From 47683a4ca42eb0aebbb7e3ecba623633e4c09ee1 Mon Sep 17 00:00:00 2001
From: Steven Fackler <sfackler@gmail.com>
Date: Sat, 20 Nov 2021 23:55:35 -0500
Subject: [PATCH] finish corresponds update

---
 openssl/src/ssl/mod.rs | 836 ++++++++++-------------------------------
 1 file changed, 194 insertions(+), 642 deletions(-)

diff --git a/openssl/src/ssl/mod.rs b/openssl/src/ssl/mod.rs
index 68ee52b83..c7df4e6eb 100644
--- a/openssl/src/ssl/mod.rs
+++ b/openssl/src/ssl/mod.rs
@@ -57,28 +57,6 @@
 //!     }
 //! }
 //! ```
-use bitflags::bitflags;
-use cfg_if::cfg_if;
-use foreign_types::{ForeignType, ForeignTypeRef, Opaque};
-use libc::{c_char, c_int, c_long, c_uchar, c_uint, c_void};
-use once_cell::sync::{Lazy, OnceCell};
-use std::any::TypeId;
-use std::cmp;
-use std::collections::HashMap;
-use std::ffi::{CStr, CString};
-use std::fmt;
-use std::io;
-use std::io::prelude::*;
-use std::marker::PhantomData;
-use std::mem::{self, ManuallyDrop};
-use std::ops::{Deref, DerefMut};
-use std::panic::resume_unwind;
-use std::path::Path;
-use std::ptr;
-use std::slice;
-use std::str;
-use std::sync::{Arc, Mutex};
-
 use crate::dh::{Dh, DhRef};
 #[cfg(all(ossl101, not(ossl110)))]
 use crate::ec::EcKey;
@@ -101,6 +79,28 @@ use crate::x509::store::{X509Store, X509StoreBuilderRef, X509StoreRef};
 use crate::x509::verify::X509VerifyParamRef;
 use crate::x509::{X509Name, X509Ref, X509StoreContextRef, X509VerifyResult, X509};
 use crate::{cvt, cvt_n, cvt_p, init};
+use bitflags::bitflags;
+use cfg_if::cfg_if;
+use foreign_types::{ForeignType, ForeignTypeRef, Opaque};
+use libc::{c_char, c_int, c_long, c_uchar, c_uint, c_void};
+use once_cell::sync::{Lazy, OnceCell};
+use openssl_macros::corresponds;
+use std::any::TypeId;
+use std::cmp;
+use std::collections::HashMap;
+use std::ffi::{CStr, CString};
+use std::fmt;
+use std::io;
+use std::io::prelude::*;
+use std::marker::PhantomData;
+use std::mem::{self, ManuallyDrop};
+use std::ops::{Deref, DerefMut};
+use std::panic::resume_unwind;
+use std::path::Path;
+use std::ptr;
+use std::slice;
+use std::str;
+use std::sync::{Arc, Mutex};
 
 pub use crate::ssl::connector::{
     ConnectConfiguration, SslAcceptor, SslAcceptorBuilder, SslConnector, SslConnectorBuilder,
@@ -119,10 +119,7 @@ mod test;
 /// If the cipher has no corresponding OpenSSL name, the string `(NONE)` is returned.
 ///
 /// Requires OpenSSL 1.1.1 or newer.
-///
-/// This corresponds to [`OPENSSL_cipher_name`]
-///
-/// [`OPENSSL_cipher_name`]: https://www.openssl.org/docs/manmaster/man3/SSL_CIPHER_get_name.html
+#[corresponds(OPENSSL_cipher_name)]
 #[cfg(ossl111)]
 pub fn cipher_name(std_name: &str) -> &'static str {
     unsafe {
@@ -317,33 +314,25 @@ pub struct SslMethod(*const ffi::SSL_METHOD);
 
 impl SslMethod {
     /// Support all versions of the TLS protocol.
-    ///
-    /// This corresponds to `TLS_method` on OpenSSL 1.1.0 and `SSLv23_method`
-    /// on OpenSSL 1.0.x.
+    #[corresponds(TLS_method)]
     pub fn tls() -> SslMethod {
         unsafe { SslMethod(TLS_method()) }
     }
 
     /// Support all versions of the DTLS protocol.
-    ///
-    /// This corresponds to `DTLS_method` on OpenSSL 1.1.0 and `DTLSv1_method`
-    /// on OpenSSL 1.0.x.
+    #[corresponds(DTLS_method)]
     pub fn dtls() -> SslMethod {
         unsafe { SslMethod(DTLS_method()) }
     }
 
     /// Support all versions of the TLS protocol, explicitly as a client.
-    ///
-    /// This corresponds to `TLS_client_method` on OpenSSL 1.1.0 and
-    /// `SSLv23_client_method` on OpenSSL 1.0.x.
+    #[corresponds(TLS_client_method)]
     pub fn tls_client() -> SslMethod {
         unsafe { SslMethod(TLS_client_method()) }
     }
 
     /// Support all versions of the TLS protocol, explicitly as a server.
-    ///
-    /// This corresponds to `TLS_server_method` on OpenSSL 1.1.0 and
-    /// `SSLv23_server_method` on OpenSSL 1.0.x.
+    #[corresponds(TLS_server_method)]
     pub fn tls_server() -> SslMethod {
         unsafe { SslMethod(TLS_server_method()) }
     }
@@ -636,10 +625,8 @@ impl SslVersion {
 ///
 /// It will select the first protocol supported by the server which is also supported by the client.
 ///
-/// This corresponds to [`SSL_select_next_proto`].
-///
 /// [`SslContextBuilder::set_alpn_protos`]: struct.SslContextBuilder.html#method.set_alpn_protos
-/// [`SSL_select_next_proto`]: https://www.openssl.org/docs/man1.1.0/ssl/SSL_CTX_set_alpn_protos.html
+#[corresponds(SSL_select_next_proto)]
 pub fn select_next_proto<'a>(server: &[u8], client: &'a [u8]) -> Option<&'a [u8]> {
     unsafe {
         let mut out = ptr::null_mut();
@@ -665,10 +652,7 @@ pub struct SslContextBuilder(SslContext);
 
 impl SslContextBuilder {
     /// Creates a new `SslContextBuilder`.
-    ///
-    /// This corresponds to [`SSL_CTX_new`].
-    ///
-    /// [`SSL_CTX_new`]: https://www.openssl.org/docs/manmaster/man3/SSL_CTX_new.html
+    #[corresponds(SSL_CTX_new)]
     pub fn new(method: SslMethod) -> Result<SslContextBuilder, ErrorStack> {
         unsafe {
             init();
@@ -693,10 +677,7 @@ impl SslContextBuilder {
     }
 
     /// Configures the certificate verification method for new connections.
-    ///
-    /// This corresponds to [`SSL_CTX_set_verify`].
-    ///
-    /// [`SSL_CTX_set_verify`]: https://www.openssl.org/docs/man1.1.0/ssl/SSL_CTX_set_verify.html
+    #[corresponds(SSL_CTX_set_verify)]
     pub fn set_verify(&mut self, mode: SslVerifyMode) {
         unsafe {
             ffi::SSL_CTX_set_verify(self.as_ptr(), mode.bits as c_int, None);
@@ -709,10 +690,7 @@ impl SslContextBuilder {
     /// The callback is passed a boolean indicating if OpenSSL's internal verification succeeded as
     /// well as a reference to the `X509StoreContext` which can be used to examine the certificate
     /// chain. It should return a boolean indicating if verification succeeded.
-    ///
-    /// This corresponds to [`SSL_CTX_set_verify`].
-    ///
-    /// [`SSL_CTX_set_verify`]: https://www.openssl.org/docs/man1.1.0/ssl/SSL_CTX_set_verify.html
+    #[corresponds(SSL_CTX_set_verify)]
     pub fn set_verify_callback<F>(&mut self, mode: SslVerifyMode, verify: F)
     where
         F: Fn(bool, &mut X509StoreContextRef) -> bool + 'static + Sync + Send,
@@ -730,10 +708,7 @@ impl SslContextBuilder {
     ///
     /// Obtain the server name with the `servername` method and then set the corresponding context
     /// with `set_ssl_context`
-    ///
-    /// This corresponds to [`SSL_CTX_set_tlsext_servername_callback`].
-    ///
-    /// [`SSL_CTX_set_tlsext_servername_callback`]: https://www.openssl.org/docs/manmaster/man3/SSL_CTX_set_tlsext_servername_callback.html
+    #[corresponds(SSL_CTX_set_tlsext_servername_callback)]
     // FIXME tlsext prefix?
     pub fn set_servername_callback<F>(&mut self, callback: F)
     where
@@ -757,10 +732,7 @@ impl SslContextBuilder {
     /// Sets the certificate verification depth.
     ///
     /// If the peer's certificate chain is longer than this value, verification will fail.
-    ///
-    /// This corresponds to [`SSL_CTX_set_verify_depth`].
-    ///
-    /// [`SSL_CTX_set_verify_depth`]: https://www.openssl.org/docs/man1.1.0/ssl/SSL_CTX_set_verify_depth.html
+    #[corresponds(SSL_CTX_set_verify_depth)]
     pub fn set_verify_depth(&mut self, depth: u32) {
         unsafe {
             ffi::SSL_CTX_set_verify_depth(self.as_ptr(), depth as c_int);
@@ -770,11 +742,8 @@ impl SslContextBuilder {
     /// Sets a custom certificate store for verifying peer certificates.
     ///
     /// Requires OpenSSL 1.0.2 or newer.
-    ///
-    /// This corresponds to [`SSL_CTX_set0_verify_cert_store`].
-    ///
-    /// [`SSL_CTX_set0_verify_cert_store`]: https://www.openssl.org/docs/man1.0.2/ssl/SSL_CTX_set0_verify_cert_store.html
-    #[cfg(any(ossl102, ossl110))]
+    #[corresponds(SSL_CTX_set0_verify_cert_store)]
+    #[cfg(ossl102)]
     pub fn set_verify_cert_store(&mut self, cert_store: X509Store) -> Result<(), ErrorStack> {
         unsafe {
             let ptr = cert_store.as_ptr();
@@ -786,10 +755,7 @@ impl SslContextBuilder {
     }
 
     /// Replaces the context's certificate store.
-    ///
-    /// This corresponds to [`SSL_CTX_set_cert_store`].
-    ///
-    /// [`SSL_CTX_set_cert_store`]: https://www.openssl.org/docs/man1.0.2/man3/SSL_CTX_set_cert_store.html
+    #[corresponds(SSL_CTX_set_cert_store)]
     pub fn set_cert_store(&mut self, cert_store: X509Store) {
         unsafe {
             ffi::SSL_CTX_set_cert_store(self.as_ptr(), cert_store.as_ptr());
@@ -803,10 +769,7 @@ impl SslContextBuilder {
     /// instead of a single record at a time.
     ///
     /// It has no effect when used with DTLS.
-    ///
-    /// This corresponds to [`SSL_CTX_set_read_ahead`].
-    ///
-    /// [`SSL_CTX_set_read_ahead`]: https://www.openssl.org/docs/man1.1.0/ssl/SSL_CTX_set_read_ahead.html
+    #[corresponds(SSL_CTX_set_read_ahead)]
     pub fn set_read_ahead(&mut self, read_ahead: bool) {
         unsafe {
             ffi::SSL_CTX_set_read_ahead(self.as_ptr(), read_ahead as c_long);
@@ -814,10 +777,7 @@ impl SslContextBuilder {
     }
 
     /// Sets the mode used by the context, returning the previous mode.
-    ///
-    /// This corresponds to [`SSL_CTX_set_mode`].
-    ///
-    /// [`SSL_CTX_set_mode`]: https://www.openssl.org/docs/man1.0.2/ssl/SSL_CTX_set_mode.html
+    #[corresponds(SSL_CTX_set_mode)]
     pub fn set_mode(&mut self, mode: SslMode) -> SslMode {
         unsafe {
             let bits = ffi::SSL_CTX_set_mode(self.as_ptr(), mode.bits());
@@ -826,10 +786,7 @@ impl SslContextBuilder {
     }
 
     /// Sets the parameters to be used during ephemeral Diffie-Hellman key exchange.
-    ///
-    /// This corresponds to [`SSL_CTX_set_tmp_dh`].
-    ///
-    /// [`SSL_CTX_set_tmp_dh`]: https://www.openssl.org/docs/man1.0.2/ssl/SSL_CTX_set_tmp_dh.html
+    #[corresponds(SSL_CTX_set_tmp_dh)]
     pub fn set_tmp_dh(&mut self, dh: &DhRef<Params>) -> Result<(), ErrorStack> {
         unsafe { cvt(ffi::SSL_CTX_set_tmp_dh(self.as_ptr(), dh.as_ptr()) as c_int).map(|_| ()) }
     }
@@ -840,10 +797,7 @@ impl SslContextBuilder {
     /// The callback is provided with a reference to the `Ssl` for the session, as well as a boolean
     /// indicating if the selected cipher is export-grade, and the key length. The export and key
     /// length options are archaic and should be ignored in almost all cases.
-    ///
-    /// This corresponds to [`SSL_CTX_set_tmp_dh_callback`].
-    ///
-    /// [`SSL_CTX_set_tmp_dh_callback`]: https://www.openssl.org/docs/man1.0.2/ssl/SSL_CTX_set_tmp_dh.html
+    #[corresponds(SSL_CTX_set_tmp_dh_callback)]
     pub fn set_tmp_dh_callback<F>(&mut self, callback: F)
     where
         F: Fn(&mut SslRef, bool, u32) -> Result<Dh<Params>, ErrorStack> + 'static + Sync + Send,
@@ -855,8 +809,7 @@ impl SslContextBuilder {
     }
 
