3 files changed, 33 insertions, 9 deletions
diff --git a/lib/libcrypto/man/X509V3_get_d2i.3 b/lib/libcrypto/man/X509V3_get_d2i.3
index f21471b00cc..9192767464d 100644
--- a/lib/libcrypto/man/X509V3_get_d2i.3
+++ b/lib/libcrypto/man/X509V3_get_d2i.3
@@ -1,4 +1,4 @@
-.\" $OpenBSD: X509V3_get_d2i.3,v 1.8 2018/02/24 20:57:49 schwarze Exp $
+.\" $OpenBSD: X509V3_get_d2i.3,v 1.9 2018/02/24 21:39:29 schwarze Exp $
 .\" full merge up to: OpenSSL ff7fbfd5 Nov 2 11:52:01 2015 +0000
 .\" selective merge up to: OpenSSL 99d63d46 Oct 26 13:56:48 2016 -0400
 .\"
@@ -403,4 +403,5 @@ if no extensions are present.
 .Xr X509_get_pubkey 3 ,
 .Xr X509_get_subject_name 3 ,
 .Xr X509_get_version 3 ,
-.Xr X509_new 3
+.Xr X509_new 3 ,
+.Xr X509_REVOKED_new 3
diff --git a/lib/libcrypto/man/X509_REVOKED_new.3 b/lib/libcrypto/man/X509_REVOKED_new.3
index f06075fcc22..5ffe9496787 100644
--- a/lib/libcrypto/man/X509_REVOKED_new.3
+++ b/lib/libcrypto/man/X509_REVOKED_new.3
@@ -1,5 +1,6 @@
-.\"	$OpenBSD: X509_REVOKED_new.3,v 1.2 2016/12/25 22:15:10 schwarze Exp $
-.\"	OpenSSL X509_CRL_get0_by_serial.pod 99d63d46 Oct 26 13:56:48 2016 -0400
+.\" $OpenBSD: X509_REVOKED_new.3,v 1.3 2018/02/24 21:39:29 schwarze Exp $
+.\" full merge up to:
+.\" OpenSSL man3/X509_CRL_get0_by_serial cdd6c8c5 Mar 20 12:29:37 2017 +0100
 .\"
 .\" This file is a derived work.
 .\" The changes are covered by the following Copyright and license:
@@ -65,21 +66,31 @@
 .\" ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED
 .\" OF THE POSSIBILITY OF SUCH DAMAGE.
 .\"
-.Dd $Mdocdate: December 25 2016 $
+.Dd $Mdocdate: February 24 2018 $
 .Dt X509_REVOKED_NEW 3
 .Os
 .Sh NAME
 .Nm X509_REVOKED_new ,
 .Nm X509_REVOKED_free ,
+.Nm X509_REVOKED_get0_serialNumber ,
+.Nm X509_REVOKED_get0_revocationDate ,
 .Nm X509_REVOKED_set_serialNumber ,
 .Nm X509_REVOKED_set_revocationDate
-.Nd create and change an X.509 CRL revoked entry
+.Nd create, change, and inspect an X.509 CRL revoked entry
 .Sh SYNOPSIS
 .In openssl/x509.h
 .Ft X509_REVOKED *
 .Fn X509_REVOKED_new void
 .Ft void
 .Fn X509_REVOKED_free "X509_REVOKED *r"
+.Ft const ASN1_INTEGER *
+.Fo X509_REVOKED_get0_serialNumber
+.Fa "const X509_REVOKED *r"
+.Fc
+.Ft const ASN1_TIME *
+.Fo X509_REVOKED_get0_revocationDate
+.Fa "const X509_REVOKED *r"
+.Fc
 .Ft int
 .Fo X509_REVOKED_set_serialNumber
 .Fa "X509_REVOKED *r"
@@ -133,6 +144,14 @@ object or
 .Dv NULL
 if an error occurs.
 .Pp
+.Fn X509_REVOKED_get0_serialNumber
+returns an internal pointer to the serial number of
+.Fa r .
+.Pp
+.Fn X509_REVOKED_get0_revocationDate
+returns an internal pointer to the revocation date of
+.Fa r .
+.Pp
 .Fn X509_REVOKED_set_serialNumber
 and
 .Fn X509_REVOKED_set_revocationDate
@@ -141,7 +160,10 @@ return 1 for success or 0 for failure.
 .Xr d2i_X509_CRL 3 ,
 .Xr ERR_get_error 3 ,
 .Xr PEM_read_X509_CRL 3 ,
-.Xr X509_CRL_get0_by_serial 3
+.Xr X509_CRL_get0_by_serial 3 ,
+.Xr X509_EXTENSION_new 3 ,
+.Xr X509_REVOKED_get_ext 3 ,
+.Xr X509_REVOKED_get_ext_d2i 3
 .Sh STANDARDS
 RFC 5280: Internet X.509 Public Key Infrastructure Certificate and
 Certificate Revocation List (CRL) Profile, section 5.1: CRL Fields
diff --git a/lib/libcrypto/man/X509v3_get_ext_by_NID.3 b/lib/libcrypto/man/X509v3_get_ext_by_NID.3
index b5e1981797e..cd31fe99f4f 100644
--- a/lib/libcrypto/man/X509v3_get_ext_by_NID.3
+++ b/lib/libcrypto/man/X509v3_get_ext_by_NID.3
@@ -1,4 +1,4 @@
-.\"	$OpenBSD: X509v3_get_ext_by_NID.3,v 1.4 2017/07/05 11:43:09 schwarze Exp $
+.\"	$OpenBSD: X509v3_get_ext_by_NID.3,v 1.5 2018/02/24 21:39:29 schwarze Exp $
 .\"	OpenSSL c952780c Jun 21 07:03:34 2016 -0400
 .\"
 .\" This file was written by Dr. Stephen Henson <steve@openssl.org>.
@@ -48,7 +48,7 @@
 .\" ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED
 .\" OF THE POSSIBILITY OF SUCH DAMAGE.
 .\"
-.Dd $Mdocdate: July 5 2017 $
+.Dd $Mdocdate: February 24 2018 $
 .Dt X509V3_GET_EXT_BY_NID 3
 .Os
 .Sh NAME
@@ -385,4 +385,5 @@ returns a stack of extensions or
 on error.
 .Sh SEE ALSO
 .Xr X509_EXTENSION_new 3 ,
+.Xr X509_REVOKED_new 3 ,
 .Xr X509V3_get_d2i 3