crypto/openssl: update generated content to match 3.5.8 release

This contains 2 new manpages as well as some minor manpage content changes. MFC with: 78e936b2d
2026-10-28 19:34:43 +01:00 · 2026-08-28 18:41:30 -07:00
1 parent 78e936b2d0
commit 0d4d0f3a9f
@@ -8,7 +8,7 @@ modulesdir=${libdir}/ossl-modules

 Name: OpenSSL-libcrypto
 Description: OpenSSL cryptography library
-Version: 3.5.7
+Version: 3.5.8
 Libs: -L${libdir} -lcrypto
 Libs.private: -pthread
 Cflags: -I${includedir}
@@ -6,7 +6,7 @@ includedir=${prefix}/include

 Name: OpenSSL-libssl
 Description: Secure Sockets Layer and cryptography libraries
-Version: 3.5.7
+Version: 3.5.8
 Requires.private: libcrypto
 Libs: -L${libdir} -lssl
 Cflags: -I${includedir}
@@ -6,5 +6,5 @@ includedir=${prefix}/include

 Name: OpenSSL
 Description: Secure Sockets Layer and cryptography libraries and tools
-Version: 3.5.7
+Version: 3.5.8
 Requires: libssl libcrypto
@@ -34,7 +34,7 @@ extern "C" {
 # define OPENSSL_VERSION_MINOR  5
 /* clang-format on */
 /* clang-format off */
-# define OPENSSL_VERSION_PATCH  7
+# define OPENSSL_VERSION_PATCH  8
 /* clang-format on */

 /*
@@ -87,10 +87,10 @@ extern "C" {
 * OPENSSL_VERSION_BUILD_METADATA_STR appended.
 */
 /* clang-format off */
-# define OPENSSL_VERSION_STR "3.5.7"
+# define OPENSSL_VERSION_STR "3.5.8"
 /* clang-format on */
 /* clang-format off */
-# define OPENSSL_FULL_VERSION_STR "3.5.7"
+# define OPENSSL_FULL_VERSION_STR "3.5.8"
 /* clang-format on */

 /*
@@ -99,7 +99,7 @@ extern "C" {
 * These strings are defined separately to allow them to be parsable.
 */
 /* clang-format off */
-# define OPENSSL_RELEASE_DATE "9 Jun 2026"
+# define OPENSSL_RELEASE_DATE "25 Aug 2026"
 /* clang-format on */

 /*
@@ -107,7 +107,7 @@ extern "C" {
 */

 /* clang-format off */
-# define OPENSSL_VERSION_TEXT "OpenSSL 3.5.7 9 Jun 2026"
+# define OPENSSL_VERSION_TEXT "OpenSSL 3.5.8 25 Aug 2026"
 /* clang-format on */

 /* clang-format off */
@@ -2488,6 +2488,7 @@ __owur int SSL_get_conn_close_info(SSL *ssl,
 #define SSL_VALUE_STREAM_WRITE_BUF_SIZE 7
 #define SSL_VALUE_STREAM_WRITE_BUF_USED 8
 #define SSL_VALUE_STREAM_WRITE_BUF_AVAIL 9
+#define SSL_VALUE_QUIC_MAX_PENDING_CONNS 16

 #define SSL_VALUE_EVENT_HANDLING_MODE_INHERIT 0
 #define SSL_VALUE_EVENT_HANDLING_MODE_IMPLICIT 1
@@ -2735,8 +2736,18 @@ const CTLOG_STORE *SSL_CTX_get0_ctlog_store(const SSL_CTX *ctx);
 #define SSL_SECOP_OTHER_SIGALG (5 << 16)
 #define SSL_SECOP_OTHER_CERT (6 << 16)

-/* Indicated operation refers to peer key or certificate */
+/*
+ * Unused values - these do nothing and are never set.
+ * They are retained because of API. They should
+ * be removed next major
+ */
 #define SSL_SECOP_PEER 0x1000
+/* Peer EE key in certificate */
+#define SSL_SECOP_PEER_EE_KEY (SSL_SECOP_EE_KEY | SSL_SECOP_PEER)
+/* Peer CA key in certificate */
+#define SSL_SECOP_PEER_CA_KEY (SSL_SECOP_CA_KEY | SSL_SECOP_PEER)
+/* Peer CA digest algorithm in certificate */
+#define SSL_SECOP_PEER_CA_MD (SSL_SECOP_CA_MD | SSL_SECOP_PEER)

 /* Values for "op" parameter in security callback */

@@ -2775,12 +2786,6 @@ const CTLOG_STORE *SSL_CTX_get0_ctlog_store(const SSL_CTX *ctx);
 #define SSL_SECOP_CA_KEY (17 | SSL_SECOP_OTHER_CERT)
 /* CA digest algorithm in certificate */
 #define SSL_SECOP_CA_MD (18 | SSL_SECOP_OTHER_CERT)
-/* Peer EE key in certificate */
-#define SSL_SECOP_PEER_EE_KEY (SSL_SECOP_EE_KEY | SSL_SECOP_PEER)
-/* Peer CA key in certificate */
-#define SSL_SECOP_PEER_CA_KEY (SSL_SECOP_CA_KEY | SSL_SECOP_PEER)
-/* Peer CA digest algorithm in certificate */
-#define SSL_SECOP_PEER_CA_MD (SSL_SECOP_CA_MD | SSL_SECOP_PEER)

 void SSL_set_security_level(SSL *s, int level);
 __owur int SSL_get_security_level(const SSL *s);
@@ -58,7 +58,7 @@
 .\" ========================================================================
 .\"
 .IX Title "ADMISSIONS 3ossl"
-.TH ADMISSIONS 3ossl 2026-06-09 3.5.7 OpenSSL
+.TH ADMISSIONS 3ossl 2026-08-25 3.5.8 OpenSSL
 .\" For nroff, turn off justification.  Always turn off hyphenation; it makes
 .\" way too many mistakes in technical documents.
 .if n .ad l
@@ -58,7 +58,7 @@
 .\" ========================================================================
 .\"
 .IX Title "ASN1_EXTERN_FUNCS 3ossl"
-.TH ASN1_EXTERN_FUNCS 3ossl 2026-01-27 3.5.5 OpenSSL
+.TH ASN1_EXTERN_FUNCS 3ossl 2026-08-25 3.5.8 OpenSSL
 .\" For nroff, turn off justification.  Always turn off hyphenation; it makes
 .\" way too many mistakes in technical documents.
 .if n .ad l
@@ -58,7 +58,7 @@
 .\" ========================================================================
 .\"
 .IX Title "ASN1_INTEGER_GET_INT64 3ossl"
-.TH ASN1_INTEGER_GET_INT64 3ossl 2026-06-09 3.5.7 OpenSSL
+.TH ASN1_INTEGER_GET_INT64 3ossl 2026-08-25 3.5.8 OpenSSL
 .\" For nroff, turn off justification.  Always turn off hyphenation; it makes
 .\" way too many mistakes in technical documents.
 .if n .ad l
@@ -167,7 +167,7 @@ of an \fBint64_t\fR type.
 only fail due to a memory allocation error.
 .PP
 \&\fBASN1_INTEGER_to_BN()\fR and \fBASN1_ENUMERATED_to_BN()\fR return a \fBBIGNUM\fR structure
-of NULL if an error occurs. They can fail if the passed type is incorrect
+or NULL if an error occurs. They can fail if the passed type is incorrect
 (due to programming error) or due to a memory allocation failure.
 .SH "SEE ALSO"
 .IX Header "SEE ALSO"
@@ -179,7 +179,7 @@ of NULL if an error occurs. They can fail if the passed type is incorrect
 were added in OpenSSL 1.1.0.
 .SH COPYRIGHT
 .IX Header "COPYRIGHT"
-Copyright 2015\-2020 The OpenSSL Project Authors. All Rights Reserved.
+Copyright 2015\-2026 The OpenSSL Project Authors. All Rights Reserved.
 .PP
 Licensed under the Apache License 2.0 (the "License").  You may not use
 this file except in compliance with the License.  You can obtain a copy
@@ -58,7 +58,7 @@
 .\" ========================================================================
 .\"
 .IX Title "ASN1_INTEGER_NEW 3ossl"
-.TH ASN1_INTEGER_NEW 3ossl 2026-01-27 3.5.5 OpenSSL
+.TH ASN1_INTEGER_NEW 3ossl 2026-08-25 3.5.8 OpenSSL
 .\" For nroff, turn off justification.  Always turn off hyphenation; it makes
 .\" way too many mistakes in technical documents.