     /// Sets the parameters to be used during ephemeral elliptic curve Diffie-Hellman key exchange.
-    ///
-    /// This corresponds to `SSL_CTX_set_tmp_ecdh`.
+    #[corresponds(SSL_CTX_set_tmp_ecdh)]
     pub fn set_tmp_ecdh(&mut self, key: &EcKeyRef<Params>) -> Result<(), ErrorStack> {
         unsafe { cvt(ffi::SSL_CTX_set_tmp_ecdh(self.as_ptr(), key.as_ptr()) as c_int).map(|_| ()) }
     }
@@ -869,8 +822,7 @@ impl SslContextBuilder {
     /// length options are archaic and should be ignored in almost all cases.
     ///
     /// Requires OpenSSL 1.0.1 or 1.0.2.
-    ///
-    /// This corresponds to `SSL_CTX_set_tmp_ecdh_callback`.
+    #[corresponds(SSL_CTX_set_tmp_ecdh_callback)]
     #[cfg(all(ossl101, not(ossl110)))]
     #[deprecated(note = "this function leaks memory and does not exist on newer OpenSSL versions")]
     pub fn set_tmp_ecdh_callback<F>(&mut self, callback: F)
@@ -887,10 +839,7 @@ impl SslContextBuilder {
     ///
     /// These locations are read from the `SSL_CERT_FILE` and `SSL_CERT_DIR` environment variables
     /// if present, or defaults specified at OpenSSL build time otherwise.
-    ///
-    /// This corresponds to [`SSL_CTX_set_default_verify_paths`].
-    ///
-    /// [`SSL_CTX_set_default_verify_paths`]: https://www.openssl.org/docs/man1.1.0/ssl/SSL_CTX_set_default_verify_paths.html
+    #[corresponds(SSL_CTX_set_default_verify_paths)]
     pub fn set_default_verify_paths(&mut self) -> Result<(), ErrorStack> {
         unsafe { cvt(ffi::SSL_CTX_set_default_verify_paths(self.as_ptr())).map(|_| ()) }
     }
@@ -898,10 +847,7 @@ impl SslContextBuilder {
     /// Loads trusted root certificates from a file.
     ///
     /// The file should contain a sequence of PEM-formatted CA certificates.
-    ///
-    /// This corresponds to [`SSL_CTX_load_verify_locations`].
-    ///
-    /// [`SSL_CTX_load_verify_locations`]: https://www.openssl.org/docs/man1.0.2/ssl/SSL_CTX_load_verify_locations.html
+    #[corresponds(SSL_CTX_load_verify_locations)]
     pub fn set_ca_file<P: AsRef<Path>>(&mut self, file: P) -> Result<(), ErrorStack> {
         let file = CString::new(file.as_ref().as_os_str().to_str().unwrap()).unwrap();
         unsafe {
@@ -918,10 +864,7 @@ impl SslContextBuilder {
     ///
     /// The CA certificates must still be added to the trust root - they are not automatically set
     /// as trusted by this method.
-    ///
-    /// This corresponds to [`SSL_CTX_set_client_CA_list`].
-    ///
-    /// [`SSL_CTX_set_client_CA_list`]: https://www.openssl.org/docs/manmaster/man3/SSL_CTX_set_client_CA_list.html
+    #[corresponds(SSL_CTX_set_client_CA_list)]
     pub fn set_client_ca_list(&mut self, list: Stack<X509Name>) {
         unsafe {
             ffi::SSL_CTX_set_client_CA_list(self.as_ptr(), list.as_ptr());
@@ -931,10 +874,7 @@ impl SslContextBuilder {
 
     /// Add the provided CA certificate to the list sent by the server to the client when
     /// requesting client-side TLS authentication.
-    ///
-    /// This corresponds to [`SSL_CTX_add_client_CA`].
-    ///
-    /// [`SSL_CTX_add_client_CA`]: https://www.openssl.org/docs/man1.0.2/man3/SSL_CTX_set_client_CA_list.html
+    #[corresponds(SSL_CTX_add_client_CA)]
     #[cfg(not(libressl))]
     pub fn add_client_ca(&mut self, cacert: &X509Ref) -> Result<(), ErrorStack> {
         unsafe { cvt(ffi::SSL_CTX_add_client_CA(self.as_ptr(), cacert.as_ptr())).map(|_| ()) }
@@ -948,10 +888,7 @@ impl SslContextBuilder {
     ///
     /// This value should be set when using client certificates, or each request will fail its
     /// handshake and need to be restarted.
-    ///
-    /// This corresponds to [`SSL_CTX_set_session_id_context`].
-    ///
-    /// [`SSL_CTX_set_session_id_context`]: https://www.openssl.org/docs/manmaster/man3/SSL_CTX_set_session_id_context.html
+    #[corresponds(SSL_CTX_set_session_id_context)]
     pub fn set_session_id_context(&mut self, sid_ctx: &[u8]) -> Result<(), ErrorStack> {
         unsafe {
             assert!(sid_ctx.len() <= c_uint::max_value() as usize);
@@ -969,10 +906,7 @@ impl SslContextBuilder {
     /// Only a single certificate will be loaded - use `add_extra_chain_cert` to add the remainder
     /// of the certificate chain, or `set_certificate_chain_file` to load the entire chain from a
     /// single file.
-    ///
-    /// This corresponds to [`SSL_CTX_use_certificate_file`].
-    ///
-    /// [`SSL_CTX_use_certificate_file`]: https://www.openssl.org/docs/man1.0.2/ssl/SSL_CTX_use_certificate_file.html
+    #[corresponds(SSL_CTX_use_certificate_file)]
     pub fn set_certificate_file<P: AsRef<Path>>(
         &mut self,
         file: P,
@@ -994,10 +928,7 @@ impl SslContextBuilder {
     /// The file should contain a sequence of PEM-formatted certificates, the first being the leaf
     /// certificate, and the remainder forming the chain of certificates up to and including the
     /// trusted root certificate.
-    ///
-    /// This corresponds to [`SSL_CTX_use_certificate_chain_file`].
-    ///
-    /// [`SSL_CTX_use_certificate_chain_file`]: https://www.openssl.org/docs/man1.0.2/ssl/SSL_CTX_use_certificate_file.html
+    #[corresponds(SSL_CTX_use_certificate_chain_file)]
     pub fn set_certificate_chain_file<P: AsRef<Path>>(
         &mut self,
         file: P,
@@ -1015,10 +946,7 @@ impl SslContextBuilder {
     /// Sets the leaf certificate.
     ///
     /// Use `add_extra_chain_cert` to add the remainder of the certificate chain.
-    ///
-    /// This corresponds to [`SSL_CTX_use_certificate`].
-    ///
-    /// [`SSL_CTX_use_certificate`]: https://www.openssl.org/docs/man1.0.2/ssl/SSL_CTX_use_certificate_file.html
+    #[corresponds(SSL_CTX_use_certificate)]
     pub fn set_certificate(&mut self, cert: &X509Ref) -> Result<(), ErrorStack> {
         unsafe { cvt(ffi::SSL_CTX_use_certificate(self.as_ptr(), cert.as_ptr())).map(|_| ()) }
     }
@@ -1027,10 +955,7 @@ impl SslContextBuilder {
     ///
     /// This chain should contain all certificates necessary to go from the certificate specified by
     /// `set_certificate` to a trusted root.
-    ///
-    /// This corresponds to [`SSL_CTX_add_extra_chain_cert`].
-    ///
-    /// [`SSL_CTX_add_extra_chain_cert`]: https://www.openssl.org/docs/manmaster/man3/SSL_CTX_add_extra_chain_cert.html
+    #[corresponds(SSL_CTX_add_extra_chain_cert)]
     pub fn add_extra_chain_cert(&mut self, cert: X509) -> Result<(), ErrorStack> {
         unsafe {
             cvt(ffi::SSL_CTX_add_extra_chain_cert(self.as_ptr(), cert.as_ptr()) as c_int)?;
@@ -1040,10 +965,7 @@ impl SslContextBuilder {
     }
 
     /// Loads the private key from a file.
-    ///
-    /// This corresponds to [`SSL_CTX_use_PrivateKey_file`].
-    ///
-    /// [`SSL_CTX_use_PrivateKey_file`]: https://www.openssl.org/docs/man1.0.2/ssl/SSL_CTX_use_PrivateKey_file.html
+    #[corresponds(SSL_CTX_use_PrivateKey_file)]
     pub fn set_private_key_file<P: AsRef<Path>>(
         &mut self,
         file: P,
@@ -1061,10 +983,7 @@ impl SslContextBuilder {
     }
 
     /// Sets the private key.
-    ///
-    /// This corresponds to [`SSL_CTX_use_PrivateKey`].
-    ///
-    /// [`SSL_CTX_use_PrivateKey`]: https://www.openssl.org/docs/man1.0.2/ssl/SSL_CTX_use_PrivateKey_file.html
+    #[corresponds(SSL_CTX_use_PrivateKey)]
     pub fn set_private_key<T>(&mut self, key: &PKeyRef<T>) -> Result<(), ErrorStack>
     where
         T: HasPrivate,
@@ -1078,10 +997,8 @@ impl SslContextBuilder {
     ///
     /// See [`ciphers`] for details on the format.
     ///
-    /// This corresponds to [`SSL_CTX_set_cipher_list`].
-    ///
     /// [`ciphers`]: https://www.openssl.org/docs/man1.1.0/apps/ciphers.html
-    /// [`SSL_CTX_set_cipher_list`]: https://www.openssl.org/docs/manmaster/man3/SSL_CTX_set_cipher_list.html
+    #[corresponds(SSL_CTX_set_cipher_list)]
     pub fn set_cipher_list(&mut self, cipher_list: &str) -> Result<(), ErrorStack> {
         let cipher_list = CString::new(cipher_list).unwrap();
         unsafe {
@@ -1101,10 +1018,7 @@ impl SslContextBuilder {
     /// preference.
     ///
     /// Requires OpenSSL 1.1.1 or newer.
-    ///
-    /// This corresponds to [`SSL_CTX_set_ciphersuites`].
-    ///
-    /// [`SSL_CTX_set_ciphersuites`]: https://www.openssl.org/docs/manmaster/man3/SSL_CTX_set_ciphersuites.html
+    #[corresponds(SSL_CTX_set_ciphersuites)]
     #[cfg(ossl111)]
     pub fn set_ciphersuites(&mut self, cipher_list: &str) -> Result<(), ErrorStack> {
         let cipher_list = CString::new(cipher_list).unwrap();
@@ -1120,10 +1034,7 @@ impl SslContextBuilder {
     /// Enables ECDHE key exchange with an automatically chosen curve list.
     ///
     /// Requires OpenSSL 1.0.2.
-    ///
-    /// This corresponds to [`SSL_CTX_set_ecdh_auto`].
-    ///
-    /// [`SSL_CTX_set_ecdh_auto`]: https://www.openssl.org/docs/man1.0.2/ssl/SSL_CTX_set_ecdh_auto.html
+    #[corresponds(SSL_CTX_set_ecdh_auto)]
     #[cfg(any(libressl, all(ossl102, not(ossl110))))]
     pub fn set_ecdh_auto(&mut self, onoff: bool) -> Result<(), ErrorStack> {
         unsafe { cvt(ffi::SSL_CTX_set_ecdh_auto(self.as_ptr(), onoff as c_int)).map(|_| ()) }
@@ -1131,34 +1042,25 @@ impl SslContextBuilder {
 
     /// Sets the options used by the context, returning the old set.
     ///
-    /// This corresponds to [`SSL_CTX_set_options`].
-    ///
     /// # Note
     ///
     /// This *enables* the specified options, but does not disable unspecified options. Use
     /// `clear_options` for that.
-    ///
-    /// [`SSL_CTX_set_options`]: https://www.openssl.org/docs/manmaster/man3/SSL_CTX_set_options.html
+    #[corresponds(SSL_CTX_set_options)]
     pub fn set_options(&mut self, option: SslOptions) -> SslOptions {
         let bits = unsafe { ffi::SSL_CTX_set_options(self.as_ptr(), option.bits()) };
         SslOptions { bits }
     }
 
     /// Returns the options used by the context.
-    ///
-    /// This corresponds to [`SSL_CTX_get_options`].
-    ///
-    /// [`SSL_CTX_get_options`]: https://www.openssl.org/docs/manmaster/man3/SSL_CTX_set_options.html
+    #[corresponds(SSL_CTX_get_options)]
     pub fn options(&self) -> SslOptions {
         let bits = unsafe { ffi::SSL_CTX_get_options(self.as_ptr()) };
         SslOptions { bits }
     }
 
