===================================================================
RCS file: /cvsrepo/anoncvs/cvs/src/usr.bin/openssl/openssl.1,v
retrieving revision 1.119
retrieving revision 1.120
diff -c -r1.119 -r1.120
*** src/usr.bin/openssl/openssl.1	2020/02/16 16:39:01	1.119
--- src/usr.bin/openssl/openssl.1	2020/02/19 20:42:12	1.120
***************
*** 1,4 ****
! .\" $OpenBSD: openssl.1,v 1.119 2020/02/16 16:39:01 jsing Exp $
  .\" ====================================================================
  .\" Copyright (c) 1998-2002 The OpenSSL Project.  All rights reserved.
  .\"
--- 1,4 ----
! .\" $OpenBSD: openssl.1,v 1.120 2020/02/19 20:42:12 kn Exp $
  .\" ====================================================================
  .\" Copyright (c) 1998-2002 The OpenSSL Project.  All rights reserved.
  .\"
***************
*** 110,116 ****
  .\" copied and put under another distribution licence
  .\" [including the GNU Public Licence.]
  .\"
! .Dd $Mdocdate: February 16 2020 $
  .Dt OPENSSL 1
  .Os
  .Sh NAME
--- 110,116 ----
  .\" copied and put under another distribution licence
  .\" [including the GNU Public Licence.]
  .\"
! .Dd $Mdocdate: February 19 2020 $
  .Dt OPENSSL 1
  .Os
  .Sh NAME
***************
*** 200,205 ****
--- 200,206 ----
  or
  .Cm no- Ns Ar command
  itself.
+ .Tg asn1parse
  .Sh ASN1PARSE
  .Bl -hang -width "openssl asn1parse"
  .It Nm openssl asn1parse
***************
*** 296,301 ****
--- 297,303 ----
  .Qq drill down
  into a nested structure.
  .El
+ .Tg ca
  .Sh CA
  .Bl -hang -width "openssl ca"
  .It Nm openssl ca
***************
*** 845,850 ****
--- 847,853 ----
  The same as
  .Fl extensions .
  .El
+ .Tg ciphers
  .Sh CIPHERS
  .Nm openssl ciphers
  .Op Fl hVv
***************
*** 877,882 ****
--- 880,886 ----
  .Fl V ,
  but without cipher suite codes.
  .El
+ .Tg cms
  .Sh CMS
  .Bl -hang -width "openssl cms"
  .It Nm openssl cms
***************
*** 1393,1398 ****
--- 1397,1403 ----
  .Fl verify_retcode
  is specified.
  .El
+ .Tg crl
  .Sh CRL
  .Bl -hang -width "openssl crl"
  .It Nm openssl crl
***************
*** 1469,1474 ****
--- 1474,1480 ----
  .It Fl verify
  Verify the signature on the CRL.
  .El
+ .Tg crl2pkcs7
  .Sh CRL2PKCS7
  .Bl -hang -width "openssl crl2pkcs7"
  .It Nm openssl crl2pkcs7
***************
*** 1514,1519 ****
--- 1520,1526 ----
  .It Fl outform Cm der | pem
  The output format.
  .El
+ .Tg dgst
  .Sh DGST
  .Bl -hang -width "openssl dgst"
  .It Nm openssl dgst
***************
*** 1628,1633 ****
--- 1635,1641 ----
  File or files to digest.
  If no files are specified then standard input is used.
  .El
+ .Tg dhparam
  .Sh DHPARAM
  .Bl -hang -width "openssl dhparam"
  .It Nm openssl dhparam
***************
*** 1704,1709 ****
--- 1712,1718 ----
  If this value is present, the input file is ignored and
  parameters are generated instead.
  .El
+ .Tg dsa
  .Sh DSA
  .Bl -hang -width "openssl dsa"
  .It Nm openssl dsa
***************
*** 1792,1797 ****
--- 1801,1807 ----
  .It Fl text
  Print the public/private key in plain text.
  .El
+ .Tg dsaparam
  .Sh DSAPARAM
  .Bl -hang -width "openssl dsaparam"
  .It Nm openssl dsaparam
***************
*** 1844,1849 ****
--- 1854,1860 ----
  .Ar numbits .
  If this option is included, the input file is ignored.
