openbsd/src/lib/libtls/man/tls_config_set_protocols.3, branch OPENBSD_7_9 A mirror of https://github.com/libressl/openbsd.git https://git.lua4.win/openbsd/atom?h=OPENBSD_7_9 2025-07-07T10:54:00+00:00 .Lb libtls libssl libcrypto 2025-07-07T10:54:00+00:00 schwarze 2025-07-07T10:54:00+00:00 urn:sha1:800b400429130c255973b130ac2376970630d5e9 OK tb@ and no objection from tedu@ Remove the ability to do tls 1.0 and 1.1 from libtls. 2023-07-02T06:37:27+00:00 beck 2023-07-02T06:37:27+00:00 urn:sha1:908a2337ae4c28163a92b9fda969dbdd36bc634b With this change any requests from configurations to request versions of tls before tls 1.2 will use tls 1.2. This prepares us to deprecate tls 1.0 and tls 1.1 support from libssl. ok tb@ Tweak previous: 2021-01-02T19:58:44+00:00 schwarze 2021-01-02T19:58:44+00:00 urn:sha1:c0a13098b65e31155a7ddfa3514859fcc685e498 * Do not abuse .Bl -tag for lists without bodies, use .Bl -item instead. * In tagged lists, put bodies into bodies, not into heads. * Add a few missing macros. * Drop some useless quoting. Make list of DHE parameters more prominent 2021-01-02T19:15:04+00:00 kn 2021-01-02T19:15:04+00:00 urn:sha1:1810ecb83b1849023a93ebdb181e2054f991f1b4 Follow the previous commit and complete the manual page for consistency; better readable and tags for free. OK tb Make the list of supported protocols more prominent 2020-12-30T13:38:13+00:00 kn 2020-12-30T13:38:13+00:00 urn:sha1:e510ae695c6796e2c5638d83018f97c4f02b460f Manuals like httpd.conf(5) refer to this for valid protocol strings, but elements inlined into sentences are hard find to spot. Use a list as already done elsewhere in this manual. OK jmc on earlier version Feeback OK tb Note in the man page that the default protocols list includes 1.3 2020-01-22T06:46:34+00:00 beck 2020-01-22T06:46:34+00:00 urn:sha1:70165c1ccc36585328dc1800b0b9d35a6e4ddd76 ok jsing@ Add support for TLSv1.3 as a protocol to libtls. 2020-01-20T08:39:21+00:00 jsing 2020-01-20T08:39:21+00:00 urn:sha1:4964c87c6ff167d81b09c143dff53c224a573ccb This makes tls_config_parse_protocols() recognise and handle "tlsv1.3". If TLSv1.3 is enabled libtls will also request libssl to enable it. ok beck@ tb@ Document tls_config_set_dheparams(). 2017-08-12T04:24:49+00:00 jsing 2017-08-12T04:24:49+00:00 urn:sha1:d6496b7dc2aed87d604df38e771589d401049bb4 new sentence, new line; 2017-08-11T10:33:31+00:00 jmc 2017-08-11T10:33:31+00:00 urn:sha1:e6b0fa6981ed471d488e3006530b34afa02e618e Add a tls_config_set_ecdhecurves() function to libtls, which allows the 2017-08-10T18:18:30+00:00 jsing 2017-08-10T18:18:30+00:00 urn:sha1:52c5bafe628bfaf1072a7e4cd721523f818d1bcf names of the elliptic curves that may be used during client and server key exchange to be specified. This deprecates tls_config_set_ecdhecurve(), which could only be used to specify a single supported curve. ok beck@