Regenerate manual pages for OpenSSL 0.9.8k.

38 files changed, 189 insertions, 92 deletions

diff --git a/secure/usr.bin/openssl/man/CA.pl.1 b/secure/usr.bin/openssl/man/CA.pl.1
index 313c794..18102ab 100644
--- a/secure/usr.bin/openssl/man/CA.pl.1
+++ b/secure/usr.bin/openssl/man/CA.pl.1
@@ -1,4 +1,4 @@
-.\" Automatically generated by Pod::Man v1.37, Pod::Parser v1.35
+.\" Automatically generated by Pod::Man v1.37, Pod::Parser v1.37
 .\"
 .\" Standard preamble:
 .\" ========================================================================
@@ -129,7 +129,7 @@
 .\" ========================================================================
 .\"
 .IX Title "CA.PL 1"
-.TH CA.PL 1 "2007-03-15" "0.9.8e" "OpenSSL"
+.TH CA.PL 1 "2009-06-14" "0.9.8k" "OpenSSL"
 .SH "NAME"
 CA.pl \- friendlier interface for OpenSSL certificate programs
 .SH "SYNOPSIS"
diff --git a/secure/usr.bin/openssl/man/asn1parse.1 b/secure/usr.bin/openssl/man/asn1parse.1
index 9a7c081..a9a9fb5 100644
--- a/secure/usr.bin/openssl/man/asn1parse.1
+++ b/secure/usr.bin/openssl/man/asn1parse.1
@@ -1,4 +1,4 @@
-.\" Automatically generated by Pod::Man v1.37, Pod::Parser v1.35
+.\" Automatically generated by Pod::Man v1.37, Pod::Parser v1.37
 .\"
 .\" Standard preamble:
 .\" ========================================================================
@@ -129,7 +129,7 @@
 .\" ========================================================================
 .\"
 .IX Title "ASN1PARSE 1"
-.TH ASN1PARSE 1 "2007-03-15" "0.9.8e" "OpenSSL"
+.TH ASN1PARSE 1 "2009-06-14" "0.9.8k" "OpenSSL"
 .SH "NAME"
 asn1parse \- ASN.1 parsing tool
 .SH "SYNOPSIS"
diff --git a/secure/usr.bin/openssl/man/ca.1 b/secure/usr.bin/openssl/man/ca.1
index e6bd907..5643a1e 100644
--- a/secure/usr.bin/openssl/man/ca.1
+++ b/secure/usr.bin/openssl/man/ca.1
@@ -1,4 +1,4 @@
-.\" Automatically generated by Pod::Man v1.37, Pod::Parser v1.35
+.\" Automatically generated by Pod::Man v1.37, Pod::Parser v1.37
 .\"
 .\" Standard preamble:
 .\" ========================================================================
@@ -129,7 +129,7 @@
 .\" ========================================================================
 .\"
 .IX Title "CA 1"
-.TH CA 1 "2007-03-15" "0.9.8e" "OpenSSL"
+.TH CA 1 "2009-06-14" "0.9.8k" "OpenSSL"
 .SH "NAME"
 ca \- sample minimal CA application
 .SH "SYNOPSIS"
diff --git a/secure/usr.bin/openssl/man/ciphers.1 b/secure/usr.bin/openssl/man/ciphers.1
index 0a58654..691a5e7 100644
--- a/secure/usr.bin/openssl/man/ciphers.1
+++ b/secure/usr.bin/openssl/man/ciphers.1
@@ -1,4 +1,4 @@
-.\" Automatically generated by Pod::Man v1.37, Pod::Parser v1.35
+.\" Automatically generated by Pod::Man v1.37, Pod::Parser v1.37
 .\"
 .\" Standard preamble:
 .\" ========================================================================
@@ -129,7 +129,7 @@
 .\" ========================================================================
 .\"
 .IX Title "CIPHERS 1"
-.TH CIPHERS 1 "2007-03-15" "0.9.8e" "OpenSSL"
+.TH CIPHERS 1 "2009-06-14" "0.9.8k" "OpenSSL"
 .SH "NAME"
 ciphers \- SSL cipher display and cipher list tool.
 .SH "SYNOPSIS"
@@ -217,7 +217,7 @@ The following is a list of all permitted cipher strings and their meanings.
 .IP "\fB\s-1DEFAULT\s0\fR" 4
 .IX Item "DEFAULT"
 the default cipher list. This is determined at compile time and is normally
-\&\fB\s-1ALL:\s0!ADH:RC4+RSA:+SSLv2:@STRENGTH\fR. This must be the first cipher string
+\&\fB\s-1AES:ALL:\s0!aNULL:!eNULL:+RC4:@STRENGTH\fR. This must be the first cipher string
 specified.
 .IP "\fB\s-1COMPLEMENTOFDEFAULT\s0\fR" 4
 .IX Item "COMPLEMENTOFDEFAULT"
@@ -298,6 +298,9 @@ anonymous \s-1DH\s0 cipher suites.
 .IP "\fB\s-1AES\s0\fR" 4
 .IX Item "AES"
 cipher suites using \s-1AES\s0.
+.IP "\fB\s-1CAMELLIA\s0\fR" 4
+.IX Item "CAMELLIA"
+cipher suites using Camellia.
 .IP "\fB3DES\fR" 4
 .IX Item "3DES"
 cipher suites using triple \s-1DES\s0.
@@ -313,15 +316,15 @@ cipher suites using \s-1RC2\s0.
 .IP "\fB\s-1IDEA\s0\fR" 4
 .IX Item "IDEA"
 cipher suites using \s-1IDEA\s0.
+.IP "\fB\s-1SEED\s0\fR" 4
+.IX Item "SEED"
+cipher suites using \s-1SEED\s0.
 .IP "\fB\s-1MD5\s0\fR" 4
 .IX Item "MD5"
 cipher suites using \s-1MD5\s0.
 .IP "\fB\s-1SHA1\s0\fR, \fB\s-1SHA\s0\fR" 4
 .IX Item "SHA1, SHA"
 cipher suites using \s-1SHA1\s0.
-.IP "\fBCamellia\fR" 4
-.IX Item "Camellia"
-cipher suites using Camellia.
 .SH "CIPHER SUITE NAMES"
 .IX Header "CIPHER SUITE NAMES"
 The following lists give the \s-1SSL\s0 or \s-1TLS\s0 cipher suites names from the
@@ -416,10 +419,10 @@ e.g. \s-1DES\-CBC3\-SHA\s0. In these cases, \s-1RSA\s0 authentication is used.
 .Ve
 .PP
 .Vb 4
-\& TLS_DH_DSS_WITH_AES_128_CBC_SHA         DH-DSS-AES128-SHA
-\& TLS_DH_DSS_WITH_AES_256_CBC_SHA         DH-DSS-AES256-SHA
-\& TLS_DH_RSA_WITH_AES_128_CBC_SHA         DH-RSA-AES128-SHA
-\& TLS_DH_RSA_WITH_AES_256_CBC_SHA         DH-RSA-AES256-SHA
+\& TLS_DH_DSS_WITH_AES_128_CBC_SHA         Not implemented.
