summaryrefslogtreecommitdiff
path: root/src (follow)
Commit message (Collapse)AuthorAgeFilesLines
* Document X509_NAME_dup(3) and X509_NAME_ENTRY_dup(3) listed inschwarze2016-12-141-2/+84
| | | | | | OpenSSL doc/man3/X509_dup.pod and d2i_X509_NAME_ENTRY(3) and i2d_X509_NAME_ENTRY(3) listed in OpenSSL doc/man3/d2i_X509.pod. Also add a RETURN VALUES section.
* Clarify X509_NAME stuff and cut back excessive references.schwarze2016-12-141-11/+8
| | | | | Ultimately, this page will have to be merged into X509_new(3), but we're not quite ready for that just yet.
* Make sure all manual pages discussing X509_NAME objectsschwarze2016-12-1410-30/+45
| | | | | reference X509_NAME_new(3). Sparingly add a few other references to relevant X509_NAME*(3) pages while here.
* Complete rewrite to improve clarity.schwarze2016-12-141-61/+49
| | | | Add some cross references and STANDARDS.
* Document X509_NAME_ENTRY_new(3) and X509_NAME_ENTRY_free(3),schwarze2016-12-141-26/+74
| | | | | | | | | | | both listed in <openssl/x509.h> and in OpenSSL doc/man3/X509_dup.h. Note that the OpenSSL documentation specifies the wrong header file. Explain what X509_NAME_ENTRY represents. Simplify and clarify some wording. Sort parts of the text into a more logical order. Delete an irrelevant cross reference and add some relevant ones. Add a STANDARDS section.
* Write X509_NAME_new(3) manual from scratch. Both functions areschwarze2016-12-142-1/+83
| | | | | listed in <openssl/x509.h> and in OpenSSL doc/man3/X509_dup.pod. Note that the OpenSSL documentation specifies the wrong header file.
* tweak previous;jmc2016-12-142-7/+8
|
* New manuals ESS_SIGNING_CERT_new(3) and TS_REQ_new(3) writtenschwarze2016-12-143-1/+279
| | | | | | from scratch. All these functions are listed in <openssl/ts.h> and in OpenSSL doc/man3/X509_dup.pod. Note that the OpenSSL documentation specifies the wrong header file.
* Start RSA_PSS_PARAMS_new(3) stub from scratch. Both functionsschwarze2016-12-132-1/+54
| | | | | | are listed in <openssl/rsa.h> and OpenSSL doc/man3/X509_dup.pod. Note that the OpenSSL documentation specifies the wrong header file. More could probably be said about PSS, but this is a start...
* Complete the CBB conversion and cleanup of send_client_key_exchange().jsing2016-12-131-42/+12
| | | | ok doug@
* Convert ssl3_send_client_kex_gost() to CBB.jsing2016-12-131-17/+19
| | | | ok doug@
* tweak SEE ALSO; in particular,schwarze2016-12-139-36/+35
| | | | make sure that all PKCS7 pages point to PKCS7_new(3)
* Write PKCS7_new(3) manual page from scratch. All the functions areschwarze2016-12-132-1/+247
| | | | | public: listed in <openssl/pkcs7.h> and OpenSSL doc/man3/X509_dup.pod. Note that the OpenSSL documentation specifies the wrong header file.
* Convert ssl3_send_client_kex_ecdhe() to CBB. Also check the return value ofjsing2016-12-131-34/+35
| | | | | | the EC_POINT_point2oct() calls. Feedback from and ok doug@
* typo fix; ok schwarzejmc2016-12-131-3/+3
|
* Write OCSP_CRLID_new(3) and OCSP_SERVICELOC_new(3) from scratch.schwarze2016-12-125-4/+196
| | | | | | | | | | | These two and OCSP_CRLID_free(3) and OCSP_SERVICELOC_free(3) are public by being in OpenSSL doc/man3/X509_dup.pod. OCSP_crlID_new(3) and OCSP_url_svcloc_new(3) are related and, even though completely undocumented in OpenSSL, obviously much more important. If you had told me a year ago that i would ever write such text, i would have called you crazy.
* various cleanup;jmc2016-12-124-25/+26
|
* Document OCSP_CERTID_new(3) listed in <openssl/ocsp.h> and in OpenSSLschwarze2016-12-121-16/+52
| | | | | | | | doc/man3/X509_dup.pod. Note that the OpenSSL documentation specifies the wrong header file. Add some information about what the OCSP_CERTID object actually represents, along with the pertinent STANDARDS reference.