     /// Clears the options used by the context, returning the old set.
-    ///
-    /// This corresponds to [`SSL_CTX_clear_options`].
-    ///
-    /// [`SSL_CTX_clear_options`]: https://www.openssl.org/docs/manmaster/man3/SSL_CTX_set_options.html
+    #[corresponds(SSL_CTX_clear_options)]
     pub fn clear_options(&mut self, option: SslOptions) -> SslOptions {
         let bits = unsafe { ffi::SSL_CTX_clear_options(self.as_ptr(), option.bits()) };
         SslOptions { bits }
@@ -1169,11 +1071,8 @@ impl SslContextBuilder {
     /// A value of `None` will enable protocol versions down the the lowest version supported by
     /// OpenSSL.
     ///
-    /// This corresponds to [`SSL_CTX_set_min_proto_version`].
-    ///
     /// Requires OpenSSL 1.1.0 or LibreSSL 2.6.1 or newer.
-    ///
-    /// [`SSL_CTX_set_min_proto_version`]: https://www.openssl.org/docs/man1.1.0/ssl/SSL_set_min_proto_version.html
+    #[corresponds(SSL_CTX_set_min_proto_version)]
     #[cfg(any(ossl110, libressl261))]
     pub fn set_min_proto_version(&mut self, version: Option<SslVersion>) -> Result<(), ErrorStack> {
         unsafe {
@@ -1190,11 +1089,8 @@ impl SslContextBuilder {
     /// A value of `None` will enable protocol versions down the the highest version supported by
     /// OpenSSL.
     ///
-    /// This corresponds to [`SSL_CTX_set_max_proto_version`].
-    ///
     /// Requires OpenSSL 1.1.0 or or LibreSSL 2.6.1 or newer.
-    ///
-    /// [`SSL_CTX_set_max_proto_version`]: https://www.openssl.org/docs/man1.1.0/ssl/SSL_set_min_proto_version.html
+    #[corresponds(SSL_CTX_set_max_proto_version)]
     #[cfg(any(ossl110, libressl261))]
     pub fn set_max_proto_version(&mut self, version: Option<SslVersion>) -> Result<(), ErrorStack> {
         unsafe {
@@ -1211,11 +1107,8 @@ impl SslContextBuilder {
     /// A value of `None` indicates that all versions down the the lowest version supported by
     /// OpenSSL are enabled.
     ///
-    /// This corresponds to [`SSL_CTX_get_min_proto_version`].
-    ///
     /// Requires OpenSSL 1.1.0g or LibreSSL 2.7.0 or newer.
-    ///
-    /// [`SSL_CTX_get_min_proto_version`]: https://www.openssl.org/docs/man1.1.0/ssl/SSL_set_min_proto_version.html
+    #[corresponds(SSL_CTX_get_min_proto_version)]
     #[cfg(any(ossl110g, libressl270))]
     pub fn min_proto_version(&mut self) -> Option<SslVersion> {
         unsafe {
@@ -1233,11 +1126,8 @@ impl SslContextBuilder {
     /// A value of `None` indicates that all versions down the the highest version supported by
     /// OpenSSL are enabled.
     ///
-    /// This corresponds to [`SSL_CTX_get_max_proto_version`].
-    ///
     /// Requires OpenSSL 1.1.0g or LibreSSL 2.7.0 or newer.
-    ///
-    /// [`SSL_CTX_get_max_proto_version`]: https://www.openssl.org/docs/man1.1.0/ssl/SSL_set_min_proto_version.html
+    #[corresponds(SSL_CTX_get_max_proto_version)]
     #[cfg(any(ossl110g, libressl270))]
     pub fn max_proto_version(&mut self) -> Option<SslVersion> {
         unsafe {
@@ -1257,11 +1147,8 @@ impl SslContextBuilder {
     /// and `http/1.1` is encoded as `b"\x06spdy/1\x08http/1.1"`. The protocols are ordered by
     /// preference.
     ///
-    /// This corresponds to [`SSL_CTX_set_alpn_protos`].
-    ///
     /// Requires OpenSSL 1.0.2 or LibreSSL 2.6.1 or newer.
-    ///
-    /// [`SSL_CTX_set_alpn_protos`]: https://www.openssl.org/docs/man1.1.0/ssl/SSL_CTX_set_alpn_protos.html
+    #[corresponds(SSL_CTX_set_alpn_protos)]
     #[cfg(any(ossl102, libressl261))]
     pub fn set_alpn_protos(&mut self, protocols: &[u8]) -> Result<(), ErrorStack> {
         unsafe {
@@ -1281,10 +1168,7 @@ impl SslContextBuilder {
     }
 
     /// Enables the DTLS extension "use_srtp" as defined in RFC5764.
-    ///
-    /// This corresponds to [`SSL_CTX_set_tlsext_use_srtp`].
-    ///
-    /// [`SSL_CTX_set_tlsext_use_srtp`]: https://www.openssl.org/docs/man1.1.1/man3/SSL_CTX_set_tlsext_use_srtp.html
+    #[corresponds(SSL_CTX_set_tlsext_use_srtp)]
     pub fn set_tlsext_use_srtp(&mut self, protocols: &str) -> Result<(), ErrorStack> {
         unsafe {
             let cstr = CString::new(protocols).unwrap();
@@ -1307,13 +1191,11 @@ impl SslContextBuilder {
     /// of those protocols on success. The [`select_next_proto`] function implements the standard
     /// protocol selection algorithm.
     ///
-    /// This corresponds to [`SSL_CTX_set_alpn_select_cb`].
-    ///
     /// Requires OpenSSL 1.0.2 or LibreSSL 2.6.1 or newer.
     ///
     /// [`SslContextBuilder::set_alpn_protos`]: struct.SslContextBuilder.html#method.set_alpn_protos
     /// [`select_next_proto`]: fn.select_next_proto.html
-    /// [`SSL_CTX_set_alpn_select_cb`]: https://www.openssl.org/docs/man1.1.0/ssl/SSL_CTX_set_alpn_protos.html
+    #[corresponds(SSL_CTX_set_alpn_select_cb)]
     #[cfg(any(ossl102, libressl261))]
     pub fn set_alpn_select_callback<F>(&mut self, callback: F)
     where
@@ -1330,28 +1212,19 @@ impl SslContextBuilder {
     }
 
     /// Checks for consistency between the private key and certificate.
-    ///
-    /// This corresponds to [`SSL_CTX_check_private_key`].
-    ///
-    /// [`SSL_CTX_check_private_key`]: https://www.openssl.org/docs/man1.1.0/ssl/SSL_CTX_check_private_key.html
+    #[corresponds(SSL_CTX_check_private_key)]
     pub fn check_private_key(&self) -> Result<(), ErrorStack> {
         unsafe { cvt(ffi::SSL_CTX_check_private_key(self.as_ptr())).map(|_| ()) }
     }
 
     /// Returns a shared reference to the context's certificate store.
-    ///
-    /// This corresponds to [`SSL_CTX_get_cert_store`].
-    ///
-    /// [`SSL_CTX_get_cert_store`]: https://www.openssl.org/docs/man1.1.0/ssl/SSL_CTX_get_cert_store.html
+    #[corresponds(SSL_CTX_get_cert_store)]
     pub fn cert_store(&self) -> &X509StoreBuilderRef {
         unsafe { X509StoreBuilderRef::from_ptr(ffi::SSL_CTX_get_cert_store(self.as_ptr())) }
     }
 
     /// Returns a mutable reference to the context's certificate store.
-    ///
-    /// This corresponds to [`SSL_CTX_get_cert_store`].
-    ///
-    /// [`SSL_CTX_get_cert_store`]: https://www.openssl.org/docs/man1.1.0/ssl/SSL_CTX_get_cert_store.html
+    #[corresponds(SSL_CTX_get_cert_store)]
     pub fn cert_store_mut(&mut self) -> &mut X509StoreBuilderRef {
         unsafe { X509StoreBuilderRef::from_ptr_mut(ffi::SSL_CTX_get_cert_store(self.as_ptr())) }
     }
@@ -1359,10 +1232,7 @@ impl SslContextBuilder {
     /// Returns a reference to the X509 verification configuration.
     ///
     /// Requires OpenSSL 1.0.2 or newer.
-    ///
-    /// This corresponds to [`SSL_CTX_get0_param`].
-    ///
-    /// [`SSL_CTX_get0_param`]: https://www.openssl.org/docs/man1.0.2/ssl/SSL_CTX_get0_param.html
+    #[corresponds(SSL_CTX_get0_param)]
     #[cfg(any(ossl102, libressl261))]
     pub fn verify_param(&self) -> &X509VerifyParamRef {
         unsafe { X509VerifyParamRef::from_ptr(ffi::SSL_CTX_get0_param(self.as_ptr())) }
@@ -1371,10 +1241,7 @@ impl SslContextBuilder {
     /// Returns a mutable reference to the X509 verification configuration.
     ///
     /// Requires OpenSSL 1.0.2 or newer.
-    ///
-    /// This corresponds to [`SSL_CTX_get0_param`].
-    ///
-    /// [`SSL_CTX_get0_param`]: https://www.openssl.org/docs/man1.0.2/ssl/SSL_CTX_get0_param.html
+    #[corresponds(SSL_CTX_get0_param)]
     #[cfg(any(ossl102, libressl261))]
     pub fn verify_param_mut(&mut self) -> &mut X509VerifyParamRef {
         unsafe { X509VerifyParamRef::from_ptr_mut(ffi::SSL_CTX_get0_param(self.as_ptr())) }
@@ -1392,10 +1259,7 @@ impl SslContextBuilder {
     /// returned to clients. The status may be set with the `SslRef::set_ocsp_status` method. A
     /// response of `Ok(true)` indicates that the OCSP status should be returned to the client, and
     /// `Ok(false)` indicates that the status should not be returned to the client.
-    ///
-    /// This corresponds to [`SSL_CTX_set_tlsext_status_cb`].
-    ///
-    /// [`SSL_CTX_set_tlsext_status_cb`]: https://www.openssl.org/docs/man1.0.2/ssl/SSL_CTX_set_tlsext_status_cb.html
+    #[corresponds(SSL_CTX_set_tlsext_status_cb)]
     pub fn set_status_callback<F>(&mut self, callback: F) -> Result<(), ErrorStack>
     where
         F: Fn(&mut SslRef) -> Result<bool, ErrorStack> + 'static + Sync + Send,
@@ -1415,10 +1279,7 @@ impl SslContextBuilder {
     /// The callback will be called with the SSL context, an identity hint if one was provided
     /// by the server, a mutable slice for each of the identity and pre-shared key bytes. The
     /// identity must be written as a null-terminated C string.
-    ///
-    /// This corresponds to [`SSL_CTX_set_psk_client_callback`].
-    ///
-    /// [`SSL_CTX_set_psk_client_callback`]: https://www.openssl.org/docs/man1.0.2/ssl/SSL_CTX_set_psk_client_callback.html
+    #[corresponds(SSL_CTX_set_psk_client_callback)]
     #[cfg(not(osslconf = "OPENSSL_NO_PSK"))]
     pub fn set_psk_client_callback<F>(&mut self, callback: F)
     where
@@ -1450,10 +1311,7 @@ impl SslContextBuilder {
     /// The callback will be called with the SSL context, an identity provided by the client,
     /// and, a mutable slice for the pre-shared key bytes. The callback returns the number of
     /// bytes in the pre-shared key.
-    ///
-    /// This corresponds to [`SSL_CTX_set_psk_server_callback`].
-    ///
-    /// [`SSL_CTX_set_psk_server_callback`]: https://www.openssl.org/docs/man1.0.2/ssl/SSL_CTX_set_psk_server_callback.html
+    #[corresponds(SSL_CTX_set_psk_server_callback)]
     #[cfg(not(osslconf = "OPENSSL_NO_PSK"))]
     pub fn set_psk_server_callback<F>(&mut self, callback: F)
     where
@@ -1479,11 +1337,9 @@ impl SslContextBuilder {
     /// Note that session caching must be enabled for the callback to be invoked, and it defaults
     /// off for clients. [`set_session_cache_mode`] controls that behavior.
     ///
-    /// This corresponds to [`SSL_CTX_sess_set_new_cb`].
-    ///
     /// [`SslRef::session`]: struct.SslRef.html#method.session
     /// [`set_session_cache_mode`]: #method.set_session_cache_mode
-    /// [`SSL_CTX_sess_set_new_cb`]: https://www.openssl.org/docs/manmaster/man3/SSL_CTX_sess_set_new_cb.html
+    #[corresponds(SSL_CTX_sess_set_new_cb)]
     pub fn set_new_session_callback<F>(&mut self, callback: F)
     where
         F: Fn(&mut SslRef, SslSession) + 'static + Sync + Send,
@@ -1497,10 +1353,7 @@ impl SslContextBuilder {
     /// Sets the callback which is called when sessions are removed from the context.
     ///
     /// Sessions can be removed because they have timed out or because they are considered faulty.
-    ///
-    /// This corresponds to [`SSL_CTX_sess_set_remove_cb`].
-    ///
-    /// [`SSL_CTX_sess_set_remove_cb`]: https://www.openssl.org/docs/manmaster/man3/SSL_CTX_sess_set_new_cb.html
+    #[corresponds(SSL_CTX_sess_set_remove_cb)]
     pub fn set_remove_session_callback<F>(&mut self, callback: F)
     where
         F: Fn(&SslContextRef, &SslSessionRef) + 'static + Sync + Send,
@@ -1521,13 +1374,10 @@ impl SslContextBuilder {
     /// return the session corresponding to that ID if available. This is only used for servers, not
     /// clients.
     ///
-    /// This corresponds to [`SSL_CTX_sess_set_get_cb`].
-    ///
     /// # Safety
     ///
     /// The returned `SslSession` must not be associated with a different `SslContext`.
-    ///
-    /// [`SSL_CTX_sess_set_get_cb`]: https://www.openssl.org/docs/manmaster/man3/SSL_CTX_sess_set_new_cb.html
+    #[corresponds(SSL_CTX_sess_set_get_cb)]
     pub unsafe fn set_get_session_callback<F>(&mut self, callback: F)
     where
         F: Fn(&mut SslRef, &[u8]) -> Option<SslSession> + 'static + Sync + Send,
@@ -1543,10 +1393,7 @@ impl SslContextBuilder {
     /// traffic. The line does not contain a trailing newline.
     ///
     /// Requires OpenSSL 1.1.1 or newer.
-    ///
-    /// This corresponds to [`SSL_CTX_set_keylog_callback`].
-    ///
-    /// [`SSL_CTX_set_keylog_callback`]: https://www.openssl.org/docs/manmaster/man3/SSL_CTX_set_keylog_callback.html
+    #[corresponds(SSL_CTX_set_keylog_callback)]
     #[cfg(ossl111)]
     pub fn set_keylog_callback<F>(&mut self, callback: F)
     where
@@ -1561,10 +1408,7 @@ impl SslContextBuilder {
     /// Sets the session caching mode use for connections made with the context.
     ///
     /// Returns the previous session caching mode.
-    ///
-    /// This corresponds to [`SSL_CTX_set_session_cache_mode`].
-    ///
-    /// [`SSL_CTX_set_session_cache_mode`]: https://www.openssl.org/docs/man1.1.0/ssl/SSL_CTX_get_session_cache_mode.html
+    #[corresponds(SSL_CTX_set_session_cache_mode)]
     pub fn set_session_cache_mode(&mut self, mode: SslSessionCacheMode) -> SslSessionCacheMode {
         unsafe {
             let bits = ffi::SSL_CTX_set_session_cache_mode(self.as_ptr(), mode.bits());
@@ -1577,8 +1421,7 @@ impl SslContextBuilder {
     ///
     /// The callback will be called with the SSL context and a slice into which the cookie
     /// should be written. The callback should return the number of bytes written.
-    ///
-    /// This corresponds to `SSL_CTX_set_stateless_cookie_generate_cb`.
+    #[corresponds(SSL_CTX_set_stateless_cookie_generate_cb)]
     #[cfg(ossl111)]
     pub fn set_stateless_cookie_generate_cb<F>(&mut self, callback: F)
     where
@@ -1601,8 +1444,7 @@ impl SslContextBuilder {
     ///
     /// Note that the OpenSSL implementation independently verifies the integrity of
     /// application cookies using an HMAC before invoking the supplied callback.
-    ///
-    /// This corresponds to `SSL_CTX_set_stateless_cookie_verify_cb`.
+    #[corresponds(SSL_CTX_set_stateless_cookie_verify_cb)]
     #[cfg(ossl111)]
     pub fn set_stateless_cookie_verify_cb<F>(&mut self, callback: F)
     where
@@ -1621,8 +1463,7 @@ impl SslContextBuilder {
     ///
     /// The callback will be called with the SSL context and a slice into which the cookie
     /// should be written. The callback should return the number of bytes written.
-    ///
-    /// This corresponds to `SSL_CTX_set_cookie_generate_cb`.
+    #[corresponds(SSL_CTX_set_cookie_generate_cb)]
     pub fn set_cookie_generate_cb<F>(&mut self, callback: F)
     where
         F: Fn(&mut SslRef, &mut [u8]) -> Result<usize, ErrorStack> + 'static + Sync + Send,
@@ -1637,8 +1478,7 @@ impl SslContextBuilder {
     ///
     /// The callback will be called with the SSL context and the cookie supplied by the
     /// client. It should return true if and only if the cookie is valid.
-    ///
-    /// This corresponds to `SSL_CTX_set_cookie_verify_cb`.
+    #[corresponds(SSL_CTX_set_cookie_verify_cb)]
     pub fn set_cookie_verify_cb<F>(&mut self, callback: F)
     where
         F: Fn(&mut SslRef, &[u8]) -> bool + 'static + Sync + Send,
@@ -1653,10 +1493,7 @@ impl SslContextBuilder {
     ///
     /// This can be used to provide data to callbacks registered with the context. Use the
     /// `SslContext::new_ex_index` method to create an `Index`.
-    ///
-    /// This corresponds to [`SSL_CTX_set_ex_data`].
-    ///
-    /// [`SSL_CTX_set_ex_data`]: https://www.openssl.org/docs/man1.0.2/ssl/SSL_CTX_set_ex_data.html
+    #[corresponds(SSL_CTX_set_ex_data)]
     pub fn set_ex_data<T>(&mut self, index: Index<SslContext, T>, data: T) {
         self.set_ex_data_inner(index, data);
     }
@@ -1672,10 +1509,7 @@ impl SslContextBuilder {
     /// Adds a custom extension for a TLS/DTLS client or server for all supported protocol versions.
     ///
     /// Requires OpenSSL 1.1.1 or newer.
-    ///
-    /// This corresponds to [`SSL_CTX_add_custom_ext`].
-    ///
-    /// [`SSL_CTX_add_custom_ext`]: https://www.openssl.org/docs/manmaster/man3/SSL_CTX_add_custom_ext.html
+    #[corresponds(SSL_CTX_add_custom_ext)]
     #[cfg(ossl111)]
     pub fn add_custom_ext<AddFn, ParseFn, T>(
         &mut self,
@@ -1731,10 +1565,7 @@ impl SslContextBuilder {
     /// Defaults to 0.
     ///
     /// Requires OpenSSL 1.1.1 or newer.
-    ///
-    /// This corresponds to [`SSL_CTX_set_max_early_data`].
-    ///
-    /// [`SSL_CTX_set_max_early_data`]: https://www.openssl.org/docs/man1.1.1/man3/SSL_CTX_set_max_early_data.html
+    #[corresponds(SSL_CTX_set_max_early_data)]
     #[cfg(ossl111)]
     pub fn set_max_early_data(&mut self, bytes: u32) -> Result<(), ErrorStack> {
         if unsafe { ffi::SSL_CTX_set_max_early_data(self.as_ptr(), bytes) } == 1 {
@@ -1747,10 +1578,7 @@ impl SslContextBuilder {
     /// Sets a callback which will be invoked just after the client's hello message is received.
     ///
     /// Requires OpenSSL 1.1.1 or newer.
-    ///
-    /// This corresponds to [`SSL_CTX_set_client_hello_cb`].
-    ///
-    /// [`SSL_CTX_set_client_hello_cb`]: https://www.openssl.org/docs/man1.1.1/man3/SSL_CTX_set_client_hello_cb.html
+    #[corresponds(SSL_CTX_set_client_hello_cb)]
     #[cfg(ossl111)]
     pub fn set_client_hello_callback<F>(&mut self, callback: F)
     where
@@ -1772,10 +1600,7 @@ impl SslContextBuilder {
     /// Sets the context's session cache size limit, returning the previous limit.
     ///
     /// A value of 0 means that the cache size is unbounded.
-    ///
-    /// This corresponds to [`SSL_CTX_sess_get_cache_size`].
-    ///
-    /// [`SSL_CTX_sess_get_cache_size`]: https://www.openssl.org/docs/man1.0.2/man3/SSL_CTX_sess_set_cache_size.html
+    #[corresponds(SSL_CTX_sess_set_cache_size)]
     #[allow(clippy::useless_conversion)]
     pub fn set_session_cache_size(&mut self, size: i32) -> i64 {
         unsafe { ffi::SSL_CTX_sess_set_cache_size(self.as_ptr(), size.into()).into() }
@@ -1783,11 +1608,8 @@ impl SslContextBuilder {
 