+\& TLS_DH_DSS_WITH_AES_256_CBC_SHA         Not implemented.
+\& TLS_DH_RSA_WITH_AES_128_CBC_SHA         Not implemented.
+\& TLS_DH_RSA_WITH_AES_256_CBC_SHA         Not implemented.
 .Ve
 .PP
 .Vb 4
@@ -458,6 +461,25 @@ e.g. \s-1DES\-CBC3\-SHA\s0. In these cases, \s-1RSA\s0 authentication is used.
 \& TLS_DH_anon_WITH_CAMELLIA_128_CBC_SHA  ADH-CAMELLIA128-SHA
 \& TLS_DH_anon_WITH_CAMELLIA_256_CBC_SHA  ADH-CAMELLIA256-SHA
 .Ve
+.Sh "\s-1SEED\s0 ciphersuites from \s-1RFC4162\s0, extending \s-1TLS\s0 v1.0"
+.IX Subsection "SEED ciphersuites from RFC4162, extending TLS v1.0"
+.Vb 1
+\& TLS_RSA_WITH_SEED_CBC_SHA              SEED-SHA
+.Ve
+.PP
+.Vb 2
+\& TLS_DH_DSS_WITH_SEED_CBC_SHA           Not implemented.
+\& TLS_DH_RSA_WITH_SEED_CBC_SHA           Not implemented.
+.Ve
+.PP
+.Vb 2
+\& TLS_DHE_DSS_WITH_SEED_CBC_SHA          DHE-DSS-SEED-SHA
+\& TLS_DHE_RSA_WITH_SEED_CBC_SHA          DHE-RSA-SEED-SHA
+.Ve
+.PP
+.Vb 1
+\& TLS_DH_anon_WITH_SEED_CBC_SHA          ADH-SEED-SHA
+.Ve
 .Sh "Additional Export 1024 and other cipher suites"
 .IX Subsection "Additional Export 1024 and other cipher suites"
 Note: these ciphers can also be used in \s-1SSL\s0 v3.
diff --git a/secure/usr.bin/openssl/man/crl.1 b/secure/usr.bin/openssl/man/crl.1
index 7854cc5..37d56de 100644
--- a/secure/usr.bin/openssl/man/crl.1
+++ b/secure/usr.bin/openssl/man/crl.1
@@ -1,4 +1,4 @@
-.\" Automatically generated by Pod::Man v1.37, Pod::Parser v1.35
+.\" Automatically generated by Pod::Man v1.37, Pod::Parser v1.37
 .\"
 .\" Standard preamble:
 .\" ========================================================================
@@ -129,7 +129,7 @@
 .\" ========================================================================
 .\"
 .IX Title "CRL 1"
-.TH CRL 1 "2007-03-15" "0.9.8e" "OpenSSL"
+.TH CRL 1 "2009-06-14" "0.9.8k" "OpenSSL"
 .SH "NAME"
 crl \- CRL utility
 .SH "SYNOPSIS"
diff --git a/secure/usr.bin/openssl/man/crl2pkcs7.1 b/secure/usr.bin/openssl/man/crl2pkcs7.1
index 31ed365..b1a7f35 100644
--- a/secure/usr.bin/openssl/man/crl2pkcs7.1
+++ b/secure/usr.bin/openssl/man/crl2pkcs7.1
@@ -1,4 +1,4 @@
-.\" Automatically generated by Pod::Man v1.37, Pod::Parser v1.35
+.\" Automatically generated by Pod::Man v1.37, Pod::Parser v1.37
 .\"
 .\" Standard preamble:
 .\" ========================================================================
@@ -129,7 +129,7 @@
 .\" ========================================================================
 .\"
 .IX Title "CRL2PKCS7 1"
-.TH CRL2PKCS7 1 "2007-03-15" "0.9.8e" "OpenSSL"
+.TH CRL2PKCS7 1 "2009-06-14" "0.9.8k" "OpenSSL"
 .SH "NAME"
 crl2pkcs7 \- Create a PKCS#7 structure from a CRL and certificates.
 .SH "SYNOPSIS"
diff --git a/secure/usr.bin/openssl/man/dgst.1 b/secure/usr.bin/openssl/man/dgst.1
index 8b3f991..3e19b9c 100644
--- a/secure/usr.bin/openssl/man/dgst.1
+++ b/secure/usr.bin/openssl/man/dgst.1
@@ -1,4 +1,4 @@
-.\" Automatically generated by Pod::Man v1.37, Pod::Parser v1.35
+.\" Automatically generated by Pod::Man v1.37, Pod::Parser v1.37
 .\"
 .\" Standard preamble:
 .\" ========================================================================
@@ -129,7 +129,7 @@
 .\" ========================================================================
 .\"
 .IX Title "DGST 1"
-.TH DGST 1 "2007-03-15" "0.9.8e" "OpenSSL"
+.TH DGST 1 "2009-06-14" "0.9.8k" "OpenSSL"
 .SH "NAME"
 dgst, md5, md4, md2, sha1, sha, mdc2, ripemd160 \- message digests
 .SH "SYNOPSIS"
@@ -146,6 +146,7 @@ dgst, md5, md4, md2, sha1, sha, mdc2, ripemd160 \- message digests
 [\fB\-verify filename\fR]
 [\fB\-prverify filename\fR]
 [\fB\-signature filename\fR]
+[\fB\-hmac key\fR]
 [\fBfile...\fR]
 .PP
 [\fBmd5|md4|md2|sha1|sha|mdc2|ripemd160\fR]
@@ -192,6 +193,9 @@ verify the signature using the  the private key in \*(L"filename\*(R".
 .IP "\fB\-signature filename\fR" 4
 .IX Item "-signature filename"
 the actual signature to verify.
+.IP "\fB\-hmac key\fR" 4
+.IX Item "-hmac key"
+create a hashed \s-1MAC\s0 using \*(L"key\*(R".
