openssl/doc, branch OpenSSL_1_0_2l

Fix regression in openssl req -x509 behaviour.

2017-05-17T13:37:39Z

Allow conversion of existing requests to certificates again. Fixes the issue #3396 Reviewed-by: Matt Caswell Reviewed-by: Rich Salz (Merged from https://github.com/openssl/openssl/pull/3485)

Fixed typo in X509_STORE_CTX_new description

2017-04-22T22:28:01Z

'X509_XTORE_CTX_cleanup' -> 'X509_STORE_CTX_cleanup' Reviewed-by: Kurt Roeckx Reviewed-by: Rich Salz (Merged from https://github.com/openssl/openssl/pull/3271) (cherry picked from commit 7643a1723ef8eb4e542e57dfadeeb8eff788ec05) (cherry picked from commit 2c0b8d2872057fdda22d3f41c3d4e59835b414b4)

doc: Add stitched ciphers to EVP_EncryptInit.pod

2017-03-29T08:36:16Z

These ciphers don't appear to be documented anywhere. Given the performance[1] benefits I think it makes sense to expose them. [1] https://software.intel.com/sites/default/files/open-ssl-performance-paper.pdf Reviewed-by: Rich Salz Reviewed-by: Matt Caswell (Merged from https://github.com/openssl/openssl/pull/3067) (cherry picked from commit 209fac9f8a24000beaa8a438517115b42ca7e7c6)

doc: Add missing options in s_{server,client}

2017-03-29T08:27:54Z

These were added to the help in ad775e04f6dab but not the pods. Reviewed-by: Richard Levitte Reviewed-by: Matt Caswell (Merged from https://github.com/openssl/openssl/pull/3065) (cherry picked from commit 254b58fd7335fa3c58e2535d46658109ffd8bdcd)

Add documentation for SNI APIs

2017-03-29T05:30:32Z

Reviewed-by: Rich Salz Reviewed-by: Richard Levitte (Merged from https://github.com/openssl/openssl/pull/3071) (cherry picked from commit 8c55c4614731487449a02f90ff9a209ff6c63447)

Fix out-of-memory condition in conf

2017-03-12T00:31:39Z

conf has the ability to expand variables in config files. Repeatedly doing this can lead to an exponential increase in the amount of memory required. This places a limit on the length of a value that can result from an expansion. Credit to OSS-Fuzz for finding this problem. Reviewed-by: Rich Salz Reviewed-by: Richard Levitte (Merged from https://github.com/openssl/openssl/pull/2894) (cherry picked from commit 8a585601fea1091022034dd14b961c1ecd5916c3)

Fix some RSA documentation

2017-03-10T16:21:47Z

RSA_private_encrypt(), RSA_public_decrypt(), RSA_public_encrypt() and RSA_private_decrypt() are declared with a "const" from parameter, but this is not reflected in the docs. Reviewed-by: Rich Salz (Merged from https://github.com/openssl/openssl/pull/2899) (cherry picked from commit b41f6b64f809e5992b9f1b601b3dff1a2129da2d)

Remove doc reference to non-existant GCM example

2017-03-07T15:08:47Z

Reviewed-by: Matt Caswell Reviewed-by: Richard Levitte Reviewed-by: Rich Salz (Merged from https://github.com/openssl/openssl/pull/2866) (cherry picked from commit c1f84df2484d9d6745f5aaf1eb708f0bcd3faf28)

Update the cipher(1) documentation to

2017-03-03T00:31:15Z

explicitly state that the RSA cipher string means the same a kRSA. Reviewed-by: Andy Polyakov Reviewed-by: Rich Salz (Merged from https://github.com/openssl/openssl/pull/2821) (cherry picked from commit f2bcff43bcd5b1e2632273ef8fea0900a15d7769)

Adjust the default value of the private key size

2017-02-27T16:36:48Z

...in the man page to reflect the actual default (2048 instead of 512) CLA: trivial Reviewed-by: Richard Levitte Reviewed-by: Rich Salz (Merged from https://github.com/openssl/openssl/pull/2754) (cherry picked from commit 013bc448672cbc3c9cd154709400c676c2955229)