Header "HISTORY" The \fBSSL_stateless()\fR function was added in OpenSSL 1.1.1. @@ -260,7 +262,7 @@ The \fBDTLSv1_listen()\fR return codes were clarified in OpenSSL 1.1.0. The type of \*(L"peer\*(R" also changed in OpenSSL 1.1.0. .SH "COPYRIGHT" .IX Header "COPYRIGHT" -Copyright 2015\-2018 The OpenSSL Project Authors. All Rights Reserved. +Copyright 2015\-2020 The OpenSSL Project Authors. All Rights Reserved. .PP Licensed under the OpenSSL license (the \*(L"License\*(R"). You may not use this file except in compliance with the License. You can obtain a copy diff --git a/crypto/external/bsd/openssl/lib/libcrypto/man/ECDSA_SIG_new.3 b/crypto/external/bsd/openssl/lib/libcrypto/man/ECDSA_SIG_new.3 index 4b05ba78138..3c936a1cac8 100644 --- a/crypto/external/bsd/openssl/lib/libcrypto/man/ECDSA_SIG_new.3 +++ b/crypto/external/bsd/openssl/lib/libcrypto/man/ECDSA_SIG_new.3 @@ -1,6 +1,6 @@ -.\" $NetBSD: ECDSA_SIG_new.3,v 1.3 2019/06/09 18:44:31 christos Exp $ +.\" $NetBSD: ECDSA_SIG_new.3,v 1.3.2.1 2021/03/28 18:21:47 martin Exp $ .\" -.\" Automatically generated by Pod::Man 4.10 (Pod::Simple 3.35) +.\" Automatically generated by Pod::Man 4.11 (Pod::Simple 3.35) .\" .\" Standard preamble: .\" ======================================================================== @@ -135,17 +135,17 @@ .\" ======================================================================== .\" .IX Title "ECDSA_SIG_new 3" -.TH ECDSA_SIG_new 3 "2019-06-09" "1.1.1c" "OpenSSL" +.TH ECDSA_SIG_new 3 "2020-12-10" "1.1.1i" "OpenSSL" .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. .if n .ad l .nh .SH "NAME" ECDSA_SIG_get0, ECDSA_SIG_get0_r, ECDSA_SIG_get0_s, ECDSA_SIG_set0, -ECDSA_SIG_new, ECDSA_SIG_free, i2d_ECDSA_SIG, d2i_ECDSA_SIG, ECDSA_size, -ECDSA_sign, ECDSA_do_sign, ECDSA_verify, ECDSA_do_verify, ECDSA_sign_setup, -ECDSA_sign_ex, ECDSA_do_sign_ex \- low level elliptic curve digital signature -algorithm (ECDSA) functions +ECDSA_SIG_new, ECDSA_SIG_free, ECDSA_size, ECDSA_sign, ECDSA_do_sign, +ECDSA_verify, ECDSA_do_verify, ECDSA_sign_setup, ECDSA_sign_ex, +ECDSA_do_sign_ex \- low\-level elliptic curve digital signature algorithm (ECDSA) +functions .SH "LIBRARY" libcrypto, -lcrypto .SH "SYNOPSIS" @@ -159,8 +159,6 @@ libcrypto, -lcrypto \& const BIGNUM *ECDSA_SIG_get0_r(const ECDSA_SIG *sig); \& const BIGNUM *ECDSA_SIG_get0_s(const ECDSA_SIG *sig); \& int ECDSA_SIG_set0(ECDSA_SIG *sig, BIGNUM *r, BIGNUM *s); -\& int i2d_ECDSA_SIG(const ECDSA_SIG *sig, unsigned char **pp); -\& ECDSA_SIG *d2i_ECDSA_SIG(ECDSA_SIG **sig, const unsigned char **pp, long len); \& int ECDSA_size(const EC_KEY *eckey); \& \& int ECDSA_sign(int type, const unsigned char *dgst, int dgstlen, @@ -183,7 +181,7 @@ libcrypto, -lcrypto .Ve .SH "DESCRIPTION" .IX Header "DESCRIPTION" -Note: these functions provide a low level interface to \s-1ECDSA.\s0 Most +Note: these functions provide a low-level interface to \s-1ECDSA.\s0 Most applications should use the higher level \fB\s-1EVP\s0\fR interface such as \&\fBEVP_DigestSignInit\fR\|(3) or \fBEVP_DigestVerifyInit\fR\|(3) instead. .PP @@ -209,15 +207,8 @@ function transfers the memory management of the values to the \s-1ECDSA_SIG\s0 o and therefore the values that have been passed in should not be freed directly after this function has been called. .PP -\&\fBi2d_ECDSA_SIG()\fR creates the \s-1DER\s0 encoding of the \s-1ECDSA\s0 signature \fBsig\fR and -writes the encoded signature to \fB*pp\fR (note: if \fBpp\fR is \s-1NULL\s0 \fBi2d_ECDSA_SIG()\fR -returns the expected length in bytes of the \s-1DER\s0 encoded signature). -\&\fBi2d_ECDSA_SIG()\fR returns the length of the \s-1DER\s0 encoded signature (or 0 on -error). -.PP -\&\fBd2i_ECDSA_SIG()\fR decodes a \s-1DER\s0 encoded \s-1ECDSA\s0 signature and returns the decoded -signature in a newly allocated \fB\s-1ECDSA_SIG\s0\fR structure. \fB*sig\fR points to the -buffer containing the \s-1DER\s0 encoded signature of size \fBlen\fR. +See \fBi2d_ECDSA_SIG\fR\|(3) and \fBd2i_ECDSA_SIG\fR\|(3) for information about encoding +and decoding \s-1ECDSA\s0 signatures to/from \s-1DER.\s0 .PP \&\fBECDSA_size()\fR returns the maximum length of a \s-1DER\s0 encoded \s-1ECDSA\s0 signature created with the private \s-1EC\s0 key \fBeckey\fR. @@ -351,10 +342,12 @@ and finally evaluate the return value: .IX Header "SEE ALSO" \&\fBEC_KEY_new\fR\|(3), \&\fBEVP_DigestSignInit\fR\|(3), -\&\fBEVP_DigestVerifyInit\fR\|(3) +\&\fBEVP_DigestVerifyInit\fR\|(3), +\&\fBi2d_ECDSA_SIG\fR\|(3), +\&\fBd2i_ECDSA_SIG\fR\|(3) .SH "COPYRIGHT" .IX Header "COPYRIGHT" -Copyright 2004\-2019 The OpenSSL Project Authors. All Rights Reserved. +Copyright 2004\-2020 The OpenSSL Project Authors. All Rights Reserved. .PP Licensed under the OpenSSL license (the \*(L"License\*(R"). You may not use this file except in compliance with the License. You can obtain a copy diff --git a/crypto/external/bsd/openssl/lib/libcrypto/man/ECPKParameters_print.3 b/crypto/external/bsd/openssl/lib/libcrypto/man/ECPKParameters_print.3 index c7310a43477..0c76ce095c1 100644 --- a/crypto/external/bsd/openssl/lib/libcrypto/man/ECPKParameters_print.3 +++ b/crypto/external/bsd/openssl/lib/libcrypto/man/ECPKParameters_print.3 @@ -1,6 +1,6 @@ -.\" $NetBSD: ECPKParameters_print.3,v 1.3 2019/06/09 18:44:31 christos Exp $ +.\" $NetBSD: ECPKParameters_print.3,v 1.3.2.1 2021/03/28 18:21:47 martin Exp $ .\" -.\" Automatically generated by Pod::Man 4.10 (Pod::Simple 3.35) +.\" Automatically generated by Pod::Man 4.11 (Pod::Simple 3.35) .\" .\" Standard preamble: .\" ======================================================================== @@ -135,7 +135,7 @@ .\" ======================================================================== .\" .IX Title "ECPKParameters_print 3" -.TH ECPKParameters_print 3 "2018-09-23" "1.1.1c" "OpenSSL" +.TH ECPKParameters_print 3 "2018-09-23" "1.1.1i" "OpenSSL" .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. .if n .ad l diff --git a/crypto/external/bsd/openssl/lib/libcrypto/man/EC_GFp_simple_method.3 b/crypto/external/bsd/openssl/lib/libcrypto/man/EC_GFp_simple_method.3 index 614ff7adb1d..fe4c7afbd77 100644 --- a/crypto/external/bsd/openssl/lib/libcrypto/man/EC_GFp_simple_method.3 +++ b/crypto/external/bsd/openssl/lib/libcrypto/man/EC_GFp_simple_method.3 @@ -1,6 +1,6 @@ -.\" $NetBSD: EC_GFp_simple_method.3,v 1.4 2019/06/09 18:44:31 christos Exp $ +.\" $NetBSD: EC_GFp_simple_method.3,v 1.4.2.1 2021/03/28 18:21:47 martin Exp $ .\" -.\" Automatically generated by Pod::Man 4.10 (Pod::Simple 3.35) +.\" Automatically generated by Pod::Man 4.11 (Pod::Simple 3.35) .\" .\" Standard preamble: .\" ======================================================================== @@ -135,7 +135,7 @@ .\" ======================================================================== .\" .IX Title "EC_GFp_simple_method 3" -.TH EC_GFp_simple_method 3 "2018-09-23" "1.1.1c" "OpenSSL" +.TH EC_GFp_simple_method 3 "2018-09-23" "1.1.1i" "OpenSSL" .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. .if n .ad l diff --git a/crypto/external/bsd/openssl/lib/libcrypto/man/EC_GROUP_copy.3 b/crypto/external/bsd/openssl/lib/libcrypto/man/EC_GROUP_copy.3 index 02bf35877d3..6efa7a50d06 100644 --- a/crypto/external/bsd/openssl/lib/libcrypto/man/EC_GROUP_copy.3 +++ b/crypto/external/bsd/openssl/lib/libcrypto/man/EC_GROUP_copy.3 @@ -1,6 +1,6 @@ -.\" $NetBSD: EC_GROUP_copy.3,v 1.4 2019/06/09 18:44:31 christos Exp $ +.\" $NetBSD: EC_GROUP_copy.3,v 1.4.2.1 2021/03/28 18:21:47 martin Exp $ .\" -.\" Automatically generated by Pod::Man 4.10 (Pod::Simple 3.35) +.\" Automatically generated by Pod::Man 4.11 (Pod::Simple 3.35) .\" .\" Standard preamble: .\" ======================================================================== @@ -135,7 +135,7 @@ .\" ======================================================================== .\" .IX Title "EC_GROUP_copy 3" -.TH EC_GROUP_copy 3 "2019-03-12" "1.1.1c" "OpenSSL" +.TH EC_GROUP_copy 3 "2020-03-22" "1.1.1i" "OpenSSL" .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. .if n .ad l @@ -181,7 +181,7 @@ libcrypto, -lcrypto \& int EC_GROUP_get_asn1_flag(const EC_GROUP *group); \& \& void EC_GROUP_set_point_conversion_form(EC_GROUP *group, point_conversion_form_t form); -\& point_conversion_form_t EC_GROUP_get_point_conversion_form(const EC_GROUP *); +\& point_conversion_form_t EC_GROUP_get_point_conversion_form(const EC_GROUP *group); \& \& unsigned char *EC_GROUP_get0_seed(const EC_GROUP *x); \& size_t EC_GROUP_get_seed_len(const EC_GROUP *); @@ -202,34 +202,39 @@ libcrypto, -lcrypto .Ve .SH "DESCRIPTION" .IX Header "DESCRIPTION" -EC_GROUP_copy copies the curve \fBsrc\fR into \fBdst\fR. Both \fBsrc\fR and \fBdst\fR must use the same \s-1EC_METHOD.\s0 +\&\fBEC_GROUP_copy()\fR copies the curve \fBsrc\fR into \fBdst\fR. Both \fBsrc\fR and \fBdst\fR must use the same \s-1EC_METHOD.\s0 .PP -EC_GROUP_dup creates a new \s-1EC_GROUP\s0 object and copies the content from \fBsrc\fR to the newly created +\&\fBEC_GROUP_dup()\fR creates a new \s-1EC_GROUP\s0 object and copies the content from \fBsrc\fR to the newly created \&\s-1EC_GROUP\s0 object. .PP -EC_GROUP_method_of obtains the \s-1EC_METHOD\s0 of \fBgroup\fR. +\&\fBEC_GROUP_method_of()\fR obtains the \s-1EC_METHOD\s0 of \fBgroup\fR. .PP -EC_GROUP_set_generator sets curve parameters that must be agreed by all participants using the curve. These +\&\fBEC_GROUP_set_generator()\fR sets curve parameters that must be agreed by all participants using the curve. These parameters include the \fBgenerator\fR, the \fBorder\fR and the \fBcofactor\fR. The \fBgenerator\fR is a well defined point on the curve chosen for cryptographic operations. Integers used for point multiplications will be between 0 and n\-1 where n is the \fBorder\fR. The \fBorder\fR multiplied by the \fBcofactor\fR gives the number of points on the curve. .PP -EC_GROUP_get0_generator returns the generator for the identified \fBgroup\fR. +\&\fBEC_GROUP_get0_generator()\fR returns the generator for the identified \fBgroup\fR. .PP -The functions EC_GROUP_get_order and EC_GROUP_get_cofactor populate the provided \fBorder\fR and \fBcofactor\fR parameters -with the respective order and cofactors for the \fBgroup\fR. +\&\fBEC_GROUP_get_order()\fR retrieves the order of \fBgroup\fR and copies its value into +\&\fBorder\fR. It fails in case \fBgroup\fR is not fully initialized (i.e., its order +is not set or set to zero). .PP -The functions EC_GROUP_set_curve_name and EC_GROUP_get_curve_name, set and get the \s-1NID\s0 for the curve respectively +\&\fBEC_GROUP_get_cofactor()\fR retrieves the cofactor of \fBgroup\fR and copies its value +into \fBcofactor\fR. It fails in case \fBgroup\fR is not fully initialized or if the +cofactor is not set (or set to zero). +.PP +The functions \fBEC_GROUP_set_curve_name()\fR and \fBEC_GROUP_get_curve_name()\fR, set and get the \s-1NID\s0 for the curve respectively (see \fBEC_GROUP_new\fR\|(3)). If a curve does not have a \s-1NID\s0 associated with it, then EC_GROUP_get_curve_name -will return 0. +will return NID_undef. .PP The asn1_flag value is used to determine whether the curve encoding uses explicit parameters or a named curve using an \s-1ASN1 OID:\s0 many applications only support the latter form. If asn1_flag is \fB\s-1OPENSSL_EC_NAMED_CURVE\s0\fR then the named curve form is used and the parameters must have a corresponding named curve \s-1NID\s0 set. If asn1_flags is \fB\s-1OPENSSL_EC_EXPLICIT_CURVE\s0\fR the -parameters are explicitly encoded. The functions EC_GROUP_get_asn1_flag and -EC_GROUP_set_asn1_flag get and set the status of the asn1_flag for the curve. +parameters are explicitly encoded. The functions \fBEC_GROUP_get_asn1_flag()\fR and +\&\fBEC_GROUP_set_asn1_flag()\fR get and set the status of the asn1_flag for the curve. Note: \fB\s-1OPENSSL_EC_EXPLICIT_CURVE\s0\fR was added in OpenSSL 1.1.0, for previous versions of OpenSSL the value 0 must be used instead. Before OpenSSL 1.1.0 the default form was to use explicit parameters (meaning that @@ -262,32 +267,32 @@ the two possible solutions for y has been used, followed by the octets for x. For \s-1POINT_CONVERSION_HYBRID\s0 the point is encoded as an octet signifying the \s-1HYBRID\s0 form has been used \s-1AND\s0 which of the two possible solutions for y has been used, followed by the octets for x, followed by the octets for y. .PP -The functions EC_GROUP_set_point_conversion_form and EC_GROUP_get_point_conversion_form set and get the point_conversion_form +The functions \fBEC_GROUP_set_point_conversion_form()\fR and \fBEC_GROUP_get_point_conversion_form()\fR, set and get the point_conversion_form for the curve respectively. .PP \&\s-1ANSI X9.62\s0 (\s-1ECDSA\s0 standard) defines a method of generating the curve parameter b from a random number. This provides advantages in that a parameter obtained in this way is highly unlikely to be susceptible to special purpose attacks, or have any trapdoors in it. If the seed is present for a curve then the b parameter was generated in a verifiable fashion using that seed. The OpenSSL \s-1EC\s0 library -does not use this seed value but does enable you to inspect it using EC_GROUP_get0_seed. This returns a pointer to a memory block -containing the seed that was used. The length of the memory block can be obtained using EC_GROUP_get_seed_len. A number of the -builtin curves within the library provide seed values that can be obtained. It is also possible to set a custom seed using -EC_GROUP_set_seed and passing a pointer to a memory block, along with the length of the seed. Again, the \s-1EC\s0 library will not use +does not use this seed value but does enable you to inspect it using \fBEC_GROUP_get0_seed()\fR. This returns a pointer to a memory block +containing the seed that was used. The length of the memory block can be obtained using \fBEC_GROUP_get_seed_len()\fR. A number of the +built-in curves within the library provide seed values that can be obtained. It is also possible to set a custom seed using +\&\fBEC_GROUP_set_seed()\fR and passing a pointer to a memory block, along with the length of the seed. Again, the \s-1EC\s0 library will not use this seed value, although it will be preserved in any \s-1ASN1\s0 based communications. .PP -EC_GROUP_get_degree gets the degree of the field. For Fp fields this will be the number of bits in p. For F2^m fields this will be +\&\fBEC_GROUP_get_degree()\fR gets the degree of the field. For Fp fields this will be the number of bits in p. For F2^m fields this will be the value m. .PP -The function EC_GROUP_check_discriminant calculates the discriminant for the curve and verifies that it is valid. +The function \fBEC_GROUP_check_discriminant()\fR calculates the discriminant for the curve and verifies that it is valid. For a curve defined over Fp the discriminant is given by the formula 4*a^3 + 27*b^2 whilst for F2^m curves the discriminant is simply b. In either case for the curve to be valid the discriminant must be non zero. .PP -The function EC_GROUP_check performs a number of checks on a curve to verify that it is valid. Checks performed include +The function \fBEC_GROUP_check()\fR performs a number of checks on a curve to verify that it is valid. Checks performed include verifying that the discriminant is non zero; that a generator has been defined; that the generator is on the curve and has the correct order. .PP -EC_GROUP_cmp compares \fBa\fR and \fBb\fR to determine whether they represent the same curve or not. +\&\fBEC_GROUP_cmp()\fR compares \fBa\fR and \fBb\fR to determine whether they represent the same curve or not. .PP -The functions EC_GROUP_get_basis_type, EC_GROUP_get_trinomial_basis and EC_GROUP_get_pentanomial_basis should only be called for curves +The functions \fBEC_GROUP_get_basis_type()\fR, \fBEC_GROUP_get_trinomial_basis()\fR and \fBEC_GROUP_get_pentanomial_basis()\fR should only be called for curves defined over an F2^m field. Addition and multiplication operations within an F2^m field are performed using an irreducible polynomial function f(x). This function is either a trinomial of the form: .PP @@ -297,38 +302,47 @@ or a pentanomial of the form: .PP f(x) = x^m + x^k3 + x^k2 + x^k1 + 1 with m > k3 > k2 > k1 >= 1 .PP -The function EC_GROUP_get_basis_type returns a \s-1NID\s0 identifying whether a trinomial or pentanomial is in use for the field. The -function EC_GROUP_get_trinomial_basis must only be called where f(x) is of the trinomial form, and returns the value of \fBk\fR. Similarly -the function EC_GROUP_get_pentanomial_basis must only be called where f(x) is of the pentanomial form, and returns the values of \fBk1\fR, +The function \fBEC_GROUP_get_basis_type()\fR returns a \s-1NID\s0 identifying whether a trinomial or pentanomial is in use for the field. The +function \fBEC_GROUP_get_trinomial_basis()\fR must only be called where f(x) is of the trinomial form, and returns the value of \fBk\fR. Similarly +the function \fBEC_GROUP_get_pentanomial_basis()\fR must only be called where f(x) is of the pentanomial form, and returns the values of \fBk1\fR, \&\fBk2\fR and \fBk3\fR respectively. .SH "RETURN VALUES" .IX Header "RETURN VALUES" -The following functions return 1 on success or 0 on error: EC_GROUP_copy, EC_GROUP_set_generator, EC_GROUP_check, -EC_GROUP_check_discriminant, EC_GROUP_get_trinomial_basis and EC_GROUP_get_pentanomial_basis. +The following functions return 1 on success or 0 on error: \fBEC_GROUP_copy()\fR, \fBEC_GROUP_set_generator()\fR, \fBEC_GROUP_check()\fR, +\&\fBEC_GROUP_check_discriminant()\fR, \fBEC_GROUP_get_trinomial_basis()\fR and \fBEC_GROUP_get_pentanomial_basis()\fR. +.PP +\&\fBEC_GROUP_dup()\fR returns a pointer to the duplicated curve, or \s-1NULL\s0 on error. +.PP +\&\fBEC_GROUP_method_of()\fR returns the \s-1EC_METHOD\s0 implementation in use for the given curve or \s-1NULL\s0 on error. +.PP +\&\fBEC_GROUP_get0_generator()\fR returns the generator for the given curve or \s-1NULL\s0 on error. +.PP +\&\fBEC_GROUP_get_order()\fR returns 0 if the order is not set (or set to zero) for +\&\fBgroup\fR or if copying into \fBorder\fR fails, 1 otherwise. +.PP +\&\fBEC_GROUP_get_cofactor()\fR returns 0 if the cofactor is not set (or is set to zero) for \fBgroup\fR or if copying into \fBcofactor\fR fails, 1 otherwise. .PP -EC_GROUP_dup returns a pointer to the duplicated curve, or \s-1NULL\s0 on error. +\&\fBEC_GROUP_get_curve_name()\fR returns the curve name (\s-1NID\s0) for \fBgroup\fR or will return NID_undef if no curve name is associated. .PP -EC_GROUP_method_of returns the \s-1EC_METHOD\s0 implementation in use for the given curve or \s-1NULL\s0 on error. +\&\fBEC_GROUP_get_asn1_flag()\fR returns the \s-1ASN1\s0 flag for the specified \fBgroup\fR . .PP -EC_GROUP_get0_generator returns the generator for the given curve or \s-1NULL\s0 on error. +\&\fBEC_GROUP_get_point_conversion_form()\fR returns the point_conversion_form for \fBgroup\fR. .PP -EC_GROUP_get_order, EC_GROUP_get_cofactor, EC_GROUP_get_curve_name, EC_GROUP_get_asn1_flag, EC_GROUP_get_point_conversion_form -and EC_GROUP_get_degree return the order, cofactor, curve name (\s-1NID\s0), \s-1ASN1\s0 flag, point_conversion_form and degree for the -specified curve respectively. If there is no curve name associated with a curve then EC_GROUP_get_curve_name will return 0. +\&\fBEC_GROUP_get_degree()\fR returns the degree for \fBgroup\fR or 0 if the operation is not supported by the underlying group implementation. .PP \&\fBEC_GROUP_get0_order()\fR returns an internal pointer to the group order. \&\fBEC_GROUP_order_bits()\fR returns the number of bits in the group order. \&\fBEC_GROUP_get0_cofactor()\fR returns an internal pointer to the group cofactor. .PP -EC_GROUP_get0_seed returns a pointer to the seed that was used to generate the parameter b, or \s-1NULL\s0 if the seed is not -specified. EC_GROUP_get_seed_len returns the length of the seed or 0 if the seed is not specified. +\&\fBEC_GROUP_get0_seed()\fR returns a pointer to the seed that was used to generate the parameter b, or \s-1NULL\s0 if the seed is not +specified. \fBEC_GROUP_get_seed_len()\fR returns the length of the seed or 0 if the seed is not specified. .PP -EC_GROUP_set_seed returns the length of the seed that has been set. If the supplied seed is \s-1NULL,\s0 or the supplied seed length is +\&\fBEC_GROUP_set_seed()\fR returns the length of the seed that has been set. If the supplied seed is \s-1NULL,\s0 or the supplied seed length is 0, the return value will be 1. On error 0 is returned. .PP -EC_GROUP_cmp returns 0 if the curves are equal, 1 if they are not equal, or \-1 on error. +\&\fBEC_GROUP_cmp()\fR returns 0 if the curves are equal, 1 if they are not equal, or \-1 on error. .PP -EC_GROUP_get_basis_type returns the values NID_X9_62_tpBasis or NID_X9_62_ppBasis (as defined in <openssl/obj_mac.h>) for a +\&\fBEC_GROUP_get_basis_type()\fR returns the values NID_X9_62_tpBasis or NID_X9_62_ppBasis (as defined in <openssl/obj_mac.h>) for a trinomial or pentanomial respectively. Alternatively in the event of an error a 0 is returned. .SH "SEE ALSO" .IX Header "SEE ALSO" diff --git a/crypto/external/bsd/openssl/lib/libcrypto/man/EC_GROUP_new.3 b/crypto/external/bsd/openssl/lib/libcrypto/man/EC_GROUP_new.3 index 78e97dbedf8..4853a27ae0e 100644 --- a/crypto/external/bsd/openssl/lib/libcrypto/man/EC_GROUP_new.3 +++ b/crypto/external/bsd/openssl/lib/libcrypto/man/EC_GROUP_new.3 @@ -1,6 +1,6 @@ -.\" $NetBSD: EC_GROUP_new.3,v 1.4 2019/06/09 18:44:31 christos Exp $ +.\" $NetBSD: EC_GROUP_new.3,v 1.4.2.1 2021/03/28 18:21:47 martin Exp $ .\" -.\" Automatically generated by Pod::Man 4.10 (Pod::Simple 3.35) +.\" Automatically generated by Pod::Man 4.11 (Pod::Simple 3.35) .\" .\" Standard preamble: .\" ======================================================================== @@ -135,7 +135,7 @@ .\" ======================================================================== .\" .IX Title "EC_GROUP_new 3" -.TH EC_GROUP_new 3 "2018-09-23" "1.1.1c" "OpenSSL" +.TH EC_GROUP_new 3 "2020-12-10" "1.1.1i" "OpenSSL" .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. .if n .ad l @@ -198,49 +198,63 @@ libcrypto, -lcrypto .Ve .SH "DESCRIPTION" .IX Header "DESCRIPTION" -Within the library there are two forms of elliptic curve that are of interest. The first form is those defined over the -prime field Fp. The elements of Fp are the integers 0 to p\-1, where p is a prime number. This gives us a revised +Within the library there are two forms of elliptic curve that are of interest. +The first form is those defined over the prime field Fp. The elements of Fp are +the integers 0 to p\-1, where p is a prime number. This gives us a revised elliptic curve equation as follows: .PP y^2 mod p = x^3 +ax + b mod p .PP -The second form is those defined over a binary field F2^m where the elements of the field are integers of length at -most m bits. For this form the elliptic curve equation is modified to: +The second form is those defined over a binary field F2^m where the elements of +the field are integers of length at most m bits. For this form the elliptic +curve equation is modified to: .PP y^2 + xy = x^3 + ax^2 + b (where b != 0) .PP -Operations in a binary field are performed relative to an \fBirreducible polynomial\fR. All such curves with OpenSSL -use a trinomial or a pentanomial for this parameter. +Operations in a binary field are performed relative to an \fBirreducible +polynomial\fR. All such curves with OpenSSL use a trinomial or a pentanomial for +this parameter. .PP -A new curve can be constructed by calling EC_GROUP_new, using the implementation provided by \fBmeth\fR (see -\&\fBEC_GFp_simple_method\fR\|(3)). It is then necessary to call \fBEC_GROUP_set_curve()\fR to set the curve parameters. -\&\fBEC_GROUP_new_from_ecparameters()\fR will create a group from the -specified \fBparams\fR and -\&\fBEC_GROUP_new_from_ecpkparameters()\fR will create a group from the specific \s-1PK\s0 \fBparams\fR. +A new curve can be constructed by calling \fBEC_GROUP_new()\fR, using the +implementation provided by \fBmeth\fR (see \fBEC_GFp_simple_method\fR\|(3)). It is then +necessary to call \fBEC_GROUP_set_curve()\fR to set the curve parameters. +\&\fBEC_GROUP_new_from_ecparameters()\fR will create a group from the specified +\&\fBparams\fR and \fBEC_GROUP_new_from_ecpkparameters()\fR will create a group from the +specific \s-1PK\s0 \fBparams\fR. .PP -\&\fBEC_GROUP_set_curve()\fR sets the curve parameters \fBp\fR, \fBa\fR and \fBb\fR. For a curve over Fp \fBb\fR -is the prime for the field. For a curve over F2^m \fBp\fR represents the irreducible polynomial \- each bit -represents a term in the polynomial. Therefore there will either be three or five bits set dependent on whether -the polynomial is a trinomial or a pentanomial. +\&\fBEC_GROUP_set_curve()\fR sets the curve parameters \fBp\fR, \fBa\fR and \fBb\fR. For a curve +over Fp \fBp\fR is the prime for the field. For a curve over F2^m \fBp\fR represents +the irreducible polynomial \- each bit represents a term in the polynomial. +Therefore, there will either be three or five bits set dependent on whether the +polynomial is a trinomial or a pentanomial. +In either case, \fBa\fR and \fBb\fR represents the coefficients a and b from the +relevant equation introduced above. .PP \&\fBEC_group_get_curve()\fR obtains the previously set curve parameters. .PP -\&\fBEC_GROUP_set_curve_GFp()\fR and \fBEC_GROUP_set_curve_GF2m()\fR are synonyms for \fBEC_GROUP_set_curve()\fR. They are defined for -backwards compatibility only and should not be used. +\&\fBEC_GROUP_set_curve_GFp()\fR and \fBEC_GROUP_set_curve_GF2m()\fR are synonyms for +\&\fBEC_GROUP_set_curve()\fR. They are defined for backwards compatibility only and +should not be used. .PP -\&\fBEC_GROUP_get_curve_GFp()\fR and \fBEC_GROUP_get_curve_GF2m()\fR are synonyms for \fBEC_GROUP_get_curve()\fR. They are defined for -backwards compatibility only and should not be used. +\&\fBEC_GROUP_get_curve_GFp()\fR and \fBEC_GROUP_get_curve_GF2m()\fR are synonyms for +\&\fBEC_GROUP_get_curve()\fR. They are defined for backwards compatibility only and +should not be used. .PP -The functions EC_GROUP_new_curve_GFp and EC_GROUP_new_curve_GF2m are shortcuts for calling EC_GROUP_new and then the -EC_GROUP_set_curve function. An appropriate default implementation method will be used. +The functions \fBEC_GROUP_new_curve_GFp()\fR and \fBEC_GROUP_new_curve_GF2m()\fR are +shortcuts for calling \fBEC_GROUP_new()\fR and then the \fBEC_GROUP_set_curve()\fR function. +An appropriate default implementation method will be used. .PP -Whilst the library can be used to create any curve using the functions described above, there are also a number of -predefined curves that are available. In order to obtain a list of all of the predefined curves, call the function -EC_get_builtin_curves. The parameter \fBr\fR should be an array of EC_builtin_curve structures of size \fBnitems\fR. The function -will populate the \fBr\fR array with information about the builtin curves. If \fBnitems\fR is less than the total number of -curves available, then the first \fBnitems\fR curves will be returned. Otherwise the total number of curves will be -provided. The return value is the total number of curves available (whether that number has been populated in \fBr\fR or -not). Passing a \s-1NULL\s0 \fBr\fR, or setting \fBnitems\fR to 0 will do nothing other than return the total number of curves available. +Whilst the library can be used to create any curve using the functions described +above, there are also a number of predefined curves that are available. In order +to obtain a list of all of the predefined curves, call the function +\&\fBEC_get_builtin_curves()\fR. The parameter \fBr\fR should be an array of +EC_builtin_curve structures of size \fBnitems\fR. The function will populate the +\&\fBr\fR array with information about the builtin curves. If \fBnitems\fR is less than +the total number of curves available, then the first \fBnitems\fR curves will be +returned. Otherwise the total number of curves will be provided. The return +value is the total number of curves available (whether that number has been +populated in \fBr\fR or not). Passing a \s-1NULL\s0 \fBr\fR, or setting \fBnitems\fR to 0 will +do nothing other than return the total number of curves available. The EC_builtin_curve structure is defined as follows: .PP .Vb 4 @@ -250,23 +264,27 @@ The EC_builtin_curve structure is defined as follows: \& } EC_builtin_curve; .Ve .PP -Each EC_builtin_curve item has a unique integer id (\fBnid\fR), and a human readable comment string describing the curve. +Each EC_builtin_curve item has a unique integer id (\fBnid\fR), and a human +readable comment string describing the curve. .PP -In order to construct a builtin curve use the function EC_GROUP_new_by_curve_name and provide the \fBnid\fR of the curve to +In order to construct a builtin curve use the function +\&\fBEC_GROUP_new_by_curve_name()\fR and provide the \fBnid\fR of the curve to be constructed. .PP -EC_GROUP_free frees the memory associated with the \s-1EC_GROUP.\s0 +\&\fBEC_GROUP_free()\fR frees the memory associated with the \s-1EC_GROUP.\s0 If \fBgroup\fR is \s-1NULL\s0 nothing is done. .PP -EC_GROUP_clear_free destroys any sensitive data held within the \s-1EC_GROUP\s0 and then frees its memory. -If \fBgroup\fR is \s-1NULL\s0 nothing is done. +\&\fBEC_GROUP_clear_free()\fR destroys any sensitive data held within the \s-1EC_GROUP\s0 and +then frees its memory. If \fBgroup\fR is \s-1NULL\s0 nothing is done. .SH "RETURN VALUES" .IX Header "RETURN VALUES" -All EC_GROUP_new* functions return a pointer to the newly constructed group, or \s-1NULL\s0 on error. +All EC_GROUP_new* functions return a pointer to the newly constructed group, or +\&\s-1NULL\s0 on error. .PP -EC_get_builtin_curves returns the number of builtin curves that are available. +\&\fBEC_get_builtin_curves()\fR returns the number of builtin curves that are available. .PP -EC_GROUP_set_curve_GFp, EC_GROUP_get_curve_GFp, EC_GROUP_set_curve_GF2m, EC_GROUP_get_curve_GF2m return 1 on success or 0 on error. +\&\fBEC_GROUP_set_curve_GFp()\fR, \fBEC_GROUP_get_curve_GFp()\fR, \fBEC_GROUP_set_curve_GF2m()\fR, +\&\fBEC_GROUP_get_curve_GF2m()\fR return 1 on success or 0 on error. .SH "SEE ALSO" .IX Header "SEE ALSO" \&\fBcrypto\fR\|(7), \fBEC_GROUP_copy\fR\|(3), @@ -274,7 +292,7 @@ EC_GROUP_set_curve_GFp, EC_GROUP_get_curve_GFp, EC_GROUP_set_curve_GF2m, EC_GROU \&\fBEC_GFp_simple_method\fR\|(3), \fBd2i_ECPKParameters\fR\|(3) .SH "COPYRIGHT" .IX Header "COPYRIGHT" -Copyright 2013\-2018 The OpenSSL Project Authors. All Rights Reserved. +Copyright 2013\-2020 The OpenSSL Project Authors. All Rights Reserved. .PP Licensed under the OpenSSL license (the \*(L"License\*(R"). You may not use this file except in compliance with the License. You can obtain a copy diff --git a/crypto/external/bsd/openssl/lib/libcrypto/man/EC_KEY_get_enc_flags.3 b/crypto/external/bsd/openssl/lib/libcrypto/man/EC_KEY_get_enc_flags.3 index ea934b50ac8..62b958dcf1a 100644 --- a/crypto/external/bsd/openssl/lib/libcrypto/man/EC_KEY_get_enc_flags.3 +++ b/crypto/external/bsd/openssl/lib/libcrypto/man/EC_KEY_get_enc_flags.3 @@ -1,6 +1,6 @@ -.\" $NetBSD: EC_KEY_get_enc_flags.3,v 1.3 2019/06/09 18:44:31 christos Exp $ +.\" $NetBSD: EC_KEY_get_enc_flags.3,v 1.3.2.1 2021/03/28 18:21:47 martin Exp $ .\" -.\" Automatically generated by Pod::Man 4.10 (Pod::Simple 3.35) +.\" Automatically generated by Pod::Man 4.11 (Pod::Simple 3.35) .\" .\" Standard preamble: .\" ======================================================================== @@ -135,7 +135,7 @@ .\" ======================================================================== .\" .IX Title "EC_KEY_get_enc_flags 3" -.TH EC_KEY_get_enc_flags 3 "2018-09-23" "1.1.1c" "OpenSSL" +.TH EC_KEY_get_enc_flags 3 "2018-09-23" "1.1.1i" "OpenSSL" .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. .if n .ad l diff --git a/crypto/external/bsd/openssl/lib/libcrypto/man/EC_KEY_new.3 b/crypto/external/bsd/openssl/lib/libcrypto/man/EC_KEY_new.3 index 33c7cbedc9f..85a5b51247b 100644 --- a/crypto/external/bsd/openssl/lib/libcrypto/man/EC_KEY_new.3 +++ b/crypto/external/bsd/openssl/lib/libcrypto/man/EC_KEY_new.3 @@ -1,6 +1,6 @@ -.\" $NetBSD: EC_KEY_new.3,v 1.4 2019/06/09 18:44:31 christos Exp $ +.\" $NetBSD: EC_KEY_new.3,v 1.4.2.1 2021/03/28 18:21:47 martin Exp $ .\" -.\" Automatically generated by Pod::Man 4.10 (Pod::Simple 3.35) +.\" Automatically generated by Pod::Man 4.11 (Pod::Simple 3.35) .\" .\" Standard preamble: .\" ======================================================================== @@ -135,7 +135,7 @@ .\" ======================================================================== .\" .IX Title "EC_KEY_new 3" -.TH EC_KEY_new 3 "2018-09-23" "1.1.1c" "OpenSSL" +.TH EC_KEY_new 3 "2020-12-10" "1.1.1i" "OpenSSL" .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. .if n .ad l @@ -148,7 +148,8 @@ EC_KEY_get0_engine, EC_KEY_get0_group, EC_KEY_set_group, EC_KEY_get0_private_key, EC_KEY_set_private_key, EC_KEY_get0_public_key, EC_KEY_set_public_key, EC_KEY_get_conv_form, -EC_KEY_set_conv_form, EC_KEY_set_asn1_flag, EC_KEY_precompute_mult, +EC_KEY_set_conv_form, EC_KEY_set_asn1_flag, +EC_KEY_decoded_from_explicit_params, EC_KEY_precompute_mult, EC_KEY_generate_key, EC_KEY_check_key, EC_KEY_set_public_key_affine_coordinates, EC_KEY_oct2key, EC_KEY_key2buf, EC_KEY_oct2priv, EC_KEY_priv2oct, EC_KEY_priv2buf \- Functions for creating, destroying and manipulating @@ -179,6 +180,7 @@ libcrypto, -lcrypto \& point_conversion_form_t EC_KEY_get_conv_form(const EC_KEY *key); \& void EC_KEY_set_conv_form(EC_KEY *eckey, point_conversion_form_t cform); \& void EC_KEY_set_asn1_flag(EC_KEY *eckey, int asn1_flag); +\& int EC_KEY_decoded_from_explicit_params(const EC_KEY *key); \& int EC_KEY_precompute_mult(EC_KEY *key, BN_CTX *ctx); \& int EC_KEY_generate_key(EC_KEY *key); \& int EC_KEY_check_key(const EC_KEY *key); @@ -259,11 +261,15 @@ other flags are left in their existing state. (if set). Refer to \fBEC_GROUP_copy\fR\|(3) for further information on the asn1_flag. .PP +\&\fBEC_KEY_decoded_from_explicit_params()\fR returns 1 if the group of the \fIkey\fR was +decoded from data with explicitly encoded group parameters, \-1 if the \fIkey\fR +is \s-1NULL\s0 or the group parameters are missing, and 0 otherwise. +.PP \&\fBEC_KEY_precompute_mult()\fR stores multiples of the underlying \s-1EC_GROUP\s0 generator for faster point multiplication. See also \fBEC_POINT_add\fR\|(3). .PP \&\fBEC_KEY_oct2key()\fR and \fBEC_KEY_key2buf()\fR are identical to the functions -\&\fBEC_POINT_oct2point()\fR and \fBEC_KEY_point2buf()\fR except they use the public key +\&\fBEC_POINT_oct2point()\fR and \fBEC_POINT_point2buf()\fR except they use the public key \&\s-1EC_POINT\s0 in \fBeckey\fR. .PP \&\fBEC_KEY_oct2priv()\fR and \fBEC_KEY_priv2oct()\fR convert between the private key @@ -316,7 +322,7 @@ of the buffer or 0 on error. \&\fBd2i_ECPKParameters\fR\|(3) .SH "COPYRIGHT" .IX Header "COPYRIGHT" -Copyright 2013\-2017 The OpenSSL Project Authors. All Rights Reserved. +Copyright 2013\-2020 The OpenSSL Project Authors. All Rights Reserved. .PP Licensed under the OpenSSL license (the \*(L"License\*(R"). You may not use this file except in compliance with the License. You can obtain a copy diff --git a/crypto/external/bsd/openssl/lib/libcrypto/man/EC_POINT_add.3 b/crypto/external/bsd/openssl/lib/libcrypto/man/EC_POINT_add.3 index 1081f3c438b..abfb0aa22b1 100644 --- a/crypto/external/bsd/openssl/lib/libcrypto/man/EC_POINT_add.3 +++ b/crypto/external/bsd/openssl/lib/libcrypto/man/EC_POINT_add.3 @@ -1,6 +1,6 @@ -.\" $NetBSD: EC_POINT_add.3,v 1.4 2019/06/09 18:44:31 christos Exp $ +.\" $NetBSD: EC_POINT_add.3,v 1.4.2.1 2021/03/28 18:21:47 martin Exp $ .\" -.\" Automatically generated by Pod::Man 4.10 (Pod::Simple 3.35) +.\" Automatically generated by Pod::Man 4.11 (Pod::Simple 3.35) .\" .\" Standard preamble: .\" ======================================================================== @@ -135,7 +135,7 @@ .\" ======================================================================== .\" .IX Title "EC_POINT_add 3" -.TH EC_POINT_add 3 "2018-09-23" "1.1.1c" "OpenSSL" +.TH EC_POINT_add 3 "2018-09-23" "1.1.1i" "OpenSSL" .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. .if n .ad l diff --git a/crypto/external/bsd/openssl/lib/libcrypto/man/EC_POINT_new.3 b/crypto/external/bsd/openssl/lib/libcrypto/man/EC_POINT_new.3 index c76537e3ff8..01999b7e25c 100644 --- a/crypto/external/bsd/openssl/lib/libcrypto/man/EC_POINT_new.3 +++ b/crypto/external/bsd/openssl/lib/libcrypto/man/EC_POINT_new.3 @@ -1,6 +1,6 @@ -.\" $NetBSD: EC_POINT_new.3,v 1.4 2019/06/09 18:44:31 christos Exp $ +.\" $NetBSD: EC_POINT_new.3,v 1.4.2.1 2021/03/28 18:21:48 martin Exp $ .\" -.\" Automatically generated by Pod::Man 4.10 (Pod::Simple 3.35) +.\" Automatically generated by Pod::Man 4.11 (Pod::Simple 3.35) .\" .\" Standard preamble: .\" ======================================================================== @@ -135,7 +135,7 @@ .\" ======================================================================== .\" .IX Title "EC_POINT_new 3" -.TH EC_POINT_new 3 "2018-09-23" "1.1.1c" "OpenSSL" +.TH EC_POINT_new 3 "2020-12-10" "1.1.1i" "OpenSSL" .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. .if n .ad l @@ -288,7 +288,7 @@ to (x, y, 1). To set or get the projective co-ordinates use .PP Points can also be described in terms of their compressed co-ordinates. For a point (x, y), for any given value for x such that the point is on the curve -there will only ever be two possible values for y. Therefore a point can be set +there will only ever be two possible values for y. Therefore, a point can be set using the \fBEC_POINT_set_compressed_coordinates()\fR function where \fBx\fR is the x co-ordinate and \fBy_bit\fR is a value 0 or 1 to identify which of the two possible values for y should be used. @@ -311,6 +311,26 @@ The functions \fBEC_POINT_point2oct()\fR, \fBEC_POINT_oct2point()\fR, \fBEC_POIN \&\fBEC_POINT_bn2point()\fR, \fBEC_POINT_point2hex()\fR and \fBEC_POINT_hex2point()\fR convert from and to EC_POINTs for the formats: octet, \s-1BIGNUM\s0 and hexadecimal respectively. .PP +The function \fBEC_POINT_point2oct()\fR encodes the given curve point \fBp\fR as an +octet string into the buffer \fBbuf\fR of size \fBlen\fR, using the specified +conversion form \fBform\fR. +The encoding conforms with Sec. 2.3.3 of the \s-1SECG SEC 1\s0 (\*(L"Elliptic Curve +Cryptography\*(R") standard. +Similarly the function \fBEC_POINT_oct2point()\fR decodes a curve point into \fBp\fR from +the octet string contained in the given buffer \fBbuf\fR of size \fBlen\fR, conforming +to Sec. 2.3.4 of the \s-1SECG SEC 1\s0 (\*(L"Elliptic Curve Cryptography\*(R") standard. +.PP +The functions \fBEC_POINT_point2hex()\fR and \fBEC_POINT_point2bn()\fR convert a point \fBp\fR, +respectively, to the hexadecimal or \s-1BIGNUM\s0 representation of the same +encoding of the function \fBEC_POINT_point2oct()\fR. +Vice versa, similarly to the function \fBEC_POINT_oct2point()\fR, the functions +\&\fBEC_POINT_hex2point()\fR and \fBEC_POINT_point2bn()\fR decode the hexadecimal or +\&\s-1BIGNUM\s0 representation into the \s-1EC_POINT\s0 \fBp\fR. +.PP +Notice that, according to the standard, the octet string encoding of the point +at infinity for a given curve is fixed to a single octet of value zero and that, +vice versa, a single octet of size zero is decoded as the point at infinity. +.PP The function \fBEC_POINT_point2oct()\fR must be supplied with a buffer long enough to store the octet form. The return value provides the number of octets stored. Calling the function with a \s-1NULL\s0 buffer will not perform the conversion but @@ -360,7 +380,7 @@ error. \&\fBEC_GFp_simple_method\fR\|(3), \fBd2i_ECPKParameters\fR\|(3) .SH "COPYRIGHT" .IX Header "COPYRIGHT" -Copyright 2013\-2018 The OpenSSL Project Authors. All Rights Reserved. +Copyright 2013\-2020 The OpenSSL Project Authors. All Rights Reserved. .PP Licensed under the OpenSSL license (the \*(L"License\*(R"). You may not use this file except in compliance with the License. You can obtain a copy diff --git a/crypto/external/bsd/openssl/lib/libcrypto/man/ENGINE_add.3 b/crypto/external/bsd/openssl/lib/libcrypto/man/ENGINE_add.3 index baf9d5e2b0b..ab641b9cfb4 100644 --- a/crypto/external/bsd/openssl/lib/libcrypto/man/ENGINE_add.3 +++ b/crypto/external/bsd/openssl/lib/libcrypto/man/ENGINE_add.3 @@ -1,6 +1,6 @@ -.\" $NetBSD: ENGINE_add.3,v 1.3 2019/06/09 18:44:31 christos Exp $ +.\" $NetBSD: ENGINE_add.3,v 1.3.2.1 2021/03/28 18:21:48 martin Exp $ .\" -.\" Automatically generated by Pod::Man 4.10 (Pod::Simple 3.35) +.\" Automatically generated by Pod::Man 4.11 (Pod::Simple 3.35) .\" .\" Standard preamble: .\" ======================================================================== @@ -135,7 +135,7 @@ .\" ======================================================================== .\" .IX Title "ENGINE_add 3" -.TH ENGINE_add 3 "2018-09-23" "1.1.1c" "OpenSSL" +.TH ENGINE_add 3 "2020-12-10" "1.1.1i" "OpenSSL" .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. .if n .ad l @@ -325,7 +325,7 @@ implementation includes the following abstractions; .SS "Reference counting and handles" .IX Subsection "Reference counting and handles" Due to the modular nature of the \s-1ENGINE API,\s0 pointers to ENGINEs need to be -treated as handles \- ie. not only as pointers, but also as references to +treated as handles \- i.e. not only as pointers, but also as references to the underlying \s-1ENGINE\s0 object. Ie. one should obtain a new reference when making copies of an \s-1ENGINE\s0 pointer if the copies will be used (and released) independently. @@ -396,15 +396,15 @@ operational \s-1ENGINE\s0 for a given cryptographic purpose. .PP To obtain a functional reference from an existing structural reference, call the \fBENGINE_init()\fR function. This returns zero if the \s-1ENGINE\s0 was not -already operational and couldn't be successfully initialised (eg. lack of +already operational and couldn't be successfully initialised (e.g. lack of system drivers, no special hardware attached, etc), otherwise it will -return non-zero to indicate that the \s-1ENGINE\s0 is now operational and will +return nonzero to indicate that the \s-1ENGINE\s0 is now operational and will have allocated a new \fBfunctional\fR reference to the \s-1ENGINE.\s0 All functional references are released by calling \fBENGINE_finish()\fR (which removes the implicit structural reference as well). .PP The second way to get a functional reference is by asking OpenSSL for a -default implementation for a given task, eg. by \fBENGINE_get_default_RSA()\fR, +default implementation for a given task, e.g. by \fBENGINE_get_default_RSA()\fR, \&\fBENGINE_get_default_cipher_engine()\fR, etc. These are discussed in the next section, though they are not usually required by application programmers as they are used automatically when creating and using the relevant @@ -421,7 +421,7 @@ In the case of other abstractions like \s-1RSA, DSA,\s0 etc, there is only one \&\*(L"algorithm\*(R" so all implementations implicitly register using the same 'nid' index. .PP -When a default \s-1ENGINE\s0 is requested for a given abstraction/algorithm/mode, (eg. +When a default \s-1ENGINE\s0 is requested for a given abstraction/algorithm/mode, (e.g. when calling RSA_new_method(\s-1NULL\s0)), a \*(L"get_default\*(R" call will be made to the \&\s-1ENGINE\s0 subsystem to process the corresponding state table and return a functional reference to an initialised \s-1ENGINE\s0 whose implementation should be @@ -470,7 +470,7 @@ is something for the application to control. Some applications will want to allow the user to specify exactly which \s-1ENGINE\s0 they want used if any is to be used at all. Others may prefer to load all support and have OpenSSL automatically use at run-time any \s-1ENGINE\s0 that is able to -successfully initialise \- ie. to assume that this corresponds to +successfully initialise \- i.e. to assume that this corresponds to acceleration hardware attached to the machine or some such thing. There are probably numerous other ways in which applications may prefer to handle things, so we will simply illustrate the consequences as they apply to a @@ -562,7 +562,7 @@ so that it can be initialised for use. This could include the path to any driver or config files it needs to load, required network addresses, smart-card identifiers, passwords to initialise protected devices, logging information, etc etc. This class of commands typically needs to be -passed to an \s-1ENGINE\s0 \fBbefore\fR attempting to initialise it, ie. before +passed to an \s-1ENGINE\s0 \fBbefore\fR attempting to initialise it, i.e. before calling \fBENGINE_init()\fR. The other class of commands consist of settings or operations that tweak certain behaviour or cause certain operations to take place, and these commands may work either before or after \fBENGINE_init()\fR, or @@ -624,7 +624,7 @@ boolean success or failure. .Ve .PP Note that \fBENGINE_ctrl_cmd_string()\fR accepts a boolean argument that can -relax the semantics of the function \- if set non-zero it will only return +relax the semantics of the function \- if set nonzero it will only return failure if the \s-1ENGINE\s0 supported the given command name but failed while executing it, if the \s-1ENGINE\s0 doesn't support the command name it will simply return success without doing anything. In this case we assume the user is @@ -637,7 +637,7 @@ It is possible to discover at run-time the names, numerical-ids, descriptions and input parameters of the control commands supported by an \s-1ENGINE\s0 using a structural reference. Note that some control commands are defined by OpenSSL itself and it will intercept and handle these control commands on behalf of the -\&\s-1ENGINE,\s0 ie. the \s-1ENGINE\s0's \fBctrl()\fR handler is not used for the control command. +\&\s-1ENGINE,\s0 i.e. the \s-1ENGINE\s0's \fBctrl()\fR handler is not used for the control command. openssl/engine.h defines an index, \s-1ENGINE_CMD_BASE,\s0 that all control commands implemented by ENGINEs should be numbered from. Any command value lower than this symbol is considered a \*(L"generic\*(R" command is handled directly by the @@ -709,7 +709,7 @@ by applications, administrations, users, etc. These can support arbitrary operations via \fBENGINE_ctrl()\fR, including passing to and/or from the control commands data of any arbitrary type. These commands are supported in the discovery mechanisms simply to allow applications to determine if an \s-1ENGINE\s0 -supports certain specific commands it might want to use (eg. application \*(L"foo\*(R" +supports certain specific commands it might want to use (e.g. application \*(L"foo\*(R" might query various ENGINEs to see if they implement \*(L"\s-1FOO_GET_VENDOR_LOGO_GIF\*(R"\s0 \- and \s-1ENGINE\s0 could therefore decide whether or not to support this \*(L"foo\*(R"\-specific extension). @@ -801,7 +801,7 @@ done by \fBOPENSSL_cleanup()\fR and should not be used. .SH "COPYRIGHT" .IX Header "COPYRIGHT" -Copyright 2002\-2018 The OpenSSL Project Authors. All Rights Reserved. +Copyright 2002\-2020 The OpenSSL Project Authors. All Rights Reserved. .PP Licensed under the OpenSSL license (the \*(L"License\*(R"). You may not use this file except in compliance with the License. You can obtain a copy diff --git a/crypto/external/bsd/openssl/lib/libcrypto/man/ERR_GET_LIB.3 b/crypto/external/bsd/openssl/lib/libcrypto/man/ERR_GET_LIB.3 index 7ebf8ed93ba..3ffdb961d3c 100644 --- a/crypto/external/bsd/openssl/lib/libcrypto/man/ERR_GET_LIB.3 +++ b/crypto/external/bsd/openssl/lib/libcrypto/man/ERR_GET_LIB.3 @@ -1,6 +1,6 @@ -.\" $NetBSD: ERR_GET_LIB.3,v 1.19 2019/06/09 18:44:31 christos Exp $ +.\" $NetBSD: ERR_GET_LIB.3,v 1.19.2.1 2021/03/28 18:21:48 martin Exp $ .\" -.\" Automatically generated by Pod::Man 4.10 (Pod::Simple 3.35) +.\" Automatically generated by Pod::Man 4.11 (Pod::Simple 3.35) .\" .\" Standard preamble: .\" ======================================================================== @@ -135,7 +135,7 @@ .\" ======================================================================== .\" .IX Title "ERR_GET_LIB 3" -.TH ERR_GET_LIB 3 "2018-09-23" "1.1.1c" "OpenSSL" +.TH ERR_GET_LIB 3 "2018-09-23" "1.1.1i" "OpenSSL" .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. .if n .ad l diff --git a/crypto/external/bsd/openssl/lib/libcrypto/man/ERR_clear_error.3 b/crypto/external/bsd/openssl/lib/libcrypto/man/ERR_clear_error.3 index 5433acb0c08..bf6703d0c8d 100644 --- a/crypto/external/bsd/openssl/lib/libcrypto/man/ERR_clear_error.3 +++ b/crypto/external/bsd/openssl/lib/libcrypto/man/ERR_clear_error.3 @@ -1,6 +1,6 @@ -.\" $NetBSD: ERR_clear_error.3,v 1.19 2019/06/09 18:44:31 christos Exp $ +.\" $NetBSD: ERR_clear_error.3,v 1.19.2.1 2021/03/28 18:21:48 martin Exp $ .\" -.\" Automatically generated by Pod::Man 4.10 (Pod::Simple 3.35) +.\" Automatically generated by Pod::Man 4.11 (Pod::Simple 3.35) .\" .\" Standard preamble: .\" ======================================================================== @@ -135,7 +135,7 @@ .\" ======================================================================== .\" .IX Title "ERR_clear_error 3" -.TH ERR_clear_error 3 "2018-09-23" "1.1.1c" "OpenSSL" +.TH ERR_clear_error 3 "2018-09-23" "1.1.1i" "OpenSSL" .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. .if n .ad l diff --git a/crypto/external/bsd/openssl/lib/libcrypto/man/ERR_error_string.3 b/crypto/external/bsd/openssl/lib/libcrypto/man/ERR_error_string.3 index 7a64c8fc35a..ad878a858e6 100644 --- a/crypto/external/bsd/openssl/lib/libcrypto/man/ERR_error_string.3 +++ b/crypto/external/bsd/openssl/lib/libcrypto/man/ERR_error_string.3 @@ -1,6 +1,6 @@ -.\" $NetBSD: ERR_error_string.3,v 1.19 2019/06/09 18:44:31 christos Exp $ +.\" $NetBSD: ERR_error_string.3,v 1.19.2.1 2021/03/28 18:21:48 martin Exp $ .\" -.\" Automatically generated by Pod::Man 4.10 (Pod::Simple 3.35) +.\" Automatically generated by Pod::Man 4.11 (Pod::Simple 3.35) .\" .\" Standard preamble: .\" ======================================================================== @@ -135,7 +135,7 @@ .\" ======================================================================== .\" .IX Title "ERR_error_string 3" -.TH ERR_error_string 3 "2018-09-23" "1.1.1c" "OpenSSL" +.TH ERR_error_string 3 "2018-09-23" "1.1.1i" "OpenSSL" .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. .if n .ad l diff --git a/crypto/external/bsd/openssl/lib/libcrypto/man/ERR_get_error.3 b/crypto/external/bsd/openssl/lib/libcrypto/man/ERR_get_error.3 index be80d1d4d43..95f6984859d 100644 --- a/crypto/external/bsd/openssl/lib/libcrypto/man/ERR_get_error.3 +++ b/crypto/external/bsd/openssl/lib/libcrypto/man/ERR_get_error.3 @@ -1,6 +1,6 @@ -.\" $NetBSD: ERR_get_error.3,v 1.19 2019/06/09 18:44:31 christos Exp $ +.\" $NetBSD: ERR_get_error.3,v 1.19.2.1 2021/03/28 18:21:48 martin Exp $ .\" -.\" Automatically generated by Pod::Man 4.10 (Pod::Simple 3.35) +.\" Automatically generated by Pod::Man 4.11 (Pod::Simple 3.35) .\" .\" Standard preamble: .\" ======================================================================== @@ -135,7 +135,7 @@ .\" ======================================================================== .\" .IX Title "ERR_get_error 3" -.TH ERR_get_error 3 "2018-09-23" "1.1.1c" "OpenSSL" +.TH ERR_get_error 3 "2020-12-10" "1.1.1i" "OpenSSL" .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. .if n .ad l @@ -186,7 +186,7 @@ messages. .PP \&\fBERR_get_error_line()\fR, \fBERR_peek_error_line()\fR and \&\fBERR_peek_last_error_line()\fR are the same as the above, but they -additionally store the file name and line number where +additionally store the filename and line number where the error occurred in *\fBfile\fR and *\fBline\fR, unless these are \fB\s-1NULL\s0\fR. .PP \&\fBERR_get_error_line_data()\fR, \fBERR_peek_error_line_data()\fR and @@ -207,7 +207,7 @@ The error code, or 0 if there is no error in the queue. \&\s-1\fBERR_GET_LIB\s0\fR\|(3) .SH "COPYRIGHT" .IX Header "COPYRIGHT" -Copyright 2000\-2017 The OpenSSL Project Authors. All Rights Reserved. +Copyright 2000\-2020 The OpenSSL Project Authors. All Rights Reserved. .PP Licensed under the OpenSSL license (the \*(L"License\*(R"). You may not use this file except in compliance with the License. You can obtain a copy diff --git a/crypto/external/bsd/openssl/lib/libcrypto/man/ERR_load_crypto_strings.3 b/crypto/external/bsd/openssl/lib/libcrypto/man/ERR_load_crypto_strings.3 index cd79caf4326..4b05e278551 100644 --- a/crypto/external/bsd/openssl/lib/libcrypto/man/ERR_load_crypto_strings.3 +++ b/crypto/external/bsd/openssl/lib/libcrypto/man/ERR_load_crypto_strings.3 @@ -1,6 +1,6 @@ -.\" $NetBSD: ERR_load_crypto_strings.3,v 1.19 2019/06/09 18:44:31 christos Exp $ +.\" $NetBSD: ERR_load_crypto_strings.3,v 1.19.2.1 2021/03/28 18:21:48 martin Exp $ .\" -.\" Automatically generated by Pod::Man 4.10 (Pod::Simple 3.35) +.\" Automatically generated by Pod::Man 4.11 (Pod::Simple 3.35) .\" .\" Standard preamble: .\" ======================================================================== @@ -135,7 +135,7 @@ .\" ======================================================================== .\" .IX Title "ERR_load_crypto_strings 3" -.TH ERR_load_crypto_strings 3 "2018-09-23" "1.1.1c" "OpenSSL" +.TH ERR_load_crypto_strings 3 "2018-09-23" "1.1.1i" "OpenSSL" .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. .if n .ad l diff --git a/crypto/external/bsd/openssl/lib/libcrypto/man/ERR_load_strings.3 b/crypto/external/bsd/openssl/lib/libcrypto/man/ERR_load_strings.3 index e8686594840..4ee21784555 100644 --- a/crypto/external/bsd/openssl/lib/libcrypto/man/ERR_load_strings.3 +++ b/crypto/external/bsd/openssl/lib/libcrypto/man/ERR_load_strings.3 @@ -1,6 +1,6 @@ -.\" $NetBSD: ERR_load_strings.3,v 1.19 2019/06/09 18:44:31 christos Exp $ +.\" $NetBSD: ERR_load_strings.3,v 1.19.2.1 2021/03/28 18:21:48 martin Exp $ .\" -.\" Automatically generated by Pod::Man 4.10 (Pod::Simple 3.35) +.\" Automatically generated by Pod::Man 4.11 (Pod::Simple 3.35) .\" .\" Standard preamble: .\" ======================================================================== @@ -135,7 +135,7 @@ .\" ======================================================================== .\" .IX Title "ERR_load_strings 3" -.TH ERR_load_strings 3 "2018-09-23" "1.1.1c" "OpenSSL" +.TH ERR_load_strings 3 "2018-09-23" "1.1.1i" "OpenSSL" .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. .if n .ad l diff --git a/crypto/external/bsd/openssl/lib/libcrypto/man/ERR_print_errors.3 b/crypto/external/bsd/openssl/lib/libcrypto/man/ERR_print_errors.3 index 246532ea8f8..799b0b24362 100644 --- a/crypto/external/bsd/openssl/lib/libcrypto/man/ERR_print_errors.3 +++ b/crypto/external/bsd/openssl/lib/libcrypto/man/ERR_print_errors.3 @@ -1,6 +1,6 @@ -.\" $NetBSD: ERR_print_errors.3,v 1.19 2019/06/09 18:44:31 christos Exp $ +.\" $NetBSD: ERR_print_errors.3,v 1.19.2.1 2021/03/28 18:21:48 martin Exp $ .\" -.\" Automatically generated by Pod::Man 4.10 (Pod::Simple 3.35) +.\" Automatically generated by Pod::Man 4.11 (Pod::Simple 3.35) .\" .\" Standard preamble: .\" ======================================================================== @@ -135,7 +135,7 @@ .\" ======================================================================== .\" .IX Title "ERR_print_errors 3" -.TH ERR_print_errors 3 "2018-09-23" "1.1.1c" "OpenSSL" +.TH ERR_print_errors 3 "2020-12-10" "1.1.1i" "OpenSSL" .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. .if n .ad l @@ -170,7 +170,7 @@ emptying the error queue. The error strings will have the following format: .PP .Vb 1 -\& [pid]:error:[error code]:[library name]:[function name]:[reason string]:[file name]:[line]:[optional text message] +\& [pid]:error:[error code]:[library name]:[function name]:[reason string]:[filename]:[line]:[optional text message] .Ve .PP \&\fIerror code\fR is an 8 digit hexadecimal number. \fIlibrary name\fR, @@ -188,7 +188,7 @@ the error string will contain the numeric code. \&\fBERR_get_error\fR\|(3) .SH "COPYRIGHT" .IX Header "COPYRIGHT" -Copyright 2000\-2017 The OpenSSL Project Authors. All Rights Reserved. +Copyright 2000\-2020 The OpenSSL Project Authors. All Rights Reserved. .PP Licensed under the OpenSSL license (the \*(L"License\*(R"). You may not use this file except in compliance with the License. You can obtain a copy diff --git a/crypto/external/bsd/openssl/lib/libcrypto/man/ERR_put_error.3 b/crypto/external/bsd/openssl/lib/libcrypto/man/ERR_put_error.3 index 1be7b7889e4..b78373e9eab 100644 --- a/crypto/external/bsd/openssl/lib/libcrypto/man/ERR_put_error.3 +++ b/crypto/external/bsd/openssl/lib/libcrypto/man/ERR_put_error.3 @@ -1,6 +1,6 @@ -.\" $NetBSD: ERR_put_error.3,v 1.19 2019/06/09 18:44:31 christos Exp $ +.\" $NetBSD: ERR_put_error.3,v 1.19.2.1 2021/03/28 18:21:48 martin Exp $ .\" -.\" Automatically generated by Pod::Man 4.10 (Pod::Simple 3.35) +.\" Automatically generated by Pod::Man 4.11 (Pod::Simple 3.35) .\" .\" Standard preamble: .\" ======================================================================== @@ -135,7 +135,7 @@ .\" ======================================================================== .\" .IX Title "ERR_put_error 3" -.TH ERR_put_error 3 "2018-09-23" "1.1.1c" "OpenSSL" +.TH ERR_put_error 3 "2020-12-10" "1.1.1i" "OpenSSL" .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. .if n .ad l @@ -181,14 +181,14 @@ descriptions. For example, the function \fBssl3_read_bytes()\fR reports a \& SSLerr(SSL_F_SSL3_READ_BYTES, SSL_R_SSL_HANDSHAKE_FAILURE); .Ve .PP -Function and reason codes should consist of upper case characters, +Function and reason codes should consist of uppercase characters, numbers and underscores only. The error file generation script translates function codes into function names by looking in the header files for an appropriate function name, if none is found it just uses the capitalized form such as \*(L"\s-1SSL3_READ_BYTES\*(R"\s0 in the above example. .PP The trailing section of a reason code (after the \*(L"_R_\*(R") is translated -into lower case and underscores changed to spaces. +into lowercase and underscores changed to spaces. .PP Although a library will normally report errors using its own specific XXXerr macro, another library's macro can be used. This is normally @@ -203,7 +203,7 @@ no values. \&\fBERR_load_strings\fR\|(3) .SH "COPYRIGHT" .IX Header "COPYRIGHT" -Copyright 2000\-2017 The OpenSSL Project Authors. All Rights Reserved. +Copyright 2000\-2020 The OpenSSL Project Authors. All Rights Reserved. .PP Licensed under the OpenSSL license (the \*(L"License\*(R"). You may not use this file except in compliance with the License. You can obtain a copy diff --git a/crypto/external/bsd/openssl/lib/libcrypto/man/ERR_remove_state.3 b/crypto/external/bsd/openssl/lib/libcrypto/man/ERR_remove_state.3 index a960542b055..6021d4a4781 100644 --- a/crypto/external/bsd/openssl/lib/libcrypto/man/ERR_remove_state.3 +++ b/crypto/external/bsd/openssl/lib/libcrypto/man/ERR_remove_state.3 @@ -1,6 +1,6 @@ -.\" $NetBSD: ERR_remove_state.3,v 1.19 2019/06/09 18:44:31 christos Exp $ +.\" $NetBSD: ERR_remove_state.3,v 1.19.2.1 2021/03/28 18:21:48 martin Exp $ .\" -.\" Automatically generated by Pod::Man 4.10 (Pod::Simple 3.35) +.\" Automatically generated by Pod::Man 4.11 (Pod::Simple 3.35) .\" .\" Standard preamble: .\" ======================================================================== @@ -135,7 +135,7 @@ .\" ======================================================================== .\" .IX Title "ERR_remove_state 3" -.TH ERR_remove_state 3 "2018-09-23" "1.1.1c" "OpenSSL" +.TH ERR_remove_state 3 "2018-09-23" "1.1.1i" "OpenSSL" .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. .if n .ad l diff --git a/crypto/external/bsd/openssl/lib/libcrypto/man/ERR_set_mark.3 b/crypto/external/bsd/openssl/lib/libcrypto/man/ERR_set_mark.3 index ea4ffedd4f4..569c89d3839 100644 --- a/crypto/external/bsd/openssl/lib/libcrypto/man/ERR_set_mark.3 +++ b/crypto/external/bsd/openssl/lib/libcrypto/man/ERR_set_mark.3 @@ -1,6 +1,6 @@ -.\" $NetBSD: ERR_set_mark.3,v 1.19 2019/06/09 18:44:31 christos Exp $ +.\" $NetBSD: ERR_set_mark.3,v 1.19.2.1 2021/03/28 18:21:48 martin Exp $ .\" -.\" Automatically generated by Pod::Man 4.10 (Pod::Simple 3.35) +.\" Automatically generated by Pod::Man 4.11 (Pod::Simple 3.35) .\" .\" Standard preamble: .\" ======================================================================== @@ -135,7 +135,7 @@ .\" ======================================================================== .\" .IX Title "ERR_set_mark 3" -.TH ERR_set_mark 3 "2018-09-23" "1.1.1c" "OpenSSL" +.TH ERR_set_mark 3 "2018-09-23" "1.1.1i" "OpenSSL" .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. .if n .ad l diff --git a/crypto/external/bsd/openssl/lib/libcrypto/man/EVP_BytesToKey.3 b/crypto/external/bsd/openssl/lib/libcrypto/man/EVP_BytesToKey.3 index ffc560ff752..d7233ea6382 100644 --- a/crypto/external/bsd/openssl/lib/libcrypto/man/EVP_BytesToKey.3 +++ b/crypto/external/bsd/openssl/lib/libcrypto/man/EVP_BytesToKey.3 @@ -1,6 +1,6 @@ -.\" $NetBSD: EVP_BytesToKey.3,v 1.19 2019/06/09 18:44:31 christos Exp $ +.\" $NetBSD: EVP_BytesToKey.3,v 1.19.2.1 2021/03/28 18:21:48 martin Exp $ .\" -.\" Automatically generated by Pod::Man 4.10 (Pod::Simple 3.35) +.\" Automatically generated by Pod::Man 4.11 (Pod::Simple 3.35) .\" .\" Standard preamble: .\" ======================================================================== @@ -135,7 +135,7 @@ .\" ======================================================================== .\" .IX Title "EVP_BytesToKey 3" -.TH EVP_BytesToKey 3 "2018-09-23" "1.1.1c" "OpenSSL" +.TH EVP_BytesToKey 3 "2018-09-23" "1.1.1i" "OpenSSL" .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. .if n .ad l diff --git a/crypto/external/bsd/openssl/lib/libcrypto/man/EVP_CIPHER_CTX_get_cipher_data.3 b/crypto/external/bsd/openssl/lib/libcrypto/man/EVP_CIPHER_CTX_get_cipher_data.3 index a96498c1061..f61b104cb4b 100644 --- a/crypto/external/bsd/openssl/lib/libcrypto/man/EVP_CIPHER_CTX_get_cipher_data.3 +++ b/crypto/external/bsd/openssl/lib/libcrypto/man/EVP_CIPHER_CTX_get_cipher_data.3 @@ -1,6 +1,6 @@ -.\" $NetBSD: EVP_CIPHER_CTX_get_cipher_data.3,v 1.3 2019/06/09 18:44:31 christos Exp $ +.\" $NetBSD: EVP_CIPHER_CTX_get_cipher_data.3,v 1.3.2.1 2021/03/28 18:21:48 martin Exp $ .\" -.\" Automatically generated by Pod::Man 4.10 (Pod::Simple 3.35) +.\" Automatically generated by Pod::Man 4.11 (Pod::Simple 3.35) .\" .\" Standard preamble: .\" ======================================================================== @@ -135,7 +135,7 @@ .\" ======================================================================== .\" .IX Title "EVP_CIPHER_CTX_get_cipher_data 3" -.TH EVP_CIPHER_CTX_get_cipher_data 3 "2018-09-23" "1.1.1c" "OpenSSL" +.TH EVP_CIPHER_CTX_get_cipher_data 3 "2018-09-23" "1.1.1i" "OpenSSL" .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. .if n .ad l diff --git a/crypto/external/bsd/openssl/lib/libcrypto/man/EVP_CIPHER_meth_new.3 b/crypto/external/bsd/openssl/lib/libcrypto/man/EVP_CIPHER_meth_new.3 index eaca31d3268..67bb03d3473 100644 --- a/crypto/external/bsd/openssl/lib/libcrypto/man/EVP_CIPHER_meth_new.3 +++ b/crypto/external/bsd/openssl/lib/libcrypto/man/EVP_CIPHER_meth_new.3 @@ -1,6 +1,6 @@ -.\" $NetBSD: EVP_CIPHER_meth_new.3,v 1.3 2019/06/09 18:44:31 christos Exp $ +.\" $NetBSD: EVP_CIPHER_meth_new.3,v 1.3.2.1 2021/03/28 18:21:48 martin Exp $ .\" -.\" Automatically generated by Pod::Man 4.10 (Pod::Simple 3.35) +.\" Automatically generated by Pod::Man 4.11 (Pod::Simple 3.35) .\" .\" Standard preamble: .\" ======================================================================== @@ -135,7 +135,7 @@ .\" ======================================================================== .\" .IX Title "EVP_CIPHER_meth_new 3" -.TH EVP_CIPHER_meth_new 3 "2018-09-23" "1.1.1c" "OpenSSL" +.TH EVP_CIPHER_meth_new 3 "2018-09-23" "1.1.1i" "OpenSSL" .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. .if n .ad l diff --git a/crypto/external/bsd/openssl/lib/libcrypto/man/EVP_DigestInit.3 b/crypto/external/bsd/openssl/lib/libcrypto/man/EVP_DigestInit.3 index 070f0829bfa..3d3044aa2e8 100644 --- a/crypto/external/bsd/openssl/lib/libcrypto/man/EVP_DigestInit.3 +++ b/crypto/external/bsd/openssl/lib/libcrypto/man/EVP_DigestInit.3 @@ -1,6 +1,6 @@ -.\" $NetBSD: EVP_DigestInit.3,v 1.19 2019/06/09 18:44:31 christos Exp $ +.\" $NetBSD: EVP_DigestInit.3,v 1.19.2.1 2021/03/28 18:21:48 martin Exp $ .\" -.\" Automatically generated by Pod::Man 4.10 (Pod::Simple 3.35) +.\" Automatically generated by Pod::Man 4.11 (Pod::Simple 3.35) .\" .\" Standard preamble: .\" ======================================================================== @@ -135,23 +135,23 @@ .\" ======================================================================== .\" .IX Title "EVP_DigestInit 3" -.TH EVP_DigestInit 3 "2019-03-12" "1.1.1c" "OpenSSL" +.TH EVP_DigestInit 3 "2020-12-10" "1.1.1i" "OpenSSL" .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. .if n .ad l .nh .SH "NAME" -EVP_MD_CTX_new, EVP_MD_CTX_reset, EVP_MD_CTX_free, EVP_MD_CTX_copy_ex, -EVP_MD_CTX_ctrl, EVP_MD_CTX_set_flags, EVP_MD_CTX_clear_flags, -EVP_MD_CTX_test_flags, EVP_DigestInit_ex, EVP_DigestInit, EVP_DigestUpdate, +EVP_MD_CTX_new, EVP_MD_CTX_reset, EVP_MD_CTX_free, EVP_MD_CTX_copy, +EVP_MD_CTX_copy_ex, EVP_MD_CTX_ctrl, EVP_MD_CTX_set_flags, +EVP_MD_CTX_clear_flags, EVP_MD_CTX_test_flags, +EVP_Digest, EVP_DigestInit_ex, EVP_DigestInit, EVP_DigestUpdate, EVP_DigestFinal_ex, EVP_DigestFinalXOF, EVP_DigestFinal, -EVP_MD_CTX_copy, EVP_MD_type, EVP_MD_pkey_type, EVP_MD_size, -EVP_MD_block_size, EVP_MD_CTX_md, EVP_MD_CTX_size, -EVP_MD_CTX_block_size, EVP_MD_CTX_type, EVP_MD_CTX_md_data, +EVP_MD_type, EVP_MD_pkey_type, EVP_MD_size, EVP_MD_block_size, EVP_MD_flags, +EVP_MD_CTX_md, EVP_MD_CTX_type, EVP_MD_CTX_size, EVP_MD_CTX_block_size, +EVP_MD_CTX_md_data, EVP_MD_CTX_update_fn, EVP_MD_CTX_set_update_fn, EVP_md_null, -EVP_get_digestbyname, EVP_get_digestbynid, -EVP_get_digestbyobj, -EVP_MD_CTX_set_pkey_ctx \- EVP digest routines +EVP_get_digestbyname, EVP_get_digestbynid, EVP_get_digestbyobj, +EVP_MD_CTX_pkey_ctx, EVP_MD_CTX_set_pkey_ctx \- EVP digest routines .SH "LIBRARY" libcrypto, -lcrypto .SH "SYNOPSIS" @@ -167,6 +167,8 @@ libcrypto, -lcrypto \& void EVP_MD_CTX_clear_flags(EVP_MD_CTX *ctx, int flags); \& int EVP_MD_CTX_test_flags(const EVP_MD_CTX *ctx, int flags); \& +\& int EVP_Digest(const void *data, size_t count, unsigned char *md, +\& unsigned int *size, const EVP_MD *type, ENGINE *impl); \& int EVP_DigestInit_ex(EVP_MD_CTX *ctx, const EVP_MD *type, ENGINE *impl); \& int EVP_DigestUpdate(EVP_MD_CTX *ctx, const void *d, size_t cnt); \& int EVP_DigestFinal_ex(EVP_MD_CTX *ctx, unsigned char *md, unsigned int *s); @@ -183,12 +185,18 @@ libcrypto, -lcrypto \& int EVP_MD_pkey_type(const EVP_MD *md); \& int EVP_MD_size(const EVP_MD *md); \& int EVP_MD_block_size(const EVP_MD *md); +\& unsigned long EVP_MD_flags(const EVP_MD *md); \& \& const EVP_MD *EVP_MD_CTX_md(const EVP_MD_CTX *ctx); -\& int EVP_MD_CTX_size(const EVP_MD *ctx); -\& int EVP_MD_CTX_block_size(const EVP_MD *ctx); -\& int EVP_MD_CTX_type(const EVP_MD *ctx); +\& int EVP_MD_CTX_size(const EVP_MD_CTX *ctx); +\& int EVP_MD_CTX_block_size(const EVP_MD_CTX *ctx); +\& int EVP_MD_CTX_type(const EVP_MD_CTX *ctx); \& void *EVP_MD_CTX_md_data(const EVP_MD_CTX *ctx); +\& int (*EVP_MD_CTX_update_fn(EVP_MD_CTX *ctx))(EVP_MD_CTX *ctx, +\& const void *data, size_t count); +\& void EVP_MD_CTX_set_update_fn(EVP_MD_CTX *ctx, +\& int (*update)(EVP_MD_CTX *ctx, +\& const void *data, size_t count)); \& \& const EVP_MD *EVP_md_null(void); \& @@ -196,11 +204,12 @@ libcrypto, -lcrypto \& const EVP_MD *EVP_get_digestbynid(int type); \& const EVP_MD *EVP_get_digestbyobj(const ASN1_OBJECT *o); \& +\& EVP_PKEY_CTX *EVP_MD_CTX_pkey_ctx(const EVP_MD_CTX *ctx); \& void EVP_MD_CTX_set_pkey_ctx(EVP_MD_CTX *ctx, EVP_PKEY_CTX *pctx); .Ve .SH "DESCRIPTION" .IX Header "DESCRIPTION" -The \s-1EVP\s0 digest routines are a high level interface to message digests, +The \s-1EVP\s0 digest routines are a high-level interface to message digests, and should be used instead of the cipher-specific functions. .IP "\fBEVP_MD_CTX_new()\fR" 4 .IX Item "EVP_MD_CTX_new()" @@ -214,10 +223,21 @@ existing context. Cleans up digest context \fBctx\fR and frees up the space allocated to it. .IP "\fBEVP_MD_CTX_ctrl()\fR" 4 .IX Item "EVP_MD_CTX_ctrl()" -Performs digest-specific control actions on context \fBctx\fR. +Performs digest-specific control actions on context \fBctx\fR. The control command +is indicated in \fBcmd\fR and any additional arguments in \fBp1\fR and \fBp2\fR. +\&\fBEVP_MD_CTX_ctrl()\fR must be called after \fBEVP_DigestInit_ex()\fR. Other restrictions +may apply depending on the control type and digest implementation. +See \*(L"\s-1CONTROLS\*(R"\s0 below for more information. .IP "\fBEVP_MD_CTX_set_flags()\fR, \fBEVP_MD_CTX_clear_flags()\fR, \fBEVP_MD_CTX_test_flags()\fR" 4 .IX Item "EVP_MD_CTX_set_flags(), EVP_MD_CTX_clear_flags(), EVP_MD_CTX_test_flags()" Sets, clears and tests \fBctx\fR flags. See \*(L"\s-1FLAGS\*(R"\s0 below for more information. +.IP "\fBEVP_Digest()\fR" 4 +.IX Item "EVP_Digest()" +A wrapper around the Digest Init_ex, Update and Final_ex functions. +Hashes \fBcount\fR bytes of data at \fBdata\fR using a digest \fBtype\fR from \s-1ENGINE\s0 +\&\fBimpl\fR. The digest value is placed in \fBmd\fR and its length is written at \fBsize\fR +if the pointer is not \s-1NULL.\s0 At most \fB\s-1EVP_MAX_MD_SIZE\s0\fR bytes will be written. +If \fBimpl\fR is \s-1NULL\s0 the default implementation of digest \fBtype\fR is used. .IP "\fBEVP_DigestInit_ex()\fR" 4 .IX Item "EVP_DigestInit_ex()" Sets up digest context \fBctx\fR to use a digest \fBtype\fR from \s-1ENGINE\s0 \fBimpl\fR. @@ -250,7 +270,7 @@ few bytes. .IP "\fBEVP_DigestInit()\fR" 4 .IX Item "EVP_DigestInit()" Behaves in the same way as \fBEVP_DigestInit_ex()\fR except it always uses the -default digest implementation. +default digest implementation and calls \fBEVP_MD_CTX_reset()\fR. .IP "\fBEVP_DigestFinal()\fR" 4 .IX Item "EVP_DigestFinal()" Similar to \fBEVP_DigestFinal_ex()\fR except the digest context \fBctx\fR is @@ -280,6 +300,18 @@ The space is allocated by OpenSSL and has the size originally set with .IP "\fBEVP_MD_CTX_md()\fR" 4 .IX Item "EVP_MD_CTX_md()" Returns the \fB\s-1EVP_MD\s0\fR structure corresponding to the passed \fB\s-1EVP_MD_CTX\s0\fR. +.IP "\fBEVP_MD_CTX_set_update_fn()\fR" 4 +.IX Item "EVP_MD_CTX_set_update_fn()" +Sets the update function for \fBctx\fR to \fBupdate\fR. +This is the function that is called by EVP_DigestUpdate. If not set, the +update function from the \fB\s-1EVP_MD\s0\fR type specified at initialization is used. +.IP "\fBEVP_MD_CTX_update_fn()\fR" 4 +.IX Item "EVP_MD_CTX_update_fn()" +Returns the update function for \fBctx\fR. +.IP "\fBEVP_MD_flags()\fR" 4 +.IX Item "EVP_MD_flags()" +Returns the \fBmd\fR flags. Note that these are different from the \fB\s-1EVP_MD_CTX\s0\fR +ones. See \fBEVP_MD_meth_set_flags\fR\|(3) for more information. .IP "\fBEVP_MD_pkey_type()\fR" 4 .IX Item "EVP_MD_pkey_type()" Returns the \s-1NID\s0 of the public key signing algorithm associated with this @@ -294,14 +326,32 @@ length. .IX Item "EVP_get_digestbyname(), EVP_get_digestbynid(), EVP_get_digestbyobj()" Returns an \fB\s-1EVP_MD\s0\fR structure when passed a digest name, a digest \fB\s-1NID\s0\fR or an \&\fB\s-1ASN1_OBJECT\s0\fR structure respectively. +.IP "\fBEVP_MD_CTX_pkey_ctx()\fR" 4 +.IX Item "EVP_MD_CTX_pkey_ctx()" +Returns the \fB\s-1EVP_PKEY_CTX\s0\fR assigned to \fBctx\fR. The returned pointer should not +be freed by the caller. .IP "\fBEVP_MD_CTX_set_pkey_ctx()\fR" 4 .IX Item "EVP_MD_CTX_set_pkey_ctx()" Assigns an \fB\s-1EVP_PKEY_CTX\s0\fR to \fB\s-1EVP_MD_CTX\s0\fR. This is usually used to provide -a customzied \fB\s-1EVP_PKEY_CTX\s0\fR to \fBEVP_DigestSignInit\fR\|(3) or +a customized \fB\s-1EVP_PKEY_CTX\s0\fR to \fBEVP_DigestSignInit\fR\|(3) or \&\fBEVP_DigestVerifyInit\fR\|(3). The \fBpctx\fR passed to this function should be freed by the caller. A \s-1NULL\s0 \fBpctx\fR pointer is also allowed to clear the \fB\s-1EVP_PKEY_CTX\s0\fR assigned to \fBctx\fR. In such case, freeing the cleared \fB\s-1EVP_PKEY_CTX\s0\fR or not depends on how the \fB\s-1EVP_PKEY_CTX\s0\fR is created. +.SH "CONTROLS" +.IX Header "CONTROLS" +\&\fBEVP_MD_CTX_ctrl()\fR can be used to send the following standard controls: +.IP "\s-1EVP_MD_CTRL_MICALG\s0" 4 +.IX Item "EVP_MD_CTRL_MICALG" +Gets the digest Message Integrity Check algorithm string. This is used when +creating S/MIME multipart/signed messages, as specified in \s-1RFC 3851.\s0 +The string value is written to \fBp2\fR. +.IP "\s-1EVP_MD_CTRL_XOF_LEN\s0" 4 +.IX Item "EVP_MD_CTRL_XOF_LEN" +This control sets the digest length for extendable output functions to \fBp1\fR. +Sending this control directly should not be necessary, the use of +\&\f(CW\*(C`EVP_DigestFinalXOF()\*(C'\fR is preferred. +Currently used by \s-1SHAKE.\s0 .SH "FLAGS" .IX Header "FLAGS" \&\fBEVP_MD_CTX_set_flags()\fR, \fBEVP_MD_CTX_clear_flags()\fR and \fBEVP_MD_CTX_test_flags()\fR @@ -331,8 +381,8 @@ Returns 1 if successful or 0 for failure. .IP "\fBEVP_MD_CTX_copy_ex()\fR" 4 .IX Item "EVP_MD_CTX_copy_ex()" Returns 1 if successful or 0 for failure. -.IP "\fBEVP_MD_type()\fR, \fBEVP_MD_pkey_type()\fR, \fBEVP_MD_type()\fR" 4 -.IX Item "EVP_MD_type(), EVP_MD_pkey_type(), EVP_MD_type()" +.IP "\fBEVP_MD_type()\fR, \fBEVP_MD_pkey_type()\fR" 4 +.IX Item "EVP_MD_type(), EVP_MD_pkey_type()" Returns the \s-1NID\s0 of the corresponding \s-1OBJECT IDENTIFIER\s0 or NID_undef if none exists. .IP "\fBEVP_MD_size()\fR, \fBEVP_MD_block_size()\fR, \fBEVP_MD_CTX_size()\fR, \fBEVP_MD_CTX_block_size()\fR" 4 @@ -350,7 +400,7 @@ This function has no return value. .SH "NOTES" .IX Header "NOTES" The \fB\s-1EVP\s0\fR interface to message digests should almost always be used in -preference to the low level interfaces. This is because the code then becomes +preference to the low-level interfaces. This is because the code then becomes transparent to the digest used and much more flexible. .PP New applications should use the \s-1SHA\-2\s0 (such as \fBEVP_sha256\fR\|(3)) or the \s-1SHA\-3\s0 @@ -376,8 +426,8 @@ macros. .PP \&\fBEVP_MD_CTX_ctrl()\fR sends commands to message digests for additional configuration or control. -.SH "EXAMPLE" -.IX Header "EXAMPLE" +.SH "EXAMPLES" +.IX Header "EXAMPLES" This example digests the data \*(L"Test Message\en\*(R" and \*(L"Hello World\en\*(R", using the digest name passed on the command line. .PP @@ -423,6 +473,7 @@ digest name passed on the command line. .Ve .SH "SEE ALSO" .IX Header "SEE ALSO" +\&\fBEVP_MD_meth_new\fR\|(3), \&\fBdgst\fR\|(1), \&\fBevp\fR\|(7) .PP @@ -452,7 +503,7 @@ The \fBEVP_dss1()\fR function was removed in OpenSSL 1.1.0. The \fBEVP_MD_CTX_set_pkey_ctx()\fR function was added in 1.1.1. .SH "COPYRIGHT" .IX Header "COPYRIGHT" -Copyright 2000\-2018 The OpenSSL Project Authors. All Rights Reserved. +Copyright 2000\-2020 The OpenSSL Project Authors. All Rights Reserved. .PP Licensed under the OpenSSL license (the \*(L"License\*(R"). You may not use this file except in compliance with the License. You can obtain a copy diff --git a/crypto/external/bsd/openssl/lib/libcrypto/man/EVP_DigestSignInit.3 b/crypto/external/bsd/openssl/lib/libcrypto/man/EVP_DigestSignInit.3 index 76c11e67fe8..99090afc739 100644 --- a/crypto/external/bsd/openssl/lib/libcrypto/man/EVP_DigestSignInit.3 +++ b/crypto/external/bsd/openssl/lib/libcrypto/man/EVP_DigestSignInit.3 @@ -1,6 +1,6 @@ -.\" $NetBSD: EVP_DigestSignInit.3,v 1.19 2019/06/09 18:44:31 christos Exp $ +.\" $NetBSD: EVP_DigestSignInit.3,v 1.19.2.1 2021/03/28 18:21:48 martin Exp $ .\" -.\" Automatically generated by Pod::Man 4.10 (Pod::Simple 3.35) +.\" Automatically generated by Pod::Man 4.11 (Pod::Simple 3.35) .\" .\" Standard preamble: .\" ======================================================================== @@ -135,7 +135,7 @@ .\" ======================================================================== .\" .IX Title "EVP_DigestSignInit 3" -.TH EVP_DigestSignInit 3 "2019-03-12" "1.1.1c" "OpenSSL" +.TH EVP_DigestSignInit 3 "2020-12-10" "1.1.1i" "OpenSSL" .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. .if n .ad l @@ -161,7 +161,7 @@ libcrypto, -lcrypto .Ve .SH "DESCRIPTION" .IX Header "DESCRIPTION" -The \s-1EVP\s0 signature routines are a high level interface to digital signatures. +The \s-1EVP\s0 signature routines are a high-level interface to digital signatures. .PP \&\fBEVP_DigestSignInit()\fR sets up signing context \fBctx\fR to use digest \fBtype\fR from \&\s-1ENGINE\s0 \fBe\fR and private key \fBpkey\fR. \fBctx\fR must be created with @@ -176,8 +176,8 @@ inside \fBEVP_DigestSignInit()\fR and it will be freed automatically when the .PP The digest \fBtype\fR may be \s-1NULL\s0 if the signing algorithm supports it. .PP -No \fB\s-1EVP_PKEY_CTX\s0\fR will be created by \fBEVP_DigsetSignInit()\fR if the passed \fBctx\fR -has already been assigned one via \fBEVP_MD_CTX_set_ctx\fR\|(3). See also \s-1\fBSM2\s0\fR\|(7). +No \fB\s-1EVP_PKEY_CTX\s0\fR will be created by \fBEVP_DigestSignInit()\fR if the passed \fBctx\fR +has already been assigned one via \fBEVP_MD_CTX_set_pkey_ctx\fR\|(3). See also \s-1\fBSM2\s0\fR\|(7). .PP Only \s-1EVP_PKEY\s0 types that support signing can be used with these functions. This includes \s-1MAC\s0 algorithms where the \s-1MAC\s0 generation is considered as a form of @@ -230,16 +230,14 @@ signature in \fBsig\fR and its length in \fBsiglen\fR in a similar way to \&\fBEVP_DigestSignFinal()\fR. .SH "RETURN VALUES" .IX Header "RETURN VALUES" -\&\fBEVP_DigestSignInit()\fR, \fBEVP_DigestSignUpdate()\fR, \fBEVP_DigestSignaFinal()\fR and -\&\fBEVP_DigestSign()\fR return 1 for success and 0 or a negative value for failure. In -particular, a return value of \-2 indicates the operation is not supported by the -public key algorithm. +\&\fBEVP_DigestSignInit()\fR, \fBEVP_DigestSignUpdate()\fR, \fBEVP_DigestSignFinal()\fR and +\&\fBEVP_DigestSign()\fR return 1 for success and 0 for failure. .PP The error codes can be obtained from \fBERR_get_error\fR\|(3). .SH "NOTES" .IX Header "NOTES" The \fB\s-1EVP\s0\fR interface to digital signatures should almost always be used in -preference to the low level interfaces. This is because the code then becomes +preference to the low-level interfaces. This is because the code then becomes transparent to the algorithm used and much more flexible. .PP \&\fBEVP_DigestSign()\fR is a one shot operation which signs a single block of data @@ -252,8 +250,9 @@ and public key algorithms. This meant that \*(L"clone\*(R" digests such as \fBEV needed to be used to sign using \s-1SHA1\s0 and \s-1DSA.\s0 This is no longer necessary and the use of clone digest is now discouraged. .PP -For some key types and parameters the random number generator must be seeded -or the operation will fail. +For some key types and parameters the random number generator must be seeded. +If the automatic seeding or reseeding of the OpenSSL \s-1CSPRNG\s0 fails due to +external circumstances (see \s-1\fBRAND\s0\fR\|(7)), the operation will fail. .PP The call to \fBEVP_DigestSignFinal()\fR internally finalizes a copy of the digest context. This means that calls to \fBEVP_DigestSignUpdate()\fR and @@ -273,14 +272,15 @@ which indicates the maximum possible signature for any set of parameters. \&\fBEVP_DigestInit\fR\|(3), \&\fBevp\fR\|(7), \s-1\fBHMAC\s0\fR\|(3), \s-1\fBMD2\s0\fR\|(3), \&\s-1\fBMD5\s0\fR\|(3), \s-1\fBMDC2\s0\fR\|(3), \s-1\fBRIPEMD160\s0\fR\|(3), -\&\s-1\fBSHA1\s0\fR\|(3), \fBdgst\fR\|(1) +\&\s-1\fBSHA1\s0\fR\|(3), \fBdgst\fR\|(1), +\&\s-1\fBRAND\s0\fR\|(7) .SH "HISTORY" .IX Header "HISTORY" \&\fBEVP_DigestSignInit()\fR, \fBEVP_DigestSignUpdate()\fR and \fBEVP_DigestSignFinal()\fR were added in OpenSSL 1.0.0. .SH "COPYRIGHT" .IX Header "COPYRIGHT" -Copyright 2006\-2018 The OpenSSL Project Authors. All Rights Reserved. +Copyright 2006\-2020 The OpenSSL Project Authors. All Rights Reserved. .PP Licensed under the OpenSSL license (the \*(L"License\*(R"). You may not use this file except in compliance with the License. You can obtain a copy diff --git a/crypto/external/bsd/openssl/lib/libcrypto/man/EVP_DigestVerifyInit.3 b/crypto/external/bsd/openssl/lib/libcrypto/man/EVP_DigestVerifyInit.3 index 6d205786297..074d5f95f0c 100644 --- a/crypto/external/bsd/openssl/lib/libcrypto/man/EVP_DigestVerifyInit.3 +++ b/crypto/external/bsd/openssl/lib/libcrypto/man/EVP_DigestVerifyInit.3 @@ -1,6 +1,6 @@ -.\" $NetBSD: EVP_DigestVerifyInit.3,v 1.19 2019/06/09 18:44:31 christos Exp $ +.\" $NetBSD: EVP_DigestVerifyInit.3,v 1.19.2.1 2021/03/28 18:21:48 martin Exp $ .\" -.\" Automatically generated by Pod::Man 4.10 (Pod::Simple 3.35) +.\" Automatically generated by Pod::Man 4.11 (Pod::Simple 3.35) .\" .\" Standard preamble: .\" ======================================================================== @@ -135,7 +135,7 @@ .\" ======================================================================== .\" .IX Title "EVP_DigestVerifyInit 3" -.TH EVP_DigestVerifyInit 3 "2019-06-09" "1.1.1c" "OpenSSL" +.TH EVP_DigestVerifyInit 3 "2020-12-10" "1.1.1i" "OpenSSL" .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. .if n .ad l @@ -160,7 +160,7 @@ libcrypto, -lcrypto .Ve .SH "DESCRIPTION" .IX Header "DESCRIPTION" -The \s-1EVP\s0 signature routines are a high level interface to digital signatures. +The \s-1EVP\s0 signature routines are a high-level interface to digital signatures. .PP \&\fBEVP_DigestVerifyInit()\fR sets up verification context \fBctx\fR to use digest \&\fBtype\fR from \s-1ENGINE\s0 \fBe\fR and public key \fBpkey\fR. \fBctx\fR must be created @@ -173,8 +173,8 @@ being passed to \fBEVP_DigestVerifyInit()\fR (which means the \s-1EVP_PKEY_CTX\s inside \fBEVP_DigestVerifyInit()\fR and it will be freed automatically when the \&\s-1EVP_MD_CTX\s0 is freed). .PP -No \fB\s-1EVP_PKEY_CTX\s0\fR will be created by \fBEVP_DigsetSignInit()\fR if the passed \fBctx\fR -has already been assigned one via \fBEVP_MD_CTX_set_ctx\fR\|(3). See also \s-1\fBSM2\s0\fR\|(7). +No \fB\s-1EVP_PKEY_CTX\s0\fR will be created by \fBEVP_DigestSignInit()\fR if the passed \fBctx\fR +has already been assigned one via \fBEVP_MD_CTX_set_pkey_ctx\fR\|(3). See also \s-1\fBSM2\s0\fR\|(7). .PP \&\fBEVP_DigestVerifyUpdate()\fR hashes \fBcnt\fR bytes of data at \fBd\fR into the verification context \fBctx\fR. This function can be called several times on the @@ -201,7 +201,7 @@ The error codes can be obtained from \fBERR_get_error\fR\|(3). .SH "NOTES" .IX Header "NOTES" The \fB\s-1EVP\s0\fR interface to digital signatures should almost always be used in -preference to the low level interfaces. This is because the code then becomes +preference to the low-level interfaces. This is because the code then becomes transparent to the algorithm used and much more flexible. .PP \&\fBEVP_DigestVerify()\fR is a one shot operation which verifies a single block of @@ -215,8 +215,9 @@ and public key algorithms. This meant that \*(L"clone\*(R" digests such as \fBEV needed to be used to sign using \s-1SHA1\s0 and \s-1DSA.\s0 This is no longer necessary and the use of clone digest is now discouraged. .PP -For some key types and parameters the random number generator must be seeded -or the operation will fail. +For some key types and parameters the random number generator must be seeded. +If the automatic seeding or reseeding of the OpenSSL \s-1CSPRNG\s0 fails due to +external circumstances (see \s-1\fBRAND\s0\fR\|(7)), the operation will fail. .PP The call to \fBEVP_DigestVerifyFinal()\fR internally finalizes a copy of the digest context. This means that \fBEVP_VerifyUpdate()\fR and \fBEVP_VerifyFinal()\fR can @@ -231,14 +232,15 @@ will occur. \&\fBEVP_DigestInit\fR\|(3), \&\fBevp\fR\|(7), \s-1\fBHMAC\s0\fR\|(3), \s-1\fBMD2\s0\fR\|(3), \&\s-1\fBMD5\s0\fR\|(3), \s-1\fBMDC2\s0\fR\|(3), \s-1\fBRIPEMD160\s0\fR\|(3), -\&\s-1\fBSHA1\s0\fR\|(3), \fBdgst\fR\|(1) +\&\s-1\fBSHA1\s0\fR\|(3), \fBdgst\fR\|(1), +\&\s-1\fBRAND\s0\fR\|(7) .SH "HISTORY" .IX Header "HISTORY" \&\fBEVP_DigestVerifyInit()\fR, \fBEVP_DigestVerifyUpdate()\fR and \fBEVP_DigestVerifyFinal()\fR were added in OpenSSL 1.0.0. .SH "COPYRIGHT" .IX Header "COPYRIGHT" -Copyright 2006\-2019 The OpenSSL Project Authors. All Rights Reserved. +Copyright 2006\-2020 The OpenSSL Project Authors. All Rights Reserved. .PP Licensed under the OpenSSL license (the \*(L"License\*(R"). You may not use this file except in compliance with the License. You can obtain a copy diff --git a/crypto/external/bsd/openssl/lib/libcrypto/man/EVP_EncodeInit.3 b/crypto/external/bsd/openssl/lib/libcrypto/man/EVP_EncodeInit.3 index fa9c737a282..acd34c0a7c9 100644 --- a/crypto/external/bsd/openssl/lib/libcrypto/man/EVP_EncodeInit.3 +++ b/crypto/external/bsd/openssl/lib/libcrypto/man/EVP_EncodeInit.3 @@ -1,6 +1,6 @@ -.\" $NetBSD: EVP_EncodeInit.3,v 1.6 2019/06/09 18:44:31 christos Exp $ +.\" $NetBSD: EVP_EncodeInit.3,v 1.6.2.1 2021/03/28 18:21:48 martin Exp $ .\" -.\" Automatically generated by Pod::Man 4.10 (Pod::Simple 3.35) +.\" Automatically generated by Pod::Man 4.11 (Pod::Simple 3.35) .\" .\" Standard preamble: .\" ======================================================================== @@ -135,7 +135,7 @@ .\" ======================================================================== .\" .IX Title "EVP_EncodeInit 3" -.TH EVP_EncodeInit 3 "2018-09-23" "1.1.1c" "OpenSSL" +.TH EVP_EncodeInit 3 "2020-12-10" "1.1.1i" "OpenSSL" .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. .if n .ad l @@ -170,7 +170,7 @@ libcrypto, -lcrypto .Ve .SH "DESCRIPTION" .IX Header "DESCRIPTION" -The \s-1EVP\s0 encode routines provide a high level interface to base 64 encoding and +The \s-1EVP\s0 encode routines provide a high-level interface to base 64 encoding and decoding. Base 64 encoding converts binary data into a printable form that uses the characters A\-Z, a\-z, 0\-9, \*(L"+\*(R" and \*(L"/\*(R" to represent the data. For every 3 bytes of binary data provided 4 bytes of base 64 encoded data will be produced @@ -224,8 +224,8 @@ sufficiently large to accommodate the output data which will never be more than be encoded or decoded that are pending in the \fBctx\fR object. .PP \&\fBEVP_EncodeBlock()\fR encodes a full block of input data in \fBf\fR and of length -\&\fBdlen\fR and stores it in \fBt\fR. For every 3 bytes of input provided 4 bytes of -output data will be produced. If \fBdlen\fR is not divisible by 3 then the block is +\&\fBn\fR and stores it in \fBt\fR. For every 3 bytes of input provided 4 bytes of +output data will be produced. If \fBn\fR is not divisible by 3 then the block is encoded as a final block of data and the output is padded such that it is always divisible by 4. Additionally a \s-1NUL\s0 terminator character will be added. For example if 16 bytes of input data is provided then 24 bytes of encoded data is @@ -289,7 +289,7 @@ then no more non-padding base 64 characters are expected. \&\fBevp\fR\|(7) .SH "COPYRIGHT" .IX Header "COPYRIGHT" -Copyright 2016 The OpenSSL Project Authors. All Rights Reserved. +Copyright 2016\-2020 The OpenSSL Project Authors. All Rights Reserved. .PP Licensed under the OpenSSL license (the \*(L"License\*(R"). You may not use this file except in compliance with the License. You can obtain a copy diff --git a/crypto/external/bsd/openssl/lib/libcrypto/man/EVP_EncryptInit.3 b/crypto/external/bsd/openssl/lib/libcrypto/man/EVP_EncryptInit.3 index 1242a5db1ed..8a49dcb885d 100644 --- a/crypto/external/bsd/openssl/lib/libcrypto/man/EVP_EncryptInit.3 +++ b/crypto/external/bsd/openssl/lib/libcrypto/man/EVP_EncryptInit.3 @@ -1,6 +1,6 @@ -.\" $NetBSD: EVP_EncryptInit.3,v 1.19 2019/06/09 18:44:31 christos Exp $ +.\" $NetBSD: EVP_EncryptInit.3,v 1.19.2.1 2021/03/28 18:21:48 martin Exp $ .\" -.\" Automatically generated by Pod::Man 4.10 (Pod::Simple 3.35) +.\" Automatically generated by Pod::Man 4.11 (Pod::Simple 3.35) .\" .\" Standard preamble: .\" ======================================================================== @@ -135,7 +135,7 @@ .\" ======================================================================== .\" .IX Title "EVP_EncryptInit 3" -.TH EVP_EncryptInit 3 "2019-06-09" "1.1.1c" "OpenSSL" +.TH EVP_EncryptInit 3 "2020-12-10" "1.1.1i" "OpenSSL" .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. .if n .ad l @@ -259,7 +259,7 @@ libcrypto, -lcrypto .Ve .SH "DESCRIPTION" .IX Header "DESCRIPTION" -The \s-1EVP\s0 cipher routines are a high level interface to certain +The \s-1EVP\s0 cipher routines are a high-level interface to certain symmetric ciphers. .PP \&\fBEVP_CIPHER_CTX_new()\fR creates a cipher context. @@ -285,10 +285,15 @@ appropriate. \&\fBEVP_EncryptUpdate()\fR encrypts \fBinl\fR bytes from the buffer \fBin\fR and writes the encrypted version to \fBout\fR. This function can be called multiple times to encrypt successive blocks of data. The amount -of data written depends on the block alignment of the encrypted data: -as a result the amount of data written may be anything from zero bytes -to (inl + cipher_block_size \- 1) so \fBout\fR should contain sufficient -room. The actual number of bytes written is placed in \fBoutl\fR. It also +of data written depends on the block alignment of the encrypted data. +For most ciphers and modes, the amount of data written can be anything +from zero bytes to (inl + cipher_block_size \- 1) bytes. +For wrap cipher modes, the amount of data written can be anything +from zero bytes to (inl + cipher_block_size) bytes. +For stream ciphers, the amount of data written can be anything from zero +bytes to inl bytes. +Thus, \fBout\fR should contain sufficient room for the operation being performed. +The actual number of bytes written is placed in \fBoutl\fR. It also checks if \fBin\fR and \fBout\fR are partially overlapping, and if they are 0 is returned to indicate failure. .PP @@ -539,8 +544,8 @@ passing additional authenticated data (see \*(L"\s-1AEAD\s0 Interface\*(R"). Sets the \s-1CCM\s0 \fBL\fR value. If not set a default is used (8 for \s-1AES\s0). .IP "EVP_CIPHER_CTX_ctrl(ctx, \s-1EVP_CTRL_AEAD_SET_IVLEN,\s0 ivlen, \s-1NULL\s0)" 4 .IX Item "EVP_CIPHER_CTX_ctrl(ctx, EVP_CTRL_AEAD_SET_IVLEN, ivlen, NULL)" -Sets the \s-1CCM\s0 nonce (\s-1IV\s0) length. This call can only be made before specifying an -nonce value. The nonce length is given by \fB15 \- L\fR so it is 7 by default for +Sets the \s-1CCM\s0 nonce (\s-1IV\s0) length. This call can only be made before specifying +a nonce value. The nonce length is given by \fB15 \- L\fR so it is 7 by default for \&\s-1AES.\s0 .SS "ChaCha20\-Poly1305" .IX Subsection "ChaCha20-Poly1305" @@ -569,10 +574,10 @@ This call is only valid when decrypting data. .SH "NOTES" .IX Header "NOTES" Where possible the \fB\s-1EVP\s0\fR interface to symmetric ciphers should be used in -preference to the low level interfaces. This is because the code then becomes +preference to the low-level interfaces. This is because the code then becomes transparent to the cipher used and much more flexible. Additionally, the \&\fB\s-1EVP\s0\fR interface will ensure the use of platform specific cryptographic -acceleration such as AES-NI (the low level interfaces do not provide the +acceleration such as AES-NI (the low-level interfaces do not provide the guarantee). .PP \&\s-1PKCS\s0 padding works by adding \fBn\fR padding bytes of value \fBn\fR to make the total @@ -598,6 +603,15 @@ compatibility with existing code. New code should use \fBEVP_EncryptInit_ex()\fR \&\fBEVP_CipherInit_ex()\fR and \fBEVP_CipherFinal_ex()\fR because they can reuse an existing context without allocating and freeing it up on each call. .PP +There are some differences between functions \fBEVP_CipherInit()\fR and +\&\fBEVP_CipherInit_ex()\fR, significant in some circumstances. \fBEVP_CipherInit()\fR fills +the passed context object with zeros. As a consequence, \fBEVP_CipherInit()\fR does +not allow step-by-step initialization of the ctx when the \fIkey\fR and \fIiv\fR are +passed in separate calls. It also means that the flags set for the \s-1CTX\s0 are +removed, and it is especially important for the +\&\fB\s-1EVP_CIPHER_CTX_FLAG_WRAP_ALLOW\s0\fR flag treated specially in +\&\fBEVP_CipherInit_ex()\fR. +.PP \&\fBEVP_get_cipherbynid()\fR, and \fBEVP_get_cipherbyobj()\fR are implemented as macros. .SH "BUGS" .IX Header "BUGS" @@ -691,7 +705,7 @@ with a 128\-bit key: \& \& /* Don\*(Aqt set key or IV right away; we want to check lengths */ \& ctx = EVP_CIPHER_CTX_new(); -\& EVP_CipherInit_ex(&ctx, EVP_aes_128_cbc(), NULL, NULL, NULL, +\& EVP_CipherInit_ex(ctx, EVP_aes_128_cbc(), NULL, NULL, NULL, \& do_encrypt); \& OPENSSL_assert(EVP_CIPHER_CTX_key_length(ctx) == 16); \& OPENSSL_assert(EVP_CIPHER_CTX_iv_length(ctx) == 16); @@ -751,7 +765,7 @@ disappeared. \fBEVP_CIPHER_CTX_init()\fR remains as an alias for \&\fBEVP_CIPHER_CTX_reset()\fR. .SH "COPYRIGHT" .IX Header "COPYRIGHT" -Copyright 2000\-2019 The OpenSSL Project Authors. All Rights Reserved. +Copyright 2000\-2020 The OpenSSL Project Authors. All Rights Reserved. .PP Licensed under the OpenSSL license (the \*(L"License\*(R"). You may not use this file except in compliance with the License. You can obtain a copy diff --git a/crypto/external/bsd/openssl/lib/libcrypto/man/EVP_MD_meth_new.3 b/crypto/external/bsd/openssl/lib/libcrypto/man/EVP_MD_meth_new.3 index ee198b3540e..da9e7daefea 100644 --- a/crypto/external/bsd/openssl/lib/libcrypto/man/EVP_MD_meth_new.3 +++ b/crypto/external/bsd/openssl/lib/libcrypto/man/EVP_MD_meth_new.3 @@ -1,6 +1,6 @@ -.\" $NetBSD: EVP_MD_meth_new.3,v 1.3 2019/06/09 18:44:31 christos Exp $ +.\" $NetBSD: EVP_MD_meth_new.3,v 1.3.2.1 2021/03/28 18:21:48 martin Exp $ .\" -.\" Automatically generated by Pod::Man 4.10 (Pod::Simple 3.35) +.\" Automatically generated by Pod::Man 4.11 (Pod::Simple 3.35) .\" .\" Standard preamble: .\" ======================================================================== @@ -135,7 +135,7 @@ .\" ======================================================================== .\" .IX Title "EVP_MD_meth_new 3" -.TH EVP_MD_meth_new 3 "2018-09-23" "1.1.1c" "OpenSSL" +.TH EVP_MD_meth_new 3 "2020-03-22" "1.1.1i" "OpenSSL" .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. .if n .ad l @@ -222,7 +222,11 @@ behaviours in the particular \fBmd\fR. Several flags can be or'd together. The available flags are: .IP "\s-1EVP_MD_FLAG_ONESHOT\s0" 4 .IX Item "EVP_MD_FLAG_ONESHOT" -This digest method can only handles one block of input. +This digest method can only handle one block of input. +.IP "\s-1EVP_MD_FLAG_XOF\s0" 4 +.IX Item "EVP_MD_FLAG_XOF" +This digest method is an extensible-output function (\s-1XOF\s0) and supports +the \fB\s-1EVP_MD_CTRL_XOF_LEN\s0\fR control. .IP "\s-1EVP_MD_FLAG_DIGALGID_NULL\s0" 4 .IX Item "EVP_MD_FLAG_DIGALGID_NULL" When setting up a DigestAlgorithmIdentifier, this flag will have the @@ -239,18 +243,22 @@ Custom DigestAlgorithmIdentifier handling via ctrl, with \&\fB\s-1EVP_MD_FLAG_DIGALGID_ABSENT\s0\fR as default. \fINote: if combined with \&\s-1EVP_MD_FLAG_DIGALGID_NULL,\s0 the latter will be overridden.\fR Currently unused. +.IP "\s-1EVP_MD_FLAG_FIPS\s0" 4 +.IX Item "EVP_MD_FLAG_FIPS" +This digest method is suitable for use in \s-1FIPS\s0 mode. +Currently unused. .PP \&\fBEVP_MD_meth_set_init()\fR sets the digest init function for \fBmd\fR. -The digest init function is called by \fBEVP_DigestInit()\fR, +The digest init function is called by \fBEVP_Digest()\fR, \fBEVP_DigestInit()\fR, \&\fBEVP_DigestInit_ex()\fR, EVP_SignInit, \fBEVP_SignInit_ex()\fR, \fBEVP_VerifyInit()\fR and \fBEVP_VerifyInit_ex()\fR. .PP \&\fBEVP_MD_meth_set_update()\fR sets the digest update function for \fBmd\fR. -The digest update function is called by \fBEVP_DigestUpdate()\fR, +The digest update function is called by \fBEVP_Digest()\fR, \fBEVP_DigestUpdate()\fR and \&\fBEVP_SignUpdate()\fR. .PP \&\fBEVP_MD_meth_set_final()\fR sets the digest final function for \fBmd\fR. -The digest final function is called by \fBEVP_DigestFinal()\fR, +The digest final function is called by \fBEVP_Digest()\fR, \fBEVP_DigestFinal()\fR, \&\fBEVP_DigestFinal_ex()\fR, \fBEVP_SignFinal()\fR and \fBEVP_VerifyFinal()\fR. .PP \&\fBEVP_MD_meth_set_copy()\fR sets the function for \fBmd\fR to do extra @@ -271,6 +279,7 @@ This cleanup function is called by \fBEVP_MD_CTX_reset()\fR and \&\fBEVP_MD_CTX_free()\fR. .PP \&\fBEVP_MD_meth_set_ctrl()\fR sets the control function for \fBmd\fR. +See \fBEVP_MD_CTX_ctrl\fR\|(3) for the available controls. .PP \&\fBEVP_MD_meth_get_input_blocksize()\fR, \fBEVP_MD_meth_get_result_size()\fR, \&\fBEVP_MD_meth_get_app_datasize()\fR, \fBEVP_MD_meth_get_flags()\fR, @@ -298,7 +307,7 @@ The \fB\s-1EVP_MD\s0\fR structure was openly available in OpenSSL before version 1.1. The functions described here were added in OpenSSL 1.1. .SH "COPYRIGHT" .IX Header "COPYRIGHT" -Copyright 2015\-2017 The OpenSSL Project Authors. All Rights Reserved. +Copyright 2015\-2018 The OpenSSL Project Authors. All Rights Reserved. .PP Licensed under the OpenSSL license (the \*(L"License\*(R"). You may not use this file except in compliance with the License. You can obtain a copy diff --git a/crypto/external/bsd/openssl/lib/libcrypto/man/EVP_OpenInit.3 b/crypto/external/bsd/openssl/lib/libcrypto/man/EVP_OpenInit.3 index f2cc75432c7..a4f2d9c9109 100644 --- a/crypto/external/bsd/openssl/lib/libcrypto/man/EVP_OpenInit.3 +++ b/crypto/external/bsd/openssl/lib/libcrypto/man/EVP_OpenInit.3 @@ -1,6 +1,6 @@ -.\" $NetBSD: EVP_OpenInit.3,v 1.19 2019/06/09 18:44:31 christos Exp $ +.\" $NetBSD: EVP_OpenInit.3,v 1.19.2.1 2021/03/28 18:21:48 martin Exp $ .\" -.\" Automatically generated by Pod::Man 4.10 (Pod::Simple 3.35) +.\" Automatically generated by Pod::Man 4.11 (Pod::Simple 3.35) .\" .\" Standard preamble: .\" ======================================================================== @@ -135,7 +135,7 @@ .\" ======================================================================== .\" .IX Title "EVP_OpenInit 3" -.TH EVP_OpenInit 3 "2018-09-23" "1.1.1c" "OpenSSL" +.TH EVP_OpenInit 3 "2020-12-10" "1.1.1i" "OpenSSL" .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. .if n .ad l @@ -157,7 +157,7 @@ libcrypto, -lcrypto .Ve .SH "DESCRIPTION" .IX Header "DESCRIPTION" -The \s-1EVP\s0 envelope routines are a high level interface to envelope +The \s-1EVP\s0 envelope routines are a high-level interface to envelope decryption. They decrypt a public key encrypted symmetric key and then decrypt data using it. .PP @@ -196,7 +196,7 @@ recovered secret key size) if successful. \&\fBEVP_SealInit\fR\|(3) .SH "COPYRIGHT" .IX Header "COPYRIGHT" -Copyright 2000\-2016 The OpenSSL Project Authors. All Rights Reserved. +Copyright 2000\-2020 The OpenSSL Project Authors. All Rights Reserved. .PP Licensed under the OpenSSL license (the \*(L"License\*(R"). You may not use this file except in compliance with the License. You can obtain a copy diff --git a/crypto/external/bsd/openssl/lib/libcrypto/man/EVP_PKEY_ASN1_METHOD.3 b/crypto/external/bsd/openssl/lib/libcrypto/man/EVP_PKEY_ASN1_METHOD.3 index 476a34e9148..eaf233a5f52 100644 --- a/crypto/external/bsd/openssl/lib/libcrypto/man/EVP_PKEY_ASN1_METHOD.3 +++ b/crypto/external/bsd/openssl/lib/libcrypto/man/EVP_PKEY_ASN1_METHOD.3 @@ -1,6 +1,6 @@ -.\" $NetBSD: EVP_PKEY_ASN1_METHOD.3,v 1.3 2019/06/09 18:44:31 christos Exp $ +.\" $NetBSD: EVP_PKEY_ASN1_METHOD.3,v 1.3.2.1 2021/03/28 18:21:48 martin Exp $ .\" -.\" Automatically generated by Pod::Man 4.10 (Pod::Simple 3.35) +.\" Automatically generated by Pod::Man 4.11 (Pod::Simple 3.35) .\" .\" Standard preamble: .\" ======================================================================== @@ -135,7 +135,7 @@ .\" ======================================================================== .\" .IX Title "EVP_PKEY_ASN1_METHOD 3" -.TH EVP_PKEY_ASN1_METHOD 3 "2018-09-23" "1.1.1c" "OpenSSL" +.TH EVP_PKEY_ASN1_METHOD 3 "2018-09-23" "1.1.1i" "OpenSSL" .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. .if n .ad l diff --git a/crypto/external/bsd/openssl/lib/libcrypto/man/EVP_PKEY_CTX_ctrl.3 b/crypto/external/bsd/openssl/lib/libcrypto/man/EVP_PKEY_CTX_ctrl.3 index 28a3a279593..aa8e01d5dad 100644 --- a/crypto/external/bsd/openssl/lib/libcrypto/man/EVP_PKEY_CTX_ctrl.3 +++ b/crypto/external/bsd/openssl/lib/libcrypto/man/EVP_PKEY_CTX_ctrl.3 @@ -1,6 +1,6 @@ -.\" $NetBSD: EVP_PKEY_CTX_ctrl.3,v 1.19 2019/06/09 18:44:31 christos Exp $ +.\" $NetBSD: EVP_PKEY_CTX_ctrl.3,v 1.19.2.1 2021/03/28 18:21:48 martin Exp $ .\" -.\" Automatically generated by Pod::Man 4.10 (Pod::Simple 3.35) +.\" Automatically generated by Pod::Man 4.11 (Pod::Simple 3.35) .\" .\" Standard preamble: .