 .IP "\fB\-rand file(s)\fR" 4
 .IX Item "-rand file(s)"
 a file or files containing random data used to seed the random number
diff --git a/secure/usr.bin/openssl/man/dhparam.1 b/secure/usr.bin/openssl/man/dhparam.1
index 7407798..9b03326 100644
--- a/secure/usr.bin/openssl/man/dhparam.1
+++ b/secure/usr.bin/openssl/man/dhparam.1
@@ -1,4 +1,4 @@
-.\" Automatically generated by Pod::Man v1.37, Pod::Parser v1.35
+.\" Automatically generated by Pod::Man v1.37, Pod::Parser v1.37
 .\"
 .\" Standard preamble:
 .\" ========================================================================
@@ -129,7 +129,7 @@
 .\" ========================================================================
 .\"
 .IX Title "DHPARAM 1"
-.TH DHPARAM 1 "2007-03-15" "0.9.8e" "OpenSSL"
+.TH DHPARAM 1 "2009-06-14" "0.9.8k" "OpenSSL"
 .SH "NAME"
 dhparam \- DH parameter manipulation and generation
 .SH "SYNOPSIS"
diff --git a/secure/usr.bin/openssl/man/dsa.1 b/secure/usr.bin/openssl/man/dsa.1
index 82cd309..b8d0210 100644
--- a/secure/usr.bin/openssl/man/dsa.1
+++ b/secure/usr.bin/openssl/man/dsa.1
@@ -1,4 +1,4 @@
-.\" Automatically generated by Pod::Man v1.37, Pod::Parser v1.35
+.\" Automatically generated by Pod::Man v1.37, Pod::Parser v1.37
 .\"
 .\" Standard preamble:
 .\" ========================================================================
@@ -129,7 +129,7 @@
 .\" ========================================================================
 .\"
 .IX Title "DSA 1"
-.TH DSA 1 "2007-03-15" "0.9.8e" "OpenSSL"
+.TH DSA 1 "2009-06-14" "0.9.8k" "OpenSSL"
 .SH "NAME"
 dsa \- DSA key processing
 .SH "SYNOPSIS"
diff --git a/secure/usr.bin/openssl/man/dsaparam.1 b/secure/usr.bin/openssl/man/dsaparam.1
index 27db56b..3e2d9a7 100644
--- a/secure/usr.bin/openssl/man/dsaparam.1
+++ b/secure/usr.bin/openssl/man/dsaparam.1
@@ -1,4 +1,4 @@
-.\" Automatically generated by Pod::Man v1.37, Pod::Parser v1.35
+.\" Automatically generated by Pod::Man v1.37, Pod::Parser v1.37
 .\"
 .\" Standard preamble:
 .\" ========================================================================
@@ -129,7 +129,7 @@
 .\" ========================================================================
 .\"
 .IX Title "DSAPARAM 1"
-.TH DSAPARAM 1 "2007-03-15" "0.9.8e" "OpenSSL"
+.TH DSAPARAM 1 "2009-06-14" "0.9.8k" "OpenSSL"
 .SH "NAME"
 dsaparam \- DSA parameter manipulation and generation
 .SH "SYNOPSIS"
diff --git a/secure/usr.bin/openssl/man/ec.1 b/secure/usr.bin/openssl/man/ec.1
index 686cda05..cefd8d8 100644
--- a/secure/usr.bin/openssl/man/ec.1
+++ b/secure/usr.bin/openssl/man/ec.1
@@ -1,4 +1,4 @@
-.\" Automatically generated by Pod::Man v1.37, Pod::Parser v1.35
+.\" Automatically generated by Pod::Man v1.37, Pod::Parser v1.37
 .\"
 .\" Standard preamble:
 .\" ========================================================================
@@ -129,7 +129,7 @@
 .\" ========================================================================
 .\"
 .IX Title "EC 1"
-.TH EC 1 "2007-03-15" "0.9.8e" "OpenSSL"
+.TH EC 1 "2009-06-14" "0.9.8k" "OpenSSL"
 .SH "NAME"
 ec \- EC key processing
 .SH "SYNOPSIS"
diff --git a/secure/usr.bin/openssl/man/ecparam.1 b/secure/usr.bin/openssl/man/ecparam.1
index 032af3a..acd10ce 100644
--- a/secure/usr.bin/openssl/man/ecparam.1
+++ b/secure/usr.bin/openssl/man/ecparam.1
@@ -1,4 +1,4 @@
-.\" Automatically generated by Pod::Man v1.37, Pod::Parser v1.35
+.\" Automatically generated by Pod::Man v1.37, Pod::Parser v1.37
 .\"
 .\" Standard preamble:
 .\" ========================================================================
@@ -129,7 +129,7 @@
 .\" ========================================================================
 .\"
 .IX Title "ECPARAM 1"
-.TH ECPARAM 1 "2007-03-15" "0.9.8e" "OpenSSL"
+.TH ECPARAM 1 "2009-06-14" "0.9.8k" "OpenSSL"
 .SH "NAME"
 ecparam \- EC parameter manipulation and generation
 .SH "SYNOPSIS"
diff --git a/secure/usr.bin/openssl/man/enc.1 b/secure/usr.bin/openssl/man/enc.1
index 8341ca7..f18d207 100644
--- a/secure/usr.bin/openssl/man/enc.1
+++ b/secure/usr.bin/openssl/man/enc.1
@@ -1,4 +1,4 @@
-.\" Automatically generated by Pod::Man v1.37, Pod::Parser v1.35
+.\" Automatically generated by Pod::Man v1.37, Pod::Parser v1.37
 .\"
 .\" Standard preamble:
 .\" ========================================================================
@@ -129,7 +129,7 @@
 .\" ========================================================================
 .\"
 .IX Title "ENC 1"
-.TH ENC 1 "2007-03-15" "0.9.8e" "OpenSSL"
+.TH ENC 1 "2009-06-14" "0.9.8k" "OpenSSL"
 .SH "NAME"
 enc \- symmetric cipher routines
 .SH "SYNOPSIS"
@@ -350,6 +350,16 @@ Blowfish and \s-1RC5\s0 algorithms use a 128 bit key.