  .El
+ .Tg ec
  .Sh EC
  .Bl -hang -width "openssl ec"
  .It Nm openssl ec
***************
*** 1956,1961 ****
--- 1967,1973 ----
  .It Fl text
  Print the public/private key in plain text.
  .El
+ .Tg ecparam
  .Sh ECPARAM
  .Bl -hang -width "openssl ecparam"
  .It Nm openssl ecparam
***************
*** 2051,2056 ****
--- 2063,2069 ----
  .It Fl text
  Print the EC parameters in plain text.
  .El
+ .Tg enc
  .Sh ENC
  .Bl -hang -width "openssl enc"
  .It Nm openssl enc
***************
*** 2214,2219 ****
--- 2227,2233 ----
  .It Fl v
  Print extra details about the processing.
  .El
+ .Tg errstr
  .Sh ERRSTR
  .Nm openssl errstr
  .Op Fl stats
***************
*** 2244,2249 ****
--- 2258,2264 ----
  .It Fl stats
  Print debugging statistics about various aspects of the hash table.
  .El
+ .Tg gendsa
  .Sh GENDSA
  .Bl -hang -width "openssl gendsa"
  .It Nm openssl gendsa
***************
*** 2290,2295 ****
--- 2305,2311 ----
  Specify the DSA parameter file to use.
  The parameters in this file determine the size of the private key.
  .El
+ .Tg genpkey
  .Sh GENPKEY
  .Bl -hang -width "openssl genpkey"
  .It Nm openssl genpkey
***************
*** 2394,2399 ****
--- 2410,2416 ----
  .It Fl text
  Print the private/public key in plain text.
  .El
+ .Tg genrsa
  .Sh GENRSA
  .Bl -hang -width "openssl genrsa"
  .It Nm openssl genrsa
***************
*** 2451,2456 ****
--- 2468,2474 ----
  This must be the last option specified.
  The default is 2048.
  .El
+ .Tg nseq
  .Sh NSEQ
  .Nm openssl nseq
  .Op Fl in Ar file
***************
*** 2481,2486 ****
--- 2499,2505 ----
  option the situation is reversed:
  a Netscape certificate sequence is created from a file of certificates.
  .El
+ .Tg ocsp
  .Sh OCSP
  .Bl -hang -width "openssl ocsp"
  .It Nm openssl ocsp
***************
*** 2833,2838 ****
--- 2852,2858 ----
  with the
  .Fl VAfile
  option.
+ .Tg passwd
  .Sh PASSWD
  .Bl -hang -width "openssl passwd"
  .It Nm openssl passwd
***************
*** 2896,2901 ****
--- 2916,2922 ----
  In the output list, prepend the cleartext password and a TAB character
  to each password hash.
  .El
+ .Tg pkcs7
  .Sh PKCS7
  .Bl -hang -width "openssl pkcs7"
  .It Nm openssl pkcs7
***************
*** 2941,2946 ****
--- 2962,2968 ----
  .It Fl text
  Print certificate details in full rather than just subject and issuer names.
  .El
+ .Tg pkcs8
  .Sh PKCS8
  .Bl -hang -width "openssl pkcs8"
  .It Nm openssl pkcs8
***************
*** 3024,3029 ****
--- 3046,3052 ----
  valid values include des, des3, and rc2.
  It is recommended that des3 is used.
  .El
+ .Tg pkcs12
  .Sh PKCS12
  .Bl -hang -width "openssl pkcs12"
  .It Nm openssl pkcs12
***************
*** 3241,3246 ****
--- 3264,3270 ----
  is equivalent to
  .Fl passin .
  .El
+ .Tg pkey
  .Sh PKEY
  .Bl -hang -width "openssl pkey"
  .It Nm openssl pkey
***************
*** 3304,3309 ****
--- 3328,3334 ----
  Print out only public key components
  even if a private key is being processed.
  .El
+ .Tg pkeyparam
  .Sh PKEYPARAM
  .Cm openssl pkeyparam
  .Op Fl in Ar file
***************
*** 3329,3334 ****
--- 3354,3360 ----
  .It Fl text
  Print the parameters in plain text.