\" ======================================================================== @@ -135,7 +135,7 @@ .\" ======================================================================== .\" .IX Title "EVP_PKEY_CTX_ctrl 3" -.TH EVP_PKEY_CTX_ctrl 3 "2019-03-12" "1.1.1c" "OpenSSL" +.TH EVP_PKEY_CTX_ctrl 3 "2020-12-10" "1.1.1i" "OpenSSL" .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. .if n .ad l @@ -162,6 +162,8 @@ EVP_PKEY_CTX_get_rsa_oaep_md, EVP_PKEY_CTX_set0_rsa_oaep_label, EVP_PKEY_CTX_get0_rsa_oaep_label, EVP_PKEY_CTX_set_dsa_paramgen_bits, +EVP_PKEY_CTX_set_dsa_paramgen_q_bits, +EVP_PKEY_CTX_set_dsa_paramgen_md, EVP_PKEY_CTX_set_dh_paramgen_prime_len, EVP_PKEY_CTX_set_dh_paramgen_subprime_len, EVP_PKEY_CTX_set_dh_paramgen_generator, @@ -234,6 +236,8 @@ libcrypto, -lcrypto \& #include <openssl/dsa.h> \& \& int EVP_PKEY_CTX_set_dsa_paramgen_bits(EVP_PKEY_CTX *ctx, int nbits); +\& int EVP_PKEY_CTX_set_dsa_paramgen_q_bits(EVP_PKEY_CTX *ctx, int qbits); +\& int EVP_PKEY_CTX_set_dsa_paramgen_md(EVP_PKEY_CTX *ctx, const EVP_MD *md); \& \& #include <openssl/dh.h> \& @@ -394,7 +398,17 @@ by the library and should not be freed by the caller. .SS "\s-1DSA\s0 parameters" .IX Subsection "DSA parameters" The \fBEVP_PKEY_CTX_set_dsa_paramgen_bits()\fR macro sets the number of bits used -for \s-1DSA\s0 parameter generation to \fBbits\fR. If not specified 1024 is used. +for \s-1DSA\s0 parameter generation to \fBnbits\fR. If not specified, 1024 is used. +.PP +The \fBEVP_PKEY_CTX_set_dsa_paramgen_q_bits()\fR macro sets the number of bits in the +subprime parameter \fBq\fR for \s-1DSA\s0 parameter generation to \fBqbits\fR. If not +specified, 160 is used. If a digest function is specified below, this parameter +is ignored and instead, the number of bits in \fBq\fR matches the size of the +digest. +.PP +The \fBEVP_PKEY_CTX_set_dsa_paramgen_md()\fR macro sets the digest function used for +\&\s-1DSA\s0 parameter generation to \fBmd\fR. If not specified, one of \s-1SHA\-1, SHA\-224,\s0 or +\&\s-1SHA\-256\s0 is selected to match the bit length of \fBq\fR above. .SS "\s-1DH\s0 parameters" .IX Subsection "DH parameters" The \fBEVP_PKEY_CTX_set_dh_paramgen_prime_len()\fR macro sets the length of the \s-1DH\s0 @@ -414,7 +428,7 @@ parameter generation. Use 0 for PKCS#3 \s-1DH\s0 and 1 for X9.42 \s-1DH.\s0 The default is 0. .PP The \fBEVP_PKEY_CTX_set_dh_pad()\fR macro sets the \s-1DH\s0 padding mode. If \fBpad\fR is -1 the shared secret is padded with zeroes up to the size of the \s-1DH\s0 prime \fBp\fR. +1 the shared secret is padded with zeros up to the size of the \s-1DH\s0 prime \fBp\fR. If \fBpad\fR is zero (the default) then no padding is performed. .PP \&\fBEVP_PKEY_CTX_set_dh_nid()\fR sets the \s-1DH\s0 parameters to values corresponding to @@ -574,7 +588,7 @@ The macros were added in 1.1.1, other functions were added in OpenSSL 1.0.0. .SH "COPYRIGHT" .IX Header "COPYRIGHT" -Copyright 2006\-2018 The OpenSSL Project Authors. All Rights Reserved. +Copyright 2006\-2020 The OpenSSL Project Authors. All Rights Reserved. .PP Licensed under the OpenSSL license (the \*(L"License\*(R"). You may not use this file except in compliance with the License. You can obtain a copy diff --git a/crypto/external/bsd/openssl/lib/libcrypto/man/EVP_PKEY_CTX_new.3 b/crypto/external/bsd/openssl/lib/libcrypto/man/EVP_PKEY_CTX_new.3 index efe110e39d8..2e912b1e7e2 100644 --- a/crypto/external/bsd/openssl/lib/libcrypto/man/EVP_PKEY_CTX_new.3 +++ b/crypto/external/bsd/openssl/lib/libcrypto/man/EVP_PKEY_CTX_new.3 @@ -1,6 +1,6 @@ -.\" $NetBSD: EVP_PKEY_CTX_new.3,v 1.19 2019/06/09 18:44:31 christos Exp $ +.\" $NetBSD: EVP_PKEY_CTX_new.3,v 1.19.2.1 2021/03/28 18:21:48 martin Exp $ .\" -.\" Automatically generated by Pod::Man 4.10 (Pod::Simple 3.35) +.\" Automatically generated by Pod::Man 4.11 (Pod::Simple 3.35) .\" .\" Standard preamble: .\" ======================================================================== @@ -135,7 +135,7 @@ .\" ======================================================================== .\" .IX Title "EVP_PKEY_CTX_new 3" -.TH EVP_PKEY_CTX_new 3 "2019-03-12" "1.1.1c" "OpenSSL" +.TH EVP_PKEY_CTX_new 3 "2020-12-10" "1.1.1i" "OpenSSL" .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. .if n .ad l @@ -171,7 +171,7 @@ If \fBctx\fR is \s-1NULL,\s0 nothing is done. .SH "NOTES" .IX Header "NOTES" The \fB\s-1EVP_PKEY_CTX\s0\fR structure is an opaque public key algorithm context used -by the OpenSSL high level public key \s-1API.\s0 Contexts \fB\s-1MUST NOT\s0\fR be shared between +by the OpenSSL high-level public key \s-1API.\s0 Contexts \fB\s-1MUST NOT\s0\fR be shared between threads: that is it is not permissible to use the same context simultaneously in two threads. .SH "RETURN VALUES" @@ -188,7 +188,7 @@ the newly allocated \fB\s-1EVP_PKEY_CTX\s0\fR structure of \fB\s-1NULL\s0\fR if These functions were added in OpenSSL 1.0.0. .SH "COPYRIGHT" .IX Header "COPYRIGHT" -Copyright 2006\-2016 The OpenSSL Project Authors. All Rights Reserved. +Copyright 2006\-2020 The OpenSSL Project Authors. All Rights Reserved. .PP Licensed under the OpenSSL license (the \*(L"License\*(R"). You may not use this file except in compliance with the License. You can obtain a copy diff --git a/crypto/external/bsd/openssl/lib/libcrypto/man/EVP_PKEY_CTX_set1_pbe_pass.3 b/crypto/external/bsd/openssl/lib/libcrypto/man/EVP_PKEY_CTX_set1_pbe_pass.3 index 91dcc0374ea..10405fa38a2 100644 --- a/crypto/external/bsd/openssl/lib/libcrypto/man/EVP_PKEY_CTX_set1_pbe_pass.3 +++ b/crypto/external/bsd/openssl/lib/libcrypto/man/EVP_PKEY_CTX_set1_pbe_pass.3 @@ -1,6 +1,6 @@ -.\" $NetBSD: EVP_PKEY_CTX_set1_pbe_pass.3,v 1.2 2019/06/09 18:44:31 christos Exp $ +.\" $NetBSD: EVP_PKEY_CTX_set1_pbe_pass.3,v 1.2.4.1 2021/03/28 18:21:48 martin Exp $ .\" -.\" Automatically generated by Pod::Man 4.10 (Pod::Simple 3.35) +.\" Automatically generated by Pod::Man 4.11 (Pod::Simple 3.35) .\" .\" Standard preamble: .\" ======================================================================== @@ -135,7 +135,7 @@ .\" ======================================================================== .\" .IX Title "EVP_PKEY_CTX_set1_pbe_pass 3" -.TH EVP_PKEY_CTX_set1_pbe_pass 3 "2018-09-23" "1.1.1c" "OpenSSL" +.TH EVP_PKEY_CTX_set1_pbe_pass 3 "2018-09-23" "1.1.1i" "OpenSSL" .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. .if n .ad l diff --git a/crypto/external/bsd/openssl/lib/libcrypto/man/EVP_PKEY_CTX_set_hkdf_md.3 b/crypto/external/bsd/openssl/lib/libcrypto/man/EVP_PKEY_CTX_set_hkdf_md.3 index f539656e843..316c7f3acea 100644 --- a/crypto/external/bsd/openssl/lib/libcrypto/man/EVP_PKEY_CTX_set_hkdf_md.3 +++ b/crypto/external/bsd/openssl/lib/libcrypto/man/EVP_PKEY_CTX_set_hkdf_md.3 @@ -1,6 +1,6 @@ -.\" $NetBSD: EVP_PKEY_CTX_set_hkdf_md.3,v 1.3 2019/06/09 18:44:31 christos Exp $ +.\" $NetBSD: EVP_PKEY_CTX_set_hkdf_md.3,v 1.3.2.1 2021/03/28 18:21:48 martin Exp $ .\" -.\" Automatically generated by Pod::Man 4.10 (Pod::Simple 3.35) +.\" Automatically generated by Pod::Man 4.11 (Pod::Simple 3.35) .\" .\" Standard preamble: .\" ======================================================================== @@ -135,7 +135,7 @@ .\" ======================================================================== .\" .IX Title "EVP_PKEY_CTX_set_hkdf_md 3" -.TH EVP_PKEY_CTX_set_hkdf_md 3 "2018-12-08" "1.1.1c" "OpenSSL" +.TH EVP_PKEY_CTX_set_hkdf_md 3 "2020-01-23" "1.1.1i" "OpenSSL" .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. .if n .ad l @@ -253,8 +253,8 @@ Optimised versions of \s-1HKDF\s0 can be implemented in an \s-1ENGINE.\s0 All these functions return 1 for success and 0 or a negative value for failure. In particular a return value of \-2 indicates the operation is not supported by the public key algorithm. -.SH "EXAMPLE" -.IX Header "EXAMPLE" +.SH "EXAMPLES" +.IX Header "EXAMPLES" This example derives 10 bytes using \s-1SHA\-256\s0 with the secret key \*(L"secret\*(R", salt value \*(L"salt\*(R" and info value \*(L"label\*(R": .PP @@ -287,7 +287,7 @@ salt value \*(L"salt\*(R" and info value \*(L"label\*(R": \&\fBEVP_PKEY_derive\fR\|(3) .SH "COPYRIGHT" .IX Header "COPYRIGHT" -Copyright 2016\-2018 The OpenSSL Project Authors. All Rights Reserved. +Copyright 2016\-2019 The OpenSSL Project Authors. All Rights Reserved. .PP Licensed under the OpenSSL license (the \*(L"License\*(R"). You may not use this file except in compliance with the License. You can obtain a copy diff --git a/crypto/external/bsd/openssl/lib/libcrypto/man/EVP_PKEY_CTX_set_rsa_pss_keygen_md.3 b/crypto/external/bsd/openssl/lib/libcrypto/man/EVP_PKEY_CTX_set_rsa_pss_keygen_md.3 index 7296c16bc34..48d90e996d4 100644 --- a/crypto/external/bsd/openssl/lib/libcrypto/man/EVP_PKEY_CTX_set_rsa_pss_keygen_md.3 +++ b/crypto/external/bsd/openssl/lib/libcrypto/man/EVP_PKEY_CTX_set_rsa_pss_keygen_md.3 @@ -1,6 +1,6 @@ -.\" $NetBSD: EVP_PKEY_CTX_set_rsa_pss_keygen_md.3,v 1.2 2019/06/09 18:44:31 christos Exp $ +.\" $NetBSD: EVP_PKEY_CTX_set_rsa_pss_keygen_md.3,v 1.2.4.1 2021/03/28 18:21:48 martin Exp $ .\" -.\" Automatically generated by Pod::Man 4.10 (Pod::Simple 3.35) +.\" Automatically generated by Pod::Man 4.11 (Pod::Simple 3.35) .\" .\" Standard preamble: .\" ======================================================================== @@ -135,7 +135,7 @@ .\" ======================================================================== .\" .IX Title "EVP_PKEY_CTX_set_rsa_pss_keygen_md 3" -.TH EVP_PKEY_CTX_set_rsa_pss_keygen_md 3 "2018-12-08" "1.1.1c" "OpenSSL" +.TH EVP_PKEY_CTX_set_rsa_pss_keygen_md 3 "2018-12-08" "1.1.1i" "OpenSSL" .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. .if n .ad l diff --git a/crypto/external/bsd/openssl/lib/libcrypto/man/EVP_PKEY_CTX_set_scrypt_N.3 b/crypto/external/bsd/openssl/lib/libcrypto/man/EVP_PKEY_CTX_set_scrypt_N.3 index f98ea94415c..c8a5c03c74b 100644 --- a/crypto/external/bsd/openssl/lib/libcrypto/man/EVP_PKEY_CTX_set_scrypt_N.3 +++ b/crypto/external/bsd/openssl/lib/libcrypto/man/EVP_PKEY_CTX_set_scrypt_N.3 @@ -1,6 +1,6 @@ -.\" $NetBSD: EVP_PKEY_CTX_set_scrypt_N.3,v 1.2 2019/06/09 18:44:31 christos Exp $ +.\" $NetBSD: EVP_PKEY_CTX_set_scrypt_N.3,v 1.2.4.1 2021/03/28 18:21:48 martin Exp $ .\" -.\" Automatically generated by Pod::Man 4.10 (Pod::Simple 3.35) +.\" Automatically generated by Pod::Man 4.11 (Pod::Simple 3.35) .\" .\" Standard preamble: .\" ======================================================================== @@ -135,7 +135,7 @@ .\" ======================================================================== .\" .IX Title "EVP_PKEY_CTX_set_scrypt_N 3" -.TH EVP_PKEY_CTX_set_scrypt_N 3 "2018-09-23" "1.1.1c" "OpenSSL" +.TH EVP_PKEY_CTX_set_scrypt_N 3 "2018-09-23" "1.1.1i" "OpenSSL" .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. .if n .ad l diff --git a/crypto/external/bsd/openssl/lib/libcrypto/man/EVP_PKEY_CTX_set_tls1_prf_md.3 b/crypto/external/bsd/openssl/lib/libcrypto/man/EVP_PKEY_CTX_set_tls1_prf_md.3 index 5502c5a8f2e..6136f6b77d1 100644 --- a/crypto/external/bsd/openssl/lib/libcrypto/man/EVP_PKEY_CTX_set_tls1_prf_md.3 +++ b/crypto/external/bsd/openssl/lib/libcrypto/man/EVP_PKEY_CTX_set_tls1_prf_md.3 @@ -1,6 +1,6 @@ -.\" $NetBSD: EVP_PKEY_CTX_set_tls1_prf_md.3,v 1.3 2019/06/09 18:44:31 christos Exp $ +.\" $NetBSD: EVP_PKEY_CTX_set_tls1_prf_md.3,v 1.3.2.1 2021/03/28 18:21:48 martin Exp $ .\" -.\" Automatically generated by Pod::Man 4.10 (Pod::Simple 3.35) +.\" Automatically generated by Pod::Man 4.11 (Pod::Simple 3.35) .\" .\" Standard preamble: .\" ======================================================================== @@ -135,7 +135,7 @@ .\" ======================================================================== .\" .IX Title "EVP_PKEY_CTX_set_tls1_prf_md 3" -.TH EVP_PKEY_CTX_set_tls1_prf_md 3 "2018-09-23" "1.1.1c" "OpenSSL" +.TH EVP_PKEY_CTX_set_tls1_prf_md 3 "2020-01-23" "1.1.1i" "OpenSSL" .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. .if n .ad l @@ -209,8 +209,8 @@ Optimised versions of the \s-1TLS PRF\s0 can be implemented in an \s-1ENGINE.\s0 All these functions return 1 for success and 0 or a negative value for failure. In particular a return value of \-2 indicates the operation is not supported by the public key algorithm. -.SH "EXAMPLE" -.IX Header "EXAMPLE" +.SH "EXAMPLES" +.IX Header "EXAMPLES" This example derives 10 bytes using \s-1SHA\-256\s0 with the secret key \*(L"secret\*(R" and seed value \*(L"seed\*(R": .PP @@ -238,7 +238,7 @@ and seed value \*(L"seed\*(R": \&\fBEVP_PKEY_derive\fR\|(3) .SH "COPYRIGHT" .IX Header "COPYRIGHT" -Copyright 2016 The OpenSSL Project Authors. All Rights Reserved. +Copyright 2016\-2019 The OpenSSL Project Authors. All Rights Reserved. .PP Licensed under the OpenSSL license (the \*(L"License\*(R"). You may not use this file except in compliance with the License. You can obtain a copy diff --git a/crypto/external/bsd/openssl/lib/libcrypto/man/EVP_PKEY_asn1_get_count.3 b/crypto/external/bsd/openssl/lib/libcrypto/man/EVP_PKEY_asn1_get_count.3 index 1ddab084da6..01c0c4d3e5d 100644 --- a/crypto/external/bsd/openssl/lib/libcrypto/man/EVP_PKEY_asn1_get_count.3 +++ b/crypto/external/bsd/openssl/lib/libcrypto/man/EVP_PKEY_asn1_get_count.3 @@ -1,6 +1,6 @@ -.\" $NetBSD: EVP_PKEY_asn1_get_count.3,v 1.3 2019/06/09 18:44:31 christos Exp $ +.\" $NetBSD: EVP_PKEY_asn1_get_count.3,v 1.3.2.1 2021/03/28 18:21:48 martin Exp $ .\" -.\" Automatically generated by Pod::Man 4.10 (Pod::Simple 3.35) +.\" Automatically generated by Pod::Man 4.11 (Pod::Simple 3.35) .\" .\" Standard preamble: .\" ======================================================================== @@ -135,7 +135,7 @@ .\" ======================================================================== .\" .IX Title "EVP_PKEY_asn1_get_count 3" -.TH EVP_PKEY_asn1_get_count 3 "2019-03-12" "1.1.1c" "OpenSSL" +.TH EVP_PKEY_asn1_get_count 3 "2019-03-12" "1.1.1i" "OpenSSL" .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. .if n .ad l diff --git a/crypto/external/bsd/openssl/lib/libcrypto/man/EVP_PKEY_cmp.3 b/crypto/external/bsd/openssl/lib/libcrypto/man/EVP_PKEY_cmp.3 index 9cd4cf6b702..0085540f39a 100644 --- a/crypto/external/bsd/openssl/lib/libcrypto/man/EVP_PKEY_cmp.3 +++ b/crypto/external/bsd/openssl/lib/libcrypto/man/EVP_PKEY_cmp.3 @@ -1,6 +1,6 @@ -.\" $NetBSD: EVP_PKEY_cmp.3,v 1.19 2019/06/09 18:44:31 christos Exp $ +.\" $NetBSD: EVP_PKEY_cmp.3,v 1.19.2.1 2021/03/28 18:21:48 martin Exp $ .\" -.\" Automatically generated by Pod::Man 4.10 (Pod::Simple 3.35) +.\" Automatically generated by Pod::Man 4.11 (Pod::Simple 3.35) .\" .\" Standard preamble: .\" ======================================================================== @@ -135,7 +135,7 @@ .\" ======================================================================== .\" .IX Title "EVP_PKEY_cmp 3" -.TH EVP_PKEY_cmp 3 "2018-09-23" "1.1.1c" "OpenSSL" +.TH EVP_PKEY_cmp 3 "2018-09-23" "1.1.1i" "OpenSSL" .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. .if n .ad l diff --git a/crypto/external/bsd/openssl/lib/libcrypto/man/EVP_PKEY_decrypt.3 b/crypto/external/bsd/openssl/lib/libcrypto/man/EVP_PKEY_decrypt.3 index a81ca6415ae..5ef93698faa 100644 --- a/crypto/external/bsd/openssl/lib/libcrypto/man/EVP_PKEY_decrypt.3 +++ b/crypto/external/bsd/openssl/lib/libcrypto/man/EVP_PKEY_decrypt.3 @@ -1,6 +1,6 @@ -.\" $NetBSD: EVP_PKEY_decrypt.3,v 1.19 2019/06/09 18:44:31 christos Exp $ +.\" $NetBSD: EVP_PKEY_decrypt.3,v 1.19.2.1 2021/03/28 18:21:48 martin Exp $ .\" -.\" Automatically generated by Pod::Man 4.10 (Pod::Simple 3.35) +.\" Automatically generated by Pod::Man 4.11 (Pod::Simple 3.35) .\" .\" Standard preamble: .\" ======================================================================== @@ -135,7 +135,7 @@ .\" ======================================================================== .\" .IX Title "EVP_PKEY_decrypt 3" -.TH EVP_PKEY_decrypt 3 "2019-03-12" "1.1.1c" "OpenSSL" +.TH EVP_PKEY_decrypt 3 "2020-01-23" "1.1.1i" "OpenSSL" .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. .if n .ad l @@ -179,8 +179,8 @@ context if several operations are performed using the same parameters. \&\fBEVP_PKEY_decrypt_init()\fR and \fBEVP_PKEY_decrypt()\fR return 1 for success and 0 or a negative value for failure. In particular a return value of \-2 indicates the operation is not supported by the public key algorithm. -.SH "EXAMPLE" -.IX Header "EXAMPLE" +.SH "EXAMPLES" +.IX Header "EXAMPLES" Decrypt data using \s-1OAEP\s0 (for \s-1RSA\s0 keys): .PP .Vb 2 @@ -232,7 +232,7 @@ Decrypt data using \s-1OAEP\s0 (for \s-1RSA\s0 keys): These functions were added in OpenSSL 1.0.0. .SH "COPYRIGHT" .IX Header "COPYRIGHT" -Copyright 2006\-2018 The OpenSSL Project Authors. All Rights Reserved. +Copyright 2006\-2019 The OpenSSL Project Authors. All Rights Reserved. .PP Licensed under the OpenSSL license (the \*(L"License\*(R"). You may not use this file except in compliance with the License. You can obtain a copy diff --git a/crypto/external/bsd/openssl/lib/libcrypto/man/EVP_PKEY_derive.3 b/crypto/external/bsd/openssl/lib/libcrypto/man/EVP_PKEY_derive.3 index 0c1860d6ca7..feae80abd59 100644 --- a/crypto/external/bsd/openssl/lib/libcrypto/man/EVP_PKEY_derive.3 +++ b/crypto/external/bsd/openssl/lib/libcrypto/man/EVP_PKEY_derive.3 @@ -1,6 +1,6 @@ -.\" $NetBSD: EVP_PKEY_derive.3,v 1.19 2019/06/09 18:44:31 christos Exp $ +.\" $NetBSD: EVP_PKEY_derive.3,v 1.19.2.1 2021/03/28 18:21:48 martin Exp $ .\" -.\" Automatically generated by Pod::Man 4.10 (Pod::Simple 3.35) +.\" Automatically generated by Pod::Man 4.11 (Pod::Simple 3.35) .\" .\" Standard preamble: .\" ======================================================================== @@ -135,7 +135,7 @@ .\" ======================================================================== .\" .IX Title "EVP_PKEY_derive 3" -.TH EVP_PKEY_derive 3 "2019-03-12" "1.1.1c" "OpenSSL" +.TH EVP_PKEY_derive 3 "2020-01-23" "1.1.1i" "OpenSSL" .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. .if n .ad l @@ -180,8 +180,8 @@ context if several operations are performed using the same parameters. \&\fBEVP_PKEY_derive_init()\fR and \fBEVP_PKEY_derive()\fR return 1 for success and 0 or a negative value for failure. In particular a return value of \-2 indicates the operation is not supported by the public key algorithm. -.SH "EXAMPLE" -.IX Header "EXAMPLE" +.SH "EXAMPLES" +.IX Header "EXAMPLES" Derive shared secret (for example \s-1DH\s0 or \s-1EC\s0 keys): .PP .Vb 2 @@ -230,7 +230,7 @@ Derive shared secret (for example \s-1DH\s0 or \s-1EC\s0 keys): These functions were added in OpenSSL 1.0.0. .SH "COPYRIGHT" .IX Header "COPYRIGHT" -Copyright 2006\-2018 The OpenSSL Project Authors. All Rights Reserved. +Copyright 2006\-2019 The OpenSSL Project Authors. All Rights Reserved. .PP Licensed under the OpenSSL license (the \*(L"License\*(R"). You may not use this file except in compliance with the License. You can obtain a copy diff --git a/crypto/external/bsd/openssl/lib/libcrypto/man/EVP_PKEY_encrypt.3 b/crypto/external/bsd/openssl/lib/libcrypto/man/EVP_PKEY_encrypt.3 index 864e467e6b2..4f8af35530e 100644 --- a/crypto/external/bsd/openssl/lib/libcrypto/man/EVP_PKEY_encrypt.3 +++ b/crypto/external/bsd/openssl/lib/libcrypto/man/EVP_PKEY_encrypt.3 @@ -1,6 +1,6 @@ -.\" $NetBSD: EVP_PKEY_encrypt.3,v 1.19 2019/06/09 18:44:31 christos Exp $ +.\" $NetBSD: EVP_PKEY_encrypt.3,v 1.19.2.1 2021/03/28 18:21:48 martin Exp $ .\" -.\" Automatically generated by Pod::Man 4.10 (Pod::Simple 3.35) +.\" Automatically generated by Pod::Man 4.11 (Pod::Simple 3.35) .\" .\" Standard preamble: .\" ======================================================================== @@ -135,7 +135,7 @@ .\" ======================================================================== .\" .IX Title "EVP_PKEY_encrypt 3" -.TH EVP_PKEY_encrypt 3 "2019-03-12" "1.1.1c" "OpenSSL" +.TH EVP_PKEY_encrypt 3 "2020-01-23" "1.1.1i" "OpenSSL" .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. .if n .ad l @@ -179,8 +179,8 @@ context if several operations are performed using the same parameters. \&\fBEVP_PKEY_encrypt_init()\fR and \fBEVP_PKEY_encrypt()\fR return 1 for success and 0 or a negative value for failure. In particular a return value of \-2 indicates the operation is not supported by the public key algorithm. -.SH "EXAMPLE" -.IX Header "EXAMPLE" +.SH "EXAMPLES" +.IX Header "EXAMPLES" Encrypt data using \s-1OAEP\s0 (for \s-1RSA\s0 keys). See also \fBPEM_read_PUBKEY\fR\|(3) or \&\fBd2i_X509\fR\|(3) for means to load a public key. You may also simply set 'eng = \s-1NULL\s0;' to start with the default OpenSSL \s-1RSA\s0 implementation: @@ -237,7 +237,7 @@ set 'eng = \s-1NULL\s0;' to start with the default OpenSSL \s-1RSA\s0 implementa These functions were added in OpenSSL 1.0.0. .SH "COPYRIGHT" .IX Header "COPYRIGHT" -Copyright 2006\-2016 The OpenSSL Project Authors. All Rights Reserved. +Copyright 2006\-2019 The OpenSSL Project Authors. All Rights Reserved. .PP Licensed under the OpenSSL license (the \*(L"License\*(R"). You may not use this file except in compliance with the License. You can obtain a copy diff --git a/crypto/external/bsd/openssl/lib/libcrypto/man/EVP_PKEY_get_default_digest_nid.3 b/crypto/external/bsd/openssl/lib/libcrypto/man/EVP_PKEY_get_default_digest_nid.3 index f43366b56b3..c9e484cf453 100644 --- a/crypto/external/bsd/openssl/lib/libcrypto/man/EVP_PKEY_get_default_digest_nid.3 +++ b/crypto/external/bsd/openssl/lib/libcrypto/man/EVP_PKEY_get_default_digest_nid.3 @@ -1,6 +1,6 @@ -.\" $NetBSD: EVP_PKEY_get_default_digest_nid.3,v 1.3 2019/06/09 18:44:32 christos Exp $ +.\" $NetBSD: EVP_PKEY_get_default_digest_nid.3,v 1.3.2.1 2021/03/28 18:21:48 martin Exp $ .\" -.\" Automatically generated by Pod::Man 4.10 (Pod::Simple 3.35) +.\" Automatically generated by Pod::Man 4.11 (Pod::Simple 3.35) .\" .\" Standard preamble: .\" ======================================================================== @@ -135,7 +135,7 @@ .\" ======================================================================== .\" .IX Title "EVP_PKEY_get_default_digest_nid 3" -.TH EVP_PKEY_get_default_digest_nid 3 "2019-03-12" "1.1.1c" "OpenSSL" +.TH EVP_PKEY_get_default_digest_nid 3 "2019-03-12" "1.1.1i" "OpenSSL" .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. .if n .ad l diff --git a/crypto/external/bsd/openssl/lib/libcrypto/man/EVP_PKEY_keygen.3 b/crypto/external/bsd/openssl/lib/libcrypto/man/EVP_PKEY_keygen.3 index fab0bbb5cc6..0c7707f1024 100644 --- a/crypto/external/bsd/openssl/lib/libcrypto/man/EVP_PKEY_keygen.3 +++ b/crypto/external/bsd/openssl/lib/libcrypto/man/EVP_PKEY_keygen.3 @@ -1,6 +1,6 @@ -.\" $NetBSD: EVP_PKEY_keygen.3,v 1.19 2019/06/09 18:44:32 christos Exp $ +.\" $NetBSD: EVP_PKEY_keygen.3,v 1.19.2.1 2021/03/28 18:21:48 martin Exp $ .\" -.\" Automatically generated by Pod::Man 4.10 (Pod::Simple 3.35) +.\" Automatically generated by Pod::Man 4.11 (Pod::Simple 3.35) .\" .\" Standard preamble: .\" ======================================================================== @@ -135,7 +135,7 @@ .\" ======================================================================== .\" .IX Title "EVP_PKEY_keygen 3" -.TH EVP_PKEY_keygen 3 "2019-03-12" "1.1.1c" "OpenSSL" +.TH EVP_PKEY_keygen 3 "2020-12-10" "1.1.1i" "OpenSSL" .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. .if n .ad l @@ -192,7 +192,7 @@ generation callback. The function \fBEVP_PKEY_CTX_get_keygen_info()\fR returns parameters associated with the generation operation. If \fBidx\fR is \-1 the total number of parameters available is returned. Any non negative value returns the value of -that parameter. \fBEVP_PKEY_CTX_gen_keygen_info()\fR with a non-negative value for +that parameter. \fBEVP_PKEY_CTX_gen_keygen_info()\fR with a nonnegative value for \&\fBidx\fR should only be called within the generation callback. .PP If the callback returns 0 then the key generation operation is aborted and an @@ -337,7 +337,7 @@ These functions were added in OpenSSL 1.0.0. in OpenSSL 1.1.1. .SH "COPYRIGHT" .IX Header "COPYRIGHT" -Copyright 2006\-2018 The OpenSSL Project Authors. All Rights Reserved. +Copyright 2006\-2020 The OpenSSL Project Authors. All Rights Reserved. .PP Licensed under the OpenSSL license (the \*(L"License\*(R"). You may not use this file except in compliance with the License. You can obtain a copy diff --git a/crypto/external/bsd/openssl/lib/libcrypto/man/EVP_PKEY_meth_get_count.3 b/crypto/external/bsd/openssl/lib/libcrypto/man/EVP_PKEY_meth_get_count.3 index 38c324d31c8..e76f6519545 100644 --- a/crypto/external/bsd/openssl/lib/libcrypto/man/EVP_PKEY_meth_get_count.3 +++ b/crypto/external/bsd/openssl/lib/libcrypto/man/EVP_PKEY_meth_get_count.3 @@ -1,6 +1,6 @@ -.\" $NetBSD: EVP_PKEY_meth_get_count.3,v 1.2 2019/06/09 18:44:32 christos Exp $ +.\" $NetBSD: EVP_PKEY_meth_get_count.3,v 1.2.4.1 2021/03/28 18:21:48 martin Exp $ .\" -.\" Automatically generated by Pod::Man 4.10 (Pod::Simple 3.35) +.\" Automatically generated by Pod::Man 4.11 (Pod::Simple 3.35) .\" .\" Standard preamble: .\" ======================================================================== @@ -135,7 +135,7 @@ .\" ======================================================================== .\" .IX Title "EVP_PKEY_meth_get_count 3" -.TH EVP_PKEY_meth_get_count 3 "2018-09-23" "1.1.1c" "OpenSSL" +.TH EVP_PKEY_meth_get_count 3 "2018-09-23" "1.1.1i" "OpenSSL" .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. .if n .ad l diff --git a/crypto/external/bsd/openssl/lib/libcrypto/man/EVP_PKEY_meth_new.3 b/crypto/external/bsd/openssl/lib/libcrypto/man/EVP_PKEY_meth_new.3 index b9e7004d230..66c17b4afa0 100644 --- a/crypto/external/bsd/openssl/lib/libcrypto/man/EVP_PKEY_meth_new.3 +++ b/crypto/external/bsd/openssl/lib/libcrypto/man/EVP_PKEY_meth_new.3 @@ -1,6 +1,6 @@ -.\" $NetBSD: EVP_PKEY_meth_new.3,v 1.2 2019/06/09 18:44:32 christos Exp $ +.\" $NetBSD: EVP_PKEY_meth_new.3,v 1.2.4.1 2021/03/28 18:21:48 martin Exp $ .\" -.\" Automatically generated by Pod::Man 4.10 (Pod::Simple 3.35) +.\" Automatically generated by Pod::Man 4.11 (Pod::Simple 3.35) .\" .\" Standard preamble: .\" ======================================================================== @@ -135,7 +135,7 @@ .\" ======================================================================== .\" .IX Title "EVP_PKEY_meth_new 3" -.TH EVP_PKEY_meth_new 3 "2019-06-09" "1.1.1c" "OpenSSL" +.TH EVP_PKEY_meth_new 3 "2020-03-22" "1.1.1i" "OpenSSL" .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. .if n .ad l @@ -147,14 +147,18 @@ EVP_PKEY_meth_set_init, EVP_PKEY_meth_set_copy, EVP_PKEY_meth_set_cleanup, EVP_PKEY_meth_set_paramgen, EVP_PKEY_meth_set_keygen, EVP_PKEY_meth_set_sign, EVP_PKEY_meth_set_verify, EVP_PKEY_meth_set_verify_recover, EVP_PKEY_meth_set_signctx, EVP_PKEY_meth_set_verifyctx, EVP_PKEY_meth_set_encrypt, EVP_PKEY_meth_set_decrypt, -EVP_PKEY_meth_set_derive, EVP_PKEY_meth_set_ctrl, EVP_PKEY_meth_set_check, +EVP_PKEY_meth_set_derive, EVP_PKEY_meth_set_ctrl, +EVP_PKEY_meth_set_digestsign, EVP_PKEY_meth_set_digestverify, +EVP_PKEY_meth_set_check, EVP_PKEY_meth_set_public_check, EVP_PKEY_meth_set_param_check, EVP_PKEY_meth_set_digest_custom, EVP_PKEY_meth_get_init, EVP_PKEY_meth_get_copy, EVP_PKEY_meth_get_cleanup, EVP_PKEY_meth_get_paramgen, EVP_PKEY_meth_get_keygen, EVP_PKEY_meth_get_sign, EVP_PKEY_meth_get_verify, EVP_PKEY_meth_get_verify_recover, EVP_PKEY_meth_get_signctx, EVP_PKEY_meth_get_verifyctx, EVP_PKEY_meth_get_encrypt, EVP_PKEY_meth_get_decrypt, -EVP_PKEY_meth_get_derive, EVP_PKEY_meth_get_ctrl, EVP_PKEY_meth_get_check, +EVP_PKEY_meth_get_derive, EVP_PKEY_meth_get_ctrl, +EVP_PKEY_meth_get_digestsign, EVP_PKEY_meth_get_digestverify, +EVP_PKEY_meth_get_check, EVP_PKEY_meth_get_public_check, EVP_PKEY_meth_get_param_check, EVP_PKEY_meth_get_digest_custom, EVP_PKEY_meth_remove @@ -253,6 +257,18 @@ libcrypto, -lcrypto \& int (*ctrl_str) (EVP_PKEY_CTX *ctx, \& const char *type, \& const char *value)); +\& void EVP_PKEY_meth_set_digestsign(EVP_PKEY_METHOD *pmeth, +\& int (*digestsign) (EVP_MD_CTX *ctx, +\& unsigned char *sig, +\& size_t *siglen, +\& const unsigned char *tbs, +\& size_t tbslen)); +\& void EVP_PKEY_meth_set_digestverify(EVP_PKEY_METHOD *pmeth, +\& int (*digestverify) (EVP_MD_CTX *ctx, +\& const unsigned char *sig, +\& size_t siglen, +\& const unsigned char *tbs, +\& size_t tbslen)); \& void EVP_PKEY_meth_set_check(EVP_PKEY_METHOD *pmeth, \& int (*check) (EVP_PKEY *pkey)); \& void EVP_PKEY_meth_set_public_check(EVP_PKEY_METHOD *pmeth, @@ -341,6 +357,18 @@ libcrypto, -lcrypto \& int (**pctrl_str) (EVP_PKEY_CTX *ctx, \& const char *type, \& const char *value)); +\& void EVP_PKEY_meth_get_digestsign(EVP_PKEY_METHOD *pmeth, +\& int (**digestsign) (EVP_MD_CTX *ctx, +\& unsigned char *sig, +\& size_t *siglen, +\& const unsigned char *tbs, +\& size_t tbslen)); +\& void EVP_PKEY_meth_get_digestverify(EVP_PKEY_METHOD *pmeth, +\& int (**digestverify) (EVP_MD_CTX *ctx, +\& const unsigned char *sig, +\& size_t siglen, +\& const unsigned char *tbs, +\& size_t tbslen)); \& void EVP_PKEY_meth_get_check(const EVP_PKEY_METHOD *pmeth, \& int (**pcheck) (EVP_PKEY *pkey)); \& void EVP_PKEY_meth_get_public_check(const EVP_PKEY_METHOD *pmeth, diff --git a/crypto/external/bsd/openssl/lib/libcrypto/man/EVP_PKEY_new.3 b/crypto/external/bsd/openssl/lib/libcrypto/man/EVP_PKEY_new.3 index 5660d9ef9a9..e3e925d3a87 100644 --- a/crypto/external/bsd/openssl/lib/libcrypto/man/EVP_PKEY_new.3 +++ b/crypto/external/bsd/openssl/lib/libcrypto/man/EVP_PKEY_new.3 @@ -1,6 +1,6 @@ -.\" $NetBSD: EVP_PKEY_new.3,v 1.19 2019/06/09 18:44:32 christos Exp $ +.\" $NetBSD: EVP_PKEY_new.3,v 1.19.2.1 2021/03/28 18:21:48 martin Exp $ .\" -.\" Automatically generated by Pod::Man 4.10 (Pod::Simple 3.35) +.\" Automatically generated by Pod::Man 4.11 (Pod::Simple 3.35) .\" .\" Standard preamble: .\" ======================================================================== @@ -135,7 +135,7 @@ .\" ======================================================================== .\" .IX Title "EVP_PKEY_new 3" -.TH EVP_PKEY_new 3 "2019-03-12" "1.1.1c" "OpenSSL" +.TH EVP_PKEY_new 3 "2020-12-10" "1.1.1i" "OpenSSL" .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. .if n .ad l @@ -207,27 +207,31 @@ information. Algorithm types that support raw public keys are \&\fBEVP_PKEY_new_CMAC_key()\fR works in the same way as \fBEVP_PKEY_new_raw_private_key()\fR except it is only for the \fB\s-1EVP_PKEY_CMAC\s0\fR algorithm type. In addition to the raw private key data, it also takes a cipher algorithm to be used during -creation of a \s-1CMAC\s0 in the \fBcipher\fR argument. +creation of a \s-1CMAC\s0 in the \fBcipher\fR argument. The cipher should be a standard +encryption only cipher. For example \s-1AEAD\s0 and \s-1XTS\s0 ciphers should not be used. .PP \&\fBEVP_PKEY_new_mac_key()\fR works in the same way as \fBEVP_PKEY_new_raw_private_key()\fR. New applications should use \fBEVP_PKEY_new_raw_private_key()\fR instead. .PP \&\fBEVP_PKEY_get_raw_private_key()\fR fills the buffer provided by \fBpriv\fR with raw -private key data. The number of bytes written is populated in \fB*len\fR. If the -buffer \fBpriv\fR is \s-1NULL\s0 then \fB*len\fR is populated with the number of bytes -required to hold the key. The calling application is responsible for ensuring -that the buffer is large enough to receive the private key data. This function -only works for algorithms that support raw private keys. Currently this is: -\&\fB\s-1EVP_PKEY_HMAC\s0\fR, \fB\s-1EVP_PKEY_POLY1305\s0\fR, \fB\s-1EVP_PKEY_SIPHASH\s0\fR, \fB\s-1EVP_PKEY_X25519\s0\fR, -\&\fB\s-1EVP_PKEY_ED25519\s0\fR, \fB\s-1EVP_PKEY_X448\s0\fR or \fB\s-1EVP_PKEY_ED448\s0\fR. +private key data. The size of the \fBpriv\fR buffer should be in \fB*len\fR on entry +to the function, and on exit \fB*len\fR is updated with the number of bytes +actually written. If the buffer \fBpriv\fR is \s-1NULL\s0 then \fB*len\fR is populated with +the number of bytes required to hold the key. The calling application is +responsible for ensuring that the buffer is large enough to receive the private +key data. This function only works for algorithms that support raw private keys. +Currently this is: \fB\s-1EVP_PKEY_HMAC\s0\fR, \fB\s-1EVP_PKEY_POLY1305\s0\fR, \fB\s-1EVP_PKEY_SIPHASH\s0\fR, +\&\fB\s-1EVP_PKEY_X25519\s0\fR, \fB\s-1EVP_PKEY_ED25519\s0\fR, \fB\s-1EVP_PKEY_X448\s0\fR or \fB\s-1EVP_PKEY_ED448\s0\fR. .PP \&\fBEVP_PKEY_get_raw_public_key()\fR fills the buffer provided by \fBpub\fR with raw -public key data. The number of bytes written is populated in \fB*len\fR. If the -buffer \fBpub\fR is \s-1NULL\s0 then \fB*len\fR is populated with the number of bytes -required to hold the key. The calling application is responsible for ensuring -that the buffer is large enough to receive the public key data. This function -only works for algorithms that support raw public keys. Currently this is: -\&\fB\s-1EVP_PKEY_X25519\s0\fR, \fB\s-1EVP_PKEY_ED25519\s0\fR, \fB\s-1EVP_PKEY_X448\s0\fR or \fB\s-1EVP_PKEY_ED448\s0\fR. +public key data. The size of the \fBpub\fR buffer should be in \fB*len\fR on entry +to the function, and on exit \fB*len\fR is updated with the number of bytes +actually written. If the buffer \fBpub\fR is \s-1NULL\s0 then \fB*len\fR is populated with +the number of bytes required to hold the key. The calling application is +responsible for ensuring that the buffer is large enough to receive the public +key data. This function only works for algorithms that support raw public keys. +Currently this is: \fB\s-1EVP_PKEY_X25519\s0\fR, \fB\s-1EVP_PKEY_ED25519\s0\fR, \fB\s-1EVP_PKEY_X448\s0\fR or +\&\fB\s-1EVP_PKEY_ED448\s0\fR. .SH "NOTES" .IX Header "NOTES" The \fB\s-1EVP_PKEY\s0\fR structure is used by various OpenSSL functions which require a @@ -262,7 +266,7 @@ The \&\fBEVP_PKEY_get_raw_public_key()\fR functions were added in OpenSSL 1.1.1. .SH "COPYRIGHT" .IX Header "COPYRIGHT" -Copyright 2002\-2018 The OpenSSL Project Authors. All Rights Reserved. +Copyright 2002\-2020 The OpenSSL Project Authors. All Rights Reserved. .PP Licensed under the OpenSSL license (the \*(L"License\*(R"). You may not use this file except in compliance with the License. You can obtain a copy diff --git a/crypto/external/bsd/openssl/lib/libcrypto/man/EVP_PKEY_print_private.3 b/crypto/external/bsd/openssl/lib/libcrypto/man/EVP_PKEY_print_private.3 index d321b841677..836a658d93b 100644 --- a/crypto/external/bsd/openssl/lib/libcrypto/man/EVP_PKEY_print_private.3 +++ b/crypto/external/bsd/openssl/lib/libcrypto/man/EVP_PKEY_print_private.3 @@ -1,6 +1,6 @@ -.\" $NetBSD: EVP_PKEY_print_private.3,v 1.19 2019/06/09 18:44:32 christos Exp $ +.\" $NetBSD: EVP_PKEY_print_private.3,v 1.19.2.1 2021/03/28 18:21:48 martin Exp $ .\" -.\" Automatically generated by Pod::Man 4.10 (Pod::Simple 3.35) +.\" Automatically generated by Pod::Man 4.11 (Pod::Simple 3.35) .\" .\" Standard preamble: .\" ======================================================================== @@ -135,7 +135,7 @@ .\" ======================================================================== .\" .IX Title "EVP_PKEY_print_private 3" -.TH EVP_PKEY_print_private 3 "2019-03-12" "1.1.1c" "OpenSSL" +.TH EVP_PKEY_print_private 3 "2019-03-12" "1.1.1i" "OpenSSL" .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. .if n .ad l diff --git a/crypto/external/bsd/openssl/lib/libcrypto/man/EVP_PKEY_set1_RSA.3 b/crypto/external/bsd/openssl/lib/libcrypto/man/EVP_PKEY_set1_RSA.3 index 6598723dddc..acb200c4e4a 100644 --- a/crypto/external/bsd/openssl/lib/libcrypto/man/EVP_PKEY_set1_RSA.3 +++ b/crypto/external/bsd/openssl/lib/libcrypto/man/EVP_PKEY_set1_RSA.3 @@ -1,6 +1,6 @@ -.\" $NetBSD: EVP_PKEY_set1_RSA.3,v 1.19 2019/06/09 18:44:32 christos Exp $ +.\" $NetBSD: EVP_PKEY_set1_RSA.3,v 1.19.2.1 2021/03/28 18:21:48 martin Exp $ .\" -.\" Automatically generated by Pod::Man 4.10 (Pod::Simple 3.35) +.\" Automatically generated by Pod::Man 4.11 (Pod::Simple 3.35) .\" .\" Standard preamble: .\" ======================================================================== @@ -135,7 +135,7 @@ .\" ======================================================================== .\" .IX Title "EVP_PKEY_set1_RSA 3" -.TH EVP_PKEY_set1_RSA 3 "2019-06-09" "1.1.1c" "OpenSSL" +.TH EVP_PKEY_set1_RSA 3 "2019-06-09" "1.1.1i" "OpenSSL" .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. .if n .ad l diff --git a/crypto/external/bsd/openssl/lib/libcrypto/man/EVP_PKEY_sign.3 b/crypto/external/bsd/openssl/lib/libcrypto/man/EVP_PKEY_sign.3 index 4e271553fa6..cdb2d13048e 100644 --- a/crypto/external/bsd/openssl/lib/libcrypto/man/EVP_PKEY_sign.3 +++ b/crypto/external/bsd/openssl/lib/libcrypto/man/EVP_PKEY_sign.3 @@ -1,6 +1,6 @@ -.\" $NetBSD: EVP_PKEY_sign.3,v 1.19 2019/06/09 18:44:32 christos Exp $ +.\" $NetBSD: EVP_PKEY_sign.3,v 1.19.2.1 2021/03/28 18:21:48 martin Exp $ .\" -.\" Automatically generated by Pod::Man 4.10 (Pod::Simple 3.35) +.\" Automatically generated by Pod::Man 4.11 (Pod::Simple 3.35) .\" .\" Standard preamble: .\" ======================================================================== @@ -135,7 +135,7 @@ .\" ======================================================================== .\" .IX Title "EVP_PKEY_sign 3" -.TH EVP_PKEY_sign 3 "2019-03-12" "1.1.1c" "OpenSSL" +.TH EVP_PKEY_sign 3 "2020-01-23" "1.1.1i" "OpenSSL" .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. .if n .ad l @@ -184,8 +184,8 @@ context if several operations are performed using the same parameters. \&\fBEVP_PKEY_sign_init()\fR and \fBEVP_PKEY_sign()\fR return 1 for success and 0 or a negative value for failure. In particular a return value of \-2 indicates the operation is not supported by the public key algorithm. -.SH "EXAMPLE" -.IX Header "EXAMPLE" +.SH "EXAMPLES" +.IX Header "EXAMPLES" Sign data using \s-1RSA\s0 with PKCS#1 padding and \s-1SHA256\s0 digest: .PP .Vb 2 @@ -241,7 +241,7 @@ Sign data using \s-1RSA\s0 with PKCS#1 padding and \s-1SHA256\s0 digest: These functions were added in OpenSSL 1.0.0. .SH "COPYRIGHT" .IX Header "COPYRIGHT" -Copyright 2006\-2016 The OpenSSL Project Authors. All Rights Reserved. +Copyright 2006\-2019 The OpenSSL Project Authors. All Rights Reserved. .PP Licensed under the OpenSSL license (the \*(L"License\*(R"). You may not use this file except in compliance with the License. You can obtain a copy diff --git a/crypto/external/bsd/openssl/lib/libcrypto/man/EVP_PKEY_verify.3 b/crypto/external/bsd/openssl/lib/libcrypto/man/EVP_PKEY_verify.3 index d6097406902..4ae547d639a 100644 --- a/crypto/external/bsd/openssl/lib/libcrypto/man/EVP_PKEY_verify.3 +++ b/crypto/external/bsd/openssl/lib/libcrypto/man/EVP_PKEY_verify.3 @@ -1,6 +1,6 @@ -.\" $NetBSD: EVP_PKEY_verify.3,v 1.19 2019/06/09 18:44:32 christos Exp $ +.\" $NetBSD: EVP_PKEY_verify.3,v 1.19.2.1 2021/03/28 18:21:48 martin Exp $ .\" -.\" Automatically generated by Pod::Man 4.10 (Pod::Simple 3.35) +.\" Automatically generated by Pod::Man 4.11 (Pod::Simple 3.35) .\" .\" Standard preamble: .\" ======================================================================== @@ -135,7 +135,7 @@ .\" ======================================================================== .\" .IX Title "EVP_PKEY_verify 3" -.TH EVP_PKEY_verify 3 "2019-03-12" "1.1.1c" "OpenSSL" +.TH EVP_PKEY_verify 3 "2020-01-23" "1.1.1i" "OpenSSL" .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. .if n .ad l @@ -182,8 +182,8 @@ of invalid form) it is not an indication of a more serious error. A negative value indicates an error other that signature verification failure. In particular a return value of \-2 indicates the operation is not supported by the public key algorithm. -.SH "EXAMPLE" -.IX Header "EXAMPLE" +.SH "EXAMPLES" +.IX Header "EXAMPLES" Verify signature using PKCS#1 and \s-1SHA256\s0 digest: .PP .Vb 2 @@ -230,7 +230,7 @@ Verify signature using PKCS#1 and \s-1SHA256\s0 digest: These functions were added in OpenSSL 1.0.0. .SH "COPYRIGHT" .IX Header "COPYRIGHT" -Copyright 2006\-2018 The OpenSSL Project Authors. All Rights Reserved. +Copyright 2006\-2019 The OpenSSL Project Authors. All Rights Reserved. .PP Licensed under the OpenSSL license (the \*(L"License\*(R"). You may not use this file except in compliance with the License. You can obtain a copy diff --git a/crypto/external/bsd/openssl/lib/libcrypto/man/EVP_PKEY_verify_recover.3 b/crypto/external/bsd/openssl/lib/libcrypto/man/EVP_PKEY_verify_recover.3 index 319bdb30baa..1fb85f3f29c 100644 --- a/crypto/external/bsd/openssl/lib/libcrypto/man/EVP_PKEY_verify_recover.3 +++ b/crypto/external/bsd/openssl/lib/libcrypto/man/EVP_PKEY_verify_recover.3 @@ -1,6 +1,6 @@ -.\" $NetBSD: EVP_PKEY_verify_recover.3,v 1.14 2019/06/09 18:44:32 christos Exp $ +.\" $NetBSD: EVP_PKEY_verify_recover.3,v 1.14.2.1 2021/03/28 18:21:48 martin Exp $ .\" -.\" Automatically generated by Pod::Man 4.10 (Pod::Simple 3.35) +.\" Automatically generated by Pod::Man 4.11 (Pod::Simple 3.35) .\" .\" Standard preamble: .\" ======================================================================== @@ -135,7 +135,7 @@ .\" ======================================================================== .\" .IX Title "EVP_PKEY_verify_recover 3" -.TH EVP_PKEY_verify_recover 3 "2019-03-12" "1.1.1c" "OpenSSL" +.TH EVP_PKEY_verify_recover 3 "2020-01-23" "1.1.1i" "OpenSSL" .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. .if n .ad l @@ -187,8 +187,8 @@ context if several operations are performed using the same parameters. \&\fBEVP_PKEY_verify_recover_init()\fR and \fBEVP_PKEY_verify_recover()\fR return 1 for success and 0 or a negative value for failure. In particular a return value of \-2 indicates the operation is not supported by the public key algorithm. -.SH "EXAMPLE" -.IX Header "EXAMPLE" +.SH "EXAMPLES" +.IX Header "EXAMPLES" Recover digest originally signed using PKCS#1 and \s-1SHA256\s0 digest: .PP .Vb 2 @@ -241,7 +241,7 @@ Recover digest originally signed using PKCS#1 and \s-1SHA256\s0 digest: These functions were added in OpenSSL 1.0.0. .SH "COPYRIGHT" .IX Header "COPYRIGHT" -Copyright 2013\-2018 The OpenSSL Project Authors. All Rights Reserved. +Copyright 2013\-2019 The OpenSSL Project Authors. All Rights Reserved. .PP Licensed under the OpenSSL license (the \*(L"License\*(R"). You may not use this file except in compliance with the License. You can obtain a copy diff --git a/crypto/external/bsd/openssl/lib/libcrypto/man/EVP_SealInit.3 b/crypto/external/bsd/openssl/lib/libcrypto/man/EVP_SealInit.3 index e5a2ee15476..11a273d748a 100644 --- a/crypto/external/bsd/openssl/lib/libcrypto/man/EVP_SealInit.3 +++ b/crypto/external/bsd/openssl/lib/libcrypto/man/EVP_SealInit.3 @@ -1,6 +1,6 @@ -.\" $NetBSD: EVP_SealInit.3,v 1.19 2019/06/09 18:44:32 christos Exp $ +.\" $NetBSD: EVP_SealInit.3,v 1.19.2.1 2021/03/28 18:21:48 martin Exp $ .\" -.\" Automatically generated by Pod::Man 4.10 (Pod::Simple 3.35) +.\" Automatically generated by Pod::Man 4.11 (Pod::Simple 3.35) .\" .\" Standard preamble: .\" ======================================================================== @@ -135,7 +135,7 @@ .\" ======================================================================== .\" .IX Title "EVP_SealInit 3" -.TH EVP_SealInit 3 "2018-09-23" "1.1.1c" "OpenSSL" +.TH EVP_SealInit 3 "2020-12-10" "1.1.1i" "OpenSSL" .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. .if n .ad l @@ -158,7 +158,7 @@ libcrypto, -lcrypto .Ve .SH "DESCRIPTION" .IX Header "DESCRIPTION" -The \s-1EVP\s0 envelope routines are a high level interface to envelope +The \s-1EVP\s0 envelope routines are a high-level interface to envelope encryption. They generate a random key and \s-1IV\s0 (if required) then \&\*(L"envelope\*(R" it by using public key encryption. Data can then be encrypted using this key. @@ -194,7 +194,9 @@ failure. .SH "NOTES" .IX Header "NOTES" Because a random secret key is generated the random number generator -must be seeded before calling \fBEVP_SealInit()\fR. +must be seeded when \fBEVP_SealInit()\fR is called. +If the automatic seeding or reseeding of the OpenSSL \s-1CSPRNG\s0 fails due to +external circumstances (see \s-1\fBRAND\s0\fR\|(7)), the operation will fail. .PP The public key must be \s-1RSA\s0 because it is the only OpenSSL public key algorithm that supports key transport. @@ -213,10 +215,11 @@ with \fBtype\fR set to \s-1NULL.\s0 .IX Header "SEE ALSO" \&\fBevp\fR\|(7), \fBRAND_bytes\fR\|(3), \&\fBEVP_EncryptInit\fR\|(3), -\&\fBEVP_OpenInit\fR\|(3) +\&\fBEVP_OpenInit\fR\|(3), +\&\s-1\fBRAND\s0\fR\|(7) .SH "COPYRIGHT" .IX Header "COPYRIGHT" -Copyright 2000\-2016 The OpenSSL Project Authors. All Rights Reserved. +Copyright 2000\-2020 The OpenSSL Project Authors. All Rights Reserved. .PP Licensed under the OpenSSL license (the \*(L"License\*(R"). You may not use this file except in compliance with the License. You can obtain a copy diff --git a/crypto/external/bsd/openssl/lib/libcrypto/man/EVP_SignInit.3 b/crypto/external/bsd/openssl/lib/libcrypto/man/EVP_SignInit.3 index 87e566af24a..36662908862 100644 --- a/crypto/external/bsd/openssl/lib/libcrypto/man/EVP_SignInit.3 +++ b/crypto/external/bsd/openssl/lib/libcrypto/man/EVP_SignInit.3 @@ -1,6 +1,6 @@ -.\" $NetBSD: EVP_SignInit.3,v 1.19 2019/06/09 18:44:32 christos Exp $ +.\" $NetBSD: EVP_SignInit.3,v 1.19.2.1 2021/03/28 18:21:48 martin Exp $ .\" -.\" Automatically generated by Pod::Man 4.10 (Pod::Simple 3.35) +.\" Automatically generated by Pod::Man 4.11 (Pod::Simple 3.35) .\" .\" Standard preamble: .\" ======================================================================== @@ -135,16 +135,14 @@ .\" ======================================================================== .\" .IX Title "EVP_SignInit 3" -.TH EVP_SignInit 3 "2019-03-12" "1.1.1c" "OpenSSL" +.TH EVP_SignInit 3 "2020-12-10" "1.1.1i" "OpenSSL" .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. .if n .ad l .nh .SH "NAME" -EVP_PKEY_size, -EVP_SignInit, EVP_SignInit_ex, EVP_SignUpdate, EVP_SignFinal, -EVP_PKEY_security_bits \- EVP signing -functions +EVP_SignInit, EVP_SignInit_ex, EVP_SignUpdate, EVP_SignFinal +\&\- EVP signing functions .SH "LIBRARY" libcrypto, -lcrypto .SH "SYNOPSIS" @@ -157,57 +155,45 @@ libcrypto, -lcrypto \& int EVP_SignFinal(EVP_MD_CTX *ctx, unsigned char *sig, unsigned int *s, EVP_PKEY *pkey); \& \& void EVP_SignInit(EVP_MD_CTX *ctx, const EVP_MD *type); -\& -\& int EVP_PKEY_size(const EVP_PKEY *pkey); -\& int EVP_PKEY_security_bits(const EVP_PKEY *pkey); .Ve .SH "DESCRIPTION" .IX Header "DESCRIPTION" -The \s-1EVP\s0 signature routines are a high level interface to digital +The \s-1EVP\s0 signature routines are a high-level interface to digital signatures. .PP -\&\fBEVP_SignInit_ex()\fR sets up signing context \fBctx\fR to use digest -\&\fBtype\fR from \s-1ENGINE\s0 \fBimpl\fR. \fBctx\fR must be created with +\&\fBEVP_SignInit_ex()\fR sets up signing context \fIctx\fR to use digest +\&\fItype\fR from \fB\s-1ENGINE\s0\fR \fIimpl\fR. \fIctx\fR must be created with \&\fBEVP_MD_CTX_new()\fR before calling this function. .PP -\&\fBEVP_SignUpdate()\fR hashes \fBcnt\fR bytes of data at \fBd\fR into the -signature context \fBctx\fR. This function can be called several times on the -same \fBctx\fR to include additional data. +\&\fBEVP_SignUpdate()\fR hashes \fIcnt\fR bytes of data at \fId\fR into the +signature context \fIctx\fR. This function can be called several times on the +same \fIctx\fR to include additional data. .PP -\&\fBEVP_SignFinal()\fR signs the data in \fBctx\fR using the private key \fBpkey\fR and -places the signature in \fBsig\fR. \fBsig\fR must be at least EVP_PKEY_size(pkey) -bytes in size. \fBs\fR is an \s-1OUT\s0 parameter, and not used as an \s-1IN\s0 parameter. +\&\fBEVP_SignFinal()\fR signs the data in \fIctx\fR using the private key \fIpkey\fR and +places the signature in \fIsig\fR. \fIsig\fR must be at least \f(CW\*(C`EVP_PKEY_size(pkey)\*(C'\fR +bytes in size. \fIs\fR is an \s-1OUT\s0 parameter, and not used as an \s-1IN\s0 parameter. The number of bytes of data written (i.e. the length of the signature) -will be written to the integer at \fBs\fR, at most EVP_PKEY_size(pkey) bytes +will be written to the integer at \fIs\fR, at most \f(CW\*(C`EVP_PKEY_size(pkey)\*(C'\fR bytes will be written. .PP -\&\fBEVP_SignInit()\fR initializes a signing context \fBctx\fR to use the default -implementation of digest \fBtype\fR. -.PP -\&\fBEVP_PKEY_size()\fR returns the maximum size of a signature in bytes. The actual -signature returned by \fBEVP_SignFinal()\fR may be smaller. -.PP -\&\fBEVP_PKEY_security_bits()\fR returns the number of security bits of the given \fBpkey\fR, -bits of security is defined in \s-1NIST SP800\-57.\s0 +\&\fBEVP_SignInit()\fR initializes a signing context \fIctx\fR to use the default +implementation of digest \fItype\fR. .SH "RETURN VALUES" .IX Header "RETURN VALUES" \&\fBEVP_SignInit_ex()\fR, \fBEVP_SignUpdate()\fR and \fBEVP_SignFinal()\fR return 1 for success and 0 for failure. .PP -\&\fBEVP_PKEY_size()\fR returns the maximum size of a signature in bytes. -.PP The error codes can be obtained by \fBERR_get_error\fR\|(3). -.PP -\&\fBEVP_PKEY_security_bits()\fR returns the number of security bits. .SH "NOTES" .IX Header "NOTES" The \fB\s-1EVP\s0\fR interface to digital signatures should almost always be used in -preference to the low level interfaces. This is because the code then becomes +preference to the low-level interfaces. This is because the code then becomes transparent to the algorithm used and much more flexible. .PP -When signing with \s-1DSA\s0 private keys the random number generator must be seeded -or the operation will fail. The random number generator does not need to be -seeded for \s-1RSA\s0 signatures. +When signing with \s-1DSA\s0 private keys the random number generator must be seeded. +If the automatic seeding or reseeding of the OpenSSL \s-1CSPRNG\s0 fails due to +external circumstances (see \s-1\fBRAND\s0\fR\|(7)), the operation will fail. +This requirement does not hold for \s-1RSA\s0 signatures. .PP The call to \fBEVP_SignFinal()\fR internally finalizes a copy of the digest context. This means that calls to \fBEVP_SignUpdate()\fR and \fBEVP_SignFinal()\fR can be called @@ -231,6 +217,7 @@ It is not possible to change the signing parameters using these function. The previous two bugs are fixed in the newer EVP_SignDigest*() function. .SH "SEE ALSO" .IX Header "SEE ALSO" +\&\fBEVP_PKEY_size\fR\|(3), \fBEVP_PKEY_bits\fR\|(3), \fBEVP_PKEY_security_bits\fR\|(3), \&\fBEVP_VerifyInit\fR\|(3), \&\fBEVP_DigestInit\fR\|(3), \&\fBevp\fR\|(7), \s-1\fBHMAC\s0\fR\|(3), \s-1\fBMD2\s0\fR\|(3), @@ -238,7 +225,7 @@ The previous two bugs are fixed in the newer EVP_SignDigest*() function. \&\s-1\fBSHA1\s0\fR\|(3), \fBdgst\fR\|(1) .SH "COPYRIGHT" .IX Header "COPYRIGHT" -Copyright 2000\-2018 The OpenSSL Project Authors. All Rights Reserved. +Copyright 2000\-2020 The OpenSSL Project Authors. All Rights Reserved. .PP Licensed under the OpenSSL license (the \*(L"License\*(R"). You may not use this file except in compliance with the License. You can obtain a copy diff --git a/crypto/external/bsd/openssl/lib/libcrypto/man/EVP_VerifyInit.3 b/crypto/external/bsd/openssl/lib/libcrypto/man/EVP_VerifyInit.3 index 37f77ae9644..a2a69c60a94 100644 --- a/crypto/external/bsd/openssl/lib/libcrypto/man/EVP_VerifyInit.3 +++ b/crypto/external/bsd/openssl/lib/libcrypto/man/EVP_VerifyInit.3 @@ -1,6 +1,6 @@ -.\" $NetBSD: EVP_VerifyInit.3,v 1.19 2019/06/09 18:44:32 christos Exp $ +.\" $NetBSD: EVP_VerifyInit.3,v 1.19.2.1 2021/03/28 18:21:48 martin Exp $ .\" -.\" Automatically generated by Pod::Man 4.10 (Pod::Simple 3.35) +.\" Automatically generated by Pod::Man 4.11 (Pod::Simple 3.35) .\" .\" Standard preamble: .\" ======================================================================== @@ -135,7 +135,7 @@ .\" ======================================================================== .\" .IX Title "EVP_VerifyInit 3" -.TH EVP_VerifyInit 3 "2018-09-23" "1.1.1c" "OpenSSL" +.TH EVP_VerifyInit 3 "2020-12-10" "1.1.1i" "OpenSSL" .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. .if n .ad l @@ -160,7 +160,7 @@ libcrypto, -lcrypto .Ve .SH "DESCRIPTION" .IX Header "DESCRIPTION" -The \s-1EVP\s0 signature verification routines are a high level interface to digital +The \s-1EVP\s0 signature verification routines are a high-level interface to digital signatures. .PP \&\fBEVP_VerifyInit_ex()\fR sets up verification context \fBctx\fR to use digest @@ -188,7 +188,7 @@ The error codes can be obtained by \fBERR_get_error\fR\|(3). .SH "NOTES" .IX Header "NOTES" The \fB\s-1EVP\s0\fR interface to digital signatures should almost always be used in -preference to the low level interfaces. This is because the code then becomes +preference to the low-level interfaces. This is because the code then becomes transparent to the algorithm used and much more flexible. .PP The call to \fBEVP_VerifyFinal()\fR internally finalizes a copy of the digest context. @@ -210,7 +210,7 @@ data have been passed through \fBEVP_SignUpdate()\fR. .PP It is not possible to change the signing parameters using these function. .PP -The previous two bugs are fixed in the newer EVP_VerifyDigest*() function. +The previous two bugs are fixed in the newer EVP_DigestVerify*() function. .SH "SEE ALSO" .IX Header "SEE ALSO" \&\fBevp\fR\|(7), @@ -221,7 +221,7 @@ The previous two bugs are fixed in the newer EVP_VerifyDigest*() function. \&\s-1\fBSHA1\s0\fR\|(3), \fBdgst\fR\|(1) .SH "COPYRIGHT" .IX Header "COPYRIGHT" -Copyright 2000\-2018 The OpenSSL Project Authors. All Rights Reserved. +Copyright 2000\-2020 The OpenSSL Project Authors. All Rights Reserved. .PP Licensed under the OpenSSL license (the \*(L"License\*(R"). You may not use this file except in compliance with the License. You can obtain a copy diff --git a/crypto/external/bsd/openssl/lib/libcrypto/man/EVP_aes.3 b/crypto/external/bsd/openssl/lib/libcrypto/man/EVP_aes.3 index 07982134420..bb73175bf61 100644 --- a/crypto/external/bsd/openssl/lib/libcrypto/man/EVP_aes.3 +++ b/crypto/external/bsd/openssl/lib/libcrypto/man/EVP_aes.3 @@ -1,6 +1,6 @@ -.\" $NetBSD: EVP_aes.3,v 1.2 2019/06/09 18:44:32 christos Exp $ +.\" $NetBSD: EVP_aes.3,v 1.2.4.1 2021/03/28 18:21:48 martin Exp $ .\" -.\" Automatically generated by Pod::Man 4.10 (Pod::Simple 3.35) +.\" Automatically generated by Pod::Man 4.11 (Pod::Simple 3.35) .\" .\" Standard preamble: .\" ======================================================================== @@ -135,7 +135,7 @@ .\" ======================================================================== .\" .IX Title "EVP_aes 3" -.TH EVP_aes 3 "2018-12-08" "1.1.1c" "OpenSSL" +.TH EVP_aes 3 "2020-04-24" "1.1.1i" "OpenSSL" .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. .if n .ad l @@ -245,6 +245,13 @@ requires a key of double-length for protection of a certain key size. In particular, \s-1XTS\-AES\-128\s0 (\fBEVP_aes_128_xts\fR) takes input of a 256\-bit key to achieve \s-1AES\s0 128\-bit security, and \s-1XTS\-AES\-256\s0 (\fBEVP_aes_256_xts\fR) takes input of a 512\-bit key to achieve \s-1AES\s0 256\-bit security. +.Sp +The \s-1XTS\s0 implementation in OpenSSL does not support streaming. That is there must +only be one \fBEVP_EncryptUpdate\fR\|(3) call per \fBEVP_EncryptInit_ex\fR\|(3) call (and +similarly with the \*(L"Decrypt\*(R" functions). +.Sp +The \fIiv\fR parameter to \fBEVP_EncryptInit_ex\fR\|(3) or \fBEVP_DecryptInit_ex\fR\|(3) is +the \s-1XTS\s0 \*(L"tweak\*(R" value. .SH "RETURN VALUES" .IX Header "RETURN VALUES" These functions return an \fB\s-1EVP_CIPHER\s0\fR structure that contains the @@ -257,7 +264,7 @@ details of the \fB\s-1EVP_CIPHER\s0\fR structure. \&\fBEVP_CIPHER_meth_new\fR\|(3) .SH "COPYRIGHT" .IX Header "COPYRIGHT" -Copyright 2017\-2018 The OpenSSL Project Authors. All Rights Reserved. +Copyright 2017\-2020 The OpenSSL Project Authors. All Rights Reserved. .PP Licensed under the OpenSSL license (the \*(L"License\*(R"). You may not use this file except in compliance with the License. You can obtain a copy diff --git a/crypto/external/bsd/openssl/lib/libcrypto/man/EVP_aria.3 b/crypto/external/bsd/openssl/lib/libcrypto/man/EVP_aria.3 index 9d412f6b129..d4bb5f9cde7 100644 --- a/crypto/external/bsd/openssl/lib/libcrypto/man/EVP_aria.3 +++ b/crypto/external/bsd/openssl/lib/libcrypto/man/EVP_aria.3 @@ -1,6 +1,6 @@ -.\" $NetBSD: EVP_aria.3,v 1.2 2019/06/09 18:44:32 christos Exp $ +.\" $NetBSD: EVP_aria.3,v 1.2.4.1 2021/03/28 18:21:48 martin Exp $ .\" -.\" Automatically generated by Pod::Man 4.10 (Pod::Simple 3.35) +.\" Automatically generated by Pod::Man 4.11 (Pod::Simple 3.35) .\" .\" Standard preamble: .\" ======================================================================== @@ -135,7 +135,7 @@ .\" ======================================================================== .\" .IX Title "EVP_aria 3" -.TH EVP_aria 3 "2018-12-08" "1.1.1c" "OpenSSL" +.TH EVP_aria 3 "2020-01-23" "1.1.1i" "OpenSSL" .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. .if n .ad l @@ -171,7 +171,7 @@ EVP_aria_256_ccm, EVP_aria_128_gcm, EVP_aria_192_gcm, EVP_aria_256_gcm, -\&\- EVP AES cipher +\&\- EVP ARIA cipher .SH "LIBRARY" libcrypto, -lcrypto .SH "SYNOPSIS" @@ -208,7 +208,7 @@ details of the \fB\s-1EVP_CIPHER\s0\fR structure. \&\fBEVP_CIPHER_meth_new\fR\|(3) .SH "COPYRIGHT" .IX Header "COPYRIGHT" -Copyright 2017\-2018 The OpenSSL Project Authors. All Rights Reserved. +Copyright 2017\-2019 The OpenSSL Project Authors. All Rights Reserved. .PP Licensed under the OpenSSL license (the \*(L"License\*(R"). You may not use this file except in compliance with the License. You can obtain a copy diff --git a/crypto/external/bsd/openssl/lib/libcrypto/man/EVP_bf_cbc.3 b/crypto/external/bsd/openssl/lib/libcrypto/man/EVP_bf_cbc.3 index 92e762b2b8e..1baf426a688 100644 --- a/crypto/external/bsd/openssl/lib/libcrypto/man/EVP_bf_cbc.3 +++ b/crypto/external/bsd/openssl/lib/libcrypto/man/EVP_bf_cbc.3 @@ -1,6 +1,6 @@ -.\" $NetBSD: EVP_bf_cbc.3,v 1.2 2019/06/09 18:44:32 christos Exp $ +.\" $NetBSD: EVP_bf_cbc.3,v 1.2.4.1 2021/03/28 18:21:48 martin Exp $ .\" -.\" Automatically generated by Pod::Man 4.10 (Pod::Simple 3.35) +.\" Automatically generated by Pod::Man 4.11 (Pod::Simple 3.35) .\" .\" Standard preamble: .\" ======================================================================== @@ -135,7 +135,7 @@ .\" ======================================================================== .\" .IX Title "EVP_bf_cbc 3" -.TH EVP_bf_cbc 3 "2018-12-08" "1.1.1c" "OpenSSL" +.TH EVP_bf_cbc 3 "2018-12-08" "1.1.1i" "OpenSSL" .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. .if n .ad l diff --git a/crypto/external/bsd/openssl/lib/libcrypto/man/EVP_blake2b512.3 b/crypto/external/bsd/openssl/lib/libcrypto/man/EVP_blake2b512.3 index 81255675c03..5a533af4c5d 100644 --- a/crypto/external/bsd/openssl/lib/libcrypto/man/EVP_blake2b512.3 +++ b/crypto/external/bsd/openssl/lib/libcrypto/man/EVP_blake2b512.3 @@ -1,6 +1,6 @@ -.\" $NetBSD: EVP_blake2b512.3,v 1.2 2019/06/09 18:44:32 christos Exp $ +.\" $NetBSD: EVP_blake2b512.3,v 1.2.4.1 2021/03/28 18:21:48 martin Exp $ .\" -.\" Automatically generated by Pod::Man 4.10 (Pod::Simple 3.35) +.\" Automatically generated by Pod::Man 4.11 (Pod::Simple 3.35) .\" .\" Standard preamble: .\" ======================================================================== @@ -135,7 +135,7 @@ .\" ======================================================================== .\" .IX Title "EVP_blake2b512 3" -.TH EVP_blake2b512 3 "2018-09-23" "1.1.1c" "OpenSSL" +.TH EVP_blake2b512 3 "2018-09-23" "1.1.1i" "OpenSSL" .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. .if n .ad l diff --git a/crypto/external/bsd/openssl/lib/libcrypto/man/EVP_camellia.3 b/crypto/external/bsd/openssl/lib/libcrypto/man/EVP_camellia.3 index c08e6dbb9d2..3df0e06f12e 100644 --- a/crypto/external/bsd/openssl/lib/libcrypto/man/EVP_camellia.3 +++ b/crypto/external/bsd/openssl/lib/libcrypto/man/EVP_camellia.3 @@ -1,6 +1,6 @@ -.\" $NetBSD: EVP_camellia.3,v 1.2 2019/06/09 18:44:32 christos Exp $ +.\" $NetBSD: EVP_camellia.3,v 1.2.4.1 2021/03/28 18:21:48 martin Exp $ .\" -.\" Automatically generated by Pod::Man 4.10 (Pod::Simple 3.35) +.\" Automatically generated by Pod::Man 4.11 (Pod::Simple 3.35) .\" .\" Standard preamble: .\" ======================================================================== @@ -135,7 +135,7 @@ .\" ======================================================================== .\" .IX Title "EVP_camellia 3" -.TH EVP_camellia 3 "2018-12-08" "1.1.1c" "OpenSSL" +.TH EVP_camellia 3 "2018-12-08" "1.1.1i" "OpenSSL" .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. .if n .ad l diff --git a/crypto/external/bsd/openssl/lib/libcrypto/man/EVP_cast5_cbc.3 b/crypto/external/bsd/openssl/lib/libcrypto/man/EVP_cast5_cbc.3 index 0a0b4c1f1d9..73cc712b5d6 100644 --- a/crypto/external/bsd/openssl/lib/libcrypto/man/EVP_cast5_cbc.3 +++ b/crypto/external/bsd/openssl/lib/libcrypto/man/EVP_cast5_cbc.3 @@ -1,6 +1,6 @@ -.\" $NetBSD: EVP_cast5_cbc.3,v 1.2 2019/06/09 18:44:32 christos Exp $ +.\" $NetBSD: EVP_cast5_cbc.3,v 1.2.4.1 2021/03/28 18:21:48 martin Exp $ .\" -.\" Automatically generated by Pod::Man 4.10 (Pod::Simple 3.35) +.\" Automatically generated by Pod::Man 4.11 (Pod::Simple 3.35) .\" .\" Standard preamble: .\" ======================================================================== @@ -135,7 +135,7 @@ .\" ======================================================================== .\" .IX Title "EVP_cast5_cbc 3" -.TH EVP_cast5_cbc 3 "2018-12-08" "1.1.1c" "OpenSSL" +.TH EVP_cast5_cbc 3 "2018-12-08" "1.1.1i" "OpenSSL" .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. .if n .ad l diff --git a/crypto/external/bsd/openssl/lib/libcrypto/man/EVP_chacha20.3 b/crypto/external/bsd/openssl/lib/libcrypto/man/EVP_chacha20.3 index e86aaf1e0e4..ae44eb774dd 100644 --- a/crypto/external/bsd/openssl/lib/libcrypto/man/EVP_chacha20.3 +++ b/crypto/external/bsd/openssl/lib/libcrypto/man/EVP_chacha20.3 @@ -1,6 +1,6 @@ -.\" $NetBSD: EVP_chacha20.3,v 1.2 2019/06/09 18:44:32 christos Exp $ +.\" $NetBSD: EVP_chacha20.3,v 1.2.4.1 2021/03/28 18:21:48 martin Exp $ .\" -.\" Automatically generated by Pod::Man 4.10 (Pod::Simple 3.35) +.\" Automatically generated by Pod::Man 4.11 (Pod::Simple 3.35) .\" .\" Standard preamble: .\" ======================================================================== @@ -135,7 +135,7 @@ .\" ======================================================================== .\" .IX Title "EVP_chacha20 3" -.TH EVP_chacha20 3 "2019-06-09" "1.1.1c" "OpenSSL" +.TH EVP_chacha20 3 "2019-06-09" "1.1.1i" "OpenSSL" .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. .if n .ad l diff --git a/crypto/external/bsd/openssl/lib/libcrypto/man/EVP_des.3 b/crypto/external/bsd/openssl/lib/libcrypto/man/EVP_des.3 index d3943d39896..3097b53ccd0 100644 --- a/crypto/external/bsd/openssl/lib/libcrypto/man/EVP_des.3 +++ b/crypto/external/bsd/openssl/lib/libcrypto/man/EVP_des.3 @@ -1,6 +1,6 @@ -.\" $NetBSD: EVP_des.3,v 1.2 2019/06/09 18:44:32 christos Exp $ +.\" $NetBSD: EVP_des.3,v 1.2.4.1 2021/03/28 18:21:48 martin Exp $ .\" -.\" Automatically generated by Pod::Man 4.10 (Pod::Simple 3.35) +.\" Automatically generated by Pod::Man 4.11 (Pod::Simple 3.35) .\" .\" Standard preamble: .\" ======================================================================== @@ -135,7 +135,7 @@ .\" ======================================================================== .\" .IX Title "EVP_des 3" -.TH EVP_des 3 "2018-12-08" "1.1.1c" "OpenSSL" +.TH EVP_des 3 "2018-12-08" "1.1.1i" "OpenSSL" .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. .if n .ad l diff --git a/crypto/external/bsd/openssl/lib/libcrypto/man/EVP_desx_cbc.3 b/crypto/external/bsd/openssl/lib/libcrypto/man/EVP_desx_cbc.3 index 23f17b196f9..cdd67c4f6a8 100644 --- a/crypto/external/bsd/openssl/lib/libcrypto/man/EVP_desx_cbc.3 +++ b/crypto/external/bsd/openssl/lib/libcrypto/man/EVP_desx_cbc.3 @@ -1,6 +1,6 @@ -.\" $NetBSD: EVP_desx_cbc.3,v 1.2 2019/06/09 18:44:32 christos Exp $ +.\" $NetBSD: EVP_desx_cbc.3,v 1.2.4.1 2021/03/28 18:21:48 martin Exp $ .\" -.\" Automatically generated by Pod::Man 4.10 (Pod::Simple 3.35) +.\" Automatically generated by Pod::Man 4.11 (Pod::Simple 3.35) .\" .\" Standard preamble: .\" ======================================================================== @@ -135,7 +135,7 @@ .\" ======================================================================== .\" .IX Title "EVP_desx_cbc 3" -.TH EVP_desx_cbc 3 "2018-09-23" "1.1.1c" "OpenSSL" +.TH EVP_desx_cbc 3 "2018-09-23" "1.1.1i" "OpenSSL" .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. .if n .ad l diff --git a/crypto/external/bsd/openssl/lib/libcrypto/man/EVP_idea_cbc.3 b/crypto/external/bsd/openssl/lib/libcrypto/man/EVP_idea_cbc.3 index 16ccb0f1ae2..ff757af007b 100644 --- a/crypto/external/bsd/openssl/lib/libcrypto/man/EVP_idea_cbc.3 +++ b/crypto/external/bsd/openssl/lib/libcrypto/man/EVP_idea_cbc.3 @@ -1,6 +1,6 @@ -.\" $NetBSD: EVP_idea_cbc.3,v 1.2 2019/06/09 18:44:32 christos Exp $ +.\" $NetBSD: EVP_idea_cbc.3,v 1.2.4.1 2021/03/28 18:21:48 martin Exp $ .\" -.\" Automatically generated by Pod::Man 4.10 (Pod::Simple 3.35) +.\" Automatically generated by Pod::Man 4.11 (Pod::Simple 3.35) .\" .\" Standard preamble: .\" ======================================================================== @@ -135,7 +135,7 @@ .\" ======================================================================== .\" .IX Title "EVP_idea_cbc 3" -.TH EVP_idea_cbc 3 "2018-12-08" "1.1.1c" "OpenSSL" +.TH EVP_idea_cbc 3 "2018-12-08" "1.1.1i" "OpenSSL" .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. .if n .ad l diff --git a/crypto/external/bsd/openssl/lib/libcrypto/man/EVP_md2.3 b/crypto/external/bsd/openssl/lib/libcrypto/man/EVP_md2.3 index 8a8fbbc412a..05a2f84b5b3 100644 --- a/crypto/external/bsd/openssl/lib/libcrypto/man/EVP_md2.3 +++ b/crypto/external/bsd/openssl/lib/libcrypto/man/EVP_md2.3 @@ -1,6 +1,6 @@ -.\" $NetBSD: EVP_md2.3,v 1.2 2019/06/09 18:44:32 christos Exp $ +.\" $NetBSD: EVP_md2.3,v 1.2.4.1 2021/03/28 18:21:48 martin Exp $ .\" -.\" Automatically generated by Pod::Man 4.10 (Pod::Simple 3.35) +.\" Automatically generated by Pod::Man 4.11 (Pod::Simple 3.35) .\" .\" Standard preamble: .\" ======================================================================== @@ -135,7 +135,7 @@ .\" ======================================================================== .\" .IX Title "EVP_md2 3" -.TH EVP_md2 3 "2018-09-23" "1.1.1c" "OpenSSL" +.TH EVP_md2 3 "2018-09-23" "1.1.1i" "OpenSSL" .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. .if n .ad l diff --git a/crypto/external/bsd/openssl/lib/libcrypto/man/EVP_md4.3 b/crypto/external/bsd/openssl/lib/libcrypto/man/EVP_md4.3 index 415a0773460..7e5391710c3 100644 --- a/crypto/external/bsd/openssl/lib/libcrypto/man/EVP_md4.3 +++ b/crypto/external/bsd/openssl/lib/libcrypto/man/EVP_md4.3 @@ -1,6 +1,6 @@ -.\" $NetBSD: EVP_md4.3,v 1.2 2019/06/09 18:44:32 christos Exp $ +.\" $NetBSD: EVP_md4.3,v 1.2.4.1 2021/03/28 18:21:48 martin Exp $ .\" -.\" Automatically generated by Pod::Man 4.10 (Pod::Simple 3.35) +.\" Automatically generated by Pod::Man 4.11 (Pod::Simple 3.35) .\" .\" Standard preamble: .\" ======================================================================== @@ -135,7 +135,7 @@ .\" ======================================================================== .\" .IX Title "EVP_md4 3" -.TH EVP_md4 3 "2018-09-23" "1.1.1c" "OpenSSL" +.TH EVP_md4 3 "2018-09-23" "1.1.1i" "OpenSSL" .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. .if n .ad l diff --git a/crypto/external/bsd/openssl/lib/libcrypto/man/EVP_md5.3 b/crypto/external/bsd/openssl/lib/libcrypto/man/EVP_md5.3 index 01c98d8278b..5ebaeea9fe3 100644 --- a/crypto/external/bsd/openssl/lib/libcrypto/man/EVP_md5.3 +++ b/crypto/external/bsd/openssl/lib/libcrypto/man/EVP_md5.3 @@ -1,6 +1,6 @@ -.\" $NetBSD: EVP_md5.3,v 1.2 2019/06/09 18:44:32 christos Exp $ +.\" $NetBSD: EVP_md5.3,v 1.2.4.1 2021/03/28 18:21:48 martin Exp $ .\" -.\" Automatically generated by Pod::Man 4.10 (Pod::Simple 3.35) +.\" Automatically generated by Pod::Man 4.11 (Pod::Simple 3.35) .\" .\" Standard preamble: .\" ======================================================================== @@ -135,7 +135,7 @@ .\" ======================================================================== .\" .IX Title "EVP_md5 3" -.TH EVP_md5 3 "2018-12-08" "1.1.1c" "OpenSSL" +.TH EVP_md5 3 "2020-01-23" "1.1.1i" "OpenSSL" .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. .if n .ad l @@ -166,7 +166,7 @@ use since its security has been severely compromised. The \s-1MD5\s0 algorithm which produces a 128\-bit output from a given input. .IP "\fBEVP_md5_sha1()\fR" 4 .IX Item "EVP_md5_sha1()" -A hash algorithm of \s-1SSL\s0 v3 that combines \s-1MD5\s0 with \s-1SHA\-1\s0 as decirbed in \s-1RFC +A hash algorithm of \s-1SSL\s0 v3 that combines \s-1MD5\s0 with \s-1SHA\-1\s0 as described in \s-1RFC 6101.\s0 .Sp \&\s-1WARNING:\s0 this algorithm is not intended for non-SSL usage. @@ -184,7 +184,7 @@ details of the \fB\s-1EVP_MD\s0\fR structure. \&\fBEVP_DigestInit\fR\|(3) .SH "COPYRIGHT" .IX Header "COPYRIGHT" -Copyright 2017\-2018 The OpenSSL Project Authors. All Rights Reserved. +Copyright 2017\-2019 The OpenSSL Project Authors. All Rights Reserved. .PP Licensed under the OpenSSL license (the \*(L"License\*(R"). You may not use this file except in compliance with the License. You can obtain a copy diff --git a/crypto/external/bsd/openssl/lib/libcrypto/man/EVP_mdc2.3 b/crypto/external/bsd/openssl/lib/libcrypto/man/EVP_mdc2.3 index 1c3ab82622e..38e85ab8a0f 100644 --- a/crypto/external/bsd/openssl/lib/libcrypto/man/EVP_mdc2.3 +++ b/crypto/external/bsd/openssl/lib/libcrypto/man/EVP_mdc2.3 @@ -1,6 +1,6 @@ -.\" $NetBSD: EVP_mdc2.3,v 1.2 2019/06/09 18:44:32 christos Exp $ +.\" $NetBSD: EVP_mdc2.3,v 1.2.4.1 2021/03/28 18:21:48 martin Exp $ .\" -.\" Automatically generated by Pod::Man 4.10 (Pod::Simple 3.35) +.\" Automatically generated by Pod::Man 4.11 (Pod::Simple 3.35) .\" .\" Standard preamble: .\" ======================================================================== @@ -135,7 +135,7 @@ .\" ======================================================================== .\" .IX Title "EVP_mdc2 3" -.TH EVP_mdc2 3 "2018-09-23" "1.1.1c" "OpenSSL" +.TH EVP_mdc2 3 "2018-09-23" "1.1.1i" "OpenSSL" .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. .if n .ad l diff --git a/crypto/external/bsd/openssl/lib/libcrypto/man/EVP_rc2_cbc.3 b/crypto/external/bsd/openssl/lib/libcrypto/man/EVP_rc2_cbc.3 index b530cf98078..f885230acc4 100644 --- a/crypto/external/bsd/openssl/lib/libcrypto/man/EVP_rc2_cbc.3 +++ b/crypto/external/bsd/openssl/lib/libcrypto/man/EVP_rc2_cbc.3 @@ -1,6 +1,6 @@ -.\" $NetBSD: EVP_rc2_cbc.3,v 1.2 2019/06/09 18:44:32 christos Exp $ +.\" $NetBSD: EVP_rc2_cbc.3,v 1.2.4.1 2021/03/28 18:21:48 martin Exp $ .\" -.\" Automatically generated by Pod::Man 4.10 (Pod::Simple 3.35) +.\" Automatically generated by Pod::Man 4.11 (Pod::Simple 3.35) .\" .\" Standard preamble: .\" ======================================================================== @@ -135,7 +135,7 @@ .\" ======================================================================== .\" .IX Title "EVP_rc2_cbc 3" -.TH EVP_rc2_cbc 3 "2018-12-08" "1.1.1c" "OpenSSL" +.TH EVP_rc2_cbc 3 "2018-12-08" "1.1.1i" "OpenSSL" .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. .if n .ad l diff --git a/crypto/external/bsd/openssl/lib/libcrypto/man/EVP_rc4.3 b/crypto/external/bsd/openssl/lib/libcrypto/man/EVP_rc4.3 index 1177cc077e0..e2fa0571690 100644 --- a/crypto/external/bsd/openssl/lib/libcrypto/man/EVP_rc4.3 +++ b/crypto/external/bsd/openssl/lib/libcrypto/man/EVP_rc4.3 @@ -1,6 +1,6 @@ -.\" $NetBSD: EVP_rc4.3,v 1.2 2019/06/09 18:44:32 christos Exp $ +.\" $NetBSD: EVP_rc4.3,v 1.2.4.1 2021/03/28 18:21:48 martin Exp $ .\" -.\" Automatically generated by Pod::Man 4.10 (Pod::Simple 3.35) +.\" Automatically generated by Pod::Man 4.11 (Pod::Simple 3.35) .\" .\" Standard preamble: .\" ======================================================================== @@ -135,7 +135,7 @@ .\" ======================================================================== .\" .IX Title "EVP_rc4 3" -.TH EVP_rc4 3 "2018-09-23" "1.1.1c" "OpenSSL" +.TH EVP_rc4 3 "2018-09-23" "1.1.1i" "OpenSSL" .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. .if n .ad l diff --git a/crypto/external/bsd/openssl/lib/libcrypto/man/EVP_rc5_32_12_16_cbc.3 b/crypto/external/bsd/openssl/lib/libcrypto/man/EVP_rc5_32_12_16_cbc.3 index c75de443ec0..41e68cbf1ab 100644 --- a/crypto/external/bsd/openssl/lib/libcrypto/man/EVP_rc5_32_12_16_cbc.3 +++ b/crypto/external/bsd/openssl/lib/libcrypto/man/EVP_rc5_32_12_16_cbc.3 @@ -1,6 +1,6 @@ -.\" $NetBSD: EVP_rc5_32_12_16_cbc.3,v 1.2 2019/06/09 18:44:32 christos Exp $ +.\" $NetBSD: EVP_rc5_32_12_16_cbc.3,v 1.2.4.1 2021/03/28 18:21:48 martin Exp $ .\" -.\" Automatically generated by Pod::Man 4.10 (Pod::Simple 3.35) +.\" Automatically generated by Pod::Man 4.11 (Pod::Simple 3.35) .\" .\" Standard preamble: .\" ======================================================================== @@ -135,7 +135,7 @@ .\" ======================================================================== .\" .IX Title "EVP_rc5_32_12_16_cbc 3" -.TH EVP_rc5_32_12_16_cbc 3 "2018-12-08" "1.1.1c" "OpenSSL" +.TH EVP_rc5_32_12_16_cbc 3 "2020-01-23" "1.1.1i" "OpenSSL" .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. .if n .ad l @@ -167,16 +167,29 @@ The \s-1RC5\s0 encryption algorithm for \s-1EVP.\s0 .IX Item "EVP_rc5_32_12_16_cbc(), EVP_rc5_32_12_16_cfb(), EVP_rc5_32_12_16_cfb64(), EVP_rc5_32_12_16_ecb(), EVP_rc5_32_12_16_ofb()" \&\s-1RC5\s0 encryption algorithm in \s-1CBC, CFB, ECB\s0 and \s-1OFB\s0 modes respectively. This is a variable key length cipher with an additional \*(L"number of rounds\*(R" parameter. By -default the key length is set to 128 bits and 12 rounds. +default the key length is set to 128 bits and 12 rounds. Alternative key lengths +can be set using \fBEVP_CIPHER_CTX_set_key_length\fR\|(3). The maximum key length is +2040 bits. +.Sp +The following rc5 specific \fIctrl\fRs are supported (see +\&\fBEVP_CIPHER_CTX_ctrl\fR\|(3)). +.RS 4 +.IP "EVP_CIPHER_CTX_ctrl(ctx, \s-1EVP_CTRL_SET_RC5_ROUNDS,\s0 rounds, \s-1NULL\s0)" 4 +.IX Item "EVP_CIPHER_CTX_ctrl(ctx, EVP_CTRL_SET_RC5_ROUNDS, rounds, NULL)" +Sets the number of rounds to \fBrounds\fR. This must be one of \s-1RC5_8_ROUNDS, +RC5_12_ROUNDS\s0 or \s-1RC5_16_ROUNDS.\s0 +.IP "EVP_CIPHER_CTX_ctrl(ctx, \s-1EVP_CTRL_GET_RC5_ROUNDS, 0,\s0 &rounds)" 4 +.IX Item "EVP_CIPHER_CTX_ctrl(ctx, EVP_CTRL_GET_RC5_ROUNDS, 0, &rounds)" +Stores the number of rounds currently configured in \fB*rounds\fR where \fB*rounds\fR +is an int. +.RE +.RS 4 +.RE .SH "RETURN VALUES" .IX Header "RETURN VALUES" These functions return an \fB\s-1EVP_CIPHER\s0\fR structure that contains the implementation of the symmetric cipher. See \fBEVP_CIPHER_meth_new\fR\|(3) for details of the \fB\s-1EVP_CIPHER\s0\fR structure. -.SH "BUGS" -.IX Header "BUGS" -Currently the number of rounds in \s-1RC5\s0 can only be set to 8, 12 or 16. -This is a limitation of the current \s-1RC5\s0 code rather than the \s-1EVP\s0 interface. .SH "SEE ALSO" .IX Header "SEE ALSO" \&\fBevp\fR\|(7), @@ -184,7 +197,7 @@ This is a limitation of the current \s-1RC5\s0 code rather than the \s-1EVP\s0 i \&\fBEVP_CIPHER_meth_new\fR\|(3) .SH "COPYRIGHT" .IX Header "COPYRIGHT" -Copyright 2017\-2018 The OpenSSL Project Authors. All Rights Reserved. +Copyright 2017\-2019 The OpenSSL Project Authors. All Rights Reserved. .PP Licensed under the OpenSSL license (the \*(L"License\*(R"). You may not use this file except in compliance with the License. You can obtain a copy diff --git a/crypto/external/bsd/openssl/lib/libcrypto/man/EVP_ripemd160.3 b/crypto/external/bsd/openssl/lib/libcrypto/man/EVP_ripemd160.3 index a34722df78a..86a1a1c6c6d 100644 --- a/crypto/external/bsd/openssl/lib/libcrypto/man/EVP_ripemd160.3 +++ b/crypto/external/bsd/openssl/lib/libcrypto/man/EVP_ripemd160.3 @@ -1,6 +1,6 @@ -.\" $NetBSD: EVP_ripemd160.3,v 1.2 2019/06/09 18:44:32 christos Exp $ +.\" $NetBSD: EVP_ripemd160.3,v 1.2.4.1 2021/03/28 18:21:48 martin Exp $ .\" -.\" Automatically generated by Pod::Man 4.10 (Pod::Simple 3.35) +.\" Automatically generated by Pod::Man 4.11 (Pod::Simple 3.35) .\" .\" Standard preamble: .\" ======================================================================== @@ -135,7 +135,7 @@ .\" ======================================================================== .\" .IX Title "EVP_ripemd160 3" -.TH EVP_ripemd160 3 "2018-09-23" "1.1.1c" "OpenSSL" +.TH EVP_ripemd160 3 "2018-09-23" "1.1.1i" "OpenSSL" .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. .if n .ad l diff --git a/crypto/external/bsd/openssl/lib/libcrypto/man/EVP_seed_cbc.3 b/crypto/external/bsd/openssl/lib/libcrypto/man/EVP_seed_cbc.3 index f6fc468c93f..5d80210f998 100644 --- a/crypto/external/bsd/openssl/lib/libcrypto/man/EVP_seed_cbc.3 +++ b/crypto/external/bsd/openssl/lib/libcrypto/man/EVP_seed_cbc.3 @@ -1,6 +1,6 @@ -.\" $NetBSD: EVP_seed_cbc.3,v 1.2 2019/06/09 18:44:32 christos Exp $ +.\" $NetBSD: EVP_seed_cbc.3,v 1.2.4.1 2021/03/28 18:21:48 martin Exp $ .\" -.\" Automatically generated by Pod::Man 4.10 (Pod::Simple 3.35) +.\" Automatically generated by Pod::Man 4.11 (Pod::Simple 3.35) .\" .\" Standard preamble: .\" ======================================================================== @@ -135,7 +135,7 @@ .\" ======================================================================== .\" .IX Title "EVP_seed_cbc 3" -.TH EVP_seed_cbc 3 "2018-12-08" "1.1.1c" "OpenSSL" +.TH EVP_seed_cbc 3 "2018-12-08" "1.1.1i" "OpenSSL" .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. .if n .ad l diff --git a/crypto/external/bsd/openssl/lib/libcrypto/man/EVP_sha1.3 b/crypto/external/bsd/openssl/lib/libcrypto/man/EVP_sha1.3 index cee519eb35f..64d69d42d50 100644 --- a/crypto/external/bsd/openssl/lib/libcrypto/man/EVP_sha1.3 +++ b/crypto/external/bsd/openssl/lib/libcrypto/man/EVP_sha1.3 @@ -1,6 +1,6 @@ -.\" $NetBSD: EVP_sha1.3,v 1.2 2019/06/09 18:44:32 christos Exp $ +.\" $NetBSD: EVP_sha1.3,v 1.2.4.1 2021/03/28 18:21:48 martin Exp $ .\" -.\" Automatically generated by Pod::Man 4.10 (Pod::Simple 3.35) +.\" Automatically generated by Pod::Man 4.11 (Pod::Simple 3.35) .\" .\" Standard preamble: .\" ======================================================================== @@ -135,7 +135,7 @@ .\" ======================================================================== .\" .IX Title "EVP_sha1 3" -.TH EVP_sha1 3 "2018-09-23" "1.1.1c" "OpenSSL" +.TH EVP_sha1 3 "2018-09-23" "1.1.1i" "OpenSSL" .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. .if n .ad l diff --git a/crypto/external/bsd/openssl/lib/libcrypto/man/EVP_sha224.3 b/crypto/external/bsd/openssl/lib/libcrypto/man/EVP_sha224.3 index aa089600242..aa3b05aa152 100644 --- a/crypto/external/bsd/openssl/lib/libcrypto/man/EVP_sha224.3 +++ b/crypto/external/bsd/openssl/lib/libcrypto/man/EVP_sha224.3 @@ -1,6 +1,6 @@ -.\" $NetBSD: EVP_sha224.3,v 1.2 2019/06/09 18:44:32 christos Exp $ +.\" $NetBSD: EVP_sha224.3,v 1.2.4.1 2021/03/28 18:21:48 martin Exp $ .\" -.\" Automatically generated by Pod::Man 4.10 (Pod::Simple 3.35) +.\" Automatically generated by Pod::Man 4.11 (Pod::Simple 3.35) .\" .\" Standard preamble: .\" ======================================================================== @@ -135,7 +135,7 @@ .\" ======================================================================== .\" .IX Title "EVP_sha224 3" -.TH EVP_sha224 3 "2018-09-23" "1.1.1c" "OpenSSL" +.TH EVP_sha224 3 "2018-09-23" "1.1.1i" "OpenSSL" .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. .if n .ad l diff --git a/crypto/external/bsd/openssl/lib/libcrypto/man/EVP_sha3_224.3 b/crypto/external/bsd/openssl/lib/libcrypto/man/EVP_sha3_224.3 index 396d1347e0e..b4218457e69 100644 --- a/crypto/external/bsd/openssl/lib/libcrypto/man/EVP_sha3_224.3 +++ b/crypto/external/bsd/openssl/lib/libcrypto/man/EVP_sha3_224.3 @@ -1,6 +1,6 @@ -.\" $NetBSD: EVP_sha3_224.3,v 1.2 2019/06/09 18:44:32 christos Exp $ +.\" $NetBSD: EVP_sha3_224.3,v 1.2.4.1 2021/03/28 18:21:48 martin Exp $ .\" -.\" Automatically generated by Pod::Man 4.10 (Pod::Simple 3.35) +.\" Automatically generated by Pod::Man 4.11 (Pod::Simple 3.35) .\" .\" Standard preamble: .\" ======================================================================== @@ -135,7 +135,7 @@ .\" ======================================================================== .\" .IX Title "EVP_sha3_224 3" -.TH EVP_sha3_224 3 "2018-09-23" "1.1.1c" "OpenSSL" +.TH EVP_sha3_224 3 "2018-09-23" "1.1.1i" "OpenSSL" .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. .if n .ad l diff --git a/crypto/external/bsd/openssl/lib/libcrypto/man/EVP_sm3.3 b/crypto/external/bsd/openssl/lib/libcrypto/man/EVP_sm3.3 index d39e42135e1..15cdb0d8b7e 100644 --- a/crypto/external/bsd/openssl/lib/libcrypto/man/EVP_sm3.3 +++ b/crypto/external/bsd/openssl/lib/libcrypto/man/EVP_sm3.3 @@ -1,6 +1,6 @@ -.\" $NetBSD: EVP_sm3.3,v 1.2 2019/06/09 18:44:32 christos Exp $ +.\" $NetBSD: EVP_sm3.3,v 1.2.4.1 2021/03/28 18:21:48 martin Exp $ .\" -.\" Automatically generated by Pod::Man 4.10 (Pod::Simple 3.35) +.\" Automatically generated by Pod::Man 4.11 (Pod::Simple 3.35) .\" .\" Standard preamble: .\" ======================================================================== @@ -135,7 +135,7 @@ .\" ======================================================================== .\" .IX Title "EVP_sm3 3" -.TH EVP_sm3 3 "2018-09-23" "1.1.1c" "OpenSSL" +.TH EVP_sm3 3 "2018-09-23" "1.1.1i" "OpenSSL" .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. .if n .ad l diff --git a/crypto/external/bsd/openssl/lib/libcrypto/man/EVP_sm4_cbc.3 b/crypto/external/bsd/openssl/lib/libcrypto/man/EVP_sm4_cbc.3 index 455d383ba8b..f3efb4a9a65 100644 --- a/crypto/external/bsd/openssl/lib/libcrypto/man/EVP_sm4_cbc.3 +++ b/crypto/external/bsd/openssl/lib/libcrypto/man/EVP_sm4_cbc.3 @@ -1,6 +1,6 @@ -.\" $NetBSD: EVP_sm4_cbc.3,v 1.2 2019/06/09 18:44:32 christos Exp $ +.\" $NetBSD: EVP_sm4_cbc.3,v 1.2.4.1 2021/03/28 18:21:48 martin Exp $ .\" -.\" Automatically generated by Pod::Man 4.10 (Pod::Simple 3.35) +.\" Automatically generated by Pod::Man 4.11 (Pod::Simple 3.35) .\" .\" Standard preamble: .\" ======================================================================== @@ -135,7 +135,7 @@ .\" ======================================================================== .\" .IX Title "EVP_sm4_cbc 3" -.TH EVP_sm4_cbc 3 "2018-12-08" "1.1.1c" "OpenSSL" +.TH EVP_sm4_cbc 3 "2018-12-08" "1.1.1i" "OpenSSL" .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. .if n .ad l diff --git a/crypto/external/bsd/openssl/lib/libcrypto/man/EVP_whirlpool.3 b/crypto/external/bsd/openssl/lib/libcrypto/man/EVP_whirlpool.3 index d219a44461a..0ca65bc24ec 100644 --- a/crypto/external/bsd/openssl/lib/libcrypto/man/EVP_whirlpool.3 +++ b/crypto/external/bsd/openssl/lib/libcrypto/man/EVP_whirlpool.3 @@ -1,6 +1,6 @@ -.\" $NetBSD: EVP_whirlpool.3,v 1.2 2019/06/09 18:44:32 christos Exp $ +.\" $NetBSD: EVP_whirlpool.3,v 1.2.4.1 2021/03/28 18:21:48 martin Exp $ .\" -.\" Automatically generated by Pod::Man 4.10 (Pod::Simple 3.35) +.\" Automatically generated by Pod::Man 4.11 (Pod::Simple 3.35) .\" .\" Standard preamble: .\" ======================================================================== @@ -135,7 +135,7 @@ .\" ======================================================================== .\" .IX Title "EVP_whirlpool 3" -.TH EVP_whirlpool 3 "2018-09-23" "1.1.1c" "OpenSSL" +.TH EVP_whirlpool 3 "2018-09-23" "1.1.1i" "OpenSSL" .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. .if n .ad l diff --git a/crypto/external/bsd/openssl/lib/libcrypto/man/Ed25519.7 b/crypto/external/bsd/openssl/lib/libcrypto/man/Ed25519.7 index 0dad89e964a..4e20d8f6375 100644 --- a/crypto/external/bsd/openssl/lib/libcrypto/man/Ed25519.7 +++ b/crypto/external/bsd/openssl/lib/libcrypto/man/Ed25519.7 @@ -1,6 +1,6 @@ -.\" $NetBSD: Ed25519.7,v 1.2 2019/06/09 18:44:32 christos Exp $ +.\" $NetBSD: Ed25519.7,v 1.2.4.1 2021/03/28 18:21:48 martin Exp $ .\" -.\" Automatically generated by Pod::Man 4.10 (Pod::Simple 3.35) +.\" Automatically generated by Pod::Man 4.11 (Pod::Simple 3.35) .\" .\" Standard preamble: .\" ======================================================================== @@ -135,7 +135,7 @@ .\" ======================================================================== .\" .IX Title "ED25519 7" -.TH ED25519 7 "2018-09-23" "1.1.1c" "OpenSSL" +.TH ED25519 7 "2020-03-22" "1.1.1i" "OpenSSL" .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. .if n .ad l @@ -149,7 +149,7 @@ Ed448 The \fBEd25519\fR and \fBEd448\fR \s-1EVP_PKEY\s0 implementation supports key generation, one-shot digest sign and digest verify using PureEdDSA and \fBEd25519\fR or \fBEd448\fR (see \s-1RFC8032\s0). It has associated private and public key formats compatible with -draft\-ietf\-curdle\-pkix\-04. +\&\s-1RFC 8410.\s0 .PP No additional parameters can be set during key generation, one-shot signing or verification. In particular, because PureEdDSA is used, a digest must \fB\s-1NOT\s0\fR be @@ -193,8 +193,8 @@ structure in a \s-1PEM\s0 file using \fBPEM_read_bio_PUBKEY\fR\|(3) (or similar Ed25519 and Ed448 can be tested within \fBspeed\fR\|(1) application since version 1.1.1. Valid algorithm names are \fBed25519\fR, \fBed448\fR and \fBeddsa\fR. If \fBeddsa\fR is specified, then both Ed25519 and Ed448 are benchmarked. -.SH "EXAMPLE" -.IX Header "EXAMPLE" +.SH "EXAMPLES" +.IX Header "EXAMPLES" This example generates an \fB\s-1ED25519\s0\fR private key and writes it to standard output in \s-1PEM\s0 format: .PP @@ -217,7 +217,7 @@ output in \s-1PEM\s0 format: \&\fBEVP_DigestVerifyInit\fR\|(3), .SH "COPYRIGHT" .IX Header "COPYRIGHT" -Copyright 2017\-2018 The OpenSSL Project Authors. All Rights Reserved. +Copyright 2017\-2020 The OpenSSL Project Authors. All Rights Reserved. .PP Licensed under the OpenSSL license (the \*(L"License\*(R"). You may not use this file except in compliance with the License. You can obtain a copy diff --git a/crypto/external/bsd/openssl/lib/libcrypto/man/HMAC.3 b/crypto/external/bsd/openssl/lib/libcrypto/man/HMAC.3 index 4109ba0b2cf..568c3b1b66c 100644 --- a/crypto/external/bsd/openssl/lib/libcrypto/man/HMAC.3 +++ b/crypto/external/bsd/openssl/lib/libcrypto/man/HMAC.3 @@ -1,6 +1,6 @@ -.\" $NetBSD: HMAC.3,v 1.4 2019/06/09 18:44:32 christos Exp $ +.\" $NetBSD: HMAC.3,v 1.4.4.1 2021/03/28 18:21:48 martin Exp $ .\" -.\" Automatically generated by Pod::Man 4.10 (Pod::Simple 3.35) +.\" Automatically generated by Pod::Man 4.11 (Pod::Simple 3.35) .\" .\" Standard preamble: .\" ======================================================================== @@ -135,7 +135,7 @@ .\" ======================================================================== .\" .IX Title "HMAC 3" -.TH HMAC 3 "2019-06-09" "1.1.1c" "OpenSSL" +.TH HMAC 3 "2020-12-10" "1.1.1i" "OpenSSL" .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. .if n .ad l @@ -162,7 +162,7 @@ libcrypto, -lcrypto \& #include <openssl/hmac.h> \& \& unsigned char *HMAC(const EVP_MD *evp_md, const void *key, -\& int key_len, const unsigned char *d, int n, +\& int key_len, const unsigned char *d, size_t n, \& unsigned char *md, unsigned int *md_len); \& \& HMAC_CTX *HMAC_CTX_new(void); @@ -170,7 +170,7 @@ libcrypto, -lcrypto \& \& int HMAC_Init_ex(HMAC_CTX *ctx, const void *key, int key_len, \& const EVP_MD *md, ENGINE *impl); -\& int HMAC_Update(HMAC_CTX *ctx, const unsigned char *data, int len); +\& int HMAC_Update(HMAC_CTX *ctx, const unsigned char *data, size_t len); \& int HMAC_Final(HMAC_CTX *ctx, unsigned char *md, unsigned int *len); \& \& void HMAC_CTX_free(HMAC_CTX *ctx); @@ -212,7 +212,7 @@ not support variable output length digests such as \fBEVP_shake128()\fR and .PP \&\fBHMAC_CTX_new()\fR creates a new \s-1HMAC_CTX\s0 in heap memory. .PP -\&\fBHMAC_CTX_reset()\fR zeroes an existing \fB\s-1HMAC_CTX\s0\fR and associated +\&\fBHMAC_CTX_reset()\fR zeros an existing \fB\s-1HMAC_CTX\s0\fR and associated resources, making it suitable for new computations as if it was newly created with \fBHMAC_CTX_new()\fR. .PP @@ -287,7 +287,7 @@ or zero on error. OpenSSL before version 1.0.0. .SH "COPYRIGHT" .IX Header "COPYRIGHT" -Copyright 2000\-2019 The OpenSSL Project Authors. All Rights Reserved. +Copyright 2000\-2020 The OpenSSL Project Authors. All Rights Reserved. .PP Licensed under the OpenSSL license (the \*(L"License\*(R"). You may not use this file except in compliance with the License. You can obtain a copy diff --git a/crypto/external/bsd/openssl/lib/libcrypto/man/MD5.3 b/crypto/external/bsd/openssl/lib/libcrypto/man/MD5.3 index 136f418588f..ad4d26bc8bd 100644 --- a/crypto/external/bsd/openssl/lib/libcrypto/man/MD5.3 +++ b/crypto/external/bsd/openssl/lib/libcrypto/man/MD5.3 @@ -1,6 +1,6 @@ -.\" $NetBSD: MD5.3,v 1.4 2019/06/09 18:44:32 christos Exp $ +.\" $NetBSD: MD5.3,v 1.4.4.1 2021/03/28 18:21:48 martin Exp $ .\" -.\" Automatically generated by Pod::Man 4.10 (Pod::Simple 3.35) +.\" Automatically generated by Pod::Man 4.11 (Pod::Simple 3.35) .\" .\" Standard preamble: .\" ======================================================================== @@ -135,7 +135,7 @@ .\" ======================================================================== .\" .IX Title "MD5 3" -.TH MD5 3 "2018-09-23" "1.1.1c" "OpenSSL" +.TH MD5 3 "2018-09-23" "1.1.1i" "OpenSSL" .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. .if n .ad l diff --git a/crypto/external/bsd/openssl/lib/libcrypto/man/MDC2_Init.3 b/crypto/external/bsd/openssl/lib/libcrypto/man/MDC2_Init.3 index 8954dfe9582..05fd784cda2 100644 --- a/crypto/external/bsd/openssl/lib/libcrypto/man/MDC2_Init.3 +++ b/crypto/external/bsd/openssl/lib/libcrypto/man/MDC2_Init.3 @@ -1,6 +1,6 @@ -.\" $NetBSD: MDC2_Init.3,v 1.3 2019/06/09 18:44:32 christos Exp $ +.\" $NetBSD: MDC2_Init.3,v 1.3.2.1 2021/03/28 18:21:48 martin Exp $ .\" -.\" Automatically generated by Pod::Man 4.10 (Pod::Simple 3.35) +.\" Automatically generated by Pod::Man 4.11 (Pod::Simple 3.35) .\" .\" Standard preamble: .\" ======================================================================== @@ -135,7 +135,7 @@ .\" ======================================================================== .\" .IX Title "MDC2_Init 3" -.TH MDC2_Init 3 "2018-09-23" "1.1.1c" "OpenSSL" +.TH MDC2_Init 3 "2018-09-23" "1.1.1i" "OpenSSL" .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. .if n .ad l diff --git a/crypto/external/bsd/openssl/lib/libcrypto/man/OBJ_nid2obj.3 b/crypto/external/bsd/openssl/lib/libcrypto/man/OBJ_nid2obj.3 index d14c86cba64..c42c18c44ed 100644 --- a/crypto/external/bsd/openssl/lib/libcrypto/man/OBJ_nid2obj.3 +++ b/crypto/external/bsd/openssl/lib/libcrypto/man/OBJ_nid2obj.3 @@ -1,6 +1,6 @@ -.\" $NetBSD: OBJ_nid2obj.3,v 1.19 2019/06/09 18:44:32 christos Exp $ +.\" $NetBSD: OBJ_nid2obj.3,v 1.19.2.1 2021/03/28 18:21:48 martin Exp $ .\" -.\" Automatically generated by Pod::Man 4.10 (Pod::Simple 3.35) +.\" Automatically generated by Pod::Man 4.11 (Pod::Simple 3.35) .\" .\" Standard preamble: .\" ======================================================================== @@ -135,7 +135,7 @@ .\" ======================================================================== .\" .IX Title "OBJ_nid2obj 3" -.TH OBJ_nid2obj 3 "2019-06-09" "1.1.1c" "OpenSSL" +.TH OBJ_nid2obj 3 "2019-06-09" "1.1.1i" "OpenSSL" .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. .if n .ad l diff --git a/crypto/external/bsd/openssl/lib/libcrypto/man/OCSP_REQUEST_new.3 b/crypto/external/bsd/openssl/lib/libcrypto/man/OCSP_REQUEST_new.3 index 3fc60fcc893..1a40dd7cd3a 100644 --- a/crypto/external/bsd/openssl/lib/libcrypto/man/OCSP_REQUEST_new.3 +++ b/crypto/external/bsd/openssl/lib/libcrypto/man/OCSP_REQUEST_new.3 @@ -1,6 +1,6 @@ -.\" $NetBSD: OCSP_REQUEST_new.3,v 1.3 2019/06/09 18:44:32 christos Exp $ +.\" $NetBSD: OCSP_REQUEST_new.3,v 1.3.2.1 2021/03/28 18:21:48 martin Exp $ .\" -.\" Automatically generated by Pod::Man 4.10 (Pod::Simple 3.35) +.\" Automatically generated by Pod::Man 4.11 (Pod::Simple 3.35) .\" .\" Standard preamble: .\" ======================================================================== @@ -135,7 +135,7 @@ .\" ======================================================================== .\" .IX Title "OCSP_REQUEST_new 3" -.TH OCSP_REQUEST_new 3 "2018-09-23" "1.1.1c" "OpenSSL" +.TH OCSP_REQUEST_new 3 "2020-01-23" "1.1.1i" "OpenSSL" .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. .if n .ad l @@ -213,8 +213,8 @@ corresponding to each certificate. .PP \&\fBOCSP_request_onereq_count()\fR and \fBOCSP_request_onereq_get0()\fR are mainly used by \&\s-1OCSP\s0 responders. -.SH "EXAMPLE" -.IX Header "EXAMPLE" +.SH "EXAMPLES" +.IX Header "EXAMPLES" Create an \fB\s-1OCSP_REQUEST\s0\fR structure for certificate \fBcert\fR with issuer \&\fBissuer\fR: .PP @@ -246,7 +246,7 @@ Create an \fB\s-1OCSP_REQUEST\s0\fR structure for certificate \fBcert\fR with is \&\fBOCSP_sendreq_new\fR\|(3) .SH "COPYRIGHT" .IX Header "COPYRIGHT" -Copyright 2015\-2016 The OpenSSL Project Authors. All Rights Reserved. +Copyright 2015\-2019 The OpenSSL Project Authors. All Rights Reserved. .PP Licensed under the OpenSSL license (the \*(L"License\*(R"). You may not use this file except in compliance with the License. You can obtain a copy diff --git a/crypto/external/bsd/openssl/lib/libcrypto/man/OCSP_cert_to_id.3 b/crypto/external/bsd/openssl/lib/libcrypto/man/OCSP_cert_to_id.3 index 600c142d009..27e6f58e5c2 100644 --- a/crypto/external/bsd/openssl/lib/libcrypto/man/OCSP_cert_to_id.3 +++ b/crypto/external/bsd/openssl/lib/libcrypto/man/OCSP_cert_to_id.3 @@ -1,6 +1,6 @@ -.\" $NetBSD: OCSP_cert_to_id.3,v 1.3 2019/06/09 18:44:32 christos Exp $ +.\" $NetBSD: OCSP_cert_to_id.3,v 1.3.2.1 2021/03/28 18:21:48 martin Exp $ .\" -.\" Automatically generated by Pod::Man 4.10 (Pod::Simple 3.35) +.\" Automatically generated by Pod::Man 4.11 (Pod::Simple 3.35) .\" .\" Standard preamble: .\" ======================================================================== @@ -135,7 +135,7 @@ .\" ======================================================================== .\" .IX Title "OCSP_cert_to_id 3" -.TH OCSP_cert_to_id 3 "2019-06-09" "1.1.1c" "OpenSSL" +.TH OCSP_cert_to_id 3 "2020-12-10" "1.1.1i" "OpenSSL" .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. .if n .ad l @@ -191,7 +191,7 @@ corresponding parameter can be set to \fB\s-1NULL\s0\fR. \&\fBOCSP_cert_to_id()\fR and \fBOCSP_cert_id_new()\fR return either a pointer to a valid \&\fB\s-1OCSP_CERTID\s0\fR structure or \fB\s-1NULL\s0\fR if an error occurred. .PP -\&\fBOCSP_id_cmp()\fR and \fBOCSP_id_issuer_cmp()\fR returns zero for a match and non-zero +\&\fBOCSP_id_cmp()\fR and \fBOCSP_id_issuer_cmp()\fR returns zero for a match and nonzero otherwise. .PP \&\fBOCSP_CERTID_free()\fR does not return a value. @@ -215,7 +215,7 @@ NOT\s0\fR be freed up by an application: they will be freed when the correspondi \&\fBOCSP_sendreq_new\fR\|(3) .SH "COPYRIGHT" .IX Header "COPYRIGHT" -Copyright 2015\-2019 The OpenSSL Project Authors. All Rights Reserved. +Copyright 2015\-2020 The OpenSSL Project Authors. All Rights Reserved. .PP Licensed under the OpenSSL license (the \*(L"License\*(R"). You may not use this file except in compliance with the License. You can obtain a copy diff --git a/crypto/external/bsd/openssl/lib/libcrypto/man/OCSP_request_add1_nonce.3 b/crypto/external/bsd/openssl/lib/libcrypto/man/OCSP_request_add1_nonce.3 index abbbffc9320..9de02486046 100644 --- a/crypto/external/bsd/openssl/lib/libcrypto/man/OCSP_request_add1_nonce.3 +++ b/crypto/external/bsd/openssl/lib/libcrypto/man/OCSP_request_add1_nonce.3 @@ -1,6 +1,6 @@ -.\" $NetBSD: OCSP_request_add1_nonce.3,v 1.3 2019/06/09 18:44:32 christos Exp $ +.\" $NetBSD: OCSP_request_add1_nonce.3,v 1.3.2.1 2021/03/28 18:21:48 martin Exp $ .\" -.\" Automatically generated by Pod::Man 4.10 (Pod::Simple 3.35) +.\" Automatically generated by Pod::Man 4.11 (Pod::Simple 3.35) .\" .\" Standard preamble: .\" ======================================================================== @@ -135,7 +135,7 @@ .\" ======================================================================== .\" .IX Title "OCSP_request_add1_nonce 3" -.TH OCSP_request_add1_nonce 3 "2018-09-23" "1.1.1c" "OpenSSL" +.TH OCSP_request_add1_nonce 3 "2020-12-10" "1.1.1i" "OpenSSL" .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. .if n .ad l @@ -165,7 +165,7 @@ it adds a nonce to \s-1OCSP\s0 basic response \fBresp\fR. .PP \&\fBOCSP_check_nonce()\fR compares the nonce value in \fBreq\fR and \fBresp\fR. .PP -\&\fBOCSP_copy_nonce()\fR copys any nonce value present in \fBreq\fR to \fBresp\fR. +\&\fBOCSP_copy_nonce()\fR copies any nonce value present in \fBreq\fR to \fBresp\fR. .SH "RETURN VALUES" .IX Header "RETURN VALUES" \&\fBOCSP_request_add1_nonce()\fR and \fBOCSP_basic_add1_nonce()\fR return 1 for success @@ -196,7 +196,7 @@ performance reasons. As a result they do not support nonces. .PP The return values of \fBOCSP_check_nonce()\fR can be checked to cover each case. A positive return value effectively indicates success: nonces are both present -and match, both absent or present in the response only. A non-zero return +and match, both absent or present in the response only. A nonzero return additionally covers the case where the nonce is present in the request only: this will happen if the responder doesn't support nonces. A zero return value indicates present and mismatched nonces: this should be treated as an error @@ -211,7 +211,7 @@ condition. \&\fBOCSP_sendreq_new\fR\|(3) .SH "COPYRIGHT" .IX Header "COPYRIGHT" -Copyright 2015\-2016 The OpenSSL Project Authors. All Rights Reserved. +Copyright 2015\-2020 The OpenSSL Project Authors. All Rights Reserved. .PP Licensed under the OpenSSL license (the \*(L"License\*(R"). You may not use this file except in compliance with the License. You can obtain a copy diff --git a/crypto/external/bsd/openssl/lib/libcrypto/man/OCSP_resp_find_status.3 b/crypto/external/bsd/openssl/lib/libcrypto/man/OCSP_resp_find_status.3 index d6f9f2c264a..b9e3319ee56 100644 --- a/crypto/external/bsd/openssl/lib/libcrypto/man/OCSP_resp_find_status.3 +++ b/crypto/external/bsd/openssl/lib/libcrypto/man/OCSP_resp_find_status.3 @@ -1,6 +1,6 @@ -.\" $NetBSD: OCSP_resp_find_status.3,v 1.3 2019/06/09 18:44:32 christos Exp $ +.\" $NetBSD: OCSP_resp_find_status.3,v 1.3.2.1 2021/03/28 18:21:48 martin Exp $ .\" -.\" Automatically generated by Pod::Man 4.10 (Pod::Simple 3.35) +.\" Automatically generated by Pod::Man 4.11 (Pod::Simple 3.35) .\" .\" Standard preamble: .\" ======================================================================== @@ -135,7 +135,7 @@ .\" ======================================================================== .\" .IX Title "OCSP_resp_find_status 3" -.TH OCSP_resp_find_status 3 "2018-09-23" "1.1.1c" "OpenSSL" +.TH OCSP_resp_find_status 3 "2020-12-10" "1.1.1i" "OpenSSL" .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. .if n .ad l @@ -253,7 +253,7 @@ no freeing of the results is necessary. .PP \&\fBOCSP_check_validity()\fR checks the validity of \fBthisupd\fR and \fBnextupd\fR values which will be typically obtained from \fBOCSP_resp_find_status()\fR or -\&\fBOCSP_single_get0_status()\fR. If \fBsec\fR is non-zero it indicates how many seconds +\&\fBOCSP_single_get0_status()\fR. If \fBsec\fR is nonzero it indicates how many seconds leeway should be allowed in the check. If \fBmaxsec\fR is positive it indicates the maximum age of \fBthisupd\fR in seconds. .PP @@ -306,7 +306,7 @@ can then take appropriate action based on the status of the certificate. .PP An \s-1OCSP\s0 response for a certificate contains \fBthisUpdate\fR and \fBnextUpdate\fR fields. Normally the current time should be between these two values. To -account for clock skew the \fBmaxsec\fR field can be set to non-zero in +account for clock skew the \fBmaxsec\fR field can be set to nonzero in \&\fBOCSP_check_validity()\fR. Some responders do not set the \fBnextUpdate\fR field, this would otherwise mean an ancient response would be considered valid: the \&\fBmaxsec\fR parameter to \fBOCSP_check_validity()\fR can be used to limit the permitted @@ -326,7 +326,7 @@ parameters can be set to \s-1NULL\s0 if their value is not required. \&\fBOCSP_sendreq_new\fR\|(3) .SH "COPYRIGHT" .IX Header "COPYRIGHT" -Copyright 2015\-2018 The OpenSSL Project Authors. All Rights Reserved. +Copyright 2015\-2020 The OpenSSL Project Authors. All Rights Reserved. .PP Licensed under the OpenSSL license (the \*(L"License\*(R"). You may not use this file except in compliance with the License. You can obtain a copy diff --git a/crypto/external/bsd/openssl/lib/libcrypto/man/OCSP_response_status.3 b/crypto/external/bsd/openssl/lib/libcrypto/man/OCSP_response_status.3 index 10ee1a8abf1..2ddbf022ee3 100644 --- a/crypto/external/bsd/openssl/lib/libcrypto/man/OCSP_response_status.3 +++ b/crypto/external/bsd/openssl/lib/libcrypto/man/OCSP_response_status.3 @@ -1,6 +1,6 @@ -.\" $NetBSD: OCSP_response_status.3,v 1.3 2019/06/09 18:44:32 christos Exp $ +.\" $NetBSD: OCSP_response_status.3,v 1.3.2.1 2021/03/28 18:21:48 martin Exp $ .\" -.\" Automatically generated by Pod::Man 4.10 (Pod::Simple 3.35) +.