 \& rc5-ecb            RC5 cipher in ECB mode
 \& rc5-ofb            RC5 cipher in OFB mode
 .Ve
+.PP
+.Vb 7
+\& aes-[128|192|256]-cbc  128/192/256 bit AES in CBC mode
+\& aes-[128|192|256]      Alias for aes-[128|192|256]-cbc
+\& aes-[128|192|256]-cfb  128/192/256 bit AES in 128 bit CFB mode
+\& aes-[128|192|256]-cfb1 128/192/256 bit AES in 1 bit CFB mode
+\& aes-[128|192|256]-cfb8 128/192/256 bit AES in 8 bit CFB mode
+\& aes-[128|192|256]-ecb  128/192/256 bit AES in ECB mode
+\& aes-[128|192|256]-ofb  128/192/256 bit AES in OFB mode
+.Ve
 .SH "EXAMPLES"
 .IX Header "EXAMPLES"
 Just base64 encode a binary file:
diff --git a/secure/usr.bin/openssl/man/errstr.1 b/secure/usr.bin/openssl/man/errstr.1
index 3c91434..536595d 100644
--- a/secure/usr.bin/openssl/man/errstr.1
+++ b/secure/usr.bin/openssl/man/errstr.1
@@ -1,4 +1,4 @@
-.\" Automatically generated by Pod::Man v1.37, Pod::Parser v1.35
+.\" Automatically generated by Pod::Man v1.37, Pod::Parser v1.37
 .\"
 .\" Standard preamble:
 .\" ========================================================================
@@ -129,7 +129,7 @@
 .\" ========================================================================
 .\"
 .IX Title "ERRSTR 1"
-.TH ERRSTR 1 "2007-03-15" "0.9.8e" "OpenSSL"
+.TH ERRSTR 1 "2009-06-14" "0.9.8k" "OpenSSL"
 .SH "NAME"
 errstr \- lookup error codes
 .SH "SYNOPSIS"
diff --git a/secure/usr.bin/openssl/man/gendsa.1 b/secure/usr.bin/openssl/man/gendsa.1
index 9de82af..3b0a02e 100644
--- a/secure/usr.bin/openssl/man/gendsa.1
+++ b/secure/usr.bin/openssl/man/gendsa.1
@@ -1,4 +1,4 @@
-.\" Automatically generated by Pod::Man v1.37, Pod::Parser v1.35
+.\" Automatically generated by Pod::Man v1.37, Pod::Parser v1.37
 .\"
 .\" Standard preamble:
 .\" ========================================================================
@@ -129,7 +129,7 @@
 .\" ========================================================================
 .\"
 .IX Title "GENDSA 1"
-.TH GENDSA 1 "2007-03-15" "0.9.8e" "OpenSSL"
+.TH GENDSA 1 "2009-06-14" "0.9.8k" "OpenSSL"
 .SH "NAME"
 gendsa \- generate a DSA private key from a set of parameters
 .SH "SYNOPSIS"
diff --git a/secure/usr.bin/openssl/man/genrsa.1 b/secure/usr.bin/openssl/man/genrsa.1
index 6bcde81..a744a48 100644
--- a/secure/usr.bin/openssl/man/genrsa.1
+++ b/secure/usr.bin/openssl/man/genrsa.1
@@ -1,4 +1,4 @@
-.\" Automatically generated by Pod::Man v1.37, Pod::Parser v1.35
+.\" Automatically generated by Pod::Man v1.37, Pod::Parser v1.37
 .\"
 .\" Standard preamble:
 .\" ========================================================================
@@ -129,7 +129,7 @@
 .\" ========================================================================
 .\"
 .IX Title "GENRSA 1"
-.TH GENRSA 1 "2007-03-15" "0.9.8e" "OpenSSL"
+.TH GENRSA 1 "2009-06-14" "0.9.8k" "OpenSSL"
 .SH "NAME"
 genrsa \- generate an RSA private key
 .SH "SYNOPSIS"
diff --git a/secure/usr.bin/openssl/man/nseq.1 b/secure/usr.bin/openssl/man/nseq.1
index 22e7874..b859103 100644
--- a/secure/usr.bin/openssl/man/nseq.1
+++ b/secure/usr.bin/openssl/man/nseq.1
@@ -1,4 +1,4 @@
-.\" Automatically generated by Pod::Man v1.37, Pod::Parser v1.35
+.\" Automatically generated by Pod::Man v1.37, Pod::Parser v1.37
 .\"
 .\" Standard preamble:
 .\" ========================================================================
@@ -129,7 +129,7 @@
 .\" ========================================================================
 .\"
 .IX Title "NSEQ 1"
-.TH NSEQ 1 "2007-03-15" "0.9.8e" "OpenSSL"
+.TH NSEQ 1 "2009-06-14" "0.9.8k" "OpenSSL"
 .SH "NAME"
 nseq \- create or examine a netscape certificate sequence
 .SH "SYNOPSIS"
diff --git a/secure/usr.bin/openssl/man/ocsp.1 b/secure/usr.bin/openssl/man/ocsp.1
index 9998d8f..b977601 100644
--- a/secure/usr.bin/openssl/man/ocsp.1
+++ b/secure/usr.bin/openssl/man/ocsp.1
@@ -1,4 +1,4 @@
-.\" Automatically generated by Pod::Man v1.37, Pod::Parser v1.35
+.\" Automatically generated by Pod::Man v1.37, Pod::Parser v1.37
 .\"
 .\" Standard preamble:
 .\" ========================================================================
@@ -129,7 +129,7 @@
 .\" ========================================================================
 .\"
 .IX Title "OCSP 1"
-.TH OCSP 1 "2007-03-15" "0.9.8e" "OpenSSL"
+.TH OCSP 1 "2009-06-14" "0.9.8k" "OpenSSL"
 .SH "NAME"
 ocsp \- Online Certificate Status Protocol utility
 .SH "SYNOPSIS"
@@ -196,7 +196,7 @@ specify output filename, default is standard output.
 .IX Item "-issuer filename"
 This specifies the current issuer certificate. This option can be used
 multiple times. The certificate specified in \fBfilename\fR must be in
-\&\s-1PEM\s0 format.
+\&\s-1PEM\s0 format. This option \fB\s-1MUST\s0\fR come before any \fB\-cert\fR options.
 .IP "\fB\-cert filename\fR" 4
 .IX Item "-cert filename"
 Add the certificate \fBfilename\fR to the request. The issuer certificate
@@ -256,14 +256,14 @@ certificate from the response: this option can be used to supply the necessary
 certificate in such cases.
 .IP "\fB\-trust_other\fR" 4
 .IX Item "-trust_other"
-the certificates specified by the \fB\-verify_certs\fR option should be explicitly
+the certificates specified by the \fB\-verify_other\fR option should be explicitly
 trusted and no additional checks will be performed on them. This is useful
 when the complete responder certificate chain is not available or trusting a
 root \s-1CA\s0 is not appropriate.
 .IP "\fB\-VAfile file\fR" 4
 .IX Item "-VAfile file"
 file containing explicitly trusted responder certificates. Equivalent to the
-\&\fB\-verify_certs\fR and \fB\-trust_other\fR options.
+\&\fB\-verify_other\fR and \fB\-trust_other\fR options.
 .IP "\fB\-noverify\fR" 4
 .IX Item "-noverify"
 don't attempt to verify the \s-1OCSP\s0 response signature or the nonce values. This
@@ -273,7 +273,7 @@ of the responders certificate.
 .IX Item "-no_intern"
 ignore certificates contained in the \s-1OCSP\s0 response when searching for the
 signers certificate. With this option the signers certificate must be specified
-with either the \fB\-verify_certs\fR or \fB\-VAfile\fR options.
+with either the \fB\-verify_other\fR or \fB\-VAfile\fR options.
 .IP "\fB\-no_signature_verify\fR" 4
 .IX Item "-no_signature_verify"
 don't check the signature on the \s-1OCSP\s0 response. Since this option tolerates invalid
diff --git a/secure/usr.bin/openssl/man/openssl.1 b/secure/usr.bin/openssl/man/openssl.1
index c5a5bc6..c5f0010 100644
--- a/secure/usr.bin/openssl/man/openssl.1
+++ b/secure/usr.bin/openssl/man/openssl.1
@@ -1,4 +1,4 @@
-.\" Automatically generated by Pod::Man v1.37, Pod::Parser v1.35
+.\" Automatically generated by Pod::Man v1.37, Pod::Parser v1.37
 .\"
 .\" Standard preamble:
 .\" ========================================================================
@@ -129,7 +129,7 @@
 .\" ========================================================================
 .\"
 .IX Title "OPENSSL 1"
-.TH OPENSSL 1 "2007-03-15" "0.9.8e" "OpenSSL"
+.TH OPENSSL 1 "2009-06-14" "0.9.8k" "OpenSSL"
 .SH "NAME"
 openssl \- OpenSSL command line tool
 .SH "SYNOPSIS"
@@ -309,6 +309,18 @@ X.509 Certificate Data Management.
