This was a developer debugging feature and was never a useful public
interface.

Added all missing X509 error codes to the verify(1) manpage, but
many still need a description beyond the associated text string.

Sorted the errors in x509_txt.c by error number.
Reviewed-by: NStephen Henson <steve@openssl.org>

Signed-off-by: NRich Salz <rsalz@openssl.org>
Reviewed-by: NMatt Caswell <matt@openssl.org>

Reviewed-by: NRichard Levitte <levitte@openssl.org>

Add documentation to all the appropriate apps for the new -no-CApath and
-no-CAfile options.
Reviewed-by: NAndy Polyakov <appro@openssl.org>

L<foo|foo> is sub-optimal  If the xref is the same as the title,
which is what we do, then you only need L<foo>.  This fixes all
1457 occurrences in 349 files.  Approximately.  (And pod used to
need both.)
Reviewed-by: NRichard Levitte <levitte@openssl.org>

Signed-off-by: NRich Salz <rsalz@akamai.com>
Reviewed-by: NTim Hudson <tjh@openssl.org>

the X509_V_FLAG_NO_ALT_CHAINS flag.
Reviewed-by: NDr. Stephen Henson <steve@openssl.org>

(cherry picked from commit 2cfbec1caea8f9567bdff85d33d22481f2afb40a)

cms, ocsp, s_client, s_server and smime tools also use args_verify()
for parsing options, that makes them most of the same options
verify tool does. Add those options to man pages and reference
their explanation in the verify man page.

Add -trusted_first description to help messages and man pages
of tools that deal with certificate verification.

Newer pod2man considers =item [1-9] part of a numbered list, while =item
0 starts an unnumbered list. Add a zero effect formatting mark to override
this.

doc/apps/smime.pod around line 315: Expected text after =item, not a
number
...

PR#3146

Document use of -keyopt to use RSA-PSS and RSA-OAEP modes.

Add a -certsout option to output any certificates in a message.

Add test for example 4.11

Submitted by: Masashi Fujita
Reviewed by: Bodo Moeller

PR: 834

Only use the new informational verify codes if we
specifically ask for them.

Fix typo in docs.

Update PKCS12_parse().

Make the keyid in certificate aux info more usable.

Make req seed the PRNG if signing with
an already existing DSA key.

Document the new smime options.

generator (otherwise they don't work) and add -rand
option. Update docs.

could rename too :-(

Submitted by:
Reviewed by:
PR:

encrypted mail. Also update the smime docs.

Fix the usage message of smime utility and sanitise the return
codes.

Add some documentation.