\" Automatically generated by Pod::Man 4.11 (Pod::Simple 3.35) .\" .\" Standard preamble: .\" ======================================================================== @@ -135,7 +135,7 @@ .\" ======================================================================== .\" .IX Title "OCSP_response_status 3" -.TH OCSP_response_status 3 "2018-09-23" "1.1.1c" "OpenSSL" +.TH OCSP_response_status 3 "2020-03-22" "1.1.1i" "OpenSSL" .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. .if n .ad l @@ -199,7 +199,7 @@ with the X509 certificate \fBcert\fR. .PP \&\fBOCSP_basic_sign()\fR signs \s-1OCSP\s0 response \fBbrsp\fR using certificate \fBsigner\fR, private key \&\fBkey\fR, digest \fBdgst\fR and additional certificates \fBcerts\fR. If the \fBflags\fR option -\&\fB\s-1OCSP_NOCERTS\s0\fR is set then no certificates will be included in the request. If the +\&\fB\s-1OCSP_NOCERTS\s0\fR is set then no certificates will be included in the response. If the \&\fBflags\fR option \fB\s-1OCSP_RESPID_KEY\s0\fR is set then the responder is identified by key \s-1ID\s0 rather than by name. \fBOCSP_basic_sign_ctx()\fR also signs \s-1OCSP\s0 response \fBbrsp\fR but uses the parameters contained in digest context \fBctx\fR. @@ -243,7 +243,7 @@ functions were added in OpenSSL 1.1.0a. The \fBOCSP_basic_sign_ctx()\fR function was added in OpenSSL 1.1.1. .SH "COPYRIGHT" .IX Header "COPYRIGHT" -Copyright 2015\-2018 The OpenSSL Project Authors. All Rights Reserved. +Copyright 2015\-2020 The OpenSSL Project Authors. All Rights Reserved. .PP Licensed under the OpenSSL license (the \*(L"License\*(R"). You may not use this file except in compliance with the License. You can obtain a copy diff --git a/crypto/external/bsd/openssl/lib/libcrypto/man/OCSP_sendreq_new.3 b/crypto/external/bsd/openssl/lib/libcrypto/man/OCSP_sendreq_new.3 index 158f614e4e6..de95b832348 100644 --- a/crypto/external/bsd/openssl/lib/libcrypto/man/OCSP_sendreq_new.3 +++ b/crypto/external/bsd/openssl/lib/libcrypto/man/OCSP_sendreq_new.3 @@ -1,6 +1,6 @@ -.\" $NetBSD: OCSP_sendreq_new.3,v 1.3 2019/06/09 18:44:32 christos Exp $ +.\" $NetBSD: OCSP_sendreq_new.3,v 1.3.2.1 2021/03/28 18:21:48 martin Exp $ .\" -.\" Automatically generated by Pod::Man 4.10 (Pod::Simple 3.35) +.\" Automatically generated by Pod::Man 4.11 (Pod::Simple 3.35) .\" .\" Standard preamble: .\" ======================================================================== @@ -135,7 +135,7 @@ .\" ======================================================================== .\" .IX Title "OCSP_sendreq_new 3" -.TH OCSP_sendreq_new 3 "2018-09-23" "1.1.1c" "OpenSSL" +.TH OCSP_sendreq_new 3 "2020-12-10" "1.1.1i" "OpenSSL" .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. .if n .ad l @@ -165,8 +165,7 @@ libcrypto, -lcrypto \& \& int OCSP_REQ_CTX_set1_req(OCSP_REQ_CTX *rctx, OCSP_REQUEST *req); \& -\& OCSP_RESPONSE *OCSP_sendreq_bio(BIO *io, const char *path, OCSP_REQUEST *req, -\& int maxline); +\& OCSP_RESPONSE *OCSP_sendreq_bio(BIO *io, const char *path, OCSP_REQUEST *req); .Ve .SH "DESCRIPTION" .IX Header "DESCRIPTION" @@ -176,7 +175,7 @@ response header maximum line length of \fBmaxline\fR. If \fBmaxline\fR is zero a default value of 4k is used. The \s-1OCSP\s0 request \fBreq\fR may be set to \fB\s-1NULL\s0\fR and provided later if required. .PP -\&\fBOCSP_sendreq_nbio()\fR performs non-blocking I/O on the \s-1OCSP\s0 request context +\&\fBOCSP_sendreq_nbio()\fR performs nonblocking I/O on the \s-1OCSP\s0 request context \&\fBrctx\fR. When the operation is complete it returns the response in \fB*presp\fR. .PP \&\fBOCSP_REQ_CTX_free()\fR frees up the \s-1OCSP\s0 context \fBrctx\fR. @@ -195,8 +194,8 @@ additional headers are set. function should be called after any calls to \fBOCSP_REQ_CTX_add1_header()\fR. .PP \&\fBOCSP_sendreq_bio()\fR performs an \s-1OCSP\s0 request using the responder \fBio\fR, the \s-1URL\s0 -path \fBpath\fR, the \s-1OCSP\s0 request \fBreq\fR and with a response header maximum line -length of \fBmaxline\fR. If \fBmaxline\fR is zero a default value of 4k is used. +path \fBpath\fR, and the \s-1OCSP\s0 request \fBreq\fR with a response header maximum line +length 4k. It waits indefinitely on a response. .SH "RETURN VALUES" .IX Header "RETURN VALUES" \&\fBOCSP_sendreq_new()\fR returns a valid \fB\s-1OCSP_REQ_CTX\s0\fR structure or \fB\s-1NULL\s0\fR if @@ -238,7 +237,7 @@ corresponding \s-1BIO\s0 can be examined to determine which operation (read or write) should be retried and appropriate action taken (for example a \fBselect()\fR call on the underlying socket). .PP -\&\fBOCSP_sendreq_bio()\fR does not support retries and so cannot handle non-blocking +\&\fBOCSP_sendreq_bio()\fR does not support retries and so cannot handle nonblocking I/O efficiently. It is retained for compatibility and its use in new applications is not recommended. .SH "SEE ALSO" @@ -251,7 +250,7 @@ applications is not recommended. \&\fBOCSP_response_status\fR\|(3) .SH "COPYRIGHT" .IX Header "COPYRIGHT" -Copyright 2015\-2016 The OpenSSL Project Authors. All Rights Reserved. +Copyright 2015\-2020 The OpenSSL Project Authors. All Rights Reserved. .PP Licensed under the OpenSSL license (the \*(L"License\*(R"). You may not use this file except in compliance with the License. You can obtain a copy diff --git a/crypto/external/bsd/openssl/lib/libcrypto/man/OPENSSL_Applink.3 b/crypto/external/bsd/openssl/lib/libcrypto/man/OPENSSL_Applink.3 index 3b0af77de7a..4b8867b00b7 100644 --- a/crypto/external/bsd/openssl/lib/libcrypto/man/OPENSSL_Applink.3 +++ b/crypto/external/bsd/openssl/lib/libcrypto/man/OPENSSL_Applink.3 @@ -1,6 +1,6 @@ -.\" $NetBSD: OPENSSL_Applink.3,v 1.19 2019/06/09 18:44:32 christos Exp $ +.\" $NetBSD: OPENSSL_Applink.3,v 1.19.2.1 2021/03/28 18:21:48 martin Exp $ .\" -.\" Automatically generated by Pod::Man 4.10 (Pod::Simple 3.35) +.\" Automatically generated by Pod::Man 4.11 (Pod::Simple 3.35) .\" .\" Standard preamble: .\" ======================================================================== @@ -135,7 +135,7 @@ .\" ======================================================================== .\" .IX Title "OPENSSL_Applink 3" -.TH OPENSSL_Applink 3 "2018-09-23" "1.1.1c" "OpenSSL" +.TH OPENSSL_Applink 3 "2018-09-23" "1.1.1i" "OpenSSL" .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. .if n .ad l diff --git a/crypto/external/bsd/openssl/lib/libcrypto/man/OPENSSL_LH_COMPFUNC.3 b/crypto/external/bsd/openssl/lib/libcrypto/man/OPENSSL_LH_COMPFUNC.3 index 242c7704c36..2df194a1092 100644 --- a/crypto/external/bsd/openssl/lib/libcrypto/man/OPENSSL_LH_COMPFUNC.3 +++ b/crypto/external/bsd/openssl/lib/libcrypto/man/OPENSSL_LH_COMPFUNC.3 @@ -1,6 +1,6 @@ -.\" $NetBSD: OPENSSL_LH_COMPFUNC.3,v 1.3 2019/06/09 18:44:32 christos Exp $ +.\" $NetBSD: OPENSSL_LH_COMPFUNC.3,v 1.3.2.1 2021/03/28 18:21:48 martin Exp $ .\" -.\" Automatically generated by Pod::Man 4.10 (Pod::Simple 3.35) +.\" Automatically generated by Pod::Man 4.11 (Pod::Simple 3.35) .\" .\" Standard preamble: .\" ======================================================================== @@ -135,7 +135,7 @@ .\" ======================================================================== .\" .IX Title "OPENSSL_LH_COMPFUNC 3" -.TH OPENSSL_LH_COMPFUNC 3 "2018-09-23" "1.1.1c" "OpenSSL" +.TH OPENSSL_LH_COMPFUNC 3 "2020-12-10" "1.1.1i" "OpenSSL" .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. .if n .ad l @@ -190,7 +190,7 @@ an unsigned long hash value for its key field. The hash value is normally truncated to a power of 2, so make sure that your hash function returns well mixed low order bits. The \fBcompare\fR callback takes two arguments (pointers to two hash table entries), and returns -0 if their keys are equal, non-zero otherwise. +0 if their keys are equal, nonzero otherwise. .PP If your hash table will contain items of some particular type and the \fBhash\fR and @@ -342,7 +342,7 @@ all such parameters as constant. .PP As an example, a hash table may be maintained by code that, for reasons of encapsulation, has only \*(L"const\*(R" access to the data being -indexed in the hash table (ie. it is returned as \*(L"const\*(R" from +indexed in the hash table (i.e. it is returned as \*(L"const\*(R" from elsewhere in their code) \- in this case the \s-1LHASH\s0 prototypes are appropriate as-is. Conversely, if the caller is responsible for the life-time of the data in question, then they may well wish to make @@ -371,7 +371,7 @@ In OpenSSL 1.0.0, the lhash interface was revamped for better type checking. .SH "COPYRIGHT" .IX Header "COPYRIGHT" -Copyright 2000\-2018 The OpenSSL Project Authors. All Rights Reserved. +Copyright 2000\-2020 The OpenSSL Project Authors. All Rights Reserved. .PP Licensed under the OpenSSL license (the \*(L"License\*(R"). You may not use this file except in compliance with the License. You can obtain a copy diff --git a/crypto/external/bsd/openssl/lib/libcrypto/man/OPENSSL_LH_stats.3 b/crypto/external/bsd/openssl/lib/libcrypto/man/OPENSSL_LH_stats.3 index e04d8a9206e..120bdc2e0e1 100644 --- a/crypto/external/bsd/openssl/lib/libcrypto/man/OPENSSL_LH_stats.3 +++ b/crypto/external/bsd/openssl/lib/libcrypto/man/OPENSSL_LH_stats.3 @@ -1,6 +1,6 @@ -.\" $NetBSD: OPENSSL_LH_stats.3,v 1.3 2019/06/09 18:44:32 christos Exp $ +.\" $NetBSD: OPENSSL_LH_stats.3,v 1.3.2.1 2021/03/28 18:21:48 martin Exp $ .\" -.\" Automatically generated by Pod::Man 4.10 (Pod::Simple 3.35) +.\" Automatically generated by Pod::Man 4.11 (Pod::Simple 3.35) .\" .\" Standard preamble: .\" ======================================================================== @@ -135,7 +135,7 @@ .\" ======================================================================== .\" .IX Title "OPENSSL_LH_stats 3" -.TH OPENSSL_LH_stats 3 "2018-09-23" "1.1.1c" "OpenSSL" +.TH OPENSSL_LH_stats 3 "2018-09-23" "1.1.1i" "OpenSSL" .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. .if n .ad l diff --git a/crypto/external/bsd/openssl/lib/libcrypto/man/OPENSSL_VERSION_NUMBER.3 b/crypto/external/bsd/openssl/lib/libcrypto/man/OPENSSL_VERSION_NUMBER.3 index e209c5e72fe..24de4213260 100644 --- a/crypto/external/bsd/openssl/lib/libcrypto/man/OPENSSL_VERSION_NUMBER.3 +++ b/crypto/external/bsd/openssl/lib/libcrypto/man/OPENSSL_VERSION_NUMBER.3 @@ -1,6 +1,6 @@ -.\" $NetBSD: OPENSSL_VERSION_NUMBER.3,v 1.19 2019/06/09 18:44:32 christos Exp $ +.\" $NetBSD: OPENSSL_VERSION_NUMBER.3,v 1.19.2.1 2021/03/28 18:21:48 martin Exp $ .\" -.\" Automatically generated by Pod::Man 4.10 (Pod::Simple 3.35) +.\" Automatically generated by Pod::Man 4.11 (Pod::Simple 3.35) .\" .\" Standard preamble: .\" ======================================================================== @@ -135,7 +135,7 @@ .\" ======================================================================== .\" .IX Title "OPENSSL_VERSION_NUMBER 3" -.TH OPENSSL_VERSION_NUMBER 3 "2018-12-08" "1.1.1c" "OpenSSL" +.TH OPENSSL_VERSION_NUMBER 3 "2018-12-08" "1.1.1i" "OpenSSL" .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. .if n .ad l diff --git a/crypto/external/bsd/openssl/lib/libcrypto/man/OPENSSL_config.3 b/crypto/external/bsd/openssl/lib/libcrypto/man/OPENSSL_config.3 index a938cfdb917..cf36667b967 100644 --- a/crypto/external/bsd/openssl/lib/libcrypto/man/OPENSSL_config.3 +++ b/crypto/external/bsd/openssl/lib/libcrypto/man/OPENSSL_config.3 @@ -1,6 +1,6 @@ -.\" $NetBSD: OPENSSL_config.3,v 1.19 2019/06/09 18:44:32 christos Exp $ +.\" $NetBSD: OPENSSL_config.3,v 1.19.2.1 2021/03/28 18:21:48 martin Exp $ .\" -.\" Automatically generated by Pod::Man 4.10 (Pod::Simple 3.35) +.\" Automatically generated by Pod::Man 4.11 (Pod::Simple 3.35) .\" .\" Standard preamble: .\" ======================================================================== @@ -135,7 +135,7 @@ .\" ======================================================================== .\" .IX Title "OPENSSL_config 3" -.TH OPENSSL_config 3 "2018-09-23" "1.1.1c" "OpenSSL" +.TH OPENSSL_config 3 "2020-12-10" "1.1.1i" "OpenSSL" .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. .if n .ad l @@ -181,7 +181,7 @@ initialization (that is before starting any threads). .PP There are several reasons why calling the OpenSSL configuration routines is advisable. For example, to load dynamic ENGINEs from shared libraries (DSOs). -However very few applications currently support the control interface and so +However, very few applications currently support the control interface and so very few can load and use dynamic ENGINEs. Equally in future more sophisticated ENGINEs will require certain control operations to customize them. If an application calls \fBOPENSSL_config()\fR it doesn't need to know or care about @@ -206,7 +206,7 @@ The \fBOPENSSL_no_config()\fR and \fBOPENSSL_config()\fR functions were deprecated in OpenSSL 1.1.0 by \fBOPENSSL_init_crypto()\fR. .SH "COPYRIGHT" .IX Header "COPYRIGHT" -Copyright 2004\-2018 The OpenSSL Project Authors. All Rights Reserved. +Copyright 2004\-2020 The OpenSSL Project Authors. All Rights Reserved. .PP Licensed under the OpenSSL license (the \*(L"License\*(R"). You may not use this file except in compliance with the License. You can obtain a copy diff --git a/crypto/external/bsd/openssl/lib/libcrypto/man/OPENSSL_fork_prepare.3 b/crypto/external/bsd/openssl/lib/libcrypto/man/OPENSSL_fork_prepare.3 index 7120a125e35..f1369ad24ff 100644 --- a/crypto/external/bsd/openssl/lib/libcrypto/man/OPENSSL_fork_prepare.3 +++ b/crypto/external/bsd/openssl/lib/libcrypto/man/OPENSSL_fork_prepare.3 @@ -1,6 +1,6 @@ -.\" $NetBSD: OPENSSL_fork_prepare.3,v 1.2 2019/06/09 18:44:32 christos Exp $ +.\" $NetBSD: OPENSSL_fork_prepare.3,v 1.2.4.1 2021/03/28 18:21:48 martin Exp $ .\" -.\" Automatically generated by Pod::Man 4.10 (Pod::Simple 3.35) +.\" Automatically generated by Pod::Man 4.11 (Pod::Simple 3.35) .\" .\" Standard preamble: .\" ======================================================================== @@ -135,7 +135,7 @@ .\" ======================================================================== .\" .IX Title "OPENSSL_fork_prepare 3" -.TH OPENSSL_fork_prepare 3 "2018-09-23" "1.1.1c" "OpenSSL" +.TH OPENSSL_fork_prepare 3 "2020-01-23" "1.1.1i" "OpenSSL" .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. .if n .ad l @@ -165,7 +165,7 @@ The \fBOPENSSL_fork_prepare()\fR, \fBOPENSSL_fork_parent()\fR, and \fBOPENSSL_fo functions are used to reset this internal state. .PP Platforms without \fBfork\fR\|(2) will probably not need to use these functions. -Platforms with \fBfork\fR\|(2) but without \fBpthreads_atfork\fR\|(3) will probably need +Platforms with \fBfork\fR\|(2) but without \fBpthread_atfork\fR\|(3) will probably need to call them manually, as described in the following paragraph. Platforms such as Linux that have both functions will normally not need to call these functions as the OpenSSL library will do so automatically. @@ -173,7 +173,7 @@ functions as the OpenSSL library will do so automatically. \&\fBOPENSSL_init_crypto\fR\|(3) will register these functions with the appropriate handler, when the \fB\s-1OPENSSL_INIT_ATFORK\s0\fR flag is used. For other applications, these functions can be called directly. They should be used -according to the calling sequence described by the \fBpthreads_atfork\fR\|(3) +according to the calling sequence described by the \fBpthread_atfork\fR\|(3) documentation, which is summarized here. \fBOPENSSL_fork_prepare()\fR should be called before a \fBfork()\fR is done. After the \fBfork()\fR returns, the parent process should call \fBOPENSSL_fork_parent()\fR and the child process should @@ -190,7 +190,7 @@ return values. These functions were added in OpenSSL 1.1.1. .SH "COPYRIGHT" .IX Header "COPYRIGHT" -Copyright 2017\-2018 The OpenSSL Project Authors. All Rights Reserved. +Copyright 2017\-2019 The OpenSSL Project Authors. All Rights Reserved. .PP Licensed under the OpenSSL license (the \*(L"License\*(R"). You may not use this file except in compliance with the License. You can obtain a copy diff --git a/crypto/external/bsd/openssl/lib/libcrypto/man/OPENSSL_ia32cap.3 b/crypto/external/bsd/openssl/lib/libcrypto/man/OPENSSL_ia32cap.3 index 2f6c167acd3..224e58e7b30 100644 --- a/crypto/external/bsd/openssl/lib/libcrypto/man/OPENSSL_ia32cap.3 +++ b/crypto/external/bsd/openssl/lib/libcrypto/man/OPENSSL_ia32cap.3 @@ -1,6 +1,6 @@ -.\" $NetBSD: OPENSSL_ia32cap.3,v 1.21 2019/06/09 18:44:32 christos Exp $ +.\" $NetBSD: OPENSSL_ia32cap.3,v 1.21.2.1 2021/03/28 18:21:48 martin Exp $ .\" -.\" Automatically generated by Pod::Man 4.10 (Pod::Simple 3.35) +.\" Automatically generated by Pod::Man 4.11 (Pod::Simple 3.35) .\" .\" Standard preamble: .\" ======================================================================== @@ -135,7 +135,7 @@ .\" ======================================================================== .\" .IX Title "OPENSSL_ia32cap 3" -.TH OPENSSL_ia32cap 3 "2018-09-23" "1.1.1c" "OpenSSL" +.TH OPENSSL_ia32cap 3 "2020-12-10" "1.1.1i" "OpenSSL" .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. .if n .ad l @@ -235,8 +235,8 @@ The capability vector is further extended with \s-1EBX\s0 value returned by .IX Item "bit #64+18 denoting availability of RDSEED instruction;" .IP "bit #64+19 denoting availability of \s-1ADCX\s0 and \s-1ADOX\s0 instructions;" 4 .IX Item "bit #64+19 denoting availability of ADCX and ADOX instructions;" -.IP "bit #64+21 denoting availability of VPMADD52[\s-1LH\s0]UQ instructions, a.k.a. \s-1AVX512IFMA\s0 extension;" 4 -.IX Item "bit #64+21 denoting availability of VPMADD52[LH]UQ instructions, a.k.a. AVX512IFMA extension;" +.IP "bit #64+21 denoting availability of VPMADD52[\s-1LH\s0]UQ instructions, aka \s-1AVX512IFMA\s0 extension;" 4 +.IX Item "bit #64+21 denoting availability of VPMADD52[LH]UQ instructions, aka AVX512IFMA extension;" .IP "bit #64+29 denoting availability of \s-1SHA\s0 extension;" 4 .IX Item "bit #64+29 denoting availability of SHA extension;" .IP "bit #64+30 denoting availability of \s-1AVX512BW\s0 extension;" 4 @@ -291,7 +291,7 @@ version is used, as it is \s-1GNU\s0 assembler version that will be checked. Not available. .SH "COPYRIGHT" .IX Header "COPYRIGHT" -Copyright 2004\-2018 The OpenSSL Project Authors. All Rights Reserved. +Copyright 2004\-2020 The OpenSSL Project Authors. All Rights Reserved. .PP Licensed under the OpenSSL license (the \*(L"License\*(R"). You may not use this file except in compliance with the License. You can obtain a copy diff --git a/crypto/external/bsd/openssl/lib/libcrypto/man/OPENSSL_init_crypto.3 b/crypto/external/bsd/openssl/lib/libcrypto/man/OPENSSL_init_crypto.3 index 69ff6fba3f4..fea0ebee7d1 100644 --- a/crypto/external/bsd/openssl/lib/libcrypto/man/OPENSSL_init_crypto.3 +++ b/crypto/external/bsd/openssl/lib/libcrypto/man/OPENSSL_init_crypto.3 @@ -1,6 +1,6 @@ -.\" $NetBSD: OPENSSL_init_crypto.3,v 1.3 2019/06/09 18:44:32 christos Exp $ +.\" $NetBSD: OPENSSL_init_crypto.3,v 1.3.2.1 2021/03/28 18:21:48 martin Exp $ .\" -.\" Automatically generated by Pod::Man 4.10 (Pod::Simple 3.35) +.\" Automatically generated by Pod::Man 4.11 (Pod::Simple 3.35) .\" .\" Standard preamble: .\" ======================================================================== @@ -135,7 +135,7 @@ .\" ======================================================================== .\" .IX Title "OPENSSL_init_crypto 3" -.TH OPENSSL_init_crypto 3 "2019-03-12" "1.1.1c" "OpenSSL" +.TH OPENSSL_init_crypto 3 "2020-12-10" "1.1.1i" "OpenSSL" .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. .if n .ad l @@ -180,13 +180,13 @@ needs so no explicit initialisation is required. Similarly it will also automatically deinitialise as required. .PP However, there may be situations when explicit initialisation is desirable or -needed, for example when some non-default initialisation is required. The +needed, for example when some nondefault initialisation is required. The function \fBOPENSSL_init_crypto()\fR can be used for this purpose for libcrypto (see also \fBOPENSSL_init_ssl\fR\|(3) for the libssl equivalent). .PP Numerous internal OpenSSL functions call \fBOPENSSL_init_crypto()\fR. -Therefore, in order to perform non-default initialisation, +Therefore, in order to perform nondefault initialisation, \&\fBOPENSSL_init_crypto()\fR \s-1MUST\s0 be called by application code prior to any other OpenSSL function calls. .PP @@ -336,10 +336,10 @@ The filename, application name, and flags can be customized by providing a non-null \fB\s-1OPENSSL_INIT_SETTINGS\s0\fR object. The object can be allocated via \fB\fBOPENSSL_init_new()\fB\fR. The \fB\fBOPENSSL_INIT_set_config_filename()\fB\fR function can be used to specify a -non-default filename, which is copied and need not refer to persistent storage. +nondefault filename, which is copied and need not refer to persistent storage. Similarly, \fBOPENSSL_INIT_set_config_appname()\fR can be used to specify a -non-default application name. -Finally, OPENSSL_INIT_set_file_flags can be used to specify non-default flags. +nondefault application name. +Finally, OPENSSL_INIT_set_file_flags can be used to specify nondefault flags. If the \fB\s-1CONF_MFLAGS_IGNORE_RETURN_CODES\s0\fR flag is not included, any errors in the configuration file will cause an error return from \fBOPENSSL_init_crypto\fR or indirectly \fBOPENSSL_init_ssl\fR\|(3). @@ -379,7 +379,7 @@ The \fBOPENSSL_init_crypto()\fR, \fBOPENSSL_cleanup()\fR, \fBOPENSSL_atexit()\fR and \fBOPENSSL_INIT_free()\fR functions were added in OpenSSL 1.1.0. .SH "COPYRIGHT" .IX Header "COPYRIGHT" -Copyright 2016\-2019 The OpenSSL Project Authors. All Rights Reserved. +Copyright 2016\-2020 The OpenSSL Project Authors. All Rights Reserved. .PP Licensed under the OpenSSL license (the \*(L"License\*(R"). You may not use this file except in compliance with the License. You can obtain a copy diff --git a/crypto/external/bsd/openssl/lib/libcrypto/man/OPENSSL_init_ssl.3 b/crypto/external/bsd/openssl/lib/libcrypto/man/OPENSSL_init_ssl.3 index 501cc334ffe..74aa44aa89f 100644 --- a/crypto/external/bsd/openssl/lib/libcrypto/man/OPENSSL_init_ssl.3 +++ b/crypto/external/bsd/openssl/lib/libcrypto/man/OPENSSL_init_ssl.3 @@ -1,6 +1,6 @@ -.\" $NetBSD: OPENSSL_init_ssl.3,v 1.3 2019/06/09 18:44:32 christos Exp $ +.\" $NetBSD: OPENSSL_init_ssl.3,v 1.3.2.1 2021/03/28 18:21:48 martin Exp $ .\" -.\" Automatically generated by Pod::Man 4.10 (Pod::Simple 3.35) +.\" Automatically generated by Pod::Man 4.11 (Pod::Simple 3.35) .\" .\" Standard preamble: .\" ======================================================================== @@ -135,7 +135,7 @@ .\" ======================================================================== .\" .IX Title "OPENSSL_init_ssl 3" -.TH OPENSSL_init_ssl 3 "2018-09-23" "1.1.1c" "OpenSSL" +.TH OPENSSL_init_ssl 3 "2020-12-10" "1.1.1i" "OpenSSL" .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. .if n .ad l @@ -164,14 +164,14 @@ needs so no explicit initialisation is required. Similarly it will also automatically deinitialise as required. .PP However, there may be situations when explicit initialisation is desirable or -needed, for example when some non-default initialisation is required. The +needed, for example when some nondefault initialisation is required. The function \fBOPENSSL_init_ssl()\fR can be used for this purpose. Calling this function will explicitly initialise \s-1BOTH\s0 libcrypto and libssl. To explicitly initialise \s-1ONLY\s0 libcrypto see the \&\fBOPENSSL_init_crypto\fR\|(3) function. .PP Numerous internal OpenSSL functions call \fBOPENSSL_init_ssl()\fR. -Therefore, in order to perform non-default initialisation, +Therefore, in order to perform nondefault initialisation, \&\fBOPENSSL_init_ssl()\fR \s-1MUST\s0 be called by application code prior to any other OpenSSL function calls. .PP @@ -205,7 +205,7 @@ The function \fBOPENSSL_init_ssl()\fR returns 1 on success or 0 on error. The \fBOPENSSL_init_ssl()\fR function was added in OpenSSL 1.1.0. .SH "COPYRIGHT" .IX Header "COPYRIGHT" -Copyright 2016 The OpenSSL Project Authors. All Rights Reserved. +Copyright 2016\-2020 The OpenSSL Project Authors. All Rights Reserved. .PP Licensed under the OpenSSL license (the \*(L"License\*(R"). You may not use this file except in compliance with the License. You can obtain a copy diff --git a/crypto/external/bsd/openssl/lib/libcrypto/man/OPENSSL_instrument_bus.3 b/crypto/external/bsd/openssl/lib/libcrypto/man/OPENSSL_instrument_bus.3 index 5d133c42753..3af3a0e3ce3 100644 --- a/crypto/external/bsd/openssl/lib/libcrypto/man/OPENSSL_instrument_bus.3 +++ b/crypto/external/bsd/openssl/lib/libcrypto/man/OPENSSL_instrument_bus.3 @@ -1,6 +1,6 @@ -.\" $NetBSD: OPENSSL_instrument_bus.3,v 1.4 2019/06/09 18:44:32 christos Exp $ +.\" $NetBSD: OPENSSL_instrument_bus.3,v 1.4.2.1 2021/03/28 18:21:48 martin Exp $ .\" -.\" Automatically generated by Pod::Man 4.10 (Pod::Simple 3.35) +.\" Automatically generated by Pod::Man 4.11 (Pod::Simple 3.35) .\" .\" Standard preamble: .\" ======================================================================== @@ -135,7 +135,7 @@ .\" ======================================================================== .\" .IX Title "OPENSSL_instrument_bus 3" -.TH OPENSSL_instrument_bus 3 "2018-09-23" "1.1.1c" "OpenSSL" +.TH OPENSSL_instrument_bus 3 "2018-09-23" "1.1.1i" "OpenSSL" .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. .if n .ad l diff --git a/crypto/external/bsd/openssl/lib/libcrypto/man/OPENSSL_load_builtin_modules.3 b/crypto/external/bsd/openssl/lib/libcrypto/man/OPENSSL_load_builtin_modules.3 index aef9ef18ffa..5ef9a6afd46 100644 --- a/crypto/external/bsd/openssl/lib/libcrypto/man/OPENSSL_load_builtin_modules.3 +++ b/crypto/external/bsd/openssl/lib/libcrypto/man/OPENSSL_load_builtin_modules.3 @@ -1,6 +1,6 @@ -.\" $NetBSD: OPENSSL_load_builtin_modules.3,v 1.19 2019/06/09 18:44:32 christos Exp $ +.\" $NetBSD: OPENSSL_load_builtin_modules.3,v 1.19.2.1 2021/03/28 18:21:48 martin Exp $ .\" -.\" Automatically generated by Pod::Man 4.10 (Pod::Simple 3.35) +.\" Automatically generated by Pod::Man 4.11 (Pod::Simple 3.35) .\" .\" Standard preamble: .\" ======================================================================== @@ -135,7 +135,7 @@ .\" ======================================================================== .\" .IX Title "OPENSSL_load_builtin_modules 3" -.TH OPENSSL_load_builtin_modules 3 "2018-09-23" "1.1.1c" "OpenSSL" +.TH OPENSSL_load_builtin_modules 3 "2018-09-23" "1.1.1i" "OpenSSL" .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. .if n .ad l diff --git a/crypto/external/bsd/openssl/lib/libcrypto/man/OPENSSL_malloc.3 b/crypto/external/bsd/openssl/lib/libcrypto/man/OPENSSL_malloc.3 index f336f38f581..ae24ff5cca7 100644 --- a/crypto/external/bsd/openssl/lib/libcrypto/man/OPENSSL_malloc.3 +++ b/crypto/external/bsd/openssl/lib/libcrypto/man/OPENSSL_malloc.3 @@ -1,6 +1,6 @@ -.\" $NetBSD: OPENSSL_malloc.3,v 1.3 2019/06/09 18:44:32 christos Exp $ +.\" $NetBSD: OPENSSL_malloc.3,v 1.3.2.1 2021/03/28 18:21:48 martin Exp $ .\" -.\" Automatically generated by Pod::Man 4.10 (Pod::Simple 3.35) +.\" Automatically generated by Pod::Man 4.11 (Pod::Simple 3.35) .\" .\" Standard preamble: .\" ======================================================================== @@ -135,7 +135,7 @@ .\" ======================================================================== .\" .IX Title "OPENSSL_malloc 3" -.TH OPENSSL_malloc 3 "2019-03-12" "1.1.1c" "OpenSSL" +.TH OPENSSL_malloc 3 "2020-03-22" "1.1.1i" "OpenSSL" .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. .if n .ad l @@ -301,7 +301,7 @@ about what is being done. For example, identifying the field names when parsing a complicated data structure. \&\fBOPENSSL_mem_debug_push()\fR (which calls \fBCRYPTO_mem_debug_push()\fR) -attachs an identifying string to the allocation stack. +attaches an identifying string to the allocation stack. This must be a global or other static string; it is not copied. \&\fBOPENSSL_mem_debug_pop()\fR removes identifying state from the stack. .PP @@ -384,7 +384,7 @@ configuration option\fR \f(CW\*(C`crypto\-mdebug\*(C'\fR \fIenabled. In case, s only, say, the \f(BImalloc()\fI implementation is outright dangerous.\fR .SH "COPYRIGHT" .IX Header "COPYRIGHT" -Copyright 2016\-2019 The OpenSSL Project Authors. All Rights Reserved. +Copyright 2016\-2020 The OpenSSL Project Authors. All Rights Reserved. .PP Licensed under the OpenSSL license (the \*(L"License\*(R"). You may not use this file except in compliance with the License. You can obtain a copy diff --git a/crypto/external/bsd/openssl/lib/libcrypto/man/OPENSSL_secure_malloc.3 b/crypto/external/bsd/openssl/lib/libcrypto/man/OPENSSL_secure_malloc.3 index aba158604da..1a52ec4a773 100644 --- a/crypto/external/bsd/openssl/lib/libcrypto/man/OPENSSL_secure_malloc.3 +++ b/crypto/external/bsd/openssl/lib/libcrypto/man/OPENSSL_secure_malloc.3 @@ -1,6 +1,6 @@ -.\" $NetBSD: OPENSSL_secure_malloc.3,v 1.3 2019/06/09 18:44:32 christos Exp $ +.\" $NetBSD: OPENSSL_secure_malloc.3,v 1.3.2.1 2021/03/28 18:21:48 martin Exp $ .\" -.\" Automatically generated by Pod::Man 4.10 (Pod::Simple 3.35) +.\" Automatically generated by Pod::Man 4.11 (Pod::Simple 3.35) .\" .\" Standard preamble: .\" ======================================================================== @@ -135,7 +135,7 @@ .\" ======================================================================== .\" .IX Title "OPENSSL_secure_malloc 3" -.TH OPENSSL_secure_malloc 3 "2019-03-12" "1.1.1c" "OpenSSL" +.TH OPENSSL_secure_malloc 3 "2020-03-22" "1.1.1i" "OpenSSL" .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. .if n .ad l @@ -146,6 +146,7 @@ CRYPTO_secure_malloc_done, OPENSSL_secure_malloc, CRYPTO_secure_malloc, OPENSSL_secure_zalloc, CRYPTO_secure_zalloc, OPENSSL_secure_free, CRYPTO_secure_free, OPENSSL_secure_clear_free, CRYPTO_secure_clear_free, OPENSSL_secure_actual_size, +CRYPTO_secure_allocated, CRYPTO_secure_used \- secure heap storage .SH "LIBRARY" libcrypto, -lcrypto @@ -174,6 +175,7 @@ libcrypto, -lcrypto \& \& size_t OPENSSL_secure_actual_size(const void *ptr); \& +\& int CRYPTO_secure_allocated(const void *ptr); \& size_t CRYPTO_secure_used(); .Ve .SH "DESCRIPTION" @@ -231,6 +233,8 @@ calling \fBOPENSSL_clear_free()\fR. pointer; implementations may allocate more space than initially requested, in order to \*(L"round up\*(R" and reduce secure heap fragmentation. .PP +\&\fBOPENSSL_secure_allocated()\fR tells if a pointer is allocated in the secure heap. +.PP \&\fBCRYPTO_secure_used()\fR returns the number of bytes allocated in the secure heap. .SH "RETURN VALUES" diff --git a/crypto/external/bsd/openssl/lib/libcrypto/man/OSSL_STORE_INFO.3 b/crypto/external/bsd/openssl/lib/libcrypto/man/OSSL_STORE_INFO.3 index b274031cf5f..6be4fec5769 100644 --- a/crypto/external/bsd/openssl/lib/libcrypto/man/OSSL_STORE_INFO.3 +++ b/crypto/external/bsd/openssl/lib/libcrypto/man/OSSL_STORE_INFO.3 @@ -1,6 +1,6 @@ -.\" $NetBSD: OSSL_STORE_INFO.3,v 1.2 2019/06/09 18:44:32 christos Exp $ +.\" $NetBSD: OSSL_STORE_INFO.3,v 1.2.4.1 2021/03/28 18:21:48 martin Exp $ .\" -.\" Automatically generated by Pod::Man 4.10 (Pod::Simple 3.35) +.\" Automatically generated by Pod::Man 4.11 (Pod::Simple 3.35) .\" .\" Standard preamble: .\" ======================================================================== @@ -135,7 +135,7 @@ .\" ======================================================================== .\" .IX Title "OSSL_STORE_INFO 3" -.TH OSSL_STORE_INFO 3 "2019-03-12" "1.1.1c" "OpenSSL" +.TH OSSL_STORE_INFO 3 "2019-03-12" "1.1.1i" "OpenSSL" .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. .if n .ad l diff --git a/crypto/external/bsd/openssl/lib/libcrypto/man/OSSL_STORE_LOADER.3 b/crypto/external/bsd/openssl/lib/libcrypto/man/OSSL_STORE_LOADER.3 index 9b09e577b33..c36b057c071 100644 --- a/crypto/external/bsd/openssl/lib/libcrypto/man/OSSL_STORE_LOADER.3 +++ b/crypto/external/bsd/openssl/lib/libcrypto/man/OSSL_STORE_LOADER.3 @@ -1,6 +1,6 @@ -.\" $NetBSD: OSSL_STORE_LOADER.3,v 1.2 2019/06/09 18:44:32 christos Exp $ +.\" $NetBSD: OSSL_STORE_LOADER.3,v 1.2.4.1 2021/03/28 18:21:48 martin Exp $ .\" -.\" Automatically generated by Pod::Man 4.10 (Pod::Simple 3.35) +.\" Automatically generated by Pod::Man 4.11 (Pod::Simple 3.35) .\" .\" Standard preamble: .\" ======================================================================== @@ -135,7 +135,7 @@ .\" ======================================================================== .\" .IX Title "OSSL_STORE_LOADER 3" -.TH OSSL_STORE_LOADER 3 "2019-03-12" "1.1.1c" "OpenSSL" +.TH OSSL_STORE_LOADER 3 "2020-01-23" "1.1.1i" "OpenSSL" .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. .if n .ad l @@ -232,7 +232,7 @@ manner possible according to the scheme the loader implements, it also takes a \fB\s-1UI_METHOD\s0\fR and associated data, to be used any time something needs to be prompted for. Furthermore, this function is expected to initialize what needs to be -initialized, to create a privata data store (\fB\s-1OSSL_STORE_LOADER_CTX\s0\fR, see +initialized, to create a private data store (\fB\s-1OSSL_STORE_LOADER_CTX\s0\fR, see above), and to return it. If something goes wrong, this function is expected to return \s-1NULL.\s0 .IP "\fBOSSL_STORE_ctrl_fn\fR" 4 @@ -369,7 +369,7 @@ or \fB\s-1NULL\s0\fR on failure. were added in OpenSSL 1.1.1. .SH "COPYRIGHT" .IX Header "COPYRIGHT" -Copyright 2016\-2018 The OpenSSL Project Authors. All Rights Reserved. +Copyright 2016\-2019 The OpenSSL Project Authors. All Rights Reserved. .PP Licensed under the OpenSSL license (the \*(L"License\*(R"). You may not use this file except in compliance with the License. You can obtain a copy diff --git a/crypto/external/bsd/openssl/lib/libcrypto/man/OSSL_STORE_SEARCH.3 b/crypto/external/bsd/openssl/lib/libcrypto/man/OSSL_STORE_SEARCH.3 index cc777b38090..7765a9ddf09 100644 --- a/crypto/external/bsd/openssl/lib/libcrypto/man/OSSL_STORE_SEARCH.3 +++ b/crypto/external/bsd/openssl/lib/libcrypto/man/OSSL_STORE_SEARCH.3 @@ -1,6 +1,6 @@ -.\" $NetBSD: OSSL_STORE_SEARCH.3,v 1.2 2019/06/09 18:44:32 christos Exp $ +.\" $NetBSD: OSSL_STORE_SEARCH.3,v 1.2.4.1 2021/03/28 18:21:48 martin Exp $ .\" -.\" Automatically generated by Pod::Man 4.10 (Pod::Simple 3.35) +.\" Automatically generated by Pod::Man 4.11 (Pod::Simple 3.35) .\" .\" Standard preamble: .\" ======================================================================== @@ -135,7 +135,7 @@ .\" ======================================================================== .\" .IX Title "OSSL_STORE_SEARCH 3" -.TH OSSL_STORE_SEARCH 3 "2019-03-12" "1.1.1c" "OpenSSL" +.TH OSSL_STORE_SEARCH 3 "2019-03-12" "1.1.1i" "OpenSSL" .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. .if n .ad l diff --git a/crypto/external/bsd/openssl/lib/libcrypto/man/OSSL_STORE_expect.3 b/crypto/external/bsd/openssl/lib/libcrypto/man/OSSL_STORE_expect.3 index 56fa53a5e46..070076b03b1 100644 --- a/crypto/external/bsd/openssl/lib/libcrypto/man/OSSL_STORE_expect.3 +++ b/crypto/external/bsd/openssl/lib/libcrypto/man/OSSL_STORE_expect.3 @@ -1,6 +1,6 @@ -.\" $NetBSD: OSSL_STORE_expect.3,v 1.2 2019/06/09 18:44:32 christos Exp $ +.\" $NetBSD: OSSL_STORE_expect.3,v 1.2.4.1 2021/03/28 18:21:48 martin Exp $ .\" -.\" Automatically generated by Pod::Man 4.10 (Pod::Simple 3.35) +.\" Automatically generated by Pod::Man 4.11 (Pod::Simple 3.35) .\" .\" Standard preamble: .\" ======================================================================== @@ -135,7 +135,7 @@ .\" ======================================================================== .\" .IX Title "OSSL_STORE_expect 3" -.TH OSSL_STORE_expect 3 "2019-03-12" "1.1.1c" "OpenSSL" +.TH OSSL_STORE_expect 3 "2020-01-23" "1.1.1i" "OpenSSL" .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. .if n .ad l @@ -173,7 +173,7 @@ grained search of objects. .PP \&\fBOSSL_STORE_supports_search()\fR checks if the loader of the given \s-1OSSL_STORE\s0 context supports the given search type. -See \*(L"\s-1SUPPORED CRITERION TYPES\*(R"\s0 in \s-1OSSL_STORE_SEARCH\s0 for information on the +See \*(L"\s-1SUPPORTED CRITERION TYPES\*(R"\s0 in \s-1OSSL_STORE_SEARCH\s0 for information on the supported search criterion types. .PP \&\fBOSSL_STORE_expect()\fR and OSSL_STORE_find \fImust\fR be called before the first @@ -205,7 +205,7 @@ otherwise. were added in OpenSSL 1.1.1. .SH "COPYRIGHT" .IX Header "COPYRIGHT" -Copyright 2018 The OpenSSL Project Authors. All Rights Reserved. +Copyright 2018\-2019 The OpenSSL Project Authors. All Rights Reserved. .PP Licensed under the OpenSSL license (the \*(L"License\*(R"). You may not use this file except in compliance with the License. You can obtain a copy diff --git a/crypto/external/bsd/openssl/lib/libcrypto/man/OSSL_STORE_open.3 b/crypto/external/bsd/openssl/lib/libcrypto/man/OSSL_STORE_open.3 index 7c3ecb61afc..f8e9a238a02 100644 --- a/crypto/external/bsd/openssl/lib/libcrypto/man/OSSL_STORE_open.3 +++ b/crypto/external/bsd/openssl/lib/libcrypto/man/OSSL_STORE_open.3 @@ -1,6 +1,6 @@ -.\" $NetBSD: OSSL_STORE_open.3,v 1.2 2019/06/09 18:44:32 christos Exp $ +.\" $NetBSD: OSSL_STORE_open.3,v 1.2.4.1 2021/03/28 18:21:48 martin Exp $ .\" -.\" Automatically generated by Pod::Man 4.10 (Pod::Simple 3.35) +.\" Automatically generated by Pod::Man 4.11 (Pod::Simple 3.35) .\" .\" Standard preamble: .\" ======================================================================== @@ -135,7 +135,7 @@ .\" ======================================================================== .\" .IX Title "OSSL_STORE_open 3" -.TH OSSL_STORE_open 3 "2019-03-12" "1.1.1c" "OpenSSL" +.TH OSSL_STORE_open 3 "2020-12-10" "1.1.1i" "OpenSSL" .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. .if n .ad l @@ -185,21 +185,22 @@ information for \fBOSSL_STORE_open()\fR, \fBOSSL_STORE_load()\fR, \fBOSSL_STORE_ \&\fBOSSL_STORE_close()\fR to work together. .SS "Functions" .IX Subsection "Functions" -\&\fBOSSL_STORE_open()\fR takes a uri or path \fBuri\fR, password \s-1UI\s0 method -\&\fBui_method\fR with associated data \fBui_data\fR, and post processing -callback \fBpost_process\fR with associated data \fBpost_process_data\fR, +\&\fBOSSL_STORE_open()\fR takes a uri or path \fIuri\fR, password \s-1UI\s0 method +\&\fIui_method\fR with associated data \fIui_data\fR, and post processing +callback \fIpost_process\fR with associated data \fIpost_process_data\fR, opens a channel to the data located at that \s-1URI\s0 and returns a \&\fB\s-1OSSL_STORE_CTX\s0\fR with all necessary internal information. -The given \fBui_method\fR and \fBui_data_data\fR will be reused by all -functions that use \fB\s-1OSSL_STORE_CTX\s0\fR when interaction is needed. -The given \fBpost_process\fR and \fBpost_process_data\fR will be reused by +The given \fIui_method\fR and \fIui_data\fR will be reused by all +functions that use \fB\s-1OSSL_STORE_CTX\s0\fR when interaction is needed, +for instance to provide a password. +The given \fIpost_process\fR and \fIpost_process_data\fR will be reused by \&\fBOSSL_STORE_load()\fR to manipulate or drop the value to be returned. -The \fBpost_process\fR function drops values by returning \fB\s-1NULL\s0\fR, which +The \fIpost_process\fR function drops values by returning \s-1NULL,\s0 which will cause \fBOSSL_STORE_load()\fR to start its process over with loading -the next object, until \fBpost_process\fR returns something other than -\&\fB\s-1NULL\s0\fR, or the end of data is reached as indicated by \fBOSSL_STORE_eof()\fR. +the next object, until \fIpost_process\fR returns something other than +\&\s-1NULL,\s0 or the end of data is reached as indicated by \fBOSSL_STORE_eof()\fR. .PP -\&\fBOSSL_STORE_ctrl()\fR takes a \fB\s-1OSSL_STORE_CTX\s0\fR, and command number \fBcmd\fR and +\&\fBOSSL_STORE_ctrl()\fR takes a \fB\s-1OSSL_STORE_CTX\s0\fR, and command number \fIcmd\fR and more arguments not specified here. The available loader specific command numbers and arguments they each take depends on the loader that's used and is documented together with @@ -228,6 +229,7 @@ Note that it may still be meaningful to try and load more objects, unless \&\fBOSSL_STORE_close()\fR takes a \fB\s-1OSSL_STORE_CTX\s0\fR, closes the channel that was opened by \fBOSSL_STORE_open()\fR and frees all other information that was stored in the \&\fB\s-1OSSL_STORE_CTX\s0\fR, as well as the \fB\s-1OSSL_STORE_CTX\s0\fR itself. +If \fIctx\fR is \s-1NULL\s0 it does nothing. .SH "SUPPORTED SCHEMES" .IX Header "SUPPORTED SCHEMES" The basic supported scheme is \fBfile:\fR. @@ -254,12 +256,12 @@ See \fBpassphrase\-encoding\fR\|(7) for further information. .SH "RETURN VALUES" .IX Header "RETURN VALUES" \&\fBOSSL_STORE_open()\fR returns a pointer to a \fB\s-1OSSL_STORE_CTX\s0\fR on success, or -\&\fB\s-1NULL\s0\fR on failure. +\&\s-1NULL\s0 on failure. .PP \&\fBOSSL_STORE_load()\fR returns a pointer to a \fB\s-1OSSL_STORE_INFO\s0\fR on success, or -\&\fB\s-1NULL\s0\fR on error or when end of data is reached. +\&\s-1NULL\s0 on error or when end of data is reached. Use \fBOSSL_STORE_error()\fR and \fBOSSL_STORE_eof()\fR to determine the meaning of a -returned \fB\s-1NULL\s0\fR. +returned \s-1NULL.\s0 .PP \&\fBOSSL_STORE_eof()\fR returns 1 if the end of data has been reached, otherwise 0. @@ -277,9 +279,12 @@ otherwise 0. \&\s-1\fBOSSL_STORE_CTX\s0()\fR, \fBOSSL_STORE_post_process_info_fn()\fR, \fBOSSL_STORE_open()\fR, \&\fBOSSL_STORE_ctrl()\fR, \fBOSSL_STORE_load()\fR, \fBOSSL_STORE_eof()\fR and \fBOSSL_STORE_close()\fR were added in OpenSSL 1.1.1. +.PP +Handling of \s-1NULL\s0 \fIctx\fR argument for \fBOSSL_STORE_close()\fR +was introduced in OpenSSL 1.1.1h. .SH "COPYRIGHT" .IX Header "COPYRIGHT" -Copyright 2016\-2018 The OpenSSL Project Authors. All Rights Reserved. +Copyright 2016\-2020 The OpenSSL Project Authors. All Rights Reserved. .PP Licensed under the OpenSSL license (the \*(L"License\*(R"). You may not use this file except in compliance with the License. You can obtain a copy diff --git a/crypto/external/bsd/openssl/lib/libcrypto/man/OpenSSL_add_all_algorithms.3 b/crypto/external/bsd/openssl/lib/libcrypto/man/OpenSSL_add_all_algorithms.3 index 734287489aa..96aa60a7f09 100644 --- a/crypto/external/bsd/openssl/lib/libcrypto/man/OpenSSL_add_all_algorithms.3 +++ b/crypto/external/bsd/openssl/lib/libcrypto/man/OpenSSL_add_all_algorithms.3 @@ -1,6 +1,6 @@ -.\" $NetBSD: OpenSSL_add_all_algorithms.3,v 1.19 2019/06/09 18:44:32 christos Exp $ +.\" $NetBSD: OpenSSL_add_all_algorithms.3,v 1.19.2.1 2021/03/28 18:21:48 martin Exp $ .\" -.\" Automatically generated by Pod::Man 4.10 (Pod::Simple 3.35) +.\" Automatically generated by Pod::Man 4.11 (Pod::Simple 3.35) .\" .\" Standard preamble: .\" ======================================================================== @@ -135,7 +135,7 @@ .\" ======================================================================== .\" .IX Title "OpenSSL_add_all_algorithms 3" -.TH OpenSSL_add_all_algorithms 3 "2018-09-23" "1.1.1c" "OpenSSL" +.TH OpenSSL_add_all_algorithms 3 "2018-09-23" "1.1.1i" "OpenSSL" .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. .if n .ad l diff --git a/crypto/external/bsd/openssl/lib/libcrypto/man/PEM_bytes_read_bio.3 b/crypto/external/bsd/openssl/lib/libcrypto/man/PEM_bytes_read_bio.3 index 485e638754a..72bf9f582a6 100644 --- a/crypto/external/bsd/openssl/lib/libcrypto/man/PEM_bytes_read_bio.3 +++ b/crypto/external/bsd/openssl/lib/libcrypto/man/PEM_bytes_read_bio.3 @@ -1,6 +1,6 @@ -.\" $NetBSD: PEM_bytes_read_bio.3,v 1.2 2019/06/09 18:44:32 christos Exp $ +.\" $NetBSD: PEM_bytes_read_bio.3,v 1.2.4.1 2021/03/28 18:21:48 martin Exp $ .\" -.\" Automatically generated by Pod::Man 4.10 (Pod::Simple 3.35) +.\" Automatically generated by Pod::Man 4.11 (Pod::Simple 3.35) .\" .\" Standard preamble: .\" ======================================================================== @@ -135,7 +135,7 @@ .\" ======================================================================== .\" .IX Title "PEM_bytes_read_bio 3" -.TH PEM_bytes_read_bio 3 "2018-09-23" "1.1.1c" "OpenSSL" +.TH PEM_bytes_read_bio 3 "2020-03-22" "1.1.1i" "OpenSSL" .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. .if n .ad l @@ -158,7 +158,8 @@ libcrypto, -lcrypto .Ve .SH "DESCRIPTION" .IX Header "DESCRIPTION" -\&\fBPEM_bytes_read_bio()\fR reads PEM-formatted (\s-1RFC 1421\s0) data from the \s-1BIO\s0 +\&\fBPEM_bytes_read_bio()\fR reads PEM-formatted (\s-1IETF RFC 1421\s0 and \s-1IETF RFC 7468\s0) +data from the \s-1BIO\s0 \&\fIbp\fR for the data type given in \fIname\fR (\s-1RSA PRIVATE KEY, CERTIFICATE,\s0 etc.). If multiple PEM-encoded data structures are present in the same stream, \fBPEM_bytes_read_bio()\fR will skip non-matching data types and @@ -204,7 +205,6 @@ It will simply be treated as a byte sequence. 0 for failure. .SH "SEE ALSO" .IX Header "SEE ALSO" -\&\s-1\fBPEM\s0\fR\|(3), \&\fBPEM_read_bio_ex\fR\|(3), \&\fBpassphrase\-encoding\fR\|(7) .SH "HISTORY" diff --git a/crypto/external/bsd/openssl/lib/libcrypto/man/PEM_read.3 b/crypto/external/bsd/openssl/lib/libcrypto/man/PEM_read.3 index ff4b05cd993..07319337d20 100644 --- a/crypto/external/bsd/openssl/lib/libcrypto/man/PEM_read.3 +++ b/crypto/external/bsd/openssl/lib/libcrypto/man/PEM_read.3 @@ -1,6 +1,6 @@ -.\" $NetBSD: PEM_read.3,v 1.3 2019/06/09 18:44:32 christos Exp $ +.\" $NetBSD: PEM_read.3,v 1.3.2.1 2021/03/28 18:21:48 martin Exp $ .\" -.\" Automatically generated by Pod::Man 4.10 (Pod::Simple 3.35) +.\" Automatically generated by Pod::Man 4.11 (Pod::Simple 3.35) .\" .\" Standard preamble: .\" ======================================================================== @@ -135,7 +135,7 @@ .\" ======================================================================== .\" .IX Title "PEM_read 3" -.TH PEM_read 3 "2018-09-23" "1.1.1c" "OpenSSL" +.TH PEM_read 3 "2018-09-23" "1.1.1i" "OpenSSL" .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. .if n .ad l diff --git a/crypto/external/bsd/openssl/lib/libcrypto/man/PEM_read_CMS.3 b/crypto/external/bsd/openssl/lib/libcrypto/man/PEM_read_CMS.3 index 5571a73ffde..da427fa2504 100644 --- a/crypto/external/bsd/openssl/lib/libcrypto/man/PEM_read_CMS.3 +++ b/crypto/external/bsd/openssl/lib/libcrypto/man/PEM_read_CMS.3 @@ -1,6 +1,6 @@ -.\" $NetBSD: PEM_read_CMS.3,v 1.3 2019/06/09 18:44:32 christos Exp $ +.\" $NetBSD: PEM_read_CMS.3,v 1.3.2.1 2021/03/28 18:21:48 martin Exp $ .\" -.\" Automatically generated by Pod::Man 4.10 (Pod::Simple 3.35) +.\" Automatically generated by Pod::Man 4.11 (Pod::Simple 3.35) .\" .\" Standard preamble: .\" ======================================================================== @@ -135,7 +135,7 @@ .\" ======================================================================== .\" .IX Title "PEM_read_CMS 3" -.TH PEM_read_CMS 3 "2018-09-23" "1.1.1c" "OpenSSL" +.TH PEM_read_CMS 3 "2018-09-23" "1.1.1i" "OpenSSL" .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. .if n .ad l diff --git a/crypto/external/bsd/openssl/lib/libcrypto/man/PEM_read_bio_PrivateKey.3 b/crypto/external/bsd/openssl/lib/libcrypto/man/PEM_read_bio_PrivateKey.3 index 53f31cb8054..d8254e53716 100644 --- a/crypto/external/bsd/openssl/lib/libcrypto/man/PEM_read_bio_PrivateKey.3 +++ b/crypto/external/bsd/openssl/lib/libcrypto/man/PEM_read_bio_PrivateKey.3 @@ -1,6 +1,6 @@ -.\" $NetBSD: PEM_read_bio_PrivateKey.3,v 1.3 2019/06/09 18:44:32 christos Exp $ +.\" $NetBSD: PEM_read_bio_PrivateKey.3,v 1.3.2.1 2021/03/28 18:21:48 martin Exp $ .\" -.\" Automatically generated by Pod::Man 4.10 (Pod::Simple 3.35) +.\" Automatically generated by Pod::Man 4.11 (Pod::Simple 3.35) .\" .\" Standard preamble: .\" ======================================================================== @@ -135,7 +135,7 @@ .\" ======================================================================== .\" .IX Title "PEM_read_bio_PrivateKey 3" -.TH PEM_read_bio_PrivateKey 3 "2019-06-09" "1.1.1c" "OpenSSL" +.TH PEM_read_bio_PrivateKey 3 "2020-12-10" "1.1.1i" "OpenSSL" .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. .if n .ad l @@ -154,7 +154,8 @@ PEM_write_RSAPublicKey, PEM_read_bio_RSA_PUBKEY, PEM_read_RSA_PUBKEY, PEM_write_bio_RSA_PUBKEY, PEM_write_RSA_PUBKEY, PEM_read_bio_DSAPrivateKey, PEM_read_DSAPrivateKey, PEM_write_bio_DSAPrivateKey, PEM_write_DSAPrivateKey, PEM_read_bio_DSA_PUBKEY, PEM_read_DSA_PUBKEY, PEM_write_bio_DSA_PUBKEY, -PEM_write_DSA_PUBKEY, PEM_read_bio_DSAparams, PEM_read_DSAparams, +PEM_write_DSA_PUBKEY, PEM_read_bio_Parameters, PEM_write_bio_Parameters, +PEM_read_bio_DSAparams, PEM_read_DSAparams, PEM_write_bio_DSAparams, PEM_write_DSAparams, PEM_read_bio_DHparams, PEM_read_DHparams, PEM_write_bio_DHparams, PEM_write_DHparams, PEM_read_bio_X509, PEM_read_X509, PEM_write_bio_X509, PEM_write_X509, @@ -251,6 +252,9 @@ libcrypto, -lcrypto \& int PEM_write_bio_DSA_PUBKEY(BIO *bp, DSA *x); \& int PEM_write_DSA_PUBKEY(FILE *fp, DSA *x); \& +\& EVP_PKEY *PEM_read_bio_Parameters(BIO *bp, EVP_PKEY **x); +\& int PEM_write_bio_Parameters(BIO *bp, const EVP_PKEY *x); +\& \& DSA *PEM_read_bio_DSAparams(BIO *bp, DSA **x, pem_password_cb *cb, void *u); \& DSA *PEM_read_DSAparams(FILE *fp, DSA **x, pem_password_cb *cb, void *u); \& int PEM_write_bio_DSAparams(BIO *bp, DSA *x); @@ -343,7 +347,7 @@ The \fBRSAPublicKey\fR functions process an \s-1RSA\s0 public key using an structure. .PP The \fB\s-1RSA_PUBKEY\s0\fR functions also process an \s-1RSA\s0 public key using -an \s-1RSA\s0 structure. However the public key is encoded using a +an \s-1RSA\s0 structure. However, the public key is encoded using a SubjectPublicKeyInfo structure and an error occurs if the public key is not \s-1RSA.\s0 .PP @@ -357,6 +361,12 @@ a \s-1DSA\s0 structure. The public key is encoded using a SubjectPublicKeyInfo structure and an error occurs if the public key is not \s-1DSA.\s0 .PP +The \fBParameters\fR functions read or write key parameters in \s-1PEM\s0 format using +an \s-1EVP_PKEY\s0 structure. The encoding depends on the type of key; for \s-1DSA\s0 key +parameters, it will be a Dss-Parms structure as defined in \s-1RFC2459,\s0 and for \s-1DH\s0 +key parameters, it will be a PKCS#3 DHparameter structure. \fIThese functions +only exist for the \f(BI\s-1BIO\s0\fI type\fR. +.PP The \fBDSAparams\fR functions process \s-1DSA\s0 parameters using a \s-1DSA\s0 structure. The parameters are encoded using a Dss-Parms structure as defined in \s-1RFC2459.\s0 @@ -522,7 +532,7 @@ The pseudo code to derive the key would look similar to: .SH "BUGS" .IX Header "BUGS" The \s-1PEM\s0 read routines in some versions of OpenSSL will not correctly reuse -an existing structure. Therefore the following: +an existing structure. Therefore, the following: .PP .Vb 1 \& PEM_read_bio_X509(bp, &x, 0, NULL); @@ -631,7 +641,7 @@ in OpenSSL 1.1.0; applications should use the \s-1PKCS7\s0 standard instead as they will be formally deprecated in a future releases. .SH "COPYRIGHT" .IX Header "COPYRIGHT" -Copyright 2001\-2019 The OpenSSL Project Authors. All Rights Reserved. +Copyright 2001\-2020 The OpenSSL Project Authors. All Rights Reserved. .PP Licensed under the OpenSSL license (the \*(L"License\*(R"). You may not use this file except in compliance with the License. You can obtain a copy diff --git a/crypto/external/bsd/openssl/lib/libcrypto/man/PEM_read_bio_ex.3 b/crypto/external/bsd/openssl/lib/libcrypto/man/PEM_read_bio_ex.3 index 89a9e283c37..de9bd203504 100644 --- a/crypto/external/bsd/openssl/lib/libcrypto/man/PEM_read_bio_ex.3 +++ b/crypto/external/bsd/openssl/lib/libcrypto/man/PEM_read_bio_ex.3 @@ -1,6 +1,6 @@ -.\" $NetBSD: PEM_read_bio_ex.3,v 1.2 2019/06/09 18:44:32 christos Exp $ +.\" $NetBSD: PEM_read_bio_ex.3,v 1.2.4.1 2021/03/28 18:21:48 martin Exp $ .\" -.\" Automatically generated by Pod::Man 4.10 (Pod::Simple 3.35) +.\" Automatically generated by Pod::Man 4.11 (Pod::Simple 3.35) .\" .\" Standard preamble: .\" ======================================================================== @@ -135,7 +135,7 @@ .\" ======================================================================== .\" .IX Title "PEM_read_bio_ex 3" -.TH PEM_read_bio_ex 3 "2019-03-12" "1.1.1c" "OpenSSL" +.TH PEM_read_bio_ex 3 "2020-03-22" "1.1.1i" "OpenSSL" .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. .if n .ad l @@ -190,7 +190,7 @@ If \s-1PEM_FLAG_SECURE\s0 was set, use \fBOPENSSL_secure_free()\fR; otherwise, \&\fBPEM_read_bio_ex()\fR returns 1 for success or 0 for failure. .SH "SEE ALSO" .IX Header "SEE ALSO" -\&\s-1\fBPEM\s0\fR\|(3) +\&\fBPEM_bytes_read_bio\fR\|(3) .SH "HISTORY" .IX Header "HISTORY" The \fBPEM_read_bio_ex()\fR function was added in OpenSSL 1.1.1. diff --git a/crypto/external/bsd/openssl/lib/libcrypto/man/PEM_write_bio_CMS_stream.3 b/crypto/external/bsd/openssl/lib/libcrypto/man/PEM_write_bio_CMS_stream.3 index 005b3f1dc62..c115dd15a1e 100644 --- a/crypto/external/bsd/openssl/lib/libcrypto/man/PEM_write_bio_CMS_stream.3 +++ b/crypto/external/bsd/openssl/lib/libcrypto/man/PEM_write_bio_CMS_stream.3 @@ -1,6 +1,6 @@ -.\" $NetBSD: PEM_write_bio_CMS_stream.3,v 1.19 2019/06/09 18:44:32 christos Exp $ +.\" $NetBSD: PEM_write_bio_CMS_stream.3,v 1.19.2.1 2021/03/28 18:21:48 martin Exp $ .\" -.\" Automatically generated by Pod::Man 4.10 (Pod::Simple 3.35) +.\" Automatically generated by Pod::Man 4.11 (Pod::Simple 3.35) .\" .\" Standard preamble: .\" ======================================================================== @@ -135,7 +135,7 @@ .\" ======================================================================== .\" .IX Title "PEM_write_bio_CMS_stream 3" -.TH PEM_write_bio_CMS_stream 3 "2019-03-12" "1.1.1c" "OpenSSL" +.TH PEM_write_bio_CMS_stream 3 "2019-03-12" "1.1.1i" "OpenSSL" .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. .if n .ad l diff --git a/crypto/external/bsd/openssl/lib/libcrypto/man/PEM_write_bio_PKCS7_stream.3 b/crypto/external/bsd/openssl/lib/libcrypto/man/PEM_write_bio_PKCS7_stream.3 index 2b07edb9957..8d433cc19c2 100644 --- a/crypto/external/bsd/openssl/lib/libcrypto/man/PEM_write_bio_PKCS7_stream.3 +++ b/crypto/external/bsd/openssl/lib/libcrypto/man/PEM_write_bio_PKCS7_stream.3 @@ -1,6 +1,6 @@ -.\" $NetBSD: PEM_write_bio_PKCS7_stream.3,v 1.19 2019/06/09 18:44:32 christos Exp $ +.\" $NetBSD: PEM_write_bio_PKCS7_stream.3,v 1.19.2.1 2021/03/28 18:21:49 martin Exp $ .\" -.\" Automatically generated by Pod::Man 4.10 (Pod::Simple 3.35) +.\" Automatically generated by Pod::Man 4.11 (Pod::Simple 3.35) .\" .\" Standard preamble: .\" ======================================================================== @@ -135,7 +135,7 @@ .\" ======================================================================== .\" .IX Title "PEM_write_bio_PKCS7_stream 3" -.TH PEM_write_bio_PKCS7_stream 3 "2019-03-12" "1.1.1c" "OpenSSL" +.TH PEM_write_bio_PKCS7_stream 3 "2019-03-12" "1.1.1i" "OpenSSL" .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. .if n .ad l diff --git a/crypto/external/bsd/openssl/lib/libcrypto/man/PKCS12_create.3 b/crypto/external/bsd/openssl/lib/libcrypto/man/PKCS12_create.3 index 9c90660a29a..263cfb7d2af 100644 --- a/crypto/external/bsd/openssl/lib/libcrypto/man/PKCS12_create.3 +++ b/crypto/external/bsd/openssl/lib/libcrypto/man/PKCS12_create.3 @@ -1,6 +1,6 @@ -.\" $NetBSD: PKCS12_create.3,v 1.19 2019/06/09 18:44:32 christos Exp $ +.\" $NetBSD: PKCS12_create.3,v 1.19.2.1 2021/03/28 18:21:49 martin Exp $ .\" -.\" Automatically generated by Pod::Man 4.10 (Pod::Simple 3.35) +.\" Automatically generated by Pod::Man 4.11 (Pod::Simple 3.35) .\" .\" Standard preamble: .\" ======================================================================== @@ -135,7 +135,7 @@ .\" ======================================================================== .\" .IX Title "PKCS12_create 3" -.TH PKCS12_create 3 "2018-09-23" "1.1.1c" "OpenSSL" +.TH PKCS12_create 3 "2018-09-23" "1.1.1i" "OpenSSL" .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. .if n .ad l diff --git a/crypto/external/bsd/openssl/lib/libcrypto/man/PKCS12_newpass.3 b/crypto/external/bsd/openssl/lib/libcrypto/man/PKCS12_newpass.3 index 35ebb6ce8c0..6104c0b642e 100644 --- a/crypto/external/bsd/openssl/lib/libcrypto/man/PKCS12_newpass.3 +++ b/crypto/external/bsd/openssl/lib/libcrypto/man/PKCS12_newpass.3 @@ -1,6 +1,6 @@ -.\" $NetBSD: PKCS12_newpass.3,v 1.3 2019/06/09 18:44:32 christos Exp $ +.\" $NetBSD: PKCS12_newpass.3,v 1.3.2.1 2021/03/28 18:21:49 martin Exp $ .\" -.\" Automatically generated by Pod::Man 4.10 (Pod::Simple 3.35) +.\" Automatically generated by Pod::Man 4.11 (Pod::Simple 3.35) .\" .\" Standard preamble: .\" ======================================================================== @@ -135,7 +135,7 @@ .\" ======================================================================== .\" .IX Title "PKCS12_newpass 3" -.TH PKCS12_newpass 3 "2018-09-23" "1.1.1c" "OpenSSL" +.TH PKCS12_newpass 3 "2020-01-23" "1.1.1i" "OpenSSL" .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. .if n .ad l @@ -172,8 +172,8 @@ the terminal or command line. Refer to the documentation of .IX Header "RETURN VALUES" \&\fBPKCS12_newpass()\fR returns 1 on success or 0 on failure. Applications can retrieve the most recent error from \fBPKCS12_newpass()\fR with \fBERR_get_error()\fR. -.SH "EXAMPLE" -.IX Header "EXAMPLE" +.SH "EXAMPLES" +.IX Header "EXAMPLES" This example loads a PKCS#12 file, changes its password and writes out the result to a new file. .PP @@ -242,7 +242,7 @@ this function. \&\fBpassphrase\-encoding\fR\|(7) .SH "COPYRIGHT" .IX Header "COPYRIGHT" -Copyright 2016\-2018 The OpenSSL Project Authors. All Rights Reserved. +Copyright 2016\-2019 The OpenSSL Project Authors. All Rights Reserved. .PP Licensed under the OpenSSL license (the \*(L"License\*(R"). You may not use this file except in compliance with the License. You can obtain a copy diff --git a/crypto/external/bsd/openssl/lib/libcrypto/man/PKCS12_parse.3 b/crypto/external/bsd/openssl/lib/libcrypto/man/PKCS12_parse.3 index b9ca8935c50..1a25b83de6e 100644 --- a/crypto/external/bsd/openssl/lib/libcrypto/man/PKCS12_parse.3 +++ b/crypto/external/bsd/openssl/lib/libcrypto/man/PKCS12_parse.3 @@ -1,6 +1,6 @@ -.\" $NetBSD: PKCS12_parse.3,v 1.19 2019/06/09 18:44:32 christos Exp $ +.\" $NetBSD: PKCS12_parse.3,v 1.19.2.1 2021/03/28 18:21:49 martin Exp $ .\" -.\" Automatically generated by Pod::Man 4.10 (Pod::Simple 3.35) +.\" Automatically generated by Pod::Man 4.11 (Pod::Simple 3.35) .\" .\" Standard preamble: .\" ======================================================================== @@ -135,7 +135,7 @@ .\" ======================================================================== .\" .IX Title "PKCS12_parse 3" -.TH PKCS12_parse 3 "2019-03-12" "1.1.1c" "OpenSSL" +.TH PKCS12_parse 3 "2019-03-12" "1.1.1i" "OpenSSL" .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. .if n .ad l diff --git a/crypto/external/bsd/openssl/lib/libcrypto/man/PKCS5_PBKDF2_HMAC.3 b/crypto/external/bsd/openssl/lib/libcrypto/man/PKCS5_PBKDF2_HMAC.3 index d3d7320d378..3e151364ff1 100644 --- a/crypto/external/bsd/openssl/lib/libcrypto/man/PKCS5_PBKDF2_HMAC.3 +++ b/crypto/external/bsd/openssl/lib/libcrypto/man/PKCS5_PBKDF2_HMAC.3 @@ -1,6 +1,6 @@ -.\" $NetBSD: PKCS5_PBKDF2_HMAC.3,v 1.3 2019/06/09 18:44:32 christos Exp $ +.\" $NetBSD: PKCS5_PBKDF2_HMAC.3,v 1.3.2.1 2021/03/28 18:21:49 martin Exp $ .\" -.\" Automatically generated by Pod::Man 4.10 (Pod::Simple 3.35) +.\" Automatically generated by Pod::Man 4.11 (Pod::Simple 3.35) .\" .\" Standard preamble: .\" ======================================================================== @@ -135,7 +135,7 @@ .\" ======================================================================== .\" .IX Title "PKCS5_PBKDF2_HMAC 3" -.TH PKCS5_PBKDF2_HMAC 3 "2018-09-23" "1.1.1c" "OpenSSL" +.TH PKCS5_PBKDF2_HMAC 3 "2018-09-23" "1.1.1i" "OpenSSL" .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. .if n .ad l diff --git a/crypto/external/bsd/openssl/lib/libcrypto/man/PKCS7_decrypt.3 b/crypto/external/bsd/openssl/lib/libcrypto/man/PKCS7_decrypt.3 index d543d057c4a..44ce335bef0 100644 --- a/crypto/external/bsd/openssl/lib/libcrypto/man/PKCS7_decrypt.3 +++ b/crypto/external/bsd/openssl/lib/libcrypto/man/PKCS7_decrypt.3 @@ -1,6 +1,6 @@ -.\" $NetBSD: PKCS7_decrypt.3,v 1.19 2019/06/09 18:44:32 christos Exp $ +.\" $NetBSD: PKCS7_decrypt.3,v 1.19.2.1 2021/03/28 18:21:49 martin Exp $ .\" -.\" Automatically generated by Pod::Man 4.10 (Pod::Simple 3.35) +.\" Automatically generated by Pod::Man 4.11 (Pod::Simple 3.35) .\" .\" Standard preamble: .\" ======================================================================== @@ -135,7 +135,7 @@ .\" ======================================================================== .\" .IX Title "PKCS7_decrypt 3" -.TH PKCS7_decrypt 3 "2018-09-23" "1.1.1c" "OpenSSL" +.TH PKCS7_decrypt 3 "2018-09-23" "1.1.1i" "OpenSSL" .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. .if n .ad l diff --git a/crypto/external/bsd/openssl/lib/libcrypto/man/PKCS7_encrypt.3 b/crypto/external/bsd/openssl/lib/libcrypto/man/PKCS7_encrypt.3 index f4bbc25e036..1bf614f3c40 100644 --- a/crypto/external/bsd/openssl/lib/libcrypto/man/PKCS7_encrypt.3 +++ b/crypto/external/bsd/openssl/lib/libcrypto/man/PKCS7_encrypt.3 @@ -1,6 +1,6 @@ -.\" $NetBSD: PKCS7_encrypt.3,v 1.19 2019/06/09 18:44:32 christos Exp $ +.\" $NetBSD: PKCS7_encrypt.3,v 1.19.2.1 2021/03/28 18:21:49 martin Exp $ .\" -.\" Automatically generated by Pod::Man 4.10 (Pod::Simple 3.35) +.\" Automatically generated by Pod::Man 4.11 (Pod::Simple 3.35) .\" .\" Standard preamble: .\" ======================================================================== @@ -135,7 +135,7 @@ .\" ======================================================================== .\" .IX Title "PKCS7_encrypt 3" -.TH PKCS7_encrypt 3 "2018-09-23" "1.1.1c" "OpenSSL" +.TH PKCS7_encrypt 3 "2018-09-23" "1.1.1i" "OpenSSL" .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. .if n .ad l diff --git a/crypto/external/bsd/openssl/lib/libcrypto/man/PKCS7_sign.3 b/crypto/external/bsd/openssl/lib/libcrypto/man/PKCS7_sign.3 index 01eef07abf6..9a87d5cdf46 100644 --- a/crypto/external/bsd/openssl/lib/libcrypto/man/PKCS7_sign.3 +++ b/crypto/external/bsd/openssl/lib/libcrypto/man/PKCS7_sign.3 @@ -1,6 +1,6 @@ -.\" $NetBSD: PKCS7_sign.3,v 1.19 2019/06/09 18:44:32 christos Exp $ +.\" $NetBSD: PKCS7_sign.3,v 1.19.2.1 2021/03/28 18:21:49 martin Exp $ .\" -.\" Automatically generated by Pod::Man 4.10 (Pod::Simple 3.35) +.\" Automatically generated by Pod::Man 4.11 (Pod::Simple 3.35) .\" .\" Standard preamble: .\" ======================================================================== @@ -135,7 +135,7 @@ .\" ======================================================================== .\" .IX Title "PKCS7_sign 3" -.TH PKCS7_sign 3 "2019-03-12" "1.1.1c" "OpenSSL" +.TH PKCS7_sign 3 "2019-03-12" "1.1.1i" "OpenSSL" .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. .if n .ad l diff --git a/crypto/external/bsd/openssl/lib/libcrypto/man/PKCS7_sign_add_signer.3 b/crypto/external/bsd/openssl/lib/libcrypto/man/PKCS7_sign_add_signer.3 index d48a51be72e..4aa06456438 100644 --- a/crypto/external/bsd/openssl/lib/libcrypto/man/PKCS7_sign_add_signer.3 +++ b/crypto/external/bsd/openssl/lib/libcrypto/man/PKCS7_sign_add_signer.3 @@ -1,6 +1,6 @@ -.\" $NetBSD: PKCS7_sign_add_signer.3,v 1.19 2019/06/09 18:44:32 christos Exp $ +.\" $NetBSD: PKCS7_sign_add_signer.3,v 1.19.2.1 2021/03/28 18:21:49 martin Exp $ .\" -.\" Automatically generated by Pod::Man 4.10 (Pod::Simple 3.35) +.\" Automatically generated by Pod::Man 4.11 (Pod::Simple 3.35) .\" .\" Standard preamble: .\" ======================================================================== @@ -135,7 +135,7 @@ .\" ======================================================================== .\" .IX Title "PKCS7_sign_add_signer 3" -.TH PKCS7_sign_add_signer 3 "2019-03-12" "1.1.1c" "OpenSSL" +.TH PKCS7_sign_add_signer 3 "2019-03-12" "1.1.1i" "OpenSSL" .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. .if n .ad l diff --git a/crypto/external/bsd/openssl/lib/libcrypto/man/PKCS7_verify.3 b/crypto/external/bsd/openssl/lib/libcrypto/man/PKCS7_verify.3 index 06509acb452..09d92a647cf 100644 --- a/crypto/external/bsd/openssl/lib/libcrypto/man/PKCS7_verify.3 +++ b/crypto/external/bsd/openssl/lib/libcrypto/man/PKCS7_verify.3 @@ -1,6 +1,6 @@ -.\" $NetBSD: PKCS7_verify.3,v 1.19 2019/06/09 18:44:32 christos Exp $ +.\" $NetBSD: PKCS7_verify.3,v 1.19.2.1 2021/03/28 18:21:49 martin Exp $ .\" -.\" Automatically generated by Pod::Man 4.10 (Pod::Simple 3.35) +.\" Automatically generated by Pod::Man 4.11 (Pod::Simple 3.35) .\" .\" Standard preamble: .\" ======================================================================== @@ -135,7 +135,7 @@ .\" ======================================================================== .\" .IX Title "PKCS7_verify 3" -.TH PKCS7_verify 3 "2018-09-23" "1.1.1c" "OpenSSL" +.TH PKCS7_verify 3 "2020-12-10" "1.1.1i" "OpenSSL" .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. .if n .ad l @@ -230,7 +230,7 @@ useful if one merely wishes to write the content to \fBout\fR and its validity is not considered important. .PP Chain verification should arguably be performed using the signing time rather -than the current time. However since the signing time is supplied by the +than the current time. However, since the signing time is supplied by the signer it cannot be trusted without additional evidence (such as a trusted timestamp). .SH "RETURN VALUES" @@ -254,7 +254,7 @@ mentioned in \fBPKCS7_sign()\fR also applies to \fBPKCS7_verify()\fR. \&\fBERR_get_error\fR\|(3), \fBPKCS7_sign\fR\|(3) .SH "COPYRIGHT" .IX Header "COPYRIGHT" -Copyright 2002\-2016 The OpenSSL Project Authors. All Rights Reserved. +Copyright 2002\-2020 The OpenSSL Project Authors. All Rights Reserved. .PP Licensed under the OpenSSL license (the \*(L"License\*(R"). You may not use this file except in compliance with the License. You can obtain a copy diff --git a/crypto/external/bsd/openssl/lib/libcrypto/man/RAND.7 b/crypto/external/bsd/openssl/lib/libcrypto/man/RAND.7 index 0fb9c0afdda..e0bcd4965a7 100644 --- a/crypto/external/bsd/openssl/lib/libcrypto/man/RAND.7 +++ b/crypto/external/bsd/openssl/lib/libcrypto/man/RAND.7 @@ -1,6 +1,6 @@ -.\" $NetBSD: RAND.7,v 1.2 2019/06/09 18:44:32 christos Exp $ +.\" $NetBSD: RAND.7,v 1.2.4.1 2021/03/28 18:21:49 martin Exp $ .\" -.\" Automatically generated by Pod::Man 4.10 (Pod::Simple 3.35) +.\" Automatically generated by Pod::Man 4.11 (Pod::Simple 3.35) .\" .\" Standard preamble: .\" ======================================================================== @@ -135,7 +135,7 @@ .\" ======================================================================== .\" .IX Title "RAND 7" -.TH RAND 7 "2018-09-23" "1.1.1c" "OpenSSL" +.TH RAND 7 "2020-01-23" "1.1.1i" "OpenSSL" .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. .if n .ad l @@ -166,6 +166,12 @@ As a normal application developer, you do not have to worry about any details, just use \fBRAND_bytes\fR\|(3) to obtain random data. Having said that, there is one important rule to obey: Always check the error return value of \fBRAND_bytes\fR\|(3) and do not take randomness for granted. +Although (re\-)seeding is automatic, it can fail because no trusted random source +is available or the trusted source(s) temporarily fail to provide sufficient +random seed material. +In this case the \s-1CSPRNG\s0 enters an error state and ceases to provide output, +until it is able to recover from the error by reseeding itself. +For more details on reseeding and error recovery, see \s-1\fBRAND_DRBG\s0\fR\|(7). .PP For values that should remain secret, you can use \fBRAND_priv_bytes\fR\|(3) instead. @@ -199,7 +205,7 @@ of cryptographic principles and understand the implications of your changes. \&\s-1\fBRAND_DRBG\s0\fR\|(7) .SH "COPYRIGHT" .IX Header "COPYRIGHT" -Copyright 2018 The OpenSSL Project Authors. All Rights Reserved. +Copyright 2018\-2019 The OpenSSL Project Authors. All Rights Reserved. .PP Licensed under the OpenSSL license (the \*(L"License\*(R"). You may not use this file except in compliance with the License. You can obtain a copy diff --git a/crypto/external/bsd/openssl/lib/libcrypto/man/RAND_DRBG.7 b/crypto/external/bsd/openssl/lib/libcrypto/man/RAND_DRBG.7 index 40b63cf70b5..d5c17ec8bba 100644 --- a/crypto/external/bsd/openssl/lib/libcrypto/man/RAND_DRBG.7 +++ b/crypto/external/bsd/openssl/lib/libcrypto/man/RAND_DRBG.7 @@ -1,6 +1,6 @@ -.\" $NetBSD: RAND_DRBG.7,v 1.2 2019/06/09 18:44:32 christos Exp $ +.\" $NetBSD: RAND_DRBG.7,v 1.2.4.1 2021/03/28 18:21:49 martin Exp $ .\" -.\" Automatically generated by Pod::Man 4.10 (Pod::Simple 3.35) +.\" Automatically generated by Pod::Man 4.11 (Pod::Simple 3.35) .\" .\" Standard preamble: .\" ======================================================================== @@ -135,7 +135,7 @@ .\" ======================================================================== .\" .IX Title "RAND_DRBG 7" -.TH RAND_DRBG 7 "2018-12-08" "1.1.1c" "OpenSSL" +.TH RAND_DRBG 7 "2018-12-08" "1.1.1i" "OpenSSL" .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. .if n .ad l diff --git a/crypto/external/bsd/openssl/lib/libcrypto/man/RAND_DRBG_generate.3 b/crypto/external/bsd/openssl/lib/libcrypto/man/RAND_DRBG_generate.3 index 58e9b765cb2..f2109e91ba9 100644 --- a/crypto/external/bsd/openssl/lib/libcrypto/man/RAND_DRBG_generate.3 +++ b/crypto/external/bsd/openssl/lib/libcrypto/man/RAND_DRBG_generate.3 @@ -1,6 +1,6 @@ -.\" $NetBSD: RAND_DRBG_generate.3,v 1.2 2019/06/09 18:44:32 christos Exp $ +.\" $NetBSD: RAND_DRBG_generate.3,v 1.2.4.1 2021/03/28 18:21:49 martin Exp $ .\" -.\" Automatically generated by Pod::Man 4.10 (Pod::Simple 3.35) +.\" Automatically generated by Pod::Man 4.11 (Pod::Simple 3.35) .\" .\" Standard preamble: .\" ======================================================================== @@ -135,7 +135,7 @@ .\" ======================================================================== .\" .IX Title "RAND_DRBG_generate 3" -.TH RAND_DRBG_generate 3 "2019-06-09" "1.1.1c" "OpenSSL" +.TH RAND_DRBG_generate 3 "2019-06-09" "1.1.1i" "OpenSSL" .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. .if n .ad l diff --git a/crypto/external/bsd/openssl/lib/libcrypto/man/RAND_DRBG_get0_master.3 b/crypto/external/bsd/openssl/lib/libcrypto/man/RAND_DRBG_get0_master.3 index b45e95ddb99..f1de7c839e4 100644 --- a/crypto/external/bsd/openssl/lib/libcrypto/man/RAND_DRBG_get0_master.3 +++ b/crypto/external/bsd/openssl/lib/libcrypto/man/RAND_DRBG_get0_master.3 @@ -1,6 +1,6 @@ -.\" $NetBSD: RAND_DRBG_get0_master.3,v 1.2 2019/06/09 18:44:32 christos Exp $ +.\" $NetBSD: RAND_DRBG_get0_master.3,v 1.2.4.1 2021/03/28 18:21:49 martin Exp $ .\" -.\" Automatically generated by Pod::Man 4.10 (Pod::Simple 3.35) +.\" Automatically generated by Pod::Man 4.11 (Pod::Simple 3.35) .\" .\" Standard preamble: .\" ======================================================================== @@ -135,7 +135,7 @@ .\" ======================================================================== .\" .IX Title "RAND_DRBG_get0_master 3" -.TH RAND_DRBG_get0_master 3 "2019-06-09" "1.1.1c" "OpenSSL" +.TH RAND_DRBG_get0_master 3 "2019-06-09" "1.1.1i" "OpenSSL" .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. .if n .ad l diff --git a/crypto/external/bsd/openssl/lib/libcrypto/man/RAND_DRBG_new.3 b/crypto/external/bsd/openssl/lib/libcrypto/man/RAND_DRBG_new.3 index d7fc1a73968..7fea8cd8363 100644 --- a/crypto/external/bsd/openssl/lib/libcrypto/man/RAND_DRBG_new.3 +++ b/crypto/external/bsd/openssl/lib/libcrypto/man/RAND_DRBG_new.3 @@ -1,6 +1,6 @@ -.\" $NetBSD: RAND_DRBG_new.3,v 1.2 2019/06/09 18:44:32 christos Exp $ +.\" $NetBSD: RAND_DRBG_new.3,v 1.2.4.1 2021/03/28 18:21:49 martin Exp $ .\" -.\" Automatically generated by Pod::Man 4.10 (Pod::Simple 3.35) +.\" Automatically generated by Pod::Man 4.11 (Pod::Simple 3.35) .\" .\" Standard preamble: .\" ======================================================================== @@ -135,7 +135,7 @@ .\" ======================================================================== .\" .IX Title "RAND_DRBG_new 3" -.TH RAND_DRBG_new 3 "2019-06-09" "1.1.1c" "OpenSSL" +.TH RAND_DRBG_new 3 "2020-12-10" "1.1.1i" "OpenSSL" .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. .if n .ad l @@ -196,7 +196,7 @@ its type and to instantiate it. .PP The optional \fBflags\fR argument specifies a set of bit flags which can be joined using the | operator. Currently, the only flag is -\&\s-1RAND_DRBG_FLAG_CTR_NO_DF,\s0 which disables the use of a the derivation function +\&\s-1RAND_DRBG_FLAG_CTR_NO_DF,\s0 which disables the use of the derivation function ctr_df. For an explanation, see [\s-1NIST SP 800\-90A\s0 Rev. 1]. .PP If a \fBparent\fR instance is specified then this will be used instead of @@ -250,7 +250,7 @@ cryptographic routines that obtain random data directly or indirectly. The \s-1RAND_DRBG\s0 functions were added in OpenSSL 1.1.1. .SH "COPYRIGHT" .IX Header "COPYRIGHT" -Copyright 2017\-2019 The OpenSSL Project Authors. All Rights Reserved. +Copyright 2017\-2020 The OpenSSL Project Authors. All Rights Reserved. .PP Licensed under the OpenSSL license (the \*(L"License\*(R"). You may not use this file except in compliance with the License. You can obtain a copy diff --git a/crypto/external/bsd/openssl/lib/libcrypto/man/RAND_DRBG_reseed.3 b/crypto/external/bsd/openssl/lib/libcrypto/man/RAND_DRBG_reseed.3 index 01930f2e131..42dabd93bf9 100644 --- a/crypto/external/bsd/openssl/lib/libcrypto/man/RAND_DRBG_reseed.3 +++ b/crypto/external/bsd/openssl/lib/libcrypto/man/RAND_DRBG_reseed.3 @@ -1,6 +1,6 @@ -.\" $NetBSD: RAND_DRBG_reseed.3,v 1.2 2019/06/09 18:44:32 christos Exp $ +.\" $NetBSD: RAND_DRBG_reseed.3,v 1.2.4.1 2021/03/28 18:21:49 martin Exp $ .\" -.\" Automatically generated by Pod::Man 4.10 (Pod::Simple 3.35) +.\" Automatically generated by Pod::Man 4.11 (Pod::Simple 3.35) .\" .\" Standard preamble: .\" ======================================================================== @@ -135,7 +135,7 @@ .\" ======================================================================== .\" .IX Title "RAND_DRBG_reseed 3" -.TH RAND_DRBG_reseed 3 "2019-06-09" "1.1.1c" "OpenSSL" +.TH RAND_DRBG_reseed 3 "2019-06-09" "1.1.1i" "OpenSSL" .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. .if n .ad l diff --git a/crypto/external/bsd/openssl/lib/libcrypto/man/RAND_DRBG_set_callbacks.3 b/crypto/external/bsd/openssl/lib/libcrypto/man/RAND_DRBG_set_callbacks.3 index dc3e9e48a19..0a35ca6a93c 100644 --- a/crypto/external/bsd/openssl/lib/libcrypto/man/RAND_DRBG_set_callbacks.3 +++ b/crypto/external/bsd/openssl/lib/libcrypto/man/RAND_DRBG_set_callbacks.3 @@ -1,6 +1,6 @@ -.\" $NetBSD: RAND_DRBG_set_callbacks.3,v 1.2 2019/06/09 18:44:32 christos Exp $ +.\" $NetBSD: RAND_DRBG_set_callbacks.3,v 1.2.4.1 2021/03/28 18:21:49 martin Exp $ .\" -.\" Automatically generated by Pod::Man 4.10 (Pod::Simple 3.35) +.\" Automatically generated by Pod::Man 4.11 (Pod::Simple 3.35) .\" .\" Standard preamble: .\" ======================================================================== @@ -135,7 +135,7 @@ .\" ======================================================================== .\" .IX Title "RAND_DRBG_set_callbacks 3" -.TH RAND_DRBG_set_callbacks 3 "2019-06-09" "1.1.1c" "OpenSSL" +.TH RAND_DRBG_set_callbacks 3 "2020-12-10" "1.1.1i" "OpenSSL" .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. .if n .ad l @@ -216,7 +216,7 @@ does not satisfy the conditions requested by [\s-1NIST SP 800\-90C\s0], then it must also indicate an error by returning a buffer length of 0. See \s-1NOTES\s0 section for more details. .PP -The \fBcleanup_entropy\fR() callback is called from the \fBdrbg\fR to to clear and +The \fBcleanup_entropy\fR() callback is called from the \fBdrbg\fR to clear and free the buffer allocated previously by \fBget_entropy()\fR. The values \fBout\fR and \fBoutlen\fR are the random buffer's address and length, as returned by the \fBget_entropy()\fR callback. @@ -250,7 +250,7 @@ In other words, prediction resistance is currently not supported yet by the \s-1 The derivation function is disabled during initialization by calling the \&\fBRAND_DRBG_set()\fR function with the \s-1RAND_DRBG_FLAG_CTR_NO_DF\s0 flag. For more information on the derivation function and when it can be omitted, -see [\s-1NIST SP 800\-90A\s0 Rev. 1]. Roughly speeking it can be omitted if the random +see [\s-1NIST SP 800\-90A\s0 Rev. 1]. Roughly speaking it can be omitted if the random source has \*(L"full entropy\*(R", i.e., contains 8 bits of entropy per byte. .PP Even if a nonce is required, the \fBget_nonce\fR() and \fBcleanup_nonce\fR() @@ -269,7 +269,7 @@ section 8.6.7. The \s-1RAND_DRBG\s0 functions were added in OpenSSL 1.1.1. .SH "COPYRIGHT" .IX Header "COPYRIGHT" -Copyright 2017\-2019 The OpenSSL Project Authors. All Rights Reserved. +Copyright 2017\-2020 The OpenSSL Project Authors. All Rights Reserved. .PP Licensed under the OpenSSL license (the \*(L"License\*(R"). You may not use this file except in compliance with the License. You can obtain a copy diff --git a/crypto/external/bsd/openssl/lib/libcrypto/man/RAND_DRBG_set_ex_data.3 b/crypto/external/bsd/openssl/lib/libcrypto/man/RAND_DRBG_set_ex_data.3 index b20cb229406..a4cda729a3f 100644 --- a/crypto/external/bsd/openssl/lib/libcrypto/man/RAND_DRBG_set_ex_data.3 +++ b/crypto/external/bsd/openssl/lib/libcrypto/man/RAND_DRBG_set_ex_data.3 @@ -1,6 +1,6 @@ -.\" $NetBSD: RAND_DRBG_set_ex_data.3,v 1.2 2019/06/09 18:44:32 christos Exp $ +.\" $NetBSD: RAND_DRBG_set_ex_data.3,v 1.2.4.1 2021/03/28 18:21:49 martin Exp $ .\" -.\" Automatically generated by Pod::Man 4.10 (Pod::Simple 3.35) +.\" Automatically generated by Pod::Man 4.11 (Pod::Simple 3.35) .\" .\" Standard preamble: .\" ======================================================================== @@ -135,7 +135,7 @@ .\" ======================================================================== .\" .IX Title "RAND_DRBG_set_ex_data 3" -.TH RAND_DRBG_set_ex_data 3 "2018-09-23" "1.1.1c" "OpenSSL" +.TH RAND_DRBG_set_ex_data 3 "2018-09-23" "1.1.1i" "OpenSSL" .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. .if n .ad l diff --git a/crypto/external/bsd/openssl/lib/libcrypto/man/RAND_add.3 b/crypto/external/bsd/openssl/lib/libcrypto/man/RAND_add.3 index 590bbc85e76..1ee7ec4e3e8 100644 --- a/crypto/external/bsd/openssl/lib/libcrypto/man/RAND_add.3 +++ b/crypto/external/bsd/openssl/lib/libcrypto/man/RAND_add.3 @@ -1,6 +1,6 @@ -.\" $NetBSD: RAND_add.3,v 1.19 2019/06/09 18:44:32 christos Exp $ +.\" $NetBSD: RAND_add.3,v 1.19.2.1 2021/03/28 18:21:49 martin Exp $ .\" -.\" Automatically generated by Pod::Man 4.10 (Pod::Simple 3.35) +.\" Automatically generated by Pod::Man 4.11 (Pod::Simple 3.35) .\" .\" Standard preamble: .\" ======================================================================== @@ -135,7 +135,7 @@ .\" ======================================================================== .\" .IX Title "RAND_add 3" -.TH RAND_add 3 "2019-06-09" "1.1.1c" "OpenSSL" +.TH RAND_add 3 "2020-12-10" "1.1.1i" "OpenSSL" .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. .if n .ad l @@ -205,7 +205,7 @@ usage by the random seed sources. Some seed sources maintain open file descriptors by default, which allows such sources to operate in a \&\fBchroot\fR\|(2) jail without the associated device nodes being available. When the \fBkeep\fR argument is zero, this call disables the retention of file -descriptors. Conversely, a non-zero argument enables the retention of +descriptors. Conversely, a nonzero argument enables the retention of file descriptors. This function is usually called during initialization and it takes effect immediately. .PP @@ -233,7 +233,7 @@ The other functions do not return values. not be used. .SH "COPYRIGHT" .IX Header "COPYRIGHT" -Copyright 2000\-2019 The OpenSSL Project Authors. All Rights Reserved. +Copyright 2000\-2020 The OpenSSL Project Authors. All Rights Reserved. .PP Licensed under the OpenSSL license (the \*(L"License\*(R"). You may not use this file except in compliance with the License. You can obtain a copy diff --git a/crypto/external/bsd/openssl/lib/libcrypto/man/RAND_bytes.3 b/crypto/external/bsd/openssl/lib/libcrypto/man/RAND_bytes.3 index e845f24c3fe..ac40e238178 100644 --- a/crypto/external/bsd/openssl/lib/libcrypto/man/RAND_bytes.3 +++ b/crypto/external/bsd/openssl/lib/libcrypto/man/RAND_bytes.3 @@ -1,6 +1,6 @@ -.\" $NetBSD: RAND_bytes.3,v 1.19 2019/06/09 18:44:32 christos Exp $ +.\" $NetBSD: RAND_bytes.3,v 1.19.2.1 2021/03/28 18:21:49 martin Exp $ .\" -.\" Automatically generated by Pod::Man 4.10 (Pod::Simple 3.35) +.\" Automatically generated by Pod::Man 4.11 (Pod::Simple 3.35) .\" .\" Standard preamble: .\" ======================================================================== @@ -135,7 +135,7 @@ .\" ======================================================================== .\" .IX Title "RAND_bytes 3" -.TH RAND_bytes 3 "2019-06-09" "1.1.1c" "OpenSSL" +.TH RAND_bytes 3 "2020-03-22" "1.1.1i" "OpenSSL" .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. .if n .ad l @@ -162,8 +162,8 @@ Deprecated: .Ve .SH "DESCRIPTION" .IX Header "DESCRIPTION" -\&\fBRAND_bytes()\fR puts \fBnum\fR cryptographically strong pseudo-random bytes -into \fBbuf\fR. +\&\fBRAND_bytes()\fR generates \fBnum\fR random bytes using a cryptographically +secure pseudo random generator (\s-1CSPRNG\s0) and stores them in \fBbuf\fR. .PP \&\fBRAND_priv_bytes()\fR has the same semantics as \fBRAND_bytes()\fR. It is intended to be used for generating values that should remain private. If using the @@ -173,10 +173,22 @@ affect the secrecy of these private values, as described in \s-1\fBRAND\s0\fR\|( and \s-1\fBRAND_DRBG\s0\fR\|(7). .SH "NOTES" .IX Header "NOTES" -Always check the error return value of \fBRAND_bytes()\fR and -\&\fBRAND_priv_bytes()\fR and do not take randomness for granted: an error occurs -if the \s-1CSPRNG\s0 has not been seeded with enough randomness to ensure an -unpredictable byte sequence. +By default, the OpenSSL \s-1CSPRNG\s0 supports a security level of 256 bits, provided it +was able to seed itself from a trusted entropy source. +On all major platforms supported by OpenSSL (including the Unix-like platforms +and Windows), OpenSSL is configured to automatically seed the \s-1CSPRNG\s0 on first use +using the operating systems's random generator. +.PP +If the entropy source fails or is not available, the \s-1CSPRNG\s0 will enter an +error state and refuse to generate random bytes. For that reason, it is important +to always check the error return value of \fBRAND_bytes()\fR and \fBRAND_priv_bytes()\fR and +not take randomness for granted. +.PP +On other platforms, there might not be a trusted entropy source available +or OpenSSL might have been explicitly configured to use different entropy sources. +If you are in doubt about the quality of the entropy source, don't hesitate to ask +your operating system vendor or post a question on GitHub or the openssl-users +mailing list. .SH "RETURN VALUES" .IX Header "RETURN VALUES" \&\fBRAND_bytes()\fR and \fBRAND_priv_bytes()\fR @@ -199,7 +211,7 @@ obtained by \fBERR_get_error\fR\|(3). The \fBRAND_priv_bytes()\fR function was added in OpenSSL 1.1.1. .SH "COPYRIGHT" .IX Header "COPYRIGHT" -Copyright 2000\-2019 The OpenSSL Project Authors. All Rights Reserved. +Copyright 2000\-2020 The OpenSSL Project Authors. All Rights Reserved. .PP Licensed under the OpenSSL license (the \*(L"License\*(R"). You may not use this file except in compliance with the License. You can obtain a copy diff --git a/crypto/external/bsd/openssl/lib/libcrypto/man/RAND_cleanup.3 b/crypto/external/bsd/openssl/lib/libcrypto/man/RAND_cleanup.3 index 9d61f2a0acd..39fee854b6d 100644 --- a/crypto/external/bsd/openssl/lib/libcrypto/man/RAND_cleanup.3 +++ b/crypto/external/bsd/openssl/lib/libcrypto/man/RAND_cleanup.3 @@ -1,6 +1,6 @@ -.\" $NetBSD: RAND_cleanup.3,v 1.19 2019/06/09 18:44:32 christos Exp $ +.\" $NetBSD: RAND_cleanup.3,v 1.19.2.1 2021/03/28 18:21:49 martin Exp $ .\" -.\" Automatically generated by Pod::Man 4.10 (Pod::Simple 3.35) +.\" Automatically generated by Pod::Man 4.11 (Pod::Simple 3.35) .\" .\" Standard preamble: .\" ======================================================================== @@ -135,7 +135,7 @@ .\" ======================================================================== .\" .IX Title "RAND_cleanup 3" -.TH RAND_cleanup 3 "2019-06-09" "1.1.1c" "OpenSSL" +.TH RAND_cleanup 3 "2019-06-09" "1.1.1i" "OpenSSL" .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. .if n .ad l diff --git a/crypto/external/bsd/openssl/lib/libcrypto/man/RAND_egd.3 b/crypto/external/bsd/openssl/lib/libcrypto/man/RAND_egd.3 index a551a81615c..7a92af331d9 100644 --- a/crypto/external/bsd/openssl/lib/libcrypto/man/RAND_egd.3 +++ b/crypto/external/bsd/openssl/lib/libcrypto/man/RAND_egd.3 @@ -1,6 +1,6 @@ -.\" $NetBSD: RAND_egd.3,v 1.19 2019/06/09 18:44:32 christos Exp $ +.\" $NetBSD: RAND_egd.3,v 1.19.2.1 2021/03/28 18:21:49 martin Exp $ .\" -.\" Automatically generated by Pod::Man 4.10 (Pod::Simple 3.35) +.\" Automatically generated by Pod::Man 4.11 (Pod::Simple 3.35) .\" .\" Standard preamble: .\" ======================================================================== @@ -135,7 +135,7 @@ .\" ======================================================================== .\" .IX Title "RAND_egd 3" -.TH RAND_egd 3 "2018-09-23" "1.1.1c" "OpenSSL" +.TH RAND_egd 3 "2018-09-23" "1.1.1i" "OpenSSL" .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. .if n .ad l diff --git a/crypto/external/bsd/openssl/lib/libcrypto/man/RAND_load_file.3 b/crypto/external/bsd/openssl/lib/libcrypto/man/RAND_load_file.3 index 9d6478368a1..1a0f0ae6629 100644 --- a/crypto/external/bsd/openssl/lib/libcrypto/man/RAND_load_file.3 +++ b/crypto/external/bsd/openssl/lib/libcrypto/man/RAND_load_file.3 @@ -1,6 +1,6 @@ -.\" $NetBSD: RAND_load_file.3,v 1.19 2019/06/09 18:44:32 christos Exp $ +.\" $NetBSD: RAND_load_file.3,v 1.19.2.1 2021/03/28 18:21:49 martin Exp $ .\" -.\" Automatically generated by Pod::Man 4.10 (Pod::Simple 3.35) +.\" Automatically generated by Pod::Man 4.11 (Pod::Simple 3.35) .\" .\" Standard preamble: .\" ======================================================================== @@ -135,7 +135,7 @@ .\" ======================================================================== .\" .IX Title "RAND_load_file 3" -.TH RAND_load_file 3 "2018-09-23" "1.1.1c" "OpenSSL" +.TH RAND_load_file 3 "2020-12-10" "1.1.1i" "OpenSSL" .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. .if n .ad l @@ -158,7 +158,7 @@ libcrypto, -lcrypto .SH "DESCRIPTION" .IX Header "DESCRIPTION" \&\fBRAND_load_file()\fR reads a number of bytes from file \fBfilename\fR and -adds them to the \s-1PRNG.\s0 If \fBmax_bytes\fR is non-negative, +adds them to the \s-1PRNG.\s0 If \fBmax_bytes\fR is nonnegative, up to \fBmax_bytes\fR are read; if \fBmax_bytes\fR is \-1, the complete file is read. Do not load the same file multiple times unless its contents have @@ -178,7 +178,7 @@ file. \fBbuf\fR points to a buffer of size \fBnum\fR in which to store the filename. .PP On all systems, if the environment variable \fB\s-1RANDFILE\s0\fR is set, its -value will be used as the seed file name. +value will be used as the seed filename. Otherwise, the file is called \f(CW\*(C`.rnd\*(C'\fR, found in platform dependent locations: .IP "On Windows (in order of preference)" 4 .IX Item "On Windows (in order of preference)" @@ -197,7 +197,7 @@ Otherwise, the file is called \f(CW\*(C`.rnd\*(C'\fR, found in platform dependen .Ve .PP If \f(CW$HOME\fR (on non-Windows and non-VMS system) is not set either, or -\&\fBnum\fR is too small for the path name, an error occurs. +\&\fBnum\fR is too small for the pathname, an error occurs. .SH "RETURN VALUES" .IX Header "RETURN VALUES" \&\fBRAND_load_file()\fR returns the number of bytes read or \-1 on error. @@ -214,7 +214,7 @@ error. \&\s-1\fBRAND\s0\fR\|(7) .SH "COPYRIGHT" .IX Header "COPYRIGHT" -Copyright 2000\-2018 The OpenSSL Project Authors. All Rights Reserved. +Copyright 2000\-2020 The OpenSSL Project Authors. All Rights Reserved. .PP Licensed under the OpenSSL license (the \*(L"License\*(R"). You may not use this file except in compliance with the License. You can obtain a copy diff --git a/crypto/external/bsd/openssl/lib/libcrypto/man/RAND_set_rand_method.3 b/crypto/external/bsd/openssl/lib/libcrypto/man/RAND_set_rand_method.3 index 145b2b699c5..d409e9808fe 100644 --- a/crypto/external/bsd/openssl/lib/libcrypto/man/RAND_set_rand_method.3 +++ b/crypto/external/bsd/openssl/lib/libcrypto/man/RAND_set_rand_method.3 @@ -1,6 +1,6 @@ -.\" $NetBSD: RAND_set_rand_method.3,v 1.19 2019/06/09 18:44:32 christos Exp $ +.\" $NetBSD: RAND_set_rand_method.3,v 1.19.2.1 2021/03/28 18:21:49 martin Exp $ .\" -.\" Automatically generated by Pod::Man 4.10 (Pod::Simple 3.35) +.\" Automatically generated by Pod::Man 4.11 (Pod::Simple 3.35) .\" .\" Standard preamble: .\" ======================================================================== @@ -135,7 +135,7 @@ .\" ======================================================================== .\" .IX Title "RAND_set_rand_method 3" -.TH RAND_set_rand_method 3 "2018-09-23" "1.1.1c" "OpenSSL" +.TH RAND_set_rand_method 3 "2020-04-24" "1.1.1i" "OpenSSL" .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. .if n .ad l @@ -151,7 +151,7 @@ libcrypto, -lcrypto \& \& RAND_METHOD *RAND_OpenSSL(void); \& -\& void RAND_set_rand_method(const RAND_METHOD *meth); +\& int RAND_set_rand_method(const RAND_METHOD *meth); \& \& const RAND_METHOD *RAND_get_rand_method(void); .Ve @@ -174,10 +174,10 @@ be used instead of the method returned by \fBRAND_OpenSSL()\fR. .IX Header "THE RAND_METHOD STRUCTURE" .Vb 8 \& typedef struct rand_meth_st { -\& void (*seed)(const void *buf, int num); +\& int (*seed)(const void *buf, int num); \& int (*bytes)(unsigned char *buf, int num); \& void (*cleanup)(void); -\& void (*add)(const void *buf, int num, int randomness); +\& int (*add)(const void *buf, int num, double entropy); \& int (*pseudorand)(unsigned char *buf, int num); \& int (*status)(void); \& } RAND_METHOD; @@ -189,8 +189,9 @@ and \fBRAND_status()\fR. Each pointer may be \s-1NULL\s0 if the function is not implemented. .SH "RETURN VALUES" .IX Header "RETURN VALUES" -\&\fBRAND_set_rand_method()\fR returns no value. \fBRAND_get_rand_method()\fR and -\&\fBRAND_OpenSSL()\fR return pointers to the respective methods. +\&\fBRAND_set_rand_method()\fR returns 1 on success and 0 on failure. +\&\fBRAND_get_rand_method()\fR and \fBRAND_OpenSSL()\fR return pointers to the respective +methods. .SH "SEE ALSO" .IX Header "SEE ALSO" \&\fBRAND_bytes\fR\|(3), @@ -198,7 +199,7 @@ Each pointer may be \s-1NULL\s0 if the function is not implemented. \&\s-1\fBRAND\s0\fR\|(7) .SH "COPYRIGHT" .IX Header "COPYRIGHT" -Copyright 2000\-2018 The OpenSSL Project Authors. All Rights Reserved. +Copyright 2000\-2020 The OpenSSL Project Authors. All Rights Reserved. .PP Licensed under the OpenSSL license (the \*(L"License\*(R"). You may not use this file except in compliance with the License. You can obtain a copy diff --git a/crypto/external/bsd/openssl/lib/libcrypto/man/RC4_set_key.3 b/crypto/external/bsd/openssl/lib/libcrypto/man/RC4_set_key.3 index 5501098cb50..d4c50fd1c78 100644 --- a/crypto/external/bsd/openssl/lib/libcrypto/man/RC4_set_key.3 +++ b/crypto/external/bsd/openssl/lib/libcrypto/man/RC4_set_key.3 @@ -1,6 +1,6 @@ -.\" $NetBSD: RC4_set_key.3,v 1.3 2019/06/09 18:44:32 christos Exp $ +.\" $NetBSD: RC4_set_key.3,v 1.3.2.1 2021/03/28 18:21:49 martin Exp $ .\" -.\" Automatically generated by Pod::Man 4.10 (Pod::Simple 3.35) +.\" Automatically generated by Pod::Man 4.11 (Pod::Simple 3.35) .\" .\" Standard preamble: .\" ======================================================================== @@ -135,7 +135,7 @@ .\" ======================================================================== .\" .IX Title "RC4_set_key 3" -.TH RC4_set_key 3 "2018-09-23" "1.1.1c" "OpenSSL" +.TH RC4_set_key 3 "2018-09-23" "1.1.1i" "OpenSSL" .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. .if n .ad l diff --git a/crypto/external/bsd/openssl/lib/libcrypto/man/RIPEMD160_Init.3 b/crypto/external/bsd/openssl/lib/libcrypto/man/RIPEMD160_Init.3 index 8a108cc42c3..d7e6af0a617 100644 --- a/crypto/external/bsd/openssl/lib/libcrypto/man/RIPEMD160_Init.3 +++ b/crypto/external/bsd/openssl/lib/libcrypto/man/RIPEMD160_Init.3 @@ -1,6 +1,6 @@ -.\" $NetBSD: RIPEMD160_Init.3,v 1.3 2019/06/09 18:44:32 christos Exp $ +.\" $NetBSD: RIPEMD160_Init.3,v 1.3.2.1 2021/03/28 18:21:49 martin Exp $ .\" -.\" Automatically generated by Pod::Man 4.10 (Pod::Simple 3.35) +.\" Automatically generated by Pod::Man 4.11 (Pod::Simple 3.35) .\" .\" Standard preamble: .\" ======================================================================== @@ -135,7 +135,7 @@ .\" ======================================================================== .\" .IX Title "RIPEMD160_Init 3" -.TH RIPEMD160_Init 3 "2019-03-12" "1.1.1c" "OpenSSL" +.TH RIPEMD160_Init 3 "2019-03-12" "1.1.1i" "OpenSSL" .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. .if n .ad l diff --git a/crypto/external/bsd/openssl/lib/libcrypto/man/RSA-PSS.7 b/crypto/external/bsd/openssl/lib/libcrypto/man/RSA-PSS.7 index c8f41eee308..dad80a586f9 100644 --- a/crypto/external/bsd/openssl/lib/libcrypto/man/RSA-PSS.7 +++ b/crypto/external/bsd/openssl/lib/libcrypto/man/RSA-PSS.7 @@ -1,6 +1,6 @@ -.\" $NetBSD: RSA-PSS.7,v 1.2 2019/06/09 18:44:32 christos Exp $ +.\" $NetBSD: RSA-PSS.7,v 1.2.4.1 2021/03/28 18:21:49 martin Exp $ .\" -.\" Automatically generated by Pod::Man 4.10 (Pod::Simple 3.35) +.\" Automatically generated by Pod::Man 4.11 (Pod::Simple 3.35) .\" .\" Standard preamble: .\" ======================================================================== @@ -135,7 +135,7 @@ .\" ======================================================================== .\" .IX Title "RSA-PSS 7" -.TH RSA-PSS 7 "2018-09-23" "1.1.1c" "OpenSSL" +.TH RSA-PSS 7 "2018-09-23" "1.1.1i" "OpenSSL" .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. .if n .ad l diff --git a/crypto/external/bsd/openssl/lib/libcrypto/man/RSA_blinding_on.3 b/crypto/external/bsd/openssl/lib/libcrypto/man/RSA_blinding_on.3 index 34b608ca918..755d493ea06 100644 --- a/crypto/external/bsd/openssl/lib/libcrypto/man/RSA_blinding_on.3 +++ b/crypto/external/bsd/openssl/lib/libcrypto/man/RSA_blinding_on.3 @@ -1,6 +1,6 @@ -.\" $NetBSD: RSA_blinding_on.3,v 1.19 2019/06/09 18:44:32 christos Exp $ +.\" $NetBSD: RSA_blinding_on.3,v 1.19.2.1 2021/03/28 18:21:49 martin Exp $ .\" -.\" Automatically generated by Pod::Man 4.10 (Pod::Simple 3.35) +.\" Automatically generated by Pod::Man 4.11 (Pod::Simple 3.35) .\" .\" Standard preamble: .\" ======================================================================== @@ -135,7 +135,7 @@ .\" ======================================================================== .\" .IX Title "RSA_blinding_on 3" -.TH RSA_blinding_on 3 "2018-09-23" "1.1.1c" "OpenSSL" +.TH RSA_blinding_on 3 "2020-12-10" "1.1.1i" "OpenSSL" .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. .if n .ad l @@ -160,9 +160,8 @@ measure the time of \s-1RSA\s0 decryption or signature operations, blinding must be used to protect the \s-1RSA\s0 operation from that attack. .PP \&\fBRSA_blinding_on()\fR turns blinding on for key \fBrsa\fR and generates a -random blinding factor. \fBctx\fR is \fB\s-1NULL\s0\fR or a pre-allocated and -initialized \fB\s-1BN_CTX\s0\fR. The random number generator must be seeded -prior to calling \fBRSA_blinding_on()\fR. +random blinding factor. \fBctx\fR is \fB\s-1NULL\s0\fR or a preallocated and +initialized \fB\s-1BN_CTX\s0\fR. .PP \&\fBRSA_blinding_off()\fR turns blinding off and frees the memory used for the blinding factor. @@ -173,7 +172,7 @@ the blinding factor. \&\fBRSA_blinding_off()\fR returns no value. .SH "COPYRIGHT" .IX Header "COPYRIGHT" -Copyright 2000\-2016 The OpenSSL Project Authors. All Rights Reserved. +Copyright 2000\-2020 The OpenSSL Project Authors. All Rights Reserved. .PP Licensed under the OpenSSL license (the \*(L"License\*(R"). You may not use this file except in compliance with the License. You can obtain a copy diff --git a/crypto/external/bsd/openssl/lib/libcrypto/man/RSA_check_key.3 b/crypto/external/bsd/openssl/lib/libcrypto/man/RSA_check_key.3 index 4ecba327bfa..0d97c8c1d8d 100644 --- a/crypto/external/bsd/openssl/lib/libcrypto/man/RSA_check_key.3 +++ b/crypto/external/bsd/openssl/lib/libcrypto/man/RSA_check_key.3 @@ -1,6 +1,6 @@ -.\" $NetBSD: RSA_check_key.3,v 1.19 2019/06/09 18:44:32 christos Exp $ +.\" $NetBSD: RSA_check_key.3,v 1.19.2.1 2021/03/28 18:21:49 martin Exp $ .\" -.\" Automatically generated by Pod::Man 4.10 (Pod::Simple 3.35) +.\" Automatically generated by Pod::Man 4.11 (Pod::Simple 3.35) .\" .\" Standard preamble: .\" ======================================================================== @@ -135,7 +135,7 @@ .\" ======================================================================== .\" .IX Title "RSA_check_key 3" -.TH RSA_check_key 3 "2018-09-23" "1.1.1c" "OpenSSL" +.TH RSA_check_key 3 "2018-09-23" "1.1.1i" "OpenSSL" .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. .if n .ad l diff --git a/crypto/external/bsd/openssl/lib/libcrypto/man/RSA_generate_key.3 b/crypto/external/bsd/openssl/lib/libcrypto/man/RSA_generate_key.3 index b026179405e..7257074f7e5 100644 --- a/crypto/external/bsd/openssl/lib/libcrypto/man/RSA_generate_key.3 +++ b/crypto/external/bsd/openssl/lib/libcrypto/man/RSA_generate_key.3 @@ -1,6 +1,6 @@ -.\" $NetBSD: RSA_generate_key.3,v 1.19 2019/06/09 18:44:32 christos Exp $ +.\" $NetBSD: RSA_generate_key.3,v 1.19.2.1 2021/03/28 18:21:49 martin Exp $ .\" -.\" Automatically generated by Pod::Man 4.10 (Pod::Simple 3.35) +.\" Automatically generated by Pod::Man 4.11 (Pod::Simple 3.35) .\" .\" Standard preamble: .\" ======================================================================== @@ -135,7 +135,7 @@ .\" ======================================================================== .\" .IX Title "RSA_generate_key 3" -.TH RSA_generate_key 3 "2018-09-23" "1.1.1c" "OpenSSL" +.TH RSA_generate_key 3 "2020-01-23" "1.1.1i" "OpenSSL" .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. .if n .ad l @@ -158,7 +158,7 @@ Deprecated: .PP .Vb 4 \& #if OPENSSL_API_COMPAT < 0x00908000L -\& RSA *RSA_generate_key(int num, unsigned long e, +\& RSA *RSA_generate_key(int bits, unsigned long e, \& void (*callback)(int, int, void *), void *cb_arg); \& #endif .Ve @@ -170,8 +170,10 @@ be seeded prior to calling \fBRSA_generate_key_ex()\fR. .PP \&\fBRSA_generate_multi_prime_key()\fR generates a multi-prime \s-1RSA\s0 key pair and stores it in the \fB\s-1RSA\s0\fR structure provided in \fBrsa\fR. The number of primes is given by -the \fBprimes\fR parameter. The pseudo-random number generator must be seeded prior -to calling \fBRSA_generate_multi_prime_key()\fR. +the \fBprimes\fR parameter. The random number generator must be seeded when +calling \fBRSA_generate_multi_prime_key()\fR. +If the automatic seeding or reseeding of the OpenSSL \s-1CSPRNG\s0 fails due to +external circumstances (see \s-1\fBRAND\s0\fR\|(7)), the operation will fail. .PP The modulus size will be of length \fBbits\fR, the number of primes to form the modulus will be \fBprimes\fR, and the public exponent will be \fBe\fR. Key sizes @@ -192,7 +194,7 @@ progress of the key generation. If \fBcb\fR is not \fB\s-1NULL\s0\fR, it will be called as follows using the \fBBN_GENCB_call()\fR function described on the \fBBN_generate_prime\fR\|(3) page. .PP -\&\fBRSA_generate_prime()\fR is similar to \fBRSA_generate_prime_ex()\fR but +\&\fBRSA_generate_key()\fR is similar to \fBRSA_generate_key_ex()\fR but expects an old-style callback function; see \&\fBBN_generate_prime\fR\|(3) for information on the old-style callback. .IP "\(bu" 2 @@ -220,14 +222,15 @@ The error codes can be obtained by \fBERR_get_error\fR\|(3). \&\fBBN_GENCB_call(cb, 2, x)\fR is used with two different meanings. .SH "SEE ALSO" .IX Header "SEE ALSO" -\&\fBERR_get_error\fR\|(3), \fBRAND_bytes\fR\|(3), \fBBN_generate_prime\fR\|(3) +\&\fBERR_get_error\fR\|(3), \fBRAND_bytes\fR\|(3), \fBBN_generate_prime\fR\|(3), +\&\s-1\fBRAND\s0\fR\|(7) .SH "HISTORY" .IX Header "HISTORY" \&\fBRSA_generate_key()\fR was deprecated in OpenSSL 0.9.8; use \&\fBRSA_generate_key_ex()\fR instead. .SH "COPYRIGHT" .IX Header "COPYRIGHT" -Copyright 2000\-2018 The OpenSSL Project Authors. All Rights Reserved. +Copyright 2000\-2019 The OpenSSL Project Authors. All Rights Reserved. .PP Licensed under the OpenSSL license (the \*(L"License\*(R"). You may not use this file except in compliance with the License. You can obtain a copy diff --git a/crypto/external/bsd/openssl/lib/libcrypto/man/RSA_get0_key.3 b/crypto/external/bsd/openssl/lib/libcrypto/man/RSA_get0_key.3 index b81c72918a5..695c3ae714f 100644 --- a/crypto/external/bsd/openssl/lib/libcrypto/man/RSA_get0_key.3 +++ b/crypto/external/bsd/openssl/lib/libcrypto/man/RSA_get0_key.3 @@ -1,6 +1,6 @@ -.\" $NetBSD: RSA_get0_key.3,v 1.3 2019/06/09 18:44:32 christos Exp $ +.\" $NetBSD: RSA_get0_key.3,v 1.3.2.1 2021/03/28 18:21:49 martin Exp $ .\" -.\" Automatically generated by Pod::Man 4.10 (Pod::Simple 3.35) +.