new manual page X509_ocspid_print(3)

using input from tb@, and OK tb@ on an earlier version

3 files changed, 66 insertions, 6 deletions

diff --git a/lib/libcrypto/man/OCSP_REQUEST_new.3 b/lib/libcrypto/man/OCSP_REQUEST_new.3
index c4a887d2522..29084a657f4 100644
--- a/lib/libcrypto/man/OCSP_REQUEST_new.3
+++ b/lib/libcrypto/man/OCSP_REQUEST_new.3
@@ -1,4 +1,4 @@
-.\"	$OpenBSD: OCSP_REQUEST_new.3,v 1.10 2019/06/10 09:49:48 schwarze Exp $
+.\"	$OpenBSD: OCSP_REQUEST_new.3,v 1.11 2021/08/06 21:45:55 schwarze Exp $
 .\"	OpenSSL b97fdb57 Nov 11 09:33:09 2016 +0100
 .\"
 .\" This file is a derived work.
@@ -65,7 +65,7 @@
 .\" ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED
 .\" OF THE POSSIBILITY OF SUCH DAMAGE.
 .\"
-.Dd $Mdocdate: June 10 2019 $
+.Dd $Mdocdate: August 6 2021 $
 .Dt OCSP_REQUEST_NEW 3
 .Os
 .Sh NAME
@@ -318,7 +318,8 @@ OCSP_REQUEST_free(req);
 .Xr OCSP_resp_find_status 3 ,
 .Xr OCSP_response_status 3 ,
 .Xr OCSP_sendreq_new 3 ,
-.Xr OCSP_SERVICELOC_new 3
+.Xr OCSP_SERVICELOC_new 3 ,
+.Xr X509_ocspid_print 3
 .Sh STANDARDS
 RFC 6960: X.509 Internet Public Key Infrastructure Online Certificate
 Status Protocol, section 4.1: Request Syntax
diff --git a/lib/libcrypto/man/OCSP_cert_to_id.3 b/lib/libcrypto/man/OCSP_cert_to_id.3
index 7443f4130ae..f2ed8b11543 100644
--- a/lib/libcrypto/man/OCSP_cert_to_id.3
+++ b/lib/libcrypto/man/OCSP_cert_to_id.3
@@ -1,4 +1,4 @@
-.\"	$OpenBSD: OCSP_cert_to_id.3,v 1.10 2019/06/06 01:06:58 schwarze Exp $
+.\"	$OpenBSD: OCSP_cert_to_id.3,v 1.11 2021/08/06 21:45:55 schwarze Exp $
 .\"	OpenSSL b97fdb57 Nov 11 09:33:09 2016 +0100
 .\"
 .\" This file is a derived work.
@@ -65,7 +65,7 @@
 .\" ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED
 .\" OF THE POSSIBILITY OF SUCH DAMAGE.
 .\"
-.Dd $Mdocdate: June 6 2019 $
+.Dd $Mdocdate: August 6 2021 $
 .Dt OCSP_CERT_TO_ID 3
 .Os
 .Sh NAME
@@ -221,7 +221,8 @@ returns 1 for success or 0 for failure.
 .Xr OCSP_response_status 3 ,
 .Xr OCSP_sendreq_new 3 ,
 .Xr X509_get_issuer_name 3 ,
-.Xr X509_NAME_new 3
+.Xr X509_NAME_new 3 ,
+.Xr X509_ocspid_print 3
 .Sh STANDARDS
 RFC 6960: X.509 Internet Public Key Infrastructure Online Certificate
 Status Protocol, section 4: Details of the Protocol
diff --git a/lib/libcrypto/man/X509_ocspid_print.3 b/lib/libcrypto/man/X509_ocspid_print.3
new file mode 100644
index 00000000000..b9b6c92fbb5
--- /dev/null
+++ b/lib/libcrypto/man/X509_ocspid_print.3
@@ -0,0 +1,58 @@
+.\" $OpenBSD: X509_ocspid_print.3,v 1.1 2021/08/06 21:45:55 schwarze Exp $
+.\"
+.\" Copyright (c) 2021 Ingo Schwarze <schwarze@openbsd.org>
+.\"
+.\" Permission to use, copy, modify, and distribute this software for any
+.\" purpose with or without fee is hereby granted, provided that the above
+.\" copyright notice and this permission notice appear in all copies.
+.\"
+.\" THE SOFTWARE IS PROVIDED "AS IS" AND THE AUTHOR DISCLAIMS ALL WARRANTIES
+.\" WITH REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF
+.\" MERCHANTABILITY AND FITNESS. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR
+.\" ANY SPECIAL, DIRECT, INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES
+.\" WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR PROFITS, WHETHER IN AN
+.\" ACTION OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF
+.\" OR IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE.
+.\"
+.Dd $Mdocdate: August 6 2021 $
+.Dt X509_OCSPID_PRINT 3
+.Os
+.Sh NAME
+.Nm X509_ocspid_print
+.Nd pretty-print hashes of subject name and public key
+.Sh SYNOPSIS
+.In openssl/x509.h
+.Ft int
+.Fo X509_ocspid_print
+.Fa "BIO *bio"
+.Fa "X509 *issuer"
+.Fc
+.Sh DESCRIPTION
+.Fn X509_ocspid_print
+produces human-readable output to
+.Fa bio
+containing hexadecimal representations of SHA-1 hashes of the
+DER-encoded forms of the subject name and the public key of the
+.Fa issuer
+certificate, as these hashes appear in OCSP requests.
+.Sh RETURN VALUES
+.Fn X509_ocspid_print
+returns 1 for success or 0 for failure.
+.Sh EXAMPLES
+This function is used by the
+.Fl ocspid
+flag of the
+.Xr openssl 1
+.Cm x509
+command.
+.Sh SEE ALSO
+.Xr EVP_sha1 3 ,
+.Xr i2d_X509_NAME 3 ,
+.Xr OCSP_cert_to_id 3 ,
+.Xr OCSP_REQUEST_new 3 ,
+.Xr X509_get_pubkey 3 ,
+.Xr X509_get_subject_name 3
+.Sh HISTORY
+.Fn X509_ocspid_print
+first appeared in OpenSSL 0.9.7 and has been available since
+.Ox 3.2 .