1 files changed, 26 insertions, 9 deletions

diff --git a/src/lib/libcrypto/man/X509_new.3 b/src/lib/libcrypto/man/X509_new.3
index 605d1db7be..6520aaf477 100644
--- a/src/lib/libcrypto/man/X509_new.3
+++ b/src/lib/libcrypto/man/X509_new.3
@@ -1,4 +1,4 @@
-.\"     $OpenBSD: X509_new.3,v 1.6 2016/12/12 22:02:55 jmc Exp $
+.\"     $OpenBSD: X509_new.3,v 1.7 2016/12/22 13:05:59 schwarze Exp $
 .\"     OpenSSL 3a59ad98 Dec 11 00:36:06 2015 +0000
 .\"
 .\" This file was written by Dr. Stephen Henson <steve@openssl.org>.
@@ -48,14 +48,14 @@
 .\" ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED
 .\" OF THE POSSIBILITY OF SUCH DAMAGE.
 .\"
-.Dd $Mdocdate: December 12 2016 $
+.Dd $Mdocdate: December 22 2016 $
 .Dt X509_NEW 3
 .Os
 .Sh NAME
 .Nm X509_new ,
 .Nm X509_free ,
 .Nm X509_up_ref
-.Nd X509 certificate ASN.1 allocation functions
+.Nd X.509 certificate object
 .Sh SYNOPSIS
 .In openssl/x509.h
 .Ft X509 *
@@ -69,12 +69,14 @@
 .Fa "X509 *a"
 .Fc
 .Sh DESCRIPTION
-The X509 ASN.1 allocation routines allocate and free an
-.Vt X509
-structure, which represents an X509 certificate.
-.Pp
 .Fn X509_new
-allocates and initializes an X509 structure with reference count 1.
+allocates and initializes an empty
+.Vt X509
+object with reference count 1.
+It represents an ASN.1 Certificate structure
+defined in RFC 5280 section 4.1.
+It can hold a public key together with information about the person,
+organization, device, or function the associated private key belongs to.
 .Pp
 .Fn X509_free
 decrements the reference count of the
@@ -95,6 +97,11 @@ This function is useful if a certificate structure is being used
 by several different operations each of which will free it up after
 use: this avoids the need to duplicate the entire certificate
 structure.
+.Pp
+The object
+.Vt X509_INFO ,
+which can hold a certificate, the corresponding private key,
+and a certificate revocation list, is not yet documented.
 .Sh RETURN VALUES
 If the allocation fails,
 .Fn X509_new
@@ -107,8 +114,18 @@ Otherwise it returns a pointer to the newly allocated structure.
 .Fn X509_up_ref
 returns 1 for success or 0 for failure.
 .Sh SEE ALSO
+.Xr crypto 3 ,
 .Xr d2i_X509 3 ,
-.Xr ERR_get_error 3
+.Xr ERR_get_error 3 ,
+.Xr X509_ALGOR_new 3 ,
+.Xr X509_CRL_new 3 ,
+.Xr X509_EXTENSION_new 3 ,
+.Xr X509_NAME_new 3 ,
+.Xr X509_REQ_new 3 ,
+.Xr X509_SIG_new 3
+.Sh STANDARDS
+RFC 5280: Internet X.509 Public Key Infrastructure Certificate and
+Certificate Revocation List (CRL) Profile
 .Sh HISTORY
 .Fn X509_new
 and