\" Automatically generated by Pod::Man 4.11 (Pod::Simple 3.35) .\" .\" Standard preamble: .\" ======================================================================== @@ -135,7 +135,7 @@ .\" ======================================================================== .\" .IX Title "RSA_get0_key 3" -.TH RSA_get0_key 3 "2019-03-12" "1.1.1c" "OpenSSL" +.TH RSA_get0_key 3 "2020-03-22" "1.1.1i" "OpenSSL" .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. .if n .ad l @@ -144,7 +144,7 @@ RSA_set0_key, RSA_set0_factors, RSA_set0_crt_params, RSA_get0_key, RSA_get0_factors, RSA_get0_crt_params, RSA_get0_n, RSA_get0_e, RSA_get0_d, RSA_get0_p, RSA_get0_q, -RSA_get0_dmp1, RSA_get0_dmq1, RSA_get0_iqmp, +RSA_get0_dmp1, RSA_get0_dmq1, RSA_get0_iqmp, RSA_get0_pss_params, RSA_clear_flags, RSA_test_flags, RSA_set_flags, RSA_get0_engine, RSA_get_multi_prime_extra_count, RSA_get0_multi_prime_factors, RSA_get0_multi_prime_crt_params, @@ -174,6 +174,7 @@ libcrypto, -lcrypto \& const BIGNUM *RSA_get0_dmp1(const RSA *r); \& const BIGNUM *RSA_get0_dmq1(const RSA *r); \& const BIGNUM *RSA_get0_iqmp(const RSA *r); +\& const RSA_PSS_PARAMS *RSA_get0_pss_params(const RSA *r); \& void RSA_clear_flags(RSA *r, int flags); \& int RSA_test_flags(const RSA *r, int flags); \& void RSA_set_flags(RSA *r, int flags); @@ -239,6 +240,8 @@ retrieved separately by the corresponding function \&\fBRSA_get0_n()\fR, \fBRSA_get0_e()\fR, \fBRSA_get0_d()\fR, \fBRSA_get0_p()\fR, \fBRSA_get0_q()\fR, \&\fBRSA_get0_dmp1()\fR, \fBRSA_get0_dmq1()\fR, and \fBRSA_get0_iqmp()\fR, respectively. .PP +\&\fBRSA_get0_pss_params()\fR is used to retrieve the RSA-PSS parameters. +.PP \&\fBRSA_set_flags()\fR sets the flags in the \fBflags\fR parameter on the \s-1RSA\s0 object. Multiple flags can be passed in one go (bitwise ORed together). Any flags that are already set are left set. \fBRSA_test_flags()\fR tests to @@ -294,6 +297,8 @@ multi-prime \s-1RSA.\s0 \&\fBRSA_new\fR\|(3), \fBRSA_size\fR\|(3) .SH "HISTORY" .IX Header "HISTORY" +The \fBRSA_get0_pss_params()\fR function was added in OpenSSL 1.1.1e. +.PP The \&\fBRSA_get_multi_prime_extra_count()\fR, \fBRSA_get0_multi_prime_factors()\fR, \&\fBRSA_get0_multi_prime_crt_params()\fR, \fBRSA_set0_multi_prime_params()\fR, diff --git a/crypto/external/bsd/openssl/lib/libcrypto/man/RSA_meth_new.3 b/crypto/external/bsd/openssl/lib/libcrypto/man/RSA_meth_new.3 index 55b9034a5d6..a4baff1e503 100644 --- a/crypto/external/bsd/openssl/lib/libcrypto/man/RSA_meth_new.3 +++ b/crypto/external/bsd/openssl/lib/libcrypto/man/RSA_meth_new.3 @@ -1,6 +1,6 @@ -.\" $NetBSD: RSA_meth_new.3,v 1.3 2019/06/09 18:44:32 christos Exp $ +.\" $NetBSD: RSA_meth_new.3,v 1.3.2.1 2021/03/28 18:21:49 martin Exp $ .\" -.\" Automatically generated by Pod::Man 4.10 (Pod::Simple 3.35) +.\" Automatically generated by Pod::Man 4.11 (Pod::Simple 3.35) .\" .\" Standard preamble: .\" ======================================================================== @@ -135,7 +135,7 @@ .\" ======================================================================== .\" .IX Title "RSA_meth_new 3" -.TH RSA_meth_new 3 "2018-12-08" "1.1.1c" "OpenSSL" +.TH RSA_meth_new 3 "2018-12-08" "1.1.1i" "OpenSSL" .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. .if n .ad l diff --git a/crypto/external/bsd/openssl/lib/libcrypto/man/RSA_new.3 b/crypto/external/bsd/openssl/lib/libcrypto/man/RSA_new.3 index 0062b9a07cb..43b16f1c39e 100644 --- a/crypto/external/bsd/openssl/lib/libcrypto/man/RSA_new.3 +++ b/crypto/external/bsd/openssl/lib/libcrypto/man/RSA_new.3 @@ -1,6 +1,6 @@ -.\" $NetBSD: RSA_new.3,v 1.19 2019/06/09 18:44:32 christos Exp $ +.\" $NetBSD: RSA_new.3,v 1.19.2.1 2021/03/28 18:21:49 martin Exp $ .\" -.\" Automatically generated by Pod::Man 4.10 (Pod::Simple 3.35) +.\" Automatically generated by Pod::Man 4.11 (Pod::Simple 3.35) .\" .\" Standard preamble: .\" ======================================================================== @@ -135,7 +135,7 @@ .\" ======================================================================== .\" .IX Title "RSA_new 3" -.TH RSA_new 3 "2018-09-23" "1.1.1c" "OpenSSL" +.TH RSA_new 3 "2018-09-23" "1.1.1i" "OpenSSL" .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. .if n .ad l diff --git a/crypto/external/bsd/openssl/lib/libcrypto/man/RSA_padding_add_PKCS1_type_1.3 b/crypto/external/bsd/openssl/lib/libcrypto/man/RSA_padding_add_PKCS1_type_1.3 index eed23cae6be..5ca6975d68e 100644 --- a/crypto/external/bsd/openssl/lib/libcrypto/man/RSA_padding_add_PKCS1_type_1.3 +++ b/crypto/external/bsd/openssl/lib/libcrypto/man/RSA_padding_add_PKCS1_type_1.3 @@ -1,6 +1,6 @@ -.\" $NetBSD: RSA_padding_add_PKCS1_type_1.3,v 1.19 2019/06/09 18:44:32 christos Exp $ +.\" $NetBSD: RSA_padding_add_PKCS1_type_1.3,v 1.19.2.1 2021/03/28 18:21:49 martin Exp $ .\" -.\" Automatically generated by Pod::Man 4.10 (Pod::Simple 3.35) +.\" Automatically generated by Pod::Man 4.11 (Pod::Simple 3.35) .\" .\" Standard preamble: .\" ======================================================================== @@ -135,7 +135,7 @@ .\" ======================================================================== .\" .IX Title "RSA_padding_add_PKCS1_type_1 3" -.TH RSA_padding_add_PKCS1_type_1 3 "2019-06-09" "1.1.1c" "OpenSSL" +.TH RSA_padding_add_PKCS1_type_1 3 "2020-01-23" "1.1.1i" "OpenSSL" .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. .if n .ad l @@ -232,6 +232,8 @@ simply copy the data .PP The random number generator must be seeded prior to calling \&\fBRSA_padding_add_xxx()\fR. +If the automatic seeding or reseeding of the OpenSSL \s-1CSPRNG\s0 fails due to +external circumstances (see \s-1\fBRAND\s0\fR\|(7)), the operation will fail. .PP \&\fBRSA_padding_check_xxx()\fR verifies that the \fBfl\fR bytes at \fBf\fR contain a valid encoding for a \fBrsa_len\fR byte \s-1RSA\s0 key in the respective @@ -251,8 +253,8 @@ The \fBRSA_padding_add_xxx()\fR functions return 1 on success, 0 on error. The \fBRSA_padding_check_xxx()\fR functions return the length of the recovered data, \-1 on error. Error codes can be obtained by calling \&\fBERR_get_error\fR\|(3). -.SH "WARNING" -.IX Header "WARNING" +.SH "WARNINGS" +.IX Header "WARNINGS" The result of \fBRSA_padding_check_PKCS1_type_2()\fR is a very sensitive information which can potentially be used to mount a Bleichenbacher padding oracle attack. This is an inherent weakness in the \s-1PKCS\s0 #1 @@ -272,7 +274,8 @@ including \s-1PKCS1_OAEP.\s0 .IX Header "SEE ALSO" \&\fBRSA_public_encrypt\fR\|(3), \&\fBRSA_private_decrypt\fR\|(3), -\&\fBRSA_sign\fR\|(3), \fBRSA_verify\fR\|(3) +\&\fBRSA_sign\fR\|(3), \fBRSA_verify\fR\|(3), +\&\s-1\fBRAND\s0\fR\|(7) .SH "COPYRIGHT" .IX Header "COPYRIGHT" Copyright 2000\-2019 The OpenSSL Project Authors. All Rights Reserved. diff --git a/crypto/external/bsd/openssl/lib/libcrypto/man/RSA_print.3 b/crypto/external/bsd/openssl/lib/libcrypto/man/RSA_print.3 index 46e17c4d11f..db4a8834bd6 100644 --- a/crypto/external/bsd/openssl/lib/libcrypto/man/RSA_print.3 +++ b/crypto/external/bsd/openssl/lib/libcrypto/man/RSA_print.3 @@ -1,6 +1,6 @@ -.\" $NetBSD: RSA_print.3,v 1.19 2019/06/09 18:44:32 christos Exp $ +.\" $NetBSD: RSA_print.3,v 1.19.2.1 2021/03/28 18:21:49 martin Exp $ .\" -.\" Automatically generated by Pod::Man 4.10 (Pod::Simple 3.35) +.\" Automatically generated by Pod::Man 4.11 (Pod::Simple 3.35) .\" .\" Standard preamble: .\" ======================================================================== @@ -135,7 +135,7 @@ .\" ======================================================================== .\" .IX Title "RSA_print 3" -.TH RSA_print 3 "2018-09-23" "1.1.1c" "OpenSSL" +.TH RSA_print 3 "2018-09-23" "1.1.1i" "OpenSSL" .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. .if n .ad l diff --git a/crypto/external/bsd/openssl/lib/libcrypto/man/RSA_private_encrypt.3 b/crypto/external/bsd/openssl/lib/libcrypto/man/RSA_private_encrypt.3 index 89d75db8171..b5d0c4e7ca3 100644 --- a/crypto/external/bsd/openssl/lib/libcrypto/man/RSA_private_encrypt.3 +++ b/crypto/external/bsd/openssl/lib/libcrypto/man/RSA_private_encrypt.3 @@ -1,6 +1,6 @@ -.\" $NetBSD: RSA_private_encrypt.3,v 1.19 2019/06/09 18:44:32 christos Exp $ +.\" $NetBSD: RSA_private_encrypt.3,v 1.19.2.1 2021/03/28 18:21:49 martin Exp $ .\" -.\" Automatically generated by Pod::Man 4.10 (Pod::Simple 3.35) +.\" Automatically generated by Pod::Man 4.11 (Pod::Simple 3.35) .\" .\" Standard preamble: .\" ======================================================================== @@ -135,13 +135,13 @@ .\" ======================================================================== .\" .IX Title "RSA_private_encrypt 3" -.TH RSA_private_encrypt 3 "2018-09-23" "1.1.1c" "OpenSSL" +.TH RSA_private_encrypt 3 "2020-12-10" "1.1.1i" "OpenSSL" .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. .if n .ad l .nh .SH "NAME" -RSA_private_encrypt, RSA_public_decrypt \- low level signature operations +RSA_private_encrypt, RSA_public_decrypt \- low\-level signature operations .SH "LIBRARY" libcrypto, -lcrypto .SH "SYNOPSIS" @@ -157,7 +157,7 @@ libcrypto, -lcrypto .Ve .SH "DESCRIPTION" .IX Header "DESCRIPTION" -These functions handle \s-1RSA\s0 signatures at a low level. +These functions handle \s-1RSA\s0 signatures at a low-level. .PP \&\fBRSA_private_encrypt()\fR signs the \fBflen\fR bytes at \fBfrom\fR (usually a message digest with an algorithm identifier) using the private key @@ -196,7 +196,7 @@ obtained by \fBERR_get_error\fR\|(3). \&\fBRSA_sign\fR\|(3), \fBRSA_verify\fR\|(3) .SH "COPYRIGHT" .IX Header "COPYRIGHT" -Copyright 2000\-2016 The OpenSSL Project Authors. All Rights Reserved. +Copyright 2000\-2020 The OpenSSL Project Authors. All Rights Reserved. .PP Licensed under the OpenSSL license (the \*(L"License\*(R"). You may not use this file except in compliance with the License. You can obtain a copy diff --git a/crypto/external/bsd/openssl/lib/libcrypto/man/RSA_public_encrypt.3 b/crypto/external/bsd/openssl/lib/libcrypto/man/RSA_public_encrypt.3 index 18724a8b48b..9d57ce21180 100644 --- a/crypto/external/bsd/openssl/lib/libcrypto/man/RSA_public_encrypt.3 +++ b/crypto/external/bsd/openssl/lib/libcrypto/man/RSA_public_encrypt.3 @@ -1,6 +1,6 @@ -.\" $NetBSD: RSA_public_encrypt.3,v 1.19 2019/06/09 18:44:32 christos Exp $ +.\" $NetBSD: RSA_public_encrypt.3,v 1.19.2.1 2021/03/28 18:21:49 martin Exp $ .\" -.\" Automatically generated by Pod::Man 4.10 (Pod::Simple 3.35) +.\" Automatically generated by Pod::Man 4.11 (Pod::Simple 3.35) .\" .\" Standard preamble: .\" ======================================================================== @@ -135,7 +135,7 @@ .\" ======================================================================== .\" .IX Title "RSA_public_encrypt 3" -.TH RSA_public_encrypt 3 "2019-06-09" "1.1.1c" "OpenSSL" +.TH RSA_public_encrypt 3 "2020-01-23" "1.1.1i" "OpenSSL" .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. .if n .ad l @@ -212,8 +212,8 @@ means only that the plaintext was empty. .PP On error, \-1 is returned; the error codes can be obtained by \fBERR_get_error\fR\|(3). -.SH "WARNING" -.IX Header "WARNING" +.SH "WARNINGS" +.IX Header "WARNINGS" Decryption failures in the \s-1RSA_PKCS1_PADDING\s0 mode leak information which can potentially be used to mount a Bleichenbacher padding oracle attack. This is an inherent weakness in the \s-1PKCS\s0 #1 v1.5 padding diff --git a/crypto/external/bsd/openssl/lib/libcrypto/man/RSA_set_method.3 b/crypto/external/bsd/openssl/lib/libcrypto/man/RSA_set_method.3 index ab4671a93f0..3f3b922a113 100644 --- a/crypto/external/bsd/openssl/lib/libcrypto/man/RSA_set_method.3 +++ b/crypto/external/bsd/openssl/lib/libcrypto/man/RSA_set_method.3 @@ -1,6 +1,6 @@ -.\" $NetBSD: RSA_set_method.3,v 1.19 2019/06/09 18:44:32 christos Exp $ +.\" $NetBSD: RSA_set_method.3,v 1.19.2.1 2021/03/28 18:21:49 martin Exp $ .\" -.\" Automatically generated by Pod::Man 4.10 (Pod::Simple 3.35) +.\" Automatically generated by Pod::Man 4.11 (Pod::Simple 3.35) .\" .\" Standard preamble: .\" ======================================================================== @@ -135,7 +135,7 @@ .\" ======================================================================== .\" .IX Title "RSA_set_method 3" -.TH RSA_set_method 3 "2018-09-23" "1.1.1c" "OpenSSL" +.TH RSA_set_method 3 "2020-12-10" "1.1.1i" "OpenSSL" .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. .if n .ad l @@ -192,7 +192,7 @@ recommended. \&\fBrsa\fR. This will replace the \s-1RSA_METHOD\s0 used by the \s-1RSA\s0 key and if the previous method was supplied by an \s-1ENGINE,\s0 the handle to that \s-1ENGINE\s0 will be released during the change. It is possible to have \s-1RSA\s0 keys that only -work with certain \s-1RSA_METHOD\s0 implementations (eg. from an \s-1ENGINE\s0 module +work with certain \s-1RSA_METHOD\s0 implementations (e.g. from an \s-1ENGINE\s0 module that supports embedded hardware-protected keys), and in such cases attempting to change the \s-1RSA_METHOD\s0 for the key can have unexpected results. @@ -313,7 +313,7 @@ The \fBRSA_null_method()\fR, which was a partial attempt to avoid patent issues, was replaced to always return \s-1NULL\s0 in OpenSSL 1.1.1. .SH "COPYRIGHT" .IX Header "COPYRIGHT" -Copyright 2000\-2016 The OpenSSL Project Authors. All Rights Reserved. +Copyright 2000\-2020 The OpenSSL Project Authors. All Rights Reserved. .PP Licensed under the OpenSSL license (the \*(L"License\*(R"). You may not use this file except in compliance with the License. You can obtain a copy diff --git a/crypto/external/bsd/openssl/lib/libcrypto/man/RSA_sign.3 b/crypto/external/bsd/openssl/lib/libcrypto/man/RSA_sign.3 index bde07d3ccb8..286763a160e 100644 --- a/crypto/external/bsd/openssl/lib/libcrypto/man/RSA_sign.3 +++ b/crypto/external/bsd/openssl/lib/libcrypto/man/RSA_sign.3 @@ -1,6 +1,6 @@ -.\" $NetBSD: RSA_sign.3,v 1.19 2019/06/09 18:44:32 christos Exp $ +.\" $NetBSD: RSA_sign.3,v 1.19.2.1 2021/03/28 18:21:49 martin Exp $ .\" -.\" Automatically generated by Pod::Man 4.10 (Pod::Simple 3.35) +.\" Automatically generated by Pod::Man 4.11 (Pod::Simple 3.35) .\" .\" Standard preamble: .\" ======================================================================== @@ -135,7 +135,7 @@ .\" ======================================================================== .\" .IX Title "RSA_sign 3" -.TH RSA_sign 3 "2018-09-23" "1.1.1c" "OpenSSL" +.TH RSA_sign 3 "2018-09-23" "1.1.1i" "OpenSSL" .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. .if n .ad l diff --git a/crypto/external/bsd/openssl/lib/libcrypto/man/RSA_sign_ASN1_OCTET_STRING.3 b/crypto/external/bsd/openssl/lib/libcrypto/man/RSA_sign_ASN1_OCTET_STRING.3 index e76055ec42d..60822449b9a 100644 --- a/crypto/external/bsd/openssl/lib/libcrypto/man/RSA_sign_ASN1_OCTET_STRING.3 +++ b/crypto/external/bsd/openssl/lib/libcrypto/man/RSA_sign_ASN1_OCTET_STRING.3 @@ -1,6 +1,6 @@ -.\" $NetBSD: RSA_sign_ASN1_OCTET_STRING.3,v 1.19 2019/06/09 18:44:32 christos Exp $ +.\" $NetBSD: RSA_sign_ASN1_OCTET_STRING.3,v 1.19.2.1 2021/03/28 18:21:49 martin Exp $ .\" -.\" Automatically generated by Pod::Man 4.10 (Pod::Simple 3.35) +.\" Automatically generated by Pod::Man 4.11 (Pod::Simple 3.35) .\" .\" Standard preamble: .\" ======================================================================== @@ -135,7 +135,7 @@ .\" ======================================================================== .\" .IX Title "RSA_sign_ASN1_OCTET_STRING 3" -.TH RSA_sign_ASN1_OCTET_STRING 3 "2018-09-23" "1.1.1c" "OpenSSL" +.TH RSA_sign_ASN1_OCTET_STRING 3 "2020-01-23" "1.1.1i" "OpenSSL" .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. .if n .ad l @@ -167,7 +167,10 @@ memory. .PP \&\fBdummy\fR is ignored. .PP -The random number generator must be seeded prior to calling \fBRSA_sign_ASN1_OCTET_STRING()\fR. +The random number generator must be seeded when calling +\&\fBRSA_sign_ASN1_OCTET_STRING()\fR. +If the automatic seeding or reseeding of the OpenSSL \s-1CSPRNG\s0 fails due to +external circumstances (see \s-1\fBRAND\s0\fR\|(7)), the operation will fail. .PP \&\fBRSA_verify_ASN1_OCTET_STRING()\fR verifies that the signature \fBsigbuf\fR of size \fBsiglen\fR is the \s-1DER\s0 representation of a given octet string @@ -187,10 +190,11 @@ These functions serve no recognizable purpose. .IX Header "SEE ALSO" \&\fBERR_get_error\fR\|(3), \&\fBRAND_bytes\fR\|(3), \fBRSA_sign\fR\|(3), -\&\fBRSA_verify\fR\|(3) +\&\fBRSA_verify\fR\|(3), +\&\s-1\fBRAND\s0\fR\|(7) .SH "COPYRIGHT" .IX Header "COPYRIGHT" -Copyright 2000\-2016 The OpenSSL Project Authors. All Rights Reserved. +Copyright 2000\-2019 The OpenSSL Project Authors. All Rights Reserved. .PP Licensed under the OpenSSL license (the \*(L"License\*(R"). You may not use this file except in compliance with the License. You can obtain a copy diff --git a/crypto/external/bsd/openssl/lib/libcrypto/man/RSA_size.3 b/crypto/external/bsd/openssl/lib/libcrypto/man/RSA_size.3 index a5b8b619381..b7a7468cd5d 100644 --- a/crypto/external/bsd/openssl/lib/libcrypto/man/RSA_size.3 +++ b/crypto/external/bsd/openssl/lib/libcrypto/man/RSA_size.3 @@ -1,6 +1,6 @@ -.\" $NetBSD: RSA_size.3,v 1.19 2019/06/09 18:44:32 christos Exp $ +.\" $NetBSD: RSA_size.3,v 1.19.2.1 2021/03/28 18:21:49 martin Exp $ .\" -.\" Automatically generated by Pod::Man 4.10 (Pod::Simple 3.35) +.\" Automatically generated by Pod::Man 4.11 (Pod::Simple 3.35) .\" .\" Standard preamble: .\" ======================================================================== @@ -135,7 +135,7 @@ .\" ======================================================================== .\" .IX Title "RSA_size 3" -.TH RSA_size 3 "2019-03-12" "1.1.1c" "OpenSSL" +.TH RSA_size 3 "2019-03-12" "1.1.1i" "OpenSSL" .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. .if n .ad l diff --git a/crypto/external/bsd/openssl/lib/libcrypto/man/SCT_new.3 b/crypto/external/bsd/openssl/lib/libcrypto/man/SCT_new.3 index c6c0c62c2ef..d96c33c51fd 100644 --- a/crypto/external/bsd/openssl/lib/libcrypto/man/SCT_new.3 +++ b/crypto/external/bsd/openssl/lib/libcrypto/man/SCT_new.3 @@ -1,6 +1,6 @@ -.\" $NetBSD: SCT_new.3,v 1.3 2019/06/09 18:44:32 christos Exp $ +.\" $NetBSD: SCT_new.3,v 1.3.2.1 2021/03/28 18:21:49 martin Exp $ .\" -.\" Automatically generated by Pod::Man 4.10 (Pod::Simple 3.35) +.\" Automatically generated by Pod::Man 4.11 (Pod::Simple 3.35) .\" .\" Standard preamble: .\" ======================================================================== @@ -135,7 +135,7 @@ .\" ======================================================================== .\" .IX Title "SCT_new 3" -.TH SCT_new 3 "2018-09-23" "1.1.1c" "OpenSSL" +.TH SCT_new 3 "2018-09-23" "1.1.1i" "OpenSSL" .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. .if n .ad l diff --git a/crypto/external/bsd/openssl/lib/libcrypto/man/SCT_print.3 b/crypto/external/bsd/openssl/lib/libcrypto/man/SCT_print.3 index cede9ed2ac5..c3a2add69d0 100644 --- a/crypto/external/bsd/openssl/lib/libcrypto/man/SCT_print.3 +++ b/crypto/external/bsd/openssl/lib/libcrypto/man/SCT_print.3 @@ -1,6 +1,6 @@ -.\" $NetBSD: SCT_print.3,v 1.3 2019/06/09 18:44:32 christos Exp $ +.\" $NetBSD: SCT_print.3,v 1.3.2.1 2021/03/28 18:21:49 martin Exp $ .\" -.\" Automatically generated by Pod::Man 4.10 (Pod::Simple 3.35) +.\" Automatically generated by Pod::Man 4.11 (Pod::Simple 3.35) .\" .\" Standard preamble: .\" ======================================================================== @@ -135,7 +135,7 @@ .\" ======================================================================== .\" .IX Title "SCT_print 3" -.TH SCT_print 3 "2018-09-23" "1.1.1c" "OpenSSL" +.TH SCT_print 3 "2018-09-23" "1.1.1i" "OpenSSL" .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. .if n .ad l diff --git a/crypto/external/bsd/openssl/lib/libcrypto/man/SCT_validate.3 b/crypto/external/bsd/openssl/lib/libcrypto/man/SCT_validate.3 index d2070c70e68..1efb18e65ab 100644 --- a/crypto/external/bsd/openssl/lib/libcrypto/man/SCT_validate.3 +++ b/crypto/external/bsd/openssl/lib/libcrypto/man/SCT_validate.3 @@ -1,6 +1,6 @@ -.\" $NetBSD: SCT_validate.3,v 1.3 2019/06/09 18:44:32 christos Exp $ +.\" $NetBSD: SCT_validate.3,v 1.3.2.1 2021/03/28 18:21:49 martin Exp $ .\" -.\" Automatically generated by Pod::Man 4.10 (Pod::Simple 3.35) +.\" Automatically generated by Pod::Man 4.11 (Pod::Simple 3.35) .\" .\" Standard preamble: .\" ======================================================================== @@ -135,7 +135,7 @@ .\" ======================================================================== .\" .IX Title "SCT_validate 3" -.TH SCT_validate 3 "2018-09-23" "1.1.1c" "OpenSSL" +.TH SCT_validate 3 "2018-09-23" "1.1.1i" "OpenSSL" .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. .if n .ad l diff --git a/crypto/external/bsd/openssl/lib/libcrypto/man/SHA256_Init.3 b/crypto/external/bsd/openssl/lib/libcrypto/man/SHA256_Init.3 index 2da3140cf46..7d436f03be7 100644 --- a/crypto/external/bsd/openssl/lib/libcrypto/man/SHA256_Init.3 +++ b/crypto/external/bsd/openssl/lib/libcrypto/man/SHA256_Init.3 @@ -1,6 +1,6 @@ -.\" $NetBSD: SHA256_Init.3,v 1.3 2019/06/09 18:44:32 christos Exp $ +.\" $NetBSD: SHA256_Init.3,v 1.3.2.1 2021/03/28 18:21:49 martin Exp $ .\" -.\" Automatically generated by Pod::Man 4.10 (Pod::Simple 3.35) +.\" Automatically generated by Pod::Man 4.11 (Pod::Simple 3.35) .\" .\" Standard preamble: .\" ======================================================================== @@ -135,7 +135,7 @@ .\" ======================================================================== .\" .IX Title "SHA256_Init 3" -.TH SHA256_Init 3 "2018-09-23" "1.1.1c" "OpenSSL" +.TH SHA256_Init 3 "2020-12-10" "1.1.1i" "OpenSSL" .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. .if n .ad l @@ -215,9 +215,6 @@ The buffer \fBmd\fR must have space for the output from the \s-1SHA\s0 variant b \&\s-1SHA512_DIGEST_LENGTH\s0). Also note that, as for the \s-1\fBSHA1\s0()\fR function above, the \&\s-1\fBSHA224\s0()\fR, \s-1\fBSHA256\s0()\fR, \s-1\fBSHA384\s0()\fR and \s-1\fBSHA512\s0()\fR functions are not thread safe if \&\fBmd\fR is \s-1NULL.\s0 -.PP -The predecessor of \s-1SHA\-1, SHA,\s0 is also implemented, but it should be -used only when backward compatibility is required. .SH "RETURN VALUES" .IX Header "RETURN VALUES" \&\s-1\fBSHA1\s0()\fR, \s-1\fBSHA224\s0()\fR, \s-1\fBSHA256\s0()\fR, \s-1\fBSHA384\s0()\fR and \s-1\fBSHA512\s0()\fR return a pointer to the hash @@ -235,7 +232,7 @@ Standard), \&\fBEVP_DigestInit\fR\|(3) .SH "COPYRIGHT" .IX Header "COPYRIGHT" -Copyright 2000\-2016 The OpenSSL Project Authors. All Rights Reserved. +Copyright 2000\-2020 The OpenSSL Project Authors. All Rights Reserved. .PP Licensed under the OpenSSL license (the \*(L"License\*(R"). You may not use this file except in compliance with the License. You can obtain a copy diff --git a/crypto/external/bsd/openssl/lib/libcrypto/man/SM2.7 b/crypto/external/bsd/openssl/lib/libcrypto/man/SM2.7 index 3660e2d3ce4..350eb8378fc 100644 --- a/crypto/external/bsd/openssl/lib/libcrypto/man/SM2.7 +++ b/crypto/external/bsd/openssl/lib/libcrypto/man/SM2.7 @@ -1,6 +1,6 @@ -.\" $NetBSD: SM2.7,v 1.2 2019/06/09 18:44:32 christos Exp $ +.\" $NetBSD: SM2.7,v 1.2.4.1 2021/03/28 18:21:49 martin Exp $ .\" -.\" Automatically generated by Pod::Man 4.10 (Pod::Simple 3.35) +.\" Automatically generated by Pod::Man 4.11 (Pod::Simple 3.35) .\" .\" Standard preamble: .\" ======================================================================== @@ -135,7 +135,7 @@ .\" ======================================================================== .\" .IX Title "SM2 7" -.TH SM2 7 "2018-09-23" "1.1.1c" "OpenSSL" +.TH SM2 7 "2020-12-10" "1.1.1i" "OpenSSL" .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. .if n .ad l @@ -174,7 +174,7 @@ Then an \s-1ID\s0 should be set by calling: .Ve .PP When calling the \fBEVP_DigestSignInit()\fR or \fBEVP_DigestVerifyInit()\fR functions, a -pre-allocated \fB\s-1EVP_PKEY_CTX\s0\fR should be assigned to the \fB\s-1EVP_MD_CTX\s0\fR. This is +preallocated \fB\s-1EVP_PKEY_CTX\s0\fR should be assigned to the \fB\s-1EVP_MD_CTX\s0\fR. This is done by calling: .PP .Vb 1 @@ -183,8 +183,8 @@ done by calling: .PP And normally there is no need to pass a \fBpctx\fR parameter to \fBEVP_DigestSignInit()\fR or \fBEVP_DigestVerifyInit()\fR in such a scenario. -.SH "EXAMPLE" -.IX Header "EXAMPLE" +.SH "EXAMPLES" +.IX Header "EXAMPLES" This example demonstrates the calling sequence for using an \fB\s-1EVP_PKEY\s0\fR to verify a message with the \s-1SM2\s0 signature algorithm and the \s-1SM3\s0 hash algorithm: .PP @@ -211,7 +211,7 @@ a message with the \s-1SM2\s0 signature algorithm and the \s-1SM3\s0 hash algori \&\fBEVP_MD_CTX_set_pkey_ctx\fR\|(3) .SH "COPYRIGHT" .IX Header "COPYRIGHT" -Copyright 2018 The OpenSSL Project Authors. All Rights Reserved. +Copyright 2018\-2020 The OpenSSL Project Authors. All Rights Reserved. .PP Licensed under the OpenSSL license (the \*(L"License\*(R"). You may not use this file except in compliance with the License. You can obtain a copy diff --git a/crypto/external/bsd/openssl/lib/libcrypto/man/SMIME_read_CMS.3 b/crypto/external/bsd/openssl/lib/libcrypto/man/SMIME_read_CMS.3 index f3a039d59f0..994bc6a4a13 100644 --- a/crypto/external/bsd/openssl/lib/libcrypto/man/SMIME_read_CMS.3 +++ b/crypto/external/bsd/openssl/lib/libcrypto/man/SMIME_read_CMS.3 @@ -1,6 +1,6 @@ -.\" $NetBSD: SMIME_read_CMS.3,v 1.19 2019/06/09 18:44:32 christos Exp $ +.\" $NetBSD: SMIME_read_CMS.3,v 1.19.2.1 2021/03/28 18:21:49 martin Exp $ .\" -.\" Automatically generated by Pod::Man 4.10 (Pod::Simple 3.35) +.\" Automatically generated by Pod::Man 4.11 (Pod::Simple 3.35) .\" .\" Standard preamble: .\" ======================================================================== @@ -135,7 +135,7 @@ .\" ======================================================================== .\" .IX Title "SMIME_read_CMS 3" -.TH SMIME_read_CMS 3 "2018-09-23" "1.1.1c" "OpenSSL" +.TH SMIME_read_CMS 3 "2018-09-23" "1.1.1i" "OpenSSL" .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. .if n .ad l diff --git a/crypto/external/bsd/openssl/lib/libcrypto/man/SMIME_read_PKCS7.3 b/crypto/external/bsd/openssl/lib/libcrypto/man/SMIME_read_PKCS7.3 index 650f5e55978..57e02af7d32 100644 --- a/crypto/external/bsd/openssl/lib/libcrypto/man/SMIME_read_PKCS7.3 +++ b/crypto/external/bsd/openssl/lib/libcrypto/man/SMIME_read_PKCS7.3 @@ -1,6 +1,6 @@ -.\" $NetBSD: SMIME_read_PKCS7.3,v 1.19 2019/06/09 18:44:32 christos Exp $ +.\" $NetBSD: SMIME_read_PKCS7.3,v 1.19.2.1 2021/03/28 18:21:49 martin Exp $ .\" -.\" Automatically generated by Pod::Man 4.10 (Pod::Simple 3.35) +.\" Automatically generated by Pod::Man 4.11 (Pod::Simple 3.35) .\" .\" Standard preamble: .\" ======================================================================== @@ -135,7 +135,7 @@ .\" ======================================================================== .\" .IX Title "SMIME_read_PKCS7 3" -.TH SMIME_read_PKCS7 3 "2018-09-23" "1.1.1c" "OpenSSL" +.TH SMIME_read_PKCS7 3 "2018-09-23" "1.1.1i" "OpenSSL" .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. .if n .ad l diff --git a/crypto/external/bsd/openssl/lib/libcrypto/man/SMIME_write_CMS.3 b/crypto/external/bsd/openssl/lib/libcrypto/man/SMIME_write_CMS.3 index 0e4834e49bc..265399b8402 100644 --- a/crypto/external/bsd/openssl/lib/libcrypto/man/SMIME_write_CMS.3 +++ b/crypto/external/bsd/openssl/lib/libcrypto/man/SMIME_write_CMS.3 @@ -1,6 +1,6 @@ -.\" $NetBSD: SMIME_write_CMS.3,v 1.19 2019/06/09 18:44:32 christos Exp $ +.\" $NetBSD: SMIME_write_CMS.3,v 1.19.2.1 2021/03/28 18:21:49 martin Exp $ .\" -.\" Automatically generated by Pod::Man 4.10 (Pod::Simple 3.35) +.\" Automatically generated by Pod::Man 4.11 (Pod::Simple 3.35) .\" .\" Standard preamble: .\" ======================================================================== @@ -135,7 +135,7 @@ .\" ======================================================================== .\" .IX Title "SMIME_write_CMS 3" -.TH SMIME_write_CMS 3 "2018-09-23" "1.1.1c" "OpenSSL" +.TH SMIME_write_CMS 3 "2018-09-23" "1.1.1i" "OpenSSL" .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. .if n .ad l diff --git a/crypto/external/bsd/openssl/lib/libcrypto/man/SMIME_write_PKCS7.3 b/crypto/external/bsd/openssl/lib/libcrypto/man/SMIME_write_PKCS7.3 index 16c9b874ff2..978d465bf4a 100644 --- a/crypto/external/bsd/openssl/lib/libcrypto/man/SMIME_write_PKCS7.3 +++ b/crypto/external/bsd/openssl/lib/libcrypto/man/SMIME_write_PKCS7.3 @@ -1,6 +1,6 @@ -.\" $NetBSD: SMIME_write_PKCS7.3,v 1.19 2019/06/09 18:44:32 christos Exp $ +.\" $NetBSD: SMIME_write_PKCS7.3,v 1.19.2.1 2021/03/28 18:21:49 martin Exp $ .\" -.\" Automatically generated by Pod::Man 4.10 (Pod::Simple 3.35) +.\" Automatically generated by Pod::Man 4.11 (Pod::Simple 3.35) .\" .\" Standard preamble: .\" ======================================================================== @@ -135,7 +135,7 @@ .\" ======================================================================== .\" .IX Title "SMIME_write_PKCS7 3" -.TH SMIME_write_PKCS7 3 "2018-09-23" "1.1.1c" "OpenSSL" +.TH SMIME_write_PKCS7 3 "2018-09-23" "1.1.1i" "OpenSSL" .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. .if n .ad l diff --git a/crypto/external/bsd/openssl/lib/libcrypto/man/SSL_CIPHER_get_name.3 b/crypto/external/bsd/openssl/lib/libcrypto/man/SSL_CIPHER_get_name.3 index 654676f5325..407f5e52b35 100644 --- a/crypto/external/bsd/openssl/lib/libcrypto/man/SSL_CIPHER_get_name.3 +++ b/crypto/external/bsd/openssl/lib/libcrypto/man/SSL_CIPHER_get_name.3 @@ -1,6 +1,6 @@ -.\" $NetBSD: SSL_CIPHER_get_name.3,v 1.19 2019/06/09 18:44:32 christos Exp $ +.\" $NetBSD: SSL_CIPHER_get_name.3,v 1.19.2.1 2021/03/28 18:21:49 martin Exp $ .\" -.\" Automatically generated by Pod::Man 4.10 (Pod::Simple 3.35) +.\" Automatically generated by Pod::Man 4.11 (Pod::Simple 3.35) .\" .\" Standard preamble: .\" ======================================================================== @@ -135,7 +135,7 @@ .\" ======================================================================== .\" .IX Title "SSL_CIPHER_get_name 3" -.TH SSL_CIPHER_get_name 3 "2019-06-09" "1.1.1c" "OpenSSL" +.TH SSL_CIPHER_get_name 3 "2019-06-09" "1.1.1i" "OpenSSL" .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. .if n .ad l diff --git a/crypto/external/bsd/openssl/lib/libcrypto/man/SSL_COMP_add_compression_method.3 b/crypto/external/bsd/openssl/lib/libcrypto/man/SSL_COMP_add_compression_method.3 index 70e6860483d..1fe960c8762 100644 --- a/crypto/external/bsd/openssl/lib/libcrypto/man/SSL_COMP_add_compression_method.3 +++ b/crypto/external/bsd/openssl/lib/libcrypto/man/SSL_COMP_add_compression_method.3 @@ -1,6 +1,6 @@ -.\" $NetBSD: SSL_COMP_add_compression_method.3,v 1.19 2019/06/09 18:44:32 christos Exp $ +.\" $NetBSD: SSL_COMP_add_compression_method.3,v 1.19.2.1 2021/03/28 18:21:49 martin Exp $ .\" -.\" Automatically generated by Pod::Man 4.10 (Pod::Simple 3.35) +.\" Automatically generated by Pod::Man 4.11 (Pod::Simple 3.35) .\" .\" Standard preamble: .\" ======================================================================== @@ -135,7 +135,7 @@ .\" ======================================================================== .\" .IX Title "SSL_COMP_add_compression_method 3" -.TH SSL_COMP_add_compression_method 3 "2019-03-12" "1.1.1c" "OpenSSL" +.TH SSL_COMP_add_compression_method 3 "2019-03-12" "1.1.1i" "OpenSSL" .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. .if n .ad l diff --git a/crypto/external/bsd/openssl/lib/libcrypto/man/SSL_CONF_CTX_new.3 b/crypto/external/bsd/openssl/lib/libcrypto/man/SSL_CONF_CTX_new.3 index 8f9c9812c7b..a3346748391 100644 --- a/crypto/external/bsd/openssl/lib/libcrypto/man/SSL_CONF_CTX_new.3 +++ b/crypto/external/bsd/openssl/lib/libcrypto/man/SSL_CONF_CTX_new.3 @@ -1,6 +1,6 @@ -.\" $NetBSD: SSL_CONF_CTX_new.3,v 1.4 2019/06/09 18:44:32 christos Exp $ +.\" $NetBSD: SSL_CONF_CTX_new.3,v 1.4.2.1 2021/03/28 18:21:49 martin Exp $ .\" -.\" Automatically generated by Pod::Man 4.10 (Pod::Simple 3.35) +.\" Automatically generated by Pod::Man 4.11 (Pod::Simple 3.35) .\" .\" Standard preamble: .\" ======================================================================== @@ -135,7 +135,7 @@ .\" ======================================================================== .\" .IX Title "SSL_CONF_CTX_new 3" -.TH SSL_CONF_CTX_new 3 "2019-03-12" "1.1.1c" "OpenSSL" +.TH SSL_CONF_CTX_new 3 "2019-03-12" "1.1.1i" "OpenSSL" .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. .if n .ad l diff --git a/crypto/external/bsd/openssl/lib/libcrypto/man/SSL_CONF_CTX_set1_prefix.3 b/crypto/external/bsd/openssl/lib/libcrypto/man/SSL_CONF_CTX_set1_prefix.3 index 8675bb22e47..5b4e36740f4 100644 --- a/crypto/external/bsd/openssl/lib/libcrypto/man/SSL_CONF_CTX_set1_prefix.3 +++ b/crypto/external/bsd/openssl/lib/libcrypto/man/SSL_CONF_CTX_set1_prefix.3 @@ -1,6 +1,6 @@ -.\" $NetBSD: SSL_CONF_CTX_set1_prefix.3,v 1.4 2019/06/09 18:44:32 christos Exp $ +.\" $NetBSD: SSL_CONF_CTX_set1_prefix.3,v 1.4.2.1 2021/03/28 18:21:49 martin Exp $ .\" -.\" Automatically generated by Pod::Man 4.10 (Pod::Simple 3.35) +.\" Automatically generated by Pod::Man 4.11 (Pod::Simple 3.35) .\" .\" Standard preamble: .\" ======================================================================== @@ -135,7 +135,7 @@ .\" ======================================================================== .\" .IX Title "SSL_CONF_CTX_set1_prefix 3" -.TH SSL_CONF_CTX_set1_prefix 3 "2019-03-12" "1.1.1c" "OpenSSL" +.TH SSL_CONF_CTX_set1_prefix 3 "2019-03-12" "1.1.1i" "OpenSSL" .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. .if n .ad l diff --git a/crypto/external/bsd/openssl/lib/libcrypto/man/SSL_CONF_CTX_set_flags.3 b/crypto/external/bsd/openssl/lib/libcrypto/man/SSL_CONF_CTX_set_flags.3 index 9645e4d5220..21d1e040634 100644 --- a/crypto/external/bsd/openssl/lib/libcrypto/man/SSL_CONF_CTX_set_flags.3 +++ b/crypto/external/bsd/openssl/lib/libcrypto/man/SSL_CONF_CTX_set_flags.3 @@ -1,6 +1,6 @@ -.\" $NetBSD: SSL_CONF_CTX_set_flags.3,v 1.4 2019/06/09 18:44:32 christos Exp $ +.\" $NetBSD: SSL_CONF_CTX_set_flags.3,v 1.4.2.1 2021/03/28 18:21:49 martin Exp $ .\" -.\" Automatically generated by Pod::Man 4.10 (Pod::Simple 3.35) +.\" Automatically generated by Pod::Man 4.11 (Pod::Simple 3.35) .\" .\" Standard preamble: .\" ======================================================================== @@ -135,7 +135,7 @@ .\" ======================================================================== .\" .IX Title "SSL_CONF_CTX_set_flags 3" -.TH SSL_CONF_CTX_set_flags 3 "2019-03-12" "1.1.1c" "OpenSSL" +.TH SSL_CONF_CTX_set_flags 3 "2019-03-12" "1.1.1i" "OpenSSL" .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. .if n .ad l diff --git a/crypto/external/bsd/openssl/lib/libcrypto/man/SSL_CONF_CTX_set_ssl_ctx.3 b/crypto/external/bsd/openssl/lib/libcrypto/man/SSL_CONF_CTX_set_ssl_ctx.3 index d982eb90411..96f5cb595b7 100644 --- a/crypto/external/bsd/openssl/lib/libcrypto/man/SSL_CONF_CTX_set_ssl_ctx.3 +++ b/crypto/external/bsd/openssl/lib/libcrypto/man/SSL_CONF_CTX_set_ssl_ctx.3 @@ -1,6 +1,6 @@ -.\" $NetBSD: SSL_CONF_CTX_set_ssl_ctx.3,v 1.4 2019/06/09 18:44:32 christos Exp $ +.\" $NetBSD: SSL_CONF_CTX_set_ssl_ctx.3,v 1.4.2.1 2021/03/28 18:21:49 martin Exp $ .\" -.\" Automatically generated by Pod::Man 4.10 (Pod::Simple 3.35) +.\" Automatically generated by Pod::Man 4.11 (Pod::Simple 3.35) .\" .\" Standard preamble: .\" ======================================================================== @@ -135,7 +135,7 @@ .\" ======================================================================== .\" .IX Title "SSL_CONF_CTX_set_ssl_ctx 3" -.TH SSL_CONF_CTX_set_ssl_ctx 3 "2019-03-12" "1.1.1c" "OpenSSL" +.TH SSL_CONF_CTX_set_ssl_ctx 3 "2019-03-12" "1.1.1i" "OpenSSL" .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. .if n .ad l diff --git a/crypto/external/bsd/openssl/lib/libcrypto/man/SSL_CONF_cmd.3 b/crypto/external/bsd/openssl/lib/libcrypto/man/SSL_CONF_cmd.3 index 383475c605e..96684e8c171 100644 --- a/crypto/external/bsd/openssl/lib/libcrypto/man/SSL_CONF_cmd.3 +++ b/crypto/external/bsd/openssl/lib/libcrypto/man/SSL_CONF_cmd.3 @@ -1,6 +1,6 @@ -.\" $NetBSD: SSL_CONF_cmd.3,v 1.4 2019/06/09 18:44:32 christos Exp $ +.\" $NetBSD: SSL_CONF_cmd.3,v 1.4.2.1 2021/03/28 18:21:49 martin Exp $ .\" -.\" Automatically generated by Pod::Man 4.10 (Pod::Simple 3.35) +.\" Automatically generated by Pod::Man 4.11 (Pod::Simple 3.35) .\" .\" Standard preamble: .\" ======================================================================== @@ -135,7 +135,7 @@ .\" ======================================================================== .\" .IX Title "SSL_CONF_cmd 3" -.TH SSL_CONF_cmd 3 "2019-06-09" "1.1.1c" "OpenSSL" +.TH SSL_CONF_cmd 3 "2020-12-10" "1.1.1i" "OpenSSL" .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. .if n .ad l @@ -214,7 +214,7 @@ will also be used for the \fBkey_share\fR sent by a client in a TLSv1.3 .Sp The \fBvalue\fR argument is a colon separated list of groups. The group can be either the \fB\s-1NIST\s0\fR name (e.g. \fBP\-256\fR), some other commonly used name where -applicable (e.g. \fBX25519\fR) or an OpenSSL \s-1OID\s0 name (e.g \fBprime256v1\fR). Group +applicable (e.g. \fBX25519\fR) or an OpenSSL \s-1OID\s0 name (e.g. \fBprime256v1\fR). Group names are case sensitive. The list should be in order of preference with the most preferred group first. .IP "\fB\-curves\fR" 4 @@ -228,7 +228,7 @@ servers The \fBvalue\fR argument is a curve name or the special value \fBauto\fR which picks an appropriate curve based on client and server preferences. The curve can be either the \fB\s-1NIST\s0\fR name (e.g. \fBP\-256\fR) or an OpenSSL \s-1OID\s0 name -(e.g \fBprime256v1\fR). Curve names are case sensitive. +(e.g. \fBprime256v1\fR). Curve names are case sensitive. .IP "\fB\-cipher\fR" 4 .IX Item "-cipher" Sets the TLSv1.2 and below ciphersuite list to \fBvalue\fR. This list will be @@ -271,13 +271,16 @@ Disables all attempts at renegotiation in TLSv1.2 and earlier, same as setting .IP "\fB\-min_protocol\fR, \fB\-max_protocol\fR" 4 .IX Item "-min_protocol, -max_protocol" Sets the minimum and maximum supported protocol. -Currently supported protocol values are \fBSSLv3\fR, \fBTLSv1\fR, -\&\fBTLSv1.1\fR, \fBTLSv1.2\fR, \fBTLSv1.3\fR for \s-1TLS\s0 and \fBDTLSv1\fR, \fBDTLSv1.2\fR for \s-1DTLS,\s0 -and \fBNone\fR for no limit. -If either bound is not specified then only the other bound applies, -if specified. -To restrict the supported protocol versions use these commands rather -than the deprecated alternative commands below. +Currently supported protocol values are \fBSSLv3\fR, \fBTLSv1\fR, \fBTLSv1.1\fR, +\&\fBTLSv1.2\fR, \fBTLSv1.3\fR for \s-1TLS\s0; \fBDTLSv1\fR, \fBDTLSv1.2\fR for \s-1DTLS,\s0 and \fBNone\fR +for no limit. +If either the lower or upper bound is not specified then only the other bound +applies, if specified. +If your application supports both \s-1TLS\s0 and \s-1DTLS\s0 you can specify any of these +options twice, once with a bound for \s-1TLS\s0 and again with an appropriate bound +for \s-1DTLS.\s0 +To restrict the supported protocol versions use these commands rather than the +deprecated alternative commands below. .IP "\fB\-no_ssl3\fR, \fB\-no_tls1\fR, \fB\-no_tls1_1\fR, \fB\-no_tls1_2\fR, \fB\-no_tls1_3\fR" 4 .IX Item "-no_ssl3, -no_tls1, -no_tls1_1, -no_tls1_2, -no_tls1_3" Disables protocol support for SSLv3, TLSv1.0, TLSv1.1, TLSv1.2 or TLSv1.3 by @@ -450,7 +453,7 @@ will also be used for the \fBkey_share\fR sent by a client in a TLSv1.3 .Sp The \fBvalue\fR argument is a colon separated list of groups. The group can be either the \fB\s-1NIST\s0\fR name (e.g. \fBP\-256\fR), some other commonly used name where -applicable (e.g. \fBX25519\fR) or an OpenSSL \s-1OID\s0 name (e.g \fBprime256v1\fR). Group +applicable (e.g. \fBX25519\fR) or an OpenSSL \s-1OID\s0 name (e.g. \fBprime256v1\fR). Group names are case sensitive. The list should be in order of preference with the most preferred group first. .IP "\fBCurves\fR" 4 @@ -462,14 +465,22 @@ This sets the minimum supported \s-1SSL, TLS\s0 or \s-1DTLS\s0 version. .Sp Currently supported protocol values are \fBSSLv3\fR, \fBTLSv1\fR, \fBTLSv1.1\fR, \&\fBTLSv1.2\fR, \fBTLSv1.3\fR, \fBDTLSv1\fR and \fBDTLSv1.2\fR. -The value \fBNone\fR will disable the limit. +The \s-1SSL\s0 and \s-1TLS\s0 bounds apply only to TLS-based contexts, while the \s-1DTLS\s0 bounds +apply only to DTLS-based contexts. +The command can be repeated with one instance setting a \s-1TLS\s0 bound, and the +other setting a \s-1DTLS\s0 bound. +The value \fBNone\fR applies to both types of contexts and disables the limits. .IP "\fBMaxProtocol\fR" 4 .IX Item "MaxProtocol" This sets the maximum supported \s-1SSL, TLS\s0 or \s-1DTLS\s0 version. .Sp Currently supported protocol values are \fBSSLv3\fR, \fBTLSv1\fR, \fBTLSv1.1\fR, \&\fBTLSv1.2\fR, \fBTLSv1.3\fR, \fBDTLSv1\fR and \fBDTLSv1.2\fR. -The value \fBNone\fR will disable the limit. +The \s-1SSL\s0 and \s-1TLS\s0 bounds apply only to TLS-based contexts, while the \s-1DTLS\s0 bounds +apply only to DTLS-based contexts. +The command can be repeated with one instance setting a \s-1TLS\s0 bound, and the +other setting a \s-1DTLS\s0 bound. +The value \fBNone\fR applies to both types of contexts and disables the limits. .IP "\fBProtocol\fR" 4 .IX Item "Protocol" This can be used to enable or disable certain versions of the \s-1SSL, @@ -616,7 +627,7 @@ syntax errors. The value is a string without any specific structure. .IP "\fB\s-1SSL_CONF_TYPE_FILE\s0\fR" 4 .IX Item "SSL_CONF_TYPE_FILE" -The value is a file name. +The value is a filename. .IP "\fB\s-1SSL_CONF_TYPE_DIR\s0\fR" 4 .IX Item "SSL_CONF_TYPE_DIR" The value is a directory name. @@ -774,7 +785,7 @@ OpenSSL passing a command which didn't take an argument would return \&\fBAllowNoDHEKEX\fR and \fBPrioritizeChaCha\fR were added in OpenSSL 1.1.1. .SH "COPYRIGHT" .IX Header "COPYRIGHT" -Copyright 2012\-2019 The OpenSSL Project Authors. All Rights Reserved. +Copyright 2012\-2020 The OpenSSL Project Authors. All Rights Reserved. .PP Licensed under the OpenSSL license (the \*(L"License\*(R"). You may not use this file except in compliance with the License. You can obtain a copy diff --git a/crypto/external/bsd/openssl/lib/libcrypto/man/SSL_CONF_cmd_argv.3 b/crypto/external/bsd/openssl/lib/libcrypto/man/SSL_CONF_cmd_argv.3 index f60725c2b34..7be92b0ef2b 100644 --- a/crypto/external/bsd/openssl/lib/libcrypto/man/SSL_CONF_cmd_argv.3 +++ b/crypto/external/bsd/openssl/lib/libcrypto/man/SSL_CONF_cmd_argv.3 @@ -1,6 +1,6 @@ -.\" $NetBSD: SSL_CONF_cmd_argv.3,v 1.4 2019/06/09 18:44:32 christos Exp $ +.\" $NetBSD: SSL_CONF_cmd_argv.3,v 1.4.2.1 2021/03/28 18:21:49 martin Exp $ .\" -.\" Automatically generated by Pod::Man 4.10 (Pod::Simple 3.35) +.\" Automatically generated by Pod::Man 4.11 (Pod::Simple 3.35) .\" .\" Standard preamble: .\" ======================================================================== @@ -135,7 +135,7 @@ .\" ======================================================================== .\" .IX Title "SSL_CONF_cmd_argv 3" -.TH SSL_CONF_cmd_argv 3 "2019-03-12" "1.1.1c" "OpenSSL" +.TH SSL_CONF_cmd_argv 3 "2019-03-12" "1.1.1i" "OpenSSL" .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. .if n .ad l diff --git a/crypto/external/bsd/openssl/lib/libcrypto/man/SSL_CTX_add1_chain_cert.3 b/crypto/external/bsd/openssl/lib/libcrypto/man/SSL_CTX_add1_chain_cert.3 index 34a5e8089ea..60385764dcf 100644 --- a/crypto/external/bsd/openssl/lib/libcrypto/man/SSL_CTX_add1_chain_cert.3 +++ b/crypto/external/bsd/openssl/lib/libcrypto/man/SSL_CTX_add1_chain_cert.3 @@ -1,6 +1,6 @@ -.\" $NetBSD: SSL_CTX_add1_chain_cert.3,v 1.4 2019/06/09 18:44:32 christos Exp $ +.\" $NetBSD: SSL_CTX_add1_chain_cert.3,v 1.4.2.1 2021/03/28 18:21:49 martin Exp $ .\" -.\" Automatically generated by Pod::Man 4.10 (Pod::Simple 3.35) +.\" Automatically generated by Pod::Man 4.11 (Pod::Simple 3.35) .\" .\" Standard preamble: .\" ======================================================================== @@ -135,7 +135,7 @@ .\" ======================================================================== .\" .IX Title "SSL_CTX_add1_chain_cert 3" -.TH SSL_CTX_add1_chain_cert 3 "2019-03-12" "1.1.1c" "OpenSSL" +.TH SSL_CTX_add1_chain_cert 3 "2019-03-12" "1.1.1i" "OpenSSL" .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. .if n .ad l diff --git a/crypto/external/bsd/openssl/lib/libcrypto/man/SSL_CTX_add_extra_chain_cert.3 b/crypto/external/bsd/openssl/lib/libcrypto/man/SSL_CTX_add_extra_chain_cert.3 index 70615dce20e..e3922be95fe 100644 --- a/crypto/external/bsd/openssl/lib/libcrypto/man/SSL_CTX_add_extra_chain_cert.3 +++ b/crypto/external/bsd/openssl/lib/libcrypto/man/SSL_CTX_add_extra_chain_cert.3 @@ -1,6 +1,6 @@ -.\" $NetBSD: SSL_CTX_add_extra_chain_cert.3,v 1.19 2019/06/09 18:44:32 christos Exp $ +.\" $NetBSD: SSL_CTX_add_extra_chain_cert.3,v 1.19.2.1 2021/03/28 18:21:49 martin Exp $ .\" -.\" Automatically generated by Pod::Man 4.10 (Pod::Simple 3.35) +.\" Automatically generated by Pod::Man 4.11 (Pod::Simple 3.35) .\" .\" Standard preamble: .\" ======================================================================== @@ -135,7 +135,7 @@ .\" ======================================================================== .\" .IX Title "SSL_CTX_add_extra_chain_cert 3" -.TH SSL_CTX_add_extra_chain_cert 3 "2018-09-23" "1.1.1c" "OpenSSL" +.TH SSL_CTX_add_extra_chain_cert 3 "2018-09-23" "1.1.1i" "OpenSSL" .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. .if n .ad l diff --git a/crypto/external/bsd/openssl/lib/libcrypto/man/SSL_CTX_add_session.3 b/crypto/external/bsd/openssl/lib/libcrypto/man/SSL_CTX_add_session.3 index c5370c4346f..0f3b8070e8d 100644 --- a/crypto/external/bsd/openssl/lib/libcrypto/man/SSL_CTX_add_session.3 +++ b/crypto/external/bsd/openssl/lib/libcrypto/man/SSL_CTX_add_session.3 @@ -1,6 +1,6 @@ -.\" $NetBSD: SSL_CTX_add_session.3,v 1.19 2019/06/09 18:44:32 christos Exp $ +.\" $NetBSD: SSL_CTX_add_session.3,v 1.19.2.1 2021/03/28 18:21:49 martin Exp $ .\" -.\" Automatically generated by Pod::Man 4.10 (Pod::Simple 3.35) +.\" Automatically generated by Pod::Man 4.11 (Pod::Simple 3.35) .\" .\" Standard preamble: .\" ======================================================================== @@ -135,7 +135,7 @@ .\" ======================================================================== .\" .IX Title "SSL_CTX_add_session 3" -.TH SSL_CTX_add_session 3 "2018-09-23" "1.1.1c" "OpenSSL" +.TH SSL_CTX_add_session 3 "2018-09-23" "1.1.1i" "OpenSSL" .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. .if n .ad l diff --git a/crypto/external/bsd/openssl/lib/libcrypto/man/SSL_CTX_config.3 b/crypto/external/bsd/openssl/lib/libcrypto/man/SSL_CTX_config.3 index aff4cdcb239..f95f6b23a67 100644 --- a/crypto/external/bsd/openssl/lib/libcrypto/man/SSL_CTX_config.3 +++ b/crypto/external/bsd/openssl/lib/libcrypto/man/SSL_CTX_config.3 @@ -1,6 +1,6 @@ -.\" $NetBSD: SSL_CTX_config.3,v 1.3 2019/06/09 18:44:32 christos Exp $ +.\" $NetBSD: SSL_CTX_config.3,v 1.3.2.1 2021/03/28 18:21:49 martin Exp $ .\" -.\" Automatically generated by Pod::Man 4.10 (Pod::Simple 3.35) +.\" Automatically generated by Pod::Man 4.11 (Pod::Simple 3.35) .\" .\" Standard preamble: .\" ======================================================================== @@ -135,7 +135,7 @@ .\" ======================================================================== .\" .IX Title "SSL_CTX_config 3" -.TH SSL_CTX_config 3 "2019-03-12" "1.1.1c" "OpenSSL" +.TH SSL_CTX_config 3 "2020-01-23" "1.1.1i" "OpenSSL" .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. .if n .ad l @@ -171,8 +171,8 @@ file syntax. .IX Header "RETURN VALUES" \&\fBSSL_CTX_config()\fR and \fBSSL_config()\fR return 1 for success or 0 if an error occurred. -.SH "EXAMPLE" -.IX Header "EXAMPLE" +.SH "EXAMPLES" +.IX Header "EXAMPLES" If the file \*(L"config.cnf\*(R" contains the following: .PP .Vb 1 @@ -220,7 +220,7 @@ the need for any additional application code. The \fBSSL_CTX_config()\fR and \fBSSL_config()\fR functions were added in OpenSSL 1.1.0. .SH "COPYRIGHT" .IX Header "COPYRIGHT" -Copyright 2015\-2016 The OpenSSL Project Authors. All Rights Reserved. +Copyright 2015\-2019 The OpenSSL Project Authors. All Rights Reserved. .PP Licensed under the OpenSSL license (the \*(L"License\*(R"). You may not use this file except in compliance with the License. You can obtain a copy diff --git a/crypto/external/bsd/openssl/lib/libcrypto/man/SSL_CTX_ctrl.3 b/crypto/external/bsd/openssl/lib/libcrypto/man/SSL_CTX_ctrl.3 index 87d43a11c22..52ee8f11b9c 100644 --- a/crypto/external/bsd/openssl/lib/libcrypto/man/SSL_CTX_ctrl.3 +++ b/crypto/external/bsd/openssl/lib/libcrypto/man/SSL_CTX_ctrl.3 @@ -1,6 +1,6 @@ -.\" $NetBSD: SSL_CTX_ctrl.3,v 1.19 2019/06/09 18:44:32 christos Exp $ +.\" $NetBSD: SSL_CTX_ctrl.3,v 1.19.2.1 2021/03/28 18:21:49 martin Exp $ .\" -.\" Automatically generated by Pod::Man 4.10 (Pod::Simple 3.35) +.\" Automatically generated by Pod::Man 4.11 (Pod::Simple 3.35) .\" .\" Standard preamble: .\" ======================================================================== @@ -135,7 +135,7 @@ .\" ======================================================================== .\" .IX Title "SSL_CTX_ctrl 3" -.TH SSL_CTX_ctrl 3 "2018-09-23" "1.1.1c" "OpenSSL" +.TH SSL_CTX_ctrl 3 "2018-09-23" "1.1.1i" "OpenSSL" .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. .if n .ad l diff --git a/crypto/external/bsd/openssl/lib/libcrypto/man/SSL_CTX_dane_enable.3 b/crypto/external/bsd/openssl/lib/libcrypto/man/SSL_CTX_dane_enable.3 index 472fef38659..16b66794d6e 100644 --- a/crypto/external/bsd/openssl/lib/libcrypto/man/SSL_CTX_dane_enable.3 +++ b/crypto/external/bsd/openssl/lib/libcrypto/man/SSL_CTX_dane_enable.3 @@ -1,6 +1,6 @@ -.\" $NetBSD: SSL_CTX_dane_enable.3,v 1.3 2019/06/09 18:44:32 christos Exp $ +.\" $NetBSD: SSL_CTX_dane_enable.3,v 1.3.2.1 2021/03/28 18:21:49 martin Exp $ .\" -.\" Automatically generated by Pod::Man 4.10 (Pod::Simple 3.35) +.\" Automatically generated by Pod::Man 4.11 (Pod::Simple 3.35) .\" .\" Standard preamble: .\" ======================================================================== @@ -135,7 +135,7 @@ .\" ======================================================================== .\" .IX Title "SSL_CTX_dane_enable 3" -.TH SSL_CTX_dane_enable 3 "2019-03-12" "1.1.1c" "OpenSSL" +.TH SSL_CTX_dane_enable 3 "2020-12-10" "1.1.1i" "OpenSSL" .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. .if n .ad l @@ -263,7 +263,7 @@ release long-term references respectively. matched the peer certificate chain. The return value indicates the match depth or failure to match just as with \&\fBSSL_get0_dane_authority()\fR. -When the return value is non-negative, the storage pointed to by the \fBusage\fR, +When the return value is nonnegative, the storage pointed to by the \fBusage\fR, \&\fBselector\fR, \fBmtype\fR and \fBdata\fR parameters is updated to the corresponding \&\s-1TLSA\s0 record fields. The \fBdata\fR field is in binary wire form, and is therefore not NUL-terminated, @@ -277,7 +277,7 @@ Applications that need long-term access to this field need to copy the content. optional \s-1DANE\s0 verification features. \&\fBSSL_CTX_dane_clear_flags()\fR and \fBSSL_dane_clear_flags()\fR can be used to disable the same features. -The \fBflags\fR argument is a bitmask of the features to enable or disable. +The \fBflags\fR argument is a bit mask of the features to enable or disable. The \fBflags\fR set for an \fB\s-1SSL_CTX\s0\fR context are copied to each \fB\s-1SSL\s0\fR handle associated with that context at the time the handle is created. Subsequent changes in the context's \fBflags\fR have no effect on the \fBflags\fR set @@ -313,15 +313,15 @@ certificate or a public key that fails to parse. .PP The functions \fBSSL_get0_dane_authority()\fR and \fBSSL_get0_dane_tlsa()\fR return a negative value when \s-1DANE\s0 authentication failed or was not enabled, a -non-negative value indicates the chain depth at which the \s-1TLSA\s0 record matched a +nonnegative value indicates the chain depth at which the \s-1TLSA\s0 record matched a chain certificate, or the depth of the top-most certificate, when the \s-1TLSA\s0 record is a full public key that is its signer. .PP The functions \fBSSL_CTX_dane_set_flags()\fR, \fBSSL_CTX_dane_clear_flags()\fR, \&\fBSSL_dane_set_flags()\fR and \fBSSL_dane_clear_flags()\fR return the \fBflags\fR in effect before they were called. -.SH "EXAMPLE" -.IX Header "EXAMPLE" +.SH "EXAMPLES" +.IX Header "EXAMPLES" Suppose \*(L"smtp.example.com\*(R" is the \s-1MX\s0 host of the domain \*(L"example.com\*(R", and has DNSSEC-validated \s-1TLSA\s0 records. The calls below will perform \s-1DANE\s0 authentication and arrange to match either @@ -509,7 +509,7 @@ or unsupported parameters) disable peer authentication by calling These functions were added in OpenSSL 1.1.0. .SH "COPYRIGHT" .IX Header "COPYRIGHT" -Copyright 2016\-2018 The OpenSSL Project Authors. All Rights Reserved. +Copyright 2016\-2020 The OpenSSL Project Authors. All Rights Reserved. .PP Licensed under the OpenSSL license (the \*(L"License\*(R"). You may not use this file except in compliance with the License. You can obtain a copy diff --git a/crypto/external/bsd/openssl/lib/libcrypto/man/SSL_CTX_flush_sessions.3 b/crypto/external/bsd/openssl/lib/libcrypto/man/SSL_CTX_flush_sessions.3 index 9728b1aaea5..fc8a957c5cc 100644 --- a/crypto/external/bsd/openssl/lib/libcrypto/man/SSL_CTX_flush_sessions.3 +++ b/crypto/external/bsd/openssl/lib/libcrypto/man/SSL_CTX_flush_sessions.3 @@ -1,6 +1,6 @@ -.\" $NetBSD: SSL_CTX_flush_sessions.3,v 1.19 2019/06/09 18:44:32 christos Exp $ +.\" $NetBSD: SSL_CTX_flush_sessions.3,v 1.19.2.1 2021/03/28 18:21:49 martin Exp $ .\" -.\" Automatically generated by Pod::Man 4.10 (Pod::Simple 3.35) +.\" Automatically generated by Pod::Man 4.11 (Pod::Simple 3.35) .\" .\" Standard preamble: .\" ======================================================================== @@ -135,7 +135,7 @@ .\" ======================================================================== .\" .IX Title "SSL_CTX_flush_sessions 3" -.TH SSL_CTX_flush_sessions 3 "2018-09-23" "1.1.1c" "OpenSSL" +.TH SSL_CTX_flush_sessions 3 "2018-09-23" "1.1.1i" "OpenSSL" .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. .if n .ad l diff --git a/crypto/external/bsd/openssl/lib/libcrypto/man/SSL_CTX_free.3 b/crypto/external/bsd/openssl/lib/libcrypto/man/SSL_CTX_free.3 index b13e22051cd..7e69226b3b2 100644 --- a/crypto/external/bsd/openssl/lib/libcrypto/man/SSL_CTX_free.3 +++ b/crypto/external/bsd/openssl/lib/libcrypto/man/SSL_CTX_free.3 @@ -1,6 +1,6 @@ -.\" $NetBSD: SSL_CTX_free.3,v 1.19 2019/06/09 18:44:32 christos Exp $ +.\" $NetBSD: SSL_CTX_free.3,v 1.19.2.1 2021/03/28 18:21:49 martin Exp $ .\" -.\" Automatically generated by Pod::Man 4.10 (Pod::Simple 3.35) +.\" Automatically generated by Pod::Man 4.11 (Pod::Simple 3.35) .\" .\" Standard preamble: .\" ======================================================================== @@ -135,7 +135,7 @@ .\" ======================================================================== .\" .IX Title "SSL_CTX_free 3" -.TH SSL_CTX_free 3 "2018-09-23" "1.1.1c" "OpenSSL" +.TH SSL_CTX_free 3 "2018-09-23" "1.1.1i" "OpenSSL" .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. .if n .ad l diff --git a/crypto/external/bsd/openssl/lib/libcrypto/man/SSL_CTX_get0_param.3 b/crypto/external/bsd/openssl/lib/libcrypto/man/SSL_CTX_get0_param.3 index 6ca693f8136..f5179e11be0 100644 --- a/crypto/external/bsd/openssl/lib/libcrypto/man/SSL_CTX_get0_param.3 +++ b/crypto/external/bsd/openssl/lib/libcrypto/man/SSL_CTX_get0_param.3 @@ -1,6 +1,6 @@ -.\" $NetBSD: SSL_CTX_get0_param.3,v 1.4 2019/06/09 18:44:32 christos Exp $ +.\" $NetBSD: SSL_CTX_get0_param.3,v 1.4.2.1 2021/03/28 18:21:49 martin Exp $ .\" -.\" Automatically generated by Pod::Man 4.10 (Pod::Simple 3.35) +.\" Automatically generated by Pod::Man 4.11 (Pod::Simple 3.35) .\" .\" Standard preamble: .\" ======================================================================== @@ -135,7 +135,7 @@ .\" ======================================================================== .\" .IX Title "SSL_CTX_get0_param 3" -.TH SSL_CTX_get0_param 3 "2019-03-12" "1.1.1c" "OpenSSL" +.TH SSL_CTX_get0_param 3 "2020-01-23" "1.1.1i" "OpenSSL" .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. .if n .ad l @@ -168,14 +168,6 @@ to \fBvpm\fR for \fBctx\fR or \fBssl\fR. Typically parameters are retrieved from an \fB\s-1SSL_CTX\s0\fR or \fB\s-1SSL\s0\fR structure using \fBSSL_CTX_get0_param()\fR or \fBSSL_get0_param()\fR and an application modifies them to suit its needs: for example to add a hostname check. -.SH "EXAMPLE" -.IX Header "EXAMPLE" -Check hostname matches \*(L"www.foo.com\*(R" in peer certificate: -.PP -.Vb 2 -\& X509_VERIFY_PARAM *vpm = SSL_get0_param(ssl); -\& X509_VERIFY_PARAM_set1_host(vpm, "www.foo.com", 0); -.Ve .SH "RETURN VALUES" .IX Header "RETURN VALUES" \&\fBSSL_CTX_get0_param()\fR and \fBSSL_get0_param()\fR return a pointer to an @@ -183,6 +175,14 @@ Check hostname matches \*(L"www.foo.com\*(R" in peer certificate: .PP \&\fBSSL_CTX_set1_param()\fR and \fBSSL_set1_param()\fR return 1 for success and 0 for failure. +.SH "EXAMPLES" +.IX Header "EXAMPLES" +Check hostname matches \*(L"www.foo.com\*(R" in peer certificate: +.PP +.Vb 2 +\& X509_VERIFY_PARAM *vpm = SSL_get0_param(ssl); +\& X509_VERIFY_PARAM_set1_host(vpm, "www.foo.com", 0); +.Ve .SH "SEE ALSO" .IX Header "SEE ALSO" \&\fBX509_VERIFY_PARAM_set_flags\fR\|(3) @@ -191,7 +191,7 @@ for failure. These functions were added in OpenSSL 1.0.2. .SH "COPYRIGHT" .IX Header "COPYRIGHT" -Copyright 2015\-2016 The OpenSSL Project Authors. All Rights Reserved. +Copyright 2015\-2019 The OpenSSL Project Authors. All Rights Reserved. .PP Licensed under the OpenSSL license (the \*(L"License\*(R"). You may not use this file except in compliance with the License. You can obtain a copy diff --git a/crypto/external/bsd/openssl/lib/libcrypto/man/SSL_CTX_get_verify_mode.3 b/crypto/external/bsd/openssl/lib/libcrypto/man/SSL_CTX_get_verify_mode.3 index 15592c45b45..a0ce8a6c35f 100644 --- a/crypto/external/bsd/openssl/lib/libcrypto/man/SSL_CTX_get_verify_mode.3 +++ b/crypto/external/bsd/openssl/lib/libcrypto/man/SSL_CTX_get_verify_mode.3 @@ -1,6 +1,6 @@ -.\" $NetBSD: SSL_CTX_get_verify_mode.3,v 1.19 2019/06/09 18:44:32 christos Exp $ +.\" $NetBSD: SSL_CTX_get_verify_mode.3,v 1.19.2.1 2021/03/28 18:21:49 martin Exp $ .\" -.\" Automatically generated by Pod::Man 4.10 (Pod::Simple 3.35) +.\" Automatically generated by Pod::Man 4.11 (Pod::Simple 3.35) .\" .\" Standard preamble: .\" ======================================================================== @@ -135,7 +135,7 @@ .\" ======================================================================== .\" .IX Title "SSL_CTX_get_verify_mode 3" -.TH SSL_CTX_get_verify_mode 3 "2018-09-23" "1.1.1c" "OpenSSL" +.TH SSL_CTX_get_verify_mode 3 "2018-09-23" "1.1.1i" "OpenSSL" .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. .if n .ad l diff --git a/crypto/external/bsd/openssl/lib/libcrypto/man/SSL_CTX_has_client_custom_ext.3 b/crypto/external/bsd/openssl/lib/libcrypto/man/SSL_CTX_has_client_custom_ext.3 index 51a0b2a4908..a8bf74989fc 100644 --- a/crypto/external/bsd/openssl/lib/libcrypto/man/SSL_CTX_has_client_custom_ext.3 +++ b/crypto/external/bsd/openssl/lib/libcrypto/man/SSL_CTX_has_client_custom_ext.3 @@ -1,6 +1,6 @@ -.\" $NetBSD: SSL_CTX_has_client_custom_ext.3,v 1.3 2019/06/09 18:44:32 christos Exp $ +.\" $NetBSD: SSL_CTX_has_client_custom_ext.3,v 1.3.2.1 2021/03/28 18:21:49 martin Exp $ .\" -.\" Automatically generated by Pod::Man 4.10 (Pod::Simple 3.35) +.\" Automatically generated by Pod::Man 4.11 (Pod::Simple 3.35) .\" .\" Standard preamble: .\" ======================================================================== @@ -135,7 +135,7 @@ .\" ======================================================================== .\" .IX Title "SSL_CTX_has_client_custom_ext 3" -.TH SSL_CTX_has_client_custom_ext 3 "2018-09-23" "1.1.1c" "OpenSSL" +.TH SSL_CTX_has_client_custom_ext 3 "2018-09-23" "1.1.1i" "OpenSSL" .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. .if n .ad l diff --git a/crypto/external/bsd/openssl/lib/libcrypto/man/SSL_CTX_load_verify_locations.3 b/crypto/external/bsd/openssl/lib/libcrypto/man/SSL_CTX_load_verify_locations.3 index 932c56f4ce2..e50567e4052 100644 --- a/crypto/external/bsd/openssl/lib/libcrypto/man/SSL_CTX_load_verify_locations.3 +++ b/crypto/external/bsd/openssl/lib/libcrypto/man/SSL_CTX_load_verify_locations.3 @@ -1,6 +1,6 @@ -.\" $NetBSD: SSL_CTX_load_verify_locations.3,v 1.19 2019/06/09 18:44:32 christos Exp $ +.\" $NetBSD: SSL_CTX_load_verify_locations.3,v 1.19.2.1 2021/03/28 18:21:49 martin Exp $ .\" -.\" Automatically generated by Pod::Man 4.10 (Pod::Simple 3.35) +.\" Automatically generated by Pod::Man 4.11 (Pod::Simple 3.35) .\" .\" Standard preamble: .\" ======================================================================== @@ -135,7 +135,7 @@ .\" ======================================================================== .\" .IX Title "SSL_CTX_load_verify_locations 3" -.TH SSL_CTX_load_verify_locations 3 "2019-06-09" "1.1.1c" "OpenSSL" +.TH SSL_CTX_load_verify_locations 3 "2019-06-09" "1.1.1i" "OpenSSL" .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. .if n .ad l diff --git a/crypto/external/bsd/openssl/lib/libcrypto/man/SSL_CTX_new.3 b/crypto/external/bsd/openssl/lib/libcrypto/man/SSL_CTX_new.3 index 29d10f96cce..7dc5231264e 100644 --- a/crypto/external/bsd/openssl/lib/libcrypto/man/SSL_CTX_new.3 +++ b/crypto/external/bsd/openssl/lib/libcrypto/man/SSL_CTX_new.3 @@ -1,6 +1,6 @@ -.\" $NetBSD: SSL_CTX_new.3,v 1.19 2019/06/09 18:44:32 christos Exp $ +.\" $NetBSD: SSL_CTX_new.3,v 1.19.2.1 2021/03/28 18:21:49 martin Exp $ .\" -.\" Automatically generated by Pod::Man 4.10 (Pod::Simple 3.35) +.\" Automatically generated by Pod::Man 4.11 (Pod::Simple 3.35) .\" .\" Standard preamble: .\" ======================================================================== @@ -135,7 +135,7 @@ .\" ======================================================================== .\" .IX Title "SSL_CTX_new 3" -.TH SSL_CTX_new 3 "2019-06-09" "1.1.1c" "OpenSSL" +.TH SSL_CTX_new 3 "2020-01-23" "1.1.1i" "OpenSSL" .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. .if n .ad l @@ -231,24 +231,27 @@ The actual protocol version used will be negotiated to the highest version mutually supported by the client and the server. The supported protocols are SSLv3, TLSv1, TLSv1.1, TLSv1.2 and TLSv1.3. Applications should use these methods, and avoid the version-specific -methods described below. +methods described below, which are deprecated. .IP "\fBSSLv23_method()\fR, \fBSSLv23_server_method()\fR, \fBSSLv23_client_method()\fR" 4 .IX Item "SSLv23_method(), SSLv23_server_method(), SSLv23_client_method()" -Use of these functions is deprecated. They have been replaced with the above -\&\fBTLS_method()\fR, \fBTLS_server_method()\fR and \fBTLS_client_method()\fR respectively. New -code should use those functions instead. +These functions do not exist anymore, they have been renamed to +\&\fBTLS_method()\fR, \fBTLS_server_method()\fR and \fBTLS_client_method()\fR respectively. +Currently, the old function calls are renamed to the corresponding new +ones by preprocessor macros, to ensure that existing code which uses the +old function names still compiles. However, using the old function names +is deprecated and new code should call the new functions instead. .IP "\fBTLSv1_2_method()\fR, \fBTLSv1_2_server_method()\fR, \fBTLSv1_2_client_method()\fR" 4 .IX Item "TLSv1_2_method(), TLSv1_2_server_method(), TLSv1_2_client_method()" A \s-1TLS/SSL\s0 connection established with these methods will only understand the -TLSv1.2 protocol. +TLSv1.2 protocol. These methods are deprecated. .IP "\fBTLSv1_1_method()\fR, \fBTLSv1_1_server_method()\fR, \fBTLSv1_1_client_method()\fR" 4 .IX Item "TLSv1_1_method(), TLSv1_1_server_method(), TLSv1_1_client_method()" A \s-1TLS/SSL\s0 connection established with these methods will only understand the -TLSv1.1 protocol. +TLSv1.1 protocol. These methods are deprecated. .IP "\fBTLSv1_method()\fR, \fBTLSv1_server_method()\fR, \fBTLSv1_client_method()\fR" 4 .IX Item "TLSv1_method(), TLSv1_server_method(), TLSv1_client_method()" A \s-1TLS/SSL\s0 connection established with these methods will only understand the -TLSv1 protocol. +TLSv1 protocol. These methods are deprecated. .IP "\fBSSLv3_method()\fR, \fBSSLv3_server_method()\fR, \fBSSLv3_client_method()\fR" 4 .IX Item "SSLv3_method(), SSLv3_server_method(), SSLv3_client_method()" A \s-1TLS/SSL\s0 connection established with these methods will only understand the @@ -261,9 +264,11 @@ Currently supported protocols are \s-1DTLS 1.0\s0 and \s-1DTLS 1.2.\s0 .IP "\fBDTLSv1_2_method()\fR, \fBDTLSv1_2_server_method()\fR, \fBDTLSv1_2_client_method()\fR" 4 .IX Item "DTLSv1_2_method(), DTLSv1_2_server_method(), DTLSv1_2_client_method()" These are the version-specific methods for DTLSv1.2. +These methods are deprecated. .IP "\fBDTLSv1_method()\fR, \fBDTLSv1_server_method()\fR, \fBDTLSv1_client_method()\fR" 4 .IX Item "DTLSv1_method(), DTLSv1_server_method(), DTLSv1_client_method()" These are the version-specific methods for DTLSv1. +These methods are deprecated. .PP \&\fBSSL_CTX_new()\fR initializes the list of ciphers, the session cache setting, the callbacks, the keys and certificates and the options to their default values. diff --git a/crypto/external/bsd/openssl/lib/libcrypto/man/SSL_CTX_sess_number.3 b/crypto/external/bsd/openssl/lib/libcrypto/man/SSL_CTX_sess_number.3 index ca6d8abee22..d91efc812e5 100644 --- a/crypto/external/bsd/openssl/lib/libcrypto/man/SSL_CTX_sess_number.3 +++ b/crypto/external/bsd/openssl/lib/libcrypto/man/SSL_CTX_sess_number.3 @@ -1,6 +1,6 @@ -.\" $NetBSD: SSL_CTX_sess_number.3,v 1.19 2019/06/09 18:44:32 christos Exp $ +.\" $NetBSD: SSL_CTX_sess_number.3,v 1.19.2.1 2021/03/28 18:21:49 martin Exp $ .\" -.\" Automatically generated by Pod::Man 4.10 (Pod::Simple 3.35) +.\" Automatically generated by Pod::Man 4.11 (Pod::Simple 3.35) .\" .\" Standard preamble: .\" ======================================================================== @@ -135,7 +135,7 @@ .\" ======================================================================== .\" .IX Title "SSL_CTX_sess_number 3" -.TH SSL_CTX_sess_number 3 "2018-09-23" "1.1.1c" "OpenSSL" +.TH SSL_CTX_sess_number 3 "2018-09-23" "1.1.1i" "OpenSSL" .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. .if n .ad l diff --git a/crypto/external/bsd/openssl/lib/libcrypto/man/SSL_CTX_sess_set_cache_size.3 b/crypto/external/bsd/openssl/lib/libcrypto/man/SSL_CTX_sess_set_cache_size.3 index 000f8bc4284..287788d8706 100644 --- a/crypto/external/bsd/openssl/lib/libcrypto/man/SSL_CTX_sess_set_cache_size.3 +++ b/crypto/external/bsd/openssl/lib/libcrypto/man/SSL_CTX_sess_set_cache_size.3 @@ -1,6 +1,6 @@ -.\" $NetBSD: SSL_CTX_sess_set_cache_size.3,v 1.19 2019/06/09 18:44:32 christos Exp $ +.\" $NetBSD: SSL_CTX_sess_set_cache_size.3,v 1.19.2.1 2021/03/28 18:21:49 martin Exp $ .\" -.\" Automatically generated by Pod::Man 4.10 (Pod::Simple 3.35) +.\" Automatically generated by Pod::Man 4.11 (Pod::Simple 3.35) .\" .\" Standard preamble: .\" ======================================================================== @@ -135,7 +135,7 @@ .\" ======================================================================== .\" .IX Title "SSL_CTX_sess_set_cache_size 3" -.TH SSL_CTX_sess_set_cache_size 3 "2018-09-23" "1.1.1c" "OpenSSL" +.TH SSL_CTX_sess_set_cache_size 3 "2018-09-23" "1.1.1i" "OpenSSL" .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. .if n .ad l diff --git a/crypto/external/bsd/openssl/lib/libcrypto/man/SSL_CTX_sess_set_get_cb.3 b/crypto/external/bsd/openssl/lib/libcrypto/man/SSL_CTX_sess_set_get_cb.3 index 54143db4144..6e4eb0b822d 100644 --- a/crypto/external/bsd/openssl/lib/libcrypto/man/SSL_CTX_sess_set_get_cb.3 +++ b/crypto/external/bsd/openssl/lib/libcrypto/man/SSL_CTX_sess_set_get_cb.3 @@ -1,6 +1,6 @@ -.\" $NetBSD: SSL_CTX_sess_set_get_cb.3,v 1.19 2019/06/09 18:44:32 christos Exp $ +.\" $NetBSD: SSL_CTX_sess_set_get_cb.3,v 1.19.2.1 2021/03/28 18:21:49 martin Exp $ .\" -.\" Automatically generated by Pod::Man 4.10 (Pod::Simple 3.35) +.\" Automatically generated by Pod::Man 4.11 (Pod::Simple 3.35) .\" .\" Standard preamble: .\" ======================================================================== @@ -135,7 +135,7 @@ .\" ======================================================================== .\" .IX Title "SSL_CTX_sess_set_get_cb 3" -.TH SSL_CTX_sess_set_get_cb 3 "2018-09-23" "1.1.1c" "OpenSSL" +.TH SSL_CTX_sess_set_get_cb 3 "2020-03-22" "1.1.1i" "OpenSSL" .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. .if n .ad l @@ -169,19 +169,19 @@ libcrypto, -lcrypto .Ve .SH "DESCRIPTION" .IX Header "DESCRIPTION" -\&\fBSSL_CTX_sess_set_new_cb()\fR sets the callback function, which is automatically +\&\fBSSL_CTX_sess_set_new_cb()\fR sets the callback function that is called whenever a new session was negotiated. .PP -\&\fBSSL_CTX_sess_set_remove_cb()\fR sets the callback function, which is -automatically called whenever a session is removed by the \s-1SSL\s0 engine, -because it is considered faulty or the session has become obsolete because -of exceeding the timeout value. +\&\fBSSL_CTX_sess_set_remove_cb()\fR sets the callback function that is +called whenever a session is removed by the \s-1SSL\s0 engine. For example, +this can occur because a session is considered faulty or has become obsolete +because of exceeding the timeout value. .PP -\&\fBSSL_CTX_sess_set_get_cb()\fR sets the callback function which is called, -whenever a \s-1SSL/TLS\s0 client proposed to resume a session but the session +\&\fBSSL_CTX_sess_set_get_cb()\fR sets the callback function that is called +whenever a \s-1TLS\s0 client proposed to resume a session but the session could not be found in the internal session cache (see \&\fBSSL_CTX_set_session_cache_mode\fR\|(3)). -(\s-1SSL/TLS\s0 server only.) +(\s-1TLS\s0 server only.) .PP \&\fBSSL_CTX_sess_get_new_cb()\fR, \fBSSL_CTX_sess_get_remove_cb()\fR, and \&\fBSSL_CTX_sess_get_get_cb()\fR retrieve the function pointers set by the @@ -194,12 +194,19 @@ session cache is realized via callback functions. Inside these callback functions, session can be saved to disk or put into a database using the \&\fBd2i_SSL_SESSION\fR\|(3) interface. .PP -The \fBnew_session_cb()\fR is called, whenever a new session has been negotiated -and session caching is enabled (see -\&\fBSSL_CTX_set_session_cache_mode\fR\|(3)). -The \fBnew_session_cb()\fR is passed the \fBssl\fR connection and the ssl session -\&\fBsess\fR. If the callback returns \fB0\fR, the session will be immediately -removed again. Note that in TLSv1.3, sessions are established after the main +The \fBnew_session_cb()\fR is called whenever a new session has been negotiated and +session caching is enabled (see \fBSSL_CTX_set_session_cache_mode\fR\|(3)). The +\&\fBnew_session_cb()\fR is passed the \fBssl\fR connection and the nascent +ssl session \fBsess\fR. +Since sessions are reference-counted objects, the reference count on the +session is incremented before the callback, on behalf of the application. If +the callback returns \fB0\fR, the session will be immediately removed from the +internal cache and the reference count released. If the callback returns \fB1\fR, +the application retains the reference (for an entry in the +application-maintained \*(L"external session cache\*(R"), and is responsible for +calling \fBSSL_SESSION_free()\fR when the session reference is no longer in use. +.PP +Note that in TLSv1.3, sessions are established after the main handshake has completed. The server decides when to send the client the session information and this may occur some time after the end of the handshake (or not at all). This means that applications should expect the \fBnew_session_cb()\fR @@ -212,21 +219,23 @@ In TLSv1.3 it is recommended that each \s-1SSL_SESSION\s0 object is only used fo resumption once. One way of enforcing that is for applications to call \&\fBSSL_CTX_remove_session\fR\|(3) after a session has been used. .PP -The \fBremove_session_cb()\fR is called, whenever the \s-1SSL\s0 engine removes a session -from the internal cache. This happens when the session is removed because +The \fBremove_session_cb()\fR is called whenever the \s-1SSL\s0 engine removes a session +from the internal cache. This can happen when the session is removed because it is expired or when a connection was not shutdown cleanly. It also happens for all sessions in the internal session cache when \&\fBSSL_CTX_free\fR\|(3) is called. The \fBremove_session_cb()\fR is passed the \fBctx\fR and the ssl session \fBsess\fR. It does not provide any feedback. .PP -The \fBget_session_cb()\fR is only called on \s-1SSL/TLS\s0 servers with the session id -proposed by the client. The \fBget_session_cb()\fR is always called, also when +The \fBget_session_cb()\fR is only called on \s-1SSL/TLS\s0 servers, and is given +the session id +proposed by the client. The \fBget_session_cb()\fR is always called, even when session caching was disabled. The \fBget_session_cb()\fR is passed the -\&\fBssl\fR connection, the session id of length \fBlength\fR at the memory location -\&\fBdata\fR. With the parameter \fBcopy\fR the callback can require the -\&\s-1SSL\s0 engine to increment the reference count of the \s-1SSL_SESSION\s0 object, -Normally the reference count is not incremented and therefore the -session must not be explicitly freed with +\&\fBssl\fR connection and the session id of length \fBlength\fR at the memory location +\&\fBdata\fR. By setting the parameter \fBcopy\fR to \fB1\fR, the callback can require the +\&\s-1SSL\s0 engine to increment the reference count of the \s-1SSL_SESSION\s0 object; +setting \fBcopy\fR to \fB0\fR causes the reference count to remain unchanged. +If the \fBget_session_cb()\fR does not write to \fBcopy\fR, the reference count +is incremented and the session must be explicitly freed with \&\fBSSL_SESSION_free\fR\|(3). .SH "RETURN VALUES" .IX Header "RETURN VALUES" @@ -241,7 +250,7 @@ return different callback function pointers respectively. \&\fBSSL_CTX_free\fR\|(3) .SH "COPYRIGHT" .IX Header "COPYRIGHT" -Copyright 2001\-2018 The OpenSSL Project Authors. All Rights Reserved. +Copyright 2001\-2020 The OpenSSL Project Authors. All Rights Reserved. .PP Licensed under the OpenSSL license (the \*(L"License\*(R"). You may not use this file except in compliance with the License. You can obtain a copy diff --git a/crypto/external/bsd/openssl/lib/libcrypto/man/SSL_CTX_sessions.3 b/crypto/external/bsd/openssl/lib/libcrypto/man/SSL_CTX_sessions.3 index b8cddfcf47d..1d140830d05 100644 --- a/crypto/external/bsd/openssl/lib/libcrypto/man/SSL_CTX_sessions.3 +++ b/crypto/external/bsd/openssl/lib/libcrypto/man/SSL_CTX_sessions.3 @@ -1,6 +1,6 @@ -.\" $NetBSD: SSL_CTX_sessions.3,v 1.19 2019/06/09 18:44:32 christos Exp $ +.\" $NetBSD: SSL_CTX_sessions.3,v 1.19.2.1 2021/03/28 18:21:49 martin Exp $ .\" -.\" Automatically generated by Pod::Man 4.10 (Pod::Simple 3.35) +.\" Automatically generated by Pod::Man 4.11 (Pod::Simple 3.35) .\" .\" Standard preamble: .\" ======================================================================== @@ -135,7 +135,7 @@ .\" ======================================================================== .\" .IX Title "SSL_CTX_sessions 3" -.TH SSL_CTX_sessions 3 "2018-09-23" "1.1.1c" "OpenSSL" +.TH SSL_CTX_sessions 3 "2018-09-23" "1.1.1i" "OpenSSL" .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. .if n .ad l diff --git a/crypto/external/bsd/openssl/lib/libcrypto/man/SSL_CTX_set0_CA_list.3 b/crypto/external/bsd/openssl/lib/libcrypto/man/SSL_CTX_set0_CA_list.3 index 14c0d51ce55..cc7e21ae170 100644 --- a/crypto/external/bsd/openssl/lib/libcrypto/man/SSL_CTX_set0_CA_list.3 +++ b/crypto/external/bsd/openssl/lib/libcrypto/man/SSL_CTX_set0_CA_list.3 @@ -1,6 +1,6 @@ -.\" $NetBSD: SSL_CTX_set0_CA_list.3,v 1.2 2019/06/09 18:44:32 christos Exp $ +.\" $NetBSD: SSL_CTX_set0_CA_list.3,v 1.2.4.1 2021/03/28 18:21:49 martin Exp $ .\" -.\" Automatically generated by Pod::Man 4.10 (Pod::Simple 3.35) +.\" Automatically generated by Pod::Man 4.11 (Pod::Simple 3.35) .\" .\" Standard preamble: .\" ======================================================================== @@ -135,7 +135,7 @@ .\" ======================================================================== .\" .IX Title "SSL_CTX_set0_CA_list 3" -.TH SSL_CTX_set0_CA_list 3 "2019-03-12" "1.1.1c" "OpenSSL" +.TH SSL_CTX_set0_CA_list 3 "2019-03-12" "1.1.1i" "OpenSSL" .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. .if n .ad l diff --git a/crypto/external/bsd/openssl/lib/libcrypto/man/SSL_CTX_set1_curves.3 b/crypto/external/bsd/openssl/lib/libcrypto/man/SSL_CTX_set1_curves.3 index bee9c4a29d7..657b4f04c83 100644 --- a/crypto/external/bsd/openssl/lib/libcrypto/man/SSL_CTX_set1_curves.3 +++ b/crypto/external/bsd/openssl/lib/libcrypto/man/SSL_CTX_set1_curves.3 @@ -1,6 +1,6 @@ -.\" $NetBSD: SSL_CTX_set1_curves.3,v 1.4 2019/06/09 18:44:32 christos Exp $ +.\" $NetBSD: SSL_CTX_set1_curves.3,v 1.4.2.1 2021/03/28 18:21:49 martin Exp $ .\" -.\" Automatically generated by Pod::Man 4.10 (Pod::Simple 3.35) +.\" Automatically generated by Pod::Man 4.11 (Pod::Simple 3.35) .\" .\" Standard preamble: .\" ======================================================================== @@ -135,7 +135,7 @@ .\" ======================================================================== .\" .IX Title "SSL_CTX_set1_curves 3" -.TH SSL_CTX_set1_curves 3 "2019-03-12" "1.1.1c" "OpenSSL" +.TH SSL_CTX_set1_curves 3 "2019-03-12" "1.1.1i" "OpenSSL" .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. .if n .ad l diff --git a/crypto/external/bsd/openssl/lib/libcrypto/man/SSL_CTX_set1_sigalgs.3 b/crypto/external/bsd/openssl/lib/libcrypto/man/SSL_CTX_set1_sigalgs.3 index 72cffae25e9..d57d64502af 100644 --- a/crypto/external/bsd/openssl/lib/libcrypto/man/SSL_CTX_set1_sigalgs.3 +++ b/crypto/external/bsd/openssl/lib/libcrypto/man/SSL_CTX_set1_sigalgs.3 @@ -1,6 +1,6 @@ -.\" $NetBSD: SSL_CTX_set1_sigalgs.3,v 1.3 2019/06/09 18:44:32 christos Exp $ +.\" $NetBSD: SSL_CTX_set1_sigalgs.3,v 1.3.2.1 2021/03/28 18:21:49 martin Exp $ .\" -.\" Automatically generated by Pod::Man 4.10 (Pod::Simple 3.35) +.\" Automatically generated by Pod::Man 4.11 (Pod::Simple 3.35) .\" .\" Standard preamble: .\" ======================================================================== @@ -135,7 +135,7 @@ .\" ======================================================================== .\" .IX Title "SSL_CTX_set1_sigalgs 3" -.TH SSL_CTX_set1_sigalgs 3 "2019-06-09" "1.1.1c" "OpenSSL" +.TH SSL_CTX_set1_sigalgs 3 "2019-06-09" "1.1.1i" "OpenSSL" .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. .if n .ad l diff --git a/crypto/external/bsd/openssl/lib/libcrypto/man/SSL_CTX_set1_verify_cert_store.3 b/crypto/external/bsd/openssl/lib/libcrypto/man/SSL_CTX_set1_verify_cert_store.3 index 30edfe006c8..223a740f77a 100644 --- a/crypto/external/bsd/openssl/lib/libcrypto/man/SSL_CTX_set1_verify_cert_store.3 +++ b/crypto/external/bsd/openssl/lib/libcrypto/man/SSL_CTX_set1_verify_cert_store.3 @@ -1,6 +1,6 @@ -.\" $NetBSD: SSL_CTX_set1_verify_cert_store.3,v 1.4 2019/06/09 18:44:32 christos Exp $ +.\" $NetBSD: SSL_CTX_set1_verify_cert_store.3,v 1.4.2.1 2021/03/28 18:21:49 martin Exp $ .\" -.\" Automatically generated by Pod::Man 4.10 (Pod::Simple 3.35) +.\" Automatically generated by Pod::Man 4.11 (Pod::Simple 3.35) .\" .\" Standard preamble: .\" ======================================================================== @@ -135,7 +135,7 @@ .\" ======================================================================== .\" .IX Title "SSL_CTX_set1_verify_cert_store 3" -.TH SSL_CTX_set1_verify_cert_store 3 "2019-03-12" "1.1.1c" "OpenSSL" +.TH SSL_CTX_set1_verify_cert_store 3 "2019-03-12" "1.1.1i" "OpenSSL" .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. .if n .ad l diff --git a/crypto/external/bsd/openssl/lib/libcrypto/man/SSL_CTX_set_alpn_select_cb.3 b/crypto/external/bsd/openssl/lib/libcrypto/man/SSL_CTX_set_alpn_select_cb.3 index 0cedbd22fac..b9f392eae39 100644 --- a/crypto/external/bsd/openssl/lib/libcrypto/man/SSL_CTX_set_alpn_select_cb.3 +++ b/crypto/external/bsd/openssl/lib/libcrypto/man/SSL_CTX_set_alpn_select_cb.3 @@ -1,6 +1,6 @@ -.\" $NetBSD: SSL_CTX_set_alpn_select_cb.3,v 1.4 2019/06/09 18:44:32 christos Exp $ +.\" $NetBSD: SSL_CTX_set_alpn_select_cb.3,v 1.4.2.1 2021/03/28 18:21:49 martin Exp $ .\" -.\" Automatically generated by Pod::Man 4.10 (Pod::Simple 3.35) +.\" Automatically generated by Pod::Man 4.11 (Pod::Simple 3.35) .\" .\" Standard preamble: .\" ======================================================================== @@ -135,7 +135,7 @@ .\" ======================================================================== .\" .IX Title "SSL_CTX_set_alpn_select_cb 3" -.TH SSL_CTX_set_alpn_select_cb 3 "2018-09-23" "1.1.1c" "OpenSSL" +.TH SSL_CTX_set_alpn_select_cb 3 "2020-12-10" "1.1.1i" "OpenSSL" .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. .if n .ad l @@ -254,7 +254,7 @@ provided by the callback. .SH "NOTES" .IX Header "NOTES" The protocol-lists must be in wire-format, which is defined as a vector of -non-empty, 8\-bit length-prefixed, byte strings. The length-prefix byte is not +nonempty, 8\-bit length-prefixed, byte strings. The length-prefix byte is not included in the length. Each string is limited to 255 bytes. A byte-string length of 0 is invalid. A truncated byte-string is invalid. The length of the vector is not in the vector itself, but in a separate variable. @@ -313,7 +313,7 @@ will be included in the ServerHello. \&\fBSSL_CTX_set_tlsext_servername_arg\fR\|(3) .SH "COPYRIGHT" .IX Header "COPYRIGHT" -Copyright 2016\-2017 The OpenSSL Project Authors. All Rights Reserved. +Copyright 2016\-2020 The OpenSSL Project Authors. All Rights Reserved. .PP Licensed under the OpenSSL license (the \*(L"License\*(R"). You may not use this file except in compliance with the License. You can obtain a copy diff --git a/crypto/external/bsd/openssl/lib/libcrypto/man/SSL_CTX_set_cert_cb.3 b/crypto/external/bsd/openssl/lib/libcrypto/man/SSL_CTX_set_cert_cb.3 index b0f94a2fd06..9d4a256ca46 100644 --- a/crypto/external/bsd/openssl/lib/libcrypto/man/SSL_CTX_set_cert_cb.3 +++ b/crypto/external/bsd/openssl/lib/libcrypto/man/SSL_CTX_set_cert_cb.3 @@ -1,6 +1,6 @@ -.\" $NetBSD: SSL_CTX_set_cert_cb.3,v 1.4 2019/06/09 18:44:32 christos Exp $ +.\" $NetBSD: SSL_CTX_set_cert_cb.3,v 1.4.2.1 2021/03/28 18:21:49 martin Exp $ .\" -.\" Automatically generated by Pod::Man 4.10 (Pod::Simple 3.35) +.\" Automatically generated by Pod::Man 4.11 (Pod::Simple 3.35) .\" .\" Standard preamble: .\" ======================================================================== @@ -135,7 +135,7 @@ .\" ======================================================================== .\" .IX Title "SSL_CTX_set_cert_cb 3" -.TH SSL_CTX_set_cert_cb 3 "2018-09-23" "1.1.1c" "OpenSSL" +.TH SSL_CTX_set_cert_cb 3 "2018-09-23" "1.1.1i" "OpenSSL" .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. .if n .ad l diff --git a/crypto/external/bsd/openssl/lib/libcrypto/man/SSL_CTX_set_cert_store.3 b/crypto/external/bsd/openssl/lib/libcrypto/man/SSL_CTX_set_cert_store.3 index e1bf8c4eb6b..0858d7b6aa5 100644 --- a/crypto/external/bsd/openssl/lib/libcrypto/man/SSL_CTX_set_cert_store.3 +++ b/crypto/external/bsd/openssl/lib/libcrypto/man/SSL_CTX_set_cert_store.3 @@ -1,6 +1,6 @@ -.\" $NetBSD: SSL_CTX_set_cert_store.3,v 1.19 2019/06/09 18:44:32 christos Exp $ +.\" $NetBSD: SSL_CTX_set_cert_store.3,v 1.19.2.1 2021/03/28 18:21:49 martin Exp $ .\" -.\" Automatically generated by Pod::Man 4.10 (Pod::Simple 3.35) +.\" Automatically generated by Pod::Man 4.11 (Pod::Simple 3.35) .\" .\" Standard preamble: .\" ======================================================================== @@ -135,7 +135,7 @@ .\" ======================================================================== .\" .IX Title "SSL_CTX_set_cert_store 3" -.TH SSL_CTX_set_cert_store 3 "2018-09-23" "1.1.1c" "OpenSSL" +.TH SSL_CTX_set_cert_store 3 "2018-09-23" "1.1.1i" "OpenSSL" .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. .if n .ad l diff --git a/crypto/external/bsd/openssl/lib/libcrypto/man/SSL_CTX_set_cert_verify_callback.3 b/crypto/external/bsd/openssl/lib/libcrypto/man/SSL_CTX_set_cert_verify_callback.3 index 688807dc044..263641dd411 100644 --- a/crypto/external/bsd/openssl/lib/libcrypto/man/SSL_CTX_set_cert_verify_callback.3 +++ b/crypto/external/bsd/openssl/lib/libcrypto/man/SSL_CTX_set_cert_verify_callback.3 @@ -1,6 +1,6 @@ -.\" $NetBSD: SSL_CTX_set_cert_verify_callback.3,v 1.19 2019/06/09 18:44:32 christos Exp $ +.\" $NetBSD: SSL_CTX_set_cert_verify_callback.3,v 1.19.2.1 2021/03/28 18:21:49 martin Exp $ .\" -.\" Automatically generated by Pod::Man 4.10 (Pod::Simple 3.35) +.\" Automatically generated by Pod::Man 4.11 (Pod::Simple 3.35) .\" .\" Standard preamble: .\" ======================================================================== @@ -135,7 +135,7 @@ .\" ======================================================================== .\" .IX Title "SSL_CTX_set_cert_verify_callback 3" -.TH SSL_CTX_set_cert_verify_callback 3 "2018-09-23" "1.1.1c" "OpenSSL" +.TH SSL_CTX_set_cert_verify_callback 3 "2018-09-23" "1.1.1i" "OpenSSL" .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. .if n .ad l diff --git a/crypto/external/bsd/openssl/lib/libcrypto/man/SSL_CTX_set_cipher_list.3 b/crypto/external/bsd/openssl/lib/libcrypto/man/SSL_CTX_set_cipher_list.3 index 8600eadeaca..c40052a8e34 100644 --- a/crypto/external/bsd/openssl/lib/libcrypto/man/SSL_CTX_set_cipher_list.3 +++ b/crypto/external/bsd/openssl/lib/libcrypto/man/SSL_CTX_set_cipher_list.3 @@ -1,6 +1,6 @@ -.\" $NetBSD: SSL_CTX_set_cipher_list.3,v 1.19 2019/06/09 18:44:32 christos Exp $ +.\" $NetBSD: SSL_CTX_set_cipher_list.3,v 1.19.2.1 2021/03/28 18:21:49 martin Exp $ .\" -.\" Automatically generated by Pod::Man 4.10 (Pod::Simple 3.35) +.\" Automatically generated by Pod::Man 4.11 (Pod::Simple 3.35) .\" .\" Standard preamble: .\" ======================================================================== @@ -135,7 +135,7 @@ .\" ======================================================================== .\" .IX Title "SSL_CTX_set_cipher_list 3" -.TH SSL_CTX_set_cipher_list 3 "2018-09-23" "1.1.1c" "OpenSSL" +.TH SSL_CTX_set_cipher_list 3 "2020-01-23" "1.1.1i" "OpenSSL" .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. .if n .ad l @@ -172,7 +172,7 @@ ciphersuites. Use \fBSSL_CTX_set_ciphersuites()\fR to configure those. .PP \&\fBSSL_CTX_set_ciphersuites()\fR is used to configure the available TLSv1.3 ciphersuites for \fBctx\fR. This is a simple colon (\*(L":\*(R") separated list of TLSv1.3 -ciphersuite names in order of perference. Valid TLSv1.3 ciphersuite names are: +ciphersuite names in order of preference. Valid TLSv1.3 ciphersuite names are: .IP "\s-1TLS_AES_128_GCM_SHA256\s0" 4 .IX Item "TLS_AES_128_GCM_SHA256" .PD 0 @@ -237,7 +237,7 @@ ciphersuite list was configured, and 0 otherwise. \&\fBciphers\fR\|(1) .SH "COPYRIGHT" .IX Header "COPYRIGHT" -Copyright 2000\-2018 The OpenSSL Project Authors. All Rights Reserved. +Copyright 2000\-2019 The OpenSSL Project Authors. All Rights Reserved. .PP Licensed under the OpenSSL license (the \*(L"License\*(R"). You may not use this file except in compliance with the License. You can obtain a copy diff --git a/crypto/external/bsd/openssl/lib/libcrypto/man/SSL_CTX_set_client_cert_cb.3 b/crypto/external/bsd/openssl/lib/libcrypto/man/SSL_CTX_set_client_cert_cb.3 index 8eb6461caea..154a0025927 100644 --- a/crypto/external/bsd/openssl/lib/libcrypto/man/SSL_CTX_set_client_cert_cb.3 +++ b/crypto/external/bsd/openssl/lib/libcrypto/man/SSL_CTX_set_client_cert_cb.3 @@ -1,6 +1,6 @@ -.\" $NetBSD: SSL_CTX_set_client_cert_cb.3,v 1.19 2019/06/09 18:44:32 christos Exp $ +.\" $NetBSD: SSL_CTX_set_client_cert_cb.3,v 1.19.2.1 2021/03/28 18:21:49 martin Exp $ .\" -.\" Automatically generated by Pod::Man 4.10 (Pod::Simple 3.35) +.\" Automatically generated by Pod::Man 4.11 (Pod::Simple 3.35) .\" .\" Standard preamble: .\" ======================================================================== @@ -135,7 +135,7 @@ .\" ======================================================================== .\" .IX Title "SSL_CTX_set_client_cert_cb 3" -.TH SSL_CTX_set_client_cert_cb 3 "2018-09-23" "1.1.1c" "OpenSSL" +.TH SSL_CTX_set_client_cert_cb 3 "2018-09-23" "1.1.1i" "OpenSSL" .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. .if n .ad l diff --git a/crypto/external/bsd/openssl/lib/libcrypto/man/SSL_CTX_set_client_hello_cb.3 b/crypto/external/bsd/openssl/lib/libcrypto/man/SSL_CTX_set_client_hello_cb.3 index ffcf5d55f68..e17086a65bb 100644 --- a/crypto/external/bsd/openssl/lib/libcrypto/man/SSL_CTX_set_client_hello_cb.3 +++ b/crypto/external/bsd/openssl/lib/libcrypto/man/SSL_CTX_set_client_hello_cb.3 @@ -1,6 +1,6 @@ -.\" $NetBSD: SSL_CTX_set_client_hello_cb.3,v 1.2 2019/06/09 18:44:32 christos Exp $ +.\" $NetBSD: SSL_CTX_set_client_hello_cb.3,v 1.2.4.1 2021/03/28 18:21:50 martin Exp $ .\" -.\" Automatically generated by Pod::Man 4.10 (Pod::Simple 3.35) +.\" Automatically generated by Pod::Man 4.11 (Pod::Simple 3.35) .\" .\" Standard preamble: .\" ======================================================================== @@ -135,7 +135,7 @@ .\" ======================================================================== .\" .IX Title "SSL_CTX_set_client_hello_cb 3" -.TH SSL_CTX_set_client_hello_cb 3 "2019-06-09" "1.1.1c" "OpenSSL" +.TH SSL_CTX_set_client_hello_cb 3 "2019-06-09" "1.1.1i" "OpenSSL" .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. .if n .ad l diff --git a/crypto/external/bsd/openssl/lib/libcrypto/man/SSL_CTX_set_ct_validation_callback.3 b/crypto/external/bsd/openssl/lib/libcrypto/man/SSL_CTX_set_ct_validation_callback.3 index caa1adec0a2..3f5644172d4 100644 --- a/crypto/external/bsd/openssl/lib/libcrypto/man/SSL_CTX_set_ct_validation_callback.3 +++ b/crypto/external/bsd/openssl/lib/libcrypto/man/SSL_CTX_set_ct_validation_callback.3 @@ -1,6 +1,6 @@ -.\" $NetBSD: SSL_CTX_set_ct_validation_callback.3,v 1.3 2019/06/09 18:44:32 christos Exp $ +.\" $NetBSD: SSL_CTX_set_ct_validation_callback.3,v 1.3.2.1 2021/03/28 18:21:50 martin Exp $ .\" -.\" Automatically generated by Pod::Man 4.10 (Pod::Simple 3.35) +.\" Automatically generated by Pod::Man 4.11 (Pod::Simple 3.35) .\" .\" Standard preamble: .\" ======================================================================== @@ -135,7 +135,7 @@ .\" ======================================================================== .\" .IX Title "SSL_CTX_set_ct_validation_callback 3" -.TH SSL_CTX_set_ct_validation_callback 3 "2018-09-23" "1.1.1c" "OpenSSL" +.TH SSL_CTX_set_ct_validation_callback 3 "2018-09-23" "1.1.1i" "OpenSSL" .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. .if n .ad l diff --git a/crypto/external/bsd/openssl/lib/libcrypto/man/SSL_CTX_set_ctlog_list_file.3 b/crypto/external/bsd/openssl/lib/libcrypto/man/SSL_CTX_set_ctlog_list_file.3 index a9ea88a5a1e..6d443f84b9d 100644 --- a/crypto/external/bsd/openssl/lib/libcrypto/man/SSL_CTX_set_ctlog_list_file.3 +++ b/crypto/external/bsd/openssl/lib/libcrypto/man/SSL_CTX_set_ctlog_list_file.3 @@ -1,6 +1,6 @@ -.\" $NetBSD: SSL_CTX_set_ctlog_list_file.3,v 1.3 2019/06/09 18:44:32 christos Exp $ +.\" $NetBSD: SSL_CTX_set_ctlog_list_file.3,v 1.3.2.1 2021/03/28 18:21:50 martin Exp $ .\" -.\" Automatically generated by Pod::Man 4.10 (Pod::Simple 3.35) +.\" Automatically generated by Pod::Man 4.11 (Pod::Simple 3.35) .\" .\" Standard preamble: .\" ======================================================================== @@ -135,7 +135,7 @@ .\" ======================================================================== .\" .IX Title "SSL_CTX_set_ctlog_list_file 3" -.TH SSL_CTX_set_ctlog_list_file 3 "2019-03-12" "1.1.1c" "OpenSSL" +.TH SSL_CTX_set_ctlog_list_file 3 "2019-03-12" "1.1.1i" "OpenSSL" .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. .if n .ad l diff --git a/crypto/external/bsd/openssl/lib/libcrypto/man/SSL_CTX_set_default_passwd_cb.3 b/crypto/external/bsd/openssl/lib/libcrypto/man/SSL_CTX_set_default_passwd_cb.3 index 62e0b568d46..77175aa4d51 100644 --- a/crypto/external/bsd/openssl/lib/libcrypto/man/SSL_CTX_set_default_passwd_cb.3 +++ b/crypto/external/bsd/openssl/lib/libcrypto/man/SSL_CTX_set_default_passwd_cb.3 @@ -1,6 +1,6 @@ -.\" $NetBSD: SSL_CTX_set_default_passwd_cb.3,v 1.19 2019/06/09 18:44:32 christos Exp $ +.\" $NetBSD: SSL_CTX_set_default_passwd_cb.3,v 1.19.2.1 2021/03/28 18:21:50 martin Exp $ .\" -.\" Automatically generated by Pod::Man 4.10 (Pod::Simple 3.35) +.\" Automatically generated by Pod::Man 4.11 (Pod::Simple 3.35) .\" .\" Standard preamble: .\" ======================================================================== @@ -135,7 +135,7 @@ .\" ======================================================================== .\" .IX Title "SSL_CTX_set_default_passwd_cb 3" -.TH SSL_CTX_set_default_passwd_cb 3 "2019-06-09" "1.1.1c" "OpenSSL" +.TH SSL_CTX_set_default_passwd_cb 3 "2019-06-09" "1.1.1i" "OpenSSL" .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. .if n .ad l diff --git a/crypto/external/bsd/openssl/lib/libcrypto/man/SSL_CTX_set_ex_data.3 b/crypto/external/bsd/openssl/lib/libcrypto/man/SSL_CTX_set_ex_data.3 index 372b025039b..25f8902818b 100644 --- a/crypto/external/bsd/openssl/lib/libcrypto/man/SSL_CTX_set_ex_data.3 +++ b/crypto/external/bsd/openssl/lib/libcrypto/man/SSL_CTX_set_ex_data.3 @@ -1,6 +1,6 @@ -.\" $NetBSD: SSL_CTX_set_ex_data.3,v 1.3 2019/06/09 18:44:32 christos Exp $ +.\" $NetBSD: SSL_CTX_set_ex_data.3,v 1.3.2.1 2021/03/28 18:21:50 martin Exp $ .\" -.\" Automatically generated by Pod::Man 4.10 (Pod::Simple 3.35) +.\" Automatically generated by Pod::Man 4.11 (Pod::Simple 3.35) .\" .\" Standard preamble: .\" ======================================================================== @@ -135,7 +135,7 @@ .\" ======================================================================== .\" .IX Title "SSL_CTX_set_ex_data 3" -.TH SSL_CTX_set_ex_data 3 "2018-09-23" "1.1.1c" "OpenSSL" +.TH SSL_CTX_set_ex_data 3 "2018-09-23" "1.1.1i" "OpenSSL" .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. .if n .ad l diff --git a/crypto/external/bsd/openssl/lib/libcrypto/man/SSL_CTX_set_generate_session_id.3 b/crypto/external/bsd/openssl/lib/libcrypto/man/SSL_CTX_set_generate_session_id.3 index ad5bb2ebba4..a9da2d1554f 100644 --- a/crypto/external/bsd/openssl/lib/libcrypto/man/SSL_CTX_set_generate_session_id.3 +++ b/crypto/external/bsd/openssl/lib/libcrypto/man/SSL_CTX_set_generate_session_id.3 @@ -1,6 +1,6 @@ -.\" $NetBSD: SSL_CTX_set_generate_session_id.3,v 1.19 2019/06/09 18:44:32 christos Exp $ +.\" $NetBSD: SSL_CTX_set_generate_session_id.3,v 1.19.2.1 2021/03/28 18:21:50 martin Exp $ .\" -.\" Automatically generated by Pod::Man 4.10 (Pod::Simple 3.35) +.\" Automatically generated by Pod::Man 4.11 (Pod::Simple 3.35) .\" .\" Standard preamble: .\" ======================================================================== @@ -135,7 +135,7 @@ .\" ======================================================================== .\" .IX Title "SSL_CTX_set_generate_session_id 3" -.TH SSL_CTX_set_generate_session_id 3 "2019-06-09" "1.1.1c" "OpenSSL" +.TH SSL_CTX_set_generate_session_id 3 "2020-12-10" "1.1.1i" "OpenSSL" .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. .if n .ad l @@ -151,7 +151,7 @@ libcrypto, -lcrypto .Vb 1 \& #include <openssl/ssl.h> \& -\& typedef int (*GEN_SESSION_CB)(const SSL *ssl, unsigned char *id, +\& typedef int (*GEN_SESSION_CB)(SSL *ssl, unsigned char *id, \& unsigned int *id_len); \& \& int SSL_CTX_set_generate_session_id(SSL_CTX *ctx, GEN_SESSION_CB cb); @@ -237,7 +237,7 @@ server id given, and will fill the rest with pseudo random bytes: \& const char session_id_prefix = "www\-18"; \& \& #define MAX_SESSION_ID_ATTEMPTS 10 -\& static int generate_session_id(const SSL *ssl, unsigned char *id, +\& static int generate_session_id(SSL *ssl, unsigned char *id, \& unsigned int *id_len) \& { \& unsigned int count = 0; @@ -247,8 +247,8 @@ server id given, and will fill the rest with pseudo random bytes: \& /* \& * Prefix the session_id with the required prefix. NB: If our \& * prefix is too long, clip it \- but there will be worse effects -\& * anyway, eg. the server could only possibly create 1 session -\& * ID (ie. the prefix!) so all future session negotiations will +\& * anyway, e.g. the server could only possibly create 1 session +\& * ID (i.e. the prefix!) so all future session negotiations will \& * fail due to conflicts. \& */ \& memcpy(id, session_id_prefix, strlen(session_id_prefix) < *id_len ? @@ -265,7 +265,7 @@ server id given, and will fill the rest with pseudo random bytes: \&\fBssl\fR\|(7), \fBSSL_get_version\fR\|(3) .SH "COPYRIGHT" .IX Header "COPYRIGHT" -Copyright 2001\-2019 The OpenSSL Project Authors. All Rights Reserved. +Copyright 2001\-2020 The OpenSSL Project Authors. All Rights Reserved. .PP Licensed under the OpenSSL license (the \*(L"License\*(R"). You may not use this file except in compliance with the License. You can obtain a copy diff --git a/crypto/external/bsd/openssl/lib/libcrypto/man/SSL_CTX_set_info_callback.3 b/crypto/external/bsd/openssl/lib/libcrypto/man/SSL_CTX_set_info_callback.3 index 47359795dbd..fa7568f6d80 100644 --- a/crypto/external/bsd/openssl/lib/libcrypto/man/SSL_CTX_set_info_callback.3 +++ b/crypto/external/bsd/openssl/lib/libcrypto/man/SSL_CTX_set_info_callback.3 @@ -1,6 +1,6 @@ -.\" $NetBSD: SSL_CTX_set_info_callback.3,v 1.19 2019/06/09 18:44:32 christos Exp $ +.\" $NetBSD: SSL_CTX_set_info_callback.3,v 1.19.2.1 2021/03/28 18:21:50 martin Exp $ .\" -.\" Automatically generated by Pod::Man 4.10 (Pod::Simple 3.35) +.\" Automatically generated by Pod::Man 4.11 (Pod::Simple 3.35) .\" .\" Standard preamble: .\" ======================================================================== @@ -135,7 +135,7 @@ .\" ======================================================================== .\" .IX Title "SSL_CTX_set_info_callback 3" -.TH SSL_CTX_set_info_callback 3 "2019-03-12" "1.1.1c" "OpenSSL" +.TH SSL_CTX_set_info_callback 3 "2020-12-10" "1.1.1i" "OpenSSL" .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. .if n .ad l @@ -190,7 +190,7 @@ the callback function was called. If \fBret\fR is 0, an error condition occurred If an alert is handled, \s-1SSL_CB_ALERT\s0 is set and \fBret\fR specifies the alert information. .PP -\&\fBwhere\fR is a bitmask made up of the following bits: +\&\fBwhere\fR is a bit mask made up of the following bits: .IP "\s-1SSL_CB_LOOP\s0" 4 .IX Item "SSL_CB_LOOP" Callback has been called to indicate state change or some other significant @@ -200,7 +200,7 @@ per state in some situations. .IX Item "SSL_CB_EXIT" Callback has been called to indicate exit of a handshake function. This will happen after the end of a handshake, but may happen at other times too such as -on error or when \s-1IO\s0 might otherwise block and non-blocking is being used. +on error or when \s-1IO\s0 might otherwise block and nonblocking is being used. .IP "\s-1SSL_CB_READ\s0" 4 .IX Item "SSL_CB_READ" Callback has been called during read operation. @@ -285,7 +285,7 @@ about alerts being handled and error messages to the \fBbio_err\fR \s-1BIO.\s0 \&\fBSSL_alert_type_string\fR\|(3) .SH "COPYRIGHT" .IX Header "COPYRIGHT" -Copyright 2001\-2019 The OpenSSL Project Authors. All Rights Reserved. +Copyright 2001\-2020 The OpenSSL Project Authors. All Rights Reserved. .PP Licensed under the OpenSSL license (the \*(L"License\*(R"). You may not use this file except in compliance with the License. You can obtain a copy diff --git a/crypto/external/bsd/openssl/lib/libcrypto/man/SSL_CTX_set_keylog_callback.3 b/crypto/external/bsd/openssl/lib/libcrypto/man/SSL_CTX_set_keylog_callback.3 index bf17c50bc5c..d9131b013ad 100644 --- a/crypto/external/bsd/openssl/lib/libcrypto/man/SSL_CTX_set_keylog_callback.3 +++ b/crypto/external/bsd/openssl/lib/libcrypto/man/SSL_CTX_set_keylog_callback.3 @@ -1,6 +1,6 @@ -.\" $NetBSD: SSL_CTX_set_keylog_callback.3,v 1.2 2019/06/09 18:44:32 christos Exp $ +.\" $NetBSD: SSL_CTX_set_keylog_callback.3,v 1.2.4.1 2021/03/28 18:21:50 martin Exp $ .\" -.\" Automatically generated by Pod::Man 4.10 (Pod::Simple 3.35) +.\" Automatically generated by Pod::Man 4.11 (Pod::Simple 3.35) .\" .\" Standard preamble: .\" ======================================================================== @@ -135,7 +135,7 @@ .\" ======================================================================== .\" .IX Title "SSL_CTX_set_keylog_callback 3" -.TH SSL_CTX_set_keylog_callback 3 "2018-09-23" "1.1.1c" "OpenSSL" +.TH SSL_CTX_set_keylog_callback 3 "2018-09-23" "1.1.1i" "OpenSSL" .