     /// Sets the context's supported signature algorithms.
     ///
-    /// This corresponds to [`SSL_CTX_set1_sigalgs_list`].
-    ///
     /// Requires OpenSSL 1.0.2 or newer.
-    ///
-    /// [`SSL_CTX_set1_sigalgs_list`]: https://www.openssl.org/docs/man1.1.0/man3/SSL_CTX_set1_sigalgs_list.html
+    #[corresponds(SSL_CTX_set1_sigalgs_list)]
     #[cfg(ossl102)]
     pub fn set_sigalgs_list(&mut self, sigalgs: &str) -> Result<(), ErrorStack> {
         let sigalgs = CString::new(sigalgs).unwrap();
@@ -1799,11 +1621,8 @@ impl SslContextBuilder {
 
     /// Sets the context's supported elliptic curve groups.
     ///
-    /// This corresponds to [`SSL_CTX_set1_groups_list`].
-    ///
     /// Requires OpenSSL 1.1.1 or newer.
-    ///
-    /// [`SSL_CTX_set1_groups_list`]: https://www.openssl.org/docs/man1.1.1/man3/SSL_CTX_set1_groups_list.html
+    #[corresponds(SSL_CTX_set1_groups_list)]
     #[cfg(ossl111)]
     pub fn set_groups_list(&mut self, groups: &str) -> Result<(), ErrorStack> {
         let groups = CString::new(groups).unwrap();
@@ -1868,10 +1687,7 @@ impl SslContext {
     ///
     /// Each invocation of this function is guaranteed to return a distinct index. These can be used
     /// to store data in the context that can be retrieved later by callbacks, for example.
-    ///
-    /// This corresponds to [`SSL_CTX_get_ex_new_index`].
-    ///
-    /// [`SSL_CTX_get_ex_new_index`]: https://www.openssl.org/docs/man1.0.2/ssl/SSL_CTX_get_ex_new_index.html
+    #[corresponds(SSL_CTX_get_ex_new_index)]
     pub fn new_ex_index<T>() -> Result<Index<SslContext, T>, ErrorStack>
     where
         T: 'static + Sync + Send,
@@ -1903,10 +1719,7 @@ impl SslContextRef {
     /// Returns the certificate associated with this `SslContext`, if present.
     ///
     /// Requires OpenSSL 1.0.2 or newer.
-    ///
-    /// This corresponds to [`SSL_CTX_get0_certificate`].
-    ///
-    /// [`SSL_CTX_get0_certificate`]: https://www.openssl.org/docs/man1.1.0/ssl/ssl.html
+    #[corresponds(SSL_CTX_get0_certificate)]
     #[cfg(any(ossl102, ossl110))]
     pub fn certificate(&self) -> Option<&X509Ref> {
         unsafe {
@@ -1918,10 +1731,7 @@ impl SslContextRef {
     /// Returns the private key associated with this `SslContext`, if present.
     ///
     /// Requires OpenSSL 1.0.2 or newer.
-    ///
-    /// This corresponds to [`SSL_CTX_get0_privatekey`].
-    ///
-    /// [`SSL_CTX_get0_privatekey`]: https://www.openssl.org/docs/man1.1.0/ssl/ssl.html
+    #[corresponds(SSL_CTX_get0_privatekey)]
     #[cfg(any(ossl102, ossl110))]
     pub fn private_key(&self) -> Option<&PKeyRef<Private>> {
         unsafe {
@@ -1931,17 +1741,13 @@ impl SslContextRef {
     }
 
     /// Returns a shared reference to the certificate store used for verification.
-    ///
-    /// This corresponds to [`SSL_CTX_get_cert_store`].
-    ///
-    /// [`SSL_CTX_get_cert_store`]: https://www.openssl.org/docs/man1.1.0/ssl/SSL_CTX_get_cert_store.html
+    #[corresponds(SSL_CTX_get_cert_store)]
     pub fn cert_store(&self) -> &X509StoreRef {
         unsafe { X509StoreRef::from_ptr(ffi::SSL_CTX_get_cert_store(self.as_ptr())) }
     }
 
     /// Returns a shared reference to the stack of certificates making up the chain from the leaf.
-    ///
-    /// This corresponds to `SSL_CTX_get_extra_chain_certs`.
+    #[corresponds(SSL_CTX_get_extra_chain_certs)]
     pub fn extra_chain_certs(&self) -> &StackRef<X509> {
         unsafe {
             let mut chain = ptr::null_mut();
@@ -1951,10 +1757,7 @@ impl SslContextRef {
     }
 
     /// Returns a reference to the extra data at the specified index.
-    ///
-    /// This corresponds to [`SSL_CTX_get_ex_data`].
-    ///
-    /// [`SSL_CTX_get_ex_data`]: https://www.openssl.org/docs/manmaster/man3/SSL_CTX_get_ex_data.html
+    #[corresponds(SSL_CTX_get_ex_data)]
     pub fn ex_data<T>(&self, index: Index<SslContext, T>) -> Option<&T> {
         unsafe {
             let data = ffi::SSL_CTX_get_ex_data(self.as_ptr(), index.as_raw());
@@ -1969,10 +1772,7 @@ impl SslContextRef {
     /// Gets the maximum amount of early data that will be accepted on incoming connections.
     ///
     /// Requires OpenSSL 1.1.1 or newer.
-    ///
-    /// This corresponds to [`SSL_CTX_get_max_early_data`].
-    ///
-    /// [`SSL_CTX_get_max_early_data`]: https://www.openssl.org/docs/man1.1.1/man3/SSL_CTX_get_max_early_data.html
+    #[corresponds(SSL_CTX_get_max_early_data)]
     #[cfg(ossl111)]
     pub fn max_early_data(&self) -> u32 {
         unsafe { ffi::SSL_CTX_get_max_early_data(self.as_ptr()) }
@@ -1982,14 +1782,11 @@ impl SslContextRef {
     ///
     /// Returns `true` if the session was successfully added to the cache, and `false` if it was already present.
     ///
-    /// This corresponds to [`SSL_CTX_add_session`].
-    ///
     /// # Safety
     ///
     /// The caller of this method is responsible for ensuring that the session has never been used with another
     /// `SslContext` than this one.
-    ///
-    /// [`SSL_CTX_add_session`]: https://www.openssl.org/docs/man1.1.1/man3/SSL_CTX_remove_session.html
+    #[corresponds(SSL_CTX_add_session)]
     pub unsafe fn add_session(&self, session: &SslSessionRef) -> bool {
         ffi::SSL_CTX_add_session(self.as_ptr(), session.as_ptr()) != 0
     }
@@ -1998,14 +1795,11 @@ impl SslContextRef {
     ///
     /// Returns `true` if the session was successfully found and removed, and `false` otherwise.
     ///
-    /// This corresponds to [`SSL_CTX_remove_session`].
-    ///
     /// # Safety
     ///
     /// The caller of this method is responsible for ensuring that the session has never been used with another
     /// `SslContext` than this one.
-    ///
-    /// [`SSL_CTX_remove_session`]: https://www.openssl.org/docs/man1.1.1/man3/SSL_CTX_remove_session.html
+    #[corresponds(SSL_CTX_remove_session)]
     pub unsafe fn remove_session(&self, session: &SslSessionRef) -> bool {
         ffi::SSL_CTX_remove_session(self.as_ptr(), session.as_ptr()) != 0
     }
@@ -2013,10 +1807,7 @@ impl SslContextRef {
     /// Returns the context's session cache size limit.
     ///
     /// A value of 0 means that the cache size is unbounded.
-    ///
-    /// This corresponds to [`SSL_CTX_sess_get_cache_size`].
-    ///
-    /// [`SSL_CTX_sess_get_cache_size`]: https://www.openssl.org/docs/man1.0.2/man3/SSL_CTX_sess_set_cache_size.html
+    #[corresponds(SSL_CTX_sess_get_cache_size)]
     #[allow(clippy::useless_conversion)]
     pub fn session_cache_size(&self) -> i64 {
         unsafe { ffi::SSL_CTX_sess_get_cache_size(self.as_ptr()).into() }
@@ -2024,10 +1815,8 @@ impl SslContextRef {
 
     /// Returns the verify mode that was set on this context from [`SslContextBuilder::set_verify`].
     ///
-    /// This corresponds to [`SSL_CTX_get_verify_mode`].
-    ///
     /// [`SslContextBuilder::set_verify`]: struct.SslContextBuilder.html#method.set_verify
-    /// [`SSL_CTX_get_verify_mode`]: https://www.openssl.org/docs/man1.1.1/man3/SSL_CTX_get_verify_mode.html
+    #[corresponds(SSL_CTX_get_verify_mode)]
     pub fn verify_mode(&self) -> SslVerifyMode {
         let mode = unsafe { ffi::SSL_CTX_get_verify_mode(self.as_ptr()) };
         SslVerifyMode::from_bits(mode).expect("SSL_CTX_get_verify_mode returned invalid mode")
@@ -2086,10 +1875,7 @@ impl ForeignTypeRef for SslCipherRef {
 
 impl SslCipherRef {
     /// Returns the name of the cipher.
-    ///
-    /// This corresponds to [`SSL_CIPHER_get_name`].
-    ///
-    /// [`SSL_CIPHER_get_name`]: https://www.openssl.org/docs/manmaster/man3/SSL_CIPHER_get_name.html
+    #[corresponds(SSL_CIPHER_get_name)]
     pub fn name(&self) -> &'static str {
         unsafe {
             let ptr = ffi::SSL_CIPHER_get_name(self.as_ptr());
@@ -2100,10 +1886,7 @@ impl SslCipherRef {
     /// Returns the RFC-standard name of the cipher, if one exists.
     ///
     /// Requires OpenSSL 1.1.1 or newer.
-    ///
-    /// This corresponds to [`SSL_CIPHER_standard_name`].
-    ///
-    /// [`SSL_CIPHER_standard_name`]: https://www.openssl.org/docs/manmaster/man3/SSL_CIPHER_get_name.html
+    #[corresponds(SSL_CIPHER_standard_name)]
     #[cfg(ossl111)]
     pub fn standard_name(&self) -> Option<&'static str> {
         unsafe {
@@ -2117,10 +1900,7 @@ impl SslCipherRef {
     }
 
