From 114b285775411c80e68d9031cf2b80c83c75d07f Mon Sep 17 00:00:00 2001
From: tb <tb@openbsd.org>
Date: Tue, 23 Nov 2021 17:06:05 +0000
Subject: [PATCH] Use LIBRESSL_NEXT_API to document the commented-out functions
 that are not yet available.

ok schwarze
---
 lib/libcrypto/man/X509_STORE_CTX_set_verify.3 | 26 +++++++++----------
 1 file changed, 13 insertions(+), 13 deletions(-)

diff --git a/lib/libcrypto/man/X509_STORE_CTX_set_verify.3 b/lib/libcrypto/man/X509_STORE_CTX_set_verify.3
index a68ade6b3f8..ccce6a0eb1e 100644
--- a/lib/libcrypto/man/X509_STORE_CTX_set_verify.3
+++ b/lib/libcrypto/man/X509_STORE_CTX_set_verify.3
@@ -1,4 +1,4 @@
-.\" $OpenBSD: X509_STORE_CTX_set_verify.3,v 1.1 2021/11/17 16:08:32 schwarze Exp $
+.\" $OpenBSD: X509_STORE_CTX_set_verify.3,v 1.2 2021/11/23 17:06:05 tb Exp $
 .\"
 .\" Copyright (c) 2021 Ingo Schwarze <schwarze@openbsd.org>
 .\"
@@ -14,16 +14,16 @@
 .\" ACTION OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF
 .\" OR IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE.
 .\"
-.Dd $Mdocdate: November 17 2021 $
+.Dd $Mdocdate: November 23 2021 $
 .Dt X509_STORE_CTX_SET_VERIFY 3
 .Os
-.\" ds LIBRESSL_NEW_API
+.\" ds LIBRESSL_NEXT_API
 .Sh NAME
-.if dLIBRESSL_NEW_API \{\
+.if dLIBRESSL_NEXT_API \{\
 .Nm X509_STORE_CTX_verify_fn ,
 .\}
 .Nm X509_STORE_CTX_set_verify ,
-.ie dLIBRESSL_NEW_API \{\
+.ie dLIBRESSL_NEXT_API \{\
 .Nm X509_STORE_CTX_get_verify ,
 .Nm X509_STORE_set_verify ,
 .Nm X509_STORE_set_verify_func
@@ -34,7 +34,7 @@
 .Nd user-defined certificate chain verification function
 .Sh SYNOPSIS
 .In openssl/x509_vfy.h
-.if dLIBRESSL_NEW_API \{\
+.if dLIBRESSL_NEXT_API \{\
 .Ft typedef int
 .Fo "(*X509_STORE_CTX_verify_fn)"
 .Fa "X509_STORE_CTX *ctx"
@@ -43,14 +43,14 @@
 .Ft void
 .Fo X509_STORE_CTX_set_verify
 .Fa "X509_STORE_CTX *ctx"
-.ie dLIBRESSL_NEW_API \{\
+.ie dLIBRESSL_NEXT_API \{\
 .Fa "X509_STORE_CTX_verify_fn verify"
 .\}
 .el \{\
 .Fa "int (*verify)(X509_STORE_CTX *)"
 .\}
 .Fc
-.ie dLIBRESSL_NEW_API \{\
+.ie dLIBRESSL_NEXT_API \{\
 .Ft X509_STORE_CTX_verify_fn
 .Fo X509_STORE_CTX_get_verify
 .\}
@@ -60,7 +60,7 @@
 .\}
 .Fa "X509_STORE_CTX *ctx"
 .Fc
-.if dLIBRESSL_NEW_API \{\
+.if dLIBRESSL_NEXT_API \{\
 .Ft void
 .Fo X509_STORE_set_verify
 .Fa "X509_STORE *store"
@@ -97,7 +97,7 @@ or
 .Xr X509_VERIFY_PARAM_set_flags 3 .
 Otherwise, it is ignored and a different algorithm is used that does
 not support replacing the verification function.
-.if dLIBRESSL_NEW_API \{\
+.if dLIBRESSL_NEXT_API \{\
 .Pp
 .Fn X509_STORE_set_verify
 saves the function pointer
@@ -118,7 +118,7 @@ is an alias for
 implemented as a macro.
 .\}
 .Sh RETURN VALUES
-.if dLIBRESSL_NEW_API \{\
+.if dLIBRESSL_NEXT_API \{\
 .Fn X509_STORE_CTX_verify_fn
 is supposed to return 1 to indicate that the chain is valid
 or 0 if it is not or if an error occurred.
@@ -145,7 +145,7 @@ is uninitialized.
 .Xr X509_verify_cert 3 ,
 .Xr X509_VERIFY_PARAM_set_flags 3
 .Sh HISTORY
-.if dLIBRESSL_NEW_API \{\
+.if dLIBRESSL_NEXT_API \{\
 .Fn X509_STORE_set_verify_func
 first appeared in SSLeay 0.8.0 and has been available since
 .Ox 2.4 .
@@ -156,7 +156,7 @@ and
 .Fn X509_STORE_CTX_get_verify
 first appeared in OpenSSL 1.1.0 and have been available since
 .Ox 7.1 .
-.if dLIBRESSL_NEW_API \{\
+.if dLIBRESSL_NEXT_API \{\
 .Pp
 .Fn X509_STORE_CTX_verify_fn
 and
-- 
2.20.1