summaryrefslogtreecommitdiff
path: root/lib
diff options
context:
space:
mode:
authorIngo Schwarze <schwarze@cvs.openbsd.org>2016-12-23 01:01:56 +0000
committerIngo Schwarze <schwarze@cvs.openbsd.org>2016-12-23 01:01:56 +0000
commitfc2d851185266742b9af9885f96a5eee5e59ec05 (patch)
treef3e6cce3c14e8535f229fac9c7db7d6389224a90 /lib
parentfeb4d3226176a03f65750427aa9454f7e39004de (diff)
Link to Peter Gutmann's classic "X.509 Style Guide".
Thanks to otto@ for making me aware of it. If people know newer documents that are similarly readable and interesting, please speak up. I hate sending people to the STANDARDS only for more information. On the one hand, that's torture, and on the other hand, if i read Gutmann correctly, the standards sometimes provide bad advice, and often none at all.
Diffstat (limited to 'lib')
-rw-r--r--lib/libcrypto/man/X509_new.313
1 files changed, 11 insertions, 2 deletions
diff --git a/lib/libcrypto/man/X509_new.3 b/lib/libcrypto/man/X509_new.3
index 6520aaf477a..020eee196d5 100644
--- a/lib/libcrypto/man/X509_new.3
+++ b/lib/libcrypto/man/X509_new.3
@@ -1,4 +1,4 @@
-.\" $OpenBSD: X509_new.3,v 1.7 2016/12/22 13:05:59 schwarze Exp $
+.\" $OpenBSD: X509_new.3,v 1.8 2016/12/23 01:01:55 schwarze Exp $
.\" OpenSSL 3a59ad98 Dec 11 00:36:06 2015 +0000
.\"
.\" This file was written by Dr. Stephen Henson <steve@openssl.org>.
@@ -48,7 +48,7 @@
.\" ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED
.\" OF THE POSSIBILITY OF SUCH DAMAGE.
.\"
-.Dd $Mdocdate: December 22 2016 $
+.Dd $Mdocdate: December 23 2016 $
.Dt X509_NEW 3
.Os
.Sh NAME
@@ -131,3 +131,12 @@ Certificate Revocation List (CRL) Profile
and
.Fn X509_free
are available in all versions of SSLeay and OpenSSL.
+.Sh BUGS
+The X.509 public key infrastructure and its data types contain too
+many design bugs to list them.
+For lots of examples, see the classic
+.Lk https://www.cs.auckland.ac.nz/~pgut001/pubs/x509guide.txt\
+ "X.509 Style Guide"
+that
+.An Peter Gutmann
+published in 2000.