Make sure all pages talking about X509_EXTENSION objects

link back to X509_EXTENSION_new(3).

4 files changed, 22 insertions, 20 deletions

diff --git a/src/lib/libcrypto/man/OCSP_CRLID_new.3 b/src/lib/libcrypto/man/OCSP_CRLID_new.3
index 556ec7f20e..fbc54ec71a 100644
--- a/src/lib/libcrypto/man/OCSP_CRLID_new.3
+++ b/src/lib/libcrypto/man/OCSP_CRLID_new.3
@@ -1,4 +1,4 @@
-.\"     $OpenBSD: OCSP_CRLID_new.3,v 1.1 2016/12/12 22:48:02 schwarze Exp $
+.\"     $OpenBSD: OCSP_CRLID_new.3,v 1.2 2016/12/15 15:22:17 schwarze Exp $
 .\"
 .\" Copyright (c) 2016 Ingo Schwarze <schwarze@openbsd.org>
 .\"
@@ -14,7 +14,7 @@
 .\" ACTION OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF
 .\" OR IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE.
 .\"
-.Dd $Mdocdate: December 12 2016 $
+.Dd $Mdocdate: December 15 2016 $
 .Dt OCSP_CRLID_NEW 3
 .Os
 .Sh NAME
@@ -85,7 +85,8 @@ object or
 if an error occurred.
 .Sh SEE ALSO
 .Xr OCSP_resp_find_status 3 ,
-.Xr OCSP_response_status 3
+.Xr OCSP_response_status 3 ,
+.Xr X509_EXTENSION_new 3
 .Sh STANDARDS
 RFC 6960: X.509 Internet Public Key Infrastructure Online Certificate
 Status Protocol, section 4.4.2: CRL References
diff --git a/src/lib/libcrypto/man/OCSP_SERVICELOC_new.3 b/src/lib/libcrypto/man/OCSP_SERVICELOC_new.3
index 14a2a75f88..6179da3a5b 100644
--- a/src/lib/libcrypto/man/OCSP_SERVICELOC_new.3
+++ b/src/lib/libcrypto/man/OCSP_SERVICELOC_new.3
@@ -1,4 +1,4 @@
-.\"     $OpenBSD: OCSP_SERVICELOC_new.3,v 1.3 2016/12/14 16:20:28 schwarze Exp $
+.\"     $OpenBSD: OCSP_SERVICELOC_new.3,v 1.4 2016/12/15 15:22:17 schwarze Exp $
 .\"
 .\" Copyright (c) 2016 Ingo Schwarze <schwarze@openbsd.org>
 .\"
@@ -14,7 +14,7 @@
 .\" ACTION OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF
 .\" OR IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE.
 .\"
-.Dd $Mdocdate: December 14 2016 $
+.Dd $Mdocdate: December 15 2016 $
 .Dt OCSP_SERVICELOC_NEW 3
 .Os
 .Sh NAME
@@ -86,6 +86,7 @@ object or
 if an error occurred.
 .Sh SEE ALSO
 .Xr OCSP_REQUEST_new 3 ,
+.Xr X509_EXTENSION_new 3 ,
 .Xr X509_get_issuer_name 3 ,
 .Xr X509_NAME_new 3
 .Sh STANDARDS
diff --git a/src/lib/libcrypto/man/X509v3_get_ext_by_NID.3 b/src/lib/libcrypto/man/X509v3_get_ext_by_NID.3
index 866c7b8bdb..1ff4f73979 100644
--- a/src/lib/libcrypto/man/X509v3_get_ext_by_NID.3
+++ b/src/lib/libcrypto/man/X509v3_get_ext_by_NID.3
@@ -1,4 +1,4 @@
-.\"     $OpenBSD: X509v3_get_ext_by_NID.3,v 1.2 2016/12/05 19:41:46 jmc Exp $
+.\"     $OpenBSD: X509v3_get_ext_by_NID.3,v 1.3 2016/12/15 15:22:17 schwarze Exp $
 .\"     OpenSSL c952780c Jun 21 07:03:34 2016 -0400
 .\"
 .\" This file was written by Dr. Stephen Henson <steve@openssl.org>.
@@ -48,7 +48,7 @@
 .\" ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED
 .\" OF THE POSSIBILITY OF SUCH DAMAGE.
 .\"
-.Dd $Mdocdate: December 5 2016 $
+.Dd $Mdocdate: December 15 2016 $
 .Dt X509V3_GET_EXT_BY_NID 3
 .Os
 .Sh NAME
@@ -384,4 +384,5 @@ returns a stack of extensions or
 .Dv NULL
 on error.
 .Sh SEE ALSO
+.Xr X509_EXTENSION_new 3 ,
 .Xr X509V3_get_d2i 3
diff --git a/src/lib/libcrypto/man/x509.3 b/src/lib/libcrypto/man/x509.3
index 3f53a4efaf..93221c0250 100644
--- a/src/lib/libcrypto/man/x509.3
+++ b/src/lib/libcrypto/man/x509.3
@@ -1,4 +1,4 @@
-.\"     $OpenBSD: x509.3,v 1.6 2016/12/14 16:53:32 schwarze Exp $
+.\"     $OpenBSD: x509.3,v 1.7 2016/12/15 15:22:17 schwarze Exp $
 .\"     OpenSSL a9c85cea Nov 11 09:33:55 2016 +0100
 .\"
 .\" This file was written by Richard Levitte <levitte@openssl.org>
@@ -48,7 +48,7 @@
 .\" ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED
 .\" OF THE POSSIBILITY OF SUCH DAMAGE.
 .\"
-.Dd $Mdocdate: December 14 2016 $
+.Dd $Mdocdate: December 15 2016 $
 .Dt X509 3
 .Os
 .Sh NAME
@@ -75,14 +75,6 @@ In OpenSSL, the type
 .Vt X509_REQ
 is used to express such a certificate request.
 .Pp
-To handle some complex parts of a certificate, there are the types
-.Vt X509_NAME
-to express a certificate or issuer name,
-.Vt X509_ATTRIBUTE
-to express a certificate attribute,
-.Vt X509_EXTENSION
-to express a certificate extension, and a few more.
-.Pp
 Finally, there's the supertype
 .Vt X509_INFO ,
 which can contain a CRL, a certificate, and a corresponding private key.
@@ -106,7 +98,9 @@ and
 .Fa i2d_X509_REQ_*
 handle PKCS#10 certificate requests.
 .Pp
-The functions documented in
+The object type
+.Vt X509_NAME
+and the functions documented in
 .Xr X509_NAME_new 3
 and in the manual pages referenced from there handle certificate
 and issuer names.
@@ -114,8 +108,12 @@ and issuer names.
 .Fa X509_ATTRIBUTE_*
 handle certificate attributes.
 .Pp
-.Fa X509_EXTENSION_*
-handle certificate extensions.
+The object type
+.Vt X509_EXTENSION
+and the functions documented in
+.Xr X509_EXTENSION_new 3
+and in the manual pages referenced from there handle certificate
+extensions and certificate revocation list extensions.
 .Sh SEE ALSO
 .Xr crypto 3 ,
 .Xr d2i_X509 3 ,
@@ -123,4 +121,5 @@ handle certificate extensions.
 .Xr d2i_X509_CRL 3 ,
 .Xr d2i_X509_REQ 3 ,
 .Xr d2i_X509_SIG 3 ,
+.Xr X509_EXTENSION_new 3 ,
 .Xr X509_NAME_new 3