diff --git a/apps/cms.c b/apps/cms.c
index d15e203f9..9688770b4 100644
--- a/apps/cms.c
+++ b/apps/cms.c
@@ -104,7 +104,7 @@ typedef struct cms_key_param_st cms_key_param;
 struct cms_key_param_st
 	{
 	int idx;
-	STACK_OF(OPENSSL_STRING)*param;
+	STACK_OF(OPENSSL_STRING) *param;
 	cms_key_param *next;
 	};
 
diff --git a/crypto/x509/x509_lu.c b/crypto/x509/x509_lu.c
index 092e06c0b..2febcb614 100644
--- a/crypto/x509/x509_lu.c
+++ b/crypto/x509/x509_lu.c
@@ -727,7 +727,7 @@ void X509_STORE_set_verify_cb(X509_STORE *ctx,
 	}
 
 void X509_STORE_set_lookup_crls_cb(X509_STORE *ctx,
-		STACK_OF(X509_CRL)* (*cb)(X509_STORE_CTX *ctx, X509_NAME *nm))
+		STACK_OF(X509_CRL) *(*cb)(X509_STORE_CTX *ctx, X509_NAME *nm))
 	{
 	ctx->lookup_crls = cb;
 	}
diff --git a/crypto/x509/x509_vfy.h b/crypto/x509/x509_vfy.h
index e52b5e0aa..f1546c525 100644
--- a/crypto/x509/x509_vfy.h
+++ b/crypto/x509/x509_vfy.h
@@ -449,7 +449,7 @@ void X509_STORE_set_verify_cb(X509_STORE *ctx,
 				  int (*verify_cb)(int, X509_STORE_CTX *));
 
 void X509_STORE_set_lookup_crls_cb(X509_STORE *ctx,
-		STACK_OF(X509_CRL)* (*cb)(X509_STORE_CTX *ctx, X509_NAME *nm));
+		STACK_OF(X509_CRL) *(*cb)(X509_STORE_CTX *ctx, X509_NAME *nm));
 
 X509_STORE_CTX *X509_STORE_CTX_new(void);
 
diff --git a/crypto/x509v3/v3_utl.c b/crypto/x509v3/v3_utl.c
index c9a6e7983..01c07f483 100644
--- a/crypto/x509v3/v3_utl.c
+++ b/crypto/x509v3/v3_utl.c
@@ -1274,7 +1274,7 @@ static int ipv6_hex(unsigned char *out, const char *in, int inlen)
 	}
 
 
-int X509V3_NAME_from_section(X509_NAME *nm, STACK_OF(CONF_VALUE)*dn_sk,
+int X509V3_NAME_from_section(X509_NAME *nm, STACK_OF(CONF_VALUE) *dn_sk,
 						unsigned long chtype)
 	{
 	CONF_VALUE *v;
diff --git a/crypto/x509v3/x509v3.h b/crypto/x509v3/x509v3.h
index 655636627..1723bb37f 100644
--- a/crypto/x509v3/x509v3.h
+++ b/crypto/x509v3/x509v3.h
@@ -737,7 +737,7 @@ int X509_check_ip_asc(X509 *x, const char *ipasc, unsigned int flags);
 ASN1_OCTET_STRING *a2i_IPADDRESS(const char *ipasc);
 ASN1_OCTET_STRING *a2i_IPADDRESS_NC(const char *ipasc);
 int a2i_ipadd(unsigned char *ipout, const char *ipasc);
-int X509V3_NAME_from_section(X509_NAME *nm, STACK_OF(CONF_VALUE)*dn_sk,
+int X509V3_NAME_from_section(X509_NAME *nm, STACK_OF(CONF_VALUE) *dn_sk,
 						unsigned long chtype);
 
 void X509_POLICY_NODE_print(BIO *out, X509_POLICY_NODE *node, int indent);
diff --git a/ssl/s3_lib.c b/ssl/s3_lib.c
index 82fc5a848..f59cc39d5 100644
--- a/ssl/s3_lib.c
+++ b/ssl/s3_lib.c
@@ -3403,10 +3403,10 @@ long ssl3_ctrl(SSL *s, int cmd, long larg, void *parg)
 	case SSL_CTRL_CHAIN:
 		if (larg)
 			return ssl_cert_set1_chain(s->cert,
-						(STACK_OF (X509) *)parg);
+						(STACK_OF(X509) *)parg);
 		else
 			return ssl_cert_set0_chain(s->cert,
-						(STACK_OF (X509) *)parg);
+						(STACK_OF(X509) *)parg);
 
 	case SSL_CTRL_CHAIN_CERT:
 		if (larg)
@@ -3961,10 +3961,10 @@ long ssl3_ctx_ctrl(SSL_CTX *ctx, int cmd, long larg, void *parg)
 	case SSL_CTRL_CHAIN:
 		if (larg)
 			return ssl_cert_set1_chain(ctx->cert,
-						(STACK_OF (X509) *)parg);
+						(STACK_OF(X509) *)parg);
 		else
 			return ssl_cert_set0_chain(ctx->cert,
-						(STACK_OF (X509) *)parg);
+						(STACK_OF(X509) *)parg);
 
 	case SSL_CTRL_CHAIN_CERT:
 		if (larg)