-.\" $OpenBSD: OBJ_NAME_add.3,v 1.2 2021/12/18 17:47:45 schwarze Exp $
+.\" $OpenBSD: OBJ_NAME_add.3,v 1.3 2022/09/10 10:22:46 jsg Exp $
.\"
.\" Copyright (c) 2021 Ingo Schwarze <schwarze@openbsd.org>
.\"
.\" ACTION OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF
.\" OR IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE.
.\"
-.Dd $Mdocdate: December 18 2021 $
+.Dd $Mdocdate: September 10 2022 $
.Dt OBJ_NAME_ADD 3
.Os
.Sh NAME
.Fn OBJ_NAME_remove
removes the key-value pair or alias with the key
.Pq Fa name , type
-from the array, it it exists.
+from the array, if it exists.
Otherwise, it has no effect.
If the bit
.Dv OBJ_NAME_ALIAS
-.\" $OpenBSD: X509_VERIFY_PARAM_new.3,v 1.3 2021/11/13 18:50:31 schwarze Exp $
+.\" $OpenBSD: X509_VERIFY_PARAM_new.3,v 1.4 2022/09/10 10:22:46 jsg Exp $
.\"
.\" Copyright (c) 2018, 2021 Ingo Schwarze <schwarze@openbsd.org>
.\"
.\" ACTION OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF
.\" OR IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE.
.\"
-.Dd $Mdocdate: November 13 2021 $
+.Dd $Mdocdate: September 10 2022 $
.Dt X509_VERIFY_PARAM_NEW 3
.Os
.Sh NAME
.Fa destination
object is not inspected before overwriting it
.It
-the acceptable policy set set with
+the acceptable policy set with
.Xr X509_VERIFY_PARAM_set1_policies 3
.It
the maximum verification depth set with
-.\" $OpenBSD: X509_check_trust.3,v 1.5 2021/11/26 13:48:21 jsg Exp $
+.\" $OpenBSD: X509_check_trust.3,v 1.6 2022/09/10 10:22:46 jsg Exp $
.\"
.\" Copyright (c) 2021 Ingo Schwarze <schwarze@openbsd.org>
.\"
.\" ACTION OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF
.\" OR IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE.
.\"
-.Dd $Mdocdate: November 26 2021 $
+.Dd $Mdocdate: September 10 2022 $
.Dt X509_CHECK_TRUST 3
.Os
.Sh NAME
argument of
.Fn X509_check_trust
is invalid.
-The compatibility step is not used used in this case.
+The compatibility step is not used in this case.
.Pp
If the return value of the first call to
.Fn X509_TRUST_set_default
-.\" $OpenBSD: i2a_ASN1_STRING.3,v 1.2 2021/11/23 13:52:27 schwarze Exp $
+.\" $OpenBSD: i2a_ASN1_STRING.3,v 1.3 2022/09/10 10:22:46 jsg Exp $
.\"
.\" Copyright (c) 2019, 2021 Ingo Schwarze <schwarze@openbsd.org>
.\"
.\" ACTION OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF
.\" OR IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE.
.\"
-.Dd $Mdocdate: November 23 2021 $
+.Dd $Mdocdate: September 10 2022 $
.Dt I2A_ASN1_STRING 3
.Os
.Sh NAME
Every pair of input digits is converted into one output byte.
.Pp
On every input line, the trailing newline character and an optional
-carrier return character character preceding it are ignored.
+carrier return character preceding it are ignored.
The trailing newline need not be present on the last line.
If there is a backslash character before the newline character,
parsing is continued on the next input line.
-.\" $OpenBSD: SSL_set1_param.3,v 1.5 2019/06/12 09:36:30 schwarze Exp $
+.\" $OpenBSD: SSL_set1_param.3,v 1.6 2022/09/10 10:22:46 jsg Exp $
.\" full merge up to:
.\" OpenSSL man3/SSL_CTX_get0_param 99d63d46 Oct 26 13:56:48 2016 -0400
.\"
.\" ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED
.\" OF THE POSSIBILITY OF SUCH DAMAGE.
.\"
-.Dd $Mdocdate: June 12 2019 $
+.Dd $Mdocdate: September 10 2022 $
.Dt SSL_SET1_PARAM 3
.Os
.Sh NAME
.Fa ssl ,
respectively.
The returned pointer must not be freed by the calling application,
-but the application can modify the parameters pointed to
+but the application can modify the parameters pointed to,
to suit its needs: for example to add a hostname check.
.Pp
.Fn SSL_CTX_set1_param
-.\" $OpenBSD: divert.4,v 1.19 2022/03/31 17:27:20 naddy Exp $
+.\" $OpenBSD: divert.4,v 1.20 2022/09/10 10:22:46 jsg Exp $
.\"
.\" Copyright (c) 2009 Michele Marchetto <michele@openbsd.org>
.\" Copyright (c) 2012-2014 Lawrence Teo <lteo@openbsd.org>
.\" ACTION OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF
.\" OR IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE.
.\"
-.Dd $Mdocdate: March 31 2022 $
+.Dd $Mdocdate: September 10 2022 $
.Dt DIVERT 4
.Os
.Sh NAME
When reinjecting, use this address as argument to
.Xr sendto 2 .
This allows the kernel to guess the original incoming interface and
-and process it as an incoming packet.
+process it as an incoming packet.
If no interface IP address is given, the reinjected packet is treated
as an outgoing packet.
Since the userspace application could have modified the packets, upon