1 files changed, 59 insertions, 9 deletions
diff --git a/src/lib/libcrypto/man/EVP_DigestVerifyInit.3 b/src/lib/libcrypto/man/EVP_DigestVerifyInit.3
index d0e777faed..e92b21fd4e 100644
--- a/src/lib/libcrypto/man/EVP_DigestVerifyInit.3
+++ b/src/lib/libcrypto/man/EVP_DigestVerifyInit.3
@@ -1,6 +1,55 @@
-.\"     $OpenBSD: EVP_DigestVerifyInit.3,v 1.2 2016/11/06 15:52:50 jmc Exp $
+.\"     $OpenBSD: EVP_DigestVerifyInit.3,v 1.3 2016/11/26 17:40:58 schwarze Exp $
+.\"     OpenSSL fb552ac6 Sep 30 23:43:01 2009 +0000
 .\"
-.Dd $Mdocdate: November 6 2016 $
+.\" This file was written by Dr. Stephen Henson <steve@openssl.org>.
+.\" Copyright (c) 2006, 2009, 2014, 2015, 2016 The OpenSSL Project.
+.\" All rights reserved.
+.\"
+.\" Redistribution and use in source and binary forms, with or without
+.\" modification, are permitted provided that the following conditions
+.\" are met:
+.\"
+.\" 1. Redistributions of source code must retain the above copyright
+.\"    notice, this list of conditions and the following disclaimer.
+.\"
+.\" 2. Redistributions in binary form must reproduce the above copyright
+.\"    notice, this list of conditions and the following disclaimer in
+.\"    the documentation and/or other materials provided with the
+.\"    distribution.
+.\"
+.\" 3. All advertising materials mentioning features or use of this
+.\"    software must display the following acknowledgment:
+.\"    "This product includes software developed by the OpenSSL Project
+.\"    for use in the OpenSSL Toolkit. (http://www.openssl.org/)"
+.\"
+.\" 4. The names "OpenSSL Toolkit" and "OpenSSL Project" must not be used to
+.\"    endorse or promote products derived from this software without
+.\"    prior written permission. For written permission, please contact
+.\"    openssl-core@openssl.org.
+.\"
+.\" 5. Products derived from this software may not be called "OpenSSL"
+.\"    nor may "OpenSSL" appear in their names without prior written
+.\"    permission of the OpenSSL Project.
+.\"
+.\" 6. Redistributions of any form whatsoever must retain the following
+.\"    acknowledgment:
+.\"    "This product includes software developed by the OpenSSL Project
+.\"    for use in the OpenSSL Toolkit (http://www.openssl.org/)"
+.\"
+.\" THIS SOFTWARE IS PROVIDED BY THE OpenSSL PROJECT ``AS IS'' AND ANY
+.\" EXPRESSED OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
+.\" IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR
+.\" PURPOSE ARE DISCLAIMED.  IN NO EVENT SHALL THE OpenSSL PROJECT OR
+.\" ITS CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL,
+.\" SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT
+.\" NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES;
+.\" LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
+.\" HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT,
+.\" STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE)
+.\" ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED
+.\" OF THE POSSIBILITY OF SUCH DAMAGE.
+.\"
+.Dd $Mdocdate: November 26 2016 $
 .Dt EVP_DIGESTVERIFYINIT 3
 .Os
 .Sh NAME
@@ -22,7 +71,7 @@
 .Fo EVP_DigestVerifyUpdate
 .Fa "EVP_MD_CTX *ctx"
 .Fa "const void *d"
-.Fa "unsigned int cnt"
+.Fa "size_t cnt"
 .Fc
 .Ft int
 .Fo EVP_DigestVerifyFinal
@@ -94,7 +143,7 @@ discouraged.
 The call to
 .Fn EVP_DigestVerifyFinal
 internally finalizes a copy of the digest context.
-This means that calls to
+This means that
 .Xr EVP_VerifyUpdate 3
 and
 .Xr EVP_VerifyFinal 3
@@ -112,12 +161,13 @@ return 1 for success and 0 or a negative value for failure.
 In particular a return value of -2 indicates the operation is not
 supported by the public key algorithm.
 .Pp
-Unlike other functions, the return value 0 from
 .Fn EVP_DigestVerifyFinal
-only indicates that the signature did not verify successfully.
+returns 1 for success; any other value indicates failure.
-That is it did not match the original data or the signature was of
+A return value of 0 indicates that the signature did not verify
-invalid form.
+successfully (that is, the signature did not match the original
-It is not an indication of a more serious error.
+data or the signature had an invalid form), while other values
+indicate a more serious error (and sometimes also indicate an invalid
+signature form).
 .Pp
 The error codes can be obtained from
 .Xr ERR_get_error 3 .

diff --git a/src/lib/libcrypto/man/EVP_DigestVerifyInit.3 b/src/lib/libcrypto/man/EVP_DigestVerifyInit.3 index d0e777faed..e92b21fd4e 100644 --- a/src/lib/libcrypto/man/EVP_DigestVerifyInit.3 +++ b/src/lib/libcrypto/man/EVP_DigestVerifyInit.3
@@ -1,6 +1,55 @@
1	.\" $OpenBSD: EVP_DigestVerifyInit.3,v 1.2 2016/11/06 15:52:50 jmc Exp $	1	.\" $OpenBSD: EVP_DigestVerifyInit.3,v 1.3 2016/11/26 17:40:58 schwarze Exp $
		2	.\" OpenSSL fb552ac6 Sep 30 23:43:01 2009 +0000
2	.\"	3	.\"
3	.Dd $Mdocdate: November 6 2016 $	4	.\" This file was written by Dr. Stephen Henson <steve@openssl.org>.