 .IP "\fBsha1\fR" 10
 .IX Item "sha1"
 \&\s-1SHA\-1\s0 Digest
+.IP "\fBsha224\fR" 10
+.IX Item "sha224"
+\&\s-1SHA\-224\s0 Digest
+.IP "\fBsha256\fR" 10
+.IX Item "sha256"
+\&\s-1SHA\-256\s0 Digest
+.IP "\fBsha384\fR" 10
+.IX Item "sha384"
+\&\s-1SHA\-384\s0 Digest
+.IP "\fBsha512\fR" 10
+.IX Item "sha512"
+\&\s-1SHA\-512\s0 Digest
 .Sh "\s-1ENCODING\s0 \s-1AND\s0 \s-1CIPHER\s0 \s-1COMMANDS\s0"
 .IX Subsection "ENCODING AND CIPHER COMMANDS"
 .IP "\fBbase64\fR" 10
diff --git a/secure/usr.bin/openssl/man/passwd.1 b/secure/usr.bin/openssl/man/passwd.1
index aa0e04a..ea26bdb 100644
--- a/secure/usr.bin/openssl/man/passwd.1
+++ b/secure/usr.bin/openssl/man/passwd.1
@@ -1,4 +1,4 @@
-.\" Automatically generated by Pod::Man v1.37, Pod::Parser v1.35
+.\" Automatically generated by Pod::Man v1.37, Pod::Parser v1.37
 .\"
 .\" Standard preamble:
 .\" ========================================================================
@@ -129,7 +129,7 @@
 .\" ========================================================================
 .\"
 .IX Title "PASSWD 1"
-.TH PASSWD 1 "2007-03-15" "0.9.8e" "OpenSSL"
+.TH PASSWD 1 "2009-06-14" "0.9.8k" "OpenSSL"
 .SH "NAME"
 passwd \- compute password hashes
 .SH "SYNOPSIS"
diff --git a/secure/usr.bin/openssl/man/pkcs12.1 b/secure/usr.bin/openssl/man/pkcs12.1
index 9503cc0..fa53df6 100644
--- a/secure/usr.bin/openssl/man/pkcs12.1
+++ b/secure/usr.bin/openssl/man/pkcs12.1
@@ -1,4 +1,4 @@
-.\" Automatically generated by Pod::Man v1.37, Pod::Parser v1.35
+.\" Automatically generated by Pod::Man v1.37, Pod::Parser v1.37
 .\"
 .\" Standard preamble:
 .\" ========================================================================
@@ -129,7 +129,7 @@
 .\" ========================================================================
 .\"
 .IX Title "PKCS12 1"
-.TH PKCS12 1 "2007-03-15" "0.9.8e" "OpenSSL"
+.TH PKCS12 1 "2009-06-14" "0.9.8k" "OpenSSL"
 .SH "NAME"
 pkcs12 \- PKCS#12 file utility
 .SH "SYNOPSIS"
diff --git a/secure/usr.bin/openssl/man/pkcs7.1 b/secure/usr.bin/openssl/man/pkcs7.1
index b9edb7b..fc0a081 100644
--- a/secure/usr.bin/openssl/man/pkcs7.1
+++ b/secure/usr.bin/openssl/man/pkcs7.1
@@ -1,4 +1,4 @@
-.\" Automatically generated by Pod::Man v1.37, Pod::Parser v1.35
+.\" Automatically generated by Pod::Man v1.37, Pod::Parser v1.37
 .\"
 .\" Standard preamble:
 .\" ========================================================================
@@ -129,7 +129,7 @@
 .\" ========================================================================
 .\"
 .IX Title "PKCS7 1"
-.TH PKCS7 1 "2007-03-15" "0.9.8e" "OpenSSL"
+.TH PKCS7 1 "2009-06-14" "0.9.8k" "OpenSSL"
 .SH "NAME"
 pkcs7 \- PKCS#7 utility
 .SH "SYNOPSIS"
diff --git a/secure/usr.bin/openssl/man/pkcs8.1 b/secure/usr.bin/openssl/man/pkcs8.1
index b769c65..66953e3 100644
--- a/secure/usr.bin/openssl/man/pkcs8.1
+++ b/secure/usr.bin/openssl/man/pkcs8.1
@@ -1,4 +1,4 @@
-.\" Automatically generated by Pod::Man v1.37, Pod::Parser v1.35
+.\" Automatically generated by Pod::Man v1.37, Pod::Parser v1.37
 .\"
 .\" Standard preamble:
 .\" ========================================================================
@@ -129,7 +129,7 @@
 .\" ========================================================================
 .\"
 .IX Title "PKCS8 1"
-.TH PKCS8 1 "2007-03-15" "0.9.8e" "OpenSSL"
+.TH PKCS8 1 "2009-06-14" "0.9.8k" "OpenSSL"
 .SH "NAME"
 pkcs8 \- PKCS#8 format private key conversion tool
 .SH "SYNOPSIS"
diff --git a/secure/usr.bin/openssl/man/rand.1 b/secure/usr.bin/openssl/man/rand.1
index dcb5de2..a7929ed 100644
--- a/secure/usr.bin/openssl/man/rand.1
+++ b/secure/usr.bin/openssl/man/rand.1
@@ -1,4 +1,4 @@
-.\" Automatically generated by Pod::Man v1.37, Pod::Parser v1.35
+.\" Automatically generated by Pod::Man v1.37, Pod::Parser v1.37
 .\"
 .\" Standard preamble:
 .\" ========================================================================
@@ -129,7 +129,7 @@
 .\" ========================================================================
 .\"
 .IX Title "RAND 1"
-.TH RAND 1 "2007-03-15" "0.9.8e" "OpenSSL"
+.TH RAND 1 "2009-06-14" "0.9.8k" "OpenSSL"
 .SH "NAME"
 rand \- generate pseudo\-random bytes
 .SH "SYNOPSIS"
@@ -138,6 +138,7 @@ rand \- generate pseudo\-random bytes
 [\fB\-out\fR \fIfile\fR]
 [\fB\-rand\fR \fIfile(s)\fR]
 [\fB\-base64\fR]
+[\fB\-hex\fR]
 \&\fInum\fR
 .SH "DESCRIPTION"
 .IX Header "DESCRIPTION"
@@ -162,6 +163,9 @@ all others.
 .IP "\fB\-base64\fR" 4
 .IX Item "-base64"
 Perform base64 encoding on the output.
+.IP "\fB\-hex\fR" 4
+.IX Item "-hex"
+Show the output as a hex string.
