Latest update, add TLS 1.3 session time configuration.

doc/man1/ecparam.pod

@@ -17,6 +17,7 @@ B<openssl ecparam>
 [B<-text>]
 [B<-C>]
 [B<-check>]
+[B<-check_named>]
 [B<-name arg>]
 [B<-list_curves>]
 [B<-conv_form arg>]
@@ -79,6 +80,11 @@ be loaded by calling the get_ec_group_XXX() function.
 
 Validate the elliptic curve parameters.
 
+=item B<-check_named>
+
+Validate the elliptic name curve parameters by checking if the curve parameters
+match any built-in curves.
+
 =item B<-name arg>
 
 Use the EC parameters with the specified 'short' name. Use B<-list_curves>

doc/man1/ocsp.pod

@@ -88,6 +88,7 @@ B<openssl> B<ocsp>
 [B<-ndays n>]
 [B<-resp_key_id>]
 [B<-nrequest n>]
+[B<-rcid I<digest>>]
 [B<-I<digest>>]
 
 =head1 DESCRIPTION
@@ -304,6 +305,12 @@ status information is immediately available. In this case the age of the
 B<notBefore> field is checked to see it is not older than B<age> seconds old.
 By default this additional check is not performed.
 
+=item B<-rcid I<digest>>
+
+This option sets the digest algorithm to use for certificate identification
+in the OCSP response. Any digest supported by the OpenSSL B<dgst> command can
+be used. The default is the same digest algorithm used in the request.
+
 =item B<-I<digest>>
 
 This option sets digest algorithm to use for certificate identification in the

doc/man1/speed.pod

@@ -13,6 +13,7 @@ B<openssl speed>
 [B<-elapsed>]
 [B<-evp algo>]
 [B<-hmac algo>]
+[B<-cmac algo>]
 [B<-decrypt>]
 [B<-rand file...>]
 [B<-writerand file>]
@@ -60,6 +61,10 @@ aes-128-cbc-hmac-sha1, then B<-mb> will time multi-buffer operation.
 
 Time the HMAC algorithm using the specified message digest.
 
+=item B<-cmac cipher>
+
+Time the CMAC algorithm using the specified cipher e.g. B<speed -cmac aes128>.
+
 =item B<-decrypt>
 
 Time the decryption instead of encryption. Affects only the EVP testing.