     /// Returns the SSL/TLS protocol version that first defined the cipher.
-    ///
-    /// This corresponds to [`SSL_CIPHER_get_version`].
-    ///
-    /// [`SSL_CIPHER_get_version`]: https://www.openssl.org/docs/manmaster/man3/SSL_CIPHER_get_name.html
+    #[corresponds(SSL_CIPHER_get_version)]
     pub fn version(&self) -> &'static str {
         let version = unsafe {
             let ptr = ffi::SSL_CIPHER_get_version(self.as_ptr());
@@ -2131,10 +1911,7 @@ impl SslCipherRef {
     }
 
     /// Returns the number of bits used for the cipher.
-    ///
-    /// This corresponds to [`SSL_CIPHER_get_bits`].
-    ///
-    /// [`SSL_CIPHER_get_bits`]: https://www.openssl.org/docs/manmaster/man3/SSL_CIPHER_get_name.html
+    #[corresponds(SSL_CIPHER_get_bits)]
     #[allow(clippy::useless_conversion)]
     pub fn bits(&self) -> CipherBits {
         unsafe {
@@ -2148,10 +1925,7 @@ impl SslCipherRef {
     }
 
     /// Returns a textual description of the cipher.
-    ///
-    /// This corresponds to [`SSL_CIPHER_description`].
-    ///
-    /// [`SSL_CIPHER_description`]: https://www.openssl.org/docs/manmaster/man3/SSL_CIPHER_get_name.html
+    #[corresponds(SSL_CIPHER_description)]
     pub fn description(&self) -> String {
         unsafe {
             // SSL_CIPHER_description requires a buffer of at least 128 bytes.
@@ -2164,10 +1938,7 @@ impl SslCipherRef {
     /// Returns the handshake digest of the cipher.
     ///
     /// Requires OpenSSL 1.1.1 or newer.
-    ///
-    /// This corresponds to [`SSL_CIPHER_get_handshake_digest`].
-    ///
-    /// [`SSL_CIPHER_get_handshake_digest`]: https://www.openssl.org/docs/man1.1.1/man3/SSL_CIPHER_get_handshake_digest.html
+    #[corresponds(SSL_CIPHER_get_handshake_digest)]
     #[cfg(ossl111)]
     pub fn handshake_digest(&self) -> Option<MessageDigest> {
         unsafe {
@@ -2183,10 +1954,7 @@ impl SslCipherRef {
     /// Returns the NID corresponding to the cipher.
     ///
     /// Requires OpenSSL 1.1.0 or newer.
-    ///
-    /// This corresponds to [`SSL_CIPHER_get_cipher_nid`].
-    ///
-    /// [`SSL_CIPHER_get_cipher_nid`]: https://www.openssl.org/docs/man1.1.0/ssl/SSL_CIPHER_get_cipher_nid.html
+    #[corresponds(SSL_CIPHER_get_cipher_nid)]
     #[cfg(any(ossl110))]
     pub fn cipher_nid(&self) -> Option<Nid> {
         let n = unsafe { ffi::SSL_CIPHER_get_cipher_nid(self.as_ptr()) };
@@ -2222,10 +1990,7 @@ impl Clone for SslSession {
 impl SslSession {
     from_der! {
         /// Deserializes a DER-encoded session structure.
-        ///
-        /// This corresponds to [`d2i_SSL_SESSION`].
-        ///
-        /// [`d2i_SSL_SESSION`]: https://www.openssl.org/docs/man1.0.2/ssl/d2i_SSL_SESSION.html
+        #[corresponds(d2i_SSL_SESSION)]
         from_der,
         SslSession,
         ffi::d2i_SSL_SESSION
@@ -2245,10 +2010,7 @@ impl ToOwned for SslSessionRef {
 
 impl SslSessionRef {
     /// Returns the SSL session ID.
-    ///
-    /// This corresponds to [`SSL_SESSION_get_id`].
-    ///
-    /// [`SSL_SESSION_get_id`]: https://www.openssl.org/docs/manmaster/man3/SSL_SESSION_get_id.html
+    #[corresponds(SSL_SESSION_get_id)]
     pub fn id(&self) -> &[u8] {
         unsafe {
             let mut len = 0;
@@ -2258,10 +2020,7 @@ impl SslSessionRef {
     }
 
     /// Returns the length of the master key.
-    ///
-    /// This corresponds to [`SSL_SESSION_get_master_key`].
-    ///
-    /// [`SSL_SESSION_get_master_key`]: https://www.openssl.org/docs/man1.1.0/ssl/SSL_SESSION_get_master_key.html
+    #[corresponds(SSL_SESSION_get_master_key)]
     pub fn master_key_len(&self) -> usize {
         unsafe { SSL_SESSION_get_master_key(self.as_ptr(), ptr::null_mut(), 0) }
     }
@@ -2269,10 +2028,7 @@ impl SslSessionRef {
     /// Copies the master key into the provided buffer.
     ///
     /// Returns the number of bytes written, or the size of the master key if the buffer is empty.
-    ///
-    /// This corresponds to [`SSL_SESSION_get_master_key`].
-    ///
-    /// [`SSL_SESSION_get_master_key`]: https://www.openssl.org/docs/man1.1.0/ssl/SSL_SESSION_get_master_key.html
+    #[corresponds(SSL_SESSION_get_master_key)]
     pub fn master_key(&self, buf: &mut [u8]) -> usize {
         unsafe { SSL_SESSION_get_master_key(self.as_ptr(), buf.as_mut_ptr(), buf.len()) }
     }
@@ -2280,20 +2036,14 @@ impl SslSessionRef {
     /// Gets the maximum amount of early data that can be sent on this session.
     ///
     /// Requires OpenSSL 1.1.1 or newer.
-    ///
-    /// This corresponds to [`SSL_SESSION_get_max_early_data`].
-    ///
-    /// [`SSL_SESSION_get_max_early_data`]: https://www.openssl.org/docs/man1.1.1/man3/SSL_SESSION_get_max_early_data.html
+    #[corresponds(SSL_SESSION_get_max_early_data)]
     #[cfg(ossl111)]
     pub fn max_early_data(&self) -> u32 {
         unsafe { ffi::SSL_SESSION_get_max_early_data(self.as_ptr()) }
     }
 
     /// Returns the time at which the session was established, in seconds since the Unix epoch.
-    ///
-    /// This corresponds to [`SSL_SESSION_get_time`].
-    ///
-    /// [`SSL_SESSION_get_time`]: https://www.openssl.org/docs/man1.1.1/man3/SSL_SESSION_get_time.html
+    #[corresponds(SSL_SESSION_get_time)]
     #[allow(clippy::useless_conversion)]
     pub fn time(&self) -> i64 {
         unsafe { ffi::SSL_SESSION_get_time(self.as_ptr()).into() }
@@ -2302,10 +2052,7 @@ impl SslSessionRef {
     /// Returns the sessions timeout, in seconds.
     ///
     /// A session older than this time should not be used for session resumption.
-    ///
-    /// This corresponds to [`SSL_SESSION_get_timeout`].
-    ///
-    /// [`SSL_SESSION_get_timeout`]: https://www.openssl.org/docs/man1.1.1/man3/SSL_SESSION_get_time.html
+    #[corresponds(SSL_SESSION_get_timeout)]
     #[allow(clippy::useless_conversion)]
     pub fn timeout(&self) -> i64 {
         unsafe { ffi::SSL_SESSION_get_timeout(self.as_ptr()).into() }
@@ -2314,10 +2061,7 @@ impl SslSessionRef {
     /// Returns the session's TLS protocol version.
     ///
     /// Requires OpenSSL 1.1.0 or newer.
-    ///
-    /// This corresponds to [`SSL_SESSION_get_protocol_version`].
-    ///
-    /// [`SSL_SESSION_get_protocol_version`]: https://www.openssl.org/docs/man1.1.1/man3/SSL_SESSION_get_protocol_version.html
+    #[corresponds(SSL_SESSION_get_protocol_version)]
     #[cfg(ossl110)]
     pub fn protocol_version(&self) -> SslVersion {
         unsafe {
@@ -2328,10 +2072,7 @@ impl SslSessionRef {
 
     to_der! {
         /// Serializes the session into a DER-encoded structure.
-        ///
-        /// This corresponds to [`i2d_SSL_SESSION`].
-        ///
-        /// [`i2d_SSL_SESSION`]: https://www.openssl.org/docs/man1.0.2/ssl/i2d_SSL_SESSION.html
+        #[corresponds(i2d_SSL_SESSION)]
         to_der,
         ffi::i2d_SSL_SESSION
     }
@@ -2366,10 +2107,7 @@ impl Ssl {
     ///
     /// Each invocation of this function is guaranteed to return a distinct index. These can be used
     /// to store data in the context that can be retrieved later by callbacks, for example.
-    ///
-    /// This corresponds to [`SSL_get_ex_new_index`].
-    ///
-    /// [`SSL_get_ex_new_index`]: https://www.openssl.org/docs/man1.0.2/ssl/SSL_get_ex_new_index.html
+    #[corresponds(SSL_get_ex_new_index)]
     pub fn new_ex_index<T>() -> Result<Index<Ssl, T>, ErrorStack>
     where
         T: 'static + Sync + Send,
@@ -2401,7 +2139,7 @@ impl Ssl {
     /// This corresponds to [`SSL_new`].
     ///
     /// [`SSL_new`]: https://www.openssl.org/docs/man1.0.2/ssl/SSL_new.html
-    // FIXME should take &SslContextRef
+    #[corresponds(SSL_new)]
     pub fn new(ctx: &SslContextRef) -> Result<Ssl, ErrorStack> {
         let session_ctx_index = try_get_session_ctx_index()?;
         unsafe {
@@ -2423,6 +2161,7 @@ impl Ssl {
     /// `SslConnector` rather than `Ssl` directly, as it manages that configuration.
     ///
     /// [`SSL_connect`]: https://www.openssl.org/docs/manmaster/man3/SSL_connect.html
+    #[corresponds(SSL_connect)]
     #[allow(deprecated)]
     pub fn connect<S>(self, stream: S) -> Result<SslStream<S>, HandshakeError<S>>
     where
@@ -2441,6 +2180,7 @@ impl Ssl {
     /// `SslAcceptor` rather than `Ssl` directly, as it manages that configuration.
     ///
     /// [`SSL_accept`]: https://www.openssl.org/docs/manmaster/man3/SSL_accept.html
+    #[corresponds(SSL_accept)]
     #[allow(deprecated)]
     pub fn accept<S>(self, stream: S) -> Result<SslStream<S>, HandshakeError<S>>
     where
@@ -2484,38 +2224,27 @@ impl SslRef {
     }
 
     /// Configure as an outgoing stream from a client.
-    ///
-    /// This corresponds to [`SSL_set_connect_state`].
-    ///
-    /// [`SSL_set_connect_state`]: https://www.openssl.org/docs/manmaster/man3/SSL_set_connect_state.html
+    #[corresponds(SSL_set_connect_state)]
     pub fn set_connect_state(&mut self) {
         unsafe { ffi::SSL_set_connect_state(self.as_ptr()) }
     }
 
     /// Configure as an incoming stream to a server.
-    ///
-    /// This corresponds to [`SSL_set_accept_state`].
-    ///
-    /// [`SSL_set_accept_state`]: https://www.openssl.org/docs/manmaster/man3/SSL_set_accept_state.html
+    #[corresponds(SSL_set_accept_state)]
     pub fn set_accept_state(&mut self) {
         unsafe { ffi::SSL_set_accept_state(self.as_ptr()) }
     }
 
     /// Like [`SslContextBuilder::set_verify`].
     ///
-    /// This corresponds to [`SSL_set_verify`].
-    ///
     /// [`SslContextBuilder::set_verify`]: struct.SslContextBuilder.html#method.set_verify
-    /// [`SSL_set_verify`]: https://www.openssl.org/docs/man1.0.2/ssl/SSL_set_verify.html
+    #[corresponds(SSL_set_verify)]
     pub fn set_verify(&mut self, mode: SslVerifyMode) {
         unsafe { ffi::SSL_set_verify(self.as_ptr(), mode.bits as c_int, None) }
     }
 
     /// Returns the verify mode that was set using `set_verify`.
-    ///
-    /// This corresponds to [`SSL_get_verify_mode`].
-    ///
-    /// [`SSL_get_verify_mode`]: https://www.openssl.org/docs/man1.1.1/man3/SSL_get_verify_mode.html
+    #[corresponds(SSL_set_verify_mode)]
     pub fn verify_mode(&self) -> SslVerifyMode {
         let mode = unsafe { ffi::SSL_get_verify_mode(self.as_ptr()) };
         SslVerifyMode::from_bits(mode).expect("SSL_get_verify_mode returned invalid mode")
@@ -2523,10 +2252,8 @@ impl SslRef {
 
     /// Like [`SslContextBuilder::set_verify_callback`].
     ///
-    /// This corresponds to [`SSL_set_verify`].
-    ///
     /// [`SslContextBuilder::set_verify_callback`]: struct.SslContextBuilder.html#method.set_verify_callback
-    /// [`SSL_set_verify`]: https://www.openssl.org/docs/man1.0.2/ssl/SSL_set_verify.html
+    #[corresponds(SSL_set_verify)]
     pub fn set_verify_callback<F>(&mut self, mode: SslVerifyMode, verify: F)
     where
         F: Fn(bool, &mut X509StoreContextRef) -> bool + 'static + Sync + Send,
@@ -2540,20 +2267,16 @@ impl SslRef {
 