 .if n .ad l
@@ -58,7 +58,7 @@
 .\" ========================================================================
 .\"
 .IX Title "ASN1_ITEM_LOOKUP 3ossl"
-.TH ASN1_ITEM_LOOKUP 3ossl 2026-01-27 3.5.5 OpenSSL
+.TH ASN1_ITEM_LOOKUP 3ossl 2026-08-25 3.5.8 OpenSSL
 .\" For nroff, turn off justification.  Always turn off hyphenation; it makes
 .\" way too many mistakes in technical documents.
 .if n .ad l
@@ -58,7 +58,7 @@
 .\" ========================================================================
 .\"
 .IX Title "ASN1_OBJECT_NEW 3ossl"
-.TH ASN1_OBJECT_NEW 3ossl 2026-01-27 3.5.5 OpenSSL
+.TH ASN1_OBJECT_NEW 3ossl 2026-08-25 3.5.8 OpenSSL
 .\" For nroff, turn off justification.  Always turn off hyphenation; it makes
 .\" way too many mistakes in technical documents.
 .if n .ad l
@@ -58,7 +58,7 @@
 .\" ========================================================================
 .\"
 .IX Title "ASN1_STRING_TABLE_ADD 3ossl"
-.TH ASN1_STRING_TABLE_ADD 3ossl 2026-01-27 3.5.5 OpenSSL
+.TH ASN1_STRING_TABLE_ADD 3ossl 2026-08-25 3.5.8 OpenSSL
 .\" For nroff, turn off justification.  Always turn off hyphenation; it makes
 .\" way too many mistakes in technical documents.
 .if n .ad l
@@ -58,7 +58,7 @@
 .\" ========================================================================
 .\"
 .IX Title "ASN1_STRING_LENGTH 3ossl"
-.TH ASN1_STRING_LENGTH 3ossl 2026-06-09 3.5.7 OpenSSL
+.TH ASN1_STRING_LENGTH 3ossl 2026-08-25 3.5.8 OpenSSL
 .\" For nroff, turn off justification.  Always turn off hyphenation; it makes
 .\" way too many mistakes in technical documents.
 .if n .ad l
@@ -58,7 +58,7 @@
 .\" ========================================================================
 .\"
 .IX Title "ASN1_STRING_NEW 3ossl"
-.TH ASN1_STRING_NEW 3ossl 2026-01-27 3.5.5 OpenSSL
+.TH ASN1_STRING_NEW 3ossl 2026-08-25 3.5.8 OpenSSL
 .\" For nroff, turn off justification.  Always turn off hyphenation; it makes
 .\" way too many mistakes in technical documents.
 .if n .ad l
@@ -58,7 +58,7 @@
 .\" ========================================================================
 .\"
 .IX Title "ASN1_STRING_PRINT_EX 3ossl"
-.TH ASN1_STRING_PRINT_EX 3ossl 2026-01-27 3.5.5 OpenSSL
+.TH ASN1_STRING_PRINT_EX 3ossl 2026-08-25 3.5.8 OpenSSL
 .\" For nroff, turn off justification.  Always turn off hyphenation; it makes
 .\" way too many mistakes in technical documents.
 .if n .ad l
@@ -58,7 +58,7 @@
 .\" ========================================================================
 .\"
 .IX Title "ASN1_TIME_SET 3ossl"
-.TH ASN1_TIME_SET 3ossl 2026-01-27 3.5.5 OpenSSL
+.TH ASN1_TIME_SET 3ossl 2026-08-25 3.5.8 OpenSSL
 .\" For nroff, turn off justification.  Always turn off hyphenation; it makes
 .\" way too many mistakes in technical documents.
 .if n .ad l
@@ -58,7 +58,7 @@
 .\" ========================================================================
 .\"
 .IX Title "ASN1_TYPE_GET 3ossl"
-.TH ASN1_TYPE_GET 3ossl 2026-06-09 3.5.7 OpenSSL
+.TH ASN1_TYPE_GET 3ossl 2026-08-25 3.5.8 OpenSSL
 .\" For nroff, turn off justification.  Always turn off hyphenation; it makes
 .\" way too many mistakes in technical documents.
 .if n .ad l
@@ -58,7 +58,7 @@
 .\" ========================================================================
 .\"
 .IX Title "ASN1_AUX_CB 3ossl"
-.TH ASN1_AUX_CB 3ossl 2026-01-27 3.5.5 OpenSSL
+.TH ASN1_AUX_CB 3ossl 2026-08-25 3.5.8 OpenSSL
 .\" For nroff, turn off justification.  Always turn off hyphenation; it makes
 .\" way too many mistakes in technical documents.
 .if n .ad l
@@ -117,7 +117,7 @@ An \fBASN1_AUX\fR structure contains the following information.
 Arbitrary application data
 .IP \fIflags\fR 4
 .IX Item "flags"
-Flags which indicate the auxiliarly functionality supported.
+Flags which indicate the auxiliary functionality supported.
 .Sp
 The \fBASN1_AFLG_REFCOUNT\fR flag indicates that objects support reference counting.
 .Sp
@@ -157,9 +157,11 @@ During the processing of an \fBASN1_VALUE\fR object the callbacks set via
 \&\fIasn1_cb\fR or \fIasn1_const_cb\fR will be invoked as a result of various events
 indicated via the \fIoperation\fR parameter. The value of \fI*in\fR will be the
 \&\fBASN1_VALUE\fR object being processed based on the template in \fIit\fR. An
-additional operation specific parameter may be passed in \fIexarg\fR. The currently
-supported operations are as follows. The callbacks should return a positive
-value on success or zero on error, unless otherwise noted below.
+additional operation specific parameter may be passed in \fIexarg\fR. The
+currently supported operations are as follows. Unless noted otherwise below,
+the callbacks should return a positive value on success and zero on error;
+some operations recognise additional return values, and a few do not consult
+the return value at all.
 .IP \fBASN1_OP_NEW_PRE\fR 4
 .IX Item "ASN1_OP_NEW_PRE"
 Invoked when processing a \fBCHOICE\fR, \fBSEQUENCE\fR or \fBNDEF_SEQUENCE\fR structure
@@ -176,12 +178,14 @@ after an \fBASN1_VALUE\fR object has been allocated. The allocated object is in
 Invoked when processing a \fBCHOICE\fR, \fBSEQUENCE\fR or \fBNDEF_SEQUENCE\fR structure
 immediately before an \fBASN1_VALUE\fR is freed. If the callback originally
 constructed the \fBASN1_VALUE\fR via \fBASN1_OP_NEW_PRE\fR then it should free it at
-this point and return 2 from the callback. Otherwise it should return 1 for
-success or 0 on error.
+this point and return 2; the caller will then skip its normal freeing. Any
+other return value (including zero) causes the caller to proceed with normal
+freeing; the hook cannot signal an error.
 .IP \fBASN1_OP_FREE_POST\fR 4
 .IX Item "ASN1_OP_FREE_POST"
 Invoked when processing a \fBCHOICE\fR, \fBSEQUENCE\fR or \fBNDEF_SEQUENCE\fR structure
-immediately after \fBASN1_VALUE\fR sub\-structures are freed.
+immediately after \fBASN1_VALUE\fR sub\-structures are freed. The caller does not
+consult the return value from this hook.
 .IP \fBASN1_OP_D2I_PRE\fR 4
 .IX Item "ASN1_OP_D2I_PRE"
 Invoked when processing a \fBCHOICE\fR, \fBSEQUENCE\fR or \fBNDEF_SEQUENCE\fR structure
@@ -202,7 +206,10 @@ immediately after a "i2d" operation for the \fBASN1_VALUE\fR.
 .IX Item "ASN1_OP_PRINT_PRE"
 Invoked when processing a \fBSEQUENCE\fR or \fBNDEF_SEQUENCE\fR structure immediately
 before printing the \fBASN1_VALUE\fR. The \fIexarg\fR argument will be a pointer to an
-\&\fBASN1_PRINT_ARG\fR structure (see below).
+\&\fBASN1_PRINT_ARG\fR structure (see below). If the callback has fully printed the
+value itself it should return 2; the caller will then skip the per\-field
+printing loop and the matching \fBASN1_OP_PRINT_POST\fR callback. Return zero on
+error or any other positive value to continue with normal printing.
 .IP \fBASN1_OP_PRINT_POST\fR 4
 .IX Item "ASN1_OP_PRINT_POST"
 Invoked when processing a \fBSEQUENCE\fR or \fBNDEF_SEQUENCE\fR structure immediately
@@ -274,8 +281,27 @@ The \fBBIO\fR with filters appended
 The streaming I/O boundary.