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. .if n .ad l diff --git a/crypto/external/bsd/openssl/lib/libcrypto/man/SSL_CTX_set_max_cert_list.3 b/crypto/external/bsd/openssl/lib/libcrypto/man/SSL_CTX_set_max_cert_list.3 index cc5c484077c..234400ef75e 100644 --- a/crypto/external/bsd/openssl/lib/libcrypto/man/SSL_CTX_set_max_cert_list.3 +++ b/crypto/external/bsd/openssl/lib/libcrypto/man/SSL_CTX_set_max_cert_list.3 @@ -1,6 +1,6 @@ -.\" $NetBSD: SSL_CTX_set_max_cert_list.3,v 1.19 2019/06/09 18:44:32 christos Exp $ +.\" $NetBSD: SSL_CTX_set_max_cert_list.3,v 1.19.2.1 2021/03/28 18:21:50 martin Exp $ .\" -.\" Automatically generated by Pod::Man 4.10 (Pod::Simple 3.35) +.\" Automatically generated by Pod::Man 4.11 (Pod::Simple 3.35) .\" .\" Standard preamble: .\" ======================================================================== @@ -135,7 +135,7 @@ .\" ======================================================================== .\" .IX Title "SSL_CTX_set_max_cert_list 3" -.TH SSL_CTX_set_max_cert_list 3 "2018-09-23" "1.1.1c" "OpenSSL" +.TH SSL_CTX_set_max_cert_list 3 "2020-12-10" "1.1.1i" "OpenSSL" .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. .if n .ad l @@ -179,7 +179,7 @@ received from a faulty or malicious peer, a maximum size for the certificate chain is set. .PP The default value for the maximum certificate chain size is 100kB (30kB -on the 16bit \s-1DOS\s0 platform). This should be sufficient for usual certificate +on the 16\-bit \s-1DOS\s0 platform). This should be sufficient for usual certificate chains (OpenSSL's default maximum chain length is 10, see \&\fBSSL_CTX_set_verify\fR\|(3), and certificates without special extensions have a typical size of 1\-2kB). @@ -209,7 +209,7 @@ set value. \&\fBSSL_CTX_set_verify\fR\|(3) .SH "COPYRIGHT" .IX Header "COPYRIGHT" -Copyright 2001\-2016 The OpenSSL Project Authors. All Rights Reserved. +Copyright 2001\-2020 The OpenSSL Project Authors. All Rights Reserved. .PP Licensed under the OpenSSL license (the \*(L"License\*(R"). You may not use this file except in compliance with the License. You can obtain a copy diff --git a/crypto/external/bsd/openssl/lib/libcrypto/man/SSL_CTX_set_min_proto_version.3 b/crypto/external/bsd/openssl/lib/libcrypto/man/SSL_CTX_set_min_proto_version.3 index 95e921850b0..485da5a7f85 100644 --- a/crypto/external/bsd/openssl/lib/libcrypto/man/SSL_CTX_set_min_proto_version.3 +++ b/crypto/external/bsd/openssl/lib/libcrypto/man/SSL_CTX_set_min_proto_version.3 @@ -1,6 +1,6 @@ -.\" $NetBSD: SSL_CTX_set_min_proto_version.3,v 1.3 2019/06/09 18:44:32 christos Exp $ +.\" $NetBSD: SSL_CTX_set_min_proto_version.3,v 1.3.2.1 2021/03/28 18:21:50 martin Exp $ .\" -.\" Automatically generated by Pod::Man 4.10 (Pod::Simple 3.35) +.\" Automatically generated by Pod::Man 4.11 (Pod::Simple 3.35) .\" .\" Standard preamble: .\" ======================================================================== @@ -135,7 +135,7 @@ .\" ======================================================================== .\" .IX Title "SSL_CTX_set_min_proto_version 3" -.TH SSL_CTX_set_min_proto_version 3 "2019-06-09" "1.1.1c" "OpenSSL" +.TH SSL_CTX_set_min_proto_version 3 "2019-06-09" "1.1.1i" "OpenSSL" .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. .if n .ad l diff --git a/crypto/external/bsd/openssl/lib/libcrypto/man/SSL_CTX_set_mode.3 b/crypto/external/bsd/openssl/lib/libcrypto/man/SSL_CTX_set_mode.3 index 86da36eca7f..614b401fb32 100644 --- a/crypto/external/bsd/openssl/lib/libcrypto/man/SSL_CTX_set_mode.3 +++ b/crypto/external/bsd/openssl/lib/libcrypto/man/SSL_CTX_set_mode.3 @@ -1,6 +1,6 @@ -.\" $NetBSD: SSL_CTX_set_mode.3,v 1.19 2019/06/09 18:44:32 christos Exp $ +.\" $NetBSD: SSL_CTX_set_mode.3,v 1.19.2.1 2021/03/28 18:21:50 martin Exp $ .\" -.\" Automatically generated by Pod::Man 4.10 (Pod::Simple 3.35) +.\" Automatically generated by Pod::Man 4.11 (Pod::Simple 3.35) .\" .\" Standard preamble: .\" ======================================================================== @@ -135,7 +135,7 @@ .\" ======================================================================== .\" .IX Title "SSL_CTX_set_mode 3" -.TH SSL_CTX_set_mode 3 "2019-03-12" "1.1.1c" "OpenSSL" +.TH SSL_CTX_set_mode 3 "2020-12-10" "1.1.1i" "OpenSSL" .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. .if n .ad l @@ -159,13 +159,13 @@ libcrypto, -lcrypto .Ve .SH "DESCRIPTION" .IX Header "DESCRIPTION" -\&\fBSSL_CTX_set_mode()\fR adds the mode set via bitmask in \fBmode\fR to \fBctx\fR. +\&\fBSSL_CTX_set_mode()\fR adds the mode set via bit mask in \fBmode\fR to \fBctx\fR. Options already set before are not cleared. -\&\fBSSL_CTX_clear_mode()\fR removes the mode set via bitmask in \fBmode\fR from \fBctx\fR. +\&\fBSSL_CTX_clear_mode()\fR removes the mode set via bit mask in \fBmode\fR from \fBctx\fR. .PP -\&\fBSSL_set_mode()\fR adds the mode set via bitmask in \fBmode\fR to \fBssl\fR. +\&\fBSSL_set_mode()\fR adds the mode set via bit mask in \fBmode\fR to \fBssl\fR. Options already set before are not cleared. -\&\fBSSL_clear_mode()\fR removes the mode set via bitmask in \fBmode\fR from \fBssl\fR. +\&\fBSSL_clear_mode()\fR removes the mode set via bit mask in \fBmode\fR from \fBssl\fR. .PP \&\fBSSL_CTX_get_mode()\fR returns the mode set for \fBctx\fR. .PP @@ -186,8 +186,8 @@ the behaviour of \fBwrite()\fR. .IX Item "SSL_MODE_ACCEPT_MOVING_WRITE_BUFFER" Make it possible to retry \fBSSL_write_ex()\fR or \fBSSL_write()\fR with changed buffer location (the buffer contents must stay the same). This is not the default to -avoid the misconception that non-blocking \fBSSL_write()\fR behaves like -non-blocking \fBwrite()\fR. +avoid the misconception that nonblocking \fBSSL_write()\fR behaves like +nonblocking \fBwrite()\fR. .IP "\s-1SSL_MODE_AUTO_RETRY\s0" 4 .IX Item "SSL_MODE_AUTO_RETRY" During normal operations, non-application data records might need to be sent or @@ -199,9 +199,9 @@ If such a non-application data record was processed, the flag \&\fB\s-1SSL_MODE_AUTO_RETRY\s0\fR causes it to try to process the next record instead of returning. .Sp -In a non-blocking environment applications must be prepared to handle +In a nonblocking environment applications must be prepared to handle incomplete read/write operations. -Setting \fB\s-1SSL_MODE_AUTO_RETRY\s0\fR for a non-blocking \fB\s-1BIO\s0\fR will process +Setting \fB\s-1SSL_MODE_AUTO_RETRY\s0\fR for a nonblocking \fB\s-1BIO\s0\fR will process non-application data records until either no more data is available or an application data record has been processed. .Sp @@ -249,10 +249,10 @@ All modes are off by default except for \s-1SSL_MODE_AUTO_RETRY\s0 which is on b default since 1.1.1. .SH "RETURN VALUES" .IX Header "RETURN VALUES" -\&\fBSSL_CTX_set_mode()\fR and \fBSSL_set_mode()\fR return the new mode bitmask +\&\fBSSL_CTX_set_mode()\fR and \fBSSL_set_mode()\fR return the new mode bit mask after adding \fBmode\fR. .PP -\&\fBSSL_CTX_get_mode()\fR and \fBSSL_get_mode()\fR return the current bitmask. +\&\fBSSL_CTX_get_mode()\fR and \fBSSL_get_mode()\fR return the current bit mask. .SH "SEE ALSO" .IX Header "SEE ALSO" \&\fBssl\fR\|(7), \fBSSL_read_ex\fR\|(3), \fBSSL_read\fR\|(3), \fBSSL_write_ex\fR\|(3) or @@ -262,7 +262,7 @@ after adding \fBmode\fR. \&\s-1SSL_MODE_ASYNC\s0 was added in OpenSSL 1.1.0. .SH "COPYRIGHT" .IX Header "COPYRIGHT" -Copyright 2001\-2019 The OpenSSL Project Authors. All Rights Reserved. +Copyright 2001\-2020 The OpenSSL Project Authors. All Rights Reserved. .PP Licensed under the OpenSSL license (the \*(L"License\*(R"). You may not use this file except in compliance with the License. You can obtain a copy diff --git a/crypto/external/bsd/openssl/lib/libcrypto/man/SSL_CTX_set_msg_callback.3 b/crypto/external/bsd/openssl/lib/libcrypto/man/SSL_CTX_set_msg_callback.3 index 49bc6671bcc..f3fce85345b 100644 --- a/crypto/external/bsd/openssl/lib/libcrypto/man/SSL_CTX_set_msg_callback.3 +++ b/crypto/external/bsd/openssl/lib/libcrypto/man/SSL_CTX_set_msg_callback.3 @@ -1,6 +1,6 @@ -.\" $NetBSD: SSL_CTX_set_msg_callback.3,v 1.19 2019/06/09 18:44:32 christos Exp $ +.\" $NetBSD: SSL_CTX_set_msg_callback.3,v 1.19.2.1 2021/03/28 18:21:50 martin Exp $ .\" -.\" Automatically generated by Pod::Man 4.10 (Pod::Simple 3.35) +.\" Automatically generated by Pod::Man 4.11 (Pod::Simple 3.35) .\" .\" Standard preamble: .\" ======================================================================== @@ -135,7 +135,7 @@ .\" ======================================================================== .\" .IX Title "SSL_CTX_set_msg_callback 3" -.TH SSL_CTX_set_msg_callback 3 "2019-03-12" "1.1.1c" "OpenSSL" +.TH SSL_CTX_set_msg_callback 3 "2019-03-12" "1.1.1i" "OpenSSL" .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. .if n .ad l diff --git a/crypto/external/bsd/openssl/lib/libcrypto/man/SSL_CTX_set_num_tickets.3 b/crypto/external/bsd/openssl/lib/libcrypto/man/SSL_CTX_set_num_tickets.3 index 8ce64959c7d..a1883de75d8 100644 --- a/crypto/external/bsd/openssl/lib/libcrypto/man/SSL_CTX_set_num_tickets.3 +++ b/crypto/external/bsd/openssl/lib/libcrypto/man/SSL_CTX_set_num_tickets.3 @@ -1,6 +1,6 @@ -.\" $NetBSD: SSL_CTX_set_num_tickets.3,v 1.2 2019/06/09 18:44:32 christos Exp $ +.\" $NetBSD: SSL_CTX_set_num_tickets.3,v 1.2.4.1 2021/03/28 18:21:50 martin Exp $ .\" -.\" Automatically generated by Pod::Man 4.10 (Pod::Simple 3.35) +.\" Automatically generated by Pod::Man 4.11 (Pod::Simple 3.35) .\" .\" Standard preamble: .\" ======================================================================== @@ -135,7 +135,7 @@ .\" ======================================================================== .\" .IX Title "SSL_CTX_set_num_tickets 3" -.TH SSL_CTX_set_num_tickets 3 "2019-03-12" "1.1.1c" "OpenSSL" +.TH SSL_CTX_set_num_tickets 3 "2019-03-12" "1.1.1i" "OpenSSL" .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. .if n .ad l diff --git a/crypto/external/bsd/openssl/lib/libcrypto/man/SSL_CTX_set_options.3 b/crypto/external/bsd/openssl/lib/libcrypto/man/SSL_CTX_set_options.3 index 33855367bb5..59552e4f209 100644 --- a/crypto/external/bsd/openssl/lib/libcrypto/man/SSL_CTX_set_options.3 +++ b/crypto/external/bsd/openssl/lib/libcrypto/man/SSL_CTX_set_options.3 @@ -1,6 +1,6 @@ -.\" $NetBSD: SSL_CTX_set_options.3,v 1.19 2019/06/09 18:44:32 christos Exp $ +.\" $NetBSD: SSL_CTX_set_options.3,v 1.19.2.1 2021/03/28 18:21:50 martin Exp $ .\" -.\" Automatically generated by Pod::Man 4.10 (Pod::Simple 3.35) +.\" Automatically generated by Pod::Man 4.11 (Pod::Simple 3.35) .\" .\" Standard preamble: .\" ======================================================================== @@ -135,7 +135,7 @@ .\" ======================================================================== .\" .IX Title "SSL_CTX_set_options 3" -.TH SSL_CTX_set_options 3 "2019-03-12" "1.1.1c" "OpenSSL" +.TH SSL_CTX_set_options 3 "2020-12-10" "1.1.1i" "OpenSSL" .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. .if n .ad l @@ -164,16 +164,16 @@ libcrypto, -lcrypto .Ve .SH "DESCRIPTION" .IX Header "DESCRIPTION" -\&\fBSSL_CTX_set_options()\fR adds the options set via bitmask in \fBoptions\fR to \fBctx\fR. +\&\fBSSL_CTX_set_options()\fR adds the options set via bit mask in \fBoptions\fR to \fBctx\fR. Options already set before are not cleared! .PP -\&\fBSSL_set_options()\fR adds the options set via bitmask in \fBoptions\fR to \fBssl\fR. +\&\fBSSL_set_options()\fR adds the options set via bit mask in \fBoptions\fR to \fBssl\fR. Options already set before are not cleared! .PP -\&\fBSSL_CTX_clear_options()\fR clears the options set via bitmask in \fBoptions\fR +\&\fBSSL_CTX_clear_options()\fR clears the options set via bit mask in \fBoptions\fR to \fBctx\fR. .PP -\&\fBSSL_clear_options()\fR clears the options set via bitmask in \fBoptions\fR to \fBssl\fR. +\&\fBSSL_clear_options()\fR clears the options set via bit mask in \fBoptions\fR to \fBssl\fR. .PP \&\fBSSL_CTX_get_options()\fR returns the options set for \fBctx\fR. .PP @@ -185,7 +185,7 @@ Note, this is implemented via a macro. .SH "NOTES" .IX Header "NOTES" The behaviour of the \s-1SSL\s0 library can be changed by setting several options. -The options are coded as bitmasks and can be combined by a bitwise \fBor\fR +The options are coded as bit masks and can be combined by a bitwise \fBor\fR operation (|). .PP \&\fBSSL_CTX_set_options()\fR and \fBSSL_set_options()\fR affect the (external) @@ -282,7 +282,7 @@ the session. In this way the server can operate statelessly \- no session information needs to be cached locally. .Sp The TLSv1.3 protocol only supports tickets and does not directly support session -ids. However OpenSSL allows two modes of ticket operation in TLSv1.3: stateful +ids. However, OpenSSL allows two modes of ticket operation in TLSv1.3: stateful and stateless. Stateless tickets work the same way as in TLSv1.2 and below. Stateful tickets mimic the session id behaviour available in TLSv1.2 and below. The session information is cached on the server and the session id is wrapped up @@ -444,13 +444,13 @@ renegotiation between OpenSSL clients and unpatched servers \fBonly\fR, while and renegotiation between OpenSSL and unpatched clients or servers. .SH "RETURN VALUES" .IX Header "RETURN VALUES" -\&\fBSSL_CTX_set_options()\fR and \fBSSL_set_options()\fR return the new options bitmask +\&\fBSSL_CTX_set_options()\fR and \fBSSL_set_options()\fR return the new options bit mask after adding \fBoptions\fR. .PP -\&\fBSSL_CTX_clear_options()\fR and \fBSSL_clear_options()\fR return the new options bitmask +\&\fBSSL_CTX_clear_options()\fR and \fBSSL_clear_options()\fR return the new options bit mask after clearing \fBoptions\fR. .PP -\&\fBSSL_CTX_get_options()\fR and \fBSSL_get_options()\fR return the current bitmask. +\&\fBSSL_CTX_get_options()\fR and \fBSSL_get_options()\fR return the current bit mask. .PP \&\fBSSL_get_secure_renegotiation_support()\fR returns 1 is the peer supports secure renegotiation and 0 if it does not. @@ -469,7 +469,7 @@ The \fB\s-1SSL_OP_PRIORITIZE_CHACHA\s0\fR and \fB\s-1SSL_OP_NO_RENEGOTIATION\s0\ were added in OpenSSL 1.1.1. .SH "COPYRIGHT" .IX Header "COPYRIGHT" -Copyright 2001\-2018 The OpenSSL Project Authors. All Rights Reserved. +Copyright 2001\-2020 The OpenSSL Project Authors. All Rights Reserved. .PP Licensed under the OpenSSL license (the \*(L"License\*(R"). You may not use this file except in compliance with the License. You can obtain a copy diff --git a/crypto/external/bsd/openssl/lib/libcrypto/man/SSL_CTX_set_psk_client_callback.3 b/crypto/external/bsd/openssl/lib/libcrypto/man/SSL_CTX_set_psk_client_callback.3 index 9f0042f45c2..089442c6fdc 100644 --- a/crypto/external/bsd/openssl/lib/libcrypto/man/SSL_CTX_set_psk_client_callback.3 +++ b/crypto/external/bsd/openssl/lib/libcrypto/man/SSL_CTX_set_psk_client_callback.3 @@ -1,6 +1,6 @@ -.\" $NetBSD: SSL_CTX_set_psk_client_callback.3,v 1.19 2019/06/09 18:44:32 christos Exp $ +.\" $NetBSD: SSL_CTX_set_psk_client_callback.3,v 1.19.2.1 2021/03/28 18:21:50 martin Exp $ .\" -.\" Automatically generated by Pod::Man 4.10 (Pod::Simple 3.35) +.\" Automatically generated by Pod::Man 4.11 (Pod::Simple 3.35) .\" .\" Standard preamble: .\" ======================================================================== @@ -135,7 +135,7 @@ .\" ======================================================================== .\" .IX Title "SSL_CTX_set_psk_client_callback 3" -.TH SSL_CTX_set_psk_client_callback 3 "2018-09-23" "1.1.1c" "OpenSSL" +.TH SSL_CTX_set_psk_client_callback 3 "2020-12-10" "1.1.1i" "OpenSSL" .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. .if n .ad l @@ -256,7 +256,9 @@ and it will use that in preference. If no such callback is present then it will check to see if a callback has been set via \fBSSL_CTX_set_psk_client_callback()\fR or \&\fBSSL_set_psk_client_callback()\fR and use that. In this case the \fBhint\fR value will always be \s-1NULL\s0 and the handshake digest will default to \s-1SHA\-256\s0 for any returned -\&\s-1PSK.\s0 +\&\s-1PSK.\s0 TLSv1.3 early data exchanges are possible in \s-1PSK\s0 connections only with the +\&\fBSSL_psk_use_session_cb_func\fR callback, and are not possible with the +\&\fBSSL_psk_client_cb_func\fR callback. .SH "NOTES" .IX Header "NOTES" Note that parameter \fBhint\fR given to the callback may be \fB\s-1NULL\s0\fR. @@ -265,7 +267,7 @@ A connection established via a TLSv1.3 \s-1PSK\s0 will appear as if session resu has occurred so that \fBSSL_session_reused\fR\|(3) will return true. .PP There are no known security issues with sharing the same \s-1PSK\s0 between TLSv1.2 (or -below) and TLSv1.3. However the \s-1RFC\s0 has this note of caution: +below) and TLSv1.3. However, the \s-1RFC\s0 has this note of caution: .PP \&\*(L"While there is no known way in which the same \s-1PSK\s0 might produce related output in both versions, only limited analysis has been done. Implementations can @@ -294,7 +296,7 @@ failure. In the event of failure the connection setup fails. were added in OpenSSL 1.1.1. .SH "COPYRIGHT" .IX Header "COPYRIGHT" -Copyright 2006\-2018 The OpenSSL Project Authors. All Rights Reserved. +Copyright 2006\-2020 The OpenSSL Project Authors. All Rights Reserved. .PP Licensed under the OpenSSL license (the \*(L"License\*(R"). You may not use this file except in compliance with the License. You can obtain a copy diff --git a/crypto/external/bsd/openssl/lib/libcrypto/man/SSL_CTX_set_quiet_shutdown.3 b/crypto/external/bsd/openssl/lib/libcrypto/man/SSL_CTX_set_quiet_shutdown.3 index 93802605a63..bd5806afaa1 100644 --- a/crypto/external/bsd/openssl/lib/libcrypto/man/SSL_CTX_set_quiet_shutdown.3 +++ b/crypto/external/bsd/openssl/lib/libcrypto/man/SSL_CTX_set_quiet_shutdown.3 @@ -1,6 +1,6 @@ -.\" $NetBSD: SSL_CTX_set_quiet_shutdown.3,v 1.19 2019/06/09 18:44:32 christos Exp $ +.\" $NetBSD: SSL_CTX_set_quiet_shutdown.3,v 1.19.2.1 2021/03/28 18:21:50 martin Exp $ .\" -.\" Automatically generated by Pod::Man 4.10 (Pod::Simple 3.35) +.\" Automatically generated by Pod::Man 4.11 (Pod::Simple 3.35) .\" .\" Standard preamble: .\" ======================================================================== @@ -135,7 +135,7 @@ .\" ======================================================================== .\" .IX Title "SSL_CTX_set_quiet_shutdown 3" -.TH SSL_CTX_set_quiet_shutdown 3 "2018-12-08" "1.1.1c" "OpenSSL" +.TH SSL_CTX_set_quiet_shutdown 3 "2018-12-08" "1.1.1i" "OpenSSL" .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. .if n .ad l diff --git a/crypto/external/bsd/openssl/lib/libcrypto/man/SSL_CTX_set_read_ahead.3 b/crypto/external/bsd/openssl/lib/libcrypto/man/SSL_CTX_set_read_ahead.3 index de5bbf47e00..bb9cca7d437 100644 --- a/crypto/external/bsd/openssl/lib/libcrypto/man/SSL_CTX_set_read_ahead.3 +++ b/crypto/external/bsd/openssl/lib/libcrypto/man/SSL_CTX_set_read_ahead.3 @@ -1,6 +1,6 @@ -.\" $NetBSD: SSL_CTX_set_read_ahead.3,v 1.7 2019/06/09 18:44:32 christos Exp $ +.\" $NetBSD: SSL_CTX_set_read_ahead.3,v 1.7.2.1 2021/03/28 18:21:50 martin Exp $ .\" -.\" Automatically generated by Pod::Man 4.10 (Pod::Simple 3.35) +.\" Automatically generated by Pod::Man 4.11 (Pod::Simple 3.35) .\" .\" Standard preamble: .\" ======================================================================== @@ -135,7 +135,7 @@ .\" ======================================================================== .\" .IX Title "SSL_CTX_set_read_ahead 3" -.TH SSL_CTX_set_read_ahead 3 "2019-06-09" "1.1.1c" "OpenSSL" +.TH SSL_CTX_set_read_ahead 3 "2020-12-10" "1.1.1i" "OpenSSL" .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. .if n .ad l @@ -162,7 +162,7 @@ libcrypto, -lcrypto .SH "DESCRIPTION" .IX Header "DESCRIPTION" \&\fBSSL_CTX_set_read_ahead()\fR and \fBSSL_set_read_ahead()\fR set whether we should read as -many input bytes as possible (for non-blocking reads) or not. For example if +many input bytes as possible (for nonblocking reads) or not. For example if \&\fBx\fR bytes are currently required by OpenSSL, but \fBy\fR bytes are available from the underlying \s-1BIO\s0 (where \fBy\fR > \fBx\fR), then OpenSSL will read all \fBy\fR bytes into its buffer (providing that the buffer is large enough) if reading ahead is @@ -201,7 +201,7 @@ and non zero otherwise. \&\fBssl\fR\|(7), \fBSSL_pending\fR\|(3) .SH "COPYRIGHT" .IX Header "COPYRIGHT" -Copyright 2015\-2019 The OpenSSL Project Authors. All Rights Reserved. +Copyright 2015\-2020 The OpenSSL Project Authors. All Rights Reserved. .PP Licensed under the OpenSSL license (the \*(L"License\*(R"). You may not use this file except in compliance with the License. You can obtain a copy diff --git a/crypto/external/bsd/openssl/lib/libcrypto/man/SSL_CTX_set_record_padding_callback.3 b/crypto/external/bsd/openssl/lib/libcrypto/man/SSL_CTX_set_record_padding_callback.3 index 2da9609b4ee..5911cd7109a 100644 --- a/crypto/external/bsd/openssl/lib/libcrypto/man/SSL_CTX_set_record_padding_callback.3 +++ b/crypto/external/bsd/openssl/lib/libcrypto/man/SSL_CTX_set_record_padding_callback.3 @@ -1,6 +1,6 @@ -.\" $NetBSD: SSL_CTX_set_record_padding_callback.3,v 1.2 2019/06/09 18:44:32 christos Exp $ +.\" $NetBSD: SSL_CTX_set_record_padding_callback.3,v 1.2.4.1 2021/03/28 18:21:50 martin Exp $ .\" -.\" Automatically generated by Pod::Man 4.10 (Pod::Simple 3.35) +.\" Automatically generated by Pod::Man 4.11 (Pod::Simple 3.35) .\" .\" Standard preamble: .\" ======================================================================== @@ -135,7 +135,7 @@ .\" ======================================================================== .\" .IX Title "SSL_CTX_set_record_padding_callback 3" -.TH SSL_CTX_set_record_padding_callback 3 "2019-03-12" "1.1.1c" "OpenSSL" +.TH SSL_CTX_set_record_padding_callback 3 "2019-03-12" "1.1.1i" "OpenSSL" .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. .if n .ad l diff --git a/crypto/external/bsd/openssl/lib/libcrypto/man/SSL_CTX_set_security_level.3 b/crypto/external/bsd/openssl/lib/libcrypto/man/SSL_CTX_set_security_level.3 index addf03b6c6b..33ad43377b3 100644 --- a/crypto/external/bsd/openssl/lib/libcrypto/man/SSL_CTX_set_security_level.3 +++ b/crypto/external/bsd/openssl/lib/libcrypto/man/SSL_CTX_set_security_level.3 @@ -1,6 +1,6 @@ -.\" $NetBSD: SSL_CTX_set_security_level.3,v 1.3 2019/06/09 18:44:32 christos Exp $ +.\" $NetBSD: SSL_CTX_set_security_level.3,v 1.3.2.1 2021/03/28 18:21:50 martin Exp $ .\" -.\" Automatically generated by Pod::Man 4.10 (Pod::Simple 3.35) +.\" Automatically generated by Pod::Man 4.11 (Pod::Simple 3.35) .\" .\" Standard preamble: .\" ======================================================================== @@ -135,7 +135,7 @@ .\" ======================================================================== .\" .IX Title "SSL_CTX_set_security_level 3" -.TH SSL_CTX_set_security_level 3 "2019-03-12" "1.1.1c" "OpenSSL" +.TH SSL_CTX_set_security_level 3 "2020-12-10" "1.1.1i" "OpenSSL" .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. .if n .ad l @@ -242,12 +242,6 @@ shorter than 15360 bits and \s-1ECC\s0 keys shorter than 512 bits are prohibited \&\fIDocumentation to be provided.\fR .SH "NOTES" .IX Header "NOTES" -\&\fB\s-1WARNING\s0\fR at this time setting the security level higher than 1 for -general internet use is likely to cause \fBconsiderable\fR interoperability -issues and is not recommended. This is because the \fB\s-1SHA1\s0\fR algorithm -is very widely used in certificates and will be rejected at levels -higher than 1 because it only offers 80 bits of security. -.PP The default security level can be configured when OpenSSL is compiled by setting \fB\-DOPENSSL_TLS_SECURITY_LEVEL=level\fR. If not set then 1 is used. .PP @@ -305,7 +299,7 @@ data pointer or \s-1NULL\s0 if the ex data is not set. These functions were added in OpenSSL 1.1.0. .SH "COPYRIGHT" .IX Header "COPYRIGHT" -Copyright 2014\-2018 The OpenSSL Project Authors. All Rights Reserved. +Copyright 2014\-2020 The OpenSSL Project Authors. All Rights Reserved. .PP Licensed under the OpenSSL license (the \*(L"License\*(R"). You may not use this file except in compliance with the License. You can obtain a copy diff --git a/crypto/external/bsd/openssl/lib/libcrypto/man/SSL_CTX_set_session_cache_mode.3 b/crypto/external/bsd/openssl/lib/libcrypto/man/SSL_CTX_set_session_cache_mode.3 index 31644d37a0a..d814b796156 100644 --- a/crypto/external/bsd/openssl/lib/libcrypto/man/SSL_CTX_set_session_cache_mode.3 +++ b/crypto/external/bsd/openssl/lib/libcrypto/man/SSL_CTX_set_session_cache_mode.3 @@ -1,6 +1,6 @@ -.\" $NetBSD: SSL_CTX_set_session_cache_mode.3,v 1.19 2019/06/09 18:44:32 christos Exp $ +.\" $NetBSD: SSL_CTX_set_session_cache_mode.3,v 1.19.2.1 2021/03/28 18:21:50 martin Exp $ .\" -.\" Automatically generated by Pod::Man 4.10 (Pod::Simple 3.35) +.\" Automatically generated by Pod::Man 4.11 (Pod::Simple 3.35) .\" .\" Standard preamble: .\" ======================================================================== @@ -135,7 +135,7 @@ .\" ======================================================================== .\" .IX Title "SSL_CTX_set_session_cache_mode 3" -.TH SSL_CTX_set_session_cache_mode 3 "2018-09-23" "1.1.1c" "OpenSSL" +.TH SSL_CTX_set_session_cache_mode 3 "2020-12-10" "1.1.1i" "OpenSSL" .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. .if n .ad l @@ -227,7 +227,7 @@ session caching (callback) that is configured for the \s-1SSL_CTX.\s0 This flag prevent sessions being stored in the internal cache (though the application can add them manually using \fBSSL_CTX_add_session\fR\|(3)). Note: in any \s-1SSL/TLS\s0 servers where external caching is configured, any successful -session lookups in the external cache (ie. for session-resume requests) would +session lookups in the external cache (i.e. for session-resume requests) would normally be copied into the local cache before processing continues \- this flag prevents these additions to the internal cache as well. .IP "\s-1SSL_SESS_CACHE_NO_INTERNAL\s0" 4 @@ -254,7 +254,7 @@ The default mode is \s-1SSL_SESS_CACHE_SERVER.\s0 \&\fBSSL_CTX_flush_sessions\fR\|(3) .SH "COPYRIGHT" .IX Header "COPYRIGHT" -Copyright 2001\-2016 The OpenSSL Project Authors. All Rights Reserved. +Copyright 2001\-2020 The OpenSSL Project Authors. All Rights Reserved. .PP Licensed under the OpenSSL license (the \*(L"License\*(R"). You may not use this file except in compliance with the License. You can obtain a copy diff --git a/crypto/external/bsd/openssl/lib/libcrypto/man/SSL_CTX_set_session_id_context.3 b/crypto/external/bsd/openssl/lib/libcrypto/man/SSL_CTX_set_session_id_context.3 index 37c3a069fd8..63c8e9fb153 100644 --- a/crypto/external/bsd/openssl/lib/libcrypto/man/SSL_CTX_set_session_id_context.3 +++ b/crypto/external/bsd/openssl/lib/libcrypto/man/SSL_CTX_set_session_id_context.3 @@ -1,6 +1,6 @@ -.\" $NetBSD: SSL_CTX_set_session_id_context.3,v 1.19 2019/06/09 18:44:32 christos Exp $ +.\" $NetBSD: SSL_CTX_set_session_id_context.3,v 1.19.2.1 2021/03/28 18:21:50 martin Exp $ .\" -.\" Automatically generated by Pod::Man 4.10 (Pod::Simple 3.35) +.\" Automatically generated by Pod::Man 4.11 (Pod::Simple 3.35) .\" .\" Standard preamble: .\" ======================================================================== @@ -135,7 +135,7 @@ .\" ======================================================================== .\" .IX Title "SSL_CTX_set_session_id_context 3" -.TH SSL_CTX_set_session_id_context 3 "2018-09-23" "1.1.1c" "OpenSSL" +.TH SSL_CTX_set_session_id_context 3 "2020-12-10" "1.1.1i" "OpenSSL" .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. .if n .ad l @@ -166,7 +166,7 @@ libcrypto, -lcrypto Sessions are generated within a certain context. When exporting/importing sessions with \fBi2d_SSL_SESSION\fR/\fBd2i_SSL_SESSION\fR it would be possible, to re-import a session generated from another context (e.g. another -application), which might lead to malfunctions. Therefore each application +application), which might lead to malfunctions. Therefore, each application must set its own session id context \fBsid_ctx\fR which is used to distinguish the contexts and is stored in exported sessions. The \fBsid_ctx\fR can be any kind of binary data with a given length, it is therefore possible @@ -182,7 +182,7 @@ OpenSSL clients will check the session id context returned by the server when reusing a session. .PP The maximum length of the \fBsid_ctx\fR is limited to -\&\fB\s-1SSL_MAX_SSL_SESSION_ID_LENGTH\s0\fR. +\&\fB\s-1SSL_MAX_SID_CTX_LENGTH\s0\fR. .SH "WARNINGS" .IX Header "WARNINGS" If the session id context is not set on an \s-1SSL/TLS\s0 server and client @@ -201,7 +201,7 @@ a session as described above. return the following values: .IP "0" 4 The length \fBsid_ctx_len\fR of the session id context \fBsid_ctx\fR exceeded -the maximum allowed length of \fB\s-1SSL_MAX_SSL_SESSION_ID_LENGTH\s0\fR. The error +the maximum allowed length of \fB\s-1SSL_MAX_SID_CTX_LENGTH\s0\fR. The error is logged to the error stack. .IP "1" 4 .IX Item "1" @@ -211,7 +211,7 @@ The operation succeeded. \&\fBssl\fR\|(7) .SH "COPYRIGHT" .IX Header "COPYRIGHT" -Copyright 2001\-2016 The OpenSSL Project Authors. All Rights Reserved. +Copyright 2001\-2020 The OpenSSL Project Authors. All Rights Reserved. .PP Licensed under the OpenSSL license (the \*(L"License\*(R"). You may not use this file except in compliance with the License. You can obtain a copy diff --git a/crypto/external/bsd/openssl/lib/libcrypto/man/SSL_CTX_set_session_ticket_cb.3 b/crypto/external/bsd/openssl/lib/libcrypto/man/SSL_CTX_set_session_ticket_cb.3 index b9206c0e145..73ea240aa61 100644 --- a/crypto/external/bsd/openssl/lib/libcrypto/man/SSL_CTX_set_session_ticket_cb.3 +++ b/crypto/external/bsd/openssl/lib/libcrypto/man/SSL_CTX_set_session_ticket_cb.3 @@ -1,6 +1,6 @@ -.\" $NetBSD: SSL_CTX_set_session_ticket_cb.3,v 1.2 2019/06/09 18:44:32 christos Exp $ +.\" $NetBSD: SSL_CTX_set_session_ticket_cb.3,v 1.2.4.1 2021/03/28 18:21:50 martin Exp $ .\" -.\" Automatically generated by Pod::Man 4.10 (Pod::Simple 3.35) +.\" Automatically generated by Pod::Man 4.11 (Pod::Simple 3.35) .\" .\" Standard preamble: .\" ======================================================================== @@ -135,7 +135,7 @@ .\" ======================================================================== .\" .IX Title "SSL_CTX_set_session_ticket_cb 3" -.TH SSL_CTX_set_session_ticket_cb 3 "2019-03-12" "1.1.1c" "OpenSSL" +.TH SSL_CTX_set_session_ticket_cb 3 "2020-12-10" "1.1.1i" "OpenSSL" .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. .if n .ad l @@ -236,7 +236,7 @@ The return value can be any of these values: .IX Item "SSL_TICKET_RETURN_ABORT" The handshake should be aborted, either because of an error or because of some policy. Note that in TLSv1.3 a client may send more than one ticket in a single -handshake. Therefore just because one ticket is unacceptable it does not mean +handshake. Therefore, just because one ticket is unacceptable it does not mean that all of them are. For this reason this option should be used with caution. .IP "\s-1SSL_TICKET_RETURN_IGNORE\s0" 4 .IX Item "SSL_TICKET_RETURN_IGNORE" @@ -297,11 +297,11 @@ The \fBdec_cb\fR callback must return a value as described in \s-1NOTES\s0 above \&\fBSSL_get_session\fR\|(3) .SH "HISTORY" .IX Header "HISTORY" -The \fBSSL_CTX_set_session_ticket_cb()\fR, \fBSSSL_SESSION_set1_ticket_appdata()\fR +The \fBSSL_CTX_set_session_ticket_cb()\fR, \fBSSL_SESSION_set1_ticket_appdata()\fR and \fBSSL_SESSION_get_ticket_appdata()\fR functions were added in OpenSSL 1.1.1. .SH "COPYRIGHT" .IX Header "COPYRIGHT" -Copyright 2017\-2018 The OpenSSL Project Authors. All Rights Reserved. +Copyright 2017\-2020 The OpenSSL Project Authors. All Rights Reserved. .PP Licensed under the OpenSSL license (the \*(L"License\*(R"). You may not use this file except in compliance with the License. You can obtain a copy diff --git a/crypto/external/bsd/openssl/lib/libcrypto/man/SSL_CTX_set_split_send_fragment.3 b/crypto/external/bsd/openssl/lib/libcrypto/man/SSL_CTX_set_split_send_fragment.3 index ffbd65f6140..89e965bc91b 100644 --- a/crypto/external/bsd/openssl/lib/libcrypto/man/SSL_CTX_set_split_send_fragment.3 +++ b/crypto/external/bsd/openssl/lib/libcrypto/man/SSL_CTX_set_split_send_fragment.3 @@ -1,6 +1,6 @@ -.\" $NetBSD: SSL_CTX_set_split_send_fragment.3,v 1.3 2019/06/09 18:44:32 christos Exp $ +.\" $NetBSD: SSL_CTX_set_split_send_fragment.3,v 1.3.2.1 2021/03/28 18:21:50 martin Exp $ .\" -.\" Automatically generated by Pod::Man 4.10 (Pod::Simple 3.35) +.\" Automatically generated by Pod::Man 4.11 (Pod::Simple 3.35) .\" .\" Standard preamble: .\" ======================================================================== @@ -135,7 +135,7 @@ .\" ======================================================================== .\" .IX Title "SSL_CTX_set_split_send_fragment 3" -.TH SSL_CTX_set_split_send_fragment 3 "2019-06-09" "1.1.1c" "OpenSSL" +.TH SSL_CTX_set_split_send_fragment 3 "2020-12-10" "1.1.1i" "OpenSSL" .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. .if n .ad l @@ -182,7 +182,7 @@ capability is known as \*(L"pipelining\*(R" within OpenSSL. .PP In order to benefit from the pipelining capability. You need to have an engine that provides ciphers that support this. The OpenSSL \*(L"dasync\*(R" engine provides -\&\s-1AES128\-SHA\s0 based ciphers that have this capability. However these are for +\&\s-1AES128\-SHA\s0 based ciphers that have this capability. However, these are for development and test purposes only. .PP \&\fBSSL_CTX_set_max_send_fragment()\fR and \fBSSL_set_max_send_fragment()\fR set the @@ -305,7 +305,7 @@ The \fBSSL_CTX_set_tlsext_max_fragment_length()\fR, \fBSSL_set_tlsext_max_fragme and \fBSSL_SESSION_get_max_fragment_length()\fR functions were added in OpenSSL 1.1.1. .SH "COPYRIGHT" .IX Header "COPYRIGHT" -Copyright 2016\-2019 The OpenSSL Project Authors. All Rights Reserved. +Copyright 2016\-2020 The OpenSSL Project Authors. All Rights Reserved. .PP Licensed under the OpenSSL license (the \*(L"License\*(R"). You may not use this file except in compliance with the License. You can obtain a copy diff --git a/crypto/external/bsd/openssl/lib/libcrypto/man/SSL_CTX_set_ssl_version.3 b/crypto/external/bsd/openssl/lib/libcrypto/man/SSL_CTX_set_ssl_version.3 index c400b1ea7f6..e1bd3077176 100644 --- a/crypto/external/bsd/openssl/lib/libcrypto/man/SSL_CTX_set_ssl_version.3 +++ b/crypto/external/bsd/openssl/lib/libcrypto/man/SSL_CTX_set_ssl_version.3 @@ -1,6 +1,6 @@ -.\" $NetBSD: SSL_CTX_set_ssl_version.3,v 1.19 2019/06/09 18:44:32 christos Exp $ +.\" $NetBSD: SSL_CTX_set_ssl_version.3,v 1.19.2.1 2021/03/28 18:21:50 martin Exp $ .\" -.\" Automatically generated by Pod::Man 4.10 (Pod::Simple 3.35) +.\" Automatically generated by Pod::Man 4.11 (Pod::Simple 3.35) .\" .\" Standard preamble: .\" ======================================================================== @@ -135,7 +135,7 @@ .\" ======================================================================== .\" .IX Title "SSL_CTX_set_ssl_version 3" -.TH SSL_CTX_set_ssl_version 3 "2019-03-12" "1.1.1c" "OpenSSL" +.TH SSL_CTX_set_ssl_version 3 "2019-03-12" "1.1.1i" "OpenSSL" .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. .if n .ad l diff --git a/crypto/external/bsd/openssl/lib/libcrypto/man/SSL_CTX_set_stateless_cookie_generate_cb.3 b/crypto/external/bsd/openssl/lib/libcrypto/man/SSL_CTX_set_stateless_cookie_generate_cb.3 index edfc06257ea..fce35724499 100644 --- a/crypto/external/bsd/openssl/lib/libcrypto/man/SSL_CTX_set_stateless_cookie_generate_cb.3 +++ b/crypto/external/bsd/openssl/lib/libcrypto/man/SSL_CTX_set_stateless_cookie_generate_cb.3 @@ -1,6 +1,6 @@ -.\" $NetBSD: SSL_CTX_set_stateless_cookie_generate_cb.3,v 1.2 2019/06/09 18:44:33 christos Exp $ +.\" $NetBSD: SSL_CTX_set_stateless_cookie_generate_cb.3,v 1.2.4.1 2021/03/28 18:21:50 martin Exp $ .\" -.\" Automatically generated by Pod::Man 4.10 (Pod::Simple 3.35) +.\" Automatically generated by Pod::Man 4.11 (Pod::Simple 3.35) .\" .\" Standard preamble: .\" ======================================================================== @@ -135,14 +135,16 @@ .\" ======================================================================== .\" .IX Title "SSL_CTX_set_stateless_cookie_generate_cb 3" -.TH SSL_CTX_set_stateless_cookie_generate_cb 3 "2018-09-23" "1.1.1c" "OpenSSL" +.TH SSL_CTX_set_stateless_cookie_generate_cb 3 "2020-03-22" "1.1.1i" "OpenSSL" .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. .if n .ad l .nh .SH "NAME" SSL_CTX_set_stateless_cookie_generate_cb, -SSL_CTX_set_stateless_cookie_verify_cb +SSL_CTX_set_stateless_cookie_verify_cb, +SSL_CTX_set_cookie_generate_cb, +SSL_CTX_set_cookie_verify_cb \&\- Callback functions for stateless TLS1.3 cookies .SH "LIBRARY" libcrypto, -lcrypto @@ -161,29 +163,63 @@ libcrypto, -lcrypto \& int (*verify_stateless_cookie_cb) (SSL *ssl, \& const unsigned char *cookie, \& size_t cookie_len)); +\& +\& void SSL_CTX_set_cookie_generate_cb(SSL_CTX *ctx, +\& int (*app_gen_cookie_cb) (SSL *ssl, +\& unsigned char +\& *cookie, +\& unsigned int +\& *cookie_len)); +\& void SSL_CTX_set_cookie_verify_cb(SSL_CTX *ctx, +\& int (*app_verify_cookie_cb) (SSL *ssl, +\& const unsigned +\& char *cookie, +\& unsigned int +\& cookie_len)); .Ve .SH "DESCRIPTION" .IX Header "DESCRIPTION" -\&\fBSSL_CTX_set_cookie_generate_cb()\fR sets the callback used by \fBSSL_stateless\fR\|(3) -to generate the application-controlled portion of the cookie provided to clients -in the HelloRetryRequest transmitted as a response to a ClientHello with a -missing or invalid cookie. \fBgen_stateless_cookie_cb()\fR must write at most -\&\s-1SSL_COOKIE_LENGTH\s0 bytes into \fBcookie\fR, and must write the number of bytes -written to \fBcookie_len\fR. If a cookie cannot be generated, a zero return value -can be used to abort the handshake. +\&\fBSSL_CTX_set_stateless_cookie_generate_cb()\fR sets the callback used by +\&\fBSSL_stateless\fR\|(3) to generate the application-controlled portion of the cookie +provided to clients in the HelloRetryRequest transmitted as a response to a +ClientHello with a missing or invalid cookie. \fBgen_stateless_cookie_cb()\fR must +write at most \s-1SSL_COOKIE_LENGTH\s0 bytes into \fBcookie\fR, and must write the number +of bytes written to \fBcookie_len\fR. If a cookie cannot be generated, a zero +return value can be used to abort the handshake. +.PP +\&\fBSSL_CTX_set_stateless_cookie_verify_cb()\fR sets the callback used by +\&\fBSSL_stateless\fR\|(3) to determine whether the application-controlled portion of a +ClientHello cookie is valid. The cookie data is pointed to by \fBcookie\fR and is of +length \fBcookie_len\fR. A nonzero return value from \fBverify_stateless_cookie_cb()\fR +communicates that the cookie is valid. The integrity of the entire cookie, +including the application-controlled portion, is automatically verified by \s-1HMAC\s0 +before \fBverify_stateless_cookie_cb()\fR is called. +.PP +\&\fBSSL_CTX_set_cookie_generate_cb()\fR sets the callback used by \fBDTLSv1_listen\fR\|(3) +to generate the cookie provided to clients in the HelloVerifyRequest transmitted +as a response to a ClientHello with a missing or invalid cookie. +\&\fBapp_gen_cookie_cb()\fR must write at most \s-1DTLS1_COOKIE_LENGTH\s0 bytes into +\&\fBcookie\fR, and must write the number of bytes written to \fBcookie_len\fR. If a +cookie cannot be generated, a zero return value can be used to abort the +handshake. .PP -\&\fBSSL_CTX_set_cookie_verify_cb()\fR sets the callback used by \fBSSL_stateless\fR\|(3) to -determine whether the application-controlled portion of a ClientHello cookie is -valid. A nonzero return value from \fBapp_verify_cookie_cb()\fR communicates that the -cookie is valid. The integrity of the entire cookie, including the -application-controlled portion, is automatically verified by \s-1HMAC\s0 before -\&\fBverify_stateless_cookie_cb()\fR is called. +\&\fBSSL_CTX_set_cookie_verify_cb()\fR sets the callback used by \fBDTLSv1_listen\fR\|(3) to +determine whether the cookie in a ClientHello is valid. The cookie data is +pointed to by \fBcookie\fR and is of length \fBcookie_len\fR. A nonzero return value +from \fBapp_verify_cookie_cb()\fR communicates that the cookie is valid. The +integrity of the cookie is not verified by OpenSSL. This is an application +responsibility. .SH "RETURN VALUES" .IX Header "RETURN VALUES" Neither function returns a value. .SH "SEE ALSO" .IX Header "SEE ALSO" -\&\fBSSL_stateless\fR\|(3) +\&\fBSSL_stateless\fR\|(3), +\&\fBDTLSv1_listen\fR\|(3) +.SH "HISTORY" +.IX Header "HISTORY" +\&\fBSSL_CTX_set_stateless_cookie_generate_cb()\fR and +\&\fBSSL_CTX_set_stateless_cookie_verify_cb()\fR were added in OpenSSL 1.1.1. .SH "COPYRIGHT" .IX Header "COPYRIGHT" Copyright 2018 The OpenSSL Project Authors. All Rights Reserved. diff --git a/crypto/external/bsd/openssl/lib/libcrypto/man/SSL_CTX_set_timeout.3 b/crypto/external/bsd/openssl/lib/libcrypto/man/SSL_CTX_set_timeout.3 index f5e6441ec17..9dab7e5c7e2 100644 --- a/crypto/external/bsd/openssl/lib/libcrypto/man/SSL_CTX_set_timeout.3 +++ b/crypto/external/bsd/openssl/lib/libcrypto/man/SSL_CTX_set_timeout.3 @@ -1,6 +1,6 @@ -.\" $NetBSD: SSL_CTX_set_timeout.3,v 1.19 2019/06/09 18:44:33 christos Exp $ +.\" $NetBSD: SSL_CTX_set_timeout.3,v 1.19.2.1 2021/03/28 18:21:50 martin Exp $ .\" -.\" Automatically generated by Pod::Man 4.10 (Pod::Simple 3.35) +.\" Automatically generated by Pod::Man 4.11 (Pod::Simple 3.35) .\" .\" Standard preamble: .\" ======================================================================== @@ -135,7 +135,7 @@ .\" ======================================================================== .\" .IX Title "SSL_CTX_set_timeout 3" -.TH SSL_CTX_set_timeout 3 "2018-09-23" "1.1.1c" "OpenSSL" +.TH SSL_CTX_set_timeout 3 "2018-09-23" "1.1.1i" "OpenSSL" .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. .if n .ad l diff --git a/crypto/external/bsd/openssl/lib/libcrypto/man/SSL_CTX_set_tlsext_servername_callback.3 b/crypto/external/bsd/openssl/lib/libcrypto/man/SSL_CTX_set_tlsext_servername_callback.3 index fc6b8d28870..14b0a58d08d 100644 --- a/crypto/external/bsd/openssl/lib/libcrypto/man/SSL_CTX_set_tlsext_servername_callback.3 +++ b/crypto/external/bsd/openssl/lib/libcrypto/man/SSL_CTX_set_tlsext_servername_callback.3 @@ -1,6 +1,6 @@ -.\" $NetBSD: SSL_CTX_set_tlsext_servername_callback.3,v 1.2 2019/06/09 18:44:33 christos Exp $ +.\" $NetBSD: SSL_CTX_set_tlsext_servername_callback.3,v 1.2.4.1 2021/03/28 18:21:50 martin Exp $ .\" -.\" Automatically generated by Pod::Man 4.10 (Pod::Simple 3.35) +.\" Automatically generated by Pod::Man 4.11 (Pod::Simple 3.35) .\" .\" Standard preamble: .\" ======================================================================== @@ -135,7 +135,7 @@ .\" ======================================================================== .\" .IX Title "SSL_CTX_set_tlsext_servername_callback 3" -.TH SSL_CTX_set_tlsext_servername_callback 3 "2018-09-23" "1.1.1c" "OpenSSL" +.TH SSL_CTX_set_tlsext_servername_callback 3 "2020-12-10" "1.1.1i" "OpenSSL" .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. .if n .ad l @@ -152,7 +152,7 @@ libcrypto, -lcrypto \& #include <openssl/ssl.h> \& \& long SSL_CTX_set_tlsext_servername_callback(SSL_CTX *ctx, -\& int (*cb)(SSL *, int *, void *)); +\& int (*cb)(SSL *s, int *al, void *arg)); \& long SSL_CTX_set_tlsext_servername_arg(SSL_CTX *ctx, void *arg); \& \& const char *SSL_get_servername(const SSL *s, const int type); @@ -162,21 +162,84 @@ libcrypto, -lcrypto .Ve .SH "DESCRIPTION" .IX Header "DESCRIPTION" -The functionality provided by the servername callback is superseded by the -ClientHello callback, which can be set using \fBSSL_CTX_set_client_hello_cb()\fR. -The servername callback is retained for historical compatibility. +The functionality provided by the servername callback is mostly superseded by +the ClientHello callback, which can be set using \fBSSL_CTX_set_client_hello_cb()\fR. +However, even where the ClientHello callback is used, the servername callback is +still necessary in order to acknowledge the servername requested by the client. .PP \&\fBSSL_CTX_set_tlsext_servername_callback()\fR sets the application callback \fBcb\fR used by a server to perform any actions or configuration required based on the servername extension received in the incoming connection. When \fBcb\fR -is \s-1NULL, SNI\s0 is not used. The \fBarg\fR value is a pointer which is passed to -the application callback. +is \s-1NULL, SNI\s0 is not used. +.PP +The servername callback should return one of the following values: +.IP "\s-1SSL_TLSEXT_ERR_OK\s0" 4 +.IX Item "SSL_TLSEXT_ERR_OK" +This is used to indicate that the servername requested by the client has been +accepted. Typically a server will call \fBSSL_set_SSL_CTX()\fR in the callback to set +up a different configuration for the selected servername in this case. +.IP "\s-1SSL_TLSEXT_ERR_ALERT_FATAL\s0" 4 +.IX Item "SSL_TLSEXT_ERR_ALERT_FATAL" +In this case the servername requested by the client is not accepted and the +handshake will be aborted. The value of the alert to be used should be stored in +the location pointed to by the \fBal\fR parameter to the callback. By default this +value is initialised to \s-1SSL_AD_UNRECOGNIZED_NAME.\s0 +.IP "\s-1SSL_TLSEXT_ERR_ALERT_WARNING\s0" 4 +.IX Item "SSL_TLSEXT_ERR_ALERT_WARNING" +If this value is returned then the servername is not accepted by the server. +However, the handshake will continue and send a warning alert instead. The value +of the alert should be stored in the location pointed to by the \fBal\fR parameter +as for \s-1SSL_TLSEXT_ERR_ALERT_FATAL\s0 above. Note that TLSv1.3 does not support +warning alerts, so if TLSv1.3 has been negotiated then this return value is +treated the same way as \s-1SSL_TLSEXT_ERR_NOACK.\s0 +.IP "\s-1SSL_TLSEXT_ERR_NOACK\s0" 4 +.IX Item "SSL_TLSEXT_ERR_NOACK" +This return value indicates that the servername is not accepted by the server. +No alerts are sent and the server will not acknowledge the requested servername. .PP \&\fBSSL_CTX_set_tlsext_servername_arg()\fR sets a context-specific argument to be -passed into the callback for this \fB\s-1SSL_CTX\s0\fR. +passed into the callback (via the \fBarg\fR parameter) for this \fB\s-1SSL_CTX\s0\fR. +.PP +The behaviour of \fBSSL_get_servername()\fR depends on a number of different factors. +In particular note that in TLSv1.3 the servername is negotiated in every +handshake. In TLSv1.2 the servername is only negotiated on initial handshakes +and not on resumption handshakes. +.IP "On the client, before the handshake" 4 +.IX Item "On the client, before the handshake" +If a servername has been set via a call to \fBSSL_set_tlsext_host_name()\fR then it +will return that servername. +.Sp +If one has not been set, but a TLSv1.2 resumption is being attempted and the +session from the original handshake had a servername accepted by the server then +it will return that servername. +.Sp +Otherwise it returns \s-1NULL.\s0 +.IP "On the client, during or after the handshake and a TLSv1.2 (or below) resumption occurred" 4 +.IX Item "On the client, during or after the handshake and a TLSv1.2 (or below) resumption occurred" +If the session from the original handshake had a servername accepted by the +server then it will return that servername. +.Sp +Otherwise it returns the servername set via \fBSSL_set_tlsext_host_name()\fR or \s-1NULL\s0 +if it was not called. +.IP "On the client, during or after the handshake and a TLSv1.2 (or below) resumption did not occur" 4 +.IX Item "On the client, during or after the handshake and a TLSv1.2 (or below) resumption did not occur" +It will return the servername set via \fBSSL_set_tlsext_host_name()\fR or \s-1NULL\s0 if it +was not called. +.IP "On the server, before the handshake" 4 +.IX Item "On the server, before the handshake" +The function will always return \s-1NULL\s0 before the handshake +.IP "On the server, after the servername extension has been processed and a TLSv1.2 (or below) resumption occurred" 4 +.IX Item "On the server, after the servername extension has been processed and a TLSv1.2 (or below) resumption occurred" +If a servername was accepted by the server in the original handshake then it +will return that servername, or \s-1NULL\s0 otherwise. +.IP "On the server, after the servername extension has been processed and a TLSv1.2 (or below) resumption did not occur" 4 +.IX Item "On the server, after the servername extension has been processed and a TLSv1.2 (or below) resumption did not occur" +The function will return the servername requested by the client in this +handshake or \s-1NULL\s0 if none was requested. .PP -\&\fBSSL_get_servername()\fR returns a servername extension value of the specified -type if provided in the Client Hello or \s-1NULL.\s0 +Note that the ClientHello callback occurs before a servername extension from the +client is processed. The servername, certificate and \s-1ALPN\s0 callbacks occur after +a servername extension from the client is processed. .PP \&\fBSSL_get_servername_type()\fR returns the servername type or \-1 if no servername is present. Currently the only supported type (defined in \s-1RFC3546\s0) is @@ -202,9 +265,25 @@ that will act as clients; otherwise the configured \fBname\fR will be ignored. .IX Header "SEE ALSO" \&\fBssl\fR\|(7), \fBSSL_CTX_set_alpn_select_cb\fR\|(3), \&\fBSSL_get0_alpn_selected\fR\|(3), \fBSSL_CTX_set_client_hello_cb\fR\|(3) +.SH "HISTORY" +.IX Header "HISTORY" +\&\fBSSL_get_servername()\fR historically provided some unexpected results in certain +corner cases. This has been fixed from OpenSSL 1.1.1e. +.PP +Prior to 1.1.1e, when the client requested a servername in an initial TLSv1.2 +handshake, the server accepted it, and then the client successfully resumed but +set a different explicit servername in the second handshake then when called by +the client it returned the servername from the second handshake. This has now +been changed to return the servername requested in the original handshake. +.PP +Also prior to 1.1.1e, if the client sent a servername in the first handshake but +the server did not accept it, and then a second handshake occurred where TLSv1.2 +resumption was successful then when called by the server it returned the +servername requested in the original handshake. This has now been changed to +\&\s-1NULL.\s0 .SH "COPYRIGHT" .IX Header "COPYRIGHT" -Copyright 2017 The OpenSSL Project Authors. All Rights Reserved. +Copyright 2017\-2020 The OpenSSL Project Authors. All Rights Reserved. .PP Licensed under the OpenSSL license (the \*(L"License\*(R"). You may not use this file except in compliance with the License. You can obtain a copy diff --git a/crypto/external/bsd/openssl/lib/libcrypto/man/SSL_CTX_set_tlsext_status_cb.3 b/crypto/external/bsd/openssl/lib/libcrypto/man/SSL_CTX_set_tlsext_status_cb.3 index 04b4b1cfa28..ef2f0d30053 100644 --- a/crypto/external/bsd/openssl/lib/libcrypto/man/SSL_CTX_set_tlsext_status_cb.3 +++ b/crypto/external/bsd/openssl/lib/libcrypto/man/SSL_CTX_set_tlsext_status_cb.3 @@ -1,6 +1,6 @@ -.\" $NetBSD: SSL_CTX_set_tlsext_status_cb.3,v 1.6 2019/06/09 18:44:33 christos Exp $ +.\" $NetBSD: SSL_CTX_set_tlsext_status_cb.3,v 1.6.2.1 2021/03/28 18:21:50 martin Exp $ .\" -.\" Automatically generated by Pod::Man 4.10 (Pod::Simple 3.35) +.\" Automatically generated by Pod::Man 4.11 (Pod::Simple 3.35) .\" .\" Standard preamble: .\" ======================================================================== @@ -135,7 +135,7 @@ .\" ======================================================================== .\" .IX Title "SSL_CTX_set_tlsext_status_cb 3" -.TH SSL_CTX_set_tlsext_status_cb 3 "2019-03-12" "1.1.1c" "OpenSSL" +.TH SSL_CTX_set_tlsext_status_cb 3 "2019-03-12" "1.1.1i" "OpenSSL" .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. .if n .ad l diff --git a/crypto/external/bsd/openssl/lib/libcrypto/man/SSL_CTX_set_tlsext_ticket_key_cb.3 b/crypto/external/bsd/openssl/lib/libcrypto/man/SSL_CTX_set_tlsext_ticket_key_cb.3 index be663186e6c..4f8cb111d70 100644 --- a/crypto/external/bsd/openssl/lib/libcrypto/man/SSL_CTX_set_tlsext_ticket_key_cb.3 +++ b/crypto/external/bsd/openssl/lib/libcrypto/man/SSL_CTX_set_tlsext_ticket_key_cb.3 @@ -1,6 +1,6 @@ -.\" $NetBSD: SSL_CTX_set_tlsext_ticket_key_cb.3,v 1.9 2019/06/09 18:44:33 christos Exp $ +.\" $NetBSD: SSL_CTX_set_tlsext_ticket_key_cb.3,v 1.9.2.1 2021/03/28 18:21:50 martin Exp $ .\" -.\" Automatically generated by Pod::Man 4.10 (Pod::Simple 3.35) +.\" Automatically generated by Pod::Man 4.11 (Pod::Simple 3.35) .\" .\" Standard preamble: .\" ======================================================================== @@ -135,7 +135,7 @@ .\" ======================================================================== .\" .IX Title "SSL_CTX_set_tlsext_ticket_key_cb 3" -.TH SSL_CTX_set_tlsext_ticket_key_cb 3 "2019-06-09" "1.1.1c" "OpenSSL" +.TH SSL_CTX_set_tlsext_ticket_key_cb 3 "2020-12-10" "1.1.1i" "OpenSSL" .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. .if n .ad l @@ -266,6 +266,8 @@ Reference Implementation: \& unsigned char *iv, EVP_CIPHER_CTX *ctx, \& HMAC_CTX *hctx, int enc) \& { +\& your_type_t *key; /* something that you need to implement */ +\& \& if (enc) { /* create new session */ \& if (RAND_bytes(iv, EVP_MAX_IV_LENGTH) <= 0) \& return \-1; /* insufficient random */ @@ -284,21 +286,22 @@ Reference Implementation: \& } \& memcpy(key_name, key\->name, 16); \& -\& EVP_EncryptInit_ex(&ctx, EVP_aes_128_cbc(), NULL, key\->aes_key, iv); -\& HMAC_Init_ex(&hctx, key\->hmac_key, 16, EVP_sha256(), NULL); +\& EVP_EncryptInit_ex(&ctx, EVP_aes_256_cbc(), NULL, key\->aes_key, iv); +\& HMAC_Init_ex(&hctx, key\->hmac_key, 32, EVP_sha256(), NULL); \& \& return 1; \& \& } else { /* retrieve session */ -\& key = findkey(name); +\& time_t t = time(NULL); +\& key = findkey(key_name); /* something that you need to implement */ \& -\& if (key == NULL || key\->expire < now()) +\& if (key == NULL || key\->expire < t) \& return 0; \& -\& HMAC_Init_ex(&hctx, key\->hmac_key, 16, EVP_sha256(), NULL); -\& EVP_DecryptInit_ex(&ctx, EVP_aes_128_cbc(), NULL, key\->aes_key, iv); +\& HMAC_Init_ex(&hctx, key\->hmac_key, 32, EVP_sha256(), NULL); +\& EVP_DecryptInit_ex(&ctx, EVP_aes_256_cbc(), NULL, key\->aes_key, iv); \& -\& if (key\->expire < now() \- RENEW_TIME) { +\& if (key\->expire < t \- RENEW_TIME) { /* RENEW_TIME: implement */ \& /* \& * return 2 \- This session will get a new ticket even though the \& * current one is still valid. @@ -319,7 +322,7 @@ Reference Implementation: \&\fBSSL_CTX_set_session_id_context\fR\|(3), .SH "COPYRIGHT" .IX Header "COPYRIGHT" -Copyright 2014\-2019 The OpenSSL Project Authors. All Rights Reserved. +Copyright 2014\-2020 The OpenSSL Project Authors. All Rights Reserved. .PP Licensed under the OpenSSL license (the \*(L"License\*(R"). You may not use this file except in compliance with the License. You can obtain a copy diff --git a/crypto/external/bsd/openssl/lib/libcrypto/man/SSL_CTX_set_tlsext_use_srtp.3 b/crypto/external/bsd/openssl/lib/libcrypto/man/SSL_CTX_set_tlsext_use_srtp.3 index 91efcf91eee..3364f4c4c59 100644 --- a/crypto/external/bsd/openssl/lib/libcrypto/man/SSL_CTX_set_tlsext_use_srtp.3 +++ b/crypto/external/bsd/openssl/lib/libcrypto/man/SSL_CTX_set_tlsext_use_srtp.3 @@ -1,6 +1,6 @@ -.\" $NetBSD: SSL_CTX_set_tlsext_use_srtp.3,v 1.3 2019/06/09 18:44:33 christos Exp $ +.\" $NetBSD: SSL_CTX_set_tlsext_use_srtp.3,v 1.3.2.1 2021/03/28 18:21:50 martin Exp $ .\" -.\" Automatically generated by Pod::Man 4.10 (Pod::Simple 3.35) +.\" Automatically generated by Pod::Man 4.11 (Pod::Simple 3.35) .\" .\" Standard preamble: .\" ======================================================================== @@ -135,7 +135,7 @@ .\" ======================================================================== .\" .IX Title "SSL_CTX_set_tlsext_use_srtp 3" -.TH SSL_CTX_set_tlsext_use_srtp 3 "2018-09-23" "1.1.1c" "OpenSSL" +.TH SSL_CTX_set_tlsext_use_srtp 3 "2018-09-23" "1.1.1i" "OpenSSL" .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. .if n .ad l diff --git a/crypto/external/bsd/openssl/lib/libcrypto/man/SSL_CTX_set_tmp_dh_callback.3 b/crypto/external/bsd/openssl/lib/libcrypto/man/SSL_CTX_set_tmp_dh_callback.3 index 945ca83e2c3..86acb45ba4f 100644 --- a/crypto/external/bsd/openssl/lib/libcrypto/man/SSL_CTX_set_tmp_dh_callback.3 +++ b/crypto/external/bsd/openssl/lib/libcrypto/man/SSL_CTX_set_tmp_dh_callback.3 @@ -1,6 +1,6 @@ -.\" $NetBSD: SSL_CTX_set_tmp_dh_callback.3,v 1.19 2019/06/09 18:44:33 christos Exp $ +.\" $NetBSD: SSL_CTX_set_tmp_dh_callback.3,v 1.19.2.1 2021/03/28 18:21:50 martin Exp $ .\" -.\" Automatically generated by Pod::Man 4.10 (Pod::Simple 3.35) +.\" Automatically generated by Pod::Man 4.11 (Pod::Simple 3.35) .\" .\" Standard preamble: .\" ======================================================================== @@ -135,7 +135,7 @@ .\" ======================================================================== .\" .IX Title "SSL_CTX_set_tmp_dh_callback 3" -.TH SSL_CTX_set_tmp_dh_callback 3 "2019-06-09" "1.1.1c" "OpenSSL" +.TH SSL_CTX_set_tmp_dh_callback 3 "2019-06-09" "1.1.1i" "OpenSSL" .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. .if n .ad l diff --git a/crypto/external/bsd/openssl/lib/libcrypto/man/SSL_CTX_set_verify.3 b/crypto/external/bsd/openssl/lib/libcrypto/man/SSL_CTX_set_verify.3 index 8f79718a565..78ba57fbbe8 100644 --- a/crypto/external/bsd/openssl/lib/libcrypto/man/SSL_CTX_set_verify.3 +++ b/crypto/external/bsd/openssl/lib/libcrypto/man/SSL_CTX_set_verify.3 @@ -1,6 +1,6 @@ -.\" $NetBSD: SSL_CTX_set_verify.3,v 1.19 2019/06/09 18:44:33 christos Exp $ +.\" $NetBSD: SSL_CTX_set_verify.3,v 1.19.2.1 2021/03/28 18:21:50 martin Exp $ .\" -.\" Automatically generated by Pod::Man 4.10 (Pod::Simple 3.35) +.\" Automatically generated by Pod::Man 4.11 (Pod::Simple 3.35) .\" .\" Standard preamble: .\" ======================================================================== @@ -135,7 +135,7 @@ .\" ======================================================================== .\" .IX Title "SSL_CTX_set_verify 3" -.TH SSL_CTX_set_verify 3 "2018-09-23" "1.1.1c" "OpenSSL" +.TH SSL_CTX_set_verify 3 "2020-01-23" "1.1.1i" "OpenSSL" .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. .if n .ad l @@ -237,7 +237,7 @@ anonymous cipher is used, \s-1SSL_VERIFY_PEER\s0 is ignored. handshake is immediately terminated with a \*(L"handshake failure\*(R" alert. This flag must be used together with \s-1SSL_VERIFY_PEER.\s0 .Sp -\&\fBClient mode:\fR ignored +\&\fBClient mode:\fR ignored (see \s-1BUGS\s0) .IP "\s-1SSL_VERIFY_CLIENT_ONCE\s0" 4 .IX Item "SSL_VERIFY_CLIENT_ONCE" \&\fBServer mode:\fR only request a client certificate once during the @@ -246,7 +246,7 @@ renegotiation or post-authentication if a certificate was requested during the initial handshake. This flag must be used together with \&\s-1SSL_VERIFY_PEER.\s0 .Sp -\&\fBClient mode:\fR ignored +\&\fBClient mode:\fR ignored (see \s-1BUGS\s0) .IP "\s-1SSL_VERIFY_POST_HANDSHAKE\s0" 4 .IX Item "SSL_VERIFY_POST_HANDSHAKE" \&\fBServer mode:\fR the server will not send a client certificate request @@ -256,7 +256,7 @@ to be configured for post-handshake peer verification before the handshake occurs. This flag must be used together with \&\s-1SSL_VERIFY_PEER.\s0 TLSv1.3 only; no effect on pre\-TLSv1.3 connections. .Sp -\&\fBClient mode:\fR ignored +\&\fBClient mode:\fR ignored (see \s-1BUGS\s0) .PP If the \fBmode\fR is \s-1SSL_VERIFY_NONE\s0 none of the other flags may be set. .PP @@ -333,8 +333,8 @@ message is sent to the client. .SH "BUGS" .IX Header "BUGS" In client mode, it is not checked whether the \s-1SSL_VERIFY_PEER\s0 flag -is set, but whether any flags are set. This can lead to -unexpected behaviour if \s-1SSL_VERIFY_PEER\s0 and other flags are not used as +is set, but whether any flags other than \s-1SSL_VERIFY_NONE\s0 are set. This can +lead to unexpected behaviour if \s-1SSL_VERIFY_PEER\s0 and other flags are not used as required. .SH "RETURN VALUES" .IX Header "RETURN VALUES" @@ -475,7 +475,7 @@ The \s-1SSL_VERIFY_POST_HANDSHAKE\s0 option, and the \fBSSL_verify_client_post_h and \fBSSL_set_post_handshake_auth()\fR functions were added in OpenSSL 1.1.1. .SH "COPYRIGHT" .IX Header "COPYRIGHT" -Copyright 2000\-2018 The OpenSSL Project Authors. All Rights Reserved. +Copyright 2000\-2019 The OpenSSL Project Authors. All Rights Reserved. .PP Licensed under the OpenSSL license (the \*(L"License\*(R"). You may not use this file except in compliance with the License. You can obtain a copy diff --git a/crypto/external/bsd/openssl/lib/libcrypto/man/SSL_CTX_use_certificate.3 b/crypto/external/bsd/openssl/lib/libcrypto/man/SSL_CTX_use_certificate.3 index dd0f0d7d38b..d4357963108 100644 --- a/crypto/external/bsd/openssl/lib/libcrypto/man/SSL_CTX_use_certificate.3 +++ b/crypto/external/bsd/openssl/lib/libcrypto/man/SSL_CTX_use_certificate.3 @@ -1,6 +1,6 @@ -.\" $NetBSD: SSL_CTX_use_certificate.3,v 1.19 2019/06/09 18:44:33 christos Exp $ +.\" $NetBSD: SSL_CTX_use_certificate.3,v 1.19.2.1 2021/03/28 18:21:50 martin Exp $ .\" -.\" Automatically generated by Pod::Man 4.10 (Pod::Simple 3.35) +.\" Automatically generated by Pod::Man 4.11 (Pod::Simple 3.35) .\" .\" Standard preamble: .\" ======================================================================== @@ -135,7 +135,7 @@ .\" ======================================================================== .\" .IX Title "SSL_CTX_use_certificate 3" -.TH SSL_CTX_use_certificate 3 "2018-09-23" "1.1.1c" "OpenSSL" +.TH SSL_CTX_use_certificate 3 "2018-09-23" "1.1.1i" "OpenSSL" .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. .if n .ad l diff --git a/crypto/external/bsd/openssl/lib/libcrypto/man/SSL_CTX_use_psk_identity_hint.3 b/crypto/external/bsd/openssl/lib/libcrypto/man/SSL_CTX_use_psk_identity_hint.3 index bf41e3f0ca1..086a90efa69 100644 --- a/crypto/external/bsd/openssl/lib/libcrypto/man/SSL_CTX_use_psk_identity_hint.3 +++ b/crypto/external/bsd/openssl/lib/libcrypto/man/SSL_CTX_use_psk_identity_hint.3 @@ -1,6 +1,6 @@ -.\" $NetBSD: SSL_CTX_use_psk_identity_hint.3,v 1.19 2019/06/09 18:44:33 christos Exp $ +.\" $NetBSD: SSL_CTX_use_psk_identity_hint.3,v 1.19.2.1 2021/03/28 18:21:50 martin Exp $ .\" -.\" Automatically generated by Pod::Man 4.10 (Pod::Simple 3.35) +.\" Automatically generated by Pod::Man 4.11 (Pod::Simple 3.35) .\" .\" Standard preamble: .\" ======================================================================== @@ -135,7 +135,7 @@ .\" ======================================================================== .\" .IX Title "SSL_CTX_use_psk_identity_hint 3" -.TH SSL_CTX_use_psk_identity_hint 3 "2018-09-23" "1.1.1c" "OpenSSL" +.TH SSL_CTX_use_psk_identity_hint 3 "2020-12-10" "1.1.1i" "OpenSSL" .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. .if n .ad l @@ -180,9 +180,9 @@ libcrypto, -lcrypto .Ve .SH "DESCRIPTION" .IX Header "DESCRIPTION" -A client application wishing to use TLSv1.3 PSKs should set a callback -using either \fBSSL_CTX_set_psk_use_session_callback()\fR or -\&\fBSSL_set_psk_use_session_callback()\fR as appropriate. +A server application wishing to use TLSv1.3 PSKs should set a callback +using either \fBSSL_CTX_set_psk_find_session_callback()\fR or +\&\fBSSL_set_psk_find_session_callback()\fR as appropriate. .PP The callback function is given a pointer to the \s-1SSL\s0 connection in \fBssl\fR and an identity in \fBidentity\fR of length \fBidentity_len\fR. The callback function @@ -224,7 +224,9 @@ via \fBSSL_CTX_set_psk_find_session_callback()\fR or \fBSSL_set_psk_find_session and it will use that in preference. If no such callback is present then it will check to see if a callback has been set via \fBSSL_CTX_set_psk_server_callback()\fR or \&\fBSSL_set_psk_server_callback()\fR and use that. In this case the handshake digest -will default to \s-1SHA\-256\s0 for any returned \s-1PSK.\s0 +will default to \s-1SHA\-256\s0 for any returned \s-1PSK.\s0 TLSv1.3 early data exchanges are +possible in \s-1PSK\s0 connections only with the \fBSSL_psk_find_session_cb_func\fR +callback, and are not possible with the \fBSSL_psk_server_cb_func\fR callback. .SH "NOTES" .IX Header "NOTES" A connection established via a TLSv1.3 \s-1PSK\s0 will appear as if session resumption @@ -257,7 +259,7 @@ failure. In the event of failure the connection setup fails. .SH "NOTES" .IX Header "NOTES" There are no known security issues with sharing the same \s-1PSK\s0 between TLSv1.2 (or -below) and TLSv1.3. However the \s-1RFC\s0 has this note of caution: +below) and TLSv1.3. However, the \s-1RFC\s0 has this note of caution: .PP \&\*(L"While there is no known way in which the same \s-1PSK\s0 might produce related output in both versions, only limited analysis has been done. Implementations can @@ -273,7 +275,7 @@ ensure safety from cross-protocol related output by not reusing PSKs between were added in OpenSSL 1.1.1. .SH "COPYRIGHT" .IX Header "COPYRIGHT" -Copyright 2006\-2018 The OpenSSL Project Authors. All Rights Reserved. +Copyright 2006\-2020 The OpenSSL Project Authors. All Rights Reserved. .PP Licensed under the OpenSSL license (the \*(L"License\*(R"). You may not use this file except in compliance with the License. You can obtain a copy diff --git a/crypto/external/bsd/openssl/lib/libcrypto/man/SSL_CTX_use_serverinfo.3 b/crypto/external/bsd/openssl/lib/libcrypto/man/SSL_CTX_use_serverinfo.3 index b8a76c4dac1..45dd751fbda 100644 --- a/crypto/external/bsd/openssl/lib/libcrypto/man/SSL_CTX_use_serverinfo.3 +++ b/crypto/external/bsd/openssl/lib/libcrypto/man/SSL_CTX_use_serverinfo.3 @@ -1,6 +1,6 @@ -.\" $NetBSD: SSL_CTX_use_serverinfo.3,v 1.4 2019/06/09 18:44:33 christos Exp $ +.\" $NetBSD: SSL_CTX_use_serverinfo.3,v 1.4.2.1 2021/03/28 18:21:50 martin Exp $ .\" -.\" Automatically generated by Pod::Man 4.10 (Pod::Simple 3.35) +.\" Automatically generated by Pod::Man 4.11 (Pod::Simple 3.35) .\" .\" Standard preamble: .\" ======================================================================== @@ -135,7 +135,7 @@ .\" ======================================================================== .\" .IX Title "SSL_CTX_use_serverinfo 3" -.TH SSL_CTX_use_serverinfo 3 "2018-09-23" "1.1.1c" "OpenSSL" +.TH SSL_CTX_use_serverinfo 3 "2018-09-23" "1.1.1i" "OpenSSL" .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. .if n .ad l diff --git a/crypto/external/bsd/openssl/lib/libcrypto/man/SSL_SESSION_free.3 b/crypto/external/bsd/openssl/lib/libcrypto/man/SSL_SESSION_free.3 index 32b2dd5151b..def3ed13384 100644 --- a/crypto/external/bsd/openssl/lib/libcrypto/man/SSL_SESSION_free.3 +++ b/crypto/external/bsd/openssl/lib/libcrypto/man/SSL_SESSION_free.3 @@ -1,6 +1,6 @@ -.\" $NetBSD: SSL_SESSION_free.3,v 1.19 2019/06/09 18:44:33 christos Exp $ +.\" $NetBSD: SSL_SESSION_free.3,v 1.19.2.1 2021/03/28 18:21:50 martin Exp $ .\" -.\" Automatically generated by Pod::Man 4.10 (Pod::Simple 3.35) +.\" Automatically generated by Pod::Man 4.11 (Pod::Simple 3.35) .\" .\" Standard preamble: .\" ======================================================================== @@ -135,7 +135,7 @@ .\" ======================================================================== .\" .IX Title "SSL_SESSION_free 3" -.TH SSL_SESSION_free 3 "2019-03-12" "1.1.1c" "OpenSSL" +.TH SSL_SESSION_free 3 "2019-03-12" "1.1.1i" "OpenSSL" .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. .if n .ad l diff --git a/crypto/external/bsd/openssl/lib/libcrypto/man/SSL_SESSION_get0_cipher.3 b/crypto/external/bsd/openssl/lib/libcrypto/man/SSL_SESSION_get0_cipher.3 index f2d598ad5cf..51319666ebe 100644 --- a/crypto/external/bsd/openssl/lib/libcrypto/man/SSL_SESSION_get0_cipher.3 +++ b/crypto/external/bsd/openssl/lib/libcrypto/man/SSL_SESSION_get0_cipher.3 @@ -1,6 +1,6 @@ -.\" $NetBSD: SSL_SESSION_get0_cipher.3,v 1.3 2019/06/09 18:44:33 christos Exp $ +.\" $NetBSD: SSL_SESSION_get0_cipher.3,v 1.3.2.1 2021/03/28 18:21:50 martin Exp $ .\" -.\" Automatically generated by Pod::Man 4.10 (Pod::Simple 3.35) +.\" Automatically generated by Pod::Man 4.11 (Pod::Simple 3.35) .\" .\" Standard preamble: .\" ======================================================================== @@ -135,7 +135,7 @@ .\" ======================================================================== .\" .IX Title "SSL_SESSION_get0_cipher 3" -.TH SSL_SESSION_get0_cipher 3 "2019-03-12" "1.1.1c" "OpenSSL" +.TH SSL_SESSION_get0_cipher 3 "2019-03-12" "1.1.1i" "OpenSSL" .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. .if n .ad l diff --git a/crypto/external/bsd/openssl/lib/libcrypto/man/SSL_SESSION_get0_hostname.3 b/crypto/external/bsd/openssl/lib/libcrypto/man/SSL_SESSION_get0_hostname.3 index 39d1bf161b6..62bff9294e2 100644 --- a/crypto/external/bsd/openssl/lib/libcrypto/man/SSL_SESSION_get0_hostname.3 +++ b/crypto/external/bsd/openssl/lib/libcrypto/man/SSL_SESSION_get0_hostname.3 @@ -1,6 +1,6 @@ -.\" $NetBSD: SSL_SESSION_get0_hostname.3,v 1.3 2019/06/09 18:44:33 christos Exp $ +.\" $NetBSD: SSL_SESSION_get0_hostname.3,v 1.3.2.1 2021/03/28 18:21:50 martin Exp $ .\" -.\" Automatically generated by Pod::Man 4.10 (Pod::Simple 3.35) +.\" Automatically generated by Pod::Man 4.11 (Pod::Simple 3.35) .\" .\" Standard preamble: .\" ======================================================================== @@ -135,7 +135,7 @@ .\" ======================================================================== .\" .IX Title "SSL_SESSION_get0_hostname 3" -.TH SSL_SESSION_get0_hostname 3 "2019-03-12" "1.1.1c" "OpenSSL" +.TH SSL_SESSION_get0_hostname 3 "2020-03-22" "1.1.1i" "OpenSSL" .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. .if n .ad l @@ -145,7 +145,7 @@ SSL_SESSION_get0_hostname, SSL_SESSION_set1_hostname, SSL_SESSION_get0_alpn_selected, SSL_SESSION_set1_alpn_selected -\&\- get and set SNI and ALPN data ssociated with a session +\&\- get and set SNI and ALPN data associated with a session .SH "LIBRARY" libcrypto, -lcrypto .SH "SYNOPSIS" @@ -165,7 +165,10 @@ libcrypto, -lcrypto .SH "DESCRIPTION" .IX Header "DESCRIPTION" \&\fBSSL_SESSION_get0_hostname()\fR retrieves the \s-1SNI\s0 value that was sent by the -client when the session was created, or \s-1NULL\s0 if no value was sent. +client when the session was created if it was accepted by the server and TLSv1.2 +or below was negotiated. Otherwise \s-1NULL\s0 is returned. Note that in TLSv1.3 the +\&\s-1SNI\s0 hostname is negotiated with each handshake including resumption handshakes +and is therefore never associated with the session. .PP The value returned is a pointer to memory maintained within \fBs\fR and should not be free'd. @@ -201,7 +204,7 @@ The \fBSSL_SESSION_set1_hostname()\fR, \fBSSL_SESSION_get0_alpn_selected()\fR an \&\fBSSL_SESSION_set1_alpn_selected()\fR functions were added in OpenSSL 1.1.1. .SH "COPYRIGHT" .IX Header "COPYRIGHT" -Copyright 2016\-2018 The OpenSSL Project Authors. All Rights Reserved. +Copyright 2016\-2020 The OpenSSL Project Authors. All Rights Reserved. .PP Licensed under the OpenSSL license (the \*(L"License\*(R"). You may not use this file except in compliance with the License. You can obtain a copy diff --git a/crypto/external/bsd/openssl/lib/libcrypto/man/SSL_SESSION_get0_id_context.3 b/crypto/external/bsd/openssl/lib/libcrypto/man/SSL_SESSION_get0_id_context.3 index 377c0cdfbe7..8d7a0bdd066 100644 --- a/crypto/external/bsd/openssl/lib/libcrypto/man/SSL_SESSION_get0_id_context.3 +++ b/crypto/external/bsd/openssl/lib/libcrypto/man/SSL_SESSION_get0_id_context.3 @@ -1,6 +1,6 @@ -.\" $NetBSD: SSL_SESSION_get0_id_context.3,v 1.3 2019/06/09 18:44:33 christos Exp $ +.\" $NetBSD: SSL_SESSION_get0_id_context.3,v 1.3.2.1 2021/03/28 18:21:50 martin Exp $ .\" -.\" Automatically generated by Pod::Man 4.10 (Pod::Simple 3.35) +.\" Automatically generated by Pod::Man 4.11 (Pod::Simple 3.35) .\" .\" Standard preamble: .\" ======================================================================== @@ -135,7 +135,7 @@ .\" ======================================================================== .\" .IX Title "SSL_SESSION_get0_id_context 3" -.TH SSL_SESSION_get0_id_context 3 "2019-03-12" "1.1.1c" "OpenSSL" +.TH SSL_SESSION_get0_id_context 3 "2019-03-12" "1.1.1i" "OpenSSL" .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. .if n .ad l diff --git a/crypto/external/bsd/openssl/lib/libcrypto/man/SSL_SESSION_get0_peer.3 b/crypto/external/bsd/openssl/lib/libcrypto/man/SSL_SESSION_get0_peer.3 index d8d95338e59..7a90eedd9fd 100644 --- a/crypto/external/bsd/openssl/lib/libcrypto/man/SSL_SESSION_get0_peer.3 +++ b/crypto/external/bsd/openssl/lib/libcrypto/man/SSL_SESSION_get0_peer.3 @@ -1,6 +1,6 @@ -.\" $NetBSD: SSL_SESSION_get0_peer.3,v 1.3 2019/06/09 18:44:33 christos Exp $ +.\" $NetBSD: SSL_SESSION_get0_peer.3,v 1.3.2.1 2021/03/28 18:21:50 martin Exp $ .\" -.\" Automatically generated by Pod::Man 4.10 (Pod::Simple 3.35) +.\" Automatically generated by Pod::Man 4.11 (Pod::Simple 3.35) .\" .\" Standard preamble: .\" ======================================================================== @@ -135,7 +135,7 @@ .\" ======================================================================== .\" .IX Title "SSL_SESSION_get0_peer 3" -.TH SSL_SESSION_get0_peer 3 "2018-09-23" "1.1.1c" "OpenSSL" +.TH SSL_SESSION_get0_peer 3 "2018-09-23" "1.1.1i" "OpenSSL" .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. .if n .ad l diff --git a/crypto/external/bsd/openssl/lib/libcrypto/man/SSL_SESSION_get_compress_id.3 b/crypto/external/bsd/openssl/lib/libcrypto/man/SSL_SESSION_get_compress_id.3 index 2b301dcf0d1..361ccf6c5fe 100644 --- a/crypto/external/bsd/openssl/lib/libcrypto/man/SSL_SESSION_get_compress_id.3 +++ b/crypto/external/bsd/openssl/lib/libcrypto/man/SSL_SESSION_get_compress_id.3 @@ -1,6 +1,6 @@ -.\" $NetBSD: SSL_SESSION_get_compress_id.3,v 1.3 2019/06/09 18:44:33 christos Exp $ +.\" $NetBSD: SSL_SESSION_get_compress_id.3,v 1.3.2.1 2021/03/28 18:21:50 martin Exp $ .\" -.\" Automatically generated by Pod::Man 4.10 (Pod::Simple 3.35) +.\" Automatically generated by Pod::Man 4.11 (Pod::Simple 3.35) .\" .\" Standard preamble: .\" ======================================================================== @@ -135,7 +135,7 @@ .\" ======================================================================== .\" .IX Title "SSL_SESSION_get_compress_id 3" -.TH SSL_SESSION_get_compress_id 3 "2018-09-23" "1.1.1c" "OpenSSL" +.TH SSL_SESSION_get_compress_id 3 "2018-09-23" "1.1.1i" "OpenSSL" .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. .if n .ad l diff --git a/crypto/external/bsd/openssl/lib/libcrypto/man/SSL_SESSION_get_ex_data.3 b/crypto/external/bsd/openssl/lib/libcrypto/man/SSL_SESSION_get_ex_data.3 index 578ef6f1995..5ad715a76aa 100644 --- a/crypto/external/bsd/openssl/lib/libcrypto/man/SSL_SESSION_get_ex_data.3 +++ b/crypto/external/bsd/openssl/lib/libcrypto/man/SSL_SESSION_get_ex_data.3 @@ -1,6 +1,6 @@ -.\" $NetBSD: SSL_SESSION_get_ex_data.3,v 1.3 2019/06/09 18:44:33 christos Exp $ +.\" $NetBSD: SSL_SESSION_get_ex_data.3,v 1.3.2.1 2021/03/28 18:21:50 martin Exp $ .\" -.\" Automatically generated by Pod::Man 4.10 (Pod::Simple 3.35) +.\" Automatically generated by Pod::Man 4.11 (Pod::Simple 3.35) .\" .\" Standard preamble: .\" ======================================================================== @@ -135,7 +135,7 @@ .\" ======================================================================== .\" .IX Title "SSL_SESSION_get_ex_data 3" -.TH SSL_SESSION_get_ex_data 3 "2018-09-23" "1.1.1c" "OpenSSL" +.TH SSL_SESSION_get_ex_data 3 "2018-09-23" "1.1.1i" "OpenSSL" .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. .if n .ad l diff --git a/crypto/external/bsd/openssl/lib/libcrypto/man/SSL_SESSION_get_protocol_version.3 b/crypto/external/bsd/openssl/lib/libcrypto/man/SSL_SESSION_get_protocol_version.3 index 26c65cff39f..aa6cecdfb3f 100644 --- a/crypto/external/bsd/openssl/lib/libcrypto/man/SSL_SESSION_get_protocol_version.3 +++ b/crypto/external/bsd/openssl/lib/libcrypto/man/SSL_SESSION_get_protocol_version.3 @@ -1,6 +1,6 @@ -.\" $NetBSD: SSL_SESSION_get_protocol_version.3,v 1.3 2019/06/09 18:44:33 christos Exp $ +.\" $NetBSD: SSL_SESSION_get_protocol_version.3,v 1.3.2.1 2021/03/28 18:21:50 martin Exp $ .\" -.\" Automatically generated by Pod::Man 4.10 (Pod::Simple 3.35) +.\" Automatically generated by Pod::Man 4.11 (Pod::Simple 3.35) .\" .\" Standard preamble: .\" ======================================================================== @@ -135,7 +135,7 @@ .\" ======================================================================== .\" .IX Title "SSL_SESSION_get_protocol_version 3" -.TH SSL_SESSION_get_protocol_version 3 "2019-03-12" "1.1.1c" "OpenSSL" +.TH SSL_SESSION_get_protocol_version 3 "2019-03-12" "1.1.1i" "OpenSSL" .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. .if n .ad l diff --git a/crypto/external/bsd/openssl/lib/libcrypto/man/SSL_SESSION_get_time.3 b/crypto/external/bsd/openssl/lib/libcrypto/man/SSL_SESSION_get_time.3 index 20c009449ff..c02b60fe614 100644 --- a/crypto/external/bsd/openssl/lib/libcrypto/man/SSL_SESSION_get_time.3 +++ b/crypto/external/bsd/openssl/lib/libcrypto/man/SSL_SESSION_get_time.3 @@ -1,6 +1,6 @@ -.\" $NetBSD: SSL_SESSION_get_time.3,v 1.19 2019/06/09 18:44:33 christos Exp $ +.\" $NetBSD: SSL_SESSION_get_time.3,v 1.19.2.1 2021/03/28 18:21:50 martin Exp $ .\" -.\" Automatically generated by Pod::Man 4.10 (Pod::Simple 3.35) +.\" Automatically generated by Pod::Man 4.11 (Pod::Simple 3.35) .\" .\" Standard preamble: .\" ======================================================================== @@ -135,7 +135,7 @@ .\" ======================================================================== .\" .IX Title "SSL_SESSION_get_time 3" -.TH SSL_SESSION_get_time 3 "2018-09-23" "1.1.1c" "OpenSSL" +.TH SSL_SESSION_get_time 3 "2018-09-23" "1.1.1i" "OpenSSL" .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. .if n .ad l diff --git a/crypto/external/bsd/openssl/lib/libcrypto/man/SSL_SESSION_has_ticket.3 b/crypto/external/bsd/openssl/lib/libcrypto/man/SSL_SESSION_has_ticket.3 index dd83affac1a..6ce33a58c76 100644 --- a/crypto/external/bsd/openssl/lib/libcrypto/man/SSL_SESSION_has_ticket.3 +++ b/crypto/external/bsd/openssl/lib/libcrypto/man/SSL_SESSION_has_ticket.3 @@ -1,6 +1,6 @@ -.\" $NetBSD: SSL_SESSION_has_ticket.3,v 1.3 2019/06/09 18:44:33 christos Exp $ +.\" $NetBSD: SSL_SESSION_has_ticket.3,v 1.3.2.1 2021/03/28 18:21:50 martin Exp $ .\" -.\" Automatically generated by Pod::Man 4.10 (Pod::Simple 3.35) +.\" Automatically generated by Pod::Man 4.11 (Pod::Simple 3.35) .\" .\" Standard preamble: .\" ======================================================================== @@ -135,7 +135,7 @@ .\" ======================================================================== .\" .IX Title "SSL_SESSION_has_ticket 3" -.TH SSL_SESSION_has_ticket 3 "2019-03-12" "1.1.1c" "OpenSSL" +.TH SSL_SESSION_has_ticket 3 "2019-03-12" "1.1.1i" "OpenSSL" .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. .if n .ad l diff --git a/crypto/external/bsd/openssl/lib/libcrypto/man/SSL_SESSION_is_resumable.3 b/crypto/external/bsd/openssl/lib/libcrypto/man/SSL_SESSION_is_resumable.3 index 1c6430ec54f..403f182d52d 100644 --- a/crypto/external/bsd/openssl/lib/libcrypto/man/SSL_SESSION_is_resumable.3 +++ b/crypto/external/bsd/openssl/lib/libcrypto/man/SSL_SESSION_is_resumable.3 @@ -1,6 +1,6 @@ -.\" $NetBSD: SSL_SESSION_is_resumable.3,v 1.2 2019/06/09 18:44:33 christos Exp $ +.\" $NetBSD: SSL_SESSION_is_resumable.3,v 1.2.4.1 2021/03/28 18:21:50 martin Exp $ .\" -.\" Automatically generated by Pod::Man 4.10 (Pod::Simple 3.35) +.\" Automatically generated by Pod::Man 4.11 (Pod::Simple 3.35) .\" .\" Standard preamble: .\" ======================================================================== @@ -135,7 +135,7 @@ .\" ======================================================================== .\" .IX Title "SSL_SESSION_is_resumable 3" -.TH SSL_SESSION_is_resumable 3 "2019-03-12" "1.1.1c" "OpenSSL" +.TH SSL_SESSION_is_resumable 3 "2019-03-12" "1.1.1i" "OpenSSL" .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. .if n .ad l diff --git a/crypto/external/bsd/openssl/lib/libcrypto/man/SSL_SESSION_print.3 b/crypto/external/bsd/openssl/lib/libcrypto/man/SSL_SESSION_print.3 index a095aa1aafe..5647089c713 100644 --- a/crypto/external/bsd/openssl/lib/libcrypto/man/SSL_SESSION_print.3 +++ b/crypto/external/bsd/openssl/lib/libcrypto/man/SSL_SESSION_print.3 @@ -1,6 +1,6 @@ -.\" $NetBSD: SSL_SESSION_print.3,v 1.3 2019/06/09 18:44:33 christos Exp $ +.\" $NetBSD: SSL_SESSION_print.3,v 1.3.2.1 2021/03/28 18:21:50 martin Exp $ .\" -.\" Automatically generated by Pod::Man 4.10 (Pod::Simple 3.35) +.\" Automatically generated by Pod::Man 4.11 (Pod::Simple 3.35) .\" .\" Standard preamble: .\" ======================================================================== @@ -135,7 +135,7 @@ .\" ======================================================================== .\" .IX Title "SSL_SESSION_print 3" -.TH SSL_SESSION_print 3 "2018-09-23" "1.1.1c" "OpenSSL" +.TH SSL_SESSION_print 3 "2018-09-23" "1.1.1i" "OpenSSL" .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. .if n .ad l diff --git a/crypto/external/bsd/openssl/lib/libcrypto/man/SSL_SESSION_set1_id.3 b/crypto/external/bsd/openssl/lib/libcrypto/man/SSL_SESSION_set1_id.3 index b76736fde03..f33c0d75021 100644 --- a/crypto/external/bsd/openssl/lib/libcrypto/man/SSL_SESSION_set1_id.3 +++ b/crypto/external/bsd/openssl/lib/libcrypto/man/SSL_SESSION_set1_id.3 @@ -1,6 +1,6 @@ -.\" $NetBSD: SSL_SESSION_set1_id.3,v 1.3 2019/06/09 18:44:33 christos Exp $ +.\" $NetBSD: SSL_SESSION_set1_id.3,v 1.3.2.1 2021/03/28 18:21:50 martin Exp $ .\" -.\" Automatically generated by Pod::Man 4.10 (Pod::Simple 3.35) +.\" Automatically generated by Pod::Man 4.11 (Pod::Simple 3.35) .\" .\" Standard preamble: .\" ======================================================================== @@ -135,7 +135,7 @@ .\" ======================================================================== .\" .IX Title "SSL_SESSION_set1_id 3" -.TH SSL_SESSION_set1_id 3 "2019-03-12" "1.1.1c" "OpenSSL" +.TH SSL_SESSION_set1_id 3 "2019-03-12" "1.1.1i" "OpenSSL" .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. .if n .ad l diff --git a/crypto/external/bsd/openssl/lib/libcrypto/man/SSL_accept.3 b/crypto/external/bsd/openssl/lib/libcrypto/man/SSL_accept.3 index 6f4affbacb4..a3b05d8dbcf 100644 --- a/crypto/external/bsd/openssl/lib/libcrypto/man/SSL_accept.3 +++ b/crypto/external/bsd/openssl/lib/libcrypto/man/SSL_accept.3 @@ -1,6 +1,6 @@ -.\" $NetBSD: SSL_accept.3,v 1.19 2019/06/09 18:44:33 christos Exp $ +.\" $NetBSD: SSL_accept.3,v 1.19.2.1 2021/03/28 18:21:50 martin Exp $ .\" -.\" Automatically generated by Pod::Man 4.10 (Pod::Simple 3.35) +.\" Automatically generated by Pod::Man 4.11 (Pod::Simple 3.35) .\" .\" Standard preamble: .\" ======================================================================== @@ -135,7 +135,7 @@ .\" ======================================================================== .\" .IX Title "SSL_accept 3" -.TH SSL_accept 3 "2018-09-23" "1.1.1c" "OpenSSL" +.TH SSL_accept 3 "2020-12-10" "1.1.1i" "OpenSSL" .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. .if n .ad l @@ -163,14 +163,14 @@ The behaviour of \fBSSL_accept()\fR depends on the underlying \s-1BIO.\s0 If the underlying \s-1BIO\s0 is \fBblocking\fR, \fBSSL_accept()\fR will only return once the handshake has been finished or an error occurred. .PP -If the underlying \s-1BIO\s0 is \fBnon-blocking\fR, \fBSSL_accept()\fR will also return +If the underlying \s-1BIO\s0 is \fBnonblocking\fR, \fBSSL_accept()\fR will also return when the underlying \s-1BIO\s0 could not satisfy the needs of \fBSSL_accept()\fR to continue the handshake, indicating the problem by the return value \-1. In this case a call to \fBSSL_get_error()\fR with the return value of \fBSSL_accept()\fR will yield \fB\s-1SSL_ERROR_WANT_READ\s0\fR or \&\fB\s-1SSL_ERROR_WANT_WRITE\s0\fR. The calling process then must repeat the call after taking appropriate action to satisfy the needs of \fBSSL_accept()\fR. -The action depends on the underlying \s-1BIO.\s0 When using a non-blocking socket, +The action depends on the underlying \s-1BIO.\s0 When using a nonblocking socket, nothing is to be done, but \fBselect()\fR can be used to check for the required condition. When using a buffering \s-1BIO,\s0 like a \s-1BIO\s0 pair, data must be written into or retrieved out of the \s-1BIO\s0 before being able to continue. @@ -189,8 +189,8 @@ established. .IX Item "<0" The \s-1TLS/SSL\s0 handshake was not successful because a fatal error occurred either at the protocol level or a connection failure occurred. The shutdown was -not clean. It can also occur of action is need to continue the operation -for non-blocking BIOs. Call \fBSSL_get_error()\fR with the return value \fBret\fR +not clean. It can also occur if action is needed to continue the operation +for nonblocking BIOs. Call \fBSSL_get_error()\fR with the return value \fBret\fR to find out the reason. .SH "SEE ALSO" .IX Header "SEE ALSO" @@ -201,7 +201,7 @@ to find out the reason. \&\fBSSL_CTX_new\fR\|(3) .SH "COPYRIGHT" .IX Header "COPYRIGHT" -Copyright 2000\-2016 The OpenSSL Project Authors. All Rights Reserved. +Copyright 2000\-2020 The OpenSSL Project Authors. All Rights Reserved. .PP Licensed under the OpenSSL license (the \*(L"License\*(R"). You may not use this file except in compliance with the License. You can obtain a copy diff --git a/crypto/external/bsd/openssl/lib/libcrypto/man/SSL_alert_type_string.3 b/crypto/external/bsd/openssl/lib/libcrypto/man/SSL_alert_type_string.3 index af7c46a20ba..e0e93451470 100644 --- a/crypto/external/bsd/openssl/lib/libcrypto/man/SSL_alert_type_string.3 +++ b/crypto/external/bsd/openssl/lib/libcrypto/man/SSL_alert_type_string.3 @@ -1,6 +1,6 @@ -.\" $NetBSD: SSL_alert_type_string.3,v 1.19 2019/06/09 18:44:33 christos Exp $ +.\" $NetBSD: SSL_alert_type_string.3,v 1.19.2.1 2021/03/28 18:21:50 martin Exp $ .\" -.\" Automatically generated by Pod::Man 4.10 (Pod::Simple 3.35) +.\" Automatically generated by Pod::Man 4.11 (Pod::Simple 3.35) .\" .\" Standard preamble: .\" ======================================================================== @@ -135,7 +135,7 @@ .\" ======================================================================== .\" .IX Title "SSL_alert_type_string 3" -.TH SSL_alert_type_string 3 "2018-09-23" "1.1.1c" "OpenSSL" +.TH SSL_alert_type_string 3 "2018-09-23" "1.1.1i" "OpenSSL" .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. .if n .ad l diff --git a/crypto/external/bsd/openssl/lib/libcrypto/man/SSL_alloc_buffers.3 b/crypto/external/bsd/openssl/lib/libcrypto/man/SSL_alloc_buffers.3 index 5c0da75f2a2..a2e3c3e8b01 100644 --- a/crypto/external/bsd/openssl/lib/libcrypto/man/SSL_alloc_buffers.3 +++ b/crypto/external/bsd/openssl/lib/libcrypto/man/SSL_alloc_buffers.3 @@ -1,6 +1,6 @@ -.\" $NetBSD: SSL_alloc_buffers.3,v 1.2 2019/06/09 18:44:33 christos Exp $ +.\" $NetBSD: SSL_alloc_buffers.3,v 1.2.4.1 2021/03/28 18:21:50 martin Exp $ .\" -.\" Automatically generated by Pod::Man 4.10 (Pod::Simple 3.35) +.\" Automatically generated by Pod::Man 4.11 (Pod::Simple 3.35) .\" .\" Standard preamble: .\" ======================================================================== @@ -135,7 +135,7 @@ .\" ======================================================================== .\" .IX Title "SSL_alloc_buffers 3" -.TH SSL_alloc_buffers 3 "2018-09-23" "1.1.1c" "OpenSSL" +.TH SSL_alloc_buffers 3 "2020-12-10" "1.1.1i" "OpenSSL" .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. .if n .ad l @@ -163,7 +163,7 @@ control when buffers are freed and allocated. .PP After freeing the buffers, the buffers are automatically reallocated upon a new read or write. The \fBSSL_alloc_buffers()\fR does not need to be called, but -can be used to make sure the buffers are pre-allocated. This can be used to +can be used to make sure the buffers are preallocated. This can be used to avoid allocation during data processing or with \fBCRYPTO_set_mem_functions()\fR to control where and how buffers are allocated. .SH "RETURN VALUES" @@ -189,7 +189,7 @@ This value is also returned if the buffers had been allocated before calling CRYPTO_set_mem_functions .SH "COPYRIGHT" .IX Header "COPYRIGHT" -Copyright 2017 The OpenSSL Project Authors. All Rights Reserved. +Copyright 2017\-2020 The OpenSSL Project Authors. All Rights Reserved. .PP Licensed under the OpenSSL license (the \*(L"License\*(R"). You may not use this file except in compliance with the License. You can obtain a copy diff --git a/crypto/external/bsd/openssl/lib/libcrypto/man/SSL_check_chain.3 b/crypto/external/bsd/openssl/lib/libcrypto/man/SSL_check_chain.3 index 9c277078d0b..602955174db 100644 --- a/crypto/external/bsd/openssl/lib/libcrypto/man/SSL_check_chain.3 +++ b/crypto/external/bsd/openssl/lib/libcrypto/man/SSL_check_chain.3 @@ -1,6 +1,6 @@ -.\" $NetBSD: SSL_check_chain.3,v 1.4 2019/06/09 18:44:33 christos Exp $ +.\" $NetBSD: SSL_check_chain.3,v 1.4.2.1 2021/03/28 18:21:50 martin Exp $ .\" -.\" Automatically generated by Pod::Man 4.10 (Pod::Simple 3.35) +.\" Automatically generated by Pod::Man 4.11 (Pod::Simple 3.35) .\" .\" Standard preamble: .\" ======================================================================== @@ -135,7 +135,7 @@ .\" ======================================================================== .\" .IX Title "SSL_check_chain 3" -.TH SSL_check_chain 3 "2018-09-23" "1.1.1c" "OpenSSL" +.TH SSL_check_chain 3 "2018-09-23" "1.1.1i" "OpenSSL" .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. .if n .ad l diff --git a/crypto/external/bsd/openssl/lib/libcrypto/man/SSL_clear.3 b/crypto/external/bsd/openssl/lib/libcrypto/man/SSL_clear.3 index 8ccef228281..41c3b703bad 100644 --- a/crypto/external/bsd/openssl/lib/libcrypto/man/SSL_clear.3 +++ b/crypto/external/bsd/openssl/lib/libcrypto/man/SSL_clear.3 @@ -1,6 +1,6 @@ -.\" $NetBSD: SSL_clear.3,v 1.19 2019/06/09 18:44:33 christos Exp $ +.\" $NetBSD: SSL_clear.3,v 1.19.2.1 2021/03/28 18:21:50 martin Exp $ .\" -.\" Automatically generated by Pod::Man 4.10 (Pod::Simple 3.35) +.\" Automatically generated by Pod::Man 4.11 (Pod::Simple 3.35) .\" .\" Standard preamble: .\" ======================================================================== @@ -135,7 +135,7 @@ .\" ======================================================================== .\" .IX Title "SSL_clear 3" -.TH SSL_clear 3 "2018-09-23" "1.1.1c" "OpenSSL" +.TH SSL_clear 3 "2018-09-23" "1.1.1i" "OpenSSL" .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. .if n .ad l diff --git a/crypto/external/bsd/openssl/lib/libcrypto/man/SSL_connect.3 b/crypto/external/bsd/openssl/lib/libcrypto/man/SSL_connect.3 index b3ffb342c06..36dffe1a681 100644 --- a/crypto/external/bsd/openssl/lib/libcrypto/man/SSL_connect.3 +++ b/crypto/external/bsd/openssl/lib/libcrypto/man/SSL_connect.3 @@ -1,6 +1,6 @@ -.\" $NetBSD: SSL_connect.3,v 1.19 2019/06/09 18:44:33 christos Exp $ +.\" $NetBSD: SSL_connect.3,v 1.19.2.1 2021/03/28 18:21:50 martin Exp $ .\" -.\" Automatically generated by Pod::Man 4.10 (Pod::Simple 3.35) +.\" Automatically generated by Pod::Man 4.11 (Pod::Simple 3.35) .\" .\" Standard preamble: .\" ======================================================================== @@ -135,7 +135,7 @@ .\" ======================================================================== .\" .IX Title "SSL_connect 3" -.TH SSL_connect 3 "2018-09-23" "1.1.1c" "OpenSSL" +.TH SSL_connect 3 "2020-12-10" "1.1.1i" "OpenSSL" .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. .if n .ad l @@ -163,14 +163,14 @@ The behaviour of \fBSSL_connect()\fR depends on the underlying \s-1BIO.\s0 If the underlying \s-1BIO\s0 is \fBblocking\fR, \fBSSL_connect()\fR will only return once the handshake has been finished or an error occurred. .PP -If the underlying \s-1BIO\s0 is \fBnon-blocking\fR, \fBSSL_connect()\fR will also return +If the underlying \s-1BIO\s0 is \fBnonblocking\fR, \fBSSL_connect()\fR will also return when the underlying \s-1BIO\s0 could not satisfy the needs of \fBSSL_connect()\fR to continue the handshake, indicating the problem by the return value \-1. In this case a call to \fBSSL_get_error()\fR with the return value of \fBSSL_connect()\fR will yield \fB\s-1SSL_ERROR_WANT_READ\s0\fR or \&\fB\s-1SSL_ERROR_WANT_WRITE\s0\fR. The calling process then must repeat the call after taking appropriate action to satisfy the needs of \fBSSL_connect()\fR. -The action depends on the underlying \s-1BIO.\s0 When using a non-blocking socket, +The action depends on the underlying \s-1BIO.\s0 When using a nonblocking socket, nothing is to be done, but \fBselect()\fR can be used to check for the required condition. When using a buffering \s-1BIO,\s0 like a \s-1BIO\s0 pair, data must be written into or retrieved out of the \s-1BIO\s0 before being able to continue. @@ -204,8 +204,8 @@ established. .IX Item "<0" The \s-1TLS/SSL\s0 handshake was not successful, because a fatal error occurred either at the protocol level or a connection failure occurred. The shutdown was -not clean. It can also occur of action is need to continue the operation -for non-blocking BIOs. Call \fBSSL_get_error()\fR with the return value \fBret\fR +not clean. It can also occur if action is needed to continue the operation +for nonblocking BIOs. Call \fBSSL_get_error()\fR with the return value \fBret\fR to find out the reason. .SH "SEE ALSO" .IX Header "SEE ALSO" @@ -216,7 +216,7 @@ to find out the reason. \&\fBSSL_CTX_new\fR\|(3) .SH "COPYRIGHT" .IX Header "COPYRIGHT" -Copyright 2000\-2018 The OpenSSL Project Authors. All Rights Reserved. +Copyright 2000\-2020 The OpenSSL Project Authors. All Rights Reserved. .PP Licensed under the OpenSSL license (the \*(L"License\*(R"). You may not use this file except in compliance with the License. You can obtain a copy diff --git a/crypto/external/bsd/openssl/lib/libcrypto/man/SSL_do_handshake.3 b/crypto/external/bsd/openssl/lib/libcrypto/man/SSL_do_handshake.3 index c47600c0e04..3080b555832 100644 --- a/crypto/external/bsd/openssl/lib/libcrypto/man/SSL_do_handshake.3 +++ b/crypto/external/bsd/openssl/lib/libcrypto/man/SSL_do_handshake.3 @@ -1,6 +1,6 @@ -.\" $NetBSD: SSL_do_handshake.3,v 1.19 2019/06/09 18:44:33 christos Exp $ +.\" $NetBSD: SSL_do_handshake.3,v 1.19.2.1 2021/03/28 18:21:50 martin Exp $ .\" -.\" Automatically generated by Pod::Man 4.10 (Pod::Simple 3.35) +.\" Automatically generated by Pod::Man 4.11 (Pod::Simple 3.35) .\" .\" Standard preamble: .\" ======================================================================== @@ -135,7 +135,7 @@ .\" ======================================================================== .\" .IX Title "SSL_do_handshake 3" -.TH SSL_do_handshake 3 "2018-09-23" "1.1.1c" "OpenSSL" +.TH SSL_do_handshake 3 "2020-12-10" "1.1.1i" "OpenSSL" .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. .if n .ad l @@ -165,13 +165,13 @@ The behaviour of \fBSSL_do_handshake()\fR depends on the underlying \s-1BIO.\s0 If the underlying \s-1BIO\s0 is \fBblocking\fR, \fBSSL_do_handshake()\fR will only return once the handshake has been finished or an error occurred. .PP -If the underlying \s-1BIO\s0 is \fBnon-blocking\fR, \fBSSL_do_handshake()\fR will also return +If the underlying \s-1BIO\s0 is \fBnonblocking\fR, \fBSSL_do_handshake()\fR will also return when the underlying \s-1BIO\s0 could not satisfy the needs of \fBSSL_do_handshake()\fR to continue the handshake. In this case a call to \fBSSL_get_error()\fR with the return value of \fBSSL_do_handshake()\fR will yield \fB\s-1SSL_ERROR_WANT_READ\s0\fR or \&\fB\s-1SSL_ERROR_WANT_WRITE\s0\fR. The calling process then must repeat the call after taking appropriate action to satisfy the needs of \fBSSL_do_handshake()\fR. -The action depends on the underlying \s-1BIO.\s0 When using a non-blocking socket, +The action depends on the underlying \s-1BIO.\s0 When using a nonblocking socket, nothing is to be done, but \fBselect()\fR can be used to check for the required condition. When using a buffering \s-1BIO,\s0 like a \s-1BIO\s0 pair, data must be written into or retrieved out of the \s-1BIO\s0 before being able to continue. @@ -190,8 +190,8 @@ established. .IX Item "<0" The \s-1TLS/SSL\s0 handshake was not successful because a fatal error occurred either at the protocol level or a connection failure occurred. The shutdown was -not clean. It can also occur of action is need to continue the operation -for non-blocking BIOs. Call \fBSSL_get_error()\fR with the return value \fBret\fR +not clean. It can also occur if action is needed to continue the operation +for nonblocking BIOs. Call \fBSSL_get_error()\fR with the return value \fBret\fR to find out the reason. .SH "SEE ALSO" .IX Header "SEE ALSO" @@ -200,7 +200,7 @@ to find out the reason. \&\fBSSL_set_connect_state\fR\|(3) .SH "COPYRIGHT" .IX Header "COPYRIGHT" -Copyright 2002\-2016 The OpenSSL Project Authors. All Rights Reserved. +Copyright 2002\-2020 The OpenSSL Project Authors. All Rights Reserved. .PP Licensed under the OpenSSL license (the \*(L"License\*(R"). You may not use this file except in compliance with the License. You can obtain a copy diff --git a/crypto/external/bsd/openssl/lib/libcrypto/man/SSL_export_keying_material.3 b/crypto/external/bsd/openssl/lib/libcrypto/man/SSL_export_keying_material.3 index 92e8b94bed5..62b931712c0 100644 --- a/crypto/external/bsd/openssl/lib/libcrypto/man/SSL_export_keying_material.3 +++ b/crypto/external/bsd/openssl/lib/libcrypto/man/SSL_export_keying_material.3 @@ -1,6 +1,6 @@ -.\" $NetBSD: SSL_export_keying_material.3,v 1.3 2019/06/09 18:44:33 christos Exp $ +.\" $NetBSD: SSL_export_keying_material.3,v 1.3.2.1 2021/03/28 18:21:50 martin Exp $ .\" -.\" Automatically generated by Pod::Man 4.10 (Pod::Simple 3.35) +.\" Automatically generated by Pod::Man 4.11 (Pod::Simple 3.35) .\" .\" Standard preamble: .\" ======================================================================== @@ -135,7 +135,7 @@ .\" ======================================================================== .\" .IX Title "SSL_export_keying_material 3" -.TH SSL_export_keying_material 3 "2019-03-12" "1.1.1c" "OpenSSL" +.TH SSL_export_keying_material 3 "2019-03-12" "1.1.1i" "OpenSSL" .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. .if n .ad l diff --git a/crypto/external/bsd/openssl/lib/libcrypto/man/SSL_extension_supported.3 b/crypto/external/bsd/openssl/lib/libcrypto/man/SSL_extension_supported.3 index 0404a16c51c..46f3e654f37 100644 --- a/crypto/external/bsd/openssl/lib/libcrypto/man/SSL_extension_supported.3 +++ b/crypto/external/bsd/openssl/lib/libcrypto/man/SSL_extension_supported.3 @@ -1,6 +1,6 @@ -.\" $NetBSD: SSL_extension_supported.3,v 1.3 2019/06/09 18:44:33 christos Exp $ +.\" $NetBSD: SSL_extension_supported.3,v 1.3.2.1 2021/03/28 18:21:50 martin Exp $ .\" -.\" Automatically generated by Pod::Man 4.10 (Pod::Simple 3.35) +.\" Automatically generated by Pod::Man 4.11 (Pod::Simple 3.35) .\" .\" Standard preamble: .\" ======================================================================== @@ -135,7 +135,7 @@ .\" ======================================================================== .\" .IX Title "SSL_extension_supported 3" -.TH SSL_extension_supported 3 "2019-03-12" "1.1.1c" "OpenSSL" +.TH SSL_extension_supported 3 "2019-03-12" "1.1.1i" "OpenSSL" .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. .if n .ad l diff --git a/crypto/external/bsd/openssl/lib/libcrypto/man/SSL_free.3 b/crypto/external/bsd/openssl/lib/libcrypto/man/SSL_free.3 index be5572a7a0c..29f20c71877 100644 --- a/crypto/external/bsd/openssl/lib/libcrypto/man/SSL_free.3 +++ b/crypto/external/bsd/openssl/lib/libcrypto/man/SSL_free.3 @@ -1,6 +1,6 @@ -.\" $NetBSD: SSL_free.3,v 1.19 2019/06/09 18:44:33 christos Exp $ +.\" $NetBSD: SSL_free.3,v 1.19.2.1 2021/03/28 18:21:50 martin Exp $ .\" -.\" Automatically generated by Pod::Man 4.10 (Pod::Simple 3.35) +.\" Automatically generated by Pod::Man 4.11 (Pod::Simple 3.35) .\" .\" Standard preamble: .\" ======================================================================== @@ -135,7 +135,7 @@ .\" ======================================================================== .\" .IX Title "SSL_free 3" -.TH SSL_free 3 "2018-09-23" "1.1.1c" "OpenSSL" +.TH SSL_free 3 "2018-09-23" "1.1.1i" "OpenSSL" .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. .if n .ad l diff --git a/crypto/external/bsd/openssl/lib/libcrypto/man/SSL_get0_peer_scts.3 b/crypto/external/bsd/openssl/lib/libcrypto/man/SSL_get0_peer_scts.3 index 2aac29cda2e..cd635badfb3 100644 --- a/crypto/external/bsd/openssl/lib/libcrypto/man/SSL_get0_peer_scts.3 +++ b/crypto/external/bsd/openssl/lib/libcrypto/man/SSL_get0_peer_scts.3 @@ -1,6 +1,6 @@ -.\" $NetBSD: SSL_get0_peer_scts.3,v 1.3 2019/06/09 18:44:33 christos Exp $ +.\" $NetBSD: SSL_get0_peer_scts.3,v 1.3.2.1 2021/03/28 18:21:50 martin Exp $ .\" -.\" Automatically generated by Pod::Man 4.10 (Pod::Simple 3.35) +.\" Automatically generated by Pod::Man 4.11 (Pod::Simple 3.35) .\" .\" Standard preamble: .\" ======================================================================== @@ -135,7 +135,7 @@ .\" ======================================================================== .\" .IX Title "SSL_get0_peer_scts 3" -.TH SSL_get0_peer_scts 3 "2018-09-23" "1.1.1c" "OpenSSL" +.TH SSL_get0_peer_scts 3 "2018-09-23" "1.1.1i" "OpenSSL" .