-.\" $OpenBSD: pledge.2,v 1.44 2017/06/11 18:56:09 jmc Exp $
+.\" $OpenBSD: pledge.2,v 1.45 2017/07/05 11:43:09 schwarze Exp $
.\"
.\" Copyright (c) 2015 Nicholas Marriott <nicm@openbsd.org>
.\"
.\" ACTION OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF
.\" OR IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE.
.\"
-.Dd $Mdocdate: June 11 2017 $
+.Dd $Mdocdate: July 5 2017 $
.Dt PLEDGE 2
.Os
.Sh NAME
.Xr uname 3 ,
system sensor readings.
.Pp
-.It Xr pledge 2
+.It Fn pledge
Can only reduce permissions; can only set a list of
.Pa paths
once.
-.\" $OpenBSD: X509V3_get_d2i.3,v 1.5 2016/12/28 13:45:30 schwarze Exp $
+.\" $OpenBSD: X509V3_get_d2i.3,v 1.6 2017/07/05 11:43:09 schwarze Exp $
.\" OpenSSL 047dd81e Jul 4 23:03:17 2014 +0100
.\"
.\" This file was written by Dr. Stephen Henson <steve@openssl.org>.
.\" ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED
.\" OF THE POSSIBILITY OF SUCH DAMAGE.
.\"
-.Dd $Mdocdate: December 28 2016 $
+.Dd $Mdocdate: July 5 2017 $
.Dt X509V3_GET_D2I 3
.Os
.Sh NAME
.Xr ERR_get_error 3 ,
.Xr X509_CRL_get0_by_serial 3 ,
.Xr X509_EXTENSION_new 3 ,
-.Xr X509_get_ext_d2i 3 ,
.Xr X509_get_pubkey 3 ,
.Xr X509_get_subject_name 3 ,
.Xr X509_get_version 3 ,
-.\" $OpenBSD: X509v3_get_ext_by_NID.3,v 1.3 2016/12/15 15:22:17 schwarze Exp $
+.\" $OpenBSD: X509v3_get_ext_by_NID.3,v 1.4 2017/07/05 11:43:09 schwarze Exp $
.\" OpenSSL c952780c Jun 21 07:03:34 2016 -0400
.\"
.\" This file was written by Dr. Stephen Henson <steve@openssl.org>.
.\" ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED
.\" OF THE POSSIBILITY OF SUCH DAMAGE.
.\"
-.Dd $Mdocdate: December 15 2016 $
+.Dd $Mdocdate: July 5 2017 $
.Dt X509V3_GET_EXT_BY_NID 3
.Os
.Sh NAME
.Dv NULL
is returned.
.Pp
-.Xr X509v3_add_ext 3
+.Fn X509v3_add_ext
adds the extension
.Fa ex
to the stack
.Fn X509v3_get_ext_by_critical
return the extension index or -1 if an error occurs.
.Pp
-.Xr X509v3_add_ext 3
+.Fn X509v3_add_ext
returns a stack of extensions or
.Dv NULL
on error.
-.\" $OpenBSD: keynote.3,v 1.53 2017/06/10 14:15:52 schwarze Exp $
+.\" $OpenBSD: keynote.3,v 1.54 2017/07/05 11:43:09 schwarze Exp $
.\"
.\" The author of this code is Angelos D. Keromytis (angelos@dsl.cis.upenn.edu)
.\"
.\" MERCHANTABILITY OF THIS SOFTWARE OR ITS FITNESS FOR ANY PARTICULAR
.\" PURPOSE.
.\"
-.Dd $Mdocdate: June 10 2017 $
+.Dd $Mdocdate: July 5 2017 $
.Dt KN_INIT 3
.\" .TH KeyNote 3 local
.Os
.Fa Authorizer .
On success, this function will return an assertion ID which can be
used to remove the assertion from the session, by using
-.Xr kn_remove_assertion 3 .
+.Fn kn_remove_assertion .
On failure, \-1 is returned, and
.Va keynote_errno
is set to
large.
.Pp
On success,
-.Xr kn_add_action 3
+.Fn kn_add_action
returns 0.
On failure, it returns \-1 and sets
.Va keynote_errno
the
.Fa returnvalues
from the previous call to
-.Xr kn_do_query 3
+.Fn kn_do_query
will be used.
