Hello, Some typos in the openssl man pages were discovered (see NetBSD's PR misc/19627 http://www.NetBSD.org/cgi-bin/query-pr-single.pl?number=19627), attached please find a patch to correct them.
Cheers, -Jan -- http://www.netbsd.org - Multiarchitecture OS, no hype required.
Index: src/lib/libcrypto/man/openssl_rand.1 diff -c src/lib/libcrypto/man/openssl_rand.1:1.8 src/lib/libcrypto/man/openssl_rand.1:1.9 *** src/lib/libcrypto/man/openssl_rand.1:1.8 Fri Aug 9 19:15:46 2002 --- src/lib/libcrypto/man/openssl_rand.1 Wed Jan 1 23:43:13 2003 *************** *** 156,162 **** .SH "DESCRIPTION" .IX Header "DESCRIPTION" The \fBrand\fR command outputs \fInum\fR pseudo-random bytes after seeding ! the random number generater once. As in other \fBopenssl\fR command line tools, \s-1PRNG\s0 seeding uses the file \fI$HOME/\fR\fB.rnd\fR or \fB.rnd\fR in addition to the files given in the \fB\-rand\fR option. A new \&\fI$HOME\fR/\fB.rnd\fR or \fB.rnd\fR file will be written back if enough --- 156,162 ---- .SH "DESCRIPTION" .IX Header "DESCRIPTION" The \fBrand\fR command outputs \fInum\fR pseudo-random bytes after seeding ! the random number generator once. As in other \fBopenssl\fR command line tools, \s-1PRNG\s0 seeding uses the file \fI$HOME/\fR\fB.rnd\fR or \fB.rnd\fR in addition to the files given in the \fB\-rand\fR option. A new \&\fI$HOME\fR/\fB.rnd\fR or \fB.rnd\fR file will be written back if enough Index: src/lib/libcrypto/man/openssl_req.1 diff -c src/lib/libcrypto/man/openssl_req.1:1.8 src/lib/libcrypto/man/openssl_req.1:1.9 *** src/lib/libcrypto/man/openssl_req.1:1.8 Fri Aug 9 19:15:46 2002 --- src/lib/libcrypto/man/openssl_req.1 Wed Jan 1 23:43:13 2003 *************** *** 445,451 **** The actual permitted field names are any object identifier short or long names. These are compiled into OpenSSL and include the usual values such as commonName, countryName, localityName, organizationName, ! organizationUnitName, stateOrPrivinceName. Additionally emailAddress is include as well as name, surname, givenName initials and dnQualifier. .PP Additional object identifiers can be defined with the \fBoid_file\fR or --- 445,451 ---- The actual permitted field names are any object identifier short or long names. These are compiled into OpenSSL and include the usual values such as commonName, countryName, localityName, organizationName, ! organizationUnitName, stateOrProvinceName. Additionally emailAddress is include as well as name, surname, givenName initials and dnQualifier. .PP Additional object identifiers can be defined with the \fBoid_file\fR or *************** *** 508,520 **** \& countryName_max = 2 .Ve .Vb 1 ! \& localityName = Locality Name (eg, city) .Ve .Vb 1 ! \& organizationalUnitName = Organizational Unit Name (eg, section) .Ve .Vb 2 ! \& commonName = Common Name (eg, YOUR name) \& commonName_max = 64 .Ve .Vb 2 --- 508,520 ---- \& countryName_max = 2 .Ve .Vb 1 ! \& localityName = Locality Name (e.g. city) .Ve .Vb 1 ! \& organizationalUnitName = Organizational Unit Name (e.g. section) .Ve .Vb 2 ! \& commonName = Common Name (e.g. YOUR name) \& commonName_max = 64 .Ve .Vb 2 Index: src/lib/libcrypto/man/openssl_rsa.1 diff -c src/lib/libcrypto/man/openssl_rsa.1:1.8 src/lib/libcrypto/man/openssl_rsa.1:1.9 *** src/lib/libcrypto/man/openssl_rsa.1:1.8 Fri Aug 9 19:15:46 2002 --- src/lib/libcrypto/man/openssl_rsa.1 Wed Jan 1 23:43:13 2003 *************** *** 259,265 **** It is not very secure and so should only be used when necessary. .PP Some newer version of \s-1IIS\s0 have additional data in the exported .key ! files. To use thse with the utility view the file with a binary editor and look for the string \*(L"private-key\*(R", then trace back to the byte sequence 0x30, 0x82 (this is an \s-1ASN1\s0 \s-1SEQUENCE\s0). Copy all the data from this point onwards to another file and use that as the input --- 259,265 ---- It is not very secure and so should only be used when necessary. .PP Some newer version of \s-1IIS\s0 have additional data in the exported .key ! files. To use these with the utility view the file with a binary editor and look for the string \*(L"private-key\*(R", then trace back to the byte sequence 0x30, 0x82 (this is an \s-1ASN1\s0 \s-1SEQUENCE\s0). Copy all the data from this point onwards to another file and use that as the input Index: src/lib/libcrypto/man/openssl_s_client.1 diff -c src/lib/libcrypto/man/openssl_s_client.1:1.9 src/lib/libcrypto/man/openssl_s_client.1:1.10 *** src/lib/libcrypto/man/openssl_s_client.1:1.9 Fri Aug 9 19:15:46 2002 --- src/lib/libcrypto/man/openssl_s_client.1 Wed Jan 1 23:43:13 2003 *************** *** 1,4 **** ! .