6 files changed, 41 insertions, 12 deletions

diff --git a/src/lib/libcrypto/man/X509_REVOKED_new.3 b/src/lib/libcrypto/man/X509_REVOKED_new.3
index cf121ca5e4..b34f49a11f 100644
--- a/src/lib/libcrypto/man/X509_REVOKED_new.3
+++ b/src/lib/libcrypto/man/X509_REVOKED_new.3
@@ -1,4 +1,4 @@
-.\" $OpenBSD: X509_REVOKED_new.3,v 1.6 2018/03/22 21:08:22 schwarze Exp $
+.\" $OpenBSD: X509_REVOKED_new.3,v 1.7 2018/03/23 14:26:40 schwarze Exp $
 .\" full merge up to:
 .\" OpenSSL man3/X509_CRL_get0_by_serial cdd6c8c5 Mar 20 12:29:37 2017 +0100
 .\"
@@ -66,7 +66,7 @@
 .\" ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED
 .\" OF THE POSSIBILITY OF SUCH DAMAGE.
 .\"
-.Dd $Mdocdate: March 22 2018 $
+.Dd $Mdocdate: March 23 2018 $
 .Dt X509_REVOKED_NEW 3
 .Os
 .Sh NAME
@@ -190,3 +190,7 @@ and
 .Fn X509_REVOKED_set_revocationDate
 first appeared in OpenSSL 0.9.7 and have been available since
 .Ox 3.2 .
+.Pp
+.Fn X509_REVOKED_dup
+first appeared in OpenSSL 1.0.2 and has been available since
+.Ox 6.3 .
diff --git a/src/lib/libcrypto/man/X509_STORE_CTX_new.3 b/src/lib/libcrypto/man/X509_STORE_CTX_new.3
index e1e4a94143..34ccca26f7 100644
--- a/src/lib/libcrypto/man/X509_STORE_CTX_new.3
+++ b/src/lib/libcrypto/man/X509_STORE_CTX_new.3
@@ -1,4 +1,4 @@
-.\" $OpenBSD: X509_STORE_CTX_new.3,v 1.15 2018/03/23 00:09:11 schwarze Exp $
+.\" $OpenBSD: X509_STORE_CTX_new.3,v 1.16 2018/03/23 14:26:40 schwarze Exp $
 .\" full merge up to: OpenSSL 186bb907 Apr 13 11:05:13 2015 -0700
 .\" selective merge up to: OpenSSL 7643a172 Apr 21 13:35:51 2017 +0200
 .\"
@@ -347,6 +347,10 @@ and
 .Fn X509_STORE_CTX_set_default
 first appeared in OpenSSL 0.9.8 and have been available since
 .Ox 4.5 .
+.Pp
+.Fn X509_STORE_CTX_get0_store
+first appeared in OpenSSL 1.0.2 and has been available since
+.Ox 6.3 .
 .Sh BUGS
 The certificates and CRLs in a context are used internally and should
 .Sy not
diff --git a/src/lib/libcrypto/man/X509_VERIFY_PARAM_set_flags.3 b/src/lib/libcrypto/man/X509_VERIFY_PARAM_set_flags.3
index 5b22b5d733..4f3261c975 100644
--- a/src/lib/libcrypto/man/X509_VERIFY_PARAM_set_flags.3
+++ b/src/lib/libcrypto/man/X509_VERIFY_PARAM_set_flags.3
@@ -1,4 +1,4 @@
-.\" $OpenBSD: X509_VERIFY_PARAM_set_flags.3,v 1.11 2018/03/23 01:05:50 schwarze Exp $
+.\" $OpenBSD: X509_VERIFY_PARAM_set_flags.3,v 1.12 2018/03/23 14:26:40 schwarze Exp $
 .\" full merge up to: OpenSSL d33def66 Feb 9 14:17:13 2016 -0500
 .\" selective merge up to: OpenSSL 48e5119a Jan 19 10:49:22 2018 +0100
 .\"
@@ -682,6 +682,20 @@ and
 first appeared in OpenSSL 0.9.8a.
 All these functions have been available since
 .Ox 4.5 .
+.Pp
+.Fn X509_VERIFY_PARAM_get0_name
+.Fn X509_VERIFY_PARAM_set1_host ,
+.Fn X509_VERIFY_PARAM_add1_host ,
+.Fn X509_VERIFY_PARAM_set_hostflags ,
+.Fn X509_VERIFY_PARAM_get0_peername ,
+.Fn X509_VERIFY_PARAM_set1_email ,
+.Fn X509_VERIFY_PARAM_set1_ip ,
+.Fn X509_VERIFY_PARAM_set1_ip_asc ,
+.Fn X509_VERIFY_PARAM_get_count ,
+and
+.Fn X509_VERIFY_PARAM_get0
+first appeared in OpenSSL 1.0.2 and have been available since
+.Ox 6.3 .
