1 files changed, 12 insertions, 2 deletions
diff --git a/src/usr.bin/openssl/openssl.1 b/src/usr.bin/openssl/openssl.1
index 7ebfb9c31f..8fad9a2f18 100644
--- a/src/usr.bin/openssl/openssl.1
+++ b/src/usr.bin/openssl/openssl.1
@@ -1,4 +1,4 @@
-.\" $OpenBSD: openssl.1,v 1.134 2021/11/26 16:23:27 tb Exp $
+.\" $OpenBSD: openssl.1,v 1.135 2022/01/10 12:19:26 tb Exp $
 .\" ====================================================================
 .\" Copyright (c) 1998-2002 The OpenSSL Project.  All rights reserved.
 .\"
@@ -110,7 +110,7 @@
 .\" copied and put under another distribution licence
 .\" [including the GNU Public Licence.]
 .\"
-.Dd $Mdocdate: November 26 2021 $
+.Dd $Mdocdate: January 10 2022 $
 .Dt OPENSSL 1
 .Os
 .Sh NAME
@@ -3332,6 +3332,7 @@ is equivalent to
 .Bl -hang -width "openssl pkey"
 .It Nm openssl pkey
 .Bk -words
+.Op Fl check
 .Op Ar cipher
 .Op Fl in Ar file
 .Op Fl inform Cm der | pem
@@ -3340,6 +3341,7 @@ is equivalent to
 .Op Fl outform Cm der | pem
 .Op Fl passin Ar arg
 .Op Fl passout Ar arg
+.Op Fl pubcheck
 .Op Fl pubin
 .Op Fl pubout
 .Op Fl text
@@ -3355,6 +3357,8 @@ and their components printed out.
 .Pp
 The options are as follows:
 .Bl -tag -width Ds
+.It Fl check
+Check the validity of a key pair.
 .It Ar cipher
 Encrypt the private key with the specified cipher.
 Any algorithm name accepted by
@@ -3380,6 +3384,9 @@ The output format.
 The key password source.
 .It Fl passout Ar arg
 The output file password source.
+.It Fl pubcheck
+Check the validity of a public key
+or the public component of a key pair.
 .It Fl pubin
 Read in a public key, not a private key.
 .It Fl pubout
@@ -3394,6 +3401,7 @@ even if a private key is being processed.
 .Tg pkeyparam
 .Sh PKEYPARAM
 .Cm openssl pkeyparam
+.Op Fl check
 .Op Fl in Ar file
 .Op Fl noout
 .Op Fl out Ar file
@@ -3406,6 +3414,8 @@ The key type is determined by the PEM headers.
 .Pp
 The options are as follows:
 .Bl -tag -width Ds
+.It Fl check
+check the correctness of parameters.
 .It Fl in Ar file
 The input file to read from,
 or standard input if not specified.

diff --git a/src/usr.bin/openssl/openssl.1 b/src/usr.bin/openssl/openssl.1 index 7ebfb9c31f..8fad9a2f18 100644 --- a/src/usr.bin/openssl/openssl.1 +++ b/src/usr.bin/openssl/openssl.1
@@ -1,4 +1,4 @@
1	.\" $OpenBSD: openssl.1,v 1.134 2021/11/26 16:23:27 tb Exp $	1	.\" $OpenBSD: openssl.1,v 1.135 2022/01/10 12:19:26 tb Exp $
2	.\" ====================================================================	2	.\" ====================================================================
3	.\" Copyright (c) 1998-2002 The OpenSSL Project. All rights reserved.	3	.\" Copyright (c) 1998-2002 The OpenSSL Project. All rights reserved.
4	.\"	4	.\"
@@ -110,7 +110,7 @@
110	.\" copied and put under another distribution licence	110	.\" copied and put under another distribution licence
111	.\" [including the GNU Public Licence.]	111	.\" [including the GNU Public Licence.]
112	.\"	112	.\"
113	.Dd $Mdocdate: November 26 2021 $	113	.Dd $Mdocdate: January 10 2022 $
114	.Dt OPENSSL 1	114	.Dt OPENSSL 1
115	.Os	115	.Os
116	.Sh NAME	116	.Sh NAME
@@ -3332,6 +3332,7 @@ is equivalent to
3332	.Bl -hang -width "openssl pkey"	3332	.Bl -hang -width "openssl pkey"
3333	.It Nm openssl pkey	3333	.It Nm openssl pkey
3334	.Bk -words	3334	.Bk -words
		3335	.Op Fl check
3335	.Op Ar cipher	3336	.Op Ar cipher
3336	.Op Fl in Ar file	3337	.Op Fl in Ar file
3337	.Op Fl inform Cm der \| pem	3338	.Op Fl inform Cm der \| pem
@@ -3340,6 +3341,7 @@ is equivalent to
3340	.Op Fl outform Cm der \| pem	3341	.Op Fl outform Cm der \| pem
3341	.Op Fl passin Ar arg	3342	.Op Fl passin Ar arg
3342	.Op Fl passout Ar arg	3343	.Op Fl passout Ar arg
		3344	.Op Fl pubcheck
3343	.Op Fl pubin	3345	.Op Fl pubin
3344	.Op Fl pubout	3346	.Op Fl pubout
3345	.Op Fl text	3347	.Op Fl text
@@ -3355,6 +3357,8 @@ and their components printed out.
3355	.Pp	3357	.Pp
3356	The options are as follows:	3358	The options are as follows:
3357	.Bl -tag -width Ds	3359	.Bl -tag -width Ds
		3360	.It Fl check
		3361	Check the validity of a key pair.
3358	.It Ar cipher	3362	.It Ar cipher
3359	Encrypt the private key with the specified cipher.	3363	Encrypt the private key with the specified cipher.
3360	Any algorithm name accepted by	3364	Any algorithm name accepted by
@@ -3380,6 +3384,9 @@ The output format.
3380	The key password source.	3384	The key password source.
3381	.It Fl passout Ar arg	3385	.It Fl passout Ar arg
3382	The output file password source.	3386	The output file password source.
		3387	.It Fl pubcheck
		3388	Check the validity of a public key
		3389	or the public component of a key pair.
3383	.It Fl pubin	3390	.It Fl pubin
3384	Read in a public key, not a private key.	3391	Read in a public key, not a private key.
3385	.It Fl pubout	3392	.It Fl pubout
@@ -3394,6 +3401,7 @@ even if a private key is being processed.
3394	.Tg pkeyparam	3401	.Tg pkeyparam
3395	.Sh PKEYPARAM	3402	.Sh PKEYPARAM
3396	.Cm openssl pkeyparam	3403	.Cm openssl pkeyparam
		3404	.Op Fl check
3397	.Op Fl in Ar file	3405	.Op Fl in Ar file
3398	.Op Fl noout	3406	.Op Fl noout
3399	.Op Fl out Ar file	3407	.Op Fl out Ar file
@@ -3406,6 +3414,8 @@ The key type is determined by the PEM headers.
3406	.Pp	3414	.Pp
3407	The options are as follows:	3415	The options are as follows:
3408	.Bl -tag -width Ds	3416	.Bl -tag -width Ds
		3417	.It Fl check
		3418	check the correctness of parameters.
3409	.It Fl in Ar file	3419	.It Fl in Ar file
3410	The input file to read from,	3420	The input file to read from,
3411	or standard input if not specified.	3421	or standard input if not specified.