===================================================================
RCS file: /cvsrepo/anoncvs/cvs/src/usr.bin/openssl/openssl.1,v
retrieving revision 1.40
retrieving revision 1.41
diff -c -r1.40 -r1.41
*** src/usr.bin/openssl/openssl.1	2016/07/23 19:31:35	1.40
--- src/usr.bin/openssl/openssl.1	2016/07/28 16:20:21	1.41
***************
*** 1,4 ****
! .\" $OpenBSD: openssl.1,v 1.40 2016/07/23 19:31:35 jmc Exp $
  .\" ====================================================================
  .\" Copyright (c) 1998-2002 The OpenSSL Project.  All rights reserved.
  .\"
--- 1,4 ----
! .\" $OpenBSD: openssl.1,v 1.41 2016/07/28 16:20:21 jmc Exp $
  .\" ====================================================================
  .\" Copyright (c) 1998-2002 The OpenSSL Project.  All rights reserved.
  .\"
***************
*** 112,118 ****
  .\"
  .\" OPENSSL
  .\"
! .Dd $Mdocdate: July 23 2016 $
  .Dt OPENSSL 1
  .Os
  .Sh NAME
--- 112,118 ----
  .\"
  .\" OPENSSL
  .\"
! .Dd $Mdocdate: July 28 2016 $
  .Dt OPENSSL 1
  .Os
  .Sh NAME
***************
*** 255,261 ****
  .Qq depth
  of the structures.
  .It Fl in Ar file
! The input file; the default is standard input.
  .It Fl inform Cm der | pem | txt
  The input format.
  .It Fl length Ar number
--- 255,261 ----
  .Qq depth
  of the structures.
  .It Fl in Ar file
! The input file to read from, or standard input if not specified.
  .It Fl inform Cm der | pem | txt
  The input format.
  .It Fl length Ar number
***************
*** 349,355 ****
  The options relevant to CAs are as follows:
  .Bl -tag -width "XXXX"
  .It Fl batch
! This sets the batch mode.
  In this mode no questions will be asked
  and all certificates will be certified automatically.
  .It Fl cert Ar file
--- 349,355 ----
  The options relevant to CAs are as follows:
  .Bl -tag -width "XXXX"
  .It Fl batch
! Batch mode.
  In this mode no questions will be asked
  and all certificates will be certified automatically.
  .It Fl cert Ar file
***************
*** 359,365 ****
  .It Fl days Ar arg
  The number of days to certify the certificate for.
  .It Fl enddate Ar date
! This allows the expiry date to be explicitly set.
  The format of the date is YYMMDDHHMMSSZ
  .Pq the same as an ASN1 UTCTime structure .
  .It Fl extensions Ar section
--- 359,365 ----
  .It Fl days Ar arg
  The number of days to certify the certificate for.
  .It Fl enddate Ar date
! Set the expiry date.
  The format of the date is YYMMDDHHMMSSZ
  .Pq the same as an ASN1 UTCTime structure .
  .It Fl extensions Ar section
***************
*** 449,455 ****
  .It Fl passin Ar arg
  The key password source.
  .It Fl policy Ar arg
! This option defines the CA
  .Qq policy
  to use.
  The policy section in the configuration file
--- 449,455 ----
  .It Fl passin Ar arg
  The key password source.
  .It Fl policy Ar arg
! Define the CA
  .Qq policy
  to use.
  The policy section in the configuration file
***************
*** 491,497 ****
  .It Fl ss_cert Ar file
  A single self-signed certificate to be signed by the CA.
  .It Fl startdate Ar date
! This allows the start date to be explicitly set.
  The format of the date is YYMMDDHHMMSSZ
  .Pq the same as an ASN1 UTCTime structure .
  .It Fl status Ar serial
--- 491,497 ----
  .It Fl ss_cert Ar file
  A single self-signed certificate to be signed by the CA.
  .It Fl startdate Ar date
! Set the start date.
  The format of the date is YYMMDDHHMMSSZ
  .Pq the same as an ASN1 UTCTime structure .
  .It Fl status Ar serial
***************
*** 500,506 ****
  .It Fl updatedb
  Update database for expired certificates.
  .It Fl verbose
! This prints extra details about the operations being performed.
  .El
  .Pp
  The options relevant to CRLs are as follows:
--- 500,506 ----
  .It Fl updatedb
  Update database for expired certificates.
  .It Fl verbose
! Print extra details about the operations being performed.
  .El
  .Pp
  The options relevant to CRLs are as follows:
***************
*** 510,521 ****
  .Fl crl_compromise ,
  except the revocation reason is set to CACompromise.
  .It Fl crl_compromise Ar time
! This sets the revocation reason to keyCompromise and the compromise time to
  .Ar time .
  .Ar time
  should be in GeneralizedTime format, i.e. YYYYMMDDHHMMSSZ.
  .It Fl crl_hold Ar instruction
! This sets the CRL revocation reason code to certificateHold and the hold
  instruction to
  .Ar instruction
  which must be an OID.
--- 510,521 ----
  .Fl crl_compromise ,
  except the revocation reason is set to CACompromise.
  .It Fl crl_compromise Ar time
! Set the revocation reason to keyCompromise and the compromise time to
  .Ar time .
  .Ar time
  should be in GeneralizedTime format, i.e. YYYYMMDDHHMMSSZ.
  .It Fl crl_hold Ar instruction
! Set the CRL revocation reason code to certificateHold and the hold
  instruction to
  .Ar instruction
  which must be an OID.
***************
*** 556,562 ****
  .It Fl crlhours Ar num
  The number of hours before the next CRL is due.
  .It Fl gencrl
! This option generates a CRL based on information in the index file.
  .It Fl revoke Ar file
  A
  .Ar file
--- 556,562 ----
  .It Fl crlhours Ar num
  The number of hours before the next CRL is due.
  .It Fl gencrl
! Generate a CRL based on information in the index file.
  .It Fl revoke Ar file
  A
  .Ar file
***************
*** 793,799 ****
  command converts
  .Nm openssl
  cipher lists into ordered SSL cipher preference lists.
! It can be used as a test tool to determine the appropriate cipherlist.
  .Pp
  The options are as follows:
  .Bl -tag -width Ds
--- 793,799 ----
  command converts
  .Nm openssl
  cipher lists into ordered SSL cipher preference lists.
! It can be used as a way to determine the appropriate cipher list.
  .Pp
  The options are as follows:
  .Bl -tag -width Ds