 .Sh BUGS
 Delta CRL checking is currently primitive.
 Only a single delta can be used and (partly due to limitations of
diff --git a/src/lib/libcrypto/man/X509_check_host.3 b/src/lib/libcrypto/man/X509_check_host.3
index 5990670acb..f811f21884 100644
--- a/src/lib/libcrypto/man/X509_check_host.3
+++ b/src/lib/libcrypto/man/X509_check_host.3
@@ -1,4 +1,4 @@
-.\"     $OpenBSD: X509_check_host.3,v 1.2 2016/12/05 16:38:24 jmc Exp $
+.\"     $OpenBSD: X509_check_host.3,v 1.3 2018/03/23 14:26:40 schwarze Exp $
 .\"     OpenSSL 99d63d46 Oct 26 13:56:48 2016 -0400
 .\"
 .\" This file was written by Florian Weimer <fweimer@redhat.com> and
@@ -49,7 +49,7 @@
 .\" ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED
 .\" OF THE POSSIBILITY OF SUCH DAMAGE.
 .\"
-.Dd $Mdocdate: December 5 2016 $
+.Dd $Mdocdate: March 23 2018 $
 .Dt X509_CHECK_HOST 3
 .Os
 .Sh NAME
@@ -233,4 +233,6 @@ returns -2 if the provided
 .Fa name
 contains embedded NUL bytes.
 .Sh HISTORY
-These functions were added in OpenSSL 1.0.2.
+These functions first appeared in OpenSSL 1.0.2
+and have been available since
+.Ox 6.1 .
diff --git a/src/lib/libcrypto/man/X509_get0_signature.3 b/src/lib/libcrypto/man/X509_get0_signature.3
index 374ee15641..5392dd677b 100644
--- a/src/lib/libcrypto/man/X509_get0_signature.3
+++ b/src/lib/libcrypto/man/X509_get0_signature.3
@@ -1,4 +1,4 @@
-.\" $OpenBSD: X509_get0_signature.3,v 1.3 2018/02/24 23:42:40 schwarze Exp $
+.\" $OpenBSD: X509_get0_signature.3,v 1.4 2018/03/23 14:26:40 schwarze Exp $
 .\" selective merge up to:
 .\" OpenSSL man3/X509_get0_signature 2f7a2520 Apr 25 17:28:08 2017 +0100
 .\"
@@ -49,7 +49,7 @@
 .\" ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED
 .\" OF THE POSSIBILITY OF SUCH DAMAGE.
 .\"
-.Dd $Mdocdate: February 24 2018 $
+.Dd $Mdocdate: March 23 2018 $
 .Dt X509_GET0_SIGNATURE 3
 .Os
 .Sh NAME
@@ -150,7 +150,8 @@ is not appropriate, for example in a non-standard or unsupported format.
 .Fn X509_get0_signature
 and
 .Fn X509_get_signature_nid
-first appeared in OpenSSL 1.0.2.
+first appeared in OpenSSL 1.0.2 and have been available since
+.Ox 6.3 .
 .Pp
 .Fn X509_REQ_get0_signature ,
 .Fn X509_CRL_get0_signature ,
diff --git a/src/lib/libcrypto/man/X509_new.3 b/src/lib/libcrypto/man/X509_new.3
index 69931e2e37..afade8fc5b 100644
--- a/src/lib/libcrypto/man/X509_new.3
+++ b/src/lib/libcrypto/man/X509_new.3
@@ -1,4 +1,4 @@
-.\" $OpenBSD: X509_new.3,v 1.12 2018/03/21 03:16:08 schwarze Exp $
+.\" $OpenBSD: X509_new.3,v 1.13 2018/03/23 14:26:40 schwarze Exp $
 .\" full merge up to: OpenSSL 99d63d46 Oct 26 13:56:48 2016 -0400
 .\"
 .\" This file was written by Dr. Stephen Henson <steve@openssl.org>.
@@ -49,7 +49,7 @@
 .\" ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED
 .\" OF THE POSSIBILITY OF SUCH DAMAGE.
 .\"
-.Dd $Mdocdate: March 21 2018 $
+.Dd $Mdocdate: March 23 2018 $
 .Dt X509_NEW 3
 .Os
 .Sh NAME
@@ -160,6 +160,10 @@ and
 .Fn X509_free
 appeared before SSLeay 0.8 and have been available since
 .Ox 2.4 .
+.Pp
+.Fn X509_chain_up_ref
+first appeared in OpenSSL 1.0.2 and has been available since
+.Ox 6.3 .
 .Sh BUGS
 The X.509 public key infrastructure and its data types contain too
 many design bugs to list them.