     /// Like [`SslContextBuilder::set_tmp_dh`].
     ///
-    /// This corresponds to [`SSL_set_tmp_dh`].
-    ///
     /// [`SslContextBuilder::set_tmp_dh`]: struct.SslContextBuilder.html#method.set_tmp_dh
-    /// [`SSL_set_tmp_dh`]: https://www.openssl.org/docs/man1.0.2/ssl/SSL_set_tmp_dh.html
+    #[corresponds(SSL_set_tmp_dh)]
     pub fn set_tmp_dh(&mut self, dh: &DhRef<Params>) -> Result<(), ErrorStack> {
         unsafe { cvt(ffi::SSL_set_tmp_dh(self.as_ptr(), dh.as_ptr()) as c_int).map(|_| ()) }
     }
 
     /// Like [`SslContextBuilder::set_tmp_dh_callback`].
     ///
-    /// This corresponds to [`SSL_set_tmp_dh_callback`].
-    ///
     /// [`SslContextBuilder::set_tmp_dh_callback`]: struct.SslContextBuilder.html#method.set_tmp_dh_callback
-    /// [`SSL_set_tmp_dh_callback`]: https://www.openssl.org/docs/man1.0.2/ssl/SSL_set_tmp_dh.html
+    #[corresponds(SSL_set_tmp_dh_callback)]
     pub fn set_tmp_dh_callback<F>(&mut self, callback: F)
     where
         F: Fn(&mut SslRef, bool, u32) -> Result<Dh<Params>, ErrorStack> + 'static + Sync + Send,
@@ -2567,9 +2290,8 @@ impl SslRef {
 
     /// Like [`SslContextBuilder::set_tmp_ecdh`].
     ///
-    /// This corresponds to `SSL_set_tmp_ecdh`.
-    ///
     /// [`SslContextBuilder::set_tmp_ecdh`]: struct.SslContextBuilder.html#method.set_tmp_ecdh
+    #[corresponds(SSL_set_tmp_ecdh)]
     pub fn set_tmp_ecdh(&mut self, key: &EcKeyRef<Params>) -> Result<(), ErrorStack> {
         unsafe { cvt(ffi::SSL_set_tmp_ecdh(self.as_ptr(), key.as_ptr()) as c_int).map(|_| ()) }
     }
@@ -2577,10 +2299,7 @@ impl SslRef {
     /// Like [`SslContextBuilder::set_tmp_ecdh_callback`].
     ///
     /// Requires OpenSSL 1.0.1 or 1.0.2.
-    ///
-    /// This corresponds to `SSL_set_tmp_ecdh_callback`.
-    ///
-    /// [`SslContextBuilder::set_tmp_ecdh_callback`]: struct.SslContextBuilder.html#method.set_tmp_ecdh_callback
+    #[corresponds(SSL_set_tmp_ecdh_callback)]
     #[cfg(any(all(ossl101, not(ossl110))))]
     #[deprecated(note = "this function leaks memory and does not exist on newer OpenSSL versions")]
     pub fn set_tmp_ecdh_callback<F>(&mut self, callback: F)
@@ -2598,10 +2317,8 @@ impl SslRef {
     ///
     /// Requires OpenSSL 1.0.2.
     ///
-    /// This corresponds to [`SSL_set_ecdh_auto`].
-    ///
     /// [`SslContextBuilder::set_tmp_ecdh`]: struct.SslContextBuilder.html#method.set_tmp_ecdh
-    /// [`SSL_set_ecdh_auto`]: https://www.openssl.org/docs/man1.0.2/ssl/SSL_set_ecdh_auto.html
+    #[corresponds(SSL_set_ecdh_auto)]
     #[cfg(all(ossl102, not(ossl110)))]
     pub fn set_ecdh_auto(&mut self, onoff: bool) -> Result<(), ErrorStack> {
         unsafe { cvt(ffi::SSL_set_ecdh_auto(self.as_ptr(), onoff as c_int)).map(|_| ()) }
@@ -2611,10 +2328,8 @@ impl SslRef {
     ///
     /// Requires OpenSSL 1.0.2 or LibreSSL 2.6.1 or newer.
     ///
-    /// This corresponds to [`SSL_set_alpn_protos`].
-    ///
     /// [`SslContextBuilder::set_alpn_protos`]: struct.SslContextBuilder.html#method.set_alpn_protos
-    /// [`SSL_set_alpn_protos`]: https://www.openssl.org/docs/man1.1.0/ssl/SSL_set_alpn_protos.html
+    #[corresponds(SSL_set_alpn_protos)]
     #[cfg(any(ossl102, libressl261))]
     pub fn set_alpn_protos(&mut self, protocols: &[u8]) -> Result<(), ErrorStack> {
         unsafe {
@@ -2634,10 +2349,7 @@ impl SslRef {
     }
 
     /// Returns the current cipher if the session is active.
-    ///
-    /// This corresponds to [`SSL_get_current_cipher`].
-    ///
-    /// [`SSL_get_current_cipher`]: https://www.openssl.org/docs/man1.1.0/ssl/SSL_get_current_cipher.html
+    #[corresponds(SSL_get_current_cipher)]
     pub fn current_cipher(&self) -> Option<&SslCipherRef> {
         unsafe {
             let ptr = ffi::SSL_get_current_cipher(self.as_ptr());
@@ -2647,10 +2359,7 @@ impl SslRef {
     }
 
     /// Returns a short string describing the state of the session.
-    ///
-    /// This corresponds to [`SSL_state_string`].
-    ///
-    /// [`SSL_state_string`]: https://www.openssl.org/docs/man1.0.2/ssl/SSL_state_string.html
+    #[corresponds(SSL_state_string)]
     pub fn state_string(&self) -> &'static str {
         let state = unsafe {
             let ptr = ffi::SSL_state_string(self.as_ptr());
@@ -2661,10 +2370,7 @@ impl SslRef {
     }
 
     /// Returns a longer string describing the state of the session.
-    ///
-    /// This corresponds to [`SSL_state_string_long`].
-    ///
-    /// [`SSL_state_string_long`]: https://www.openssl.org/docs/man1.1.0/ssl/SSL_state_string_long.html
+    #[corresponds(SSL_state_string_long)]
     pub fn state_string_long(&self) -> &'static str {
         let state = unsafe {
             let ptr = ffi::SSL_state_string_long(self.as_ptr());
@@ -2677,10 +2383,7 @@ impl SslRef {
     /// Sets the host name to be sent to the server for Server Name Indication (SNI).
     ///
     /// It has no effect for a server-side connection.
-    ///
-    /// This corresponds to [`SSL_set_tlsext_host_name`].
-    ///
-    /// [`SSL_set_tlsext_host_name`]: https://www.openssl.org/docs/manmaster/man3/SSL_get_servername_type.html
+    #[corresponds(SSL_set_tlsext_host_name)]
     pub fn set_hostname(&mut self, hostname: &str) -> Result<(), ErrorStack> {
         let cstr = CString::new(hostname).unwrap();
         unsafe {
@@ -2690,10 +2393,7 @@ impl SslRef {
     }
 
     /// Returns the peer's certificate, if present.
-    ///
-    /// This corresponds to [`SSL_get_peer_certificate`].
-    ///
-    /// [`SSL_get_peer_certificate`]: https://www.openssl.org/docs/man1.1.0/ssl/SSL_get_peer_certificate.html
+    #[corresponds(SSL_get_peer_certificate)]
     pub fn peer_certificate(&self) -> Option<X509> {
         unsafe {
             let ptr = SSL_get1_peer_certificate(self.as_ptr());
@@ -2705,10 +2405,7 @@ impl SslRef {
     ///
     /// On the client side, the chain includes the leaf certificate, but on the server side it does
     /// not. Fun!
-    ///
-    /// This corresponds to [`SSL_get_peer_cert_chain`].
-    ///
-    /// [`SSL_get_peer_cert_chain`]: https://www.openssl.org/docs/man1.1.0/ssl/SSL_get_peer_cert_chain.html
+    #[corresponds(SSL_get_peer_cert_chain)]
     pub fn peer_cert_chain(&self) -> Option<&StackRef<X509>> {
         unsafe {
             let ptr = ffi::SSL_get_peer_cert_chain(self.as_ptr());
@@ -2723,11 +2420,9 @@ impl SslRef {
     ///
     /// Requires OpenSSL 1.1.0 or newer.
     ///
-    /// This corresponds to [`SSL_get0_verified_chain`].
-    ///
     /// [`verify_result`]: #method.verify_result
     /// [`X509VerifyResult::OK`]: ../x509/struct.X509VerifyResult.html#associatedconstant.OK
-    /// [`SSL_get0_verified_chain`]: https://www.openssl.org/docs/man1.1.0/ssl/SSL_get0_verified_chain.html
+    #[corresponds(SSL_get0_verified_chain)]
     #[cfg(ossl110)]
     pub fn verified_chain(&self) -> Option<&StackRef<X509>> {
         unsafe {
@@ -2737,10 +2432,7 @@ impl SslRef {
     }
 
     /// Like [`SslContext::certificate`].
-    ///
-    /// This corresponds to `SSL_get_certificate`.
-    ///
-    /// [`SslContext::certificate`]: struct.SslContext.html#method.certificate
+    #[corresponds(SSL_get_certificate)]
     pub fn certificate(&self) -> Option<&X509Ref> {
         unsafe {
             let ptr = ffi::SSL_get_certificate(self.as_ptr());
@@ -2753,6 +2445,7 @@ impl SslRef {
     /// This corresponds to `SSL_get_privatekey`.
     ///
     /// [`SslContext::private_key`]: struct.SslContext.html#method.private_key
+    #[corresponds(SSL_get_certificate)]
     pub fn private_key(&self) -> Option<&PKeyRef<Private>> {
         unsafe {
             let ptr = ffi::SSL_get_privatekey(self.as_ptr());
@@ -2766,10 +2459,7 @@ impl SslRef {
     }
 
     /// Returns the protocol version of the session.
-    ///
-    /// This corresponds to [`SSL_version`].
-    ///
-    /// [`SSL_version`]: https://www.openssl.org/docs/manmaster/man3/SSL_version.html
+    #[corresponds(SSL_version)]
     pub fn version2(&self) -> Option<SslVersion> {
         unsafe {
             let r = ffi::SSL_version(self.as_ptr());
@@ -2782,10 +2472,7 @@ impl SslRef {
     }
 
     /// Returns a string describing the protocol version of the session.
-    ///
-    /// This corresponds to [`SSL_get_version`].
-    ///
-    /// [`SSL_get_version`]: https://www.openssl.org/docs/man1.1.0/ssl/SSL_get_version.html
+    #[corresponds(SSL_get_version)]
     pub fn version_str(&self) -> &'static str {
         let version = unsafe {
             let ptr = ffi::SSL_get_version(self.as_ptr());
@@ -2801,10 +2488,7 @@ impl SslRef {
     /// to interpret it.
     ///
     /// Requires OpenSSL 1.0.2 or LibreSSL 2.6.1 or newer.
-    ///
-    /// This corresponds to [`SSL_get0_alpn_selected`].
-    ///
-    /// [`SSL_get0_alpn_selected`]: https://www.openssl.org/docs/manmaster/man3/SSL_get0_next_proto_negotiated.html
+    #[corresponds(SSL_get0_alpn_selected)]
     #[cfg(any(ossl102, libressl261))]
     pub fn selected_alpn_protocol(&self) -> Option<&[u8]> {
         unsafe {
@@ -2827,6 +2511,7 @@ impl SslRef {
     /// This corresponds to [`SSL_set_tlsext_use_srtp`].
     ///
     /// [`SSL_set_tlsext_use_srtp`]: https://www.openssl.org/docs/man1.1.1/man3/SSL_CTX_set_tlsext_use_srtp.html
+    #[corresponds(SSL_set_tlsext_use_srtp)]
     pub fn set_tlsext_use_srtp(&mut self, protocols: &str) -> Result<(), ErrorStack> {
         unsafe {
             let cstr = CString::new(protocols).unwrap();
@@ -2848,6 +2533,7 @@ impl SslRef {
     /// This corresponds to [`SSL_get_srtp_profiles`].
     ///
     /// [`SSL_get_srtp_profiles`]: https://www.openssl.org/docs/man1.1.1/man3/SSL_CTX_set_tlsext_use_srtp.html
+    #[corresponds(SSL_get_srtp_profiles)]
     pub fn srtp_profiles(&self) -> Option<&StackRef<SrtpProtectionProfile>> {
         unsafe {
             let chain = ffi::SSL_get_srtp_profiles(self.as_ptr());
@@ -2859,10 +2545,7 @@ impl SslRef {
     /// Gets the SRTP profile selected by handshake.
     ///
     /// DTLS extension "use_srtp" as defined in RFC5764 has to be enabled.
-    ///
-    /// This corresponds to [`SSL_get_selected_srtp_profile`].
-    ///
-    /// [`SSL_get_selected_srtp_profile`]: https://www.openssl.org/docs/man1.1.1/man3/SSL_CTX_set_tlsext_use_srtp.html
+    #[corresponds(SSL_get_selected_srtp_profile)]
     pub fn selected_srtp_profile(&self) -> Option<&SrtpProtectionProfileRef> {
         unsafe {
             let profile = ffi::SSL_get_selected_srtp_profile(self.as_ptr());
@@ -2875,10 +2558,7 @@ impl SslRef {
     ///
     /// If this is greater than 0, the next call to `read` will not call down to the underlying
     /// stream.
-    ///
-    /// This corresponds to [`SSL_pending`].
-    ///
-    /// [`SSL_pending`]: https://www.openssl.org/docs/man1.1.0/ssl/SSL_pending.html
+    #[corresponds(SSL_pending)]
     pub fn pending(&self) -> usize {
         unsafe { ffi::SSL_pending(self.as_ptr()) as usize }
     }
@@ -2887,8 +2567,6 @@ impl SslRef {
     ///
     /// It is only useful on the server side.
     ///
-    /// This corresponds to [`SSL_get_servername`].
-    ///
     /// # Note
     ///
     /// While the SNI specification requires that servernames be valid domain names (and therefore
@@ -2897,6 +2575,7 @@ impl SslRef {
     /// the raw bytes and does not have this restriction.
     ///
     /// [`SSL_get_servername`]: https://www.openssl.org/docs/manmaster/man3/SSL_get_servername.html
+    #[corresponds(SSL_get_servername)]
     // FIXME maybe rethink in 0.11?
     pub fn servername(&self, type_: NameType) -> Option<&str> {
         self.servername_raw(type_)
@@ -2907,13 +2586,10 @@ impl SslRef {
     ///
     /// It is only useful on the server side.
     ///
-    /// This corresponds to [`SSL_get_servername`].
-    ///
     /// # Note
     ///
     /// Unlike `servername`, this method does not require the name be valid UTF-8.
-    ///
-    /// [`SSL_get_servername`]: https://www.openssl.org/docs/manmaster/man3/SSL_get_servername.html
+    #[corresponds(SSL_get_servername)]
     pub fn servername_raw(&self, type_: NameType) -> Option<&[u8]> {
         unsafe {
             let name = ffi::SSL_get_servername(self.as_ptr(), type_.0);
@@ -2928,17 +2604,13 @@ impl SslRef {
     /// Changes the context corresponding to the current connection.
     ///
     /// It is most commonly used in the Server Name Indication (SNI) callback.
-    ///
-    /// This corresponds to `SSL_set_SSL_CTX`.
+    #[corresponds(SSL_set_SSL_CTX)]
     pub fn set_ssl_context(&mut self, ctx: &SslContextRef) -> Result<(), ErrorStack> {
         unsafe { cvt_p(ffi::SSL_set_SSL_CTX(self.as_ptr(), ctx.as_ptr())).map(|_| ()) }
     }
 