  .El
+ .Tg pkeyutl
  .Sh PKEYUTL
  .Bl -hang -width "openssl pkeyutl"
  .It Nm openssl pkeyutl
***************
*** 3481,3486 ****
--- 3507,3513 ----
  .It Fl verifyrecover
  Verify the input data and output the recovered data.
  .El
+ .Tg prime
  .Sh PRIME
  .Cm openssl prime
  .Op Fl bits Ar n
***************
*** 3525,3530 ****
--- 3552,3558 ----
  .Ar p
  is prime.
  .El
+ .Tg rand
  .Sh RAND
  .Bl -hang -width "openssl rand"
  .It Nm openssl rand
***************
*** 3552,3557 ****
--- 3580,3586 ----
  The output file to write to,
  or standard output if not specified.
  .El
+ .Tg req
  .Sh REQ
  .Bl -hang -width "openssl req"
  .It Nm openssl req
***************
*** 4001,4006 ****
--- 4030,4036 ----
  options in the configuration file.
  Any additional fields will be treated as though they were a
  .Cm DirectoryString .
+ .Tg rsa
  .Sh RSA
  .Bl -hang -width "openssl rsa"
  .It Nm openssl rsa
***************
*** 4098,4103 ****
--- 4128,4134 ----
  .It Fl text
  Print the public/private key components in plain text.
  .El
+ .Tg rsautl
  .Sh RSAUTL
  .Bl -hang -width "openssl rsautl"
  .It Nm openssl rsautl
***************
*** 4172,4177 ****
--- 4203,4209 ----
  .It Fl verify
  Verify the input data and output the recovered data.
  .El
+ .Tg s_client
  .Sh S_CLIENT
  .Bl -hang -width "openssl s_client"
  .It Nm openssl s_client
***************
*** 4470,4475 ****
--- 4502,4508 ----
  .Fl connect
  will be used.
  .El
+ .Tg s_server
  .Sh S_SERVER
  .Bl -hang -width "openssl s_server"
  .It Nm openssl s_server
***************
*** 4775,4780 ****
--- 4808,4814 ----
  .Fl verify ,
  a certificate is requested but the client does not have to send one.
  .El
+ .Tg s_time
  .Sh S_TIME
  .Bl -hang -width "openssl s_time"
  .It Nm openssl s_time
***************
*** 4885,4890 ****
--- 4919,4925 ----
  will only perform the handshake to establish SSL connections
  but not transfer any payload data.
  .El
+ .Tg sess_id
  .Sh SESS_ID
  .Bl -hang -width "openssl sess_id"
  .It Nm openssl sess_id
***************
*** 4977,4982 ****
--- 5012,5018 ----
  application.
  This is, however, strongly discouraged and should only be used for
  debugging purposes.
+ .Tg smime
  .Sh SMIME
  .Bl -hang -width "openssl smime"
  .It Nm openssl smime
***************
*** 5273,5278 ****
--- 5309,5315 ----
  .It 5
  An error occurred writing certificates.
  .El
+ .Tg speed
  .Sh SPEED
  .Bl -hang -width "openssl speed"
  .It Nm openssl speed
***************
*** 5310,5315 ****
--- 5347,5353 ----
  .Ar number
  benchmarks in parallel.
  .El
+ .Tg spkac
  .Sh SPKAC
  .Bl -hang -width "openssl spkac"
  .It Nm openssl spkac
***************
*** 5371,5376 ****
--- 5409,5415 ----
  .It Fl verify
  Verify the digital signature on the supplied SPKAC.
  .El
+ .Tg ts
  .Sh TS
  .Bk -words
  .Bl -hang -width "openssl ts"
***************
*** 5733,5738 ****
--- 5772,5778 ----
  only the signing certificate identifier is included.
  The default is no.
  .El
+ .Tg verify
  .Sh VERIFY
  .Bl -hang -width "openssl verify"
  .It Nm openssl verify
***************
*** 6060,6065 ****
--- 6100,6106 ----
  An application specific error.
  Unused.
  .El
+ .Tg version
  .Sh VERSION
  .Nm openssl version
  .Op Fl abdfopv
***************
*** 6091,6096 ****
--- 6132,6138 ----
  .Nm openssl
  version.
  .El
+ .Tg x509
  .Sh X509
  .Bl -hang -width "openssl x509"
  .It Nm openssl x509