 .SH "RETURN VALUES"
 .IX Header "RETURN VALUES"
-The callbacks return 0 on error and a positive value on success. Some operations
-require specific positive success values as noted above.
+In general the callbacks return zero on error and a positive value on
+success. Several operations have additional or different return\-value
+semantics, summarised here:
+.IP \(bu 4
+\&\fBASN1_OP_NEW_PRE\fR recognises a return of 2, meaning that the callback has
+allocated the \fBASN1_VALUE\fR itself and normal allocation should be skipped.
+.IP \(bu 4
+\&\fBASN1_OP_FREE_PRE\fR recognises a return of 2, meaning that the callback has
+freed the \fBASN1_VALUE\fR itself and normal freeing should be skipped. Other
+return values (including zero) cause normal freeing to proceed; the hook
+cannot signal an error.
+.IP \(bu 4
+\&\fBASN1_OP_FREE_POST\fR\*(Aqs return value is not consulted by the caller.
+.IP \(bu 4
+\&\fBASN1_OP_PRINT_PRE\fR recognises a return of 2, meaning that the callback
+has printed the value itself; the caller will skip the per\-field printing
+loop and the matching \fBASN1_OP_PRINT_POST\fR invocation.
+.IP \(bu 4
+\&\fBASN1_OP_STREAM_PRE\fR, \fBASN1_OP_STREAM_POST\fR, \fBASN1_OP_DETACHED_PRE\fR, and
+\&\fBASN1_OP_DETACHED_POST\fR treat any non\-positive return value (zero or
+negative) as an error.
 .SH "SEE ALSO"
 .IX Header "SEE ALSO"
 \&\fBASN1_item_new_ex\fR\|(3)
@@ -285,7 +311,7 @@ The \fBASN1_aux_const_cb()\fR callback and the \fBASN1_OP_GET0_LIBCTX\fR and
 \&\fBASN1_OP_GET0_PROPQ\fR operation types were added in OpenSSL 3.0.
 .SH COPYRIGHT
 .IX Header "COPYRIGHT"
-Copyright 2021\-2025 The OpenSSL Project Authors. All Rights Reserved.
+Copyright 2021\-2026 The OpenSSL Project Authors. All Rights Reserved.
 .PP
 Licensed under the Apache License 2.0 (the "License").  You may not use
 this file except in compliance with the License.  You can obtain a copy
@@ -58,7 +58,7 @@
 .\" ========================================================================
 .\"
 .IX Title "ASN1_GENERATE_NCONF 3ossl"
-.TH ASN1_GENERATE_NCONF 3ossl 2026-01-27 3.5.5 OpenSSL
+.TH ASN1_GENERATE_NCONF 3ossl 2026-08-25 3.5.8 OpenSSL
 .\" For nroff, turn off justification.  Always turn off hyphenation; it makes
 .\" way too many mistakes in technical documents.
 .if n .ad l
@@ -58,7 +58,7 @@
 .\" ========================================================================
 .\"
 .IX Title "ASN1_ITEM_D2I_BIO 3ossl"
-.TH ASN1_ITEM_D2I_BIO 3ossl 2026-06-09 3.5.7 OpenSSL
+.TH ASN1_ITEM_D2I_BIO 3ossl 2026-08-25 3.5.8 OpenSSL
 .\" For nroff, turn off justification.  Always turn off hyphenation; it makes
 .\" way too many mistakes in technical documents.
 .if n .ad l
@@ -121,6 +121,16 @@ algorithm fetches are required during the process then they will use the
 string in \fIpropq\fR. See "ALGORITHM FETCHING" in \fBcrypto\fR\|(7) for more information
 about algorithm fetching.
 .PP
+When reading from \fIin\fR, decoding consumes one complete DER\-encoded structure
+and leaves any following bytes in the BIO, so concatenated structures can be
+read with successive calls. Reaching the end of the input cleanly, at a
+structure boundary, is not treated as an error: the function returns NULL
+without adding to the error queue. If the end of the input is reached in the
+middle of a structure, or an indefinite\-length value is missing its
+end\-of\-contents octets (that is, the input is truncated), an error is queued
+with reason code \fBASN1_R_NOT_ENOUGH_DATA\fR. The same applies to
+\&\fBASN1_item_d2i_fp_ex()\fR.
+.PP
 \&\fBASN1_item_d2i_bio()\fR is the same as \fBASN1_item_d2i_bio_ex()\fR except that the
 default \fBOSSL_LIB_CTX\fR is used (i.e. NULL) and with a NULL property query
 string.
@@ -153,6 +163,12 @@ that the \fIlibctx\fR and \fIpropq\fR can be used when doing algorithm fetching.
 \&\fBASN1_item_d2i_bio()\fR, \fBASN1_item_unpack_ex()\fR and \fBASN1_item_unpack()\fR return a pointer to
 an \fBASN1_VALUE\fR or NULL on error.
 .PP
+The \fBASN1_item_d2i_bio()\fR and \fBASN1_item_d2i_fp()\fR functions, including their
+\&\fB_ex\fR variants, also return NULL at a clean end of input. In that case the
+error queue is left unchanged, so a caller reading concatenated structures in
+a loop can distinguish a clean end of input from a decoding error by
+inspecting the error queue, for example with \fBERR_peek_error\fR\|(3).
+.PP
 \&\fBASN1_item_i2d_mem_bio()\fR returns a pointer to a memory BIO or NULL on error.
 .PP
 \&\fBASN1_item_pack()\fR returns a pointer to an \fBASN1_STRING\fR or NULL on error.
@@ -164,7 +180,7 @@ and \fBASN1_item_i2d_mem_bio()\fR were added in OpenSSL 3.0.
 The function \fBASN1_item_unpack_ex()\fR was added in OpenSSL 3.2.
 .SH COPYRIGHT
 .IX Header "COPYRIGHT"
-Copyright 2021\-2023 The OpenSSL Project Authors. All Rights Reserved.
+Copyright 2021\-2026 The OpenSSL Project Authors. All Rights Reserved.
 .PP
 Licensed under the Apache License 2.0 (the "License").  You may not use
 this file except in compliance with the License.  You can obtain a copy
@@ -58,7 +58,7 @@
 .\" ========================================================================
 .\"
 .IX Title "ASN1_ITEM_NEW 3ossl"
-.TH ASN1_ITEM_NEW 3ossl 2026-01-27 3.5.5 OpenSSL
+.TH ASN1_ITEM_NEW 3ossl 2026-08-25 3.5.8 OpenSSL
 .\" For nroff, turn off justification.  Always turn off hyphenation; it makes
 .\" way too many mistakes in technical documents.
 .if n .ad l
@@ -58,7 +58,7 @@
 .\" ========================================================================
 .\"
 .IX Title "ASN1_ITEM_SIGN 3ossl"
-.TH ASN1_ITEM_SIGN 3ossl 2026-06-09 3.5.7 OpenSSL
+.TH ASN1_ITEM_SIGN 3ossl 2026-08-25 3.5.8 OpenSSL
 .\" For nroff, turn off justification.  Always turn off hyphenation; it makes
 .\" way too many mistakes in technical documents.
 .if n .ad l
@@ -58,7 +58,7 @@
 .\" ========================================================================
 .\"
 .IX Title "ASYNC_WAIT_CTX_NEW 3ossl"
-.TH ASYNC_WAIT_CTX_NEW 3ossl 2026-01-27 3.5.5 OpenSSL
+.TH ASYNC_WAIT_CTX_NEW 3ossl 2026-08-25 3.5.8 OpenSSL
 .\" For nroff, turn off justification.  Always turn off hyphenation; it makes
 .\" way too many mistakes in technical documents.
 .if n .ad l
@@ -58,7 +58,7 @@
 .\" ========================================================================
 .\"
 .IX Title "ASYNC_START_JOB 3ossl"
-.TH ASYNC_START_JOB 3ossl 2026-06-09 3.5.7 OpenSSL
+.TH ASYNC_START_JOB 3ossl 2026-08-25 3.5.8 OpenSSL
 .\" For nroff, turn off justification.  Always turn off hyphenation; it makes
 .\" way too many mistakes in technical documents.
 .if n .ad l
@@ -58,7 +58,7 @@
 .\" ========================================================================
 .\"
 .IX Title "BF_ENCRYPT 3ossl"
-.TH BF_ENCRYPT 3ossl 2026-06-09 3.5.7 OpenSSL
+.TH BF_ENCRYPT 3ossl 2026-08-25 3.5.8 OpenSSL
 .\" For nroff, turn off justification.  Always turn off hyphenation; it makes
 .\" way too many mistakes in technical documents.
