Clarify X509_NAME stuff and cut back excessive references.

Ultimately, this page will have to be merged into X509_new(3),
but we're not quite ready for that just yet.

1 files changed, 8 insertions, 11 deletions

diff --git a/src/lib/libcrypto/man/x509.3 b/src/lib/libcrypto/man/x509.3
index 51650ca074..3f53a4efaf 100644
--- a/src/lib/libcrypto/man/x509.3
+++ b/src/lib/libcrypto/man/x509.3
@@ -1,4 +1,4 @@
-.\"     $OpenBSD: x509.3,v 1.5 2016/12/12 22:02:55 jmc Exp $
+.\"     $OpenBSD: x509.3,v 1.6 2016/12/14 16:53:32 schwarze Exp $
 .\"     OpenSSL a9c85cea Nov 11 09:33:55 2016 +0100
 .\"
 .\" This file was written by Richard Levitte <levitte@openssl.org>
@@ -48,7 +48,7 @@
 .\" ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED
 .\" OF THE POSSIBILITY OF SUCH DAMAGE.
 .\"
-.Dd $Mdocdate: December 12 2016 $
+.Dd $Mdocdate: December 14 2016 $
 .Dt X509 3
 .Os
 .Sh NAME
@@ -77,7 +77,7 @@ is used to express such a certificate request.
 .Pp
 To handle some complex parts of a certificate, there are the types
 .Vt X509_NAME
-to express a certificate name,
+to express a certificate or issuer name,
 .Vt X509_ATTRIBUTE
 to express a certificate attribute,
 .Vt X509_EXTENSION
@@ -106,8 +106,10 @@ and
 .Fa i2d_X509_REQ_*
 handle PKCS#10 certificate requests.
 .Pp
-.Fa X509_NAME_*
-handle certificate names.
+The functions documented in
+.Xr X509_NAME_new 3
+and in the manual pages referenced from there handle certificate
+and issuer names.
 .Pp
 .Fa X509_ATTRIBUTE_*
 handle certificate attributes.
@@ -119,11 +121,6 @@ handle certificate extensions.
 .Xr d2i_X509 3 ,
 .Xr d2i_X509_ALGOR 3 ,
 .Xr d2i_X509_CRL 3 ,
-.Xr d2i_X509_NAME 3 ,
 .Xr d2i_X509_REQ 3 ,
 .Xr d2i_X509_SIG 3 ,
-.Xr X509_NAME_add_entry_by_NID 3 ,
-.Xr X509_NAME_add_entry_by_txt 3 ,
-.Xr X509_NAME_ENTRY_get_object 3 ,
-.Xr X509_NAME_new 3 ,
-.Xr X509_NAME_print_ex 3
+.Xr X509_NAME_new 3