     /// Returns the context corresponding to the current connection.
-    ///
-    /// This corresponds to [`SSL_get_SSL_CTX`].
-    ///
-    /// [`SSL_get_SSL_CTX`]: https://www.openssl.org/docs/man1.0.2/ssl/SSL_get_SSL_CTX.html
+    #[corresponds(SSL_get_SSL_CTX)]
     pub fn ssl_context(&self) -> &SslContextRef {
         unsafe {
             let ssl_ctx = ffi::SSL_get_SSL_CTX(self.as_ptr());
@@ -2949,29 +2621,20 @@ impl SslRef {
     /// Returns a mutable reference to the X509 verification configuration.
     ///
     /// Requires OpenSSL 1.0.2 or newer.
-    ///
-    /// This corresponds to [`SSL_get0_param`].
-    ///
-    /// [`SSL_get0_param`]: https://www.openssl.org/docs/man1.0.2/ssl/SSL_get0_param.html
+    #[corresponds(SSL_get0_param)]
     #[cfg(any(ossl102, libressl261))]
     pub fn param_mut(&mut self) -> &mut X509VerifyParamRef {
         unsafe { X509VerifyParamRef::from_ptr_mut(ffi::SSL_get0_param(self.as_ptr())) }
     }
 
     /// Returns the certificate verification result.
-    ///
-    /// This corresponds to [`SSL_get_verify_result`].
-    ///
-    /// [`SSL_get_verify_result`]: https://www.openssl.org/docs/man1.0.2/ssl/SSL_get_verify_result.html
+    #[corresponds(SSL_get_verify_result)]
     pub fn verify_result(&self) -> X509VerifyResult {
         unsafe { X509VerifyResult::from_raw(ffi::SSL_get_verify_result(self.as_ptr()) as c_int) }
     }
 
     /// Returns a shared reference to the SSL session.
-    ///
-    /// This corresponds to [`SSL_get_session`].
-    ///
-    /// [`SSL_get_session`]: https://www.openssl.org/docs/man1.1.0/ssl/SSL_get_session.html
+    #[corresponds(SSL_get_session)]
     pub fn session(&self) -> Option<&SslSessionRef> {
         unsafe {
             let p = ffi::SSL_get_session(self.as_ptr());
@@ -2985,10 +2648,7 @@ impl SslRef {
     /// value.
     ///
     /// Requires OpenSSL 1.1.0 or newer.
-    ///
-    /// This corresponds to [`SSL_get_client_random`].
-    ///
-    /// [`SSL_get_client_random`]: https://www.openssl.org/docs/man1.1.0/ssl/SSL_get_client_random.html
+    #[corresponds(SSL_get_client_random)]
     #[cfg(any(ossl110))]
     pub fn client_random(&self, buf: &mut [u8]) -> usize {
         unsafe {
@@ -3002,10 +2662,7 @@ impl SslRef {
     /// value.
     ///
     /// Requires OpenSSL 1.1.0 or newer.
-    ///
-    /// This corresponds to [`SSL_get_server_random`].
-    ///
-    /// [`SSL_get_server_random`]: https://www.openssl.org/docs/man1.1.0/ssl/SSL_get_client_random.html
+    #[corresponds(SSL_get_server_random)]
     #[cfg(any(ossl110))]
     pub fn server_random(&self, buf: &mut [u8]) -> usize {
         unsafe {
@@ -3014,10 +2671,7 @@ impl SslRef {
     }
 
     /// Derives keying material for application use in accordance to RFC 5705.
-    ///
-    /// This corresponds to [`SSL_export_keying_material`].
-    ///
-    /// [`SSL_export_keying_material`]: https://www.openssl.org/docs/manmaster/man3/SSL_export_keying_material.html
+    #[corresponds(SSL_export_keying_material)]
     pub fn export_keying_material(
         &self,
         out: &mut [u8],
@@ -3049,10 +2703,7 @@ impl SslRef {
     /// context. Therefore, unlike `export_keying_material`, `context` must always be supplied.
     ///
     /// Requires OpenSSL 1.1.1 or newer.
-    ///
-    /// This corresponds to [`SSL_export_keying_material_early`].
-    ///
-    /// [`SSL_export_keying_material_early`]: https://www.openssl.org/docs/manmaster/man3/SSL_export_keying_material_early.html
+    #[corresponds(SSL_export_keying_material_early)]
     #[cfg(ossl111)]
     pub fn export_keying_material_early(
         &self,
@@ -3080,32 +2731,23 @@ impl SslRef {
     /// session. If the server is not willing to reuse the session, a new one will be transparently
     /// negotiated.
     ///
-    /// This corresponds to [`SSL_set_session`].
-    ///
     /// # Safety
     ///
     /// The caller of this method is responsible for ensuring that the session is associated
     /// with the same `SslContext` as this `Ssl`.
-    ///
-    /// [`SSL_set_session`]: https://www.openssl.org/docs/manmaster/man3/SSL_set_session.html
+    #[corresponds(SSL_set_session)]
     pub unsafe fn set_session(&mut self, session: &SslSessionRef) -> Result<(), ErrorStack> {
         cvt(ffi::SSL_set_session(self.as_ptr(), session.as_ptr())).map(|_| ())
     }
 
     /// Determines if the session provided to `set_session` was successfully reused.
-    ///
-    /// This corresponds to [`SSL_session_reused`].
-    ///
-    /// [`SSL_session_reused`]: https://www.openssl.org/docs/man1.1.0/ssl/SSL_session_reused.html
+    #[corresponds(SSL_session_reused)]
     pub fn session_reused(&self) -> bool {
         unsafe { ffi::SSL_session_reused(self.as_ptr()) != 0 }
     }
 
     /// Sets the status response a client wishes the server to reply with.
-    ///
-    /// This corresponds to [`SSL_set_tlsext_status_type`].
-    ///
-    /// [`SSL_set_tlsext_status_type`]: https://www.openssl.org/docs/man1.0.2/ssl/SSL_set_tlsext_status_type.html
+    #[corresponds(SSL_set_tlsext_status_type)]
     pub fn set_status_type(&mut self, type_: StatusType) -> Result<(), ErrorStack> {
         unsafe {
             cvt(ffi::SSL_set_tlsext_status_type(self.as_ptr(), type_.as_raw()) as c_int).map(|_| ())
@@ -3115,10 +2757,7 @@ impl SslRef {
     /// Determines if current session used Extended Master Secret
     ///
     /// Returns `None` if the handshake is still in-progress.
-    ///
-    /// This corresponds to [`SSL_get_extms_support`].
-    ///
-    /// [`SSL_get_extms_support`]: https://www.openssl.org/docs/man1.1.1/man3/SSL_get_extms_support.html
+    #[corresponds(SSL_get_extms_support)]
     #[cfg(ossl110)]
     pub fn extms_support(&self) -> Option<bool> {
         unsafe {
@@ -3130,10 +2769,7 @@ impl SslRef {
     }
 
     /// Returns the server's OCSP response, if present.
-    ///
-    /// This corresponds to [`SSL_get_tlsext_status_ocsp_resp`].
-    ///
-    /// [`SSL_get_tlsext_status_ocsp_resp`]: https://www.openssl.org/docs/man1.0.2/ssl/SSL_set_tlsext_status_type.html
+    #[corresponds(SSL_get_tlsext_status_ocsp_resp)]
     pub fn ocsp_status(&self) -> Option<&[u8]> {
         unsafe {
             let mut p = ptr::null_mut();
@@ -3148,10 +2784,7 @@ impl SslRef {
     }
 
     /// Sets the OCSP response to be returned to the client.
-    ///
-    /// This corresponds to [`SSL_set_tlsext_status_ocsp_resp`].
-    ///
-    /// [`SSL_set_tlsext_status_ocsp_resp`]: https://www.openssl.org/docs/man1.0.2/ssl/SSL_set_tlsext_status_type.html
+    #[corresponds(SSL_set_tlsext_status_oscp_resp)]
     pub fn set_ocsp_status(&mut self, response: &[u8]) -> Result<(), ErrorStack> {
         unsafe {
             assert!(response.len() <= c_int::max_value() as usize);
@@ -3167,10 +2800,7 @@ impl SslRef {
     }
 
     /// Determines if this `Ssl` is configured for server-side or client-side use.
-    ///
-    /// This corresponds to [`SSL_is_server`].
-    ///
-    /// [`SSL_is_server`]: https://www.openssl.org/docs/manmaster/man3/SSL_is_server.html
+    #[corresponds(SSL_is_server)]
     pub fn is_server(&self) -> bool {
         unsafe { SSL_is_server(self.as_ptr()) != 0 }
     }
@@ -3179,10 +2809,7 @@ impl SslRef {
     ///
     /// This can be used to provide data to callbacks registered with the context. Use the
     /// `Ssl::new_ex_index` method to create an `Index`.
-    ///
-    /// This corresponds to [`SSL_set_ex_data`].
-    ///
-    /// [`SSL_set_ex_data`]: https://www.openssl.org/docs/manmaster/man3/SSL_set_ex_data.html
+    #[corresponds(SSL_set_ex_data)]
     pub fn set_ex_data<T>(&mut self, index: Index<Ssl, T>, data: T) {
         unsafe {
             let data = Box::new(data);
@@ -3195,10 +2822,7 @@ impl SslRef {
     }
 
     /// Returns a reference to the extra data at the specified index.
-    ///
-    /// This corresponds to [`SSL_get_ex_data`].
-    ///
-    /// [`SSL_get_ex_data`]: https://www.openssl.org/docs/manmaster/man3/SSL_set_ex_data.html
+    #[corresponds(SSL_get_ex_data)]
     pub fn ex_data<T>(&self, index: Index<Ssl, T>) -> Option<&T> {
         unsafe {
             let data = ffi::SSL_get_ex_data(self.as_ptr(), index.as_raw());
@@ -3211,10 +2835,7 @@ impl SslRef {
     }
 
     /// Returns a mutable reference to the extra data at the specified index.
-    ///
-    /// This corresponds to [`SSL_get_ex_data`].
-    ///
-    /// [`SSL_get_ex_data`]: https://www.openssl.org/docs/manmaster/man3/SSL_set_ex_data.html
+    #[corresponds(SSL_get_ex_data)]
     pub fn ex_data_mut<T>(&mut self, index: Index<Ssl, T>) -> Option<&mut T> {
         unsafe {
             let data = ffi::SSL_get_ex_data(self.as_ptr(), index.as_raw());
@@ -3229,10 +2850,7 @@ impl SslRef {
     /// Sets the maximum amount of early data that will be accepted on this connection.
     ///
     /// Requires OpenSSL 1.1.1 or newer.
-    ///
-    /// This corresponds to [`SSL_set_max_early_data`].
-    ///
-    /// [`SSL_set_max_early_data`]: https://www.openssl.org/docs/man1.1.1/man3/SSL_set_max_early_data.html
+    #[corresponds(SSL_set_max_early_data)]
     #[cfg(ossl111)]
     pub fn set_max_early_data(&mut self, bytes: u32) -> Result<(), ErrorStack> {
         if unsafe { ffi::SSL_set_max_early_data(self.as_ptr(), bytes) } == 1 {
@@ -3245,10 +2863,7 @@ impl SslRef {
     /// Gets the maximum amount of early data that can be sent on this connection.
     ///
     /// Requires OpenSSL 1.1.1 or newer.
-    ///
-    /// This corresponds to [`SSL_get_max_early_data`].
-    ///
-    /// [`SSL_get_max_early_data`]: https://www.openssl.org/docs/man1.1.1/man3/SSL_get_max_early_data.html
+    #[corresponds(SSL_get_max_early_data)]
     #[cfg(ossl111)]
     pub fn max_early_data(&self) -> u32 {
         unsafe { ffi::SSL_get_max_early_data(self.as_ptr()) }
@@ -3258,8 +2873,7 @@ impl SslRef {
     ///
     /// The total size of the message is returned, so this can be used to determine the size of the
     /// buffer required.
-    ///
-    /// This corresponds to `SSL_get_finished`.
+    #[corresponds(SSL_get_finished)]
     pub fn finished(&self, buf: &mut [u8]) -> usize {
         unsafe { ffi::SSL_get_finished(self.as_ptr(), buf.as_mut_ptr() as *mut c_void, buf.len()) }
     }
@@ -3269,8 +2883,7 @@ impl SslRef {
     ///
     /// The total size of the message is returned, so this can be used to determine the size of the
     /// buffer required.
-    ///
-    /// This corresponds to `SSL_get_peer_finished`.
+    #[corresponds(SSL_get_peer_finished)]
     pub fn peer_finished(&self, buf: &mut [u8]) -> usize {
         unsafe {
             ffi::SSL_get_peer_finished(self.as_ptr(), buf.as_mut_ptr() as *mut c_void, buf.len())
@@ -3278,10 +2891,7 @@ impl SslRef {
     }
 