 .if n .ad l
@@ -58,7 +58,7 @@
 .\" ========================================================================
 .\"
 .IX Title "BIO_ADDR 3ossl"
-.TH BIO_ADDR 3ossl 2026-06-09 3.5.7 OpenSSL
+.TH BIO_ADDR 3ossl 2026-08-25 3.5.8 OpenSSL
 .\" For nroff, turn off justification.  Always turn off hyphenation; it makes
 .\" way too many mistakes in technical documents.
 .if n .ad l
@@ -58,7 +58,7 @@
 .\" ========================================================================
 .\"
 .IX Title "BIO_ADDRINFO 3ossl"
-.TH BIO_ADDRINFO 3ossl 2026-01-27 3.5.5 OpenSSL
+.TH BIO_ADDRINFO 3ossl 2026-08-25 3.5.8 OpenSSL
 .\" For nroff, turn off justification.  Always turn off hyphenation; it makes
 .\" way too many mistakes in technical documents.
 .if n .ad l
@@ -58,7 +58,7 @@
 .\" ========================================================================
 .\"
 .IX Title "BIO_CONNECT 3ossl"
-.TH BIO_CONNECT 3ossl 2026-06-09 3.5.7 OpenSSL
+.TH BIO_CONNECT 3ossl 2026-08-25 3.5.8 OpenSSL
 .\" For nroff, turn off justification.  Always turn off hyphenation; it makes
 .\" way too many mistakes in technical documents.
 .if n .ad l
@@ -58,7 +58,7 @@
 .\" ========================================================================
 .\"
 .IX Title "BIO_CTRL 3ossl"
-.TH BIO_CTRL 3ossl 2026-06-09 3.5.7 OpenSSL
+.TH BIO_CTRL 3ossl 2026-08-25 3.5.8 OpenSSL
 .\" For nroff, turn off justification.  Always turn off hyphenation; it makes
 .\" way too many mistakes in technical documents.
 .if n .ad l
@@ -58,7 +58,7 @@
 .\" ========================================================================
 .\"
 .IX Title "BIO_F_BASE64 3ossl"
-.TH BIO_F_BASE64 3ossl 2026-06-09 3.5.7 OpenSSL
+.TH BIO_F_BASE64 3ossl 2026-08-25 3.5.8 OpenSSL
 .\" For nroff, turn off justification.  Always turn off hyphenation; it makes
 .\" way too many mistakes in technical documents.
 .if n .ad l
@@ -58,7 +58,7 @@
 .\" ========================================================================
 .\"
 .IX Title "BIO_F_BUFFER 3ossl"
-.TH BIO_F_BUFFER 3ossl 2026-06-09 3.5.7 OpenSSL
+.TH BIO_F_BUFFER 3ossl 2026-08-25 3.5.8 OpenSSL
 .\" For nroff, turn off justification.  Always turn off hyphenation; it makes
 .\" way too many mistakes in technical documents.
 .if n .ad l
@@ -58,7 +58,7 @@
 .\" ========================================================================
 .\"
 .IX Title "BIO_F_CIPHER 3ossl"
-.TH BIO_F_CIPHER 3ossl 2026-06-09 3.5.7 OpenSSL
+.TH BIO_F_CIPHER 3ossl 2026-08-25 3.5.8 OpenSSL
 .\" For nroff, turn off justification.  Always turn off hyphenation; it makes
 .\" way too many mistakes in technical documents.
 .if n .ad l
@@ -58,7 +58,7 @@
 .\" ========================================================================
 .\"
 .IX Title "BIO_F_MD 3ossl"
-.TH BIO_F_MD 3ossl 2026-01-27 3.5.5 OpenSSL
+.TH BIO_F_MD 3ossl 2026-08-25 3.5.8 OpenSSL
 .\" For nroff, turn off justification.  Always turn off hyphenation; it makes
 .\" way too many mistakes in technical documents.
 .if n .ad l
@@ -58,7 +58,7 @@
 .\" ========================================================================
 .\"
 .IX Title "BIO_F_NULL 3ossl"
-.TH BIO_F_NULL 3ossl 2026-01-27 3.5.5 OpenSSL
+.TH BIO_F_NULL 3ossl 2026-08-25 3.5.8 OpenSSL
 .\" For nroff, turn off justification.  Always turn off hyphenation; it makes
 .\" way too many mistakes in technical documents.
 .if n .ad l
@@ -58,7 +58,7 @@
 .\" ========================================================================
 .\"
 .IX Title "BIO_F_PREFIX 3ossl"
-.TH BIO_F_PREFIX 3ossl 2026-06-09 3.5.7 OpenSSL
+.TH BIO_F_PREFIX 3ossl 2026-08-25 3.5.8 OpenSSL
 .\" For nroff, turn off justification.  Always turn off hyphenation; it makes
 .\" way too many mistakes in technical documents.
 .if n .ad l
@@ -58,7 +58,7 @@
 .\" ========================================================================
 .\"
 .IX Title "BIO_F_READBUFFER 3ossl"
-.TH BIO_F_READBUFFER 3ossl 2026-01-27 3.5.5 OpenSSL
+.TH BIO_F_READBUFFER 3ossl 2026-08-25 3.5.8 OpenSSL
 .\" For nroff, turn off justification.  Always turn off hyphenation; it makes
 .\" way too many mistakes in technical documents.
 .if n .ad l
@@ -58,7 +58,7 @@
 .\" ========================================================================
 .\"
 .IX Title "BIO_F_SSL 3ossl"
-.TH BIO_F_SSL 3ossl 2026-06-09 3.5.7 OpenSSL
+.TH BIO_F_SSL 3ossl 2026-08-25 3.5.8 OpenSSL
 .\" For nroff, turn off justification.  Always turn off hyphenation; it makes
 .\" way too many mistakes in technical documents.
 .if n .ad l
@@ -58,7 +58,7 @@
 .\" ========================================================================
 .\"
 .IX Title "BIO_FIND_TYPE 3ossl"
-.TH BIO_FIND_TYPE 3ossl 2026-06-09 3.5.7 OpenSSL
+.TH BIO_FIND_TYPE 3ossl 2026-08-25 3.5.8 OpenSSL
 .\" For nroff, turn off justification.  Always turn off hyphenation; it makes
 .\" way too many mistakes in technical documents.
 .if n .ad l
@@ -58,7 +58,7 @@
 .\" ========================================================================
 .\"
 .IX Title "BIO_GET_DATA 3ossl"
-.TH BIO_GET_DATA 3ossl 2026-06-09 3.5.7 OpenSSL
+.TH BIO_GET_DATA 3ossl 2026-08-25 3.5.8 OpenSSL
 .\" For nroff, turn off justification.  Always turn off hyphenation; it makes
 .\" way too many mistakes in technical documents.
 .if n .ad l
@@ -58,7 +58,7 @@
 .\" ========================================================================
 .\"
 .IX Title "BIO_GET_EX_NEW_INDEX 3ossl"
-.TH BIO_GET_EX_NEW_INDEX 3ossl 2026-06-09 3.5.7 OpenSSL
+.TH BIO_GET_EX_NEW_INDEX 3ossl 2026-08-25 3.5.8 OpenSSL
 .\" For nroff, turn off justification.  Always turn off hyphenation; it makes
 .\" way too many mistakes in technical documents.
 .if n .ad l
@@ -58,7 +58,7 @@
 .\" ========================================================================
 .\"
 .IX Title "BIO_GET_RPOLL_DESCRIPTOR 3ossl"
-.TH BIO_GET_RPOLL_DESCRIPTOR 3ossl 2026-06-09 3.5.7 OpenSSL
+.TH BIO_GET_RPOLL_DESCRIPTOR 3ossl 2026-08-25 3.5.8 OpenSSL
 .\" For nroff, turn off justification.  Always turn off hyphenation; it makes
 .\" way too many mistakes in technical documents.
 .if n .ad l
@@ -58,7 +58,7 @@
 .\" ========================================================================
 .\"
 .IX Title "BIO_METH_NEW 3ossl"
-.TH BIO_METH_NEW 3ossl 2026-06-09 3.5.7 OpenSSL
+.TH BIO_METH_NEW 3ossl 2026-08-25 3.5.8 OpenSSL
 .\" For nroff, turn off justification.  Always turn off hyphenation; it makes
 .\" way too many mistakes in technical documents.
