Split a new page X509_load_cert_file(3) with three functions

out of X509_LOOKUP_hash_dir(3) because both groups of functions
differ substantially in purpose and structure.

Rewrite the complete text of X509_load_cert_file(3) from scratch
for correctness and clarity.

This fixes several documentation errors:
1. The names of the constants were wrong, lacking the "X509_" prefix.
2. None of these functions support X509_FILETYPE_DEFAULT,
neither in OpenSSL nor in LibreSSL.
3. The memory cache does not contain X509_STORE objects;
instead, the X509_STORE object *is* the memory cache.

1 files changed, 3 insertions, 2 deletions

diff --git a/lib/libcrypto/man/X509_LOOKUP_new.3 b/lib/libcrypto/man/X509_LOOKUP_new.3
index f9d81ec6f4e..6fa421b74f9 100644
--- a/lib/libcrypto/man/X509_LOOKUP_new.3
+++ b/lib/libcrypto/man/X509_LOOKUP_new.3
@@ -1,4 +1,4 @@
-.\" $OpenBSD: X509_LOOKUP_new.3,v 1.6 2021/11/05 22:03:25 tb Exp $
+.\" $OpenBSD: X509_LOOKUP_new.3,v 1.7 2021/11/09 16:23:04 schwarze Exp $
 .\"
 .\" Copyright (c) 2021 Ingo Schwarze <schwarze@openbsd.org>
 .\"
@@ -14,7 +14,7 @@
 .\" ACTION OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF
 .\" OR IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE.
 .\"
-.Dd $Mdocdate: November 5 2021 $
+.Dd $Mdocdate: November 9 2021 $
 .Dt X509_LOOKUP_NEW 3
 .Os
 .Sh NAME
@@ -533,6 +533,7 @@ causes failure but provides no diagnostics.
 .Xr d2i_X509_bio 3 ,
 .Xr PEM_read_bio_X509_AUX 3 ,
 .Xr PEM_X509_INFO_read_bio 3 ,
+.Xr X509_load_cert_file 3 ,
 .Xr X509_LOOKUP_hash_dir 3 ,
 .Xr X509_NAME_hash 3 ,
 .Xr X509_NAME_new 3 ,