Document tls_peer_cert_chain_pem().

ok beck@

1 files changed, 13 insertions, 2 deletions

diff --git a/src/lib/libtls/man/tls_conn_version.3 b/src/lib/libtls/man/tls_conn_version.3
index 8ac2c9b6b3..e65e69b16d 100644
--- a/src/lib/libtls/man/tls_conn_version.3
+++ b/src/lib/libtls/man/tls_conn_version.3
@@ -1,4 +1,4 @@
-.\" $OpenBSD: tls_conn_version.3,v 1.4 2017/01/28 00:59:36 schwarze Exp $
+.\" $OpenBSD: tls_conn_version.3,v 1.5 2017/10/07 14:41:58 jsing Exp $
 .\"
 .\" Copyright (c) 2015 Bob Beck <beck@openbsd.org>
 .\" Copyright (c) 2016 Joel Sing <jsing@openbsd.org>
@@ -15,7 +15,7 @@
 .\" ACTION OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF
 .\" OR IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE.
 .\"
-.Dd $Mdocdate: January 28 2017 $
+.Dd $Mdocdate: October 7 2017 $
 .Dt TLS_CONN_VERSION 3
 .Os
 .Sh NAME
@@ -25,6 +25,7 @@
 .Nm tls_conn_servername ,
 .Nm tls_peer_cert_provided ,
 .Nm tls_peer_cert_contains_name ,
+.Nm tls_peer_cert_chain_pem ,
 .Nm tls_peer_cert_issuer ,
 .Nm tls_peer_cert_subject ,
 .Nm tls_peer_cert_hash ,
@@ -48,6 +49,11 @@
 .Fa "struct tls *ctx"
 .Fa "const char *name"
 .Fc
+.Ft const uint8_t *
+.Fo tls_peer_cert_chain_pem
+.Fa struct tls *ctx
+.Fa size_t *size
+.Fc
 .Ft const char *
 .Fn tls_peer_cert_issuer "struct tls *ctx"
 .Ft const char *
@@ -96,6 +102,11 @@ has provided a certificate that contains a
 SAN or CN that matches
 .Ar name .
 .Pp
+.Fn tls_peer_cert_chain_pem
+returns a pointer to memory containing a PEM encoded certificate chain for the
+peer certificate from
+.Ar ctx .
+.Pp
 .Fn tls_peer_cert_subject
 returns a string
 corresponding to the subject of the peer certificate from