 .if n .ad l
@@ -58,7 +58,7 @@
 .\" ========================================================================
 .\"
 .IX Title "BIO_NEW 3ossl"
-.TH BIO_NEW 3ossl 2026-06-09 3.5.7 OpenSSL
+.TH BIO_NEW 3ossl 2026-08-25 3.5.8 OpenSSL
 .\" For nroff, turn off justification.  Always turn off hyphenation; it makes
 .\" way too many mistakes in technical documents.
 .if n .ad l
@@ -58,7 +58,7 @@
 .\" ========================================================================
 .\"
 .IX Title "BIO_NEW_CMS 3ossl"
-.TH BIO_NEW_CMS 3ossl 2026-01-27 3.5.5 OpenSSL
+.TH BIO_NEW_CMS 3ossl 2026-08-25 3.5.8 OpenSSL
 .\" For nroff, turn off justification.  Always turn off hyphenation; it makes
 .\" way too many mistakes in technical documents.
 .if n .ad l
@@ -58,7 +58,7 @@
 .\" ========================================================================
 .\"
 .IX Title "BIO_PARSE_HOSTSERV 3ossl"
-.TH BIO_PARSE_HOSTSERV 3ossl 2026-01-27 3.5.5 OpenSSL
+.TH BIO_PARSE_HOSTSERV 3ossl 2026-08-25 3.5.8 OpenSSL
 .\" For nroff, turn off justification.  Always turn off hyphenation; it makes
 .\" way too many mistakes in technical documents.
 .if n .ad l
@@ -58,7 +58,7 @@
 .\" ========================================================================
 .\"
 .IX Title "BIO_PRINTF 3ossl"
-.TH BIO_PRINTF 3ossl 2026-01-27 3.5.5 OpenSSL
+.TH BIO_PRINTF 3ossl 2026-08-25 3.5.8 OpenSSL
 .\" For nroff, turn off justification.  Always turn off hyphenation; it makes
 .\" way too many mistakes in technical documents.
 .if n .ad l
@@ -58,7 +58,7 @@
 .\" ========================================================================
 .\"
 .IX Title "BIO_PUSH 3ossl"
-.TH BIO_PUSH 3ossl 2026-06-09 3.5.7 OpenSSL
+.TH BIO_PUSH 3ossl 2026-08-25 3.5.8 OpenSSL
 .\" For nroff, turn off justification.  Always turn off hyphenation; it makes
 .\" way too many mistakes in technical documents.
 .if n .ad l
@@ -58,7 +58,7 @@
 .\" ========================================================================
 .\"
 .IX Title "BIO_READ 3ossl"
-.TH BIO_READ 3ossl 2026-06-09 3.5.7 OpenSSL
+.TH BIO_READ 3ossl 2026-08-25 3.5.8 OpenSSL
 .\" For nroff, turn off justification.  Always turn off hyphenation; it makes
 .\" way too many mistakes in technical documents.
 .if n .ad l
@@ -58,7 +58,7 @@
 .\" ========================================================================
 .\"
 .IX Title "BIO_S_ACCEPT 3ossl"
-.TH BIO_S_ACCEPT 3ossl 2026-06-09 3.5.7 OpenSSL
+.TH BIO_S_ACCEPT 3ossl 2026-08-25 3.5.8 OpenSSL
 .\" For nroff, turn off justification.  Always turn off hyphenation; it makes
 .\" way too many mistakes in technical documents.
 .if n .ad l
@@ -58,7 +58,7 @@
 .\" ========================================================================
 .\"
 .IX Title "BIO_S_BIO 3ossl"
-.TH BIO_S_BIO 3ossl 2026-06-09 3.5.7 OpenSSL
+.TH BIO_S_BIO 3ossl 2026-08-25 3.5.8 OpenSSL
 .\" For nroff, turn off justification.  Always turn off hyphenation; it makes
 .\" way too many mistakes in technical documents.
 .if n .ad l
@@ -58,7 +58,7 @@
 .\" ========================================================================
 .\"
 .IX Title "BIO_S_CONNECT 3ossl"
-.TH BIO_S_CONNECT 3ossl 2026-06-09 3.5.7 OpenSSL
+.TH BIO_S_CONNECT 3ossl 2026-08-25 3.5.8 OpenSSL
 .\" For nroff, turn off justification.  Always turn off hyphenation; it makes
 .\" way too many mistakes in technical documents.
 .if n .ad l
@@ -58,7 +58,7 @@
 .\" ========================================================================
 .\"
 .IX Title "BIO_S_CORE 3ossl"
-.TH BIO_S_CORE 3ossl 2026-06-09 3.5.7 OpenSSL
+.TH BIO_S_CORE 3ossl 2026-08-25 3.5.8 OpenSSL
 .\" For nroff, turn off justification.  Always turn off hyphenation; it makes
 .\" way too many mistakes in technical documents.
 .if n .ad l
@@ -58,7 +58,7 @@
 .\" ========================================================================
 .\"
 .IX Title "BIO_S_DATAGRAM 3ossl"
-.TH BIO_S_DATAGRAM 3ossl 2026-06-09 3.5.7 OpenSSL
+.TH BIO_S_DATAGRAM 3ossl 2026-08-25 3.5.8 OpenSSL
 .\" For nroff, turn off justification.  Always turn off hyphenation; it makes
 .\" way too many mistakes in technical documents.
 .if n .ad l
@@ -119,7 +119,7 @@ neither \fBBIO_ctrl_dgram_connect()\fR nor \fBBIO_ctrl_set_connected()\fR cause
 to become connected. These controls are provided to indicate to the BIO how
 the underlying socket is configured and how it is to be used; see below.
 .IP \(bu 4
-Use of \fBBIO_s_datagram()\fR with an unconnected network socket is hazardous hecause
+Use of \fBBIO_s_datagram()\fR with an unconnected network socket is hazardous because
 any successful call to \fBBIO_read()\fR results in the peer address used for any
 subsequent call to \fBBIO_write()\fR being set to the source address of the datagram
 received by that call to \fBBIO_read()\fR. Thus, unless the caller calls
@@ -284,7 +284,7 @@ on the circumstance; see discussion above.
 \&\fBBIO_sendmmsg\fR\|(3), \fBBIO_s_dgram_pair\fR\|(3), \fBDTLSv1_listen\fR\|(3), \fBbio\fR\|(7)
 .SH COPYRIGHT
 .IX Header "COPYRIGHT"
-Copyright 2022\-2023 The OpenSSL Project Authors. All Rights Reserved.
+Copyright 2022\-2026 The OpenSSL Project Authors. All Rights Reserved.
 .PP
 Licensed under the Apache License 2.0 (the "License").  You may not use
 this file except in compliance with the License.  You can obtain a copy
@@ -58,7 +58,7 @@
 .\" ========================================================================
 .\"
 .IX Title "BIO_S_DGRAM_PAIR 3ossl"
-.TH BIO_S_DGRAM_PAIR 3ossl 2026-06-09 3.5.7 OpenSSL
+.TH BIO_S_DGRAM_PAIR 3ossl 2026-08-25 3.5.8 OpenSSL
 .\" For nroff, turn off justification.  Always turn off hyphenation; it makes
 .\" way too many mistakes in technical documents.
 .if n .ad l
@@ -58,7 +58,7 @@
 .\" ========================================================================
 .\"
 .IX Title "BIO_S_FD 3ossl"
-.TH BIO_S_FD 3ossl 2026-01-27 3.5.5 OpenSSL
+.TH BIO_S_FD 3ossl 2026-08-25 3.5.8 OpenSSL
 .\" For nroff, turn off justification.  Always turn off hyphenation; it makes
 .\" way too many mistakes in technical documents.
 .if n .ad l
@@ -58,7 +58,7 @@
 .\" ========================================================================
 .\"
 .IX Title "BIO_S_FILE 3ossl"
-.TH BIO_S_FILE 3ossl 2026-06-09 3.5.7 OpenSSL
+.TH BIO_S_FILE 3ossl 2026-08-25 3.5.8 OpenSSL
 .\" For nroff, turn off justification.  Always turn off hyphenation; it makes
 .\" way too many mistakes in technical documents.
 .if n .ad l
@@ -76,8 +76,8 @@ BIO_rw_filename \- FILE bio
 \& BIO *BIO_new_file(const char *filename, const char *mode);
 \& BIO *BIO_new_fp(FILE *stream, int flags);
 \&
-\& BIO_set_fp(BIO *b, FILE *fp, int flags);
-\& BIO_get_fp(BIO *b, FILE **fpp);
+\& long BIO_set_fp(BIO *b, FILE *fp, int flags);
+\& long BIO_get_fp(BIO *b, FILE **fpp);
 \&
 \& int BIO_read_filename(BIO *b, char *name);
 \& int BIO_write_filename(BIO *b, char *name);
@@ -147,8 +147,7 @@ lingual environment, encode filenames in UTF\-8.