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. .if n .ad l diff --git a/crypto/external/bsd/openssl/lib/libcrypto/man/SSL_get_SSL_CTX.3 b/crypto/external/bsd/openssl/lib/libcrypto/man/SSL_get_SSL_CTX.3 index 2d9dd04587b..c4fc782c3d2 100644 --- a/crypto/external/bsd/openssl/lib/libcrypto/man/SSL_get_SSL_CTX.3 +++ b/crypto/external/bsd/openssl/lib/libcrypto/man/SSL_get_SSL_CTX.3 @@ -1,6 +1,6 @@ -.\" $NetBSD: SSL_get_SSL_CTX.3,v 1.19 2019/06/09 18:44:33 christos Exp $ +.\" $NetBSD: SSL_get_SSL_CTX.3,v 1.19.2.1 2021/03/28 18:21:50 martin Exp $ .\" -.\" Automatically generated by Pod::Man 4.10 (Pod::Simple 3.35) +.\" Automatically generated by Pod::Man 4.11 (Pod::Simple 3.35) .\" .\" Standard preamble: .\" ======================================================================== @@ -135,7 +135,7 @@ .\" ======================================================================== .\" .IX Title "SSL_get_SSL_CTX 3" -.TH SSL_get_SSL_CTX 3 "2018-09-23" "1.1.1c" "OpenSSL" +.TH SSL_get_SSL_CTX 3 "2018-09-23" "1.1.1i" "OpenSSL" .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. .if n .ad l diff --git a/crypto/external/bsd/openssl/lib/libcrypto/man/SSL_get_all_async_fds.3 b/crypto/external/bsd/openssl/lib/libcrypto/man/SSL_get_all_async_fds.3 index 1d4efd79579..3cdd511a35d 100644 --- a/crypto/external/bsd/openssl/lib/libcrypto/man/SSL_get_all_async_fds.3 +++ b/crypto/external/bsd/openssl/lib/libcrypto/man/SSL_get_all_async_fds.3 @@ -1,6 +1,6 @@ -.\" $NetBSD: SSL_get_all_async_fds.3,v 1.3 2019/06/09 18:44:33 christos Exp $ +.\" $NetBSD: SSL_get_all_async_fds.3,v 1.3.2.1 2021/03/28 18:21:50 martin Exp $ .\" -.\" Automatically generated by Pod::Man 4.10 (Pod::Simple 3.35) +.\" Automatically generated by Pod::Man 4.11 (Pod::Simple 3.35) .\" .\" Standard preamble: .\" ======================================================================== @@ -135,7 +135,7 @@ .\" ======================================================================== .\" .IX Title "SSL_get_all_async_fds 3" -.TH SSL_get_all_async_fds 3 "2019-03-12" "1.1.1c" "OpenSSL" +.TH SSL_get_all_async_fds 3 "2020-12-10" "1.1.1i" "OpenSSL" .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. .if n .ad l @@ -171,7 +171,7 @@ appearing as \*(L"read ready\*(R" on the file descriptor (no actual data should from the file descriptor). This function should only be called if the \s-1SSL\s0 object is currently waiting for asynchronous work to complete (i.e. \&\s-1SSL_ERROR_WANT_ASYNC\s0 has been received \- see \fBSSL_get_error\fR\|(3)). Typically the -list will only contain one file descriptor. However if multiple asynchronous +list will only contain one file descriptor. However, if multiple asynchronous capable engines are in use then more than one is possible. The number of file descriptors returned is stored in \fB*numfds\fR and the file descriptors themselves are in \fB*fds\fR. The \fBfds\fR parameter may be \s-1NULL\s0 in which case no file @@ -200,7 +200,7 @@ for an async operation to complete and 0 otherwise. On Windows platforms the openssl/async.h header is dependent on some of the types customarily made available by including windows.h. The application developer is likely to require control over when the latter -is included, commonly as one of the first included headers. Therefore +is included, commonly as one of the first included headers. Therefore, it is defined as an application developer's responsibility to include windows.h prior to async.h. .SH "SEE ALSO" @@ -212,7 +212,7 @@ The \fBSSL_waiting_for_async()\fR, \fBSSL_get_all_async_fds()\fR and \fBSSL_get_changed_async_fds()\fR functions were added in OpenSSL 1.1.0. .SH "COPYRIGHT" .IX Header "COPYRIGHT" -Copyright 2016 The OpenSSL Project Authors. All Rights Reserved. +Copyright 2016\-2020 The OpenSSL Project Authors. All Rights Reserved. .PP Licensed under the OpenSSL license (the \*(L"License\*(R"). You may not use this file except in compliance with the License. You can obtain a copy diff --git a/crypto/external/bsd/openssl/lib/libcrypto/man/SSL_get_ciphers.3 b/crypto/external/bsd/openssl/lib/libcrypto/man/SSL_get_ciphers.3 index 5bc23153157..90383caebd3 100644 --- a/crypto/external/bsd/openssl/lib/libcrypto/man/SSL_get_ciphers.3 +++ b/crypto/external/bsd/openssl/lib/libcrypto/man/SSL_get_ciphers.3 @@ -1,6 +1,6 @@ -.\" $NetBSD: SSL_get_ciphers.3,v 1.19 2019/06/09 18:44:33 christos Exp $ +.\" $NetBSD: SSL_get_ciphers.3,v 1.19.2.1 2021/03/28 18:21:50 martin Exp $ .\" -.\" Automatically generated by Pod::Man 4.10 (Pod::Simple 3.35) +.\" Automatically generated by Pod::Man 4.11 (Pod::Simple 3.35) .\" .\" Standard preamble: .\" ======================================================================== @@ -135,7 +135,7 @@ .\" ======================================================================== .\" .IX Title "SSL_get_ciphers 3" -.TH SSL_get_ciphers 3 "2018-09-23" "1.1.1c" "OpenSSL" +.TH SSL_get_ciphers 3 "2018-09-23" "1.1.1i" "OpenSSL" .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. .if n .ad l diff --git a/crypto/external/bsd/openssl/lib/libcrypto/man/SSL_get_client_random.3 b/crypto/external/bsd/openssl/lib/libcrypto/man/SSL_get_client_random.3 index e63e84881cf..ab3b464b30c 100644 --- a/crypto/external/bsd/openssl/lib/libcrypto/man/SSL_get_client_random.3 +++ b/crypto/external/bsd/openssl/lib/libcrypto/man/SSL_get_client_random.3 @@ -1,6 +1,6 @@ -.\" $NetBSD: SSL_get_client_random.3,v 1.3 2019/06/09 18:44:33 christos Exp $ +.\" $NetBSD: SSL_get_client_random.3,v 1.3.2.1 2021/03/28 18:21:50 martin Exp $ .\" -.\" Automatically generated by Pod::Man 4.10 (Pod::Simple 3.35) +.\" Automatically generated by Pod::Man 4.11 (Pod::Simple 3.35) .\" .\" Standard preamble: .\" ======================================================================== @@ -135,7 +135,7 @@ .\" ======================================================================== .\" .IX Title "SSL_get_client_random 3" -.TH SSL_get_client_random 3 "2018-09-23" "1.1.1c" "OpenSSL" +.TH SSL_get_client_random 3 "2018-09-23" "1.1.1i" "OpenSSL" .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. .if n .ad l diff --git a/crypto/external/bsd/openssl/lib/libcrypto/man/SSL_get_current_cipher.3 b/crypto/external/bsd/openssl/lib/libcrypto/man/SSL_get_current_cipher.3 index 2d3b1796300..0b46c44a9fb 100644 --- a/crypto/external/bsd/openssl/lib/libcrypto/man/SSL_get_current_cipher.3 +++ b/crypto/external/bsd/openssl/lib/libcrypto/man/SSL_get_current_cipher.3 @@ -1,6 +1,6 @@ -.\" $NetBSD: SSL_get_current_cipher.3,v 1.19 2019/06/09 18:44:33 christos Exp $ +.\" $NetBSD: SSL_get_current_cipher.3,v 1.19.2.1 2021/03/28 18:21:50 martin Exp $ .\" -.\" Automatically generated by Pod::Man 4.10 (Pod::Simple 3.35) +.\" Automatically generated by Pod::Man 4.11 (Pod::Simple 3.35) .\" .\" Standard preamble: .\" ======================================================================== @@ -135,7 +135,7 @@ .\" ======================================================================== .\" .IX Title "SSL_get_current_cipher 3" -.TH SSL_get_current_cipher 3 "2018-09-23" "1.1.1c" "OpenSSL" +.TH SSL_get_current_cipher 3 "2018-09-23" "1.1.1i" "OpenSSL" .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. .if n .ad l diff --git a/crypto/external/bsd/openssl/lib/libcrypto/man/SSL_get_default_timeout.3 b/crypto/external/bsd/openssl/lib/libcrypto/man/SSL_get_default_timeout.3 index 3707c3d8114..7ab8b551bc7 100644 --- a/crypto/external/bsd/openssl/lib/libcrypto/man/SSL_get_default_timeout.3 +++ b/crypto/external/bsd/openssl/lib/libcrypto/man/SSL_get_default_timeout.3 @@ -1,6 +1,6 @@ -.\" $NetBSD: SSL_get_default_timeout.3,v 1.19 2019/06/09 18:44:33 christos Exp $ +.\" $NetBSD: SSL_get_default_timeout.3,v 1.19.2.1 2021/03/28 18:21:50 martin Exp $ .\" -.\" Automatically generated by Pod::Man 4.10 (Pod::Simple 3.35) +.\" Automatically generated by Pod::Man 4.11 (Pod::Simple 3.35) .\" .\" Standard preamble: .\" ======================================================================== @@ -135,7 +135,7 @@ .\" ======================================================================== .\" .IX Title "SSL_get_default_timeout 3" -.TH SSL_get_default_timeout 3 "2018-09-23" "1.1.1c" "OpenSSL" +.TH SSL_get_default_timeout 3 "2018-09-23" "1.1.1i" "OpenSSL" .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. .if n .ad l diff --git a/crypto/external/bsd/openssl/lib/libcrypto/man/SSL_get_error.3 b/crypto/external/bsd/openssl/lib/libcrypto/man/SSL_get_error.3 index 363d3ae7258..ac282e9649a 100644 --- a/crypto/external/bsd/openssl/lib/libcrypto/man/SSL_get_error.3 +++ b/crypto/external/bsd/openssl/lib/libcrypto/man/SSL_get_error.3 @@ -1,6 +1,6 @@ -.\" $NetBSD: SSL_get_error.3,v 1.19 2019/06/09 18:44:33 christos Exp $ +.\" $NetBSD: SSL_get_error.3,v 1.19.2.1 2021/03/28 18:21:50 martin Exp $ .\" -.\" Automatically generated by Pod::Man 4.10 (Pod::Simple 3.35) +.\" Automatically generated by Pod::Man 4.11 (Pod::Simple 3.35) .\" .\" Standard preamble: .\" ======================================================================== @@ -135,7 +135,7 @@ .\" ======================================================================== .\" .IX Title "SSL_get_error 3" -.TH SSL_get_error 3 "2019-06-09" "1.1.1c" "OpenSSL" +.TH SSL_get_error 3 "2020-12-10" "1.1.1i" "OpenSSL" .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. .if n .ad l @@ -155,9 +155,9 @@ libcrypto, -lcrypto .IX Header "DESCRIPTION" \&\fBSSL_get_error()\fR returns a result code (suitable for the C \*(L"switch\*(R" statement) for a preceding call to \fBSSL_connect()\fR, \fBSSL_accept()\fR, \fBSSL_do_handshake()\fR, -\&\fBSSL_read_ex()\fR, \fBSSL_read()\fR, \fBSSL_peek_ex()\fR, \fBSSL_peek()\fR, \fBSSL_write_ex()\fR or -\&\fBSSL_write()\fR on \fBssl\fR. The value returned by that \s-1TLS/SSL I/O\s0 function must be -passed to \fBSSL_get_error()\fR in parameter \fBret\fR. +\&\fBSSL_read_ex()\fR, \fBSSL_read()\fR, \fBSSL_peek_ex()\fR, \fBSSL_peek()\fR, \fBSSL_shutdown()\fR, +\&\fBSSL_write_ex()\fR or \fBSSL_write()\fR on \fBssl\fR. The value returned by that \s-1TLS/SSL I/O\s0 +function must be passed to \fBSSL_get_error()\fR in parameter \fBret\fR. .PP In addition to \fBssl\fR and \fBret\fR, \fBSSL_get_error()\fR inspects the current thread's OpenSSL error queue. Thus, \fBSSL_get_error()\fR must be @@ -184,7 +184,7 @@ indicate that the underlying transport has been closed. The operation did not complete and can be retried later. .Sp \&\fB\s-1SSL_ERROR_WANT_READ\s0\fR is returned when the last operation was a read -operation from a non-blocking \fB\s-1BIO\s0\fR. +operation from a nonblocking \fB\s-1BIO\s0\fR. It means that not enough data was available at this time to complete the operation. If at a later time the underlying \fB\s-1BIO\s0\fR has data available for reading the same @@ -196,8 +196,8 @@ for a blocking \fB\s-1BIO\s0\fR. See \fBSSL_read\fR\|(3) for more information. .Sp \&\fB\s-1SSL_ERROR_WANT_WRITE\s0\fR is returned when the last operation was a write -to a non-blocking \fB\s-1BIO\s0\fR and it was unable to sent all data to the \fB\s-1BIO\s0\fR. -When the \fB\s-1BIO\s0\fR is writeable again, the same function can be called again. +to a nonblocking \fB\s-1BIO\s0\fR and it was unable to sent all data to the \fB\s-1BIO\s0\fR. +When the \fB\s-1BIO\s0\fR is writable again, the same function can be called again. .Sp Note that the retry may again lead to an \fB\s-1SSL_ERROR_WANT_READ\s0\fR or \&\fB\s-1SSL_ERROR_WANT_WRITE\s0\fR condition. @@ -207,7 +207,7 @@ protocol level. .Sp It is safe to call \fBSSL_read()\fR or \fBSSL_read_ex()\fR when more data is available even when the call that set this error was an \fBSSL_write()\fR or \fBSSL_write_ex()\fR. -However if the call was an \fBSSL_write()\fR or \fBSSL_write_ex()\fR, it should be called +However, if the call was an \fBSSL_write()\fR or \fBSSL_write_ex()\fR, it should be called again to continue sending the application data. .Sp For socket \fB\s-1BIO\s0\fRs (e.g. when \fBSSL_set_fd()\fR was used), \fBselect()\fR or @@ -280,6 +280,17 @@ A non-recoverable, fatal error in the \s-1SSL\s0 library occurred, usually a pro error. The OpenSSL error queue contains more information on the error. If this error occurs then no further I/O operations should be performed on the connection and \fBSSL_shutdown()\fR must not be called. +.SH "BUGS" +.IX Header "BUGS" +The \fB\s-1SSL_ERROR_SYSCALL\s0\fR with \fBerrno\fR value of 0 indicates unexpected \s-1EOF\s0 from +the peer. This will be properly reported as \fB\s-1SSL_ERROR_SSL\s0\fR with reason +code \fB\s-1SSL_R_UNEXPECTED_EOF_WHILE_READING\s0\fR in the OpenSSL 3.0 release because +it is truly a \s-1TLS\s0 protocol error to terminate the connection without +a \fBSSL_shutdown()\fR. +.PP +The issue is kept unfixed in OpenSSL 1.1.1 releases because many applications +which choose to ignore this protocol error depend on the existing way of +reporting the error. .SH "SEE ALSO" .IX Header "SEE ALSO" \&\fBssl\fR\|(7) @@ -289,7 +300,7 @@ The \s-1SSL_ERROR_WANT_ASYNC\s0 error code was added in OpenSSL 1.1.0. The \s-1SSL_ERROR_WANT_CLIENT_HELLO_CB\s0 error code was added in OpenSSL 1.1.1. .SH "COPYRIGHT" .IX Header "COPYRIGHT" -Copyright 2000\-2019 The OpenSSL Project Authors. All Rights Reserved. +Copyright 2000\-2020 The OpenSSL Project Authors. All Rights Reserved. .PP Licensed under the OpenSSL license (the \*(L"License\*(R"). You may not use this file except in compliance with the License. You can obtain a copy diff --git a/crypto/external/bsd/openssl/lib/libcrypto/man/SSL_get_extms_support.3 b/crypto/external/bsd/openssl/lib/libcrypto/man/SSL_get_extms_support.3 index 6f2682783cd..677cfc5f7bd 100644 --- a/crypto/external/bsd/openssl/lib/libcrypto/man/SSL_get_extms_support.3 +++ b/crypto/external/bsd/openssl/lib/libcrypto/man/SSL_get_extms_support.3 @@ -1,6 +1,6 @@ -.\" $NetBSD: SSL_get_extms_support.3,v 1.3 2019/06/09 18:44:33 christos Exp $ +.\" $NetBSD: SSL_get_extms_support.3,v 1.3.2.1 2021/03/28 18:21:50 martin Exp $ .\" -.\" Automatically generated by Pod::Man 4.10 (Pod::Simple 3.35) +.\" Automatically generated by Pod::Man 4.11 (Pod::Simple 3.35) .\" .\" Standard preamble: .\" ======================================================================== @@ -135,7 +135,7 @@ .\" ======================================================================== .\" .IX Title "SSL_get_extms_support 3" -.TH SSL_get_extms_support 3 "2018-09-23" "1.1.1c" "OpenSSL" +.TH SSL_get_extms_support 3 "2018-09-23" "1.1.1i" "OpenSSL" .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. .if n .ad l diff --git a/crypto/external/bsd/openssl/lib/libcrypto/man/SSL_get_fd.3 b/crypto/external/bsd/openssl/lib/libcrypto/man/SSL_get_fd.3 index f539f402d30..37a924201df 100644 --- a/crypto/external/bsd/openssl/lib/libcrypto/man/SSL_get_fd.3 +++ b/crypto/external/bsd/openssl/lib/libcrypto/man/SSL_get_fd.3 @@ -1,6 +1,6 @@ -.\" $NetBSD: SSL_get_fd.3,v 1.19 2019/06/09 18:44:33 christos Exp $ +.\" $NetBSD: SSL_get_fd.3,v 1.19.2.1 2021/03/28 18:21:50 martin Exp $ .\" -.\" Automatically generated by Pod::Man 4.10 (Pod::Simple 3.35) +.\" Automatically generated by Pod::Man 4.11 (Pod::Simple 3.35) .\" .\" Standard preamble: .\" ======================================================================== @@ -135,7 +135,7 @@ .\" ======================================================================== .\" .IX Title "SSL_get_fd 3" -.TH SSL_get_fd 3 "2018-09-23" "1.1.1c" "OpenSSL" +.TH SSL_get_fd 3 "2018-09-23" "1.1.1i" "OpenSSL" .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. .if n .ad l diff --git a/crypto/external/bsd/openssl/lib/libcrypto/man/SSL_get_peer_cert_chain.3 b/crypto/external/bsd/openssl/lib/libcrypto/man/SSL_get_peer_cert_chain.3 index 2ea6c21e685..675af1f5062 100644 --- a/crypto/external/bsd/openssl/lib/libcrypto/man/SSL_get_peer_cert_chain.3 +++ b/crypto/external/bsd/openssl/lib/libcrypto/man/SSL_get_peer_cert_chain.3 @@ -1,6 +1,6 @@ -.\" $NetBSD: SSL_get_peer_cert_chain.3,v 1.19 2019/06/09 18:44:33 christos Exp $ +.\" $NetBSD: SSL_get_peer_cert_chain.3,v 1.19.2.1 2021/03/28 18:21:50 martin Exp $ .\" -.\" Automatically generated by Pod::Man 4.10 (Pod::Simple 3.35) +.\" Automatically generated by Pod::Man 4.11 (Pod::Simple 3.35) .\" .\" Standard preamble: .\" ======================================================================== @@ -135,7 +135,7 @@ .\" ======================================================================== .\" .IX Title "SSL_get_peer_cert_chain 3" -.TH SSL_get_peer_cert_chain 3 "2018-09-23" "1.1.1c" "OpenSSL" +.TH SSL_get_peer_cert_chain 3 "2018-09-23" "1.1.1i" "OpenSSL" .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. .if n .ad l diff --git a/crypto/external/bsd/openssl/lib/libcrypto/man/SSL_get_peer_certificate.3 b/crypto/external/bsd/openssl/lib/libcrypto/man/SSL_get_peer_certificate.3 index f57b32ea73c..c53d8ea6286 100644 --- a/crypto/external/bsd/openssl/lib/libcrypto/man/SSL_get_peer_certificate.3 +++ b/crypto/external/bsd/openssl/lib/libcrypto/man/SSL_get_peer_certificate.3 @@ -1,6 +1,6 @@ -.\" $NetBSD: SSL_get_peer_certificate.3,v 1.19 2019/06/09 18:44:33 christos Exp $ +.\" $NetBSD: SSL_get_peer_certificate.3,v 1.19.2.1 2021/03/28 18:21:50 martin Exp $ .\" -.\" Automatically generated by Pod::Man 4.10 (Pod::Simple 3.35) +.\" Automatically generated by Pod::Man 4.11 (Pod::Simple 3.35) .\" .\" Standard preamble: .\" ======================================================================== @@ -135,7 +135,7 @@ .\" ======================================================================== .\" .IX Title "SSL_get_peer_certificate 3" -.TH SSL_get_peer_certificate 3 "2018-09-23" "1.1.1c" "OpenSSL" +.TH SSL_get_peer_certificate 3 "2018-09-23" "1.1.1i" "OpenSSL" .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. .if n .ad l diff --git a/crypto/external/bsd/openssl/lib/libcrypto/man/SSL_get_peer_signature_nid.3 b/crypto/external/bsd/openssl/lib/libcrypto/man/SSL_get_peer_signature_nid.3 index 67440e4b882..0261dcd002d 100644 --- a/crypto/external/bsd/openssl/lib/libcrypto/man/SSL_get_peer_signature_nid.3 +++ b/crypto/external/bsd/openssl/lib/libcrypto/man/SSL_get_peer_signature_nid.3 @@ -1,6 +1,6 @@ -.\" $NetBSD: SSL_get_peer_signature_nid.3,v 1.2 2019/06/09 18:44:33 christos Exp $ +.\" $NetBSD: SSL_get_peer_signature_nid.3,v 1.2.4.1 2021/03/28 18:21:50 martin Exp $ .\" -.\" Automatically generated by Pod::Man 4.10 (Pod::Simple 3.35) +.\" Automatically generated by Pod::Man 4.11 (Pod::Simple 3.35) .\" .\" Standard preamble: .\" ======================================================================== @@ -135,7 +135,7 @@ .\" ======================================================================== .\" .IX Title "SSL_get_peer_signature_nid 3" -.TH SSL_get_peer_signature_nid 3 "2018-12-08" "1.1.1c" "OpenSSL" +.TH SSL_get_peer_signature_nid 3 "2018-12-08" "1.1.1i" "OpenSSL" .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. .if n .ad l diff --git a/crypto/external/bsd/openssl/lib/libcrypto/man/SSL_get_peer_tmp_key.3 b/crypto/external/bsd/openssl/lib/libcrypto/man/SSL_get_peer_tmp_key.3 index 78bdb176d51..754aafaae42 100644 --- a/crypto/external/bsd/openssl/lib/libcrypto/man/SSL_get_peer_tmp_key.3 +++ b/crypto/external/bsd/openssl/lib/libcrypto/man/SSL_get_peer_tmp_key.3 @@ -1,6 +1,6 @@ -.\" $NetBSD: SSL_get_peer_tmp_key.3,v 1.1 2019/06/09 18:44:33 christos Exp $ +.\" $NetBSD: SSL_get_peer_tmp_key.3,v 1.1.4.1 2021/03/28 18:21:50 martin Exp $ .\" -.\" Automatically generated by Pod::Man 4.10 (Pod::Simple 3.35) +.\" Automatically generated by Pod::Man 4.11 (Pod::Simple 3.35) .\" .\" Standard preamble: .\" ======================================================================== @@ -135,7 +135,7 @@ .\" ======================================================================== .\" .IX Title "SSL_get_peer_tmp_key 3" -.TH SSL_get_peer_tmp_key 3 "2018-12-08" "1.1.1c" "OpenSSL" +.TH SSL_get_peer_tmp_key 3 "2018-12-08" "1.1.1i" "OpenSSL" .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. .if n .ad l diff --git a/crypto/external/bsd/openssl/lib/libcrypto/man/SSL_get_psk_identity.3 b/crypto/external/bsd/openssl/lib/libcrypto/man/SSL_get_psk_identity.3 index 22fba24d327..aebdce41c69 100644 --- a/crypto/external/bsd/openssl/lib/libcrypto/man/SSL_get_psk_identity.3 +++ b/crypto/external/bsd/openssl/lib/libcrypto/man/SSL_get_psk_identity.3 @@ -1,6 +1,6 @@ -.\" $NetBSD: SSL_get_psk_identity.3,v 1.19 2019/06/09 18:44:33 christos Exp $ +.\" $NetBSD: SSL_get_psk_identity.3,v 1.19.2.1 2021/03/28 18:21:50 martin Exp $ .\" -.\" Automatically generated by Pod::Man 4.10 (Pod::Simple 3.35) +.\" Automatically generated by Pod::Man 4.11 (Pod::Simple 3.35) .\" .\" Standard preamble: .\" ======================================================================== @@ -135,7 +135,7 @@ .\" ======================================================================== .\" .IX Title "SSL_get_psk_identity 3" -.TH SSL_get_psk_identity 3 "2018-09-23" "1.1.1c" "OpenSSL" +.TH SSL_get_psk_identity 3 "2018-09-23" "1.1.1i" "OpenSSL" .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. .if n .ad l diff --git a/crypto/external/bsd/openssl/lib/libcrypto/man/SSL_get_rbio.3 b/crypto/external/bsd/openssl/lib/libcrypto/man/SSL_get_rbio.3 index cd630dcd188..c00143ad4ff 100644 --- a/crypto/external/bsd/openssl/lib/libcrypto/man/SSL_get_rbio.3 +++ b/crypto/external/bsd/openssl/lib/libcrypto/man/SSL_get_rbio.3 @@ -1,6 +1,6 @@ -.\" $NetBSD: SSL_get_rbio.3,v 1.19 2019/06/09 18:44:33 christos Exp $ +.\" $NetBSD: SSL_get_rbio.3,v 1.19.2.1 2021/03/28 18:21:50 martin Exp $ .\" -.\" Automatically generated by Pod::Man 4.10 (Pod::Simple 3.35) +.\" Automatically generated by Pod::Man 4.11 (Pod::Simple 3.35) .\" .\" Standard preamble: .\" ======================================================================== @@ -135,7 +135,7 @@ .\" ======================================================================== .\" .IX Title "SSL_get_rbio 3" -.TH SSL_get_rbio 3 "2018-09-23" "1.1.1c" "OpenSSL" +.TH SSL_get_rbio 3 "2018-09-23" "1.1.1i" "OpenSSL" .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. .if n .ad l diff --git a/crypto/external/bsd/openssl/lib/libcrypto/man/SSL_get_session.3 b/crypto/external/bsd/openssl/lib/libcrypto/man/SSL_get_session.3 index 4d0ad466e53..872f8441c38 100644 --- a/crypto/external/bsd/openssl/lib/libcrypto/man/SSL_get_session.3 +++ b/crypto/external/bsd/openssl/lib/libcrypto/man/SSL_get_session.3 @@ -1,6 +1,6 @@ -.\" $NetBSD: SSL_get_session.3,v 1.19 2019/06/09 18:44:33 christos Exp $ +.\" $NetBSD: SSL_get_session.3,v 1.19.2.1 2021/03/28 18:21:50 martin Exp $ .\" -.\" Automatically generated by Pod::Man 4.10 (Pod::Simple 3.35) +.\" Automatically generated by Pod::Man 4.11 (Pod::Simple 3.35) .\" .\" Standard preamble: .\" ======================================================================== @@ -135,7 +135,7 @@ .\" ======================================================================== .\" .IX Title "SSL_get_session 3" -.TH SSL_get_session 3 "2018-09-23" "1.1.1c" "OpenSSL" +.TH SSL_get_session 3 "2018-09-23" "1.1.1i" "OpenSSL" .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. .if n .ad l diff --git a/crypto/external/bsd/openssl/lib/libcrypto/man/SSL_get_shared_sigalgs.3 b/crypto/external/bsd/openssl/lib/libcrypto/man/SSL_get_shared_sigalgs.3 index 1303e206d6b..5e185eb3b82 100644 --- a/crypto/external/bsd/openssl/lib/libcrypto/man/SSL_get_shared_sigalgs.3 +++ b/crypto/external/bsd/openssl/lib/libcrypto/man/SSL_get_shared_sigalgs.3 @@ -1,6 +1,6 @@ -.\" $NetBSD: SSL_get_shared_sigalgs.3,v 1.3 2019/06/09 18:44:33 christos Exp $ +.\" $NetBSD: SSL_get_shared_sigalgs.3,v 1.3.2.1 2021/03/28 18:21:50 martin Exp $ .\" -.\" Automatically generated by Pod::Man 4.10 (Pod::Simple 3.35) +.\" Automatically generated by Pod::Man 4.11 (Pod::Simple 3.35) .\" .\" Standard preamble: .\" ======================================================================== @@ -135,7 +135,7 @@ .\" ======================================================================== .\" .IX Title "SSL_get_shared_sigalgs 3" -.TH SSL_get_shared_sigalgs 3 "2018-09-23" "1.1.1c" "OpenSSL" +.TH SSL_get_shared_sigalgs 3 "2018-09-23" "1.1.1i" "OpenSSL" .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. .if n .ad l diff --git a/crypto/external/bsd/openssl/lib/libcrypto/man/SSL_get_verify_result.3 b/crypto/external/bsd/openssl/lib/libcrypto/man/SSL_get_verify_result.3 index ceda6e16a86..c9ec9a71440 100644 --- a/crypto/external/bsd/openssl/lib/libcrypto/man/SSL_get_verify_result.3 +++ b/crypto/external/bsd/openssl/lib/libcrypto/man/SSL_get_verify_result.3 @@ -1,6 +1,6 @@ -.\" $NetBSD: SSL_get_verify_result.3,v 1.19 2019/06/09 18:44:33 christos Exp $ +.\" $NetBSD: SSL_get_verify_result.3,v 1.19.2.1 2021/03/28 18:21:50 martin Exp $ .\" -.\" Automatically generated by Pod::Man 4.10 (Pod::Simple 3.35) +.\" Automatically generated by Pod::Man 4.11 (Pod::Simple 3.35) .\" .\" Standard preamble: .\" ======================================================================== @@ -135,7 +135,7 @@ .\" ======================================================================== .\" .IX Title "SSL_get_verify_result 3" -.TH SSL_get_verify_result 3 "2018-09-23" "1.1.1c" "OpenSSL" +.TH SSL_get_verify_result 3 "2018-09-23" "1.1.1i" "OpenSSL" .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. .if n .ad l diff --git a/crypto/external/bsd/openssl/lib/libcrypto/man/SSL_get_version.3 b/crypto/external/bsd/openssl/lib/libcrypto/man/SSL_get_version.3 index aca6fb3dfe9..c7b56f17307 100644 --- a/crypto/external/bsd/openssl/lib/libcrypto/man/SSL_get_version.3 +++ b/crypto/external/bsd/openssl/lib/libcrypto/man/SSL_get_version.3 @@ -1,6 +1,6 @@ -.\" $NetBSD: SSL_get_version.3,v 1.19 2019/06/09 18:44:33 christos Exp $ +.\" $NetBSD: SSL_get_version.3,v 1.19.2.1 2021/03/28 18:21:50 martin Exp $ .\" -.\" Automatically generated by Pod::Man 4.10 (Pod::Simple 3.35) +.\" Automatically generated by Pod::Man 4.11 (Pod::Simple 3.35) .\" .\" Standard preamble: .\" ======================================================================== @@ -135,7 +135,7 @@ .\" ======================================================================== .\" .IX Title "SSL_get_version 3" -.TH SSL_get_version 3 "2019-03-12" "1.1.1c" "OpenSSL" +.TH SSL_get_version 3 "2019-03-12" "1.1.1i" "OpenSSL" .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. .if n .ad l diff --git a/crypto/external/bsd/openssl/lib/libcrypto/man/SSL_in_init.3 b/crypto/external/bsd/openssl/lib/libcrypto/man/SSL_in_init.3 index aad602cf4f2..8b7888e2a04 100644 --- a/crypto/external/bsd/openssl/lib/libcrypto/man/SSL_in_init.3 +++ b/crypto/external/bsd/openssl/lib/libcrypto/man/SSL_in_init.3 @@ -1,6 +1,6 @@ -.\" $NetBSD: SSL_in_init.3,v 1.2 2019/06/09 18:44:33 christos Exp $ +.\" $NetBSD: SSL_in_init.3,v 1.2.4.1 2021/03/28 18:21:50 martin Exp $ .\" -.\" Automatically generated by Pod::Man 4.10 (Pod::Simple 3.35) +.\" Automatically generated by Pod::Man 4.11 (Pod::Simple 3.35) .\" .\" Standard preamble: .\" ======================================================================== @@ -135,7 +135,7 @@ .\" ======================================================================== .\" .IX Title "SSL_in_init 3" -.TH SSL_in_init 3 "2018-09-23" "1.1.1c" "OpenSSL" +.TH SSL_in_init 3 "2018-09-23" "1.1.1i" "OpenSSL" .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. .if n .ad l diff --git a/crypto/external/bsd/openssl/lib/libcrypto/man/SSL_key_update.3 b/crypto/external/bsd/openssl/lib/libcrypto/man/SSL_key_update.3 index a2b7c9ce661..a78877056b4 100644 --- a/crypto/external/bsd/openssl/lib/libcrypto/man/SSL_key_update.3 +++ b/crypto/external/bsd/openssl/lib/libcrypto/man/SSL_key_update.3 @@ -1,6 +1,6 @@ -.\" $NetBSD: SSL_key_update.3,v 1.2 2019/06/09 18:44:33 christos Exp $ +.\" $NetBSD: SSL_key_update.3,v 1.2.4.1 2021/03/28 18:21:50 martin Exp $ .\" -.\" Automatically generated by Pod::Man 4.10 (Pod::Simple 3.35) +.\" Automatically generated by Pod::Man 4.11 (Pod::Simple 3.35) .\" .\" Standard preamble: .\" ======================================================================== @@ -135,7 +135,7 @@ .\" ======================================================================== .\" .IX Title "SSL_key_update 3" -.TH SSL_key_update 3 "2019-03-12" "1.1.1c" "OpenSSL" +.TH SSL_key_update 3 "2019-03-12" "1.1.1i" "OpenSSL" .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. .if n .ad l diff --git a/crypto/external/bsd/openssl/lib/libcrypto/man/SSL_library_init.3 b/crypto/external/bsd/openssl/lib/libcrypto/man/SSL_library_init.3 index 9005c3eb1b6..737e2558f15 100644 --- a/crypto/external/bsd/openssl/lib/libcrypto/man/SSL_library_init.3 +++ b/crypto/external/bsd/openssl/lib/libcrypto/man/SSL_library_init.3 @@ -1,6 +1,6 @@ -.\" $NetBSD: SSL_library_init.3,v 1.19 2019/06/09 18:44:33 christos Exp $ +.\" $NetBSD: SSL_library_init.3,v 1.19.2.1 2021/03/28 18:21:50 martin Exp $ .\" -.\" Automatically generated by Pod::Man 4.10 (Pod::Simple 3.35) +.\" Automatically generated by Pod::Man 4.11 (Pod::Simple 3.35) .\" .\" Standard preamble: .\" ======================================================================== @@ -135,7 +135,7 @@ .\" ======================================================================== .\" .IX Title "SSL_library_init 3" -.TH SSL_library_init 3 "2018-09-23" "1.1.1c" "OpenSSL" +.TH SSL_library_init 3 "2020-01-23" "1.1.1i" "OpenSSL" .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. .if n .ad l @@ -164,8 +164,8 @@ implemented as a macro. .IX Header "NOTES" \&\fBSSL_library_init()\fR must be called before any other action takes place. \&\fBSSL_library_init()\fR is not reentrant. -.SH "WARNING" -.IX Header "WARNING" +.SH "WARNINGS" +.IX Header "WARNINGS" \&\fBSSL_library_init()\fR adds ciphers and digests used directly and indirectly by \&\s-1SSL/TLS.\s0 .SH "RETURN VALUES" @@ -182,7 +182,7 @@ The \fBSSL_library_init()\fR and \fBOpenSSL_add_ssl_algorithms()\fR functions we deprecated in OpenSSL 1.1.0 by \fBOPENSSL_init_ssl()\fR. .SH "COPYRIGHT" .IX Header "COPYRIGHT" -Copyright 2000\-2016 The OpenSSL Project Authors. All Rights Reserved. +Copyright 2000\-2019 The OpenSSL Project Authors. All Rights Reserved. .PP Licensed under the OpenSSL license (the \*(L"License\*(R"). You may not use this file except in compliance with the License. You can obtain a copy diff --git a/crypto/external/bsd/openssl/lib/libcrypto/man/SSL_load_client_CA_file.3 b/crypto/external/bsd/openssl/lib/libcrypto/man/SSL_load_client_CA_file.3 index 3c35523b346..d5f7a93c9b1 100644 --- a/crypto/external/bsd/openssl/lib/libcrypto/man/SSL_load_client_CA_file.3 +++ b/crypto/external/bsd/openssl/lib/libcrypto/man/SSL_load_client_CA_file.3 @@ -1,6 +1,6 @@ -.\" $NetBSD: SSL_load_client_CA_file.3,v 1.19 2019/06/09 18:44:33 christos Exp $ +.\" $NetBSD: SSL_load_client_CA_file.3,v 1.19.2.1 2021/03/28 18:21:50 martin Exp $ .\" -.\" Automatically generated by Pod::Man 4.10 (Pod::Simple 3.35) +.\" Automatically generated by Pod::Man 4.11 (Pod::Simple 3.35) .\" .\" Standard preamble: .\" ======================================================================== @@ -135,13 +135,16 @@ .\" ======================================================================== .\" .IX Title "SSL_load_client_CA_file 3" -.TH SSL_load_client_CA_file 3 "2019-06-09" "1.1.1c" "OpenSSL" +.TH SSL_load_client_CA_file 3 "2020-03-22" "1.1.1i" "OpenSSL" .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. .if n .ad l .nh .SH "NAME" -SSL_load_client_CA_file \- load certificate names from file +SSL_load_client_CA_file, +SSL_add_file_cert_subjects_to_stack, +SSL_add_dir_cert_subjects_to_stack +\&\- load certificate names .SH "LIBRARY" libcrypto, -lcrypto .SH "SYNOPSIS" @@ -150,11 +153,23 @@ libcrypto, -lcrypto \& #include <openssl/ssl.h> \& \& STACK_OF(X509_NAME) *SSL_load_client_CA_file(const char *file); +\& +\& int SSL_add_file_cert_subjects_to_stack(STACK_OF(X509_NAME) *stack, +\& const char *file) +\& int SSL_add_dir_cert_subjects_to_stack(STACK_OF(X509_NAME) *stack, +\& const char *dir) .Ve .SH "DESCRIPTION" .IX Header "DESCRIPTION" -\&\fBSSL_load_client_CA_file()\fR reads certificates from \fBfile\fR and returns +\&\fBSSL_load_client_CA_file()\fR reads certificates from \fIfile\fR and returns a \s-1STACK_OF\s0(X509_NAME) with the subject names found. +.PP +\&\fBSSL_add_file_cert_subjects_to_stack()\fR reads certificates from \fIfile\fR, +and adds their subject name to the already existing \fIstack\fR. +.PP +\&\fBSSL_add_dir_cert_subjects_to_stack()\fR reads certificates from every +file in the directory \fIdir\fR, and adds their subject name to the +already existing \fIstack\fR. .SH "NOTES" .IX Header "NOTES" \&\fBSSL_load_client_CA_file()\fR reads a file of \s-1PEM\s0 formatted certificates and diff --git a/crypto/external/bsd/openssl/lib/libcrypto/man/SSL_new.3 b/crypto/external/bsd/openssl/lib/libcrypto/man/SSL_new.3 index 0a65d79d280..f1e9bee8fb0 100644 --- a/crypto/external/bsd/openssl/lib/libcrypto/man/SSL_new.3 +++ b/crypto/external/bsd/openssl/lib/libcrypto/man/SSL_new.3 @@ -1,6 +1,6 @@ -.\" $NetBSD: SSL_new.3,v 1.19 2019/06/09 18:44:33 christos Exp $ +.\" $NetBSD: SSL_new.3,v 1.19.2.1 2021/03/28 18:21:50 martin Exp $ .\" -.\" Automatically generated by Pod::Man 4.10 (Pod::Simple 3.35) +.\" Automatically generated by Pod::Man 4.11 (Pod::Simple 3.35) .\" .\" Standard preamble: .\" ======================================================================== @@ -135,7 +135,7 @@ .\" ======================================================================== .\" .IX Title "SSL_new 3" -.TH SSL_new 3 "2018-09-23" "1.1.1c" "OpenSSL" +.TH SSL_new 3 "2020-12-10" "1.1.1i" "OpenSSL" .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. .if n .ad l @@ -167,10 +167,67 @@ structure are freed. \&\fBSSL_up_ref()\fR increments the reference count for an existing \fB\s-1SSL\s0\fR structure. .PP -\&\fBSSL_dup()\fR duplicates an existing \fB\s-1SSL\s0\fR structure into a new allocated one. All -settings are inherited from the original \fB\s-1SSL\s0\fR structure. Dynamic data (i.e. -existing connection details) are not copied, the new \fB\s-1SSL\s0\fR is set into an -initial accept (server) or connect (client) state. +The function \fBSSL_dup()\fR creates and returns a new \fB\s-1SSL\s0\fR structure from the same +\&\fB\s-1SSL_CTX\s0\fR that was used to create \fIs\fR. It additionally duplicates a subset of +the settings in \fIs\fR into the new \fB\s-1SSL\s0\fR object. +.PP +For \fBSSL_dup()\fR to work, the connection \s-1MUST\s0 be in its initial state and +\&\s-1MUST NOT\s0 have yet started the \s-1SSL\s0 handshake. For connections that are not in +their initial state \fBSSL_dup()\fR just increments an internal +reference count and returns the \fIsame\fR handle. It may be possible to +use \fBSSL_clear\fR\|(3) to recycle an \s-1SSL\s0 handle that is not in its initial +state for re-use, but this is best avoided. Instead, save and restore +the session, if desired, and construct a fresh handle for each connection. +.PP +The subset of settings in \fIs\fR that are duplicated are: +.IP "any session data if configured (including the session_id_context)" 4 +.IX Item "any session data if configured (including the session_id_context)" +.PD 0 +.IP "any tmp_dh settings set via \fBSSL_set_tmp_dh\fR\|(3), \fBSSL_set_tmp_dh_callback\fR\|(3), or \fBSSL_set_dh_auto\fR\|(3)" 4 +.IX Item "any tmp_dh settings set via SSL_set_tmp_dh, SSL_set_tmp_dh_callback, or SSL_set_dh_auto" +.IP "any configured certificates, private keys or certificate chains" 4 +.IX Item "any configured certificates, private keys or certificate chains" +.IP "any configured signature algorithms, or client signature algorithms" 4 +.IX Item "any configured signature algorithms, or client signature algorithms" +.IP "any \s-1DANE\s0 settings" 4 +.IX Item "any DANE settings" +.IP "any Options set via \fBSSL_set_options\fR\|(3)" 4 +.IX Item "any Options set via SSL_set_options" +.IP "any Mode set via \fBSSL_set_mode\fR\|(3)" 4 +.IX Item "any Mode set via SSL_set_mode" +.IP "any minimum or maximum protocol settings set via \fBSSL_set_min_proto_version\fR\|(3) or \fBSSL_set_max_proto_version\fR\|(3) (Note: Only from OpenSSL 1.1.1h and above)" 4 +.IX Item "any minimum or maximum protocol settings set via SSL_set_min_proto_version or SSL_set_max_proto_version (Note: Only from OpenSSL 1.1.1h and above)" +.IP "any Verify mode, callback or depth set via \fBSSL_set_verify\fR\|(3) or \fBSSL_set_verify_depth\fR\|(3) or any configured X509 verification parameters" 4 +.IX Item "any Verify mode, callback or depth set via SSL_set_verify or SSL_set_verify_depth or any configured X509 verification parameters" +.IP "any msg callback or info callback set via \fBSSL_set_msg_callback\fR\|(3) or \fBSSL_set_info_callback\fR\|(3)" 4 +.IX Item "any msg callback or info callback set via SSL_set_msg_callback or SSL_set_info_callback" +.IP "any default password callback set via \fBSSL_set_default_passwd_cb\fR\|(3)" 4 +.IX Item "any default password callback set via SSL_set_default_passwd_cb" +.IP "any session id generation callback set via \fBSSL_set_generate_session_id\fR\|(3)" 4 +.IX Item "any session id generation callback set via SSL_set_generate_session_id" +.IP "any configured Cipher List" 4 +.IX Item "any configured Cipher List" +.IP "initial accept (server) or connect (client) state" 4 +.IX Item "initial accept (server) or connect (client) state" +.IP "the max cert list value set via \fBSSL_set_max_cert_list\fR\|(3)" 4 +.IX Item "the max cert list value set via SSL_set_max_cert_list" +.IP "the read_ahead value set via \fBSSL_set_read_ahead\fR\|(3)" 4 +.IX Item "the read_ahead value set via SSL_set_read_ahead" +.IP "application specific data set via \fBSSL_set_ex_data\fR\|(3)" 4 +.IX Item "application specific data set via SSL_set_ex_data" +.IP "any \s-1CA\s0 list or client \s-1CA\s0 list set via \fBSSL_set0_CA_list\fR\|(3), \fBSSL_set0_client_CA_list()\fR or similar functions" 4 +.IX Item "any CA list or client CA list set via SSL_set0_CA_list, SSL_set0_client_CA_list() or similar functions" +.IP "any security level settings or callbacks" 4 +.IX Item "any security level settings or callbacks" +.IP "any configured serverinfo data" 4 +.IX Item "any configured serverinfo data" +.IP "any configured \s-1PSK\s0 identity hint" 4 +.IX Item "any configured PSK identity hint" +.IP "any configured custom extensions" 4 +.IX Item "any configured custom extensions" +.IP "any client certificate types configured via SSL_set1_client_certificate_types" 4 +.IX Item "any client certificate types configured via SSL_set1_client_certificate_types" +.PD .SH "RETURN VALUES" .IX Header "RETURN VALUES" The following return values can occur: @@ -191,7 +248,7 @@ The return value points to an allocated \s-1SSL\s0 structure. \&\fBssl\fR\|(7) .SH "COPYRIGHT" .IX Header "COPYRIGHT" -Copyright 2000\-2017 The OpenSSL Project Authors. All Rights Reserved. +Copyright 2000\-2020 The OpenSSL Project Authors. All Rights Reserved. .PP Licensed under the OpenSSL license (the \*(L"License\*(R"). You may not use this file except in compliance with the License. You can obtain a copy diff --git a/crypto/external/bsd/openssl/lib/libcrypto/man/SSL_pending.3 b/crypto/external/bsd/openssl/lib/libcrypto/man/SSL_pending.3 index ef2be39a637..201f7d27e5a 100644 --- a/crypto/external/bsd/openssl/lib/libcrypto/man/SSL_pending.3 +++ b/crypto/external/bsd/openssl/lib/libcrypto/man/SSL_pending.3 @@ -1,6 +1,6 @@ -.\" $NetBSD: SSL_pending.3,v 1.19 2019/06/09 18:44:33 christos Exp $ +.\" $NetBSD: SSL_pending.3,v 1.19.2.1 2021/03/28 18:21:50 martin Exp $ .\" -.\" Automatically generated by Pod::Man 4.10 (Pod::Simple 3.35) +.\" Automatically generated by Pod::Man 4.11 (Pod::Simple 3.35) .\" .\" Standard preamble: .\" ======================================================================== @@ -135,7 +135,7 @@ .\" ======================================================================== .\" .IX Title "SSL_pending 3" -.TH SSL_pending 3 "2018-09-23" "1.1.1c" "OpenSSL" +.TH SSL_pending 3 "2020-12-10" "1.1.1i" "OpenSSL" .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. .if n .ad l @@ -168,7 +168,7 @@ record) may have been read containing more \s-1TLS/SSL\s0 records. This also app \&\s-1DTLS\s0 and pipelining (see \fBSSL_CTX_set_split_send_fragment\fR\|(3)). These additional bytes will be buffered by OpenSSL but will remain unprocessed until they are needed. As these bytes are still in an unprocessed state \fBSSL_pending()\fR -will ignore them. Therefore it is possible for no more bytes to be readable from +will ignore them. Therefore, it is possible for no more bytes to be readable from the underlying \s-1BIO\s0 (because OpenSSL has already read them) and for \fBSSL_pending()\fR to return 0, even though readable application data bytes are available (because the data is in unprocessed buffered records). @@ -196,7 +196,7 @@ returns 1 if there is buffered record data in the \s-1SSL\s0 object and 0 otherw The \fBSSL_has_pending()\fR function was added in OpenSSL 1.1.0. .SH "COPYRIGHT" .IX Header "COPYRIGHT" -Copyright 2000\-2016 The OpenSSL Project Authors. All Rights Reserved. +Copyright 2000\-2020 The OpenSSL Project Authors. All Rights Reserved. .PP Licensed under the OpenSSL license (the \*(L"License\*(R"). You may not use this file except in compliance with the License. You can obtain a copy diff --git a/crypto/external/bsd/openssl/lib/libcrypto/man/SSL_read.3 b/crypto/external/bsd/openssl/lib/libcrypto/man/SSL_read.3 index a73137664ac..378e21bdbc8 100644 --- a/crypto/external/bsd/openssl/lib/libcrypto/man/SSL_read.3 +++ b/crypto/external/bsd/openssl/lib/libcrypto/man/SSL_read.3 @@ -1,6 +1,6 @@ -.\" $NetBSD: SSL_read.3,v 1.20 2019/06/09 18:44:33 christos Exp $ +.\" $NetBSD: SSL_read.3,v 1.20.2.1 2021/03/28 18:21:50 martin Exp $ .\" -.\" Automatically generated by Pod::Man 4.10 (Pod::Simple 3.35) +.\" Automatically generated by Pod::Man 4.11 (Pod::Simple 3.35) .\" .\" Standard preamble: .\" ======================================================================== @@ -135,7 +135,7 @@ .\" ======================================================================== .\" .IX Title "SSL_read 3" -.TH SSL_read 3 "2019-06-09" "1.1.1c" "OpenSSL" +.TH SSL_read 3 "2020-12-10" "1.1.1i" "OpenSSL" .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. .if n .ad l @@ -185,7 +185,7 @@ invocation of a read function. The read functions work based on the \s-1SSL/TLS\s0 records. The data are received in records (with a maximum record size of 16kB). Only when a record has been completely received, can it be processed (decryption and check of integrity). -Therefore data that was not retrieved at the last read call can still be +Therefore, data that was not retrieved at the last read call can still be buffered inside the \s-1SSL\s0 layer and will be retrieved on the next read call. If \fBnum\fR is higher than the number of bytes buffered then the read functions will return with the bytes buffered. If no more bytes are in the @@ -212,7 +212,7 @@ not set. Note that if \fB\s-1SSL_MODE_AUTO_RETRY\s0\fR is set and only non-application data is available the call will hang. .PP -If the underlying \s-1BIO\s0 is \fBnon-blocking\fR, a read function will also return when +If the underlying \s-1BIO\s0 is \fBnonblocking\fR, a read function will also return when the underlying \s-1BIO\s0 could not satisfy the needs of the function to continue the operation. In this case a call to \fBSSL_get_error\fR\|(3) with the @@ -223,7 +223,7 @@ a read function can also cause write operations. The calling process then must repeat the call after taking appropriate action to satisfy the needs of the read function. The action depends on the underlying \s-1BIO.\s0 -When using a non-blocking socket, nothing is to be done, but \fBselect()\fR can be +When using a nonblocking socket, nothing is to be done, but \fBselect()\fR can be used to check for the required condition. When using a buffering \s-1BIO,\s0 like a \s-1BIO\s0 pair, data must be written into or retrieved out of the \s-1BIO\s0 before being able to continue. @@ -272,7 +272,7 @@ You should instead call \fBSSL_get_error()\fR to find out if it's retryable. The \fBSSL_read_ex()\fR and \fBSSL_peek_ex()\fR functions were added in OpenSSL 1.1.1. .SH "COPYRIGHT" .IX Header "COPYRIGHT" -Copyright 2000\-2019 The OpenSSL Project Authors. All Rights Reserved. +Copyright 2000\-2020 The OpenSSL Project Authors. All Rights Reserved. .PP Licensed under the OpenSSL license (the \*(L"License\*(R"). You may not use this file except in compliance with the License. You can obtain a copy diff --git a/crypto/external/bsd/openssl/lib/libcrypto/man/SSL_read_early_data.3 b/crypto/external/bsd/openssl/lib/libcrypto/man/SSL_read_early_data.3 index be60482e1d4..42451f32c19 100644 --- a/crypto/external/bsd/openssl/lib/libcrypto/man/SSL_read_early_data.3 +++ b/crypto/external/bsd/openssl/lib/libcrypto/man/SSL_read_early_data.3 @@ -1,6 +1,6 @@ -.\" $NetBSD: SSL_read_early_data.3,v 1.2 2019/06/09 18:44:33 christos Exp $ +.\" $NetBSD: SSL_read_early_data.3,v 1.2.4.1 2021/03/28 18:21:50 martin Exp $ .\" -.\" Automatically generated by Pod::Man 4.10 (Pod::Simple 3.35) +.\" Automatically generated by Pod::Man 4.11 (Pod::Simple 3.35) .\" .\" Standard preamble: .\" ======================================================================== @@ -135,7 +135,7 @@ .\" ======================================================================== .\" .IX Title "SSL_read_early_data 3" -.TH SSL_read_early_data 3 "2019-03-12" "1.1.1c" "OpenSSL" +.TH SSL_read_early_data 3 "2020-12-10" "1.1.1i" "OpenSSL" .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. .if n .ad l @@ -199,10 +199,11 @@ libcrypto, -lcrypto These functions are used to send and receive early data where TLSv1.3 has been negotiated. Early data can be sent by the client immediately after its initial ClientHello without having to wait for the server to complete the handshake. -Early data can only be sent if a session has previously been established with -the server, and the server is known to support it. Additionally these functions -can be used to send data from the server to the client when the client has not -yet completed the authentication stage of the handshake. +Early data can be sent if a session has previously been established with the +server or when establishing a new session using an out-of-band \s-1PSK,\s0 and only +when the server is known to support it. Additionally these functions can be used +to send data from the server to the client when the client has not yet completed +the authentication stage of the handshake. .PP Early data has weaker security properties than other data sent over an \s-1SSL/TLS\s0 connection. In particular the data does not have forward secrecy. There are also @@ -336,7 +337,7 @@ early data settings for the \s-1SSL_CTX\s0 and \s-1SSL\s0 objects respectively. server application will either use both of \fBSSL_read_early_data()\fR and \&\fBSSL_CTX_set_max_early_data()\fR (or \fBSSL_set_max_early_data()\fR), or neither of them, since there is no practical benefit from using only one of them. If the maximum -early data setting for a server is non-zero then replay protection is +early data setting for a server is nonzero then replay protection is automatically enabled (see \*(L"\s-1REPLAY PROTECTION\*(R"\s0 below). .PP If the server rejects the early data sent by a client then it will skip over @@ -354,7 +355,7 @@ max_early_data for the session and the recv_max_early_data setting for the server. If a client sends more data than this then the connection will abort. .PP The configured value for max_early_data on a server may change over time as -required. However clients may have tickets containing the previously configured +required. However, clients may have tickets containing the previously configured max_early_data value. The recv_max_early_data should always be equal to or higher than any recently configured max_early_data value in order to avoid aborted connections. The recv_max_early_data should never be set to less than @@ -417,7 +418,7 @@ retry with a lower maximum protocol version. When early data is in use the \s-1TLS\s0 protocol provides no security guarantees that the same early data was not replayed across multiple connections. As a mitigation for this issue OpenSSL automatically enables replay protection if the -server is configured with a non-zero max early data value. With replay +server is configured with a nonzero max early data value. With replay protection enabled sessions are forced to be single use only. If a client attempts to reuse a session ticket more than once, then the second and subsequent attempts will fall back to a full handshake (and any early data that @@ -448,7 +449,7 @@ cache. Applications should be designed with this in mind in order to minimise the possibility of replay attacks. .PP The OpenSSL replay protection does not apply to external Pre Shared Keys (PSKs) -(e.g. see \fBSSL_CTX_set_psk_find_session_callback\fR\|(3)). Therefore extreme caution +(e.g. see \fBSSL_CTX_set_psk_find_session_callback\fR\|(3)). Therefore, extreme caution should be applied when combining external PSKs with early data. .PP Some applications may mitigate the replay risks in other ways. For those @@ -492,7 +493,7 @@ the server, or \s-1SSL_EARLY_DATA_NOT_SENT\s0 if no early data was sent. All of the functions described above were added in OpenSSL 1.1.1. .SH "COPYRIGHT" .IX Header "COPYRIGHT" -Copyright 2017\-2019 The OpenSSL Project Authors. All Rights Reserved. +Copyright 2017\-2020 The OpenSSL Project Authors. All Rights Reserved. .PP Licensed under the OpenSSL license (the \*(L"License\*(R"). You may not use this file except in compliance with the License. You can obtain a copy diff --git a/crypto/external/bsd/openssl/lib/libcrypto/man/SSL_rstate_string.3 b/crypto/external/bsd/openssl/lib/libcrypto/man/SSL_rstate_string.3 index 3cf1a403ea8..3c253c96d8c 100644 --- a/crypto/external/bsd/openssl/lib/libcrypto/man/SSL_rstate_string.3 +++ b/crypto/external/bsd/openssl/lib/libcrypto/man/SSL_rstate_string.3 @@ -1,6 +1,6 @@ -.\" $NetBSD: SSL_rstate_string.3,v 1.19 2019/06/09 18:44:33 christos Exp $ +.\" $NetBSD: SSL_rstate_string.3,v 1.19.2.1 2021/03/28 18:21:50 martin Exp $ .\" -.\" Automatically generated by Pod::Man 4.10 (Pod::Simple 3.35) +.\" Automatically generated by Pod::Man 4.11 (Pod::Simple 3.35) .\" .\" Standard preamble: .\" ======================================================================== @@ -135,7 +135,7 @@ .\" ======================================================================== .\" .IX Title "SSL_rstate_string 3" -.TH SSL_rstate_string 3 "2018-09-23" "1.1.1c" "OpenSSL" +.TH SSL_rstate_string 3 "2018-09-23" "1.1.1i" "OpenSSL" .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. .if n .ad l diff --git a/crypto/external/bsd/openssl/lib/libcrypto/man/SSL_session_reused.3 b/crypto/external/bsd/openssl/lib/libcrypto/man/SSL_session_reused.3 index 9c6ccd4c3f0..130be48a789 100644 --- a/crypto/external/bsd/openssl/lib/libcrypto/man/SSL_session_reused.3 +++ b/crypto/external/bsd/openssl/lib/libcrypto/man/SSL_session_reused.3 @@ -1,6 +1,6 @@ -.\" $NetBSD: SSL_session_reused.3,v 1.19 2019/06/09 18:44:33 christos Exp $ +.\" $NetBSD: SSL_session_reused.3,v 1.19.2.1 2021/03/28 18:21:50 martin Exp $ .\" -.\" Automatically generated by Pod::Man 4.10 (Pod::Simple 3.35) +.\" Automatically generated by Pod::Man 4.11 (Pod::Simple 3.35) .\" .\" Standard preamble: .\" ======================================================================== @@ -135,7 +135,7 @@ .\" ======================================================================== .\" .IX Title "SSL_session_reused 3" -.TH SSL_session_reused 3 "2019-06-09" "1.1.1c" "OpenSSL" +.TH SSL_session_reused 3 "2019-06-09" "1.1.1i" "OpenSSL" .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. .if n .ad l diff --git a/crypto/external/bsd/openssl/lib/libcrypto/man/SSL_set1_host.3 b/crypto/external/bsd/openssl/lib/libcrypto/man/SSL_set1_host.3 index c77c713e340..172c8b954fe 100644 --- a/crypto/external/bsd/openssl/lib/libcrypto/man/SSL_set1_host.3 +++ b/crypto/external/bsd/openssl/lib/libcrypto/man/SSL_set1_host.3 @@ -1,6 +1,6 @@ -.\" $NetBSD: SSL_set1_host.3,v 1.3 2019/06/09 18:44:33 christos Exp $ +.\" $NetBSD: SSL_set1_host.3,v 1.3.2.1 2021/03/28 18:21:51 martin Exp $ .\" -.\" Automatically generated by Pod::Man 4.10 (Pod::Simple 3.35) +.\" Automatically generated by Pod::Man 4.11 (Pod::Simple 3.35) .\" .\" Standard preamble: .\" ======================================================================== @@ -135,7 +135,7 @@ .\" ======================================================================== .\" .IX Title "SSL_set1_host 3" -.TH SSL_set1_host 3 "2019-03-12" "1.1.1c" "OpenSSL" +.TH SSL_set1_host 3 "2020-12-10" "1.1.1i" "OpenSSL" .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. .if n .ad l @@ -160,9 +160,9 @@ libcrypto, -lcrypto These functions configure server hostname checks in the \s-1SSL\s0 client. .PP \&\fBSSL_set1_host()\fR sets the expected \s-1DNS\s0 hostname to \fBname\fR clearing -any previously specified host name or names. If \fBname\fR is \s-1NULL,\s0 +any previously specified hostname or names. If \fBname\fR is \s-1NULL,\s0 or the empty string the list of hostnames is cleared, and name -checks are not performed on the peer certificate. When a non-empty +checks are not performed on the peer certificate. When a nonempty \&\fBname\fR is specified, certificate verification automatically checks the peer hostname via \fBX509_check_host\fR\|(3) with \fBflags\fR as specified via \fBSSL_set_hostflags()\fR. Clients that enable \s-1DANE TLSA\s0 authentication @@ -210,8 +210,8 @@ failure. applicable (as with \s-1RFC7671 \fBDANE\-EE\s0\fR\|(3)), or no trusted peername was matched. Otherwise, it returns the matched peername. To determine whether verification succeeded call \fBSSL_get_verify_result\fR\|(3). -.SH "EXAMPLE" -.IX Header "EXAMPLE" +.SH "EXAMPLES" +.IX Header "EXAMPLES" Suppose \*(L"smtp.example.com\*(R" is the \s-1MX\s0 host of the domain \*(L"example.com\*(R". The calls below will arrange to match either the \s-1MX\s0 hostname or the destination domain name in the \s-1SMTP\s0 server certificate. Wildcards @@ -246,7 +246,7 @@ the lifetime of the \s-1SSL\s0 connection. These functions were added in OpenSSL 1.1.0. .SH "COPYRIGHT" .IX Header "COPYRIGHT" -Copyright 2016\-2018 The OpenSSL Project Authors. All Rights Reserved. +Copyright 2016\-2020 The OpenSSL Project Authors. All Rights Reserved. .PP Licensed under the OpenSSL license (the \*(L"License\*(R"). You may not use this file except in compliance with the License. You can obtain a copy diff --git a/crypto/external/bsd/openssl/lib/libcrypto/man/SSL_set_bio.3 b/crypto/external/bsd/openssl/lib/libcrypto/man/SSL_set_bio.3 index e6e489c978c..84804d96478 100644 --- a/crypto/external/bsd/openssl/lib/libcrypto/man/SSL_set_bio.3 +++ b/crypto/external/bsd/openssl/lib/libcrypto/man/SSL_set_bio.3 @@ -1,6 +1,6 @@ -.\" $NetBSD: SSL_set_bio.3,v 1.19 2019/06/09 18:44:33 christos Exp $ +.\" $NetBSD: SSL_set_bio.3,v 1.19.2.1 2021/03/28 18:21:51 martin Exp $ .\" -.\" Automatically generated by Pod::Man 4.10 (Pod::Simple 3.35) +.\" Automatically generated by Pod::Man 4.11 (Pod::Simple 3.35) .\" .\" Standard preamble: .\" ======================================================================== @@ -135,7 +135,7 @@ .\" ======================================================================== .\" .IX Title "SSL_set_bio 3" -.TH SSL_set_bio 3 "2018-12-08" "1.1.1c" "OpenSSL" +.TH SSL_set_bio 3 "2020-12-10" "1.1.1i" "OpenSSL" .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. .if n .ad l @@ -157,7 +157,7 @@ libcrypto, -lcrypto .IX Header "DESCRIPTION" \&\fBSSL_set0_rbio()\fR connects the \s-1BIO\s0 \fBrbio\fR for the read operations of the \fBssl\fR object. The \s-1SSL\s0 engine inherits the behaviour of \fBrbio\fR. If the \s-1BIO\s0 is -non-blocking then the \fBssl\fR object will also have non-blocking behaviour. This +nonblocking then the \fBssl\fR object will also have nonblocking behaviour. This function transfers ownership of \fBrbio\fR to \fBssl\fR. It will be automatically freed using \fBBIO_free_all\fR\|(3) when the \fBssl\fR is freed. On calling this function, any existing \fBrbio\fR that was previously set will also be freed via a @@ -167,7 +167,7 @@ the same value as previously). \&\fBSSL_set0_wbio()\fR works in the same as \fBSSL_set0_rbio()\fR except that it connects the \s-1BIO\s0 \fBwbio\fR for the write operations of the \fBssl\fR object. Note that if the rbio and wbio are the same then \fBSSL_set0_rbio()\fR and \fBSSL_set0_wbio()\fR each take -ownership of one reference. Therefore it may be necessary to increment the +ownership of one reference. Therefore, it may be necessary to increment the number of references available using \fBBIO_up_ref\fR\|(3) before calling the set0 functions. .PP @@ -223,7 +223,7 @@ use \fBSSL_set0_rbio()\fR and \fBSSL_set0_wbio()\fR instead. \&\fBSSL_set0_rbio()\fR and \fBSSL_set0_wbio()\fR were added in OpenSSL 1.1.0. .SH "COPYRIGHT" .IX Header "COPYRIGHT" -Copyright 2000\-2018 The OpenSSL Project Authors. All Rights Reserved. +Copyright 2000\-2020 The OpenSSL Project Authors. All Rights Reserved. .PP Licensed under the OpenSSL license (the \*(L"License\*(R"). You may not use this file except in compliance with the License. You can obtain a copy diff --git a/crypto/external/bsd/openssl/lib/libcrypto/man/SSL_set_connect_state.3 b/crypto/external/bsd/openssl/lib/libcrypto/man/SSL_set_connect_state.3 index 04ba7a32a31..04b97a129d8 100644 --- a/crypto/external/bsd/openssl/lib/libcrypto/man/SSL_set_connect_state.3 +++ b/crypto/external/bsd/openssl/lib/libcrypto/man/SSL_set_connect_state.3 @@ -1,6 +1,6 @@ -.\" $NetBSD: SSL_set_connect_state.3,v 1.19 2019/06/09 18:44:33 christos Exp $ +.\" $NetBSD: SSL_set_connect_state.3,v 1.19.2.1 2021/03/28 18:21:51 martin Exp $ .\" -.\" Automatically generated by Pod::Man 4.10 (Pod::Simple 3.35) +.\" Automatically generated by Pod::Man 4.11 (Pod::Simple 3.35) .\" .\" Standard preamble: .\" ======================================================================== @@ -135,7 +135,7 @@ .\" ======================================================================== .\" .IX Title "SSL_set_connect_state 3" -.TH SSL_set_connect_state 3 "2018-09-23" "1.1.1c" "OpenSSL" +.TH SSL_set_connect_state 3 "2018-09-23" "1.1.1i" "OpenSSL" .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. .if n .ad l diff --git a/crypto/external/bsd/openssl/lib/libcrypto/man/SSL_set_fd.3 b/crypto/external/bsd/openssl/lib/libcrypto/man/SSL_set_fd.3 index 7d1b8827a07..7c59e4aa716 100644 --- a/crypto/external/bsd/openssl/lib/libcrypto/man/SSL_set_fd.3 +++ b/crypto/external/bsd/openssl/lib/libcrypto/man/SSL_set_fd.3 @@ -1,6 +1,6 @@ -.\" $NetBSD: SSL_set_fd.3,v 1.19 2019/06/09 18:44:33 christos Exp $ +.\" $NetBSD: SSL_set_fd.3,v 1.19.2.1 2021/03/28 18:21:51 martin Exp $ .\" -.\" Automatically generated by Pod::Man 4.10 (Pod::Simple 3.35) +.\" Automatically generated by Pod::Man 4.11 (Pod::Simple 3.35) .\" .\" Standard preamble: .\" ======================================================================== @@ -135,7 +135,7 @@ .\" ======================================================================== .\" .IX Title "SSL_set_fd 3" -.TH SSL_set_fd 3 "2018-09-23" "1.1.1c" "OpenSSL" +.TH SSL_set_fd 3 "2020-12-10" "1.1.1i" "OpenSSL" .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. .if n .ad l @@ -161,8 +161,8 @@ socket file descriptor of a network connection. .PP When performing the operation, a \fBsocket \s-1BIO\s0\fR is automatically created to interface between the \fBssl\fR and \fBfd\fR. The \s-1BIO\s0 and hence the \s-1SSL\s0 engine -inherit the behaviour of \fBfd\fR. If \fBfd\fR is non-blocking, the \fBssl\fR will -also have non-blocking behaviour. +inherit the behaviour of \fBfd\fR. If \fBfd\fR is nonblocking, the \fBssl\fR will +also have nonblocking behaviour. .PP If there was already a \s-1BIO\s0 connected to \fBssl\fR, \fBBIO_free()\fR will be called (for both the reading and writing side, if different). @@ -184,7 +184,7 @@ The operation succeeded. \&\fBSSL_shutdown\fR\|(3), \fBssl\fR\|(7) , \fBbio\fR\|(7) .SH "COPYRIGHT" .IX Header "COPYRIGHT" -Copyright 2000\-2016 The OpenSSL Project Authors. All Rights Reserved. +Copyright 2000\-2020 The OpenSSL Project Authors. All Rights Reserved. .PP Licensed under the OpenSSL license (the \*(L"License\*(R"). You may not use this file except in compliance with the License. You can obtain a copy diff --git a/crypto/external/bsd/openssl/lib/libcrypto/man/SSL_set_session.3 b/crypto/external/bsd/openssl/lib/libcrypto/man/SSL_set_session.3 index dca3ea852cc..234b78764b5 100644 --- a/crypto/external/bsd/openssl/lib/libcrypto/man/SSL_set_session.3 +++ b/crypto/external/bsd/openssl/lib/libcrypto/man/SSL_set_session.3 @@ -1,6 +1,6 @@ -.\" $NetBSD: SSL_set_session.3,v 1.19 2019/06/09 18:44:33 christos Exp $ +.\" $NetBSD: SSL_set_session.3,v 1.19.2.1 2021/03/28 18:21:51 martin Exp $ .\" -.\" Automatically generated by Pod::Man 4.10 (Pod::Simple 3.35) +.\" Automatically generated by Pod::Man 4.11 (Pod::Simple 3.35) .\" .\" Standard preamble: .\" ======================================================================== @@ -135,7 +135,7 @@ .\" ======================================================================== .\" .IX Title "SSL_set_session 3" -.TH SSL_set_session 3 "2018-09-23" "1.1.1c" "OpenSSL" +.TH SSL_set_session 3 "2018-09-23" "1.1.1i" "OpenSSL" .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. .if n .ad l diff --git a/crypto/external/bsd/openssl/lib/libcrypto/man/SSL_set_shutdown.3 b/crypto/external/bsd/openssl/lib/libcrypto/man/SSL_set_shutdown.3 index c838c113785..0b620385b5b 100644 --- a/crypto/external/bsd/openssl/lib/libcrypto/man/SSL_set_shutdown.3 +++ b/crypto/external/bsd/openssl/lib/libcrypto/man/SSL_set_shutdown.3 @@ -1,6 +1,6 @@ -.\" $NetBSD: SSL_set_shutdown.3,v 1.19 2019/06/09 18:44:33 christos Exp $ +.\" $NetBSD: SSL_set_shutdown.3,v 1.19.2.1 2021/03/28 18:21:51 martin Exp $ .\" -.\" Automatically generated by Pod::Man 4.10 (Pod::Simple 3.35) +.\" Automatically generated by Pod::Man 4.11 (Pod::Simple 3.35) .\" .\" Standard preamble: .\" ======================================================================== @@ -135,7 +135,7 @@ .\" ======================================================================== .\" .IX Title "SSL_set_shutdown 3" -.TH SSL_set_shutdown 3 "2018-12-08" "1.1.1c" "OpenSSL" +.TH SSL_set_shutdown 3 "2020-12-10" "1.1.1i" "OpenSSL" .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. .if n .ad l @@ -160,7 +160,7 @@ libcrypto, -lcrypto \&\fBSSL_get_shutdown()\fR returns the shutdown mode of \fBssl\fR. .SH "NOTES" .IX Header "NOTES" -The shutdown state of an ssl connection is a bitmask of: +The shutdown state of an ssl connection is a bit mask of: .IP "0" 4 No shutdown setting, yet. .IP "\s-1SSL_SENT_SHUTDOWN\s0" 4 @@ -200,7 +200,7 @@ for setting \s-1SSL_SENT_SHUTDOWN\s0 the application must however still call \&\fBSSL_clear\fR\|(3), \fBSSL_free\fR\|(3) .SH "COPYRIGHT" .IX Header "COPYRIGHT" -Copyright 2001\-2018 The OpenSSL Project Authors. All Rights Reserved. +Copyright 2001\-2020 The OpenSSL Project Authors. All Rights Reserved. .PP Licensed under the OpenSSL license (the \*(L"License\*(R"). You may not use this file except in compliance with the License. You can obtain a copy diff --git a/crypto/external/bsd/openssl/lib/libcrypto/man/SSL_set_verify_result.3 b/crypto/external/bsd/openssl/lib/libcrypto/man/SSL_set_verify_result.3 index b8e092777eb..600a3d0644d 100644 --- a/crypto/external/bsd/openssl/lib/libcrypto/man/SSL_set_verify_result.3 +++ b/crypto/external/bsd/openssl/lib/libcrypto/man/SSL_set_verify_result.3 @@ -1,6 +1,6 @@ -.\" $NetBSD: SSL_set_verify_result.3,v 1.19 2019/06/09 18:44:33 christos Exp $ +.\" $NetBSD: SSL_set_verify_result.3,v 1.19.2.1 2021/03/28 18:21:51 martin Exp $ .\" -.\" Automatically generated by Pod::Man 4.10 (Pod::Simple 3.35) +.\" Automatically generated by Pod::Man 4.11 (Pod::Simple 3.35) .\" .\" Standard preamble: .\" ======================================================================== @@ -135,7 +135,7 @@ .\" ======================================================================== .\" .IX Title "SSL_set_verify_result 3" -.TH SSL_set_verify_result 3 "2018-09-23" "1.1.1c" "OpenSSL" +.TH SSL_set_verify_result 3 "2018-09-23" "1.1.1i" "OpenSSL" .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. .if n .ad l diff --git a/crypto/external/bsd/openssl/lib/libcrypto/man/SSL_shutdown.3 b/crypto/external/bsd/openssl/lib/libcrypto/man/SSL_shutdown.3 index 064ba45981a..ecb8cfc473f 100644 --- a/crypto/external/bsd/openssl/lib/libcrypto/man/SSL_shutdown.3 +++ b/crypto/external/bsd/openssl/lib/libcrypto/man/SSL_shutdown.3 @@ -1,6 +1,6 @@ -.\" $NetBSD: SSL_shutdown.3,v 1.19 2019/06/09 18:44:33 christos Exp $ +.\" $NetBSD: SSL_shutdown.3,v 1.19.2.1 2021/03/28 18:21:51 martin Exp $ .\" -.\" Automatically generated by Pod::Man 4.10 (Pod::Simple 3.35) +.\" Automatically generated by Pod::Man 4.11 (Pod::Simple 3.35) .\" .\" Standard preamble: .\" ======================================================================== @@ -135,7 +135,7 @@ .\" ======================================================================== .\" .IX Title "SSL_shutdown 3" -.TH SSL_shutdown 3 "2019-06-09" "1.1.1c" "OpenSSL" +.TH SSL_shutdown 3 "2020-12-10" "1.1.1i" "OpenSSL" .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. .if n .ad l @@ -232,13 +232,13 @@ The behaviour of \fBSSL_shutdown()\fR additionally depends on the underlying \s- If the underlying \s-1BIO\s0 is \fBblocking\fR, \fBSSL_shutdown()\fR will only return once the handshake step has been finished or an error occurred. .PP -If the underlying \s-1BIO\s0 is \fBnon-blocking\fR, \fBSSL_shutdown()\fR will also return +If the underlying \s-1BIO\s0 is \fBnonblocking\fR, \fBSSL_shutdown()\fR will also return when the underlying \s-1BIO\s0 could not satisfy the needs of \fBSSL_shutdown()\fR to continue the handshake. In this case a call to \fBSSL_get_error()\fR with the return value of \fBSSL_shutdown()\fR will yield \fB\s-1SSL_ERROR_WANT_READ\s0\fR or \&\fB\s-1SSL_ERROR_WANT_WRITE\s0\fR. The calling process then must repeat the call after taking appropriate action to satisfy the needs of \fBSSL_shutdown()\fR. -The action depends on the underlying \s-1BIO.\s0 When using a non-blocking socket, +The action depends on the underlying \s-1BIO.\s0 When using a nonblocking socket, nothing is to be done, but \fBselect()\fR can be used to check for the required condition. When using a buffering \s-1BIO,\s0 like a \s-1BIO\s0 pair, data must be written into or retrieved out of the \s-1BIO\s0 before being able to continue. @@ -253,6 +253,16 @@ state but not actually send the close_notify alert messages, see \fBSSL_CTX_set_quiet_shutdown\fR\|(3). When \*(L"quiet shutdown\*(R" is enabled, \fBSSL_shutdown()\fR will always succeed and return 1. +Note that this is not standard compliant behaviour. +It should only be done when the peer has a way to make sure all +data has been received and doesn't wait for the close_notify alert +message, otherwise an unexpected \s-1EOF\s0 will be reported. +.PP +There are implementations that do not send the required close_notify alert. +If there is a need to communicate with such an implementation, and it's clear +that all data has been received, do not wait for the peer's close_notify alert. +Waiting for the close_notify alert when the peer just closes the connection will +result in an error being generated. .SH "RETURN VALUES" .IX Header "RETURN VALUES" The following return values can occur: @@ -260,8 +270,10 @@ The following return values can occur: The shutdown is not yet finished: the close_notify was sent but the peer did not send it back yet. Call \fBSSL_read()\fR to do a bidirectional shutdown. -The output of \fBSSL_get_error\fR\|(3) may be misleading, as an -erroneous \s-1SSL_ERROR_SYSCALL\s0 may be flagged even though no error occurred. +.Sp +Unlike most other function, returning 0 does not indicate an error. +\&\fBSSL_get_error\fR\|(3) should not get called, it may misleadingly +indicate an error even though no error occurred. .IP "1" 4 .IX Item "1" The shutdown was successfully completed. The close_notify alert was sent @@ -270,7 +282,7 @@ and the peer's close_notify alert was received. .IX Item "<0" The shutdown was not successful. Call \fBSSL_get_error\fR\|(3) with the return value \fBret\fR to find out the reason. -It can occur if an action is needed to continue the operation for non-blocking +It can occur if an action is needed to continue the operation for nonblocking BIOs. .Sp It can also occur when not all data was read using \fBSSL_read()\fR. @@ -283,7 +295,7 @@ It can also occur when not all data was read using \fBSSL_read()\fR. \&\fBssl\fR\|(7), \fBbio\fR\|(7) .SH "COPYRIGHT" .IX Header "COPYRIGHT" -Copyright 2000\-2019 The OpenSSL Project Authors. All Rights Reserved. +Copyright 2000\-2020 The OpenSSL Project Authors. All Rights Reserved. .PP Licensed under the OpenSSL license (the \*(L"License\*(R"). You may not use this file except in compliance with the License. You can obtain a copy diff --git a/crypto/external/bsd/openssl/lib/libcrypto/man/SSL_state_string.3 b/crypto/external/bsd/openssl/lib/libcrypto/man/SSL_state_string.3 index 2c330eb2176..a757ed9f965 100644 --- a/crypto/external/bsd/openssl/lib/libcrypto/man/SSL_state_string.3 +++ b/crypto/external/bsd/openssl/lib/libcrypto/man/SSL_state_string.3 @@ -1,6 +1,6 @@ -.\" $NetBSD: SSL_state_string.3,v 1.19 2019/06/09 18:44:33 christos Exp $ +.\" $NetBSD: SSL_state_string.3,v 1.19.2.1 2021/03/28 18:21:51 martin Exp $ .\" -.\" Automatically generated by Pod::Man 4.10 (Pod::Simple 3.35) +.\" Automatically generated by Pod::Man 4.11 (Pod::Simple 3.35) .\" .\" Standard preamble: .\" ======================================================================== @@ -135,7 +135,7 @@ .\" ======================================================================== .\" .IX Title "SSL_state_string 3" -.TH SSL_state_string 3 "2018-09-23" "1.1.1c" "OpenSSL" +.TH SSL_state_string 3 "2020-12-10" "1.1.1i" "OpenSSL" .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. .if n .ad l @@ -166,11 +166,11 @@ maintained. Querying the state information is not very informative before or when a connection has been established. It however can be of significant interest during the handshake. .PP -When using non-blocking sockets, the function call performing the handshake +When using nonblocking sockets, the function call performing the handshake may return with \s-1SSL_ERROR_WANT_READ\s0 or \s-1SSL_ERROR_WANT_WRITE\s0 condition, so that SSL_state_string[_long]() may be called. .PP -For both blocking or non-blocking sockets, the details state information +For both blocking or nonblocking sockets, the details state information can be used within the info_callback function set with the \&\fBSSL_set_info_callback()\fR call. .SH "RETURN VALUES" @@ -181,7 +181,7 @@ Detailed description of possible states to be included later. \&\fBssl\fR\|(7), \fBSSL_CTX_set_info_callback\fR\|(3) .SH "COPYRIGHT" .IX Header "COPYRIGHT" -Copyright 2001\-2016 The OpenSSL Project Authors. All Rights Reserved. +Copyright 2001\-2020 The OpenSSL Project Authors. All Rights Reserved. .PP Licensed under the OpenSSL license (the \*(L"License\*(R"). You may not use this file except in compliance with the License. You can obtain a copy diff --git a/crypto/external/bsd/openssl/lib/libcrypto/man/SSL_want.3 b/crypto/external/bsd/openssl/lib/libcrypto/man/SSL_want.3 index 07aac09b928..8cb5519cc0e 100644 --- a/crypto/external/bsd/openssl/lib/libcrypto/man/SSL_want.3 +++ b/crypto/external/bsd/openssl/lib/libcrypto/man/SSL_want.3 @@ -1,6 +1,6 @@ -.\" $NetBSD: SSL_want.3,v 1.19 2019/06/09 18:44:33 christos Exp $ +.\" $NetBSD: SSL_want.3,v 1.19.2.1 2021/03/28 18:21:51 martin Exp $ .\" -.\" Automatically generated by Pod::Man 4.10 (Pod::Simple 3.35) +.\" Automatically generated by Pod::Man 4.11 (Pod::Simple 3.35) .\" .\" Standard preamble: .\" ======================================================================== @@ -135,7 +135,7 @@ .\" ======================================================================== .\" .IX Title "SSL_want 3" -.TH SSL_want 3 "2019-03-12" "1.1.1c" "OpenSSL" +.TH SSL_want 3 "2020-12-10" "1.1.1i" "OpenSSL" .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. .if n .ad l @@ -173,7 +173,7 @@ return values are similar to that of \fBSSL_get_error\fR\|(3). Unlike \fBSSL_get_error\fR\|(3), which also evaluates the error queue, the results are obtained by examining an internal state flag only. The information must therefore only be used for normal operation under -non-blocking I/O. Error conditions are not handled and must be treated +nonblocking I/O. Error conditions are not handled and must be treated using \fBSSL_get_error\fR\|(3). .PP The result returned by \fBSSL_want()\fR should always be consistent with @@ -231,7 +231,7 @@ The \fBSSL_want_client_hello_cb()\fR function and the \s-1SSL_CLIENT_HELLO_CB\s0 were added in OpenSSL 1.1.1. .SH "COPYRIGHT" .IX Header "COPYRIGHT" -Copyright 2001\-2017 The OpenSSL Project Authors. All Rights Reserved. +Copyright 2001\-2020 The OpenSSL Project Authors. All Rights Reserved. .PP Licensed under the OpenSSL license (the \*(L"License\*(R"). You may not use this file except in compliance with the License. You can obtain a copy diff --git a/crypto/external/bsd/openssl/lib/libcrypto/man/SSL_write.3 b/crypto/external/bsd/openssl/lib/libcrypto/man/SSL_write.3 index 22f00811322..b73a064db0b 100644 --- a/crypto/external/bsd/openssl/lib/libcrypto/man/SSL_write.3 +++ b/crypto/external/bsd/openssl/lib/libcrypto/man/SSL_write.3 @@ -1,6 +1,6 @@ -.\" $NetBSD: SSL_write.3,v 1.19 2019/06/09 18:44:33 christos Exp $ +.\" $NetBSD: SSL_write.3,v 1.19.2.1 2021/03/28 18:21:51 martin Exp $ .\" -.\" Automatically generated by Pod::Man 4.10 (Pod::Simple 3.35) +.\" Automatically generated by Pod::Man 4.11 (Pod::Simple 3.35) .\" .\" Standard preamble: .\" ======================================================================== @@ -135,7 +135,7 @@ .\" ======================================================================== .\" .IX Title "SSL_write 3" -.TH SSL_write 3 "2019-06-09" "1.1.1c" "OpenSSL" +.TH SSL_write 3 "2020-12-10" "1.1.1i" "OpenSSL" .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. .if n .ad l @@ -176,7 +176,7 @@ before the first call to a write function. If the underlying \s-1BIO\s0 is \fBblocking\fR, the write functions will only return, once the write operation has been finished or an error occurred. .PP -If the underlying \s-1BIO\s0 is \fBnon-blocking\fR the write functions will also return +If the underlying \s-1BIO\s0 is \fBnonblocking\fR the write functions will also return when the underlying \s-1BIO\s0 could not satisfy the needs of the function to continue the operation. In this case a call to \fBSSL_get_error\fR\|(3) with the return value of the write function will yield \fB\s-1SSL_ERROR_WANT_READ\s0\fR @@ -184,7 +184,7 @@ or \fB\s-1SSL_ERROR_WANT_WRITE\s0\fR. As at any time a re-negotiation is possibl call to a write function can also cause read operations! The calling process then must repeat the call after taking appropriate action to satisfy the needs of the write function. The action depends on the underlying \s-1BIO.\s0 When using a -non-blocking socket, nothing is to be done, but \fBselect()\fR can be used to check +nonblocking socket, nothing is to be done, but \fBselect()\fR can be used to check for the required condition. When using a buffering \s-1BIO,\s0 like a \s-1BIO\s0 pair, data must be written into or retrieved out of the \s-1BIO\s0 before being able to continue. .PP @@ -196,8 +196,8 @@ partial write has been successfully completed. In this case the write function operation is considered completed. The bytes are sent and a new write call with a new buffer (with the already sent bytes removed) must be started. A partial write is performed with the size of a message block, which is 16kB. -.SH "WARNING" -.IX Header "WARNING" +.SH "WARNINGS" +.IX Header "WARNINGS" When a write function call has to be repeated because \fBSSL_get_error\fR\|(3) returned \fB\s-1SSL_ERROR_WANT_READ\s0\fR or \fB\s-1SSL_ERROR_WANT_WRITE\s0\fR, it must be repeated with the same arguments. @@ -247,7 +247,7 @@ You should instead call \fBSSL_get_error()\fR to find out if it's retryable. The \fBSSL_write_ex()\fR function was added in OpenSSL 1.1.1. .SH "COPYRIGHT" .IX Header "COPYRIGHT" -Copyright 2000\-2019 The OpenSSL Project Authors. All Rights Reserved. +Copyright 2000\-2020 The OpenSSL Project Authors. All Rights Reserved. .PP Licensed under the OpenSSL license (the \*(L"License\*(R"). You may not use this file except in compliance with the License. You can obtain a copy diff --git a/crypto/external/bsd/openssl/lib/libcrypto/man/UI_STRING.3 b/crypto/external/bsd/openssl/lib/libcrypto/man/UI_STRING.3 index 7aec32a938e..0a9bd42cfa6 100644 --- a/crypto/external/bsd/openssl/lib/libcrypto/man/UI_STRING.3 +++ b/crypto/external/bsd/openssl/lib/libcrypto/man/UI_STRING.3 @@ -1,6 +1,6 @@ -.\" $NetBSD: UI_STRING.3,v 1.3 2019/06/09 18:44:33 christos Exp $ +.\" $NetBSD: UI_STRING.3,v 1.3.2.1 2021/03/28 18:21:51 martin Exp $ .\" -.\" Automatically generated by Pod::Man 4.10 (Pod::Simple 3.35) +.\" Automatically generated by Pod::Man 4.11 (Pod::Simple 3.35) .\" .\" Standard preamble: .\" ======================================================================== @@ -135,7 +135,7 @@ .\" ======================================================================== .\" .IX Title "UI_STRING 3" -.TH UI_STRING 3 "2018-09-23" "1.1.1c" "OpenSSL" +.TH UI_STRING 3 "2018-09-23" "1.1.1i" "OpenSSL" .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. .if n .ad l diff --git a/crypto/external/bsd/openssl/lib/libcrypto/man/UI_UTIL_read_pw.3 b/crypto/external/bsd/openssl/lib/libcrypto/man/UI_UTIL_read_pw.3 index 77488f9b0c3..1db94e8087f 100644 --- a/crypto/external/bsd/openssl/lib/libcrypto/man/UI_UTIL_read_pw.3 +++ b/crypto/external/bsd/openssl/lib/libcrypto/man/UI_UTIL_read_pw.3 @@ -1,6 +1,6 @@ -.\" $NetBSD: UI_UTIL_read_pw.3,v 1.2 2019/06/09 18:44:33 christos Exp $ +.\" $NetBSD: UI_UTIL_read_pw.3,v 1.2.4.1 2021/03/28 18:21:51 martin Exp $ .\" -.\" Automatically generated by Pod::Man 4.10 (Pod::Simple 3.35) +.\" Automatically generated by Pod::Man 4.11 (Pod::Simple 3.35) .\" .\" Standard preamble: .\" ======================================================================== @@ -135,7 +135,7 @@ .\" ======================================================================== .\" .IX Title "UI_UTIL_read_pw 3" -.TH UI_UTIL_read_pw 3 "2018-09-23" "1.1.1c" "OpenSSL" +.TH UI_UTIL_read_pw 3 "2020-12-10" "1.1.1i" "OpenSSL" .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. .if n .ad l @@ -162,7 +162,7 @@ libcrypto, -lcrypto prompt, and stores it in \fBbuf\fR. The maximum allowed size is given with \fBlength\fR, including the terminating \s-1NUL\s0 byte. -If \fBverify\fR is non-zero, the password will be verified as well. +If \fBverify\fR is nonzero, the password will be verified as well. .PP \&\fBUI_UTIL_read_pw()\fR does the same as \fBUI_UTIL_read_pw_string()\fR, the difference is that you can give it an external buffer \fBbuff\fR for the @@ -199,7 +199,7 @@ if an error occurred. \&\fBUI_get_default_method\fR\|(3) .SH "COPYRIGHT" .IX Header "COPYRIGHT" -Copyright 2001\-2018 The OpenSSL Project Authors. All Rights Reserved. +Copyright 2001\-2020 The OpenSSL Project Authors. All Rights Reserved. .PP Licensed under the OpenSSL license (the \*(L"License\*(R"). You may not use this file except in compliance with the License. You can obtain a copy diff --git a/crypto/external/bsd/openssl/lib/libcrypto/man/UI_create_method.3 b/crypto/external/bsd/openssl/lib/libcrypto/man/UI_create_method.3 index 4fc746b0f3f..f26e28fbc64 100644 --- a/crypto/external/bsd/openssl/lib/libcrypto/man/UI_create_method.3 +++ b/crypto/external/bsd/openssl/lib/libcrypto/man/UI_create_method.3 @@ -1,6 +1,6 @@ -.\" $NetBSD: UI_create_method.3,v 1.3 2019/06/09 18:44:33 christos Exp $ +.\" $NetBSD: UI_create_method.3,v 1.3.2.1 2021/03/28 18:21:51 martin Exp $ .\" -.\" Automatically generated by Pod::Man 4.10 (Pod::Simple 3.35) +.\" Automatically generated by Pod::Man 4.11 (Pod::Simple 3.35) .\" .\" Standard preamble: .\" ======================================================================== @@ -135,7 +135,7 @@ .\" ======================================================================== .\" .IX Title "UI_create_method 3" -.TH UI_create_method 3 "2019-03-12" "1.1.1c" "OpenSSL" +.TH UI_create_method 3 "2020-12-10" "1.1.1i" "OpenSSL" .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. .if n .ad l @@ -192,7 +192,7 @@ libcrypto, -lcrypto .Ve .SH "DESCRIPTION" .IX Header "DESCRIPTION" -A method contains a few functions that implement the low level of the +A method contains a few functions that implement the low-level of the User Interface. These functions are: .IP "an opener" 4 @@ -324,7 +324,7 @@ The \fBUI_method_set_data_duplicator()\fR, \fBUI_method_get_data_duplicator()\fR and \fBUI_method_get_data_destructor()\fR functions were added in OpenSSL 1.1.1. .SH "COPYRIGHT" .IX Header "COPYRIGHT" -Copyright 2001\-2016 The OpenSSL Project Authors. All Rights Reserved. +Copyright 2001\-2020 The OpenSSL Project Authors. All Rights Reserved. .PP Licensed under the OpenSSL license (the \*(L"License\*(R"). You may not use this file except in compliance with the License. You can obtain a copy diff --git a/crypto/external/bsd/openssl/lib/libcrypto/man/UI_new.3 b/crypto/external/bsd/openssl/lib/libcrypto/man/UI_new.3 index 5c31634253a..806e87bd7ec 100644 --- a/crypto/external/bsd/openssl/lib/libcrypto/man/UI_new.3 +++ b/crypto/external/bsd/openssl/lib/libcrypto/man/UI_new.3 @@ -1,6 +1,6 @@ -.\" $NetBSD: UI_new.3,v 1.3 2019/06/09 18:44:33 christos Exp $ +.\" $NetBSD: UI_new.3,v 1.3.2.1 2021/03/28 18:21:51 martin Exp $ .\" -.\" Automatically generated by Pod::Man 4.10 (Pod::Simple 3.35) +.\" Automatically generated by Pod::Man 4.11 (Pod::Simple 3.35) .\" .\" Standard preamble: .\" ======================================================================== @@ -135,7 +135,7 @@ .\" ======================================================================== .\" .IX Title "UI_new 3" -.TH UI_new 3 "2019-03-12" "1.1.1c" "OpenSSL" +.TH UI_new 3 "2020-12-10" "1.1.1i" "OpenSSL" .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. .if n .ad l @@ -293,7 +293,7 @@ of all strings. a prompt from two pieces of information: an description and a name. The default constructor (if there is none provided by the method used) creates a string "Enter \fIdescription\fR for \fIname\fR:\*(L". With the -description \*(R"pass phrase\*(L" and the file name \*(R"foo.key\*(L", that becomes +description \*(R"pass phrase\*(L" and the filename \*(R"foo.key\*(L", that becomes \&\*(R"Enter pass phrase for foo.key:". Other methods may create whatever string and may include encodings that will be processed by the other method functions. @@ -380,7 +380,7 @@ respectively. The \fBUI_dup_user_data()\fR function was added in OpenSSL 1.1.1. .SH "COPYRIGHT" .IX Header "COPYRIGHT" -Copyright 2001\-2018 The OpenSSL Project Authors. All Rights Reserved. +Copyright 2001\-2020 The OpenSSL Project Authors. All Rights Reserved. .PP Licensed under the OpenSSL license (the \*(L"License\*(R"). You may not use this file except in compliance with the License. You can obtain a copy diff --git a/crypto/external/bsd/openssl/lib/libcrypto/man/X25519.7 b/crypto/external/bsd/openssl/lib/libcrypto/man/X25519.7 index b33ce900d74..a289ed5a288 100644 --- a/crypto/external/bsd/openssl/lib/libcrypto/man/X25519.7 +++ b/crypto/external/bsd/openssl/lib/libcrypto/man/X25519.7 @@ -1,6 +1,6 @@ -.\" $NetBSD: X25519.7,v 1.2 2019/06/09 18:44:33 christos Exp $ +.\" $NetBSD: X25519.7,v 1.2.4.1 2021/03/28 18:21:51 martin Exp $ .\" -.\" Automatically generated by Pod::Man 4.10 (Pod::Simple 3.35) +.\" Automatically generated by Pod::Man 4.11 (Pod::Simple 3.35) .\" .\" Standard preamble: .\" ======================================================================== @@ -135,7 +135,7 @@ .\" ======================================================================== .\" .IX Title "X25519 7" -.TH X25519 7 "2018-09-23" "1.1.1c" "OpenSSL" +.TH X25519 7 "2020-03-22" "1.1.1i" "OpenSSL" .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. .if n .ad l @@ -148,7 +148,7 @@ X448 .IX Header "DESCRIPTION" The \fBX25519\fR and \fBX448\fR \s-1EVP_PKEY\s0 implementation supports key generation and key derivation using \fBX25519\fR and \fBX448\fR. It has associated private and public -key formats compatible with draft\-ietf\-curdle\-pkix\-03. +key formats compatible with \s-1RFC 8410.\s0 .PP No additional parameters can be set during key generation. .PP @@ -177,8 +177,8 @@ the associated public key. X25519 or X448 public keys can be set directly using \&\fBEVP_PKEY_new_raw_public_key\fR\|(3) or loaded from a SubjectPublicKeyInfo structure in a \s-1PEM\s0 file using \fBPEM_read_bio_PUBKEY\fR\|(3) (or similar function). -.SH "EXAMPLE" -.IX Header "EXAMPLE" +.SH "EXAMPLES" +.IX Header "EXAMPLES" This example generates an \fBX25519\fR private key and writes it to standard output in \s-1PEM\s0 format: .PP @@ -204,7 +204,7 @@ The key derivation example in \fBEVP_PKEY_derive\fR\|(3) can be used with \&\fBEVP_PKEY_derive_set_peer\fR\|(3) .SH "COPYRIGHT" .IX Header "COPYRIGHT" -Copyright 2017\-2018 The OpenSSL Project Authors. All Rights Reserved. +Copyright 2017\-2020 The OpenSSL Project Authors. All Rights Reserved. .PP Licensed under the OpenSSL license (the \*(L"License\*(R"). You may not use this file except in compliance with the License. You can obtain a copy diff --git a/crypto/external/bsd/openssl/lib/libcrypto/man/X509V3_get_d2i.3 b/crypto/external/bsd/openssl/lib/libcrypto/man/X509V3_get_d2i.3 index 5ecc18a1823..7f7dced2fb9 100644 --- a/crypto/external/bsd/openssl/lib/libcrypto/man/X509V3_get_d2i.3 +++ b/crypto/external/bsd/openssl/lib/libcrypto/man/X509V3_get_d2i.3 @@ -1,6 +1,6 @@ -.\" $NetBSD: X509V3_get_d2i.3,v 1.3 2019/06/09 18:44:33 christos Exp $ +.\" $NetBSD: X509V3_get_d2i.3,v 1.3.2.1 2021/03/28 18:21:51 martin Exp $ .\" -.\" Automatically generated by Pod::Man 4.10 (Pod::Simple 3.35) +.\" Automatically generated by Pod::Man 4.11 (Pod::Simple 3.35) .\" .\" Standard preamble: .\" ======================================================================== @@ -135,7 +135,7 @@ .\" ======================================================================== .\" .IX Title "X509V3_get_d2i 3" -.TH X509V3_get_d2i 3 "2018-09-23" "1.1.1c" "OpenSSL" +.TH X509V3_get_d2i 3 "2020-12-10" "1.1.1i" "OpenSSL" .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. .if n .ad l @@ -218,7 +218,7 @@ of a certificate a \s-1CRL\s0 or a \s-1CRL\s0 entry respectively. .SH "NOTES" .IX Header "NOTES" In almost all cases an extension can occur at most once and multiple -occurrences is an error. Therefore the \fBidx\fR parameter is usually \fB\s-1NULL\s0\fR. +occurrences is an error. Therefore, the \fBidx\fR parameter is usually \fB\s-1NULL\s0\fR. .PP The \fBflags\fR parameter may be one of the following values. .PP @@ -375,7 +375,7 @@ failure. \&\fBX509_verify_cert\fR\|(3) .SH "COPYRIGHT" .IX Header "COPYRIGHT" -Copyright 2015\-2016 The OpenSSL Project Authors. All Rights Reserved. +Copyright 2015\-2020 The OpenSSL Project Authors. All Rights Reserved. .PP Licensed under the OpenSSL license (the \*(L"License\*(R"). You may not use this file except in compliance with the License. You can obtain a copy diff --git a/crypto/external/bsd/openssl/lib/libcrypto/man/X509_ALGOR_dup.3 b/crypto/external/bsd/openssl/lib/libcrypto/man/X509_ALGOR_dup.3 index e73abf2befc..1cb6d1f4291 100644 --- a/crypto/external/bsd/openssl/lib/libcrypto/man/X509_ALGOR_dup.3 +++ b/crypto/external/bsd/openssl/lib/libcrypto/man/X509_ALGOR_dup.3 @@ -1,6 +1,6 @@ -.\" $NetBSD: X509_ALGOR_dup.3,v 1.3 2019/06/09 18:44:33 christos Exp $ +.\" $NetBSD: X509_ALGOR_dup.3,v 1.3.2.1 2021/03/28 18:21:51 martin Exp $ .\" -.\" Automatically generated by Pod::Man 4.10 (Pod::Simple 3.35) +.\" Automatically generated by Pod::Man 4.11 (Pod::Simple 3.35) .\" .\" Standard preamble: .\" ======================================================================== @@ -135,13 +135,13 @@ .\" ======================================================================== .\" .IX Title "X509_ALGOR_dup 3" -.TH X509_ALGOR_dup 3 "2018-09-23" "1.1.1c" "OpenSSL" +.TH X509_ALGOR_dup 3 "2020-12-10" "1.1.1i" "OpenSSL" .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. .if n .ad l .nh .SH "NAME" -X509_ALGOR_dup, X509_ALGOR_set0, X509_ALGOR_get0, X509_ALGOR_set_md, X509_ALGOR_cmp \- AlgorithmIdentifier functions +X509_ALGOR_dup, X509_ALGOR_set0, X509_ALGOR_get0, X509_ALGOR_set_md, X509_ALGOR_cmp, X509_ALGOR_copy \- AlgorithmIdentifier functions .SH "LIBRARY" libcrypto, -lcrypto .SH "SYNOPSIS" @@ -155,6 +155,7 @@ libcrypto, -lcrypto \& const void **ppval, const X509_ALGOR *alg); \& void X509_ALGOR_set_md(X509_ALGOR *alg, const EVP_MD *md); \& int X509_ALGOR_cmp(const X509_ALGOR *a, const X509_ALGOR *b); +\& int X509_ALGOR_copy(X509_ALGOR *dest, const X509_ALGOR *src); .Ve .SH "DESCRIPTION" .IX Header "DESCRIPTION" @@ -175,21 +176,27 @@ and \fB*ppval\fR from the \fBAlgorithmIdentifier\fR \fBalg\fR. values for the message digest \fBmd\fR. .PP \&\fBX509_ALGOR_cmp()\fR compares \fBa\fR and \fBb\fR and returns 0 if they have identical -encodings and non-zero otherwise. +encodings and nonzero otherwise. +.PP +\&\fBX509_ALGOR_copy()\fR copies the source values into the dest structs; making +a duplicate of each (and free any thing pointed to from within *dest). .SH "RETURN VALUES" .IX Header "RETURN VALUES" \&\fBX509_ALGOR_dup()\fR returns a valid \fBX509_ALGOR\fR structure or \s-1NULL\s0 if an error occurred. .PP -\&\fBX509_ALGOR_set0()\fR returns 1 on success or 0 on error. +\&\fBX509_ALGOR_set0()\fR and \fBX509_ALGOR_copy()\fR return 1 on success or 0 on error. .PP \&\fBX509_ALGOR_get0()\fR and \fBX509_ALGOR_set_md()\fR return no values. .PP \&\fBX509_ALGOR_cmp()\fR returns 0 if the two parameters have identical encodings and -non-zero otherwise. +nonzero otherwise. +.SH "HISTORY" +.IX Header "HISTORY" +The \fBX509_ALGOR_copy()\fR was added in 1.1.1e. .SH "COPYRIGHT" .IX Header "COPYRIGHT" -Copyright 2002\-2018 The OpenSSL Project Authors. All Rights Reserved. +Copyright 2002\-2020 The OpenSSL Project Authors. All Rights Reserved. .PP Licensed under the OpenSSL license (the \*(L"License\*(R"). You may not use this file except in compliance with the License. You can obtain a copy diff --git a/crypto/external/bsd/openssl/lib/libcrypto/man/X509_CRL_get0_by_serial.3 b/crypto/external/bsd/openssl/lib/libcrypto/man/X509_CRL_get0_by_serial.3 index 031684569c7..ca0097accf3 100644 --- a/crypto/external/bsd/openssl/lib/libcrypto/man/X509_CRL_get0_by_serial.3 +++ b/crypto/external/bsd/openssl/lib/libcrypto/man/X509_CRL_get0_by_serial.3 @@ -1,6 +1,6 @@ -.\" $NetBSD: X509_CRL_get0_by_serial.3,v 1.3 2019/06/09 18:44:33 christos Exp $ +.\" $NetBSD: X509_CRL_get0_by_serial.3,v 1.3.2.1 2021/03/28 18:21:51 martin Exp $ .\" -.\" Automatically generated by Pod::Man 4.10 (Pod::Simple 3.35) +.\" Automatically generated by Pod::Man 4.11 (Pod::Simple 3.35) .\" .\" Standard preamble: .\" ======================================================================== @@ -135,7 +135,7 @@ .\" ======================================================================== .\" .IX Title "X509_CRL_get0_by_serial 3" -.TH X509_CRL_get0_by_serial 3 "2018-09-23" "1.1.1c" "OpenSSL" +.TH X509_CRL_get0_by_serial 3 "2018-09-23" "1.1.1i" "OpenSSL" .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. .if n .ad l diff --git a/crypto/external/bsd/openssl/lib/libcrypto/man/X509_EXTENSION_set_object.3 b/crypto/external/bsd/openssl/lib/libcrypto/man/X509_EXTENSION_set_object.3 index 7bf7a5f9c0f..e07d066bec0 100644 --- a/crypto/external/bsd/openssl/lib/libcrypto/man/X509_EXTENSION_set_object.3 +++ b/crypto/external/bsd/openssl/lib/libcrypto/man/X509_EXTENSION_set_object.3 @@ -1,6 +1,6 @@ -.\" $NetBSD: X509_EXTENSION_set_object.3,v 1.3 2019/06/09 18:44:33 christos Exp $ +.\" $NetBSD: X509_EXTENSION_set_object.3,v 1.3.2.1 2021/03/28 18:21:51 martin Exp $ .\" -.\" Automatically generated by Pod::Man 4.10 (Pod::Simple 3.35) +.\" Automatically generated by Pod::Man 4.11 (Pod::Simple 3.35) .\" .\" Standard preamble: .\" ======================================================================== @@ -135,7 +135,7 @@ .\" ======================================================================== .\" .IX Title "X509_EXTENSION_set_object 3" -.TH X509_EXTENSION_set_object 3 "2018-09-23" "1.1.1c" "OpenSSL" +.TH X509_EXTENSION_set_object 3 "2018-09-23" "1.1.1i" "OpenSSL" .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. .if n .ad l diff --git a/crypto/external/bsd/openssl/lib/libcrypto/man/X509_LOOKUP_hash_dir.3 b/crypto/external/bsd/openssl/lib/libcrypto/man/X509_LOOKUP_hash_dir.3 index 8601ad8d01a..3204b9d1978 100644 --- a/crypto/external/bsd/openssl/lib/libcrypto/man/X509_LOOKUP_hash_dir.3 +++ b/crypto/external/bsd/openssl/lib/libcrypto/man/X509_LOOKUP_hash_dir.3 @@ -1,6 +1,6 @@ -.\" $NetBSD: X509_LOOKUP_hash_dir.3,v 1.3 2019/06/09 18:44:33 christos Exp $ +.\" $NetBSD: X509_LOOKUP_hash_dir.3,v 1.3.2.1 2021/03/28 18:21:51 martin Exp $ .\" -.\" Automatically generated by Pod::Man 4.10 (Pod::Simple 3.35) +.\" Automatically generated by Pod::Man 4.11 (Pod::Simple 3.35) .\" .\" Standard preamble: .\" ======================================================================== @@ -135,7 +135,7 @@ .\" ======================================================================== .\" .IX Title "X509_LOOKUP_hash_dir 3" -.TH X509_LOOKUP_hash_dir 3 "2018-09-23" "1.1.1c" "OpenSSL" +.TH X509_LOOKUP_hash_dir 3 "2020-12-10" "1.1.1i" "OpenSSL" .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. .if n .ad l @@ -218,7 +218,7 @@ upon each lookup, so that newer CRLs are as soon as they appear in the directory. .PP The directory should contain one certificate or \s-1CRL\s0 per file in \s-1PEM\s0 format, -with a file name of the form \fIhash\fR.\fIN\fR for a certificate, or +with a filename of the form \fIhash\fR.\fIN\fR for a certificate, or \&\fIhash\fR.\fBr\fR\fIN\fR for a \s-1CRL.\s0 The \fIhash\fR is the value returned by the \fBX509_NAME_hash\fR\|(3) function applied to the subject name for certificates or issuer name for CRLs. @@ -264,7 +264,7 @@ the number of loaded objects or 0 on error. \&\fBX509_LOOKUP_meth_new\fR\|(3), .SH "COPYRIGHT" .IX Header "COPYRIGHT" -Copyright 2015\-2018 The OpenSSL Project Authors. All Rights Reserved. +Copyright 2015\-2020 The OpenSSL Project Authors. All Rights Reserved. .PP Licensed under the OpenSSL license (the \*(L"License\*(R"). You may not use this file except in compliance with the License. You can obtain a copy diff --git a/crypto/external/bsd/openssl/lib/libcrypto/man/X509_LOOKUP_meth_new.3 b/crypto/external/bsd/openssl/lib/libcrypto/man/X509_LOOKUP_meth_new.3 index ad2d28050bc..ba5320e2e6e 100644 --- a/crypto/external/bsd/openssl/lib/libcrypto/man/X509_LOOKUP_meth_new.3 +++ b/crypto/external/bsd/openssl/lib/libcrypto/man/X509_LOOKUP_meth_new.3 @@ -1,6 +1,6 @@ -.\" $NetBSD: X509_LOOKUP_meth_new.3,v 1.2 2019/06/09 18:44:33 christos Exp $ +.\" $NetBSD: X509_LOOKUP_meth_new.3,v 1.2.4.1 2021/03/28 18:21:51 martin Exp $ .\" -.\" Automatically generated by Pod::Man 4.10 (Pod::Simple 3.35) +.\" Automatically generated by Pod::Man 4.11 (Pod::Simple 3.35) .\" .\" Standard preamble: .\" ======================================================================== @@ -135,12 +135,13 @@ .\" ======================================================================== .\" .IX Title "X509_LOOKUP_meth_new 3" -.TH X509_LOOKUP_meth_new 3 "2019-06-09" "1.1.1c" "OpenSSL" +.TH X509_LOOKUP_meth_new 3 "2020-12-10" "1.1.1i" "OpenSSL" .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. .if n .ad l .nh .SH "NAME" +X509_LOOKUP_METHOD, X509_LOOKUP_meth_new, X509_LOOKUP_meth_free, X509_LOOKUP_meth_set_new_item, X509_LOOKUP_meth_get_new_item, X509_LOOKUP_meth_set_free, X509_LOOKUP_meth_get_free, X509_LOOKUP_meth_set_init, @@ -155,8 +156,7 @@ X509_LOOKUP_get_by_fingerprint_fn, X509_LOOKUP_meth_set_get_by_fingerprint, X509_LOOKUP_meth_get_get_by_fingerprint, X509_LOOKUP_get_by_alias_fn, X509_LOOKUP_meth_set_get_by_alias, X509_LOOKUP_meth_get_get_by_alias, -X509_LOOKUP_set_method_data, X509_LOOKUP_get_method_data, -X509_LOOKUP_get_store, X509_OBJECT_set1_X509, X509_OBJECT_set1_X509_CRL +X509_OBJECT_set1_X509, X509_OBJECT_set1_X509_CRL \&\- Routines to build up X509_LOOKUP methods .SH "LIBRARY" libcrypto, -lcrypto @@ -165,6 +165,8 @@ libcrypto, -lcrypto .Vb 1 \& #include <openssl/x509_vfy.h> \& +\& typedef x509_lookup_method_st X509_LOOKUP_METHOD; +\& \& X509_LOOKUP_METHOD *X509_LOOKUP_meth_new(const char *name); \& void X509_LOOKUP_meth_free(X509_LOOKUP_METHOD *method); \& @@ -233,11 +235,6 @@ libcrypto, -lcrypto \& X509_LOOKUP_get_by_alias_fn X509_LOOKUP_meth_get_get_by_alias( \& const X509_LOOKUP_METHOD *method); \& -\& int X509_LOOKUP_set_method_data(X509_LOOKUP *ctx, void *data); -\& void *X509_LOOKUP_get_method_data(const X509_LOOKUP *ctx); -\& -\& X509_STORE *X509_LOOKUP_get_store(const X509_LOOKUP *ctx); -\& \& int X509_OBJECT_set1_X509(X509_OBJECT *a, X509 *obj); \& int X509_OBJECT_set1_X509_CRL(X509_OBJECT *a, X509_CRL *obj); .Ve @@ -259,7 +256,7 @@ method. function that is called when an \fBX509_LOOKUP\fR object is created with \&\fBX509_LOOKUP_new()\fR. If an X509_LOOKUP_METHOD requires any per\-X509_LOOKUP specific data, the supplied new_item function should allocate this data and -invoke \fBX509_LOOKUP_set_method_data()\fR. +invoke \fBX509_LOOKUP_set_method_data\fR\|(3). .PP \&\fBX509_LOOKUP_get_free()\fR and \fBX509_LOOKUP_set_free()\fR get and set the function that is used to free any method data that was allocated and set from within @@ -267,7 +264,7 @@ new_item function. .PP \&\fBX509_LOOKUP_meth_get_init()\fR and \fBX509_LOOKUP_meth_set_init()\fR get and set the function that is used to initialize the method data that was set with -\&\fBX509_LOOKUP_set_method_data()\fR as part of the new_item routine. +\&\fBX509_LOOKUP_set_method_data\fR\|(3) as part of the new_item routine. .PP \&\fBX509_LOOKUP_meth_get_shutdown()\fR and \fBX509_LOOKUP_meth_set_shutdown()\fR get and set the function that is used to shut down the method data whose state was @@ -294,7 +291,7 @@ Implementations must add objects they find to the \fBX509_STORE\fR object using \fBX509_STORE_add_cert()\fR or \fBX509_STORE_add_crl()\fR. This increments its reference count. However, the \fBX509_STORE_CTX_get_by_subject()\fR function also increases the reference count which leads to one too -many references being held. Therefore applications should +many references being held. Therefore, applications should additionally call \fBX509_free()\fR or \fBX509_CRL_free()\fR to decrement the reference count again. .PP @@ -304,9 +301,9 @@ increments the result's reference count. .PP Any method data that was created as a result of the new_item function set by \fBX509_LOOKUP_meth_set_new_item()\fR can be accessed with -\&\fBX509_LOOKUP_get_method_data()\fR. The \fBX509_STORE\fR object that owns the -X509_LOOKUP may be accessed with \fBX509_LOOKUP_get_store()\fR. Successful lookups -should return 1, and unsuccessful lookups should return 0. +\&\fBX509_LOOKUP_get_method_data\fR\|(3). The \fBX509_STORE\fR object that owns the +X509_LOOKUP may be accessed with \fBX509_LOOKUP_get_store\fR\|(3). Successful +lookups should return 1, and unsuccessful lookups should return 0. .PP \&\fBX509_LOOKUP_get_get_by_subject()\fR, \fBX509_LOOKUP_get_get_by_issuer_serial()\fR, \&\fBX509_LOOKUP_get_get_by_fingerprint()\fR, \fBX509_LOOKUP_get_get_by_alias()\fR retrieve @@ -325,7 +322,7 @@ pointers. The functions described here were added in OpenSSL 1.1.0i. .SH "COPYRIGHT" .IX Header "COPYRIGHT" -Copyright 2018\-2019 The OpenSSL Project Authors. All Rights Reserved. +Copyright 2018\-2020 The OpenSSL Project Authors. All Rights Reserved. .PP Licensed under the OpenSSL license (the \*(L"License\*(R"). You may not use this file except in compliance with the License. You can obtain a copy diff --git a/crypto/external/bsd/openssl/lib/libcrypto/man/X509_NAME_ENTRY_get_object.3 b/crypto/external/bsd/openssl/lib/libcrypto/man/X509_NAME_ENTRY_get_object.3 index 3a9cd725a17..3988c6c86b6 100644 --- a/crypto/external/bsd/openssl/lib/libcrypto/man/X509_NAME_ENTRY_get_object.3 +++ b/crypto/external/bsd/openssl/lib/libcrypto/man/X509_NAME_ENTRY_get_object.3 @@ -1,6 +1,6 @@ -.\" $NetBSD: X509_NAME_ENTRY_get_object.3,v 1.19 2019/06/09 18:44:33 christos Exp $ +.\" $NetBSD: X509_NAME_ENTRY_get_object.3,v 1.19.2.1 2021/03/28 18:21:51 martin Exp $ .\" -.\" Automatically generated by Pod::Man 4.10 (Pod::Simple 3.35) +.