		5	.\" Copyright (c) 2006, 2009, 2014, 2015, 2016 The OpenSSL Project.
		6	.\" All rights reserved.
		7	.\"
		8	.\" Redistribution and use in source and binary forms, with or without
		9	.\" modification, are permitted provided that the following conditions
		10	.\" are met:
		11	.\"
		12	.\" 1. Redistributions of source code must retain the above copyright
		13	.\" notice, this list of conditions and the following disclaimer.
		14	.\"
		15	.\" 2. Redistributions in binary form must reproduce the above copyright
		16	.\" notice, this list of conditions and the following disclaimer in
		17	.\" the documentation and/or other materials provided with the
		18	.\" distribution.
		19	.\"
		20	.\" 3. All advertising materials mentioning features or use of this
		21	.\" software must display the following acknowledgment:
		22	.\" "This product includes software developed by the OpenSSL Project
		23	.\" for use in the OpenSSL Toolkit. (http://www.openssl.org/)"
		24	.\"
		25	.\" 4. The names "OpenSSL Toolkit" and "OpenSSL Project" must not be used to
		26	.\" endorse or promote products derived from this software without
		27	.\" prior written permission. For written permission, please contact
		28	.\" openssl-core@openssl.org.
		29	.\"
		30	.\" 5. Products derived from this software may not be called "OpenSSL"
		31	.\" nor may "OpenSSL" appear in their names without prior written
		32	.\" permission of the OpenSSL Project.
		33	.\"
		34	.\" 6. Redistributions of any form whatsoever must retain the following
		35	.\" acknowledgment:
		36	.\" "This product includes software developed by the OpenSSL Project
		37	.\" for use in the OpenSSL Toolkit (http://www.openssl.org/)"
		38	.\"
		39	.\" THIS SOFTWARE IS PROVIDED BY THE OpenSSL PROJECT ``AS IS'' AND ANY
		40	.\" EXPRESSED OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
		41	.\" IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR
		42	.\" PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE OpenSSL PROJECT OR
		43	.\" ITS CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL,
		44	.\" SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT
		45	.\" NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES;
		46	.\" LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
		47	.\" HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT,
		48	.\" STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE)
		49	.\" ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED
		50	.\" OF THE POSSIBILITY OF SUCH DAMAGE.
		51	.\"
		52	.Dd $Mdocdate: November 26 2016 $
4	.Dt EVP_DIGESTVERIFYINIT 3	53	.Dt EVP_DIGESTVERIFYINIT 3
5	.Os	54	.Os
6	.Sh NAME	55	.Sh NAME
@@ -22,7 +71,7 @@
22	.Fo EVP_DigestVerifyUpdate	71	.Fo EVP_DigestVerifyUpdate
23	.Fa "EVP_MD_CTX *ctx"	72	.Fa "EVP_MD_CTX *ctx"
24	.Fa "const void *d"	73	.Fa "const void *d"
25	.Fa "unsigned int cnt"	74	.Fa "size_t cnt"
26	.Fc	75	.Fc
27	.Ft int	76	.Ft int
28	.Fo EVP_DigestVerifyFinal	77	.Fo EVP_DigestVerifyFinal
@@ -94,7 +143,7 @@ discouraged.
94	The call to	143	The call to
95	.Fn EVP_DigestVerifyFinal	144	.Fn EVP_DigestVerifyFinal
96	internally finalizes a copy of the digest context.	145	internally finalizes a copy of the digest context.
97	This means that calls to	146	This means that
98	.Xr EVP_VerifyUpdate 3	147	.Xr EVP_VerifyUpdate 3
99	and	148	and
100	.Xr EVP_VerifyFinal 3	149	.Xr EVP_VerifyFinal 3
@@ -112,12 +161,13 @@ return 1 for success and 0 or a negative value for failure.
112	In particular a return value of -2 indicates the operation is not	161	In particular a return value of -2 indicates the operation is not
113	supported by the public key algorithm.	162	supported by the public key algorithm.
114	.Pp	163	.Pp
115	Unlike other functions, the return value 0 from
116	.Fn EVP_DigestVerifyFinal	164	.Fn EVP_DigestVerifyFinal
117	only indicates that the signature did not verify successfully.	165	returns 1 for success; any other value indicates failure.
118	That is it did not match the original data or the signature was of	166	A return value of 0 indicates that the signature did not verify
119	invalid form.	167	successfully (that is, the signature did not match the original
120	It is not an indication of a more serious error.	168	data or the signature had an invalid form), while other values
		169	indicate a more serious error (and sometimes also indicate an invalid
		170	signature form).
121	.Pp	171	.Pp
122	The error codes can be obtained from	172	The error codes can be obtained from
123	.Xr ERR_get_error 3 .	173	.Xr ERR_get_error 3 .