 .SH "SEE ALSO"
 .IX Header "SEE ALSO"
 \&\fIRAND_bytes\fR\|(3)
diff --git a/secure/usr.bin/openssl/man/req.1 b/secure/usr.bin/openssl/man/req.1
index 62c178c..7476a97 100644
--- a/secure/usr.bin/openssl/man/req.1
+++ b/secure/usr.bin/openssl/man/req.1
@@ -1,4 +1,4 @@
-.\" Automatically generated by Pod::Man v1.37, Pod::Parser v1.35
+.\" Automatically generated by Pod::Man v1.37, Pod::Parser v1.37
 .\"
 .\" Standard preamble:
 .\" ========================================================================
@@ -129,7 +129,7 @@
 .\" ========================================================================
 .\"
 .IX Title "REQ 1"
-.TH REQ 1 "2007-03-15" "0.9.8e" "OpenSSL"
+.TH REQ 1 "2009-06-14" "0.9.8k" "OpenSSL"
 .SH "NAME"
 req \- PKCS#10 certificate request and certificate generating utility.
 .SH "SYNOPSIS"
diff --git a/secure/usr.bin/openssl/man/rsa.1 b/secure/usr.bin/openssl/man/rsa.1
index 9b360cd..1b3ee49 100644
--- a/secure/usr.bin/openssl/man/rsa.1
+++ b/secure/usr.bin/openssl/man/rsa.1
@@ -1,4 +1,4 @@
-.\" Automatically generated by Pod::Man v1.37, Pod::Parser v1.35
+.\" Automatically generated by Pod::Man v1.37, Pod::Parser v1.37
 .\"
 .\" Standard preamble:
 .\" ========================================================================
@@ -129,7 +129,7 @@
 .\" ========================================================================
 .\"
 .IX Title "RSA 1"
-.TH RSA 1 "2007-03-15" "0.9.8e" "OpenSSL"
+.TH RSA 1 "2009-06-14" "0.9.8k" "OpenSSL"
 .SH "NAME"
 rsa \- RSA key processing tool
 .SH "SYNOPSIS"
diff --git a/secure/usr.bin/openssl/man/rsautl.1 b/secure/usr.bin/openssl/man/rsautl.1
index 23166c3..ab83550 100644
--- a/secure/usr.bin/openssl/man/rsautl.1
+++ b/secure/usr.bin/openssl/man/rsautl.1
@@ -1,4 +1,4 @@
-.\" Automatically generated by Pod::Man v1.37, Pod::Parser v1.35
+.\" Automatically generated by Pod::Man v1.37, Pod::Parser v1.37
 .\"
 .\" Standard preamble:
 .\" ========================================================================
@@ -129,7 +129,7 @@
 .\" ========================================================================
 .\"
 .IX Title "RSAUTL 1"
-.TH RSAUTL 1 "2007-03-15" "0.9.8e" "OpenSSL"
+.TH RSAUTL 1 "2009-06-14" "0.9.8k" "OpenSSL"
 .SH "NAME"
 rsautl \- RSA utility
 .SH "SYNOPSIS"
@@ -275,7 +275,7 @@ The final \s-1BIT\s0 \s-1STRING\s0 contains the actual signature. It can be extr
 The certificate public key can be extracted with:
 .PP
 .Vb 1
-\& openssl x509 -in test/testx509.pem -pubout -noout >pubkey.pem
+\& openssl x509 -in test/testx509.pem -pubkey -noout >pubkey.pem
 .Ve
 .PP
 The signature can be analysed with:
diff --git a/secure/usr.bin/openssl/man/s_client.1 b/secure/usr.bin/openssl/man/s_client.1
index 907aa2c..9885d95 100644
--- a/secure/usr.bin/openssl/man/s_client.1
+++ b/secure/usr.bin/openssl/man/s_client.1
@@ -1,4 +1,4 @@
-.\" Automatically generated by Pod::Man v1.37, Pod::Parser v1.35
+.\" Automatically generated by Pod::Man v1.37, Pod::Parser v1.37
 .\"
 .\" Standard preamble:
 .\" ========================================================================
@@ -129,7 +129,7 @@
 .\" ========================================================================
 .\"
 .IX Title "S_CLIENT 1"
-.TH S_CLIENT 1 "2007-03-15" "0.9.8e" "OpenSSL"
+.TH S_CLIENT 1 "2009-06-14" "0.9.8k" "OpenSSL"
 .SH "NAME"
 s_client \- SSL/TLS client program
 .SH "SYNOPSIS"
@@ -165,6 +165,10 @@ s_client \- SSL/TLS client program
 [\fB\-cipher cipherlist\fR]
 [\fB\-starttls protocol\fR]
 [\fB\-engine id\fR]
+[\fB\-tlsextdebug\fR]
+[\fB\-no_ticket\fR]
+[\fB\-sess_out filename\fR]
+[\fB\-sess_in filename\fR]
 [\fB\-rand file(s)\fR]
 .SH "DESCRIPTION"
 .IX Header "DESCRIPTION"
@@ -284,6 +288,22 @@ command for more information.
 send the protocol-specific message(s) to switch to \s-1TLS\s0 for communication.
 \&\fBprotocol\fR is a keyword for the intended protocol.  Currently, the only
 supported keywords are \*(L"smtp\*(R", \*(L"pop3\*(R", \*(L"imap\*(R", and \*(L"ftp\*(R".
+.IP "\fB\-tlsextdebug\fR" 4
+.IX Item "-tlsextdebug"
+print out a hex dump of any \s-1TLS\s0 extensions received from the server. Note: this
+option is only available if extension support is explicitly enabled at compile
+time
+.IP "\fB\-no_ticket\fR" 4
+.IX Item "-no_ticket"
+disable RFC4507bis session ticket support. Note: this option is only available
+if extension support is explicitly enabled at compile time
+.IP "\fB\-sess_out filename\fR" 4
+.IX Item "-sess_out filename"
+output \s-1SSL\s0 session to \fBfilename\fR
+.IP "\fB\-sess_in sess.pem\fR" 4
+.IX Item "-sess_in sess.pem"
+load \s-1SSL\s0 session from \fBfilename\fR. The client will attempt to resume a
+connection from this session.
 .IP "\fB\-engine id\fR" 4
 .IX Item "-engine id"
 specifying an engine (by it's unique \fBid\fR string) will cause \fBs_client\fR
@@ -340,6 +360,13 @@ on the command line is no guarantee that the certificate works.
 .PP
 If there are problems verifying a server certificate then the
 \&\fB\-showcerts\fR option can be used to show the whole chain.
+.PP
+Since the SSLv23 client hello cannot include compression methods or extensions
+these will only be supported if its use is disabled, for example by using the
+\&\fB\-no_sslv2\fR option.
+.PP
+\&\s-1TLS\s0 extensions are only supported in OpenSSL 0.9.8 if they are explictly
+enabled at compile time using for example the \fBenable-tlsext\fR switch.