\" Automatically generated by Pod::Man 4.11 (Pod::Simple 3.35) .\" .\" Standard preamble: .\" ======================================================================== @@ -135,7 +135,7 @@ .\" ======================================================================== .\" .IX Title "X509_NAME_ENTRY_get_object 3" -.TH X509_NAME_ENTRY_get_object 3 "2019-03-12" "1.1.1c" "OpenSSL" +.TH X509_NAME_ENTRY_get_object 3 "2019-03-12" "1.1.1i" "OpenSSL" .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. .if n .ad l diff --git a/crypto/external/bsd/openssl/lib/libcrypto/man/X509_NAME_add_entry_by_txt.3 b/crypto/external/bsd/openssl/lib/libcrypto/man/X509_NAME_add_entry_by_txt.3 index c1fea181af0..03b90a4c7cd 100644 --- a/crypto/external/bsd/openssl/lib/libcrypto/man/X509_NAME_add_entry_by_txt.3 +++ b/crypto/external/bsd/openssl/lib/libcrypto/man/X509_NAME_add_entry_by_txt.3 @@ -1,6 +1,6 @@ -.\" $NetBSD: X509_NAME_add_entry_by_txt.3,v 1.19 2019/06/09 18:44:33 christos Exp $ +.\" $NetBSD: X509_NAME_add_entry_by_txt.3,v 1.19.2.1 2021/03/28 18:21:51 martin Exp $ .\" -.\" Automatically generated by Pod::Man 4.10 (Pod::Simple 3.35) +.\" Automatically generated by Pod::Man 4.11 (Pod::Simple 3.35) .\" .\" Standard preamble: .\" ======================================================================== @@ -135,7 +135,7 @@ .\" ======================================================================== .\" .IX Title "X509_NAME_add_entry_by_txt 3" -.TH X509_NAME_add_entry_by_txt 3 "2019-06-09" "1.1.1c" "OpenSSL" +.TH X509_NAME_add_entry_by_txt 3 "2019-06-09" "1.1.1i" "OpenSSL" .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. .if n .ad l diff --git a/crypto/external/bsd/openssl/lib/libcrypto/man/X509_NAME_get0_der.3 b/crypto/external/bsd/openssl/lib/libcrypto/man/X509_NAME_get0_der.3 index b6006ba66f4..97c944cfa87 100644 --- a/crypto/external/bsd/openssl/lib/libcrypto/man/X509_NAME_get0_der.3 +++ b/crypto/external/bsd/openssl/lib/libcrypto/man/X509_NAME_get0_der.3 @@ -1,6 +1,6 @@ -.\" $NetBSD: X509_NAME_get0_der.3,v 1.3 2019/06/09 18:44:33 christos Exp $ +.\" $NetBSD: X509_NAME_get0_der.3,v 1.3.2.1 2021/03/28 18:21:51 martin Exp $ .\" -.\" Automatically generated by Pod::Man 4.10 (Pod::Simple 3.35) +.\" Automatically generated by Pod::Man 4.11 (Pod::Simple 3.35) .\" .\" Standard preamble: .\" ======================================================================== @@ -135,7 +135,7 @@ .\" ======================================================================== .\" .IX Title "X509_NAME_get0_der 3" -.TH X509_NAME_get0_der 3 "2018-09-23" "1.1.1c" "OpenSSL" +.TH X509_NAME_get0_der 3 "2018-09-23" "1.1.1i" "OpenSSL" .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. .if n .ad l diff --git a/crypto/external/bsd/openssl/lib/libcrypto/man/X509_NAME_get_index_by_NID.3 b/crypto/external/bsd/openssl/lib/libcrypto/man/X509_NAME_get_index_by_NID.3 index 98c3a4e54eb..3f22100c58a 100644 --- a/crypto/external/bsd/openssl/lib/libcrypto/man/X509_NAME_get_index_by_NID.3 +++ b/crypto/external/bsd/openssl/lib/libcrypto/man/X509_NAME_get_index_by_NID.3 @@ -1,6 +1,6 @@ -.\" $NetBSD: X509_NAME_get_index_by_NID.3,v 1.19 2019/06/09 18:44:33 christos Exp $ +.\" $NetBSD: X509_NAME_get_index_by_NID.3,v 1.19.2.1 2021/03/28 18:21:51 martin Exp $ .\" -.\" Automatically generated by Pod::Man 4.10 (Pod::Simple 3.35) +.\" Automatically generated by Pod::Man 4.11 (Pod::Simple 3.35) .\" .\" Standard preamble: .\" ======================================================================== @@ -135,7 +135,7 @@ .\" ======================================================================== .\" .IX Title "X509_NAME_get_index_by_NID 3" -.TH X509_NAME_get_index_by_NID 3 "2019-06-09" "1.1.1c" "OpenSSL" +.TH X509_NAME_get_index_by_NID 3 "2019-06-09" "1.1.1i" "OpenSSL" .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. .if n .ad l diff --git a/crypto/external/bsd/openssl/lib/libcrypto/man/X509_NAME_print_ex.3 b/crypto/external/bsd/openssl/lib/libcrypto/man/X509_NAME_print_ex.3 index 6fbf656b225..d5aa1b68f73 100644 --- a/crypto/external/bsd/openssl/lib/libcrypto/man/X509_NAME_print_ex.3 +++ b/crypto/external/bsd/openssl/lib/libcrypto/man/X509_NAME_print_ex.3 @@ -1,6 +1,6 @@ -.\" $NetBSD: X509_NAME_print_ex.3,v 1.19 2019/06/09 18:44:33 christos Exp $ +.\" $NetBSD: X509_NAME_print_ex.3,v 1.19.2.1 2021/03/28 18:21:51 martin Exp $ .\" -.\" Automatically generated by Pod::Man 4.10 (Pod::Simple 3.35) +.\" Automatically generated by Pod::Man 4.11 (Pod::Simple 3.35) .\" .\" Standard preamble: .\" ======================================================================== @@ -135,7 +135,7 @@ .\" ======================================================================== .\" .IX Title "X509_NAME_print_ex 3" -.TH X509_NAME_print_ex 3 "2018-09-23" "1.1.1c" "OpenSSL" +.TH X509_NAME_print_ex 3 "2018-09-23" "1.1.1i" "OpenSSL" .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. .if n .ad l diff --git a/crypto/external/bsd/openssl/lib/libcrypto/man/X509_PUBKEY_new.3 b/crypto/external/bsd/openssl/lib/libcrypto/man/X509_PUBKEY_new.3 index acc474a3e75..6a3f110c5b5 100644 --- a/crypto/external/bsd/openssl/lib/libcrypto/man/X509_PUBKEY_new.3 +++ b/crypto/external/bsd/openssl/lib/libcrypto/man/X509_PUBKEY_new.3 @@ -1,6 +1,6 @@ -.\" $NetBSD: X509_PUBKEY_new.3,v 1.3 2019/06/09 18:44:33 christos Exp $ +.\" $NetBSD: X509_PUBKEY_new.3,v 1.3.2.1 2021/03/28 18:21:51 martin Exp $ .\" -.\" Automatically generated by Pod::Man 4.10 (Pod::Simple 3.35) +.\" Automatically generated by Pod::Man 4.11 (Pod::Simple 3.35) .\" .\" Standard preamble: .\" ======================================================================== @@ -135,7 +135,7 @@ .\" ======================================================================== .\" .IX Title "X509_PUBKEY_new 3" -.TH X509_PUBKEY_new 3 "2018-09-23" "1.1.1c" "OpenSSL" +.TH X509_PUBKEY_new 3 "2018-09-23" "1.1.1i" "OpenSSL" .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. .if n .ad l diff --git a/crypto/external/bsd/openssl/lib/libcrypto/man/X509_SIG_get0.3 b/crypto/external/bsd/openssl/lib/libcrypto/man/X509_SIG_get0.3 index d8827146aa8..c5f77064c6e 100644 --- a/crypto/external/bsd/openssl/lib/libcrypto/man/X509_SIG_get0.3 +++ b/crypto/external/bsd/openssl/lib/libcrypto/man/X509_SIG_get0.3 @@ -1,6 +1,6 @@ -.\" $NetBSD: X509_SIG_get0.3,v 1.3 2019/06/09 18:44:33 christos Exp $ +.\" $NetBSD: X509_SIG_get0.3,v 1.3.2.1 2021/03/28 18:21:51 martin Exp $ .\" -.\" Automatically generated by Pod::Man 4.10 (Pod::Simple 3.35) +.\" Automatically generated by Pod::Man 4.11 (Pod::Simple 3.35) .\" .\" Standard preamble: .\" ======================================================================== @@ -135,7 +135,7 @@ .\" ======================================================================== .\" .IX Title "X509_SIG_get0 3" -.TH X509_SIG_get0 3 "2018-09-23" "1.1.1c" "OpenSSL" +.TH X509_SIG_get0 3 "2018-09-23" "1.1.1i" "OpenSSL" .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. .if n .ad l diff --git a/crypto/external/bsd/openssl/lib/libcrypto/man/X509_STORE_CTX_get_error.3 b/crypto/external/bsd/openssl/lib/libcrypto/man/X509_STORE_CTX_get_error.3 index ad874cc3099..2b2af1e5a0d 100644 --- a/crypto/external/bsd/openssl/lib/libcrypto/man/X509_STORE_CTX_get_error.3 +++ b/crypto/external/bsd/openssl/lib/libcrypto/man/X509_STORE_CTX_get_error.3 @@ -1,6 +1,6 @@ -.\" $NetBSD: X509_STORE_CTX_get_error.3,v 1.18 2019/06/09 18:44:33 christos Exp $ +.\" $NetBSD: X509_STORE_CTX_get_error.3,v 1.18.2.1 2021/03/28 18:21:51 martin Exp $ .\" -.\" Automatically generated by Pod::Man 4.10 (Pod::Simple 3.35) +.\" Automatically generated by Pod::Man 4.11 (Pod::Simple 3.35) .\" .\" Standard preamble: .\" ======================================================================== @@ -135,7 +135,7 @@ .\" ======================================================================== .\" .IX Title "X509_STORE_CTX_get_error 3" -.TH X509_STORE_CTX_get_error 3 "2018-09-23" "1.1.1c" "OpenSSL" +.TH X509_STORE_CTX_get_error 3 "2020-12-10" "1.1.1i" "OpenSSL" .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. .if n .ad l @@ -179,7 +179,7 @@ it might be used in a verification callback to set an error based on additional checks. .PP \&\fBX509_STORE_CTX_get_error_depth()\fR returns the \fBdepth\fR of the error. This is a -non-negative integer representing where in the certificate chain the error +nonnegative integer representing where in the certificate chain the error occurred. If it is zero it occurred in the end entity certificate, one if it is the certificate which signed the end entity certificate and so on. .PP @@ -221,7 +221,7 @@ verification error \fBn\fR. .IX Header "RETURN VALUES" \&\fBX509_STORE_CTX_get_error()\fR returns \fBX509_V_OK\fR or an error code. .PP -\&\fBX509_STORE_CTX_get_error_depth()\fR returns a non-negative error depth. +\&\fBX509_STORE_CTX_get_error_depth()\fR returns a nonnegative error depth. .PP \&\fBX509_STORE_CTX_get_current_cert()\fR returns the certificate which caused the error or \fB\s-1NULL\s0\fR if no certificate is relevant to the error. @@ -238,8 +238,8 @@ error codes are defined but currently never returned: these are described as the operation was successful. .IP "\fBX509_V_ERR_UNABLE_TO_GET_ISSUER_CERT: unable to get issuer certificate\fR" 4 .IX Item "X509_V_ERR_UNABLE_TO_GET_ISSUER_CERT: unable to get issuer certificate" -the issuer certificate could not be found: this occurs if the issuer certificate -of an untrusted certificate cannot be found. +the issuer certificate of a locally looked up certificate could not be found. +This normally means the list of trusted certificates is not complete. .IP "\fBX509_V_ERR_UNABLE_TO_GET_CRL: unable to get certificate \s-1CRL\s0\fR" 4 .IX Item "X509_V_ERR_UNABLE_TO_GET_CRL: unable to get certificate CRL" the \s-1CRL\s0 of a certificate could not be found. @@ -299,8 +299,8 @@ the certificate chain could be built up using the untrusted certificates but the root could not be found locally. .IP "\fBX509_V_ERR_UNABLE_TO_GET_ISSUER_CERT_LOCALLY: unable to get local issuer certificate\fR" 4 .IX Item "X509_V_ERR_UNABLE_TO_GET_ISSUER_CERT_LOCALLY: unable to get local issuer certificate" -the issuer certificate of a locally looked up certificate could not be found. -This normally means the list of trusted certificates is not complete. +the issuer certificate could not be found: this occurs if the issuer certificate +of an untrusted certificate cannot be found. .IP "\fBX509_V_ERR_UNABLE_TO_VERIFY_LEAF_SIGNATURE: unable to verify the first certificate\fR" 4 .IX Item "X509_V_ERR_UNABLE_TO_VERIFY_LEAF_SIGNATURE: unable to verify the first certificate" no signatures could be verified because the chain contains only one certificate @@ -417,7 +417,7 @@ thread safe but will never happen unless an invalid code is passed. \&\fBX509_free\fR\|(3). .SH "COPYRIGHT" .IX Header "COPYRIGHT" -Copyright 2009\-2016 The OpenSSL Project Authors. All Rights Reserved. +Copyright 2009\-2020 The OpenSSL Project Authors. All Rights Reserved. .PP Licensed under the OpenSSL license (the \*(L"License\*(R"). You may not use this file except in compliance with the License. You can obtain a copy diff --git a/crypto/external/bsd/openssl/lib/libcrypto/man/X509_STORE_CTX_new.3 b/crypto/external/bsd/openssl/lib/libcrypto/man/X509_STORE_CTX_new.3 index 4b5283a4d61..5656f585d83 100644 --- a/crypto/external/bsd/openssl/lib/libcrypto/man/X509_STORE_CTX_new.3 +++ b/crypto/external/bsd/openssl/lib/libcrypto/man/X509_STORE_CTX_new.3 @@ -1,6 +1,6 @@ -.\" $NetBSD: X509_STORE_CTX_new.3,v 1.18 2019/06/09 18:44:33 christos Exp $ +.\" $NetBSD: X509_STORE_CTX_new.3,v 1.18.2.1 2021/03/28 18:21:51 martin Exp $ .\" -.\" Automatically generated by Pod::Man 4.10 (Pod::Simple 3.35) +.\" Automatically generated by Pod::Man 4.11 (Pod::Simple 3.35) .\" .\" Standard preamble: .\" ======================================================================== @@ -135,7 +135,7 @@ .\" ======================================================================== .\" .IX Title "X509_STORE_CTX_new 3" -.TH X509_STORE_CTX_new 3 "2019-03-12" "1.1.1c" "OpenSSL" +.TH X509_STORE_CTX_new 3 "2020-12-10" "1.1.1i" "OpenSSL" .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. .if n .ad l @@ -169,7 +169,7 @@ libcrypto, -lcrypto \& void X509_STORE_CTX_set0_trusted_stack(X509_STORE_CTX *ctx, STACK_OF(X509) *sk); \& \& void X509_STORE_CTX_set_cert(X509_STORE_CTX *ctx, X509 *x); -\& STACK_OF(X509) *X509_STORE_CTX_get0_chain(X609_STORE_CTX *ctx); +\& STACK_OF(X509) *X509_STORE_CTX_get0_chain(X509_STORE_CTX *ctx); \& void X509_STORE_CTX_set0_verified_chain(X509_STORE_CTX *ctx, STACK_OF(X509) *chain); \& void X509_STORE_CTX_set0_crls(X509_STORE_CTX *ctx, STACK_OF(X509_CRL) *sk); \& @@ -193,7 +193,7 @@ by \fBX509_verify_cert()\fR. \&\fBX509_STORE_CTX_new()\fR returns a newly initialised \fBX509_STORE_CTX\fR structure. .PP \&\fBX509_STORE_CTX_cleanup()\fR internally cleans up an \fBX509_STORE_CTX\fR structure. -The context can then be reused with an new call to \fBX509_STORE_CTX_init()\fR. +The context can then be reused with a new call to \fBX509_STORE_CTX_init()\fR. .PP \&\fBX509_STORE_CTX_free()\fR completely frees up \fBctx\fR. After this call \fBctx\fR is no longer valid. @@ -221,7 +221,7 @@ instead of using an \fBX509_STORE\fR. by \fBctx\fR to be \fBchain\fR. Ownership of the chain is transferred to \fBctx\fR and should not be free'd by the caller. -\&\fBX509_STORE_CTX_get0_chain()\fR returns a the internal pointer used by the +\&\fBX509_STORE_CTX_get0_chain()\fR returns the internal pointer used by the \&\fBctx\fR that contains the validated chain. .PP \&\fBX509_STORE_CTX_set0_crls()\fR sets a set of CRLs to use to aid certificate @@ -273,7 +273,7 @@ be freed up until after the associated \fBX509_STORE_CTX\fR is freed. Copies should be made or reference counts increased instead. .SH "RETURN VALUES" .IX Header "RETURN VALUES" -\&\fBX509_STORE_CTX_new()\fR returns an newly allocates context or \fB\s-1NULL\s0\fR is an +\&\fBX509_STORE_CTX_new()\fR returns a newly allocated context or \fB\s-1NULL\s0\fR if an error occurred. .PP \&\fBX509_STORE_CTX_init()\fR returns 1 for success or 0 if an error occurred. @@ -301,7 +301,7 @@ The \fBX509_STORE_CTX_set0_crls()\fR function was added in OpenSSL 1.0.0. The \fBX509_STORE_CTX_get_num_untrusted()\fR function was added in OpenSSL 1.1.0. .SH "COPYRIGHT" .IX Header "COPYRIGHT" -Copyright 2009\-2016 The OpenSSL Project Authors. All Rights Reserved. +Copyright 2009\-2020 The OpenSSL Project Authors. All Rights Reserved. .PP Licensed under the OpenSSL license (the \*(L"License\*(R"). You may not use this file except in compliance with the License. You can obtain a copy diff --git a/crypto/external/bsd/openssl/lib/libcrypto/man/X509_STORE_CTX_set_verify_cb.3 b/crypto/external/bsd/openssl/lib/libcrypto/man/X509_STORE_CTX_set_verify_cb.3 index 21148fd5b63..fd0c8603b37 100644 --- a/crypto/external/bsd/openssl/lib/libcrypto/man/X509_STORE_CTX_set_verify_cb.3 +++ b/crypto/external/bsd/openssl/lib/libcrypto/man/X509_STORE_CTX_set_verify_cb.3 @@ -1,6 +1,6 @@ -.\" $NetBSD: X509_STORE_CTX_set_verify_cb.3,v 1.18 2019/06/09 18:44:33 christos Exp $ +.\" $NetBSD: X509_STORE_CTX_set_verify_cb.3,v 1.18.2.1 2021/03/28 18:21:51 martin Exp $ .\" -.\" Automatically generated by Pod::Man 4.10 (Pod::Simple 3.35) +.\" Automatically generated by Pod::Man 4.11 (Pod::Simple 3.35) .\" .\" Standard preamble: .\" ======================================================================== @@ -135,7 +135,7 @@ .\" ======================================================================== .\" .IX Title "X509_STORE_CTX_set_verify_cb 3" -.TH X509_STORE_CTX_set_verify_cb 3 "2019-03-12" "1.1.1c" "OpenSSL" +.TH X509_STORE_CTX_set_verify_cb 3 "2020-12-10" "1.1.1i" "OpenSSL" .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. .if n .ad l @@ -189,7 +189,7 @@ The verification callback can be used to customise the operation of certificate verification, either by overriding error conditions or logging errors for debugging purposes. .PP -However a verification callback is \fBnot\fR essential and the default operation +However, a verification callback is \fBnot\fR essential and the default operation is often sufficient. .PP The \fBok\fR parameter to the callback indicates the value the callback should @@ -215,8 +215,8 @@ for the specific \fBctx\fR. and \fBX509_STORE_CTX_get_cleanup()\fR return the function pointers cached from the corresponding \fBX509_STORE\fR, please see \&\fBX509_STORE_set_verify\fR\|(3) for more information. -.SH "WARNING" -.IX Header "WARNING" +.SH "WARNINGS" +.IX Header "WARNINGS" In general a verification callback should \fB\s-1NOT\s0\fR unconditionally return 1 in all circumstances because this will allow verification to succeed no matter what the error. This effectively removes all security from the application @@ -343,7 +343,7 @@ The and \fBX509_STORE_CTX_get_cleanup()\fR functions were added in OpenSSL 1.1.0. .SH "COPYRIGHT" .IX Header "COPYRIGHT" -Copyright 2009\-2016 The OpenSSL Project Authors. All Rights Reserved. +Copyright 2009\-2020 The OpenSSL Project Authors. All Rights Reserved. .PP Licensed under the OpenSSL license (the \*(L"License\*(R"). You may not use this file except in compliance with the License. You can obtain a copy diff --git a/crypto/external/bsd/openssl/lib/libcrypto/man/X509_STORE_add_cert.3 b/crypto/external/bsd/openssl/lib/libcrypto/man/X509_STORE_add_cert.3 index 0bcb0ec2b88..8c5c2edcb97 100644 --- a/crypto/external/bsd/openssl/lib/libcrypto/man/X509_STORE_add_cert.3 +++ b/crypto/external/bsd/openssl/lib/libcrypto/man/X509_STORE_add_cert.3 @@ -1,6 +1,6 @@ -.\" $NetBSD: X509_STORE_add_cert.3,v 1.2 2019/06/09 18:44:33 christos Exp $ +.\" $NetBSD: X509_STORE_add_cert.3,v 1.2.4.1 2021/03/28 18:21:51 martin Exp $ .\" -.\" Automatically generated by Pod::Man 4.10 (Pod::Simple 3.35) +.\" Automatically generated by Pod::Man 4.11 (Pod::Simple 3.35) .\" .\" Standard preamble: .\" ======================================================================== @@ -135,14 +135,16 @@ .\" ======================================================================== .\" .IX Title "X509_STORE_add_cert 3" -.TH X509_STORE_add_cert 3 "2018-09-23" "1.1.1c" "OpenSSL" +.TH X509_STORE_add_cert 3 "2020-03-22" "1.1.1i" "OpenSSL" .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. .if n .ad l .nh .SH "NAME" +X509_STORE, X509_STORE_add_cert, X509_STORE_add_crl, X509_STORE_set_depth, X509_STORE_set_flags, X509_STORE_set_purpose, X509_STORE_set_trust, +X509_STORE_add_lookup, X509_STORE_load_locations, X509_STORE_set_default_paths \&\- X509_STORE manipulation @@ -153,6 +155,8 @@ libcrypto, -lcrypto .Vb 1 \& #include <openssl/x509_vfy.h> \& +\& typedef x509_store_st X509_STORE; +\& \& int X509_STORE_add_cert(X509_STORE *ctx, X509 *x); \& int X509_STORE_add_crl(X509_STORE *ctx, X509_CRL *x); \& int X509_STORE_set_depth(X509_STORE *store, int depth); @@ -160,6 +164,9 @@ libcrypto, -lcrypto \& int X509_STORE_set_purpose(X509_STORE *ctx, int purpose); \& int X509_STORE_set_trust(X509_STORE *ctx, int trust); \& +\& X509_LOOKUP *X509_STORE_add_lookup(X509_STORE *store, +\& X509_LOOKUP_METHOD *meth); +\& \& int X509_STORE_load_locations(X509_STORE *ctx, \& const char *file, const char *dir); \& int X509_STORE_set_default_paths(X509_STORE *ctx); @@ -196,7 +203,9 @@ operate on pointers to \fBX509\fR objects, though. .PP \&\fBX509_STORE_add_cert()\fR and \fBX509_STORE_add_crl()\fR add the respective object to the \fBX509_STORE\fR's local storage. Untrusted objects should not be -added in this way. +added in this way. The added object's reference count is incremented by one, +hence the caller retains ownership of the object and needs to free it when it +is no longer needed. .PP \&\fBX509_STORE_set_depth()\fR, \fBX509_STORE_set_flags()\fR, \fBX509_STORE_set_purpose()\fR, \&\fBX509_STORE_set_trust()\fR, and \fBX509_STORE_set1_param()\fR set the default values @@ -204,6 +213,11 @@ for the corresponding values used in certificate chain validation. Their behavior is documented in the corresponding \fBX509_VERIFY_PARAM\fR manual pages, e.g., \fBX509_VERIFY_PARAM_set_depth\fR\|(3). .PP +\&\fBX509_STORE_add_lookup()\fR finds or creates a \fBX509_LOOKUP\fR\|(3) with the +\&\fBX509_LOOKUP_METHOD\fR\|(3) \fImeth\fR and adds it to the \fBX509_STORE\fR +\&\fIstore\fR. This also associates the \fBX509_STORE\fR with the lookup, so +\&\fBX509_LOOKUP\fR functions can look up objects in that store. +.PP \&\fBX509_STORE_load_locations()\fR loads trusted certificate(s) into an \&\fBX509_STORE\fR from a given file and/or directory path. It is permitted to specify just a file, just a directory, or both paths. The certificates @@ -220,6 +234,9 @@ paths. \&\fBX509_STORE_set_flags()\fR, \fBX509_STORE_set_purpose()\fR, \&\fBX509_STORE_set_trust()\fR, \fBX509_STORE_load_locations()\fR, and \&\fBX509_STORE_set_default_paths()\fR return 1 on success or 0 on failure. +.PP +\&\fBX509_STORE_add_lookup()\fR returns the found or created +\&\fBX509_LOOKUP\fR\|(3), or \s-1NULL\s0 on error. .SH "SEE ALSO" .IX Header "SEE ALSO" \&\fBX509_LOOKUP_hash_dir\fR\|(3). @@ -228,7 +245,7 @@ paths. \&\fBX509_STORE_get0_param\fR\|(3) .SH "COPYRIGHT" .IX Header "COPYRIGHT" -Copyright 2017\-2018 The OpenSSL Project Authors. All Rights Reserved. +Copyright 2017\-2020 The OpenSSL Project Authors. All Rights Reserved. .PP Licensed under the OpenSSL license (the \*(L"License\*(R"). You may not use this file except in compliance with the License. You can obtain a copy diff --git a/crypto/external/bsd/openssl/lib/libcrypto/man/X509_STORE_get0_param.3 b/crypto/external/bsd/openssl/lib/libcrypto/man/X509_STORE_get0_param.3 index 5182ec63112..9590766b679 100644 --- a/crypto/external/bsd/openssl/lib/libcrypto/man/X509_STORE_get0_param.3 +++ b/crypto/external/bsd/openssl/lib/libcrypto/man/X509_STORE_get0_param.3 @@ -1,6 +1,6 @@ -.\" $NetBSD: X509_STORE_get0_param.3,v 1.3 2019/06/09 18:44:33 christos Exp $ +.\" $NetBSD: X509_STORE_get0_param.3,v 1.3.2.1 2021/03/28 18:21:51 martin Exp $ .\" -.\" Automatically generated by Pod::Man 4.10 (Pod::Simple 3.35) +.\" Automatically generated by Pod::Man 4.11 (Pod::Simple 3.35) .\" .\" Standard preamble: .\" ======================================================================== @@ -135,7 +135,7 @@ .\" ======================================================================== .\" .IX Title "X509_STORE_get0_param 3" -.TH X509_STORE_get0_param 3 "2018-09-23" "1.1.1c" "OpenSSL" +.TH X509_STORE_get0_param 3 "2018-09-23" "1.1.1i" "OpenSSL" .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. .if n .ad l diff --git a/crypto/external/bsd/openssl/lib/libcrypto/man/X509_STORE_new.3 b/crypto/external/bsd/openssl/lib/libcrypto/man/X509_STORE_new.3 index 1cb5a680c2d..757e681259e 100644 --- a/crypto/external/bsd/openssl/lib/libcrypto/man/X509_STORE_new.3 +++ b/crypto/external/bsd/openssl/lib/libcrypto/man/X509_STORE_new.3 @@ -1,6 +1,6 @@ -.\" $NetBSD: X509_STORE_new.3,v 1.3 2019/06/09 18:44:33 christos Exp $ +.\" $NetBSD: X509_STORE_new.3,v 1.3.2.1 2021/03/28 18:21:51 martin Exp $ .\" -.\" Automatically generated by Pod::Man 4.10 (Pod::Simple 3.35) +.\" Automatically generated by Pod::Man 4.11 (Pod::Simple 3.35) .\" .\" Standard preamble: .\" ======================================================================== @@ -135,7 +135,7 @@ .\" ======================================================================== .\" .IX Title "X509_STORE_new 3" -.TH X509_STORE_new 3 "2019-03-12" "1.1.1c" "OpenSSL" +.TH X509_STORE_new 3 "2020-01-23" "1.1.1i" "OpenSSL" .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. .if n .ad l @@ -164,7 +164,7 @@ The \fBX509_STORE_new()\fR function returns a new X509_STORE. X509_STORE object. .PP \&\fBX509_STORE_lock()\fR locks the store from modification by other threads, -\&\fBX509_STORE_unlock()\fR locks it. +\&\fBX509_STORE_unlock()\fR unlocks it. .PP \&\fBX509_STORE_free()\fR frees up a single X509_STORE object. .SH "RETURN VALUES" @@ -185,7 +185,7 @@ The \fBX509_STORE_up_ref()\fR, \fBX509_STORE_lock()\fR and \fBX509_STORE_unlock( functions were added in OpenSSL 1.1.0. .SH "COPYRIGHT" .IX Header "COPYRIGHT" -Copyright 2016 The OpenSSL Project Authors. All Rights Reserved. +Copyright 2016\-2019 The OpenSSL Project Authors. All Rights Reserved. .PP Licensed under the OpenSSL license (the \*(L"License\*(R"). You may not use this file except in compliance with the License. You can obtain a copy diff --git a/crypto/external/bsd/openssl/lib/libcrypto/man/X509_STORE_set_verify_cb_func.3 b/crypto/external/bsd/openssl/lib/libcrypto/man/X509_STORE_set_verify_cb_func.3 index 82b25ead2b6..be3d87c239d 100644 --- a/crypto/external/bsd/openssl/lib/libcrypto/man/X509_STORE_set_verify_cb_func.3 +++ b/crypto/external/bsd/openssl/lib/libcrypto/man/X509_STORE_set_verify_cb_func.3 @@ -1,6 +1,6 @@ -.\" $NetBSD: X509_STORE_set_verify_cb_func.3,v 1.18 2019/06/09 18:44:33 christos Exp $ +.\" $NetBSD: X509_STORE_set_verify_cb_func.3,v 1.18.2.1 2021/03/28 18:21:51 martin Exp $ .\" -.\" Automatically generated by Pod::Man 4.10 (Pod::Simple 3.35) +.\" Automatically generated by Pod::Man 4.11 (Pod::Simple 3.35) .\" .\" Standard preamble: .\" ======================================================================== @@ -135,7 +135,7 @@ .\" ======================================================================== .\" .IX Title "X509_STORE_set_verify_cb_func 3" -.TH X509_STORE_set_verify_cb_func 3 "2019-03-12" "1.1.1c" "OpenSSL" +.TH X509_STORE_set_verify_cb_func 3 "2020-12-10" "1.1.1i" "OpenSSL" .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. .if n .ad l @@ -278,7 +278,7 @@ This function must return 0 on failure and 1 on success. function will be used instead.\fR .PP \&\fBX509_STORE_set_check_issued()\fR sets the function to check that a given -certificate \fBx\fR is issued with the issuer certificate \fBissuer\fR. +certificate \fBx\fR is issued by the issuer certificate \fBissuer\fR. This function must return 0 on failure (among others if \fBx\fR hasn't been issued with \fBissuer\fR) and 1 on success. \&\fIIf no function to get the issuer is provided, the internal default @@ -391,7 +391,7 @@ The functions were added in OpenSSL 1.1.0. .SH "COPYRIGHT" .IX Header "COPYRIGHT" -Copyright 2009\-2016 The OpenSSL Project Authors. All Rights Reserved. +Copyright 2009\-2020 The OpenSSL Project Authors. All Rights Reserved. .PP Licensed under the OpenSSL license (the \*(L"License\*(R"). You may not use this file except in compliance with the License. You can obtain a copy diff --git a/crypto/external/bsd/openssl/lib/libcrypto/man/X509_VERIFY_PARAM_set_flags.3 b/crypto/external/bsd/openssl/lib/libcrypto/man/X509_VERIFY_PARAM_set_flags.3 index 507afd6e450..a7ce30e4258 100644 --- a/crypto/external/bsd/openssl/lib/libcrypto/man/X509_VERIFY_PARAM_set_flags.3 +++ b/crypto/external/bsd/openssl/lib/libcrypto/man/X509_VERIFY_PARAM_set_flags.3 @@ -1,6 +1,6 @@ -.\" $NetBSD: X509_VERIFY_PARAM_set_flags.3,v 1.18 2019/06/09 18:44:33 christos Exp $ +.\" $NetBSD: X509_VERIFY_PARAM_set_flags.3,v 1.18.2.1 2021/03/28 18:21:51 martin Exp $ .\" -.\" Automatically generated by Pod::Man 4.10 (Pod::Simple 3.35) +.\" Automatically generated by Pod::Man 4.11 (Pod::Simple 3.35) .\" .\" Standard preamble: .\" ======================================================================== @@ -135,7 +135,7 @@ .\" ======================================================================== .\" .IX Title "X509_VERIFY_PARAM_set_flags 3" -.TH X509_VERIFY_PARAM_set_flags 3 "2019-03-12" "1.1.1c" "OpenSSL" +.TH X509_VERIFY_PARAM_set_flags 3 "2020-12-10" "1.1.1i" "OpenSSL" .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. .if n .ad l @@ -270,7 +270,7 @@ interoperable, though it will, for example, reject \s-1MD5\s0 signatures or \s-1 shorter than 1024 bits. .PP \&\fBX509_VERIFY_PARAM_set1_host()\fR sets the expected \s-1DNS\s0 hostname to -\&\fBname\fR clearing any previously specified host name or names. If +\&\fBname\fR clearing any previously specified hostname or names. If \&\fBname\fR is \s-1NULL,\s0 or empty the list of hostnames is cleared, and name checks are not performed on the peer certificate. If \fBname\fR is NUL-terminated, \fBnamelen\fR may be zero, otherwise \fBnamelen\fR @@ -403,12 +403,15 @@ they are enabled. If \fBX509_V_FLAG_USE_DELTAS\fR is set delta CRLs (if present) are used to determine certificate status. If not set deltas are ignored. .PP -\&\fBX509_V_FLAG_CHECK_SS_SIGNATURE\fR enables checking of the root \s-1CA\s0 self signed -certificate signature. By default this check is disabled because it doesn't +\&\fBX509_V_FLAG_CHECK_SS_SIGNATURE\fR requests checking the signature of +the last certificate in a chain if the certificate is supposedly self-signed. +This is prohibited and will result in an error if it is a non-conforming \s-1CA\s0 +certificate with key usage restrictions not including the keyCertSign bit. +By default this check is disabled because it doesn't add any additional security but in some cases applications might want to -check the signature anyway. A side effect of not checking the root \s-1CA\s0 -signature is that disabled or unsupported message digests on the root \s-1CA\s0 -are not treated as fatal errors. +check the signature anyway. A side effect of not checking the self-signature +of such a certificate is that disabled or unsupported message digests used for +the signature are not treated as fatal errors. .PP When \fBX509_V_FLAG_TRUSTED_FIRST\fR is set, construction of the certificate chain in \fBX509_verify_cert\fR\|(3) will search the trust store for issuer certificates @@ -481,8 +484,8 @@ maintained. If CRLs checking is enable CRLs are expected to be available in the corresponding \fBX509_STORE\fR structure. No attempt is made to download CRLs from the \s-1CRL\s0 distribution points extension. -.SH "EXAMPLE" -.IX Header "EXAMPLE" +.SH "EXAMPLES" +.IX Header "EXAMPLES" Enable \s-1CRL\s0 checking when performing certificate verification during \s-1SSL\s0 connections associated with an \fB\s-1SSL_CTX\s0\fR structure \fBctx\fR: .PP @@ -510,7 +513,7 @@ and has no effect. The \fBX509_VERIFY_PARAM_get_hostflags()\fR function was added in OpenSSL 1.1.0i. .SH "COPYRIGHT" .IX Header "COPYRIGHT" -Copyright 2009\-2018 The OpenSSL Project Authors. All Rights Reserved. +Copyright 2009\-2020 The OpenSSL Project Authors. All Rights Reserved. .PP Licensed under the OpenSSL license (the \*(L"License\*(R"). You may not use this file except in compliance with the License. You can obtain a copy diff --git a/crypto/external/bsd/openssl/lib/libcrypto/man/X509_check_ca.3 b/crypto/external/bsd/openssl/lib/libcrypto/man/X509_check_ca.3 index 121f48dea55..58851dc3e23 100644 --- a/crypto/external/bsd/openssl/lib/libcrypto/man/X509_check_ca.3 +++ b/crypto/external/bsd/openssl/lib/libcrypto/man/X509_check_ca.3 @@ -1,6 +1,6 @@ -.\" $NetBSD: X509_check_ca.3,v 1.3 2019/06/09 18:44:33 christos Exp $ +.\" $NetBSD: X509_check_ca.3,v 1.3.2.1 2021/03/28 18:21:51 martin Exp $ .\" -.\" Automatically generated by Pod::Man 4.10 (Pod::Simple 3.35) +.\" Automatically generated by Pod::Man 4.11 (Pod::Simple 3.35) .\" .\" Standard preamble: .\" ======================================================================== @@ -135,7 +135,7 @@ .\" ======================================================================== .\" .IX Title "X509_check_ca 3" -.TH X509_check_ca 3 "2018-09-23" "1.1.1c" "OpenSSL" +.TH X509_check_ca 3 "2020-12-10" "1.1.1i" "OpenSSL" .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. .if n .ad l @@ -164,7 +164,7 @@ Function return 0, if it is not \s-1CA\s0 certificate, 1 if it is proper X509v3 \&\fBbasicConstraints\fR, and 5 if it has outdated Netscape Certificate Type extension telling that it is \s-1CA\s0 certificate. .PP -Actually, any non-zero value means that this certificate could have been +Actually, any nonzero value means that this certificate could have been used to sign other certificates. .SH "SEE ALSO" .IX Header "SEE ALSO" @@ -173,7 +173,7 @@ used to sign other certificates. \&\fBX509_check_purpose\fR\|(3) .SH "COPYRIGHT" .IX Header "COPYRIGHT" -Copyright 2015\-2018 The OpenSSL Project Authors. All Rights Reserved. +Copyright 2015\-2020 The OpenSSL Project Authors. All Rights Reserved. .PP Licensed under the OpenSSL license (the \*(L"License\*(R"). You may not use this file except in compliance with the License. You can obtain a copy diff --git a/crypto/external/bsd/openssl/lib/libcrypto/man/X509_check_host.3 b/crypto/external/bsd/openssl/lib/libcrypto/man/X509_check_host.3 index 6c43590a8d3..1ece0a535c7 100644 --- a/crypto/external/bsd/openssl/lib/libcrypto/man/X509_check_host.3 +++ b/crypto/external/bsd/openssl/lib/libcrypto/man/X509_check_host.3 @@ -1,6 +1,6 @@ -.\" $NetBSD: X509_check_host.3,v 1.4 2019/06/09 18:44:33 christos Exp $ +.\" $NetBSD: X509_check_host.3,v 1.4.2.1 2021/03/28 18:21:51 martin Exp $ .\" -.\" Automatically generated by Pod::Man 4.10 (Pod::Simple 3.35) +.\" Automatically generated by Pod::Man 4.11 (Pod::Simple 3.35) .\" .\" Standard preamble: .\" ======================================================================== @@ -135,7 +135,7 @@ .\" ======================================================================== .\" .IX Title "X509_check_host 3" -.TH X509_check_host 3 "2018-09-23" "1.1.1c" "OpenSSL" +.TH X509_check_host 3 "2020-12-10" "1.1.1i" "OpenSSL" .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. .if n .ad l @@ -160,13 +160,13 @@ libcrypto, -lcrypto .SH "DESCRIPTION" .IX Header "DESCRIPTION" The certificate matching functions are used to check whether a -certificate matches a given host name, email address, or \s-1IP\s0 address. +certificate matches a given hostname, email address, or \s-1IP\s0 address. The validity of the certificate and its trust level has to be checked by other means. .PP \&\fBX509_check_host()\fR checks if the certificate Subject Alternative -Name (\s-1SAN\s0) or Subject CommonName (\s-1CN\s0) matches the specified host -name, which must be encoded in the preferred name syntax described +Name (\s-1SAN\s0) or Subject CommonName (\s-1CN\s0) matches the specified hostname, +which must be encoded in the preferred name syntax described in section 3.5 of \s-1RFC 1034.\s0 By default, wildcards are supported and they match only in the left-most label; but they may match part of that label with an explicit prefix or suffix. For example, @@ -178,7 +178,7 @@ Per section 6.4.2 of \s-1RFC 6125,\s0 \fBname\fR values representing internation domain names must be given in A\-label form. The \fBnamelen\fR argument must be the number of characters in the name string or zero in which case the length is calculated with strlen(\fBname\fR). When \fBname\fR starts -with a dot (e.g \*(L".example.com\*(R"), it will be matched by a certificate +with a dot (e.g. \*(L".example.com\*(R"), it will be matched by a certificate valid for any sub-domain of \fBname\fR, (see also \&\fBX509_CHECK_FLAG_SINGLE_LABEL_SUBDOMAINS\fR below). .PP @@ -284,7 +284,7 @@ and the internal checks will be suppressed as appropriate when These functions were added in OpenSSL 1.0.2. .SH "COPYRIGHT" .IX Header "COPYRIGHT" -Copyright 2012\-2018 The OpenSSL Project Authors. All Rights Reserved. +Copyright 2012\-2020 The OpenSSL Project Authors. All Rights Reserved. .PP Licensed under the OpenSSL license (the \*(L"License\*(R"). You may not use this file except in compliance with the License. You can obtain a copy diff --git a/crypto/external/bsd/openssl/lib/libcrypto/man/X509_check_issued.3 b/crypto/external/bsd/openssl/lib/libcrypto/man/X509_check_issued.3 index 006799b21e0..e80208b091a 100644 --- a/crypto/external/bsd/openssl/lib/libcrypto/man/X509_check_issued.3 +++ b/crypto/external/bsd/openssl/lib/libcrypto/man/X509_check_issued.3 @@ -1,6 +1,6 @@ -.\" $NetBSD: X509_check_issued.3,v 1.3 2019/06/09 18:44:33 christos Exp $ +.\" $NetBSD: X509_check_issued.3,v 1.3.2.1 2021/03/28 18:21:51 martin Exp $ .\" -.\" Automatically generated by Pod::Man 4.10 (Pod::Simple 3.35) +.\" Automatically generated by Pod::Man 4.11 (Pod::Simple 3.35) .\" .\" Standard preamble: .\" ======================================================================== @@ -135,13 +135,13 @@ .\" ======================================================================== .\" .IX Title "X509_check_issued 3" -.TH X509_check_issued 3 "2018-09-23" "1.1.1c" "OpenSSL" +.TH X509_check_issued 3 "2020-12-10" "1.1.1i" "OpenSSL" .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. .if n .ad l .nh .SH "NAME" -X509_check_issued \- checks if certificate is issued by another +X509_check_issued \- checks if certificate is apparently issued by another certificate .SH "LIBRARY" libcrypto, -lcrypto @@ -154,13 +154,14 @@ libcrypto, -lcrypto .Ve .SH "DESCRIPTION" .IX Header "DESCRIPTION" -This function checks if certificate \fIsubject\fR was issued using \s-1CA\s0 -certificate \fIissuer\fR. This function takes into account not only -matching of issuer field of \fIsubject\fR with subject field of \fIissuer\fR, -but also compares \fBauthorityKeyIdentifier\fR extension of \fIsubject\fR with -\&\fBsubjectKeyIdentifier\fR of \fIissuer\fR if \fBauthorityKeyIdentifier\fR -present in the \fIsubject\fR certificate and checks \fBkeyUsage\fR field of -\&\fIissuer\fR. +\&\fBX509_check_issued()\fR checks if certificate \fIsubject\fR was apparently issued +using (\s-1CA\s0) certificate \fIissuer\fR. This function takes into account not only +matching of the issuer field of \fIsubject\fR with the subject field of \fIissuer\fR, +but also compares all sub-fields of the \fBauthorityKeyIdentifier\fR extension of +\&\fIsubject\fR, as far as present, with the respective \fBsubjectKeyIdentifier\fR, +serial number, and issuer fields of \fIissuer\fR, as far as present. It also checks +if the \fBkeyUsage\fR field (if present) of \fIissuer\fR allows certificate signing. +It does not check the certificate signature. .SH "RETURN VALUES" .IX Header "RETURN VALUES" Function return \fBX509_V_OK\fR if certificate \fIsubject\fR is issued by @@ -172,7 +173,7 @@ Function return \fBX509_V_OK\fR if certificate \fIsubject\fR is issued by \&\fBverify\fR\|(1) .SH "COPYRIGHT" .IX Header "COPYRIGHT" -Copyright 2015\-2018 The OpenSSL Project Authors. All Rights Reserved. +Copyright 2015\-2020 The OpenSSL Project Authors. All Rights Reserved. .PP Licensed under the OpenSSL license (the \*(L"License\*(R"). You may not use this file except in compliance with the License. You can obtain a copy diff --git a/crypto/external/bsd/openssl/lib/libcrypto/man/X509_check_private_key.3 b/crypto/external/bsd/openssl/lib/libcrypto/man/X509_check_private_key.3 index 71d0ef110b4..d03de74ff43 100644 --- a/crypto/external/bsd/openssl/lib/libcrypto/man/X509_check_private_key.3 +++ b/crypto/external/bsd/openssl/lib/libcrypto/man/X509_check_private_key.3 @@ -1,6 +1,6 @@ -.\" $NetBSD: X509_check_private_key.3,v 1.2 2019/06/09 18:44:33 christos Exp $ +.\" $NetBSD: X509_check_private_key.3,v 1.2.4.1 2021/03/28 18:21:51 martin Exp $ .\" -.\" Automatically generated by Pod::Man 4.10 (Pod::Simple 3.35) +.\" Automatically generated by Pod::Man 4.11 (Pod::Simple 3.35) .\" .\" Standard preamble: .\" ======================================================================== @@ -135,7 +135,7 @@ .\" ======================================================================== .\" .IX Title "X509_check_private_key 3" -.TH X509_check_private_key 3 "2018-09-23" "1.1.1c" "OpenSSL" +.TH X509_check_private_key 3 "2018-09-23" "1.1.1i" "OpenSSL" .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. .if n .ad l diff --git a/crypto/external/bsd/openssl/lib/libcrypto/man/X509_cmp_time.3 b/crypto/external/bsd/openssl/lib/libcrypto/man/X509_cmp_time.3 index 6c1ed1905f2..831bf01fafd 100644 --- a/crypto/external/bsd/openssl/lib/libcrypto/man/X509_cmp_time.3 +++ b/crypto/external/bsd/openssl/lib/libcrypto/man/X509_cmp_time.3 @@ -1,6 +1,6 @@ -.\" $NetBSD: X509_cmp_time.3,v 1.2 2019/06/09 18:44:33 christos Exp $ +.\" $NetBSD: X509_cmp_time.3,v 1.2.4.1 2021/03/28 18:21:51 martin Exp $ .\" -.\" Automatically generated by Pod::Man 4.10 (Pod::Simple 3.35) +.\" Automatically generated by Pod::Man 4.11 (Pod::Simple 3.35) .\" .\" Standard preamble: .\" ======================================================================== @@ -135,7 +135,7 @@ .\" ======================================================================== .\" .IX Title "X509_cmp_time 3" -.TH X509_cmp_time 3 "2018-09-23" "1.1.1c" "OpenSSL" +.TH X509_cmp_time 3 "2018-09-23" "1.1.1i" "OpenSSL" .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. .if n .ad l diff --git a/crypto/external/bsd/openssl/lib/libcrypto/man/X509_digest.3 b/crypto/external/bsd/openssl/lib/libcrypto/man/X509_digest.3 index ccf7140e421..78f69132134 100644 --- a/crypto/external/bsd/openssl/lib/libcrypto/man/X509_digest.3 +++ b/crypto/external/bsd/openssl/lib/libcrypto/man/X509_digest.3 @@ -1,6 +1,6 @@ -.\" $NetBSD: X509_digest.3,v 1.3 2019/06/09 18:44:33 christos Exp $ +.\" $NetBSD: X509_digest.3,v 1.3.2.1 2021/03/28 18:21:51 martin Exp $ .\" -.\" Automatically generated by Pod::Man 4.10 (Pod::Simple 3.35) +.\" Automatically generated by Pod::Man 4.11 (Pod::Simple 3.35) .\" .\" Standard preamble: .\" ======================================================================== @@ -135,7 +135,7 @@ .\" ======================================================================== .\" .IX Title "X509_digest 3" -.TH X509_digest 3 "2018-09-23" "1.1.1c" "OpenSSL" +.TH X509_digest 3 "2018-09-23" "1.1.1i" "OpenSSL" .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. .if n .ad l diff --git a/crypto/external/bsd/openssl/lib/libcrypto/man/X509_dup.3 b/crypto/external/bsd/openssl/lib/libcrypto/man/X509_dup.3 index 372f96a16e1..c9d5d193aa5 100644 --- a/crypto/external/bsd/openssl/lib/libcrypto/man/X509_dup.3 +++ b/crypto/external/bsd/openssl/lib/libcrypto/man/X509_dup.3 @@ -1,6 +1,6 @@ -.\" $NetBSD: X509_dup.3,v 1.3 2019/06/09 18:44:33 christos Exp $ +.\" $NetBSD: X509_dup.3,v 1.3.2.1 2021/03/28 18:21:51 martin Exp $ .\" -.\" Automatically generated by Pod::Man 4.10 (Pod::Simple 3.35) +.\" Automatically generated by Pod::Man 4.11 (Pod::Simple 3.35) .\" .\" Standard preamble: .\" ======================================================================== @@ -135,7 +135,7 @@ .\" ======================================================================== .\" .IX Title "X509_dup 3" -.TH X509_dup 3 "2018-09-23" "1.1.1c" "OpenSSL" +.TH X509_dup 3 "2018-09-23" "1.1.1i" "OpenSSL" .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. .if n .ad l diff --git a/crypto/external/bsd/openssl/lib/libcrypto/man/X509_get0_notBefore.3 b/crypto/external/bsd/openssl/lib/libcrypto/man/X509_get0_notBefore.3 index 50d213f7efe..41b0e3b5cb0 100644 --- a/crypto/external/bsd/openssl/lib/libcrypto/man/X509_get0_notBefore.3 +++ b/crypto/external/bsd/openssl/lib/libcrypto/man/X509_get0_notBefore.3 @@ -1,6 +1,6 @@ -.\" $NetBSD: X509_get0_notBefore.3,v 1.3 2019/06/09 18:44:33 christos Exp $ +.\" $NetBSD: X509_get0_notBefore.3,v 1.3.2.1 2021/03/28 18:21:51 martin Exp $ .\" -.\" Automatically generated by Pod::Man 4.10 (Pod::Simple 3.35) +.\" Automatically generated by Pod::Man 4.11 (Pod::Simple 3.35) .\" .\" Standard preamble: .\" ======================================================================== @@ -135,7 +135,7 @@ .\" ======================================================================== .\" .IX Title "X509_get0_notBefore 3" -.TH X509_get0_notBefore 3 "2018-09-23" "1.1.1c" "OpenSSL" +.TH X509_get0_notBefore 3 "2018-09-23" "1.1.1i" "OpenSSL" .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. .if n .ad l diff --git a/crypto/external/bsd/openssl/lib/libcrypto/man/X509_get0_signature.3 b/crypto/external/bsd/openssl/lib/libcrypto/man/X509_get0_signature.3 index d9b27c773be..d13a8f43068 100644 --- a/crypto/external/bsd/openssl/lib/libcrypto/man/X509_get0_signature.3 +++ b/crypto/external/bsd/openssl/lib/libcrypto/man/X509_get0_signature.3 @@ -1,6 +1,6 @@ -.\" $NetBSD: X509_get0_signature.3,v 1.3 2019/06/09 18:44:33 christos Exp $ +.\" $NetBSD: X509_get0_signature.3,v 1.3.2.1 2021/03/28 18:21:51 martin Exp $ .\" -.\" Automatically generated by Pod::Man 4.10 (Pod::Simple 3.35) +.\" Automatically generated by Pod::Man 4.11 (Pod::Simple 3.35) .\" .\" Standard preamble: .\" ======================================================================== @@ -135,16 +135,16 @@ .\" ======================================================================== .\" .IX Title "X509_get0_signature 3" -.TH X509_get0_signature 3 "2019-03-12" "1.1.1c" "OpenSSL" +.TH X509_get0_signature 3 "2020-12-10" "1.1.1i" "OpenSSL" .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. .if n .ad l .nh .SH "NAME" -X509_get0_signature, X509_get_signature_nid, X509_get0_tbs_sigalg, -X509_REQ_get0_signature, X509_REQ_get_signature_nid, X509_CRL_get0_signature, -X509_CRL_get_signature_nid, X509_get_signature_info, X509_SIG_INFO_get, -X509_SIG_INFO_set \- signature information +X509_get0_signature, X509_REQ_set0_signature, X509_REQ_set1_signature_algo, +X509_get_signature_nid, X509_get0_tbs_sigalg, X509_REQ_get0_signature, +X509_REQ_get_signature_nid, X509_CRL_get0_signature, X509_CRL_get_signature_nid, +X509_get_signature_info, X509_SIG_INFO_get, X509_SIG_INFO_set \- signature information .SH "LIBRARY" libcrypto, -lcrypto .SH "SYNOPSIS" @@ -155,6 +155,8 @@ libcrypto, -lcrypto \& void X509_get0_signature(const ASN1_BIT_STRING **psig, \& const X509_ALGOR **palg, \& const X509 *x); +\& void X509_REQ_set0_signature(X509_REQ *req, ASN1_BIT_STRING *psig); +\& int X509_REQ_set1_signature_algo(X509_REQ *req, X509_ALGOR *palg); \& int X509_get_signature_nid(const X509 *x); \& const X509_ALGOR *X509_get0_tbs_sigalg(const X509 *x); \& @@ -182,6 +184,9 @@ libcrypto, -lcrypto to the signature algorithm of \fBx\fR. The values returned are internal pointers which \fB\s-1MUST NOT\s0\fR be freed up after the call. .PP +\&\fBX509_set0_signature()\fR and \fBX509_REQ_set1_signature_algo()\fR are the +equivalent setters for the two values of \fBX509_get0_signature()\fR. +.PP \&\fBX509_get0_tbs_sigalg()\fR returns the signature algorithm in the signed portion of \fBx\fR. .PP @@ -226,6 +231,10 @@ key is less secure: for example a certificate signed using \s-1SHA\-512\s0 and a \&\fBX509_get_signature_info()\fR returns 1 if the signature information returned is valid or 0 if the information is not available (e.g. unknown algorithms or malformed parameters). +.PP +\&\fBX509_REQ_set1_signature_algo()\fR returns 0 on success; or 1 on an +error (e.g. null \s-1ALGO\s0 pointer). X509_REQ_set0_signature does +not return an error value. .SH "SEE ALSO" .IX Header "SEE ALSO" \&\fBd2i_X509\fR\|(3), @@ -254,9 +263,12 @@ The \&\fBX509_REQ_get0_signature()\fR, \fBX509_REQ_get_signature_nid()\fR, \&\fBX509_CRL_get0_signature()\fR and \fBX509_CRL_get_signature_nid()\fR were added in OpenSSL 1.1.0. +.PP +The \fBX509_REQ_set0_signature()\fR and \fBX509_REQ_set1_signature_algo()\fR +were added in OpenSSL 1.1.1e. .SH "COPYRIGHT" .IX Header "COPYRIGHT" -Copyright 2015\-2016 The OpenSSL Project Authors. All Rights Reserved. +Copyright 2015\-2020 The OpenSSL Project Authors. All Rights Reserved. .PP Licensed under the OpenSSL license (the \*(L"License\*(R"). You may not use this file except in compliance with the License. You can obtain a copy diff --git a/crypto/external/bsd/openssl/lib/libcrypto/man/X509_get0_uids.3 b/crypto/external/bsd/openssl/lib/libcrypto/man/X509_get0_uids.3 index 0fd05048d18..f99086f4b6a 100644 --- a/crypto/external/bsd/openssl/lib/libcrypto/man/X509_get0_uids.3 +++ b/crypto/external/bsd/openssl/lib/libcrypto/man/X509_get0_uids.3 @@ -1,6 +1,6 @@ -.\" $NetBSD: X509_get0_uids.3,v 1.3 2019/06/09 18:44:33 christos Exp $ +.\" $NetBSD: X509_get0_uids.3,v 1.3.2.1 2021/03/28 18:21:51 martin Exp $ .\" -.\" Automatically generated by Pod::Man 4.10 (Pod::Simple 3.35) +.\" Automatically generated by Pod::Man 4.11 (Pod::Simple 3.35) .\" .\" Standard preamble: .\" ======================================================================== @@ -135,7 +135,7 @@ .\" ======================================================================== .\" .IX Title "X509_get0_uids 3" -.TH X509_get0_uids 3 "2018-09-23" "1.1.1c" "OpenSSL" +.TH X509_get0_uids 3 "2018-09-23" "1.1.1i" "OpenSSL" .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. .if n .ad l diff --git a/crypto/external/bsd/openssl/lib/libcrypto/man/X509_get_extension_flags.3 b/crypto/external/bsd/openssl/lib/libcrypto/man/X509_get_extension_flags.3 index 92fdd12ec3b..b1d1f313fb6 100644 --- a/crypto/external/bsd/openssl/lib/libcrypto/man/X509_get_extension_flags.3 +++ b/crypto/external/bsd/openssl/lib/libcrypto/man/X509_get_extension_flags.3 @@ -1,6 +1,6 @@ -.\" $NetBSD: X509_get_extension_flags.3,v 1.3 2019/06/09 18:44:33 christos Exp $ +.\" $NetBSD: X509_get_extension_flags.3,v 1.3.2.1 2021/03/28 18:21:51 martin Exp $ .\" -.\" Automatically generated by Pod::Man 4.10 (Pod::Simple 3.35) +.\" Automatically generated by Pod::Man 4.11 (Pod::Simple 3.35) .\" .\" Standard preamble: .\" ======================================================================== @@ -135,7 +135,7 @@ .\" ======================================================================== .\" .IX Title "X509_get_extension_flags 3" -.TH X509_get_extension_flags 3 "2018-09-23" "1.1.1c" "OpenSSL" +.TH X509_get_extension_flags 3 "2020-04-05" "1.1.1i" "OpenSSL" .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. .if n .ad l @@ -143,6 +143,8 @@ .SH "NAME" X509_get0_subject_key_id, X509_get0_authority_key_id, +X509_get0_authority_issuer, +X509_get0_authority_serial, X509_get_pathlen, X509_get_extension_flags, X509_get_key_usage, @@ -163,6 +165,8 @@ libcrypto, -lcrypto \& uint32_t X509_get_extended_key_usage(X509 *x); \& const ASN1_OCTET_STRING *X509_get0_subject_key_id(X509 *x); \& const ASN1_OCTET_STRING *X509_get0_authority_key_id(X509 *x); +\& const GENERAL_NAMES *X509_get0_authority_issuer(X509 *x); +\& const ASN1_INTEGER *X509_get0_authority_serial(X509 *x); \& void X509_set_proxy_flag(X509 *x); \& void X509_set_proxy_pathlen(int l); \& long X509_get_proxy_pathlen(X509 *x); @@ -206,6 +210,16 @@ The certificate contains an unhandled critical extension. .IX Item "EXFLAG_INVALID" Some certificate extension values are invalid or inconsistent. The certificate should be rejected. +This bit may also be raised after an out-of-memory error while +processing the X509 object, so it may not be related to the processed +\&\s-1ASN1\s0 object itself. +.IP "\fB\s-1EXFLAG_INVALID_POLICY\s0\fR" 4 +.IX Item "EXFLAG_INVALID_POLICY" +The NID_certificate_policies certificate extension is invalid or +inconsistent. The certificate should be rejected. +This bit may also be raised after an out-of-memory error while +processing the X509 object, so it may not be related to the processed +\&\s-1ASN1\s0 object itself. .IP "\fB\s-1EXFLAG_KUSAGE\s0\fR" 4 .IX Item "EXFLAG_KUSAGE" The certificate contains a key usage extension. The value can be retrieved @@ -241,6 +255,14 @@ is not present or cannot be parsed. identifier of \fBx\fR as an \fB\s-1ASN1_OCTET_STRING\s0\fR or \fB\s-1NULL\s0\fR if the extension is not present or cannot be parsed. .PP +\&\fBX509_get0_authority_issuer()\fR returns an internal pointer to the authority +certificate issuer of \fBx\fR as a stack of \fB\s-1GENERAL_NAME\s0\fR structures or +\&\fB\s-1NULL\s0\fR if the extension is not present or cannot be parsed. +.PP +\&\fBX509_get0_authority_serial()\fR returns an internal pointer to the authority +certificate serial number of \fBx\fR as an \fB\s-1ASN1_INTEGER\s0\fR or \fB\s-1NULL\s0\fR if the +extension is not present or cannot be parsed. +.PP \&\fBX509_set_proxy_flag()\fR marks the certificate with the \fB\s-1EXFLAG_PROXY\s0\fR flag. This is for the users who need to mark non\-RFC3820 proxy certificates as such, as OpenSSL only detects \s-1RFC3820\s0 compliant ones. @@ -292,7 +314,7 @@ certificate is a proxy one and has a path length set, and \-1 otherwise. \&\fBX509_get_proxy_pathlen()\fR were added in OpenSSL 1.1.0. .SH "COPYRIGHT" .IX Header "COPYRIGHT" -Copyright 2015\-2018 The OpenSSL Project Authors. All Rights Reserved. +Copyright 2015\-2020 The OpenSSL Project Authors. All Rights Reserved. .PP Licensed under the OpenSSL license (the \*(L"License\*(R"). You may not use this file except in compliance with the License. You can obtain a copy diff --git a/crypto/external/bsd/openssl/lib/libcrypto/man/X509_get_pubkey.3 b/crypto/external/bsd/openssl/lib/libcrypto/man/X509_get_pubkey.3 index 082334ac6e5..a1abef8670b 100644 --- a/crypto/external/bsd/openssl/lib/libcrypto/man/X509_get_pubkey.3 +++ b/crypto/external/bsd/openssl/lib/libcrypto/man/X509_get_pubkey.3 @@ -1,6 +1,6 @@ -.\" $NetBSD: X509_get_pubkey.3,v 1.3 2019/06/09 18:44:33 christos Exp $ +.\" $NetBSD: X509_get_pubkey.3,v 1.3.2.1 2021/03/28 18:21:51 martin Exp $ .\" -.\" Automatically generated by Pod::Man 4.10 (Pod::Simple 3.35) +.\" Automatically generated by Pod::Man 4.11 (Pod::Simple 3.35) .\" .\" Standard preamble: .\" ======================================================================== @@ -135,7 +135,7 @@ .\" ======================================================================== .\" .IX Title "X509_get_pubkey 3" -.TH X509_get_pubkey 3 "2018-09-23" "1.1.1c" "OpenSSL" +.TH X509_get_pubkey 3 "2018-09-23" "1.1.1i" "OpenSSL" .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. .if n .ad l diff --git a/crypto/external/bsd/openssl/lib/libcrypto/man/X509_get_serialNumber.3 b/crypto/external/bsd/openssl/lib/libcrypto/man/X509_get_serialNumber.3 index 5b6098964bf..4d42baff07a 100644 --- a/crypto/external/bsd/openssl/lib/libcrypto/man/X509_get_serialNumber.3 +++ b/crypto/external/bsd/openssl/lib/libcrypto/man/X509_get_serialNumber.3 @@ -1,6 +1,6 @@ -.\" $NetBSD: X509_get_serialNumber.3,v 1.3 2019/06/09 18:44:33 christos Exp $ +.\" $NetBSD: X509_get_serialNumber.3,v 1.3.2.1 2021/03/28 18:21:51 martin Exp $ .\" -.\" Automatically generated by Pod::Man 4.10 (Pod::Simple 3.35) +.\" Automatically generated by Pod::Man 4.11 (Pod::Simple 3.35) .\" .\" Standard preamble: .\" ======================================================================== @@ -135,7 +135,7 @@ .\" ======================================================================== .\" .IX Title "X509_get_serialNumber 3" -.TH X509_get_serialNumber 3 "2019-03-12" "1.1.1c" "OpenSSL" +.TH X509_get_serialNumber 3 "2019-03-12" "1.1.1i" "OpenSSL" .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. .if n .ad l diff --git a/crypto/external/bsd/openssl/lib/libcrypto/man/X509_get_subject_name.3 b/crypto/external/bsd/openssl/lib/libcrypto/man/X509_get_subject_name.3 index 6a2de399542..d895be02541 100644 --- a/crypto/external/bsd/openssl/lib/libcrypto/man/X509_get_subject_name.3 +++ b/crypto/external/bsd/openssl/lib/libcrypto/man/X509_get_subject_name.3 @@ -1,6 +1,6 @@ -.\" $NetBSD: X509_get_subject_name.3,v 1.3 2019/06/09 18:44:33 christos Exp $ +.\" $NetBSD: X509_get_subject_name.3,v 1.3.2.1 2021/03/28 18:21:51 martin Exp $ .\" -.\" Automatically generated by Pod::Man 4.10 (Pod::Simple 3.35) +.\" Automatically generated by Pod::Man 4.11 (Pod::Simple 3.35) .\" .\" Standard preamble: .\" ======================================================================== @@ -135,7 +135,7 @@ .\" ======================================================================== .\" .IX Title "X509_get_subject_name 3" -.TH X509_get_subject_name 3 "2019-06-09" "1.1.1c" "OpenSSL" +.TH X509_get_subject_name 3 "2019-06-09" "1.1.1i" "OpenSSL" .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. .if n .ad l diff --git a/crypto/external/bsd/openssl/lib/libcrypto/man/X509_get_version.3 b/crypto/external/bsd/openssl/lib/libcrypto/man/X509_get_version.3 index d8b43e584d5..a0fade3e627 100644 --- a/crypto/external/bsd/openssl/lib/libcrypto/man/X509_get_version.3 +++ b/crypto/external/bsd/openssl/lib/libcrypto/man/X509_get_version.3 @@ -1,6 +1,6 @@ -.\" $NetBSD: X509_get_version.3,v 1.3 2019/06/09 18:44:33 christos Exp $ +.\" $NetBSD: X509_get_version.3,v 1.3.2.1 2021/03/28 18:21:51 martin Exp $ .\" -.\" Automatically generated by Pod::Man 4.10 (Pod::Simple 3.35) +.\" Automatically generated by Pod::Man 4.11 (Pod::Simple 3.35) .\" .\" Standard preamble: .\" ======================================================================== @@ -135,7 +135,7 @@ .\" ======================================================================== .\" .IX Title "X509_get_version 3" -.TH X509_get_version 3 "2018-09-23" "1.1.1c" "OpenSSL" +.TH X509_get_version 3 "2018-09-23" "1.1.1i" "OpenSSL" .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. .if n .ad l diff --git a/crypto/external/bsd/openssl/lib/libcrypto/man/X509_new.3 b/crypto/external/bsd/openssl/lib/libcrypto/man/X509_new.3 index cfaa7c9f91a..4d03ffa7085 100644 --- a/crypto/external/bsd/openssl/lib/libcrypto/man/X509_new.3 +++ b/crypto/external/bsd/openssl/lib/libcrypto/man/X509_new.3 @@ -1,6 +1,6 @@ -.\" $NetBSD: X509_new.3,v 1.19 2019/06/09 18:44:33 christos Exp $ +.\" $NetBSD: X509_new.3,v 1.19.2.1 2021/03/28 18:21:51 martin Exp $ .\" -.\" Automatically generated by Pod::Man 4.10 (Pod::Simple 3.35) +.\" Automatically generated by Pod::Man 4.11 (Pod::Simple 3.35) .\" .\" Standard preamble: .\" ======================================================================== @@ -135,7 +135,7 @@ .\" ======================================================================== .\" .IX Title "X509_new 3" -.TH X509_new 3 "2018-09-23" "1.1.1c" "OpenSSL" +.TH X509_new 3 "2018-09-23" "1.1.1i" "OpenSSL" .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. .if n .ad l diff --git a/crypto/external/bsd/openssl/lib/libcrypto/man/X509_sign.3 b/crypto/external/bsd/openssl/lib/libcrypto/man/X509_sign.3 index b2ebf85d2f4..b99b52c3104 100644 --- a/crypto/external/bsd/openssl/lib/libcrypto/man/X509_sign.3 +++ b/crypto/external/bsd/openssl/lib/libcrypto/man/X509_sign.3 @@ -1,6 +1,6 @@ -.\" $NetBSD: X509_sign.3,v 1.3 2019/06/09 18:44:33 christos Exp $ +.\" $NetBSD: X509_sign.3,v 1.3.2.1 2021/03/28 18:21:51 martin Exp $ .\" -.\" Automatically generated by Pod::Man 4.10 (Pod::Simple 3.35) +.\" Automatically generated by Pod::Man 4.11 (Pod::Simple 3.35) .\" .\" Standard preamble: .\" ======================================================================== @@ -135,7 +135,7 @@ .\" ======================================================================== .\" .IX Title "X509_sign 3" -.TH X509_sign 3 "2019-03-12" "1.1.1c" "OpenSSL" +.TH X509_sign 3 "2019-03-12" "1.1.1i" "OpenSSL" .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. .if n .ad l diff --git a/crypto/external/bsd/openssl/lib/libcrypto/man/X509_verify_cert.3 b/crypto/external/bsd/openssl/lib/libcrypto/man/X509_verify_cert.3 index a2e04c1941c..674fd23d11f 100644 --- a/crypto/external/bsd/openssl/lib/libcrypto/man/X509_verify_cert.3 +++ b/crypto/external/bsd/openssl/lib/libcrypto/man/X509_verify_cert.3 @@ -1,6 +1,6 @@ -.\" $NetBSD: X509_verify_cert.3,v 1.18 2019/06/09 18:44:33 christos Exp $ +.\" $NetBSD: X509_verify_cert.3,v 1.18.2.1 2021/03/28 18:21:51 martin Exp $ .\" -.\" Automatically generated by Pod::Man 4.10 (Pod::Simple 3.35) +.\" Automatically generated by Pod::Man 4.11 (Pod::Simple 3.35) .\" .\" Standard preamble: .\" ======================================================================== @@ -135,7 +135,7 @@ .\" ======================================================================== .\" .IX Title "X509_verify_cert 3" -.TH X509_verify_cert 3 "2018-09-23" "1.1.1c" "OpenSSL" +.TH X509_verify_cert 3 "2018-09-23" "1.1.1i" "OpenSSL" .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. .if n .ad l diff --git a/crypto/external/bsd/openssl/lib/libcrypto/man/X509v3_get_ext_by_NID.3 b/crypto/external/bsd/openssl/lib/libcrypto/man/X509v3_get_ext_by_NID.3 index 1d23ed3261b..14a60b4be95 100644 --- a/crypto/external/bsd/openssl/lib/libcrypto/man/X509v3_get_ext_by_NID.3 +++ b/crypto/external/bsd/openssl/lib/libcrypto/man/X509v3_get_ext_by_NID.3 @@ -1,6 +1,6 @@ -.\" $NetBSD: X509v3_get_ext_by_NID.3,v 1.3 2019/06/09 18:44:33 christos Exp $ +.\" $NetBSD: X509v3_get_ext_by_NID.3,v 1.3.2.1 2021/03/28 18:21:51 martin Exp $ .\" -.\" Automatically generated by Pod::Man 4.10 (Pod::Simple 3.35) +.\" Automatically generated by Pod::Man 4.11 (Pod::Simple 3.35) .\" .\" Standard preamble: .\" ======================================================================== @@ -135,7 +135,7 @@ .\" ======================================================================== .\" .IX Title "X509v3_get_ext_by_NID 3" -.TH X509v3_get_ext_by_NID 3 "2018-09-23" "1.1.1c" "OpenSSL" +.TH X509v3_get_ext_by_NID 3 "2020-12-10" "1.1.1i" "OpenSSL" .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. .if n .ad l @@ -212,7 +212,7 @@ the extension is found its index is returned otherwise \fB\-1\fR is returned. .PP \&\fBX509v3_get_ext_by_critical()\fR is similar to \fBX509v3_get_ext_by_NID()\fR except it looks for an extension of criticality \fBcrit\fR. A zero value for \fBcrit\fR -looks for a non-critical extension a non-zero value looks for a critical +looks for a non-critical extension a nonzero value looks for a critical extension. .PP \&\fBX509v3_delete_ext()\fR deletes the extension with index \fBloc\fR from \fBx\fR. The @@ -269,7 +269,7 @@ error occurs. \&\fBX509V3_get_d2i\fR\|(3) .SH "COPYRIGHT" .IX Header "COPYRIGHT" -Copyright 2015\-2018 The OpenSSL Project Authors. All Rights Reserved. +Copyright 2015\-2020 The OpenSSL Project Authors. All Rights Reserved. .PP Licensed under the OpenSSL license (the \*(L"License\*(R"). You may not use this file except in compliance with the License. You can obtain a copy diff --git a/crypto/external/bsd/openssl/lib/libcrypto/man/bio.7 b/crypto/external/bsd/openssl/lib/libcrypto/man/bio.7 index 045f8576fed..b2c39f2eea5 100644 --- a/crypto/external/bsd/openssl/lib/libcrypto/man/bio.7 +++ b/crypto/external/bsd/openssl/lib/libcrypto/man/bio.7 @@ -1,6 +1,6 @@ -.\" $NetBSD: bio.7,v 1.2 2019/06/09 18:44:33 christos Exp $ +.\" $NetBSD: bio.7,v 1.2.4.1 2021/03/28 18:21:51 martin Exp $ .\" -.\" Automatically generated by Pod::Man 4.10 (Pod::Simple 3.35) +.\" Automatically generated by Pod::Man 4.11 (Pod::Simple 3.35) .\" .\" Standard preamble: .\" ======================================================================== @@ -135,7 +135,7 @@ .\" ======================================================================== .\" .IX Title "BIO 7" -.TH BIO 7 "2018-09-23" "1.1.1c" "OpenSSL" +.TH BIO 7 "2020-01-23" "1.1.1i" "OpenSSL" .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. .if n .ad l @@ -189,8 +189,8 @@ Normally the \fBtype\fR argument is supplied by a function which returns a pointer to a \s-1BIO_METHOD.\s0 There is a naming convention for such functions: a source/sink \s-1BIO\s0 is normally called BIO_s_*() and a filter \s-1BIO\s0 BIO_f_*(); -.SH "EXAMPLE" -.IX Header "EXAMPLE" +.SH "EXAMPLES" +.IX Header "EXAMPLES" Create a memory \s-1BIO:\s0 .PP .Vb 1 @@ -213,7 +213,7 @@ Create a memory \s-1BIO:\s0 \&\fBBIO_should_retry\fR\|(3) .SH "COPYRIGHT" .IX Header "COPYRIGHT" -Copyright 2000\-2017 The OpenSSL Project Authors. All Rights Reserved. +Copyright 2000\-2019 The OpenSSL Project Authors. All Rights Reserved. .PP Licensed under the OpenSSL license (the \*(L"License\*(R"). You may not use this file except in compliance with the License. You can obtain a copy diff --git a/crypto/external/bsd/openssl/lib/libcrypto/man/crypto.7 b/crypto/external/bsd/openssl/lib/libcrypto/man/crypto.7 index b48443334dc..0eba7b065e4 100644 --- a/crypto/external/bsd/openssl/lib/libcrypto/man/crypto.7 +++ b/crypto/external/bsd/openssl/lib/libcrypto/man/crypto.7 @@ -1,6 +1,6 @@ -.\" $NetBSD: crypto.7,v 1.2 2019/06/09 18:44:33 christos Exp $ +.\" $NetBSD: crypto.7,v 1.2.4.1 2021/03/28 18:21:51 martin Exp $ .\" -.\" Automatically generated by Pod::Man 4.10 (Pod::Simple 3.35) +.\" Automatically generated by Pod::Man 4.11 (Pod::Simple 3.35) .\" .\" Standard preamble: .\" ======================================================================== @@ -135,7 +135,7 @@ .\" ======================================================================== .\" .IX Title "CRYPTO 7" -.TH CRYPTO 7 "2018-09-23" "1.1.1c" "OpenSSL" +.TH CRYPTO 7 "2018-09-23" "1.1.1i" "OpenSSL" .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. .if n .ad l diff --git a/crypto/external/bsd/openssl/lib/libcrypto/man/ct.7 b/crypto/external/bsd/openssl/lib/libcrypto/man/ct.7 index 72291f761e4..fc3ab7af5e9 100644 --- a/crypto/external/bsd/openssl/lib/libcrypto/man/ct.7 +++ b/crypto/external/bsd/openssl/lib/libcrypto/man/ct.7 @@ -1,6 +1,6 @@ -.\" $NetBSD: ct.7,v 1.2 2019/06/09 18:44:33 christos Exp $ +.\" $NetBSD: ct.7,v 1.2.4.1 2021/03/28 18:21:51 martin Exp $ .\" -.\" Automatically generated by Pod::Man 4.10 (Pod::Simple 3.35) +.\" Automatically generated by Pod::Man 4.11 (Pod::Simple 3.35) .\" .\" Standard preamble: .\" ======================================================================== @@ -135,7 +135,7 @@ .\" ======================================================================== .\" .IX Title "CT 7" -.TH CT 7 "2019-03-12" "1.1.1c" "OpenSSL" +.TH CT 7 "2019-03-12" "1.1.1i" "OpenSSL" .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. .if n .ad l diff --git a/crypto/external/bsd/openssl/lib/libcrypto/man/d2i_DHparams.3 b/crypto/external/bsd/openssl/lib/libcrypto/man/d2i_DHparams.3 index de3215d69c6..0c5d70782dd 100644 --- a/crypto/external/bsd/openssl/lib/libcrypto/man/d2i_DHparams.3 +++ b/crypto/external/bsd/openssl/lib/libcrypto/man/d2i_DHparams.3 @@ -1,6 +1,6 @@ -.\" $NetBSD: d2i_DHparams.3,v 1.19 2019/06/09 18:44:33 christos Exp $ +.\" $NetBSD: d2i_DHparams.3,v 1.19.2.1 2021/03/28 18:21:51 martin Exp $ .\" -.\" Automatically generated by Pod::Man 4.10 (Pod::Simple 3.35) +.\" Automatically generated by Pod::Man 4.11 (Pod::Simple 3.35) .\" .\" Standard preamble: .\" ======================================================================== @@ -135,7 +135,7 @@ .\" ======================================================================== .\" .IX Title "d2i_DHparams 3" -.TH d2i_DHparams 3 "2018-09-23" "1.1.1c" "OpenSSL" +.TH d2i_DHparams 3 "2020-12-10" "1.1.1i" "OpenSSL" .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. .if n .ad l @@ -149,7 +149,7 @@ libcrypto, -lcrypto .Vb 1 \& #include <openssl/dh.h> \& -\& DH *d2i_DHparams(DH **a, unsigned char **pp, long length); +\& DH *d2i_DHparams(DH **a, const unsigned char **pp, long length); \& int i2d_DHparams(DH *a, unsigned char **pp); .Ve .SH "DESCRIPTION" @@ -170,7 +170,7 @@ is less than or equal to 0 on error. \&\fBd2i_X509\fR\|(3) .SH "COPYRIGHT" .IX Header "COPYRIGHT" -Copyright 2000\-2018 The OpenSSL Project Authors. All Rights Reserved. +Copyright 2000\-2020 The OpenSSL Project Authors. All Rights Reserved. .PP Licensed under the OpenSSL license (the \*(L"License\*(R"). You may not use this file except in compliance with the License. You can obtain a copy diff --git a/crypto/external/bsd/openssl/lib/libcrypto/man/d2i_PKCS8PrivateKey_bio.3 b/crypto/external/bsd/openssl/lib/libcrypto/man/d2i_PKCS8PrivateKey_bio.3 index e42f735929c..e0a1a27253f 100644 --- a/crypto/external/bsd/openssl/lib/libcrypto/man/d2i_PKCS8PrivateKey_bio.3 +++ b/crypto/external/bsd/openssl/lib/libcrypto/man/d2i_PKCS8PrivateKey_bio.3 @@ -1,6 +1,6 @@ -.\" $NetBSD: d2i_PKCS8PrivateKey_bio.3,v 1.3 2019/06/09 18:44:34 christos Exp $ +.\" $NetBSD: d2i_PKCS8PrivateKey_bio.3,v 1.3.2.1 2021/03/28 18:21:51 martin Exp $ .\" -.\" Automatically generated by Pod::Man 4.10 (Pod::Simple 3.35) +.\" Automatically generated by Pod::Man 4.11 (Pod::Simple 3.35) .\" .\" Standard preamble: .\" ======================================================================== @@ -135,7 +135,7 @@ .\" ======================================================================== .\" .IX Title "d2i_PKCS8PrivateKey_bio 3" -.TH d2i_PKCS8PrivateKey_bio 3 "2018-09-23" "1.1.1c" "OpenSSL" +.TH d2i_PKCS8PrivateKey_bio 3 "2018-09-23" "1.1.1i" "OpenSSL" .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. .if n .ad l diff --git a/crypto/external/bsd/openssl/lib/libcrypto/man/d2i_PrivateKey.3 b/crypto/external/bsd/openssl/lib/libcrypto/man/d2i_PrivateKey.3 index 4d8b250f2cb..d914d5f519d 100644 --- a/crypto/external/bsd/openssl/lib/libcrypto/man/d2i_PrivateKey.3 +++ b/crypto/external/bsd/openssl/lib/libcrypto/man/d2i_PrivateKey.3 @@ -1,6 +1,6 @@ -.\" $NetBSD: d2i_PrivateKey.3,v 1.6 2019/06/09 18:44:34 christos Exp $ +.\" $NetBSD: d2i_PrivateKey.3,v 1.6.2.1 2021/03/28 18:21:51 martin Exp $ .\" -.\" Automatically generated by Pod::Man 4.10 (Pod::Simple 3.35) +.\" Automatically generated by Pod::Man 4.11 (Pod::Simple 3.35) .\" .\" Standard preamble: .\" ======================================================================== @@ -135,7 +135,7 @@ .\" ======================================================================== .\" .IX Title "d2i_PrivateKey 3" -.TH d2i_PrivateKey 3 "2019-03-12" "1.1.1c" "OpenSSL" +.TH d2i_PrivateKey 3 "2019-03-12" "1.1.1i" "OpenSSL" .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. .if n .ad l diff --git a/crypto/external/bsd/openssl/lib/libcrypto/man/d2i_SSL_SESSION.3 b/crypto/external/bsd/openssl/lib/libcrypto/man/d2i_SSL_SESSION.3 index d844dc7ccc6..b031a6d9175 100644 --- a/crypto/external/bsd/openssl/lib/libcrypto/man/d2i_SSL_SESSION.3 +++ b/crypto/external/bsd/openssl/lib/libcrypto/man/d2i_SSL_SESSION.3 @@ -1,6 +1,6 @@ -.\" $NetBSD: d2i_SSL_SESSION.3,v 1.19 2019/06/09 18:44:34 christos Exp $ +.\" $NetBSD: d2i_SSL_SESSION.3,v 1.19.2.1 2021/03/28 18:21:51 martin Exp $ .\" -.\" Automatically generated by Pod::Man 4.10 (Pod::Simple 3.35) +.\" Automatically generated by Pod::Man 4.11 (Pod::Simple 3.35) .\" .\" Standard preamble: .\" ======================================================================== @@ -135,7 +135,7 @@ .\" ======================================================================== .\" .IX Title "d2i_SSL_SESSION 3" -.TH d2i_SSL_SESSION 3 "2018-09-23" "1.1.1c" "OpenSSL" +.TH d2i_SSL_SESSION 3 "2018-09-23" "1.1.1i" "OpenSSL" .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. .if n .ad l diff --git a/crypto/external/bsd/openssl/lib/libcrypto/man/d2i_X509.3 b/crypto/external/bsd/openssl/lib/libcrypto/man/d2i_X509.3 index 82ef39e5333..b99acf79a2d 100644 --- a/crypto/external/bsd/openssl/lib/libcrypto/man/d2i_X509.3 +++ b/crypto/external/bsd/openssl/lib/libcrypto/man/d2i_X509.3 @@ -1,6 +1,6 @@ -.\" $NetBSD: d2i_X509.3,v 1.19 2019/06/09 18:44:34 christos Exp $ +.\" $NetBSD: d2i_X509.3,v 1.19.2.1 2021/03/28 18:21:51 martin Exp $ .\" -.\" Automatically generated by Pod::Man 4.10 (Pod::Simple 3.35) +.\" Automatically generated by Pod::Man 4.11 (Pod::Simple 3.35) .\" .\" Standard preamble: .\" ======================================================================== @@ -135,7 +135,7 @@ .\" ======================================================================== .\" .IX Title "d2i_X509 3" -.TH d2i_X509 3 "2019-06-09" "1.1.1c" "OpenSSL" +.TH d2i_X509 3 "2020-12-10" "1.1.1i" "OpenSSL" .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. .if n .ad l @@ -192,6 +192,7 @@ d2i_DSA_PUBKEY_bio, d2i_DSA_PUBKEY_fp, d2i_DSA_SIG, d2i_DSAparams, +d2i_ECDSA_SIG, d2i_ECPKParameters, d2i_ECParameters, d2i_ECPrivateKey, @@ -368,6 +369,7 @@ i2d_DSA_PUBKEY_bio, i2d_DSA_PUBKEY_fp, i2d_DSA_SIG, i2d_DSAparams, +i2d_ECDSA_SIG, i2d_ECPKParameters, i2d_ECParameters, i2d_ECPrivateKey, @@ -444,7 +446,6 @@ i2d_POLICYQUALINFO, i2d_PROFESSION_INFO, i2d_PROXY_CERT_INFO_EXTENSION, i2d_PROXY_POLICY, -i2d_PublicKey, i2d_RSAPrivateKey, i2d_RSAPrivateKey_bio, i2d_RSAPrivateKey_fp, @@ -503,7 +504,7 @@ libcrypto, -lcrypto .SH "SYNOPSIS" .IX Header "SYNOPSIS" .Vb 3 -\& TYPE *d2i_TYPE(TYPE **a, unsigned char **ppin, long length); +\& TYPE *d2i_TYPE(TYPE **a, const unsigned char **ppin, long length); \& TYPE *d2i_TYPE_bio(BIO *bp, TYPE **a); \& TYPE *d2i_TYPE_fp(FILE *fp, TYPE **a); \& @@ -573,8 +574,8 @@ The actual \s-1TYPE\s0 structure passed to \fBi2d_TYPE()\fR must be a valid populated \fB\s-1TYPE\s0\fR structure \*(-- it \fBcannot\fR simply be fed with an empty structure such as that returned by \fBTYPE_new()\fR. .PP -The encoded data is in binary form and may contain embedded zeroes. -Therefore any \s-1FILE\s0 pointers or BIOs should be opened in binary mode. +The encoded data is in binary form and may contain embedded zeros. +Therefore, any \s-1FILE\s0 pointers or BIOs should be opened in binary mode. Functions such as \fBstrlen()\fR will \fBnot\fR return the correct length of the encoded structure. .PP @@ -592,8 +593,8 @@ Represents an \s-1ASN1 OBJECT IDENTIFIER.\s0 .IP "\fBDHparams\fR" 4 .IX Item "DHparams" Represents a PKCS#3 \s-1DH\s0 parameters structure. -.IP "\fBDHparamx\fR" 4 -.IX Item "DHparamx" +.IP "\fBDHxparams\fR" 4 +.IX Item "DHxparams" Represents an \s-1ANSI X9.42 DH\s0 parameters structure. .IP "\fB\s-1DSA_PUBKEY\s0\fR" 4 .IX Item "DSA_PUBKEY" @@ -602,6 +603,9 @@ Represents a \s-1DSA\s0 public key using a \fBSubjectPublicKeyInfo\fR structure. .IX Item "DSAPublicKey, DSAPrivateKey" Use a non-standard OpenSSL format and should be avoided; use \fB\s-1DSA_PUBKEY\s0\fR, \&\fB\fBPEM_write_PrivateKey\fB\|(3)\fR, or similar instead. +.IP "\fB\s-1ECDSA_SIG\s0\fR" 4 +.IX Item "ECDSA_SIG" +Represents an \s-1ECDSA\s0 signature. .IP "\fBRSAPublicKey\fR" 4 .IX Item "RSAPublicKey" Represents a PKCS#1 \s-1RSA\s0 public key structure. @@ -623,8 +627,8 @@ Represents the \fBDigestInfo\fR structure defined in PKCS#1 and PKCS#7. .IX Header "RETURN VALUES" \&\fBd2i_TYPE()\fR, \fBd2i_TYPE_bio()\fR and \fBd2i_TYPE_fp()\fR return a valid \fB\s-1TYPE\s0\fR structure or \fB\s-1NULL\s0\fR if an error occurs. If the \*(L"reuse\*(R" capability has been used with -a valid structure being passed in via \fBa\fR, then the object is not freed in -the event of error but may be in a potentially invalid or inconsistent state. +a valid structure being passed in via \fBa\fR, then the object is freed in +the event of error and \fB*a\fR is set to \s-1NULL.\s0 .PP \&\fBi2d_TYPE()\fR returns the number of bytes successfully encoded or a negative value if an error occurs. @@ -647,9 +651,10 @@ Allocate and encode the \s-1DER\s0 encoding of an X509 structure: .PP Attempt to decode a buffer: .PP -.Vb 3 +.Vb 4 \& X509 *x; -\& unsigned char *buf, *p; +\& unsigned char *buf; +\& const unsigned char *p; \& int len; \& \& /* Set up buf and len to point to the input buffer. */ @@ -661,9 +666,10 @@ Attempt to decode a buffer: .PP Alternative technique: .PP -.Vb 3 +.Vb 4 \& X509 *x; -\& unsigned char *buf, *p; +\& unsigned char *buf; +\& const unsigned char *p; \& int len; \& \& /* Set up buf and len to point to the input buffer. */ @@ -712,9 +718,13 @@ happen. .SH "BUGS" .IX Header "BUGS" In some versions of OpenSSL the \*(L"reuse\*(R" behaviour of \fBd2i_TYPE()\fR when -\&\fB*px\fR is valid is broken and some parts of the reused structure may -persist if they are not present in the new one. As a result the use -of this \*(L"reuse\*(R" behaviour is strongly discouraged. +\&\fB*a\fR is valid is broken and some parts of the reused structure may +persist if they are not present in the new one. Additionally, in versions of +OpenSSL prior to 1.1.0, when the \*(L"reuse\*(R" behaviour is used and an error occurs +the behaviour is inconsistent. Some functions behaved as described here, while +some did not free \fB*a\fR on error and did not set \fB*a\fR to \s-1NULL.\s0 +.PP +As a result of the above issues the \*(L"reuse\*(R" behaviour is strongly discouraged. .PP \&\fBi2d_TYPE()\fR will not return an error in many versions of OpenSSL, if mandatory fields are not initialized due to a programming error @@ -730,7 +740,7 @@ serialization. This is because some objects cache the encoding for efficiency reasons. .SH "COPYRIGHT" .IX Header "COPYRIGHT" -Copyright 1998\-2019 The OpenSSL Project Authors. All Rights Reserved. +Copyright 1998\-2020 The OpenSSL Project Authors. All Rights Reserved. .PP Licensed under the OpenSSL license (the \*(L"License\*(R"). You may not use this file except in compliance with the License. You can obtain a copy diff --git a/crypto/external/bsd/openssl/lib/libcrypto/man/des_modes.7 b/crypto/external/bsd/openssl/lib/libcrypto/man/des_modes.7 index c0fcdaf7c51..433aeb34d7d 100644 --- a/crypto/external/bsd/openssl/lib/libcrypto/man/des_modes.7 +++ b/crypto/external/bsd/openssl/lib/libcrypto/man/des_modes.7 @@ -1,6 +1,6 @@ -.\" $NetBSD: des_modes.7,v 1.19 2019/06/09 18:44:34 christos Exp $ +.\" $NetBSD: des_modes.7,v 1.19.2.1 2021/03/28 18:21:51 martin Exp $ .\" -.\" Automatically generated by Pod::Man 4.10 (Pod::Simple 3.35) +.\" Automatically generated by Pod::Man 4.11 (Pod::Simple 3.35) .\" .\" Standard preamble: .\" ======================================================================== @@ -135,7 +135,7 @@ .\" ======================================================================== .\" .IX Title "DES_MODES 7" -.TH DES_MODES 7 "2018-09-23" "1.1.1c" "OpenSSL" +.TH DES_MODES 7 "2018-09-23" "1.1.1i" "OpenSSL" .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. .if n .ad l diff --git a/crypto/external/bsd/openssl/lib/libcrypto/man/evp.7 b/crypto/external/bsd/openssl/lib/libcrypto/man/evp.7 index b8e9aa1cab1..57f5d965207 100644 --- a/crypto/external/bsd/openssl/lib/libcrypto/man/evp.7 +++ b/crypto/external/bsd/openssl/lib/libcrypto/man/evp.7 @@ -1,6 +1,6 @@ -.\" $NetBSD: evp.7,v 1.2 2019/06/09 18:44:34 christos Exp $ +.\" $NetBSD: evp.7,v 1.2.4.1 2021/03/28 18:21:51 martin Exp $ .\" -.\" Automatically generated by Pod::Man 4.10 (Pod::Simple 3.35) +.\" Automatically generated by Pod::Man 4.11 (Pod::Simple 3.35) .\" .\" Standard preamble: .\" ======================================================================== @@ -135,7 +135,7 @@ .\" ======================================================================== .\" .IX Title "EVP 7" -.TH EVP 7 "2018-09-23" "1.1.1c" "OpenSSL" +.TH EVP 7 "2020-12-10" "1.1.1i" "OpenSSL" .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. .if n .ad l @@ -166,7 +166,7 @@ functions. Symmetric encryption is available with the \fBEVP_Encrypt\fR\fI\s-1XXX\s0\fR functions. The \fBEVP_Digest\fR\fI\s-1XXX\s0\fR functions provide message digests. .PP -The \fB\s-1EVP_PKEY\s0\fR\fI\s-1XXX\s0\fR functions provide a high level interface to +The \fB\s-1EVP_PKEY\s0\fR\fI\s-1XXX\s0\fR functions provide a high-level interface to asymmetric algorithms. To create a new \s-1EVP_PKEY\s0 see \&\fBEVP_PKEY_new\fR\|(3). EVP_PKEYs can be associated with a private key of a particular algorithm by using the functions @@ -179,8 +179,8 @@ The \s-1EVP_PKEY\s0 functions support the full range of asymmetric algorithm ope .IP "For key agreement see \fBEVP_PKEY_derive\fR\|(3)" 4 .IX Item "For key agreement see EVP_PKEY_derive" .PD 0 -.IP "For signing and verifying see \fBEVP_PKEY_sign\fR\|(3), \fBEVP_PKEY_verify\fR\|(3) and \fBEVP_PKEY_verify_recover\fR\|(3). However, note that these functions do not perform a digest of the data to be signed. Therefore normally you would use the \fBEVP_DigestSignInit\fR\|(3) functions for this purpose." 4 -.IX Item "For signing and verifying see EVP_PKEY_sign, EVP_PKEY_verify and EVP_PKEY_verify_recover. However, note that these functions do not perform a digest of the data to be signed. Therefore normally you would use the EVP_DigestSignInit functions for this purpose." +.IP "For signing and verifying see \fBEVP_PKEY_sign\fR\|(3), \fBEVP_PKEY_verify\fR\|(3) and \fBEVP_PKEY_verify_recover\fR\|(3). However, note that these functions do not perform a digest of the data to be signed. Therefore, normally you would use the \fBEVP_DigestSignInit\fR\|(3) functions for this purpose." 4 +.IX Item "For signing and verifying see EVP_PKEY_sign, EVP_PKEY_verify and EVP_PKEY_verify_recover. However, note that these functions do not perform a digest of the data to be signed. Therefore, normally you would use the EVP_DigestSignInit functions for this purpose." .ie n .IP "For encryption and decryption see \fBEVP_PKEY_encrypt\fR\|(3) and \fBEVP_PKEY_decrypt\fR\|(3) respectively. However, note that these functions perform encryption and decryption only. As public key encryption is an expensive operation, normally you would wrap an encrypted message in a ""digital envelope"" using the \fBEVP_SealInit\fR\|(3) and \fBEVP_OpenInit\fR\|(3) functions." 4 .el .IP "For encryption and decryption see \fBEVP_PKEY_encrypt\fR\|(3) and \fBEVP_PKEY_decrypt\fR\|(3) respectively. However, note that these functions perform encryption and decryption only. As public key encryption is an expensive operation, normally you would wrap an encrypted message in a ``digital envelope'' using the \fBEVP_SealInit\fR\|(3) and \fBEVP_OpenInit\fR\|(3) functions." 4 .IX Item "For encryption and decryption see EVP_PKEY_encrypt and EVP_PKEY_decrypt respectively. However, note that these functions perform encryption and decryption only. As public key encryption is an expensive operation, normally you would wrap an encrypted message in a digital envelope using the EVP_SealInit and EVP_OpenInit functions." @@ -202,12 +202,12 @@ as defaults, then the various \s-1EVP\s0 functions will automatically use those implementations automatically in preference to built in software implementations. For more information, consult the \fBengine\fR\|(3) man page. .PP -Although low level algorithm specific functions exist for many algorithms +Although low-level algorithm specific functions exist for many algorithms their use is discouraged. They cannot be used with an \s-1ENGINE\s0 and \s-1ENGINE\s0 -versions of new algorithms cannot be accessed using the low level functions. +versions of new algorithms cannot be accessed using the low-level functions. Also makes code harder to adapt to new algorithms and some options are not -cleanly supported at the low level and some operations are more efficient -using the high level interface. +cleanly supported at the low-level and some operations are more efficient +using the high-level interface. .SH "SEE ALSO" .IX Header "SEE ALSO" \&\fBEVP_DigestInit\fR\|(3), @@ -232,7 +232,7 @@ using the high level interface. \&\fBENGINE_by_id\fR\|(3) .SH "COPYRIGHT" .IX Header "COPYRIGHT" -Copyright 2000\-2018 The OpenSSL Project Authors. All Rights Reserved. +Copyright 2000\-2020 The OpenSSL Project Authors. All Rights Reserved. .PP Licensed under the OpenSSL license (the \*(L"License\*(R"). You may not use this file except in compliance with the License. You can obtain a copy diff --git a/crypto/external/bsd/openssl/lib/libcrypto/man/i2d_CMS_bio_stream.3 b/crypto/external/bsd/openssl/lib/libcrypto/man/i2d_CMS_bio_stream.3 index c50ca0c2fec..35fc5cb784a 100644 --- a/crypto/external/bsd/openssl/lib/libcrypto/man/i2d_CMS_bio_stream.3 +++ b/crypto/external/bsd/openssl/lib/libcrypto/man/i2d_CMS_bio_stream.3 @@ -1,6 +1,6 @@ -.\" $NetBSD: i2d_CMS_bio_stream.3,v 1.19 2019/06/09 18:44:34 christos Exp $ +.\" $NetBSD: i2d_CMS_bio_stream.3,v 1.19.2.1 2021/03/28 18:21:51 martin Exp $ .\" -.\" Automatically generated by Pod::Man 4.10 (Pod::Simple 3.35) +.\" Automatically generated by Pod::Man 4.11 (Pod::Simple 3.35) .\" .\" Standard preamble: .\" ======================================================================== @@ -135,7 +135,7 @@ .\" ======================================================================== .\" .IX Title "i2d_CMS_bio_stream 3" -.TH i2d_CMS_bio_stream 3 "2019-03-12" "1.1.1c" "OpenSSL" +.TH i2d_CMS_bio_stream 3 "2019-03-12" "1.1.1i" "OpenSSL" .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. .if n .ad l diff --git a/crypto/external/bsd/openssl/lib/libcrypto/man/i2d_PKCS7_bio_stream.3 b/crypto/external/bsd/openssl/lib/libcrypto/man/i2d_PKCS7_bio_stream.3 index 25c500bd743..8f09ad27793 100644 --- a/crypto/external/bsd/openssl/lib/libcrypto/man/i2d_PKCS7_bio_stream.3 +++ b/crypto/external/bsd/openssl/lib/libcrypto/man/i2d_PKCS7_bio_stream.3 @@ -1,6 +1,6 @@ -.\" $NetBSD: i2d_PKCS7_bio_stream.3,v 1.19 2019/06/09 18:44:34 christos Exp $ +.\" $NetBSD: i2d_PKCS7_bio_stream.3,v 1.19.2.1 2021/03/28 18:21:51 martin Exp $ .\" -.\" Automatically generated by Pod::Man 4.10 (Pod::Simple 3.35) +.\" Automatically generated by Pod::Man 4.11 (Pod::Simple 3.35) .\" .\" Standard preamble: .\" ======================================================================== @@ -135,7 +135,7 @@ .\" ======================================================================== .\" .IX Title "i2d_PKCS7_bio_stream 3" -.TH i2d_PKCS7_bio_stream 3 "2019-03-12" "1.1.1c" "OpenSSL" +.TH i2d_PKCS7_bio_stream 3 "2019-03-12" "1.1.1i" "OpenSSL" .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. .if n .ad l diff --git a/crypto/external/bsd/openssl/lib/libcrypto/man/i2d_re_X509_tbs.3 b/crypto/external/bsd/openssl/lib/libcrypto/man/i2d_re_X509_tbs.3 index 6cad07cc073..60a6e20d930 100644 --- a/crypto/external/bsd/openssl/lib/libcrypto/man/i2d_re_X509_tbs.3 +++ b/crypto/external/bsd/openssl/lib/libcrypto/man/i2d_re_X509_tbs.3 @@ -1,6 +1,6 @@ -.\" $NetBSD: i2d_re_X509_tbs.3,v 1.3 2019/06/09 18:44:34 christos Exp $ +.\" $NetBSD: i2d_re_X509_tbs.3,v 1.3.2.1 2021/03/28 18:21:51 martin Exp $ .\" -.\" Automatically generated by Pod::Man 4.10 (Pod::Simple 3.35) +.\" Automatically generated by Pod::Man 4.11 (Pod::Simple 3.35) .\" .\" Standard preamble: .\" ======================================================================== @@ -135,7 +135,7 @@ .\" ======================================================================== .\" .IX Title "i2d_re_X509_tbs 3" -.TH i2d_re_X509_tbs 3 "2018-09-23" "1.1.1c" "OpenSSL" +.TH i2d_re_X509_tbs 3 "2018-09-23" "1.1.1i" "OpenSSL" .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. .if n .ad l diff --git a/crypto/external/bsd/openssl/lib/libcrypto/man/o2i_SCT_LIST.3 b/crypto/external/bsd/openssl/lib/libcrypto/man/o2i_SCT_LIST.3 index fa88b5a928f..c79a84bb164 100644 --- a/crypto/external/bsd/openssl/lib/libcrypto/man/o2i_SCT_LIST.3 +++ b/crypto/external/bsd/openssl/lib/libcrypto/man/o2i_SCT_LIST.3 @@ -1,6 +1,6 @@ -.\" $NetBSD: o2i_SCT_LIST.3,v 1.3 2019/06/09 18:44:34 christos Exp $ +.\" $NetBSD: o2i_SCT_LIST.3,v 1.3.2.1 2021/03/28 18:21:51 martin Exp $ .\" -.\" Automatically generated by Pod::Man 4.10 (Pod::Simple 3.35) +.\" Automatically generated by Pod::Man 4.11 (Pod::Simple 3.35) .\" .\" Standard preamble: .\" ======================================================================== @@ -135,7 +135,7 @@ .\" ======================================================================== .\" .IX Title "o2i_SCT_LIST 3" -.TH o2i_SCT_LIST 3 "2018-09-23" "1.1.1c" "OpenSSL" +.TH o2i_SCT_LIST 3 "2018-09-23" "1.1.1i" "OpenSSL" .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. .if n .ad l diff --git a/crypto/external/bsd/openssl/lib/libcrypto/man/openssl.1 b/crypto/external/bsd/openssl/lib/libcrypto/man/openssl.1 index 0b5b0fe8fc8..e23f0351197 100644 --- a/crypto/external/bsd/openssl/lib/libcrypto/man/openssl.1 +++ b/crypto/external/bsd/openssl/lib/libcrypto/man/openssl.1 @@ -1,6 +1,6 @@ -.\" $NetBSD: openssl.1,v 1.18 2019/06/09 18:44:34 christos Exp $ +.\" $NetBSD: openssl.1,v 1.18.2.1 2021/03/28 18:21:51 martin Exp $ .\" -.\" Automatically generated by Pod::Man 4.10 (Pod::Simple 3.35) +.\" Automatically generated by Pod::Man 4.11 (Pod::Simple 3.35) .\" .\" Standard preamble: .\" ======================================================================== @@ -135,7 +135,7 @@ .\" ======================================================================== .\" .IX Title "OPENSSL 1" -.TH OPENSSL 1 "2018-12-08" "1.1.1c" "OpenSSL" +.TH OPENSSL 1 "2018-12-08" "1.1.1i" "OpenSSL" .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. .if n .ad l diff --git a/crypto/external/bsd/openssl/lib/libcrypto/man/openssl_CA.pl.1 b/crypto/external/bsd/openssl/lib/libcrypto/man/openssl_CA.pl.1 index 9df0fa219fa..ec395c2e3c5 100644 --- a/crypto/external/bsd/openssl/lib/libcrypto/man/openssl_CA.pl.1 +++ b/crypto/external/bsd/openssl/lib/libcrypto/man/openssl_CA.pl.1 @@ -1,6 +1,6 @@ -.\" $NetBSD: openssl_CA.pl.1,v 1.19 2019/06/09 18:44:34 christos Exp $ +.\" $NetBSD: openssl_CA.pl.1,v 1.19.2.1 2021/03/28 18:21:51 martin Exp $ .\" -.\" Automatically generated by Pod::Man 4.10 (Pod::Simple 3.35) +.\" Automatically generated by Pod::Man 4.11 (Pod::Simple 3.35) .\" .\" Standard preamble: .\" ======================================================================== @@ -135,7 +135,7 @@ .\" ======================================================================== .\" .IX Title "CA.PL 1" -.TH CA.PL 1 "2018-09-23" "1.1.1c" "OpenSSL" +.TH CA.PL 1 "2020-12-10" "1.1.1i" "OpenSSL" .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. .if n .ad l @@ -220,7 +220,7 @@ to be in the file \*(L"newreq.pem\*(R". The new certificate is written to the fi to standard output. Leverages \fBopenssl ca\fR command. .IP "\fB\-signCA\fR" 4 .IX Item "-signCA" -This option is the same as the \fB\-signreq\fR option except it uses the +This option is the same as the \fB\-sign\fR option except it uses the configuration file section \fBv3_ca\fR and so makes the signed request a valid \s-1CA\s0 certificate. This is useful when creating intermediate \s-1CA\s0 from a root \s-1CA.\s0 Extra params are passed on to \fBopenssl ca\fR command. @@ -267,7 +267,7 @@ the request and finally create a PKCS#12 file containing it. .Vb 4 \& CA.pl \-newca \& CA.pl \-newreq -\& CA.pl \-signreq +\& CA.pl \-sign \& CA.pl \-pkcs12 "My Test Certificate" .Ve .SH "DSA CERTIFICATES" @@ -294,7 +294,7 @@ Create the \s-1CA\s0 directories and files: \& CA.pl \-newca .Ve .PP -enter cacert.pem when prompted for the \s-1CA\s0 file name. +enter cacert.pem when prompted for the \s-1CA\s0 filename. .PP Create a \s-1DSA\s0 certificate request and private key (a different set of parameters can optionally be created first): @@ -306,7 +306,7 @@ can optionally be created first): Sign the request: .PP .Vb 1 -\& CA.pl \-signreq +\& CA.pl \-sign .Ve .SH "NOTES" .IX Header "NOTES" @@ -337,7 +337,7 @@ behaviour of the certificate commands call the \fBopenssl\fR command directly. \&\fBconfig\fR\|(5) .SH "COPYRIGHT" .IX Header "COPYRIGHT" -Copyright 2000\-2017 The OpenSSL Project Authors. All Rights Reserved. +Copyright 2000\-2020 The OpenSSL Project Authors. All Rights Reserved. .PP Licensed under the OpenSSL license (the \*(L"License\*(R"). You may not use this file except in compliance with the License. You can obtain a copy diff --git a/crypto/external/bsd/openssl/lib/libcrypto/man/openssl_asn1parse.1 b/crypto/external/bsd/openssl/lib/libcrypto/man/openssl_asn1parse.1 index 782a24d6048..ef56f96aff5 100644 --- a/crypto/external/bsd/openssl/lib/libcrypto/man/openssl_asn1parse.1 +++ b/crypto/external/bsd/openssl/lib/libcrypto/man/openssl_asn1parse.1 @@ -1,6 +1,6 @@ -.\" $NetBSD: openssl_asn1parse.1,v 1.19 2019/06/09 18:44:34 christos Exp $ +.\" $NetBSD: openssl_asn1parse.1,v 1.19.2.1 2021/03/28 18:21:51 martin Exp $ .\" -.\" Automatically generated by Pod::Man 4.10 (Pod::Simple 3.35) +.\" Automatically generated by Pod::Man 4.11 (Pod::Simple 3.35) .\" .\" Standard preamble: .\" ======================================================================== @@ -135,7 +135,7 @@ .\" ======================================================================== .\" .IX Title "ASN1PARSE 1" -.TH ASN1PARSE 1 "2018-09-23" "1.1.1c" "OpenSSL" +.TH ASN1PARSE 1 "2018-09-23" "1.1.1i" "OpenSSL" .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. .if n .ad l diff --git a/crypto/external/bsd/openssl/lib/libcrypto/man/openssl_ca.1 b/crypto/external/bsd/openssl/lib/libcrypto/man/openssl_ca.1 index 151b5c1b6ad..6f0c444be4d 100644 --- a/crypto/external/bsd/openssl/lib/libcrypto/man/openssl_ca.1 +++ b/crypto/external/bsd/openssl/lib/libcrypto/man/openssl_ca.1 @@ -1,6 +1,6 @@ -.\" $NetBSD: openssl_ca.1,v 1.19 2019/06/09 18:44:34 christos Exp $ +.\" $NetBSD: openssl_ca.1,v 1.19.2.1 2021/03/28 18:21:51 martin Exp $ .\" -.\" Automatically generated by Pod::Man 4.10 (Pod::Simple 3.35) +.\" Automatically generated by Pod::Man 4.11 (Pod::Simple 3.35) .\" .\" Standard preamble: .\" ======================================================================== @@ -135,7 +135,7 @@ .\" ======================================================================== .\" .IX Title "CA 1" -.TH CA 1 "2019-03-12" "1.1.1c" "OpenSSL" +.TH CA 1 "2020-12-10" "1.1.1i" "OpenSSL" .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. .if n .ad l @@ -191,6 +191,7 @@ libcrypto, -lcrypto [\fB\-engine id\fR] [\fB\-subj arg\fR] [\fB\-utf8\fR] +[\fB\-sigopt nm:v\fR] [\fB\-create_serial\fR] [\fB\-rand_serial\fR] [\fB\-multivalue\-rdn\fR] @@ -257,6 +258,10 @@ The private key to sign requests with. .IX Item "-keyform PEM|DER" The format of the data in the private key file. The default is \s-1PEM.\s0 +.IP "\fB\-sigopt nm:v\fR" 4 +.IX Item "-sigopt nm:v" +Pass options to the signature algorithm during sign or verify operations. +Names and values of these options are algorithm-specific. .IP "\fB\-key password\fR" 4 .IX Item "-key password" The password used to encrypt the private key. Since on some @@ -325,7 +330,7 @@ DNs match the order of the request. This is not needed for Xenroll. .IP "\fB\-noemailDN\fR" 4 .IX Item "-noemailDN" The \s-1DN\s0 of a certificate can contain the \s-1EMAIL\s0 field if present in the -request \s-1DN,\s0 however it is good policy just having the e\-mail set into +request \s-1DN,\s0 however, it is good policy just having the e\-mail set into the altName extension of the certificate. When this option is set the \&\s-1EMAIL\s0 field is removed from the certificate' subject and set only in the, eventually present, extensions. The \fBemail_in_dn\fR keyword can be @@ -815,7 +820,7 @@ are in year 2050 or later. \&\fBconfig\fR\|(5), \fBx509v3_config\fR\|(5) .SH "COPYRIGHT" .IX Header "COPYRIGHT" -Copyright 2000\-2019 The OpenSSL Project Authors. All Rights Reserved. +Copyright 2000\-2020 The OpenSSL Project Authors. All Rights Reserved. .PP Licensed under the OpenSSL license (the \*(L"License\*(R"). You may not use this file except in compliance with the License. You can obtain a copy diff --git a/crypto/external/bsd/openssl/lib/libcrypto/man/openssl_ciphers.1 b/crypto/external/bsd/openssl/lib/libcrypto/man/openssl_ciphers.1 index e6e8fe7cffd..027cec7acc5 100644 --- a/crypto/external/bsd/openssl/lib/libcrypto/man/openssl_ciphers.1 +++ b/crypto/external/bsd/openssl/lib/libcrypto/man/openssl_ciphers.1 @@ -1,6 +1,6 @@ -.\" $NetBSD: openssl_ciphers.1,v 1.19 2019/06/09 18:44:34 christos Exp $ +.\" $NetBSD: openssl_ciphers.1,v 1.19.2.1 2021/03/28 18:21:51 martin Exp $ .\" -.\" Automatically generated by Pod::Man 4.10 (Pod::Simple 3.35) +.\" Automatically generated by Pod::Man 4.11 (Pod::Simple 3.35) .\" .\" Standard preamble: .\" ======================================================================== @@ -135,7 +135,7 @@ .\" ======================================================================== .\" .IX Title "CIPHERS 1" -.TH CIPHERS 1 "2019-03-12" "1.1.1c" "OpenSSL" +.TH CIPHERS 1 "2019-03-12" "1.1.1i" "OpenSSL" .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. .if n .ad l diff --git a/crypto/external/bsd/openssl/lib/libcrypto/man/openssl_cms.1 b/crypto/external/bsd/openssl/lib/libcrypto/man/openssl_cms.1 index 0b4198a03de..6fc24f9858f 100644 --- a/crypto/external/bsd/openssl/lib/libcrypto/man/openssl_cms.1 +++ b/crypto/external/bsd/openssl/lib/libcrypto/man/openssl_cms.1 @@ -1,6 +1,6 @@ -.\" $NetBSD: openssl_cms.1,v 1.19 2019/06/09 18:44:34 christos Exp $ +.\" $NetBSD: openssl_cms.1,v 1.19.2.1 2021/03/28 18:21:51 martin Exp $ .\" -.\" Automatically generated by Pod::Man 4.10 (Pod::Simple 3.35) +.\" Automatically generated by Pod::Man 4.11 (Pod::Simple 3.35) .\" .\" Standard preamble: .\" ======================================================================== @@ -135,7 +135,7 @@ .\" ======================================================================== .\" .IX Title "CMS 1" -.TH CMS 1 "2019-03-12" "1.1.1c" "OpenSSL" +.TH CMS 1 "2019-03-12" "1.1.1i" "OpenSSL" .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. .if n .ad l diff --git a/crypto/external/bsd/openssl/lib/libcrypto/man/openssl_config.5 b/crypto/external/bsd/openssl/lib/libcrypto/man/openssl_config.5 index dbcd60f4236..c0465f6f2d5 100644 --- a/crypto/external/bsd/openssl/lib/libcrypto/man/openssl_config.5 +++ b/crypto/external/bsd/openssl/lib/libcrypto/man/openssl_config.5 @@ -1,6 +1,6 @@ -.\" $NetBSD: openssl_config.5,v 1.2 2019/06/09 18:44:34 christos Exp $ +.\" $NetBSD: openssl_config.5,v 1.2.4.1 2021/03/28 18:21:51 martin Exp $ .\" -.\" Automatically generated by Pod::Man 4.10 (Pod::Simple 3.35) +.\" Automatically generated by Pod::Man 4.11 (Pod::Simple 3.35) .\" .\" Standard preamble: .\" ======================================================================== @@ -135,7 +135,7 @@ .\" ======================================================================== .\" .IX Title "CONFIG 5" -.TH CONFIG 5 "2019-03-12" "1.1.1c" "OpenSSL" +.TH CONFIG 5 "2020-12-10" "1.1.1i" "OpenSSL" .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. .if n .ad l @@ -409,12 +409,11 @@ Example of a configuration with the system default: \& ssl_conf = ssl_sect \& \& [ssl_sect] -\& \& system_default = system_default_sect \& \& [system_default_sect] -\& \& MinProtocol = TLSv1.2 +\& MinProtocol = DTLSv1.2 .Ve .SH "NOTES" .IX Header "NOTES" @@ -508,6 +507,29 @@ Simple OpenSSL library configuration example to enter \s-1FIPS\s0 mode: Note: in the above example you will get an error in non \s-1FIPS\s0 capable versions of OpenSSL. .PP +Simple OpenSSL library configuration to make \s-1TLS 1.2\s0 and \s-1DTLS 1.2\s0 the +system-default minimum \s-1TLS\s0 and \s-1DTLS\s0 versions, respectively: +.PP +.Vb 2 +\& # Toplevel section for openssl (including libssl) +\& openssl_conf = default_conf_section +\& +\& [default_conf_section] +\& # We only specify configuration for the "ssl module" +\& ssl_conf = ssl_section +\& +\& [ssl_section] +\& system_default = system_default_section +\& +\& [system_default_section] +\& MinProtocol = TLSv1.2 +\& MinProtocol = DTLSv1.2 +.Ve +.PP +The minimum \s-1TLS\s0 protocol is applied to \fB\s-1SSL_CTX\s0\fR objects that are TLS-based, +and the minimum \s-1DTLS\s0 protocol to those are DTLS-based. +The same applies also to maximum versions set with \fBMaxProtocol\fR. +.PP More complex OpenSSL library configuration. Add \s-1OID\s0 and don't enter \s-1FIPS\s0 mode: .PP .Vb 3 @@ -568,7 +590,7 @@ the value. The escaping isn't quite right: if you want to use sequences like \fB\en\fR you can't use any quote escaping on the same line. .PP -Files are loaded in a single pass. This means that an variable expansion +Files are loaded in a single pass. This means that a variable expansion will only work if the variables referenced are defined earlier in the file. .SH "SEE ALSO" @@ -576,7 +598,7 @@ file. \&\fBx509\fR\|(1), \fBreq\fR\|(1), \fBca\fR\|(1) .SH "COPYRIGHT" .IX Header "COPYRIGHT" -Copyright 2000\-2019 The OpenSSL Project Authors. All Rights Reserved. +Copyright 2000\-2020 The OpenSSL Project Authors. All Rights Reserved. .PP Licensed under the OpenSSL license (the \*(L"License\*(R"). You may not use this file except in compliance with the License. You can obtain a copy diff --git a/crypto/external/bsd/openssl/lib/libcrypto/man/openssl_crl.1 b/crypto/external/bsd/openssl/lib/libcrypto/man/openssl_crl.1 index f0fee4c2e67..dbca9ba6ec2 100644 --- a/crypto/external/bsd/openssl/lib/libcrypto/man/openssl_crl.1 +++ b/crypto/external/bsd/openssl/lib/libcrypto/man/openssl_crl.1 @@ -1,6 +1,6 @@ -.\" $NetBSD: openssl_crl.1,v 1.19 2019/06/09 18:44:34 christos Exp $ +.\" $NetBSD: openssl_crl.1,v 1.19.2.1 2021/03/28 18:21:51 martin Exp $ .\" -.\" Automatically generated by Pod::Man 4.10 (Pod::Simple 3.35) +.\" Automatically generated by Pod::Man 4.11 (Pod::Simple 3.35) .\" .\" Standard preamble: .\" ======================================================================== @@ -135,7 +135,7 @@ .\" ======================================================================== .\" .IX Title "CRL 1" -.TH CRL 1 "2018-09-23" "1.1.1c" "OpenSSL" +.TH CRL 1 "2018-09-23" "1.1.1i" "OpenSSL" .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. .if n .ad l diff --git a/crypto/external/bsd/openssl/lib/libcrypto/man/openssl_crl2pkcs7.1 b/crypto/external/bsd/openssl/lib/libcrypto/man/openssl_crl2pkcs7.1 index a79531ee3c4..620fb051f53 100644 --- a/crypto/external/bsd/openssl/lib/libcrypto/man/openssl_crl2pkcs7.1 +++ b/crypto/external/bsd/openssl/lib/libcrypto/man/openssl_crl2pkcs7.1 @@ -1,6 +1,6 @@ -.\" $NetBSD: openssl_crl2pkcs7.1,v 1.19 2019/06/09 18:44:34 christos Exp $ +.\" $NetBSD: openssl_crl2pkcs7.1,v 1.19.2.1 2021/03/28 18:21:51 martin Exp $ .\" -.\" Automatically generated by Pod::Man 4.10 (Pod::Simple 3.35) +.\" Automatically generated by Pod::Man 4.11 (Pod::Simple 3.35) .\" .\" Standard preamble: .\" ======================================================================== @@ -135,7 +135,7 @@ .\" ======================================================================== .\" .IX Title "CRL2PKCS7 1" -.TH CRL2PKCS7 1 "2018-09-23" "1.1.1c" "OpenSSL" +.TH CRL2PKCS7 1 "2018-09-23" "1.1.1i" "OpenSSL" .