new manual page a2i_ipadd(3) written from scratch

new manual page v2i_ASN1_BIT_STRING(3) written from scratch

new manual page X509V3_parse_list(3) written from scratch

Move the horrific EVP_aes_128_ccm(3) API out of the important,
algorithm-independent EVP_EncryptInit(3) manual as another step
in making the latter leaner and more palatable.

As a side benefit, the

Move the horrific EVP_aes_128_ccm(3) API out of the important,
algorithm-independent EVP_EncryptInit(3) manual as another step
in making the latter leaner and more palatable.

As a side benefit, the new EVP_aes_128_ccm(3) manual page may provide
a better fighting chance to programmers who see themselves forced to
support CCM for whatever reason. It documents the mandatory, but so
far undocumented EVP_CTRL_CCM_GET_TAG control command and makes the
description of the three EVP_CTRL_CCM_SET_* control commands and the
numerous related quirks more precise.

show more ...

New manual page EVP_aes_128_gcm(3).

The main benefit is moving the cumbersome and error-prone method of
using EVP_EncryptInit(3) for AES-GCM out of the important, but obese
manual page EVP_EncryptIn

New manual page EVP_aes_128_gcm(3).

The main benefit is moving the cumbersome and error-prone method of
using EVP_EncryptInit(3) for AES-GCM out of the important, but obese
manual page EVP_EncryptInit(3), and to create a logical place for
pointing readers to the safer and more flexible EVP_AEAD_CTX_init(3).

As a side benefit, document three control commands that were so far
undocumented and make the description of three others more precise.

Feedback and OK tb@.

show more ...

Move the algorithm-specific functions EVP_rc2_*(3) out of EVP_EncryptInit(3)
and document them properly in their own manual page, including the control
commands EVP_CTRL_SET_RC2_KEY_BITS and EVP_CTRL

Move the algorithm-specific functions EVP_rc2_*(3) out of EVP_EncryptInit(3)
and document them properly in their own manual page, including the control
commands EVP_CTRL_SET_RC2_KEY_BITS and EVP_CTRL_GET_RC2_KEY_BITS that were
so far undocumented.

Arguably, the main benefit is another small step making the important,
but still obese EVP_EncryptInit(3) manual page more palatable.

show more ...

Delete the manual pages EVP_PKEY_meth_new(3) and EVP_PKEY_meth_get0_info(3)
because tb@ deleted almost all functions documented there from the API
in evp.h 1.127 on March 2 this year, but move the fu

Delete the manual pages EVP_PKEY_meth_new(3) and EVP_PKEY_meth_get0_info(3)
because tb@ deleted almost all functions documented there from the API
in evp.h 1.127 on March 2 this year, but move the functions
EVP_PKEY_CTX_set_data(3) and EVP_PKEY_CTX_get_data(3) that we still
support to EVP_PKEY_keygen(3), because that page already documents
EVP_PKEY_CTX_set_app_data(3) and EVP_PKEY_CTX_get_app_data(3).

show more ...

Delete the manual page EVP_PKEY_check(3).
All three functions documented in this page were deleted from the API
by tb@ in evp.h rev. 1.136 on August 31 this year.

Delete the manual page EVP_PKEY_asn1_new(3).
All the functions documented in this page were deleted from the API
by tb@ in evp.h rev. 1.126 on March 2 this year.

Link the new manual page EVP_PKEY_new_CMAC_key(3) to the build
and purge the superseded information from the algorithm-independent
page EVP_PKEY_new(3).

remove duplicate X509v3_asid_add_id_or_range.3 line

Remove X509_check_trust documentation

The X509at_* manuals are no longer needed

Remove documentation of EVP_whirlpool

LibreSSL no longer supports adding X.501 attributes to an EVP_PKEY

Remove the corresponding documentation.

Remove documentation of UI_UTIL_read_pw*

According to some, a fail-open password verification function is par for
the course for libcrypto. Unfortunately, we have been recommending its use
over simi

Remove documentation of UI_UTIL_read_pw*

According to some, a fail-open password verification function is par for
the course for libcrypto. Unfortunately, we have been recommending its use
over similarly named EVP functions after what amounted to a coin toss a
few years back. Luckily enough, no one followed that advice and we can
soon remove this API for good.

show more ...

Remove docs of various X509_TRUST "functionality" that no longer exists

Some macros are still exposed, but apart from the loss of a very nice way
of saying "this is completely misdesigned, overengin

Remove docs of various X509_TRUST "functionality" that no longer exists

Some macros are still exposed, but apart from the loss of a very nice way
of saying "this is completely misdesigned, overengineered and not properly
thought through" the only thing we would have learned from it is that this
stuff is "probably useless".

show more ...

link EVP_PKEY_CTX_set_tls1_prf_md.3 to build

Install X509V3_EXT_get_nid.3

Remove CRL method API documentation

Remove ASN1_time_parse documentation

Remove EVP_MD_meth* documentation

Move the description of the EVP_MD_FLAGs to EVP_MD_nid() and add a
reference to the CMS specification.

Remove EVP_add_{cipher,digest}* docs

Remove lh stats

This could have been removed in an earlier bump. Now it's time for it to
say goodbye.

ok jsing

Document various CMS_{signed,unsigned}_* functions

These functions change signed & unsigned attributes of a CMS SignerInfo object

With & OK tb@