 .SH "BUGS"
 .IX Header "BUGS"
 Because this program has a lot of options and also because some of
diff --git a/secure/usr.bin/openssl/man/s_server.1 b/secure/usr.bin/openssl/man/s_server.1
index 6306f20..27400a0 100644
--- a/secure/usr.bin/openssl/man/s_server.1
+++ b/secure/usr.bin/openssl/man/s_server.1
@@ -1,4 +1,4 @@
-.\" Automatically generated by Pod::Man v1.37, Pod::Parser v1.35
+.\" Automatically generated by Pod::Man v1.37, Pod::Parser v1.37
 .\"
 .\" Standard preamble:
 .\" ========================================================================
@@ -129,7 +129,7 @@
 .\" ========================================================================
 .\"
 .IX Title "S_SERVER 1"
-.TH S_SERVER 1 "2007-03-15" "0.9.8e" "OpenSSL"
+.TH S_SERVER 1 "2009-06-14" "0.9.8k" "OpenSSL"
 .SH "NAME"
 s_server \- SSL/TLS server program
 .SH "SYNOPSIS"
@@ -139,6 +139,8 @@ s_server \- SSL/TLS server program
 [\fB\-context id\fR]
 [\fB\-verify depth\fR]
 [\fB\-Verify depth\fR]
+[\fB\-crl_check\fR]
+[\fB\-crl_check_all\fR]
 [\fB\-cert filename\fR]
 [\fB\-certform DER|PEM\fR]
 [\fB\-key keyfile\fR]
@@ -175,6 +177,8 @@ s_server \- SSL/TLS server program
 [\fB\-WWW\fR]
 [\fB\-HTTP\fR]
 [\fB\-engine id\fR]
+[\fB\-tlsextdebug\fR]
+[\fB\-no_ticket\fR]
 [\fB\-id_prefix arg\fR]
 [\fB\-rand file(s)\fR]
 .SH "DESCRIPTION"
@@ -249,6 +253,11 @@ client certificate chain and makes the server request a certificate from
 the client. With the \fB\-verify\fR option a certificate is requested but the
 client does not have to send one, with the \fB\-Verify\fR option the client
 must supply a certificate or an error occurs.
+.IP "\fB\-crl_check\fR, \fB\-crl_check_all\fR" 4
+.IX Item "-crl_check, -crl_check_all"
+Check the peer certificate has not been revoked by its \s-1CA\s0.
+The \s-1CRL\s0(s) are appended to the certificate file. With the \fB\-crl_check_all\fR
+option all CRLs of all CAs in the chain are checked.
 .IP "\fB\-CApath directory\fR" 4
 .IX Item "-CApath directory"
 The directory to use for client certificate verification. This directory
@@ -301,6 +310,12 @@ the client sends a list of supported ciphers the first client cipher
 also included in the server list is used. Because the client specifies
 the preference order, the order of the server cipherlist irrelevant. See
 the \fBciphers\fR command for more information.
+.IP "\fB\-tlsextdebug\fR" 4
+.IX Item "-tlsextdebug"
+print out a hex dump of any \s-1TLS\s0 extensions received from the server.
+.IP "\fB\-no_ticket\fR" 4
+.IX Item "-no_ticket"
+disable RFC4507bis session ticket support. 
 .IP "\fB\-www\fR" 4
 .IX Item "-www"
 sends a status message back to the client when it connects. This includes
@@ -385,6 +400,9 @@ is strictly speaking a protocol violation, some \s-1SSL\s0 clients interpret thi
 mean any \s-1CA\s0 is acceptable. This is useful for debugging purposes.
 .PP
 The session parameters can printed out using the \fBsess_id\fR program.
+.PP
+\&\s-1TLS\s0 extensions are only supported in OpenSSL 0.9.8 if they are explictly
+enabled at compile time using for example the \fBenable-tlsext\fR switch.
 .SH "BUGS"
 .IX Header "BUGS"
 Because this program has a lot of options and also because some of
diff --git a/secure/usr.bin/openssl/man/s_time.1 b/secure/usr.bin/openssl/man/s_time.1
index fa869a2..daa6c77 100644
--- a/secure/usr.bin/openssl/man/s_time.1
+++ b/secure/usr.bin/openssl/man/s_time.1
@@ -1,4 +1,4 @@
-.\" Automatically generated by Pod::Man v1.37, Pod::Parser v1.35
+.\" Automatically generated by Pod::Man v1.37, Pod::Parser v1.37
 .\"
 .\" Standard preamble:
 .\" ========================================================================
@@ -129,7 +129,7 @@
 .\" ========================================================================
 .\"
 .IX Title "S_TIME 1"
-.TH S_TIME 1 "2007-03-15" "0.9.8e" "OpenSSL"
+.TH S_TIME 1 "2009-06-14" "0.9.8k" "OpenSSL"
 .SH "NAME"
 s_time \- SSL/TLS performance timing program
 .SH "SYNOPSIS"
diff --git a/secure/usr.bin/openssl/man/sess_id.1 b/secure/usr.bin/openssl/man/sess_id.1
index b28c5e6..d692006 100644
--- a/secure/usr.bin/openssl/man/sess_id.1
+++ b/secure/usr.bin/openssl/man/sess_id.1
@@ -1,4 +1,4 @@
-.\" Automatically generated by Pod::Man v1.37, Pod::Parser v1.35
+.\" Automatically generated by Pod::Man v1.37, Pod::Parser v1.37
 .\"
 .\" Standard preamble:
 .\" ========================================================================
@@ -129,7 +129,7 @@
 .\" ========================================================================
 .\"
 .IX Title "SESS_ID 1"
-.TH SESS_ID 1 "2007-03-15" "0.9.8e" "OpenSSL"
+.TH SESS_ID 1 "2009-06-14" "0.9.8k" "OpenSSL"
 .SH "NAME"
 sess_id \- SSL/TLS session handling utility
 .SH "SYNOPSIS"
diff --git a/secure/usr.bin/openssl/man/smime.1 b/secure/usr.bin/openssl/man/smime.1
index a1a6c9b..eb062ac 100644
--- a/secure/usr.bin/openssl/man/smime.1
+++ b/secure/usr.bin/openssl/man/smime.1
@@ -1,4 +1,4 @@
-.\" Automatically generated by Pod::Man v1.37, Pod::Parser v1.35
+.\" Automatically generated by Pod::Man v1.37, Pod::Parser v1.37
 .\"
 .\" Standard preamble:
 .\" ========================================================================
@@ -129,7 +129,7 @@
 .\" ========================================================================
 .\"
 .IX Title "SMIME 1"
-.TH SMIME 1 "2007-03-15" "0.9.8e" "OpenSSL"
+.TH SMIME 1 "2009-06-14" "0.9.8k" "OpenSSL"
 .SH "NAME"
 smime \- S/MIME utility
 .SH "SYNOPSIS"
diff --git a/secure/usr.bin/openssl/man/speed.1 b/secure/usr.bin/openssl/man/speed.1
index fa3eb8b..1d7b117 100644
--- a/secure/usr.bin/openssl/man/speed.1