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. .if n .ad l diff --git a/crypto/external/bsd/openssl/lib/libcrypto/man/openssl_dgst.1 b/crypto/external/bsd/openssl/lib/libcrypto/man/openssl_dgst.1 index 124891da240..28dc17544c2 100644 --- a/crypto/external/bsd/openssl/lib/libcrypto/man/openssl_dgst.1 +++ b/crypto/external/bsd/openssl/lib/libcrypto/man/openssl_dgst.1 @@ -1,6 +1,6 @@ -.\" $NetBSD: openssl_dgst.1,v 1.19 2019/06/09 18:44:34 christos Exp $ +.\" $NetBSD: openssl_dgst.1,v 1.19.2.1 2021/03/28 18:21:51 martin Exp $ .\" -.\" Automatically generated by Pod::Man 4.10 (Pod::Simple 3.35) +.\" Automatically generated by Pod::Man 4.11 (Pod::Simple 3.35) .\" .\" Standard preamble: .\" ======================================================================== @@ -135,7 +135,7 @@ .\" ======================================================================== .\" .IX Title "DGST 1" -.TH DGST 1 "2019-03-12" "1.1.1c" "OpenSSL" +.TH DGST 1 "2020-12-10" "1.1.1i" "OpenSSL" .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. .if n .ad l @@ -152,6 +152,7 @@ libcrypto, -lcrypto [\fB\-help\fR] [\fB\-c\fR] [\fB\-d\fR] +[\fB\-list\fR] [\fB\-hex\fR] [\fB\-binary\fR] [\fB\-r\fR] @@ -162,6 +163,7 @@ libcrypto, -lcrypto [\fB\-verify filename\fR] [\fB\-prverify filename\fR] [\fB\-signature filename\fR] +[\fB\-sigopt nm:v\fR] [\fB\-hmac key\fR] [\fB\-fips\-fingerprint\fR] [\fB\-rand file...\fR] @@ -198,6 +200,9 @@ Print out the digest in two digit groups separated by colons, only relevant if .IP "\fB\-d\fR" 4 .IX Item "-d" Print out \s-1BIO\s0 debugging information. +.IP "\fB\-list\fR" 4 +.IX Item "-list" +Prints out a list of supported message digests. .IP "\fB\-hex\fR" 4 .IX Item "-hex" Digest is to be output as a hex dump. This is the default case for a \*(L"normal\*(R" @@ -208,15 +213,15 @@ signatures using \fB\-hex\fR. Output the digest or signature in binary form. .IP "\fB\-r\fR" 4 .IX Item "-r" -Output the digest in the \*(L"coreutils\*(R" format used by programs like \fBsha1sum\fR. +Output the digest in the \*(L"coreutils\*(R" format, including newlines. +Used by programs like \fBsha1sum\fR. .IP "\fB\-out filename\fR" 4 .IX Item "-out filename" Filename to output to, or standard output by default. .IP "\fB\-sign filename\fR" 4 .IX Item "-sign filename" Digitally sign the digest using the private key in \*(L"filename\*(R". Note this option -does not support Ed25519 or Ed448 private keys. Use the \fBpkeyutl\fR command -instead for this. +does not support Ed25519 or Ed448 private keys. .IP "\fB\-keyform arg\fR" 4 .IX Item "-keyform arg" Specifies the key format to sign digest with. The \s-1DER, PEM, P12,\s0 @@ -338,7 +343,7 @@ The default digest was changed from \s-1MD5\s0 to \s-1SHA256\s0 in OpenSSL 1.1.0 The FIPS-related options were removed in OpenSSL 1.1.0. .SH "COPYRIGHT" .IX Header "COPYRIGHT" -Copyright 2000\-2019 The OpenSSL Project Authors. All Rights Reserved. +Copyright 2000\-2020 The OpenSSL Project Authors. All Rights Reserved. .PP Licensed under the OpenSSL license (the \*(L"License\*(R"). You may not use this file except in compliance with the License. You can obtain a copy diff --git a/crypto/external/bsd/openssl/lib/libcrypto/man/openssl_dhparam.1 b/crypto/external/bsd/openssl/lib/libcrypto/man/openssl_dhparam.1 index ca40128edbb..1038c1e210f 100644 --- a/crypto/external/bsd/openssl/lib/libcrypto/man/openssl_dhparam.1 +++ b/crypto/external/bsd/openssl/lib/libcrypto/man/openssl_dhparam.1 @@ -1,6 +1,6 @@ -.\" $NetBSD: openssl_dhparam.1,v 1.19 2019/06/09 18:44:34 christos Exp $ +.\" $NetBSD: openssl_dhparam.1,v 1.19.2.1 2021/03/28 18:21:51 martin Exp $ .\" -.\" Automatically generated by Pod::Man 4.10 (Pod::Simple 3.35) +.\" Automatically generated by Pod::Man 4.11 (Pod::Simple 3.35) .\" .\" Standard preamble: .\" ======================================================================== @@ -135,7 +135,7 @@ .\" ======================================================================== .\" .IX Title "DHPARAM 1" -.TH DHPARAM 1 "2018-09-23" "1.1.1c" "OpenSSL" +.TH DHPARAM 1 "2018-09-23" "1.1.1i" "OpenSSL" .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. .if n .ad l diff --git a/crypto/external/bsd/openssl/lib/libcrypto/man/openssl_dsa.1 b/crypto/external/bsd/openssl/lib/libcrypto/man/openssl_dsa.1 index 52b6b75b04a..9bf307da9be 100644 --- a/crypto/external/bsd/openssl/lib/libcrypto/man/openssl_dsa.1 +++ b/crypto/external/bsd/openssl/lib/libcrypto/man/openssl_dsa.1 @@ -1,6 +1,6 @@ -.\" $NetBSD: openssl_dsa.1,v 1.19 2019/06/09 18:44:34 christos Exp $ +.\" $NetBSD: openssl_dsa.1,v 1.19.2.1 2021/03/28 18:21:51 martin Exp $ .\" -.\" Automatically generated by Pod::Man 4.10 (Pod::Simple 3.35) +.\" Automatically generated by Pod::Man 4.11 (Pod::Simple 3.35) .\" .\" Standard preamble: .\" ======================================================================== @@ -135,7 +135,7 @@ .\" ======================================================================== .\" .IX Title "DSA 1" -.TH DSA 1 "2018-09-23" "1.1.1c" "OpenSSL" +.TH DSA 1 "2018-09-23" "1.1.1i" "OpenSSL" .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. .if n .ad l diff --git a/crypto/external/bsd/openssl/lib/libcrypto/man/openssl_dsaparam.1 b/crypto/external/bsd/openssl/lib/libcrypto/man/openssl_dsaparam.1 index 43d3f4c7f81..34f189d3237 100644 --- a/crypto/external/bsd/openssl/lib/libcrypto/man/openssl_dsaparam.1 +++ b/crypto/external/bsd/openssl/lib/libcrypto/man/openssl_dsaparam.1 @@ -1,6 +1,6 @@ -.\" $NetBSD: openssl_dsaparam.1,v 1.19 2019/06/09 18:44:34 christos Exp $ +.\" $NetBSD: openssl_dsaparam.1,v 1.19.2.1 2021/03/28 18:21:51 martin Exp $ .\" -.\" Automatically generated by Pod::Man 4.10 (Pod::Simple 3.35) +.\" Automatically generated by Pod::Man 4.11 (Pod::Simple 3.35) .\" .\" Standard preamble: .\" ======================================================================== @@ -135,7 +135,7 @@ .\" ======================================================================== .\" .IX Title "DSAPARAM 1" -.TH DSAPARAM 1 "2018-09-23" "1.1.1c" "OpenSSL" +.TH DSAPARAM 1 "2018-09-23" "1.1.1i" "OpenSSL" .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. .if n .ad l diff --git a/crypto/external/bsd/openssl/lib/libcrypto/man/openssl_ec.1 b/crypto/external/bsd/openssl/lib/libcrypto/man/openssl_ec.1 index dc7b4020586..562a52199be 100644 --- a/crypto/external/bsd/openssl/lib/libcrypto/man/openssl_ec.1 +++ b/crypto/external/bsd/openssl/lib/libcrypto/man/openssl_ec.1 @@ -1,6 +1,6 @@ -.\" $NetBSD: openssl_ec.1,v 1.19 2019/06/09 18:44:34 christos Exp $ +.\" $NetBSD: openssl_ec.1,v 1.19.2.1 2021/03/28 18:21:51 martin Exp $ .\" -.\" Automatically generated by Pod::Man 4.10 (Pod::Simple 3.35) +.\" Automatically generated by Pod::Man 4.11 (Pod::Simple 3.35) .\" .\" Standard preamble: .\" ======================================================================== @@ -135,7 +135,7 @@ .\" ======================================================================== .\" .IX Title "EC 1" -.TH EC 1 "2019-03-12" "1.1.1c" "OpenSSL" +.TH EC 1 "2019-03-12" "1.1.1i" "OpenSSL" .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. .if n .ad l diff --git a/crypto/external/bsd/openssl/lib/libcrypto/man/openssl_ecparam.1 b/crypto/external/bsd/openssl/lib/libcrypto/man/openssl_ecparam.1 index 542febd5125..d5046791f12 100644 --- a/crypto/external/bsd/openssl/lib/libcrypto/man/openssl_ecparam.1 +++ b/crypto/external/bsd/openssl/lib/libcrypto/man/openssl_ecparam.1 @@ -1,6 +1,6 @@ -.\" $NetBSD: openssl_ecparam.1,v 1.19 2019/06/09 18:44:34 christos Exp $ +.\" $NetBSD: openssl_ecparam.1,v 1.19.2.1 2021/03/28 18:21:51 martin Exp $ .\" -.\" Automatically generated by Pod::Man 4.10 (Pod::Simple 3.35) +.\" Automatically generated by Pod::Man 4.11 (Pod::Simple 3.35) .\" .\" Standard preamble: .\" ======================================================================== @@ -135,7 +135,7 @@ .\" ======================================================================== .\" .IX Title "ECPARAM 1" -.TH ECPARAM 1 "2018-09-23" "1.1.1c" "OpenSSL" +.TH ECPARAM 1 "2018-09-23" "1.1.1i" "OpenSSL" .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. .if n .ad l diff --git a/crypto/external/bsd/openssl/lib/libcrypto/man/openssl_enc.1 b/crypto/external/bsd/openssl/lib/libcrypto/man/openssl_enc.1 index 9778f9e0895..e24a331e3f2 100644 --- a/crypto/external/bsd/openssl/lib/libcrypto/man/openssl_enc.1 +++ b/crypto/external/bsd/openssl/lib/libcrypto/man/openssl_enc.1 @@ -1,6 +1,6 @@ -.\" $NetBSD: openssl_enc.1,v 1.19 2019/06/09 18:44:34 christos Exp $ +.\" $NetBSD: openssl_enc.1,v 1.19.2.1 2021/03/28 18:21:51 martin Exp $ .\" -.\" Automatically generated by Pod::Man 4.10 (Pod::Simple 3.35) +.\" Automatically generated by Pod::Man 4.11 (Pod::Simple 3.35) .\" .\" Standard preamble: .\" ======================================================================== @@ -135,7 +135,7 @@ .\" ======================================================================== .\" .IX Title "ENC 1" -.TH ENC 1 "2019-03-12" "1.1.1c" "OpenSSL" +.TH ENC 1 "2020-12-10" "1.1.1i" "OpenSSL" .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. .if n .ad l @@ -149,6 +149,7 @@ libcrypto, -lcrypto .IX Header "SYNOPSIS" \&\fBopenssl enc \-\f(BIcipher\fB\fR [\fB\-help\fR] +[\fB\-list\fR] [\fB\-ciphers\fR] [\fB\-in filename\fR] [\fB\-out filename\fR] @@ -191,9 +192,12 @@ either by itself or in addition to the encryption or decryption. .IP "\fB\-help\fR" 4 .IX Item "-help" Print out a usage message. +.IP "\fB\-list\fR" 4 +.IX Item "-list" +List all supported ciphers. .IP "\fB\-ciphers\fR" 4 .IX Item "-ciphers" -List all supported ciphers. +Alias of \-list to display all supported ciphers. .IP "\fB\-in filename\fR" 4 .IX Item "-in filename" The input filename, standard input by default. @@ -340,7 +344,7 @@ a strong block cipher, such as \s-1AES,\s0 in \s-1CBC\s0 mode. .PP All the block ciphers normally use PKCS#5 padding, also known as standard block padding. This allows a rudimentary integrity or password check to -be performed. However since the chance of random data passing the test +be performed. However, since the chance of random data passing the test is better than 1 in 256 it isn't a very good test. .PP If padding is disabled then the input data must be a multiple of the cipher @@ -532,9 +536,11 @@ certain parameters. So if, for example, you want to use \s-1RC2\s0 with a .SH "HISTORY" .IX Header "HISTORY" The default digest was changed from \s-1MD5\s0 to \s-1SHA256\s0 in OpenSSL 1.1.0. +.PP +The \fB\-list\fR option was added in OpenSSL 1.1.1e. .SH "COPYRIGHT" .IX Header "COPYRIGHT" -Copyright 2000\-2018 The OpenSSL Project Authors. All Rights Reserved. +Copyright 2000\-2020 The OpenSSL Project Authors. All Rights Reserved. .PP Licensed under the OpenSSL license (the \*(L"License\*(R"). You may not use this file except in compliance with the License. You can obtain a copy diff --git a/crypto/external/bsd/openssl/lib/libcrypto/man/openssl_engine.1 b/crypto/external/bsd/openssl/lib/libcrypto/man/openssl_engine.1 index 1089b0721c5..088e3c984b2 100644 --- a/crypto/external/bsd/openssl/lib/libcrypto/man/openssl_engine.1 +++ b/crypto/external/bsd/openssl/lib/libcrypto/man/openssl_engine.1 @@ -1,6 +1,6 @@ -.\" $NetBSD: openssl_engine.1,v 1.3 2019/06/09 18:44:34 christos Exp $ +.\" $NetBSD: openssl_engine.1,v 1.3.2.1 2021/03/28 18:21:51 martin Exp $ .\" -.\" Automatically generated by Pod::Man 4.10 (Pod::Simple 3.35) +.\" Automatically generated by Pod::Man 4.11 (Pod::Simple 3.35) .\" .\" Standard preamble: .\" ======================================================================== @@ -135,7 +135,7 @@ .\" ======================================================================== .\" .IX Title "ENGINE 1" -.TH ENGINE 1 "2018-09-23" "1.1.1c" "OpenSSL" +.TH ENGINE 1 "2020-01-23" "1.1.1i" "OpenSSL" .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. .if n .ad l @@ -195,8 +195,8 @@ the \fB\-post\fR command is given after the engine is loaded. The \fIcommand\fR is of the form \fIcmd:val\fR where \fIcmd\fR is the command, and \fIval\fR is the value for the command. See the example below. -.SH "EXAMPLE" -.IX Header "EXAMPLE" +.SH "EXAMPLES" +.IX Header "EXAMPLES" To list all the commands available to a dynamic engine: .PP .Vb 10 @@ -237,7 +237,7 @@ The path to the engines directory. \&\fBconfig\fR\|(5) .SH "COPYRIGHT" .IX Header "COPYRIGHT" -Copyright 2016\-2018 The OpenSSL Project Authors. All Rights Reserved. +Copyright 2016\-2019 The OpenSSL Project Authors. All Rights Reserved. .PP Licensed under the OpenSSL license (the \*(L"License\*(R"). You may not use this file except in compliance with the License. You can obtain a copy diff --git a/crypto/external/bsd/openssl/lib/libcrypto/man/openssl_errstr.1 b/crypto/external/bsd/openssl/lib/libcrypto/man/openssl_errstr.1 index 11f85510cf3..56ef6ce0759 100644 --- a/crypto/external/bsd/openssl/lib/libcrypto/man/openssl_errstr.1 +++ b/crypto/external/bsd/openssl/lib/libcrypto/man/openssl_errstr.1 @@ -1,6 +1,6 @@ -.\" $NetBSD: openssl_errstr.1,v 1.19 2019/06/09 18:44:34 christos Exp $ +.\" $NetBSD: openssl_errstr.1,v 1.19.2.1 2021/03/28 18:21:51 martin Exp $ .\" -.\" Automatically generated by Pod::Man 4.10 (Pod::Simple 3.35) +.\" Automatically generated by Pod::Man 4.11 (Pod::Simple 3.35) .\" .\" Standard preamble: .\" ======================================================================== @@ -135,7 +135,7 @@ .\" ======================================================================== .\" .IX Title "ERRSTR 1" -.TH ERRSTR 1 "2018-09-23" "1.1.1c" "OpenSSL" +.TH ERRSTR 1 "2020-01-23" "1.1.1i" "OpenSSL" .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. .if n .ad l @@ -157,8 +157,8 @@ second colon. .SH "OPTIONS" .IX Header "OPTIONS" None. -.SH "EXAMPLE" -.IX Header "EXAMPLE" +.SH "EXAMPLES" +.IX Header "EXAMPLES" The error code: .PP .Vb 1 @@ -178,7 +178,7 @@ to produce the error message: .Ve .SH "COPYRIGHT" .IX Header "COPYRIGHT" -Copyright 2004\-2016 The OpenSSL Project Authors. All Rights Reserved. +Copyright 2004\-2019 The OpenSSL Project Authors. All Rights Reserved. .PP Licensed under the OpenSSL license (the \*(L"License\*(R"). You may not use this file except in compliance with the License. You can obtain a copy diff --git a/crypto/external/bsd/openssl/lib/libcrypto/man/openssl_gendsa.1 b/crypto/external/bsd/openssl/lib/libcrypto/man/openssl_gendsa.1 index 69399540340..b27305139e6 100644 --- a/crypto/external/bsd/openssl/lib/libcrypto/man/openssl_gendsa.1 +++ b/crypto/external/bsd/openssl/lib/libcrypto/man/openssl_gendsa.1 @@ -1,6 +1,6 @@ -.\" $NetBSD: openssl_gendsa.1,v 1.19 2019/06/09 18:44:34 christos Exp $ +.\" $NetBSD: openssl_gendsa.1,v 1.19.2.1 2021/03/28 18:21:51 martin Exp $ .\" -.\" Automatically generated by Pod::Man 4.10 (Pod::Simple 3.35) +.\" Automatically generated by Pod::Man 4.11 (Pod::Simple 3.35) .\" .\" Standard preamble: .\" ======================================================================== @@ -135,7 +135,7 @@ .\" ======================================================================== .\" .IX Title "GENDSA 1" -.TH GENDSA 1 "2018-09-23" "1.1.1c" "OpenSSL" +.TH GENDSA 1 "2018-09-23" "1.1.1i" "OpenSSL" .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. .if n .ad l diff --git a/crypto/external/bsd/openssl/lib/libcrypto/man/openssl_genpkey.1 b/crypto/external/bsd/openssl/lib/libcrypto/man/openssl_genpkey.1 index 6f43b31270d..633f32f4575 100644 --- a/crypto/external/bsd/openssl/lib/libcrypto/man/openssl_genpkey.1 +++ b/crypto/external/bsd/openssl/lib/libcrypto/man/openssl_genpkey.1 @@ -1,6 +1,6 @@ -.\" $NetBSD: openssl_genpkey.1,v 1.19 2019/06/09 18:44:34 christos Exp $ +.\" $NetBSD: openssl_genpkey.1,v 1.19.2.1 2021/03/28 18:21:51 martin Exp $ .\" -.\" Automatically generated by Pod::Man 4.10 (Pod::Simple 3.35) +.\" Automatically generated by Pod::Man 4.11 (Pod::Simple 3.35) .\" .\" Standard preamble: .\" ======================================================================== @@ -135,7 +135,7 @@ .\" ======================================================================== .\" .IX Title "GENPKEY 1" -.TH GENPKEY 1 "2019-06-09" "1.1.1c" "OpenSSL" +.TH GENPKEY 1 "2019-06-09" "1.1.1i" "OpenSSL" .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. .if n .ad l diff --git a/crypto/external/bsd/openssl/lib/libcrypto/man/openssl_genrsa.1 b/crypto/external/bsd/openssl/lib/libcrypto/man/openssl_genrsa.1 index bffacaa65aa..70cd7ab6c78 100644 --- a/crypto/external/bsd/openssl/lib/libcrypto/man/openssl_genrsa.1 +++ b/crypto/external/bsd/openssl/lib/libcrypto/man/openssl_genrsa.1 @@ -1,6 +1,6 @@ -.\" $NetBSD: openssl_genrsa.1,v 1.19 2019/06/09 18:44:34 christos Exp $ +.\" $NetBSD: openssl_genrsa.1,v 1.19.2.1 2021/03/28 18:21:52 martin Exp $ .\" -.\" Automatically generated by Pod::Man 4.10 (Pod::Simple 3.35) +.\" Automatically generated by Pod::Man 4.11 (Pod::Simple 3.35) .\" .\" Standard preamble: .\" ======================================================================== @@ -135,7 +135,7 @@ .\" ======================================================================== .\" .IX Title "GENRSA 1" -.TH GENRSA 1 "2018-09-23" "1.1.1c" "OpenSSL" +.TH GENRSA 1 "2018-09-23" "1.1.1i" "OpenSSL" .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. .if n .ad l diff --git a/crypto/external/bsd/openssl/lib/libcrypto/man/openssl_list.1 b/crypto/external/bsd/openssl/lib/libcrypto/man/openssl_list.1 index 9b957770de2..f5694f5638b 100644 --- a/crypto/external/bsd/openssl/lib/libcrypto/man/openssl_list.1 +++ b/crypto/external/bsd/openssl/lib/libcrypto/man/openssl_list.1 @@ -1,6 +1,6 @@ -.\" $NetBSD: openssl_list.1,v 1.3 2019/06/09 18:44:34 christos Exp $ +.\" $NetBSD: openssl_list.1,v 1.3.2.1 2021/03/28 18:21:52 martin Exp $ .\" -.\" Automatically generated by Pod::Man 4.10 (Pod::Simple 3.35) +.\" Automatically generated by Pod::Man 4.11 (Pod::Simple 3.35) .\" .\" Standard preamble: .\" ======================================================================== @@ -135,7 +135,7 @@ .\" ======================================================================== .\" .IX Title "LIST 1" -.TH LIST 1 "2018-09-23" "1.1.1c" "OpenSSL" +.TH LIST 1 "2018-09-23" "1.1.1i" "OpenSSL" .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. .if n .ad l diff --git a/crypto/external/bsd/openssl/lib/libcrypto/man/openssl_nseq.1 b/crypto/external/bsd/openssl/lib/libcrypto/man/openssl_nseq.1 index 218a8ad8fd8..24bb06c8d65 100644 --- a/crypto/external/bsd/openssl/lib/libcrypto/man/openssl_nseq.1 +++ b/crypto/external/bsd/openssl/lib/libcrypto/man/openssl_nseq.1 @@ -1,6 +1,6 @@ -.\" $NetBSD: openssl_nseq.1,v 1.19 2019/06/09 18:44:34 christos Exp $ +.\" $NetBSD: openssl_nseq.1,v 1.19.2.1 2021/03/28 18:21:52 martin Exp $ .\" -.\" Automatically generated by Pod::Man 4.10 (Pod::Simple 3.35) +.\" Automatically generated by Pod::Man 4.11 (Pod::Simple 3.35) .\" .\" Standard preamble: .\" ======================================================================== @@ -135,7 +135,7 @@ .\" ======================================================================== .\" .IX Title "NSEQ 1" -.TH NSEQ 1 "2018-09-23" "1.1.1c" "OpenSSL" +.TH NSEQ 1 "2018-09-23" "1.1.1i" "OpenSSL" .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. .if n .ad l diff --git a/crypto/external/bsd/openssl/lib/libcrypto/man/openssl_ocsp.1 b/crypto/external/bsd/openssl/lib/libcrypto/man/openssl_ocsp.1 index 6e3197338b6..d501e32db92 100644 --- a/crypto/external/bsd/openssl/lib/libcrypto/man/openssl_ocsp.1 +++ b/crypto/external/bsd/openssl/lib/libcrypto/man/openssl_ocsp.1 @@ -1,6 +1,6 @@ -.\" $NetBSD: openssl_ocsp.1,v 1.19 2019/06/09 18:44:34 christos Exp $ +.\" $NetBSD: openssl_ocsp.1,v 1.19.2.1 2021/03/28 18:21:52 martin Exp $ .\" -.\" Automatically generated by Pod::Man 4.10 (Pod::Simple 3.35) +.\" Automatically generated by Pod::Man 4.11 (Pod::Simple 3.35) .\" .\" Standard preamble: .\" ======================================================================== @@ -135,7 +135,7 @@ .\" ======================================================================== .\" .IX Title "OCSP 1" -.TH OCSP 1 "2019-03-12" "1.1.1c" "OpenSSL" +.TH OCSP 1 "2020-12-10" "1.1.1i" "OpenSSL" .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. .if n .ad l @@ -299,7 +299,7 @@ Specify the responder \s-1URL.\s0 Both \s-1HTTP\s0 and \s-1HTTPS\s0 (\s-1SSL/TLS .IP "\fB\-host hostname:port\fR, \fB\-path pathname\fR" 4 .IX Item "-host hostname:port, -path pathname" If the \fBhost\fR option is present then the \s-1OCSP\s0 request is sent to the host -\&\fBhostname\fR on port \fBport\fR. \fBpath\fR specifies the \s-1HTTP\s0 path name to use +\&\fBhostname\fR on port \fBport\fR. \fBpath\fR specifies the \s-1HTTP\s0 pathname to use or \*(L"/\*(R" by default. This is equivalent to specifying \fB\-url\fR with scheme http:// and the given hostname, port, and pathname. .IP "\fB\-header name=value\fR" 4 @@ -581,7 +581,7 @@ to a second file. The \-no_alt_chains option was added in OpenSSL 1.1.0. .SH "COPYRIGHT" .IX Header "COPYRIGHT" -Copyright 2001\-2018 The OpenSSL Project Authors. All Rights Reserved. +Copyright 2001\-2020 The OpenSSL Project Authors. All Rights Reserved. .PP Licensed under the OpenSSL license (the \*(L"License\*(R"). You may not use this file except in compliance with the License. You can obtain a copy diff --git a/crypto/external/bsd/openssl/lib/libcrypto/man/openssl_passwd.1 b/crypto/external/bsd/openssl/lib/libcrypto/man/openssl_passwd.1 index d3ffb5afb93..3e69db2c981 100644 --- a/crypto/external/bsd/openssl/lib/libcrypto/man/openssl_passwd.1 +++ b/crypto/external/bsd/openssl/lib/libcrypto/man/openssl_passwd.1 @@ -1,6 +1,6 @@ -.\" $NetBSD: openssl_passwd.1,v 1.19 2019/06/09 18:44:34 christos Exp $ +.\" $NetBSD: openssl_passwd.1,v 1.19.2.1 2021/03/28 18:21:52 martin Exp $ .\" -.\" Automatically generated by Pod::Man 4.10 (Pod::Simple 3.35) +.\" Automatically generated by Pod::Man 4.11 (Pod::Simple 3.35) .\" .\" Standard preamble: .\" ======================================================================== @@ -135,7 +135,7 @@ .\" ======================================================================== .\" .IX Title "PASSWD 1" -.TH PASSWD 1 "2018-09-23" "1.1.1c" "OpenSSL" +.TH PASSWD 1 "2018-09-23" "1.1.1i" "OpenSSL" .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. .if n .ad l diff --git a/crypto/external/bsd/openssl/lib/libcrypto/man/openssl_pkcs12.1 b/crypto/external/bsd/openssl/lib/libcrypto/man/openssl_pkcs12.1 index de959e62d50..ae0817795a4 100644 --- a/crypto/external/bsd/openssl/lib/libcrypto/man/openssl_pkcs12.1 +++ b/crypto/external/bsd/openssl/lib/libcrypto/man/openssl_pkcs12.1 @@ -1,6 +1,6 @@ -.\" $NetBSD: openssl_pkcs12.1,v 1.19 2019/06/09 18:44:34 christos Exp $ +.\" $NetBSD: openssl_pkcs12.1,v 1.19.2.1 2021/03/28 18:21:52 martin Exp $ .\" -.\" Automatically generated by Pod::Man 4.10 (Pod::Simple 3.35) +.\" Automatically generated by Pod::Man 4.11 (Pod::Simple 3.35) .\" .\" Standard preamble: .\" ======================================================================== @@ -135,7 +135,7 @@ .\" ======================================================================== .\" .IX Title "PKCS12 1" -.TH PKCS12 1 "2019-03-12" "1.1.1c" "OpenSSL" +.TH PKCS12 1 "2020-12-10" "1.1.1i" "OpenSSL" .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. .if n .ad l @@ -325,7 +325,8 @@ for this search. If the search fails it is considered a fatal error. .IX Item "-descert" Encrypt the certificate using triple \s-1DES,\s0 this may render the PKCS#12 file unreadable by some \*(L"export grade\*(R" software. By default the private -key is encrypted using triple \s-1DES\s0 and the certificate using 40 bit \s-1RC2.\s0 +key is encrypted using triple \s-1DES\s0 and the certificate using 40 bit \s-1RC2\s0 +unless \s-1RC2\s0 is disabled in which case triple \s-1DES\s0 is used. .IP "\fB\-keypbe alg\fR, \fB\-certpbe alg\fR" 4 .IX Item "-keypbe alg, -certpbe alg" These options allow the algorithm used to encrypt the private key and @@ -342,7 +343,7 @@ This option is only interpreted by \s-1MSIE\s0 and similar \s-1MS\s0 software. N encryption purposes but arbitrary length keys for signing. The \fB\-keysig\fR option marks the key for signing only. Signing only keys can be used for S/MIME signing, authenticode (ActiveX control signing) and \s-1SSL\s0 client -authentication, however due to a bug only \s-1MSIE 5.0\s0 and later support +authentication, however, due to a bug only \s-1MSIE 5.0\s0 and later support the use of signing only keys for \s-1SSL\s0 client authentication. .IP "\fB\-macalg digest\fR" 4 .IX Item "-macalg digest" @@ -475,7 +476,7 @@ Include some extra certificates: \&\fBpkcs8\fR\|(1) .SH "COPYRIGHT" .IX Header "COPYRIGHT" -Copyright 2000\-2019 The OpenSSL Project Authors. All Rights Reserved. +Copyright 2000\-2020 The OpenSSL Project Authors. All Rights Reserved. .PP Licensed under the OpenSSL license (the \*(L"License\*(R"). You may not use this file except in compliance with the License. You can obtain a copy diff --git a/crypto/external/bsd/openssl/lib/libcrypto/man/openssl_pkcs7.1 b/crypto/external/bsd/openssl/lib/libcrypto/man/openssl_pkcs7.1 index 30e87ab4ba0..0cd795449e5 100644 --- a/crypto/external/bsd/openssl/lib/libcrypto/man/openssl_pkcs7.1 +++ b/crypto/external/bsd/openssl/lib/libcrypto/man/openssl_pkcs7.1 @@ -1,6 +1,6 @@ -.\" $NetBSD: openssl_pkcs7.1,v 1.19 2019/06/09 18:44:34 christos Exp $ +.\" $NetBSD: openssl_pkcs7.1,v 1.19.2.1 2021/03/28 18:21:52 martin Exp $ .\" -.\" Automatically generated by Pod::Man 4.10 (Pod::Simple 3.35) +.\" Automatically generated by Pod::Man 4.11 (Pod::Simple 3.35) .\" .\" Standard preamble: .\" ======================================================================== @@ -135,7 +135,7 @@ .\" ======================================================================== .\" .IX Title "PKCS7 1" -.TH PKCS7 1 "2018-09-23" "1.1.1c" "OpenSSL" +.TH PKCS7 1 "2018-09-23" "1.1.1i" "OpenSSL" .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. .if n .ad l diff --git a/crypto/external/bsd/openssl/lib/libcrypto/man/openssl_pkcs8.1 b/crypto/external/bsd/openssl/lib/libcrypto/man/openssl_pkcs8.1 index f25832fb37f..2c493942292 100644 --- a/crypto/external/bsd/openssl/lib/libcrypto/man/openssl_pkcs8.1 +++ b/crypto/external/bsd/openssl/lib/libcrypto/man/openssl_pkcs8.1 @@ -1,6 +1,6 @@ -.\" $NetBSD: openssl_pkcs8.1,v 1.19 2019/06/09 18:44:34 christos Exp $ +.\" $NetBSD: openssl_pkcs8.1,v 1.19.2.1 2021/03/28 18:21:52 martin Exp $ .\" -.\" Automatically generated by Pod::Man 4.10 (Pod::Simple 3.35) +.\" Automatically generated by Pod::Man 4.11 (Pod::Simple 3.35) .\" .\" Standard preamble: .\" ======================================================================== @@ -135,7 +135,7 @@ .\" ======================================================================== .\" .IX Title "PKCS8 1" -.TH PKCS8 1 "2019-03-12" "1.1.1c" "OpenSSL" +.TH PKCS8 1 "2020-12-10" "1.1.1i" "OpenSSL" .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. .if n .ad l @@ -411,7 +411,7 @@ one million iterations of the password: Test vectors from this PKCS#5 v2.0 implementation were posted to the pkcs-tng mailing list using triple \s-1DES, DES\s0 and \s-1RC2\s0 with high iteration counts, several people confirmed that they could decrypt the private -keys produced and Therefore it can be assumed that the PKCS#5 v2.0 +keys produced and therefore, it can be assumed that the PKCS#5 v2.0 implementation is reasonably accurate at least as far as these algorithms are concerned. .PP @@ -431,7 +431,7 @@ in use and other details such as the iteration count. The \fB\-iter\fR option was added in OpenSSL 1.1.0. .SH "COPYRIGHT" .IX Header "COPYRIGHT" -Copyright 2000\-2018 The OpenSSL Project Authors. All Rights Reserved. +Copyright 2000\-2020 The OpenSSL Project Authors. All Rights Reserved. .PP Licensed under the OpenSSL license (the \*(L"License\*(R"). You may not use this file except in compliance with the License. You can obtain a copy diff --git a/crypto/external/bsd/openssl/lib/libcrypto/man/openssl_pkey.1 b/crypto/external/bsd/openssl/lib/libcrypto/man/openssl_pkey.1 index 4e8c9f407f6..0a748249af8 100644 --- a/crypto/external/bsd/openssl/lib/libcrypto/man/openssl_pkey.1 +++ b/crypto/external/bsd/openssl/lib/libcrypto/man/openssl_pkey.1 @@ -1,6 +1,6 @@ -.\" $NetBSD: openssl_pkey.1,v 1.19 2019/06/09 18:44:34 christos Exp $ +.\" $NetBSD: openssl_pkey.1,v 1.19.2.1 2021/03/28 18:21:52 martin Exp $ .\" -.\" Automatically generated by Pod::Man 4.10 (Pod::Simple 3.35) +.\" Automatically generated by Pod::Man 4.11 (Pod::Simple 3.35) .\" .\" Standard preamble: .\" ======================================================================== @@ -135,7 +135,7 @@ .\" ======================================================================== .\" .IX Title "PKEY 1" -.TH PKEY 1 "2018-09-23" "1.1.1c" "OpenSSL" +.TH PKEY 1 "2018-09-23" "1.1.1i" "OpenSSL" .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. .if n .ad l diff --git a/crypto/external/bsd/openssl/lib/libcrypto/man/openssl_pkeyparam.1 b/crypto/external/bsd/openssl/lib/libcrypto/man/openssl_pkeyparam.1 index 648878b029c..ffa3d5e01c7 100644 --- a/crypto/external/bsd/openssl/lib/libcrypto/man/openssl_pkeyparam.1 +++ b/crypto/external/bsd/openssl/lib/libcrypto/man/openssl_pkeyparam.1 @@ -1,6 +1,6 @@ -.\" $NetBSD: openssl_pkeyparam.1,v 1.19 2019/06/09 18:44:34 christos Exp $ +.\" $NetBSD: openssl_pkeyparam.1,v 1.19.2.1 2021/03/28 18:21:52 martin Exp $ .\" -.\" Automatically generated by Pod::Man 4.10 (Pod::Simple 3.35) +.\" Automatically generated by Pod::Man 4.11 (Pod::Simple 3.35) .\" .\" Standard preamble: .\" ======================================================================== @@ -135,7 +135,7 @@ .\" ======================================================================== .\" .IX Title "PKEYPARAM 1" -.TH PKEYPARAM 1 "2018-09-23" "1.1.1c" "OpenSSL" +.TH PKEYPARAM 1 "2020-01-23" "1.1.1i" "OpenSSL" .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. .if n .ad l @@ -187,8 +187,8 @@ for all available algorithms. .IP "\fB\-check\fR" 4 .IX Item "-check" This option checks the correctness of parameters. -.SH "EXAMPLE" -.IX Header "EXAMPLE" +.SH "EXAMPLES" +.IX Header "EXAMPLES" Print out text version of parameters: .PP .Vb 1 @@ -204,7 +204,7 @@ There are no \fB\-inform\fR or \fB\-outform\fR options for this command because \&\fBdsa\fR\|(1), \fBgenrsa\fR\|(1), \fBgendsa\fR\|(1) .SH "COPYRIGHT" .IX Header "COPYRIGHT" -Copyright 2006\-2018 The OpenSSL Project Authors. All Rights Reserved. +Copyright 2006\-2019 The OpenSSL Project Authors. All Rights Reserved. .PP Licensed under the OpenSSL license (the \*(L"License\*(R"). You may not use this file except in compliance with the License. You can obtain a copy diff --git a/crypto/external/bsd/openssl/lib/libcrypto/man/openssl_pkeyutl.1 b/crypto/external/bsd/openssl/lib/libcrypto/man/openssl_pkeyutl.1 index 114d7b363c1..819fe081e00 100644 --- a/crypto/external/bsd/openssl/lib/libcrypto/man/openssl_pkeyutl.1 +++ b/crypto/external/bsd/openssl/lib/libcrypto/man/openssl_pkeyutl.1 @@ -1,6 +1,6 @@ -.\" $NetBSD: openssl_pkeyutl.1,v 1.19 2019/06/09 18:44:34 christos Exp $ +.\" $NetBSD: openssl_pkeyutl.1,v 1.19.2.1 2021/03/28 18:21:52 martin Exp $ .\" -.\" Automatically generated by Pod::Man 4.10 (Pod::Simple 3.35) +.\" Automatically generated by Pod::Man 4.11 (Pod::Simple 3.35) .\" .\" Standard preamble: .\" ======================================================================== @@ -135,7 +135,7 @@ .\" ======================================================================== .\" .IX Title "PKEYUTL 1" -.TH PKEYUTL 1 "2019-06-09" "1.1.1c" "OpenSSL" +.TH PKEYUTL 1 "2020-12-10" "1.1.1i" "OpenSSL" .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. .if n .ad l @@ -177,7 +177,7 @@ libcrypto, -lcrypto [\fB\-engine_impl\fR] .SH "DESCRIPTION" .IX Header "DESCRIPTION" -The \fBpkeyutl\fR command can be used to perform low level public key operations +The \fBpkeyutl\fR command can be used to perform low-level public key operations using any supported algorithm. .SH "OPTIONS" .IX Header "OPTIONS" @@ -425,7 +425,7 @@ seed consisting of the single byte 0xFF: \&\fBEVP_PKEY_CTX_set_hkdf_md\fR\|(3), \fBEVP_PKEY_CTX_set_tls1_prf_md\fR\|(3) .SH "COPYRIGHT" .IX Header "COPYRIGHT" -Copyright 2006\-2019 The OpenSSL Project Authors. All Rights Reserved. +Copyright 2006\-2020 The OpenSSL Project Authors. All Rights Reserved. .PP Licensed under the OpenSSL license (the \*(L"License\*(R"). You may not use this file except in compliance with the License. You can obtain a copy diff --git a/crypto/external/bsd/openssl/lib/libcrypto/man/openssl_prime.1 b/crypto/external/bsd/openssl/lib/libcrypto/man/openssl_prime.1 index 5f79df543c7..c2811e56f0a 100644 --- a/crypto/external/bsd/openssl/lib/libcrypto/man/openssl_prime.1 +++ b/crypto/external/bsd/openssl/lib/libcrypto/man/openssl_prime.1 @@ -1,6 +1,6 @@ -.\" $NetBSD: openssl_prime.1,v 1.2 2019/06/09 18:44:34 christos Exp $ +.\" $NetBSD: openssl_prime.1,v 1.2.4.1 2021/03/28 18:21:52 martin Exp $ .\" -.\" Automatically generated by Pod::Man 4.10 (Pod::Simple 3.35) +.\" Automatically generated by Pod::Man 4.11 (Pod::Simple 3.35) .\" .\" Standard preamble: .\" ======================================================================== @@ -135,7 +135,7 @@ .\" ======================================================================== .\" .IX Title "PRIME 1" -.TH PRIME 1 "2018-09-23" "1.1.1c" "OpenSSL" +.TH PRIME 1 "2018-09-23" "1.1.1i" "OpenSSL" .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. .if n .ad l diff --git a/crypto/external/bsd/openssl/lib/libcrypto/man/openssl_rand.1 b/crypto/external/bsd/openssl/lib/libcrypto/man/openssl_rand.1 index ffc4ac114f6..676c40bed63 100644 --- a/crypto/external/bsd/openssl/lib/libcrypto/man/openssl_rand.1 +++ b/crypto/external/bsd/openssl/lib/libcrypto/man/openssl_rand.1 @@ -1,6 +1,6 @@ -.\" $NetBSD: openssl_rand.1,v 1.19 2019/06/09 18:44:34 christos Exp $ +.\" $NetBSD: openssl_rand.1,v 1.19.2.1 2021/03/28 18:21:52 martin Exp $ .\" -.\" Automatically generated by Pod::Man 4.10 (Pod::Simple 3.35) +.\" Automatically generated by Pod::Man 4.11 (Pod::Simple 3.35) .\" .\" Standard preamble: .\" ======================================================================== @@ -135,7 +135,7 @@ .\" ======================================================================== .\" .IX Title "RAND 1" -.TH RAND 1 "2018-09-23" "1.1.1c" "OpenSSL" +.TH RAND 1 "2020-03-22" "1.1.1i" "OpenSSL" .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. .if n .ad l @@ -157,12 +157,14 @@ libcrypto, -lcrypto \&\fInum\fR .SH "DESCRIPTION" .IX Header "DESCRIPTION" -The \fBrand\fR command outputs \fInum\fR pseudo-random bytes after seeding -the random number generator once. As in other \fBopenssl\fR command -line tools, \s-1PRNG\s0 seeding uses the file \fI\f(CI$HOME\fI/\fR\fB.rnd\fR or \fB.rnd\fR -in addition to the files given in the \fB\-rand\fR option. A new -\&\fI\f(CI$HOME\fI\fR/\fB.rnd\fR or \fB.rnd\fR file will be written back if enough -seeding was obtained from these sources. +This command generates \fInum\fR random bytes using a cryptographically +secure pseudo random number generator (\s-1CSPRNG\s0). +.PP +The random bytes are generated using the \fBRAND_bytes\fR\|(3) function, +which provides a security level of 256 bits, provided it managed to +seed itself successfully from a trusted operating system entropy source. +Otherwise, the command will fail with a nonzero error code. +For more details, see \fBRAND_bytes\fR\|(3), \s-1\fBRAND\s0\fR\|(7), and \s-1\fBRAND_DRBG\s0\fR\|(7). .SH "OPTIONS" .IX Header "OPTIONS" .IP "\fB\-help\fR" 4 @@ -178,6 +180,8 @@ generator. Multiple files can be specified separated by an OS-dependent character. The separator is \fB;\fR for MS-Windows, \fB,\fR for OpenVMS, and \fB:\fR for all others. +Explicitly specifying a seed file is in general not necessary, see the +\&\*(L"\s-1NOTES\*(R"\s0 section for more information. .IP "[\fB\-writerand file\fR]" 4 .IX Item "[-writerand file]" Writes random data to the specified \fIfile\fR upon exit. @@ -188,12 +192,26 @@ Perform base64 encoding on the output. .IP "\fB\-hex\fR" 4 .IX Item "-hex" Show the output as a hex string. +.SH "NOTES" +.IX Header "NOTES" +Prior to OpenSSL 1.1.1, it was common for applications to store information +about the state of the random-number generator in a file that was loaded +at startup and rewritten upon exit. On modern operating systems, this is +generally no longer necessary as OpenSSL will seed itself from a trusted +entropy source provided by the operating system. The \fB\-rand\fR and +\&\fB\-writerand\fR flags are still supported for special platforms or +circumstances that might require them. +.PP +It is generally an error to use the same seed file more than once and +every use of \fB\-rand\fR should be paired with \fB\-writerand\fR. .SH "SEE ALSO" .IX Header "SEE ALSO" -\&\fBRAND_bytes\fR\|(3) +\&\fBRAND_bytes\fR\|(3), +\&\s-1\fBRAND\s0\fR\|(7), +\&\s-1\fBRAND_DRBG\s0\fR\|(7) .SH "COPYRIGHT" .IX Header "COPYRIGHT" -Copyright 2000\-2016 The OpenSSL Project Authors. All Rights Reserved. +Copyright 2000\-2020 The OpenSSL Project Authors. All Rights Reserved. .PP Licensed under the OpenSSL license (the \*(L"License\*(R"). You may not use this file except in compliance with the License. You can obtain a copy diff --git a/crypto/external/bsd/openssl/lib/libcrypto/man/openssl_rehash.1 b/crypto/external/bsd/openssl/lib/libcrypto/man/openssl_rehash.1 index b96f7c3b474..ed97271d5c4 100644 --- a/crypto/external/bsd/openssl/lib/libcrypto/man/openssl_rehash.1 +++ b/crypto/external/bsd/openssl/lib/libcrypto/man/openssl_rehash.1 @@ -1,6 +1,6 @@ -.\" $NetBSD: openssl_rehash.1,v 1.3 2019/06/09 18:44:34 christos Exp $ +.\" $NetBSD: openssl_rehash.1,v 1.3.2.1 2021/03/28 18:21:52 martin Exp $ .\" -.\" Automatically generated by Pod::Man 4.10 (Pod::Simple 3.35) +.\" Automatically generated by Pod::Man 4.11 (Pod::Simple 3.35) .\" .\" Standard preamble: .\" ======================================================================== @@ -135,7 +135,7 @@ .\" ======================================================================== .\" .IX Title "REHASH 1" -.TH REHASH 1 "2018-09-23" "1.1.1c" "OpenSSL" +.TH REHASH 1 "2018-09-23" "1.1.1i" "OpenSSL" .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. .if n .ad l diff --git a/crypto/external/bsd/openssl/lib/libcrypto/man/openssl_req.1 b/crypto/external/bsd/openssl/lib/libcrypto/man/openssl_req.1 index bf110990ae6..19274b92c1d 100644 --- a/crypto/external/bsd/openssl/lib/libcrypto/man/openssl_req.1 +++ b/crypto/external/bsd/openssl/lib/libcrypto/man/openssl_req.1 @@ -1,6 +1,6 @@ -.\" $NetBSD: openssl_req.1,v 1.19 2019/06/09 18:44:34 christos Exp $ +.\" $NetBSD: openssl_req.1,v 1.19.2.1 2021/03/28 18:21:52 martin Exp $ .\" -.\" Automatically generated by Pod::Man 4.10 (Pod::Simple 3.35) +.\" Automatically generated by Pod::Man 4.11 (Pod::Simple 3.35) .\" .\" Standard preamble: .\" ======================================================================== @@ -135,7 +135,7 @@ .\" ======================================================================== .\" .IX Title "REQ 1" -.TH REQ 1 "2019-03-12" "1.1.1c" "OpenSSL" +.TH REQ 1 "2020-03-22" "1.1.1i" "OpenSSL" .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. .if n .ad l @@ -186,6 +186,7 @@ libcrypto, -lcrypto [\fB\-reqopt\fR] [\fB\-subject\fR] [\fB\-subj arg\fR] +[\fB\-sigopt nm:v\fR] [\fB\-batch\fR] [\fB\-verbose\fR] [\fB\-engine id\fR] @@ -214,6 +215,10 @@ as the \fB\-inform\fR option. This specifies the input filename to read a request from or standard input if this option is not specified. A request is only read if the creation options (\fB\-new\fR and \fB\-newkey\fR) are not specified. +.IP "\fB\-sigopt nm:v\fR" 4 +.IX Item "-sigopt nm:v" +Pass options to the signature algorithm during sign or verify operations. +Names and values of these options are algorithm-specific. .IP "\fB\-passin arg\fR" 4 .IX Item "-passin arg" The input file password source. For more information about the format of \fBarg\fR @@ -789,7 +794,7 @@ address in subjectAltName should be input by the user. \&\fBx509v3_config\fR\|(5) .SH "COPYRIGHT" .IX Header "COPYRIGHT" -Copyright 2000\-2018 The OpenSSL Project Authors. All Rights Reserved. +Copyright 2000\-2019 The OpenSSL Project Authors. All Rights Reserved. .PP Licensed under the OpenSSL license (the \*(L"License\*(R"). You may not use this file except in compliance with the License. You can obtain a copy diff --git a/crypto/external/bsd/openssl/lib/libcrypto/man/openssl_rsa.1 b/crypto/external/bsd/openssl/lib/libcrypto/man/openssl_rsa.1 index 05ad40c8d59..2a965faf288 100644 --- a/crypto/external/bsd/openssl/lib/libcrypto/man/openssl_rsa.1 +++ b/crypto/external/bsd/openssl/lib/libcrypto/man/openssl_rsa.1 @@ -1,6 +1,6 @@ -.\" $NetBSD: openssl_rsa.1,v 1.19 2019/06/09 18:44:34 christos Exp $ +.\" $NetBSD: openssl_rsa.1,v 1.19.2.1 2021/03/28 18:21:52 martin Exp $ .\" -.\" Automatically generated by Pod::Man 4.10 (Pod::Simple 3.35) +.\" Automatically generated by Pod::Man 4.11 (Pod::Simple 3.35) .\" .\" Standard preamble: .\" ======================================================================== @@ -135,7 +135,7 @@ .\" ======================================================================== .\" .IX Title "RSA 1" -.TH RSA 1 "2018-12-08" "1.1.1c" "OpenSSL" +.TH RSA 1 "2018-12-08" "1.1.1i" "OpenSSL" .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. .if n .ad l diff --git a/crypto/external/bsd/openssl/lib/libcrypto/man/openssl_rsautl.1 b/crypto/external/bsd/openssl/lib/libcrypto/man/openssl_rsautl.1 index 1ae52b2752b..60a6e4f582c 100644 --- a/crypto/external/bsd/openssl/lib/libcrypto/man/openssl_rsautl.1 +++ b/crypto/external/bsd/openssl/lib/libcrypto/man/openssl_rsautl.1 @@ -1,6 +1,6 @@ -.\" $NetBSD: openssl_rsautl.1,v 1.19 2019/06/09 18:44:34 christos Exp $ +.\" $NetBSD: openssl_rsautl.1,v 1.19.2.1 2021/03/28 18:21:52 martin Exp $ .\" -.\" Automatically generated by Pod::Man 4.10 (Pod::Simple 3.35) +.\" Automatically generated by Pod::Man 4.11 (Pod::Simple 3.35) .\" .\" Standard preamble: .\" ======================================================================== @@ -135,7 +135,7 @@ .\" ======================================================================== .\" .IX Title "RSAUTL 1" -.TH RSAUTL 1 "2018-09-23" "1.1.1c" "OpenSSL" +.TH RSAUTL 1 "2018-09-23" "1.1.1i" "OpenSSL" .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. .if n .ad l diff --git a/crypto/external/bsd/openssl/lib/libcrypto/man/openssl_s_client.1 b/crypto/external/bsd/openssl/lib/libcrypto/man/openssl_s_client.1 index 544cc554803..d3fed6184e4 100644 --- a/crypto/external/bsd/openssl/lib/libcrypto/man/openssl_s_client.1 +++ b/crypto/external/bsd/openssl/lib/libcrypto/man/openssl_s_client.1 @@ -1,6 +1,6 @@ -.\" $NetBSD: openssl_s_client.1,v 1.19 2019/06/09 18:44:34 christos Exp $ +.\" $NetBSD: openssl_s_client.1,v 1.19.2.1 2021/03/28 18:21:52 martin Exp $ .\" -.\" Automatically generated by Pod::Man 4.10 (Pod::Simple 3.35) +.\" Automatically generated by Pod::Man 4.11 (Pod::Simple 3.35) .\" .\" Standard preamble: .\" ======================================================================== @@ -135,7 +135,7 @@ .\" ======================================================================== .\" .IX Title "S_CLIENT 1" -.TH S_CLIENT 1 "2019-06-09" "1.1.1c" "OpenSSL" +.TH S_CLIENT 1 "2020-12-10" "1.1.1i" "OpenSSL" .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. .if n .ad l @@ -285,7 +285,7 @@ to a remote host using \s-1SSL/TLS.\s0 It is a \fIvery\fR useful diagnostic tool .SH "OPTIONS" .IX Header "OPTIONS" In addition to the options below the \fBs_client\fR utility also supports the -common and client only options documented in the +common and client only options documented in the \*(L"Supported Command Line Commands\*(R" section of the \fBSSL_CONF_cmd\fR\|(3) manual page. .IP "\fB\-help\fR" 4 @@ -440,7 +440,7 @@ at a positive depth or else \*(L"matched \s-1EE\s0 certificate\*(R" at depth 0. .IX Item "-dane_tlsa_rrdata rrdata" Use one or more times to specify the \s-1RRDATA\s0 fields of the \s-1DANE TLSA\s0 RRset associated with the target service. The \fBrrdata\fR value is -specied in \*(L"presentation form\*(R", that is four whitespace separated +specified in \*(L"presentation form\*(R", that is four whitespace separated fields that specify the usage, selector, matching type and associated data, with the last of these encoded in hexadecimal. Optional whitespace is ignored in the associated data field. For example: @@ -517,10 +517,10 @@ with \fBenable-ssl-trace\fR for this option to work. File to send output of \fB\-msg\fR or \fB\-trace\fR to, default standard output. .IP "\fB\-nbio_test\fR" 4 .IX Item "-nbio_test" -Tests non-blocking I/O +Tests nonblocking I/O .IP "\fB\-nbio\fR" 4 .IX Item "-nbio" -Turns on non-blocking I/O +Turns on nonblocking I/O .IP "\fB\-crlf\fR" 4 .IX Item "-crlf" This option translated a line feed from the terminal into \s-1CR+LF\s0 as required @@ -817,14 +817,14 @@ is that a web client complains it has no certificates or gives an empty list to choose from. This is normally because the server is not sending the clients certificate authority in its \*(L"acceptable \s-1CA\s0 list\*(R" when it requests a certificate. By using \fBs_client\fR the \s-1CA\s0 list can be viewed -and checked. However some servers only request client authentication +and checked. However, some servers only request client authentication after a specific \s-1URL\s0 is requested. To obtain the list in this case it is necessary to use the \fB\-prexit\fR option and send an \s-1HTTP\s0 request for an appropriate page. .PP If a certificate is specified on the command line using the \fB\-cert\fR option it will not be used unless the server specifically requests -a client certificate. Therefor merely including a client certificate +a client certificate. Therefore, merely including a client certificate on the command line is no guarantee that the certificate works. .PP If there are problems verifying a server certificate then the @@ -860,7 +860,7 @@ The \fB\-no_alt_chains\fR option was added in OpenSSL 1.1.0. The \fB\-name\fR option was added in OpenSSL 1.1.1. .SH "COPYRIGHT" .IX Header "COPYRIGHT" -Copyright 2000\-2019 The OpenSSL Project Authors. All Rights Reserved. +Copyright 2000\-2020 The OpenSSL Project Authors. All Rights Reserved. .PP Licensed under the OpenSSL license (the \*(L"License\*(R"). You may not use this file except in compliance with the License. You can obtain a copy diff --git a/crypto/external/bsd/openssl/lib/libcrypto/man/openssl_s_server.1 b/crypto/external/bsd/openssl/lib/libcrypto/man/openssl_s_server.1 index 72dff03d43b..4da17cc7957 100644 --- a/crypto/external/bsd/openssl/lib/libcrypto/man/openssl_s_server.1 +++ b/crypto/external/bsd/openssl/lib/libcrypto/man/openssl_s_server.1 @@ -1,6 +1,6 @@ -.\" $NetBSD: openssl_s_server.1,v 1.19 2019/06/09 18:44:34 christos Exp $ +.\" $NetBSD: openssl_s_server.1,v 1.19.2.1 2021/03/28 18:21:52 martin Exp $ .\" -.\" Automatically generated by Pod::Man 4.10 (Pod::Simple 3.35) +.\" Automatically generated by Pod::Man 4.11 (Pod::Simple 3.35) .\" .\" Standard preamble: .\" ======================================================================== @@ -135,7 +135,7 @@ .\" ======================================================================== .\" .IX Title "S_SERVER 1" -.TH S_SERVER 1 "2019-06-09" "1.1.1c" "OpenSSL" +.TH S_SERVER 1 "2020-12-10" "1.1.1i" "OpenSSL" .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. .if n .ad l @@ -331,7 +331,7 @@ for connections on a given port using \s-1SSL/TLS.\s0 .SH "OPTIONS" .IX Header "OPTIONS" In addition to the options below the \fBs_server\fR utility also supports the -common and server only options documented in the +common and server only options documented in the \*(L"Supported Command Line Commands\*(R" section of the \fBSSL_CONF_cmd\fR\|(3) manual page. .IP "\fB\-help\fR" 4 @@ -524,9 +524,9 @@ used in conjunction with \fB\-early_data\fR. .IP "\fB\-id_prefix val\fR" 4 .IX Item "-id_prefix val" Generate \s-1SSL/TLS\s0 session IDs prefixed by \fBval\fR. This is mostly useful -for testing any \s-1SSL/TLS\s0 code (eg. proxies) that wish to deal with multiple +for testing any \s-1SSL/TLS\s0 code (e.g. proxies) that wish to deal with multiple servers, when each of which might be generating a unique range of session -IDs (eg. with a certain prefix). +IDs (e.g. with a certain prefix). .IP "\fB\-rand file...\fR" 4 .IX Item "-rand file..." A file or files containing random data used to seed the random number @@ -865,7 +865,7 @@ The \&\-allow\-no\-dhe\-kex and \-prioritize_chacha options were added in OpenSSL 1.1.1. .SH "COPYRIGHT" .IX Header "COPYRIGHT" -Copyright 2000\-2019 The OpenSSL Project Authors. All Rights Reserved. +Copyright 2000\-2020 The OpenSSL Project Authors. All Rights Reserved. .PP Licensed under the OpenSSL license (the \*(L"License\*(R"). You may not use this file except in compliance with the License. You can obtain a copy diff --git a/crypto/external/bsd/openssl/lib/libcrypto/man/openssl_s_time.1 b/crypto/external/bsd/openssl/lib/libcrypto/man/openssl_s_time.1 index 2ba4dea5d56..8d736e35618 100644 --- a/crypto/external/bsd/openssl/lib/libcrypto/man/openssl_s_time.1 +++ b/crypto/external/bsd/openssl/lib/libcrypto/man/openssl_s_time.1 @@ -1,6 +1,6 @@ -.\" $NetBSD: openssl_s_time.1,v 1.19 2019/06/09 18:44:34 christos Exp $ +.\" $NetBSD: openssl_s_time.1,v 1.19.2.1 2021/03/28 18:21:52 martin Exp $ .\" -.\" Automatically generated by Pod::Man 4.10 (Pod::Simple 3.35) +.\" Automatically generated by Pod::Man 4.11 (Pod::Simple 3.35) .\" .\" Standard preamble: .\" ======================================================================== @@ -135,7 +135,7 @@ .\" ======================================================================== .\" .IX Title "S_TIME 1" -.TH S_TIME 1 "2019-06-09" "1.1.1c" "OpenSSL" +.TH S_TIME 1 "2020-12-10" "1.1.1i" "OpenSSL" .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. .if n .ad l @@ -154,7 +154,7 @@ libcrypto, -lcrypto [\fB\-cert filename\fR] [\fB\-key filename\fR] [\fB\-CApath directory\fR] -[\fB\-cafile filename\fR] +[\fB\-CAfile filename\fR] [\fB\-no\-CAfile\fR] [\fB\-no\-CApath\fR] [\fB\-reuse\fR] @@ -295,14 +295,14 @@ is that a web client complains it has no certificates or gives an empty list to choose from. This is normally because the server is not sending the clients certificate authority in its \*(L"acceptable \s-1CA\s0 list\*(R" when it requests a certificate. By using \fBs_client\fR\|(1) the \s-1CA\s0 list can be -viewed and checked. However some servers only request client authentication +viewed and checked. However, some servers only request client authentication after a specific \s-1URL\s0 is requested. To obtain the list in this case it is necessary to use the \fB\-prexit\fR option of \fBs_client\fR\|(1) and send an \s-1HTTP\s0 request for an appropriate page. .PP If a certificate is specified on the command line using the \fB\-cert\fR option it will not be used unless the server specifically requests -a client certificate. Therefor merely including a client certificate +a client certificate. Therefore, merely including a client certificate on the command line is no guarantee that the certificate works. .SH "BUGS" .IX Header "BUGS" @@ -317,7 +317,7 @@ fails. \&\fBs_client\fR\|(1), \fBs_server\fR\|(1), \fBciphers\fR\|(1) .SH "COPYRIGHT" .IX Header "COPYRIGHT" -Copyright 2004\-2019 The OpenSSL Project Authors. All Rights Reserved. +Copyright 2004\-2020 The OpenSSL Project Authors. All Rights Reserved. .PP Licensed under the OpenSSL license (the \*(L"License\*(R"). You may not use this file except in compliance with the License. You can obtain a copy diff --git a/crypto/external/bsd/openssl/lib/libcrypto/man/openssl_sess_id.1 b/crypto/external/bsd/openssl/lib/libcrypto/man/openssl_sess_id.1 index 3d7062c1fd0..948c1a66468 100644 --- a/crypto/external/bsd/openssl/lib/libcrypto/man/openssl_sess_id.1 +++ b/crypto/external/bsd/openssl/lib/libcrypto/man/openssl_sess_id.1 @@ -1,6 +1,6 @@ -.\" $NetBSD: openssl_sess_id.1,v 1.19 2019/06/09 18:44:34 christos Exp $ +.\" $NetBSD: openssl_sess_id.1,v 1.19.2.1 2021/03/28 18:21:52 martin Exp $ .\" -.\" Automatically generated by Pod::Man 4.10 (Pod::Simple 3.35) +.\" Automatically generated by Pod::Man 4.11 (Pod::Simple 3.35) .\" .\" Standard preamble: .\" ======================================================================== @@ -135,7 +135,7 @@ .\" ======================================================================== .\" .IX Title "SESS_ID 1" -.TH SESS_ID 1 "2018-09-23" "1.1.1c" "OpenSSL" +.TH SESS_ID 1 "2020-12-10" "1.1.1i" "OpenSSL" .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. .if n .ad l @@ -220,7 +220,7 @@ Typical output: \& Verify return code 0 (ok) .Ve .PP -Theses are described below in more detail. +These are described below in more detail. .IP "\fBProtocol\fR" 4 .IX Item "Protocol" This is the protocol in use TLSv1.3, TLSv1.2, TLSv1.1, TLSv1 or SSLv3. @@ -258,7 +258,7 @@ The \s-1PEM\s0 encoded session format uses the header and footer lines: .PP Since the \s-1SSL\s0 session output contains the master key it is possible to read the contents of an encrypted session using this -information. Therefore appropriate security precautions should be taken if +information. Therefore, appropriate security precautions should be taken if the information is being output by a \*(L"real\*(R" application. This is however strongly discouraged and should only be used for debugging purposes. .SH "BUGS" @@ -269,7 +269,7 @@ The cipher and start time should be printed out in human readable form. \&\fBciphers\fR\|(1), \fBs_server\fR\|(1) .SH "COPYRIGHT" .IX Header "COPYRIGHT" -Copyright 2000\-2018 The OpenSSL Project Authors. All Rights Reserved. +Copyright 2000\-2020 The OpenSSL Project Authors. All Rights Reserved. .PP Licensed under the OpenSSL license (the \*(L"License\*(R"). You may not use this file except in compliance with the License. You can obtain a copy diff --git a/crypto/external/bsd/openssl/lib/libcrypto/man/openssl_smime.1 b/crypto/external/bsd/openssl/lib/libcrypto/man/openssl_smime.1 index 9c58ce4276e..6cfe3d759a8 100644 --- a/crypto/external/bsd/openssl/lib/libcrypto/man/openssl_smime.1 +++ b/crypto/external/bsd/openssl/lib/libcrypto/man/openssl_smime.1 @@ -1,6 +1,6 @@ -.\" $NetBSD: openssl_smime.1,v 1.19 2019/06/09 18:44:34 christos Exp $ +.\" $NetBSD: openssl_smime.1,v 1.19.2.1 2021/03/28 18:21:52 martin Exp $ .\" -.\" Automatically generated by Pod::Man 4.10 (Pod::Simple 3.35) +.\" Automatically generated by Pod::Man 4.11 (Pod::Simple 3.35) .\" .\" Standard preamble: .\" ======================================================================== @@ -135,7 +135,7 @@ .\" ======================================================================== .\" .IX Title "SMIME 1" -.TH SMIME 1 "2019-03-12" "1.1.1c" "OpenSSL" +.TH SMIME 1 "2019-03-12" "1.1.1i" "OpenSSL" .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. .if n .ad l diff --git a/crypto/external/bsd/openssl/lib/libcrypto/man/openssl_speed.1 b/crypto/external/bsd/openssl/lib/libcrypto/man/openssl_speed.1 index 741a3e6c90e..df1a24d917b 100644 --- a/crypto/external/bsd/openssl/lib/libcrypto/man/openssl_speed.1 +++ b/crypto/external/bsd/openssl/lib/libcrypto/man/openssl_speed.1 @@ -1,6 +1,6 @@ -.\" $NetBSD: openssl_speed.1,v 1.19 2019/06/09 18:44:34 christos Exp $ +.\" $NetBSD: openssl_speed.1,v 1.19.2.1 2021/03/28 18:21:52 martin Exp $ .\" -.\" Automatically generated by Pod::Man 4.10 (Pod::Simple 3.35) +.\" Automatically generated by Pod::Man 4.11 (Pod::Simple 3.35) .\" .\" Standard preamble: .\" ======================================================================== @@ -135,7 +135,7 @@ .\" ======================================================================== .\" .IX Title "SPEED 1" -.TH SPEED 1 "2018-09-23" "1.1.1c" "OpenSSL" +.TH SPEED 1 "2018-09-23" "1.1.1i" "OpenSSL" .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. .if n .ad l diff --git a/crypto/external/bsd/openssl/lib/libcrypto/man/openssl_spkac.1 b/crypto/external/bsd/openssl/lib/libcrypto/man/openssl_spkac.1 index 64226d6a9ae..e87006b5496 100644 --- a/crypto/external/bsd/openssl/lib/libcrypto/man/openssl_spkac.1 +++ b/crypto/external/bsd/openssl/lib/libcrypto/man/openssl_spkac.1 @@ -1,6 +1,6 @@ -.\" $NetBSD: openssl_spkac.1,v 1.19 2019/06/09 18:44:34 christos Exp $ +.\" $NetBSD: openssl_spkac.1,v 1.19.2.1 2021/03/28 18:21:52 martin Exp $ .\" -.\" Automatically generated by Pod::Man 4.10 (Pod::Simple 3.35) +.\" Automatically generated by Pod::Man 4.11 (Pod::Simple 3.35) .\" .\" Standard preamble: .\" ======================================================================== @@ -135,7 +135,7 @@ .\" ======================================================================== .\" .IX Title "SPKAC 1" -.TH SPKAC 1 "2018-09-23" "1.1.1c" "OpenSSL" +.TH SPKAC 1 "2018-09-23" "1.1.1i" "OpenSSL" .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. .if n .ad l diff --git a/crypto/external/bsd/openssl/lib/libcrypto/man/openssl_srp.1 b/crypto/external/bsd/openssl/lib/libcrypto/man/openssl_srp.1 index edb4e01e1ad..335dee72b40 100644 --- a/crypto/external/bsd/openssl/lib/libcrypto/man/openssl_srp.1 +++ b/crypto/external/bsd/openssl/lib/libcrypto/man/openssl_srp.1 @@ -1,6 +1,6 @@ -.\" $NetBSD: openssl_srp.1,v 1.2 2019/06/09 18:44:34 christos Exp $ +.\" $NetBSD: openssl_srp.1,v 1.2.4.1 2021/03/28 18:21:52 martin Exp $ .\" -.\" Automatically generated by Pod::Man 4.10 (Pod::Simple 3.35) +.\" Automatically generated by Pod::Man 4.11 (Pod::Simple 3.35) .\" .\" Standard preamble: .\" ======================================================================== @@ -135,7 +135,7 @@ .\" ======================================================================== .\" .IX Title "SRP 1" -.TH SRP 1 "2018-09-23" "1.1.1c" "OpenSSL" +.TH SRP 1 "2018-09-23" "1.1.1i" "OpenSSL" .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. .if n .ad l diff --git a/crypto/external/bsd/openssl/lib/libcrypto/man/openssl_storeutl.1 b/crypto/external/bsd/openssl/lib/libcrypto/man/openssl_storeutl.1 index b9240b8120c..d36b815e217 100644 --- a/crypto/external/bsd/openssl/lib/libcrypto/man/openssl_storeutl.1 +++ b/crypto/external/bsd/openssl/lib/libcrypto/man/openssl_storeutl.1 @@ -1,6 +1,6 @@ -.\" $NetBSD: openssl_storeutl.1,v 1.2 2019/06/09 18:44:34 christos Exp $ +.\" $NetBSD: openssl_storeutl.1,v 1.2.4.1 2021/03/28 18:21:52 martin Exp $ .\" -.\" Automatically generated by Pod::Man 4.10 (Pod::Simple 3.35) +.\" Automatically generated by Pod::Man 4.11 (Pod::Simple 3.35) .\" .\" Standard preamble: .\" ======================================================================== @@ -135,7 +135,7 @@ .\" ======================================================================== .\" .IX Title "STOREUTL 1" -.TH STOREUTL 1 "2019-03-12" "1.1.1c" "OpenSSL" +.TH STOREUTL 1 "2019-03-12" "1.1.1i" "OpenSSL" .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. .if n .ad l diff --git a/crypto/external/bsd/openssl/lib/libcrypto/man/openssl_ts.1 b/crypto/external/bsd/openssl/lib/libcrypto/man/openssl_ts.1 index 115c1d0bf07..0f599c3aa5f 100644 --- a/crypto/external/bsd/openssl/lib/libcrypto/man/openssl_ts.1 +++ b/crypto/external/bsd/openssl/lib/libcrypto/man/openssl_ts.1 @@ -1,6 +1,6 @@ -.\" $NetBSD: openssl_ts.1,v 1.19 2019/06/09 18:44:34 christos Exp $ +.\" $NetBSD: openssl_ts.1,v 1.19.2.1 2021/03/28 18:21:52 martin Exp $ .\" -.\" Automatically generated by Pod::Man 4.10 (Pod::Simple 3.35) +.\" Automatically generated by Pod::Man 4.11 (Pod::Simple 3.35) .\" .\" Standard preamble: .\" ======================================================================== @@ -135,7 +135,7 @@ .\" ======================================================================== .\" .IX Title "TS 1" -.TH TS 1 "2019-06-09" "1.1.1c" "OpenSSL" +.TH TS 1 "2020-12-10" "1.1.1i" "OpenSSL" .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. .if n .ad l @@ -234,19 +234,19 @@ The \s-1TSA\s0 client computes a one-way hash value for a data file and sends the hash to the \s-1TSA.\s0 .IP "2." 4 The \s-1TSA\s0 attaches the current date and time to the received hash value, -signs them and sends the time stamp token back to the client. By +signs them and sends the timestamp token back to the client. By creating this token the \s-1TSA\s0 certifies the existence of the original data file at the time of response generation. .IP "3." 4 -The \s-1TSA\s0 client receives the time stamp token and verifies the +The \s-1TSA\s0 client receives the timestamp token and verifies the signature on it. It also checks if the token contains the same hash value that it had sent to the \s-1TSA.\s0 .PP -There is one \s-1DER\s0 encoded protocol data unit defined for transporting a time -stamp request to the \s-1TSA\s0 and one for sending the time stamp response +There is one \s-1DER\s0 encoded protocol data unit defined for transporting +a timestamp request to the \s-1TSA\s0 and one for sending the timestamp response back to the client. The \fBts\fR command has three main functions: -creating a time stamp request based on a data file, -creating a time stamp response based on a request, verifying if a +creating a timestamp request based on a data file, +creating a timestamp response based on a request, verifying if a response corresponds to a particular request or a data file. .PP There is no support for sending the requests/responses automatically @@ -256,7 +256,7 @@ requests either by ftp or e\-mail. .IX Header "OPTIONS" .SS "Time Stamp Request generation" .IX Subsection "Time Stamp Request generation" -The \fB\-query\fR switch can be used for creating and printing a time stamp +The \fB\-query\fR switch can be used for creating and printing a timestamp request with the following options: .IP "\fB\-rand file...\fR" 4 .IX Item "-rand file..." @@ -276,7 +276,7 @@ Optional; for a description of the default value, see \*(L"\s-1COMMAND SUMMARY\*(R"\s0 in \fBopenssl\fR\|(1). .IP "\fB\-data\fR file_to_hash" 4 .IX Item "-data file_to_hash" -The data file for which the time stamp request needs to be +The data file for which the timestamp request needs to be created. stdin is the default if neither the \fB\-data\fR nor the \fB\-digest\fR parameter is specified. (Optional) .IP "\fB\-digest\fR digest_bytes" 4 @@ -294,7 +294,7 @@ The default is \s-1SHA\-1.\s0 (Optional) .IP "\fB\-tspolicy\fR object_id" 4 .IX Item "-tspolicy object_id" The policy that the client expects the \s-1TSA\s0 to use for creating the -time stamp token. Either the dotted \s-1OID\s0 notation or \s-1OID\s0 names defined +timestamp token. Either the dotted \s-1OID\s0 notation or \s-1OID\s0 names defined in the config file can be used. If no policy is requested the \s-1TSA\s0 will use its own default policy. (Optional) .IP "\fB\-no_nonce\fR" 4 @@ -309,7 +309,7 @@ The \s-1TSA\s0 is expected to include its signing certificate in the response. (Optional) .IP "\fB\-in\fR request.tsq" 4 .IX Item "-in request.tsq" -This option specifies a previously created time stamp request in \s-1DER\s0 +This option specifies a previously created timestamp request in \s-1DER\s0 format that will be printed into the output file. Useful when you need to examine the content of a request in human-readable format. (Optional) @@ -323,13 +323,13 @@ If this option is specified the output is human-readable text format instead of \s-1DER.\s0 (Optional) .SS "Time Stamp Response generation" .IX Subsection "Time Stamp Response generation" -A time stamp response (TimeStampResp) consists of a response status -and the time stamp token itself (ContentInfo), if the token generation was -successful. The \fB\-reply\fR command is for creating a time stamp -response or time stamp token based on a request and printing the +A timestamp response (TimeStampResp) consists of a response status +and the timestamp token itself (ContentInfo), if the token generation was +successful. The \fB\-reply\fR command is for creating a timestamp +response or timestamp token based on a request and printing the response/token in human-readable format. If \fB\-token_out\fR is not -specified the output is always a time stamp response (TimeStampResp), -otherwise it is a time stamp token (ContentInfo). +specified the output is always a timestamp response (TimeStampResp), +otherwise it is a timestamp token (ContentInfo). .IP "\fB\-config\fR configfile" 4 .IX Item "-config configfile" The configuration file to use. @@ -343,7 +343,7 @@ response generation. If not specified the default \s-1TSA\s0 section is used, see \fB\s-1CONFIGURATION FILE OPTIONS\s0\fR for details. (Optional) .IP "\fB\-queryfile\fR request.tsq" 4 .IX Item "-queryfile request.tsq" -The name of the file containing a \s-1DER\s0 encoded time stamp request. (Optional) +The name of the file containing a \s-1DER\s0 encoded timestamp request. (Optional) .IP "\fB\-passin\fR password_src" 4 .IX Item "-passin password_src" Specifies the password source for the private key of the \s-1TSA.\s0 See @@ -381,18 +381,18 @@ either in dotted notation or with its name. Overrides the \&\fBdefault_policy\fR config file option. (Optional) .IP "\fB\-in\fR response.tsr" 4 .IX Item "-in response.tsr" -Specifies a previously created time stamp response or time stamp token +Specifies a previously created timestamp response or timestamp token (if \fB\-token_in\fR is also specified) in \s-1DER\s0 format that will be written to the output file. This option does not require a request, it is useful e.g. when you need to examine the content of a response or -token or you want to extract the time stamp token from a response. If -the input is a token and the output is a time stamp response a default +token or you want to extract the timestamp token from a response. If +the input is a token and the output is a timestamp response a default \&'granted' status info is added to the token. (Optional) .IP "\fB\-token_in\fR" 4 .IX Item "-token_in" This flag can be used together with the \fB\-in\fR option and indicates -that the input is a \s-1DER\s0 encoded time stamp token (ContentInfo) instead -of a time stamp response (TimeStampResp). (Optional) +that the input is a \s-1DER\s0 encoded timestamp token (ContentInfo) instead +of a timestamp response (TimeStampResp). (Optional) .IP "\fB\-out\fR response.tsr" 4 .IX Item "-out response.tsr" The response is written to this file. The format and content of the @@ -400,7 +400,7 @@ file depends on other options (see \fB\-text\fR, \fB\-token_out\fR). The default stdout. (Optional) .IP "\fB\-token_out\fR" 4 .IX Item "-token_out" -The output is a time stamp token (ContentInfo) instead of time stamp +The output is a timestamp token (ContentInfo) instead of timestamp response (TimeStampResp). (Optional) .IP "\fB\-text\fR" 4 .IX Item "-text" @@ -414,8 +414,8 @@ thus initialising it if needed. The engine will then be set as the default for all available algorithms. Default is builtin. (Optional) .SS "Time Stamp Response verification" .IX Subsection "Time Stamp Response verification" -The \fB\-verify\fR command is for verifying if a time stamp response or time -stamp token is valid and matches a particular time stamp request or +The \fB\-verify\fR command is for verifying if a timestamp response or +timestamp token is valid and matches a particular timestamp request or data file. The \fB\-verify\fR command does not use the configuration file. .IP "\fB\-data\fR file_to_hash" 4 .IX Item "-data file_to_hash" @@ -431,16 +431,16 @@ specified in the token. The \fB\-data\fR and \fB\-queryfile\fR options must not specified with this one. (Optional) .IP "\fB\-queryfile\fR request.tsq" 4 .IX Item "-queryfile request.tsq" -The original time stamp request in \s-1DER\s0 format. The \fB\-data\fR and \fB\-digest\fR +The original timestamp request in \s-1DER\s0 format. The \fB\-data\fR and \fB\-digest\fR options must not be specified with this one. (Optional) .IP "\fB\-in\fR response.tsr" 4 .IX Item "-in response.tsr" -The time stamp response that needs to be verified in \s-1DER\s0 format. (Mandatory) +The timestamp response that needs to be verified in \s-1DER\s0 format. (Mandatory) .IP "\fB\-token_in\fR" 4 .IX Item "-token_in" This flag can be used together with the \fB\-in\fR option and indicates -that the input is a \s-1DER\s0 encoded time stamp token (ContentInfo) instead -of a time stamp response (TimeStampResp). (Optional) +that the input is a \s-1DER\s0 encoded timestamp token (ContentInfo) instead +of a timestamp response (TimeStampResp). (Optional) .IP "\fB\-CApath\fR trusted_cert_path" 4 .IX Item "-CApath trusted_cert_path" The name of the directory containing the trusted \s-1CA\s0 certificates of the @@ -499,7 +499,7 @@ See \fBca\fR\|(1) for description. (Optional) .IP "\fBserial\fR" 4 .IX Item "serial" The name of the file containing the hexadecimal serial number of the -last time stamp response created. This number is incremented by 1 for +last timestamp response created. This number is incremented by 1 for each response. If the file does not exist at the time of response generation a new file is created with serial number 1. (Mandatory) .IP "\fBcrypto_device\fR" 4 @@ -546,7 +546,7 @@ the components is missing zero is assumed for that field. (Optional) .IP "\fBclock_precision_digits\fR" 4 .IX Item "clock_precision_digits" Specifies the maximum number of digits, which represent the fraction of -seconds, that need to be included in the time field. The trailing zeroes +seconds, that need to be included in the time field. The trailing zeros must be removed from the time, so there might actually be fewer digits, or no fraction of seconds at all. Supported only on \s-1UNIX\s0 platforms. The maximum value is 6, default is 0. @@ -581,7 +581,7 @@ configuration file, e.g. the example configuration file openssl/apps/openssl.cnf will do. .SS "Time Stamp Request" .IX Subsection "Time Stamp Request" -To create a time stamp request for design1.txt with \s-1SHA\-1\s0 +To create a timestamp request for design1.txt with \s-1SHA\-1\s0 without nonce and policy and no certificate is required in the response: .PP .Vb 2 @@ -589,7 +589,7 @@ without nonce and policy and no certificate is required in the response: \& \-out design1.tsq .Ve .PP -To create a similar time stamp request with specifying the message imprint +To create a similar timestamp request with specifying the message imprint explicitly: .PP .Vb 2 @@ -603,7 +603,7 @@ To print the content of the previous request in human readable format: \& openssl ts \-query \-in design1.tsq \-text .Ve .PP -To create a time stamp request which includes the \s-1MD\-5\s0 digest +To create a timestamp request which includes the \s-1MD\-5\s0 digest of design2.txt, requests the signer certificate and nonce, specifies a policy id (assuming the tsa_policy1 name is defined in the \&\s-1OID\s0 section of the config file): @@ -628,7 +628,7 @@ below assume that cacert.pem contains the certificate of the \s-1CA,\s0 tsacert.pem is the signing certificate issued by cacert.pem and tsakey.pem is the private key of the \s-1TSA.\s0 .PP -To create a time stamp response for a request: +To create a timestamp response for a request: .PP .Vb 2 \& openssl ts \-reply \-queryfile design1.tsq \-inkey tsakey.pem \e @@ -641,31 +641,31 @@ If you want to use the settings in the config file you could just write: \& openssl ts \-reply \-queryfile design1.tsq \-out design1.tsr .Ve .PP -To print a time stamp reply to stdout in human readable format: +To print a timestamp reply to stdout in human readable format: .PP .Vb 1 \& openssl ts \-reply \-in design1.tsr \-text .Ve .PP -To create a time stamp token instead of time stamp response: +To create a timestamp token instead of timestamp response: .PP .Vb 1 \& openssl ts \-reply \-queryfile design1.tsq \-out design1_token.der \-token_out .Ve .PP -To print a time stamp token to stdout in human readable format: +To print a timestamp token to stdout in human readable format: .PP .Vb 1 \& openssl ts \-reply \-in design1_token.der \-token_in \-text \-token_out .Ve .PP -To extract the time stamp token from a response: +To extract the timestamp token from a response: .PP .Vb 1 \& openssl ts \-reply \-in design1.tsr \-out design1_token.der \-token_out .Ve .PP -To add 'granted' status info to a time stamp token thereby creating a +To add 'granted' status info to a timestamp token thereby creating a valid response: .PP .Vb 1 @@ -673,25 +673,25 @@ valid response: .Ve .SS "Time Stamp Verification" .IX Subsection "Time Stamp Verification" -To verify a time stamp reply against a request: +To verify a timestamp reply against a request: .PP .Vb 2 \& openssl ts \-verify \-queryfile design1.tsq \-in design1.tsr \e \& \-CAfile cacert.pem \-untrusted tsacert.pem .Ve .PP -To verify a time stamp reply that includes the certificate chain: +To verify a timestamp reply that includes the certificate chain: .PP .Vb 2 \& openssl ts \-verify \-queryfile design2.tsq \-in design2.tsr \e \& \-CAfile cacert.pem .Ve .PP -To verify a time stamp token against the original data file: +To verify a timestamp token against the original data file: openssl ts \-verify \-data design2.txt \-in design2.tsr \e \-CAfile cacert.pem .PP -To verify a time stamp token against a message imprint: +To verify a timestamp token against a message imprint: openssl ts \-verify \-digest b7e5d3f93198b38379852f2c04e78d73abdd0f4b \e \-in design2.tsr \-CAfile cacert.pem .PP @@ -699,7 +699,7 @@ You could also look at the 'test' directory for more examples. .SH "BUGS" .IX Header "BUGS" .IP "\(bu" 2 -No support for time stamps over \s-1SMTP,\s0 though it is quite easy +No support for timestamps over \s-1SMTP,\s0 though it is quite easy to implement an automatic e\-mail based \s-1TSA\s0 with \fBprocmail\fR\|(1) and \fBperl\fR\|(1). \s-1HTTP\s0 server support is provided in the form of a separate apache module. \s-1HTTP\s0 client support is provided by @@ -707,7 +707,7 @@ a separate apache module. \s-1HTTP\s0 client support is provided by .IP "\(bu" 2 The file containing the last serial number of the \s-1TSA\s0 is not locked when being read or written. This is a problem if more than one -instance of \fBopenssl\fR\|(1) is trying to create a time stamp +instance of \fBopenssl\fR\|(1) is trying to create a timestamp response at the same time. This is not an issue when using the apache server module, it does proper locking. .IP "\(bu" 2 @@ -724,7 +724,7 @@ test/testtsa). \&\fBconfig\fR\|(5) .SH "COPYRIGHT" .IX Header "COPYRIGHT" -Copyright 2006\-2019 The OpenSSL Project Authors. All Rights Reserved. +Copyright 2006\-2020 The OpenSSL Project Authors. All Rights Reserved. .PP Licensed under the OpenSSL license (the \*(L"License\*(R"). You may not use this file except in compliance with the License. You can obtain a copy diff --git a/crypto/external/bsd/openssl/lib/libcrypto/man/openssl_tsget.1 b/crypto/external/bsd/openssl/lib/libcrypto/man/openssl_tsget.1 index 372d71e9ee2..952ee90a7c5 100644 --- a/crypto/external/bsd/openssl/lib/libcrypto/man/openssl_tsget.1 +++ b/crypto/external/bsd/openssl/lib/libcrypto/man/openssl_tsget.1 @@ -1,6 +1,6 @@ -.\" $NetBSD: openssl_tsget.1,v 1.20 2019/06/09 18:44:34 christos Exp $ +.\" $NetBSD: openssl_tsget.1,v 1.20.2.1 2021/03/28 18:21:52 martin Exp $ .\" -.\" Automatically generated by Pod::Man 4.10 (Pod::Simple 3.35) +.\" Automatically generated by Pod::Man 4.11 (Pod::Simple 3.35) .\" .\" Standard preamble: .\" ======================================================================== @@ -135,7 +135,7 @@ .\" ======================================================================== .\" .IX Title "TSGET 1" -.TH TSGET 1 "2018-09-23" "1.1.1c" "OpenSSL" +.TH TSGET 1 "2020-12-10" "1.1.1i" "OpenSSL" .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. .if n .ad l @@ -163,15 +163,15 @@ libcrypto, -lcrypto [request]... .SH "DESCRIPTION" .IX Header "DESCRIPTION" -The \fBtsget\fR command can be used for sending a time stamp request, as -specified in \fB\s-1RFC 3161\s0\fR, to a time stamp server over \s-1HTTP\s0 or \s-1HTTPS\s0 and storing -the time stamp response in a file. This tool cannot be used for creating the +The \fBtsget\fR command can be used for sending a timestamp request, as +specified in \fB\s-1RFC 3161\s0\fR, to a timestamp server over \s-1HTTP\s0 or \s-1HTTPS\s0 and storing +the timestamp response in a file. This tool cannot be used for creating the requests and verifying responses, you can use the OpenSSL \fB\fBts\fB\|(1)\fR command to do that. \fBtsget\fR can send several requests to the server without closing the \s-1TCP\s0 connection if more than one requests are specified on the command line. .PP -The tool sends the following \s-1HTTP\s0 request for each time stamp request: +The tool sends the following \s-1HTTP\s0 request for each timestamp request: .PP .Vb 7 \& POST url HTTP/1.1 @@ -191,7 +191,7 @@ written to a file without any interpretation. .IX Header "OPTIONS" .IP "\fB\-h\fR server_url" 4 .IX Item "-h server_url" -The \s-1URL\s0 of the \s-1HTTP/HTTPS\s0 server listening for time stamp requests. +The \s-1URL\s0 of the \s-1HTTP/HTTPS\s0 server listening for timestamp requests. .IP "\fB\-e\fR extension" 4 .IX Item "-e extension" If the \fB\-o\fR option is not given this argument specifies the extension of the @@ -200,8 +200,8 @@ the input files. Default extension is '.tsr'. (Optional) .IP "\fB\-o\fR output" 4 .IX Item "-o output" This option can be specified only when just one request is sent to the -server. The time stamp response will be written to the given output file. '\-' -means standard output. In case of multiple time stamp requests or the absence +server. The timestamp response will be written to the given output file. '\-' +means standard output. In case of multiple timestamp requests or the absence of this argument the names of the output files will be derived from the names of the input files and the default or specified extension argument. (Optional) .IP "\fB\-v\fR" 4 @@ -250,7 +250,7 @@ MS-Windows, \fB,\fR for \s-1VMS\s0 and \fB:\fR for all other platforms. (Optiona The name of an \s-1EGD\s0 socket to get random data from. (Optional) .IP "[request]..." 4 .IX Item "[request]..." -List of files containing \fB\s-1RFC 3161\s0\fR DER-encoded time stamp requests. If no +List of files containing \fB\s-1RFC 3161\s0\fR DER-encoded timestamp requests. If no requests are specified only one request will be sent to the server and it will be read from the standard input. (Optional) .SH "ENVIRONMENT VARIABLES" @@ -261,18 +261,18 @@ arguments. .SH "EXAMPLES" .IX Header "EXAMPLES" The examples below presume that \fBfile1.tsq\fR and \fBfile2.tsq\fR contain valid -time stamp requests, tsa.opentsa.org listens at port 8080 for \s-1HTTP\s0 requests +timestamp requests, tsa.opentsa.org listens at port 8080 for \s-1HTTP\s0 requests and at port 8443 for \s-1HTTPS\s0 requests, the \s-1TSA\s0 service is available at the /tsa absolute path. .PP -Get a time stamp response for file1.tsq over \s-1HTTP,\s0 output is written to +Get a timestamp response for file1.tsq over \s-1HTTP,\s0 output is written to file1.tsr: .PP .Vb 1 \& tsget \-h http://tsa.opentsa.org:8080/tsa file1.tsq .Ve .PP -Get a time stamp response for file1.tsq and file2.tsq over \s-1HTTP\s0 showing +Get a timestamp response for file1.tsq and file2.tsq over \s-1HTTP\s0 showing progress, output is written to file1.reply and file2.reply respectively: .PP .Vb 2 @@ -280,7 +280,7 @@ progress, output is written to file1.reply and file2.reply respectively: \& file1.tsq file2.tsq .Ve .PP -Create a time stamp request, write it to file3.tsq, send it to the server and +Create a timestamp request, write it to file3.tsq, send it to the server and write the response to file3.tsr: .PP .Vb 3 @@ -289,7 +289,7 @@ write the response to file3.tsr: \& \-o file3.tsr .Ve .PP -Get a time stamp response for file1.tsq over \s-1HTTPS\s0 without client +Get a timestamp response for file1.tsq over \s-1HTTPS\s0 without client authentication: .PP .Vb 2 @@ -297,7 +297,7 @@ authentication: \& \-C cacerts.pem file1.tsq .Ve .PP -Get a time stamp response for file1.tsq over \s-1HTTPS\s0 with certificate-based +Get a timestamp response for file1.tsq over \s-1HTTPS\s0 with certificate-based client authentication (it will ask for the passphrase if client_key.pem is protected): .PP @@ -322,7 +322,7 @@ example: \&\fB\s-1RFC 3161\s0\fR .SH "COPYRIGHT" .IX Header "COPYRIGHT" -Copyright 2006\-2016 The OpenSSL Project Authors. All Rights Reserved. +Copyright 2006\-2020 The OpenSSL Project Authors. All Rights Reserved. .PP Licensed under the OpenSSL license (the \*(L"License\*(R"). You may not use this file except in compliance with the License. You can obtain a copy diff --git a/crypto/external/bsd/openssl/lib/libcrypto/man/openssl_verify.1 b/crypto/external/bsd/openssl/lib/libcrypto/man/openssl_verify.1 index e5087d4133c..df3ae2cb9e3 100644 --- a/crypto/external/bsd/openssl/lib/libcrypto/man/openssl_verify.1 +++ b/crypto/external/bsd/openssl/lib/libcrypto/man/openssl_verify.1 @@ -1,6 +1,6 @@ -.\" $NetBSD: openssl_verify.1,v 1.19 2019/06/09 18:44:34 christos Exp $ +.\" $NetBSD: openssl_verify.1,v 1.19.2.1 2021/03/28 18:21:52 martin Exp $ .\" -.\" Automatically generated by Pod::Man 4.10 (Pod::Simple 3.35) +.\" Automatically generated by Pod::Man 4.11 (Pod::Simple 3.35) .\" .\" Standard preamble: .\" ======================================================================== @@ -135,7 +135,7 @@ .\" ======================================================================== .\" .IX Title "VERIFY 1" -.TH VERIFY 1 "2019-03-12" "1.1.1c" "OpenSSL" +.TH VERIFY 1 "2020-12-10" "1.1.1i" "OpenSSL" .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. .if n .ad l @@ -227,8 +227,11 @@ current system time. \fBtimestamp\fR is the number of seconds since 01.01.1970 (\s-1UNIX\s0 time). .IP "\fB\-check_ss_sig\fR" 4 .IX Item "-check_ss_sig" -Verify the signature on the self-signed root \s-1CA.\s0 This is disabled by default -because it doesn't add any security. +Verify the signature of +the last certificate in a chain if the certificate is supposedly self-signed. +This is prohibited and will result in an error if it is a non-conforming \s-1CA\s0 +certificate with key usage restrictions not including the keyCertSign bit. +This verification is disabled by default because it doesn't add any security. .IP "\fB\-CRLfile file\fR" 4 .IX Item "-CRLfile file" The \fBfile\fR should contain one or more CRLs in \s-1PEM\s0 format. @@ -425,7 +428,7 @@ in \s-1PEM\s0 format. .SH "VERIFY OPERATION" .IX Header "VERIFY OPERATION" The \fBverify\fR program uses the same functions as the internal \s-1SSL\s0 and S/MIME -verification, therefore this description applies to these verify operations +verification, therefore, this description applies to these verify operations too. .PP There is one crucial difference between the verify operations performed @@ -471,10 +474,14 @@ should be trusted for the supplied purpose. For compatibility with previous versions of OpenSSL, a certificate with no trust settings is considered to be valid for all purposes. .PP -The final operation is to check the validity of the certificate chain. The validity -period is checked against the current system time and the notBefore and notAfter -dates in the certificate. The certificate signatures are also checked at this -point. +The final operation is to check the validity of the certificate chain. +For each element in the chain, including the root \s-1CA\s0 certificate, +the validity period as specified by the \f(CW\*(C`notBefore\*(C'\fR and \f(CW\*(C`notAfter\*(C'\fR fields +is checked against the current system time. +The \fB\-attime\fR flag may be used to use a reference time other than \*(L"now.\*(R" +The certificate signature is checked as well +(except for the signature of the typically self-signed root \s-1CA\s0 certificate, +which is verified only if the \fB\-check_ss_sig\fR option is given). .PP If all operations complete successfully then certificate is considered valid. If any operation fails then the certificate is not valid. @@ -777,7 +784,7 @@ The \fB\-issuer_checks\fR option is deprecated as of OpenSSL 1.1.0 and is silently ignored. .SH "COPYRIGHT" .IX Header "COPYRIGHT" -Copyright 2000\-2017 The OpenSSL Project Authors. All Rights Reserved. +Copyright 2000\-2020 The OpenSSL Project Authors. All Rights Reserved. .PP Licensed under the OpenSSL license (the \*(L"License\*(R"). You may not use this file except in compliance with the License. You can obtain a copy diff --git a/crypto/external/bsd/openssl/lib/libcrypto/man/openssl_version.1 b/crypto/external/bsd/openssl/lib/libcrypto/man/openssl_version.1 index dfbb5ecb7b1..5e770e07687 100644 --- a/crypto/external/bsd/openssl/lib/libcrypto/man/openssl_version.1 +++ b/crypto/external/bsd/openssl/lib/libcrypto/man/openssl_version.1 @@ -1,6 +1,6 @@ -.\" $NetBSD: openssl_version.1,v 1.19 2019/06/09 18:44:34 christos Exp $ +.\" $NetBSD: openssl_version.1,v 1.19.2.1 2021/03/28 18:21:52 martin Exp $ .\" -.\" Automatically generated by Pod::Man 4.10 (Pod::Simple 3.35) +.\" Automatically generated by Pod::Man 4.11 (Pod::Simple 3.35) .\" .\" Standard preamble: .\" ======================================================================== @@ -135,7 +135,7 @@ .\" ======================================================================== .\" .IX Title "VERSION 1" -.TH VERSION 1 "2018-09-23" "1.1.1c" "OpenSSL" +.TH VERSION 1 "2018-09-23" "1.1.1i" "OpenSSL" .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. .if n .ad l diff --git a/crypto/external/bsd/openssl/lib/libcrypto/man/openssl_x509.1 b/crypto/external/bsd/openssl/lib/libcrypto/man/openssl_x509.1 index a31caa9825e..b92f9064f15 100644 --- a/crypto/external/bsd/openssl/lib/libcrypto/man/openssl_x509.1 +++ b/crypto/external/bsd/openssl/lib/libcrypto/man/openssl_x509.1 @@ -1,6 +1,6 @@ -.\" $NetBSD: openssl_x509.1,v 1.19 2019/06/09 18:44:34 christos Exp $ +.\" $NetBSD: openssl_x509.1,v 1.19.2.1 2021/03/28 18:21:52 martin Exp $ .\" -.\" Automatically generated by Pod::Man 4.10 (Pod::Simple 3.35) +.\" Automatically generated by Pod::Man 4.11 (Pod::Simple 3.35) .\" .\" Standard preamble: .\" ======================================================================== @@ -135,7 +135,7 @@ .\" ======================================================================== .\" .IX Title "X509 1" -.TH X509 1 "2019-03-12" "1.1.1c" "OpenSSL" +.TH X509 1 "2020-12-10" "1.1.1i" "OpenSSL" .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. .if n .ad l @@ -151,7 +151,7 @@ libcrypto, -lcrypto [\fB\-help\fR] [\fB\-inform DER|PEM\fR] [\fB\-outform DER|PEM\fR] -[\fB\-keyform DER|PEM\fR] +[\fB\-keyform DER|PEM|ENGINE\fR] [\fB\-CAform DER|PEM\fR] [\fB\-CAkeyform DER|PEM\fR] [\fB\-in filename\fR] @@ -184,7 +184,7 @@ libcrypto, -lcrypto [\fB\-setalias arg\fR] [\fB\-days arg\fR] [\fB\-set_serial n\fR] -[\fB\-signkey filename\fR] +[\fB\-signkey arg\fR] [\fB\-passin arg\fR] [\fB\-x509toreq\fR] [\fB\-req\fR] @@ -201,6 +201,7 @@ libcrypto, -lcrypto [\fB\-clrext\fR] [\fB\-extfile filename\fR] [\fB\-extensions section\fR] +[\fB\-sigopt nm:v\fR] [\fB\-rand file...\fR] [\fB\-writerand file\fR] [\fB\-engine id\fR] @@ -354,7 +355,7 @@ Prints out the start and expiry dates of a certificate. .IP "\fB\-checkend arg\fR" 4 .IX Item "-checkend arg" Checks if the certificate expires within the next \fBarg\fR seconds and exits -non-zero if yes it will expire or zero if not. +nonzero if yes it will expire or zero if not. .IP "\fB\-fingerprint\fR" 4 .IX Item "-fingerprint" Calculates and outputs the digest of the \s-1DER\s0 encoded version of the entire @@ -427,10 +428,11 @@ EXTENSIONS\s0\fR section. .IX Subsection "Signing Options" The \fBx509\fR utility can be used to sign certificates and requests: it can thus behave like a \*(L"mini \s-1CA\*(R".\s0 -.IP "\fB\-signkey filename\fR" 4 -.IX Item "-signkey filename" +.IP "\fB\-signkey arg\fR" 4 +.IX Item "-signkey arg" This option causes the input file to be self signed using the supplied -private key. +private key or engine. The private key's format is specified with the +\&\fB\-keyform\fR option. .Sp If the input file is a certificate it sets the issuer name to the subject name (i.e. makes it self signed) changes the public key to the @@ -443,6 +445,10 @@ key identifier extensions. If the input is a certificate request then a self signed certificate is created using the supplied private key using the subject name in the request. +.IP "\fB\-sigopt nm:v\fR" 4 +.IX Item "-sigopt nm:v" +Pass options to the signature algorithm during sign or verify operations. +Names and values of these options are algorithm-specific. .IP "\fB\-passin arg\fR" 4 .IX Item "-passin arg" The key password source. For more information about the format of \fBarg\fR @@ -453,8 +459,8 @@ Delete any extensions from a certificate. This option is used when a certificate is being created from another certificate (for example with the \fB\-signkey\fR or the \fB\-CA\fR options). Normally all extensions are retained. -.IP "\fB\-keyform PEM|DER\fR" 4 -.IX Item "-keyform PEM|DER" +.IP "\fB\-keyform PEM|DER|ENGINE\fR" 4 +.IX Item "-keyform PEM|DER|ENGINE" Specifies the format (\s-1DER\s0 or \s-1PEM\s0) of the private key file used in the \&\fB\-signkey\fR option. .IP "\fB\-days arg\fR" 4 @@ -946,7 +952,7 @@ canonical version of the \s-1DN\s0 using \s-1SHA1.\s0 This means that any direct the old form must have their links rebuilt using \fBc_rehash\fR or similar. .SH "COPYRIGHT" .IX Header "COPYRIGHT" -Copyright 2000\-2019 The OpenSSL Project Authors. All Rights Reserved. +Copyright 2000\-2020 The OpenSSL Project Authors. All Rights Reserved. .PP Licensed under the OpenSSL license (the \*(L"License\*(R"). You may not use this file except in compliance with the License. You can obtain a copy diff --git a/crypto/external/bsd/openssl/lib/libcrypto/man/ossl_store-file.7 b/crypto/external/bsd/openssl/lib/libcrypto/man/ossl_store-file.7 index 9f14c6b26fb..4c1364ed037 100644 --- a/crypto/external/bsd/openssl/lib/libcrypto/man/ossl_store-file.7 +++ b/crypto/external/bsd/openssl/lib/libcrypto/man/ossl_store-file.7 @@ -1,6 +1,6 @@ -.\" $NetBSD: ossl_store-file.7,v 1.2 2019/06/09 18:44:34 christos Exp $ +.\" $NetBSD: ossl_store-file.7,v 1.2.4.1 2021/03/28 18:21:52 martin Exp $ .\" -.\" Automatically generated by Pod::Man 4.10 (Pod::Simple 3.35) +.\" Automatically generated by Pod::Man 4.11 (Pod::Simple 3.35) .\" .\" Standard preamble: .\" ======================================================================== @@ -135,7 +135,7 @@ .\" ======================================================================== .\" .IX Title "OSSL_STORE-FILE 7" -.TH OSSL_STORE-FILE 7 "2018-09-23" "1.1.1c" "OpenSSL" +.TH OSSL_STORE-FILE 7 "2018-09-23" "1.1.1i" "OpenSSL" .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. .if n .ad l diff --git a/crypto/external/bsd/openssl/lib/libcrypto/man/ossl_store.7 b/crypto/external/bsd/openssl/lib/libcrypto/man/ossl_store.7 index d49dd39da3b..7ea8749d833 100644 --- a/crypto/external/bsd/openssl/lib/libcrypto/man/ossl_store.7 +++ b/crypto/external/bsd/openssl/lib/libcrypto/man/ossl_store.7 @@ -1,6 +1,6 @@ -.\" $NetBSD: ossl_store.7,v 1.2 2019/06/09 18:44:34 christos Exp $ +.\" $NetBSD: ossl_store.7,v 1.2.4.1 2021/03/28 18:21:52 martin Exp $ .\" -.\" Automatically generated by Pod::Man 4.10 (Pod::Simple 3.35) +.\" Automatically generated by Pod::Man 4.11 (Pod::Simple 3.35) .\" .\" Standard preamble: .\" ======================================================================== @@ -135,7 +135,7 @@ .\" ======================================================================== .\" .IX Title "OSSL_STORE 7" -.TH OSSL_STORE 7 "2018-09-23" "1.1.1c" "OpenSSL" +.TH OSSL_STORE 7 "2020-12-10" "1.1.1i" "OpenSSL" .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. .if n .ad l @@ -152,7 +152,7 @@ libcrypto, -lcrypto .SS "General" .IX Subsection "General" A \s-1STORE\s0 is a layer of functionality to retrieve a number of supported -objects from a repository of any kind, addressable as a file name or +objects from a repository of any kind, addressable as a filename or as a \s-1URI.\s0 .PP The functionality supports the pattern \*(L"open a channel to the @@ -211,7 +211,7 @@ other encoding is undefined. \&\s-1\fBOSSL_STORE_SEARCH\s0\fR\|(3) .SH "COPYRIGHT" .IX Header "COPYRIGHT" -Copyright 2016\-2018 The OpenSSL Project Authors. All Rights Reserved. +Copyright 2016\-2020 The OpenSSL Project Authors. All Rights Reserved. .PP Licensed under the OpenSSL license (the \*(L"License\*(R"). You may not use this file except in compliance with the License. You can obtain a copy diff --git a/crypto/external/bsd/openssl/lib/libcrypto/man/passphrase-encoding.7 b/crypto/external/bsd/openssl/lib/libcrypto/man/passphrase-encoding.7 index ca3b4f14691..fc6eeb87ace 100644 --- a/crypto/external/bsd/openssl/lib/libcrypto/man/passphrase-encoding.7 +++ b/crypto/external/bsd/openssl/lib/libcrypto/man/passphrase-encoding.7 @@ -1,6 +1,6 @@ -.\" $NetBSD: passphrase-encoding.7,v 1.2 2019/06/09 18:44:34 christos Exp $ +.\" $NetBSD: passphrase-encoding.7,v 1.2.4.1 2021/03/28 18:21:52 martin Exp $ .\" -.\" Automatically generated by Pod::Man 4.10 (Pod::Simple 3.35) +.\" Automatically generated by Pod::Man 4.11 (Pod::Simple 3.35) .\" .\" Standard preamble: .\" ======================================================================== @@ -135,7 +135,7 @@ .\" ======================================================================== .\" .IX Title "PASSPHRASE-ENCODING 7" -.TH PASSPHRASE-ENCODING 7 "2018-09-23" "1.1.1c" "OpenSSL" +.TH PASSPHRASE-ENCODING 7 "2020-03-22" "1.1.1i" "OpenSSL" .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. .if n .ad l @@ -191,7 +191,7 @@ A pass phrase encoded in \s-1ISO\-8859\-2\s0 could very well have a sequence suc 0xC3 0xAF (which is the two characters \*(L"\s-1LATIN CAPITAL LETTER A WITH BREVE\*(R"\s0 and \*(L"\s-1LATIN CAPITAL LETTER Z WITH DOT ABOVE\*(R"\s0 in \s-1ISO\-8859\-2\s0 encoding), but would be misinterpreted as the perfectly valid \s-1UTF\-8\s0 encoded code point U+00EF (\s-1LATIN -SMALL LETTER I WITH DIARESIS\s0) \fIif the pass phrase doesn't contain anything that +SMALL LETTER I WITH DIAERESIS\s0) \fIif the pass phrase doesn't contain anything that would be invalid \s-1UTF\-8\s0\fR. A pass phrase that contains this kind of byte sequence will give a different outcome in OpenSSL 1.1.0 and newer than in OpenSSL older than 1.1.0. @@ -282,7 +282,7 @@ erroneous/non\-compliant encoding used by OpenSSL older than 1.1.0) \&\fBd2i_PKCS8PrivateKey_bio\fR\|(3) .SH "COPYRIGHT" .IX Header "COPYRIGHT" -Copyright 2018 The OpenSSL Project Authors. All Rights Reserved. +Copyright 2018\-2020 The OpenSSL Project Authors. All Rights Reserved. .PP Licensed under the OpenSSL license (the \*(L"License\*(R"). You may not use this file except in compliance with the License. You can obtain a copy diff --git a/crypto/external/bsd/openssl/lib/libcrypto/man/scrypt.7 b/crypto/external/bsd/openssl/lib/libcrypto/man/scrypt.7 index 2b017ad1bec..1c43b60efaf 100644 --- a/crypto/external/bsd/openssl/lib/libcrypto/man/scrypt.7 +++ b/crypto/external/bsd/openssl/lib/libcrypto/man/scrypt.7 @@ -1,6 +1,6 @@ -.\" $NetBSD: scrypt.7,v 1.2 2019/06/09 18:44:34 christos Exp $ +.\" $NetBSD: scrypt.7,v 1.2.4.1 2021/03/28 18:21:52 martin Exp $ .\" -.\" Automatically generated by Pod::Man 4.10 (Pod::Simple 3.35) +.\" Automatically generated by Pod::Man 4.11 (Pod::Simple 3.35) .\" .\" Standard preamble: .\" ======================================================================== @@ -135,7 +135,7 @@ .\" ======================================================================== .\" .IX Title "SCRYPT 7" -.TH SCRYPT 7 "2018-09-23" "1.1.1c" "OpenSSL" +.TH SCRYPT 7 "2020-01-23" "1.1.1i" "OpenSSL" .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. .if n .ad l @@ -176,8 +176,8 @@ A context for scrypt can be obtained by calling: .PP The output length of an scrypt key derivation is specified via the length parameter to the \fBEVP_PKEY_derive\fR\|(3) function. -.SH "EXAMPLE" -.IX Header "EXAMPLE" +.SH "EXAMPLES" +.IX Header "EXAMPLES" This example derives a 64\-byte long test vector using scrypt using the password \&\*(L"password\*(R", salt \*(L"NaCl\*(R" and N = 1024, r = 8, p = 16. .PP @@ -242,7 +242,7 @@ This example derives a 64\-byte long test vector using scrypt using the password \&\fBEVP_PKEY_derive\fR\|(3) .SH "COPYRIGHT" .IX Header "COPYRIGHT" -Copyright 2017\-2018 The OpenSSL Project Authors. All Rights Reserved. +Copyright 2017\-2019 The OpenSSL Project Authors. All Rights Reserved. .PP Licensed under the OpenSSL license (the \*(L"License\*(R"). You may not use this file except in compliance with the License. You can obtain a copy diff --git a/crypto/external/bsd/openssl/lib/libcrypto/man/ssl.7 b/crypto/external/bsd/openssl/lib/libcrypto/man/ssl.7 index 791f12822bc..fc7e39a6c21 100644 --- a/crypto/external/bsd/openssl/lib/libcrypto/man/ssl.7 +++ b/crypto/external/bsd/openssl/lib/libcrypto/man/ssl.7 @@ -1,6 +1,6 @@ -.\" $NetBSD: ssl.7,v 1.2 2019/06/09 18:44:34 christos Exp $ +.\" $NetBSD: ssl.7,v 1.2.4.1 2021/03/28 18:21:52 martin Exp $ .\" -.\" Automatically generated by Pod::Man 4.10 (Pod::Simple 3.35) +.\" Automatically generated by Pod::Man 4.11 (Pod::Simple 3.35) .\" .\" Standard preamble: .\" ======================================================================== @@ -135,7 +135,7 @@ .\" ======================================================================== .\" .IX Title "SSL 7" -.TH SSL 7 "2018-09-23" "1.1.1c" "OpenSSL" +.TH SSL 7 "2018-09-23" "1.1.1i" "OpenSSL" .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. .if n .ad l diff --git a/crypto/external/bsd/openssl/lib/libcrypto/man/x509.7 b/crypto/external/bsd/openssl/lib/libcrypto/man/x509.7 index 3ac239b3db0..04cfabcba3c 100644 --- a/crypto/external/bsd/openssl/lib/libcrypto/man/x509.7 +++ b/crypto/external/bsd/openssl/lib/libcrypto/man/x509.7 @@ -1,6 +1,6 @@ -.\" $NetBSD: x509.7,v 1.2 2019/06/09 18:44:34 christos Exp $ +.\" $NetBSD: x509.7,v 1.2.4.1 2021/03/28 18:21:52 martin Exp $ .\" -.\" Automatically generated by Pod::Man 4.10 (Pod::Simple 3.35) +.\" Automatically generated by Pod::Man 4.11 (Pod::Simple 3.35) .\" .\" Standard preamble: .\" ======================================================================== @@ -135,7 +135,7 @@ .\" ======================================================================== .\" .IX Title "X509 7" -.TH X509 7 "2018-09-23" "1.1.1c" "OpenSSL" +.TH X509 7 "2018-09-23" "1.1.1i" "OpenSSL" .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. .if n .ad l diff --git a/crypto/external/bsd/openssl/lib/libcrypto/man/x509v3_config.5 b/crypto/external/bsd/openssl/lib/libcrypto/man/x509v3_config.5 index 5ba6799015b..8175ae0df28 100644 --- a/crypto/external/bsd/openssl/lib/libcrypto/man/x509v3_config.5 +++ b/crypto/external/bsd/openssl/lib/libcrypto/man/x509v3_config.5 @@ -1,6 +1,6 @@ -.\" $NetBSD: x509v3_config.5,v 1.2 2019/06/09 18:44:34 christos Exp $ +.\" $NetBSD: x509v3_config.5,v 1.2.4.1 2021/03/28 18:21:52 martin Exp $ .\" -.\" Automatically generated by Pod::Man 4.10 (Pod::Simple 3.35) +.\" Automatically generated by Pod::Man 4.11 (Pod::Simple 3.35) .\" .\" Standard preamble: .\" ======================================================================== @@ -135,7 +135,7 @@ .\" ======================================================================== .\" .IX Title "X509V3_CONFIG 5" -.TH X509V3_CONFIG 5 "2018-09-23" "1.1.1c" "OpenSSL" +.TH X509V3_CONFIG 5 "2020-12-10" "1.1.1i" "OpenSSL" .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. .if n .ad l @@ -204,8 +204,8 @@ The following sections describe each supported extension in detail. .IX Subsection "Basic Constraints." This is a multi valued extension which indicates whether a certificate is a \s-1CA\s0 certificate. The first (mandatory) name is \fB\s-1CA\s0\fR followed by \fB\s-1TRUE\s0\fR or -\&\fB\s-1FALSE\s0\fR. If \fB\s-1CA\s0\fR is \fB\s-1TRUE\s0\fR then an optional \fBpathlen\fR name followed by an -non-negative value can be included. +\&\fB\s-1FALSE\s0\fR. If \fB\s-1CA\s0\fR is \fB\s-1TRUE\s0\fR then an optional \fBpathlen\fR name followed by a +nonnegative value can be included. .PP For example: .PP @@ -642,8 +642,8 @@ For example: .Vb 1 \& basicConstraints=critical,DER:00:01:02:03 .Ve -.SH "WARNING" -.IX Header "WARNING" +.SH "WARNINGS" +.IX Header "WARNINGS" There is no guarantee that a specific implementation will process a given extension. It may therefore be sometimes possible to use certificates for purposes prohibited by their extensions because a specific application does @@ -698,7 +698,7 @@ will only recognize the last value. This can be worked around by using the form: \&\fBASN1_generate_nconf\fR\|(3) .SH "COPYRIGHT" .IX Header "COPYRIGHT" -Copyright 2004\-2016 The OpenSSL Project Authors. All Rights Reserved. +Copyright 2004\-2020 The OpenSSL Project Authors. All Rights Reserved. .PP Licensed under the OpenSSL license (the \*(L"License\*(R"). You may not use this file except in compliance with the License. You can obtain a copy |