* Document OCSP_SINGLERESP_new(3), OCSP_SINGLERESP_free(3),schwarze2016-12-121-3/+90
| | | | | | | | | | OCSP_CERTSTATUS_new(3), OCSP_CERTSTATUS_free(3), OCSP_REVOKEDINFO_new(3), and OCSP_REVOKEDINFO_free(3), all in <openssl/ocsp.h> and in OpenSSL doc/man3/X509_dup.pod. Note that the OpenSSL documentation specifies the wrong header file. Add some information about what these objects actually represent, along with the pertinent STANDARDS reference.
* Document OCSP_RESPONSE_new(3), OCSP_RESPONSE_free(3),schwarze2016-12-121-36/+144
| | | | | | | | | | | | OCSP_RESPBYTES_new(3), OCSP_RESPBYTES_free(3), OCSP_BASICRESP_new(3), OCSP_BASICRESP_free(3), OCSP_RESPDATA_new(3), OCSP_RESPDATA_free(3), OCSP_RESPID_new(3), and OCSP_RESPID_free(3), all in <openssl/ocsp.h> and in OpenSSL doc/man3/X509_dup.pod. Note that the OpenSSL documentation specifies the wrong header file. Add some information about what these objects actually represent, along with the pertinent STANDARDS reference. Sort functions into a logical order and apply minor wording tweaks.
* Document OCSP_SIGNATURE_new(3), OCSP_SIGNATURE_free(3),schwarze2016-12-121-26/+95
| | | | | | | | | | | OCSP_REQINFO_new(3), OCSP_REQINFO_free(3), OCSP_ONEREQ_new(3), OCSP_ONEREQ_free(3), all in <openssl/ocsp.h> and in OpenSSL doc/man3/X509_dup.pod. Note that the OpenSSL documentation specifies the wrong header file. Add some information about what these objects actually represent, along with the pertinent STANDARDS reference. Minor wording tweaks.
* Document DSAparams_dup(3). It is in <openssl/dsa.h> and documentedschwarze2016-12-121-2/+35
| | | | | | | | | | by OpenSSL, so it is clearly public. OpenSSL documents it in doc/man3/X509_dup.pod, but with wrong header file, wrong prototype, and misleading description. While here, fix the wrong d2i_DSA_SIG(3) return type and document those RETURN VALUES that i could easily figure out.
* Document DIRECTORYSTRING_new(3), DIRECTORYSTRING_free(3),schwarze2016-12-121-6/+32
| | | | | | | | | | | DISPLAYTEXT_new(3), DISPLAYTEXT_free(3). These functions are clearly public because OpenSSL documents them and they are in the public <openssl/asn1.h> header. OpenSSL documents these four functions in doc/man3/X509_dup.pod [sic], but the information given is completely wrong: wrong header file, wrong prototypes, misleading description. Why, oh why do people even bother to write documentation if nothing of what they write is true?
* import openssl.cnf(5) and x509v3.cnf(5) from OpenSSL;schwarze2016-12-116-14/+1259
| | | | below OpenBSD quality standards, but better than nothing...
* Distribute the text of ec(3) to the individual EC manuals where it belongs.schwarze2016-12-1111-107/+70
| | | | | | Make sure EC_GROUP_new(3) points to all EC manuals and all EC manuals point back to EC_GROUP_new(3), and add some other useful links as well. Change all links to ec(3) to point to EC_GROUP_new(3) instead.
* Merge all of rsa(3) into RSA_new(3).schwarze2016-12-113-93/+86
| | | | | In this case, keep the text about individual struct fields because it contains some actual information.
* Change all references to rsa(3) to point to RSA_new(3) instead.schwarze2016-12-1117-50/+51
| | | | Make sure all RSA pages point back to RSA_new(3).
* add missing section number to Xr;jmc2016-12-111-3/+3
|
* some fixes for the dsa.3 -> DSA_new.3 changes;jmc2016-12-113-9/+8
|
* Merge one sentence and the references from dsa(3) to DSA_new(3) andschwarze2016-12-103-80/+23
| | | | | | | discard the rest of the text. There is no value in documenting some of the fields of a structure and then going on to say that the structure is intended as opaque. Besides, i doubt that we want such strong marketing of ENGINE support.
