5 files changed, 20 insertions, 15 deletions

diff --git a/src/lib/libssl/man/SSL_CTX_new.3 b/src/lib/libssl/man/SSL_CTX_new.3
index c1c7635dba..4b50a03de4 100644
--- a/src/lib/libssl/man/SSL_CTX_new.3
+++ b/src/lib/libssl/man/SSL_CTX_new.3
@@ -1,4 +1,4 @@
-.\" $OpenBSD: SSL_CTX_new.3,v 1.16 2021/04/15 16:30:14 tb Exp $
+.\" $OpenBSD: SSL_CTX_new.3,v 1.17 2022/07/13 22:05:53 schwarze Exp $
 .\" full merge up to: OpenSSL 21cd6e00 Oct 21 14:40:15 2015 +0100
 .\" selective merge up to: OpenSSL 8f75443f May 24 14:04:26 2019 +0200
 .\"
@@ -50,7 +50,7 @@
 .\" ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED
 .\" OF THE POSSIBILITY OF SUCH DAMAGE.
 .\"
-.Dd $Mdocdate: April 15 2021 $
+.Dd $Mdocdate: July 13 2022 $
 .Dt SSL_CTX_NEW 3
 .Os
 .Sh NAME
@@ -141,8 +141,8 @@ creates a new
 .Vt SSL_CTX
 object as a framework to establish TLS or DTLS enabled connections.
 It initializes the list of ciphers, the session cache setting, the
-callbacks, the keys and certificates, and the options to its default
-values.
+callbacks, the keys and certificates, the options, and the security
+level to its default values.
 .Pp
 An
 .Vt SSL_CTX
@@ -284,6 +284,7 @@ functions return pointers to constant static objects.
 .Xr SSL_CTX_free 3 ,
 .Xr SSL_CTX_set_min_proto_version 3 ,
 .Xr SSL_CTX_set_options 3 ,
+.Xr SSL_CTX_set_security_level 3 ,
 .Xr SSL_set_connect_state 3
 .Sh HISTORY
 .Fn SSL_CTX_new
diff --git a/src/lib/libssl/man/SSL_dup.3 b/src/lib/libssl/man/SSL_dup.3
index 3f396fb987..a83440b431 100644
--- a/src/lib/libssl/man/SSL_dup.3
+++ b/src/lib/libssl/man/SSL_dup.3
@@ -1,4 +1,4 @@
-.\" $OpenBSD: SSL_dup.3,v 1.4 2019/06/12 09:36:30 schwarze Exp $
+.\" $OpenBSD: SSL_dup.3,v 1.5 2022/07/13 22:05:53 schwarze Exp $
 .\"
 .\" Copyright (c) 2016 Ingo Schwarze <schwarze@openbsd.org>
 .\"
@@ -14,7 +14,7 @@
 .\" ACTION OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF
 .\" OR IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE.
 .\"
-.Dd $Mdocdate: June 12 2019 $
+.Dd $Mdocdate: July 13 2022 $
 .Dt SSL_DUP 3
 .Os
 .Sh NAME
@@ -54,7 +54,8 @@ on failure.
 .Xr SSL_clear 3 ,
 .Xr SSL_copy_session_id 3 ,
 .Xr SSL_free 3 ,
-.Xr SSL_new 3
+.Xr SSL_new 3 ,
+.Xr SSL_set_security_level 3
 .Sh HISTORY
 .Fn SSL_dup
 first appeared in SSLeay 0.8.0 and has been available since
diff --git a/src/lib/libssl/man/SSL_new.3 b/src/lib/libssl/man/SSL_new.3
index f84eed7df8..22c5dbf2db 100644
--- a/src/lib/libssl/man/SSL_new.3
+++ b/src/lib/libssl/man/SSL_new.3
@@ -1,4 +1,4 @@
-.\" $OpenBSD: SSL_new.3,v 1.6 2018/03/27 17:35:50 schwarze Exp $
+.\" $OpenBSD: SSL_new.3,v 1.7 2022/07/13 22:05:53 schwarze Exp $
 .\" full merge up to: OpenSSL 1c7ae3dd Mar 29 19:17:55 2017 +1000
 .\"
 .\" This file was written by Richard Levitte <levitte@openssl.org>
@@ -49,7 +49,7 @@
 .\" ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED
 .\" OF THE POSSIBILITY OF SUCH DAMAGE.