     /// Determines if the initial handshake has been completed.
-    ///
-    /// This corresponds to [`SSL_is_init_finished`].
-    ///
-    /// [`SSL_is_init_finished`]: https://www.openssl.org/docs/man1.1.1/man3/SSL_is_init_finished.html
+    #[corresponds(SSL_is_init_finished)]
     #[cfg(ossl110)]
     pub fn is_init_finished(&self) -> bool {
         unsafe { ffi::SSL_is_init_finished(self.as_ptr()) != 0 }
@@ -3292,10 +2902,7 @@ impl SslRef {
     /// This can only be used inside of the client hello callback. Otherwise, `false` is returned.
     ///
     /// Requires OpenSSL 1.1.1 or newer.
-    ///
-    /// This corresponds to [`SSL_client_hello_isv2`].
-    ///
-    /// [`SSL_client_hello_isv2`]: https://www.openssl.org/docs/man1.1.1/man3/SSL_CTX_set_client_hello_cb.html
+    #[corresponds(SSL_client_hello_isv2)]
     #[cfg(ossl111)]
     pub fn client_hello_isv2(&self) -> bool {
         unsafe { ffi::SSL_client_hello_isv2(self.as_ptr()) != 0 }
@@ -3306,10 +2913,7 @@ impl SslRef {
     /// This can only be used inside of the client hello callback. Otherwise, `None` is returned.
     ///
     /// Requires OpenSSL 1.1.1 or newer.
-    ///
-    /// This corresponds to [`SSL_client_hello_get0_legacy_version`].
-    ///
-    /// [`SSL_client_hello_get0_legacy_version`]: https://www.openssl.org/docs/man1.1.1/man3/SSL_CTX_set_client_hello_cb.html
+    #[corresponds(SSL_client_hello_get0_legacy_version)]
     #[cfg(ossl111)]
     pub fn client_hello_legacy_version(&self) -> Option<SslVersion> {
         unsafe {
@@ -3327,10 +2931,7 @@ impl SslRef {
     /// This can only be used inside of the client hello callback. Otherwise, `None` is returned.
     ///
     /// Requires OpenSSL 1.1.1 or newer.
-    ///
-    /// This corresponds to [`SSL_client_hello_get0_random`].
-    ///
-    /// [`SSL_client_hello_get0_random`]: https://www.openssl.org/docs/man1.1.1/man3/SSL_CTX_set_client_hello_cb.html
+    #[corresponds(SSL_client_hello_get0_random)]
     #[cfg(ossl111)]
     pub fn client_hello_random(&self) -> Option<&[u8]> {
         unsafe {
@@ -3349,10 +2950,7 @@ impl SslRef {
     /// This can only be used inside of the client hello callback. Otherwise, `None` is returned.
     ///
     /// Requires OpenSSL 1.1.1 or newer.
-    ///
-    /// This corresponds to [`SSL_client_hello_get0_session_id`].
-    ///
-    /// [`SSL_client_hello_get0_session_id`]: https://www.openssl.org/docs/man1.1.1/man3/SSL_CTX_set_client_hello_cb.html
+    #[corresponds(SSL_client_hello_get0_session_id)]
     #[cfg(ossl111)]
     pub fn client_hello_session_id(&self) -> Option<&[u8]> {
         unsafe {
@@ -3371,10 +2969,7 @@ impl SslRef {
     /// This can only be used inside of the client hello callback. Otherwise, `None` is returned.
     ///
     /// Requires OpenSSL 1.1.1 or newer.
-    ///
-    /// This corresponds to [`SSL_client_hello_get0_ciphers`].
-    ///
-    /// [`SSL_client_hello_get0_ciphers`]: https://www.openssl.org/docs/man1.1.1/man3/SSL_CTX_set_client_hello_cb.html
+    #[corresponds(SSL_client_hello_get0_ciphers)]
     #[cfg(ossl111)]
     pub fn client_hello_ciphers(&self) -> Option<&[u8]> {
         unsafe {
@@ -3393,10 +2988,7 @@ impl SslRef {
     /// This can only be used inside of the client hello callback. Otherwise, `None` is returned.
     ///
     /// Requires OpenSSL 1.1.1 or newer.
-    ///
-    /// This corresponds to [`SSL_client_hello_get0_compression_methods`].
-    ///
-    /// [`SSL_client_hello_get0_compression_methods`]: https://www.openssl.org/docs/man1.1.1/man3/SSL_CTX_set_client_hello_cb.html
+    #[corresponds(SSL_client_hello_get0_compression_methods)]
     #[cfg(ossl111)]
     pub fn client_hello_compression_methods(&self) -> Option<&[u8]> {
         unsafe {
@@ -3411,8 +3003,7 @@ impl SslRef {
     }
 
     /// Sets the MTU used for DTLS connections.
-    ///
-    /// This corresponds to `SSL_set_mtu`.
+    #[corresponds(SSL_set_mtu)]
     pub fn set_mtu(&mut self, mtu: u32) -> Result<(), ErrorStack> {
         unsafe { cvt(ffi::SSL_set_mtu(self.as_ptr(), mtu as c_long) as c_int).map(|_| ()) }
     }
@@ -3514,10 +3105,7 @@ impl<S: Read + Write> SslStream<S> {
     /// [`SslRef::set_accept_state`], the handshake can be performed automatically during the first
     /// call to read or write. Otherwise the `connect` and `accept` methods can be used to
     /// explicitly perform the handshake.
-    ///
-    /// This corresponds to [`SSL_set_bio`].
-    ///
-    /// [`SSL_set_bio`]: https://www.openssl.org/docs/manmaster/man3/SSL_set_bio.html
+    #[corresponds(SSL_set_bio)]
     pub fn new(ssl: Ssl, stream: S) -> Result<Self, ErrorStack> {
         let (bio, method) = bio::new(stream)?;
         unsafe {
@@ -3555,10 +3143,7 @@ impl<S: Read + Write> SslStream<S> {
     /// Returns `Ok(0)` if all early data has been read.
     ///
     /// Requires OpenSSL 1.1.1 or newer.
-    ///
-    /// This corresponds to [`SSL_read_early_data`].
-    ///
-    /// [`SSL_read_early_data`]: https://www.openssl.org/docs/manmaster/man3/SSL_read_early_data.html
+    #[corresponds(SSL_read_early_data)]
     #[cfg(ossl111)]
     pub fn read_early_data(&mut self, buf: &mut [u8]) -> Result<usize, Error> {
         let mut read = 0;
@@ -3584,10 +3169,7 @@ impl<S: Read + Write> SslStream<S> {
     /// [`SslRef::set_connect_state`] first.
     ///
     /// Requires OpenSSL 1.1.1 or newer.
-    ///
-    /// This corresponds to [`SSL_write_early_data`].
-    ///
-    /// [`SSL_write_early_data`]: https://www.openssl.org/docs/manmaster/man3/SSL_write_early_data.html
+    #[corresponds(SSL_write_early_data)]
     #[cfg(ossl111)]
     pub fn write_early_data(&mut self, buf: &[u8]) -> Result<usize, Error> {
         let mut written = 0;
@@ -3608,14 +3190,11 @@ impl<S: Read + Write> SslStream<S> {
 
     /// Initiates a client-side TLS handshake.
     ///
-    /// This corresponds to [`SSL_connect`].
-    ///
     /// # Warning
     ///
     /// OpenSSL's default configuration is insecure. It is highly recommended to use
     /// `SslConnector` rather than `Ssl` directly, as it manages that configuration.
-    ///
-    /// [`SSL_connect`]: https://www.openssl.org/docs/manmaster/man3/SSL_connect.html
+    #[corresponds(SSL_connect)]
     pub fn connect(&mut self) -> Result<(), Error> {
         let ret = unsafe { ffi::SSL_connect(self.ssl.as_ptr()) };
         if ret > 0 {
@@ -3627,14 +3206,11 @@ impl<S: Read + Write> SslStream<S> {
 
     /// Initiates a server-side TLS handshake.
     ///
-    /// This corresponds to [`SSL_accept`].
-    ///
     /// # Warning
     ///
     /// OpenSSL's default configuration is insecure. It is highly recommended to use
     /// `SslAcceptor` rather than `Ssl` directly, as it manages that configuration.
-    ///
-    /// [`SSL_accept`]: https://www.openssl.org/docs/manmaster/man3/SSL_accept.html
+    #[corresponds(SSL_accept)]
     pub fn accept(&mut self) -> Result<(), Error> {
         let ret = unsafe { ffi::SSL_accept(self.ssl.as_ptr()) };
         if ret > 0 {
@@ -3647,10 +3223,7 @@ impl<S: Read + Write> SslStream<S> {
     /// Initiates the handshake.
     ///
     /// This will fail if `set_accept_state` or `set_connect_state` was not called first.
-    ///
-    /// This corresponds to [`SSL_do_handshake`].
-    ///
-    /// [`SSL_do_handshake`]: https://www.openssl.org/docs/manmaster/man3/SSL_do_handshake.html
+    #[corresponds(SSL_do_handshake)]
     pub fn do_handshake(&mut self) -> Result<(), Error> {
         let ret = unsafe { ffi::SSL_do_handshake(self.ssl.as_ptr()) };
         if ret > 0 {
@@ -3670,10 +3243,7 @@ impl<S: Read + Write> SslStream<S> {
     /// `accept`. If a HelloRetryRequest containing a fresh cookie was
     /// transmitted, `Ok(false)` is returned instead. If the handshake cannot
     /// proceed at all, `Err` is returned.
-    ///
-    /// This corresponds to [`SSL_stateless`]
-    ///
-    /// [`SSL_stateless`]: https://www.openssl.org/docs/manmaster/man3/SSL_stateless.html
+    #[corresponds(SSL_stateless)]
     #[cfg(ossl111)]
     pub fn stateless(&mut self) -> Result<bool, ErrorStack> {
         match unsafe { ffi::SSL_stateless(self.ssl.as_ptr()) } {
@@ -3688,10 +3258,7 @@ impl<S: Read + Write> SslStream<S> {
     ///
     /// It is particularly useful with a nonblocking socket, where the error value will identify if
     /// OpenSSL is waiting on read or write readiness.
-    ///
-    /// This corresponds to [`SSL_read`].
-    ///
-    /// [`SSL_read`]: https://www.openssl.org/docs/manmaster/man3/SSL_read.html
+    #[corresponds(SSL_read)]
     pub fn ssl_read(&mut self, buf: &mut [u8]) -> Result<usize, Error> {
         // The interpretation of the return code here is a little odd with a
         // zero-length write. OpenSSL will likely correctly report back to us
@@ -3714,10 +3281,7 @@ impl<S: Read + Write> SslStream<S> {
     ///
     /// It is particularly useful with a nonblocking socket, where the error value will identify if
     /// OpenSSL is waiting on read or write readiness.
-    ///
-    /// This corresponds to [`SSL_write`].
-    ///
-    /// [`SSL_write`]: https://www.openssl.org/docs/manmaster/man3/SSL_write.html
+    #[corresponds(SSL_write)]
     pub fn ssl_write(&mut self, buf: &[u8]) -> Result<usize, Error> {
         // See above for why we short-circuit on zero-length buffers
         if buf.is_empty() {
@@ -3733,10 +3297,7 @@ impl<S: Read + Write> SslStream<S> {
     }
 
     /// Reads data from the stream, without removing it from the queue.
-    ///
-    /// This corresponds to [`SSL_peek`].
-    ///
-    /// [`SSL_peek`]: https://www.openssl.org/docs/manmaster/man3/SSL_peek.html
+    #[corresponds(SSL_peek)]
     pub fn ssl_peek(&mut self, buf: &mut [u8]) -> Result<usize, Error> {
         // See above for why we short-circuit on zero-length buffers
         if buf.is_empty() {
@@ -3760,10 +3321,7 @@ impl<S: Read + Write> SslStream<S> {
     /// While the connection may be closed after the first step, it is recommended to fully shut the
     /// session down. In particular, it must be fully shut down if the connection is to be used for
     /// further communication in the future.
-    ///
-    /// This corresponds to [`SSL_shutdown`].
-    ///
-    /// [`SSL_shutdown`]: https://www.openssl.org/docs/man1.0.2/ssl/SSL_shutdown.html
+    #[corresponds(SSL_shutdown)]
     pub fn shutdown(&mut self) -> Result<ShutdownResult, Error> {
         match unsafe { ffi::SSL_shutdown(self.ssl.as_ptr()) } {
             0 => Ok(ShutdownResult::Sent),
@@ -3773,10 +3331,7 @@ impl<S: Read + Write> SslStream<S> {
     }
 
     /// Returns the session's shutdown state.
-    ///
-    /// This corresponds to [`SSL_get_shutdown`].
-    ///
-    /// [`SSL_get_shutdown`]: https://www.openssl.org/docs/man1.1.1/man3/SSL_set_shutdown.html
+    #[corresponds(SSL_get_shutdown)]
     pub fn get_shutdown(&mut self) -> ShutdownState {
         unsafe {
             let bits = ffi::SSL_get_shutdown(self.ssl.as_ptr());
@@ -3788,10 +3343,7 @@ impl<S: Read + Write> SslStream<S> {
     ///
     /// This can be used to tell OpenSSL that the session should be cached even if a full two-way
     /// shutdown was not completed.
-    ///
-    /// This corresponds to [`SSL_set_shutdown`].
-    ///
-    /// [`SSL_set_shutdown`]: https://www.openssl.org/docs/man1.1.1/man3/SSL_set_shutdown.html
+    #[corresponds(SSL_set_shutdown)]
     pub fn set_shutdown(&mut self, state: ShutdownState) {
         unsafe { ffi::SSL_set_shutdown(self.ssl.as_ptr(), state.bits()) }
     }
-- 
GitLab