The programmer SHOULD NOT free
.Fa returnvalues
after the call to
-.Xr kn_do_query 3
+.Fn kn_do_query
if this feature is used, as the array is not replicated internally.
On success, this function returns an index into the
.Fa returnvalues
.Fa sessid
that was somehow invalid during evaluation.
This function is typically called after
-.Xr kn_do_query 3
+.Fn kn_do_query
is used to evaluate a request.
.Fa type
specifies the type of failure the application is interested in.
.Pp
These values are defined in keynote.h.
An application can then delete the offending assertion using
-.Xr kn_remove_assertion 3 .
+.Fn kn_remove_assertion .
For example, to remove all assertion whose signature failed, an application
could do something like:
.Bd -literal
.Ed
.Pp
On success,
-.Xr kn_get_failed 3
+.Fn kn_get_failed
returns an assertion ID.
On failure, or when no assertion matching the given criteria is found,
it returns \-1 and set
and
.Fa flags
arguments to
-.Xr kn_add_assertion 3
+.Fn kn_add_assertion
respectively.
.Fa env_regex
is not used.
On failure, it returns \-1 and sets
.Va keynote_errno
to the same values as
-.Xr kn_do_query 3 ,
+.Fn kn_do_query ,
or to
.Er ERROR_MEMORY
if a trusted or untrusted assertion could not be added to the session due
with
.Fa dec_algorithm
describing the algorithm (see
-.Xr kn_encode_key 3 ) ,
+.Fn kn_encode_key ) ,
and
.Fa dec_key
pointing to an algorithm-dependent structure.
-.\" $OpenBSD: SSL_CIPHER_get_name.3,v 1.2 2016/11/29 19:18:52 schwarze Exp $
+.\" $OpenBSD: SSL_CIPHER_get_name.3,v 1.3 2017/07/05 11:43:09 schwarze Exp $
.\" OpenSSL 45f55f6a Nov 30 15:35:22 2014 +0100
.\"
.\" This file was written by Lutz Jaenicke <jaenicke@openssl.org>.
.\" ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED
.\" OF THE POSSIBILITY OF SUCH DAMAGE.
.\"
-.Dd $Mdocdate: November 29 2016 $
+.Dd $Mdocdate: July 5 2017 $
.Dt SSL_CIPHER_GET_NAME 3
.Os
.Sh NAME
In some cases it should possibly return
.Qq TLSv1.2
but the function does not; use
-.Xr SSL_CIPHER_description 3
+.Fn SSL_CIPHER_description
instead.
If
.Fa cipher
-.\" $OpenBSD: SSL_num_renegotiations.3,v 1.2 2017/04/10 14:00:51 schwarze Exp $
+.\" $OpenBSD: SSL_num_renegotiations.3,v 1.3 2017/07/05 11:43:09 schwarze Exp $
.\"
.\" Copyright (c) 2016 Ingo Schwarze <schwarze@openbsd.org>
.\"
.\" ACTION OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF
.\" OR IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE.
.\"
-.Dd $Mdocdate: April 10 2017 $
+.Dd $Mdocdate: July 5 2017 $
.Dt SSL_NUM_RENEGOTIATIONS 3
.Os
.Sh NAME
.Xr SSL_new 3 ,
.Xr SSL_clear 3 ,
or
-.Xr SSL_clear_num_renegotiations 3
+.Fn SSL_clear_num_renegotiations
was last called on that object.
.Pp
.Fn SSL_clear_num_renegotiations
-.\" $OpenBSD: socreate.9,v 1.6 2016/07/27 13:02:50 phessler Exp $
+.\" $OpenBSD: socreate.9,v 1.7 2017/07/05 11:43:09 schwarze Exp $
.\"
.\" Copyright (c) 2006 Robert N. M. Watson
.\" All rights reserved.
.\"
.\" $FreeBSD: src/share/man/man9/socket.9,v 1.2 2006/12/16 10:32:10 rwatson Exp $
.\"
-.Dd $Mdocdate: July 27 2016 $
+.Dd $Mdocdate: July 5 2017 $
.Dt SOCREATE 9
.Os
.Sh NAME
.Pp
When the
.Fn so_upcall
-function pointer is not NULL, it is called when
-.Xr soreceive 9
+function pointer is not
+.Dv NULL ,
+it is called when
+.Fn soreceive
matches an incoming connection.
.Pp
The
projects / openbsd / commitdiff