 .\"
-.Dd $Mdocdate: March 27 2018 $
+.Dd $Mdocdate: July 13 2022 $
 .Dt SSL_NEW 3
 .Os
 .Sh NAME
@@ -70,7 +70,7 @@ structure which is needed to hold the data for a TLS/SSL connection.
 The new structure inherits the settings of the underlying context
 .Fa ctx :
 connection method, options, verification settings,
-timeout settings.
+timeout settings, security level.
 The reference count of the new structure is set to 1.
 .Pp
 .Fn SSL_up_ref
@@ -97,6 +97,7 @@ returns 1 for success or 0 for failure.
 .Xr ssl 3 ,
 .Xr SSL_clear 3 ,
 .Xr SSL_CTX_set_options 3 ,
+.Xr SSL_CTX_set_security_level 3 ,
 .Xr SSL_free 3 ,
 .Xr SSL_get_SSL_CTX 3
 .Sh HISTORY
diff --git a/src/lib/libssl/man/SSL_set_SSL_CTX.3 b/src/lib/libssl/man/SSL_set_SSL_CTX.3
index 9b6673473d..2abaefb292 100644
--- a/src/lib/libssl/man/SSL_set_SSL_CTX.3
+++ b/src/lib/libssl/man/SSL_set_SSL_CTX.3
@@ -1,4 +1,4 @@
-.\" $OpenBSD: SSL_set_SSL_CTX.3,v 1.3 2020/09/22 13:27:08 schwarze Exp $
+.\" $OpenBSD: SSL_set_SSL_CTX.3,v 1.4 2022/07/13 22:05:53 schwarze Exp $
 .\"
 .\" Copyright (c) 2020 Ingo Schwarze <schwarze@openbsd.org>
 .\"
@@ -14,7 +14,7 @@
 .\" ACTION OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF
 .\" OR IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE.
 .\"
-.Dd $Mdocdate: September 22 2020 $
+.Dd $Mdocdate: July 13 2022 $
 .Dt SSL_SET_SSL_CTX 3
 .Os
 .Sh NAME
@@ -59,7 +59,8 @@ if memory allocation fails.
 .Xr SSL_clear 3 ,
 .Xr SSL_CTX_new 3 ,
 .Xr SSL_get_SSL_CTX 3 ,
-.Xr SSL_new 3
+.Xr SSL_new 3 ,
+.Xr SSL_set_security_level 3
 .Sh HISTORY
 .Fn SSL_set_SSL_CTX
 first appeared in OpenSSL 0.9.8f and has been available since
diff --git a/src/lib/libssl/man/ssl.3 b/src/lib/libssl/man/ssl.3
index 81778df790..45e5d9692b 100644
--- a/src/lib/libssl/man/ssl.3
+++ b/src/lib/libssl/man/ssl.3
@@ -1,4 +1,4 @@
-.\" $OpenBSD: ssl.3,v 1.20 2020/09/21 08:53:56 schwarze Exp $
+.\" $OpenBSD: ssl.3,v 1.21 2022/07/13 22:05:53 schwarze Exp $
 .\" full merge up to: OpenSSL e330f55d Nov 11 00:51:04 2016 +0100
 .\" selective merge up to: OpenSSL 322755cc Sep 1 08:40:51 2018 +0800
 .\"
@@ -51,7 +51,7 @@
 .\" ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED
 .\" OF THE POSSIBILITY OF SUCH DAMAGE.
 .\"
-.Dd $Mdocdate: September 21 2020 $
+.Dd $Mdocdate: July 13 2022 $
 .Dt SSL 3
 .Os
 .Sh NAME
@@ -233,6 +233,7 @@ Protocol and algorithm configuration:
 .Xr SSL_CTX_set_cipher_list 3 ,
 .Xr SSL_CTX_set_min_proto_version 3 ,
 .Xr SSL_CTX_set_options 3 ,
+.Xr SSL_CTX_set_security_level 3 ,
 .Xr SSL_CTX_set_tlsext_use_srtp 3 ,
 .Xr SSL_CTX_set_tmp_dh_callback 3 ,
 .Xr SSL_CTX_set1_groups 3