 \&\fBBIO_new_file()\fR and \fBBIO_new_fp()\fR return a file BIO or NULL if an error
 occurred.
 .PP
-\&\fBBIO_set_fp()\fR and \fBBIO_get_fp()\fR return 1 for success or <=0 for failure
-(although the current implementation never return 0).
+\&\fBBIO_set_fp()\fR and \fBBIO_get_fp()\fR return 1 for success or <=0 for failure.
 .PP
 \&\fBBIO_seek()\fR returns 0 for success or negative values for failure.
 .PP
@@ -222,7 +221,7 @@ occurred this differs from other types of BIO which will typically return
 \&\fBBIO_set_close\fR\|(3), \fBBIO_get_close\fR\|(3)
 .SH COPYRIGHT
 .IX Header "COPYRIGHT"
-Copyright 2000\-2020 The OpenSSL Project Authors. All Rights Reserved.
+Copyright 2000\-2026 The OpenSSL Project Authors. All Rights Reserved.
 .PP
 Licensed under the Apache License 2.0 (the "License").  You may not use
 this file except in compliance with the License.  You can obtain a copy
@@ -58,7 +58,7 @@
 .\" ========================================================================
 .\"
 .IX Title "BIO_S_MEM 3ossl"
-.TH BIO_S_MEM 3ossl 2026-06-09 3.5.7 OpenSSL
+.TH BIO_S_MEM 3ossl 2026-08-25 3.5.8 OpenSSL
 .\" For nroff, turn off justification.  Always turn off hyphenation; it makes
 .\" way too many mistakes in technical documents.
 .if n .ad l
@@ -58,7 +58,7 @@
 .\" ========================================================================
 .\"
 .IX Title "BIO_S_NULL 3ossl"
-.TH BIO_S_NULL 3ossl 2026-01-27 3.5.5 OpenSSL
+.TH BIO_S_NULL 3ossl 2026-08-25 3.5.8 OpenSSL
 .\" For nroff, turn off justification.  Always turn off hyphenation; it makes
 .\" way too many mistakes in technical documents.
 .if n .ad l
@@ -58,7 +58,7 @@
 .\" ========================================================================
 .\"
 .IX Title "BIO_S_SOCKET 3ossl"
-.TH BIO_S_SOCKET 3ossl 2026-01-27 3.5.5 OpenSSL
+.TH BIO_S_SOCKET 3ossl 2026-08-25 3.5.8 OpenSSL
 .\" For nroff, turn off justification.  Always turn off hyphenation; it makes
 .\" way too many mistakes in technical documents.
 .if n .ad l
@@ -58,7 +58,7 @@
 .\" ========================================================================
 .\"
 .IX Title "BIO_SENDMMSG 3ossl"
-.TH BIO_SENDMMSG 3ossl 2026-06-09 3.5.7 OpenSSL
+.TH BIO_SENDMMSG 3ossl 2026-08-25 3.5.8 OpenSSL
 .\" For nroff, turn off justification.  Always turn off hyphenation; it makes
 .\" way too many mistakes in technical documents.
 .if n .ad l
@@ -58,7 +58,7 @@
 .\" ========================================================================
 .\"
 .IX Title "BIO_SET_CALLBACK 3ossl"
-.TH BIO_SET_CALLBACK 3ossl 2026-06-09 3.5.7 OpenSSL
+.TH BIO_SET_CALLBACK 3ossl 2026-08-25 3.5.8 OpenSSL
 .\" For nroff, turn off justification.  Always turn off hyphenation; it makes
 .\" way too many mistakes in technical documents.
 .if n .ad l
@@ -58,7 +58,7 @@
 .\" ========================================================================
 .\"
 .IX Title "BIO_SET_FLAGS 3ossl"
-.TH BIO_SET_FLAGS 3ossl 2026-06-09 3.5.7 OpenSSL
+.TH BIO_SET_FLAGS 3ossl 2026-08-25 3.5.8 OpenSSL
 .\" For nroff, turn off justification.  Always turn off hyphenation; it makes
 .\" way too many mistakes in technical documents.
 .if n .ad l
@@ -58,7 +58,7 @@
 .\" ========================================================================
 .\"
 .IX Title "BIO_SHOULD_RETRY 3ossl"
-.TH BIO_SHOULD_RETRY 3ossl 2026-01-27 3.5.5 OpenSSL
+.TH BIO_SHOULD_RETRY 3ossl 2026-08-25 3.5.8 OpenSSL
 .\" For nroff, turn off justification.  Always turn off hyphenation; it makes
 .\" way too many mistakes in technical documents.
 .if n .ad l
@@ -58,7 +58,7 @@
 .\" ========================================================================
 .\"
 .IX Title "BIO_SOCKET_WAIT 3ossl"
-.TH BIO_SOCKET_WAIT 3ossl 2026-01-27 3.5.5 OpenSSL
+.TH BIO_SOCKET_WAIT 3ossl 2026-08-25 3.5.8 OpenSSL
 .\" For nroff, turn off justification.  Always turn off hyphenation; it makes
 .\" way too many mistakes in technical documents.
 .if n .ad l
@@ -58,7 +58,7 @@
 .\" ========================================================================
 .\"
 .IX Title "BN_BLINDING_NEW 3ossl"
-.TH BN_BLINDING_NEW 3ossl 2026-06-09 3.5.7 OpenSSL
+.TH BN_BLINDING_NEW 3ossl 2026-08-25 3.5.8 OpenSSL
 .\" For nroff, turn off justification.  Always turn off hyphenation; it makes
 .\" way too many mistakes in technical documents.
 .if n .ad l
@@ -58,7 +58,7 @@
 .\" ========================================================================
 .\"
 .IX Title "BN_CTX_NEW 3ossl"
-.TH BN_CTX_NEW 3ossl 2026-01-27 3.5.5 OpenSSL
+.TH BN_CTX_NEW 3ossl 2026-08-25 3.5.8 OpenSSL
 .\" For nroff, turn off justification.  Always turn off hyphenation; it makes
 .\" way too many mistakes in technical documents.
 .if n .ad l
@@ -58,7 +58,7 @@
 .\" ========================================================================
 .\"
 .IX Title "BN_CTX_START 3ossl"
-.TH BN_CTX_START 3ossl 2026-01-27 3.5.5 OpenSSL
+.TH BN_CTX_START 3ossl 2026-08-25 3.5.8 OpenSSL
 .\" For nroff, turn off justification.  Always turn off hyphenation; it makes
 .\" way too many mistakes in technical documents.
 .if n .ad l
@@ -58,7 +58,7 @@
 .\" ========================================================================
 .\"
 .IX Title "BN_ADD 3ossl"
-.TH BN_ADD 3ossl 2026-06-09 3.5.7 OpenSSL
+.TH BN_ADD 3ossl 2026-08-25 3.5.8 OpenSSL
 .\" For nroff, turn off justification.  Always turn off hyphenation; it makes
 .\" way too many mistakes in technical documents.
 .if n .ad l
@@ -58,7 +58,7 @@
 .\" ========================================================================
 .\"
 .IX Title "BN_ADD_WORD 3ossl"
-.TH BN_ADD_WORD 3ossl 2026-01-27 3.5.5 OpenSSL
+.TH BN_ADD_WORD 3ossl 2026-08-25 3.5.8 OpenSSL
 .\" For nroff, turn off justification.  Always turn off hyphenation; it makes
 .\" way too many mistakes in technical documents.
 .if n .ad l
@@ -58,7 +58,7 @@
 .\" ========================================================================
 .\"
 .IX Title "BN_BN2BIN 3ossl"
-.TH BN_BN2BIN 3ossl 2026-06-09 3.5.7 OpenSSL
+.TH BN_BN2BIN 3ossl 2026-08-25 3.5.8 OpenSSL
 .\" For nroff, turn off justification.  Always turn off hyphenation; it makes
 .\" way too many mistakes in technical documents.
 .if n .ad l
@@ -58,7 +58,7 @@
 .\" ========================================================================
 .\"
 .IX Title "BN_CMP 3ossl"
-.TH BN_CMP 3ossl 2026-06-09 3.5.7 OpenSSL
+.TH BN_CMP 3ossl 2026-08-25 3.5.8 OpenSSL
 .\" For nroff, turn off justification.  Always turn off hyphenation; it makes
 .\" way too many mistakes in technical documents.
