NetBSD Problem Report #59877

From falsifian@falsifian.org  Thu Jan  1 22:32:54 2026
Return-Path: <falsifian@falsifian.org>
Received: from mail.netbsd.org (mail.netbsd.org [199.233.217.200])
	(using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)
	 key-exchange X25519 server-signature RSA-PSS (2048 bits) server-digest SHA256
	 client-signature RSA-PSS (2048 bits) client-digest SHA256)
	(Client CN "mail.NetBSD.org", Issuer "mail.NetBSD.org CA" (not verified))
	by mollari.NetBSD.org (Postfix) with ESMTPS id 963E01A923C
	for <gnats-bugs@gnats.NetBSD.org>; Thu,  1 Jan 2026 22:32:54 +0000 (UTC)
Message-Id: <2Z2UF39W2E6OM.2D43XPEFQ5YDG@falsifian.org>
Date: Thu, 01 Jan 2026 22:26:10 +0000
From: James Cook <falsifian@falsifian.org>
To: gnats-bugs@NetBSD.org
Subject: openssl subcommand man pages missing on 10.x
X-Send-Pr-Version: 3.95

>Number:         59877
>Category:       security
>Synopsis:       openssl subcommand man pages missing on NetBSD 10 (present on NetBSD 11)
>Confidential:   no
>Severity:       non-critical
>Priority:       low
>Responsible:    security-officer
>State:          closed
>Class:          doc-bug
>Submitter-Id:   net
>Arrival-Date:   Thu Jan 01 22:35:00 +0000 2026
>Closed-Date:    Thu Jan 01 22:44:10 +0000 2026
>Last-Modified:  Thu Jan 01 23:20:01 +0000 2026
>Originator:     =09
>Release:        NetBSD 10.1
>Organization:
James
>Environment:
System: NetBSD ucl.h.falsifian.org 10.1 NetBSD 10.1 (GENERIC) #0: Mon Dec 1=
6 13:08:11 UTC 2024 mkrepro@mkrepro.NetBSD.org:/usr/src/sys/arch/amd64/comp=
ile/GENERIC amd64
Architecture: x86_64
Machine: amd64
>Description:

The openssl(1) man page mentions an openssl-x509(1) man page which is not p=
resent.
Consulting man.openbsd.org, it seems to be in the NetBSD-11.x-BRANCH and
NetBSD-current collections, but not NetBSD-10.x-BRANCH. Same for openssl-cm=
s(1),
and perhaps the other subcommands.

I guess it got fixed at some point. Worth backporting that to 10?

>How-To-Repeat:
	man openssl-x509
>Fix:
	I can work around it by viewing the latest man pages at man.netbsd.org,
	though I can't be sure they accurately document the version I have
	installed.

>Release-Note:

>Audit-Trail:

State-Changed-From-To: open->closed
State-Changed-By: riastradh@NetBSD.org
State-Changed-When: Thu, 01 Jan 2026 22:44:10 +0000
State-Changed-Why:
Not really a bug: it used to be that OpenSSL would install man pages
with names like `x509' or `req' or `enc', which was annoying because it
got in the way of non-openssl commands, so we used to rename them
ourselves to `openssl_x509', as you can see here:

https://man.NetBSD.org/NetBSD-10.x-BRANCH/openssl_x509.1

But then upstream OpenSSL changed their practice to install the man
pages as, e.g., `openssl-x509'.  For NetBSD 11, we decided to follow
suit rather than maintain local patches to preserve our divergence,
since it was essentially cosmetic rather than functional in nature.


From: James Cook <falsifian@falsifian.org>
To: gnats-bugs@netbsd.org
Cc: security-officer@netbsd.org, security-alert@netbsd.org,
 gnats-admin@netbsd.org, riastradh@NetBSD.org
Subject: Re: security/59877 (openssl subcommand man pages missing on NetBSD
 10 (present on NetBSD 11))
Date: Thu, 01 Jan 2026 22:57:58 +0000

 riastradh@NetBSD.org wrote:
 > Synopsis: openssl subcommand man pages missing on NetBSD 10 (present on N=
 etBSD 11)
 >=20
 > State-Changed-From-To: open->closed
 > State-Changed-By: riastradh@NetBSD.org
 > State-Changed-When: Thu, 01 Jan 2026 22:44:10 +0000
 > State-Changed-Why:
 > Not really a bug: it used to be that OpenSSL would install man pages
 > with names like `x509' or `req' or `enc', which was annoying because it
 > got in the way of non-openssl commands, so we used to rename them
 > ourselves to `openssl_x509', as you can see here:
 >=20
 > https://man.NetBSD.org/NetBSD-10.x-BRANCH/openssl_x509.1
 >=20
 > But then upstream OpenSSL changed their practice to install the man
 > pages as, e.g., `openssl-x509'.  For NetBSD 11, we decided to follow
 > suit rather than maintain local patches to preserve our divergence,
 > since it was essentially cosmetic rather than functional in nature.

 Thanks for the explanation, and for showing me how to find them!

 It would be nice if the openssl(1) man page were fixed, e.g. replacing
 the two references to openssl-x509(1) with openssl_x509(1). Though if
 I'm honest with myself I don't think I'm likely to find time to prepare
 a patch, so if they stay as they are, fair enough.

 --=20
 James

From: Taylor R Campbell <riastradh@NetBSD.org>
To: James Cook <falsifian@falsifian.org>
Cc: gnats-bugs@netbsd.org, security-officer@netbsd.org,
	security-alert@netbsd.org, gnats-admin@netbsd.org
Subject: Re: security/59877 (openssl subcommand man pages missing on NetBSD
	10 (present on NetBSD 11))
Date: Thu, 1 Jan 2026 23:14:59 +0000

 > Date: Thu, 01 Jan 2026 22:57:58 +0000
 > From: James Cook <falsifian@falsifian.org>
 > 
 > It would be nice if the openssl(1) man page were fixed, e.g. replacing
 > the two references to openssl-x509(1) with openssl_x509(1). Though if
 > I'm honest with myself I don't think I'm likely to find time to prepare
 > a patch, so if they stay as they are, fair enough.

 Sure, I guess we could do that for 10.  A quick skim suggests there's
 519 cases of `L<openssl-' in crypto/external/bsd/openssl/dist/doc, but
 we precompiled those into man format so it might be more like
 replacing `\fBopenssl\-...\fR\|(N)' instead in
 crypto/external/bsd/openssl/lib/libcrypto/man (or both, so if we pull
 up an openssl update to the netbsd-10 branch and rebuild it all it
 doesn't get out of sync).

>Unformatted:

Home	PR Database Search