* Change all references to dsa(3) to point to DSA_new(3).schwarze2016-12-1012-35/+33
| | | | Make sure all DSA pages point back to DSA_new(3).
* Merge one sentence and the references from dh(3) to DH_new(3) andschwarze2016-12-103-67/+12
| | | | | | | discard the rest of the text. There is no value in documenting some of the fields of a structure and then going on to say that the structure is intended as opaque. Besides, i doubt that we want such strong marketing of ENGINE support.
* Replace all references to dh(3) with DH_new(3).schwarze2016-12-1012-34/+30
| | | | Make sure that all DH pages point back to DH_new(3).
* Add Copyright and license; jmc@ noticed that i forgot this file.schwarze2016-12-101-30/+53
| | | | | | | | Correct the header: It's <openssl/ui_compat.h>, not <openssl/des_old.h>. Delete documentation of des_read_password(3) and des_read_2passwords(3) which no longer exist. Probably, the rest of this ought to be deleted as well...
* Add Copyright and license; jmc@ noticed that i missed this file.schwarze2016-12-101-1/+50
|
* Merge bn(3) into BN_new(3).schwarze2016-12-103-76/+41
| | | | | | | OpenSSL removed bn(3) without replacement, but the introductory text does seem helpful, and it is good for a sub-library to have a central page pointing to all other pages and pointed at from all other pages of the sub-library.
* replace all references to bn(3) with BN_new(3),schwarze2016-12-1024-70/+74
| | | | and make sure all BN*(3) pages point back to BN_new(3)
* Add Copyright and license; jmc@ noticed that i missed this file.schwarze2016-12-101-2/+50
| | | | | | I'm not merging documentation for X509_STORE_set_verify_func(3) from OpenSSL because their documentations does not appear to match the code we have, and i don't understand what the code does.
* Copyright and license; jmc@ noticed that is forgot this fileschwarze2016-12-101-2/+50
|
* Add Copyright and license.schwarze2016-12-101-1047/+149
| | | | | | | | | | | | | | Delete all the function prototypes. They are all available from their individual manual pages. Here, they were incomplete and nothing but a maintenance nightmare. Add several missing cross reference, such that this page now references all libssl manual pages. Delete a sentence that said nothing and correct a typo. Now all libssl manuals have proper Copyright notices and licenses, and i have merged all improvements from OpenSSL that i could find.
* Write an SSL_get_shared_ciphers(3) manual from scratch; another oneschwarze2016-12-102-1/+72
| | | | | | | | where BUGS is longer than DESCRIPTION. The function is listed in ssl(3) and <openssl/ssl.h>, so it's clearly public. The code looks slightly mysterious to me, so it would be welcome if somebody more familiar with TLS protocols could check factual accuracy.
* New manual pages SSL_get_certificate(3), SSL_get_state(3), andschwarze2016-12-105-4/+286
| | | | | SSL_num_renegotiations(3) written from scratch. These functions are listed in ssl(3) and <openssl/ssl.h>, so they are clearly public.
* Document SSL_version(3). It's listed in ssl(3) and <openssl/ssl.h>,schwarze2016-12-101-7/+20
| | | | so it's clearly a public interface.
* some Vt fixes;jmc2016-12-085-18/+18
|
* minor cleanup;jmc2016-12-085-24/+20
|
* various cleanup;jmc2016-12-0812-61/+58
|
* Fix regressions introduce in the fix for CVE-2016-6559.millert2016-12-081-6/+5
| | | | From FreeBSD (glebius)
* Write SSL_renegotiate(3) manual from scratch; this function is listedschwarze2016-12-072-1/+58
| | | | | | | in ssl(3) and <openssl/ssl.h>, so it's clearly a public interface. More could probably be said, the code looks somewhat mysterious to me, but i think this stub is already better than nothing.
* add missing .Nm SSL_peek in the NAME sectionschwarze2016-12-071-3/+4
|
* Write SSL_copy_session_id(3) manual from scratch. This function isschwarze2016-12-072-1/+78
| | | | | | | listed in ssl(3) and <openssl/ssl.h>, so it's clearly a public interface. We might wish to merge the improved code from OpenSSL 1.1.0, but that's major bump, so i'm documenting the BUGS for now.
generated by cgit v1.2.3-55-g6feb (git 2.39.1) at 2025-03-27 13:12:25 +0000