 .if n .ad l
@@ -58,7 +58,7 @@
 .\" ========================================================================
 .\"
 .IX Title "BN_COPY 3ossl"
-.TH BN_COPY 3ossl 2026-01-27 3.5.5 OpenSSL
+.TH BN_COPY 3ossl 2026-08-25 3.5.8 OpenSSL
 .\" For nroff, turn off justification.  Always turn off hyphenation; it makes
 .\" way too many mistakes in technical documents.
 .if n .ad l
@@ -58,7 +58,7 @@
 .\" ========================================================================
 .\"
 .IX Title "BN_GENERATE_PRIME 3ossl"
-.TH BN_GENERATE_PRIME 3ossl 2026-06-09 3.5.7 OpenSSL
+.TH BN_GENERATE_PRIME 3ossl 2026-08-25 3.5.8 OpenSSL
 .\" For nroff, turn off justification.  Always turn off hyphenation; it makes
 .\" way too many mistakes in technical documents.
 .if n .ad l
@@ -254,6 +254,8 @@ can similarly be compared to \fBBN_is_prime_ex()\fR and
 \&\-1 on error.
 .PP
 \&\fBBN_generate_prime()\fR returns the prime number on success, \fBNULL\fR otherwise.
+Please note that the \fBret\fR BIGNUM is freed on failure and must not be
+used or freed by the caller in such case.
 .PP
 BN_GENCB_new returns a pointer to a BN_GENCB structure on success, or \fBNULL\fR
 otherwise.
@@ -299,7 +301,7 @@ and \fBBN_GENCB_get_arg()\fR functions were added in OpenSSL 1.1.0.
 \&\fBBN_check_prime()\fR was added in OpenSSL 3.0.
 .SH COPYRIGHT
 .IX Header "COPYRIGHT"
-Copyright 2000\-2025 The OpenSSL Project Authors. All Rights Reserved.
+Copyright 2000\-2026 The OpenSSL Project Authors. All Rights Reserved.
 .PP
 Licensed under the Apache License 2.0 (the "License").  You may not use
 this file except in compliance with the License.  You can obtain a copy
@@ -58,7 +58,7 @@
 .\" ========================================================================
 .\"
 .IX Title "BN_MOD_EXP_MONT 3ossl"
-.TH BN_MOD_EXP_MONT 3ossl 2026-01-27 3.5.5 OpenSSL
+.TH BN_MOD_EXP_MONT 3ossl 2026-08-25 3.5.8 OpenSSL
 .\" For nroff, turn off justification.  Always turn off hyphenation; it makes
 .\" way too many mistakes in technical documents.
 .if n .ad l
@@ -58,7 +58,7 @@
 .\" ========================================================================
 .\"
 .IX Title "BN_MOD_INVERSE 3ossl"
-.TH BN_MOD_INVERSE 3ossl 2026-01-27 3.5.5 OpenSSL
+.TH BN_MOD_INVERSE 3ossl 2026-08-25 3.5.8 OpenSSL
 .\" For nroff, turn off justification.  Always turn off hyphenation; it makes
 .\" way too many mistakes in technical documents.
 .if n .ad l
@@ -58,7 +58,7 @@
 .\" ========================================================================
 .\"
 .IX Title "BN_MOD_MUL_MONTGOMERY 3ossl"
-.TH BN_MOD_MUL_MONTGOMERY 3ossl 2026-01-27 3.5.5 OpenSSL
+.TH BN_MOD_MUL_MONTGOMERY 3ossl 2026-08-25 3.5.8 OpenSSL
 .\" For nroff, turn off justification.  Always turn off hyphenation; it makes
 .\" way too many mistakes in technical documents.
 .if n .ad l
@@ -58,7 +58,7 @@
 .\" ========================================================================
 .\"
 .IX Title "BN_MOD_MUL_RECIPROCAL 3ossl"
-.TH BN_MOD_MUL_RECIPROCAL 3ossl 2026-06-09 3.5.7 OpenSSL
+.TH BN_MOD_MUL_RECIPROCAL 3ossl 2026-08-25 3.5.8 OpenSSL
 .\" For nroff, turn off justification.  Always turn off hyphenation; it makes
 .\" way too many mistakes in technical documents.
 .if n .ad l
@@ -58,7 +58,7 @@
 .\" ========================================================================
 .\"
 .IX Title "BN_NEW 3ossl"
-.TH BN_NEW 3ossl 2026-01-27 3.5.5 OpenSSL
+.TH BN_NEW 3ossl 2026-08-25 3.5.8 OpenSSL
 .\" For nroff, turn off justification.  Always turn off hyphenation; it makes
 .\" way too many mistakes in technical documents.
 .if n .ad l
@@ -58,7 +58,7 @@
 .\" ========================================================================
 .\"
 .IX Title "BN_NUM_BYTES 3ossl"
-.TH BN_NUM_BYTES 3ossl 2026-01-27 3.5.5 OpenSSL
+.TH BN_NUM_BYTES 3ossl 2026-08-25 3.5.8 OpenSSL
 .\" For nroff, turn off justification.  Always turn off hyphenation; it makes
 .\" way too many mistakes in technical documents.
 .if n .ad l
@@ -58,7 +58,7 @@
 .\" ========================================================================
 .\"
 .IX Title "BN_RAND 3ossl"
-.TH BN_RAND 3ossl 2026-06-09 3.5.7 OpenSSL
+.TH BN_RAND 3ossl 2026-08-25 3.5.8 OpenSSL
 .\" For nroff, turn off justification.  Always turn off hyphenation; it makes
 .\" way too many mistakes in technical documents.
 .if n .ad l
@@ -58,7 +58,7 @@
 .\" ========================================================================
 .\"
 .IX Title "BN_SECURITY_BITS 3ossl"
-.TH BN_SECURITY_BITS 3ossl 2026-01-27 3.5.5 OpenSSL
+.TH BN_SECURITY_BITS 3ossl 2026-08-25 3.5.8 OpenSSL
 .\" For nroff, turn off justification.  Always turn off hyphenation; it makes
 .\" way too many mistakes in technical documents.
 .if n .ad l
@@ -58,7 +58,7 @@
 .\" ========================================================================
 .\"
 .IX Title "BN_SET_BIT 3ossl"
-.TH BN_SET_BIT 3ossl 2026-01-27 3.5.5 OpenSSL
+.TH BN_SET_BIT 3ossl 2026-08-25 3.5.8 OpenSSL
 .\" For nroff, turn off justification.  Always turn off hyphenation; it makes
 .\" way too many mistakes in technical documents.
 .if n .ad l
@@ -58,7 +58,7 @@
 .\" ========================================================================
 .\"
 .IX Title "BN_SWAP 3ossl"
-.TH BN_SWAP 3ossl 2026-01-27 3.5.5 OpenSSL
+.TH BN_SWAP 3ossl 2026-08-25 3.5.8 OpenSSL
 .\" For nroff, turn off justification.  Always turn off hyphenation; it makes
 .\" way too many mistakes in technical documents.
 .if n .ad l
@@ -58,7 +58,7 @@
 .\" ========================================================================
 .\"
 .IX Title "BN_ZERO 3ossl"
-.TH BN_ZERO 3ossl 2026-01-27 3.5.5 OpenSSL
+.TH BN_ZERO 3ossl 2026-08-25 3.5.8 OpenSSL
 .\" For nroff, turn off justification.  Always turn off hyphenation; it makes
 .\" way too many mistakes in technical documents.
 .if n .ad l
@@ -58,7 +58,7 @@
 .\" ========================================================================
 .\"
 .IX Title "BUF_MEM_NEW 3ossl"
-.TH BUF_MEM_NEW 3ossl 2026-01-27 3.5.5 OpenSSL
+.TH BUF_MEM_NEW 3ossl 2026-08-25 3.5.8 OpenSSL
 .\" For nroff, turn off justification.  Always turn off hyphenation; it makes
 .\" way too many mistakes in technical documents.
 .if n .ad l
@@ -58,7 +58,7 @@
 .\" ========================================================================
 .\"
 .IX Title "CMAC_CTX 3ossl"
-.TH CMAC_CTX 3ossl 2026-06-09 3.5.7 OpenSSL
+.TH CMAC_CTX 3ossl 2026-08-25 3.5.8 OpenSSL
 .\" For nroff, turn off justification.  Always turn off hyphenation; it makes
 .\" way too many mistakes in technical documents.
