diff options
author | schwarze <> | 2024-11-08 22:23:35 +0000 |
---|---|---|
committer | schwarze <> | 2024-11-08 22:23:35 +0000 |
commit | d0c0ceacf41c5d7d278724824d2b6fb5730c2201 (patch) | |
tree | 0d3c20fc4d228dfe84edecb7cdbbb3accc5b85f5 /src/lib/libcrypto/man/EVP_DigestVerifyInit.3 | |
parent | 7ae287b389f7b4b66ed89fa379b4d295cdf76231 (diff) | |
download | openbsd-d0c0ceacf41c5d7d278724824d2b6fb5730c2201.tar.gz openbsd-d0c0ceacf41c5d7d278724824d2b6fb5730c2201.tar.bz2 openbsd-d0c0ceacf41c5d7d278724824d2b6fb5730c2201.zip |
Weed out the last remaining refences to the obsolete
function EVP_MD_CTX_init(3) and talk about EVP_MD_CTX_new(3) instead.
This is similar in spirit to OpenSSL commit 25191fff (Dec 1, 2015),
but i'm also mentioning EVP_MD_CTX_reset(3), slightly reordering some
sentences in a more systematic way, and improving some related wordings
to be more precise and read better.
Diffstat (limited to 'src/lib/libcrypto/man/EVP_DigestVerifyInit.3')
-rw-r--r-- | src/lib/libcrypto/man/EVP_DigestVerifyInit.3 | 55 |
1 files changed, 29 insertions, 26 deletions
diff --git a/src/lib/libcrypto/man/EVP_DigestVerifyInit.3 b/src/lib/libcrypto/man/EVP_DigestVerifyInit.3 index b3286bf201..7ecd7e94e3 100644 --- a/src/lib/libcrypto/man/EVP_DigestVerifyInit.3 +++ b/src/lib/libcrypto/man/EVP_DigestVerifyInit.3 | |||
@@ -1,8 +1,9 @@ | |||
1 | .\" $OpenBSD: EVP_DigestVerifyInit.3,v 1.15 2024/07/21 08:36:43 tb Exp $ | 1 | .\" $OpenBSD: EVP_DigestVerifyInit.3,v 1.16 2024/11/08 22:23:35 schwarze Exp $ |
2 | .\" OpenSSL fb552ac6 Sep 30 23:43:01 2009 +0000 | 2 | .\" full merge up to OpenSSL f097e875 Aug 23 11:37:22 2018 +0100 |
3 | .\" selective merge up to 24a535ea Sep 22 13:14:20 2020 +0100 | ||
3 | .\" | 4 | .\" |
4 | .\" This file was written by Dr. Stephen Henson <steve@openssl.org>. | 5 | .\" This file was written by Dr. Stephen Henson <steve@openssl.org>. |
5 | .\" Copyright (c) 2006, 2009, 2014, 2015, 2016 The OpenSSL Project. | 6 | .\" Copyright (c) 2006, 2009, 2014, 2015, 2016, 2017 The OpenSSL Project. |
6 | .\" All rights reserved. | 7 | .\" All rights reserved. |
7 | .\" | 8 | .\" |
8 | .\" Redistribution and use in source and binary forms, with or without | 9 | .\" Redistribution and use in source and binary forms, with or without |
@@ -49,7 +50,7 @@ | |||
49 | .\" ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED | 50 | .\" ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED |
50 | .\" OF THE POSSIBILITY OF SUCH DAMAGE. | 51 | .\" OF THE POSSIBILITY OF SUCH DAMAGE. |
51 | .\" | 52 | .\" |
52 | .Dd $Mdocdate: July 21 2024 $ | 53 | .Dd $Mdocdate: November 8 2024 $ |
53 | .Dt EVP_DIGESTVERIFYINIT 3 | 54 | .Dt EVP_DIGESTVERIFYINIT 3 |
54 | .Os | 55 | .Os |
55 | .Sh NAME | 56 | .Sh NAME |
@@ -93,39 +94,41 @@ The EVP signature routines are a high-level interface to digital | |||
93 | signatures. | 94 | signatures. |
94 | .Pp | 95 | .Pp |
95 | .Fn EVP_DigestVerifyInit | 96 | .Fn EVP_DigestVerifyInit |
96 | sets up verification context | 97 | sets up the verification context |
97 | .Fa ctx | 98 | .Fa ctx |
98 | to use digest | 99 | to use the digest |
99 | .Fa type | 100 | .Fa type |
100 | and public key | 101 | and the public key |
101 | .Fa pkey . | 102 | .Fa pkey . |
103 | Before calling this function, obtain | ||
102 | .Fa ctx | 104 | .Fa ctx |
103 | must be initialized with | 105 | from |
104 | .Xr EVP_MD_CTX_init 3 | 106 | .Xr EVP_MD_CTX_new 3 |
105 | before calling this function. | 107 | or call |
108 | .Xr EVP_MD_CTX_reset 3 | ||
109 | on it. | ||
110 | The | ||
111 | .Fa engine | ||
112 | argument is always ignored and passing | ||
113 | .Dv NULL | ||
114 | is recommended. | ||
115 | .Pp | ||
106 | If | 116 | If |
107 | .Fa pctx | 117 | .Fa pctx |
108 | is not | 118 | is not |
109 | .Dv NULL , | 119 | .Dv NULL , |
110 | the | 120 | any pointer passed in as |
121 | .Pf * Fa pctx | ||
122 | is ignored and overwritten by an internal pointer to the | ||
111 | .Vt EVP_PKEY_CTX | 123 | .Vt EVP_PKEY_CTX |
112 | of the verification operation will be written to | 124 | used by the verification operation: |
113 | .Pf * Fa pctx : | 125 | this can be used to set alternative signing options. |
114 | this can be used to set alternative verification options. | 126 | The returned |
115 | Any existing value in | ||
116 | .Pf * .Fa pctx | ||
117 | is overwritten. | ||
118 | The | ||
119 | .Vt EVP_PKEY_CTX | 127 | .Vt EVP_PKEY_CTX |
120 | value returned must not be freed directly by the application. | 128 | must not be freed by the application. |
121 | It will be freed automatically when the | 129 | It is freed automatically when the |
122 | .Vt EVP_MD_CTX | 130 | .Vt EVP_MD_CTX |
123 | is freed. | 131 | is freed. |
124 | The | ||
125 | .Fa ENGINE *engine | ||
126 | argument is always ignored and passing | ||
127 | .Dv NULL | ||
128 | is recommended. | ||
129 | .Pp | 132 | .Pp |
130 | .Fn EVP_DigestVerifyUpdate | 133 | .Fn EVP_DigestVerifyUpdate |
131 | hashes | 134 | hashes |
@@ -168,7 +171,7 @@ and | |||
168 | .\" it is the only way to verify data. | 171 | .\" it is the only way to verify data. |
169 | .Pp | 172 | .Pp |
170 | The EVP interface to digital signatures should almost always be | 173 | The EVP interface to digital signatures should almost always be |
171 | used in preference to the low level interfaces. | 174 | used in preference to the low-level interfaces. |
172 | This is because the code then becomes transparent to the algorithm used | 175 | This is because the code then becomes transparent to the algorithm used |
173 | and much more flexible. | 176 | and much more flexible. |
174 | .Pp | 177 | .Pp |