+++ b/secure/usr.bin/openssl/man/speed.1
@@ -1,4 +1,4 @@
-.\" Automatically generated by Pod::Man v1.37, Pod::Parser v1.35
+.\" Automatically generated by Pod::Man v1.37, Pod::Parser v1.37
 .\"
 .\" Standard preamble:
 .\" ========================================================================
@@ -129,7 +129,7 @@
 .\" ========================================================================
 .\"
 .IX Title "SPEED 1"
-.TH SPEED 1 "2007-03-15" "0.9.8e" "OpenSSL"
+.TH SPEED 1 "2009-06-14" "0.9.8k" "OpenSSL"
 .SH "NAME"
 speed \- test library performance
 .SH "SYNOPSIS"
diff --git a/secure/usr.bin/openssl/man/spkac.1 b/secure/usr.bin/openssl/man/spkac.1
index 67ba530..5ca95aa 100644
--- a/secure/usr.bin/openssl/man/spkac.1
+++ b/secure/usr.bin/openssl/man/spkac.1
@@ -1,4 +1,4 @@
-.\" Automatically generated by Pod::Man v1.37, Pod::Parser v1.35
+.\" Automatically generated by Pod::Man v1.37, Pod::Parser v1.37
 .\"
 .\" Standard preamble:
 .\" ========================================================================
@@ -129,7 +129,7 @@
 .\" ========================================================================
 .\"
 .IX Title "SPKAC 1"
-.TH SPKAC 1 "2007-03-15" "0.9.8e" "OpenSSL"
+.TH SPKAC 1 "2009-06-14" "0.9.8k" "OpenSSL"
 .SH "NAME"
 spkac \- SPKAC printing and generating utility
 .SH "SYNOPSIS"
diff --git a/secure/usr.bin/openssl/man/verify.1 b/secure/usr.bin/openssl/man/verify.1
index b17eb20..93bd934 100644
--- a/secure/usr.bin/openssl/man/verify.1
+++ b/secure/usr.bin/openssl/man/verify.1
@@ -1,4 +1,4 @@
-.\" Automatically generated by Pod::Man v1.37, Pod::Parser v1.35
+.\" Automatically generated by Pod::Man v1.37, Pod::Parser v1.37
 .\"
 .\" Standard preamble:
 .\" ========================================================================
@@ -129,7 +129,7 @@
 .\" ========================================================================
 .\"
 .IX Title "VERIFY 1"
-.TH VERIFY 1 "2007-03-15" "0.9.8e" "OpenSSL"
+.TH VERIFY 1 "2009-06-14" "0.9.8k" "OpenSSL"
 .SH "NAME"
 verify \- Utility to verify certificates.
 .SH "SYNOPSIS"
@@ -276,8 +276,8 @@ the operation was successful.
 .IX Item "2 X509_V_ERR_UNABLE_TO_GET_ISSUER_CERT: unable to get issuer certificate"
 the issuer certificate could not be found: this occurs if the issuer certificate
 of an untrusted certificate cannot be found.
-.IP "\fB3 X509_V_ERR_UNABLE_TO_GET_CRL unable to get certificate \s-1CRL\s0\fR" 4
-.IX Item "3 X509_V_ERR_UNABLE_TO_GET_CRL unable to get certificate CRL"
+.IP "\fB3 X509_V_ERR_UNABLE_TO_GET_CRL: unable to get certificate \s-1CRL\s0\fR" 4
+.IX Item "3 X509_V_ERR_UNABLE_TO_GET_CRL: unable to get certificate CRL"
 the \s-1CRL\s0 of a certificate could not be found. Unused.
 .IP "\fB4 X509_V_ERR_UNABLE_TO_DECRYPT_CERT_SIGNATURE: unable to decrypt certificate's signature\fR" 4
 .IX Item "4 X509_V_ERR_UNABLE_TO_DECRYPT_CERT_SIGNATURE: unable to decrypt certificate's signature"
diff --git a/secure/usr.bin/openssl/man/version.1 b/secure/usr.bin/openssl/man/version.1
index dd2755a..49dcfd8 100644
--- a/secure/usr.bin/openssl/man/version.1
+++ b/secure/usr.bin/openssl/man/version.1
@@ -1,4 +1,4 @@
-.\" Automatically generated by Pod::Man v1.37, Pod::Parser v1.35
+.\" Automatically generated by Pod::Man v1.37, Pod::Parser v1.37
 .\"
 .\" Standard preamble:
 .\" ========================================================================
@@ -129,7 +129,7 @@
 .\" ========================================================================
 .\"
 .IX Title "VERSION 1"
-.TH VERSION 1 "2007-03-15" "0.9.8e" "OpenSSL"
+.TH VERSION 1 "2009-06-14" "0.9.8k" "OpenSSL"
 .SH "NAME"
 version \- print OpenSSL version information
 .SH "SYNOPSIS"
diff --git a/secure/usr.bin/openssl/man/x509.1 b/secure/usr.bin/openssl/man/x509.1
index 875ae931..4e35ff0 100644
--- a/secure/usr.bin/openssl/man/x509.1
+++ b/secure/usr.bin/openssl/man/x509.1
@@ -1,4 +1,4 @@
-.\" Automatically generated by Pod::Man v1.37, Pod::Parser v1.35
+.\" Automatically generated by Pod::Man v1.37, Pod::Parser v1.37
 .\"
 .\" Standard preamble:
 .\" ========================================================================
@@ -129,7 +129,7 @@
 .\" ========================================================================
 .\"
 .IX Title "X509 1"
-.TH X509 1 "2007-03-15" "0.9.8e" "OpenSSL"
+.TH X509 1 "2009-06-14" "0.9.8k" "OpenSSL"
 .SH "NAME"
 x509 \- Certificate display and signing utility
 .SH "SYNOPSIS"
@@ -260,7 +260,7 @@ name.
 outputs the \*(L"hash\*(R" of the certificate issuer name.
 .IP "\fB\-hash\fR" 4
 .IX Item "-hash"
-synonym for \*(L"\-hash\*(R" for backward compatibility reasons.
+synonym for \*(L"\-subject_hash\*(R" for backward compatibility reasons.
 .IP "\fB\-subject\fR" 4
 .IX Item "-subject"
 outputs the subject name.
diff --git a/secure/usr.bin/openssl/man/x509v3_config.1 b/secure/usr.bin/openssl/man/x509v3_config.1
index 2d79daa..b94a3d7 100644
--- a/secure/usr.bin/openssl/man/x509v3_config.1
+++ b/secure/usr.bin/openssl/man/x509v3_config.1
@@ -1,4 +1,4 @@
-.\" Automatically generated by Pod::Man v1.37, Pod::Parser v1.35
+.\" Automatically generated by Pod::Man v1.37, Pod::Parser v1.37
 .\"
 .\" Standard preamble:
 .\" ========================================================================
@@ -129,7 +129,7 @@
 .\" ========================================================================
 .\"
 .IX Title "X509V3_CONFIG 1"
-.TH X509V3_CONFIG 1 "2007-03-15" "0.9.8e" "OpenSSL"
+.TH X509V3_CONFIG 1 "2009-06-14" "0.9.8k" "OpenSSL"
 .SH "NAME"
 x509v3_config \- X509 V3 certificate extension configuration format
 .SH "DESCRIPTION"