Stop mentioning DSA/DSS

Support for this went away in 2017, but a few things still mentioned DSA
in various contexts. Replace DSA with ECDSA where appropriate and otherwise
delete this. It won't wor

Stop mentioning DSA/DSS

Support for this went away in 2017, but a few things still mentioned DSA
in various contexts. Replace DSA with ECDSA where appropriate and otherwise
delete this. It won't work.

ok jsing

show more ...

Document SSL_use_certificate_chain_file(3)

ok bcook inoguchi jsing

Prepare documenting SSL_use_certificate_chain_file

Add missing cross-reference to NOTES section.
OK kn@ tb@

remove pointless NOTES section header lines

*an* RSA;

Recommend SSL_CTX_add1_chain_cert(3) rather than
SSL_CTX_add_extra_chain_cert(3).
From Dr. Stephen Henson <steve at openssl dot org>
via OpenSSL commit a4339ea3 Jan 3 22:38:03 2014 +0000
which is sti

Recommend SSL_CTX_add1_chain_cert(3) rather than
SSL_CTX_add_extra_chain_cert(3).
From Dr. Stephen Henson <steve at openssl dot org>
via OpenSSL commit a4339ea3 Jan 3 22:38:03 2014 +0000
which is still under a free license.

show more ...

Import SSL_CTX_add1_chain_cert(3) from OpenSSL branch 1.1.1, which is still
under a free license, omitting functions we don't have and tweaked by me;
the functions were provided by jsing@ in ssl.h re

Import SSL_CTX_add1_chain_cert(3) from OpenSSL branch 1.1.1, which is still
under a free license, omitting functions we don't have and tweaked by me;
the functions were provided by jsing@ in ssl.h rev. 1.166.

While here, also document SSL_CTX_get_extra_chain_certs(3) because
it is closely related to companion functions are already documented
and the API is kind of incomplete without it.

show more ...

In ssl.h rev. 1.156 2018/04/25 07:10:39, tb@ added const qualifiers
to some parameters and return values of some functions.
Update the documentation.

found a complete archive of SSLeay-0.4 to SSLeay-0.8.1b tarballs
on the web, so fix up SSLeay HISTORY accordingly

finish ssl HISTORY; mostly 1.1.0/6.3, but also various other fixes

ssl.h HISTORY up to SSLeay 0.8.1b; researched from OpenSSL git

New manual page X509_check_private_key(3), using information
from the OpenSSL manual and from code inspection.
Use my own Copyright and license because no Copyright-worthy amount
of text from OpenSSL

New manual page X509_check_private_key(3), using information
from the OpenSSL manual and from code inspection.
Use my own Copyright and license because no Copyright-worthy amount
of text from OpenSSL remains.

And, no, these functions do *NOT* check private keys, not at all.

show more ...

as noted by Hanno Boeck, using the *check_private_key functions is
tricky, especially since the manpage is full of lies.
Try to make readers think twice before using them.
With oks and help from schw

as noted by Hanno Boeck, using the *check_private_key functions is
tricky, especially since the manpage is full of lies.
Try to make readers think twice before using them.
With oks and help from schwarze@, tedu@, sthen@, jmc@

show more ...

pasto; from <Jon dot Spillett at oracle dot com> via OpenSSL commit 3aaa1bd0

Copyright and license

move manual pages from doc/ to man/ for consistency with other
libraries, in particular considering that there are unrelated
files in doc/; requested by jsing@ and beck@