2 files changed, 61 insertions, 1 deletions

diff --git a/src/lib/libcrypto/man/Makefile b/src/lib/libcrypto/man/Makefile
index 8a5e9419a9..39f9da3779 100644
--- a/src/lib/libcrypto/man/Makefile
+++ b/src/lib/libcrypto/man/Makefile
@@ -1,4 +1,4 @@
-# $OpenBSD: Makefile,v 1.87 2016/12/22 13:05:59 schwarze Exp $
+# $OpenBSD: Makefile,v 1.88 2016/12/22 14:06:51 schwarze Exp $
 
 .include <bsd.own.mk>
 
@@ -192,6 +192,7 @@ MAN=	\
         X509_PUBKEY_new.3 \
         X509_REQ_new.3 \
         X509_REVOKED_new.3 \
+        X509_SIG_new.3 \
         X509_STORE_CTX_get_error.3 \
         X509_STORE_CTX_get_ex_new_index.3 \
         X509_STORE_CTX_new.3 \
diff --git a/src/lib/libcrypto/man/X509_SIG_new.3 b/src/lib/libcrypto/man/X509_SIG_new.3
new file mode 100644
index 0000000000..e4ad5b0085
--- /dev/null
+++ b/src/lib/libcrypto/man/X509_SIG_new.3
@@ -0,0 +1,59 @@
+.\"     $OpenBSD: X509_SIG_new.3,v 1.1 2016/12/22 14:06:51 schwarze Exp $
+.\"
+.\" Copyright (c) 2016 Ingo Schwarze <schwarze@openbsd.org>
+.\"
+.\" Permission to use, copy, modify, and distribute this software for any
+.\" purpose with or without fee is hereby granted, provided that the above
+.\" copyright notice and this permission notice appear in all copies.
+.\"
+.\" THE SOFTWARE IS PROVIDED "AS IS" AND THE AUTHOR DISCLAIMS ALL WARRANTIES
+.\" WITH REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF
+.\" MERCHANTABILITY AND FITNESS. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR
+.\" ANY SPECIAL, DIRECT, INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES
+.\" WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR PROFITS, WHETHER IN AN
+.\" ACTION OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF
+.\" OR IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE.
+.\"
+.Dd $Mdocdate: December 22 2016 $
+.Dt X509_SIG_NEW 3
+.Os
+.Sh NAME
+.Nm X509_SIG_new ,
+.Nm X509_SIG_free
+.Nd PKCS#7 digest information
+.Sh SYNOPSIS
+.In openssl/x509.h
+.Ft X509_SIG *
+.Fn X509_SIG_new void
+.Ft void
+.Fn X509_SIG_free "X509_SIG *sig"
+.Sh DESCRIPTION
+.Fn X509_SIG_new
+allocates and initializes an empty
+.Vt X509_SIG
+object, representing an ASN.1 DigestInfo structure defined
+in RFC 2315 section 9.4 and equivalently in RFC 8017 section 9.2.
+It can hold a message digest together with information about
+the algorithm used.
+.Pp
+.Fn X509_SIG_free
+frees
+.Fa sig .
+.Sh RETURN VALUES
+.Fn X509_SIG_new
+returns the new
+.Vt X509_SIG
+object or
+.Dv NULL
+if an error occurs.
+.Sh SEE ALSO
+.Xr d2i_X509_SIG 3 ,
+.Xr PEM_read_PKCS8 3 ,
+.Xr RSA_sign 3 ,
+.Xr X509_new 3
+.Sh STANDARDS
+RFC 2315: PKCS #7: Cryptographic Message Syntax,
+section 9: Signed-data content type
+.Pp
+RFC 8017: PKCS #1: RSA Cryptography Specifications,
+section 9: Encoding Methods for Signatures