\" $NetBSD: openssl_s_client.1,v 1.9 2002/08/09 16:15:46 itojun Exp $ .\" .\" Automatically generated by Pod::Man version 1.02 .\" Sat Aug 10 00:55:28 2002 --- 1,4 ---- ! .\" $NetBSD: openssl_s_client.1,v 1.10 2003/01/01 21:43:13 jschauma Exp $ .\" .\" Automatically generated by Pod::Man version 1.02 .\" Sat Aug 10 00:55:28 2002 *************** *** 252,258 **** input. .Ip "\fB\-quiet\fR" 4 .IX Item "-quiet" ! inhibit printing of session and certificate information. This implicitely turns on \fB\-ign_eof\fR as well. .Ip "\fB\-ssl2\fR, \fB\-ssl3\fR, \fB\-tls1\fR, \fB\-no_ssl2\fR, \fB\-no_ssl3\fR, \fB\-no_tls1\fR" 4 .IX Item "-ssl2, -ssl3, -tls1, -no_ssl2, -no_ssl3, -no_tls1" --- 252,258 ---- input. .Ip "\fB\-quiet\fR" 4 .IX Item "-quiet" ! inhibit printing of session and certificate information. This implicitly turns on \fB\-ign_eof\fR as well. .Ip "\fB\-ssl2\fR, \fB\-ssl3\fR, \fB\-tls1\fR, \fB\-no_ssl2\fR, \fB\-no_ssl3\fR, \fB\-no_tls1\fR" 4 .IX Item "-ssl2, -ssl3, -tls1, -no_ssl2, -no_ssl3, -no_tls1" *************** *** 286,292 **** If a connection is established with an \s-1SSL\s0 server then any data received from the server is displayed and any key presses will be sent to the server. When used interactively (which means neither \fB\-quiet\fR nor \fB\-ign_eof\fR ! have been given), the session will be renegociated if the line begins with an \&\fBR\fR, and if the line begins with a \fBQ\fR or if end of file is reached, the connection will be closed down. .SH "NOTES" --- 286,292 ---- If a connection is established with an \s-1SSL\s0 server then any data received from the server is displayed and any key presses will be sent to the server. When used interactively (which means neither \fB\-quiet\fR nor \fB\-ign_eof\fR ! have been given), the session will be renegotiated if the line begins with an \&\fBR\fR, and if the line begins with a \fBQ\fR or if end of file is reached, the connection will be closed down. .SH "NOTES" Index: src/lib/libcrypto/man/openssl_x509.1 diff -c src/lib/libcrypto/man/openssl_x509.1:1.9 src/lib/libcrypto/man/openssl_x509.1:1.10 *** src/lib/libcrypto/man/openssl_x509.1:1.9 Fri Aug 9 19:15:47 2002 --- src/lib/libcrypto/man/openssl_x509.1 Wed Jan 1 23:43:14 2003 *************** *** 448,454 **** .Ip "\fBesc_2253\fR" 4 .IX Item "esc_2253" escape the \*(L"special\*(R" characters required by \s-1RFC2253\s0 in a field That is ! \&\fB,+"<>;\fR. Additionally \fB#\fR is escaped at the beginnging of a string and a space character at the beginning or end of a string. .Ip "\fBesc_ctrl\fR" 4 .IX Item "esc_ctrl" --- 448,454 ---- .Ip "\fBesc_2253\fR" 4 .IX Item "esc_2253" escape the \*(L"special\*(R" characters required by \s-1RFC2253\s0 in a field That is ! \&\fB,+"<>;\fR. Additionally \fB#\fR is escaped at the beginning of a string and a space character at the beginning or end of a string. .Ip "\fBesc_ctrl\fR" 4 .IX Item "esc_ctrl" *************** *** 494,500 **** .IX Item "dump_nostr" dump non character string types (for example \s-1OCTET\s0 \s-1STRING\s0) if this option is not set then non character string types will be displayed ! as though each content octet repesents a single character. .Ip "\fBdump_all\fR" 4 .IX Item "dump_all" dump all fields. This option when used with \fBdump_der\fR allows the --- 494,500 ---- .IX Item "dump_nostr" dump non character string types (for example \s-1OCTET\s0 \s-1STRING\s0) if this option is not set then non character string types will be displayed ! as though each content octet represents a single character. .Ip "\fBdump_all\fR" 4 .IX Item "dump_all" dump all fields. This option when used with \fBdump_der\fR allows the