 .if n .ad l
@@ -58,7 +58,7 @@
 .\" ========================================================================
 .\"
 .IX Title "CMS_ENCRYPTEDDATA_DECRYPT 3ossl"
-.TH CMS_ENCRYPTEDDATA_DECRYPT 3ossl 2026-06-09 3.5.7 OpenSSL
+.TH CMS_ENCRYPTEDDATA_DECRYPT 3ossl 2026-08-25 3.5.8 OpenSSL
 .\" For nroff, turn off justification.  Always turn off hyphenation; it makes
 .\" way too many mistakes in technical documents.
 .if n .ad l
@@ -107,7 +107,7 @@ are used when retrieving algorithms from providers.
 \&\fBCMS_EncryptedData_decrypt()\fR returns 0 if an error occurred otherwise returns 1.
 .PP
 \&\fBCMS_EnvelopedData_decrypt()\fR returns NULL if an error occurred,
-otherwise a BIO containing the decypted content.
+otherwise a BIO containing the decrypted content.
 .SH "SEE ALSO"
 .IX Header "SEE ALSO"
 \&\fBERR_get_error\fR\|(3), \fBCMS_EncryptedData_encrypt\fR\|(3), \fBCMS_decrypt\fR\|(3)
@@ -116,7 +116,7 @@ otherwise a BIO containing the decypted content.
 \&\fBCMS_EnvelopedData_decrypt()\fR was added in OpenSSL 3.2.
 .SH COPYRIGHT
 .IX Header "COPYRIGHT"
-Copyright 2020 The OpenSSL Project Authors. All Rights Reserved.
+Copyright 2020\-2026 The OpenSSL Project Authors. All Rights Reserved.
 .PP
 Licensed under the Apache License 2.0 (the "License").  You may not use
 this file except in compliance with the License.  You can obtain a copy
@@ -58,7 +58,7 @@
 .\" ========================================================================
 .\"
 .IX Title "CMS_ENCRYPTEDDATA_ENCRYPT 3ossl"
-.TH CMS_ENCRYPTEDDATA_ENCRYPT 3ossl 2026-06-09 3.5.7 OpenSSL
+.TH CMS_ENCRYPTEDDATA_ENCRYPT 3ossl 2026-08-25 3.5.8 OpenSSL
 .\" For nroff, turn off justification.  Always turn off hyphenation; it makes
 .\" way too many mistakes in technical documents.
 .if n .ad l
@@ -58,7 +58,7 @@
 .\" ========================================================================
 .\"
 .IX Title "CMS_ENCRYPTEDDATA_SET1_KEY 3ossl"
-.TH CMS_ENCRYPTEDDATA_SET1_KEY 3ossl 2026-06-09 3.5.7 OpenSSL
+.TH CMS_ENCRYPTEDDATA_SET1_KEY 3ossl 2026-08-25 3.5.8 OpenSSL
 .\" For nroff, turn off justification.  Always turn off hyphenation; it makes
 .\" way too many mistakes in technical documents.
 .if n .ad l
@@ -58,7 +58,7 @@
 .\" ========================================================================
 .\"
 .IX Title "CMS_ENVELOPEDDATA_CREATE 3ossl"
-.TH CMS_ENVELOPEDDATA_CREATE 3ossl 2026-06-09 3.5.7 OpenSSL
+.TH CMS_ENVELOPEDDATA_CREATE 3ossl 2026-08-25 3.5.8 OpenSSL
 .\" For nroff, turn off justification.  Always turn off hyphenation; it makes
 .\" way too many mistakes in technical documents.
 .if n .ad l
@@ -58,7 +58,7 @@
 .\" ========================================================================
 .\"
 .IX Title "CMS_ADD0_CERT 3ossl"
-.TH CMS_ADD0_CERT 3ossl 2026-06-09 3.5.7 OpenSSL
+.TH CMS_ADD0_CERT 3ossl 2026-08-25 3.5.8 OpenSSL
 .\" For nroff, turn off justification.  Always turn off hyphenation; it makes
 .\" way too many mistakes in technical documents.
 .if n .ad l
@@ -58,7 +58,7 @@
 .\" ========================================================================
 .\"
 .IX Title "CMS_ADD1_RECIPIENT_CERT 3ossl"
-.TH CMS_ADD1_RECIPIENT_CERT 3ossl 2026-06-09 3.5.7 OpenSSL
+.TH CMS_ADD1_RECIPIENT_CERT 3ossl 2026-08-25 3.5.8 OpenSSL
 .\" For nroff, turn off justification.  Always turn off hyphenation; it makes
 .\" way too many mistakes in technical documents.
 .if n .ad l
@@ -58,7 +58,7 @@
 .\" ========================================================================
 .\"
 .IX Title "CMS_ADD1_SIGNER 3ossl"
-.TH CMS_ADD1_SIGNER 3ossl 2026-06-09 3.5.7 OpenSSL
+.TH CMS_ADD1_SIGNER 3ossl 2026-08-25 3.5.8 OpenSSL
 .\" For nroff, turn off justification.  Always turn off hyphenation; it makes
 .\" way too many mistakes in technical documents.
 .if n .ad l
@@ -58,7 +58,7 @@
 .\" ========================================================================
 .\"
 .IX Title "CMS_COMPRESS 3ossl"
-.TH CMS_COMPRESS 3ossl 2026-01-27 3.5.5 OpenSSL
+.TH CMS_COMPRESS 3ossl 2026-08-25 3.5.8 OpenSSL
 .\" For nroff, turn off justification.  Always turn off hyphenation; it makes
 .\" way too many mistakes in technical documents.
 .if n .ad l
@@ -58,7 +58,7 @@
 .\" ========================================================================
 .\"
 .IX Title "CMS_DATA_CREATE 3ossl"
-.TH CMS_DATA_CREATE 3ossl 2026-01-27 3.5.5 OpenSSL
+.TH CMS_DATA_CREATE 3ossl 2026-08-25 3.5.8 OpenSSL
 .\" For nroff, turn off justification.  Always turn off hyphenation; it makes
 .\" way too many mistakes in technical documents.
 .if n .ad l
@@ -58,7 +58,7 @@
 .\" ========================================================================
 .\"
 .IX Title "CMS_DECRYPT 3ossl"
-.TH CMS_DECRYPT 3ossl 2026-06-09 3.5.7 OpenSSL
+.TH CMS_DECRYPT 3ossl 2026-08-25 3.5.8 OpenSSL
 .\" For nroff, turn off justification.  Always turn off hyphenation; it makes
 .\" way too many mistakes in technical documents.
 .if n .ad l
@@ -58,7 +58,7 @@
 .\" ========================================================================
 .\"
 .IX Title "CMS_DIGEST_CREATE 3ossl"
-.TH CMS_DIGEST_CREATE 3ossl 2026-01-27 3.5.5 OpenSSL
+.TH CMS_DIGEST_CREATE 3ossl 2026-08-25 3.5.8 OpenSSL
 .\" For nroff, turn off justification.  Always turn off hyphenation; it makes
 .\" way too many mistakes in technical documents.
 .if n .ad l
@@ -58,7 +58,7 @@
 .\" ========================================================================
 .\"
 .IX Title "CMS_ENCRYPT 3ossl"
-.TH CMS_ENCRYPT 3ossl 2026-01-27 3.5.5 OpenSSL
+.TH CMS_ENCRYPT 3ossl 2026-08-25 3.5.8 OpenSSL
 .\" For nroff, turn off justification.  Always turn off hyphenation; it makes
 .\" way too many mistakes in technical documents.
 .if n .ad l
@@ -58,7 +58,7 @@
 .\" ========================================================================
 .\"
 .IX Title "CMS_FINAL 3ossl"
-.TH CMS_FINAL 3ossl 2026-06-09 3.5.7 OpenSSL
+.TH CMS_FINAL 3ossl 2026-08-25 3.5.8 OpenSSL
 .\" For nroff, turn off justification.  Always turn off hyphenation; it makes
 .\" way too many mistakes in technical documents.
 .if n .ad l
@@ -58,7 +58,7 @@
 .\" ========================================================================
 .\"
 .IX Title "CMS_GET0_RECIPIENTINFOS 3ossl"
-.TH CMS_GET0_RECIPIENTINFOS 3ossl 2026-06-09 3.5.7 OpenSSL
+.TH CMS_GET0_RECIPIENTINFOS 3ossl 2026-08-25 3.5.8 OpenSSL
 .\" For nroff, turn off justification.  Always turn off hyphenation; it makes
 .\" way too many mistakes in technical documents.
 .if n .ad l